compat.c 56 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299
  1. /*
  2. * linux/fs/compat.c
  3. *
  4. * Kernel compatibililty routines for e.g. 32 bit syscall support
  5. * on 64 bit kernels.
  6. *
  7. * Copyright (C) 2002 Stephen Rothwell, IBM Corporation
  8. * Copyright (C) 1997-2000 Jakub Jelinek (jakub@redhat.com)
  9. * Copyright (C) 1998 Eddie C. Dost (ecd@skynet.be)
  10. * Copyright (C) 2001,2002 Andi Kleen, SuSE Labs
  11. * Copyright (C) 2003 Pavel Machek (pavel@ucw.cz)
  12. *
  13. * This program is free software; you can redistribute it and/or modify
  14. * it under the terms of the GNU General Public License version 2 as
  15. * published by the Free Software Foundation.
  16. */
  17. #include <linux/stddef.h>
  18. #include <linux/kernel.h>
  19. #include <linux/linkage.h>
  20. #include <linux/compat.h>
  21. #include <linux/errno.h>
  22. #include <linux/time.h>
  23. #include <linux/fs.h>
  24. #include <linux/fcntl.h>
  25. #include <linux/namei.h>
  26. #include <linux/file.h>
  27. #include <linux/fdtable.h>
  28. #include <linux/vfs.h>
  29. #include <linux/ioctl.h>
  30. #include <linux/init.h>
  31. #include <linux/ncp_mount.h>
  32. #include <linux/nfs4_mount.h>
  33. #include <linux/syscalls.h>
  34. #include <linux/ctype.h>
  35. #include <linux/module.h>
  36. #include <linux/dirent.h>
  37. #include <linux/fsnotify.h>
  38. #include <linux/highuid.h>
  39. #include <linux/nfsd/syscall.h>
  40. #include <linux/personality.h>
  41. #include <linux/rwsem.h>
  42. #include <linux/tsacct_kern.h>
  43. #include <linux/security.h>
  44. #include <linux/highmem.h>
  45. #include <linux/signal.h>
  46. #include <linux/poll.h>
  47. #include <linux/mm.h>
  48. #include <linux/eventpoll.h>
  49. #include <linux/fs_struct.h>
  50. #include <linux/slab.h>
  51. #include <linux/pagemap.h>
  52. #include <asm/uaccess.h>
  53. #include <asm/mmu_context.h>
  54. #include <asm/ioctls.h>
  55. #include "internal.h"
  56. int compat_log = 1;
  57. int compat_printk(const char *fmt, ...)
  58. {
  59. va_list ap;
  60. int ret;
  61. if (!compat_log)
  62. return 0;
  63. va_start(ap, fmt);
  64. ret = vprintk(fmt, ap);
  65. va_end(ap);
  66. return ret;
  67. }
  68. #include "read_write.h"
  69. /*
  70. * Not all architectures have sys_utime, so implement this in terms
  71. * of sys_utimes.
  72. */
  73. asmlinkage long compat_sys_utime(const char __user *filename,
  74. struct compat_utimbuf __user *t)
  75. {
  76. struct timespec tv[2];
  77. if (t) {
  78. if (get_user(tv[0].tv_sec, &t->actime) ||
  79. get_user(tv[1].tv_sec, &t->modtime))
  80. return -EFAULT;
  81. tv[0].tv_nsec = 0;
  82. tv[1].tv_nsec = 0;
  83. }
  84. return do_utimes(AT_FDCWD, filename, t ? tv : NULL, 0);
  85. }
  86. asmlinkage long compat_sys_utimensat(unsigned int dfd, const char __user *filename, struct compat_timespec __user *t, int flags)
  87. {
  88. struct timespec tv[2];
  89. if (t) {
  90. if (get_compat_timespec(&tv[0], &t[0]) ||
  91. get_compat_timespec(&tv[1], &t[1]))
  92. return -EFAULT;
  93. if (tv[0].tv_nsec == UTIME_OMIT && tv[1].tv_nsec == UTIME_OMIT)
  94. return 0;
  95. }
  96. return do_utimes(dfd, filename, t ? tv : NULL, flags);
  97. }
  98. asmlinkage long compat_sys_futimesat(unsigned int dfd, const char __user *filename, struct compat_timeval __user *t)
  99. {
  100. struct timespec tv[2];
  101. if (t) {
  102. if (get_user(tv[0].tv_sec, &t[0].tv_sec) ||
  103. get_user(tv[0].tv_nsec, &t[0].tv_usec) ||
  104. get_user(tv[1].tv_sec, &t[1].tv_sec) ||
  105. get_user(tv[1].tv_nsec, &t[1].tv_usec))
  106. return -EFAULT;
  107. if (tv[0].tv_nsec >= 1000000 || tv[0].tv_nsec < 0 ||
  108. tv[1].tv_nsec >= 1000000 || tv[1].tv_nsec < 0)
  109. return -EINVAL;
  110. tv[0].tv_nsec *= 1000;
  111. tv[1].tv_nsec *= 1000;
  112. }
  113. return do_utimes(dfd, filename, t ? tv : NULL, 0);
  114. }
  115. asmlinkage long compat_sys_utimes(const char __user *filename, struct compat_timeval __user *t)
  116. {
  117. return compat_sys_futimesat(AT_FDCWD, filename, t);
  118. }
  119. static int cp_compat_stat(struct kstat *stat, struct compat_stat __user *ubuf)
  120. {
  121. compat_ino_t ino = stat->ino;
  122. typeof(ubuf->st_uid) uid = 0;
  123. typeof(ubuf->st_gid) gid = 0;
  124. int err;
  125. SET_UID(uid, stat->uid);
  126. SET_GID(gid, stat->gid);
  127. if ((u64) stat->size > MAX_NON_LFS ||
  128. !old_valid_dev(stat->dev) ||
  129. !old_valid_dev(stat->rdev))
  130. return -EOVERFLOW;
  131. if (sizeof(ino) < sizeof(stat->ino) && ino != stat->ino)
  132. return -EOVERFLOW;
  133. if (clear_user(ubuf, sizeof(*ubuf)))
  134. return -EFAULT;
  135. err = __put_user(old_encode_dev(stat->dev), &ubuf->st_dev);
  136. err |= __put_user(ino, &ubuf->st_ino);
  137. err |= __put_user(stat->mode, &ubuf->st_mode);
  138. err |= __put_user(stat->nlink, &ubuf->st_nlink);
  139. err |= __put_user(uid, &ubuf->st_uid);
  140. err |= __put_user(gid, &ubuf->st_gid);
  141. err |= __put_user(old_encode_dev(stat->rdev), &ubuf->st_rdev);
  142. err |= __put_user(stat->size, &ubuf->st_size);
  143. err |= __put_user(stat->atime.tv_sec, &ubuf->st_atime);
  144. err |= __put_user(stat->atime.tv_nsec, &ubuf->st_atime_nsec);
  145. err |= __put_user(stat->mtime.tv_sec, &ubuf->st_mtime);
  146. err |= __put_user(stat->mtime.tv_nsec, &ubuf->st_mtime_nsec);
  147. err |= __put_user(stat->ctime.tv_sec, &ubuf->st_ctime);
  148. err |= __put_user(stat->ctime.tv_nsec, &ubuf->st_ctime_nsec);
  149. err |= __put_user(stat->blksize, &ubuf->st_blksize);
  150. err |= __put_user(stat->blocks, &ubuf->st_blocks);
  151. return err;
  152. }
  153. asmlinkage long compat_sys_newstat(const char __user * filename,
  154. struct compat_stat __user *statbuf)
  155. {
  156. struct kstat stat;
  157. int error;
  158. error = vfs_stat(filename, &stat);
  159. if (error)
  160. return error;
  161. return cp_compat_stat(&stat, statbuf);
  162. }
  163. asmlinkage long compat_sys_newlstat(const char __user * filename,
  164. struct compat_stat __user *statbuf)
  165. {
  166. struct kstat stat;
  167. int error;
  168. error = vfs_lstat(filename, &stat);
  169. if (error)
  170. return error;
  171. return cp_compat_stat(&stat, statbuf);
  172. }
  173. #ifndef __ARCH_WANT_STAT64
  174. asmlinkage long compat_sys_newfstatat(unsigned int dfd,
  175. const char __user *filename,
  176. struct compat_stat __user *statbuf, int flag)
  177. {
  178. struct kstat stat;
  179. int error;
  180. error = vfs_fstatat(dfd, filename, &stat, flag);
  181. if (error)
  182. return error;
  183. return cp_compat_stat(&stat, statbuf);
  184. }
  185. #endif
  186. asmlinkage long compat_sys_newfstat(unsigned int fd,
  187. struct compat_stat __user * statbuf)
  188. {
  189. struct kstat stat;
  190. int error = vfs_fstat(fd, &stat);
  191. if (!error)
  192. error = cp_compat_stat(&stat, statbuf);
  193. return error;
  194. }
  195. static int put_compat_statfs(struct compat_statfs __user *ubuf, struct kstatfs *kbuf)
  196. {
  197. if (sizeof ubuf->f_blocks == 4) {
  198. if ((kbuf->f_blocks | kbuf->f_bfree | kbuf->f_bavail |
  199. kbuf->f_bsize | kbuf->f_frsize) & 0xffffffff00000000ULL)
  200. return -EOVERFLOW;
  201. /* f_files and f_ffree may be -1; it's okay
  202. * to stuff that into 32 bits */
  203. if (kbuf->f_files != 0xffffffffffffffffULL
  204. && (kbuf->f_files & 0xffffffff00000000ULL))
  205. return -EOVERFLOW;
  206. if (kbuf->f_ffree != 0xffffffffffffffffULL
  207. && (kbuf->f_ffree & 0xffffffff00000000ULL))
  208. return -EOVERFLOW;
  209. }
  210. if (!access_ok(VERIFY_WRITE, ubuf, sizeof(*ubuf)) ||
  211. __put_user(kbuf->f_type, &ubuf->f_type) ||
  212. __put_user(kbuf->f_bsize, &ubuf->f_bsize) ||
  213. __put_user(kbuf->f_blocks, &ubuf->f_blocks) ||
  214. __put_user(kbuf->f_bfree, &ubuf->f_bfree) ||
  215. __put_user(kbuf->f_bavail, &ubuf->f_bavail) ||
  216. __put_user(kbuf->f_files, &ubuf->f_files) ||
  217. __put_user(kbuf->f_ffree, &ubuf->f_ffree) ||
  218. __put_user(kbuf->f_namelen, &ubuf->f_namelen) ||
  219. __put_user(kbuf->f_fsid.val[0], &ubuf->f_fsid.val[0]) ||
  220. __put_user(kbuf->f_fsid.val[1], &ubuf->f_fsid.val[1]) ||
  221. __put_user(kbuf->f_frsize, &ubuf->f_frsize) ||
  222. __put_user(0, &ubuf->f_spare[0]) ||
  223. __put_user(0, &ubuf->f_spare[1]) ||
  224. __put_user(0, &ubuf->f_spare[2]) ||
  225. __put_user(0, &ubuf->f_spare[3]) ||
  226. __put_user(0, &ubuf->f_spare[4]))
  227. return -EFAULT;
  228. return 0;
  229. }
  230. /*
  231. * The following statfs calls are copies of code from fs/statfs.c and
  232. * should be checked against those from time to time
  233. */
  234. asmlinkage long compat_sys_statfs(const char __user *pathname, struct compat_statfs __user *buf)
  235. {
  236. struct kstatfs tmp;
  237. int error = user_statfs(pathname, &tmp);
  238. if (!error)
  239. error = put_compat_statfs(buf, &tmp);
  240. return error;
  241. }
  242. asmlinkage long compat_sys_fstatfs(unsigned int fd, struct compat_statfs __user *buf)
  243. {
  244. struct kstatfs tmp;
  245. int error = fd_statfs(fd, &tmp);
  246. if (!error)
  247. error = put_compat_statfs(buf, &tmp);
  248. return error;
  249. }
  250. static int put_compat_statfs64(struct compat_statfs64 __user *ubuf, struct kstatfs *kbuf)
