]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/blob - arch/x86/kernel/ptrace.c
x86/ptrace: Document FSBASE and GSBASE ABI oddities
[mirror_ubuntu-jammy-kernel.git] / arch / x86 / kernel / ptrace.c
1 // SPDX-License-Identifier: GPL-2.0-only
2 /* By Ross Biro 1/23/92 */
3 /*
4 * Pentium III FXSR, SSE support
5 * Gareth Hughes <gareth@valinux.com>, May 2000
6 */
7
8 #include <linux/kernel.h>
9 #include <linux/sched.h>
10 #include <linux/sched/task_stack.h>
11 #include <linux/mm.h>
12 #include <linux/smp.h>
13 #include <linux/errno.h>
14 #include <linux/slab.h>
15 #include <linux/ptrace.h>
16 #include <linux/tracehook.h>
17 #include <linux/user.h>
18 #include <linux/elf.h>
19 #include <linux/security.h>
20 #include <linux/audit.h>
21 #include <linux/seccomp.h>
22 #include <linux/signal.h>
23 #include <linux/perf_event.h>
24 #include <linux/hw_breakpoint.h>
25 #include <linux/rcupdate.h>
26 #include <linux/export.h>
27 #include <linux/context_tracking.h>
28 #include <linux/nospec.h>
29
30 #include <linux/uaccess.h>
31 #include <asm/pgtable.h>
32 #include <asm/processor.h>
33 #include <asm/fpu/internal.h>
34 #include <asm/fpu/signal.h>
35 #include <asm/fpu/regset.h>
36 #include <asm/debugreg.h>
37 #include <asm/ldt.h>
38 #include <asm/desc.h>
39 #include <asm/prctl.h>
40 #include <asm/proto.h>
41 #include <asm/hw_breakpoint.h>
42 #include <asm/traps.h>
43 #include <asm/syscall.h>
44 #include <asm/fsgsbase.h>
45 #include <asm/io_bitmap.h>
46
47 #include "tls.h"
48
49 enum x86_regset {
50 REGSET_GENERAL,
51 REGSET_FP,
52 REGSET_XFP,
53 REGSET_IOPERM64 = REGSET_XFP,
54 REGSET_XSTATE,
55 REGSET_TLS,
56 REGSET_IOPERM32,
57 };
58
59 struct pt_regs_offset {
60 const char *name;
61 int offset;
62 };
63
64 #define REG_OFFSET_NAME(r) {.name = #r, .offset = offsetof(struct pt_regs, r)}
65 #define REG_OFFSET_END {.name = NULL, .offset = 0}
66
67 static const struct pt_regs_offset regoffset_table[] = {
68 #ifdef CONFIG_X86_64
69 REG_OFFSET_NAME(r15),
70 REG_OFFSET_NAME(r14),
71 REG_OFFSET_NAME(r13),
72 REG_OFFSET_NAME(r12),
73 REG_OFFSET_NAME(r11),
74 REG_OFFSET_NAME(r10),
75 REG_OFFSET_NAME(r9),
76 REG_OFFSET_NAME(r8),
77 #endif
78 REG_OFFSET_NAME(bx),
79 REG_OFFSET_NAME(cx),
80 REG_OFFSET_NAME(dx),
81 REG_OFFSET_NAME(si),
82 REG_OFFSET_NAME(di),
83 REG_OFFSET_NAME(bp),
84 REG_OFFSET_NAME(ax),
85 #ifdef CONFIG_X86_32
86 REG_OFFSET_NAME(ds),
87 REG_OFFSET_NAME(es),
88 REG_OFFSET_NAME(fs),
89 REG_OFFSET_NAME(gs),
90 #endif
91 REG_OFFSET_NAME(orig_ax),
92 REG_OFFSET_NAME(ip),
93 REG_OFFSET_NAME(cs),
94 REG_OFFSET_NAME(flags),
95 REG_OFFSET_NAME(sp),
96 REG_OFFSET_NAME(ss),
97 REG_OFFSET_END,
98 };
99
100 /**
101 * regs_query_register_offset() - query register offset from its name
102 * @name: the name of a register
103 *
104 * regs_query_register_offset() returns the offset of a register in struct
105 * pt_regs from its name. If the name is invalid, this returns -EINVAL;
106 */
107 int regs_query_register_offset(const char *name)
108 {
109 const struct pt_regs_offset *roff;
110 for (roff = regoffset_table; roff->name != NULL; roff++)
111 if (!strcmp(roff->name, name))
112 return roff->offset;
113 return -EINVAL;
114 }
115
116 /**
117 * regs_query_register_name() - query register name from its offset
118 * @offset: the offset of a register in struct pt_regs.
119 *
120 * regs_query_register_name() returns the name of a register from its
121 * offset in struct pt_regs. If the @offset is invalid, this returns NULL;
122 */
123 const char *regs_query_register_name(unsigned int offset)
124 {
125 const struct pt_regs_offset *roff;
126 for (roff = regoffset_table; roff->name != NULL; roff++)
127 if (roff->offset == offset)
128 return roff->name;
129 return NULL;
130 }
131
132 /*
133 * does not yet catch signals sent when the child dies.
134 * in exit.c or in signal.c.
135 */
136
137 /*
138 * Determines which flags the user has access to [1 = access, 0 = no access].
139 */
140 #define FLAG_MASK_32 ((unsigned long) \
141 (X86_EFLAGS_CF | X86_EFLAGS_PF | \
142 X86_EFLAGS_AF | X86_EFLAGS_ZF | \
143 X86_EFLAGS_SF | X86_EFLAGS_TF | \
144 X86_EFLAGS_DF | X86_EFLAGS_OF | \
145 X86_EFLAGS_RF | X86_EFLAGS_AC))
146
147 /*
148 * Determines whether a value may be installed in a segment register.
