Re: Static PIE with musl and clang

[Paul Sturm <psturm@computervoice.com>]

[-- Attachment #1: Type: text/plain, Size: 5844 bytes --]

OK. I tried to compile this program: 

#include <stdio.h> 

int main() { 
printf("%p\n", main); 
return 0; 
} 

Command line: 
clang /usr/lib/rcrt1.o ../aslr.c -o aslr -fPIE -shared -Bsymbolic -Wl,--no-dynamic-linker 

./aslr seg faults when I run it. 

readelf -e aslr looks like this: 

ELF Header: 
Magic: 7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 
Class: ELF64 
Data: 2's complement, little endian 
Version: 1 (current) 
OS/ABI: UNIX - System V 
ABI Version: 0 
Type: DYN (Shared object file) 
Machine: Advanced Micro Devices X86-64 
Version: 0x1 
Entry point address: 0x788 
Start of program headers: 64 (bytes into file) 
Start of section headers: 6584 (bytes into file) 
Flags: 0x0 
Size of this header: 64 (bytes) 
Size of program headers: 56 (bytes) 
Number of program headers: 6 
Size of section headers: 64 (bytes) 
Number of section headers: 26 
Section header string table index: 23 

Section Headers: 
[Nr] Name Type Address Offset 
Size EntSize Flags Link Info Align 
[ 0] NULL 0000000000000000 00000000 
0000000000000000 0000000000000000 0 0 0 
[ 1] .hash HASH 0000000000000190 00000190 
0000000000000058 0000000000000004 A 2 0 8 
[ 2] .dynsym DYNSYM 00000000000001e8 000001e8 
0000000000000198 0000000000000018 A 3 1 8 
[ 3] .dynstr STRTAB 0000000000000380 00000380 
00000000000000de 0000000000000000 A 0 0 1 
[ 4] .rela.dyn RELA 0000000000000460 00000460 
00000000000000f0 0000000000000018 A 2 0 8 
[ 5] .rela.plt RELA 0000000000000550 00000550 
0000000000000048 0000000000000018 AI 2 19 8 
[ 6] .init PROGBITS 0000000000000598 00000598 
000000000000000d 0000000000000000 AX 0 0 1 
[ 7] .plt PROGBITS 00000000000005b0 000005b0 
0000000000000040 0000000000000010 AX 0 0 16 
[ 8] .plt.got PROGBITS 00000000000005f0 000005f0 
0000000000000018 0000000000000000 AX 0 0 8 
[ 9] .text PROGBITS 0000000000000610 00000610 
0000000000000497 0000000000000000 AX 0 0 16 
[10] .fini PROGBITS 0000000000000aa7 00000aa7 
0000000000000008 0000000000000000 AX 0 0 1 
[11] .rodata PROGBITS 0000000000000aaf 00000aaf 
0000000000000004 0000000000000001 AMS 0 0 1 
[12] .eh_frame_hdr PROGBITS 0000000000000ab4 00000ab4 
000000000000001c 0000000000000000 A 0 0 4 
[13] .eh_frame PROGBITS 0000000000000ad0 00000ad0 
0000000000000064 0000000000000000 A 0 0 8 
[14] .ctors PROGBITS 0000000000200e40 00000e40 
0000000000000010 0000000000000000 WA 0 0 8 
[15] .dtors PROGBITS 0000000000200e50 00000e50 
0000000000000010 0000000000000000 WA 0 0 8 
[16] .jcr PROGBITS 0000000000200e60 00000e60 
0000000000000008 0000000000000000 WA 0 0 8 
[17] .dynamic DYNAMIC 0000000000200e68 00000e68 
0000000000000150 0000000000000010 WA 3 0 8 
[18] .got PROGBITS 0000000000200fb8 00000fb8 
0000000000000048 0000000000000008 WA 0 0 8 
[19] .got.plt PROGBITS 0000000000201000 00001000 
0000000000000030 0000000000000008 WA 0 0 8 
[20] .data PROGBITS 0000000000201030 00001030 
0000000000000008 0000000000000000 WA 0 0 8 
[21] .bss NOBITS 0000000000201040 00001038 
0000000000000050 0000000000000000 WA 0 0 32 
[22] .comment PROGBITS 0000000000000000 00001038 
000000000000003c 0000000000000001 MS 0 0 1 
[23] .shstrtab STRTAB 0000000000000000 000018fb 
00000000000000b9 0000000000000000 0 0 1 
[24] .symtab SYMTAB 0000000000000000 00001078 
0000000000000648 0000000000000018 25 51 8 
[25] .strtab STRTAB 0000000000000000 000016c0 
000000000000023b 0000000000000000 0 0 1 
Key to Flags: 
W (write), A (alloc), X (execute), M (merge), S (strings), I (info), 
L (link order), O (extra OS processing required), G (group), T (TLS), 
C (compressed), x (unknown), o (OS specific), E (exclude), 
l (large), p (processor specific) 

Program Headers: 
Type Offset VirtAddr PhysAddr 
FileSiz MemSiz Flags Align 
LOAD 0x0000000000000000 0x0000000000000000 0x0000000000000000 
0x0000000000000b34 0x0000000000000b34 R E 200000 
LOAD 0x0000000000000e40 0x0000000000200e40 0x0000000000200e40 
0x00000000000001f8 0x0000000000000250 RW 200000 
DYNAMIC 0x0000000000000e68 0x0000000000200e68 0x0000000000200e68 
0x0000000000000150 0x0000000000000150 RW 8 
GNU_EH_FRAME 0x0000000000000ab4 0x0000000000000ab4 0x0000000000000ab4 
0x000000000000001c 0x000000000000001c R 4 
GNU_STACK 0x0000000000000000 0x0000000000000000 0x0000000000000000 
0x0000000000000000 0x0000000000000000 RW 10 
GNU_RELRO 0x0000000000000e40 0x0000000000200e40 0x0000000000200e40 
0x00000000000001c0 0x00000000000001c0 R 1 

Section to Segment mapping: 
Segment Sections... 
00 .hash .dynsym .dynstr .rela.dyn .rela.plt .init .plt .plt.got .text .fini .rodata .eh_frame_hdr .eh_frame 
01 .ctors .dtors .jcr .dynamic .got .got.plt .data .bss 
02 .dynamic 
03 .eh_frame_hdr 
04 
05 .ctors .dtors .jcr .dynamic .got 



From: "dalias" <dalias@libc.org> 
To: "musl" <musl@lists.openwall.com> 
Sent: Sunday, March 5, 2017 2:44:03 AM 
Subject: Re: [musl] Static PIE with musl and clang 

On Sat, Mar 04, 2017 at 07:47:31PM -0600, Paul Sturm wrote: 
> Has anyone managed to build static PIE with musl and clang, 
> preferably linking with lld? 
> 
> I see that this has been done using GCC and rcrt1.o, but I cannot 
> find a combination of command line parameters that will successfully 
> link and execute with clang. 
> 
> I am using clang 4.0.0RC2 and musl 1.1.16. I have also tried to use 
> binutils ld instead of llvm lld to no avail. 

I doubt lld can do it yet; you need some equivalent of the 
--no-dynamic-linker option I added to BFD ld. It should be possible 
with clang using binutils/BFD ld. You might also be able to hack it by 
using -shared -Bsymbolic and explicitly linking rcrt1.o on the link 
command line (essentially doing the same thing you'd do to make an 
executable shared library) but there are corner-case things that break 
when you try to do it this way. The right approach would be adding 
--no-dynamic-linker to lld and teaching clang to pass it when linking 
with -static -pie. 

Rich 

[-- Attachment #2: Type: text/html, Size: 6902 bytes --]