]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - arch/x86/kernel/signal.c
x86/uaccess, signal: Fix AC=1 bloat
[mirror_ubuntu-bionic-kernel.git] / arch / x86 / kernel / signal.c
CommitLineData
b2441318 1// SPDX-License-Identifier: GPL-2.0
1da177e4 2/*
1da177e4 3 * Copyright (C) 1991, 1992 Linus Torvalds
e5fa2d06 4 * Copyright (C) 2000, 2001, 2002 Andi Kleen SuSE Labs
1da177e4
LT
5 *
6 * 1997-11-28 Modified for POSIX.1b signals by Richard Henderson
7 * 2000-06-20 Pentium III FXSR, SSE support by Gareth Hughes
e5fa2d06 8 * 2000-2002 x86-64 support by Andi Kleen
1da177e4 9 */
c767a54b
JP
10
11#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
12
5c9b3a0c 13#include <linux/sched.h>
68db0cf1 14#include <linux/sched/task_stack.h>
5c9b3a0c
HS
15#include <linux/mm.h>
16#include <linux/smp.h>
1da177e4 17#include <linux/kernel.h>
1da177e4
LT
18#include <linux/errno.h>
19#include <linux/wait.h>
36a03308 20#include <linux/tracehook.h>
5c9b3a0c
HS
21#include <linux/unistd.h>
22#include <linux/stddef.h>
23#include <linux/personality.h>
24#include <linux/uaccess.h>
7c68af6e 25#include <linux/user-return-notifier.h>
0326f5a9 26#include <linux/uprobes.h>
91d1aa43 27#include <linux/context_tracking.h>
7e907f48 28
1da177e4
LT
29#include <asm/processor.h>
30#include <asm/ucontext.h>
78f7f1e5 31#include <asm/fpu/internal.h>
fcbc99c4 32#include <asm/fpu/signal.h>
6c3652ef 33#include <asm/vdso.h>
4efc0670 34#include <asm/mce.h>
f28f0c23 35#include <asm/sighandling.h>
ba3e127e 36#include <asm/vm86.h>
5c9b3a0c
HS
37
38#ifdef CONFIG_X86_64
39#include <asm/proto.h>
40#include <asm/ia32_unistd.h>
5c9b3a0c
HS
41#endif /* CONFIG_X86_64 */
42
bb57925f 43#include <asm/syscall.h>
bbc1f698 44#include <asm/syscalls.h>
7e907f48 45
41af86fa 46#include <asm/sigframe.h>
68463510 47#include <asm/signal.h>
1da177e4 48
d9a89a26
TH
49#define COPY(x) do { \
50 get_user_ex(regs->x, &sc->x); \
51} while (0)
2601657d 52
d9a89a26
TH
53#define GET_SEG(seg) ({ \
54 unsigned short tmp; \
55 get_user_ex(tmp, &sc->seg); \
56 tmp; \
57})
2601657d 58
d9a89a26
TH
59#define COPY_SEG(seg) do { \
60 regs->seg = GET_SEG(seg); \
61} while (0)
2601657d 62
d9a89a26
TH
63#define COPY_SEG_CPL3(seg) do { \
64 regs->seg = GET_SEG(seg) | 3; \
65} while (0)
2601657d 66
8ff5bd2e
AL
67#ifdef CONFIG_X86_64
68/*
69 * If regs->ss will cause an IRET fault, change it. Otherwise leave it
70 * alone. Using this generally makes no sense unless
71 * user_64bit_mode(regs) would return true.
72 */
73static void force_valid_ss(struct pt_regs *regs)
74{
75 u32 ar;
76 asm volatile ("lar %[old_ss], %[ar]\n\t"
77 "jz 1f\n\t" /* If invalid: */
78 "xorl %[ar], %[ar]\n\t" /* set ar = 0 */
79 "1:"
80 : [ar] "=r" (ar)
81 : [old_ss] "rm" ((u16)regs->ss));
82
83 /*
84 * For a valid 64-bit user context, we need DPL 3, type
85 * read-write data or read-write exp-down data, and S and P
86 * set. We can't use VERW because VERW doesn't check the
87 * P bit.
