10Sstevel@tonic-gate /* 20Sstevel@tonic-gate * CDDL HEADER START 30Sstevel@tonic-gate * 40Sstevel@tonic-gate * The contents of this file are subject to the terms of the 52712Snn35248 * Common Development and Distribution License (the "License"). 62712Snn35248 * You may not use this file except in compliance with the License. 70Sstevel@tonic-gate * 80Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 90Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 100Sstevel@tonic-gate * See the License for the specific language governing permissions 110Sstevel@tonic-gate * and limitations under the License. 120Sstevel@tonic-gate * 130Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 140Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 150Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 160Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 170Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 180Sstevel@tonic-gate * 190Sstevel@tonic-gate * CDDL HEADER END 200Sstevel@tonic-gate */ 210Sstevel@tonic-gate /* 22*11736SDonghai.Qiao@Sun.COM * Copyright 2010 Sun Microsystems, Inc. All rights reserved. 230Sstevel@tonic-gate * Use is subject to license terms. 240Sstevel@tonic-gate */ 250Sstevel@tonic-gate 260Sstevel@tonic-gate /* 270Sstevel@tonic-gate * Launch Java executables via exec(2). 280Sstevel@tonic-gate * 290Sstevel@tonic-gate * Java executables are platform-independent executable files 300Sstevel@tonic-gate * based on the JAR file format. Executable JAR files contain a 310Sstevel@tonic-gate * special 'extra field' header in the first file of the archive 320Sstevel@tonic-gate * that marks the file as a true executable. The data in that field 330Sstevel@tonic-gate * is used to pass additional run-time information to the Java VM. 340Sstevel@tonic-gate * 350Sstevel@tonic-gate * This handler looks for the appropriate magic number on the 360Sstevel@tonic-gate * front of the file, checks that the JAR file is executable, then 370Sstevel@tonic-gate * invokes the Java runtime environment to do the rest of the work. 380Sstevel@tonic-gate */ 390Sstevel@tonic-gate 400Sstevel@tonic-gate #include <sys/types.h> 410Sstevel@tonic-gate #include <sys/proc.h> 420Sstevel@tonic-gate #include <sys/vnode.h> 430Sstevel@tonic-gate #include <sys/exec.h> 440Sstevel@tonic-gate #include <sys/modctl.h> 450Sstevel@tonic-gate #include <sys/cmn_err.h> 460Sstevel@tonic-gate #include <sys/pathname.h> 470Sstevel@tonic-gate 480Sstevel@tonic-gate /* 490Sstevel@tonic-gate * These variables can be tweaked via /etc/system to allow prototyping 500Sstevel@tonic-gate * and debugging. See PSARC/1997/123. 510Sstevel@tonic-gate * 520Sstevel@tonic-gate * Modified by PSARC/1999/012 to be Contract Private between Solaris and 530Sstevel@tonic-gate * the Java Technology Group. It is expected that any future change to 540Sstevel@tonic-gate * these variables be coordinated between the consolidations. 