Commit | Line | Data |
---|---|---|
1da177e4 LT |
1 | /* |
2 | * linux/fs/compat.c | |
3 | * | |
4 | * Kernel compatibililty routines for e.g. 32 bit syscall support | |
5 | * on 64 bit kernels. | |
6 | * | |
7 | * Copyright (C) 2002 Stephen Rothwell, IBM Corporation | |
8 | * Copyright (C) 1997-2000 Jakub Jelinek (jakub@redhat.com) | |
9 | * Copyright (C) 1998 Eddie C. Dost (ecd@skynet.be) | |
10 | * Copyright (C) 2001,2002 Andi Kleen, SuSE Labs | |
a2531293 | 11 | * Copyright (C) 2003 Pavel Machek (pavel@ucw.cz) |
1da177e4 LT |
12 | * |
13 | * This program is free software; you can redistribute it and/or modify | |
14 | * it under the terms of the GNU General Public License version 2 as | |
15 | * published by the Free Software Foundation. | |
16 | */ | |
17 | ||
85c9fe8f | 18 | #include <linux/stddef.h> |
022a1692 | 19 | #include <linux/kernel.h> |
1da177e4 LT |
20 | #include <linux/linkage.h> |
21 | #include <linux/compat.h> | |
22 | #include <linux/errno.h> | |
23 | #include <linux/time.h> | |
24 | #include <linux/fs.h> | |
25 | #include <linux/fcntl.h> | |
26 | #include <linux/namei.h> | |
27 | #include <linux/file.h> | |
9f3acc31 | 28 | #include <linux/fdtable.h> |
1da177e4 | 29 | #include <linux/vfs.h> |
1da177e4 LT |
30 | #include <linux/ioctl.h> |
31 | #include <linux/init.h> | |
1da177e4 | 32 | #include <linux/ncp_mount.h> |
9a9947bf | 33 | #include <linux/nfs4_mount.h> |
1da177e4 LT |
34 | #include <linux/syscalls.h> |
35 | #include <linux/ctype.h> | |
1da177e4 | 36 | #include <linux/dirent.h> |
0eeca283 | 37 | #include <linux/fsnotify.h> |
1da177e4 | 38 | #include <linux/highuid.h> |
1da177e4 LT |
39 | #include <linux/personality.h> |
40 | #include <linux/rwsem.h> | |
8f0ab514 | 41 | #include <linux/tsacct_kern.h> |
6272e266 | 42 | #include <linux/security.h> |
a1f8e7f7 | 43 | #include <linux/highmem.h> |
6d18c922 | 44 | #include <linux/signal.h> |
bd01f843 | 45 | #include <linux/poll.h> |
4a805e86 | 46 | #include <linux/mm.h> |
498052bb | 47 | #include <linux/fs_struct.h> |
5a0e3ad6 | 48 | #include <linux/slab.h> |
504b701b | 49 | #include <linux/pagemap.h> |
1da177e4 | 50 | |
1da177e4 LT |
51 | #include <asm/uaccess.h> |
52 | #include <asm/mmu_context.h> | |
53 | #include <asm/ioctls.h> | |
07f3f05c | 54 | #include "internal.h" |
9f72949f | 55 | |
bebfa101 AK |
56 | int compat_log = 1; |
57 | ||
58 | int compat_printk(const char *fmt, ...) | |
59 | { | |
60 | va_list ap; | |
61 | int ret; | |
62 | if (!compat_log) | |
63 | return 0; | |
64 | va_start(ap, fmt); | |
65 | ret = vprintk(fmt, ap); | |
66 | va_end(ap); | |
67 | return ret; | |
68 | } | |
69 | ||
1da177e4 LT |
70 | /* |
71 | * Not all architectures have sys_utime, so implement this in terms | |
72 | * of sys_utimes. | |
73 | */ | |
c7887325 DH |
74 | asmlinkage long compat_sys_utime(const char __user *filename, |
75 | struct compat_utimbuf __user *t) | |
1da177e4 | 76 | { |
1c710c89 | 77 | struct timespec tv[2]; |
1da177e4 LT |
78 | |
79 | if (t) { | |
80 | if (get_user(tv[0].tv_sec, &t->actime) || | |
81 | get_user(tv[1].tv_sec, &t->modtime)) | |
82 | return -EFAULT; | |
1c710c89 UD |
83 | tv[0].tv_nsec = 0; |
84 | tv[1].tv_nsec = 0; | |
1da177e4 | 85 | } |
1c710c89 UD |
86 | return do_utimes(AT_FDCWD, filename, t ? tv : NULL, 0); |
87 | } | |
88 | ||
c7887325 | 89 | asmlinkage long compat_sys_utimensat(unsigned int dfd, const char __user *filename, struct compat_timespec __user *t, int flags) |
1c710c89 UD |
90 | { |
91 | struct timespec tv[2]; | |
92 | ||
93 | if (t) { | |
94 | if (get_compat_timespec(&tv[0], &t[0]) || | |
95 | get_compat_timespec(&tv[1], &t[1])) | |
96 | return -EFAULT; | |
97 | ||
1c710c89 UD |
98 | if (tv[0].tv_nsec == UTIME_OMIT && tv[1].tv_nsec == UTIME_OMIT) |
99 | return 0; | |
100 | } | |
101 | return do_utimes(dfd, filename, t ? tv : NULL, flags); | |
1da177e4 LT |
102 | } |
103 | ||
c7887325 | 104 | asmlinkage long compat_sys_futimesat(unsigned int dfd, const char __user *filename, struct compat_timeval __user *t) |
1da177e4 | 105 | { |
1c710c89 | 106 | struct timespec tv[2]; |
1da177e4 | 107 | |
9ad11ab4 | 108 | if (t) { |
1da177e4 | 109 | if (get_user(tv[0].tv_sec, &t[0].tv_sec) || |
1c710c89 | 110 | get_user(tv[0].tv_nsec, &t[0].tv_usec) || |
1da177e4 | 111 | get_user(tv[1].tv_sec, &t[1].tv_sec) || |
1c710c89 | 112 | get_user(tv[1].tv_nsec, &t[1].tv_usec)) |
9ad11ab4 | 113 | return -EFAULT; |
1c710c89 UD |
114 | if (tv[0].tv_nsec >= 1000000 || tv[0].tv_nsec < 0 || |
115 | tv[1].tv_nsec >= 1000000 || tv[1].tv_nsec < 0) | |
