compat.c 45 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807
  1. /*
  2. * linux/fs/compat.c
  3. *
  4. * Kernel compatibililty routines for e.g. 32 bit syscall support
  5. * on 64 bit kernels.
  6. *
  7. * Copyright (C) 2002 Stephen Rothwell, IBM Corporation
  8. * Copyright (C) 1997-2000 Jakub Jelinek (jakub@redhat.com)
  9. * Copyright (C) 1998 Eddie C. Dost (ecd@skynet.be)
  10. * Copyright (C) 2001,2002 Andi Kleen, SuSE Labs
  11. * Copyright (C) 2003 Pavel Machek (pavel@ucw.cz)
  12. *
  13. * This program is free software; you can redistribute it and/or modify
  14. * it under the terms of the GNU General Public License version 2 as
  15. * published by the Free Software Foundation.
  16. */
  17. #include <linux/stddef.h>
  18. #include <linux/kernel.h>
  19. #include <linux/linkage.h>
  20. #include <linux/compat.h>
  21. #include <linux/errno.h>
  22. #include <linux/time.h>
  23. #include <linux/fs.h>
  24. #include <linux/fcntl.h>
  25. #include <linux/namei.h>
  26. #include <linux/file.h>
  27. #include <linux/fdtable.h>
  28. #include <linux/vfs.h>
  29. #include <linux/ioctl.h>
  30. #include <linux/init.h>
  31. #include <linux/ncp_mount.h>
  32. #include <linux/nfs4_mount.h>
  33. #include <linux/syscalls.h>
  34. #include <linux/ctype.h>
  35. #include <linux/module.h>
  36. #include <linux/dirent.h>
  37. #include <linux/fsnotify.h>
  38. #include <linux/highuid.h>
  39. #include <linux/personality.h>
  40. #include <linux/rwsem.h>
  41. #include <linux/tsacct_kern.h>
  42. #include <linux/security.h>
  43. #include <linux/highmem.h>
  44. #include <linux/signal.h>
  45. #include <linux/poll.h>
  46. #include <linux/mm.h>
  47. #include <linux/eventpoll.h>
  48. #include <linux/fs_struct.h>
  49. #include <linux/slab.h>
  50. #include <linux/pagemap.h>
  51. #include <asm/uaccess.h>
  52. #include <asm/mmu_context.h>
  53. #include <asm/ioctls.h>
  54. #include "internal.h"
  55. int compat_log = 1;
  56. int compat_printk(const char *fmt, ...)
  57. {
  58. va_list ap;
  59. int ret;
  60. if (!compat_log)
  61. return 0;
  62. va_start(ap, fmt);
  63. ret = vprintk(fmt, ap);
  64. va_end(ap);
  65. return ret;
  66. }
  67. #include "read_write.h"
  68. /*
  69. * Not all architectures have sys_utime, so implement this in terms
  70. * of sys_utimes.
  71. */
  72. asmlinkage long compat_sys_utime(const char __user *filename,
  73. struct compat_utimbuf __user *t)
  74. {
  75. struct timespec tv[2];
  76. if (t) {
  77. if (get_user(tv[0].tv_sec, &t->actime) ||
  78. get_user(tv[1].tv_sec, &t->modtime))
  79. return -EFAULT;
  80. tv[0].tv_nsec = 0;
  81. tv[1].tv_nsec = 0;
  82. }
  83. return do_utimes(AT_FDCWD, filename, t ? tv : NULL, 0);
  84. }
  85. asmlinkage long compat_sys_utimensat(unsigned int dfd, const char __user *filename, struct compat_timespec __user *t, int flags)
  86. {
  87. struct timespec tv[2];
  88. if (t) {
  89. if (get_compat_timespec(&tv[0], &t[0]) ||
  90. get_compat_timespec(&tv[1], &t[1]))
  91. return -EFAULT;
  92. if (tv[0].tv_nsec == UTIME_OMIT && tv[1].tv_nsec == UTIME_OMIT)
  93. return 0;
  94. }
  95. return do_utimes(dfd, filename, t ? tv : NULL, flags);
  96. }
  97. asmlinkage long compat_sys_futimesat(unsigned int dfd, const char __user *filename, struct compat_timeval __user *t)
  98. {
  99. struct timespec tv[2];
  100. if (t) {
  101. if (get_user(tv[0].tv_sec, &t[0].tv_sec) ||
  102. get_user(tv[0].tv_nsec, &t[0].tv_usec) ||
  103. get_user(tv[1].tv_sec, &t[1].tv_sec) ||
  104. get_user(tv[1].tv_nsec, &t[1].tv_usec))
  105. return -EFAULT;
  106. if (tv[0].tv_nsec >= 1000000 || tv[0].tv_nsec < 0 ||
  107. tv[1].tv_nsec >= 1000000 || tv[1].tv_nsec < 0)
  108. return -EINVAL;
  109. tv[0].tv_nsec *= 1000;
  110. tv[1].tv_nsec *= 1000;
  111. }
  112. return do_utimes(dfd, filename, t ? tv : NULL, 0);
  113. }
  114. asmlinkage long compat_sys_utimes(const char __user *filename, struct compat_timeval __user *t)
  115. {
  116. return compat_sys_futimesat(AT_FDCWD, filename, t);
  117. }
  118. static int cp_compat_stat(struct kstat *stat, struct compat_stat __user *ubuf)
  119. {
  120. compat_ino_t ino = stat->ino;
  121. typeof(ubuf->st_uid) uid = 0;
  122. typeof(ubuf->st_gid) gid = 0;
  123. int err;
  124. SET_UID(uid, stat->uid);
  125. SET_GID(gid, stat->gid);
  126. if ((u64) stat->size > MAX_NON_LFS ||
  127. !old_valid_dev(stat->dev) ||
  128. !old_valid_dev(stat->rdev))
  129. return -EOVERFLOW;
  130. if (sizeof(ino) < sizeof(stat->ino) && ino != stat->ino)
  131. return -EOVERFLOW;
  132. if (clear_user(ubuf, sizeof(*ubuf)))
  133. return -EFAULT;
  134. err = __put_user(old_encode_dev(stat->dev), &ubuf->st_dev);
  135. err |= __put_user(ino, &ubuf->st_ino);
  136. err |= __put_user(stat->mode, &ubuf->st_mode);
  137. err |= __put_user(stat->nlink, &ubuf->st_nlink);
  138. err |= __put_user(uid, &ubuf->st_uid);
  139. err |= __put_user(gid, &ubuf->st_gid);
  140. err |= __put_user(old_encode_dev(stat->rdev), &ubuf->st_rdev);
  141. err |= __put_user(stat->size, &ubuf->st_size);
  142. err |= __put_user(stat->atime.tv_sec, &ubuf->st_atime);
  143. err |= __put_user(stat->atime.tv_nsec, &ubuf->st_atime_nsec);
  144. err |= __put_user(stat->mtime.tv_sec, &ubuf->st_mtime);
  145. err |= __put_user(stat->mtime.tv_nsec, &ubuf->st_mtime_nsec);
  146. err |= __put_user(stat->ctime.tv_sec, &ubuf->st_ctime);
  147. err |= __put_user(stat->ctime.tv_nsec, &ubuf->st_ctime_nsec);
  148. err |= __put_user(stat->blksize, &ubuf->st_blksize);
  149. err |= __put_user(stat->blocks, &ubuf->st_blocks);
  150. return err;
  151. }
  152. asmlinkage long compat_sys_newstat(const char __user * filename,
  153. struct compat_stat __user *statbuf)
  154. {
  155. struct kstat stat;
  156. int error;
  157. error = vfs_stat(filename, &stat);
  158. if (error)
  159. return error;
  160. return cp_compat_stat(&stat, statbuf);
  161. }
  162. asmlinkage long compat_sys_newlstat(const char __user * filename,
  163. struct compat_stat __user *statbuf)
  164. {
  165. struct kstat stat;
  166. int error;
  167. error = vfs_lstat(filename, &stat);
  168. if (error)
  169. return error;
  170. return cp_compat_stat(&stat, statbuf);
  171. }
  172. #ifndef __ARCH_WANT_STAT64
  173. asmlinkage long compat_sys_newfstatat(unsigned int dfd,
  174. const char __user *filename,
  175. struct compat_stat __user *statbuf, int flag)
  176. {
  177. struct kstat stat;
  178. int error;
  179. error = vfs_fstatat(dfd, filename, &stat, flag);
  180. if (error)
  181. return error;
  182. return cp_compat_stat(&stat, statbuf);
  183. }
  184. #endif
  185. asmlinkage long compat_sys_newfstat(unsigned int fd,
  186. struct compat_stat __user * statbuf)
  187. {
  188. struct kstat stat;
  189. int error = vfs_fstat(fd, &stat);
  190. if (!error)
  191. error = cp_compat_stat(&stat, statbuf);
  192. return error;
  193. }
  194. static int put_compat_statfs(struct compat_statfs __user *ubuf, struct kstatfs *kbuf)
  195. {
  196. if (sizeof ubuf->f_blocks == 4) {
  197. if ((kbuf->f_blocks | kbuf->f_bfree | kbuf->f_bavail |
  198. kbuf->f_bsize | kbuf->f_frsize) & 0xffffffff00000000ULL)
  199. return -EOVERFLOW;
  200. /* f_files and f_ffree may be -1; it's okay
  201. * to stuff that into 32 bits */