149 */
150 static inline bool invalid_selector(u16 value)
151 {
152 return unlikely(value != 0 && (value & SEGMENT_RPL_MASK) != USER_RPL);
153 }
154
155 #ifdef CONFIG_X86_32
156
157 #define FLAG_MASK FLAG_MASK_32
158
159 static unsigned long *pt_regs_access(struct pt_regs *regs, unsigned long regno)
160 {
161 BUILD_BUG_ON(offsetof(struct pt_regs, bx) != 0);
162 return &regs->bx + (regno >> 2);
163 }
164
165 static u16 get_segment_reg(struct task_struct *task, unsigned long offset)
166 {
167 /*
168 * Returning the value truncates it to 16 bits.
169 */
170 unsigned int retval;
171 if (offset != offsetof(struct user_regs_struct, gs))
172 retval = *pt_regs_access(task_pt_regs(task), offset);
173 else {
174 if (task == current)
175 retval = get_user_gs(task_pt_regs(task));
176 else
177 retval = task_user_gs(task);
178 }
179 return retval;
180 }
181
182 static int set_segment_reg(struct task_struct *task,
183 unsigned long offset, u16 value)
184 {
185 if (WARN_ON_ONCE(task == current))
186 return -EIO;
187
188 /*
189 * The value argument was already truncated to 16 bits.
190 */
191 if (invalid_selector(value))
192 return -EIO;
193
194 /*
195 * For %cs and %ss we cannot permit a null selector.
196 * We can permit a bogus selector as long as it has USER_RPL.
197 * Null selectors are fine for other segment registers, but
198 * we will never get back to user mode with invalid %cs or %ss
199 * and will take the trap in iret instead. Much code relies
200 * on user_mode() to distinguish a user trap frame (which can
201 * safely use invalid selectors) from a kernel trap frame.
202 */
203 switch (offset) {
204 case offsetof(struct user_regs_struct, cs):
205 case offsetof(struct user_regs_struct, ss):
206 if (unlikely(value == 0))
207 return -EIO;
208 /* Else, fall through */
209
210 default:
211 *pt_regs_access(task_pt_regs(task), offset) = value;
212 break;
213
214 case offsetof(struct user_regs_struct, gs):
215 task_user_gs(task) = value;
216 }
217
218 return 0;
219 }
220
221 #else /* CONFIG_X86_64 */
222
223 #define FLAG_MASK (FLAG_MASK_32 | X86_EFLAGS_NT)
224
225 static unsigned long *pt_regs_access(struct pt_regs *regs, unsigned long offset)
226 {
227 BUILD_BUG_ON(offsetof(struct pt_regs, r15) != 0);
228 return &regs->r15 + (offset / sizeof(regs->r15));
229 }
230
231 static u16 get_segment_reg(struct task_struct *task, unsigned long offset)
232 {
233 /*
234 * Returning the value truncates it to 16 bits.
235 */
236 unsigned int seg;
237
238 switch (offset) {
239 case offsetof(struct user_regs_struct, fs):
240 if (task == current) {
241 /* Older gas can't assemble movq %?s,%r?? */
242 asm("movl %%fs,%0" : "=r" (seg));
243 return seg;
244 }
245 return task->thread.fsindex;
246 case offsetof(struct user_regs_struct, gs):
247 if (task == current) {
248 asm("movl %%gs,%0" : "=r" (seg));
249 return seg;
250 }
251 return task->thread.gsindex;
252 case offsetof(struct user_regs_struct, ds):
253 if (task == current) {
254 asm("movl %%ds,%0" : "=r" (seg));
255 return seg;
256 }
257 return task->thread.ds;
258 case offsetof(struct user_regs_struct, es):
259 if (task == current) {
260 asm("movl %%es,%0" : "=r" (seg));
261 return seg;
262 }
263 return task->thread.es;
264
265 case offsetof(struct user_regs_struct, cs):
266 case offsetof(struct user_regs_struct, ss):
267 break;
268 }
269 return *pt_regs_access(task_pt_regs(task), offset);
270 }
271
272 static int set_segment_reg(struct task_struct *task,
273 unsigned long offset, u16 value)
274 {
275 if (WARN_ON_ONCE(task == current))
276 return -EIO;
277
278 /*
279 * The value argument was already truncated to 16 bits.
280 */
281 if (invalid_selector(value))
282 return -EIO;
283
284 /*
285 * This function has some ABI oddities.
286 *
287 * A 32-bit ptracer probably expects that writing FS or GS will change
288 * FSBASE or GSBASE respectively. In the absence of FSGSBASE support,
289 * this code indeed has that effect. When FSGSBASE is added, this
290 * will require a special case.
291 *
292 * For existing 64-bit ptracers, writing FS or GS *also* currently
293 * changes the base if the selector is nonzero the next time the task
294 * is run. This behavior may not be needed, and trying to preserve it
295 * when FSGSBASE is added would be complicated at best.
296 */
297
298 switch (offset) {
299 case offsetof(struct user_regs_struct,fs):
300 task->thread.fsindex = value;
301 break;
302 case offsetof(struct user_regs_struct,gs):
303 task->thread.gsindex = value;
304 break;
305 case offsetof(struct user_regs_struct,ds):
306 task->thread.ds = value;
307 break;
308 case offsetof(struct user_regs_struct,es):
309 task->thread.es = value;
310 break;
311
312 /*
313 * Can't actually change these in 64-bit mode.
314 */
315 case offsetof(struct user_regs_struct,cs):
316 if (unlikely(value == 0))
317 return -EIO;
318 task_pt_regs(task)->cs = value;
319 break;
320 case offsetof(struct user_regs_struct,ss):
321 if (unlikely(value == 0))
322 return -EIO;
323 task_pt_regs(task)->ss = value;
324 break;
325 }
326
327 return 0;
328 }
329
330 #endif /* CONFIG_X86_32 */
331
332 static unsigned long get_flags(struct task_struct *task)
333 {
334 unsigned long retval = task_pt_regs(task)->flags;
335
336 /*
337 * If the debugger set TF, hide it from the readout.
338 */
339 if (test_tsk_thread_flag(task, TIF_FORCED_TF))
340 retval &= ~X86_EFLAGS_TF;
341
342 return retval;
343 }
344
345 static int set_flags(struct task_struct *task, unsigned long value)
346 {
347 struct pt_regs *regs = task_pt_regs(task);
348
349 /*
350 * If the user value contains TF, mark that
351 * it was not "us" (the debugger) that set it.