116 | return -EINVAL; | |
117 | tv[0].tv_nsec *= 1000; | |
118 | tv[1].tv_nsec *= 1000; | |
9ad11ab4 | 119 | } |
1c710c89 | 120 | return do_utimes(dfd, filename, t ? tv : NULL, 0); |
5590ff0d UD |
121 | } |
122 | ||
c7887325 | 123 | asmlinkage long compat_sys_utimes(const char __user *filename, struct compat_timeval __user *t) |
5590ff0d UD |
124 | { |
125 | return compat_sys_futimesat(AT_FDCWD, filename, t); | |
1da177e4 LT |
126 | } |
127 | ||
f7a5000f CH |
128 | static int cp_compat_stat(struct kstat *stat, struct compat_stat __user *ubuf) |
129 | { | |
fcf83067 | 130 | struct compat_stat tmp; |
f7a5000f | 131 | |
fcf83067 AV |
132 | if (!old_valid_dev(stat->dev) || !old_valid_dev(stat->rdev)) |
133 | return -EOVERFLOW; | |
f7a5000f | 134 | |
fcf83067 AV |
135 | memset(&tmp, 0, sizeof(tmp)); |
136 | tmp.st_dev = old_encode_dev(stat->dev); | |
137 | tmp.st_ino = stat->ino; | |
138 | if (sizeof(tmp.st_ino) < sizeof(stat->ino) && tmp.st_ino != stat->ino) | |
f7a5000f | 139 | return -EOVERFLOW; |
fcf83067 AV |
140 | tmp.st_mode = stat->mode; |
141 | tmp.st_nlink = stat->nlink; | |
142 | if (tmp.st_nlink != stat->nlink) | |
f7a5000f | 143 | return -EOVERFLOW; |
a7c1938e EB |
144 | SET_UID(tmp.st_uid, from_kuid_munged(current_user_ns(), stat->uid)); |
145 | SET_GID(tmp.st_gid, from_kgid_munged(current_user_ns(), stat->gid)); | |
fcf83067 AV |
146 | tmp.st_rdev = old_encode_dev(stat->rdev); |
147 | if ((u64) stat->size > MAX_NON_LFS) | |
148 | return -EOVERFLOW; | |
149 | tmp.st_size = stat->size; | |
150 | tmp.st_atime = stat->atime.tv_sec; | |
151 | tmp.st_atime_nsec = stat->atime.tv_nsec; | |
152 | tmp.st_mtime = stat->mtime.tv_sec; | |
153 | tmp.st_mtime_nsec = stat->mtime.tv_nsec; | |
154 | tmp.st_ctime = stat->ctime.tv_sec; | |
155 | tmp.st_ctime_nsec = stat->ctime.tv_nsec; | |
156 | tmp.st_blocks = stat->blocks; | |
157 | tmp.st_blksize = stat->blksize; | |
158 | return copy_to_user(ubuf, &tmp, sizeof(tmp)) ? -EFAULT : 0; | |
f7a5000f CH |
159 | } |
160 | ||
c7887325 | 161 | asmlinkage long compat_sys_newstat(const char __user * filename, |
1da177e4 LT |
162 | struct compat_stat __user *statbuf) |
163 | { | |
164 | struct kstat stat; | |
2eae7a18 | 165 | int error; |
1da177e4 | 166 | |
2eae7a18 CH |
167 | error = vfs_stat(filename, &stat); |
168 | if (error) | |
169 | return error; | |
170 | return cp_compat_stat(&stat, statbuf); | |
1da177e4 LT |
171 | } |
172 | ||
c7887325 | 173 | asmlinkage long compat_sys_newlstat(const char __user * filename, |
1da177e4 LT |
174 | struct compat_stat __user *statbuf) |
175 | { | |
176 | struct kstat stat; | |
2eae7a18 | 177 | int error; |
1da177e4 | 178 | |
2eae7a18 CH |
179 | error = vfs_lstat(filename, &stat); |
180 | if (error) | |
181 | return error; | |
182 | return cp_compat_stat(&stat, statbuf); | |
1da177e4 LT |
183 | } |
184 | ||
82d821dd | 185 | #ifndef __ARCH_WANT_STAT64 |
c7887325 DH |
186 | asmlinkage long compat_sys_newfstatat(unsigned int dfd, |
187 | const char __user *filename, | |
5590ff0d UD |
188 | struct compat_stat __user *statbuf, int flag) |
189 | { | |
190 | struct kstat stat; | |
0112fc22 | 191 | int error; |
5590ff0d | 192 | |
0112fc22 OD |
193 | error = vfs_fstatat(dfd, filename, &stat, flag); |
194 | if (error) | |
195 | return error; | |
196 | return cp_compat_stat(&stat, statbuf); | |
5590ff0d | 197 | } |
82d821dd | 198 | #endif |
5590ff0d | 199 | |
1da177e4 LT |
200 | asmlinkage long compat_sys_newfstat(unsigned int fd, |
201 | struct compat_stat __user * statbuf) | |
202 | { | |
203 | struct kstat stat; | |
204 | int error = vfs_fstat(fd, &stat); | |
205 | ||
206 | if (!error) | |
207 | error = cp_compat_stat(&stat, statbuf); | |
208 | return error; | |
209 | } | |
210 | ||
211 | static int put_compat_statfs(struct compat_statfs __user *ubuf, struct kstatfs *kbuf) | |
212 | { | |
213 | ||
214 | if (sizeof ubuf->f_blocks == 4) { | |
f4a67cce JT |
215 | if ((kbuf->f_blocks | kbuf->f_bfree | kbuf->f_bavail | |
216 | kbuf->f_bsize | kbuf->f_frsize) & 0xffffffff00000000ULL) | |
1da177e4 LT |
217 | return -EOVERFLOW; |
218 | /* f_files and f_ffree may be -1; it's okay | |
219 | * to stuff that into 32 bits */ | |
220 | if (kbuf->f_files != 0xffffffffffffffffULL | |
221 | && (kbuf->f_files & 0xffffffff00000000ULL)) | |
222 | return -EOVERFLOW; | |
223 | if (kbuf->f_ffree != 0xffffffffffffffffULL | |
224 | && (kbuf->f_ffree & 0xffffffff00000000ULL)) | |
225 | return -EOVERFLOW; | |
226 | } | |
227 | if (!access_ok(VERIFY_WRITE, ubuf, sizeof(*ubuf)) || | |
