/* Run an ELF binary on a linux system.

   Copyright (C) 1993, Eric Youngdale.

   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; either version 2, or (at your option)
   any later version.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.

   You should have received a copy of the GNU General Public License
   along with this program; if not, write to the Free Software
   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.  */



/* Program to load an ELF binary on a linux system, and run it.
 * References to symbols in sharable libraries can be resolved by
 * an ELF sharable library. */

/* Disclaimer:  I have never seen any AT&T source code for SVr4, nor have
   I ever taken any courses on internals.  This program was developed using
   information available through the book "UNIX SYSTEM V RELEASE 4,
   Programmers guide: Ansi C and Programming Support Tools", which did
   a more than adequate job of explaining everything required to get this
   working. */

/*
 * The main trick with this program is that initially, we ourselves are not
 * dynamicly linked.  This means that we cannot access any global variables
 * since the GOT is initialized by the linker assuming a virtual address of 0,
 * and we cannot call any functions since the PLT is not initialized at all
 * (it will tend to want to call the dynamic linker
 *
 * There are further restrictions - we cannot use large switch statements,
 * since the compiler generates tables of addresses and jumps through them.
 * We can use inline functions, because these do not transfer control to
 * a new address, but they must be static so that they are not exported
 * from the modules.  We cannot use normal syscall stubs, because these
 * all reference the errno global variable which is not yet initialized.
 * We can use all of the local stack variables that we want, since these
 * are all referenced to %ebp or %esp.
 *
 * Life is further complicated by the fact that initially we do not want
 * to do a complete dynamic linking.  We want to allow the user to supply
 * new functions replacing some of the library versions, and until we have
 * the list of modules that we should search set up, we do not want to do
 * any of this.  Thus I have chosen to only perform the relocations for
 * variables that start with "_dl_" since ANSI specifies that the user is
 * not supposed to redefine any of these variables.
 *
 * Fortunately, the linker itself leaves a few clues lying around, and
 * when the kernel starts the image, there are a few further clues.
 * First of all, there is information buried on the stack that the kernel
 * leaves, which includes information about the load address that the
 * program interpreter was loaded at, the number of sections, the address
 * the application was loaded at and so forth.  Here this information
 * is stored in the array dl_info, and the indicies are taken from the
 * file /usr/include/sys/auxv.h on any SVr4 system.
 *
 * The linker itself leaves a pointer to the .dynamic section in the first
 * slot of the GOT, and as it turns out, %ebx points to ghe GOT when
 * you are using PIC code, so we just dereference this to get the address
 * of the dynamic sections.
 *
 * Typically you must load all text pages as writable so that dynamic linking
 * can succeed.  The kernel under SVr4 loads these as R/O, so we must call
 * mprotect to change the protections.  Once we are done, we should set these
 * back again, so the desired behavior is achieved.  Under linux there is
 * currently no mprotect function in the distribution kernel (although
 * someone has alpha patches), so for now everything is loaded writable.
 *
 * We do not have access to malloc and friends at the initial stages of dynamic
 * linking, and it would be handy to have some scratchpad memory available
 * for use as we set things up.  It is a bit of a kluge, but we mmap /dev/zero
 * to get one page of scratchpad.  A simpleminded _dl_malloc is provided so
 * that we have some memory that can be used for this purpose.  Typically
 * we would not want to use the same memory pool as malloc anyway - the user
 * might want to redefine malloc for example.
 *
 * Our first task is to perform a minimal linking so that we can call other
 * portions of the dynamic linker.  Once we have done this, we then build
 * the list of modules that the application requires, using LD_LIBRARY_PATH
 * if this is not a suid program (/usr/lib otherwise).  Once this is done,
 * we can do the dynamic linking as required (and we must omit the things
 * we did to get the dynamic linker up and running in the first place.
 * After we have done this, we just have a few housekeeping chores and we
 * can transfer control to the user's application.
 */