352 * If not, make sure it stays set if we had.
353 */
354 if (value & X86_EFLAGS_TF)
355 clear_tsk_thread_flag(task, TIF_FORCED_TF);
356 else if (test_tsk_thread_flag(task, TIF_FORCED_TF))
357 value |= X86_EFLAGS_TF;
358
359 regs->flags = (regs->flags & ~FLAG_MASK) | (value & FLAG_MASK);
360
361 return 0;
362 }
363
364 static int putreg(struct task_struct *child,
365 unsigned long offset, unsigned long value)
366 {
367 switch (offset) {
368 case offsetof(struct user_regs_struct, cs):
369 case offsetof(struct user_regs_struct, ds):
370 case offsetof(struct user_regs_struct, es):
371 case offsetof(struct user_regs_struct, fs):
372 case offsetof(struct user_regs_struct, gs):
373 case offsetof(struct user_regs_struct, ss):
374 return set_segment_reg(child, offset, value);
375
376 case offsetof(struct user_regs_struct, flags):
377 return set_flags(child, value);
378
379 #ifdef CONFIG_X86_64
380 case offsetof(struct user_regs_struct,fs_base):
381 if (value >= TASK_SIZE_MAX)
382 return -EIO;
383 /*
384 * When changing the FS base, use do_arch_prctl_64()
385 * to set the index to zero and to set the base
386 * as requested.
387 *
388 * NB: This behavior is nonsensical and likely needs to
389 * change when FSGSBASE support is added.
390 */
391 if (child->thread.fsbase != value)
392 return do_arch_prctl_64(child, ARCH_SET_FS, value);
393 return 0;
394 case offsetof(struct user_regs_struct,gs_base):
395 /*
396 * Exactly the same here as the %fs handling above.
397 */
398 if (value >= TASK_SIZE_MAX)
399 return -EIO;
400 if (child->thread.gsbase != value)
401 return do_arch_prctl_64(child, ARCH_SET_GS, value);
402 return 0;
403 #endif
404 }
405
406 *pt_regs_access(task_pt_regs(child), offset) = value;
407 return 0;
408 }
409
410 static unsigned long getreg(struct task_struct *task, unsigned long offset)
411 {
412 switch (offset) {
413 case offsetof(struct user_regs_struct, cs):
414 case offsetof(struct user_regs_struct, ds):
415 case offsetof(struct user_regs_struct, es):
416 case offsetof(struct user_regs_struct, fs):
417 case offsetof(struct user_regs_struct, gs):
418 case offsetof(struct user_regs_struct, ss):
419 return get_segment_reg(task, offset);
420
421 case offsetof(struct user_regs_struct, flags):
422 return get_flags(task);
423
424 #ifdef CONFIG_X86_64
425 case offsetof(struct user_regs_struct, fs_base):
426 return x86_fsbase_read_task(task);
427 case offsetof(struct user_regs_struct, gs_base):
428 return x86_gsbase_read_task(task);
429 #endif
430 }
431
432 return *pt_regs_access(task_pt_regs(task), offset);
433 }
434
435 static int genregs_get(struct task_struct *target,
436 const struct user_regset *regset,
437 unsigned int pos, unsigned int count,
438 void *kbuf, void __user *ubuf)
439 {
440 if (kbuf) {
441 unsigned long *k = kbuf;
442 while (count >= sizeof(*k)) {
443 *k++ = getreg(target, pos);
444 count -= sizeof(*k);
445 pos += sizeof(*k);
446 }
447 } else {
448 unsigned long __user *u = ubuf;
449 while (count >= sizeof(*u)) {
450 if (__put_user(getreg(target, pos), u++))
451 return -EFAULT;
452 count -= sizeof(*u);
453 pos += sizeof(*u);
454 }
455 }
456
457 return 0;
458 }
459
460 static int genregs_set(struct task_struct *target,
461 const struct user_regset *regset,
462 unsigned int pos, unsigned int count,
463 const void *kbuf, const void __user *ubuf)
464 {
465 int ret = 0;
466 if (kbuf) {
467 const unsigned long *k = kbuf;
468 while (count >= sizeof(*k) && !ret) {
469 ret = putreg(target, pos, *k++);
470 count -= sizeof(*k);
471 pos += sizeof(*k);
472 }
473 } else {
474 const unsigned long __user *u = ubuf;
475 while (count >= sizeof(*u) && !ret) {
476 unsigned long word;
477 ret = __get_user(word, u++);
478 if (ret)
479 break;
480 ret = putreg(target, pos, word);
481 count -= sizeof(*u);
482 pos += sizeof(*u);
483 }
484 }
485 return ret;
486 }
487
488 static void ptrace_triggered(struct perf_event *bp,
489 struct perf_sample_data *data,
490 struct pt_regs *regs)
491 {
492 int i;
493 struct thread_struct *thread = &(current->thread);
494
495 /*
496 * Store in the virtual DR6 register the fact that the breakpoint
497 * was hit so the thread's debugger will see it.
498 */
499 for (i = 0; i < HBP_NUM; i++) {
500 if (thread->ptrace_bps[i] == bp)
501 break;
502 }
503
504 thread->debugreg6 |= (DR_TRAP0 << i);
505 }
506
507 /*
508 * Walk through every ptrace breakpoints for this thread and
509 * build the dr7 value on top of their attributes.
