[RFC PATCH 0/3] x86/boot: get rid of GOT entries and associated fixup code

From: Ard Biesheuvel
Date: Wed Jan 08 2020 - 05:23:11 EST


Building position independent code using GCC by default results in references
to symbols with external linkage to be resolved via GOT entries, which
carry the absolute addresses of the symbols, and thus need to be corrected
if the load time address of the executable != the link time address.

For fully linked binaries, such GOT indirected references are completely
useless, and actually make the startup code more complicated than necessary,
since these corrections may need to be applied more than once. In fact, we
have been very careful to avoid such references in the EFI stub code, since
it would require yet another [earlier] pass of GOT fixups which we currently
don't implement.

Older GCCs were quirky when it came to overriding this behavior using symbol
visibility, but now that we have increased the minimum GCC version to 4.6,
we can actually start setting the symbol visibility to 'hidden' globally for
all symbol references in the decompressor, getting rid of the GOT entirely.
This means we can get rid of the GOT fixup code right away, and we can start
using ordinary external symbol references in the EFI stub without running the
risk of boot regressions.

CC'ing Linus and Maarten, who were involved in diagnosing an issue related
to GOT entries emitted from the EFI stub ~5 years ago. [0] [1]

Many thanks to Arvind for the suggestions and the help in testing these
changes. Tested on GCC 4.6 + binutils 2.24 (Ubuntu 14.04), and GCC 8 +
binutils 2.31 (Debian Buster)

Cc: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
Cc: Arvind Sankar <nivedita@xxxxxxxxxxxx>

[0] https://lore.kernel.org/lkml/5405E186.2080406@xxxxxxxxxxxxx/
[1] https://lore.kernel.org/lkml/CA+55aFxW9PmtjOf9nUQwpU8swsFqJOz8whZXcONo+XFmkSwezg@xxxxxxxxxxxxxx/

Ard Biesheuvel (3):
x86/boot/compressed: move .got.plt entries out of the .got section
x86/boot/compressed: force hidden visibility for all symbol references
x86/boot/compressed: get rid of GOT fixup code

arch/x86/boot/compressed/Makefile | 1 +
arch/x86/boot/compressed/head_32.S | 22 ++------
arch/x86/boot/compressed/head_64.S | 57 --------------------
arch/x86/boot/compressed/hidden.h | 19 +++++++
arch/x86/boot/compressed/vmlinux.lds.S | 16 ++++--
5 files changed, 36 insertions(+), 79 deletions(-)
create mode 100644 arch/x86/boot/compressed/hidden.h

--
2.20.1