88 */
89 ar &= AR_DPL_MASK | AR_S | AR_P | AR_TYPE_MASK;
90 if (ar != (AR_DPL3 | AR_S | AR_P | AR_TYPE_RWDATA) &&
91 ar != (AR_DPL3 | AR_S | AR_P | AR_TYPE_RWDATA_EXPDOWN))
92 regs->ss = __USER_DS;
93}
94#endif
95
6c25da5a
AL
96static int restore_sigcontext(struct pt_regs *regs,
97 struct sigcontext __user *sc,
98 unsigned long uc_flags)
2601657d 99{
530e5c82 100 unsigned long buf_val;
2601657d
HS
101 void __user *buf;
102 unsigned int tmpflags;
103 unsigned int err = 0;
104
105 /* Always make any pending restarted system calls return -EINTR */
f56141e3 106 current->restart_block.fn = do_no_restart_syscall;
2601657d 107
98e3d45e
HS
108 get_user_try {
109
2601657d 110#ifdef CONFIG_X86_32
d9a89a26 111 set_user_gs(regs, GET_SEG(gs));
98e3d45e
HS
112 COPY_SEG(fs);
113 COPY_SEG(es);
114 COPY_SEG(ds);
2601657d
HS
115#endif /* CONFIG_X86_32 */
116
98e3d45e 117 COPY(di); COPY(si); COPY(bp); COPY(sp); COPY(bx);
6a3713f0 118 COPY(dx); COPY(cx); COPY(ip); COPY(ax);
2601657d
HS
119
120#ifdef CONFIG_X86_64
98e3d45e
HS
121 COPY(r8);
122 COPY(r9);
123 COPY(r10);
124 COPY(r11);
125 COPY(r12);
126 COPY(r13);
127 COPY(r14);
128 COPY(r15);
2601657d
HS
129#endif /* CONFIG_X86_64 */
130
98e3d45e
HS
131 COPY_SEG_CPL3(cs);
132 COPY_SEG_CPL3(ss);
6c25da5a 133
98e3d45e
HS
134 get_user_ex(tmpflags, &sc->flags);
135 regs->flags = (regs->flags & ~FIX_EFLAGS) | (tmpflags & FIX_EFLAGS);
136 regs->orig_ax = -1; /* disable syscall checks */
137
530e5c82
IM
138 get_user_ex(buf_val, &sc->fpstate);
139 buf = (void __user *)buf_val;
98e3d45e 140 } get_user_catch(err);
2601657d 141
17786d96
PZ
142#ifdef CONFIG_X86_64
143 /*
144 * Fix up SS if needed for the benefit of old DOSEMU and
145 * CRIU.
146 */
147 if (unlikely(!(uc_flags & UC_STRICT_RESTORE_SS) && user_64bit_mode(regs)))
148 force_valid_ss(regs);
149#endif
150
97f2645f 151 err |= fpu__restore_sig(buf, IS_ENABLED(CONFIG_X86_32));
5e88353d 152
1daeaa31
BG
153 force_iret();
154
2601657d
HS
155 return err;
156}
157
85139422
PA
158int setup_sigcontext(struct sigcontext __user *sc, void __user *fpstate,
159 struct pt_regs *regs, unsigned long mask)
2601657d
HS
160{
161 int err = 0;
162
98e3d45e 163 put_user_try {
2601657d 164
98e3d45e 165#ifdef CONFIG_X86_32
d9a89a26 166 put_user_ex(get_user_gs(regs), (unsigned int __user *)&sc->gs);
98e3d45e
HS
167 put_user_ex(regs->fs, (unsigned int __user *)&sc->fs);
168 put_user_ex(regs->es, (unsigned int __user *)&sc->es);
169 put_user_ex(regs->ds, (unsigned int __user *)&sc->ds);
2601657d
HS
170#endif /* CONFIG_X86_32 */
171
98e3d45e
HS
172 put_user_ex(regs->di, &sc->di);
173 put_user_ex(regs->si, &sc->si);
174 put_user_ex(regs->bp, &sc->bp);
175 put_user_ex(regs->sp, &sc->sp);
176 put_user_ex(regs->bx, &sc->bx);
177 put_user_ex(regs->dx, &sc->dx);
178 put_user_ex(regs->cx, &sc->cx);
179 put_user_ex(regs->ax, &sc->ax);
2601657d 180#ifdef CONFIG_X86_64
98e3d45e
HS
181 put_user_ex(regs->r8, &sc->r8);
182 put_user_ex(regs->r9, &sc->r9);
183 put_user_ex(regs->r10, &sc->r10);
184 put_user_ex(regs->r11, &sc->r11);
185 put_user_ex(regs->r12, &sc->r12);
186 put_user_ex(regs->r13, &sc->r13);
187 put_user_ex(regs->r14, &sc->r14);
188 put_user_ex(regs->r15, &sc->r15);
2601657d
HS
189#endif /* CONFIG_X86_64 */
190
51e7dc70 191 put_user_ex(current->thread.trap_nr, &sc->trapno);
98e3d45e
HS
192 put_user_ex(current->thread.error_code, &sc->err);
193 put_user_ex(regs->ip, &sc->ip);
2601657d 194#ifdef CONFIG_X86_32
98e3d45e
HS
195 put_user_ex(regs->cs, (unsigned int __user *)&sc->cs);
196 put_user_ex(regs->flags, &sc->flags);
197 put_user_ex(regs->sp, &sc->sp_at_signal);
198 put_user_ex(regs->ss, (unsigned int __user *)&sc->ss);
2601657d 199#else /* !CONFIG_X86_32 */
98e3d45e
HS
200 put_user_ex(regs->flags, &sc->flags);
201 put_user_ex(regs->cs, &sc->cs);
ed596cde
LT
202 put_user_ex(0, &sc->gs);
203 put_user_ex(0, &sc->fs);
6c25da5a 204 put_user_ex(regs->ss, &sc->ss);
2601657d
HS
205#endif /* CONFIG_X86_32 */
206
98e3d45e 207 put_user_ex(fpstate, &sc->fpstate);
2601657d 208
98e3d45e
HS
209 /* non-iBCS2 extensions.. */
210 put_user_ex(mask, &sc->oldmask);
211 put_user_ex(current->thread.cr2, &sc->cr2);
212 } put_user_catch(err);
2601657d
HS
213
214 return err;
215}
216
1da177e4 217/*
bfeb91a9 218 * Set up a signal frame.