#include <stdarg.h>
#ifdef IBCS_COMPATIBLE
#include <ibcs/unistd.h>
#else
#include <linux/unistd.h>
#endif
#include <sys/mman.h>
#include "hash.h"
#include "linuxelf.h"
#include "syscall.h"
#include "string.h"

static char * _dl_malloc_addr, *_dl_mmap_zero;
char * _dl_library_path = 0; /* Where we look for libraries */
static char * _dl_not_lazy = 0;
static char * _dl_warn = 0; /* Used by ldd */
static char * _dl_trace_loaded_objects = 0;
static int (*_dl_elf_main)(int, char **, char**);

static int (*_dl_elf_init)(void);

void * (*_dl_malloc_function)(int size) = NULL;

unsigned int * _dl_brkp; 

unsigned int * _dl_envp;

#define DL_MALLOC(SIZE) ((void *) (malloc_buffer += SIZE, malloc_buffer - SIZE))



#define ELF_HASH(RESULT,NAME) { \
  unsigned long hash = 0; \
    unsigned long tmp;  \
  char * name = NAME; \
  while (*name){  \
    hash = (hash << 4) + *name++; \
    if((tmp = hash & 0xf0000000)) hash ^= tmp >> 24; \
    hash &= ~tmp; \
  }; \
  RESULT = hash; \
}
extern _dl_linux_resolve(void);
extern int _dl_interpreter_exit(int);
extern char * _dl_strdup(const char *);
extern char * _dl_getenv(char * symbol, char ** envp);
extern int _dl_fixup(struct elf_resolve * tpnt);

void _dl_boot(int args);

void _dl_boot(int args){
  unsigned int argc;
  char ** argv, ** envp;
  int status;

  unsigned int load_addr;
  unsigned int * got;
  unsigned int * aux_dat;
  int goof = 0;
  struct elf_resolve * tpnt;
  struct dyn_elf * rpnt;
  struct elf_resolve * app_tpnt;
  unsigned int brk_addr;
  unsigned int dl_data[10];
  unsigned char * malloc_buffer, *mmap_zero;
  int (*_dl_atexit)(void *);
  int * lpnt;
  struct dynamic * dpnt;
  unsigned int *hash_addr;
  struct r_debug * debug_addr;
  unsigned int *chains;
  int indx;

  /* First obtain the information on the stack that tells us more about
     what binary is loaded, where it is loaded, etc, etc */

  aux_dat = (unsigned int *) &args;
  argc = *(aux_dat - 1);
  argv = (char **) aux_dat;
  while(*aux_dat) aux_dat++;  /* Skip over the argv pointers */
  aux_dat++;  /* Skip over NULL at end of argv */
  envp = (char **) aux_dat;
  while(*aux_dat) aux_dat++;  /* Skip over the envp pointers */
  aux_dat++;  /* Skip over NULL at end of envp */
  while(*aux_dat)
    {
      unsigned int * ad1;
      ad1 = aux_dat + 1;
      dl_data[*aux_dat] = *ad1;
      aux_dat += 2;
    }

  /* Next, locate the GOT */

  load_addr = dl_data[7];

  __asm__("\tmovl %%ebx,%0\n\t" : "=a" (got));
  dpnt = (struct dynamic *) (*got + load_addr);
 
  /* OK, time for another hack.  Now call mmap to get a page of writable
     memory that can be used for a temporary malloc.  We do not know brk
     yet, so we cannot use real malloc. */

  {
    int zfileno;
    char  * zfile = "/dev/zero";
    zfileno = _dl_open(zfile, 0);
    if (zfileno < 0)
    {
	SEND_STDERR("dl_boot: open /dev/zero failed!\n");
	_dl_exit(12);
    }
    mmap_zero = malloc_buffer = (unsigned char *) _dl_mmap((void*) 0, 4096,
			     PROT_READ | PROT_WRITE, 
			     MAP_PRIVATE, zfileno, 0);
    _dl_close(zfileno);
    if(_dl_mmap_check_error(mmap_zero)) {
	SEND_STDERR("dl_boot: mmap of /dev/zero failed!\n");
	_dl_exit(12);
    }
  };

  tpnt = DL_MALLOC(sizeof(struct elf_resolve));
  _dl_memset (tpnt, 0, sizeof (*tpnt));
  app_tpnt = DL_MALLOC(sizeof(struct elf_resolve));
  _dl_memset (app_tpnt, 0, sizeof (*app_tpnt));