228 | __put_user(kbuf->f_type, &ubuf->f_type) || | |
229 | __put_user(kbuf->f_bsize, &ubuf->f_bsize) || | |
230 | __put_user(kbuf->f_blocks, &ubuf->f_blocks) || | |
231 | __put_user(kbuf->f_bfree, &ubuf->f_bfree) || | |
232 | __put_user(kbuf->f_bavail, &ubuf->f_bavail) || | |
233 | __put_user(kbuf->f_files, &ubuf->f_files) || | |
234 | __put_user(kbuf->f_ffree, &ubuf->f_ffree) || | |
235 | __put_user(kbuf->f_namelen, &ubuf->f_namelen) || | |
236 | __put_user(kbuf->f_fsid.val[0], &ubuf->f_fsid.val[0]) || | |
237 | __put_user(kbuf->f_fsid.val[1], &ubuf->f_fsid.val[1]) || | |
238 | __put_user(kbuf->f_frsize, &ubuf->f_frsize) || | |
1448c721 EB |
239 | __put_user(kbuf->f_flags, &ubuf->f_flags) || |
240 | __clear_user(ubuf->f_spare, sizeof(ubuf->f_spare))) | |
1da177e4 LT |
241 | return -EFAULT; |
242 | return 0; | |
243 | } | |
244 | ||
245 | /* | |
974d879e | 246 | * The following statfs calls are copies of code from fs/statfs.c and |
1da177e4 LT |
247 | * should be checked against those from time to time |
248 | */ | |
2d8f3038 | 249 | asmlinkage long compat_sys_statfs(const char __user *pathname, struct compat_statfs __user *buf) |
1da177e4 | 250 | { |
c8b91acc AV |
251 | struct kstatfs tmp; |
252 | int error = user_statfs(pathname, &tmp); | |
253 | if (!error) | |
254 | error = put_compat_statfs(buf, &tmp); | |
1da177e4 LT |
255 | return error; |
256 | } | |
257 | ||
258 | asmlinkage long compat_sys_fstatfs(unsigned int fd, struct compat_statfs __user *buf) | |
259 | { | |
1da177e4 | 260 | struct kstatfs tmp; |
c8b91acc | 261 | int error = fd_statfs(fd, &tmp); |
86e07ce7 DG |
262 | if (!error) |
263 | error = put_compat_statfs(buf, &tmp); | |
1da177e4 LT |
264 | return error; |
265 | } | |
266 | ||
267 | static int put_compat_statfs64(struct compat_statfs64 __user *ubuf, struct kstatfs *kbuf) | |
268 | { | |
269 | if (sizeof ubuf->f_blocks == 4) { | |
f4a67cce JT |
270 | if ((kbuf->f_blocks | kbuf->f_bfree | kbuf->f_bavail | |
271 | kbuf->f_bsize | kbuf->f_frsize) & 0xffffffff00000000ULL) | |
1da177e4 LT |
272 | return -EOVERFLOW; |
273 | /* f_files and f_ffree may be -1; it's okay | |
274 | * to stuff that into 32 bits */ | |
275 | if (kbuf->f_files != 0xffffffffffffffffULL | |
276 | && (kbuf->f_files & 0xffffffff00000000ULL)) | |
277 | return -EOVERFLOW; | |
278 | if (kbuf->f_ffree != 0xffffffffffffffffULL | |
279 | && (kbuf->f_ffree & 0xffffffff00000000ULL)) | |
280 | return -EOVERFLOW; | |
281 | } | |
282 | if (!access_ok(VERIFY_WRITE, ubuf, sizeof(*ubuf)) || | |
283 | __put_user(kbuf->f_type, &ubuf->f_type) || | |
284 | __put_user(kbuf->f_bsize, &ubuf->f_bsize) || | |
285 | __put_user(kbuf->f_blocks, &ubuf->f_blocks) || | |
286 | __put_user(kbuf->f_bfree, &ubuf->f_bfree) || | |
287 | __put_user(kbuf->f_bavail, &ubuf->f_bavail) || | |
288 | __put_user(kbuf->f_files, &ubuf->f_files) || | |
289 | __put_user(kbuf->f_ffree, &ubuf->f_ffree) || | |
290 | __put_user(kbuf->f_namelen, &ubuf->f_namelen) || | |
291 | __put_user(kbuf->f_fsid.val[0], &ubuf->f_fsid.val[0]) || | |
292 | __put_user(kbuf->f_fsid.val[1], &ubuf->f_fsid.val[1]) || | |
e0bb6bda NK |
293 | __put_user(kbuf->f_frsize, &ubuf->f_frsize) || |
294 | __put_user(kbuf->f_flags, &ubuf->f_flags) || | |
295 | __clear_user(ubuf->f_spare, sizeof(ubuf->f_spare))) | |
1da177e4 LT |
296 | return -EFAULT; |
297 | return 0; | |
298 | } | |
299 | ||
2d8f3038 | 300 | asmlinkage long compat_sys_statfs64(const char __user *pathname, compat_size_t sz, struct compat_statfs64 __user *buf) |
1da177e4 | 301 | { |
c8b91acc | 302 | struct kstatfs tmp; |
1da177e4 LT |
303 | int error; |
304 | ||
305 | if (sz != sizeof(*buf)) | |
306 | return -EINVAL; | |
307 | ||
c8b91acc AV |
308 | error = user_statfs(pathname, &tmp); |
309 | if (!error) | |
310 | error = put_compat_statfs64(buf, &tmp); | |
1da177e4 LT |
311 | return error; |
312 | } | |
313 | ||
314 | asmlinkage long compat_sys_fstatfs64(unsigned int fd, compat_size_t sz, struct compat_statfs64 __user *buf) | |
315 | { | |
1da177e4 LT |
316 | struct kstatfs tmp; |
317 | int error; | |
318 | ||
319 | if (sz != sizeof(*buf)) | |
320 | return -EINVAL; | |
321 | ||
c8b91acc | 322 | error = fd_statfs(fd, &tmp); |
86e07ce7 DG |
323 | if (!error) |
324 | error = put_compat_statfs64(buf, &tmp); | |
1da177e4 LT |
325 | return error; |
326 | } | |
327 | ||
2b1c6bd7 CH |
328 | /* |
329 | * This is a copy of sys_ustat, just dealing with a structure layout. | |
330 | * Given how simple this syscall is that apporach is more maintainable | |
331 | * than the various conversion hacks. | |