1da177e4 219 */
1da177e4
LT
220
221/*
222 * Determine which stack to use..
223 */
1fae0279
HS
224static unsigned long align_sigframe(unsigned long sp)
225{
226#ifdef CONFIG_X86_32
227 /*
228 * Align the stack pointer according to the i386 ABI,
229 * i.e. so that on function entry ((sp + 4) & 15) == 0.
230 */
231 sp = ((sp + 4) & -16ul) - 4;
232#else /* !CONFIG_X86_32 */
233 sp = round_down(sp, 16) - 8;
234#endif
235 return sp;
236}
237
dae0f305 238static void __user *
3c1c7f10 239get_sigframe(struct k_sigaction *ka, struct pt_regs *regs, size_t frame_size,
144b0712 240 void __user **fpstate)
1da177e4 241{
1da177e4 242 /* Default to using normal stack */
72a671ce 243 unsigned long math_size = 0;
75779f05 244 unsigned long sp = regs->sp;
72a671ce 245 unsigned long buf_fx = 0;
14fc9fbc 246 int onsigstack = on_sig_stack(sp);
c5bedc68 247 struct fpu *fpu = &current->thread.fpu;
75779f05 248
75779f05 249 /* redzone */
97f2645f 250 if (IS_ENABLED(CONFIG_X86_64))
050902c0 251 sp -= 128;
1da177e4 252
0b4521e8
SS
253 /* This is the X/Open sanctioned signal stack switching. */
254 if (ka->sa.sa_flags & SA_ONSTACK) {
255 if (sas_ss_flags(sp) == 0)
256 sp = current->sas_ss_sp + current->sas_ss_size;
97f2645f 257 } else if (IS_ENABLED(CONFIG_X86_32) &&
0b4521e8 258 !onsigstack &&
99504819 259 regs->ss != __USER_DS &&
0b4521e8
SS
260 !(ka->sa.sa_flags & SA_RESTORER) &&
261 ka->sa.sa_restorer) {
262 /* This is the legacy signal stack switching. */
263 sp = (unsigned long) ka->sa.sa_restorer;
1da177e4
LT
264 }
265
e4a81bfc 266 if (fpu->initialized) {
97f2645f 267 sp = fpu__alloc_mathframe(sp, IS_ENABLED(CONFIG_X86_32),
82c0e45e 268 &buf_fx, &math_size);
25051702 269 *fpstate = (void __user *)sp;
3c1c7f10
SS
270 }
271
14fc9fbc
HS
272 sp = align_sigframe(sp - frame_size);
273
274 /*
275 * If we are on the alternate signal stack and would overflow it, don't.
276 * Return an always-bogus address instead so we will die with SIGSEGV.
277 */
278 if (onsigstack && !likely(on_sig_stack(sp)))
279 return (void __user *)-1L;
280
72a671ce 281 /* save i387 and extended state */
e4a81bfc 282 if (fpu->initialized &&
c8e14041 283 copy_fpstate_to_sigframe(*fpstate, (void __user *)buf_fx, math_size) < 0)
14fc9fbc
HS
284 return (void __user *)-1L;
285
286 return (void __user *)sp;
1da177e4
LT
287}
288
75779f05
HS
289#ifdef CONFIG_X86_32
290static const struct {
291 u16 poplmovl;
292 u32 val;
293 u16 int80;
294} __attribute__((packed)) retcode = {
295 0xb858, /* popl %eax; movl $..., %eax */
296 __NR_sigreturn,
297 0x80cd, /* int $0x80 */
298};
299
300static const struct {
301 u8 movl;
302 u32 val;
303 u16 int80;
304 u8 pad;
305} __attribute__((packed)) rt_retcode = {
306 0xb8, /* movl $..., %eax */
307 __NR_rt_sigreturn,
308 0x80cd, /* int $0x80 */
309 0
310};
311
7e907f48 312static int
235b8022 313__setup_frame(int sig, struct ksignal *ksig, sigset_t *set,
1d13024e 314 struct pt_regs *regs)
1da177e4 315{
1da177e4 316 struct sigframe __user *frame;
7e907f48 317 void __user *restorer;
1da177e4 318 int err = 0;
ab513701 319 void __user *fpstate = NULL;
1da177e4 320
235b8022 321 frame = get_sigframe(&ksig->ka, regs, sizeof(*frame), &fpstate);
1da177e4
LT
322
323 if (!access_ok(VERIFY_WRITE, frame, sizeof(*frame)))
3d0aedd9 324 return -EFAULT;
1da177e4 325
2ba48e16 326 if (__put_user(sig, &frame->sig))
3d0aedd9 327 return -EFAULT;
1da177e4 328
2ba48e16 329 if (setup_sigcontext(&frame->sc, fpstate, regs, set->sig[0]))
3d0aedd9 330 return -EFAULT;
1da177e4
LT
331
332 if (_NSIG_WORDS > 1) {
2ba48e16
HS
333 if (__copy_to_user(&frame->extramask, &set->sig[1],
334 sizeof(frame->extramask)))
3d0aedd9 335 return -EFAULT;
1da177e4
LT
336 }
337
1a3e4ca4 338 if (current->mm->context.vdso)
6f121e54 339 restorer = current->mm->context.vdso +
0a6d1fa0 340 vdso_image_32.sym___kernel_sigreturn;
9fbbd4dd 341 else
ade1af77 342 restorer = &frame->retcode;
235b8022
AV
343 if (ksig->ka.sa.sa_flags & SA_RESTORER)
344 restorer = ksig->ka.sa.sa_restorer;
1da177e4
LT
345
346 /* Set up to return from userspace. */
347 err |= __put_user(restorer, &frame->pretcode);
7e907f48 348
1da177e4 349 /*
7e907f48 350 * This is popl %eax ; movl $__NR_sigreturn, %eax ; int $0x80
1da177e4
LT
351 *
352 * WE DO NOT USE IT ANY MORE! It's only left here for historical
353 * reasons and because gdb uses it as a signature to notice
354 * signal handler stack frames.
