|
@@ -668,6 +668,28 @@ void ipc64_perm_to_ipc_perm (struct ipc64_perm *in, struct ipc_perm *out)
|
|
|
out->seq = in->seq;
|
|
|
}
|
|
|
|
|
|
+/**
|
|
|
+ * ipc_obtain_object
|
|
|
+ * @ids: ipc identifier set
|
|
|
+ * @id: ipc id to look for
|
|
|
+ *
|
|
|
+ * Look for an id in the ipc ids idr and return associated ipc object.
|
|
|
+ *
|
|
|
+ * Call inside the RCU critical section.
|
|
|
+ * The ipc object is *not* locked on exit.
|
|
|
+ */
|
|
|
+struct kern_ipc_perm *ipc_obtain_object(struct ipc_ids *ids, int id)
|
|
|
+{
|
|
|
+ struct kern_ipc_perm *out;
|
|
|
+ int lid = ipcid_to_idx(id);
|
|
|
+
|
|
|
+ out = idr_find(&ids->ipcs_idr, lid);
|
|
|
+ if (!out)
|
|
|
+ return ERR_PTR(-EINVAL);
|
|
|
+
|
|
|
+ return out;
|
|
|
+}
|
|
|
+
|
|
|
/**
|
|
|
* ipc_lock - Lock an ipc structure without rw_mutex held
|
|
|
* @ids: IPC identifier set
|
|
@@ -675,32 +697,53 @@ void ipc64_perm_to_ipc_perm (struct ipc64_perm *in, struct ipc_perm *out)
|
|
|
*
|
|
|
* Look for an id in the ipc ids idr and lock the associated ipc object.
|
|
|
*
|
|
|
- * The ipc object is locked on exit.
|
|
|
+ * The ipc object is locked on successful exit.
|
|
|
*/
|
|
|
-
|
|
|
struct kern_ipc_perm *ipc_lock(struct ipc_ids *ids, int id)
|
|
|
{
|
|
|
struct kern_ipc_perm *out;
|
|
|
- int lid = ipcid_to_idx(id);
|
|
|
|
|
|
rcu_read_lock();
|
|
|
- out = idr_find(&ids->ipcs_idr, lid);
|
|
|
- if (out == NULL) {
|
|
|
- rcu_read_unlock();
|
|
|
- return ERR_PTR(-EINVAL);
|
|
|
- }
|
|
|
+ out = ipc_obtain_object(ids, id);
|
|
|
+ if (IS_ERR(out))
|
|
|
+ goto err1;
|
|
|
|
|
|
spin_lock(&out->lock);
|
|
|
-
|
|
|
+
|
|
|
/* ipc_rmid() may have already freed the ID while ipc_lock
|
|
|
* was spinning: here verify that the structure is still valid
|
|
|
*/
|
|
|
- if (out->deleted) {
|
|
|
- spin_unlock(&out->lock);
|
|
|
- rcu_read_unlock();
|
|
|
- return ERR_PTR(-EINVAL);
|
|
|
- }
|
|
|
+ if (!out->deleted)
|
|
|
+ return out;
|
|
|
|
|
|
+ spin_unlock(&out->lock);
|
|
|
+ out = ERR_PTR(-EINVAL);
|
|
|
+err1:
|
|
|
+ rcu_read_unlock();
|
|
|
+ return out;
|
|
|
+}
|
|
|
+
|
|
|
+/**
|
|
|
+ * ipc_obtain_object_check
|
|
|
+ * @ids: ipc identifier set
|
|
|
+ * @id: ipc id to look for
|
|
|
+ *
|
|
|
+ * Similar to ipc_obtain_object() but also checks
|
|
|
+ * the ipc object reference counter.
|
|
|
+ *
|
|
|
+ * Call inside the RCU critical section.
|
|
|
+ * The ipc object is *not* locked on exit.
|
|
|
+ */
|
|
|
+struct kern_ipc_perm *ipc_obtain_object_check(struct ipc_ids *ids, int id)
|
|
|
+{
|
|
|
+ struct kern_ipc_perm *out = ipc_obtain_object(ids, id);
|
|
|
+
|
|
|
+ if (IS_ERR(out))
|
|
|
+ goto out;
|
|
|
+
|
|
|
+ if (ipc_checkid(out, id))
|
|
|
+ return ERR_PTR(-EIDRM);
|
|
|
+out:
|
|
|
return out;
|
|
|
}
|
|
|
|