1#
2# CDDL HEADER START
3#
4# The contents of this file are subject to the terms of the
5# Common Development and Distribution License (the "License").
6# You may not use this file except in compliance with the License.
7#
8# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9# or http://www.opensolaris.org/os/licensing.
10# See the License for the specific language governing permissions
11# and limitations under the License.
12#
13# When distributing Covered Code, include this CDDL HEADER in each
14# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15# If applicable, add the following below this CDDL HEADER, with the
16# fields enclosed by brackets "[]" replaced with your own identifying
17# information: Portions Copyright [yyyy] [name of copyright owner]
18#
19# CDDL HEADER END
20#
21
22#
23# Copyright (c) 2009, 2010, Oracle and/or its affiliates. All rights reserved.
24# Copyright 2015, OmniTI Computer Consulting, Inc. All rights reserved.
25# Copyright 2021 OmniOS Community Edition (OmniOSce) Association.
26# Copyright 2019 Peter Tribble.
27# Copyright 2018 Joyent, Inc.
28# Copyright 2020 Oxide Computer Company
29# Copyright 2022 Garrett D'Amore <garrett@damore.org>
30# Copyright 2022 Tintri by DDN, Inc. All rights reserved.
31#
32
33# This file provides exceptions to the usual rules applied to ELF objects by
34# check_rtime. All strings are Perl regular expressions that are compared to
35# file paths. In addition to the standard Perl syntax, there is one extension:
36#
37#	MACH(dir)
38#
39# is expanded into a regular expression that matches the given
40# directory, or a 64-bit subdirectory of the directory with the
41# name of a 64-bit architecture. For example, MACH(lib) will match
42# any of the following:
43#
44#	lib
45#	lib/amd64
46#	lib/sparcv9
47
48# Directory hierarchies to skip completely
49SKIP		^usr/lib/libc/			# optimized libc
50SKIP		^usr/lib/rcm/			# 4426119
51SKIP		^usr/perl5/			# alan's taking care of these :-)
52SKIP		^usr/src/			# no objects in source code
53
54# Individual files that we don't examine
55SKIP		^boot/grub/bin/grub$
56# USIII specific extns. cause ldd noise on USII bld. m/c
57SKIP		^usr/lib/fps/sun4u/UltraSPARC.*/fptest$
58SKIP		^usr/MACH(lib)/lddstub$		# lddstub has no dependencies
59SKIP		^usr/MACH(lib)/libssagent\.so\.1$	# 4328854
60SKIP		^usr/lib/MACH(iconv)/geniconvtbl.so$	# 4384329
61
62# picl file exclusions (4385799)
63SKIP		^usr/platform/.*/libpsvcplugin_psr\.so\.1
64SKIP		^usr/platform/.*/libpsvcpolicy_psr\.so\.1
65SKIP		^usr/platform/.*/libpsvcpolicy\.so\.1
66SKIP		^usr/lib/sysevent/modules/picl_slm.so$
67
68#
69# The stdio tests all link against libumem to interpose on libc's
70# malloc; however, they do not actually reference the object.
71#
72SKIP		^opt/libc-tests/tests/stdio/
73
74# Objects that are allowed to have executable data segments
75EXEC_DATA	^MACH(lib)/ld\.so\.1$
76EXEC_DATA	^lib/libc\.so\.1$	# 6524709, 32-bit, needed for x86 only
77EXEC_DATA	^opt/SUNWdtrt/tst/.*/ustack/tst\.helper\.exe$
78EXEC_DATA	^platform/.*/MACH(kernel)/unix$
79
80# Objects that are allowed to have an executable stack
81EXEC_STACK	^platform/.*/MACH(kernel)/unix$
82EXEC_STACK	^platform/.*/multiboot$
83EXEC_STACK	^opt/os-tests/tests/secflags/stacky$
84
85# Objects for which we allow relocations to the text segment
86TEXTREL		^platform/.*/MACH(kernel)/unix$
87TEXTREL		^usr/sbin/amd64/bhyve$
88
89# Directories and files that are allowed to have no direct bound symbols
90NODIRECT	^platform/.*/MACH(kernel)/unix$
91NODIRECT	^usr/ucb
92
93# Identify any files that should be skipped when building a crle(1)
94# configuration file.  As the hwcap libraries can be loop-back mounted onto
95# libc, these can confuse crle(1) because of their identical dev/inode.