355 */
4a612048 356 err |= __put_user(*((u64 *)&retcode), (u64 *)frame->retcode);
1da177e4
LT
357
358 if (err)
3d0aedd9 359 return -EFAULT;
1da177e4
LT
360
361 /* Set up registers for signal handler */
7e907f48 362 regs->sp = (unsigned long)frame;
235b8022 363 regs->ip = (unsigned long)ksig->ka.sa.sa_handler;
7e907f48 364 regs->ax = (unsigned long)sig;
92bc2056
HH
365 regs->dx = 0;
366 regs->cx = 0;
1da177e4 367
65ea5b03
PA
368 regs->ds = __USER_DS;
369 regs->es = __USER_DS;
370 regs->ss = __USER_DS;
371 regs->cs = __USER_CS;
1da177e4 372
283828f3 373 return 0;
1da177e4
LT
374}
375
235b8022 376static int __setup_rt_frame(int sig, struct ksignal *ksig,
1d13024e 377 sigset_t *set, struct pt_regs *regs)
1da177e4 378{
1da177e4 379 struct rt_sigframe __user *frame;
7e907f48 380 void __user *restorer;
1da177e4 381 int err = 0;
ab513701 382 void __user *fpstate = NULL;
1da177e4 383
235b8022 384 frame = get_sigframe(&ksig->ka, regs, sizeof(*frame), &fpstate);
1da177e4
LT
385
386 if (!access_ok(VERIFY_WRITE, frame, sizeof(*frame)))
3d0aedd9 387 return -EFAULT;
1da177e4 388
98e3d45e
HS
389 put_user_try {
390 put_user_ex(sig, &frame->sig);
391 put_user_ex(&frame->info, &frame->pinfo);
392 put_user_ex(&frame->uc, &frame->puc);
98e3d45e
HS
393
394 /* Create the ucontext. */
d366bf7e 395 if (boot_cpu_has(X86_FEATURE_XSAVE))
98e3d45e
HS
396 put_user_ex(UC_FP_XSTATE, &frame->uc.uc_flags);
397 else
398 put_user_ex(0, &frame->uc.uc_flags);
399 put_user_ex(0, &frame->uc.uc_link);
bd1c149a 400 save_altstack_ex(&frame->uc.uc_stack, regs->sp);
98e3d45e
HS
401
402 /* Set up to return from userspace. */
6f121e54 403 restorer = current->mm->context.vdso +
0a6d1fa0 404 vdso_image_32.sym___kernel_rt_sigreturn;
235b8022
AV
405 if (ksig->ka.sa.sa_flags & SA_RESTORER)
406 restorer = ksig->ka.sa.sa_restorer;
98e3d45e
HS
407 put_user_ex(restorer, &frame->pretcode);
408
409 /*
410 * This is movl $__NR_rt_sigreturn, %ax ; int $0x80
411 *
412 * WE DO NOT USE IT ANY MORE! It's only left here for historical
413 * reasons and because gdb uses it as a signature to notice
414 * signal handler stack frames.