  251. {
  252. if (sizeof ubuf->f_blocks == 4) {
  253. if ((kbuf->f_blocks | kbuf->f_bfree | kbuf->f_bavail |
  254. kbuf->f_bsize | kbuf->f_frsize) & 0xffffffff00000000ULL)
  255. return -EOVERFLOW;
  256. /* f_files and f_ffree may be -1; it's okay
  257. * to stuff that into 32 bits */
  258. if (kbuf->f_files != 0xffffffffffffffffULL
  259. && (kbuf->f_files & 0xffffffff00000000ULL))
  260. return -EOVERFLOW;
  261. if (kbuf->f_ffree != 0xffffffffffffffffULL
  262. && (kbuf->f_ffree & 0xffffffff00000000ULL))
  263. return -EOVERFLOW;
  264. }
  265. if (!access_ok(VERIFY_WRITE, ubuf, sizeof(*ubuf)) ||
  266. __put_user(kbuf->f_type, &ubuf->f_type) ||
  267. __put_user(kbuf->f_bsize, &ubuf->f_bsize) ||
  268. __put_user(kbuf->f_blocks, &ubuf->f_blocks) ||
  269. __put_user(kbuf->f_bfree, &ubuf->f_bfree) ||
  270. __put_user(kbuf->f_bavail, &ubuf->f_bavail) ||
  271. __put_user(kbuf->f_files, &ubuf->f_files) ||
  272. __put_user(kbuf->f_ffree, &ubuf->f_ffree) ||
  273. __put_user(kbuf->f_namelen, &ubuf->f_namelen) ||
  274. __put_user(kbuf->f_fsid.val[0], &ubuf->f_fsid.val[0]) ||
  275. __put_user(kbuf->f_fsid.val[1], &ubuf->f_fsid.val[1]) ||
  276. __put_user(kbuf->f_frsize, &ubuf->f_frsize) ||
  277. __put_user(kbuf->f_flags, &ubuf->f_flags) ||
  278. __clear_user(ubuf->f_spare, sizeof(ubuf->f_spare)))
  279. return -EFAULT;
  280. return 0;
  281. }
  282. asmlinkage long compat_sys_statfs64(const char __user *pathname, compat_size_t sz, struct compat_statfs64 __user *buf)
  283. {
  284. struct kstatfs tmp;
  285. int error;
  286. if (sz != sizeof(*buf))
  287. return -EINVAL;
  288. error = user_statfs(pathname, &tmp);
  289. if (!error)
  290. error = put_compat_statfs64(buf, &tmp);
  291. return error;
  292. }
  293. asmlinkage long compat_sys_fstatfs64(unsigned int fd, compat_size_t sz, struct compat_statfs64 __user *buf)
  294. {
  295. struct kstatfs tmp;
  296. int error;
  297. if (sz != sizeof(*buf))
  298. return -EINVAL;
  299. error = fd_statfs(fd, &tmp);
  300. if (!error)
  301. error = put_compat_statfs64(buf, &tmp);
  302. return error;
  303. }
  304. /*
  305. * This is a copy of sys_ustat, just dealing with a structure layout.
  306. * Given how simple this syscall is that apporach is more maintainable
  307. * than the various conversion hacks.
  308. */
  309. asmlinkage long compat_sys_ustat(unsigned dev, struct compat_ustat __user *u)
  310. {
  311. struct super_block *sb;
  312. struct compat_ustat tmp;
  313. struct kstatfs sbuf;
  314. int err;
  315. sb = user_get_super(new_decode_dev(dev));
  316. if (!sb)
  317. return -EINVAL;
  318. err = statfs_by_dentry(sb->s_root, &sbuf);
  319. drop_super(sb);
  320. if (err)
  321. return err;
  322. memset(&tmp, 0, sizeof(struct compat_ustat));
  323. tmp.f_tfree = sbuf.f_bfree;
  324. tmp.f_tinode = sbuf.f_ffree;
  325. if (copy_to_user(u, &tmp, sizeof(struct compat_ustat)))
  326. return -EFAULT;
  327. return 0;
  328. }
  329. static int get_compat_flock(struct flock *kfl, struct compat_flock __user *ufl)
  330. {
  331. if (!access_ok(VERIFY_READ, ufl, sizeof(*ufl)) ||
  332. __get_user(kfl->l_type, &ufl->l_type) ||
  333. __get_user(kfl->l_whence, &ufl->l_whence) ||
  334. __get_user(kfl->l_start, &ufl->l_start) ||
  335. __get_user(kfl->l_len, &ufl->l_len) ||
  336. __get_user(kfl->l_pid, &ufl->l_pid))
  337. return -EFAULT;
  338. return 0;
  339. }
  340. static int put_compat_flock(struct flock *kfl, struct compat_flock __user *ufl)
  341. {
  342. if (!access_ok(VERIFY_WRITE, ufl, sizeof(*ufl)) ||
  343. __put_user(kfl->l_type, &ufl->l_type) ||
  344. __put_user(kfl->l_whence, &ufl->l_whence) ||
  345. __put_user(kfl->l_start, &ufl->l_start) ||
  346. __put_user(kfl->l_len, &ufl->l_len) ||
  347. __put_user(kfl->l_pid, &ufl->l_pid))
  348. return -EFAULT;
  349. return 0;
  350. }
  351. #ifndef HAVE_ARCH_GET_COMPAT_FLOCK64
  352. static int get_compat_flock64(struct flock *kfl, struct compat_flock64 __user *ufl)
  353. {
  354. if (!access_ok(VERIFY_READ, ufl, sizeof(*ufl)) ||
  355. __get_user(kfl->l_type, &ufl->l_type) ||
  356. __get_user(kfl->l_whence, &ufl->l_whence) ||
  357. __get_user(kfl->l_start, &ufl->l_start) ||
  358. __get_user(kfl->l_len, &ufl->l_len) ||
  359. __get_user(kfl->l_pid, &ufl->l_pid))
  360. return -EFAULT;
  361. return 0;
  362. }
  363. #endif
  364. #ifndef HAVE_ARCH_PUT_COMPAT_FLOCK64
  365. static int put_compat_flock64(struct flock *kfl, struct compat_flock64 __user *ufl)
  366. {
  367. if (!access_ok(VERIFY_WRITE, ufl, sizeof(*ufl)) ||
  368. __put_user(kfl->l_type, &ufl->l_type) ||
  369. __put_user(kfl->l_whence, &ufl->l_whence) ||
  370. __put_user(kfl->l_start, &ufl->l_start) ||
  371. __put_user(kfl->l_len, &ufl->l_len) ||
  372. __put_user(kfl->l_pid, &ufl->l_pid))
  373. return -EFAULT;
  374. return 0;
  375. }
  376. #endif
  377. asmlinkage long compat_sys_fcntl64(unsigned int fd, unsigned int cmd,
  378. unsigned long arg)
  379. {
  380. mm_segment_t old_fs;
  381. struct flock f;
  382. long ret;
  383. switch (cmd) {
  384. case F_GETLK:
  385. case F_SETLK:
  386. case F_SETLKW:
  387. ret = get_compat_flock(&f, compat_ptr(arg));
  388. if (ret != 0)
  389. break;
  390. old_fs = get_fs();
  391. set_fs(KERNEL_DS);
  392. ret = sys_fcntl(fd, cmd, (unsigned long)&f);
  393. set_fs(old_fs);
  394. if (cmd == F_GETLK && ret == 0) {
  395. /* GETLK was successful and we need to return the data...
  396. * but it needs to fit in the compat structure.
  397. * l_start shouldn't be too big, unless the original
  398. * start + end is greater than COMPAT_OFF_T_MAX, in which
  399. * case the app was asking for trouble, so we return
  400. * -EOVERFLOW in that case.
  401. * l_len could be too big, in which case we just truncate it,
  402. * and only allow the app to see that part of the conflicting
  403. * lock that might make sense to it anyway
  404. */
  405. if (f.l_start > COMPAT_OFF_T_MAX)
  406. ret = -EOVERFLOW;
  407. if (f.l_len > COMPAT_OFF_T_MAX)
  408. f.l_len = COMPAT_OFF_T_MAX;
  409. if (ret == 0)
  410. ret = put_compat_flock(&f, compat_ptr(arg));
  411. }
  412. break;
  413. case F_GETLK64:
  414. case F_SETLK64:
  415. case F_SETLKW64:
  416. ret = get_compat_flock64(&f, compat_ptr(arg));
  417. if (ret != 0)
  418. break;
  419. old_fs = get_fs();
  420. set_fs(KERNEL_DS);
  421. ret = sys_fcntl(fd, (cmd == F_GETLK64) ? F_GETLK :
  422. ((cmd == F_SETLK64) ? F_SETLK : F_SETLKW),
  423. (unsigned long)&f);
  424. set_fs(old_fs);
  425. if (cmd == F_GETLK64 && ret == 0) {
  426. /* need to return lock information - see above for commentary */
  427. if (f.l_start > COMPAT_LOFF_T_MAX)
  428. ret = -EOVERFLOW;
  429. if (f.l_len > COMPAT_LOFF_T_MAX)
  430. f.l_len = COMPAT_LOFF_T_MAX;
  431. if (ret == 0)
  432. ret = put_compat_flock64(&f, compat_ptr(arg));
  433. }
  434. break;
  435. default:
  436. ret = sys_fcntl(fd, cmd, arg);
  437. break;
  438. }
  439. return ret;
  440. }
  441. asmlinkage long compat_sys_fcntl(unsigned int fd, unsigned int cmd,
  442. unsigned long arg)
  443. {
  444. if ((cmd == F_GETLK64) || (cmd == F_SETLK64) || (cmd == F_SETLKW64))
  445. return -EINVAL;
  446. return compat_sys_fcntl64(fd, cmd, arg);
  447. }
  448. asmlinkage long
  449. compat_sys_io_setup(unsigned nr_reqs, u32 __user *ctx32p)
  450. {
  451. long ret;
  452. aio_context_t ctx64;
  453. mm_segment_t oldfs = get_fs();
  454. if (unlikely(get_user(ctx64, ctx32p)))
  455. return -EFAULT;
  456. set_fs(KERNEL_DS);
  457. /* The __user pointer cast is valid because of the set_fs() */
  458. ret = sys_io_setup(nr_reqs, (aio_context_t __user *) &ctx64);
  459. set_fs(oldfs);
  460. /* truncating is ok because it's a user address */
  461. if (!ret)
  462. ret = put_user((u32) ctx64, ctx32p);
  463. return ret;
  464. }
  465. asmlinkage long
  466. compat_sys_io_getevents(aio_context_t ctx_id,
  467. unsigned long min_nr,
  468. unsigned long nr,
  469. struct io_event __user *events,
  470. struct compat_timespec __user *timeout)
  471. {
  472. long ret;
  473. struct timespec t;
  474. struct timespec __user *ut = NULL;
  475. ret = -EFAULT;
  476. if (unlikely(!access_ok(VERIFY_WRITE, events,
  477. nr * sizeof(struct io_event))))
  478. goto out;
  479. if (timeout) {
  480. if (get_compat_timespec(&t, timeout))
  481. goto out;
  482. ut = compat_alloc_user_space(sizeof(*ut));
  483. if (copy_to_user(ut, &t, sizeof(t)) )
  484. goto out;
  485. }
  486. ret = sys_io_getevents(ctx_id, min_nr, nr, events, ut);
  487. out:
  488. return ret;
  489. }
  490. /* A write operation does a read from user space and vice versa */
  491. #define vrfy_dir(type) ((type) == READ ? VERIFY_WRITE : VERIFY_READ)
  492. ssize_t compat_rw_copy_check_uvector(int type,
  493. const struct compat_iovec __user *uvector, unsigned long nr_segs,
  494. unsigned long fast_segs, struct iovec *fast_pointer,
  495. struct iovec **ret_pointer)
  496. {
  497. compat_ssize_t tot_len;
  498. struct iovec *iov = *ret_pointer = fast_pointer;
  499. ssize_t ret = 0;
  500. int seg;
  501. /*
  502. * SuS says "The readv() function *may* fail if the iovcnt argument
  503. * was less than or equal to 0, or greater than {IOV_MAX}. Linux has
  504. * traditionally returned zero for zero segments, so...
