update

Author: litecreator

CHANGELOG.md

@@ -112,7 +112,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
     - MOVW `UABS` / `SABS` / `PREL` families
     - starter TLS instruction-form relocation ID support (`TLSGD`, `TLSLD`, `TLSDESC`) with strict unsupported apply-path handling for non-implemented descriptor semantics
     - host-runtime-backed AArch64 TLS data relocation values for `TLS_DTPMOD`, `TLS_DTPREL`, and `TLS_TPREL` in non-shared links using deterministic TLS layout metadata
+    - AArch64 TLSLE/TLSLD low12 offset instruction relocations (`ADD`/`LDST64`/`LDST128`) now route through host-runtime TLS offset helpers in non-shared links
   - host runtime shared-object ingestion now returns `ERR_INVALID_FORMAT` for unknown/unsupported shared-object payloads instead of silently succeeding
+  - host runtime shared-object symbol ingest now validates target/ABI compatibility and shared-file kind before symbol ingestion (`ELF ET_DYN`, Windows PE DLL/COFF machine, Mach-O dylib CPU type)
 
 ### Changed
 
@@ -129,6 +131,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Host linker-script runtime no longer silently accepts unknown linker-script directives.
 - Host linker compatibility/no-op flag handling now surfaces diagnostics instead of silent acceptance.
 - Dust-built linker relocation parsing/validation now accepts and processes a broader AArch64 ELF relocation set (including MOVW and TLS starter forms) instead of rejecting them during ingest.
+- Dust-built linker relocation apply path no longer blanket-rejects all AArch64 TLS instruction-family relocations; TLSLE/TLSLD low12 offset forms now apply in non-shared links via host TLS offset helpers.
+- Host shared-object symbol ingest no longer accepts cross-target or wrong-kind binaries as valid shared inputs during symbol-ingest resolution.
 
 ## [0.1.0] - 2026-02-12
 

Cargo.lock

@@ -50,7 +50,9 @@ This repository contains:
     - starter TLS relocation families:
       - instruction/descriptor forms (`TLSGD`, `TLSLD`, `TLSDESC`) recognized/validated with strict `ERR_NOT_IMPLEMENTED_YET` application for unsupported TLS descriptor semantics
       - data relocs (`TLS_DTPMOD` / `TLS_DTPREL` / `TLS_TPREL`) use host-runtime TLS layout metadata helpers for non-shared links
+      - TLSLE/TLSLD low12 offset instruction forms (`*_ADD_*_LO12_NC`, `*_LDST64_*_LO12_NC`, `*_LDST128_*_LO12_NC`) now reuse host-runtime TLS offset helpers in non-shared links
   - host runtime shared-object symbol ingest now returns `ERR_INVALID_FORMAT` for unknown/unsupported shared object payloads (no silent success on unknown format)
+  - host runtime shared-object symbol ingest now validates target/ABI compatibility and shared-file kind before symbol ingest (ELF `ET_DYN`, Windows PE DLL/COFF machine, Mach-O dylib CPU type)
   - architecture-correct output header stamping in ELF/PE/Mach-O writers based on resolved target
   - real PE compatibility-state wiring for `/NOENTRY`, `/DYNAMICBASE`, `/NXCOMPAT`, `/LARGEADDRESSAWARE`
   - broader soft-compatibility handling for common ld/lld/lld-link metadata/profiling flag families (`--warn-*`, `--time-trace*`, `--lto-*`, `/GUARD:*`, `/TIMESTAMP:*`, `/MERGE:*`, `/SECTION:*`)

README.md

@@ -99,8 +99,10 @@ const OBJECT_FORMAT_MACHO64: u32 = 3;
 const COFF_MACHINE_X86_64: u16 = 0x8664;
 const COFF_MACHINE_X86: u16 = 0x14c;
 const COFF_MACHINE_AARCH64: u16 = 0xaa64;
+const IMAGE_FILE_DLL: u16 = 0x2000;
 const MACH_CPU_X86_64: u32 = 0x0100_0007;
 const MACH_CPU_ARM64: u32 = 0x0100_000c;
+const MH_DYLIB: u32 = 0x6;
 
