]> git.ipfire.org Git - people/arne_f/kernel.git/blame - arch/arm/kernel/sys_oabi-compat.c
arm: oabi compat: add missing access checks
[people/arne_f/kernel.git] / arch / arm / kernel / sys_oabi-compat.c
CommitLineData
687ad019
NP
1/*
2 * arch/arm/kernel/sys_oabi-compat.c
3 *
4 * Compatibility wrappers for syscalls that are used from
5 * old ABI user space binaries with an EABI kernel.
6 *
7 * Author: Nicolas Pitre
8 * Created: Oct 7, 2005
9 * Copyright: MontaVista Software, Inc.
10 *
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License version 2 as
13 * published by the Free Software Foundation.
14 */
15
16/*
17 * The legacy ABI and the new ARM EABI have different rules making some
18 * syscalls incompatible especially with structure arguments.
19 * Most notably, Eabi says 64-bit members should be 64-bit aligned instead of
20 * simply word aligned. EABI also pads structures to the size of the largest
21 * member it contains instead of the invariant 32-bit.
22 *
23 * The following syscalls are affected:
24 *
25 * sys_stat64:
26 * sys_lstat64:
27 * sys_fstat64:
c60afe10 28 * sys_fstatat64:
687ad019
NP
29 *
30 * struct stat64 has different sizes and some members are shifted
31 * Compatibility wrappers are needed for them and provided below.
32 *
33 * sys_fcntl64:
34 *
35 * struct flock64 has different sizes and some members are shifted
36 * A compatibility wrapper is needed and provided below.
37 *
38 * sys_statfs64:
39 * sys_fstatfs64:
40 *
41 * struct statfs64 has extra padding with EABI growing its size from
42 * 84 to 88. This struct is now __attribute__((packed,aligned(4)))
43 * with a small assembly wrapper to force the sz argument to 84 if it is 88
44 * to avoid copying the extra padding over user space unexpecting it.
45 *
46 * sys_newuname:
47 *
48 * struct new_utsname has no padding with EABI. No problem there.
49 *
50 * sys_epoll_ctl:
51 * sys_epoll_wait:
52 *
53 * struct epoll_event has its second member shifted also affecting the
54 * structure size. Compatibility wrappers are needed and provided below.
55 *
56 * sys_ipc:
57 * sys_semop:
58 * sys_semtimedop:
59 *
60 * struct sembuf loses its padding with EABI. Since arrays of them are
61 * used they have to be copyed to remove the padding. Compatibility wrappers
62 * provided below.
99595d02
NP
63 *
64 * sys_bind:
65 * sys_connect:
66 * sys_sendmsg:
67 * sys_sendto:
6c0fa49b 68 * sys_socketcall:
99595d02
NP
69 *
70 * struct sockaddr_un loses its padding with EABI. Since the size of the
71 * structure is used as a validation test in unix_mkname(), we need to
72 * change the length argument to 110 whenever it is 112. Compatibility
73 * wrappers provided below.
687ad019
NP
74 */
75
76#include <linux/syscalls.h>
77#include <linux/errno.h>
78#include <linux/fs.h>
79#include <linux/fcntl.h>
80#include <linux/eventpoll.h>
81#include <linux/sem.h>
99595d02 82#include <linux/socket.h>
6c0fa49b 83#include <linux/net.h>
cba4fbbf 84#include <linux/ipc.h>
33fa9b13 85#include <linux/uaccess.h>
cbb55092 86#include <linux/slab.h>
687ad019
NP
87
88struct oldabi_stat64 {
89 unsigned long long st_dev;
90 unsigned int __pad1;
91 unsigned long __st_ino;
92 unsigned int st_mode;
93 unsigned int st_nlink;
94
95 unsigned long st_uid;
96 unsigned long st_gid;
97
98 unsigned long long st_rdev;
99 unsigned int __pad2;
100
101 long long st_size;
102 unsigned long st_blksize;