  505. */
  506. if (nr_segs == 0)
  507. goto out;
  508. ret = -EINVAL;
  509. if (nr_segs > UIO_MAXIOV || nr_segs < 0)
  510. goto out;
  511. if (nr_segs > fast_segs) {
  512. ret = -ENOMEM;
  513. iov = kmalloc(nr_segs*sizeof(struct iovec), GFP_KERNEL);
  514. if (iov == NULL)
  515. goto out;
  516. }
  517. *ret_pointer = iov;
  518. /*
  519. * Single unix specification:
  520. * We should -EINVAL if an element length is not >= 0 and fitting an
  521. * ssize_t.
  522. *
  523. * In Linux, the total length is limited to MAX_RW_COUNT, there is
  524. * no overflow possibility.
  525. */
  526. tot_len = 0;
  527. ret = -EINVAL;
  528. for (seg = 0; seg < nr_segs; seg++) {
  529. compat_uptr_t buf;
  530. compat_ssize_t len;
  531. if (__get_user(len, &uvector->iov_len) ||
  532. __get_user(buf, &uvector->iov_base)) {
  533. ret = -EFAULT;
  534. goto out;
  535. }
  536. if (len < 0) /* size_t not fitting in compat_ssize_t .. */
  537. goto out;
  538. if (!access_ok(vrfy_dir(type), compat_ptr(buf), len)) {
  539. ret = -EFAULT;
  540. goto out;
  541. }
  542. if (len > MAX_RW_COUNT - tot_len)
  543. len = MAX_RW_COUNT - tot_len;
  544. tot_len += len;
  545. iov->iov_base = compat_ptr(buf);
  546. iov->iov_len = (compat_size_t) len;
  547. uvector++;
  548. iov++;
  549. }
  550. ret = tot_len;
  551. out:
  552. return ret;
  553. }
  554. static inline long
  555. copy_iocb(long nr, u32 __user *ptr32, struct iocb __user * __user *ptr64)
  556. {
  557. compat_uptr_t uptr;
  558. int i;
  559. for (i = 0; i < nr; ++i) {
  560. if (get_user(uptr, ptr32 + i))
  561. return -EFAULT;
  562. if (put_user(compat_ptr(uptr), ptr64 + i))
  563. return -EFAULT;
  564. }
  565. return 0;
  566. }
  567. #define MAX_AIO_SUBMITS (PAGE_SIZE/sizeof(struct iocb *))
  568. asmlinkage long
  569. compat_sys_io_submit(aio_context_t ctx_id, int nr, u32 __user *iocb)
  570. {
  571. struct iocb __user * __user *iocb64;
  572. long ret;
  573. if (unlikely(nr < 0))
  574. return -EINVAL;
  575. if (nr > MAX_AIO_SUBMITS)
  576. nr = MAX_AIO_SUBMITS;
  577. iocb64 = compat_alloc_user_space(nr * sizeof(*iocb64));
  578. ret = copy_iocb(nr, iocb, iocb64);
  579. if (!ret)
  580. ret = do_io_submit(ctx_id, nr, iocb64, 1);
  581. return ret;
  582. }
  583. struct compat_ncp_mount_data {
  584. compat_int_t version;
  585. compat_uint_t ncp_fd;
  586. __compat_uid_t mounted_uid;
  587. compat_pid_t wdog_pid;
  588. unsigned char mounted_vol[NCP_VOLNAME_LEN + 1];
  589. compat_uint_t time_out;
  590. compat_uint_t retry_count;
  591. compat_uint_t flags;
  592. __compat_uid_t uid;
  593. __compat_gid_t gid;
  594. compat_mode_t file_mode;
  595. compat_mode_t dir_mode;
  596. };
  597. struct compat_ncp_mount_data_v4 {
  598. compat_int_t version;
  599. compat_ulong_t flags;
  600. compat_ulong_t mounted_uid;
  601. compat_long_t wdog_pid;
  602. compat_uint_t ncp_fd;
  603. compat_uint_t time_out;
  604. compat_uint_t retry_count;
  605. compat_ulong_t uid;
  606. compat_ulong_t gid;
  607. compat_ulong_t file_mode;
  608. compat_ulong_t dir_mode;
  609. };
  610. static void *do_ncp_super_data_conv(void *raw_data)
  611. {
  612. int version = *(unsigned int *)raw_data;
  613. if (version == 3) {
  614. struct compat_ncp_mount_data *c_n = raw_data;
  615. struct ncp_mount_data *n = raw_data;
  616. n->dir_mode = c_n->dir_mode;
  617. n->file_mode = c_n->file_mode;
  618. n->gid = c_n->gid;
  619. n->uid = c_n->uid;
  620. memmove (n->mounted_vol, c_n->mounted_vol, (sizeof (c_n->mounted_vol) + 3 * sizeof (unsigned int)));
  621. n->wdog_pid = c_n->wdog_pid;
  622. n->mounted_uid = c_n->mounted_uid;
  623. } else if (version == 4) {
  624. struct compat_ncp_mount_data_v4 *c_n = raw_data;
  625. struct ncp_mount_data_v4 *n = raw_data;
  626. n->dir_mode = c_n->dir_mode;
  627. n->file_mode = c_n->file_mode;
  628. n->gid = c_n->gid;
  629. n->uid = c_n->uid;
  630. n->retry_count = c_n->retry_count;
  631. n->time_out = c_n->time_out;
  632. n->ncp_fd = c_n->ncp_fd;
  633. n->wdog_pid = c_n->wdog_pid;
  634. n->mounted_uid = c_n->mounted_uid;
  635. n->flags = c_n->flags;
  636. } else if (version != 5) {
  637. return NULL;
  638. }
  639. return raw_data;
  640. }
  641. struct compat_nfs_string {
  642. compat_uint_t len;
  643. compat_uptr_t data;
  644. };
  645. static inline void compat_nfs_string(struct nfs_string *dst,
  646. struct compat_nfs_string *src)
  647. {
  648. dst->data = compat_ptr(src->data);
  649. dst->len = src->len;
  650. }
  651. struct compat_nfs4_mount_data_v1 {
  652. compat_int_t version;
  653. compat_int_t flags;
  654. compat_int_t rsize;
  655. compat_int_t wsize;
  656. compat_int_t timeo;
  657. compat_int_t retrans;
  658. compat_int_t acregmin;
  659. compat_int_t acregmax;
  660. compat_int_t acdirmin;
  661. compat_int_t acdirmax;
  662. struct compat_nfs_string client_addr;
  663. struct compat_nfs_string mnt_path;
  664. struct compat_nfs_string hostname;
  665. compat_uint_t host_addrlen;
  666. compat_uptr_t host_addr;
  667. compat_int_t proto;
  668. compat_int_t auth_flavourlen;
  669. compat_uptr_t auth_flavours;
  670. };
  671. static int do_nfs4_super_data_conv(void *raw_data)
  672. {
  673. int version = *(compat_uint_t *) raw_data;
  674. if (version == 1) {
  675. struct compat_nfs4_mount_data_v1 *raw = raw_data;
  676. struct nfs4_mount_data *real = raw_data;
  677. /* copy the fields backwards */
  678. real->auth_flavours = compat_ptr(raw->auth_flavours);
  679. real->auth_flavourlen = raw->auth_flavourlen;
  680. real->proto = raw->proto;
  681. real->host_addr = compat_ptr(raw->host_addr);
  682. real->host_addrlen = raw->host_addrlen;
  683. compat_nfs_string(&real->hostname, &raw->hostname);
  684. compat_nfs_string(&real->mnt_path, &raw->mnt_path);
  685. compat_nfs_string(&real->client_addr, &raw->client_addr);
  686. real->acdirmax = raw->acdirmax;
  687. real->acdirmin = raw->acdirmin;
  688. real->acregmax = raw->acregmax;
  689. real->acregmin = raw->acregmin;
  690. real->retrans = raw->retrans;
  691. real->timeo = raw->timeo;
  692. real->wsize = raw->wsize;
  693. real->rsize = raw->rsize;
  694. real->flags = raw->flags;
  695. real->version = raw->version;
  696. }
  697. return 0;
  698. }
  699. #define NCPFS_NAME "ncpfs"
  700. #define NFS4_NAME "nfs4"
  701. asmlinkage long compat_sys_mount(const char __user * dev_name,
  702. const char __user * dir_name,
  703. const char __user * type, unsigned long flags,
  704. const void __user * data)
  705. {
  706. char *kernel_type;
  707. unsigned long data_page;
  708. char *kernel_dev;
  709. char *dir_page;
  710. int retval;
  711. retval = copy_mount_string(type, &kernel_type);
  712. if (retval < 0)
  713. goto out;
  714. dir_page = getname(dir_name);
  715. retval = PTR_ERR(dir_page);
  716. if (IS_ERR(dir_page))
  717. goto out1;
  718. retval = copy_mount_string(dev_name, &kernel_dev);
  719. if (retval < 0)
  720. goto out2;
  721. retval = copy_mount_options(data, &data_page);
  722. if (retval < 0)
  723. goto out3;
  724. retval = -EINVAL;
  725. if (kernel_type && data_page) {
  726. if (!strcmp(kernel_type, NCPFS_NAME)) {
  727. do_ncp_super_data_conv((void *)data_page);
  728. } else if (!strcmp(kernel_type, NFS4_NAME)) {
  729. if (do_nfs4_super_data_conv((void *) data_page))
  730. goto out4;
  731. }
  732. }
  733. retval = do_mount(kernel_dev, dir_page, kernel_type,
  734. flags, (void*)data_page);
  735. out4:
  736. free_page(data_page);
  737. out3:
  738. kfree(kernel_dev);
  739. out2:
  740. putname(dir_page);
  741. out1:
  742. kfree(kernel_type);
  743. out:
  744. return retval;
  745. }
  746. struct compat_old_linux_dirent {
  747. compat_ulong_t d_ino;
  748. compat_ulong_t d_offset;
  749. unsigned short d_namlen;
  750. char d_name[1];
  751. };
  752. struct compat_readdir_callback {
  753. struct compat_old_linux_dirent __user *dirent;
  754. int result;
  755. };
