Loading...
1#!/usr/bin/perl -w
2#
3use strict;
4use Math::BigInt;
5use Fcntl "SEEK_SET";
6
7die "Format: $0 [-s <systemmap-file>] <vmlinux-file> <keyring-file>\n"
8 if ($#ARGV != 1 && $#ARGV != 3 ||
9 $#ARGV == 3 && $ARGV[0] ne "-s");
10
11my $sysmap = "";
12if ($#ARGV == 3) {
13 shift;
14 $sysmap = $ARGV[0];
15 shift;
16}
17
18my $vmlinux = $ARGV[0];
19my $keyring = $ARGV[1];
20
21#
22# Parse the vmlinux section table
23#
24open FD, "objdump -h $vmlinux |" || die $vmlinux;
25my @lines = <FD>;
26close(FD) || die $vmlinux;
27
28my @sections = ();
29
30foreach my $line (@lines) {
31 chomp($line);
32 if ($line =~ /\s*([0-9]+)\s+(\S+)\s+([0-9a-f]+)\s+([0-9a-f]+)\s+([0-9a-f]+)\s+([0-9a-f]+)\s+2[*][*]([0-9]+)/
33 ) {
34 my $seg = $1;
35 my $name = $2;
36 my $len = Math::BigInt->new("0x" . $3);
37 my $vma = Math::BigInt->new("0x" . $4);
38 my $lma = Math::BigInt->new("0x" . $5);
39 my $foff = Math::BigInt->new("0x" . $6);
40 my $align = 2 ** $7;
41
42 push @sections, { name => $name,
43 vma => $vma,
44 len => $len,
45 foff => $foff };
46 }
47}
48
49print "Have $#sections sections\n";
50
51#
52# Try and parse the vmlinux symbol table. If the vmlinux file has been created
53# from a vmlinuz file with extract-vmlinux then the symbol table will be empty.
54#
55open FD, "nm $vmlinux 2>/dev/null |" || die $vmlinux;
56@lines = <FD>;
57close(FD) || die $vmlinux;
58
59my %symbols = ();
60my $nr_symbols = 0;
61
62sub parse_symbols(@) {
63 foreach my $line (@_) {
64 chomp($line);
65 if ($line =~ /([0-9a-f]+)\s([a-zA-Z])\s(\S+)/
66 ) {
67 my $addr = "0x" . $1;
68 my $type = $2;
69 my $name = $3;
70
71 $symbols{$name} = $addr;
72 $nr_symbols++;
73 }
74 }
75}
76parse_symbols(@lines);
77
78if ($nr_symbols == 0 && $sysmap ne "") {
79 print "No symbols in vmlinux, trying $sysmap\n";
80
81 open FD, "<$sysmap" || die $sysmap;
82 @lines = <FD>;
83 close(FD) || die $sysmap;
84 parse_symbols(@lines);
85}
86
87die "No symbols available\n"
88 if ($nr_symbols == 0);
89
90print "Have $nr_symbols symbols\n";
91
92die "Can't find system certificate list"
93 unless (exists($symbols{"__cert_list_start"}) &&
94 exists($symbols{"system_certificate_list_size"}));
95
96my $start = Math::BigInt->new($symbols{"__cert_list_start"});
97my $end;
98my $size;
99my $size_sym = Math::BigInt->new($symbols{"system_certificate_list_size"});
100
101open FD, "<$vmlinux" || die $vmlinux;
102binmode(FD);
103
104my $s = undef;
105foreach my $sec (@sections) {
106 my $s_name = $sec->{name};
107 my $s_vma = $sec->{vma};
108 my $s_len = $sec->{len};
109 my $s_foff = $sec->{foff};
110 my $s_vend = $s_vma + $s_len;
111
112 next unless ($start >= $s_vma);
113 next if ($start >= $s_vend);
114
115 die "Certificate list size was not found on the same section\n"
116 if ($size_sym < $s_vma || $size_sym > $s_vend);
117
118 die "Cert object in multiple sections: ", $s_name, " and ", $s->{name}, "\n"
119 if ($s);
120
121 my $size_off = $size_sym -$s_vma + $s_foff;
122 my $packed;
123 die $vmlinux if (!defined(sysseek(FD, $size_off, SEEK_SET)));
124 sysread(FD, $packed, 8);
125 $size = unpack 'L!', $packed;
126 $end = $start + $size;
127
128 printf "Have %u bytes of certs at VMA 0x%x\n", $size, $start;
129
130 die "Cert object partially overflows section $s_name\n"
131 if ($end > $s_vend);
132
133 $s = $sec;
134}
135
136die "Cert object not inside a section\n"
137 unless ($s);
138
139print "Certificate list in section ", $s->{name}, "\n";
140
141my $foff = $start - $s->{vma} + $s->{foff};
142
143printf "Certificate list at file offset 0x%x\n", $foff;
144
145die $vmlinux if (!defined(sysseek(FD, $foff, SEEK_SET)));
146my $buf = "";
147my $len = sysread(FD, $buf, $size);
148die "$vmlinux" if (!defined($len));
149die "Short read on $vmlinux\n" if ($len != $size);
150close(FD) || die $vmlinux;
151
152open FD, ">$keyring" || die $keyring;
153binmode(FD);
154$len = syswrite(FD, $buf, $size);
155die "$keyring" if (!defined($len));
156die "Short write on $keyring\n" if ($len != $size);
157close(FD) || die $keyring;
1#!/usr/bin/env perl