510 *
511 */
512 static unsigned long ptrace_get_dr7(struct perf_event *bp[])
513 {
514 int i;
515 int dr7 = 0;
516 struct arch_hw_breakpoint *info;
517
518 for (i = 0; i < HBP_NUM; i++) {
519 if (bp[i] && !bp[i]->attr.disabled) {
520 info = counter_arch_bp(bp[i]);
521 dr7 |= encode_dr7(i, info->len, info->type);
522 }
523 }
524
525 return dr7;
526 }
527
528 static int ptrace_fill_bp_fields(struct perf_event_attr *attr,
529 int len, int type, bool disabled)
530 {
531 int err, bp_len, bp_type;
532
533 err = arch_bp_generic_fields(len, type, &bp_len, &bp_type);
534 if (!err) {
535 attr->bp_len = bp_len;
536 attr->bp_type = bp_type;
537 attr->disabled = disabled;
538 }
539
540 return err;
541 }
542
543 static struct perf_event *
544 ptrace_register_breakpoint(struct task_struct *tsk, int len, int type,
545 unsigned long addr, bool disabled)
546 {
547 struct perf_event_attr attr;
548 int err;
549
550 ptrace_breakpoint_init(&attr);
551 attr.bp_addr = addr;
552
553 err = ptrace_fill_bp_fields(&attr, len, type, disabled);
554 if (err)
555 return ERR_PTR(err);
556
557 return register_user_hw_breakpoint(&attr, ptrace_triggered,
558 NULL, tsk);
559 }
560
561 static int ptrace_modify_breakpoint(struct perf_event *bp, int len, int type,
562 int disabled)
563 {
564 struct perf_event_attr attr = bp->attr;
565 int err;
566
567 err = ptrace_fill_bp_fields(&attr, len, type, disabled);
568 if (err)
569 return err;
570
571 return modify_user_hw_breakpoint(bp, &attr);
572 }
573
574 /*
575 * Handle ptrace writes to debug register 7.
576 */
577 static int ptrace_write_dr7(struct task_struct *tsk, unsigned long data)
578 {
579 struct thread_struct *thread = &tsk->thread;
580 unsigned long old_dr7;
581 bool second_pass = false;
582 int i, rc, ret = 0;
583
584 data &= ~DR_CONTROL_RESERVED;
585 old_dr7 = ptrace_get_dr7(thread->ptrace_bps);
586
587 restore:
588 rc = 0;
589 for (i = 0; i < HBP_NUM; i++) {
590 unsigned len, type;
591 bool disabled = !decode_dr7(data, i, &len, &type);
592 struct perf_event *bp = thread->ptrace_bps[i];
593
594 if (!bp) {
595 if (disabled)
596 continue;
597
598 bp = ptrace_register_breakpoint(tsk,
599 len, type, 0, disabled);
600 if (IS_ERR(bp)) {
601 rc = PTR_ERR(bp);
602 break;
603 }
604
605 thread->ptrace_bps[i] = bp;
606 continue;
607 }
608
609 rc = ptrace_modify_breakpoint(bp, len, type, disabled);
610 if (rc)
611 break;
612 }
613
614 /* Restore if the first pass failed, second_pass shouldn't fail. */
615 if (rc && !WARN_ON(second_pass)) {
616 ret = rc;
617 data = old_dr7;
618 second_pass = true;
619 goto restore;
620 }
621
622 return ret;
623 }
624
625 /*
626 * Handle PTRACE_PEEKUSR calls for the debug register area.
627 */
628 static unsigned long ptrace_get_debugreg(struct task_struct *tsk, int n)
629 {
630 struct thread_struct *thread = &tsk->thread;
631 unsigned long val = 0;
632
633 if (n < HBP_NUM) {
634 int index = array_index_nospec(n, HBP_NUM);
635 struct perf_event *bp = thread->ptrace_bps[index];
636
637 if (bp)
638 val = bp->hw.info.address;
639 } else if (n == 6) {
640 val = thread->debugreg6;
641 } else if (n == 7) {
642 val = thread->ptrace_dr7;
643 }
644 return val;
645 }
646
647 static int ptrace_set_breakpoint_addr(struct task_struct *tsk, int nr,
648 unsigned long addr)
649 {
650 struct thread_struct *t = &tsk->thread;
651 struct perf_event *bp = t->ptrace_bps[nr];
652 int err = 0;
653
654 if (!bp) {
655 /*
656 * Put stub len and type to create an inactive but correct bp.
657 *
658 * CHECKME: the previous code returned -EIO if the addr wasn't
659 * a valid task virtual addr. The new one will return -EINVAL in
660 * this case.
661 * -EINVAL may be what we want for in-kernel breakpoints users,
662 * but -EIO looks better for ptrace, since we refuse a register
663 * writing for the user. And anyway this is the previous
664 * behaviour.
665 */
666 bp = ptrace_register_breakpoint(tsk,
667 X86_BREAKPOINT_LEN_1, X86_BREAKPOINT_WRITE,
668 addr, true);
669 if (IS_ERR(bp))
670 err = PTR_ERR(bp);
671 else
672 t->ptrace_bps[nr] = bp;
673 } else {
674 struct perf_event_attr attr = bp->attr;
675
676 attr.bp_addr = addr;
677 err = modify_user_hw_breakpoint(bp, &attr);
678 }
679
680 return err;
681 }
682
683 /*
684 * Handle PTRACE_POKEUSR calls for the debug register area.
685 */
686 static int ptrace_set_debugreg(struct task_struct *tsk, int n,
687 unsigned long val)
688 {
689 struct thread_struct *thread = &tsk->thread;
690 /* There are no DR4 or DR5 registers */
691 int rc = -EIO;
692
693 if (n < HBP_NUM) {
694 rc = ptrace_set_breakpoint_addr(tsk, n, val);
695 } else if (n == 6) {
696 thread->debugreg6 = val;
697 rc = 0;
698 } else if (n == 7) {
699 rc = ptrace_write_dr7(tsk, val);
700 if (!rc)
701 thread->ptrace_dr7 = val;
702 }
703 return rc;
704 }
705
706 /*
707 * These access the current or another (stopped) task's io permission
708 * bitmap for debugging or core dump.
709 */
710 static int ioperm_active(struct task_struct *target,
711 const struct user_regset *regset)
712 {
713 struct io_bitmap *iobm = target->thread.io_bitmap;
714
715 return iobm ? DIV_ROUND_UP(iobm->max, regset->size) : 0;
716 }
717
718 static int ioperm_get(struct task_struct *target,
719 const struct user_regset *regset,
720 unsigned int pos, unsigned int count,
721 void *kbuf, void __user *ubuf)
722 {
723 struct io_bitmap *iobm = target->thread.io_bitmap;
724
725 if (!iobm)
726 return -ENXIO;
727
728 return user_regset_copyout(&pos, &count, &kbuf, &ubuf,
729 iobm->bitmap, 0, IO_BITMAP_BYTES);
730 }
731
732 /*
733 * Called by kernel/ptrace.c when detaching..
