// Copyright 2020 The Mumble Developers. All rights reserved. // Use of this source code is governed by a BSD-style license // that can be found in the LICENSE file at the root of the // Mumble source tree or at . #include "ProcessLinux.h" #include ProcessLinux::ProcessLinux(const procid_t id, const std::string &name) : Process(id, name) { if (!m_ok) { return; } m_ok = false; const auto address = module(name); if (!address) { return; } // We can know the process architecture by looking at its ELF header. const auto elf = peekVector< int8_t >(address, 5); // The first 4 bytes constitute the magical number in ASCII: 0x7F 45 4c 46. if (!(elf[0] == 0x7f && elf[1] == 'E' && elf[2] == 'L' && elf[3] == 'F')) { return; } // The fifth byte is 1 in case the process is 32 bit or 2 in case it's 64 bit. m_pointerSize = elf[4] == 1 ? 4 : 8; m_ok = true; } ProcessLinux::~ProcessLinux() { } template< typename Elf_Ehdr, typename Elf_Phdr, typename Elf_Dyn, typename Elf_Sym > static procptr_t exportedSymbol(const Process &proc, const std::string &symbol, const procptr_t module) { procptr_t hashTable = 0; procptr_t strTable = 0; procptr_t symTable = 0; const auto ehdr = proc.peek< Elf_Ehdr >(module); const auto phdrs = proc.peekVector< Elf_Phdr >(module + ehdr.e_phoff, ehdr.e_phnum); for (const auto &phdr : phdrs) { if (phdr.p_type == PT_DYNAMIC) { const auto dyns = proc.peekVector< Elf_Dyn >(module + phdr.p_vaddr, phdr.p_memsz / sizeof(Elf_Dyn)); for (const auto &dyn : dyns) { switch (dyn.d_tag) { case DT_HASH: hashTable = dyn.d_un.d_ptr; break; case DT_STRTAB: strTable = dyn.d_un.d_ptr; break; case DT_SYMTAB: symTable = dyn.d_un.d_ptr; break; } if (hashTable && strTable && symTable) { break; } } break; } } // Hash table pseudo-struct: // uint32_t nBucket; // uint32_t nChain; // uint32_t bucket[nBucket]; // uint32_t chain[nChain]; const auto nChain = proc.peek< uint32_t >(hashTable + sizeof(uint32_t)); for (uint32_t i = 0; i < nChain; ++i) { const auto sym = proc.peek< Elf_Sym >(symTable + sizeof(Elf_Sym) * i); const auto name = proc.peekString(strTable + sym.st_name, symbol.size()); if (name == symbol) { return module + sym.st_value; } } return 0; } procptr_t ProcessLinux::exportedSymbol(const std::string &symbol, const procptr_t module) const { if (m_pointerSize > 4) { return ::exportedSymbol< Elf64_Ehdr, Elf64_Phdr, Elf64_Dyn, Elf64_Sym >(*this, symbol, module); } else { return ::exportedSymbol< Elf32_Ehdr, Elf32_Phdr, Elf32_Dyn, Elf32_Sym >(*this, symbol, module); } }