  756. static int compat_fillonedir(void *__buf, const char *name, int namlen,
  757. loff_t offset, u64 ino, unsigned int d_type)
  758. {
  759. struct compat_readdir_callback *buf = __buf;
  760. struct compat_old_linux_dirent __user *dirent;
  761. compat_ulong_t d_ino;
  762. if (buf->result)
  763. return -EINVAL;
  764. d_ino = ino;
  765. if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) {
  766. buf->result = -EOVERFLOW;
  767. return -EOVERFLOW;
  768. }
  769. buf->result++;
  770. dirent = buf->dirent;
  771. if (!access_ok(VERIFY_WRITE, dirent,
  772. (unsigned long)(dirent->d_name + namlen + 1) -
  773. (unsigned long)dirent))
  774. goto efault;
  775. if ( __put_user(d_ino, &dirent->d_ino) ||
  776. __put_user(offset, &dirent->d_offset) ||
  777. __put_user(namlen, &dirent->d_namlen) ||
  778. __copy_to_user(dirent->d_name, name, namlen) ||
  779. __put_user(0, dirent->d_name + namlen))
  780. goto efault;
  781. return 0;
  782. efault:
  783. buf->result = -EFAULT;
  784. return -EFAULT;
  785. }
  786. asmlinkage long compat_sys_old_readdir(unsigned int fd,
  787. struct compat_old_linux_dirent __user *dirent, unsigned int count)
  788. {
  789. int error;
  790. struct file *file;
  791. struct compat_readdir_callback buf;
  792. error = -EBADF;
  793. file = fget(fd);
  794. if (!file)
  795. goto out;
  796. buf.result = 0;
  797. buf.dirent = dirent;
  798. error = vfs_readdir(file, compat_fillonedir, &buf);
  799. if (buf.result)
  800. error = buf.result;
  801. fput(file);
  802. out:
  803. return error;
  804. }
  805. struct compat_linux_dirent {
  806. compat_ulong_t d_ino;
  807. compat_ulong_t d_off;
  808. unsigned short d_reclen;
  809. char d_name[1];
  810. };
  811. struct compat_getdents_callback {
  812. struct compat_linux_dirent __user *current_dir;
  813. struct compat_linux_dirent __user *previous;
  814. int count;
  815. int error;
  816. };
  817. static int compat_filldir(void *__buf, const char *name, int namlen,
  818. loff_t offset, u64 ino, unsigned int d_type)
  819. {
  820. struct compat_linux_dirent __user * dirent;
  821. struct compat_getdents_callback *buf = __buf;
  822. compat_ulong_t d_ino;
  823. int reclen = ALIGN(offsetof(struct compat_linux_dirent, d_name) +
  824. namlen + 2, sizeof(compat_long_t));
  825. buf->error = -EINVAL; /* only used if we fail.. */
  826. if (reclen > buf->count)
  827. return -EINVAL;
  828. d_ino = ino;
  829. if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) {
  830. buf->error = -EOVERFLOW;
  831. return -EOVERFLOW;
  832. }
  833. dirent = buf->previous;
  834. if (dirent) {
  835. if (__put_user(offset, &dirent->d_off))
  836. goto efault;
  837. }
  838. dirent = buf->current_dir;
  839. if (__put_user(d_ino, &dirent->d_ino))
  840. goto efault;
  841. if (__put_user(reclen, &dirent->d_reclen))
  842. goto efault;
  843. if (copy_to_user(dirent->d_name, name, namlen))
  844. goto efault;
  845. if (__put_user(0, dirent->d_name + namlen))
  846. goto efault;
  847. if (__put_user(d_type, (char __user *) dirent + reclen - 1))
  848. goto efault;
  849. buf->previous = dirent;
  850. dirent = (void __user *)dirent + reclen;
  851. buf->current_dir = dirent;
  852. buf->count -= reclen;
  853. return 0;
  854. efault:
  855. buf->error = -EFAULT;
  856. return -EFAULT;
  857. }
  858. asmlinkage long compat_sys_getdents(unsigned int fd,
  859. struct compat_linux_dirent __user *dirent, unsigned int count)
  860. {
  861. struct file * file;
  862. struct compat_linux_dirent __user * lastdirent;
  863. struct compat_getdents_callback buf;
  864. int error;
  865. error = -EFAULT;
  866. if (!access_ok(VERIFY_WRITE, dirent, count))
  867. goto out;
  868. error = -EBADF;
  869. file = fget(fd);
  870. if (!file)
  871. goto out;
  872. buf.current_dir = dirent;
  873. buf.previous = NULL;
  874. buf.count = count;
  875. buf.error = 0;
  876. error = vfs_readdir(file, compat_filldir, &buf);
  877. if (error >= 0)
  878. error = buf.error;
  879. lastdirent = buf.previous;
  880. if (lastdirent) {
  881. if (put_user(file->f_pos, &lastdirent->d_off))
  882. error = -EFAULT;
  883. else
  884. error = count - buf.count;
  885. }
  886. fput(file);
  887. out:
  888. return error;
  889. }
  890. #ifndef __ARCH_OMIT_COMPAT_SYS_GETDENTS64
  891. struct compat_getdents_callback64 {
  892. struct linux_dirent64 __user *current_dir;
  893. struct linux_dirent64 __user *previous;
  894. int count;
  895. int error;
  896. };
  897. static int compat_filldir64(void * __buf, const char * name, int namlen, loff_t offset,
  898. u64 ino, unsigned int d_type)
  899. {
  900. struct linux_dirent64 __user *dirent;
  901. struct compat_getdents_callback64 *buf = __buf;
  902. int reclen = ALIGN(offsetof(struct linux_dirent64, d_name) + namlen + 1,
  903. sizeof(u64));
  904. u64 off;
  905. buf->error = -EINVAL; /* only used if we fail.. */
  906. if (reclen > buf->count)
  907. return -EINVAL;
  908. dirent = buf->previous;
  909. if (dirent) {
  910. if (__put_user_unaligned(offset, &dirent->d_off))
  911. goto efault;
  912. }
  913. dirent = buf->current_dir;
  914. if (__put_user_unaligned(ino, &dirent->d_ino))
  915. goto efault;
  916. off = 0;
  917. if (__put_user_unaligned(off, &dirent->d_off))
  918. goto efault;
  919. if (__put_user(reclen, &dirent->d_reclen))
  920. goto efault;
  921. if (__put_user(d_type, &dirent->d_type))
  922. goto efault;
  923. if (copy_to_user(dirent->d_name, name, namlen))
  924. goto efault;
  925. if (__put_user(0, dirent->d_name + namlen))
  926. goto efault;
  927. buf->previous = dirent;
  928. dirent = (void __user *)dirent + reclen;
  929. buf->current_dir = dirent;
  930. buf->count -= reclen;
  931. return 0;
  932. efault:
  933. buf->error = -EFAULT;
  934. return -EFAULT;
  935. }
  936. asmlinkage long compat_sys_getdents64(unsigned int fd,
  937. struct linux_dirent64 __user * dirent, unsigned int count)
  938. {
  939. struct file * file;
  940. struct linux_dirent64 __user * lastdirent;
  941. struct compat_getdents_callback64 buf;
  942. int error;
  943. error = -EFAULT;
  944. if (!access_ok(VERIFY_WRITE, dirent, count))
  945. goto out;
  946. error = -EBADF;
  947. file = fget(fd);
  948. if (!file)
  949. goto out;
  950. buf.current_dir = dirent;
  951. buf.previous = NULL;
  952. buf.count = count;
  953. buf.error = 0;
  954. error = vfs_readdir(file, compat_filldir64, &buf);
  955. if (error >= 0)
  956. error = buf.error;
  957. lastdirent = buf.previous;
  958. if (lastdirent) {
  959. typeof(lastdirent->d_off) d_off = file->f_pos;
  960. if (__put_user_unaligned(d_off, &lastdirent->d_off))
  961. error = -EFAULT;
  962. else
  963. error = count - buf.count;
  964. }
  965. fput(file);
  966. out:
  967. return error;
  968. }
  969. #endif /* ! __ARCH_OMIT_COMPAT_SYS_GETDENTS64 */
  970. static ssize_t compat_do_readv_writev(int type, struct file *file,
  971. const struct compat_iovec __user *uvector,
  972. unsigned long nr_segs, loff_t *pos)
  973. {
  974. compat_ssize_t tot_len;
  975. struct iovec iovstack[UIO_FASTIOV];
  976. struct iovec *iov = iovstack;
  977. ssize_t ret;
  978. io_fn_t fn;
  979. iov_fn_t fnv;
  980. ret = -EINVAL;
  981. if (!file->f_op)
  982. goto out;
  983. ret = -EFAULT;
  984. if (!access_ok(VERIFY_READ, uvector, nr_segs*sizeof(*uvector)))
  985. goto out;
  986. tot_len = compat_rw_copy_check_uvector(type, uvector, nr_segs,
  987. UIO_FASTIOV, iovstack, &iov);
  988. if (tot_len == 0) {
  989. ret = 0;
  990. goto out;
  991. }
  992. ret = rw_verify_area(type, file, pos, tot_len);
  993. if (ret < 0)
  994. goto out;
  995. fnv = NULL;
  996. if (type == READ) {
  997. fn = file->f_op->read;
  998. fnv = file->f_op->aio_read;
  999. } else {
  1000. fn = (io_fn_t)file->f_op->write;
  1001. fnv = file->f_op->aio_write;
  1002. }
  1003. if (fnv)
  1004. ret = do_sync_readv_writev(file, iov, nr_segs, tot_len,
  1005. pos, fnv);
  1006. else
