compat.c 45 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809
  1. /*
  2. * linux/fs/compat.c
  3. *
  4. * Kernel compatibililty routines for e.g. 32 bit syscall support
  5. * on 64 bit kernels.
  6. *
  7. * Copyright (C) 2002 Stephen Rothwell, IBM Corporation
  8. * Copyright (C) 1997-2000 Jakub Jelinek (jakub@redhat.com)
  9. * Copyright (C) 1998 Eddie C. Dost (ecd@skynet.be)
  10. * Copyright (C) 2001,2002 Andi Kleen, SuSE Labs
  11. * Copyright (C) 2003 Pavel Machek (pavel@ucw.cz)
  12. *
  13. * This program is free software; you can redistribute it and/or modify
  14. * it under the terms of the GNU General Public License version 2 as
  15. * published by the Free Software Foundation.
  16. */
  17. #include <linux/stddef.h>
  18. #include <linux/kernel.h>
  19. #include <linux/linkage.h>
  20. #include <linux/compat.h>
  21. #include <linux/errno.h>
  22. #include <linux/time.h>
  23. #include <linux/fs.h>
  24. #include <linux/fcntl.h>
  25. #include <linux/namei.h>
  26. #include <linux/file.h>
  27. #include <linux/fdtable.h>
  28. #include <linux/vfs.h>
  29. #include <linux/ioctl.h>
  30. #include <linux/init.h>
  31. #include <linux/ncp_mount.h>
  32. #include <linux/nfs4_mount.h>
  33. #include <linux/syscalls.h>
  34. #include <linux/ctype.h>
  35. #include <linux/module.h>
  36. #include <linux/dirent.h>
  37. #include <linux/fsnotify.h>
  38. #include <linux/highuid.h>
  39. #include <linux/personality.h>
  40. #include <linux/rwsem.h>
  41. #include <linux/tsacct_kern.h>
  42. #include <linux/security.h>
  43. #include <linux/highmem.h>
  44. #include <linux/signal.h>
  45. #include <linux/poll.h>
  46. #include <linux/mm.h>
  47. #include <linux/eventpoll.h>
  48. #include <linux/fs_struct.h>
  49. #include <linux/slab.h>
  50. #include <linux/pagemap.h>
  51. #include <asm/uaccess.h>
  52. #include <asm/mmu_context.h>
  53. #include <asm/ioctls.h>
  54. #include "internal.h"
  55. int compat_log = 1;
  56. int compat_printk(const char *fmt, ...)
  57. {
  58. va_list ap;
  59. int ret;
  60. if (!compat_log)
  61. return 0;
  62. va_start(ap, fmt);
  63. ret = vprintk(fmt, ap);
  64. va_end(ap);
  65. return ret;
  66. }
  67. #include "read_write.h"
  68. /*
  69. * Not all architectures have sys_utime, so implement this in terms
  70. * of sys_utimes.
  71. */
  72. asmlinkage long compat_sys_utime(const char __user *filename,
  73. struct compat_utimbuf __user *t)
  74. {
  75. struct timespec tv[2];
  76. if (t) {
  77. if (get_user(tv[0].tv_sec, &t->actime) ||
  78. get_user(tv[1].tv_sec, &t->modtime))
  79. return -EFAULT;
  80. tv[0].tv_nsec = 0;
  81. tv[1].tv_nsec = 0;
  82. }
  83. return do_utimes(AT_FDCWD, filename, t ? tv : NULL, 0);
  84. }
  85. asmlinkage long compat_sys_utimensat(unsigned int dfd, const char __user *filename, struct compat_timespec __user *t, int flags)
  86. {
  87. struct timespec tv[2];
  88. if (t) {
  89. if (get_compat_timespec(&tv[0], &t[0]) ||
  90. get_compat_timespec(&tv[1], &t[1]))
  91. return -EFAULT;
  92. if (tv[0].tv_nsec == UTIME_OMIT && tv[1].tv_nsec == UTIME_OMIT)
  93. return 0;
  94. }
  95. return do_utimes(dfd, filename, t ? tv : NULL, flags);
  96. }
  97. asmlinkage long compat_sys_futimesat(unsigned int dfd, const char __user *filename, struct compat_timeval __user *t)
  98. {
  99. struct timespec tv[2];
  100. if (t) {
  101. if (get_user(tv[0].tv_sec, &t[0].tv_sec) ||
  102. get_user(tv[0].tv_nsec, &t[0].tv_usec) ||
  103. get_user(tv[1].tv_sec, &t[1].tv_sec) ||
  104. get_user(tv[1].tv_nsec, &t[1].tv_usec))
  105. return -EFAULT;
  106. if (tv[0].tv_nsec >= 1000000 || tv[0].tv_nsec < 0 ||
  107. tv[1].tv_nsec >= 1000000 || tv[1].tv_nsec < 0)
  108. return -EINVAL;
  109. tv[0].tv_nsec *= 1000;
  110. tv[1].tv_nsec *= 1000;
  111. }
  112. return do_utimes(dfd, filename, t ? tv : NULL, 0);
  113. }
  114. asmlinkage long compat_sys_utimes(const char __user *filename, struct compat_timeval __user *t)
  115. {
  116. return compat_sys_futimesat(AT_FDCWD, filename, t);
  117. }
  118. static int cp_compat_stat(struct kstat *stat, struct compat_stat __user *ubuf)
  119. {
  120. compat_ino_t ino = stat->ino;
  121. typeof(ubuf->st_uid) uid = 0;
  122. typeof(ubuf->st_gid) gid = 0;
  123. int err;
  124. SET_UID(uid, stat->uid);
  125. SET_GID(gid, stat->gid);
  126. if ((u64) stat->size > MAX_NON_LFS ||
  127. !old_valid_dev(stat->dev) ||
  128. !old_valid_dev(stat->rdev))
  129. return -EOVERFLOW;
  130. if (sizeof(ino) < sizeof(stat->ino) && ino != stat->ino)
  131. return -EOVERFLOW;
  132. if (clear_user(ubuf, sizeof(*ubuf)))
  133. return -EFAULT;
  134. err = __put_user(old_encode_dev(stat->dev), &ubuf->st_dev);
  135. err |= __put_user(ino, &ubuf->st_ino);
  136. err |= __put_user(stat->mode, &ubuf->st_mode);
  137. err |= __put_user(stat->nlink, &ubuf->st_nlink);
  138. err |= __put_user(uid, &ubuf->st_uid);
  139. err |= __put_user(gid, &ubuf->st_gid);
  140. err |= __put_user(old_encode_dev(stat->rdev), &ubuf->st_rdev);
  141. err |= __put_user(stat->size, &ubuf->st_size);
  142. err |= __put_user(stat->atime.tv_sec, &ubuf->st_atime);
  143. err |= __put_user(stat->atime.tv_nsec, &ubuf->st_atime_nsec);
  144. err |= __put_user(stat->mtime.tv_sec, &ubuf->st_mtime);
  145. err |= __put_user(stat->mtime.tv_nsec, &ubuf->st_mtime_nsec);
  146. err |= __put_user(stat->ctime.tv_sec, &ubuf->st_ctime);
  147. err |= __put_user(stat->ctime.tv_nsec, &ubuf->st_ctime_nsec);
  148. err |= __put_user(stat->blksize, &ubuf->st_blksize);
  149. err |= __put_user(stat->blocks, &ubuf->st_blocks);
  150. return err;
  151. }
  152. asmlinkage long compat_sys_newstat(const char __user * filename,
  153. struct compat_stat __user *statbuf)
  154. {
  155. struct kstat stat;
  156. int error;
  157. error = vfs_stat(filename, &stat);
  158. if (error)
  159. return error;
  160. return cp_compat_stat(&stat, statbuf);
  161. }
  162. asmlinkage long compat_sys_newlstat(const char __user * filename,
  163. struct compat_stat __user *statbuf)
  164. {
  165. struct kstat stat;
  166. int error;
  167. error = vfs_lstat(filename, &stat);
  168. if (error)
  169. return error;
  170. return cp_compat_stat(&stat, statbuf);
  171. }
  172. #ifndef __ARCH_WANT_STAT64
  173. asmlinkage long compat_sys_newfstatat(unsigned int dfd,
  174. const char __user *filename,
  175. struct compat_stat __user *statbuf, int flag)
  176. {
  177. struct kstat stat;
  178. int error;
  179. error = vfs_fstatat(dfd, filename, &stat, flag);
  180. if (error)
  181. return error;
  182. return cp_compat_stat(&stat, statbuf);
  183. }
  184. #endif
  185. asmlinkage long compat_sys_newfstat(unsigned int fd,
  186. struct compat_stat __user * statbuf)
  187. {
  188. struct kstat stat;
  189. int error = vfs_fstat(fd, &stat);
  190. if (!error)
  191. error = cp_compat_stat(&stat, statbuf);
  192. return error;
  193. }
  194. static int put_compat_statfs(struct compat_statfs __user *ubuf, struct kstatfs *kbuf)
  195. {
  196. if (sizeof ubuf->f_blocks == 4) {
  197. if ((kbuf->f_blocks | kbuf->f_bfree | kbuf->f_bavail |
  198. kbuf->f_bsize | kbuf->f_frsize) & 0xffffffff00000000ULL)
  199. return -EOVERFLOW;
  200. /* f_files and f_ffree may be -1; it's okay
  201. * to stuff that into 32 bits */
  202. if (kbuf->f_files != 0xffffffffffffffffULL