  202. if (kbuf->f_files != 0xffffffffffffffffULL
  203. && (kbuf->f_files & 0xffffffff00000000ULL))
  204. return -EOVERFLOW;
  205. if (kbuf->f_ffree != 0xffffffffffffffffULL
  206. && (kbuf->f_ffree & 0xffffffff00000000ULL))
  207. return -EOVERFLOW;
  208. }
  209. if (!access_ok(VERIFY_WRITE, ubuf, sizeof(*ubuf)) ||
  210. __put_user(kbuf->f_type, &ubuf->f_type) ||
  211. __put_user(kbuf->f_bsize, &ubuf->f_bsize) ||
  212. __put_user(kbuf->f_blocks, &ubuf->f_blocks) ||
  213. __put_user(kbuf->f_bfree, &ubuf->f_bfree) ||
  214. __put_user(kbuf->f_bavail, &ubuf->f_bavail) ||
  215. __put_user(kbuf->f_files, &ubuf->f_files) ||
  216. __put_user(kbuf->f_ffree, &ubuf->f_ffree) ||
  217. __put_user(kbuf->f_namelen, &ubuf->f_namelen) ||
  218. __put_user(kbuf->f_fsid.val[0], &ubuf->f_fsid.val[0]) ||
  219. __put_user(kbuf->f_fsid.val[1], &ubuf->f_fsid.val[1]) ||
  220. __put_user(kbuf->f_frsize, &ubuf->f_frsize) ||
  221. __put_user(kbuf->f_flags, &ubuf->f_flags) ||
  222. __clear_user(ubuf->f_spare, sizeof(ubuf->f_spare)))
  223. return -EFAULT;
  224. return 0;
  225. }
  226. /*
  227. * The following statfs calls are copies of code from fs/statfs.c and
  228. * should be checked against those from time to time
  229. */
  230. asmlinkage long compat_sys_statfs(const char __user *pathname, struct compat_statfs __user *buf)
  231. {
  232. struct kstatfs tmp;
  233. int error = user_statfs(pathname, &tmp);
  234. if (!error)
  235. error = put_compat_statfs(buf, &tmp);
  236. return error;
  237. }
  238. asmlinkage long compat_sys_fstatfs(unsigned int fd, struct compat_statfs __user *buf)
  239. {
  240. struct kstatfs tmp;
  241. int error = fd_statfs(fd, &tmp);
  242. if (!error)
  243. error = put_compat_statfs(buf, &tmp);
  244. return error;
  245. }
  246. static int put_compat_statfs64(struct compat_statfs64 __user *ubuf, struct kstatfs *kbuf)
  247. {
  248. if (sizeof ubuf->f_blocks == 4) {
  249. if ((kbuf->f_blocks | kbuf->f_bfree | kbuf->f_bavail |
  250. kbuf->f_bsize | kbuf->f_frsize) & 0xffffffff00000000ULL)
  251. return -EOVERFLOW;
  252. /* f_files and f_ffree may be -1; it's okay
  253. * to stuff that into 32 bits */
  254. if (kbuf->f_files != 0xffffffffffffffffULL
  255. && (kbuf->f_files & 0xffffffff00000000ULL))
  256. return -EOVERFLOW;
  257. if (kbuf->f_ffree != 0xffffffffffffffffULL
  258. && (kbuf->f_ffree & 0xffffffff00000000ULL))
  259. return -EOVERFLOW;
  260. }
  261. if (!access_ok(VERIFY_WRITE, ubuf, sizeof(*ubuf)) ||
  262. __put_user(kbuf->f_type, &ubuf->f_type) ||
  263. __put_user(kbuf->f_bsize, &ubuf->f_bsize) ||
  264. __put_user(kbuf->f_blocks, &ubuf->f_blocks) ||
  265. __put_user(kbuf->f_bfree, &ubuf->f_bfree) ||
  266. __put_user(kbuf->f_bavail, &ubuf->f_bavail) ||
  267. __put_user(kbuf->f_files, &ubuf->f_files) ||
  268. __put_user(kbuf->f_ffree, &ubuf->f_ffree) ||
  269. __put_user(kbuf->f_namelen, &ubuf->f_namelen) ||
  270. __put_user(kbuf->f_fsid.val[0], &ubuf->f_fsid.val[0]) ||
  271. __put_user(kbuf->f_fsid.val[1], &ubuf->f_fsid.val[1]) ||
  272. __put_user(kbuf->f_frsize, &ubuf->f_frsize) ||
  273. __put_user(kbuf->f_flags, &ubuf->f_flags) ||
  274. __clear_user(ubuf->f_spare, sizeof(ubuf->f_spare)))
  275. return -EFAULT;
  276. return 0;
  277. }
  278. asmlinkage long compat_sys_statfs64(const char __user *pathname, compat_size_t sz, struct compat_statfs64 __user *buf)
  279. {
  280. struct kstatfs tmp;
  281. int error;
  282. if (sz != sizeof(*buf))
  283. return -EINVAL;
  284. error = user_statfs(pathname, &tmp);
  285. if (!error)
  286. error = put_compat_statfs64(buf, &tmp);
  287. return error;
  288. }
  289. asmlinkage long compat_sys_fstatfs64(unsigned int fd, compat_size_t sz, struct compat_statfs64 __user *buf)
  290. {
  291. struct kstatfs tmp;
  292. int error;
  293. if (sz != sizeof(*buf))
  294. return -EINVAL;
  295. error = fd_statfs(fd, &tmp);
  296. if (!error)
  297. error = put_compat_statfs64(buf, &tmp);
  298. return error;
  299. }
  300. /*
  301. * This is a copy of sys_ustat, just dealing with a structure layout.
  302. * Given how simple this syscall is that apporach is more maintainable
  303. * than the various conversion hacks.
  304. */
  305. asmlinkage long compat_sys_ustat(unsigned dev, struct compat_ustat __user *u)
  306. {
  307. struct super_block *sb;
  308. struct compat_ustat tmp;
  309. struct kstatfs sbuf;
  310. int err;
  311. sb = user_get_super(new_decode_dev(dev));
  312. if (!sb)
  313. return -EINVAL;
  314. err = statfs_by_dentry(sb->s_root, &sbuf);
  315. drop_super(sb);
  316. if (err)
  317. return err;
  318. memset(&tmp, 0, sizeof(struct compat_ustat));
  319. tmp.f_tfree = sbuf.f_bfree;
  320. tmp.f_tinode = sbuf.f_ffree;
  321. if (copy_to_user(u, &tmp, sizeof(struct compat_ustat)))
  322. return -EFAULT;
  323. return 0;
  324. }
  325. static int get_compat_flock(struct flock *kfl, struct compat_flock __user *ufl)
  326. {
  327. if (!access_ok(VERIFY_READ, ufl, sizeof(*ufl)) ||
  328. __get_user(kfl->l_type, &ufl->l_type) ||
  329. __get_user(kfl->l_whence, &ufl->l_whence) ||
  330. __get_user(kfl->l_start, &ufl->l_start) ||
  331. __get_user(kfl->l_len, &ufl->l_len) ||
  332. __get_user(kfl->l_pid, &ufl->l_pid))
  333. return -EFAULT;
  334. return 0;
  335. }
  336. static int put_compat_flock(struct flock *kfl, struct compat_flock __user *ufl)
  337. {
  338. if (!access_ok(VERIFY_WRITE, ufl, sizeof(*ufl)) ||
  339. __put_user(kfl->l_type, &ufl->l_type) ||
  340. __put_user(kfl->l_whence, &ufl->l_whence) ||
  341. __put_user(kfl->l_start, &ufl->l_start) ||
  342. __put_user(kfl->l_len, &ufl->l_len) ||
  343. __put_user(kfl->l_pid, &ufl->l_pid))
  344. return -EFAULT;
  345. return 0;
  346. }
  347. #ifndef HAVE_ARCH_GET_COMPAT_FLOCK64
  348. static int get_compat_flock64(struct flock *kfl, struct compat_flock64 __user *ufl)
  349. {
  350. if (!access_ok(VERIFY_READ, ufl, sizeof(*ufl)) ||
  351. __get_user(kfl->l_type, &ufl->l_type) ||
  352. __get_user(kfl->l_whence, &ufl->l_whence) ||
  353. __get_user(kfl->l_start, &ufl->l_start) ||
  354. __get_user(kfl->l_len, &ufl->l_len) ||
  355. __get_user(kfl->l_pid, &ufl->l_pid))
  356. return -EFAULT;
  357. return 0;
  358. }
  359. #endif
  360. #ifndef HAVE_ARCH_PUT_COMPAT_FLOCK64
  361. static int put_compat_flock64(struct flock *kfl, struct compat_flock64 __user *ufl)
  362. {
  363. if (!access_ok(VERIFY_WRITE, ufl, sizeof(*ufl)) ||
  364. __put_user(kfl->l_type, &ufl->l_type) ||
  365. __put_user(kfl->l_whence, &ufl->l_whence) ||
  366. __put_user(kfl->l_start, &ufl->l_start) ||
  367. __put_user(kfl->l_len, &ufl->l_len) ||
  368. __put_user(kfl->l_pid, &ufl->l_pid))
  369. return -EFAULT;
  370. return 0;
  371. }
  372. #endif
  373. asmlinkage long compat_sys_fcntl64(unsigned int fd, unsigned int cmd,
  374. unsigned long arg)
  375. {
  376. mm_segment_t old_fs;
  377. struct flock f;
  378. long ret;
  379. switch (cmd) {
  380. case F_GETLK:
  381. case F_SETLK:
  382. case F_SETLKW:
  383. ret = get_compat_flock(&f, compat_ptr(arg));
  384. if (ret != 0)
  385. break;
  386. old_fs = get_fs();
  387. set_fs(KERNEL_DS);
  388. ret = sys_fcntl(fd, cmd, (unsigned long)&f);
  389. set_fs(old_fs);
  390. if (cmd == F_GETLK && ret == 0) {
  391. /* GETLK was successful and we need to return the data...