  1007. ret = do_loop_readv_writev(file, iov, nr_segs, pos, fn);
  1008. out:
  1009. if (iov != iovstack)
  1010. kfree(iov);
  1011. if ((ret + (type == READ)) > 0) {
  1012. if (type == READ)
  1013. fsnotify_access(file);
  1014. else
  1015. fsnotify_modify(file);
  1016. }
  1017. return ret;
  1018. }
  1019. static size_t compat_readv(struct file *file,
  1020. const struct compat_iovec __user *vec,
  1021. unsigned long vlen, loff_t *pos)
  1022. {
  1023. ssize_t ret = -EBADF;
  1024. if (!(file->f_mode & FMODE_READ))
  1025. goto out;
  1026. ret = -EINVAL;
  1027. if (!file->f_op || (!file->f_op->aio_read && !file->f_op->read))
  1028. goto out;
  1029. ret = compat_do_readv_writev(READ, file, vec, vlen, pos);
  1030. out:
  1031. if (ret > 0)
  1032. add_rchar(current, ret);
  1033. inc_syscr(current);
  1034. return ret;
  1035. }
  1036. asmlinkage ssize_t
  1037. compat_sys_readv(unsigned long fd, const struct compat_iovec __user *vec,
  1038. unsigned long vlen)
  1039. {
  1040. struct file *file;
  1041. int fput_needed;
  1042. ssize_t ret;
  1043. file = fget_light(fd, &fput_needed);
  1044. if (!file)
  1045. return -EBADF;
  1046. ret = compat_readv(file, vec, vlen, &file->f_pos);
  1047. fput_light(file, fput_needed);
  1048. return ret;
  1049. }
  1050. asmlinkage ssize_t
  1051. compat_sys_preadv(unsigned long fd, const struct compat_iovec __user *vec,
  1052. unsigned long vlen, u32 pos_low, u32 pos_high)
  1053. {
  1054. loff_t pos = ((loff_t)pos_high << 32) | pos_low;
  1055. struct file *file;
  1056. int fput_needed;
  1057. ssize_t ret;
  1058. if (pos < 0)
  1059. return -EINVAL;
  1060. file = fget_light(fd, &fput_needed);
  1061. if (!file)
  1062. return -EBADF;
  1063. ret = -ESPIPE;
  1064. if (file->f_mode & FMODE_PREAD)
  1065. ret = compat_readv(file, vec, vlen, &pos);
  1066. fput_light(file, fput_needed);
  1067. return ret;
  1068. }
  1069. static size_t compat_writev(struct file *file,
  1070. const struct compat_iovec __user *vec,
  1071. unsigned long vlen, loff_t *pos)
  1072. {
  1073. ssize_t ret = -EBADF;
  1074. if (!(file->f_mode & FMODE_WRITE))
  1075. goto out;
  1076. ret = -EINVAL;
  1077. if (!file->f_op || (!file->f_op->aio_write && !file->f_op->write))
  1078. goto out;
  1079. ret = compat_do_readv_writev(WRITE, file, vec, vlen, pos);
  1080. out:
  1081. if (ret > 0)
  1082. add_wchar(current, ret);
  1083. inc_syscw(current);
  1084. return ret;
  1085. }
  1086. asmlinkage ssize_t
  1087. compat_sys_writev(unsigned long fd, const struct compat_iovec __user *vec,
  1088. unsigned long vlen)
  1089. {
  1090. struct file *file;
  1091. int fput_needed;
  1092. ssize_t ret;
  1093. file = fget_light(fd, &fput_needed);
  1094. if (!file)
  1095. return -EBADF;
  1096. ret = compat_writev(file, vec, vlen, &file->f_pos);
  1097. fput_light(file, fput_needed);
  1098. return ret;
  1099. }
  1100. asmlinkage ssize_t
  1101. compat_sys_pwritev(unsigned long fd, const struct compat_iovec __user *vec,
  1102. unsigned long vlen, u32 pos_low, u32 pos_high)
  1103. {
  1104. loff_t pos = ((loff_t)pos_high << 32) | pos_low;
  1105. struct file *file;
  1106. int fput_needed;
  1107. ssize_t ret;
  1108. if (pos < 0)
  1109. return -EINVAL;
  1110. file = fget_light(fd, &fput_needed);
  1111. if (!file)
  1112. return -EBADF;
  1113. ret = -ESPIPE;
  1114. if (file->f_mode & FMODE_PWRITE)
  1115. ret = compat_writev(file, vec, vlen, &pos);
  1116. fput_light(file, fput_needed);
  1117. return ret;
  1118. }
  1119. asmlinkage long
  1120. compat_sys_vmsplice(int fd, const struct compat_iovec __user *iov32,
  1121. unsigned int nr_segs, unsigned int flags)
  1122. {
  1123. unsigned i;
  1124. struct iovec __user *iov;
  1125. if (nr_segs > UIO_MAXIOV)
  1126. return -EINVAL;
  1127. iov = compat_alloc_user_space(nr_segs * sizeof(struct iovec));
  1128. for (i = 0; i < nr_segs; i++) {
  1129. struct compat_iovec v;
  1130. if (get_user(v.iov_base, &iov32[i].iov_base) ||
  1131. get_user(v.iov_len, &iov32[i].iov_len) ||
  1132. put_user(compat_ptr(v.iov_base), &iov[i].iov_base) ||
  1133. put_user(v.iov_len, &iov[i].iov_len))
  1134. return -EFAULT;
  1135. }
  1136. return sys_vmsplice(fd, iov, nr_segs, flags);
  1137. }
  1138. /*
  1139. * Exactly like fs/open.c:sys_open(), except that it doesn't set the
  1140. * O_LARGEFILE flag.
  1141. */
  1142. asmlinkage long
  1143. compat_sys_open(const char __user *filename, int flags, int mode)
  1144. {
  1145. return do_sys_open(AT_FDCWD, filename, flags, mode);
  1146. }
  1147. /*
  1148. * Exactly like fs/open.c:sys_openat(), except that it doesn't set the
  1149. * O_LARGEFILE flag.
  1150. */
  1151. asmlinkage long
  1152. compat_sys_openat(unsigned int dfd, const char __user *filename, int flags, int mode)
  1153. {
  1154. return do_sys_open(dfd, filename, flags, mode);
  1155. }
  1156. /*
  1157. * compat_count() counts the number of arguments/envelopes. It is basically
  1158. * a copy of count() from fs/exec.c, except that it works with 32 bit argv
  1159. * and envp pointers.
  1160. */
  1161. static int compat_count(compat_uptr_t __user *argv, int max)
  1162. {
  1163. int i = 0;
  1164. if (argv != NULL) {
  1165. for (;;) {
  1166. compat_uptr_t p;
  1167. if (get_user(p, argv))
  1168. return -EFAULT;
  1169. if (!p)
  1170. break;
  1171. argv++;
  1172. if (i++ >= max)
  1173. return -E2BIG;
  1174. if (fatal_signal_pending(current))
  1175. return -ERESTARTNOHAND;
  1176. cond_resched();
  1177. }
  1178. }
  1179. return i;
  1180. }
  1181. /*
  1182. * compat_copy_strings() is basically a copy of copy_strings() from fs/exec.c
  1183. * except that it works with 32 bit argv and envp pointers.
  1184. */
  1185. static int compat_copy_strings(int argc, compat_uptr_t __user *argv,
  1186. struct linux_binprm *bprm)
  1187. {
  1188. struct page *kmapped_page = NULL;
  1189. char *kaddr = NULL;
  1190. unsigned long kpos = 0;
  1191. int ret;
  1192. while (argc-- > 0) {
  1193. compat_uptr_t str;
  1194. int len;
  1195. unsigned long pos;
  1196. if (get_user(str, argv+argc) ||
  1197. !(len = strnlen_user(compat_ptr(str), MAX_ARG_STRLEN))) {
  1198. ret = -EFAULT;
  1199. goto out;
  1200. }
  1201. if (len > MAX_ARG_STRLEN) {
  1202. ret = -E2BIG;
  1203. goto out;
  1204. }
  1205. /* We're going to work our way backwords. */
  1206. pos = bprm->p;
  1207. str += len;
  1208. bprm->p -= len;
  1209. while (len > 0) {
  1210. int offset, bytes_to_copy;
  1211. if (fatal_signal_pending(current)) {
  1212. ret = -ERESTARTNOHAND;
  1213. goto out;
  1214. }
  1215. cond_resched();
  1216. offset = pos % PAGE_SIZE;
  1217. if (offset == 0)
  1218. offset = PAGE_SIZE;
  1219. bytes_to_copy = offset;
  1220. if (bytes_to_copy > len)
  1221. bytes_to_copy = len;
  1222. offset -= bytes_to_copy;
  1223. pos -= bytes_to_copy;
  1224. str -= bytes_to_copy;
  1225. len -= bytes_to_copy;
  1226. if (!kmapped_page || kpos != (pos & PAGE_MASK)) {
  1227. struct page *page;
  1228. page = get_arg_page(bprm, pos, 1);
  1229. if (!page) {
  1230. ret = -E2BIG;
  1231. goto out;
  1232. }
  1233. if (kmapped_page) {
  1234. flush_kernel_dcache_page(kmapped_page);
  1235. kunmap(kmapped_page);
  1236. put_page(kmapped_page);
  1237. }
  1238. kmapped_page = page;
  1239. kaddr = kmap(kmapped_page);
  1240. kpos = pos & PAGE_MASK;
  1241. flush_cache_page(bprm->vma, kpos,
  1242. page_to_pfn(kmapped_page));
  1243. }
  1244. if (copy_from_user(kaddr+offset, compat_ptr(str),
  1245. bytes_to_copy)) {
  1246. ret = -EFAULT;
  1247. goto out;
  1248. }
  1249. }
  1250. }
  1251. ret = 0;
  1252. out:
  1253. if (kmapped_page) {
  1254. flush_kernel_dcache_page(kmapped_page);
  1255. kunmap(kmapped_page);
  1256. put_page(kmapped_page);
  1257. }
  1258. return ret;
  1259. }
  1260. /*
  1261. * compat_do_execve() is mostly a copy of do_execve(), with the exception
  1262. * that it processes 32 bit argv and envp pointers.