332 | */ | |
333 | asmlinkage long compat_sys_ustat(unsigned dev, struct compat_ustat __user *u) | |
334 | { | |
2b1c6bd7 CH |
335 | struct compat_ustat tmp; |
336 | struct kstatfs sbuf; | |
cf31e70d | 337 | int err = vfs_ustat(new_decode_dev(dev), &sbuf); |
2b1c6bd7 CH |
338 | if (err) |
339 | return err; | |
340 | ||
341 | memset(&tmp, 0, sizeof(struct compat_ustat)); | |
342 | tmp.f_tfree = sbuf.f_bfree; | |
343 | tmp.f_tinode = sbuf.f_ffree; | |
344 | if (copy_to_user(u, &tmp, sizeof(struct compat_ustat))) | |
345 | return -EFAULT; | |
346 | return 0; | |
347 | } | |
348 | ||
1da177e4 LT |
349 | static int get_compat_flock(struct flock *kfl, struct compat_flock __user *ufl) |
350 | { | |
351 | if (!access_ok(VERIFY_READ, ufl, sizeof(*ufl)) || | |
352 | __get_user(kfl->l_type, &ufl->l_type) || | |
353 | __get_user(kfl->l_whence, &ufl->l_whence) || | |
354 | __get_user(kfl->l_start, &ufl->l_start) || | |
355 | __get_user(kfl->l_len, &ufl->l_len) || | |
356 | __get_user(kfl->l_pid, &ufl->l_pid)) | |
357 | return -EFAULT; | |
358 | return 0; | |
359 | } | |
360 | ||
361 | static int put_compat_flock(struct flock *kfl, struct compat_flock __user *ufl) | |
362 | { | |
363 | if (!access_ok(VERIFY_WRITE, ufl, sizeof(*ufl)) || | |
364 | __put_user(kfl->l_type, &ufl->l_type) || | |
365 | __put_user(kfl->l_whence, &ufl->l_whence) || | |
366 | __put_user(kfl->l_start, &ufl->l_start) || | |
367 | __put_user(kfl->l_len, &ufl->l_len) || | |
368 | __put_user(kfl->l_pid, &ufl->l_pid)) | |
369 | return -EFAULT; | |
370 | return 0; | |
371 | } | |
372 | ||
373 | #ifndef HAVE_ARCH_GET_COMPAT_FLOCK64 | |
374 | static int get_compat_flock64(struct flock *kfl, struct compat_flock64 __user *ufl) | |
375 | { | |
376 | if (!access_ok(VERIFY_READ, ufl, sizeof(*ufl)) || | |
377 | __get_user(kfl->l_type, &ufl->l_type) || | |
378 | __get_user(kfl->l_whence, &ufl->l_whence) || | |
379 | __get_user(kfl->l_start, &ufl->l_start) || | |
380 | __get_user(kfl->l_len, &ufl->l_len) || | |
381 | __get_user(kfl->l_pid, &ufl->l_pid)) | |
382 | return -EFAULT; | |
383 | return 0; | |
384 | } | |
385 | #endif | |
386 | ||
387 | #ifndef HAVE_ARCH_PUT_COMPAT_FLOCK64 | |
388 | static int put_compat_flock64(struct flock *kfl, struct compat_flock64 __user *ufl) | |
389 | { | |
390 | if (!access_ok(VERIFY_WRITE, ufl, sizeof(*ufl)) || | |
391 | __put_user(kfl->l_type, &ufl->l_type) || | |
392 | __put_user(kfl->l_whence, &ufl->l_whence) || | |
393 | __put_user(kfl->l_start, &ufl->l_start) || | |
394 | __put_user(kfl->l_len, &ufl->l_len) || | |
395 | __put_user(kfl->l_pid, &ufl->l_pid)) | |
396 | return -EFAULT; | |
397 | return 0; | |
398 | } | |
399 | #endif | |
400 | ||
401 | asmlinkage long compat_sys_fcntl64(unsigned int fd, unsigned int cmd, | |
402 | unsigned long arg) | |
403 | { | |
404 | mm_segment_t old_fs; | |
405 | struct flock f; | |
406 | long ret; | |
407 | ||
408 | switch (cmd) { | |
409 | case F_GETLK: | |
410 | case F_SETLK: | |
411 | case F_SETLKW: | |
412 | ret = get_compat_flock(&f, compat_ptr(arg)); | |
413 | if (ret != 0) | |
414 | break; | |
415 | old_fs = get_fs(); | |
416 | set_fs(KERNEL_DS); | |
417 | ret = sys_fcntl(fd, cmd, (unsigned long)&f); | |
418 | set_fs(old_fs); | |
419 | if (cmd == F_GETLK && ret == 0) { | |
ff677f8d | 420 | /* GETLK was successful and we need to return the data... |
2520f14c N |
421 | * but it needs to fit in the compat structure. |
422 | * l_start shouldn't be too big, unless the original | |
423 | * start + end is greater than COMPAT_OFF_T_MAX, in which | |
424 | * case the app was asking for trouble, so we return | |
425 | * -EOVERFLOW in that case. | |
426 | * l_len could be too big, in which case we just truncate it, | |
427 | * and only allow the app to see that part of the conflicting | |
428 | * lock that might make sense to it anyway | |
429 | */ | |
430 | ||
431 | if (f.l_start > COMPAT_OFF_T_MAX) | |
1da177e4 | 432 | ret = -EOVERFLOW; |
2520f14c N |
433 | if (f.l_len > COMPAT_OFF_T_MAX) |
434 | f.l_len = COMPAT_OFF_T_MAX; | |
1da177e4 LT |
435 | if (ret == 0) |
436 | ret = put_compat_flock(&f, compat_ptr(arg)); | |
437 | } | |
438 | break; | |
439 | ||
440 | case F_GETLK64: | |
441 | case F_SETLK64: | |
442 | case F_SETLKW64: | |
443 | ret = get_compat_flock64(&f, compat_ptr(arg)); | |
444 | if (ret != 0) | |
445 | break; | |
446 | old_fs = get_fs(); | |
447 | set_fs(KERNEL_DS); | |
448 | ret = sys_fcntl(fd, (cmd == F_GETLK64) ? F_GETLK : | |
449 | ((cmd == F_SETLK64) ? F_SETLK : F_SETLKW), | |