  392. * but it needs to fit in the compat structure.
  393. * l_start shouldn't be too big, unless the original
  394. * start + end is greater than COMPAT_OFF_T_MAX, in which
  395. * case the app was asking for trouble, so we return
  396. * -EOVERFLOW in that case.
  397. * l_len could be too big, in which case we just truncate it,
  398. * and only allow the app to see that part of the conflicting
  399. * lock that might make sense to it anyway
  400. */
  401. if (f.l_start > COMPAT_OFF_T_MAX)
  402. ret = -EOVERFLOW;
  403. if (f.l_len > COMPAT_OFF_T_MAX)
  404. f.l_len = COMPAT_OFF_T_MAX;
  405. if (ret == 0)
  406. ret = put_compat_flock(&f, compat_ptr(arg));
  407. }
  408. break;
  409. case F_GETLK64:
  410. case F_SETLK64:
  411. case F_SETLKW64:
  412. ret = get_compat_flock64(&f, compat_ptr(arg));
  413. if (ret != 0)
  414. break;
  415. old_fs = get_fs();
  416. set_fs(KERNEL_DS);
  417. ret = sys_fcntl(fd, (cmd == F_GETLK64) ? F_GETLK :
  418. ((cmd == F_SETLK64) ? F_SETLK : F_SETLKW),
  419. (unsigned long)&f);
  420. set_fs(old_fs);
  421. if (cmd == F_GETLK64 && ret == 0) {
  422. /* need to return lock information - see above for commentary */
  423. if (f.l_start > COMPAT_LOFF_T_MAX)
  424. ret = -EOVERFLOW;
  425. if (f.l_len > COMPAT_LOFF_T_MAX)
  426. f.l_len = COMPAT_LOFF_T_MAX;
  427. if (ret == 0)
  428. ret = put_compat_flock64(&f, compat_ptr(arg));
  429. }
  430. break;
  431. default:
  432. ret = sys_fcntl(fd, cmd, arg);
  433. break;
  434. }
  435. return ret;
  436. }
  437. asmlinkage long compat_sys_fcntl(unsigned int fd, unsigned int cmd,
  438. unsigned long arg)
  439. {
  440. if ((cmd == F_GETLK64) || (cmd == F_SETLK64) || (cmd == F_SETLKW64))
  441. return -EINVAL;
  442. return compat_sys_fcntl64(fd, cmd, arg);
  443. }
  444. asmlinkage long
  445. compat_sys_io_setup(unsigned nr_reqs, u32 __user *ctx32p)
  446. {
  447. long ret;
  448. aio_context_t ctx64;
  449. mm_segment_t oldfs = get_fs();
  450. if (unlikely(get_user(ctx64, ctx32p)))
  451. return -EFAULT;
  452. set_fs(KERNEL_DS);
  453. /* The __user pointer cast is valid because of the set_fs() */
  454. ret = sys_io_setup(nr_reqs, (aio_context_t __user *) &ctx64);
  455. set_fs(oldfs);
  456. /* truncating is ok because it's a user address */
  457. if (!ret)
  458. ret = put_user((u32) ctx64, ctx32p);
  459. return ret;
  460. }
  461. asmlinkage long
  462. compat_sys_io_getevents(aio_context_t ctx_id,
  463. unsigned long min_nr,
  464. unsigned long nr,
  465. struct io_event __user *events,
  466. struct compat_timespec __user *timeout)
  467. {
  468. long ret;
  469. struct timespec t;
  470. struct timespec __user *ut = NULL;
  471. ret = -EFAULT;
  472. if (unlikely(!access_ok(VERIFY_WRITE, events,
  473. nr * sizeof(struct io_event))))
  474. goto out;
  475. if (timeout) {
  476. if (get_compat_timespec(&t, timeout))
  477. goto out;
  478. ut = compat_alloc_user_space(sizeof(*ut));
  479. if (copy_to_user(ut, &t, sizeof(t)) )
  480. goto out;
  481. }
  482. ret = sys_io_getevents(ctx_id, min_nr, nr, events, ut);
  483. out:
  484. return ret;
  485. }
  486. /* A write operation does a read from user space and vice versa */
  487. #define vrfy_dir(type) ((type) == READ ? VERIFY_WRITE : VERIFY_READ)
  488. ssize_t compat_rw_copy_check_uvector(int type,
  489. const struct compat_iovec __user *uvector, unsigned long nr_segs,
  490. unsigned long fast_segs, struct iovec *fast_pointer,
  491. struct iovec **ret_pointer, int check_access)
  492. {
  493. compat_ssize_t tot_len;
  494. struct iovec *iov = *ret_pointer = fast_pointer;
  495. ssize_t ret = 0;
  496. int seg;
  497. /*
  498. * SuS says "The readv() function *may* fail if the iovcnt argument
  499. * was less than or equal to 0, or greater than {IOV_MAX}. Linux has
  500. * traditionally returned zero for zero segments, so...
  501. */
  502. if (nr_segs == 0)
  503. goto out;
  504. ret = -EINVAL;
  505. if (nr_segs > UIO_MAXIOV || nr_segs < 0)
  506. goto out;
  507. if (nr_segs > fast_segs) {
  508. ret = -ENOMEM;
  509. iov = kmalloc(nr_segs*sizeof(struct iovec), GFP_KERNEL);
  510. if (iov == NULL)
  511. goto out;
  512. }
  513. *ret_pointer = iov;
  514. /*
  515. * Single unix specification:
  516. * We should -EINVAL if an element length is not >= 0 and fitting an
  517. * ssize_t.
  518. *
  519. * In Linux, the total length is limited to MAX_RW_COUNT, there is
  520. * no overflow possibility.