 const R_X86_64_NONE: u32 = 0;
 const R_X86_64_64: u32 = 1;
@@ -3067,6 +3069,23 @@ fn ingest_shared_elf_symbols(state: &mut LinkerState, raw: &[u8]) -> u32 {
     if raw.get(4).copied().unwrap_or(0) != 2 || raw.get(5).copied().unwrap_or(0) != 1 {
         return ERR_INVALID_FORMAT;
     }
+    if target_is_windows(state.target) || target_is_macos(state.target) {
+        return ERR_UNSUPPORTED_TARGET;
+    }
+    let e_type = match read_u16_le_at(raw, 16) {
+        Some(v) => v,
+        None => return ERR_INVALID_FORMAT,
+    };
+    if e_type != ET_DYN {
+        return ERR_INVALID_FORMAT;
+    }
+    let e_machine = match read_u16_le_at(raw, 18) {
+        Some(v) => v,
+        None => return ERR_INVALID_FORMAT,
+    };
+    if e_machine != target_elf_machine(state.target) {
+        return ERR_UNSUPPORTED_TARGET;
+    }
 
     let shoff = match read_u64_le_at(raw, 40) {
         Some(v) => v as usize,
@@ -3178,6 +3197,9 @@ fn ingest_shared_pe_symbols(state: &mut LinkerState, raw: &[u8]) -> u32 {
     if raw.len() < 0x40 || raw.get(0).copied() != Some(b'M') || raw.get(1).copied() != Some(b'Z') {
         return ERR_INVALID_FORMAT;
     }
+    if !target_is_windows(state.target) {
+        return ERR_UNSUPPORTED_TARGET;
+    }
     let pe_offset = match read_u32_le_at(raw, 0x3c) {
         Some(v) => v as usize,
         None => return ERR_INVALID_FORMAT,
@@ -3190,6 +3212,13 @@ fn ingest_shared_pe_symbols(state: &mut LinkerState, raw: &[u8]) -> u32 {
     }
 
     let coff_off = pe_offset + 4;
+    let machine = match read_u16_le_at(raw, coff_off) {
+        Some(v) => v,
+        None => return ERR_INVALID_FORMAT,
+    };
+    if machine != target_pe_machine(state.target) {
+        return ERR_UNSUPPORTED_TARGET;
+    }
     let section_count = match read_u16_le_at(raw, coff_off + 2) {
         Some(v) => v as usize,
         None => return ERR_INVALID_FORMAT,
@@ -3202,6 +3231,13 @@ fn ingest_shared_pe_symbols(state: &mut LinkerState, raw: &[u8]) -> u32 {
     if optional_off + optional_size > raw.len() {
         return ERR_INVALID_FORMAT;
     }
+    let characteristics = match read_u16_le_at(raw, coff_off + 18) {
+        Some(v) => v,
+        None => return ERR_INVALID_FORMAT,
+    };
+    if characteristics & IMAGE_FILE_DLL == 0 {
+        return ERR_INVALID_FORMAT;
+    }
 
     let magic = match read_u16_le_at(raw, optional_off) {
         Some(v) => v,
@@ -3282,13 +3318,19 @@ fn ingest_shared_coff_symbols(state: &mut LinkerState, raw: &[u8]) -> u32 {
     if raw.len() < 20 {
         return ERR_INVALID_FORMAT;
     }
+    if !target_is_windows(state.target) {
+        return ERR_UNSUPPORTED_TARGET;
+    }
     let machine = match read_u16_le_at(raw, 0) {
         Some(v) => v,
         None => return ERR_INVALID_FORMAT,
     };
     if machine != COFF_MACHINE_X86_64 && machine != COFF_MACHINE_AARCH64 {
         return ERR_UNSUPPORTED_TARGET;
     }
+    if machine != target_pe_machine(state.target) {
+        return ERR_UNSUPPORTED_TARGET;
+    }
     let ptr_symtab = match read_u32_le_at(raw, 8) {
         Some(v) => v as usize,
         None => return ERR_INVALID_FORMAT,
@@ -3345,6 +3387,9 @@ fn ingest_shared_macho_symbols(state: &mut LinkerState, raw: &[u8]) -> u32 {
     if raw.len() < 32 {
         return ERR_INVALID_FORMAT;
     }
+    if !target_is_macos(state.target) {
+        return ERR_UNSUPPORTED_TARGET;
+    }
     let magic = match read_u32_le_at(raw, 0) {
         Some(v) => v,
         None => return ERR_INVALID_FORMAT,
@@ -3360,6 +3405,17 @@ fn ingest_shared_macho_symbols(state: &mut LinkerState, raw: &[u8]) -> u32 {
     if cpu_type != MACH_CPU_X86_64 && cpu_type != MACH_CPU_ARM64 {
         return ERR_UNSUPPORTED_TARGET;
     }
+    let (target_cpu_type, _) = target_macho_cpu_type(state.target);
+    if cpu_type != target_cpu_type {
+        return ERR_UNSUPPORTED_TARGET;
+    }
+    let file_type = match read_u32_le_at(raw, 12) {
+        Some(v) => v,
+        None => return ERR_INVALID_FORMAT,
+    };
+    if file_type != MH_DYLIB {
+        return ERR_INVALID_FORMAT;
+    }
 