  /*
   * This is used by gdb to locate the chain of shared libraries that are currently loaded.
   */
  debug_addr = DL_MALLOC(sizeof(struct r_debug));
  _dl_memset (debug_addr, 0, sizeof (*debug_addr));

  /* OK, that was easy.  Next scan the DYNAMIC section of the image.
     We are only doing ourself right now - we will have to do the rest later */

  while(dpnt->d_tag)
    {
      tpnt->dynamic_info[dpnt->d_tag] = dpnt->d_un.d_val;
      if(dpnt->d_tag == DT_TEXTREL ||
	 SVR4_BUGCOMPAT) tpnt->dynamic_info[DT_TEXTREL] = 1;
      dpnt++;
    }

  {
    struct elf_phdr * ppnt;
    int i;
    
    ppnt = (struct elf_phdr *) dl_data[3];
    for(i=0; i<dl_data[5]; i++, ppnt++)
      if(ppnt->p_type == PT_DYNAMIC) {
	dpnt = (struct dynamic *) ppnt->p_vaddr;
	while(dpnt->d_tag)
	  {
	    app_tpnt->dynamic_info[dpnt->d_tag] = dpnt->d_un.d_val;
	    if(dpnt->d_tag == DT_DEBUG) dpnt->d_un.d_val = debug_addr;
	    if(dpnt->d_tag == DT_TEXTREL ||
	       SVR4_BUGCOMPAT) app_tpnt->dynamic_info[DT_TEXTREL] = 1;
	    dpnt++;
	  }
      }
  }

  /* Get some more of the information that we will need to dynamicly link
     this module to itself */

  hash_addr = (unsigned int *) (tpnt->dynamic_info[DT_HASH]+load_addr);
  tpnt->nbucket = *hash_addr++;
  tpnt->nchain = *hash_addr++;
  tpnt->elf_buckets = hash_addr;
  hash_addr += tpnt->nbucket;
  chains = hash_addr;

  /* Ugly, ugly.  We need to call mprotect to change the protection of
     the text pages so that we can do the dynamic linking.  We can set the
     protection back again once we are done */

  {
    char * foo;
    struct elf_phdr * ppnt;
    int i
;
    foo = (char*) &_dl_not_lazy;

    /* First cover the shared library/dynamic linker */
    if(tpnt->dynamic_info[DT_TEXTREL]) 
      _dl_mprotect((void *) load_addr, (unsigned int) foo,
		   PROT_READ | PROT_WRITE | PROT_EXEC);

    /* Now cover the application program. */
    if(app_tpnt->dynamic_info[DT_TEXTREL]) {
      ppnt = (struct elf_phdr *) dl_data[3];
      for(i=0; i<dl_data[5]; i++, ppnt++) {
	if(ppnt->p_type == PT_LOAD && !(ppnt->p_flags & PF_W))
	  _dl_mprotect((void *) (ppnt->p_vaddr & 0xfffff000),
		       (ppnt->p_vaddr & 0xfff) + (unsigned int) ppnt->p_filesz,
		       PROT_READ | PROT_WRITE | PROT_EXEC);
      }
    };
  }

  /* OK, now do the relocations.  We do not do a lazy binding here, so
   that once we are done, we have considerably more flexibility. */

  goof = 0;
  for(indx=0; indx < 2; indx++)
    {
      int i;
      int reloc_type;
      struct Elf32_Rel * rpnt;
      unsigned int * reloc_addr;
      unsigned int symbol_addr;
      int symtab_index;
      unsigned int rel_addr, rel_size;

  
      rel_addr = (indx ? tpnt->dynamic_info[DT_JMPREL] : tpnt->dynamic_info[DT_REL]);
      rel_size = (indx ? tpnt->dynamic_info[DT_PLTRELSZ] : tpnt->dynamic_info[DT_RELSZ]);

      if(!rel_addr) continue;