  203. && (kbuf->f_files & 0xffffffff00000000ULL))
  204. return -EOVERFLOW;
  205. if (kbuf->f_ffree != 0xffffffffffffffffULL
  206. && (kbuf->f_ffree & 0xffffffff00000000ULL))
  207. return -EOVERFLOW;
  208. }
  209. if (!access_ok(VERIFY_WRITE, ubuf, sizeof(*ubuf)) ||
  210. __put_user(kbuf->f_type, &ubuf->f_type) ||
  211. __put_user(kbuf->f_bsize, &ubuf->f_bsize) ||
  212. __put_user(kbuf->f_blocks, &ubuf->f_blocks) ||
  213. __put_user(kbuf->f_bfree, &ubuf->f_bfree) ||
  214. __put_user(kbuf->f_bavail, &ubuf->f_bavail) ||
  215. __put_user(kbuf->f_files, &ubuf->f_files) ||
  216. __put_user(kbuf->f_ffree, &ubuf->f_ffree) ||
  217. __put_user(kbuf->f_namelen, &ubuf->f_namelen) ||
  218. __put_user(kbuf->f_fsid.val[0], &ubuf->f_fsid.val[0]) ||
  219. __put_user(kbuf->f_fsid.val[1], &ubuf->f_fsid.val[1]) ||
  220. __put_user(kbuf->f_frsize, &ubuf->f_frsize) ||
  221. __put_user(0, &ubuf->f_spare[0]) ||
  222. __put_user(0, &ubuf->f_spare[1]) ||
  223. __put_user(0, &ubuf->f_spare[2]) ||
  224. __put_user(0, &ubuf->f_spare[3]) ||
  225. __put_user(0, &ubuf->f_spare[4]))
  226. return -EFAULT;
  227. return 0;
  228. }
  229. /*
  230. * The following statfs calls are copies of code from fs/statfs.c and
  231. * should be checked against those from time to time
  232. */
  233. asmlinkage long compat_sys_statfs(const char __user *pathname, struct compat_statfs __user *buf)
  234. {
  235. struct kstatfs tmp;
  236. int error = user_statfs(pathname, &tmp);
  237. if (!error)
  238. error = put_compat_statfs(buf, &tmp);
  239. return error;
  240. }
  241. asmlinkage long compat_sys_fstatfs(unsigned int fd, struct compat_statfs __user *buf)
  242. {
  243. struct kstatfs tmp;
  244. int error = fd_statfs(fd, &tmp);
  245. if (!error)
  246. error = put_compat_statfs(buf, &tmp);
  247. return error;
  248. }
  249. static int put_compat_statfs64(struct compat_statfs64 __user *ubuf, struct kstatfs *kbuf)
  250. {
  251. if (sizeof ubuf->f_blocks == 4) {
  252. if ((kbuf->f_blocks | kbuf->f_bfree | kbuf->f_bavail |
  253. kbuf->f_bsize | kbuf->f_frsize) & 0xffffffff00000000ULL)
  254. return -EOVERFLOW;
  255. /* f_files and f_ffree may be -1; it's okay
  256. * to stuff that into 32 bits */
  257. if (kbuf->f_files != 0xffffffffffffffffULL
  258. && (kbuf->f_files & 0xffffffff00000000ULL))
  259. return -EOVERFLOW;
  260. if (kbuf->f_ffree != 0xffffffffffffffffULL
  261. && (kbuf->f_ffree & 0xffffffff00000000ULL))
  262. return -EOVERFLOW;
  263. }
  264. if (!access_ok(VERIFY_WRITE, ubuf, sizeof(*ubuf)) ||
  265. __put_user(kbuf->f_type, &ubuf->f_type) ||
  266. __put_user(kbuf->f_bsize, &ubuf->f_bsize) ||
  267. __put_user(kbuf->f_blocks, &ubuf->f_blocks) ||
  268. __put_user(kbuf->f_bfree, &ubuf->f_bfree) ||
  269. __put_user(kbuf->f_bavail, &ubuf->f_bavail) ||
  270. __put_user(kbuf->f_files, &ubuf->f_files) ||
  271. __put_user(kbuf->f_ffree, &ubuf->f_ffree) ||
  272. __put_user(kbuf->f_namelen, &ubuf->f_namelen) ||
  273. __put_user(kbuf->f_fsid.val[0], &ubuf->f_fsid.val[0]) ||
  274. __put_user(kbuf->f_fsid.val[1], &ubuf->f_fsid.val[1]) ||
  275. __put_user(kbuf->f_frsize, &ubuf->f_frsize) ||
  276. __put_user(kbuf->f_flags, &ubuf->f_flags) ||
  277. __clear_user(ubuf->f_spare, sizeof(ubuf->f_spare)))
  278. return -EFAULT;
  279. return 0;
  280. }
  281. asmlinkage long compat_sys_statfs64(const char __user *pathname, compat_size_t sz, struct compat_statfs64 __user *buf)
  282. {
  283. struct kstatfs tmp;
  284. int error;
  285. if (sz != sizeof(*buf))
  286. return -EINVAL;
  287. error = user_statfs(pathname, &tmp);
  288. if (!error)
  289. error = put_compat_statfs64(buf, &tmp);
  290. return error;
  291. }
  292. asmlinkage long compat_sys_fstatfs64(unsigned int fd, compat_size_t sz, struct compat_statfs64 __user *buf)
  293. {
  294. struct kstatfs tmp;
  295. int error;
  296. if (sz != sizeof(*buf))
  297. return -EINVAL;
  298. error = fd_statfs(fd, &tmp);
  299. if (!error)
  300. error = put_compat_statfs64(buf, &tmp);
  301. return error;
  302. }
  303. /*
  304. * This is a copy of sys_ustat, just dealing with a structure layout.
  305. * Given how simple this syscall is that apporach is more maintainable
  306. * than the various conversion hacks.
  307. */
  308. asmlinkage long compat_sys_ustat(unsigned dev, struct compat_ustat __user *u)
  309. {
  310. struct super_block *sb;
  311. struct compat_ustat tmp;
  312. struct kstatfs sbuf;
  313. int err;
  314. sb = user_get_super(new_decode_dev(dev));
  315. if (!sb)
  316. return -EINVAL;
  317. err = statfs_by_dentry(sb->s_root, &sbuf);
  318. drop_super(sb);
  319. if (err)
  320. return err;
  321. memset(&tmp, 0, sizeof(struct compat_ustat));
  322. tmp.f_tfree = sbuf.f_bfree;
  323. tmp.f_tinode = sbuf.f_ffree;
  324. if (copy_to_user(u, &tmp, sizeof(struct compat_ustat)))
  325. return -EFAULT;
  326. return 0;
  327. }
  328. static int get_compat_flock(struct flock *kfl, struct compat_flock __user *ufl)
  329. {
  330. if (!access_ok(VERIFY_READ, ufl, sizeof(*ufl)) ||
  331. __get_user(kfl->l_type, &ufl->l_type) ||
  332. __get_user(kfl->l_whence, &ufl->l_whence) ||
  333. __get_user(kfl->l_start, &ufl->l_start) ||
  334. __get_user(kfl->l_len, &ufl->l_len) ||
  335. __get_user(kfl->l_pid, &ufl->l_pid))
  336. return -EFAULT;
  337. return 0;
  338. }
  339. static int put_compat_flock(struct flock *kfl, struct compat_flock __user *ufl)
  340. {
  341. if (!access_ok(VERIFY_WRITE, ufl, sizeof(*ufl)) ||
  342. __put_user(kfl->l_type, &ufl->l_type) ||
  343. __put_user(kfl->l_whence, &ufl->l_whence) ||
  344. __put_user(kfl->l_start, &ufl->l_start) ||
  345. __put_user(kfl->l_len, &ufl->l_len) ||
  346. __put_user(kfl->l_pid, &ufl->l_pid))
  347. return -EFAULT;
  348. return 0;
  349. }
  350. #ifndef HAVE_ARCH_GET_COMPAT_FLOCK64
  351. static int get_compat_flock64(struct flock *kfl, struct compat_flock64 __user *ufl)
  352. {
  353. if (!access_ok(VERIFY_READ, ufl, sizeof(*ufl)) ||
  354. __get_user(kfl->l_type, &ufl->l_type) ||
  355. __get_user(kfl->l_whence, &ufl->l_whence) ||
  356. __get_user(kfl->l_start, &ufl->l_start) ||
  357. __get_user(kfl->l_len, &ufl->l_len) ||
  358. __get_user(kfl->l_pid, &ufl->l_pid))
  359. return -EFAULT;
  360. return 0;
  361. }
  362. #endif
  363. #ifndef HAVE_ARCH_PUT_COMPAT_FLOCK64
  364. static int put_compat_flock64(struct flock *kfl, struct compat_flock64 __user *ufl)
  365. {
  366. if (!access_ok(VERIFY_WRITE, ufl, sizeof(*ufl)) ||
  367. __put_user(kfl->l_type, &ufl->l_type) ||
  368. __put_user(kfl->l_whence, &ufl->l_whence) ||
  369. __put_user(kfl->l_start, &ufl->l_start) ||
  370. __put_user(kfl->l_len, &ufl->l_len) ||
  371. __put_user(kfl->l_pid, &ufl->l_pid))
  372. return -EFAULT;
  373. return 0;
  374. }
  375. #endif
  376. asmlinkage long compat_sys_fcntl64(unsigned int fd, unsigned int cmd,
  377. unsigned long arg)
  378. {
  379. mm_segment_t old_fs;
  380. struct flock f;
  381. long ret;
  382. switch (cmd) {
  383. case F_GETLK:
  384. case F_SETLK:
  385. case F_SETLKW:
  386. ret = get_compat_flock(&f, compat_ptr(arg));
  387. if (ret != 0)
  388. break;
  389. old_fs = get_fs();
  390. set_fs(KERNEL_DS);
  391. ret = sys_fcntl(fd, cmd, (unsigned long)&f);
  392. set_fs(old_fs);
  393. if (cmd == F_GETLK && ret == 0) {
  394. /* GETLK was successful and we need to return the data...