103 unsigned long long st_blocks;
104
105 unsigned long st_atime;
106 unsigned long st_atime_nsec;
107
108 unsigned long st_mtime;
109 unsigned long st_mtime_nsec;
110
111 unsigned long st_ctime;
112 unsigned long st_ctime_nsec;
113
114 unsigned long long st_ino;
115} __attribute__ ((packed,aligned(4)));
116
117static long cp_oldabi_stat64(struct kstat *stat,
118 struct oldabi_stat64 __user *statbuf)
119{
120 struct oldabi_stat64 tmp;
121
122 tmp.st_dev = huge_encode_dev(stat->dev);
123 tmp.__pad1 = 0;
124 tmp.__st_ino = stat->ino;
125 tmp.st_mode = stat->mode;
126 tmp.st_nlink = stat->nlink;
a7c1938e
EB
127 tmp.st_uid = from_kuid_munged(current_user_ns(), stat->uid);
128 tmp.st_gid = from_kgid_munged(current_user_ns(), stat->gid);
687ad019
NP
129 tmp.st_rdev = huge_encode_dev(stat->rdev);
130 tmp.st_size = stat->size;
131 tmp.st_blocks = stat->blocks;
132 tmp.__pad2 = 0;
133 tmp.st_blksize = stat->blksize;
134 tmp.st_atime = stat->atime.tv_sec;
135 tmp.st_atime_nsec = stat->atime.tv_nsec;
136 tmp.st_mtime = stat->mtime.tv_sec;
137 tmp.st_mtime_nsec = stat->mtime.tv_nsec;
138 tmp.st_ctime = stat->ctime.tv_sec;
139 tmp.st_ctime_nsec = stat->ctime.tv_nsec;
140 tmp.st_ino = stat->ino;
141 return copy_to_user(statbuf,&tmp,sizeof(tmp)) ? -EFAULT : 0;
142}
143
c7887325 144asmlinkage long sys_oabi_stat64(const char __user * filename,
687ad019
NP
145 struct oldabi_stat64 __user * statbuf)
146{
147 struct kstat stat;
148 int error = vfs_stat(filename, &stat);
149 if (!error)
150 error = cp_oldabi_stat64(&stat, statbuf);
151 return error;
152}
153
c7887325 154asmlinkage long sys_oabi_lstat64(const char __user * filename,
687ad019
NP
155 struct oldabi_stat64 __user * statbuf)
156{
157 struct kstat stat;
158 int error = vfs_lstat(filename, &stat);
159 if (!error)
160 error = cp_oldabi_stat64(&stat, statbuf);
161 return error;
162}
163
164asmlinkage long sys_oabi_fstat64(unsigned long fd,
165 struct oldabi_stat64 __user * statbuf)
166{
167 struct kstat stat;
168 int error = vfs_fstat(fd, &stat);
169 if (!error)
170 error = cp_oldabi_stat64(&stat, statbuf);
171 return error;
172}
173
c60afe10 174asmlinkage long sys_oabi_fstatat64(int dfd,
c7887325 175 const char __user *filename,
c60afe10
RV
176 struct oldabi_stat64 __user *statbuf,
177 int flag)
178{
179 struct kstat stat;
0112fc22 180 int error;
c60afe10 181
0112fc22
OD
182 error = vfs_fstatat(dfd, filename, &stat, flag);
183 if (error)
184 return error;
185 return cp_oldabi_stat64(&stat, statbuf);
c60afe10
RV
186}
187
687ad019
NP
188struct oabi_flock64 {
189 short l_type;
190 short l_whence;
191 loff_t l_start;
192 loff_t l_len;
193 pid_t l_pid;
194} __attribute__ ((packed,aligned(4)));
195
196asmlinkage long sys_oabi_fcntl64(unsigned int fd, unsigned int cmd,
197 unsigned long arg)
198{
199 struct oabi_flock64 user;
200 struct flock64 kernel;
201 mm_segment_t fs = USER_DS; /* initialized to kill a warning */
202 unsigned long local_arg = arg;
203 int ret;
204
205 switch (cmd) {
206 case F_GETLK64:
207 case F_SETLK64:
208 case F_SETLKW64:
209 if (copy_from_user(&user, (struct oabi_flock64 __user *)arg,
210 sizeof(user)))
211 return -EFAULT;
212 kernel.l_type = user.l_type;
213 kernel.l_whence = user.l_whence;
214 kernel.l_start = user.l_start;
215 kernel.l_len = user.l_len;
216 kernel.l_pid = user.l_pid;
217 local_arg = (unsigned long)&kernel;
218 fs = get_fs();
219 set_fs(KERNEL_DS);
220 }
221