  1263. */
  1264. int compat_do_execve(char * filename,
  1265. compat_uptr_t __user *argv,
  1266. compat_uptr_t __user *envp,
  1267. struct pt_regs * regs)
  1268. {
  1269. struct linux_binprm *bprm;
  1270. struct file *file;
  1271. struct files_struct *displaced;
  1272. bool clear_in_exec;
  1273. int retval;
  1274. retval = unshare_files(&displaced);
  1275. if (retval)
  1276. goto out_ret;
  1277. retval = -ENOMEM;
  1278. bprm = kzalloc(sizeof(*bprm), GFP_KERNEL);
  1279. if (!bprm)
  1280. goto out_files;
  1281. retval = prepare_bprm_creds(bprm);
  1282. if (retval)
  1283. goto out_free;
  1284. retval = check_unsafe_exec(bprm);
  1285. if (retval < 0)
  1286. goto out_free;
  1287. clear_in_exec = retval;
  1288. current->in_execve = 1;
  1289. file = open_exec(filename);
  1290. retval = PTR_ERR(file);
  1291. if (IS_ERR(file))
  1292. goto out_unmark;
  1293. sched_exec();
  1294. bprm->file = file;
  1295. bprm->filename = filename;
  1296. bprm->interp = filename;
  1297. retval = bprm_mm_init(bprm);
  1298. if (retval)
  1299. goto out_file;
  1300. bprm->argc = compat_count(argv, MAX_ARG_STRINGS);
  1301. if ((retval = bprm->argc) < 0)
  1302. goto out;
  1303. bprm->envc = compat_count(envp, MAX_ARG_STRINGS);
  1304. if ((retval = bprm->envc) < 0)
  1305. goto out;
  1306. retval = prepare_binprm(bprm);
  1307. if (retval < 0)
  1308. goto out;
  1309. retval = copy_strings_kernel(1, &bprm->filename, bprm);
  1310. if (retval < 0)
  1311. goto out;
  1312. bprm->exec = bprm->p;
  1313. retval = compat_copy_strings(bprm->envc, envp, bprm);
  1314. if (retval < 0)
  1315. goto out;
  1316. retval = compat_copy_strings(bprm->argc, argv, bprm);
  1317. if (retval < 0)
  1318. goto out;
  1319. retval = search_binary_handler(bprm, regs);
  1320. if (retval < 0)
  1321. goto out;
  1322. /* execve succeeded */
  1323. current->fs->in_exec = 0;
  1324. current->in_execve = 0;
  1325. acct_update_integrals(current);
  1326. free_bprm(bprm);
  1327. if (displaced)
  1328. put_files_struct(displaced);
  1329. return retval;
  1330. out:
  1331. if (bprm->mm) {
  1332. acct_arg_size(bprm, 0);
  1333. mmput(bprm->mm);
  1334. }
  1335. out_file:
  1336. if (bprm->file) {
  1337. allow_write_access(bprm->file);
  1338. fput(bprm->file);
  1339. }
  1340. out_unmark:
  1341. if (clear_in_exec)
  1342. current->fs->in_exec = 0;
  1343. current->in_execve = 0;
  1344. out_free:
  1345. free_bprm(bprm);
  1346. out_files:
  1347. if (displaced)
  1348. reset_files_struct(displaced);
  1349. out_ret:
  1350. return retval;
  1351. }
  1352. #define __COMPAT_NFDBITS (8 * sizeof(compat_ulong_t))
  1353. static int poll_select_copy_remaining(struct timespec *end_time, void __user *p,
  1354. int timeval, int ret)
  1355. {
  1356. struct timespec ts;
  1357. if (!p)
  1358. return ret;
  1359. if (current->personality & STICKY_TIMEOUTS)
  1360. goto sticky;
  1361. /* No update for zero timeout */
  1362. if (!end_time->tv_sec && !end_time->tv_nsec)
  1363. return ret;
  1364. ktime_get_ts(&ts);
  1365. ts = timespec_sub(*end_time, ts);
  1366. if (ts.tv_sec < 0)
  1367. ts.tv_sec = ts.tv_nsec = 0;
  1368. if (timeval) {
  1369. struct compat_timeval rtv;
  1370. rtv.tv_sec = ts.tv_sec;
  1371. rtv.tv_usec = ts.tv_nsec / NSEC_PER_USEC;
  1372. if (!copy_to_user(p, &rtv, sizeof(rtv)))
  1373. return ret;
  1374. } else {
  1375. struct compat_timespec rts;
  1376. rts.tv_sec = ts.tv_sec;
  1377. rts.tv_nsec = ts.tv_nsec;
  1378. if (!copy_to_user(p, &rts, sizeof(rts)))
  1379. return ret;
  1380. }
  1381. /*
  1382. * If an application puts its timeval in read-only memory, we
  1383. * don't want the Linux-specific update to the timeval to
  1384. * cause a fault after the select has completed
  1385. * successfully. However, because we're not updating the
  1386. * timeval, we can't restart the system call.
  1387. */
  1388. sticky:
  1389. if (ret == -ERESTARTNOHAND)
  1390. ret = -EINTR;
  1391. return ret;
  1392. }
  1393. /*
  1394. * Ooo, nasty. We need here to frob 32-bit unsigned longs to
  1395. * 64-bit unsigned longs.
  1396. */
  1397. static
  1398. int compat_get_fd_set(unsigned long nr, compat_ulong_t __user *ufdset,
  1399. unsigned long *fdset)
  1400. {
  1401. nr = DIV_ROUND_UP(nr, __COMPAT_NFDBITS);
  1402. if (ufdset) {
  1403. unsigned long odd;
  1404. if (!access_ok(VERIFY_WRITE, ufdset, nr*sizeof(compat_ulong_t)))
  1405. return -EFAULT;
  1406. odd = nr & 1UL;
  1407. nr &= ~1UL;
  1408. while (nr) {
  1409. unsigned long h, l;
  1410. if (__get_user(l, ufdset) || __get_user(h, ufdset+1))
  1411. return -EFAULT;
  1412. ufdset += 2;
  1413. *fdset++ = h << 32 | l;
  1414. nr -= 2;
  1415. }
  1416. if (odd && __get_user(*fdset, ufdset))
  1417. return -EFAULT;
  1418. } else {
  1419. /* Tricky, must clear full unsigned long in the
  1420. * kernel fdset at the end, this makes sure that
  1421. * actually happens.
  1422. */
  1423. memset(fdset, 0, ((nr + 1) & ~1)*sizeof(compat_ulong_t));
  1424. }
  1425. return 0;
  1426. }
  1427. static
  1428. int compat_set_fd_set(unsigned long nr, compat_ulong_t __user *ufdset,
  1429. unsigned long *fdset)
  1430. {
  1431. unsigned long odd;
  1432. nr = DIV_ROUND_UP(nr, __COMPAT_NFDBITS);
  1433. if (!ufdset)
  1434. return 0;
  1435. odd = nr & 1UL;
  1436. nr &= ~1UL;
  1437. while (nr) {
  1438. unsigned long h, l;
  1439. l = *fdset++;
  1440. h = l >> 32;
  1441. if (__put_user(l, ufdset) || __put_user(h, ufdset+1))
  1442. return -EFAULT;
  1443. ufdset += 2;
  1444. nr -= 2;
  1445. }
  1446. if (odd && __put_user(*fdset, ufdset))
  1447. return -EFAULT;
  1448. return 0;
  1449. }
  1450. /*
  1451. * This is a virtual copy of sys_select from fs/select.c and probably
  1452. * should be compared to it from time to time
  1453. */
  1454. /*
  1455. * We can actually return ERESTARTSYS instead of EINTR, but I'd
  1456. * like to be certain this leads to no problems. So I return
  1457. * EINTR just for safety.
  1458. *
  1459. * Update: ERESTARTSYS breaks at least the xview clock binary, so
  1460. * I'm trying ERESTARTNOHAND which restart only when you want to.
  1461. */
  1462. #define MAX_SELECT_SECONDS \
  1463. ((unsigned long) (MAX_SCHEDULE_TIMEOUT / HZ)-1)
  1464. int compat_core_sys_select(int n, compat_ulong_t __user *inp,
  1465. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1466. struct timespec *end_time)
  1467. {
  1468. fd_set_bits fds;
  1469. void *bits;
  1470. int size, max_fds, ret = -EINVAL;
  1471. struct fdtable *fdt;
  1472. long stack_fds[SELECT_STACK_ALLOC/sizeof(long)];
  1473. if (n < 0)
  1474. goto out_nofds;
  1475. /* max_fds can increase, so grab it once to avoid race */
  1476. rcu_read_lock();
  1477. fdt = files_fdtable(current->files);
  1478. max_fds = fdt->max_fds;
  1479. rcu_read_unlock();
  1480. if (n > max_fds)
  1481. n = max_fds;
  1482. /*
  1483. * We need 6 bitmaps (in/out/ex for both incoming and outgoing),
  1484. * since we used fdset we need to allocate memory in units of
  1485. * long-words.
  1486. */
  1487. size = FDS_BYTES(n);
  1488. bits = stack_fds;
  1489. if (size > sizeof(stack_fds) / 6) {
  1490. bits = kmalloc(6 * size, GFP_KERNEL);
  1491. ret = -ENOMEM;
  1492. if (!bits)
  1493. goto out_nofds;
  1494. }
  1495. fds.in = (unsigned long *) bits;
  1496. fds.out = (unsigned long *) (bits + size);
  1497. fds.ex = (unsigned long *) (bits + 2*size);
  1498. fds.res_in = (unsigned long *) (bits + 3*size);
  1499. fds.res_out = (unsigned long *) (bits + 4*size);
  1500. fds.res_ex = (unsigned long *) (bits + 5*size);
  1501. if ((ret = compat_get_fd_set(n, inp, fds.in)) ||
  1502. (ret = compat_get_fd_set(n, outp, fds.out)) ||
  1503. (ret = compat_get_fd_set(n, exp, fds.ex)))
  1504. goto out;
  1505. zero_fd_set(n, fds.res_in);
  1506. zero_fd_set(n, fds.res_out);
  1507. zero_fd_set(n, fds.res_ex);
  1508. ret = do_select(n, &fds, end_time);
  1509. if (ret < 0)
  1510. goto out;
  1511. if (!ret) {
  1512. ret = -ERESTARTNOHAND;
  1513. if (signal_pending(current))
  1514. goto out;
  1515. ret = 0;
  1516. }
  1517. if (compat_set_fd_set(n, inp, fds.res_in) ||
  1518. compat_set_fd_set(n, outp, fds.res_out) ||
  1519. compat_set_fd_set(n, exp, fds.res_ex))
  1520. ret = -EFAULT;
  1521. out:
  1522. if (bits != stack_fds)
  1523. kfree(bits);
  1524. out_nofds:
  1525. return ret;
  1526. }
  1527. asmlinkage long compat_sys_select(int n, compat_ulong_t __user *inp,
  1528. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1529. struct compat_timeval __user *tvp)
  1530. {
  1531. struct timespec end_time, *to = NULL;
  1532. struct compat_timeval tv;
  1533. int ret;
  1534. if (tvp) {
  1535. if (copy_from_user(&tv, tvp, sizeof(tv)))
  1536. return -EFAULT;
  1537. to = &end_time;
  1538. if (poll_select_set_timeout(to,
  1539. tv.tv_sec + (tv.tv_usec / USEC_PER_SEC),
  1540. (tv.tv_usec % USEC_PER_SEC) * NSEC_PER_USEC))
  1541. return -EINVAL;
  1542. }
  1543. ret = compat_core_sys_select(n, inp, outp, exp, to);
  1544. ret = poll_select_copy_remaining(&end_time, tvp, 1, ret);
  1545. return ret;
  1546. }
  1547. struct compat_sel_arg_struct {
  1548. compat_ulong_t n;
  1549. compat_uptr_t inp;
  1550. compat_uptr_t outp;
  1551. compat_uptr_t exp;
  1552. compat_uptr_t tvp;
  1553. };
  1554. asmlinkage long compat_sys_old_select(struct compat_sel_arg_struct __user *arg)
  1555. {
  1556. struct compat_sel_arg_struct a;
  1557. if (copy_from_user(&a, arg, sizeof(a)))
  1558. return -EFAULT;
  1559. return compat_sys_select(a.n, compat_ptr(a.inp), compat_ptr(a.outp),
  1560. compat_ptr(a.exp), compat_ptr(a.tvp));
  1561. }
  1562. #ifdef HAVE_SET_RESTORE_SIGMASK
  1563. static long do_compat_pselect(int n, compat_ulong_t __user *inp,
  1564. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1565. struct compat_timespec __user *tsp, compat_sigset_t __user *sigmask,
  1566. compat_size_t sigsetsize)
  1567. {
  1568. compat_sigset_t ss32;
  1569. sigset_t ksigmask, sigsaved;
  1570. struct compat_timespec ts;
  1571. struct timespec end_time, *to = NULL;
  1572. int ret;
  1573. if (tsp) {
  1574. if (copy_from_user(&ts, tsp, sizeof(ts)))
  1575. return -EFAULT;
  1576. to = &end_time;
  1577. if (poll_select_set_timeout(to, ts.tv_sec, ts.tv_nsec))
  1578. return -EINVAL;
  1579. }
  1580. if (sigmask) {
  1581. if (sigsetsize != sizeof(compat_sigset_t))
  1582. return -EINVAL;
  1583. if (copy_from_user(&ss32, sigmask, sizeof(ss32)))
  1584. return -EFAULT;
  1585. sigset_from_compat(&ksigmask, &ss32);
  1586. sigdelsetmask(&ksigmask, sigmask(SIGKILL)|sigmask(SIGSTOP));
  1587. sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved);
  1588. }
  1589. ret = compat_core_sys_select(n, inp, outp, exp, to);
  1590. ret = poll_select_copy_remaining(&end_time, tsp, 0, ret);
  1591. if (ret == -ERESTARTNOHAND) {
  1592. /*
  1593. * Don't restore the signal mask yet. Let do_signal() deliver
  1594. * the signal on the way back to userspace, before the signal
  1595. * mask is restored.
