vdso.c 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625
  1. /*
  2. * linux/arch/ppc64/kernel/vdso.c
  3. *
  4. * Copyright (C) 2004 Benjamin Herrenschmidt, IBM Corp.
  5. * <benh@kernel.crashing.org>
  6. *
  7. * This program is free software; you can redistribute it and/or
  8. * modify it under the terms of the GNU General Public License
  9. * as published by the Free Software Foundation; either version
  10. * 2 of the License, or (at your option) any later version.
  11. */
  12. #include <linux/config.h>
  13. #include <linux/module.h>
  14. #include <linux/errno.h>
  15. #include <linux/sched.h>
  16. #include <linux/kernel.h>
  17. #include <linux/mm.h>
  18. #include <linux/smp.h>
  19. #include <linux/smp_lock.h>
  20. #include <linux/stddef.h>
  21. #include <linux/unistd.h>
  22. #include <linux/slab.h>
  23. #include <linux/user.h>
  24. #include <linux/elf.h>
  25. #include <linux/security.h>
  26. #include <linux/bootmem.h>
  27. #include <asm/pgtable.h>
  28. #include <asm/system.h>
  29. #include <asm/processor.h>
  30. #include <asm/mmu.h>
  31. #include <asm/mmu_context.h>
  32. #include <asm/machdep.h>
  33. #include <asm/cputable.h>
  34. #include <asm/sections.h>
  35. #include <asm/systemcfg.h>
  36. #include <asm/vdso.h>
  37. #undef DEBUG
  38. #ifdef DEBUG
  39. #define DBG(fmt...) printk(fmt)
  40. #else
  41. #define DBG(fmt...)
  42. #endif
  43. /*
  44. * The vDSOs themselves are here
  45. */
  46. extern char vdso64_start, vdso64_end;
  47. extern char vdso32_start, vdso32_end;
  48. static void *vdso64_kbase = &vdso64_start;
  49. static void *vdso32_kbase = &vdso32_start;
  50. unsigned int vdso64_pages;
  51. unsigned int vdso32_pages;
  52. /* Signal trampolines user addresses */
  53. unsigned long vdso64_rt_sigtramp;
  54. unsigned long vdso32_sigtramp;
  55. unsigned long vdso32_rt_sigtramp;
  56. /* Format of the patch table */
  57. struct vdso_patch_def
  58. {
  59. u32 pvr_mask, pvr_value;
  60. const char *gen_name;
  61. const char *fix_name;
  62. };
  63. /* Table of functions to patch based on the CPU type/revision
  64. *
  65. * TODO: Improve by adding whole lists for each entry
  66. */
  67. static struct vdso_patch_def vdso_patches[] = {
  68. {
  69. 0xffff0000, 0x003a0000, /* POWER5 */
  70. "__kernel_sync_dicache", "__kernel_sync_dicache_p5"
  71. },
  72. {
  73. 0xffff0000, 0x003b0000, /* POWER5 */
  74. "__kernel_sync_dicache", "__kernel_sync_dicache_p5"
  75. },
  76. };
  77. /*
  78. * Some infos carried around for each of them during parsing at
  79. * boot time.
  80. */
  81. struct lib32_elfinfo
  82. {
  83. Elf32_Ehdr *hdr; /* ptr to ELF */
  84. Elf32_Sym *dynsym; /* ptr to .dynsym section */
  85. unsigned long dynsymsize; /* size of .dynsym section */
  86. char *dynstr; /* ptr to .dynstr section */
  87. unsigned long text; /* offset of .text section in .so */
  88. };
  89. struct lib64_elfinfo
  90. {
  91. Elf64_Ehdr *hdr;
  92. Elf64_Sym *dynsym;
  93. unsigned long dynsymsize;
  94. char *dynstr;
  95. unsigned long text;
  96. };
  97. #ifdef __DEBUG
  98. static void dump_one_vdso_page(struct page *pg, struct page *upg)
  99. {
  100. printk("kpg: %p (c:%d,f:%08lx)", __va(page_to_pfn(pg) << PAGE_SHIFT),
  101. page_count(pg),
  102. pg->flags);
  103. if (upg/* && pg != upg*/) {
  104. printk(" upg: %p (c:%d,f:%08lx)", __va(page_to_pfn(upg) << PAGE_SHIFT),
  105. page_count(upg),
  106. upg->flags);
  107. }
  108. printk("\n");
  109. }
  110. static void dump_vdso_pages(struct vm_area_struct * vma)
  111. {
  112. int i;
  113. if (!vma || test_thread_flag(TIF_32BIT)) {
  114. printk("vDSO32 @ %016lx:\n", (unsigned long)vdso32_kbase);
  115. for (i=0; i<vdso32_pages; i++) {
  116. struct page *pg = virt_to_page(vdso32_kbase + i*PAGE_SIZE);
  117. struct page *upg = (vma && vma->vm_mm) ?