      /* Now parse the relocation information */
      rpnt = (struct Elf32_Rel *) (rel_addr + load_addr);
      rel_size = rel_size / sizeof(struct Elf32_Rel);
      
      for(i=0; i< rel_size; i++, rpnt++){
	reloc_addr = (int *) (load_addr + (int)rpnt->offset);
	reloc_type = ELF32_R_TYPE(rpnt->info);
	symtab_index = ELF32_R_SYM(rpnt->info);
	symbol_addr = 0;
	if(symtab_index) {
	  int si;
	  char * pnt;
	  char * strtab;
	  struct Elf32_Sym * symtab;
	  unsigned int elf_hash_number, hn;
	  unsigned int weak_result;
	  
	  weak_result = 0;
	  symtab = (struct Elf32_Sym *) (tpnt->dynamic_info[DT_SYMTAB]+load_addr);
	  strtab = (char *) (tpnt->dynamic_info[DT_STRTAB]+load_addr);

	  /* We only do a partial dynamic linking right now.  The user
	     is not supposed to redefine any symbols that start with
	     a '_', so we can do this with confidence. */

	  if (!_dl_symbol(strtab + symtab[symtab_index].st_name)) continue;

	  ELF_HASH(elf_hash_number, strtab + symtab[symtab_index].st_name);
	  
	  hn = elf_hash_number % tpnt->nbucket;
	  for(si = tpnt->elf_buckets[hn]; si; si = chains[si]){
	    pnt = strtab + symtab[si].st_name;
	    if(_dl_strcmp(pnt, strtab + symtab[symtab_index].st_name) == 0 && 
	       (ELF32_ST_TYPE(symtab[si].st_info) == STT_FUNC ||
		ELF32_ST_TYPE(symtab[si].st_info) == STT_OBJECT) &&
	       (reloc_addr && 
		symtab[si].st_value != (unsigned int) reloc_addr) &&
	       symtab[si].st_value != 0 && symtab[si].st_shndx != 0)
	      switch(ELF32_ST_BIND(symtab[si].st_info)){
	      case STB_GLOBAL:
		symbol_addr = load_addr + symtab[si].st_value;
		break;
	      case STB_WEAK:
		if (!weak_result) weak_result = load_addr + 
		  symtab[si].st_value;
		break;
	      default:  /* Do local symbols need to be examined? */
		break;
	      };
	    if(symbol_addr) break;
	  };
	  if(!symbol_addr) symbol_addr = weak_result;
	  if(!symbol_addr) {
	    SEND_STDERR("ELF dynamic loader - unable to self-bootstrap - symbol ");
	    SEND_STDERR(strtab + symtab[symtab_index].st_name);
	    SEND_STDERR(" undefined.\n");
	    goof++;
	  }
	};
	switch(reloc_type){
	case R_386_32:
	  *reloc_addr += symbol_addr;
	  break;
	case R_386_PC32:
	  *reloc_addr += symbol_addr - (unsigned int) reloc_addr;
	  break;
	case R_386_GLOB_DAT:
	case R_386_JMP_SLOT:
	  *reloc_addr = symbol_addr;
	  break;
	case R_386_RELATIVE:
	  *reloc_addr += (unsigned int) load_addr;
	  break;
	default:
#ifdef IBCS_COMPATIBLE
	  __asm__("pushl $13\n\tpushl $0\n\tmovl $1,%%eax\n\tlcall $7,$0" : : );
#else
	  __asm__("pushl $13\n\tmovl $1,%%eax\n\tint $0x80" : : );
#endif
	};
      };
    }; 

  if (goof)    _dl_exit(1);

  /* OK, at this point we have a crude malloc capability.  Start to build
     the tables of the modules that are required for this beast to run.
     We start with the basic executable, and then go from there.  Eventually
     we will run across ourself, and we will need to properly deal with that
     as well. */

  _dl_malloc_addr = malloc_buffer;

  _dl_mmap_zero = mmap_zero;
/*  tpnt = _dl_malloc(sizeof(struct elf_resolve)); */

/* Now we have done the mandatory linking of some things.  We are now
   free to start using global variables, since these things have all been
   fixed up by now.  Still no function calls outside of this library ,
   since the dynamic resolver is not yet ready. */

  lpnt = (int *) (tpnt->dynamic_info[DT_PLTGOT] + load_addr);
  lpnt[2] = (int) _dl_linux_resolve;
  lpnt[1] = (int) tpnt;