450 | (unsigned long)&f); | |
451 | set_fs(old_fs); | |
452 | if (cmd == F_GETLK64 && ret == 0) { | |
2520f14c N |
453 | /* need to return lock information - see above for commentary */ |
454 | if (f.l_start > COMPAT_LOFF_T_MAX) | |
1da177e4 | 455 | ret = -EOVERFLOW; |
2520f14c N |
456 | if (f.l_len > COMPAT_LOFF_T_MAX) |
457 | f.l_len = COMPAT_LOFF_T_MAX; | |
1da177e4 LT |
458 | if (ret == 0) |
459 | ret = put_compat_flock64(&f, compat_ptr(arg)); | |
460 | } | |
461 | break; | |
462 | ||
463 | default: | |
464 | ret = sys_fcntl(fd, cmd, arg); | |
465 | break; | |
466 | } | |
467 | return ret; | |
468 | } | |
469 | ||
470 | asmlinkage long compat_sys_fcntl(unsigned int fd, unsigned int cmd, | |
471 | unsigned long arg) | |
472 | { | |
473 | if ((cmd == F_GETLK64) || (cmd == F_SETLK64) || (cmd == F_SETLKW64)) | |
474 | return -EINVAL; | |
475 | return compat_sys_fcntl64(fd, cmd, arg); | |
476 | } | |
477 | ||
478 | asmlinkage long | |
479 | compat_sys_io_setup(unsigned nr_reqs, u32 __user *ctx32p) | |
480 | { | |
481 | long ret; | |
482 | aio_context_t ctx64; | |
483 | ||
484 | mm_segment_t oldfs = get_fs(); | |
485 | if (unlikely(get_user(ctx64, ctx32p))) | |
486 | return -EFAULT; | |
487 | ||
488 | set_fs(KERNEL_DS); | |
489 | /* The __user pointer cast is valid because of the set_fs() */ | |
490 | ret = sys_io_setup(nr_reqs, (aio_context_t __user *) &ctx64); | |
491 | set_fs(oldfs); | |
492 | /* truncating is ok because it's a user address */ | |
493 | if (!ret) | |
494 | ret = put_user((u32) ctx64, ctx32p); | |
495 | return ret; | |
496 | } | |
497 | ||
498 | asmlinkage long | |
499 | compat_sys_io_getevents(aio_context_t ctx_id, | |
500 | unsigned long min_nr, | |
501 | unsigned long nr, | |
502 | struct io_event __user *events, | |
503 | struct compat_timespec __user *timeout) | |
504 | { | |
505 | long ret; | |
506 | struct timespec t; | |
507 | struct timespec __user *ut = NULL; | |
508 | ||
509 | ret = -EFAULT; | |
510 | if (unlikely(!access_ok(VERIFY_WRITE, events, | |
511 | nr * sizeof(struct io_event)))) | |
512 | goto out; | |
513 | if (timeout) { | |
514 | if (get_compat_timespec(&t, timeout)) | |
515 | goto out; | |
516 | ||
517 | ut = compat_alloc_user_space(sizeof(*ut)); | |
518 | if (copy_to_user(ut, &t, sizeof(t)) ) | |
519 | goto out; | |
520 | } | |
521 | ret = sys_io_getevents(ctx_id, min_nr, nr, events, ut); | |
522 | out: | |
523 | return ret; | |
524 | } | |
525 | ||
b8373363 JM |
526 | /* A write operation does a read from user space and vice versa */ |
527 | #define vrfy_dir(type) ((type) == READ ? VERIFY_WRITE : VERIFY_READ) | |
528 | ||
529 | ssize_t compat_rw_copy_check_uvector(int type, | |
530 | const struct compat_iovec __user *uvector, unsigned long nr_segs, | |
531 | unsigned long fast_segs, struct iovec *fast_pointer, | |
ac34ebb3 | 532 | struct iovec **ret_pointer) |
b8373363 JM |
533 | { |
534 | compat_ssize_t tot_len; | |
535 | struct iovec *iov = *ret_pointer = fast_pointer; | |
536 | ssize_t ret = 0; | |
537 | int seg; | |
538 | ||
539 | /* | |
540 | * SuS says "The readv() function *may* fail if the iovcnt argument | |
541 | * was less than or equal to 0, or greater than {IOV_MAX}. Linux has | |
542 | * traditionally returned zero for zero segments, so... | |
543 | */ | |
544 | if (nr_segs == 0) | |
545 | goto out; | |
546 | ||
547 | ret = -EINVAL; | |
548 | if (nr_segs > UIO_MAXIOV || nr_segs < 0) | |
549 | goto out; | |
550 | if (nr_segs > fast_segs) { | |
551 | ret = -ENOMEM; | |
552 | iov = kmalloc(nr_segs*sizeof(struct iovec), GFP_KERNEL); | |
6a5640f1 | 553 | if (iov == NULL) |
b8373363 | 554 | goto out; |
b8373363 JM |
555 | } |
556 | *ret_pointer = iov; | |
557 | ||
8aec0f5d MD |
558 | ret = -EFAULT; |
559 | if (!access_ok(VERIFY_READ, uvector, nr_segs*sizeof(*uvector))) | |
560 | goto out; | |
561 | ||
b8373363 JM |
562 | /* |
563 | * Single unix specification: | |
564 | * We should -EINVAL if an element length is not >= 0 and fitting an | |
435f49a5 | 565 | * ssize_t. |
b8373363 | 566 | * |
435f49a5 LT |
567 | * In Linux, the total length is limited to MAX_RW_COUNT, there is |
568 | * no overflow possibility. | |
b8373363 JM |
569 | */ |
570 | tot_len = 0; | |
571 | ret = -EINVAL; | |
572 | for (seg = 0; seg < nr_segs; seg++) { | |
b8373363 JM |
573 | compat_uptr_t buf; |
574 | compat_ssize_t len; | |
575 | ||
576 | if (__get_user(len, &uvector->iov_len) || | |
577 | __get_user(buf, &uvector->iov_base)) { | |
578 | ret = -EFAULT; | |
579 | goto out; | |
580 | } | |