  118. follow_page(vma->vm_mm, vma->vm_start + i*PAGE_SIZE, 0)
  119. : NULL;
  120. dump_one_vdso_page(pg, upg);
  121. }
  122. }
  123. if (!vma || !test_thread_flag(TIF_32BIT)) {
  124. printk("vDSO64 @ %016lx:\n", (unsigned long)vdso64_kbase);
  125. for (i=0; i<vdso64_pages; i++) {
  126. struct page *pg = virt_to_page(vdso64_kbase + i*PAGE_SIZE);
  127. struct page *upg = (vma && vma->vm_mm) ?
  128. follow_page(vma->vm_mm, vma->vm_start + i*PAGE_SIZE, 0)
  129. : NULL;
  130. dump_one_vdso_page(pg, upg);
  131. }
  132. }
  133. }
  134. #endif /* DEBUG */
  135. /*
  136. * Keep a dummy vma_close for now, it will prevent VMA merging.
  137. */
  138. static void vdso_vma_close(struct vm_area_struct * vma)
  139. {
  140. }
  141. /*
  142. * Our nopage() function, maps in the actual vDSO kernel pages, they will
  143. * be mapped read-only by do_no_page(), and eventually COW'ed, either
  144. * right away for an initial write access, or by do_wp_page().
  145. */
  146. static struct page * vdso_vma_nopage(struct vm_area_struct * vma,
  147. unsigned long address, int *type)
  148. {
  149. unsigned long offset = address - vma->vm_start;
  150. struct page *pg;
  151. void *vbase = test_thread_flag(TIF_32BIT) ? vdso32_kbase : vdso64_kbase;
  152. DBG("vdso_vma_nopage(current: %s, address: %016lx, off: %lx)\n",
  153. current->comm, address, offset);
  154. if (address < vma->vm_start || address > vma->vm_end)
  155. return NOPAGE_SIGBUS;
  156. /*
  157. * Last page is systemcfg.
  158. */
  159. if ((vma->vm_end - address) <= PAGE_SIZE)
  160. pg = virt_to_page(_systemcfg);
  161. else
  162. pg = virt_to_page(vbase + offset);
  163. get_page(pg);
  164. DBG(" ->page count: %d\n", page_count(pg));
  165. return pg;
  166. }
  167. static struct vm_operations_struct vdso_vmops = {
  168. .close = vdso_vma_close,
  169. .nopage = vdso_vma_nopage,
  170. };
  171. /*
  172. * This is called from binfmt_elf, we create the special vma for the
  173. * vDSO and insert it into the mm struct tree
  174. */
  175. int arch_setup_additional_pages(struct linux_binprm *bprm, int executable_stack)
  176. {
  177. struct mm_struct *mm = current->mm;
  178. struct vm_area_struct *vma;
  179. unsigned long vdso_pages;
  180. unsigned long vdso_base;
  181. if (test_thread_flag(TIF_32BIT)) {
  182. vdso_pages = vdso32_pages;
  183. vdso_base = VDSO32_MBASE;
  184. } else {
  185. vdso_pages = vdso64_pages;
  186. vdso_base = VDSO64_MBASE;
  187. }
  188. current->thread.vdso_base = 0;
  189. /* vDSO has a problem and was disabled, just don't "enable" it for the
  190. * process
  191. */
  192. if (vdso_pages == 0)
  193. return 0;
  194. vma = kmem_cache_alloc(vm_area_cachep, SLAB_KERNEL);
  195. if (vma == NULL)
  196. return -ENOMEM;
  197. memset(vma, 0, sizeof(*vma));
  198. /*
  199. * pick a base address for the vDSO in process space. We try to put it
  200. * at vdso_base which is the "natural" base for it, but we might fail
  201. * and end up putting it elsewhere.