     let ncmds = match read_u32_le_at(raw, 16) {
         Some(v) => v as usize,

crates/dust_codegen/src/host_runtime_shim.rs

@@ -26,7 +26,7 @@ The following existing files remain part of the repository history and analysis
 ## Release Notes
 
 Compiler change history is tracked in `../CHANGELOG.md`.
-Recent host-link/runtime parity work for Dust-built tooling is summarized in `status_and_limitations.md`, including stricter linker-script semantics, expanded target alias coverage, compatibility-state behavior wiring, and newer AArch64 ELF relocation/TLS starter coverage used by Dust-built `dustlink`.
+Recent host-link/runtime parity work for Dust-built tooling is summarized in `status_and_limitations.md`, including stricter linker-script semantics, expanded target alias coverage, compatibility-state behavior wiring, newer AArch64 ELF relocation/TLS coverage (including TLSLE/TLSLD low12 offset forms), and stricter shared-object target/ABI validation used by Dust-built `dustlink`.
 
 ## Normative Language Reference
 

docs/README.md

@@ -37,6 +37,7 @@
   - MOVW `UABS` / `SABS` / `PREL` families
   - starter TLS instruction/data relocations for `TLSGD` / `TLSLD` / `TLSDESC` plus `TLS_DTPMOD` / `TLS_DTPREL` / `TLS_TPREL`
 - host linker runtime now computes AArch64 TLS data relocation values (`TLS_DTPMOD`, `TLS_DTPREL`, `TLS_TPREL`) for non-shared links using a deterministic synthesized TLS layout derived from object TLS sections
+- Dust linker relocation apply path now also supports AArch64 TLSLE/TLSLD low12 offset instruction relocations (`ADD`/`LDST64`/`LDST128`) in non-shared links by reusing host-runtime TLS offset helpers
 - host linker output writers now emit architecture-correct machine/cpu identifiers for ELF/PE/Mach-O outputs
 - host linker PE output now applies `/NOENTRY`, `/DYNAMICBASE`, `/NXCOMPAT`, and `/LARGEADDRESSAWARE` to emitted header fields (entrypoint/characteristics)
 - host linker compatibility handling now includes broader soft-compatibility ld/lld/lld-link families (`--warn-*`, `--time-trace*`, `--lto-*`, `/GUARD:*`, `/TIMESTAMP:*`, `/MERGE:*`, `/SECTION:*`)
@@ -54,8 +55,11 @@
   - `--emit-relocs` (map-row relocation reporting)
   - `--print-gc-sections` (GC drop diagnostics)
 - host object ingestion now uses refined machine-aware COFF and Mach-O relocation-kind mapping during relocation record ingestion
+- host shared-object symbol ingest now enforces target/ABI/file-kind checks before symbol ingestion (`ELF ET_DYN` + target machine, Windows PE DLL/COFF machine, Mach-O dylib target CPU)
 - full AArch64 ELF TLS descriptor / TLS instruction-family semantics are not complete yet (current coverage includes ingest/validation, bitfield patching for non-TLS instruction forms, and host-backed TLS data reloc math, but not exhaustive TLSDESC/GOT/TLS relaxation behavior parity)
+- AArch64 TLS instruction-family coverage is still partial: TLSLE/TLSLD low12 offset forms now apply in non-shared links, but TLSDESC/TLSGD/TLSLD descriptor-sequence semantics and relaxations remain incomplete
 - shared-object handling remains primarily symbol-ingest oriented rather than full dynamic-linker semantic parity (though unknown shared-object formats now fail instead of silently succeeding)
+- shared-object handling remains primarily symbol-ingest oriented rather than full dynamic-linker semantic parity (now with stricter target/ABI/file-kind rejection before ingest)
 
 ## Important Mismatches to Track