  395. * but it needs to fit in the compat structure.
  396. * l_start shouldn't be too big, unless the original
  397. * start + end is greater than COMPAT_OFF_T_MAX, in which
  398. * case the app was asking for trouble, so we return
  399. * -EOVERFLOW in that case.
  400. * l_len could be too big, in which case we just truncate it,
  401. * and only allow the app to see that part of the conflicting
  402. * lock that might make sense to it anyway
  403. */
  404. if (f.l_start > COMPAT_OFF_T_MAX)
  405. ret = -EOVERFLOW;
  406. if (f.l_len > COMPAT_OFF_T_MAX)
  407. f.l_len = COMPAT_OFF_T_MAX;
  408. if (ret == 0)
  409. ret = put_compat_flock(&f, compat_ptr(arg));
  410. }
  411. break;
  412. case F_GETLK64:
  413. case F_SETLK64:
  414. case F_SETLKW64:
  415. ret = get_compat_flock64(&f, compat_ptr(arg));
  416. if (ret != 0)
  417. break;
  418. old_fs = get_fs();
  419. set_fs(KERNEL_DS);
  420. ret = sys_fcntl(fd, (cmd == F_GETLK64) ? F_GETLK :
  421. ((cmd == F_SETLK64) ? F_SETLK : F_SETLKW),
  422. (unsigned long)&f);
  423. set_fs(old_fs);
  424. if (cmd == F_GETLK64 && ret == 0) {
  425. /* need to return lock information - see above for commentary */
  426. if (f.l_start > COMPAT_LOFF_T_MAX)
  427. ret = -EOVERFLOW;
  428. if (f.l_len > COMPAT_LOFF_T_MAX)
  429. f.l_len = COMPAT_LOFF_T_MAX;
  430. if (ret == 0)
  431. ret = put_compat_flock64(&f, compat_ptr(arg));
  432. }
  433. break;
  434. default:
  435. ret = sys_fcntl(fd, cmd, arg);
  436. break;
  437. }
  438. return ret;
  439. }
  440. asmlinkage long compat_sys_fcntl(unsigned int fd, unsigned int cmd,
  441. unsigned long arg)
  442. {
  443. if ((cmd == F_GETLK64) || (cmd == F_SETLK64) || (cmd == F_SETLKW64))
  444. return -EINVAL;
  445. return compat_sys_fcntl64(fd, cmd, arg);
  446. }
  447. asmlinkage long
  448. compat_sys_io_setup(unsigned nr_reqs, u32 __user *ctx32p)
  449. {
  450. long ret;
  451. aio_context_t ctx64;
  452. mm_segment_t oldfs = get_fs();
  453. if (unlikely(get_user(ctx64, ctx32p)))
  454. return -EFAULT;
  455. set_fs(KERNEL_DS);
  456. /* The __user pointer cast is valid because of the set_fs() */
  457. ret = sys_io_setup(nr_reqs, (aio_context_t __user *) &ctx64);
  458. set_fs(oldfs);
  459. /* truncating is ok because it's a user address */
  460. if (!ret)
  461. ret = put_user((u32) ctx64, ctx32p);
  462. return ret;
  463. }
  464. asmlinkage long
  465. compat_sys_io_getevents(aio_context_t ctx_id,
  466. unsigned long min_nr,
  467. unsigned long nr,
  468. struct io_event __user *events,
  469. struct compat_timespec __user *timeout)
  470. {
  471. long ret;
  472. struct timespec t;
  473. struct timespec __user *ut = NULL;
  474. ret = -EFAULT;
  475. if (unlikely(!access_ok(VERIFY_WRITE, events,
  476. nr * sizeof(struct io_event))))
  477. goto out;
  478. if (timeout) {
  479. if (get_compat_timespec(&t, timeout))
  480. goto out;
  481. ut = compat_alloc_user_space(sizeof(*ut));
  482. if (copy_to_user(ut, &t, sizeof(t)) )
  483. goto out;
  484. }
  485. ret = sys_io_getevents(ctx_id, min_nr, nr, events, ut);
  486. out:
  487. return ret;
  488. }
  489. /* A write operation does a read from user space and vice versa */
  490. #define vrfy_dir(type) ((type) == READ ? VERIFY_WRITE : VERIFY_READ)
  491. ssize_t compat_rw_copy_check_uvector(int type,
  492. const struct compat_iovec __user *uvector, unsigned long nr_segs,
  493. unsigned long fast_segs, struct iovec *fast_pointer,
  494. struct iovec **ret_pointer)
  495. {
  496. compat_ssize_t tot_len;
  497. struct iovec *iov = *ret_pointer = fast_pointer;
  498. ssize_t ret = 0;
  499. int seg;
  500. /*
  501. * SuS says "The readv() function *may* fail if the iovcnt argument
  502. * was less than or equal to 0, or greater than {IOV_MAX}. Linux has
  503. * traditionally returned zero for zero segments, so...
  504. */
  505. if (nr_segs == 0)
  506. goto out;
  507. ret = -EINVAL;
  508. if (nr_segs > UIO_MAXIOV || nr_segs < 0)
  509. goto out;
  510. if (nr_segs > fast_segs) {
  511. ret = -ENOMEM;
  512. iov = kmalloc(nr_segs*sizeof(struct iovec), GFP_KERNEL);
  513. if (iov == NULL)
  514. goto out;
  515. }
  516. *ret_pointer = iov;
  517. /*
  518. * Single unix specification:
  519. * We should -EINVAL if an element length is not >= 0 and fitting an
  520. * ssize_t.
  521. *
  522. * In Linux, the total length is limited to MAX_RW_COUNT, there is
  523. * no overflow possibility.