  /* OK, this was a big step, now we need to scan all of the user images
     and load them properly. */

  tpnt->next = 0;
  tpnt->libname = 0;
  tpnt->libtype = program_interpreter;

  { struct elfhdr * epnt;
    struct elf_phdr * ppnt;
    int i;

    epnt = (struct elfhdr *) dl_data[7];
    tpnt->n_phent = epnt->e_phnum;
    tpnt->ppnt = ppnt = (struct elf_phdr *) (load_addr + epnt->e_phoff);
    for(i=0;i < epnt->e_phnum; i++, ppnt++){
      if(ppnt->p_type == PT_DYNAMIC) {
	tpnt->dynamic_addr = ppnt->p_vaddr + load_addr;
	tpnt->dynamic_size = ppnt->p_filesz;
      }
    }
  }

  tpnt->chains = chains;
  tpnt->loadaddr = (char *) load_addr;

  brk_addr = 0;
  rpnt = NULL;

  /* At this point we are now free to examine the user application,
     and figure out which libraries are supposed to be called.  Until
     we have this list, we will not be completely ready for dynamic linking */

  {
    struct elf_phdr * ppnt;
    int i;

    ppnt = (struct elf_phdr *) dl_data[3];
    for(i=0; i<dl_data[5]; i++, ppnt++) {
      if(ppnt->p_type == PT_LOAD) {
	if(ppnt->p_vaddr + ppnt->p_memsz > brk_addr) 
	  brk_addr = ppnt->p_vaddr + ppnt->p_memsz;
      };
      if(ppnt->p_type == PT_DYNAMIC) {
	/* OK, we have what we need - slip this one into the list. */
	app_tpnt = _dl_add_elf_hash_table("", 0, 
			    app_tpnt->dynamic_info, ppnt->p_vaddr, ppnt->p_filesz);
	_dl_loaded_modules->libtype = elf_executable;
	_dl_loaded_modules->ppnt = (struct elf_phdr *) dl_data[3];
	_dl_loaded_modules->n_phent = dl_data[5];
	_dl_symbol_tables = rpnt = 
	   (struct dyn_elf *) _dl_malloc(sizeof(struct dyn_elf));
	_dl_memset (rpnt, 0, sizeof (*rpnt));
	rpnt->dyn = _dl_loaded_modules;
	app_tpnt->usage_count++;
	app_tpnt->symbol_scope = _dl_symbol_tables;
	lpnt = (int *) (app_tpnt->dynamic_info[DT_PLTGOT]);
	lpnt[2] = (int) _dl_linux_resolve;
	lpnt[1] = (int) _dl_loaded_modules;
      }
      if(ppnt->p_type == PT_INTERP) { /* OK, fill this in - we did not have
					 this before */
	tpnt->libname =  _dl_strdup((char *) ppnt->p_offset +(dl_data[3] & 0xfffff000));
      }
    }
  }

  /* Now we need to figure out what kind of options are selected.
   Note that for SUID programs we ignore the settings in LD_LIBRARY_PATH */
  {
    unsigned int uid, euid, gid, egid;
    euid = egid = 0; /* So compiler does not warn us */
    _dl_not_lazy = _dl_getenv("LD_BIND_NOW",envp);

#ifdef IBCS_COMPATIBLE
    __asm__("movl %2,%%eax\n\tlcall $7,$0" :"=a" (uid), "=d" (euid) :"a" (__IBCS_getuid));
    __asm__("movl %2,%%eax\n\tlcall $7,$0" :"=a" (gid), "=d" (egid) :"a" (__IBCS_getgid));
#else
    __asm__ volatile ("int $0x80" : "=a" (uid) : "0" (__NR_getuid));
    __asm__ volatile ("int $0x80" : "=a" (euid) : "0" (__NR_geteuid));
    __asm__ volatile ("int $0x80" : "=a" (gid) : "0" (__NR_getgid));
    __asm__ volatile ("int $0x80" : "=a" (egid) : "0" (__NR_getegid));
#endif

    if(uid == euid && gid == egid) {
#ifndef IBCS_COMPATIBLE
      _dl_library_path = _dl_getenv("ELF_LD_LIBRARY_PATH",envp);
      if (!_dl_library_path)
#endif
        _dl_library_path = _dl_getenv("LD_LIBRARY_PATH",envp);
    }
    else
      _dl_library_path = 0;
  }