  202. */
  203. vdso_base = get_unmapped_area(NULL, vdso_base,
  204. vdso_pages << PAGE_SHIFT, 0, 0);
  205. if (vdso_base & ~PAGE_MASK) {
  206. kmem_cache_free(vm_area_cachep, vma);
  207. return (int)vdso_base;
  208. }
  209. current->thread.vdso_base = vdso_base;
  210. vma->vm_mm = mm;
  211. vma->vm_start = current->thread.vdso_base;
  212. /*
  213. * the VMA size is one page more than the vDSO since systemcfg
  214. * is mapped in the last one
  215. */
  216. vma->vm_end = vma->vm_start + ((vdso_pages + 1) << PAGE_SHIFT);
  217. /*
  218. * our vma flags don't have VM_WRITE so by default, the process isn't allowed
  219. * to write those pages.
  220. * gdb can break that with ptrace interface, and thus trigger COW on those
  221. * pages but it's then your responsibility to never do that on the "data" page
  222. * of the vDSO or you'll stop getting kernel updates and your nice userland
  223. * gettimeofday will be totally dead. It's fine to use that for setting
  224. * breakpoints in the vDSO code pages though
  225. */
  226. vma->vm_flags = VM_READ | VM_EXEC | VM_MAYREAD | VM_MAYWRITE | VM_MAYEXEC | VM_RESERVED;
  227. vma->vm_flags |= mm->def_flags;
  228. vma->vm_page_prot = protection_map[vma->vm_flags & 0x7];
  229. vma->vm_ops = &vdso_vmops;
  230. down_write(&mm->mmap_sem);
  231. if (insert_vm_struct(mm, vma)) {
  232. up_write(&mm->mmap_sem);
  233. kmem_cache_free(vm_area_cachep, vma);
  234. return -ENOMEM;
  235. }
  236. mm->total_vm += (vma->vm_end - vma->vm_start) >> PAGE_SHIFT;
  237. up_write(&mm->mmap_sem);
  238. return 0;
  239. }
  240. static void * __init find_section32(Elf32_Ehdr *ehdr, const char *secname,
  241. unsigned long *size)
  242. {
  243. Elf32_Shdr *sechdrs;
  244. unsigned int i;
  245. char *secnames;
  246. /* Grab section headers and strings so we can tell who is who */
  247. sechdrs = (void *)ehdr + ehdr->e_shoff;
  248. secnames = (void *)ehdr + sechdrs[ehdr->e_shstrndx].sh_offset;
  249. /* Find the section they want */
  250. for (i = 1; i < ehdr->e_shnum; i++) {
  251. if (strcmp(secnames+sechdrs[i].sh_name, secname) == 0) {
  252. if (size)
  253. *size = sechdrs[i].sh_size;
  254. return (void *)ehdr + sechdrs[i].sh_offset;
  255. }
  256. }
  257. *size = 0;
  258. return NULL;
  259. }
  260. static void * __init find_section64(Elf64_Ehdr *ehdr, const char *secname,
  261. unsigned long *size)
  262. {
  263. Elf64_Shdr *sechdrs;
  264. unsigned int i;
  265. char *secnames;
  266. /* Grab section headers and strings so we can tell who is who */
  267. sechdrs = (void *)ehdr + ehdr->e_shoff;
  268. secnames = (void *)ehdr + sechdrs[ehdr->e_shstrndx].sh_offset;
  269. /* Find the section they want */
  270. for (i = 1; i < ehdr->e_shnum; i++) {
  271. if (strcmp(secnames+sechdrs[i].sh_name, secname) == 0) {
  272. if (size)
  273. *size = sechdrs[i].sh_size;
  274. return (void *)ehdr + sechdrs[i].sh_offset;
  275. }
  276. }
  277. if (size)
  278. *size = 0;
  279. return NULL;
  280. }