  524. */
  525. tot_len = 0;
  526. ret = -EINVAL;
  527. for (seg = 0; seg < nr_segs; seg++) {
  528. compat_uptr_t buf;
  529. compat_ssize_t len;
  530. if (__get_user(len, &uvector->iov_len) ||
  531. __get_user(buf, &uvector->iov_base)) {
  532. ret = -EFAULT;
  533. goto out;
  534. }
  535. if (len < 0) /* size_t not fitting in compat_ssize_t .. */
  536. goto out;
  537. if (!access_ok(vrfy_dir(type), compat_ptr(buf), len)) {
  538. ret = -EFAULT;
  539. goto out;
  540. }
  541. if (len > MAX_RW_COUNT - tot_len)
  542. len = MAX_RW_COUNT - tot_len;
  543. tot_len += len;
  544. iov->iov_base = compat_ptr(buf);
  545. iov->iov_len = (compat_size_t) len;
  546. uvector++;
  547. iov++;
  548. }
  549. ret = tot_len;
  550. out:
  551. return ret;
  552. }
  553. static inline long
  554. copy_iocb(long nr, u32 __user *ptr32, struct iocb __user * __user *ptr64)
  555. {
  556. compat_uptr_t uptr;
  557. int i;
  558. for (i = 0; i < nr; ++i) {
  559. if (get_user(uptr, ptr32 + i))
  560. return -EFAULT;
  561. if (put_user(compat_ptr(uptr), ptr64 + i))
  562. return -EFAULT;
  563. }
  564. return 0;
  565. }
  566. #define MAX_AIO_SUBMITS (PAGE_SIZE/sizeof(struct iocb *))
  567. asmlinkage long
  568. compat_sys_io_submit(aio_context_t ctx_id, int nr, u32 __user *iocb)
  569. {
  570. struct iocb __user * __user *iocb64;
  571. long ret;
  572. if (unlikely(nr < 0))
  573. return -EINVAL;
  574. if (nr > MAX_AIO_SUBMITS)
  575. nr = MAX_AIO_SUBMITS;
  576. iocb64 = compat_alloc_user_space(nr * sizeof(*iocb64));
  577. ret = copy_iocb(nr, iocb, iocb64);
  578. if (!ret)
  579. ret = do_io_submit(ctx_id, nr, iocb64, 1);
  580. return ret;
  581. }
  582. struct compat_ncp_mount_data {
  583. compat_int_t version;
  584. compat_uint_t ncp_fd;
  585. __compat_uid_t mounted_uid;
  586. compat_pid_t wdog_pid;
  587. unsigned char mounted_vol[NCP_VOLNAME_LEN + 1];
  588. compat_uint_t time_out;
  589. compat_uint_t retry_count;
  590. compat_uint_t flags;
  591. __compat_uid_t uid;
  592. __compat_gid_t gid;
  593. compat_mode_t file_mode;
  594. compat_mode_t dir_mode;
  595. };
  596. struct compat_ncp_mount_data_v4 {
  597. compat_int_t version;
  598. compat_ulong_t flags;
  599. compat_ulong_t mounted_uid;
  600. compat_long_t wdog_pid;
  601. compat_uint_t ncp_fd;
  602. compat_uint_t time_out;
  603. compat_uint_t retry_count;
  604. compat_ulong_t uid;
  605. compat_ulong_t gid;
  606. compat_ulong_t file_mode;
  607. compat_ulong_t dir_mode;
  608. };
  609. static void *do_ncp_super_data_conv(void *raw_data)
  610. {
  611. int version = *(unsigned int *)raw_data;
  612. if (version == 3) {
  613. struct compat_ncp_mount_data *c_n = raw_data;
  614. struct ncp_mount_data *n = raw_data;
  615. n->dir_mode = c_n->dir_mode;
  616. n->file_mode = c_n->file_mode;
  617. n->gid = c_n->gid;
  618. n->uid = c_n->uid;
  619. memmove (n->mounted_vol, c_n->mounted_vol, (sizeof (c_n->mounted_vol) + 3 * sizeof (unsigned int)));
  620. n->wdog_pid = c_n->wdog_pid;
  621. n->mounted_uid = c_n->mounted_uid;
  622. } else if (version == 4) {
  623. struct compat_ncp_mount_data_v4 *c_n = raw_data;
  624. struct ncp_mount_data_v4 *n = raw_data;
  625. n->dir_mode = c_n->dir_mode;
  626. n->file_mode = c_n->file_mode;
  627. n->gid = c_n->gid;
  628. n->uid = c_n->uid;
  629. n->retry_count = c_n->retry_count;
  630. n->time_out = c_n->time_out;
  631. n->ncp_fd = c_n->ncp_fd;
  632. n->wdog_pid = c_n->wdog_pid;
  633. n->mounted_uid = c_n->mounted_uid;
  634. n->flags = c_n->flags;
  635. } else if (version != 5) {
  636. return NULL;
  637. }
  638. return raw_data;
  639. }
  640. struct compat_nfs_string {
  641. compat_uint_t len;
  642. compat_uptr_t data;
  643. };
  644. static inline void compat_nfs_string(struct nfs_string *dst,
  645. struct compat_nfs_string *src)
  646. {
  647. dst->data = compat_ptr(src->data);
  648. dst->len = src->len;
  649. }
  650. struct compat_nfs4_mount_data_v1 {
  651. compat_int_t version;
  652. compat_int_t flags;
  653. compat_int_t rsize;
  654. compat_int_t wsize;
  655. compat_int_t timeo;
  656. compat_int_t retrans;
  657. compat_int_t acregmin;
  658. compat_int_t acregmax;
  659. compat_int_t acdirmin;
  660. compat_int_t acdirmax;
  661. struct compat_nfs_string client_addr;
  662. struct compat_nfs_string mnt_path;
  663. struct compat_nfs_string hostname;
  664. compat_uint_t host_addrlen;
  665. compat_uptr_t host_addr;
  666. compat_int_t proto;
  667. compat_int_t auth_flavourlen;
  668. compat_uptr_t auth_flavours;
  669. };
  670. static int do_nfs4_super_data_conv(void *raw_data)
  671. {
  672. int version = *(compat_uint_t *) raw_data;
  673. if (version == 1) {
  674. struct compat_nfs4_mount_data_v1 *raw = raw_data;
  675. struct nfs4_mount_data *real = raw_data;
  676. /* copy the fields backwards */
  677. real->auth_flavours = compat_ptr(raw->auth_flavours);
  678. real->auth_flavourlen = raw->auth_flavourlen;
  679. real->proto = raw->proto;
  680. real->host_addr = compat_ptr(raw->host_addr);
  681. real->host_addrlen = raw->host_addrlen;
  682. compat_nfs_string(&real->hostname, &raw->hostname);
  683. compat_nfs_string(&real->mnt_path, &raw->mnt_path);
  684. compat_nfs_string(&real->client_addr, &raw->client_addr);
  685. real->acdirmax = raw->acdirmax;
  686. real->acdirmin = raw->acdirmin;
  687. real->acregmax = raw->acregmax;
  688. real->acregmin = raw->acregmin;
  689. real->retrans = raw->retrans;
  690. real->timeo = raw->timeo;
  691. real->wsize = raw->wsize;
  692. real->rsize = raw->rsize;
  693. real->flags = raw->flags;
  694. real->version = raw->version;
  695. }
  696. return 0;
  697. }
  698. #define NCPFS_NAME "ncpfs"
  699. #define NFS4_NAME "nfs4"
  700. asmlinkage long compat_sys_mount(const char __user * dev_name,
  701. const char __user * dir_name,
  702. const char __user * type, unsigned long flags,
  703. const void __user * data)
  704. {
  705. char *kernel_type;
  706. unsigned long data_page;
  707. char *kernel_dev;
  708. char *dir_page;
  709. int retval;
  710. retval = copy_mount_string(type, &kernel_type);
  711. if (retval < 0)
  712. goto out;
  713. dir_page = getname(dir_name);
  714. retval = PTR_ERR(dir_page);
  715. if (IS_ERR(dir_page))
  716. goto out1;
  717. retval = copy_mount_string(dev_name, &kernel_dev);
  718. if (retval < 0)
  719. goto out2;
  720. retval = copy_mount_options(data, &data_page);
  721. if (retval < 0)
  722. goto out3;
  723. retval = -EINVAL;
  724. if (kernel_type && data_page) {
  725. if (!strcmp(kernel_type, NCPFS_NAME)) {
  726. do_ncp_super_data_conv((void *)data_page);
  727. } else if (!strcmp(kernel_type, NFS4_NAME)) {
  728. if (do_nfs4_super_data_conv((void *) data_page))
  729. goto out4;
  730. }
  731. }
  732. retval = do_mount(kernel_dev, dir_page, kernel_type,
  733. flags, (void*)data_page);
  734. out4:
  735. free_page(data_page);
  736. out3:
  737. kfree(kernel_dev);
  738. out2:
  739. putname(dir_page);
  740. out1:
  741. kfree(kernel_type);
  742. out:
  743. return retval;
  744. }
  745. struct compat_old_linux_dirent {
  746. compat_ulong_t d_ino;
  747. compat_ulong_t d_offset;
  748. unsigned short d_namlen;
  749. char d_name[1];
  750. };