  /* OK, we now have the application in the list, and we have some
     basic stuff in place.  Now search through the list for other shared
     libraries that should be loaded, and insert them on the list in the
     correct order. */

  {
    struct elf_resolve *tcurr;
    struct elf_resolve * tpnt1;
    char * lpnt;

    tcurr = _dl_loaded_modules;
    do{
      for(dpnt = (struct dynamic *) tcurr->dynamic_addr; dpnt->d_tag; dpnt++)
	{
	  
	  if(dpnt->d_tag == DT_NEEDED)
	    {
	      lpnt = tcurr->loadaddr + tcurr->dynamic_info[DT_STRTAB] + 
		dpnt->d_un.d_val;
	      if(tpnt && _dl_strcmp(lpnt, tpnt->libname) == 0) {
		struct elf_resolve * ttmp;
		ttmp = _dl_loaded_modules;
		while(ttmp->next) ttmp = ttmp->next;
		ttmp->next = tpnt;
		tpnt->prev = ttmp;
		tpnt->next = NULL;
		rpnt->next = 
		   (struct dyn_elf *) _dl_malloc(sizeof(struct dyn_elf));
		_dl_memset (rpnt->next, 0, sizeof (*(rpnt->next)));
		rpnt = rpnt->next;
		rpnt->dyn = tpnt;
		tpnt->usage_count++;
		tpnt->symbol_scope = _dl_symbol_tables;
		tpnt = NULL;
		continue;
	      };
	      if(!(tpnt1 = _dl_load_shared_library(_dl_symbol_tables, lpnt))) {
		SEND_STDERR("Unable to load shared library ");
		SEND_STDERR(tcurr->loadaddr+tcurr->dynamic_info[DT_STRTAB] + 
			    dpnt->d_un.d_val);
		SEND_STDERR("\n");
		_dl_exit(12);
	      };
	      rpnt->next = 
	         (struct dyn_elf *) _dl_malloc(sizeof(struct dyn_elf));
	      _dl_memset (rpnt->next, 0, sizeof (*(rpnt->next)));
	      rpnt = rpnt->next;
	      tpnt1->usage_count++;
	      tpnt1->symbol_scope = _dl_symbol_tables;
	      tpnt1->libtype = elf_lib;
	      rpnt->dyn = tpnt1;
	    };
	}
      
      tcurr = tcurr->next;
    } while(tcurr);
  }

  _dl_trace_loaded_objects = _dl_getenv("LD_TRACE_LOADED_OBJECTS",envp);

    /* ldd uses uses this.  I am not sure how you pick up the other flags */ 
  if(_dl_trace_loaded_objects)
    { struct elf_resolve * ttmp;
      int shared = 0;
      for(ttmp = _dl_loaded_modules->next; ttmp; ttmp = ttmp->next)
	{
	  shared++;
	  SEND_STDERR("Linux ELF dynamic linker: ");
	  SEND_STDERR(argv[0]);
	  SEND_STDERR(": file loaded: ");
	  SEND_STDERR(ttmp->libname);
	  SEND_STDERR("\n");
	};
      if (!shared)
      {
	  SEND_STDERR(argv[0]);
	  SEND_STDERR(": statically linked\n");
      }
      _dl_warn = _dl_getenv("LD_WARN",envp);
      if(!_dl_warn) _dl_exit(0);
    };
  