96NOCRLEALT	^usr/lib/libc/libc_hwcap[1-3].so.1$
97
98# Files that should contain debugging information.
99STAB	^platform/.*/MACH(kernel)/unix$
100
101# Files that are allowed undefined references
102UNDEF_REF	^usr/lib/libnisdb\.so\.2$
103
104# Objects allowed to have unused dependencies
105UNUSED_DEPS	^usr/lib/picl/plugins/		# require devtree dependencies
106
107# libnetsnmphelpers.so is empty in some net-snmp versions
108UNUSED_OBJ	unused object=.*/libnetsnmphelpers\.so\..*
109UNREF_OBJ	unreferenced object=.*/libnetsnmphelpers\.so\..*
110
111# ksh93 is just a wrapper into libshell but it is linked with libumem.so
112# so that the underlying libraries use that implementation for memory
113# management. Since ksh itself doesn't perform any memory allocations in
114# the stub, ldd -U determines that libumem is an unreferenced object.
115UNREF_OBJ	/libumem\.so\.1.*/usr/bin/(i86/)?r?ksh(93)?\b
116
117# Unused runpaths due to dlopen() use
118UNUSED_RPATH	/usr/lib/fs/autofs.*\ from\ .automountd
119UNUSED_RPATH	/etc/ppp/plugins.*\ from\ .*pppd
120UNUSED_RPATH	/usr/lib/inet/ppp.*\ from\ .*pppd
121UNUSED_RPATH	/usr/platform/.*rsmlib.*\ from\ .*librsm\.so\.2
122UNUSED_RPATH	\$ORIGIN.*\ from\ .*fcode.so
123UNUSED_RPATH	/opt/VRTSvxvm/lib.*\ from\ .*libdiskmgt\.so\.1
124
125# Unused runpaths in picl code
126UNUSED_RPATH	/usr/platform/.*\ from\ .*/usr/platform
127UNUSED_RPATH	/usr/lib/picl/.*\ from\ .*/usr/platform
128UNUSED_RPATH	/usr/platform/.*\ from\ .*/usr/lib/picl
129
130# Unused runpaths in non-OSNET objects we can't change
131UNUSED_RPATH	/usr/lib/mps.*\ from\ .*libnss3\.so
132UNUSED_RPATH	/usr/lib/mps.*\ from\ .*libnssutil3\.so
133UNUSED_RPATH	/usr/lib/mps.*\ from\ .*libsmime3\.so
134UNUSED_RPATH	/usr/lib/mps.*\ from\ .*libssl3\.so
135UNUSED_RPATH	/usr/lib.*\ from\ .*/usr/lib/mps
136UNUSED_RPATH	/usr/gnu/lib.*\ from\ .*/usr/lib/libpython2\..
137UNUSED_RPATH	/usr/gnu/lib.*\ from\ .*/usr/lib/64/libpython2\..
138UNUSED_RPATH	/usr/gnu/lib.*\ from\ .*/usr/lib/64/libpython3\..
139UNUSED_RPATH	/usr/snadm/lib.*\ from\ .*/usr/snadm/lib/libspmicommon\.so\.1
140UNUSED_RPATH	/usr/gcc/.*/lib.*\ from\ .*
141UNUSED_RPATH	/usr/gnu/lib.*\ from\ .*libncurses\.so\.5
142
143# Unused runpaths for reasons not captured above
144UNUSED_RPATH	/usr/lib/smbsrv.*\ from\ .*libsmb\.so\.1	# future needs
145
146# Unreferenced objects of non-OSnet objects we can't change
147UNREF_OBJ	/lib.*\ of\ .*libcimapi\.so
148UNREF_OBJ	/lib.*\ of\ .*libdbus-1\.so\.3
149UNREF_OBJ	/lib.*\ of\ .*libdbus-glib-1\.so\.2
150UNREF_OBJ	/lib.*\ of\ .*libgio-2.0\.so\.0
151UNREF_OBJ	/lib.*\ of\ .*libglib-2.0\.so\.0
152UNREF_OBJ	/lib.*\ of\ .*libgobject-2.0\.so\.0
153UNREF_OBJ	/lib.*\ of\ .*libgthread-2\.0\.so\.0
154UNREF_OBJ	/lib.*\ of\ .*libjvm\.so
155UNREF_OBJ	/lib.*\ of\ .*libnetsnmp\.so\..*
156UNREF_OBJ	/lib.*\ of\ .*libnetsnmpagent\.so\..*