  751. struct compat_readdir_callback {
  752. struct compat_old_linux_dirent __user *dirent;
  753. int result;
  754. };
  755. static int compat_fillonedir(void *__buf, const char *name, int namlen,
  756. loff_t offset, u64 ino, unsigned int d_type)
  757. {
  758. struct compat_readdir_callback *buf = __buf;
  759. struct compat_old_linux_dirent __user *dirent;
  760. compat_ulong_t d_ino;
  761. if (buf->result)
  762. return -EINVAL;
  763. d_ino = ino;
  764. if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) {
  765. buf->result = -EOVERFLOW;
  766. return -EOVERFLOW;
  767. }
  768. buf->result++;
  769. dirent = buf->dirent;
  770. if (!access_ok(VERIFY_WRITE, dirent,
  771. (unsigned long)(dirent->d_name + namlen + 1) -
  772. (unsigned long)dirent))
  773. goto efault;
  774. if ( __put_user(d_ino, &dirent->d_ino) ||
  775. __put_user(offset, &dirent->d_offset) ||
  776. __put_user(namlen, &dirent->d_namlen) ||
  777. __copy_to_user(dirent->d_name, name, namlen) ||
  778. __put_user(0, dirent->d_name + namlen))
  779. goto efault;
  780. return 0;
  781. efault:
  782. buf->result = -EFAULT;
  783. return -EFAULT;
  784. }
  785. asmlinkage long compat_sys_old_readdir(unsigned int fd,
  786. struct compat_old_linux_dirent __user *dirent, unsigned int count)
  787. {
  788. int error;
  789. struct file *file;
  790. struct compat_readdir_callback buf;
  791. error = -EBADF;
  792. file = fget(fd);
  793. if (!file)
  794. goto out;
  795. buf.result = 0;
  796. buf.dirent = dirent;
  797. error = vfs_readdir(file, compat_fillonedir, &buf);
  798. if (buf.result)
  799. error = buf.result;
  800. fput(file);
  801. out:
  802. return error;
  803. }
  804. struct compat_linux_dirent {
  805. compat_ulong_t d_ino;
  806. compat_ulong_t d_off;
  807. unsigned short d_reclen;
  808. char d_name[1];
  809. };
  810. struct compat_getdents_callback {
  811. struct compat_linux_dirent __user *current_dir;
  812. struct compat_linux_dirent __user *previous;
  813. int count;
  814. int error;
  815. };
  816. static int compat_filldir(void *__buf, const char *name, int namlen,
  817. loff_t offset, u64 ino, unsigned int d_type)
  818. {
  819. struct compat_linux_dirent __user * dirent;
  820. struct compat_getdents_callback *buf = __buf;
  821. compat_ulong_t d_ino;
  822. int reclen = ALIGN(offsetof(struct compat_linux_dirent, d_name) +
  823. namlen + 2, sizeof(compat_long_t));
  824. buf->error = -EINVAL; /* only used if we fail.. */
  825. if (reclen > buf->count)
  826. return -EINVAL;
  827. d_ino = ino;
  828. if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) {
  829. buf->error = -EOVERFLOW;
  830. return -EOVERFLOW;
  831. }
  832. dirent = buf->previous;
  833. if (dirent) {
  834. if (__put_user(offset, &dirent->d_off))
  835. goto efault;
  836. }
  837. dirent = buf->current_dir;
  838. if (__put_user(d_ino, &dirent->d_ino))
  839. goto efault;
  840. if (__put_user(reclen, &dirent->d_reclen))
  841. goto efault;
  842. if (copy_to_user(dirent->d_name, name, namlen))
  843. goto efault;
  844. if (__put_user(0, dirent->d_name + namlen))
  845. goto efault;
  846. if (__put_user(d_type, (char __user *) dirent + reclen - 1))
  847. goto efault;
  848. buf->previous = dirent;
  849. dirent = (void __user *)dirent + reclen;
  850. buf->current_dir = dirent;
  851. buf->count -= reclen;
  852. return 0;
  853. efault:
  854. buf->error = -EFAULT;
  855. return -EFAULT;
  856. }
  857. asmlinkage long compat_sys_getdents(unsigned int fd,
  858. struct compat_linux_dirent __user *dirent, unsigned int count)
  859. {
  860. struct file * file;
  861. struct compat_linux_dirent __user * lastdirent;
  862. struct compat_getdents_callback buf;
  863. int error;
  864. error = -EFAULT;
  865. if (!access_ok(VERIFY_WRITE, dirent, count))
  866. goto out;
  867. error = -EBADF;
  868. file = fget(fd);
  869. if (!file)
  870. goto out;
  871. buf.current_dir = dirent;
  872. buf.previous = NULL;
  873. buf.count = count;
  874. buf.error = 0;
  875. error = vfs_readdir(file, compat_filldir, &buf);
  876. if (error >= 0)
  877. error = buf.error;
  878. lastdirent = buf.previous;
  879. if (lastdirent) {
  880. if (put_user(file->f_pos, &lastdirent->d_off))
  881. error = -EFAULT;
  882. else
  883. error = count - buf.count;
  884. }
  885. fput(file);
  886. out:
  887. return error;
  888. }
  889. #ifndef __ARCH_OMIT_COMPAT_SYS_GETDENTS64
  890. struct compat_getdents_callback64 {
  891. struct linux_dirent64 __user *current_dir;
  892. struct linux_dirent64 __user *previous;
  893. int count;
  894. int error;
  895. };
  896. static int compat_filldir64(void * __buf, const char * name, int namlen, loff_t offset,
  897. u64 ino, unsigned int d_type)
  898. {
  899. struct linux_dirent64 __user *dirent;
  900. struct compat_getdents_callback64 *buf = __buf;
  901. int reclen = ALIGN(offsetof(struct linux_dirent64, d_name) + namlen + 1,
  902. sizeof(u64));
  903. u64 off;
  904. buf->error = -EINVAL; /* only used if we fail.. */
  905. if (reclen > buf->count)
  906. return -EINVAL;
  907. dirent = buf->previous;
  908. if (dirent) {
  909. if (__put_user_unaligned(offset, &dirent->d_off))
  910. goto efault;
  911. }
  912. dirent = buf->current_dir;
  913. if (__put_user_unaligned(ino, &dirent->d_ino))
  914. goto efault;
  915. off = 0;
  916. if (__put_user_unaligned(off, &dirent->d_off))
  917. goto efault;
  918. if (__put_user(reclen, &dirent->d_reclen))
  919. goto efault;
  920. if (__put_user(d_type, &dirent->d_type))
  921. goto efault;
  922. if (copy_to_user(dirent->d_name, name, namlen))
  923. goto efault;
  924. if (__put_user(0, dirent->d_name + namlen))
  925. goto efault;
  926. buf->previous = dirent;
  927. dirent = (void __user *)dirent + reclen;
  928. buf->current_dir = dirent;
  929. buf->count -= reclen;
  930. return 0;
  931. efault:
  932. buf->error = -EFAULT;
  933. return -EFAULT;
  934. }
  935. asmlinkage long compat_sys_getdents64(unsigned int fd,
  936. struct linux_dirent64 __user * dirent, unsigned int count)
  937. {
  938. struct file * file;
  939. struct linux_dirent64 __user * lastdirent;
  940. struct compat_getdents_callback64 buf;
  941. int error;
  942. error = -EFAULT;
  943. if (!access_ok(VERIFY_WRITE, dirent, count))
  944. goto out;
  945. error = -EBADF;
  946. file = fget(fd);
  947. if (!file)
  948. goto out;
  949. buf.current_dir = dirent;
  950. buf.previous = NULL;
  951. buf.count = count;
  952. buf.error = 0;
  953. error = vfs_readdir(file, compat_filldir64, &buf);
  954. if (error >= 0)
  955. error = buf.error;
  956. lastdirent = buf.previous;
  957. if (lastdirent) {
  958. typeof(lastdirent->d_off) d_off = file->f_pos;
  959. if (__put_user_unaligned(d_off, &lastdirent->d_off))
  960. error = -EFAULT;
  961. else
  962. error = count - buf.count;
  963. }
  964. fput(file);
  965. out:
  966. return error;
  967. }
  968. #endif /* ! __ARCH_OMIT_COMPAT_SYS_GETDENTS64 */
  969. static ssize_t compat_do_readv_writev(int type, struct file *file,
  970. const struct compat_iovec __user *uvector,
  971. unsigned long nr_segs, loff_t *pos)
  972. {
  973. compat_ssize_t tot_len;
  974. struct iovec iovstack[UIO_FASTIOV];