734 *
735 * Make sure the single step bit is not set.
736 */
737 void ptrace_disable(struct task_struct *child)
738 {
739 user_disable_single_step(child);
740 }
741
742 #if defined CONFIG_X86_32 || defined CONFIG_IA32_EMULATION
743 static const struct user_regset_view user_x86_32_view; /* Initialized below. */
744 #endif
745
746 long arch_ptrace(struct task_struct *child, long request,
747 unsigned long addr, unsigned long data)
748 {
749 int ret;
750 unsigned long __user *datap = (unsigned long __user *)data;
751
752 switch (request) {
753 /* read the word at location addr in the USER area. */
754 case PTRACE_PEEKUSR: {
755 unsigned long tmp;
756
757 ret = -EIO;
758 if ((addr & (sizeof(data) - 1)) || addr >= sizeof(struct user))
759 break;
760
761 tmp = 0; /* Default return condition */
762 if (addr < sizeof(struct user_regs_struct))
763 tmp = getreg(child, addr);
764 else if (addr >= offsetof(struct user, u_debugreg[0]) &&
765 addr <= offsetof(struct user, u_debugreg[7])) {
766 addr -= offsetof(struct user, u_debugreg[0]);
767 tmp = ptrace_get_debugreg(child, addr / sizeof(data));
768 }
769 ret = put_user(tmp, datap);
770 break;
771 }
772
773 case PTRACE_POKEUSR: /* write the word at location addr in the USER area */
774 ret = -EIO;
775 if ((addr & (sizeof(data) - 1)) || addr >= sizeof(struct user))
776 break;
777
778 if (addr < sizeof(struct user_regs_struct))
779 ret = putreg(child, addr, data);
780 else if (addr >= offsetof(struct user, u_debugreg[0]) &&
781 addr <= offsetof(struct user, u_debugreg[7])) {
782 addr -= offsetof(struct user, u_debugreg[0]);
783 ret = ptrace_set_debugreg(child,
784 addr / sizeof(data), data);
785 }
786 break;
787
788 case PTRACE_GETREGS: /* Get all gp regs from the child. */
789 return copy_regset_to_user(child,
790 task_user_regset_view(current),
791 REGSET_GENERAL,
792 0, sizeof(struct user_regs_struct),
793 datap);
794
795 case PTRACE_SETREGS: /* Set all gp regs in the child. */
796 return copy_regset_from_user(child,
797 task_user_regset_view(current),
798 REGSET_GENERAL,
799 0, sizeof(struct user_regs_struct),
800 datap);
801
802 case PTRACE_GETFPREGS: /* Get the child FPU state. */
803 return copy_regset_to_user(child,
804 task_user_regset_view(current),
805 REGSET_FP,
806 0, sizeof(struct user_i387_struct),
807 datap);
808
809 case PTRACE_SETFPREGS: /* Set the child FPU state. */
810 return copy_regset_from_user(child,
811 task_user_regset_view(current),
812 REGSET_FP,
813 0, sizeof(struct user_i387_struct),
814 datap);
815
816 #ifdef CONFIG_X86_32
817 case PTRACE_GETFPXREGS: /* Get the child extended FPU state. */
818 return copy_regset_to_user(child, &user_x86_32_view,
819 REGSET_XFP,
820 0, sizeof(struct user_fxsr_struct),
821 datap) ? -EIO : 0;
822
823 case PTRACE_SETFPXREGS: /* Set the child extended FPU state. */
824 return copy_regset_from_user(child, &user_x86_32_view,
825 REGSET_XFP,
826 0, sizeof(struct user_fxsr_struct),
827 datap) ? -EIO : 0;
828 #endif
829
830 #if defined CONFIG_X86_32 || defined CONFIG_IA32_EMULATION
831 case PTRACE_GET_THREAD_AREA:
832 if ((int) addr < 0)
833 return -EIO;
834 ret = do_get_thread_area(child, addr,
835 (struct user_desc __user *)data);
836 break;
837
838 case PTRACE_SET_THREAD_AREA:
839 if ((int) addr < 0)
840 return -EIO;
841 ret = do_set_thread_area(child, addr,
842 (struct user_desc __user *)data, 0);
843 break;
844 #endif
845
846 #ifdef CONFIG_X86_64
847 /* normal 64bit interface to access TLS data.
848 Works just like arch_prctl, except that the arguments
849 are reversed. */
850 case PTRACE_ARCH_PRCTL:
851 ret = do_arch_prctl_64(child, data, addr);
852 break;
853 #endif
854
855 default:
856 ret = ptrace_request(child, request, addr, data);
857 break;
858 }
859
860 return ret;
861 }
862
863 #ifdef CONFIG_IA32_EMULATION
864
865 #include <linux/compat.h>
866 #include <linux/syscalls.h>
867 #include <asm/ia32.h>
868 #include <asm/user32.h>
869
870 #define R32(l,q) \
871 case offsetof(struct user32, regs.l): \
872 regs->q = value; break
873
874 #define SEG32(rs) \
875 case offsetof(struct user32, regs.rs): \
876 return set_segment_reg(child, \
877 offsetof(struct user_regs_struct, rs), \
878 value); \
879 break
880
881 static int putreg32(struct task_struct *child, unsigned regno, u32 value)
882 {
883 struct pt_regs *regs = task_pt_regs(child);
884
885 switch (regno) {
886
887 SEG32(cs);
888 SEG32(ds);
889 SEG32(es);
890 SEG32(fs);
891 SEG32(gs);
892 SEG32(ss);
893
894 R32(ebx, bx);
895 R32(ecx, cx);
896 R32(edx, dx);
897 R32(edi, di);
898 R32(esi, si);
899 R32(ebp, bp);
900 R32(eax, ax);
901 R32(eip, ip);
902 R32(esp, sp);
903
904 case offsetof(struct user32, regs.orig_eax):
905 /*
906 * Warning: bizarre corner case fixup here. A 32-bit
907 * debugger setting orig_eax to -1 wants to disable
908 * syscall restart. Make sure that the syscall
909 * restart code sign-extends orig_ax. Also make sure
910 * we interpret the -ERESTART* codes correctly if
911 * loaded into regs->ax in case the task is not
912 * actually still sitting at the exit from a 32-bit
913 * syscall with TS_COMPAT still set.