415 */
416 put_user_ex(*((u64 *)&rt_retcode), (u64 *)frame->retcode);
417 } put_user_catch(err);
49b8c695 418
235b8022 419 err |= copy_siginfo_to_user(&frame->info, &ksig->info);
5e88353d
PA
420 err |= setup_sigcontext(&frame->uc.uc_mcontext, fpstate,
421 regs, set->sig[0]);
422 err |= __copy_to_user(&frame->uc.uc_sigmask, set, sizeof(*set));
1da177e4
LT
423
424 if (err)
3d0aedd9 425 return -EFAULT;
1da177e4
LT
426
427 /* Set up registers for signal handler */
7e907f48 428 regs->sp = (unsigned long)frame;
235b8022 429 regs->ip = (unsigned long)ksig->ka.sa.sa_handler;
13ad7725 430 regs->ax = (unsigned long)sig;
7e907f48
IM
431 regs->dx = (unsigned long)&frame->info;
432 regs->cx = (unsigned long)&frame->uc;
1da177e4 433
65ea5b03
PA
434 regs->ds = __USER_DS;
435 regs->es = __USER_DS;
436 regs->ss = __USER_DS;
437 regs->cs = __USER_CS;
1da177e4 438
283828f3 439 return 0;
1da177e4 440}
bfeb91a9 441#else /* !CONFIG_X86_32 */
6c25da5a
AL
442static unsigned long frame_uc_flags(struct pt_regs *regs)
443{
444 unsigned long flags;
445
d366bf7e 446 if (boot_cpu_has(X86_FEATURE_XSAVE))
6c25da5a
AL
447 flags = UC_FP_XSTATE | UC_SIGCONTEXT_SS;
448 else
449 flags = UC_SIGCONTEXT_SS;
450
451 if (likely(user_64bit_mode(regs)))
452 flags |= UC_STRICT_RESTORE_SS;
453
454 return flags;
455}
456
235b8022 457static int __setup_rt_frame(int sig, struct ksignal *ksig,
bfeb91a9
HS
458 sigset_t *set, struct pt_regs *regs)
459{
460 struct rt_sigframe __user *frame;
461 void __user *fp = NULL;
17786d96 462 unsigned long uc_flags;
bfeb91a9 463 int err = 0;
bfeb91a9 464
235b8022 465 frame = get_sigframe(&ksig->ka, regs, sizeof(struct rt_sigframe), &fp);
bfeb91a9
HS
466
467 if (!access_ok(VERIFY_WRITE, frame, sizeof(*frame)))
468 return -EFAULT;
469
235b8022
AV
470 if (ksig->ka.sa.sa_flags & SA_SIGINFO) {
471 if (copy_siginfo_to_user(&frame->info, &ksig->info))
bfeb91a9
HS
472 return -EFAULT;
473 }
474
17786d96
PZ
475 uc_flags = frame_uc_flags(regs);
476
98e3d45e
HS
477 put_user_try {
478 /* Create the ucontext. */
17786d96 479 put_user_ex(uc_flags, &frame->uc.uc_flags);
98e3d45e 480 put_user_ex(0, &frame->uc.uc_link);
bd1c149a 481 save_altstack_ex(&frame->uc.uc_stack, regs->sp);
98e3d45e
HS
482
483 /* Set up to return from userspace. If provided, use a stub
484 already in userspace. */
485 /* x86-64 should always use SA_RESTORER. */
235b8022
AV
486 if (ksig->ka.sa.sa_flags & SA_RESTORER) {
487 put_user_ex(ksig->ka.sa.sa_restorer, &frame->pretcode);
98e3d45e
HS
488 } else {
489 /* could use a vstub here */
490 err |= -EFAULT;
491 }
492 } put_user_catch(err);
bfeb91a9 493
5e88353d
PA
494 err |= setup_sigcontext(&frame->uc.uc_mcontext, fp, regs, set->sig[0]);
495 err |= __copy_to_user(&frame->uc.uc_sigmask, set, sizeof(*set));
496
bfeb91a9
HS
497 if (err)
498 return -EFAULT;
499
500 /* Set up registers for signal handler */
501 regs->di = sig;
502 /* In case the signal handler was declared without prototypes */
503 regs->ax = 0;
504
505 /* This also works for non SA_SIGINFO handlers because they expect the
506 next argument after the signal number on the stack. */
507 regs->si = (unsigned long)&frame->info;
508 regs->dx = (unsigned long)&frame->uc;
235b8022 509 regs->ip = (unsigned long) ksig->ka.sa.sa_handler;
bfeb91a9
HS
510
511 regs->sp = (unsigned long)frame;
512
8ff5bd2e
AL
513 /*
514 * Set up the CS and SS registers to run signal handlers in
515 * 64-bit mode, even if the handler happens to be interrupting
516 * 32-bit or 16-bit code.
517 *
518 * SS is subtle. In 64-bit mode, we don't need any particular
519 * SS descriptor, but we do need SS to be valid. It's possible
520 * that the old SS is entirely bogus -- this can happen if the
521 * signal we're trying to deliver is #GP or #SS caused by a bad
522 * SS value. We also have a compatbility issue here: DOSEMU
523 * relies on the contents of the SS register indicating the
524 * SS value at the time of the signal, even though that code in
525 * DOSEMU predates sigreturn's ability to restore SS. (DOSEMU
526 * avoids relying on sigreturn to restore SS; instead it uses
527 * a trampoline.) So we do our best: if the old SS was valid,
528 * we keep it. Otherwise we replace it.