  975. struct iovec *iov = iovstack;
  976. ssize_t ret;
  977. io_fn_t fn;
  978. iov_fn_t fnv;
  979. ret = -EINVAL;
  980. if (!file->f_op)
  981. goto out;
  982. ret = -EFAULT;
  983. if (!access_ok(VERIFY_READ, uvector, nr_segs*sizeof(*uvector)))
  984. goto out;
  985. tot_len = compat_rw_copy_check_uvector(type, uvector, nr_segs,
  986. UIO_FASTIOV, iovstack, &iov);
  987. if (tot_len == 0) {
  988. ret = 0;
  989. goto out;
  990. }
  991. ret = rw_verify_area(type, file, pos, tot_len);
  992. if (ret < 0)
  993. goto out;
  994. fnv = NULL;
  995. if (type == READ) {
  996. fn = file->f_op->read;
  997. fnv = file->f_op->aio_read;
  998. } else {
  999. fn = (io_fn_t)file->f_op->write;
  1000. fnv = file->f_op->aio_write;
  1001. }
  1002. if (fnv)
  1003. ret = do_sync_readv_writev(file, iov, nr_segs, tot_len,
  1004. pos, fnv);
  1005. else
  1006. ret = do_loop_readv_writev(file, iov, nr_segs, pos, fn);
  1007. out:
  1008. if (iov != iovstack)
  1009. kfree(iov);
  1010. if ((ret + (type == READ)) > 0) {
  1011. if (type == READ)
  1012. fsnotify_access(file);
  1013. else
  1014. fsnotify_modify(file);
  1015. }
  1016. return ret;
  1017. }
  1018. static size_t compat_readv(struct file *file,
  1019. const struct compat_iovec __user *vec,
  1020. unsigned long vlen, loff_t *pos)
  1021. {
  1022. ssize_t ret = -EBADF;
  1023. if (!(file->f_mode & FMODE_READ))
  1024. goto out;
  1025. ret = -EINVAL;
  1026. if (!file->f_op || (!file->f_op->aio_read && !file->f_op->read))
  1027. goto out;
  1028. ret = compat_do_readv_writev(READ, file, vec, vlen, pos);
  1029. out:
  1030. if (ret > 0)
  1031. add_rchar(current, ret);
  1032. inc_syscr(current);
  1033. return ret;
  1034. }
  1035. asmlinkage ssize_t
  1036. compat_sys_readv(unsigned long fd, const struct compat_iovec __user *vec,
  1037. unsigned long vlen)
  1038. {
  1039. struct file *file;
  1040. int fput_needed;
  1041. ssize_t ret;
  1042. file = fget_light(fd, &fput_needed);
  1043. if (!file)
  1044. return -EBADF;
  1045. ret = compat_readv(file, vec, vlen, &file->f_pos);
  1046. fput_light(file, fput_needed);
  1047. return ret;
  1048. }
  1049. asmlinkage ssize_t
  1050. compat_sys_preadv(unsigned long fd, const struct compat_iovec __user *vec,
  1051. unsigned long vlen, u32 pos_low, u32 pos_high)
  1052. {
  1053. loff_t pos = ((loff_t)pos_high << 32) | pos_low;
  1054. struct file *file;
  1055. int fput_needed;
  1056. ssize_t ret;
  1057. if (pos < 0)
  1058. return -EINVAL;
  1059. file = fget_light(fd, &fput_needed);
  1060. if (!file)
  1061. return -EBADF;
  1062. ret = -ESPIPE;
  1063. if (file->f_mode & FMODE_PREAD)
  1064. ret = compat_readv(file, vec, vlen, &pos);
  1065. fput_light(file, fput_needed);
  1066. return ret;
  1067. }
  1068. static size_t compat_writev(struct file *file,
  1069. const struct compat_iovec __user *vec,
  1070. unsigned long vlen, loff_t *pos)
  1071. {
  1072. ssize_t ret = -EBADF;
  1073. if (!(file->f_mode & FMODE_WRITE))
  1074. goto out;
  1075. ret = -EINVAL;
  1076. if (!file->f_op || (!file->f_op->aio_write && !file->f_op->write))
  1077. goto out;
  1078. ret = compat_do_readv_writev(WRITE, file, vec, vlen, pos);
  1079. out:
  1080. if (ret > 0)
  1081. add_wchar(current, ret);
  1082. inc_syscw(current);
  1083. return ret;
  1084. }
  1085. asmlinkage ssize_t
  1086. compat_sys_writev(unsigned long fd, const struct compat_iovec __user *vec,
  1087. unsigned long vlen)
  1088. {
  1089. struct file *file;
  1090. int fput_needed;
  1091. ssize_t ret;
  1092. file = fget_light(fd, &fput_needed);
  1093. if (!file)
  1094. return -EBADF;
  1095. ret = compat_writev(file, vec, vlen, &file->f_pos);
  1096. fput_light(file, fput_needed);
  1097. return ret;
  1098. }
  1099. asmlinkage ssize_t
  1100. compat_sys_pwritev(unsigned long fd, const struct compat_iovec __user *vec,
  1101. unsigned long vlen, u32 pos_low, u32 pos_high)
  1102. {
  1103. loff_t pos = ((loff_t)pos_high << 32) | pos_low;
  1104. struct file *file;
  1105. int fput_needed;
  1106. ssize_t ret;
  1107. if (pos < 0)
  1108. return -EINVAL;
  1109. file = fget_light(fd, &fput_needed);
  1110. if (!file)
  1111. return -EBADF;
  1112. ret = -ESPIPE;
  1113. if (file->f_mode & FMODE_PWRITE)
  1114. ret = compat_writev(file, vec, vlen, &pos);
  1115. fput_light(file, fput_needed);
  1116. return ret;
  1117. }
  1118. asmlinkage long
  1119. compat_sys_vmsplice(int fd, const struct compat_iovec __user *iov32,
  1120. unsigned int nr_segs, unsigned int flags)
  1121. {
  1122. unsigned i;
  1123. struct iovec __user *iov;
  1124. if (nr_segs > UIO_MAXIOV)
  1125. return -EINVAL;
  1126. iov = compat_alloc_user_space(nr_segs * sizeof(struct iovec));
  1127. for (i = 0; i < nr_segs; i++) {
  1128. struct compat_iovec v;
  1129. if (get_user(v.iov_base, &iov32[i].iov_base) ||
  1130. get_user(v.iov_len, &iov32[i].iov_len) ||
  1131. put_user(compat_ptr(v.iov_base), &iov[i].iov_base) ||
  1132. put_user(v.iov_len, &iov[i].iov_len))
  1133. return -EFAULT;
  1134. }
  1135. return sys_vmsplice(fd, iov, nr_segs, flags);
  1136. }
  1137. /*
  1138. * Exactly like fs/open.c:sys_open(), except that it doesn't set the
  1139. * O_LARGEFILE flag.
  1140. */
  1141. asmlinkage long
  1142. compat_sys_open(const char __user *filename, int flags, int mode)
  1143. {
  1144. return do_sys_open(AT_FDCWD, filename, flags, mode);
  1145. }
  1146. /*
  1147. * Exactly like fs/open.c:sys_openat(), except that it doesn't set the
  1148. * O_LARGEFILE flag.
  1149. */
  1150. asmlinkage long
  1151. compat_sys_openat(unsigned int dfd, const char __user *filename, int flags, int mode)
  1152. {
  1153. return do_sys_open(dfd, filename, flags, mode);
  1154. }
  1155. #define __COMPAT_NFDBITS (8 * sizeof(compat_ulong_t))
  1156. static int poll_select_copy_remaining(struct timespec *end_time, void __user *p,
  1157. int timeval, int ret)
  1158. {
  1159. struct timespec ts;
  1160. if (!p)
  1161. return ret;
  1162. if (current->personality & STICKY_TIMEOUTS)
  1163. goto sticky;
  1164. /* No update for zero timeout */
  1165. if (!end_time->tv_sec && !end_time->tv_nsec)
  1166. return ret;
  1167. ktime_get_ts(&ts);
  1168. ts = timespec_sub(*end_time, ts);
  1169. if (ts.tv_sec < 0)
  1170. ts.tv_sec = ts.tv_nsec = 0;
  1171. if (timeval) {
  1172. struct compat_timeval rtv;
  1173. rtv.tv_sec = ts.tv_sec;
  1174. rtv.tv_usec = ts.tv_nsec / NSEC_PER_USEC;
  1175. if (!copy_to_user(p, &rtv, sizeof(rtv)))
  1176. return ret;
  1177. } else {
  1178. struct compat_timespec rts;
  1179. rts.tv_sec = ts.tv_sec;
  1180. rts.tv_nsec = ts.tv_nsec;
  1181. if (!copy_to_user(p, &rts, sizeof(rts)))
  1182. return ret;
  1183. }
  1184. /*
  1185. * If an application puts its timeval in read-only memory, we
  1186. * don't want the Linux-specific update to the timeval to
  1187. * cause a fault after the select has completed
  1188. * successfully. However, because we're not updating the
  1189. * timeval, we can't restart the system call.
  1190. */
  1191. sticky:
  1192. if (ret == -ERESTARTNOHAND)
  1193. ret = -EINTR;
  1194. return ret;
  1195. }
  1196. /*
  1197. * Ooo, nasty. We need here to frob 32-bit unsigned longs to
  1198. * 64-bit unsigned longs.