914 */
915 regs->orig_ax = value;
916 if (syscall_get_nr(child, regs) >= 0)
917 child->thread_info.status |= TS_I386_REGS_POKED;
918 break;
919
920 case offsetof(struct user32, regs.eflags):
921 return set_flags(child, value);
922
923 case offsetof(struct user32, u_debugreg[0]) ...
924 offsetof(struct user32, u_debugreg[7]):
925 regno -= offsetof(struct user32, u_debugreg[0]);
926 return ptrace_set_debugreg(child, regno / 4, value);
927
928 default:
929 if (regno > sizeof(struct user32) || (regno & 3))
930 return -EIO;
931
932 /*
933 * Other dummy fields in the virtual user structure
934 * are ignored
935 */
936 break;
937 }
938 return 0;
939 }
940
941 #undef R32
942 #undef SEG32
943
944 #define R32(l,q) \
945 case offsetof(struct user32, regs.l): \
946 *val = regs->q; break
947
948 #define SEG32(rs) \
949 case offsetof(struct user32, regs.rs): \
950 *val = get_segment_reg(child, \
951 offsetof(struct user_regs_struct, rs)); \
952 break
953
954 static int getreg32(struct task_struct *child, unsigned regno, u32 *val)
955 {
956 struct pt_regs *regs = task_pt_regs(child);
957
958 switch (regno) {
959
960 SEG32(ds);
961 SEG32(es);
962 SEG32(fs);
963 SEG32(gs);
964
965 R32(cs, cs);
966 R32(ss, ss);
967 R32(ebx, bx);
968 R32(ecx, cx);
969 R32(edx, dx);
970 R32(edi, di);
971 R32(esi, si);
972 R32(ebp, bp);
973 R32(eax, ax);
974 R32(orig_eax, orig_ax);
975 R32(eip, ip);
976 R32(esp, sp);
977
978 case offsetof(struct user32, regs.eflags):
979 *val = get_flags(child);
980 break;
981
982 case offsetof(struct user32, u_debugreg[0]) ...
983 offsetof(struct user32, u_debugreg[7]):
984 regno -= offsetof(struct user32, u_debugreg[0]);
985 *val = ptrace_get_debugreg(child, regno / 4);
986 break;
987
988 default:
989 if (regno > sizeof(struct user32) || (regno & 3))
990 return -EIO;
991
992 /*
993 * Other dummy fields in the virtual user structure
994 * are ignored
995 */
996 *val = 0;
997 break;
998 }
999 return 0;
1000 }
1001
1002 #undef R32
1003 #undef SEG32
1004
1005 static int genregs32_get(struct task_struct *target,
1006 const struct user_regset *regset,
1007 unsigned int pos, unsigned int count,
1008 void *kbuf, void __user *ubuf)
1009 {
1010 if (kbuf) {
1011 compat_ulong_t *k = kbuf;
1012 while (count >= sizeof(*k)) {
1013 getreg32(target, pos, k++);
1014 count -= sizeof(*k);
1015 pos += sizeof(*k);
1016 }
1017 } else {
1018 compat_ulong_t __user *u = ubuf;
1019 while (count >= sizeof(*u)) {
1020 compat_ulong_t word;
1021 getreg32(target, pos, &word);
1022 if (__put_user(word, u++))
1023 return -EFAULT;
1024 count -= sizeof(*u);
1025 pos += sizeof(*u);
1026 }
1027 }
1028
1029 return 0;
1030 }
1031
1032 static int genregs32_set(struct task_struct *target,
1033 const struct user_regset *regset,
1034 unsigned int pos, unsigned int count,
1035 const void *kbuf, const void __user *ubuf)
1036 {
1037 int ret = 0;
1038 if (kbuf) {
1039 const compat_ulong_t *k = kbuf;
1040 while (count >= sizeof(*k) && !ret) {
1041 ret = putreg32(target, pos, *k++);
1042 count -= sizeof(*k);
1043 pos += sizeof(*k);
1044 }
1045 } else {
1046 const compat_ulong_t __user *u = ubuf;
1047 while (count >= sizeof(*u) && !ret) {
1048 compat_ulong_t word;
1049 ret = __get_user(word, u++);
1050 if (ret)
1051 break;
1052 ret = putreg32(target, pos, word);
1053 count -= sizeof(*u);
1054 pos += sizeof(*u);
1055 }
1056 }
1057 return ret;
1058 }
1059
1060 static long ia32_arch_ptrace(struct task_struct *child, compat_long_t request,
1061 compat_ulong_t caddr, compat_ulong_t cdata)
1062 {
1063 unsigned long addr = caddr;
1064 unsigned long data = cdata;
1065 void __user *datap = compat_ptr(data);
1066 int ret;
1067 __u32 val;
1068
1069 switch (request) {
1070 case PTRACE_PEEKUSR:
1071 ret = getreg32(child, addr, &val);
1072 if (ret == 0)
1073 ret = put_user(val, (__u32 __user *)datap);
1074 break;
1075
1076 case PTRACE_POKEUSR:
1077 ret = putreg32(child, addr, data);
1078 break;
1079
1080 case PTRACE_GETREGS: /* Get all gp regs from the child. */
1081 return copy_regset_to_user(child, &user_x86_32_view,
1082 REGSET_GENERAL,
1083 0, sizeof(struct user_regs_struct32),
1084 datap);
1085
1086 case PTRACE_SETREGS: /* Set all gp regs in the child. */
1087 return copy_regset_from_user(child, &user_x86_32_view,
1088 REGSET_GENERAL, 0,
1089 sizeof(struct user_regs_struct32),
1090 datap);
1091
1092 case PTRACE_GETFPREGS: /* Get the child FPU state. */
1093 return copy_regset_to_user(child, &user_x86_32_view,
