diff options
author | Yangyu Chen <cyy@cyyself.name> | 2025-02-25 01:12:19 +0800 |
---|---|---|
committer | Andreas Schwab <schwab@suse.de> | 2025-02-25 13:08:53 +0100 |
commit | 3fd2ff7685e3ee85c8cd2896f28ad62f67d7c483 (patch) | |
tree | 6cf27dacf22c3c32c2c2a04e35843ab492d4d462 /sysdeps/unix | |
parent | 935563754bb5e1f16b9edb392d6c80c6827ddfca (diff) | |
download | glibc-3fd2ff7685e3ee85c8cd2896f28ad62f67d7c483.zip glibc-3fd2ff7685e3ee85c8cd2896f28ad62f67d7c483.tar.gz glibc-3fd2ff7685e3ee85c8cd2896f28ad62f67d7c483.tar.bz2 |
RISC-V: Fix IFUNC resolver cannot access gp pointer
In some cases, an IFUNC resolver may need to access the gp pointer to
access global variables. Such an object may have l_relocated == 0 at
this time. In this case, an IFUNC resolver will fail to access a global
variable and cause a SIGSEGV.
This patch fixes this issue by relaxing the check of l_relocated in
elf_machine_runtime_setup, but added a check for SHARED case to avoid
using this code in static-linked executables. Such object have already
set up the gp pointer in load_gp function and l->l_scope will be NULL if
it is a pie object. So if we use these code to set up the gp pointer
again for static-pie, it will causing a SIGSEGV in glibc as original bug
on BZ #31317.
I have also reproduced and checked BZ #31317 using the mold commit
bed5b1731b ("illumos: Treat absolute symbols specially"), this patch can
fix the issue.
Also, we used the wrong gp pointer previously because ref->st_value is
not the relocated address but just the offset from the base address of
ELF. An edge case may happen if we reference gp pointer in a IFUNC
resolver in a PIE object, but it will not happen in compiler-generated
codes since -pie will disable relax to gp. In this case, the GP will be
initialized incorrectly since the ref->st_value is not the address after
relocation. This patch fixes this issue by adding the l->l_addr to
ref->st_value to get the relocated address for the gp pointer. We don't
use SYMBOL_ADDRESS macro here because __global_pointer$ is a special
symbol that has SHN_ABS type, but it will use PC-relative addressing in
the load_gp function using lla.
Closes: BZ #32269
Fixes: 96d1b9ac23 ("RISC-V: Fix the static-PIE non-relocated object check")
Co-authored-by: Vivian Wang <dramforever@live.com>
Signed-off-by: Yangyu Chen <cyy@cyyself.name>
Diffstat (limited to 'sysdeps/unix')
0 files changed, 0 insertions, 0 deletions