581 | if (len < 0) /* size_t not fitting in compat_ssize_t .. */ | |
582 | goto out; | |
ac34ebb3 | 583 | if (type >= 0 && |
fcf63409 | 584 | !access_ok(vrfy_dir(type), compat_ptr(buf), len)) { |
b8373363 JM |
585 | ret = -EFAULT; |
586 | goto out; | |
587 | } | |
435f49a5 LT |
588 | if (len > MAX_RW_COUNT - tot_len) |
589 | len = MAX_RW_COUNT - tot_len; | |
590 | tot_len += len; | |
b8373363 JM |
591 | iov->iov_base = compat_ptr(buf); |
592 | iov->iov_len = (compat_size_t) len; | |
593 | uvector++; | |
594 | iov++; | |
595 | } | |
596 | ret = tot_len; | |
597 | ||
598 | out: | |
599 | return ret; | |
600 | } | |
601 | ||
1da177e4 LT |
602 | static inline long |
603 | copy_iocb(long nr, u32 __user *ptr32, struct iocb __user * __user *ptr64) | |
604 | { | |
605 | compat_uptr_t uptr; | |
606 | int i; | |
607 | ||
608 | for (i = 0; i < nr; ++i) { | |
609 | if (get_user(uptr, ptr32 + i)) | |
610 | return -EFAULT; | |
611 | if (put_user(compat_ptr(uptr), ptr64 + i)) | |
612 | return -EFAULT; | |
613 | } | |
614 | return 0; | |
615 | } | |
616 | ||
617 | #define MAX_AIO_SUBMITS (PAGE_SIZE/sizeof(struct iocb *)) | |
618 | ||
619 | asmlinkage long | |
620 | compat_sys_io_submit(aio_context_t ctx_id, int nr, u32 __user *iocb) | |
621 | { | |
622 | struct iocb __user * __user *iocb64; | |
623 | long ret; | |
624 | ||
625 | if (unlikely(nr < 0)) | |
626 | return -EINVAL; | |
627 | ||
628 | if (nr > MAX_AIO_SUBMITS) | |
629 | nr = MAX_AIO_SUBMITS; | |
630 | ||
631 | iocb64 = compat_alloc_user_space(nr * sizeof(*iocb64)); | |
632 | ret = copy_iocb(nr, iocb, iocb64); | |
633 | if (!ret) | |
9d85cba7 | 634 | ret = do_io_submit(ctx_id, nr, iocb64, 1); |
1da177e4 LT |
635 | return ret; |
636 | } | |
637 | ||
638 | struct compat_ncp_mount_data { | |
639 | compat_int_t version; | |
640 | compat_uint_t ncp_fd; | |
202e5979 | 641 | __compat_uid_t mounted_uid; |
1da177e4 LT |
642 | compat_pid_t wdog_pid; |
643 | unsigned char mounted_vol[NCP_VOLNAME_LEN + 1]; | |
644 | compat_uint_t time_out; | |
645 | compat_uint_t retry_count; | |
646 | compat_uint_t flags; | |
202e5979 SR |
647 | __compat_uid_t uid; |
648 | __compat_gid_t gid; | |
1da177e4 LT |
649 | compat_mode_t file_mode; |
650 | compat_mode_t dir_mode; | |
651 | }; | |
652 | ||
653 | struct compat_ncp_mount_data_v4 { | |
654 | compat_int_t version; | |
655 | compat_ulong_t flags; | |
656 | compat_ulong_t mounted_uid; | |
657 | compat_long_t wdog_pid; | |
658 | compat_uint_t ncp_fd; | |
659 | compat_uint_t time_out; | |
660 | compat_uint_t retry_count; | |
661 | compat_ulong_t uid; | |
662 | compat_ulong_t gid; | |
663 | compat_ulong_t file_mode; | |
664 | compat_ulong_t dir_mode; | |
665 | }; | |
666 | ||
667 | static void *do_ncp_super_data_conv(void *raw_data) | |
668 | { | |
669 | int version = *(unsigned int *)raw_data; | |
670 | ||
671 | if (version == 3) { | |
672 | struct compat_ncp_mount_data *c_n = raw_data; | |
673 | struct ncp_mount_data *n = raw_data; | |
674 | ||
675 | n->dir_mode = c_n->dir_mode; | |
676 | n->file_mode = c_n->file_mode; | |
677 | n->gid = c_n->gid; | |
678 | n->uid = c_n->uid; | |
679 | memmove (n->mounted_vol, c_n->mounted_vol, (sizeof (c_n->mounted_vol) + 3 * sizeof (unsigned int))); | |
680 | n->wdog_pid = c_n->wdog_pid; | |
681 | n->mounted_uid = c_n->mounted_uid; | |
682 | } else if (version == 4) { | |
683 | struct compat_ncp_mount_data_v4 *c_n = raw_data; | |
684 | struct ncp_mount_data_v4 *n = raw_data; | |
685 | ||
686 | n->dir_mode = c_n->dir_mode; | |
687 | n->file_mode = c_n->file_mode; | |
688 | n->gid = c_n->gid; | |
689 | n->uid = c_n->uid; | |
690 | n->retry_count = c_n->retry_count; | |
691 | n->time_out = c_n->time_out; | |
692 | n->ncp_fd = c_n->ncp_fd; | |
693 | n->wdog_pid = c_n->wdog_pid; | |
694 | n->mounted_uid = c_n->mounted_uid; | |
695 | n->flags = c_n->flags; | |
696 | } else if (version != 5) { | |
697 | return NULL; | |
698 | } | |
699 | ||
700 | return raw_data; | |
701 | } | |
702 | ||
1da177e4 | 703 | |
9a9947bf DH |
704 | struct compat_nfs_string { |
705 | compat_uint_t len; | |
5fc3e624 | 706 | compat_uptr_t data; |
9a9947bf DH |
707 | }; |
708 | ||
709 | static inline void compat_nfs_string(struct nfs_string *dst, | |
710 | struct compat_nfs_string *src) | |
711 | { | |
712 | dst->data = compat_ptr(src->data); | |
713 | dst->len = src->len; | |
714 | } | |
715 | ||
716 | struct compat_nfs4_mount_data_v1 { | |
717 | compat_int_t version; | |
718 | compat_int_t flags; | |
719 | compat_int_t rsize; | |
720 | compat_int_t wsize; | |