  1596. */
  1597. if (sigmask) {
  1598. memcpy(&current->saved_sigmask, &sigsaved,
  1599. sizeof(sigsaved));
  1600. set_restore_sigmask();
  1601. }
  1602. } else if (sigmask)
  1603. sigprocmask(SIG_SETMASK, &sigsaved, NULL);
  1604. return ret;
  1605. }
  1606. asmlinkage long compat_sys_pselect6(int n, compat_ulong_t __user *inp,
  1607. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1608. struct compat_timespec __user *tsp, void __user *sig)
  1609. {
  1610. compat_size_t sigsetsize = 0;
  1611. compat_uptr_t up = 0;
  1612. if (sig) {
  1613. if (!access_ok(VERIFY_READ, sig,
  1614. sizeof(compat_uptr_t)+sizeof(compat_size_t)) ||
  1615. __get_user(up, (compat_uptr_t __user *)sig) ||
  1616. __get_user(sigsetsize,
  1617. (compat_size_t __user *)(sig+sizeof(up))))
  1618. return -EFAULT;
  1619. }
  1620. return do_compat_pselect(n, inp, outp, exp, tsp, compat_ptr(up),
  1621. sigsetsize);
  1622. }
  1623. asmlinkage long compat_sys_ppoll(struct pollfd __user *ufds,
  1624. unsigned int nfds, struct compat_timespec __user *tsp,
  1625. const compat_sigset_t __user *sigmask, compat_size_t sigsetsize)
  1626. {
  1627. compat_sigset_t ss32;
  1628. sigset_t ksigmask, sigsaved;
  1629. struct compat_timespec ts;
  1630. struct timespec end_time, *to = NULL;
  1631. int ret;
  1632. if (tsp) {
  1633. if (copy_from_user(&ts, tsp, sizeof(ts)))
  1634. return -EFAULT;
  1635. to = &end_time;
  1636. if (poll_select_set_timeout(to, ts.tv_sec, ts.tv_nsec))
  1637. return -EINVAL;
  1638. }
  1639. if (sigmask) {
  1640. if (sigsetsize != sizeof(compat_sigset_t))
  1641. return -EINVAL;
  1642. if (copy_from_user(&ss32, sigmask, sizeof(ss32)))
  1643. return -EFAULT;
  1644. sigset_from_compat(&ksigmask, &ss32);
  1645. sigdelsetmask(&ksigmask, sigmask(SIGKILL)|sigmask(SIGSTOP));
  1646. sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved);
  1647. }
  1648. ret = do_sys_poll(ufds, nfds, to);
  1649. /* We can restart this syscall, usually */
  1650. if (ret == -EINTR) {
  1651. /*
  1652. * Don't restore the signal mask yet. Let do_signal() deliver
  1653. * the signal on the way back to userspace, before the signal
  1654. * mask is restored.
  1655. */
  1656. if (sigmask) {
  1657. memcpy(&current->saved_sigmask, &sigsaved,
  1658. sizeof(sigsaved));
  1659. set_restore_sigmask();
  1660. }
  1661. ret = -ERESTARTNOHAND;
  1662. } else if (sigmask)
  1663. sigprocmask(SIG_SETMASK, &sigsaved, NULL);
  1664. ret = poll_select_copy_remaining(&end_time, tsp, 0, ret);
  1665. return ret;
  1666. }
  1667. #endif /* HAVE_SET_RESTORE_SIGMASK */
  1668. #if (defined(CONFIG_NFSD) || defined(CONFIG_NFSD_MODULE)) && !defined(CONFIG_NFSD_DEPRECATED)
  1669. /* Stuff for NFS server syscalls... */
  1670. struct compat_nfsctl_svc {
  1671. u16 svc32_port;
  1672. s32 svc32_nthreads;
  1673. };
  1674. struct compat_nfsctl_client {
  1675. s8 cl32_ident[NFSCLNT_IDMAX+1];
  1676. s32 cl32_naddr;
  1677. struct in_addr cl32_addrlist[NFSCLNT_ADDRMAX];
  1678. s32 cl32_fhkeytype;
  1679. s32 cl32_fhkeylen;
  1680. u8 cl32_fhkey[NFSCLNT_KEYMAX];
  1681. };
  1682. struct compat_nfsctl_export {
  1683. char ex32_client[NFSCLNT_IDMAX+1];
  1684. char ex32_path[NFS_MAXPATHLEN+1];
  1685. compat_dev_t ex32_dev;
  1686. compat_ino_t ex32_ino;
  1687. compat_int_t ex32_flags;
  1688. __compat_uid_t ex32_anon_uid;
  1689. __compat_gid_t ex32_anon_gid;
  1690. };
  1691. struct compat_nfsctl_fdparm {
  1692. struct sockaddr gd32_addr;
  1693. s8 gd32_path[NFS_MAXPATHLEN+1];
  1694. compat_int_t gd32_version;
  1695. };
  1696. struct compat_nfsctl_fsparm {
  1697. struct sockaddr gd32_addr;
  1698. s8 gd32_path[NFS_MAXPATHLEN+1];
  1699. compat_int_t gd32_maxlen;
  1700. };
  1701. struct compat_nfsctl_arg {
  1702. compat_int_t ca32_version; /* safeguard */
  1703. union {
  1704. struct compat_nfsctl_svc u32_svc;
  1705. struct compat_nfsctl_client u32_client;
  1706. struct compat_nfsctl_export u32_export;
  1707. struct compat_nfsctl_fdparm u32_getfd;
  1708. struct compat_nfsctl_fsparm u32_getfs;
  1709. } u;
  1710. #define ca32_svc u.u32_svc
  1711. #define ca32_client u.u32_client
  1712. #define ca32_export u.u32_export
  1713. #define ca32_getfd u.u32_getfd
  1714. #define ca32_getfs u.u32_getfs
  1715. };
  1716. union compat_nfsctl_res {
  1717. __u8 cr32_getfh[NFS_FHSIZE];
  1718. struct knfsd_fh cr32_getfs;
  1719. };
  1720. static int compat_nfs_svc_trans(struct nfsctl_arg *karg,
  1721. struct compat_nfsctl_arg __user *arg)
  1722. {
  1723. if (!access_ok(VERIFY_READ, &arg->ca32_svc, sizeof(arg->ca32_svc)) ||
  1724. get_user(karg->ca_version, &arg->ca32_version) ||
  1725. __get_user(karg->ca_svc.svc_port, &arg->ca32_svc.svc32_port) ||
  1726. __get_user(karg->ca_svc.svc_nthreads,
  1727. &arg->ca32_svc.svc32_nthreads))
  1728. return -EFAULT;
  1729. return 0;
  1730. }
  1731. static int compat_nfs_clnt_trans(struct nfsctl_arg *karg,
  1732. struct compat_nfsctl_arg __user *arg)
  1733. {
  1734. if (!access_ok(VERIFY_READ, &arg->ca32_client,
  1735. sizeof(arg->ca32_client)) ||
  1736. get_user(karg->ca_version, &arg->ca32_version) ||
  1737. __copy_from_user(&karg->ca_client.cl_ident[0],
  1738. &arg->ca32_client.cl32_ident[0],
  1739. NFSCLNT_IDMAX) ||
  1740. __get_user(karg->ca_client.cl_naddr,
  1741. &arg->ca32_client.cl32_naddr) ||
  1742. __copy_from_user(&karg->ca_client.cl_addrlist[0],
  1743. &arg->ca32_client.cl32_addrlist[0],
  1744. (sizeof(struct in_addr) * NFSCLNT_ADDRMAX)) ||
  1745. __get_user(karg->ca_client.cl_fhkeytype,
  1746. &arg->ca32_client.cl32_fhkeytype) ||
  1747. __get_user(karg->ca_client.cl_fhkeylen,
  1748. &arg->ca32_client.cl32_fhkeylen) ||
  1749. __copy_from_user(&karg->ca_client.cl_fhkey[0],
  1750. &arg->ca32_client.cl32_fhkey[0],
  1751. NFSCLNT_KEYMAX))
  1752. return -EFAULT;
  1753. return 0;
  1754. }
  1755. static int compat_nfs_exp_trans(struct nfsctl_arg *karg,
  1756. struct compat_nfsctl_arg __user *arg)
  1757. {
  1758. if (!access_ok(VERIFY_READ, &arg->ca32_export,
  1759. sizeof(arg->ca32_export)) ||
  1760. get_user(karg->ca_version, &arg->ca32_version) ||
  1761. __copy_from_user(&karg->ca_export.ex_client[0],
  1762. &arg->ca32_export.ex32_client[0],
  1763. NFSCLNT_IDMAX) ||
  1764. __copy_from_user(&karg->ca_export.ex_path[0],
  1765. &arg->ca32_export.ex32_path[0],
  1766. NFS_MAXPATHLEN) ||
  1767. __get_user(karg->ca_export.ex_dev,
  1768. &arg->ca32_export.ex32_dev) ||
  1769. __get_user(karg->ca_export.ex_ino,
  1770. &arg->ca32_export.ex32_ino) ||
  1771. __get_user(karg->ca_export.ex_flags,
  1772. &arg->ca32_export.ex32_flags) ||
  1773. __get_user(karg->ca_export.ex_anon_uid,
  1774. &arg->ca32_export.ex32_anon_uid) ||
  1775. __get_user(karg->ca_export.ex_anon_gid,
  1776. &arg->ca32_export.ex32_anon_gid))
  1777. return -EFAULT;
  1778. SET_UID(karg->ca_export.ex_anon_uid, karg->ca_export.ex_anon_uid);
  1779. SET_GID(karg->ca_export.ex_anon_gid, karg->ca_export.ex_anon_gid);
  1780. return 0;
  1781. }
  1782. static int compat_nfs_getfd_trans(struct nfsctl_arg *karg,
  1783. struct compat_nfsctl_arg __user *arg)
  1784. {
  1785. if (!access_ok(VERIFY_READ, &arg->ca32_getfd,
  1786. sizeof(arg->ca32_getfd)) ||
  1787. get_user(karg->ca_version, &arg->ca32_version) ||
  1788. __copy_from_user(&karg->ca_getfd.gd_addr,
  1789. &arg->ca32_getfd.gd32_addr,
  1790. (sizeof(struct sockaddr))) ||
  1791. __copy_from_user(&karg->ca_getfd.gd_path,
  1792. &arg->ca32_getfd.gd32_path,
  1793. (NFS_MAXPATHLEN+1)) ||
  1794. __get_user(karg->ca_getfd.gd_version,
  1795. &arg->ca32_getfd.gd32_version))
  1796. return -EFAULT;
  1797. return 0;
  1798. }
  1799. static int compat_nfs_getfs_trans(struct nfsctl_arg *karg,
  1800. struct compat_nfsctl_arg __user *arg)
  1801. {
  1802. if (!access_ok(VERIFY_READ,&arg->ca32_getfs,sizeof(arg->ca32_getfs)) ||
  1803. get_user(karg->ca_version, &arg->ca32_version) ||
  1804. __copy_from_user(&karg->ca_getfs.gd_addr,
  1805. &arg->ca32_getfs.gd32_addr,
  1806. (sizeof(struct sockaddr))) ||
  1807. __copy_from_user(&karg->ca_getfs.gd_path,
  1808. &arg->ca32_getfs.gd32_path,
  1809. (NFS_MAXPATHLEN+1)) ||
  1810. __get_user(karg->ca_getfs.gd_maxlen,
  1811. &arg->ca32_getfs.gd32_maxlen))
  1812. return -EFAULT;
  1813. return 0;
  1814. }
  1815. /* This really doesn't need translations, we are only passing
  1816. * back a union which contains opaque nfs file handle data.