  281. static Elf32_Sym * __init find_symbol32(struct lib32_elfinfo *lib, const char *symname)
  282. {
  283. unsigned int i;
  284. char name[32], *c;
  285. for (i = 0; i < (lib->dynsymsize / sizeof(Elf32_Sym)); i++) {
  286. if (lib->dynsym[i].st_name == 0)
  287. continue;
  288. strlcpy(name, lib->dynstr + lib->dynsym[i].st_name, 32);
  289. c = strchr(name, '@');
  290. if (c)
  291. *c = 0;
  292. if (strcmp(symname, name) == 0)
  293. return &lib->dynsym[i];
  294. }
  295. return NULL;
  296. }
  297. static Elf64_Sym * __init find_symbol64(struct lib64_elfinfo *lib, const char *symname)
  298. {
  299. unsigned int i;
  300. char name[32], *c;
  301. for (i = 0; i < (lib->dynsymsize / sizeof(Elf64_Sym)); i++) {
  302. if (lib->dynsym[i].st_name == 0)
  303. continue;
  304. strlcpy(name, lib->dynstr + lib->dynsym[i].st_name, 32);
  305. c = strchr(name, '@');
  306. if (c)
  307. *c = 0;
  308. if (strcmp(symname, name) == 0)
  309. return &lib->dynsym[i];
  310. }
  311. return NULL;
  312. }
  313. /* Note that we assume the section is .text and the symbol is relative to
  314. * the library base
  315. */
  316. static unsigned long __init find_function32(struct lib32_elfinfo *lib, const char *symname)
  317. {
  318. Elf32_Sym *sym = find_symbol32(lib, symname);
  319. if (sym == NULL) {
  320. printk(KERN_WARNING "vDSO32: function %s not found !\n", symname);
  321. return 0;
  322. }
  323. return sym->st_value - VDSO32_LBASE;
  324. }
  325. /* Note that we assume the section is .text and the symbol is relative to
  326. * the library base
  327. */
  328. static unsigned long __init find_function64(struct lib64_elfinfo *lib, const char *symname)
  329. {
  330. Elf64_Sym *sym = find_symbol64(lib, symname);
  331. if (sym == NULL) {
  332. printk(KERN_WARNING "vDSO64: function %s not found !\n", symname);
  333. return 0;
  334. }
  335. #ifdef VDS64_HAS_DESCRIPTORS
  336. return *((u64 *)(vdso64_kbase + sym->st_value - VDSO64_LBASE)) - VDSO64_LBASE;
  337. #else
  338. return sym->st_value - VDSO64_LBASE;
  339. #endif
  340. }
  341. static __init int vdso_do_find_sections(struct lib32_elfinfo *v32,
  342. struct lib64_elfinfo *v64)
  343. {
  344. void *sect;
  345. /*
  346. * Locate symbol tables & text section
  347. */
  348. v32->dynsym = find_section32(v32->hdr, ".dynsym", &v32->dynsymsize);
  349. v32->dynstr = find_section32(v32->hdr, ".dynstr", NULL);
  350. if (v32->dynsym == NULL || v32->dynstr == NULL) {
  351. printk(KERN_ERR "vDSO32: a required symbol section was not found\n");
  352. return -1;
  353. }
  354. sect = find_section32(v32->hdr, ".text", NULL);
  355. if (sect == NULL) {
  356. printk(KERN_ERR "vDSO32: the .text section was not found\n");
  357. return -1;
  358. }
  359. v32->text = sect - vdso32_kbase;
  360. v64->dynsym = find_section64(v64->hdr, ".dynsym", &v64->dynsymsize);
  361. v64->dynstr = find_section64(v64->hdr, ".dynstr", NULL);
  362. if (v64->dynsym == NULL || v64->dynstr == NULL) {