  1199. */
  1200. static
  1201. int compat_get_fd_set(unsigned long nr, compat_ulong_t __user *ufdset,
  1202. unsigned long *fdset)
  1203. {
  1204. nr = DIV_ROUND_UP(nr, __COMPAT_NFDBITS);
  1205. if (ufdset) {
  1206. unsigned long odd;
  1207. if (!access_ok(VERIFY_WRITE, ufdset, nr*sizeof(compat_ulong_t)))
  1208. return -EFAULT;
  1209. odd = nr & 1UL;
  1210. nr &= ~1UL;
  1211. while (nr) {
  1212. unsigned long h, l;
  1213. if (__get_user(l, ufdset) || __get_user(h, ufdset+1))
  1214. return -EFAULT;
  1215. ufdset += 2;
  1216. *fdset++ = h << 32 | l;
  1217. nr -= 2;
  1218. }
  1219. if (odd && __get_user(*fdset, ufdset))
  1220. return -EFAULT;
  1221. } else {
  1222. /* Tricky, must clear full unsigned long in the
  1223. * kernel fdset at the end, this makes sure that
  1224. * actually happens.
  1225. */
  1226. memset(fdset, 0, ((nr + 1) & ~1)*sizeof(compat_ulong_t));
  1227. }
  1228. return 0;
  1229. }
  1230. static
  1231. int compat_set_fd_set(unsigned long nr, compat_ulong_t __user *ufdset,
  1232. unsigned long *fdset)
  1233. {
  1234. unsigned long odd;
  1235. nr = DIV_ROUND_UP(nr, __COMPAT_NFDBITS);
  1236. if (!ufdset)
  1237. return 0;
  1238. odd = nr & 1UL;
  1239. nr &= ~1UL;
  1240. while (nr) {
  1241. unsigned long h, l;
  1242. l = *fdset++;
  1243. h = l >> 32;
  1244. if (__put_user(l, ufdset) || __put_user(h, ufdset+1))
  1245. return -EFAULT;
  1246. ufdset += 2;
  1247. nr -= 2;
  1248. }
  1249. if (odd && __put_user(*fdset, ufdset))
  1250. return -EFAULT;
  1251. return 0;
  1252. }
  1253. /*
  1254. * This is a virtual copy of sys_select from fs/select.c and probably
  1255. * should be compared to it from time to time
  1256. */
  1257. /*
  1258. * We can actually return ERESTARTSYS instead of EINTR, but I'd
  1259. * like to be certain this leads to no problems. So I return
  1260. * EINTR just for safety.
  1261. *
  1262. * Update: ERESTARTSYS breaks at least the xview clock binary, so
  1263. * I'm trying ERESTARTNOHAND which restart only when you want to.
  1264. */
  1265. int compat_core_sys_select(int n, compat_ulong_t __user *inp,
  1266. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1267. struct timespec *end_time)
  1268. {
  1269. fd_set_bits fds;
  1270. void *bits;
  1271. int size, max_fds, ret = -EINVAL;
  1272. struct fdtable *fdt;
  1273. long stack_fds[SELECT_STACK_ALLOC/sizeof(long)];
  1274. if (n < 0)
  1275. goto out_nofds;
  1276. /* max_fds can increase, so grab it once to avoid race */
  1277. rcu_read_lock();
  1278. fdt = files_fdtable(current->files);
  1279. max_fds = fdt->max_fds;
  1280. rcu_read_unlock();
  1281. if (n > max_fds)
  1282. n = max_fds;
  1283. /*
  1284. * We need 6 bitmaps (in/out/ex for both incoming and outgoing),
  1285. * since we used fdset we need to allocate memory in units of
  1286. * long-words.
  1287. */
  1288. size = FDS_BYTES(n);
  1289. bits = stack_fds;
  1290. if (size > sizeof(stack_fds) / 6) {
  1291. bits = kmalloc(6 * size, GFP_KERNEL);
  1292. ret = -ENOMEM;
  1293. if (!bits)
  1294. goto out_nofds;
  1295. }
  1296. fds.in = (unsigned long *) bits;
  1297. fds.out = (unsigned long *) (bits + size);
  1298. fds.ex = (unsigned long *) (bits + 2*size);
  1299. fds.res_in = (unsigned long *) (bits + 3*size);
  1300. fds.res_out = (unsigned long *) (bits + 4*size);
  1301. fds.res_ex = (unsigned long *) (bits + 5*size);
  1302. if ((ret = compat_get_fd_set(n, inp, fds.in)) ||
  1303. (ret = compat_get_fd_set(n, outp, fds.out)) ||
  1304. (ret = compat_get_fd_set(n, exp, fds.ex)))
  1305. goto out;
  1306. zero_fd_set(n, fds.res_in);
  1307. zero_fd_set(n, fds.res_out);
  1308. zero_fd_set(n, fds.res_ex);
  1309. ret = do_select(n, &fds, end_time);
  1310. if (ret < 0)
  1311. goto out;
  1312. if (!ret) {
  1313. ret = -ERESTARTNOHAND;
  1314. if (signal_pending(current))
  1315. goto out;
  1316. ret = 0;
  1317. }
  1318. if (compat_set_fd_set(n, inp, fds.res_in) ||
  1319. compat_set_fd_set(n, outp, fds.res_out) ||
  1320. compat_set_fd_set(n, exp, fds.res_ex))
  1321. ret = -EFAULT;
  1322. out:
  1323. if (bits != stack_fds)
  1324. kfree(bits);
  1325. out_nofds:
  1326. return ret;
  1327. }
  1328. asmlinkage long compat_sys_select(int n, compat_ulong_t __user *inp,
  1329. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1330. struct compat_timeval __user *tvp)
  1331. {
  1332. struct timespec end_time, *to = NULL;
  1333. struct compat_timeval tv;
  1334. int ret;
  1335. if (tvp) {
  1336. if (copy_from_user(&tv, tvp, sizeof(tv)))
  1337. return -EFAULT;
  1338. to = &end_time;
  1339. if (poll_select_set_timeout(to,
  1340. tv.tv_sec + (tv.tv_usec / USEC_PER_SEC),
  1341. (tv.tv_usec % USEC_PER_SEC) * NSEC_PER_USEC))
  1342. return -EINVAL;
  1343. }
  1344. ret = compat_core_sys_select(n, inp, outp, exp, to);
  1345. ret = poll_select_copy_remaining(&end_time, tvp, 1, ret);
  1346. return ret;
  1347. }
  1348. struct compat_sel_arg_struct {
  1349. compat_ulong_t n;
  1350. compat_uptr_t inp;
  1351. compat_uptr_t outp;
  1352. compat_uptr_t exp;
  1353. compat_uptr_t tvp;
  1354. };
  1355. asmlinkage long compat_sys_old_select(struct compat_sel_arg_struct __user *arg)
  1356. {
  1357. struct compat_sel_arg_struct a;
  1358. if (copy_from_user(&a, arg, sizeof(a)))
  1359. return -EFAULT;
  1360. return compat_sys_select(a.n, compat_ptr(a.inp), compat_ptr(a.outp),
  1361. compat_ptr(a.exp), compat_ptr(a.tvp));
  1362. }
  1363. #ifdef HAVE_SET_RESTORE_SIGMASK
  1364. static long do_compat_pselect(int n, compat_ulong_t __user *inp,
  1365. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1366. struct compat_timespec __user *tsp, compat_sigset_t __user *sigmask,
  1367. compat_size_t sigsetsize)
  1368. {
  1369. compat_sigset_t ss32;
  1370. sigset_t ksigmask, sigsaved;
  1371. struct compat_timespec ts;
  1372. struct timespec end_time, *to = NULL;
  1373. int ret;
  1374. if (tsp) {
  1375. if (copy_from_user(&ts, tsp, sizeof(ts)))
  1376. return -EFAULT;
  1377. to = &end_time;
  1378. if (poll_select_set_timeout(to, ts.tv_sec, ts.tv_nsec))
  1379. return -EINVAL;
  1380. }
  1381. if (sigmask) {
  1382. if (sigsetsize != sizeof(compat_sigset_t))
  1383. return -EINVAL;
  1384. if (copy_from_user(&ss32, sigmask, sizeof(ss32)))
  1385. return -EFAULT;
  1386. sigset_from_compat(&ksigmask, &ss32);
  1387. sigdelsetmask(&ksigmask, sigmask(SIGKILL)|sigmask(SIGSTOP));
  1388. sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved);
  1389. }
  1390. ret = compat_core_sys_select(n, inp, outp, exp, to);
  1391. ret = poll_select_copy_remaining(&end_time, tsp, 0, ret);
  1392. if (ret == -ERESTARTNOHAND) {
  1393. /*
  1394. * Don't restore the signal mask yet. Let do_signal() deliver
  1395. * the signal on the way back to userspace, before the signal
  1396. * mask is restored.