550Sstevel@tonic-gate */ 560Sstevel@tonic-gate #if defined(__sparc) 570Sstevel@tonic-gate char *jexec = "/usr/java/jre/lib/sparc/jexec"; 580Sstevel@tonic-gate #elif defined(__i386) || defined(__i386_COMPAT) 590Sstevel@tonic-gate char *jexec = "/usr/java/jre/lib/i386/jexec"; 600Sstevel@tonic-gate #else 610Sstevel@tonic-gate #error "Unknown ISA" 620Sstevel@tonic-gate #endif 630Sstevel@tonic-gate char *jexec_arg = "-jar"; 640Sstevel@tonic-gate 650Sstevel@tonic-gate /* 660Sstevel@tonic-gate * ZIP/JAR file header information 670Sstevel@tonic-gate */ 680Sstevel@tonic-gate #define SIGSIZ 4 690Sstevel@tonic-gate #define LOCSIG "PK\003\004" 700Sstevel@tonic-gate #define LOCHDRSIZ 30 710Sstevel@tonic-gate 720Sstevel@tonic-gate #define CH(b, n) (((unsigned char *)(b))[n]) 730Sstevel@tonic-gate #define SH(b, n) (CH(b, n) | (CH(b, n+1) << 8)) 740Sstevel@tonic-gate #define LG(b, n) (SH(b, n) | (SH(b, n+2) << 16)) 750Sstevel@tonic-gate 760Sstevel@tonic-gate #define LOCNAM(b) (SH(b, 26)) /* filename size */ 770Sstevel@tonic-gate #define LOCEXT(b) (SH(b, 28)) /* extra field size */ 780Sstevel@tonic-gate 790Sstevel@tonic-gate #define XFHSIZ 4 /* header id, data size */ 800Sstevel@tonic-gate #define XFHID(b) (SH(b, 0)) /* extract field header id */ 810Sstevel@tonic-gate #define XFDATASIZ(b) (SH(b, 2)) /* extract field data size */ 820Sstevel@tonic-gate #define XFJAVASIG 0xcafe /* java executables */ 830Sstevel@tonic-gate 840Sstevel@tonic-gate /*ARGSUSED3*/ 850Sstevel@tonic-gate static int 860Sstevel@tonic-gate javaexec(vnode_t *vp, struct execa *uap, struct uarg *args, 870Sstevel@tonic-gate struct intpdata *idatap, int level, long *execsz, int setid, 882712Snn35248 caddr_t execfile, cred_t *cred, int brand_action) 890Sstevel@tonic-gate { 900Sstevel@tonic-gate struct intpdata idata; 910Sstevel@tonic-gate int error; 920Sstevel@tonic-gate ssize_t resid; 930Sstevel@tonic-gate vnode_t *nvp; 940Sstevel@tonic-gate off_t xoff, xoff_end; 950Sstevel@tonic-gate char lochdr[LOCHDRSIZ]; 960Sstevel@tonic-gate struct pathname lookpn; 970Sstevel@tonic-gate struct pathname resolvepn; 980Sstevel@tonic-gate char *opath; 990Sstevel@tonic-gate 1000Sstevel@tonic-gate if (level) 1010Sstevel@tonic-gate return (ENOEXEC); /* no recursion */ 1020Sstevel@tonic-gate 1030Sstevel@tonic-gate /* 1040Sstevel@tonic-gate * Read in the full local file header, and validate 1050Sstevel@tonic-gate * the initial signature. 1060Sstevel@tonic-gate */ 1070Sstevel@tonic-gate if ((error = vn_rdwr(UIO_READ, vp, lochdr, sizeof (lochdr), 1080Sstevel@tonic-gate 0, UIO_SYSSPACE, 0, (rlim64_t)0, cred, &resid)) != 0) 1090Sstevel@tonic-gate return (error); 1100Sstevel@tonic-gate if (resid != 0 || strncmp(lochdr, LOCSIG, SIGSIZ) != 0) 1110Sstevel@tonic-gate return (ENOEXEC); 1120Sstevel@tonic-gate 1130Sstevel@tonic-gate /* 1140Sstevel@tonic-gate * Ok, so this -is- a ZIP file, and might even be a JAR file. 1150Sstevel@tonic-gate * Is it a Java executable? 1160Sstevel@tonic-gate */ 1170Sstevel@tonic-gate xoff = sizeof (lochdr) + LOCNAM(lochdr); 1180Sstevel@tonic-gate xoff_end = xoff + LOCEXT(lochdr); 1190Sstevel@tonic-gate 1200Sstevel@tonic-gate while (xoff < xoff_end) { 1210Sstevel@tonic-gate char xfhdr[XFHSIZ]; 1220Sstevel@tonic-gate 1230Sstevel@tonic-gate if ((error = vn_rdwr(UIO_READ, vp, xfhdr, sizeof (xfhdr), 1240Sstevel@tonic-gate xoff, UIO_SYSSPACE, 0, (rlim64_t)0, cred, &resid)) != 0) 1250Sstevel@tonic-gate return (error); 1260Sstevel@tonic-gate if (resid != 0) 1270Sstevel@tonic-gate return (ENOEXEC); 1280Sstevel@tonic-gate if (XFHID(xfhdr) == XFJAVASIG) 1290Sstevel@tonic-gate break; 1300Sstevel@tonic-gate xoff += sizeof (xfhdr) + XFDATASIZ(xfhdr); 1310Sstevel@tonic-gate } 1320Sstevel@tonic-gate 1330Sstevel@tonic-gate