  1817. */
  1818. static int compat_nfs_getfh_res_trans(union nfsctl_res *kres,
  1819. union compat_nfsctl_res __user *res)
  1820. {
  1821. int err;
  1822. err = copy_to_user(res, kres, sizeof(*res));
  1823. return (err) ? -EFAULT : 0;
  1824. }
  1825. asmlinkage long compat_sys_nfsservctl(int cmd,
  1826. struct compat_nfsctl_arg __user *arg,
  1827. union compat_nfsctl_res __user *res)
  1828. {
  1829. struct nfsctl_arg *karg;
  1830. union nfsctl_res *kres;
  1831. mm_segment_t oldfs;
  1832. int err;
  1833. karg = kmalloc(sizeof(*karg), GFP_USER);
  1834. kres = kmalloc(sizeof(*kres), GFP_USER);
  1835. if(!karg || !kres) {
  1836. err = -ENOMEM;
  1837. goto done;
  1838. }
  1839. switch(cmd) {
  1840. case NFSCTL_SVC:
  1841. err = compat_nfs_svc_trans(karg, arg);
  1842. break;
  1843. case NFSCTL_ADDCLIENT:
  1844. err = compat_nfs_clnt_trans(karg, arg);
  1845. break;
  1846. case NFSCTL_DELCLIENT:
  1847. err = compat_nfs_clnt_trans(karg, arg);
  1848. break;
  1849. case NFSCTL_EXPORT:
  1850. case NFSCTL_UNEXPORT:
  1851. err = compat_nfs_exp_trans(karg, arg);
  1852. break;
  1853. case NFSCTL_GETFD:
  1854. err = compat_nfs_getfd_trans(karg, arg);
  1855. break;
  1856. case NFSCTL_GETFS:
  1857. err = compat_nfs_getfs_trans(karg, arg);
  1858. break;
  1859. default:
  1860. err = -EINVAL;
  1861. break;
  1862. }
  1863. if (err)
  1864. goto done;
  1865. oldfs = get_fs();
  1866. set_fs(KERNEL_DS);
  1867. /* The __user pointer casts are valid because of the set_fs() */
  1868. err = sys_nfsservctl(cmd, (void __user *) karg, (void __user *) kres);
  1869. set_fs(oldfs);
  1870. if (err)
  1871. goto done;
  1872. if((cmd == NFSCTL_GETFD) ||
  1873. (cmd == NFSCTL_GETFS))
  1874. err = compat_nfs_getfh_res_trans(kres, res);
  1875. done:
  1876. kfree(karg);
  1877. kfree(kres);
  1878. return err;
  1879. }
  1880. #else /* !NFSD */
  1881. long asmlinkage compat_sys_nfsservctl(int cmd, void *notused, void *notused2)
  1882. {
  1883. return sys_ni_syscall();
  1884. }
  1885. #endif
  1886. #ifdef CONFIG_EPOLL
  1887. #ifdef HAVE_SET_RESTORE_SIGMASK
  1888. asmlinkage long compat_sys_epoll_pwait(int epfd,
  1889. struct compat_epoll_event __user *events,
  1890. int maxevents, int timeout,
  1891. const compat_sigset_t __user *sigmask,
  1892. compat_size_t sigsetsize)
  1893. {
  1894. long err;
  1895. compat_sigset_t csigmask;
  1896. sigset_t ksigmask, sigsaved;
  1897. /*
  1898. * If the caller wants a certain signal mask to be set during the wait,
  1899. * we apply it here.
  1900. */
  1901. if (sigmask) {
  1902. if (sigsetsize != sizeof(compat_sigset_t))
  1903. return -EINVAL;
  1904. if (copy_from_user(&csigmask, sigmask, sizeof(csigmask)))
  1905. return -EFAULT;
  1906. sigset_from_compat(&ksigmask, &csigmask);
  1907. sigdelsetmask(&ksigmask, sigmask(SIGKILL) | sigmask(SIGSTOP));
  1908. sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved);
  1909. }
  1910. err = sys_epoll_wait(epfd, events, maxevents, timeout);
  1911. /*
  1912. * If we changed the signal mask, we need to restore the original one.
  1913. * In case we've got a signal while waiting, we do not restore the
  1914. * signal mask yet, and we allow do_signal() to deliver the signal on
  1915. * the way back to userspace, before the signal mask is restored.
  1916. */
  1917. if (sigmask) {
  1918. if (err == -EINTR) {
  1919. memcpy(&current->saved_sigmask, &sigsaved,
  1920. sizeof(sigsaved));
  1921. set_restore_sigmask();
  1922. } else
  1923. sigprocmask(SIG_SETMASK, &sigsaved, NULL);
  1924. }
  1925. return err;
  1926. }
  1927. #endif /* HAVE_SET_RESTORE_SIGMASK */
  1928. #endif /* CONFIG_EPOLL */
  1929. #ifdef CONFIG_SIGNALFD
  1930. asmlinkage long compat_sys_signalfd4(int ufd,
  1931. const compat_sigset_t __user *sigmask,
  1932. compat_size_t sigsetsize, int flags)
  1933. {
  1934. compat_sigset_t ss32;
  1935. sigset_t tmp;
  1936. sigset_t __user *ksigmask;
  1937. if (sigsetsize != sizeof(compat_sigset_t))
  1938. return -EINVAL;
  1939. if (copy_from_user(&ss32, sigmask, sizeof(ss32)))
  1940. return -EFAULT;
  1941. sigset_from_compat(&tmp, &ss32);
  1942. ksigmask = compat_alloc_user_space(sizeof(sigset_t));
  1943. if (copy_to_user(ksigmask, &tmp, sizeof(sigset_t)))
  1944. return -EFAULT;
  1945. return sys_signalfd4(ufd, ksigmask, sizeof(sigset_t), flags);
  1946. }
  1947. asmlinkage long compat_sys_signalfd(int ufd,
  1948. const compat_sigset_t __user *sigmask,
  1949. compat_size_t sigsetsize)
  1950. {
  1951. return compat_sys_signalfd4(ufd, sigmask, sigsetsize, 0);
  1952. }
  1953. #endif /* CONFIG_SIGNALFD */
  1954. #ifdef CONFIG_TIMERFD
  1955. asmlinkage long compat_sys_timerfd_settime(int ufd, int flags,
  1956. const struct compat_itimerspec __user *utmr,
  1957. struct compat_itimerspec __user *otmr)
  1958. {
  1959. int error;
  1960. struct itimerspec t;
  1961. struct itimerspec __user *ut;
  1962. if (get_compat_itimerspec(&t, utmr))
  1963. return -EFAULT;
  1964. ut = compat_alloc_user_space(2 * sizeof(struct itimerspec));
  1965. if (copy_to_user(&ut[0], &t, sizeof(t)))
  1966. return -EFAULT;
  1967. error = sys_timerfd_settime(ufd, flags, &ut[0], &ut[1]);
  1968. if (!error && otmr)
  1969. error = (copy_from_user(&t, &ut[1], sizeof(struct itimerspec)) ||
  1970. put_compat_itimerspec(otmr, &t)) ? -EFAULT: 0;
  1971. return error;
  1972. }
  1973. asmlinkage long compat_sys_timerfd_gettime(int ufd,
  1974. struct compat_itimerspec __user *otmr)
  1975. {
  1976. int error;
  1977. struct itimerspec t;
  1978. struct itimerspec __user *ut;
  1979. ut = compat_alloc_user_space(sizeof(struct itimerspec));
  1980. error = sys_timerfd_gettime(ufd, ut);
  1981. if (!error)
  1982. error = (copy_from_user(&t, ut, sizeof(struct itimerspec)) ||
  1983. put_compat_itimerspec(otmr, &t)) ? -EFAULT: 0;
  1984. return error;
  1985. }
  1986. #endif /* CONFIG_TIMERFD */
  1987. #ifdef CONFIG_FHANDLE
  1988. /*
  1989. * Exactly like fs/open.c:sys_open_by_handle_at(), except that it
  1990. * doesn't set the O_LARGEFILE flag.
  1991. */
  1992. asmlinkage long
  1993. compat_sys_open_by_handle_at(int mountdirfd,
  1994. struct file_handle __user *handle, int flags)
  1995. {
  1996. return do_handle_open(mountdirfd, handle, flags);
  1997. }
  1998. #endif