529 */
bfeb91a9
HS
530 regs->cs = __USER_CS;
531
8ff5bd2e
AL
532 if (unlikely(regs->ss != __USER_DS))
533 force_valid_ss(regs);
534
bfeb91a9
HS
535 return 0;
536}
537#endif /* CONFIG_X86_32 */
538
235b8022
AV
539static int x32_setup_rt_frame(struct ksignal *ksig,
540 compat_sigset_t *set,
050902c0
SS
541 struct pt_regs *regs)
542{
543#ifdef CONFIG_X86_X32_ABI
544 struct rt_sigframe_x32 __user *frame;
17786d96 545 unsigned long uc_flags;
050902c0
SS
546 void __user *restorer;
547 int err = 0;
548 void __user *fpstate = NULL;
549
235b8022 550 frame = get_sigframe(&ksig->ka, regs, sizeof(*frame), &fpstate);
050902c0
SS
551
552 if (!access_ok(VERIFY_WRITE, frame, sizeof(*frame)))
553 return -EFAULT;
554
235b8022 555 if (ksig->ka.sa.sa_flags & SA_SIGINFO) {
68463510 556 if (__copy_siginfo_to_user32(&frame->info, &ksig->info, true))
050902c0
SS
557 return -EFAULT;
558 }
559
17786d96
PZ
560 uc_flags = frame_uc_flags(regs);
561
050902c0
SS
562 put_user_try {
563 /* Create the ucontext. */
17786d96 564 put_user_ex(uc_flags, &frame->uc.uc_flags);
050902c0 565 put_user_ex(0, &frame->uc.uc_link);
bd1c149a 566 compat_save_altstack_ex(&frame->uc.uc_stack, regs->sp);
050902c0 567 put_user_ex(0, &frame->uc.uc__pad0);
050902c0 568
235b8022
AV
569 if (ksig->ka.sa.sa_flags & SA_RESTORER) {
570 restorer = ksig->ka.sa.sa_restorer;
050902c0
SS
571 } else {
572 /* could use a vstub here */
573 restorer = NULL;
574 err |= -EFAULT;
575 }
576 put_user_ex(restorer, &frame->pretcode);
577 } put_user_catch(err);
578
49b8c695
PA
579 err |= setup_sigcontext(&frame->uc.uc_mcontext, fpstate,
580 regs, set->sig[0]);
581 err |= __copy_to_user(&frame->uc.uc_sigmask, set, sizeof(*set));
582
050902c0
SS
583 if (err)
584 return -EFAULT;
585
586 /* Set up registers for signal handler */
587 regs->sp = (unsigned long) frame;
235b8022 588 regs->ip = (unsigned long) ksig->ka.sa.sa_handler;
050902c0
SS
589
590 /* We use the x32 calling convention here... */
235b8022 591 regs->di = ksig->sig;
050902c0
SS
592 regs->si = (unsigned long) &frame->info;
593 regs->dx = (unsigned long) &frame->uc;
594
595 loadsegment(ds, __USER_DS);
596 loadsegment(es, __USER_DS);
597
598 regs->cs = __USER_CS;
599 regs->ss = __USER_DS;
600#endif /* CONFIG_X86_X32_ABI */
601
602 return 0;
603}
604
bfeb91a9
HS
605/*
606 * Do a signal return; undo the signal stack.
607 */
e5fa2d06 608#ifdef CONFIG_X86_32
ff49103f 609asmlinkage unsigned long sys_sigreturn(void)
bfeb91a9 610{
3fe26fa3 611 struct pt_regs *regs = current_pt_regs();
bfeb91a9 612 struct sigframe __user *frame;
bfeb91a9
HS
613 sigset_t set;
614
bfeb91a9
HS
615 frame = (struct sigframe __user *)(regs->sp - 8);
616
617 if (!access_ok(VERIFY_READ, frame, sizeof(*frame)))
618 goto badframe;
619 if (__get_user(set.sig[0], &frame->sc.oldmask) || (_NSIG_WORDS > 1
620 && __copy_from_user(&set.sig[1], &frame->extramask,
621 sizeof(frame->extramask))))
622 goto badframe;
623
3982294b 624 set_current_blocked(&set);
bfeb91a9 625
6c25da5a
AL
626 /*
627 * x86_32 has no uc_flags bits relevant to restore_sigcontext.
628 * Save a few cycles by skipping the __get_user.
629 */
630 if (restore_sigcontext(regs, &frame->sc, 0))
bfeb91a9 631 goto badframe;
6a3713f0 632 return regs->ax;
bfeb91a9
HS
633
634badframe:
ae417bb4 635 signal_fault(regs, frame, "sigreturn");
bfeb91a9
HS
636
637 return 0;
638}
e5fa2d06 639#endif /* CONFIG_X86_32 */
bfeb91a9 640
ff49103f 641asmlinkage long sys_rt_sigreturn(void)
bfeb91a9 642{
3fe26fa3 643 struct pt_regs *regs = current_pt_regs();
bfeb91a9 644 struct rt_sigframe __user *frame;
bfeb91a9 645 sigset_t set;
6c25da5a 646 unsigned long uc_flags;
bfeb91a9
HS
647
648 frame = (struct rt_sigframe __user *)(regs->sp - sizeof(long));
649 if (!access_ok(VERIFY_READ, frame, sizeof(*frame)))
650 goto badframe;
651 if (__copy_from_user(&set, &frame->uc.uc_sigmask, sizeof(set)))
652 goto badframe;
6c25da5a
AL
653 if (__get_user(uc_flags, &frame->uc.uc_flags))
654 goto badframe;
bfeb91a9 655
e9bd3f0f 656 set_current_blocked(&set);