1094 REGSET_FP, 0,
1095 sizeof(struct user_i387_ia32_struct),
1096 datap);
1097
1098 case PTRACE_SETFPREGS: /* Set the child FPU state. */
1099 return copy_regset_from_user(
1100 child, &user_x86_32_view, REGSET_FP,
1101 0, sizeof(struct user_i387_ia32_struct), datap);
1102
1103 case PTRACE_GETFPXREGS: /* Get the child extended FPU state. */
1104 return copy_regset_to_user(child, &user_x86_32_view,
1105 REGSET_XFP, 0,
1106 sizeof(struct user32_fxsr_struct),
1107 datap);
1108
1109 case PTRACE_SETFPXREGS: /* Set the child extended FPU state. */
1110 return copy_regset_from_user(child, &user_x86_32_view,
1111 REGSET_XFP, 0,
1112 sizeof(struct user32_fxsr_struct),
1113 datap);
1114
1115 case PTRACE_GET_THREAD_AREA:
1116 case PTRACE_SET_THREAD_AREA:
1117 return arch_ptrace(child, request, addr, data);
1118
1119 default:
1120 return compat_ptrace_request(child, request, addr, data);
1121 }
1122
1123 return ret;
1124 }
1125 #endif /* CONFIG_IA32_EMULATION */
1126
1127 #ifdef CONFIG_X86_X32_ABI
1128 static long x32_arch_ptrace(struct task_struct *child,
1129 compat_long_t request, compat_ulong_t caddr,
1130 compat_ulong_t cdata)
1131 {
1132 unsigned long addr = caddr;
1133 unsigned long data = cdata;
1134 void __user *datap = compat_ptr(data);
1135 int ret;
1136
1137 switch (request) {
1138 /* Read 32bits at location addr in the USER area. Only allow
1139 to return the lower 32bits of segment and debug registers. */
1140 case PTRACE_PEEKUSR: {
1141 u32 tmp;
1142
1143 ret = -EIO;
1144 if ((addr & (sizeof(data) - 1)) || addr >= sizeof(struct user) ||
1145 addr < offsetof(struct user_regs_struct, cs))
1146 break;
1147
1148 tmp = 0; /* Default return condition */
1149 if (addr < sizeof(struct user_regs_struct))
1150 tmp = getreg(child, addr);
1151 else if (addr >= offsetof(struct user, u_debugreg[0]) &&
1152 addr <= offsetof(struct user, u_debugreg[7])) {
1153 addr -= offsetof(struct user, u_debugreg[0]);
1154 tmp = ptrace_get_debugreg(child, addr / sizeof(data));
1155 }
1156 ret = put_user(tmp, (__u32 __user *)datap);
1157 break;
1158 }
1159
1160 /* Write the word at location addr in the USER area. Only allow
1161 to update segment and debug registers with the upper 32bits
1162 zero-extended. */
1163 case PTRACE_POKEUSR:
1164 ret = -EIO;
1165 if ((addr & (sizeof(data) - 1)) || addr >= sizeof(struct user) ||
1166 addr < offsetof(struct user_regs_struct, cs))
1167 break;
1168
1169 if (addr < sizeof(struct user_regs_struct))
1170 ret = putreg(child, addr, data);
1171 else if (addr >= offsetof(struct user, u_debugreg[0]) &&
1172 addr <= offsetof(struct user, u_debugreg[7])) {
1173 addr -= offsetof(struct user, u_debugreg[0]);
1174 ret = ptrace_set_debugreg(child,
1175 addr / sizeof(data), data);
1176 }
1177 break;
1178
1179 case PTRACE_GETREGS: /* Get all gp regs from the child. */
1180 return copy_regset_to_user(child,
1181 task_user_regset_view(current),
1182 REGSET_GENERAL,
1183 0, sizeof(struct user_regs_struct),
1184 datap);
1185
1186 case PTRACE_SETREGS: /* Set all gp regs in the child. */
1187 return copy_regset_from_user(child,
1188 task_user_regset_view(current),
1189 REGSET_GENERAL,
1190 0, sizeof(struct user_regs_struct),
1191 datap);
1192
1193 case PTRACE_GETFPREGS: /* Get the child FPU state. */
1194 return copy_regset_to_user(child,
1195 task_user_regset_view(current),
1196 REGSET_FP,
1197 0, sizeof(struct user_i387_struct),
1198 datap);
1199
1200 case PTRACE_SETFPREGS: /* Set the child FPU state. */
1201 return copy_regset_from_user(child,
1202 task_user_regset_view(current),
1203 REGSET_FP,
1204 0, sizeof(struct user_i387_struct),
1205 datap);
1206
1207 default:
1208 return compat_ptrace_request(child, request, addr, data);
1209 }
1210
1211 return ret;
1212 }
1213 #endif
1214
1215 #ifdef CONFIG_COMPAT
1216 long compat_arch_ptrace(struct task_struct *child, compat_long_t request,
1217 compat_ulong_t caddr, compat_ulong_t cdata)
1218 {
1219 #ifdef CONFIG_X86_X32_ABI
1220 if (!in_ia32_syscall())
1221 return x32_arch_ptrace(child, request, caddr, cdata);
1222 #endif
1223 #ifdef CONFIG_IA32_EMULATION
1224 return ia32_arch_ptrace(child, request, caddr, cdata);
1225 #else
1226 return 0;
1227 #endif
1228 }
1229 #endif /* CONFIG_COMPAT */
1230
1231 #ifdef CONFIG_X86_64
1232
1233 static struct user_regset x86_64_regsets[] __ro_after_init = {
1234 [REGSET_GENERAL] = {
1235 .core_note_type = NT_PRSTATUS,