if (xoff >= xoff_end) 1340Sstevel@tonic-gate return (ENOEXEC); 1350Sstevel@tonic-gate 1360Sstevel@tonic-gate /* 1370Sstevel@tonic-gate * Note: If we ever make setid execution work, we need to ensure 1380Sstevel@tonic-gate * that we use /dev/fd to avoid the classic setuid shell script 1390Sstevel@tonic-gate * security hole. 1400Sstevel@tonic-gate */ 1410Sstevel@tonic-gate if (setid) 1420Sstevel@tonic-gate return (EACCES); 1430Sstevel@tonic-gate 1440Sstevel@tonic-gate /* 1450Sstevel@tonic-gate * Find and invoke the Java runtime environment on the file 1460Sstevel@tonic-gate */ 1470Sstevel@tonic-gate idata.intp = NULL; 1480Sstevel@tonic-gate idata.intp_name = jexec; 1490Sstevel@tonic-gate idata.intp_arg = jexec_arg; 1500Sstevel@tonic-gate if (error = pn_get(idata.intp_name, UIO_SYSSPACE, &lookpn)) 1510Sstevel@tonic-gate return (error); 1520Sstevel@tonic-gate pn_alloc(&resolvepn); 1530Sstevel@tonic-gate if (error = lookuppn(&lookpn, &resolvepn, FOLLOW, NULLVPP, &nvp)) { 1540Sstevel@tonic-gate pn_free(&resolvepn); 1550Sstevel@tonic-gate pn_free(&lookpn); 1560Sstevel@tonic-gate return (ENOEXEC); 1570Sstevel@tonic-gate } 1580Sstevel@tonic-gate opath = args->pathname; 1590Sstevel@tonic-gate args->pathname = resolvepn.pn_path; 1600Sstevel@tonic-gate /* don't free resolvepn until we are done with args */ 1610Sstevel@tonic-gate pn_free(&lookpn); 1622712Snn35248 error = gexec(&nvp, uap, args, &idata, level + 1, execsz, execfile, 1632712Snn35248 cred, EBA_NONE); 164*11736SDonghai.Qiao@Sun.COM 165*11736SDonghai.Qiao@Sun.COM if (!error) { 166*11736SDonghai.Qiao@Sun.COM /* 167*11736SDonghai.Qiao@Sun.COM * Close this Java executable as the interpreter 168*11736SDonghai.Qiao@Sun.COM * will open and close it later on. 169*11736SDonghai.Qiao@Sun.COM */ 170*11736SDonghai.Qiao@Sun.COM (void) VOP_CLOSE(vp, FREAD, 1, (offset_t)0, cred, NULL); 171*11736SDonghai.Qiao@Sun.COM } 172*11736SDonghai.Qiao@Sun.COM 1730Sstevel@tonic-gate VN_RELE(nvp); 1740Sstevel@tonic-gate args->pathname = opath; 1750Sstevel@tonic-gate pn_free(&resolvepn); 1760Sstevel@tonic-gate return (error); 1770Sstevel@tonic-gate } 1780Sstevel@tonic-gate 1790Sstevel@tonic-gate static struct execsw jexecsw = { 1800Sstevel@tonic-gate javamagicstr, 1810Sstevel@tonic-gate 0, 1820Sstevel@tonic-gate 4, 1830Sstevel@tonic-gate javaexec, 1840Sstevel@tonic-gate NULL 1850Sstevel@tonic-gate }; 1860Sstevel@tonic-gate 1870Sstevel@tonic-gate static struct modlexec jmodlexec = { 1880Sstevel@tonic-gate &mod_execops, "exec for Java", &jexecsw 1890Sstevel@tonic-gate }; 1900Sstevel@tonic-gate 1910Sstevel@tonic-gate static struct modlinkage jmodlinkage = { 1920Sstevel@tonic-gate MODREV_1, &jmodlexec, NULL 1930Sstevel@tonic-gate }; 1940Sstevel@tonic-gate 1950Sstevel@tonic-gate int 1960Sstevel@tonic-gate _init(void) 1970Sstevel@tonic-gate { 1980Sstevel@tonic-gate return (mod_install(&jmodlinkage)); 1990Sstevel@tonic-gate } 2000Sstevel@tonic-gate 2010Sstevel@tonic-gate int 2020Sstevel@tonic-gate _fini(void) 2030Sstevel@tonic-gate { 2040Sstevel@tonic-gate return (mod_remove(&jmodlinkage)); 2050Sstevel@tonic-gate } 2060Sstevel@tonic-gate 2070Sstevel@tonic-gate int 2080Sstevel@tonic-gate _info(struct modinfo *modinfop) 2090Sstevel@tonic-gate { 2100Sstevel@tonic-gate return (mod_info(&jmodlinkage, modinfop)); 2110Sstevel@tonic-gate } 212