  521. */
  522. tot_len = 0;
  523. ret = -EINVAL;
  524. for (seg = 0; seg < nr_segs; seg++) {
  525. compat_uptr_t buf;
  526. compat_ssize_t len;
  527. if (__get_user(len, &uvector->iov_len) ||
  528. __get_user(buf, &uvector->iov_base)) {
  529. ret = -EFAULT;
  530. goto out;
  531. }
  532. if (len < 0) /* size_t not fitting in compat_ssize_t .. */
  533. goto out;
  534. if (check_access &&
  535. !access_ok(vrfy_dir(type), compat_ptr(buf), len)) {
  536. ret = -EFAULT;
  537. goto out;
  538. }
  539. if (len > MAX_RW_COUNT - tot_len)
  540. len = MAX_RW_COUNT - tot_len;
  541. tot_len += len;
  542. iov->iov_base = compat_ptr(buf);
  543. iov->iov_len = (compat_size_t) len;
  544. uvector++;
  545. iov++;
  546. }
  547. ret = tot_len;
  548. out:
  549. return ret;
  550. }
  551. static inline long
  552. copy_iocb(long nr, u32 __user *ptr32, struct iocb __user * __user *ptr64)
  553. {
  554. compat_uptr_t uptr;
  555. int i;
  556. for (i = 0; i < nr; ++i) {
  557. if (get_user(uptr, ptr32 + i))
  558. return -EFAULT;
  559. if (put_user(compat_ptr(uptr), ptr64 + i))
  560. return -EFAULT;
  561. }
  562. return 0;
  563. }
  564. #define MAX_AIO_SUBMITS (PAGE_SIZE/sizeof(struct iocb *))
  565. asmlinkage long
  566. compat_sys_io_submit(aio_context_t ctx_id, int nr, u32 __user *iocb)
  567. {
  568. struct iocb __user * __user *iocb64;
  569. long ret;
  570. if (unlikely(nr < 0))
  571. return -EINVAL;
  572. if (nr > MAX_AIO_SUBMITS)
  573. nr = MAX_AIO_SUBMITS;
  574. iocb64 = compat_alloc_user_space(nr * sizeof(*iocb64));
  575. ret = copy_iocb(nr, iocb, iocb64);
  576. if (!ret)
  577. ret = do_io_submit(ctx_id, nr, iocb64, 1);
  578. return ret;
  579. }
  580. struct compat_ncp_mount_data {
  581. compat_int_t version;
  582. compat_uint_t ncp_fd;
  583. __compat_uid_t mounted_uid;
  584. compat_pid_t wdog_pid;
  585. unsigned char mounted_vol[NCP_VOLNAME_LEN + 1];
  586. compat_uint_t time_out;
  587. compat_uint_t retry_count;
  588. compat_uint_t flags;
  589. __compat_uid_t uid;
  590. __compat_gid_t gid;
  591. compat_mode_t file_mode;
  592. compat_mode_t dir_mode;
  593. };
  594. struct compat_ncp_mount_data_v4 {
  595. compat_int_t version;
  596. compat_ulong_t flags;
  597. compat_ulong_t mounted_uid;
  598. compat_long_t wdog_pid;
  599. compat_uint_t ncp_fd;
  600. compat_uint_t time_out;
  601. compat_uint_t retry_count;
  602. compat_ulong_t uid;
  603. compat_ulong_t gid;
  604. compat_ulong_t file_mode;
  605. compat_ulong_t dir_mode;
  606. };
  607. static void *do_ncp_super_data_conv(void *raw_data)
  608. {
  609. int version = *(unsigned int *)raw_data;
  610. if (version == 3) {
  611. struct compat_ncp_mount_data *c_n = raw_data;
  612. struct ncp_mount_data *n = raw_data;
  613. n->dir_mode = c_n->dir_mode;
  614. n->file_mode = c_n->file_mode;
  615. n->gid = c_n->gid;
  616. n->uid = c_n->uid;
  617. memmove (n->mounted_vol, c_n->mounted_vol, (sizeof (c_n->mounted_vol) + 3 * sizeof (unsigned int)));
  618. n->wdog_pid = c_n->wdog_pid;
  619. n->mounted_uid = c_n->mounted_uid;
  620. } else if (version == 4) {
  621. struct compat_ncp_mount_data_v4 *c_n = raw_data;
  622. struct ncp_mount_data_v4 *n = raw_data;
  623. n->dir_mode = c_n->dir_mode;
  624. n->file_mode = c_n->file_mode;
  625. n->gid = c_n->gid;
  626. n->uid = c_n->uid;
  627. n->retry_count = c_n->retry_count;
  628. n->time_out = c_n->time_out;
  629. n->ncp_fd = c_n->ncp_fd;
  630. n->wdog_pid = c_n->wdog_pid;
  631. n->mounted_uid = c_n->mounted_uid;
  632. n->flags = c_n->flags;
  633. } else if (version != 5) {
  634. return NULL;
  635. }
  636. return raw_data;
  637. }
  638. struct compat_nfs_string {
  639. compat_uint_t len;
  640. compat_uptr_t data;
  641. };
  642. static inline void compat_nfs_string(struct nfs_string *dst,
  643. struct compat_nfs_string *src)
  644. {
  645. dst->data = compat_ptr(src->data);
  646. dst->len = src->len;
  647. }
  648. struct compat_nfs4_mount_data_v1 {
  649. compat_int_t version;
  650. compat_int_t flags;
  651. compat_int_t rsize;
  652. compat_int_t wsize;
  653. compat_int_t timeo;
  654. compat_int_t retrans;
  655. compat_int_t acregmin;
  656. compat_int_t acregmax;
  657. compat_int_t acdirmin;
  658. compat_int_t acdirmax;
  659. struct compat_nfs_string client_addr;
  660. struct compat_nfs_string mnt_path;
  661. struct compat_nfs_string hostname;
  662. compat_uint_t host_addrlen;
  663. compat_uptr_t host_addr;
  664. compat_int_t proto;
  665. compat_int_t auth_flavourlen;
  666. compat_uptr_t auth_flavours;
  667. };
  668. static int do_nfs4_super_data_conv(void *raw_data)
  669. {
  670. int version = *(compat_uint_t *) raw_data;
  671. if (version == 1) {
  672. struct compat_nfs4_mount_data_v1 *raw = raw_data;
  673. struct nfs4_mount_data *real = raw_data;
  674. /* copy the fields backwards */
  675. real->auth_flavours = compat_ptr(raw->auth_flavours);
  676. real->auth_flavourlen = raw->auth_flavourlen;
  677. real->proto = raw->proto;
  678. real->host_addr = compat_ptr(raw->host_addr);
  679. real->host_addrlen = raw->host_addrlen;
  680. compat_nfs_string(&real->hostname, &raw->hostname);
  681. compat_nfs_string(&real->mnt_path, &raw->mnt_path);
  682. compat_nfs_string(&real->client_addr, &raw->client_addr);
  683. real->acdirmax = raw->acdirmax;
  684. real->acdirmin = raw->acdirmin;
  685. real->acregmax = raw->acregmax;
  686. real->acregmin = raw->acregmin;
  687. real->retrans = raw->retrans;
  688. real->timeo = raw->timeo;
  689. real->wsize = raw->wsize;
  690. real->rsize = raw->rsize;
  691. real->flags = raw->flags;
  692. real->version = raw->version;
  693. }
  694. return 0;
  695. }
  696. #define NCPFS_NAME "ncpfs"
  697. #define NFS4_NAME "nfs4"
  698. asmlinkage long compat_sys_mount(const char __user * dev_name,
  699. const char __user * dir_name,
  700. const char __user * type, unsigned long flags,
  701. const void __user * data)
  702. {
  703. char *kernel_type;
  704. unsigned long data_page;
  705. char *kernel_dev;
  706. char *dir_page;
  707. int retval;
  708. retval = copy_mount_string(type, &kernel_type);
  709. if (retval < 0)
  710. goto out;
  711. dir_page = getname(dir_name);
  712. retval = PTR_ERR(dir_page);
  713. if (IS_ERR(dir_page))
  714. goto out1;
  715. retval = copy_mount_string(dev_name, &kernel_dev);
  716. if (retval < 0)
  717. goto out2;
  718. retval = copy_mount_options(data, &data_page);
  719. if (retval < 0)
  720. goto out3;
  721. retval = -EINVAL;
  722. if (kernel_type && data_page) {
  723. if (!strcmp(kernel_type, NCPFS_NAME)) {
  724. do_ncp_super_data_conv((void *)data_page);
  725. } else if (!strcmp(kernel_type, NFS4_NAME)) {
  726. if (do_nfs4_super_data_conv((void *) data_page))
  727. goto out4;
  728. }
  729. }
  730. retval = do_mount(kernel_dev, dir_page, kernel_type,
  731. flags, (void*)data_page);
  732. out4:
  733. free_page(data_page);
  734. out3:
  735. kfree(kernel_dev);
  736. out2:
  737. putname(dir_page);
  738. out1:
  739. kfree(kernel_type);
  740. out:
  741. return retval;
  742. }
  743. struct compat_old_linux_dirent {
  744. compat_ulong_t d_ino;
  745. compat_ulong_t d_offset;
  746. unsigned short d_namlen;
  747. char d_name[1];