  363. printk(KERN_ERR "vDSO64: a required symbol section was not found\n");
  364. return -1;
  365. }
  366. sect = find_section64(v64->hdr, ".text", NULL);
  367. if (sect == NULL) {
  368. printk(KERN_ERR "vDSO64: the .text section was not found\n");
  369. return -1;
  370. }
  371. v64->text = sect - vdso64_kbase;
  372. return 0;
  373. }
  374. static __init void vdso_setup_trampolines(struct lib32_elfinfo *v32,
  375. struct lib64_elfinfo *v64)
  376. {
  377. /*
  378. * Find signal trampolines
  379. */
  380. vdso64_rt_sigtramp = find_function64(v64, "__kernel_sigtramp_rt64");
  381. vdso32_sigtramp = find_function32(v32, "__kernel_sigtramp32");
  382. vdso32_rt_sigtramp = find_function32(v32, "__kernel_sigtramp_rt32");
  383. }
  384. static __init int vdso_fixup_datapage(struct lib32_elfinfo *v32,
  385. struct lib64_elfinfo *v64)
  386. {
  387. Elf32_Sym *sym32;
  388. Elf64_Sym *sym64;
  389. sym32 = find_symbol32(v32, "__kernel_datapage_offset");
  390. if (sym32 == NULL) {
  391. printk(KERN_ERR "vDSO32: Can't find symbol __kernel_datapage_offset !\n");
  392. return -1;
  393. }
  394. *((int *)(vdso32_kbase + (sym32->st_value - VDSO32_LBASE))) =
  395. (vdso32_pages << PAGE_SHIFT) - (sym32->st_value - VDSO32_LBASE);
  396. sym64 = find_symbol64(v64, "__kernel_datapage_offset");
  397. if (sym64 == NULL) {
  398. printk(KERN_ERR "vDSO64: Can't find symbol __kernel_datapage_offset !\n");
  399. return -1;
  400. }
  401. *((int *)(vdso64_kbase + sym64->st_value - VDSO64_LBASE)) =
  402. (vdso64_pages << PAGE_SHIFT) - (sym64->st_value - VDSO64_LBASE);
  403. return 0;
  404. }
  405. static int vdso_do_func_patch32(struct lib32_elfinfo *v32,
  406. struct lib64_elfinfo *v64,
  407. const char *orig, const char *fix)
  408. {
  409. Elf32_Sym *sym32_gen, *sym32_fix;
  410. sym32_gen = find_symbol32(v32, orig);
  411. if (sym32_gen == NULL) {
  412. printk(KERN_ERR "vDSO32: Can't find symbol %s !\n", orig);
  413. return -1;
  414. }
  415. sym32_fix = find_symbol32(v32, fix);
  416. if (sym32_fix == NULL) {
  417. printk(KERN_ERR "vDSO32: Can't find symbol %s !\n", fix);
  418. return -1;
  419. }
  420. sym32_gen->st_value = sym32_fix->st_value;
  421. sym32_gen->st_size = sym32_fix->st_size;
  422. sym32_gen->st_info = sym32_fix->st_info;
  423. sym32_gen->st_other = sym32_fix->st_other;
  424. sym32_gen->st_shndx = sym32_fix->st_shndx;
  425. return 0;
  426. }
  427. static int vdso_do_func_patch64(struct lib32_elfinfo *v32,
  428. struct lib64_elfinfo *v64,
  429. const char *orig, const char *fix)
  430. {
  431. Elf64_Sym *sym64_gen, *sym64_fix;
  432. sym64_gen = find_symbol64(v64, orig);
  433. if (sym64_gen == NULL) {
  434. printk(KERN_ERR "vDSO64: Can't find symbol %s !\n", orig);
  435. return -1;
  436. }
  437. sym64_fix = find_symbol64(v64, fix);
  438. if (sym64_fix == NULL) {
  439. printk(KERN_ERR "vDSO64: Can't find symbol %s !\n", fix);
  440. return -1;
  441. }
  442. sym64_gen->st_value = sym64_fix->st_value;
  443. sym64_gen->st_size = sym64_fix->st_size;