721 | compat_int_t timeo; | |
722 | compat_int_t retrans; | |
723 | compat_int_t acregmin; | |
724 | compat_int_t acregmax; | |
725 | compat_int_t acdirmin; | |
726 | compat_int_t acdirmax; | |
727 | struct compat_nfs_string client_addr; | |
728 | struct compat_nfs_string mnt_path; | |
729 | struct compat_nfs_string hostname; | |
730 | compat_uint_t host_addrlen; | |
5fc3e624 | 731 | compat_uptr_t host_addr; |
9a9947bf DH |
732 | compat_int_t proto; |
733 | compat_int_t auth_flavourlen; | |
5fc3e624 | 734 | compat_uptr_t auth_flavours; |
9a9947bf DH |
735 | }; |
736 | ||
737 | static int do_nfs4_super_data_conv(void *raw_data) | |
738 | { | |
739 | int version = *(compat_uint_t *) raw_data; | |
740 | ||
741 | if (version == 1) { | |
742 | struct compat_nfs4_mount_data_v1 *raw = raw_data; | |
743 | struct nfs4_mount_data *real = raw_data; | |
744 | ||
745 | /* copy the fields backwards */ | |
746 | real->auth_flavours = compat_ptr(raw->auth_flavours); | |
747 | real->auth_flavourlen = raw->auth_flavourlen; | |
748 | real->proto = raw->proto; | |
749 | real->host_addr = compat_ptr(raw->host_addr); | |
750 | real->host_addrlen = raw->host_addrlen; | |
751 | compat_nfs_string(&real->hostname, &raw->hostname); | |
752 | compat_nfs_string(&real->mnt_path, &raw->mnt_path); | |
753 | compat_nfs_string(&real->client_addr, &raw->client_addr); | |
754 | real->acdirmax = raw->acdirmax; | |
755 | real->acdirmin = raw->acdirmin; | |
756 | real->acregmax = raw->acregmax; | |
757 | real->acregmin = raw->acregmin; | |
758 | real->retrans = raw->retrans; | |
759 | real->timeo = raw->timeo; | |
760 | real->wsize = raw->wsize; | |
761 | real->rsize = raw->rsize; | |
762 | real->flags = raw->flags; | |
763 | real->version = raw->version; | |
764 | } | |
9a9947bf DH |
765 | |
766 | return 0; | |
767 | } | |
768 | ||
1da177e4 | 769 | #define NCPFS_NAME "ncpfs" |
9a9947bf | 770 | #define NFS4_NAME "nfs4" |
1da177e4 | 771 | |
c7887325 DH |
772 | asmlinkage long compat_sys_mount(const char __user * dev_name, |
773 | const char __user * dir_name, | |
774 | const char __user * type, unsigned long flags, | |
775 | const void __user * data) | |
1da177e4 | 776 | { |
eca6f534 | 777 | char *kernel_type; |
1da177e4 | 778 | unsigned long data_page; |
eca6f534 | 779 | char *kernel_dev; |
91a27b2a | 780 | struct filename *dir; |
1da177e4 LT |
781 | int retval; |
782 | ||
eca6f534 | 783 | retval = copy_mount_string(type, &kernel_type); |
1da177e4 LT |
784 | if (retval < 0) |
785 | goto out; | |
786 | ||
91a27b2a JL |
787 | dir = getname(dir_name); |
788 | retval = PTR_ERR(dir); | |
789 | if (IS_ERR(dir)) | |
1da177e4 LT |
790 | goto out1; |
791 | ||
eca6f534 | 792 | retval = copy_mount_string(dev_name, &kernel_dev); |
1da177e4 LT |
793 | if (retval < 0) |
794 | goto out2; | |
795 | ||
eca6f534 | 796 | retval = copy_mount_options(data, &data_page); |
1da177e4 LT |
797 | if (retval < 0) |
798 | goto out3; | |
799 | ||
800 | retval = -EINVAL; | |
801 | ||
eca6f534 | 802 | if (kernel_type && data_page) { |
2116b7a4 | 803 | if (!strcmp(kernel_type, NCPFS_NAME)) { |
1da177e4 | 804 | do_ncp_super_data_conv((void *)data_page); |
eca6f534 | 805 | } else if (!strcmp(kernel_type, NFS4_NAME)) { |
9a9947bf DH |
806 | if (do_nfs4_super_data_conv((void *) data_page)) |
807 | goto out4; | |
1da177e4 LT |
808 | } |
809 | } | |
810 | ||
91a27b2a | 811 | retval = do_mount(kernel_dev, dir->name, kernel_type, |
1da177e4 | 812 | flags, (void*)data_page); |
1da177e4 | 813 | |
9a9947bf | 814 | out4: |
1da177e4 LT |
815 | free_page(data_page); |
816 | out3: | |
eca6f534 | 817 | kfree(kernel_dev); |
1da177e4 | 818 | out2: |
91a27b2a | 819 | putname(dir); |
1da177e4 | 820 | out1: |
eca6f534 | 821 | kfree(kernel_type); |
1da177e4 LT |
822 | out: |
823 | return retval; | |
824 | } | |
825 | ||
1da177e4 LT |
826 | struct compat_old_linux_dirent { |
827 | compat_ulong_t d_ino; | |
828 | compat_ulong_t d_offset; | |
829 | unsigned short d_namlen; | |
830 | char d_name[1]; | |
831 | }; | |
832 | ||
833 | struct compat_readdir_callback { | |
834 | struct compat_old_linux_dirent __user *dirent; | |
835 | int result; | |
836 | }; | |
837 | ||
838 | static int compat_fillonedir(void *__buf, const char *name, int namlen, | |
afefdbb2 | 839 | loff_t offset, u64 ino, unsigned int d_type) |
1da177e4 LT |
840 | { |
841 | struct compat_readdir_callback *buf = __buf; | |
842 | struct compat_old_linux_dirent __user *dirent; | |
afefdbb2 | 843 | compat_ulong_t d_ino; |
1da177e4 LT |
844 | |
845 | if (buf->result) | |