  748. };
  749. struct compat_readdir_callback {
  750. struct compat_old_linux_dirent __user *dirent;
  751. int result;
  752. };
  753. static int compat_fillonedir(void *__buf, const char *name, int namlen,
  754. loff_t offset, u64 ino, unsigned int d_type)
  755. {
  756. struct compat_readdir_callback *buf = __buf;
  757. struct compat_old_linux_dirent __user *dirent;
  758. compat_ulong_t d_ino;
  759. if (buf->result)
  760. return -EINVAL;
  761. d_ino = ino;
  762. if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) {
  763. buf->result = -EOVERFLOW;
  764. return -EOVERFLOW;
  765. }
  766. buf->result++;
  767. dirent = buf->dirent;
  768. if (!access_ok(VERIFY_WRITE, dirent,
  769. (unsigned long)(dirent->d_name + namlen + 1) -
  770. (unsigned long)dirent))
  771. goto efault;
  772. if ( __put_user(d_ino, &dirent->d_ino) ||
  773. __put_user(offset, &dirent->d_offset) ||
  774. __put_user(namlen, &dirent->d_namlen) ||
  775. __copy_to_user(dirent->d_name, name, namlen) ||
  776. __put_user(0, dirent->d_name + namlen))
  777. goto efault;
  778. return 0;
  779. efault:
  780. buf->result = -EFAULT;
  781. return -EFAULT;
  782. }
  783. asmlinkage long compat_sys_old_readdir(unsigned int fd,
  784. struct compat_old_linux_dirent __user *dirent, unsigned int count)
  785. {
  786. int error;
  787. struct file *file;
  788. struct compat_readdir_callback buf;
  789. error = -EBADF;
  790. file = fget(fd);
  791. if (!file)
  792. goto out;
  793. buf.result = 0;
  794. buf.dirent = dirent;
  795. error = vfs_readdir(file, compat_fillonedir, &buf);
  796. if (buf.result)
  797. error = buf.result;
  798. fput(file);
  799. out:
  800. return error;
  801. }
  802. struct compat_linux_dirent {
  803. compat_ulong_t d_ino;
  804. compat_ulong_t d_off;
  805. unsigned short d_reclen;
  806. char d_name[1];
  807. };
  808. struct compat_getdents_callback {
  809. struct compat_linux_dirent __user *current_dir;
  810. struct compat_linux_dirent __user *previous;
  811. int count;
  812. int error;
  813. };
  814. static int compat_filldir(void *__buf, const char *name, int namlen,
  815. loff_t offset, u64 ino, unsigned int d_type)
  816. {
  817. struct compat_linux_dirent __user * dirent;
  818. struct compat_getdents_callback *buf = __buf;
  819. compat_ulong_t d_ino;
  820. int reclen = ALIGN(offsetof(struct compat_linux_dirent, d_name) +
  821. namlen + 2, sizeof(compat_long_t));
  822. buf->error = -EINVAL; /* only used if we fail.. */
  823. if (reclen > buf->count)
  824. return -EINVAL;
  825. d_ino = ino;
  826. if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) {
  827. buf->error = -EOVERFLOW;
  828. return -EOVERFLOW;
  829. }
  830. dirent = buf->previous;
  831. if (dirent) {
  832. if (__put_user(offset, &dirent->d_off))
  833. goto efault;
  834. }
  835. dirent = buf->current_dir;
  836. if (__put_user(d_ino, &dirent->d_ino))
  837. goto efault;
  838. if (__put_user(reclen, &dirent->d_reclen))
  839. goto efault;
  840. if (copy_to_user(dirent->d_name, name, namlen))
  841. goto efault;
  842. if (__put_user(0, dirent->d_name + namlen))
  843. goto efault;
  844. if (__put_user(d_type, (char __user *) dirent + reclen - 1))
  845. goto efault;
  846. buf->previous = dirent;
  847. dirent = (void __user *)dirent + reclen;
  848. buf->current_dir = dirent;
  849. buf->count -= reclen;
  850. return 0;
  851. efault:
  852. buf->error = -EFAULT;
  853. return -EFAULT;
  854. }
  855. asmlinkage long compat_sys_getdents(unsigned int fd,
  856. struct compat_linux_dirent __user *dirent, unsigned int count)
  857. {
  858. struct file * file;
  859. struct compat_linux_dirent __user * lastdirent;
  860. struct compat_getdents_callback buf;
  861. int error;
  862. error = -EFAULT;
  863. if (!access_ok(VERIFY_WRITE, dirent, count))
  864. goto out;
  865. error = -EBADF;
  866. file = fget(fd);
  867. if (!file)
  868. goto out;
  869. buf.current_dir = dirent;
  870. buf.previous = NULL;
  871. buf.count = count;
  872. buf.error = 0;
  873. error = vfs_readdir(file, compat_filldir, &buf);
  874. if (error >= 0)
  875. error = buf.error;
  876. lastdirent = buf.previous;
  877. if (lastdirent) {
  878. if (put_user(file->f_pos, &lastdirent->d_off))
  879. error = -EFAULT;
  880. else
  881. error = count - buf.count;
  882. }
  883. fput(file);
  884. out:
  885. return error;
  886. }
  887. #ifndef __ARCH_OMIT_COMPAT_SYS_GETDENTS64
  888. struct compat_getdents_callback64 {
  889. struct linux_dirent64 __user *current_dir;
  890. struct linux_dirent64 __user *previous;
  891. int count;
  892. int error;
  893. };
  894. static int compat_filldir64(void * __buf, const char * name, int namlen, loff_t offset,
  895. u64 ino, unsigned int d_type)
  896. {
  897. struct linux_dirent64 __user *dirent;
  898. struct compat_getdents_callback64 *buf = __buf;
  899. int reclen = ALIGN(offsetof(struct linux_dirent64, d_name) + namlen + 1,
  900. sizeof(u64));
  901. u64 off;
  902. buf->error = -EINVAL; /* only used if we fail.. */
  903. if (reclen > buf->count)
  904. return -EINVAL;
  905. dirent = buf->previous;
  906. if (dirent) {
  907. if (__put_user_unaligned(offset, &dirent->d_off))
  908. goto efault;
  909. }
  910. dirent = buf->current_dir;
  911. if (__put_user_unaligned(ino, &dirent->d_ino))
  912. goto efault;
  913. off = 0;
  914. if (__put_user_unaligned(off, &dirent->d_off))
  915. goto efault;
  916. if (__put_user(reclen, &dirent->d_reclen))
  917. goto efault;
  918. if (__put_user(d_type, &dirent->d_type))
  919. goto efault;
  920. if (copy_to_user(dirent->d_name, name, namlen))
  921. goto efault;
  922. if (__put_user(0, dirent->d_name + namlen))
  923. goto efault;
  924. buf->previous = dirent;
  925. dirent = (void __user *)dirent + reclen;
  926. buf->current_dir = dirent;
  927. buf->count -= reclen;
  928. return 0;
  929. efault:
  930. buf->error = -EFAULT;
  931. return -EFAULT;
  932. }
  933. asmlinkage long compat_sys_getdents64(unsigned int fd,
  934. struct linux_dirent64 __user * dirent, unsigned int count)
  935. {
  936. struct file * file;
  937. struct linux_dirent64 __user * lastdirent;
  938. struct compat_getdents_callback64 buf;
  939. int error;
  940. error = -EFAULT;
  941. if (!access_ok(VERIFY_WRITE, dirent, count))
  942. goto out;
  943. error = -EBADF;
  944. file = fget(fd);
  945. if (!file)
  946. goto out;
  947. buf.current_dir = dirent;
  948. buf.previous = NULL;
  949. buf.count = count;
  950. buf.error = 0;
  951. error = vfs_readdir(file, compat_filldir64, &buf);
  952. if (error >= 0)
  953. error = buf.error;
  954. lastdirent = buf.previous;
  955. if (lastdirent) {
  956. typeof(lastdirent->d_off) d_off = file->f_pos;
  957. if (__put_user_unaligned(d_off, &lastdirent->d_off))
  958. error = -EFAULT;
  959. else
  960. error = count - buf.count;
  961. }
  962. fput(file);
  963. out:
  964. return error;
  965. }
  966. #endif /* ! __ARCH_OMIT_COMPAT_SYS_GETDENTS64 */
  967. static ssize_t compat_do_readv_writev(int type, struct file *file,
  968. const struct compat_iovec __user *uvector,
  969. unsigned long nr_segs, loff_t *pos)
  970. {
  971. compat_ssize_t tot_len;
  972. struct iovec iovstack[UIO_FASTIOV];