bfeb91a9 657
6c25da5a 658 if (restore_sigcontext(regs, &frame->uc.uc_mcontext, uc_flags))
bfeb91a9
HS
659 goto badframe;
660
c40702c4 661 if (restore_altstack(&frame->uc.uc_stack))
bfeb91a9
HS
662 goto badframe;
663
6a3713f0 664 return regs->ax;
bfeb91a9
HS
665
666badframe:
667 signal_fault(regs, frame, "rt_sigreturn");
668 return 0;
669}
670
68463510 671static inline int is_ia32_compat_frame(struct ksignal *ksig)
05012c13 672{
97f2645f 673 return IS_ENABLED(CONFIG_IA32_EMULATION) &&
68463510 674 ksig->ka.sa.sa_flags & SA_IA32_ABI;
05012c13
IM
675}
676
68463510 677static inline int is_ia32_frame(struct ksignal *ksig)
05012c13 678{
68463510 679 return IS_ENABLED(CONFIG_X86_32) || is_ia32_compat_frame(ksig);
05012c13
IM
680}
681
68463510 682static inline int is_x32_frame(struct ksignal *ksig)
05012c13 683{
68463510
DS
684 return IS_ENABLED(CONFIG_X86_X32_ABI) &&
685 ksig->ka.sa.sa_flags & SA_X32_ABI;
05012c13
IM
686}
687
1d13024e 688static int
235b8022 689setup_rt_frame(struct ksignal *ksig, struct pt_regs *regs)
1d13024e 690{
3050a35f 691 int usig = ksig->sig;
b7f9a11a 692 sigset_t *set = sigmask_to_save();
050902c0 693 compat_sigset_t *cset = (compat_sigset_t *) set;
1d13024e
HS
694
695 /* Set up the stack frame */
68463510 696 if (is_ia32_frame(ksig)) {
235b8022
AV
697 if (ksig->ka.sa.sa_flags & SA_SIGINFO)
698 return ia32_setup_rt_frame(usig, ksig, cset, regs);
455edbc4 699 else
235b8022 700 return ia32_setup_frame(usig, ksig, cset, regs);
68463510 701 } else if (is_x32_frame(ksig)) {
235b8022 702 return x32_setup_rt_frame(ksig, cset, regs);
c5a37394 703 } else {
235b8022 704 return __setup_rt_frame(ksig->sig, ksig, set, regs);
c5a37394 705 }
1d13024e
HS
706}
707
a610d6e6 708static void
235b8022 709handle_signal(struct ksignal *ksig, struct pt_regs *regs)
1da177e4 710{
fd0f86b6 711 bool stepping, failed;
c5bedc68 712 struct fpu *fpu = &current->thread.fpu;
fd0f86b6 713
5ed92a8a
BG
714 if (v8086_mode(regs))
715 save_v86_state((struct kernel_vm86_regs *) regs, VM86_SIGNAL);
716
1da177e4 717 /* Are we from a system call? */
bb57925f 718 if (syscall_get_nr(current, regs) >= 0) {
1da177e4 719 /* If so, check system call restarting.. */
bb57925f 720 switch (syscall_get_error(current, regs)) {
ac66f3fd
HH
721 case -ERESTART_RESTARTBLOCK:
722 case -ERESTARTNOHAND:
723 regs->ax = -EINTR;
724 break;
725
726 case -ERESTARTSYS:
235b8022 727 if (!(ksig->ka.sa.sa_flags & SA_RESTART)) {
65ea5b03 728 regs->ax = -EINTR;
1da177e4 729 break;
ac66f3fd
HH
730 }
731 /* fallthrough */
732 case -ERESTARTNOINTR:
733 regs->ax = regs->orig_ax;
734 regs->ip -= 2;
735 break;
1da177e4
LT
736 }
737 }
738
739 /*
fd0f86b6
ON
740 * If TF is set due to a debugger (TIF_FORCED_TF), clear TF now
741 * so that register information in the sigcontext is correct and
742 * then notify the tracer before entering the signal handler.
1da177e4 743 */
fd0f86b6
ON
744 stepping = test_thread_flag(TIF_SINGLESTEP);
745 if (stepping)
746 user_disable_single_step(current);
1da177e4 747
235b8022
AV
748 failed = (setup_rt_frame(ksig, regs) < 0);
749 if (!failed) {
750 /*
751 * Clear the direction flag as per the ABI for function entry.
ddd40da4 752 *
24cda109
JO
753 * Clear RF when entering the signal handler, because
754 * it might disable possible debug exception from the
755 * signal handler.
ddd40da4 756 *
fd0f86b6
ON
757 * Clear TF for the case when it wasn't set by debugger to
758 * avoid the recursive send_sigtrap() in SIGTRAP handler.
235b8022 759 */
ddd40da4 760 regs->flags &= ~(X86_EFLAGS_DF|X86_EFLAGS_RF|X86_EFLAGS_TF);
66463db4
ON
761 /*
762 * Ensure the signal handler starts with the new fpu state.
763 */
e4a81bfc 764 if (fpu->initialized)
fbce7782 765 fpu__clear(fpu);
a610d6e6 766 }
fd0f86b6 767 signal_setup_done(failed, ksig, stepping);
1da177e4
LT
768}
769
22eab110
DL
770static inline unsigned long get_nr_restart_syscall(const struct pt_regs *regs)
771{
609c19a3
AL
772 /*
773 * This function is fundamentally broken as currently
774 * implemented.