222 ret = sys_fcntl64(fd, cmd, local_arg);
223
224 switch (cmd) {
225 case F_GETLK64:
226 if (!ret) {
227 user.l_type = kernel.l_type;
228 user.l_whence = kernel.l_whence;
229 user.l_start = kernel.l_start;
230 user.l_len = kernel.l_len;
231 user.l_pid = kernel.l_pid;
232 if (copy_to_user((struct oabi_flock64 __user *)arg,
233 &user, sizeof(user)))
234 ret = -EFAULT;
235 }
236 case F_SETLK64:
237 case F_SETLKW64:
238 set_fs(fs);
239 }
240
241 return ret;
242}
243
244struct oabi_epoll_event {
245 __u32 events;
246 __u64 data;
247} __attribute__ ((packed,aligned(4)));
248
249asmlinkage long sys_oabi_epoll_ctl(int epfd, int op, int fd,
250 struct oabi_epoll_event __user *event)
251{
252 struct oabi_epoll_event user;
253 struct epoll_event kernel;
254 mm_segment_t fs;
255 long ret;
256
257 if (op == EPOLL_CTL_DEL)
258 return sys_epoll_ctl(epfd, op, fd, NULL);
259 if (copy_from_user(&user, event, sizeof(user)))
260 return -EFAULT;
261 kernel.events = user.events;
262 kernel.data = user.data;
263 fs = get_fs();
264 set_fs(KERNEL_DS);
265 ret = sys_epoll_ctl(epfd, op, fd, &kernel);
266 set_fs(fs);
267 return ret;
268}
269
270asmlinkage long sys_oabi_epoll_wait(int epfd,
271 struct oabi_epoll_event __user *events,
272 int maxevents, int timeout)
273{
274 struct epoll_event *kbuf;
275 mm_segment_t fs;
276 long ret, err, i;
277
e380a271
DW
278 if (maxevents <= 0 ||
279 maxevents > (INT_MAX/sizeof(*kbuf)) ||
280 maxevents > (INT_MAX/sizeof(*events)))
687ad019 281 return -EINVAL;
e380a271
DW
282 if (!access_ok(VERIFY_WRITE, events, sizeof(*events) * maxevents))
283 return -EFAULT;
687ad019
NP
284 kbuf = kmalloc(sizeof(*kbuf) * maxevents, GFP_KERNEL);
285 if (!kbuf)
286 return -ENOMEM;
287 fs = get_fs();
288 set_fs(KERNEL_DS);
289 ret = sys_epoll_wait(epfd, kbuf, maxevents, timeout);
290 set_fs(fs);
291 err = 0;
292 for (i = 0; i < ret; i++) {
293 __put_user_error(kbuf[i].events, &events->events, err);
294 __put_user_error(kbuf[i].data, &events->data, err);
295 events++;
296 }
297 kfree(kbuf);
298 return err ? -EFAULT : ret;
299}
300
301struct oabi_sembuf {
302 unsigned short sem_num;
303 short sem_op;
304 short sem_flg;
305 unsigned short __pad;
306};
307
308asmlinkage long sys_oabi_semtimedop(int semid,
309 struct oabi_sembuf __user *tsops,
310 unsigned nsops,
311 const struct timespec __user *timeout)
312{
313 struct sembuf *sops;
314 struct timespec local_timeout;
315 long err;
316 int i;
317
0f22072a 318 if (nsops < 1 || nsops > SEMOPM)
687ad019 319 return -EINVAL;
e380a271
DW
320 if (!access_ok(VERIFY_READ, tsops, sizeof(*tsops) * nsops))
321 return -EFAULT;
687ad019
NP
322 sops = kmalloc(sizeof(*sops) * nsops, GFP_KERNEL);
323 if (!sops)
324 return -ENOMEM;
325 err = 0;
326 for (i = 0; i < nsops; i++) {
327 __get_user_error(sops[i].sem_num, &tsops->sem_num, err);
328 __get_user_error(sops[i].sem_op, &tsops->sem_op, err);
329 __get_user_error(sops[i].sem_flg, &tsops->sem_flg, err);
330 tsops++;
331 }
332 if (timeout) {
333 /* copy this as well before changing domain protection */
334 err |= copy_from_user(&local_timeout, timeout, sizeof(*timeout));
335 timeout = &local_timeout;
336 }
337 if (err) {
338 err = -EFAULT;
339 } else {
340 mm_segment_t fs = get_fs();
341 set_fs(KERNEL_DS);
342 err = sys_semtimedop(semid, sops, nsops, timeout);
343 set_fs(fs);
344 }
345 kfree(sops);
346 return err;
347}
348
349asmlinkage long sys_oabi_semop(int semid, struct oabi_sembuf __user *tsops,