  /*
   * If the program interpreter is not in the module chain, add it.  This will
   * be required for dlopen to be able to access the internal functions in the 
   * dynamic linker.
   */
  if(tpnt) {
    struct elf_resolve * tcurr;

    tcurr = _dl_loaded_modules;
    while(tcurr->next) tcurr = tcurr->next;
    tpnt->next = NULL;
    tpnt->usage_count++;
    tcurr->next = tpnt;
    tpnt->prev = tcurr;
    rpnt->next = 
	   (struct dyn_elf *) _dl_malloc(sizeof(struct dyn_elf));
    _dl_memset (rpnt->next, 0, sizeof (*(rpnt->next)));
    rpnt = rpnt->next;
    rpnt->dyn = tpnt;
    tpnt = NULL;
  }

  /*
   * OK, now all of the kids are tucked into bed in their proper addresses.
   * Now we go through and look for REL and RELA records that indicate fixups
   * to the GOT tables.  We need to do this in reverse order so that COPY
   * directives work correctly */

  goof = _dl_fixup(_dl_loaded_modules);

  /* Some flavors of SVr4 do not generate the R_386_COPY directive,
   and we have to manually search for entries that require fixups. 
   Solaris gets this one right, from what I understand.  */

  goof +=  _dl_copy_fixups(_dl_symbol_tables);
  if(goof || _dl_trace_loaded_objects) _dl_exit(0);

  /* OK, at this point things are pretty much ready to run.  Now we
     need to touch up a few items that are required, and then
     we can let the user application have at it.  Note that
     the dynamic linker itself is not guaranteed to be fully
     dynamicly linked if we are using ld.so.1, so we have to look
     up each symbol individually. */


  _dl_brkp = (unsigned int *) _dl_find_hash("___brk_addr", NULL, 1, NULL, 0);
  if (_dl_brkp) *_dl_brkp = brk_addr;

#ifdef IBCS_COMPATIBLE
  _dl_envp = (unsigned int *) _dl_find_hash("_environ", NULL, 1, NULL, 0);
#else
  _dl_envp = (unsigned int *) _dl_find_hash("__environ", NULL, 1, NULL, 0);
#endif

  if (_dl_envp) *_dl_envp = (unsigned int) envp;

  {
    int i;
    struct elf_phdr * ppnt;

  /* We had to set the protections of all pages to R/W for dynamic linking.
     Set text pages back to R/O */
  for(tpnt = _dl_loaded_modules; tpnt; tpnt = tpnt->next)
    for(ppnt = tpnt->ppnt, i=0; i < tpnt->n_phent; i++, ppnt++)
      if(ppnt->p_type == PT_LOAD && !(ppnt->p_flags & PF_W) &&
	 tpnt->dynamic_info[DT_TEXTREL])
	_dl_mprotect((void *) (tpnt->loadaddr + (ppnt->p_vaddr & 0xfffff000)),
		     (ppnt->p_vaddr & 0xfff) + (unsigned int) ppnt->p_filesz,
		     LXFLAGS(ppnt->p_flags));

  }

  _dl_atexit = (int (*)(void *)) _dl_find_hash("atexit", NULL, 1, NULL, 0);

  for(tpnt = _dl_loaded_modules; tpnt; tpnt = tpnt->next)
    {
      /* Apparently crt1 for the application is responsible for handling this.
       * We only need to run the init/fini for shared libraries
       */
      if (tpnt->libtype == program_interpreter ||
	tpnt->libtype == elf_executable) continue;
      if (tpnt->init_flag & INIT_FUNCS_CALLED) continue;
      tpnt->init_flag |= INIT_FUNCS_CALLED;
      
      if(tpnt->dynamic_info[DT_INIT]) {
	_dl_elf_init = (int (*)(void)) (tpnt->loadaddr + 
				    tpnt->dynamic_info[DT_INIT]);
	(*_dl_elf_init)();
      }
      if(_dl_atexit && tpnt->dynamic_info[DT_FINI])
      {
        (*_dl_atexit)(tpnt->loadaddr + tpnt->dynamic_info[DT_FINI]);
      }
#undef DL_DEBUG
#ifdef DL_DEBUG
      else
      {
	SEND_STDERR(tpnt->libname);
	SEND_STDERR(": ");
	if (!_dl_atexit)
	  SEND_STDERR("The address is atexit () is 0x0.");
	if (!tpnt->dynamic_info[DT_FINI])
	  SEND_STDERR("Invalid .fini section.");
	SEND_STDERR("\n");
      }
#endif
#undef DL_DEBUG
   }