  444. sym64_gen->st_info = sym64_fix->st_info;
  445. sym64_gen->st_other = sym64_fix->st_other;
  446. sym64_gen->st_shndx = sym64_fix->st_shndx;
  447. return 0;
  448. }
  449. static __init int vdso_fixup_alt_funcs(struct lib32_elfinfo *v32,
  450. struct lib64_elfinfo *v64)
  451. {
  452. u32 pvr;
  453. int i;
  454. pvr = mfspr(SPRN_PVR);
  455. for (i = 0; i < ARRAY_SIZE(vdso_patches); i++) {
  456. struct vdso_patch_def *patch = &vdso_patches[i];
  457. int match = (pvr & patch->pvr_mask) == patch->pvr_value;
  458. DBG("patch %d (mask: %x, pvr: %x) : %s\n",
  459. i, patch->pvr_mask, patch->pvr_value, match ? "match" : "skip");
  460. if (!match)
  461. continue;
  462. DBG("replacing %s with %s...\n", patch->gen_name, patch->fix_name);
  463. /*
  464. * Patch the 32 bits and 64 bits symbols. Note that we do not patch
  465. * the "." symbol on 64 bits. It would be easy to do, but doesn't
  466. * seem to be necessary, patching the OPD symbol is enough.
  467. */
  468. vdso_do_func_patch32(v32, v64, patch->gen_name, patch->fix_name);
  469. vdso_do_func_patch64(v32, v64, patch->gen_name, patch->fix_name);
  470. }
  471. return 0;
  472. }
  473. static __init int vdso_setup(void)
  474. {
  475. struct lib32_elfinfo v32;
  476. struct lib64_elfinfo v64;
  477. v32.hdr = vdso32_kbase;
  478. v64.hdr = vdso64_kbase;
  479. if (vdso_do_find_sections(&v32, &v64))
  480. return -1;
  481. if (vdso_fixup_datapage(&v32, &v64))
  482. return -1;
  483. if (vdso_fixup_alt_funcs(&v32, &v64))
  484. return -1;
  485. vdso_setup_trampolines(&v32, &v64);
  486. return 0;
  487. }
  488. void __init vdso_init(void)
  489. {
  490. int i;
  491. vdso64_pages = (&vdso64_end - &vdso64_start) >> PAGE_SHIFT;
  492. vdso32_pages = (&vdso32_end - &vdso32_start) >> PAGE_SHIFT;
  493. DBG("vdso64_kbase: %p, 0x%x pages, vdso32_kbase: %p, 0x%x pages\n",
  494. vdso64_kbase, vdso64_pages, vdso32_kbase, vdso32_pages);
  495. /*
  496. * Initialize the vDSO images in memory, that is do necessary
  497. * fixups of vDSO symbols, locate trampolines, etc...
  498. */
  499. if (vdso_setup()) {
  500. printk(KERN_ERR "vDSO setup failure, not enabled !\n");
  501. /* XXX should free pages here ? */
  502. vdso64_pages = vdso32_pages = 0;
  503. return;
  504. }
  505. /* Make sure pages are in the correct state */
  506. for (i = 0; i < vdso64_pages; i++) {
  507. struct page *pg = virt_to_page(vdso64_kbase + i*PAGE_SIZE);
  508. ClearPageReserved(pg);
  509. get_page(pg);
  510. }
  511. for (i = 0; i < vdso32_pages; i++) {
  512. struct page *pg = virt_to_page(vdso32_kbase + i*PAGE_SIZE);
  513. ClearPageReserved(pg);
  514. get_page(pg);
  515. }
  516. get_page(virt_to_page(_systemcfg));
  517. }
  518. int in_gate_area_no_task(unsigned long addr)
  519. {
  520. return 0;
  521. }
  522. int in_gate_area(struct task_struct *task, unsigned long addr)
  523. {
  524. return 0;
  525. }
  526. struct vm_area_struct *get_gate_vma(struct task_struct *tsk)
  527. {
  528. return NULL;
  529. }