157UNREF_OBJ	/lib.*\ of\ .*libnetsnmpmibs\.so\..*
158UNREF_OBJ	/lib.*\ of\ .*libnetsnmphelpers\.so\..*
159UNREF_OBJ	/lib.*\ of\ .*libnspr4\.so
160UNREF_OBJ	/lib.*\ of\ .*libpq\.so\.5
161UNREF_OBJ	/lib.*\ of\ .*libsoftokn3\.so
162UNREF_OBJ	/lib.*\ of\ .*libspmicommon\.so\.1
163UNREF_OBJ	/lib.*\ of\ .*libspmocommon\.so\.1
164UNREF_OBJ	/lib.*\ of\ .*libssl3\.so
165UNREF_OBJ	/lib.*\ of\ .*libtspi\.so\.1
166UNREF_OBJ	/lib.*\ of\ .*libxml2\.so\.2
167UNREF_OBJ	/lib.*\ of\ .*libxslt\.so\.1
168UNREF_OBJ	/lib.*\ of\ .*libpq\.so\.4
169UNREF_OBJ	/lib.*\ of\ .*libpython2\.[467]\.so\.1\.0
170UNREF_OBJ	/lib.*\ of\ .*libpython3\.\d+m?\.so\.1\.0
171UNREF_OBJ	/libgcc_s.*\ of\ .*libstdc\+\+\.so\.6
172UNREF_OBJ	/libgcc_s.*\ of\ .*libgmodule-2\.0\.so\.0
173
174# Unreferenced object of objects we can't change for other reasons
175UNREF_OBJ	/libmapmalloc\.so\.1;\ unused\ dependency\ of	# interposer
176UNREF_OBJ	/libstdc\+\+\.so\.6;\ unused\ dependency\ of	# gcc build
177UNREF_OBJ	/libgcc_s\.so\.1;\ unused\ dependency\ of	# gcc build
178UNREF_OBJ	/libgcc_s\.so\.1.*\ of\ .*libstdc\+\+\.so\.6	# omnios gcc mix
179UNREF_OBJ	/libm\.so\.2.*\ of\ .*libstdc\+\+\.so\.6	# gcc build
180UNREF_OBJ	/lib.*\ of\ .*/lib/picl/plugins/		# picl
181UNREF_OBJ	/lib.*\ of\ .*kcfd				# interposer
182UNREF_OBJ	/libpkcs11\.so\.1; .*\ of\ .*libkmf\.so\.1	# interposed
183# Referenced by the Studio build, not the GCC build.  GCC eliminates the unused
184# statics which have the dependence.
185UNREF_OBJ	/libc\.so\.1.*\ of\ .*kldap\.so\.1
186
187
188# Objects that used to contain system functionalty that has since
189# migrated to libc. We preserve these libraries as pure filters for
190# backward compatability but nothing needs to link to them.
191OLDDEP		libaio\.so\.1			# onnv build 44
192OLDDEP		libdl\.so\.1			# on10 build 49
193OLDDEP		libdoor\.so\.1			# onnv build 12
194OLDDEP		libintl\.so\.1			# on297 build 7
195OLDDEP		libpthread\.so\.1		# on10 build 53
196OLDDEP		librt\.so\.1			# onnv build 44
197OLDDEP		libsched\.so\.1			# on10 build 36
198OLDDEP		libthread\.so\.1		# on10 build 53
199OLDDEP		libw\.so\.1			# on297 build 7
200
201# Files for which we skip checking of duplicate addresses in the
202# symbol sort sections. Such exceptions should be rare --- most code will
203# not have duplicate addresses, since it takes assember or a "#pragma weak"
204# to do such aliasing in C. C++ is different: The compiler generates aliases
205# for implementation reasons, and the mangled names used to encode argument
206# and return value types are difficult to handle well in mapfiles.
207# Furthermore, the Sun compiler and gcc use different and incompatible
208# name mangling conventions. Since illumos must be buildable by either, we
209# would have to maintain two sets of mapfiles for each such object.
210# C++ use is rare in illumos, so this is not worth pursuing.
