#!/bin/bash # Pi-hole: A black hole for Internet advertisements # (c) 2020 Pi-hole, LLC (https://pi-hole.net) # Network-wide ad blocking via your own hardware. # # FTL Engine # Binary target tests # # This file is copyright under the latest version of the EUPL. # Please see LICENSE file for your rights under this license. */ check_libs() { mapfile -t libs < <(readelf -d ./pihole-FTL | grep "Shared library" | grep -oE "\[.*\]") if [[ "${libs[*]}" != "${1}" ]]; then echo "Wrong libraries" echo "Found: ${libs[*]}" echo "Expected: ${1}" exit 1 fi echo "Library checks: OK (using ${#libs[*]} shared libraries)" } check_machine() { mapfile -t header < <(readelf -h ./pihole-FTL | grep -E "(Class)|(Machine)" | sed "s/.*://;s/ \{2,\}//g;") if [[ "${header[0]}" != "${1}" || "${header[1]}" != "${2}" ]]; then echo "Wrong machine" echo "Expected: Class: ${1} Machine: ${2}" echo "Found: Class: ${header[0]} Machine: ${header[1]}" exit 1 fi echo "Machine checks: OK (${1} binary for ${2})" } check_CPU_arch() { cpuarch="$(readelf -A ./pihole-FTL | grep "Tag_CPU_arch:" | sed "s/^ *//")" if [[ "${cpuarch}" != "Tag_CPU_arch: ${1}" ]]; then echo "Wrong CPU arch" echo "Expected: Tag_CPU_arch: ${1}" echo "Found: ${cpuarch}" exit 1 fi echo "CPU architecture checks: OK (${1})" } check_FP_arch() { fparch="$(readelf -A ./pihole-FTL | grep "Tag_FP_arch:" | sed "s/^ *//")" if [[ "${fparch}" != "Tag_FP_arch: ${1}" && -n "${1}" ]]; then echo "Wrong FP arch" echo "Expected: Tag_FP_arch: ${1}" echo "Found: ${fparch}" exit 1 fi echo "FP architecture checks: OK (${1})" } check_file() { filedetails="$(file -b pihole-FTL | sed "s/, BuildID[^,]*//g")" if [[ "${filedetails}" != "${1}" ]]; then echo "Wrong binary classification" echo "Expected: ${1}" echo "Found: ${filedetails}" exit 1 fi echo "Binary classification checks: OK (${1})" } check_static() { if readelf -l ./pihole-FTL | grep -q INTERP; then echo "Not a static executable, depends on dynamic interpreter" ldd ./pihole-FTL exit 1 fi echo "Static executable check: OK" } if [[ "${CI_ARCH}" == "x86_64" || "${CI_ARCH}" == "x86_64_full" ]]; then check_machine "ELF64" "Advanced Micro Devices X86-64" if [[ "${CI_ARCH}" == "x86_64_full" ]]; then check_libs "[libm.so.6] [librt.so.1] [libdbus-1.so.3] [libmnl.so.0] [libnftables.so.1] [libnftnl.so.11] [libnfnetlink.so.0] [libnetfilter_conntrack.so.3] [libpthread.so.0] [libc.so.6]" else check_libs "[libm.so.6] [librt.so.1] [libpthread.so.0] [libc.so.6]" fi check_file "ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, with debug_info, not stripped" elif [[ "${CI_ARCH}" == "x86_64-musl" ]]; then check_machine "ELF64" "Advanced Micro Devices X86-64" check_static # Binary should not rely on any dynamic interpreter check_libs "" # No dependency on any shared library is intended check_file "ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, with debug_info, not stripped" elif [[ "${CI_ARCH}" == "x86_32" ]]; then check_machine "ELF32" "Intel 80386" check_libs "[libm.so.6] [librt.so.1] [libpthread.so.0] [libc.so.6]" check_file "ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, for GNU/Linux 3.2.0, with debug_info, not stripped" elif [[ "${CI_ARCH}" == "aarch64" ]]; then check_machine "ELF64" "AArch64" check_libs "[libm.so.6] [librt.so.1] [libpthread.so.0] [libc.so.6] [ld-linux-aarch64.so.1]" check_file "ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, with debug_info, not stripped" elif [[ "${CI_ARCH}" == "armv4t" ]]; then check_machine "ELF32" "ARM" check_libs "[libm.so.6] [librt.so.1] [libgcc_s.so.1] [libpthread.so.0] [libc.so.6] [ld-linux.so.3]" check_file "ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.3, for GNU/Linux 3.2.0, not stripped" check_CPU_arch "v4T" check_FP_arch "" # No specified FP arch elif [[ "${CI_ARCH}" == "armv5te" ]]; then check_machine "ELF32" "ARM" check_libs "[libm.so.6] [librt.so.1] [libgcc_s.so.1] [libpthread.so.0] [libc.so.6] [ld-linux.so.3]" check_file "ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.3, for GNU/Linux 3.2.0, with debug_info, not stripped" check_CPU_arch "v5TE" check_FP_arch "" # No specified FP arch elif [[ "${CI_ARCH}" == "armv6hf" ]]; then check_machine "ELF32" "ARM" check_libs "[libm.so.6] [librt.so.1] [libgcc_s.so.1] [libpthread.so.0] [libc.so.6] [ld-linux-armhf.so.3]" check_file "ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, for GNU/Linux 3.2.0, with debug_info, not stripped" check_CPU_arch "v6" check_FP_arch "VFPv2" elif [[ "${CI_ARCH}" == "armv7hf" ]]; then check_machine "ELF32" "ARM" check_libs "[libm.so.6] [librt.so.1] [libgcc_s.so.1] [libpthread.so.0] [libc.so.6] [ld-linux-armhf.so.3]" check_file "ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, for GNU/Linux 3.2.0, with debug_info, not stripped" check_CPU_arch "v7" check_FP_arch "VFPv3-D16" elif [[ "${CI_ARCH}" == "armv8a" ]]; then check_machine "ELF32" "ARM" check_libs "[libm.so.6] [librt.so.1] [libgcc_s.so.1] [libpthread.so.0] [libc.so.6] [ld-linux-armhf.so.3]" check_file "ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, for GNU/Linux 3.2.0, with debug_info, not stripped" check_CPU_arch "v8" check_FP_arch "VFPv3-D16" elif [[ "${CI_ARCH}" == "riscv64" ]]; then check_machine "ELF64" "RISC-V" check_libs "[libm.so.6] [libc.so.6] [ld-linux-riscv64-lp64d.so.1]" check_file "ELF 64-bit LSB pie executable, UCB RISC-V, RVC, double-float ABI, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-riscv64-lp64d.so.1, for GNU/Linux 4.15.0, with debug_info, not stripped" else echo "Invalid job ${CI_ARCH}" exit 1 fi exit 0