1236 .n = sizeof(struct user_regs_struct) / sizeof(long),
1237 .size = sizeof(long), .align = sizeof(long),
1238 .get = genregs_get, .set = genregs_set
1239 },
1240 [REGSET_FP] = {
1241 .core_note_type = NT_PRFPREG,
1242 .n = sizeof(struct user_i387_struct) / sizeof(long),
1243 .size = sizeof(long), .align = sizeof(long),
1244 .active = regset_xregset_fpregs_active, .get = xfpregs_get, .set = xfpregs_set
1245 },
1246 [REGSET_XSTATE] = {
1247 .core_note_type = NT_X86_XSTATE,
1248 .size = sizeof(u64), .align = sizeof(u64),
1249 .active = xstateregs_active, .get = xstateregs_get,
1250 .set = xstateregs_set
1251 },
1252 [REGSET_IOPERM64] = {
1253 .core_note_type = NT_386_IOPERM,
1254 .n = IO_BITMAP_LONGS,
1255 .size = sizeof(long), .align = sizeof(long),
1256 .active = ioperm_active, .get = ioperm_get
1257 },
1258 };
1259
1260 static const struct user_regset_view user_x86_64_view = {
1261 .name = "x86_64", .e_machine = EM_X86_64,
1262 .regsets = x86_64_regsets, .n = ARRAY_SIZE(x86_64_regsets)
1263 };
1264
1265 #else /* CONFIG_X86_32 */
1266
1267 #define user_regs_struct32 user_regs_struct
1268 #define genregs32_get genregs_get
1269 #define genregs32_set genregs_set
1270
1271 #endif /* CONFIG_X86_64 */
1272
1273 #if defined CONFIG_X86_32 || defined CONFIG_IA32_EMULATION
1274 static struct user_regset x86_32_regsets[] __ro_after_init = {
1275 [REGSET_GENERAL] = {
1276 .core_note_type = NT_PRSTATUS,
1277 .n = sizeof(struct user_regs_struct32) / sizeof(u32),
1278 .size = sizeof(u32), .align = sizeof(u32),
1279 .get = genregs32_get, .set = genregs32_set
1280 },
1281 [REGSET_FP] = {
1282 .core_note_type = NT_PRFPREG,
1283 .n = sizeof(struct user_i387_ia32_struct) / sizeof(u32),
1284 .size = sizeof(u32), .align = sizeof(u32),
1285 .active = regset_fpregs_active, .get = fpregs_get, .set = fpregs_set
1286 },
1287 [REGSET_XFP] = {
1288 .core_note_type = NT_PRXFPREG,
1289 .n = sizeof(struct user32_fxsr_struct) / sizeof(u32),
1290 .size = sizeof(u32), .align = sizeof(u32),
1291 .active = regset_xregset_fpregs_active, .get = xfpregs_get, .set = xfpregs_set
1292 },
1293 [REGSET_XSTATE] = {
1294 .core_note_type = NT_X86_XSTATE,
1295 .size = sizeof(u64), .align = sizeof(u64),
1296 .active = xstateregs_active, .get = xstateregs_get,
1297 .set = xstateregs_set
1298 },
1299 [REGSET_TLS] = {
1300 .core_note_type = NT_386_TLS,
1301 .n = GDT_ENTRY_TLS_ENTRIES, .bias = GDT_ENTRY_TLS_MIN,
1302 .size = sizeof(struct user_desc),
1303 .align = sizeof(struct user_desc),
1304 .active = regset_tls_active,
1305 .get = regset_tls_get, .set = regset_tls_set
1306 },
1307 [REGSET_IOPERM32] = {
1308 .core_note_type = NT_386_IOPERM,
1309 .n = IO_BITMAP_BYTES / sizeof(u32),
1310 .size = sizeof(u32), .align = sizeof(u32),
1311 .active = ioperm_active, .get = ioperm_get
1312 },
1313 };
1314
1315 static const struct user_regset_view user_x86_32_view = {
1316 .name = "i386", .e_machine = EM_386,
1317 .regsets = x86_32_regsets, .n = ARRAY_SIZE(x86_32_regsets)
1318 };
1319 #endif
1320
1321 /*
1322 * This represents bytes 464..511 in the memory layout exported through
1323 * the REGSET_XSTATE interface.
1324 */
1325 u64 xstate_fx_sw_bytes[USER_XSTATE_FX_SW_WORDS];
1326
1327 void __init update_regset_xstate_info(unsigned int size, u64 xstate_mask)
1328 {
1329 #ifdef CONFIG_X86_64
1330 x86_64_regsets[REGSET_XSTATE].n = size / sizeof(u64);
1331 #endif
1332 #if defined CONFIG_X86_32 || defined CONFIG_IA32_EMULATION
1333 x86_32_regsets[REGSET_XSTATE].n = size / sizeof(u64);
1334 #endif
1335 xstate_fx_sw_bytes[USER_XSTATE_XCR0_WORD] = xstate_mask;
1336 }
1337
1338 const struct user_regset_view *task_user_regset_view(struct task_struct *task)
1339 {
1340 #ifdef CONFIG_IA32_EMULATION
1341 if (!user_64bit_mode(task_pt_regs(task)))
1342 #endif
1343 #if defined CONFIG_X86_32 || defined CONFIG_IA32_EMULATION
1344 return &user_x86_32_view;
1345 #endif
1346 #ifdef CONFIG_X86_64
1347 return &user_x86_64_view;
1348 #endif
1349 }
1350
1351 void send_sigtrap(struct pt_regs *regs, int error_code, int si_code)
1352 {
1353 struct task_struct *tsk = current;
1354
1355 tsk->thread.trap_nr = X86_TRAP_DB;
1356 tsk->thread.error_code = error_code;
1357
1358 /* Send us the fake SIGTRAP */
1359 force_sig_fault(SIGTRAP, si_code,
1360 user_mode(regs) ? (void __user *)regs->ip : NULL);
1361 }
1362
1363 void user_single_step_report(struct pt_regs *regs)
1364 {
1365 send_sigtrap(regs, 0, TRAP_BRKPT);
1366 }