2# SPDX-License-Identifier: GPL-2.0
3#
4use warnings;
5use strict;
6use Math::BigInt;
7use Fcntl "SEEK_SET";
8
9die "Format: $0 [-s <systemmap-file>] <vmlinux-file> <keyring-file>\n"
10 if ($#ARGV != 1 && $#ARGV != 3 ||
11 $#ARGV == 3 && $ARGV[0] ne "-s");
12
13my $sysmap = "";
14if ($#ARGV == 3) {
15 shift;
16 $sysmap = $ARGV[0];
17 shift;
18}
19
20my $vmlinux = $ARGV[0];
21my $keyring = $ARGV[1];
22
23#
24# Parse the vmlinux section table
25#
26open FD, "objdump -h $vmlinux |" || die $vmlinux;
27my @lines = <FD>;
28close(FD) || die $vmlinux;
29
30my @sections = ();
31
32foreach my $line (@lines) {
33 chomp($line);
34 if ($line =~ /\s*([0-9]+)\s+(\S+)\s+([0-9a-f]+)\s+([0-9a-f]+)\s+([0-9a-f]+)\s+([0-9a-f]+)\s+2[*][*]([0-9]+)/
35 ) {
36 my $seg = $1;
37 my $name = $2;
38 my $len = Math::BigInt->new("0x" . $3);
39 my $vma = Math::BigInt->new("0x" . $4);
40 my $lma = Math::BigInt->new("0x" . $5);
41 my $foff = Math::BigInt->new("0x" . $6);
42 my $align = 2 ** $7;
43
44 push @sections, { name => $name,
45 vma => $vma,
46 len => $len,
47 foff => $foff };
48 }
49}
50
51print "Have $#sections sections\n";
52
53#
54# Try and parse the vmlinux symbol table. If the vmlinux file has been created
55# from a vmlinuz file with extract-vmlinux then the symbol table will be empty.
56#
57open FD, "nm $vmlinux 2>/dev/null |" || die $vmlinux;
58@lines = <FD>;
59close(FD) || die $vmlinux;
60
61my %symbols = ();
62my $nr_symbols = 0;
63
64sub parse_symbols(@) {
65 foreach my $line (@_) {
66 chomp($line);
67 if ($line =~ /([0-9a-f]+)\s([a-zA-Z])\s(\S+)/
68 ) {
69 my $addr = "0x" . $1;
70 my $type = $2;
71 my $name = $3;
72
73 $symbols{$name} = $addr;
74 $nr_symbols++;
75 }
76 }
77}
78parse_symbols(@lines);
79
80if ($nr_symbols == 0 && $sysmap ne "") {
81 print "No symbols in vmlinux, trying $sysmap\n";
82
83 open FD, "<$sysmap" || die $sysmap;
84 @lines = <FD>;
85 close(FD) || die $sysmap;
86 parse_symbols(@lines);
87}
88
89die "No symbols available\n"
90 if ($nr_symbols == 0);
91
92print "Have $nr_symbols symbols\n";
93
94die "Can't find system certificate list"
95 unless (exists($symbols{"__cert_list_start"}) &&
96 exists($symbols{"system_certificate_list_size"}));
97
98my $start = Math::BigInt->new($symbols{"__cert_list_start"});
99my $end;
100my $size;
101my $size_sym = Math::BigInt->new($symbols{"system_certificate_list_size"});
102
103open FD, "<$vmlinux" || die $vmlinux;
104binmode(FD);
105
106my $s = undef;
107foreach my $sec (@sections) {
108 my $s_name = $sec->{name};
109 my $s_vma = $sec->{vma};
110 my $s_len = $sec->{len};
111 my $s_foff = $sec->{foff};
112 my $s_vend = $s_vma + $s_len;
113
114 next unless ($start >= $s_vma);
115 next if ($start >= $s_vend);
116
117 die "Certificate list size was not found on the same section\n"
118 if ($size_sym < $s_vma || $size_sym > $s_vend);
119
120 die "Cert object in multiple sections: ", $s_name, " and ", $s->{name}, "\n"
121 if ($s);
122
123 my $size_off = $size_sym -$s_vma + $s_foff;
124 my $packed;
125 die $vmlinux if (!defined(sysseek(FD, $size_off, SEEK_SET)));
126 sysread(FD, $packed, 8);
127 $size = unpack 'L!', $packed;
128 $end = $start + $size;
129
130 printf "Have %u bytes of certs at VMA 0x%x\n", $size, $start;
131
132 die "Cert object partially overflows section $s_name\n"
133 if ($end > $s_vend);
134
135 $s = $sec;
136}
137
138die "Cert object not inside a section\n"
139 unless ($s);
140
141print "Certificate list in section ", $s->{name}, "\n";
142
143my $foff = $start - $s->{vma} + $s->{foff};
144
145printf "Certificate list at file offset 0x%x\n", $foff;
146
147die $vmlinux if (!defined(sysseek(FD, $foff, SEEK_SET)));
148my $buf = "";
149my $len = sysread(FD, $buf, $size);
150die "$vmlinux" if (!defined($len));
151die "Short read on $vmlinux\n" if ($len != $size);
152close(FD) || die $vmlinux;
153
154open FD, ">$keyring" || die $keyring;
155binmode(FD);
156$len = syswrite(FD, $buf, $size);
157die "$keyring" if (!defined($len));
158die "Short write on $keyring\n" if ($len != $size);
159close(FD) || die $keyring;