775 *
776 * The idea is that we want to trigger a call to the
777 * restart_block() syscall and that we want in_ia32_syscall(),
778 * in_x32_syscall(), etc. to match whatever they were in the
779 * syscall being restarted. We assume that the syscall
780 * instruction at (regs->ip - 2) matches whatever syscall
781 * instruction we used to enter in the first place.
782 *
783 * The problem is that we can get here when ptrace pokes
784 * syscall-like values into regs even if we're not in a syscall
785 * at all.
786 *
787 * For now, we maintain historical behavior and guess based on
788 * stored state. We could do better by saving the actual
789 * syscall arch in restart_block or (with caveats on x32) by
790 * checking if regs->ip points to 'int $0x80'. The current
791 * behavior is incorrect if a tracer has a different bitness
792 * than the tracee.
793 */
794#ifdef CONFIG_IA32_EMULATION
6c46cb88 795 if (current_thread_info()->status & (TS_COMPAT|TS_I386_REGS_POKED))
95d97adb
DL
796 return __NR_ia32_restart_syscall;
797#endif
798#ifdef CONFIG_X86_X32_ABI
799 return __NR_restart_syscall | (regs->orig_ax & __X32_SYSCALL_BIT);
800#else
22eab110 801 return __NR_restart_syscall;
95d97adb 802#endif
22eab110 803}
57917752 804
1da177e4
LT
805/*
806 * Note that 'init' is a special process: it doesn't get signals it doesn't
807 * want to handle. Thus you cannot kill init even with a SIGKILL even by
808 * mistake.
809 */
1f484aa6 810void do_signal(struct pt_regs *regs)
1da177e4 811{
235b8022 812 struct ksignal ksig;
1da177e4 813
235b8022 814 if (get_signal(&ksig)) {
7e907f48 815 /* Whee! Actually deliver the signal. */
235b8022 816 handle_signal(&ksig, regs);
283828f3 817 return;
1da177e4
LT
818 }
819
1da177e4 820 /* Did we come from a system call? */
bb57925f 821 if (syscall_get_nr(current, regs) >= 0) {
1da177e4 822 /* Restart the system call - no handlers present */
bb57925f 823 switch (syscall_get_error(current, regs)) {
283828f3
DH
824 case -ERESTARTNOHAND:
825 case -ERESTARTSYS:
826 case -ERESTARTNOINTR:
65ea5b03
PA
827 regs->ax = regs->orig_ax;
828 regs->ip -= 2;
283828f3
DH
829 break;
830
831 case -ERESTART_RESTARTBLOCK:
22eab110 832 regs->ax = get_nr_restart_syscall(regs);
65ea5b03 833 regs->ip -= 2;
283828f3 834 break;
1da177e4
LT
835 }
836 }
283828f3 837
ac66f3fd
HH
838 /*
839 * If there's no signal to deliver, we just put the saved sigmask
840 * back.
841 */
51a7b448 842 restore_saved_sigmask();
1da177e4
LT
843}
844
72fa50f4
HS
845void signal_fault(struct pt_regs *regs, void __user *frame, char *where)
846{
847 struct task_struct *me = current;
848
849 if (show_unhandled_signals && printk_ratelimit()) {
ae417bb4 850 printk("%s"
72fa50f4 851 "%s[%d] bad frame in %s frame:%p ip:%lx sp:%lx orax:%lx",
ae417bb4 852 task_pid_nr(current) > 1 ? KERN_INFO : KERN_EMERG,
72fa50f4
HS
853 me->comm, me->pid, where, frame,
854 regs->ip, regs->sp, regs->orig_ax);
1c99a687 855 print_vma_addr(KERN_CONT " in ", regs->ip);
c767a54b 856 pr_cont("\n");
72fa50f4
HS
857 }
858
859 force_sig(SIGSEGV, me);
860}
c5a37394
PA
861
862#ifdef CONFIG_X86_X32_ABI
3fe26fa3 863asmlinkage long sys32_x32_rt_sigreturn(void)
c5a37394 864{
3fe26fa3 865 struct pt_regs *regs = current_pt_regs();
c5a37394
PA
866 struct rt_sigframe_x32 __user *frame;
867 sigset_t set;
6c25da5a 868 unsigned long uc_flags;
c5a37394
PA
869
870 frame = (struct rt_sigframe_x32 __user *)(regs->sp - 8);
871
872 if (!access_ok(VERIFY_READ, frame, sizeof(*frame)))
873 goto badframe;
874 if (__copy_from_user(&set, &frame->uc.uc_sigmask, sizeof(set)))
875 goto badframe;
6c25da5a
AL
876 if (__get_user(uc_flags, &frame->uc.uc_flags))
877 goto badframe;
c5a37394 878
c5a37394
PA
879 set_current_blocked(&set);
880
6c25da5a 881 if (restore_sigcontext(regs, &frame->uc.uc_mcontext, uc_flags))
c5a37394
PA
882 goto badframe;
883
90268439 884 if (compat_restore_altstack(&frame->uc.uc_stack))
c5a37394
PA
885 goto badframe;
886
6a3713f0 887 return regs->ax;
c5a37394
PA
888
889badframe:
890 signal_fault(regs, frame, "x32 rt_sigreturn");
891 return 0;
892}
893#endif