  973. struct iovec *iov = iovstack;
  974. ssize_t ret;
  975. io_fn_t fn;
  976. iov_fn_t fnv;
  977. ret = -EINVAL;
  978. if (!file->f_op)
  979. goto out;
  980. ret = -EFAULT;
  981. if (!access_ok(VERIFY_READ, uvector, nr_segs*sizeof(*uvector)))
  982. goto out;
  983. tot_len = compat_rw_copy_check_uvector(type, uvector, nr_segs,
  984. UIO_FASTIOV, iovstack, &iov, 1);
  985. if (tot_len == 0) {
  986. ret = 0;
  987. goto out;
  988. }
  989. ret = rw_verify_area(type, file, pos, tot_len);
  990. if (ret < 0)
  991. goto out;
  992. fnv = NULL;
  993. if (type == READ) {
  994. fn = file->f_op->read;
  995. fnv = file->f_op->aio_read;
  996. } else {
  997. fn = (io_fn_t)file->f_op->write;
  998. fnv = file->f_op->aio_write;
  999. }
  1000. if (fnv)
  1001. ret = do_sync_readv_writev(file, iov, nr_segs, tot_len,
  1002. pos, fnv);
  1003. else
  1004. ret = do_loop_readv_writev(file, iov, nr_segs, pos, fn);
  1005. out:
  1006. if (iov != iovstack)
  1007. kfree(iov);
  1008. if ((ret + (type == READ)) > 0) {
  1009. if (type == READ)
  1010. fsnotify_access(file);
  1011. else
  1012. fsnotify_modify(file);
  1013. }
  1014. return ret;
  1015. }
  1016. static size_t compat_readv(struct file *file,
  1017. const struct compat_iovec __user *vec,
  1018. unsigned long vlen, loff_t *pos)
  1019. {
  1020. ssize_t ret = -EBADF;
  1021. if (!(file->f_mode & FMODE_READ))
  1022. goto out;
  1023. ret = -EINVAL;
  1024. if (!file->f_op || (!file->f_op->aio_read && !file->f_op->read))
  1025. goto out;
  1026. ret = compat_do_readv_writev(READ, file, vec, vlen, pos);
  1027. out:
  1028. if (ret > 0)
  1029. add_rchar(current, ret);
  1030. inc_syscr(current);
  1031. return ret;
  1032. }
  1033. asmlinkage ssize_t
  1034. compat_sys_readv(unsigned long fd, const struct compat_iovec __user *vec,
  1035. unsigned long vlen)
  1036. {
  1037. struct file *file;
  1038. int fput_needed;
  1039. ssize_t ret;
  1040. file = fget_light(fd, &fput_needed);
  1041. if (!file)
  1042. return -EBADF;
  1043. ret = compat_readv(file, vec, vlen, &file->f_pos);
  1044. fput_light(file, fput_needed);
  1045. return ret;
  1046. }
  1047. asmlinkage ssize_t
  1048. compat_sys_preadv(unsigned long fd, const struct compat_iovec __user *vec,
  1049. unsigned long vlen, u32 pos_low, u32 pos_high)
  1050. {
  1051. loff_t pos = ((loff_t)pos_high << 32) | pos_low;
  1052. struct file *file;
  1053. int fput_needed;
  1054. ssize_t ret;
  1055. if (pos < 0)
  1056. return -EINVAL;
  1057. file = fget_light(fd, &fput_needed);
  1058. if (!file)
  1059. return -EBADF;
  1060. ret = -ESPIPE;
  1061. if (file->f_mode & FMODE_PREAD)
  1062. ret = compat_readv(file, vec, vlen, &pos);
  1063. fput_light(file, fput_needed);
  1064. return ret;
  1065. }
  1066. static size_t compat_writev(struct file *file,
  1067. const struct compat_iovec __user *vec,
  1068. unsigned long vlen, loff_t *pos)
  1069. {
  1070. ssize_t ret = -EBADF;
  1071. if (!(file->f_mode & FMODE_WRITE))
  1072. goto out;
  1073. ret = -EINVAL;
  1074. if (!file->f_op || (!file->f_op->aio_write && !file->f_op->write))
  1075. goto out;
  1076. ret = compat_do_readv_writev(WRITE, file, vec, vlen, pos);
  1077. out:
  1078. if (ret > 0)
  1079. add_wchar(current, ret);
  1080. inc_syscw(current);
  1081. return ret;
  1082. }
  1083. asmlinkage ssize_t
  1084. compat_sys_writev(unsigned long fd, const struct compat_iovec __user *vec,
  1085. unsigned long vlen)
  1086. {
  1087. struct file *file;
  1088. int fput_needed;
  1089. ssize_t ret;
  1090. file = fget_light(fd, &fput_needed);
  1091. if (!file)
  1092. return -EBADF;
  1093. ret = compat_writev(file, vec, vlen, &file->f_pos);
  1094. fput_light(file, fput_needed);
  1095. return ret;
  1096. }
  1097. asmlinkage ssize_t
  1098. compat_sys_pwritev(unsigned long fd, const struct compat_iovec __user *vec,
  1099. unsigned long vlen, u32 pos_low, u32 pos_high)
  1100. {
  1101. loff_t pos = ((loff_t)pos_high << 32) | pos_low;
  1102. struct file *file;
  1103. int fput_needed;
  1104. ssize_t ret;
  1105. if (pos < 0)
  1106. return -EINVAL;
  1107. file = fget_light(fd, &fput_needed);
  1108. if (!file)
  1109. return -EBADF;
  1110. ret = -ESPIPE;
  1111. if (file->f_mode & FMODE_PWRITE)
  1112. ret = compat_writev(file, vec, vlen, &pos);
  1113. fput_light(file, fput_needed);
  1114. return ret;
  1115. }
  1116. asmlinkage long
  1117. compat_sys_vmsplice(int fd, const struct compat_iovec __user *iov32,
  1118. unsigned int nr_segs, unsigned int flags)
  1119. {
  1120. unsigned i;
  1121. struct iovec __user *iov;
  1122. if (nr_segs > UIO_MAXIOV)
  1123. return -EINVAL;
  1124. iov = compat_alloc_user_space(nr_segs * sizeof(struct iovec));
  1125. for (i = 0; i < nr_segs; i++) {
  1126. struct compat_iovec v;
  1127. if (get_user(v.iov_base, &iov32[i].iov_base) ||
  1128. get_user(v.iov_len, &iov32[i].iov_len) ||
  1129. put_user(compat_ptr(v.iov_base), &iov[i].iov_base) ||
  1130. put_user(v.iov_len, &iov[i].iov_len))
  1131. return -EFAULT;
  1132. }
  1133. return sys_vmsplice(fd, iov, nr_segs, flags);
  1134. }
  1135. /*
  1136. * Exactly like fs/open.c:sys_open(), except that it doesn't set the
  1137. * O_LARGEFILE flag.
  1138. */
  1139. asmlinkage long
  1140. compat_sys_open(const char __user *filename, int flags, int mode)
  1141. {
  1142. return do_sys_open(AT_FDCWD, filename, flags, mode);
  1143. }
  1144. /*
  1145. * Exactly like fs/open.c:sys_openat(), except that it doesn't set the
  1146. * O_LARGEFILE flag.
  1147. */
  1148. asmlinkage long
  1149. compat_sys_openat(unsigned int dfd, const char __user *filename, int flags, int mode)
  1150. {
  1151. return do_sys_open(dfd, filename, flags, mode);
  1152. }
  1153. #define __COMPAT_NFDBITS (8 * sizeof(compat_ulong_t))
  1154. static int poll_select_copy_remaining(struct timespec *end_time, void __user *p,
  1155. int timeval, int ret)
  1156. {
  1157. struct timespec ts;
  1158. if (!p)
  1159. return ret;
  1160. if (current->personality & STICKY_TIMEOUTS)
  1161. goto sticky;
  1162. /* No update for zero timeout */
  1163. if (!end_time->tv_sec && !end_time->tv_nsec)
  1164. return ret;
  1165. ktime_get_ts(&ts);
  1166. ts = timespec_sub(*end_time, ts);
  1167. if (ts.tv_sec < 0)
  1168. ts.tv_sec = ts.tv_nsec = 0;
  1169. if (timeval) {
  1170. struct compat_timeval rtv;
  1171. rtv.tv_sec = ts.tv_sec;
  1172. rtv.tv_usec = ts.tv_nsec / NSEC_PER_USEC;
  1173. if (!copy_to_user(p, &rtv, sizeof(rtv)))
  1174. return ret;
  1175. } else {
  1176. struct compat_timespec rts;
  1177. rts.tv_sec = ts.tv_sec;
  1178. rts.tv_nsec = ts.tv_nsec;
  1179. if (!copy_to_user(p, &rts, sizeof(rts)))
  1180. return ret;
  1181. }
  1182. /*
  1183. * If an application puts its timeval in read-only memory, we
  1184. * don't want the Linux-specific update to the timeval to
  1185. * cause a fault after the select has completed
  1186. * successfully. However, because we're not updating the
  1187. * timeval, we can't restart the system call.
  1188. */
  1189. sticky:
  1190. if (ret == -ERESTARTNOHAND)
  1191. ret = -EINTR;
  1192. return ret;
  1193. }
  1194. /*
  1195. * Ooo, nasty. We need here to frob 32-bit unsigned longs to
  1196. * 64-bit unsigned longs.