  /*
   * OK, fix one more thing - set up the debug_addr structure to point to our chain.
   * Later we may need to fill in more fields, but this should be enough for now.
   */
  debug_addr->r_map = _dl_loaded_modules;

  /* OK we are done here.  Turn out the lights, and lock up. */
  _dl_elf_main = (int (*)(int, char**, char**)) dl_data[9];

  __asm__ volatile ("leave\n\t" \
		    "jmp *%%eax\n\t"
		    : "=a" (status) :
		    "d" (_dl_interpreter_exit), "a" (_dl_elf_main));
}

int _dl_fixup(struct elf_resolve * tpnt)
{
  int goof = 0;
  if(tpnt->next) goof += _dl_fixup(tpnt->next);

  if(tpnt->dynamic_info[DT_REL]) {
    if (tpnt->init_flag & RELOCS_DONE) return goof;
    tpnt->init_flag |= RELOCS_DONE;
   
    goof += _dl_parse_relocation_information(tpnt, tpnt->dynamic_info[DT_REL],
					     tpnt->dynamic_info[DT_RELSZ], 0);
  }
  if(tpnt->dynamic_info[DT_JMPREL])
    {
      if (tpnt->init_flag & JMP_RELOCS_DONE) return goof;
      tpnt->init_flag |= JMP_RELOCS_DONE;
      
      if(! _dl_not_lazy || *_dl_not_lazy == 0)
	_dl_parse_lazy_relocation_information(tpnt, tpnt->dynamic_info[DT_JMPREL],
					      tpnt->dynamic_info[DT_PLTRELSZ], 0);
      else
	goof +=  _dl_parse_relocation_information(tpnt,
						  tpnt->dynamic_info[DT_JMPREL],
						  tpnt->dynamic_info[DT_PLTRELSZ], 0);
    };
  if(tpnt->dynamic_info[DT_RELA]) {
    SEND_STDERR("Unable to handle RELA relocation records\n");
    _dl_exit(1);
  };
  return goof;
}

void * _dl_malloc(int size) {
  void * retval;

  if(_dl_malloc_function)
  	return (*_dl_malloc_function)(size);

  if(_dl_malloc_addr-_dl_mmap_zero+size>4096) {
  	int zfileno;
  	char  * zfile = "/dev/zero";
  	zfileno = _dl_open(zfile, 0);
	if (zfileno < 0)
	{
	  SEND_STDERR("dl_malloc: open /dev/zero failed!\n");
	  _dl_exit(12);
	}
	_dl_mmap_zero = _dl_malloc_addr = (unsigned char *) _dl_mmap((void*) 0, size,
  				PROT_READ | PROT_WRITE, 
  				MAP_PRIVATE, zfileno, 0);
  	_dl_close(zfileno);
  	if(_dl_mmap_check_error(_dl_mmap_zero)) {
  	    SEND_STDERR("dl_malloc: mmap of /dev/zero failed!\n");
  	    _dl_exit(12);
  	}
  }
  retval = _dl_malloc_addr;
  _dl_malloc_addr += size;
  return retval;
}

char * _dl_getenv(char * symbol, char ** envp)
{
  char * pnt;
  char * pnt1;
  while ((pnt = *envp++)) {
    pnt1 = symbol;
    while(*pnt && *pnt1 && *pnt == *pnt1) {pnt1++; pnt++;};
    if(!*pnt || *pnt != '=' || *pnt1) continue;
    return pnt+1;
  }
  return 0;
}

char * _dl_strdup(const char * string){
  void * retval;
  char * pnt;

  pnt = retval = _dl_malloc_addr;
  while(*string)
    *pnt++ = *string++;
  *pnt++ = 0;
  _dl_malloc_addr = pnt;
  return retval;
}

/* In principle we could do the .fini stuff here, but we already
   registered this stuff with atexit */
int _dl_interpreter_exit(int exitcode){
/*  SEND_STDERR("Hey, look where I am!\n"); */
  return 0;
}