211#
212NOSYMSORT	opt/SUNWdtrt/tst/common/pid/tst.weak2.exe	# DTrace test
213NOSYMSORT	ld\.so\.1					# libc_pic.a user
214NOSYMSORT	usr/bin/audioconvert				# C++
215NOSYMSORT	usr/bin/make					# C++
216NOSYMSORT	usr/MACH(lib)/libsun_fc\.so\.1			# C++
217NOSYMSORT	usr/MACH(lib)/libfru\.so\.1			# C++
218NOSYMSORT	usr/lib/libnisdb\.so\.2				# C++
219
220# The majority of illumos deliverables should not depend on the GCC runtime
221# (any necessary runtime symbol should be provided by libc.so, instead).
222# However, the GNU C++ runtime requires the GCC runtime, so certain objects
223# must be excepted.
224FORBIDDEN	libgcc_s\.so
225FORBIDDEN_DEP	usr/bin/audioconvert            # C++
226FORBIDDEN_DEP   usr/bin/make                    # C++
227FORBIDDEN_DEP   usr/MACH(lib)/libfru.so.1       # C++
228FORBIDDEN_DEP   usr/MACH(lib)/libsun_fc.so.1    # C++
229FORBIDDEN_DEP   usr/lib/netsvc/yp/rpc.yppasswdd # C++
230FORBIDDEN_DEP   usr/lib/netsvc/yp/ypserv        # C++
231FORBIDDEN_DEP   usr/lib/netsvc/yp/ypxfr         # C++
232FORBIDDEN_DEP   usr/lib/netsvc/yp/ypxfrd        # C++
233
234# libfakekernel is a test environment, not intended for general use
235FORBIDDEN libfakekernel\.so
236FORBIDDEN_DEP opt/smbsrv-tests/tests/smb_sid/large_sids_kern
237FORBIDDEN_DEP opt/os-tests/tests/ksid/ksid.32
238FORBIDDEN_DEP opt/os-tests/tests/ksid/ksid.64
239FORBIDDEN_DEP usr/MACH(lib)/libzpool.so.1
240FORBIDDEN_DEP usr/bin/ztest
241FORBIDDEN_DEP usr/bin/raidz_test
242FORBIDDEN_DEP usr/lib/MACH(smbfs)/libfknsmb.so.1
243FORBIDDEN_DEP usr/lib/MACH(smbfs)/libfksmbfs.so.1
244FORBIDDEN_DEP usr/lib/MACH(smbsrv)/libfksmbsrv.so.1
245FORBIDDEN_DEP usr/lib/smbsrv/fksmbd
246FORBIDDEN_DEP usr/lib/smbsrv/test-decrypt
247FORBIDDEN_DEP usr/lib/smbsrv/test-encrypt
248FORBIDDEN_DEP usr/lib/smbsrv/test-msgbuf
249FORBIDDEN_DEP usr/lib/smbsrv/testoplock
250FORBIDDEN_DEP usr/sbin/zdb
251
252# libucb is intended for legacy compatibility, not general use
253FORBIDDEN libucb\.so
254FORBIDDEN_DEP usr/ucb/
255FORBIDDEN_DEP usr/ucblib/
256
257# Older versions of libraries only provided for binary compatibility
258FORBIDDEN libm\.so\.1
259FORBIDDEN libresolv\.so\.1
260FORBIDDEN libxcurses\.so\.1
261
262#
263# the SUNWonld directory contains built versions of demos, built only to
264# ensure their correctness.
265#
266EXEC_STACK	^opt/SUNWonld
267EXEC_DATA	^opt/SUNWonld
268NODIRECT	^opt/SUNWonld
269
270#
271# Closed binaries have an old mcs comment mentioning SunOS rather than
272# illumos.  These comments are not generated as part of the build, and
273# it seems wrong to rewrite them; ignore them instead.