350 unsigned nsops)
351{
352 return sys_oabi_semtimedop(semid, tsops, nsops, NULL);
353}
354
687ad019
NP
355asmlinkage int sys_oabi_ipc(uint call, int first, int second, int third,
356 void __user *ptr, long fifth)
357{
358 switch (call & 0xffff) {
359 case SEMOP:
360 return sys_oabi_semtimedop(first,
361 (struct oabi_sembuf __user *)ptr,
362 second, NULL);
363 case SEMTIMEDOP:
364 return sys_oabi_semtimedop(first,
365 (struct oabi_sembuf __user *)ptr,
366 second,
367 (const struct timespec __user *)fifth);
368 default:
369 return sys_ipc(call, first, second, third, ptr, fifth);
370 }
371}
99595d02
NP
372
373asmlinkage long sys_oabi_bind(int fd, struct sockaddr __user *addr, int addrlen)
374{
375 sa_family_t sa_family;
376 if (addrlen == 112 &&
377 get_user(sa_family, &addr->sa_family) == 0 &&
378 sa_family == AF_UNIX)
379 addrlen = 110;
380 return sys_bind(fd, addr, addrlen);
381}
382
383asmlinkage long sys_oabi_connect(int fd, struct sockaddr __user *addr, int addrlen)
384{
385 sa_family_t sa_family;
386 if (addrlen == 112 &&
387 get_user(sa_family, &addr->sa_family) == 0 &&
388 sa_family == AF_UNIX)
389 addrlen = 110;
390 return sys_connect(fd, addr, addrlen);
391}
392
393asmlinkage long sys_oabi_sendto(int fd, void __user *buff,
394 size_t len, unsigned flags,
395 struct sockaddr __user *addr,
396 int addrlen)
397{
398 sa_family_t sa_family;
399 if (addrlen == 112 &&
400 get_user(sa_family, &addr->sa_family) == 0 &&
401 sa_family == AF_UNIX)
402 addrlen = 110;
403 return sys_sendto(fd, buff, len, flags, addr, addrlen);
404}
405
406asmlinkage long sys_oabi_sendmsg(int fd, struct msghdr __user *msg, unsigned flags)
407{
408 struct sockaddr __user *addr;
409 int msg_namelen;
410 sa_family_t sa_family;
411 if (msg &&
412 get_user(msg_namelen, &msg->msg_namelen) == 0 &&
413 msg_namelen == 112 &&
414 get_user(addr, &msg->msg_name) == 0 &&
415 get_user(sa_family, &addr->sa_family) == 0 &&
416 sa_family == AF_UNIX)
417 {
418 /*
419 * HACK ALERT: there is a limit to how much backward bending
420 * we should do for what is actually a transitional
421 * compatibility layer. This already has known flaws with
422 * a few ioctls that we don't intend to fix. Therefore
423 * consider this blatent hack as another one... and take care
424 * to run for cover. In most cases it will "just work fine".
425 * If it doesn't, well, tough.
426 */
427 put_user(110, &msg->msg_namelen);
428 }
429 return sys_sendmsg(fd, msg, flags);
430}
431
6c0fa49b
NP
432asmlinkage long sys_oabi_socketcall(int call, unsigned long __user *args)
433{
434 unsigned long r = -EFAULT, a[6];
435
436 switch (call) {
437 case SYS_BIND:
438 if (copy_from_user(a, args, 3 * sizeof(long)) == 0)
439 r = sys_oabi_bind(a[0], (struct sockaddr __user *)a[1], a[2]);
440 break;
441 case SYS_CONNECT:
442 if (copy_from_user(a, args, 3 * sizeof(long)) == 0)
443 r = sys_oabi_connect(a[0], (struct sockaddr __user *)a[1], a[2]);
444 break;
445 case SYS_SENDTO:
446 if (copy_from_user(a, args, 6 * sizeof(long)) == 0)
447 r = sys_oabi_sendto(a[0], (void __user *)a[1], a[2], a[3],
448 (struct sockaddr __user *)a[4], a[5]);
449 break;
450 case SYS_SENDMSG:
451 if (copy_from_user(a, args, 3 * sizeof(long)) == 0)
452 r = sys_oabi_sendmsg(a[0], (struct msghdr __user *)a[1], a[2]);
453 break;
454 default:
455 r = sys_socketcall(call, args);
456 }
457
458 return r;
459}