rpm-build/scripts/brp-verify_elf.in

#!/bin/sh -e
#
# brp-verify_elf - verify ELF objects.
#
# Copyright (C) 2002, 2003, 2006  Dmitry V. Levin <ldv@altlinux.org>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#

. @RPMCONFIGDIR@/functions
ValidateBuildRoot

cd "$RPM_BUILD_ROOT"

export VERIFY_ELF_ARCH=normal
export VERIFY_ELF_FHS=normal
export VERIFY_ELF_RPATH=normal
export VERIFY_ELF_STACK=normal
export VERIFY_ELF_TEXTREL=normal
export VERIFY_ELF_UNRESOLVED=normal

for t in `printf %s "$RPM_VERIFY_ELF_METHOD" |tr , ' '`; do
	case "$t" in
		no|none|skip)
			exit 0
			;;
		arch)
			VERIFY_ELF_ARCH=normal
			;;
		arch=*)
			VERIFY_ELF_ARCH="${t#arch=}"
			;;
		fhs)
			VERIFY_ELF_FHS=normal
			;;
		fhs=*)
			VERIFY_ELF_FHS="${t#fhs=}"
			;;
		rpath)
			VERIFY_ELF_RPATH=normal
			;;
		rpath=*)
			VERIFY_ELF_RPATH="${t#rpath=}"
			;;
		stack)
			VERIFY_ELF_STACK=normal
			;;
		stack=*)
			VERIFY_ELF_STACK="${t#stack=}"
			;;
		textrel)
			VERIFY_ELF_TEXTREL=normal
			;;
		textrel=*)
			VERIFY_ELF_TEXTREL="${t#textrel=}"
			;;
		unresolved)
			VERIFY_ELF_UNRESOLVED=normal
			;;
		unresolved=*)
			VERIFY_ELF_UNRESOLVED="${t#unresolved=}"
			;;
		normal)
			VERIFY_ELF_ARCH=normal
			VERIFY_ELF_FHS=normal
			VERIFY_ELF_RPATH=normal
			VERIFY_ELF_STACK=normal
			VERIFY_ELF_TEXTREL=normal
			VERIFY_ELF_UNRESOLVED=normal
			;;
		strict)
			VERIFY_ELF_ARCH=strict
			VERIFY_ELF_FHS=strict
			VERIFY_ELF_RPATH=strict
			VERIFY_ELF_STACK=strict
			VERIFY_ELF_TEXTREL=strict
			VERIFY_ELF_UNRESOLVED=strict
			;;
		relaxed)
			VERIFY_ELF_ARCH=relaxed
			VERIFY_ELF_FHS=relaxed
			VERIFY_ELF_RPATH=relaxed
			VERIFY_ELF_STACK=relaxed
			VERIFY_ELF_TEXTREL=relaxed
			VERIFY_ELF_UNRESOLVED=relaxed
			;;
		*)
			Fatal "Unrecognized verify_elf method: $t"
			;;
	esac
done

# No stack verification available on arm*
[ -z "$RPM_TARGET_ARCH" -o -n "${RPM_TARGET_ARCH##arm*}" ] ||
	VERIFY_ELF_STACK=no

[ "$VERIFY_ELF_ARCH" != no ] || VERIFY_ELF_ARCH=
[ -z "$RPM_VERIFY_ELF_ARCH" ] || VERIFY_ELF_ARCH="$RPM_VERIFY_ELF_ARCH"
[ "$VERIFY_ELF_FHS" != no ] || VERIFY_ELF_FHS=
[ -z "$RPM_VERIFY_ELF_FHS" ] || VERIFY_ELF_FHS="$RPM_VERIFY_ELF_FHS"
[ "$VERIFY_ELF_RPATH" != no ] || VERIFY_ELF_RPATH=
[ -z "$RPM_VERIFY_ELF_RPATH" ] || VERIFY_ELF_RPATH="$RPM_VERIFY_ELF_RPATH"
[ "$VERIFY_ELF_STACK" != no ] || VERIFY_ELF_STACK=
[ -z "$RPM_VERIFY_ELF_STACK" ] || VERIFY_ELF_STACK="$RPM_VERIFY_ELF_STACK"
[ "$VERIFY_ELF_TEXTREL" != no ] || VERIFY_ELF_TEXTREL=
[ -z "$RPM_VERIFY_ELF_TEXTREL" ] || VERIFY_ELF_TEXTREL="$RPM_VERIFY_ELF_TEXTREL"
[ "$VERIFY_ELF_UNRESOLVED" != no ] || VERIFY_ELF_UNRESOLVED=
[ -z "$RPM_VERIFY_ELF_UNRESOLVED" ] || VERIFY_ELF_UNRESOLVED="$RPM_VERIFY_ELF_UNRESOLVED"

: ${RPM_VERIFY_ELF_TOPDIR:=}
: ${RPM_VERIFY_ELF_SKIPLIST:=}
[ -d "$RPM_BUILD_ROOT$RPM_VERIFY_ELF_TOPDIR" ] || exit 0

echo "Verifying ELF objects in $RPM_BUILD_ROOT$RPM_VERIFY_ELF_TOPDIR (arch=$VERIFY_ELF_ARCH,fhs=$VERIFY_ELF_FHS,rpath=$VERIFY_ELF_RPATH,stack=$VERIFY_ELF_STACK,textrel=$VERIFY_ELF_TEXTREL,unresolved=$VERIFY_ELF_UNRESOLVED)"

dump_ld_config='@RPMCONFIGDIR@/dump_ld_config'
RPM_VERIFY_ELF_LDD_RPATH="$("$dump_ld_config" '' "$RPM_BUILD_ROOT")"
RPM_VERIFY_ELF_LDD_RPATH="$RPM_VERIFY_ELF_LDD_RPATH /$RPM_LIB $RPM_LIBDIR $("$dump_ld_config")"
export RPM_VERIFY_ELF_LDD_RPATH

find .$RPM_VERIFY_ELF_TOPDIR -type f |
file -NF$'\t' -f - |
while IFS=$'\t' read -r f t; do
	case " $t" in
		*' ELF '*) ;;
		*) continue ;;
	esac
	for skip in $RPM_VERIFY_ELF_SKIPLIST; do
		case "${f#.}" in
			$skip) continue 2 ;;
		esac
	done
	printf '%s\n' "$f"
done |
@RPMCONFIGDIR@/verify-elf