274#
275NO_COMMENT	^usr/bin/pax
276NO_COMMENT	^usr/lib/amd64/libike\.so\.1
277NO_COMMENT	^usr/lib/fwflash/verify/ses-SUN\.so
278NO_COMMENT	^usr/lib/inet/amd64/in\.iked
279NO_COMMENT	^usr/lib/inet/certdb
280NO_COMMENT	^usr/lib/inet/certlocal
281NO_COMMENT	^usr/lib/inet/certrldb
282NO_COMMENT	^usr/lib/labeld
283NO_COMMENT	^usr/lib/libike\.so\.1
284NO_COMMENT	^usr/lib/mdb/kvm/amd64/mpt\.so
285NO_COMMENT	^usr/lib/mdb/kvm/amd64/nfs\.so
286NO_COMMENT	^usr/lib/raidcfg/amd64/mpt\.so\.1
287NO_COMMENT	^usr/lib/raidcfg/mpt\.so\.1
288NO_COMMENT	^usr/sbin/chk_encodings
289NO_COMMENT	^usr/xpg4/bin/more
290NO_COMMENT	^kernel/drv/amd64/acpi_toshiba
291NO_COMMENT	^kernel/drv/amd64/adpu320
292NO_COMMENT	^kernel/drv/amd64/atiatom
293NO_COMMENT	^kernel/drv/amd64/bcm_sata
294NO_COMMENT	^kernel/drv/amd64/glm
295NO_COMMENT	^kernel/drv/amd64/intel_nhmex
296NO_COMMENT	^kernel/drv/amd64/ixgb
297NO_COMMENT	^kernel/drv/amd64/lsimega
298NO_COMMENT	^kernel/drv/amd64/marvell88sx
299NO_COMMENT	^kernel/drv/amd64/mpt
300NO_COMMENT	^kernel/drv/amd64/sdpib
301NO_COMMENT	^kernel/drv/amd64/usbser_edge
302NO_COMMENT	^kernel/kmdb/amd64/mpt
303NO_COMMENT	^kernel/kmdb/amd64/nfs
304NO_COMMENT	^kernel/misc/scsi_vhci/amd64/scsi_vhci_f_asym_emc
305NO_COMMENT	^kernel/misc/scsi_vhci/amd64/scsi_vhci_f_asym_lsi
306NO_COMMENT	^kernel/misc/scsi_vhci/amd64/scsi_vhci_f_sym_emc
307NO_COMMENT	^kernel/strmod/amd64/sdpib
308NO_COMMENT	^platform/i86pc/kernel/cpu/amd64/cpu_ms\.GenuineIntel\.6\.46
309NO_COMMENT	^platform/i86pc/kernel/cpu/amd64/cpu_ms\.GenuineIntel\.6\.47
310
311# ath contains a binary HAL component which contains an incorrect .comment
312# section and has a license which forbids modification.
313NO_COMMENT	^kernel/drv/amd64/ath
314
315# mdb standalone library versions which are neither delivered nor are real
316# shared objects
317NO_COMMENT	^usr/lib/amd64/libstanddisasm\.so
318NO_COMMENT	^usr/lib/amd64/libstandsaveargs\.so
319NO_COMMENT	^usr/lib/amd64/libstanddisasm\.so
320NO_COMMENT	^usr/lib/libstanddisasm\.so
321
322# closed binaries predate -ztype=kmod
323NOT_KMOD	^kernel/drv/amd64/acpi_toshiba
324NOT_KMOD	^kernel/drv/amd64/adpu320
325NOT_KMOD	^kernel/drv/amd64/atiatom
326NOT_KMOD	^kernel/drv/amd64/bcm_sata
327NOT_KMOD	^kernel/drv/amd64/glm
328NOT_KMOD	^kernel/drv/amd64/intel_nhmex
329NOT_KMOD	^kernel/drv/amd64/ixgb
330NOT_KMOD	^kernel/drv/amd64/lsimega
331NOT_KMOD	^kernel/drv/amd64/marvell88sx
332NOT_KMOD	^kernel/drv/amd64/mpt
333NOT_KMOD	^kernel/drv/amd64/sdpib
334NOT_KMOD	^kernel/drv/amd64/usbser_edge
335NOT_KMOD	^kernel/kmdb/amd64/mpt
336NOT_KMOD	^kernel/kmdb/amd64/nfs
337NOT_KMOD	^kernel/misc/scsi_vhci/amd64/scsi_vhci_f_asym_emc
338NOT_KMOD	^kernel/misc/scsi_vhci/amd64/scsi_vhci_f_asym_lsi
339NOT_KMOD	^kernel/misc/scsi_vhci/amd64/scsi_vhci_f_sym_emc
340NOT_KMOD	^kernel/strmod/amd64/sdpib
341NOT_KMOD	^platform/i86pc/kernel/cpu/amd64/cpu_ms\.GenuineIntel\.6\.46
342NOT_KMOD	^platform/i86pc/kernel/cpu/amd64/cpu_ms\.GenuineIntel\.6\.47
343