  1197. */
  1198. static
  1199. int compat_get_fd_set(unsigned long nr, compat_ulong_t __user *ufdset,
  1200. unsigned long *fdset)
  1201. {
  1202. nr = DIV_ROUND_UP(nr, __COMPAT_NFDBITS);
  1203. if (ufdset) {
  1204. unsigned long odd;
  1205. if (!access_ok(VERIFY_WRITE, ufdset, nr*sizeof(compat_ulong_t)))
  1206. return -EFAULT;
  1207. odd = nr & 1UL;
  1208. nr &= ~1UL;
  1209. while (nr) {
  1210. unsigned long h, l;
  1211. if (__get_user(l, ufdset) || __get_user(h, ufdset+1))
  1212. return -EFAULT;
  1213. ufdset += 2;
  1214. *fdset++ = h << 32 | l;
  1215. nr -= 2;
  1216. }
  1217. if (odd && __get_user(*fdset, ufdset))
  1218. return -EFAULT;
  1219. } else {
  1220. /* Tricky, must clear full unsigned long in the
  1221. * kernel fdset at the end, this makes sure that
  1222. * actually happens.
  1223. */
  1224. memset(fdset, 0, ((nr + 1) & ~1)*sizeof(compat_ulong_t));
  1225. }
  1226. return 0;
  1227. }
  1228. static
  1229. int compat_set_fd_set(unsigned long nr, compat_ulong_t __user *ufdset,
  1230. unsigned long *fdset)
  1231. {
  1232. unsigned long odd;
  1233. nr = DIV_ROUND_UP(nr, __COMPAT_NFDBITS);
  1234. if (!ufdset)
  1235. return 0;
  1236. odd = nr & 1UL;
  1237. nr &= ~1UL;
  1238. while (nr) {
  1239. unsigned long h, l;
  1240. l = *fdset++;
  1241. h = l >> 32;
  1242. if (__put_user(l, ufdset) || __put_user(h, ufdset+1))
  1243. return -EFAULT;
  1244. ufdset += 2;
  1245. nr -= 2;
  1246. }
  1247. if (odd && __put_user(*fdset, ufdset))
  1248. return -EFAULT;
  1249. return 0;
  1250. }
  1251. /*
  1252. * This is a virtual copy of sys_select from fs/select.c and probably
  1253. * should be compared to it from time to time
  1254. */
  1255. /*
  1256. * We can actually return ERESTARTSYS instead of EINTR, but I'd
  1257. * like to be certain this leads to no problems. So I return
  1258. * EINTR just for safety.
  1259. *
  1260. * Update: ERESTARTSYS breaks at least the xview clock binary, so
  1261. * I'm trying ERESTARTNOHAND which restart only when you want to.
  1262. */
  1263. int compat_core_sys_select(int n, compat_ulong_t __user *inp,
  1264. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1265. struct timespec *end_time)
  1266. {
  1267. fd_set_bits fds;
  1268. void *bits;
  1269. int size, max_fds, ret = -EINVAL;
  1270. struct fdtable *fdt;
  1271. long stack_fds[SELECT_STACK_ALLOC/sizeof(long)];
  1272. if (n < 0)
  1273. goto out_nofds;
  1274. /* max_fds can increase, so grab it once to avoid race */
  1275. rcu_read_lock();
  1276. fdt = files_fdtable(current->files);
  1277. max_fds = fdt->max_fds;
  1278. rcu_read_unlock();
  1279. if (n > max_fds)
  1280. n = max_fds;
  1281. /*
  1282. * We need 6 bitmaps (in/out/ex for both incoming and outgoing),
  1283. * since we used fdset we need to allocate memory in units of
  1284. * long-words.
  1285. */
  1286. size = FDS_BYTES(n);
  1287. bits = stack_fds;
  1288. if (size > sizeof(stack_fds) / 6) {
  1289. bits = kmalloc(6 * size, GFP_KERNEL);
  1290. ret = -ENOMEM;
  1291. if (!bits)
  1292. goto out_nofds;
  1293. }
  1294. fds.in = (unsigned long *) bits;
  1295. fds.out = (unsigned long *) (bits + size);
  1296. fds.ex = (unsigned long *) (bits + 2*size);
  1297. fds.res_in = (unsigned long *) (bits + 3*size);
  1298. fds.res_out = (unsigned long *) (bits + 4*size);
  1299. fds.res_ex = (unsigned long *) (bits + 5*size);
  1300. if ((ret = compat_get_fd_set(n, inp, fds.in)) ||
  1301. (ret = compat_get_fd_set(n, outp, fds.out)) ||
  1302. (ret = compat_get_fd_set(n, exp, fds.ex)))
  1303. goto out;
  1304. zero_fd_set(n, fds.res_in);
  1305. zero_fd_set(n, fds.res_out);
  1306. zero_fd_set(n, fds.res_ex);
  1307. ret = do_select(n, &fds, end_time);
  1308. if (ret < 0)
  1309. goto out;
  1310. if (!ret) {
  1311. ret = -ERESTARTNOHAND;
  1312. if (signal_pending(current))
  1313. goto out;
  1314. ret = 0;
  1315. }
  1316. if (compat_set_fd_set(n, inp, fds.res_in) ||
  1317. compat_set_fd_set(n, outp, fds.res_out) ||
  1318. compat_set_fd_set(n, exp, fds.res_ex))
  1319. ret = -EFAULT;
  1320. out:
  1321. if (bits != stack_fds)
  1322. kfree(bits);
  1323. out_nofds:
  1324. return ret;
  1325. }
  1326. asmlinkage long compat_sys_select(int n, compat_ulong_t __user *inp,
  1327. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1328. struct compat_timeval __user *tvp)
  1329. {
  1330. struct timespec end_time, *to = NULL;
  1331. struct compat_timeval tv;
  1332. int ret;
  1333. if (tvp) {
  1334. if (copy_from_user(&tv, tvp, sizeof(tv)))
  1335. return -EFAULT;
  1336. to = &end_time;
  1337. if (poll_select_set_timeout(to,
  1338. tv.tv_sec + (tv.tv_usec / USEC_PER_SEC),
  1339. (tv.tv_usec % USEC_PER_SEC) * NSEC_PER_USEC))
  1340. return -EINVAL;
  1341. }
  1342. ret = compat_core_sys_select(n, inp, outp, exp, to);
  1343. ret = poll_select_copy_remaining(&end_time, tvp, 1, ret);
  1344. return ret;
  1345. }
  1346. struct compat_sel_arg_struct {
  1347. compat_ulong_t n;
  1348. compat_uptr_t inp;
  1349. compat_uptr_t outp;
  1350. compat_uptr_t exp;
  1351. compat_uptr_t tvp;
  1352. };
  1353. asmlinkage long compat_sys_old_select(struct compat_sel_arg_struct __user *arg)
  1354. {
  1355. struct compat_sel_arg_struct a;
  1356. if (copy_from_user(&a, arg, sizeof(a)))
  1357. return -EFAULT;
  1358. return compat_sys_select(a.n, compat_ptr(a.inp), compat_ptr(a.outp),
  1359. compat_ptr(a.exp), compat_ptr(a.tvp));
  1360. }
  1361. #ifdef HAVE_SET_RESTORE_SIGMASK
  1362. static long do_compat_pselect(int n, compat_ulong_t __user *inp,
  1363. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1364. struct compat_timespec __user *tsp, compat_sigset_t __user *sigmask,
  1365. compat_size_t sigsetsize)
  1366. {
  1367. compat_sigset_t ss32;
  1368. sigset_t ksigmask, sigsaved;
  1369. struct compat_timespec ts;
  1370. struct timespec end_time, *to = NULL;
  1371. int ret;
  1372. if (tsp) {
  1373. if (copy_from_user(&ts, tsp, sizeof(ts)))
  1374. return -EFAULT;
  1375. to = &end_time;
  1376. if (poll_select_set_timeout(to, ts.tv_sec, ts.tv_nsec))
  1377. return -EINVAL;
  1378. }
  1379. if (sigmask) {
  1380. if (sigsetsize != sizeof(compat_sigset_t))
  1381. return -EINVAL;
  1382. if (copy_from_user(&ss32, sigmask, sizeof(ss32)))
  1383. return -EFAULT;
  1384. sigset_from_compat(&ksigmask, &ss32);
  1385. sigdelsetmask(&ksigmask, sigmask(SIGKILL)|sigmask(SIGSTOP));
  1386. sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved);
  1387. }
  1388. ret = compat_core_sys_select(n, inp, outp, exp, to);
  1389. ret = poll_select_copy_remaining(&end_time, tsp, 0, ret);
  1390. if (ret == -ERESTARTNOHAND) {
  1391. /*
  1392. * Don't restore the signal mask yet. Let do_signal() deliver
  1393. * the signal on the way back to userspace, before the signal
  1394. * mask is restored.
