OLD | NEW |
| (Empty) |
1 /* Copyright (c) 2011 The Chromium Authors. All rights reserved. | |
2 * Use of this source code is governed by a BSD-style license that can be | |
3 * found in the LICENSE file. | |
4 * | |
5 * This is a custom linker script used to build nacl_helper_bootstrap. | |
6 * It has a very special layout. This script will only work with input | |
7 * that is kept extremely minimal. If there are unexpected input sections | |
8 * not named here, the result will not be correct. | |
9 * | |
10 * We need to use a standalone loader program rather than just using a | |
11 * dynamically-linked program here because its entire address space will be | |
12 * taken over for the NaCl untrusted address space. A normal program would | |
13 * cause dynamic linker data structures to point to its .dynamic section, | |
14 * which is no longer available after startup. | |
15 * | |
16 * We need this special layout (and the nacl_helper_bootstrap_munge_phdr | |
17 * step) because simply having bss space large enough to reserve the | |
18 * address space would cause the kernel loader to think we're using that | |
19 * much anonymous memory and refuse to execute the program on a machine | |
20 * with not much memory available. | |
21 */ | |
22 | |
23 /* | |
24 * Set the entry point to the symbol called _start, which we define in assembly. | |
25 */ | |
26 ENTRY(_start) | |
27 | |
28 /* | |
29 * This is the address where the program text starts. | |
30 * We set this as low as we think we can get away with. | |
31 * The common settings for sysctl vm.mmap_min_addr range from 4k to 64k. | |
32 */ | |
33 TEXT_START = 0x10000; | |
34 | |
35 /* | |
36 * This is the top of the range we are trying to reserve, which is 1G | |
37 * for x86-32 and ARM. For an x86-64 zero-based sandbox, this really | |
38 * needs to be 36G. | |
39 */ | |
40 RESERVE_TOP = 1 << 30; | |
41 | |
42 /* | |
43 * We specify the program headers we want explicitly, to get the layout | |
44 * exactly right and to give the "reserve" segment p_flags of zero, so | |
45 * that it gets mapped as PROT_NONE. | |
46 */ | |
47 PHDRS { | |
48 text PT_LOAD FILEHDR PHDRS; | |
49 reserve PT_LOAD FLAGS(0); | |
50 stack PT_GNU_STACK FLAGS(6); /* RW, no E */ | |
51 } | |
52 | |
53 /* | |
54 * Now we lay out the sections across those segments. | |
55 */ | |
56 SECTIONS { | |
57 /* | |
58 * Here is the program itself. | |
59 */ | |
60 .text TEXT_START + SIZEOF_HEADERS : { | |
61 *(.note.gnu.build-id) | |
62 *(.text*) | |
63 *(.rodata*) | |
64 *(.eh_frame*) | |
65 } :text | |
66 etext = .; | |
67 | |
68 /* | |
69 * Now we move up to the next p_align increment, and place the dummy | |
70 * segment there. The linker emits this segment with the p_vaddr and | |
71 * p_memsz we want, which reserves the address space. But the linker | |
72 * gives it a p_filesz of zero. We have to edit the phdr after link | |
73 * time to give it a p_filesz matching its p_memsz. That way, the | |
74 * kernel doesn't think we are preallocating a huge amount of memory. | |
75 * It just maps it from the file, i.e. way off the end of the file, | |
76 * which is perfect for reserving the address space. | |
77 */ | |
78 . = ALIGN(CONSTANT(COMMONPAGESIZE)); | |
79 RESERVE_START = .; | |
80 .reserve : { | |
81 . = RESERVE_TOP - RESERVE_START; | |
82 } :reserve | |
83 | |
84 /* | |
85 * These are empty input sections the linker generates. | |
86 * If we don't discard them, they pollute the flags in the output segment. | |
87 */ | |
88 /DISCARD/ : { | |
89 *(.iplt) | |
90 *(.rel*) | |
91 *(.igot.plt) | |
92 } | |
93 } | |
OLD | NEW |