  1397. */
  1398. if (sigmask) {
  1399. memcpy(&current->saved_sigmask, &sigsaved,
  1400. sizeof(sigsaved));
  1401. set_restore_sigmask();
  1402. }
  1403. } else if (sigmask)
  1404. sigprocmask(SIG_SETMASK, &sigsaved, NULL);
  1405. return ret;
  1406. }
  1407. asmlinkage long compat_sys_pselect6(int n, compat_ulong_t __user *inp,
  1408. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1409. struct compat_timespec __user *tsp, void __user *sig)
  1410. {
  1411. compat_size_t sigsetsize = 0;
  1412. compat_uptr_t up = 0;
  1413. if (sig) {
  1414. if (!access_ok(VERIFY_READ, sig,
  1415. sizeof(compat_uptr_t)+sizeof(compat_size_t)) ||
  1416. __get_user(up, (compat_uptr_t __user *)sig) ||
  1417. __get_user(sigsetsize,
  1418. (compat_size_t __user *)(sig+sizeof(up))))
  1419. return -EFAULT;
  1420. }
  1421. return do_compat_pselect(n, inp, outp, exp, tsp, compat_ptr(up),
  1422. sigsetsize);
  1423. }
  1424. asmlinkage long compat_sys_ppoll(struct pollfd __user *ufds,
  1425. unsigned int nfds, struct compat_timespec __user *tsp,
  1426. const compat_sigset_t __user *sigmask, compat_size_t sigsetsize)
  1427. {
  1428. compat_sigset_t ss32;
  1429. sigset_t ksigmask, sigsaved;
  1430. struct compat_timespec ts;
  1431. struct timespec end_time, *to = NULL;
  1432. int ret;
  1433. if (tsp) {
  1434. if (copy_from_user(&ts, tsp, sizeof(ts)))
  1435. return -EFAULT;
  1436. to = &end_time;
  1437. if (poll_select_set_timeout(to, ts.tv_sec, ts.tv_nsec))
  1438. return -EINVAL;
  1439. }
  1440. if (sigmask) {
  1441. if (sigsetsize != sizeof(compat_sigset_t))
  1442. return -EINVAL;
  1443. if (copy_from_user(&ss32, sigmask, sizeof(ss32)))
  1444. return -EFAULT;
  1445. sigset_from_compat(&ksigmask, &ss32);
  1446. sigdelsetmask(&ksigmask, sigmask(SIGKILL)|sigmask(SIGSTOP));
  1447. sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved);
  1448. }
  1449. ret = do_sys_poll(ufds, nfds, to);
  1450. /* We can restart this syscall, usually */
  1451. if (ret == -EINTR) {
  1452. /*
  1453. * Don't restore the signal mask yet. Let do_signal() deliver
  1454. * the signal on the way back to userspace, before the signal
  1455. * mask is restored.
  1456. */
  1457. if (sigmask) {
  1458. memcpy(&current->saved_sigmask, &sigsaved,
  1459. sizeof(sigsaved));
  1460. set_restore_sigmask();
  1461. }
  1462. ret = -ERESTARTNOHAND;
  1463. } else if (sigmask)
  1464. sigprocmask(SIG_SETMASK, &sigsaved, NULL);
  1465. ret = poll_select_copy_remaining(&end_time, tsp, 0, ret);
  1466. return ret;
  1467. }
  1468. #endif /* HAVE_SET_RESTORE_SIGMASK */
  1469. #ifdef CONFIG_EPOLL
  1470. #ifdef HAVE_SET_RESTORE_SIGMASK
  1471. asmlinkage long compat_sys_epoll_pwait(int epfd,
  1472. struct compat_epoll_event __user *events,
  1473. int maxevents, int timeout,
  1474. const compat_sigset_t __user *sigmask,
  1475. compat_size_t sigsetsize)
  1476. {
  1477. long err;
  1478. compat_sigset_t csigmask;
  1479. sigset_t ksigmask, sigsaved;
  1480. /*
  1481. * If the caller wants a certain signal mask to be set during the wait,
  1482. * we apply it here.
  1483. */
  1484. if (sigmask) {
  1485. if (sigsetsize != sizeof(compat_sigset_t))
  1486. return -EINVAL;
  1487. if (copy_from_user(&csigmask, sigmask, sizeof(csigmask)))
  1488. return -EFAULT;
  1489. sigset_from_compat(&ksigmask, &csigmask);
  1490. sigdelsetmask(&ksigmask, sigmask(SIGKILL) | sigmask(SIGSTOP));
  1491. sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved);
  1492. }
  1493. err = sys_epoll_wait(epfd, events, maxevents, timeout);
  1494. /*
  1495. * If we changed the signal mask, we need to restore the original one.
  1496. * In case we've got a signal while waiting, we do not restore the
  1497. * signal mask yet, and we allow do_signal() to deliver the signal on
  1498. * the way back to userspace, before the signal mask is restored.
  1499. */
  1500. if (sigmask) {
  1501. if (err == -EINTR) {
  1502. memcpy(&current->saved_sigmask, &sigsaved,
  1503. sizeof(sigsaved));
  1504. set_restore_sigmask();
  1505. } else
  1506. sigprocmask(SIG_SETMASK, &sigsaved, NULL);
  1507. }
  1508. return err;
  1509. }
  1510. #endif /* HAVE_SET_RESTORE_SIGMASK */
  1511. #endif /* CONFIG_EPOLL */
  1512. #ifdef CONFIG_SIGNALFD
  1513. asmlinkage long compat_sys_signalfd4(int ufd,
  1514. const compat_sigset_t __user *sigmask,
  1515. compat_size_t sigsetsize, int flags)
  1516. {
  1517. compat_sigset_t ss32;
  1518. sigset_t tmp;
  1519. sigset_t __user *ksigmask;
  1520. if (sigsetsize != sizeof(compat_sigset_t))
  1521. return -EINVAL;
  1522. if (copy_from_user(&ss32, sigmask, sizeof(ss32)))
  1523. return -EFAULT;
  1524. sigset_from_compat(&tmp, &ss32);
  1525. ksigmask = compat_alloc_user_space(sizeof(sigset_t));
  1526. if (copy_to_user(ksigmask, &tmp, sizeof(sigset_t)))
  1527. return -EFAULT;
  1528. return sys_signalfd4(ufd, ksigmask, sizeof(sigset_t), flags);
  1529. }
  1530. asmlinkage long compat_sys_signalfd(int ufd,
  1531. const compat_sigset_t __user *sigmask,
  1532. compat_size_t sigsetsize)
  1533. {
  1534. return compat_sys_signalfd4(ufd, sigmask, sigsetsize, 0);
  1535. }
  1536. #endif /* CONFIG_SIGNALFD */
  1537. #ifdef CONFIG_TIMERFD
  1538. asmlinkage long compat_sys_timerfd_settime(int ufd, int flags,
  1539. const struct compat_itimerspec __user *utmr,
  1540. struct compat_itimerspec __user *otmr)
  1541. {
  1542. int error;
  1543. struct itimerspec t;
  1544. struct itimerspec __user *ut;
  1545. if (get_compat_itimerspec(&t, utmr))
  1546. return -EFAULT;
  1547. ut = compat_alloc_user_space(2 * sizeof(struct itimerspec));
  1548. if (copy_to_user(&ut[0], &t, sizeof(t)))
  1549. return -EFAULT;
  1550. error = sys_timerfd_settime(ufd, flags, &ut[0], &ut[1]);
  1551. if (!error && otmr)
  1552. error = (copy_from_user(&t, &ut[1], sizeof(struct itimerspec)) ||
  1553. put_compat_itimerspec(otmr, &t)) ? -EFAULT: 0;
  1554. return error;
  1555. }
  1556. asmlinkage long compat_sys_timerfd_gettime(int ufd,
  1557. struct compat_itimerspec __user *otmr)
  1558. {
  1559. int error;
  1560. struct itimerspec t;
  1561. struct itimerspec __user *ut;
  1562. ut = compat_alloc_user_space(sizeof(struct itimerspec));
  1563. error = sys_timerfd_gettime(ufd, ut);
  1564. if (!error)
  1565. error = (copy_from_user(&t, ut, sizeof(struct itimerspec)) ||
  1566. put_compat_itimerspec(otmr, &t)) ? -EFAULT: 0;
  1567. return error;
  1568. }
  1569. #endif /* CONFIG_TIMERFD */
  1570. #ifdef CONFIG_FHANDLE
  1571. /*
  1572. * Exactly like fs/open.c:sys_open_by_handle_at(), except that it
  1573. * doesn't set the O_LARGEFILE flag.
  1574. */
  1575. asmlinkage long
  1576. compat_sys_open_by_handle_at(int mountdirfd,
  1577. struct file_handle __user *handle, int flags)
  1578. {
  1579. return do_handle_open(mountdirfd, handle, flags);
  1580. }
  1581. #endif