  1395. */
  1396. if (sigmask) {
  1397. memcpy(&current->saved_sigmask, &sigsaved,
  1398. sizeof(sigsaved));
  1399. set_restore_sigmask();
  1400. }
  1401. } else if (sigmask)
  1402. sigprocmask(SIG_SETMASK, &sigsaved, NULL);
  1403. return ret;
  1404. }
  1405. asmlinkage long compat_sys_pselect6(int n, compat_ulong_t __user *inp,
  1406. compat_ulong_t __user *outp, compat_ulong_t __user *exp,
  1407. struct compat_timespec __user *tsp, void __user *sig)
  1408. {
  1409. compat_size_t sigsetsize = 0;
  1410. compat_uptr_t up = 0;
  1411. if (sig) {
  1412. if (!access_ok(VERIFY_READ, sig,
  1413. sizeof(compat_uptr_t)+sizeof(compat_size_t)) ||
  1414. __get_user(up, (compat_uptr_t __user *)sig) ||
  1415. __get_user(sigsetsize,
  1416. (compat_size_t __user *)(sig+sizeof(up))))
  1417. return -EFAULT;
  1418. }
  1419. return do_compat_pselect(n, inp, outp, exp, tsp, compat_ptr(up),
  1420. sigsetsize);
  1421. }
  1422. asmlinkage long compat_sys_ppoll(struct pollfd __user *ufds,
  1423. unsigned int nfds, struct compat_timespec __user *tsp,
  1424. const compat_sigset_t __user *sigmask, compat_size_t sigsetsize)
  1425. {
  1426. compat_sigset_t ss32;
  1427. sigset_t ksigmask, sigsaved;
  1428. struct compat_timespec ts;
  1429. struct timespec end_time, *to = NULL;
  1430. int ret;
  1431. if (tsp) {
  1432. if (copy_from_user(&ts, tsp, sizeof(ts)))
  1433. return -EFAULT;
  1434. to = &end_time;
  1435. if (poll_select_set_timeout(to, ts.tv_sec, ts.tv_nsec))
  1436. return -EINVAL;
  1437. }
  1438. if (sigmask) {
  1439. if (sigsetsize != sizeof(compat_sigset_t))
  1440. return -EINVAL;
  1441. if (copy_from_user(&ss32, sigmask, sizeof(ss32)))
  1442. return -EFAULT;
  1443. sigset_from_compat(&ksigmask, &ss32);
  1444. sigdelsetmask(&ksigmask, sigmask(SIGKILL)|sigmask(SIGSTOP));
  1445. sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved);
  1446. }
  1447. ret = do_sys_poll(ufds, nfds, to);
  1448. /* We can restart this syscall, usually */
  1449. if (ret == -EINTR) {
  1450. /*
  1451. * Don't restore the signal mask yet. Let do_signal() deliver
  1452. * the signal on the way back to userspace, before the signal
  1453. * mask is restored.
  1454. */
  1455. if (sigmask) {
  1456. memcpy(&current->saved_sigmask, &sigsaved,
  1457. sizeof(sigsaved));
  1458. set_restore_sigmask();
  1459. }
  1460. ret = -ERESTARTNOHAND;
  1461. } else if (sigmask)
  1462. sigprocmask(SIG_SETMASK, &sigsaved, NULL);
  1463. ret = poll_select_copy_remaining(&end_time, tsp, 0, ret);
  1464. return ret;
  1465. }
  1466. #endif /* HAVE_SET_RESTORE_SIGMASK */
  1467. #ifdef CONFIG_EPOLL
  1468. #ifdef HAVE_SET_RESTORE_SIGMASK
  1469. asmlinkage long compat_sys_epoll_pwait(int epfd,
  1470. struct compat_epoll_event __user *events,
  1471. int maxevents, int timeout,
  1472. const compat_sigset_t __user *sigmask,
  1473. compat_size_t sigsetsize)
  1474. {
  1475. long err;
  1476. compat_sigset_t csigmask;
  1477. sigset_t ksigmask, sigsaved;
  1478. /*
  1479. * If the caller wants a certain signal mask to be set during the wait,
  1480. * we apply it here.
  1481. */
  1482. if (sigmask) {
  1483. if (sigsetsize != sizeof(compat_sigset_t))
  1484. return -EINVAL;
  1485. if (copy_from_user(&csigmask, sigmask, sizeof(csigmask)))
  1486. return -EFAULT;
  1487. sigset_from_compat(&ksigmask, &csigmask);
  1488. sigdelsetmask(&ksigmask, sigmask(SIGKILL) | sigmask(SIGSTOP));
  1489. sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved);
  1490. }
  1491. err = sys_epoll_wait(epfd, events, maxevents, timeout);
  1492. /*
  1493. * If we changed the signal mask, we need to restore the original one.
  1494. * In case we've got a signal while waiting, we do not restore the
  1495. * signal mask yet, and we allow do_signal() to deliver the signal on
  1496. * the way back to userspace, before the signal mask is restored.
  1497. */
  1498. if (sigmask) {
  1499. if (err == -EINTR) {
  1500. memcpy(&current->saved_sigmask, &sigsaved,
  1501. sizeof(sigsaved));
  1502. set_restore_sigmask();
  1503. } else
  1504. sigprocmask(SIG_SETMASK, &sigsaved, NULL);
  1505. }
  1506. return err;
  1507. }
  1508. #endif /* HAVE_SET_RESTORE_SIGMASK */
  1509. #endif /* CONFIG_EPOLL */
  1510. #ifdef CONFIG_SIGNALFD
  1511. asmlinkage long compat_sys_signalfd4(int ufd,
  1512. const compat_sigset_t __user *sigmask,
  1513. compat_size_t sigsetsize, int flags)
  1514. {
  1515. compat_sigset_t ss32;
  1516. sigset_t tmp;
  1517. sigset_t __user *ksigmask;
  1518. if (sigsetsize != sizeof(compat_sigset_t))
  1519. return -EINVAL;
  1520. if (copy_from_user(&ss32, sigmask, sizeof(ss32)))
  1521. return -EFAULT;
  1522. sigset_from_compat(&tmp, &ss32);
  1523. ksigmask = compat_alloc_user_space(sizeof(sigset_t));
  1524. if (copy_to_user(ksigmask, &tmp, sizeof(sigset_t)))
  1525. return -EFAULT;
  1526. return sys_signalfd4(ufd, ksigmask, sizeof(sigset_t), flags);
  1527. }
  1528. asmlinkage long compat_sys_signalfd(int ufd,
  1529. const compat_sigset_t __user *sigmask,
  1530. compat_size_t sigsetsize)
  1531. {
  1532. return compat_sys_signalfd4(ufd, sigmask, sigsetsize, 0);
  1533. }
  1534. #endif /* CONFIG_SIGNALFD */
  1535. #ifdef CONFIG_TIMERFD
  1536. asmlinkage long compat_sys_timerfd_settime(int ufd, int flags,
  1537. const struct compat_itimerspec __user *utmr,
  1538. struct compat_itimerspec __user *otmr)
  1539. {
  1540. int error;
  1541. struct itimerspec t;
  1542. struct itimerspec __user *ut;
  1543. if (get_compat_itimerspec(&t, utmr))
  1544. return -EFAULT;
  1545. ut = compat_alloc_user_space(2 * sizeof(struct itimerspec));
  1546. if (copy_to_user(&ut[0], &t, sizeof(t)))
  1547. return -EFAULT;
  1548. error = sys_timerfd_settime(ufd, flags, &ut[0], &ut[1]);
  1549. if (!error && otmr)
  1550. error = (copy_from_user(&t, &ut[1], sizeof(struct itimerspec)) ||
  1551. put_compat_itimerspec(otmr, &t)) ? -EFAULT: 0;
  1552. return error;
  1553. }
  1554. asmlinkage long compat_sys_timerfd_gettime(int ufd,
  1555. struct compat_itimerspec __user *otmr)
  1556. {
  1557. int error;
  1558. struct itimerspec t;
  1559. struct itimerspec __user *ut;
  1560. ut = compat_alloc_user_space(sizeof(struct itimerspec));
  1561. error = sys_timerfd_gettime(ufd, ut);
  1562. if (!error)
  1563. error = (copy_from_user(&t, ut, sizeof(struct itimerspec)) ||
  1564. put_compat_itimerspec(otmr, &t)) ? -EFAULT: 0;
  1565. return error;
  1566. }
  1567. #endif /* CONFIG_TIMERFD */
  1568. #ifdef CONFIG_FHANDLE
  1569. /*
  1570. * Exactly like fs/open.c:sys_open_by_handle_at(), except that it
  1571. * doesn't set the O_LARGEFILE flag.
  1572. */
  1573. asmlinkage long
  1574. compat_sys_open_by_handle_at(int mountdirfd,
  1575. struct file_handle __user *handle, int flags)
  1576. {
  1577. return do_handle_open(mountdirfd, handle, flags);
  1578. }
  1579. #endif