| #!/usr/bin/env python3 | |
| # | |
| # //===----------------------------------------------------------------------===// | |
| # // | |
| # // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. | |
| # // See https://llvm.org/LICENSE.txt for license information. | |
| # // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception | |
| # // | |
| # //===----------------------------------------------------------------------===// | |
| # | |
| import argparse | |
| import os | |
| import re | |
| import sys | |
| from libomputils import ScriptError, error, print_error_line, execute_command | |
| def is_stack_executable_readelf(library): | |
| """Returns true if stack of library file is executable""" | |
| r = execute_command(["readelf", "-l", "-W", library]) | |
| if r.returncode != 0: | |
| error("{} failed".format(r.command)) | |
| stack_lines = [] | |
| for line in r.stdout.split(os.linesep): | |
| if re.search("STACK", line): | |
| stack_lines.append(line.strip()) | |
| if not stack_lines: | |
| error("{}: Not stack segment found".format(library)) | |
| if len(stack_lines) > 1: | |
| error("{}: More than one stack segment found".format(library)) | |
| h = r"0x[0-9a-fA-F]+" | |
| m = re.search( | |
| r"((GNU_)?STACK)\s+({0})\s+({0})\s+({0})\s+({0})\s+({0})" | |
| " ([R ][W ][E ])".format(h), | |
| stack_lines[0], | |
| ) | |
| if not m: | |
| error("{}: Cannot parse stack segment line".format(library)) | |
| if m: | |
| flags = m.group(8) | |
| if "E" in flags: | |
| return True | |
| return False | |
| def main(): | |
| parser = argparse.ArgumentParser( | |
| description="Check library does not have" " executable stack" | |
| ) | |
| parser.add_argument("library", help="The library file to check") | |
| commandArgs = parser.parse_args() | |
| if is_stack_executable_readelf(commandArgs.library): | |
| error("{}: Stack is executable".format(commandArgs.library)) | |
| if __name__ == "__main__": | |
| try: | |
| main() | |
| except ScriptError as e: | |
| print_error_line(str(e)) | |
| sys.exit(1) | |
| # end of file |