846 | return -EINVAL; | |
afefdbb2 | 847 | d_ino = ino; |
8f3f655d AV |
848 | if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) { |
849 | buf->result = -EOVERFLOW; | |
afefdbb2 | 850 | return -EOVERFLOW; |
8f3f655d | 851 | } |
1da177e4 LT |
852 | buf->result++; |
853 | dirent = buf->dirent; | |
854 | if (!access_ok(VERIFY_WRITE, dirent, | |
855 | (unsigned long)(dirent->d_name + namlen + 1) - | |
856 | (unsigned long)dirent)) | |
857 | goto efault; | |
afefdbb2 | 858 | if ( __put_user(d_ino, &dirent->d_ino) || |
1da177e4 LT |
859 | __put_user(offset, &dirent->d_offset) || |
860 | __put_user(namlen, &dirent->d_namlen) || | |
861 | __copy_to_user(dirent->d_name, name, namlen) || | |
862 | __put_user(0, dirent->d_name + namlen)) | |
863 | goto efault; | |
864 | return 0; | |
865 | efault: | |
866 | buf->result = -EFAULT; | |
867 | return -EFAULT; | |
868 | } | |
869 | ||
870 | asmlinkage long compat_sys_old_readdir(unsigned int fd, | |
871 | struct compat_old_linux_dirent __user *dirent, unsigned int count) | |
872 | { | |
873 | int error; | |
2903ff01 | 874 | struct fd f = fdget(fd); |
1da177e4 LT |
875 | struct compat_readdir_callback buf; |
876 | ||
2903ff01 | 877 | if (!f.file) |
863ced7f | 878 | return -EBADF; |
1da177e4 LT |
879 | |
880 | buf.result = 0; | |
881 | buf.dirent = dirent; | |
882 | ||
2903ff01 | 883 | error = vfs_readdir(f.file, compat_fillonedir, &buf); |
53c9c5c0 | 884 | if (buf.result) |
1da177e4 LT |
885 | error = buf.result; |
886 | ||
2903ff01 | 887 | fdput(f); |
1da177e4 LT |
888 | return error; |
889 | } | |
890 | ||
891 | struct compat_linux_dirent { | |
892 | compat_ulong_t d_ino; | |
893 | compat_ulong_t d_off; | |
894 | unsigned short d_reclen; | |
895 | char d_name[1]; | |
896 | }; | |
897 | ||
898 | struct compat_getdents_callback { | |
899 | struct compat_linux_dirent __user *current_dir; | |
900 | struct compat_linux_dirent __user *previous; | |
901 | int count; | |
902 | int error; | |
903 | }; | |
904 | ||
905 | static int compat_filldir(void *__buf, const char *name, int namlen, | |
afefdbb2 | 906 | loff_t offset, u64 ino, unsigned int d_type) |
1da177e4 LT |
907 | { |
908 | struct compat_linux_dirent __user * dirent; | |
909 | struct compat_getdents_callback *buf = __buf; | |
afefdbb2 | 910 | compat_ulong_t d_ino; |
85c9fe8f KW |
911 | int reclen = ALIGN(offsetof(struct compat_linux_dirent, d_name) + |
912 | namlen + 2, sizeof(compat_long_t)); | |
1da177e4 LT |
913 | |
914 | buf->error = -EINVAL; /* only used if we fail.. */ | |
915 | if (reclen > buf->count) | |
916 | return -EINVAL; | |
afefdbb2 | 917 | d_ino = ino; |
8f3f655d AV |
918 | if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) { |
919 | buf->error = -EOVERFLOW; | |
afefdbb2 | 920 | return -EOVERFLOW; |
8f3f655d | 921 | } |
1da177e4 LT |
922 | dirent = buf->previous; |
923 | if (dirent) { | |
924 | if (__put_user(offset, &dirent->d_off)) | |
925 | goto efault; | |
926 | } | |
927 | dirent = buf->current_dir; | |
afefdbb2 | 928 | if (__put_user(d_ino, &dirent->d_ino)) |
1da177e4 LT |
929 | goto efault; |
930 | if (__put_user(reclen, &dirent->d_reclen)) | |
931 | goto efault; | |
932 | if (copy_to_user(dirent->d_name, name, namlen)) | |
933 | goto efault; | |
934 | if (__put_user(0, dirent->d_name + namlen)) | |
935 | goto efault; | |
936 | if (__put_user(d_type, (char __user *) dirent + reclen - 1)) | |
937 | goto efault; | |
938 | buf->previous = dirent; | |
939 | dirent = (void __user *)dirent + reclen; | |
940 | buf->current_dir = dirent; | |
941 | buf->count -= reclen; | |
942 | return 0; | |
943 | efault: | |
944 | buf->error = -EFAULT; | |
945 | return -EFAULT; | |
946 | } | |
947 | ||
948 | asmlinkage long compat_sys_getdents(unsigned int fd, | |
949 | struct compat_linux_dirent __user *dirent, unsigned int count) | |
950 | { | |
2903ff01 | 951 | struct fd f; |
1da177e4 LT |
952 | struct compat_linux_dirent __user * lastdirent; |
953 | struct compat_getdents_callback buf; | |
954 | int error; | |
955 | ||
1da177e4 | 956 | if (!access_ok(VERIFY_WRITE, dirent, count)) |
863ced7f | 957 | return -EFAULT; |
1da177e4 | 958 | |
2903ff01 AV |
959 | f = fdget(fd); |
960 | if (!f.file) | |
863ced7f | 961 | return -EBADF; |
1da177e4 LT |
962 | |
963 | buf.current_dir = dirent; | |
964 | buf.previous = NULL; | |
965 | buf.count = count; | |
966 | buf.error = 0; | |
967 | ||
2903ff01 | 968 | error = vfs_readdir(f.file, compat_filldir, &buf); |
53c9c5c0 AV |
969 | if (error >= 0) |
970 | error = buf.error; | |
1da177e4 LT |
971 | lastdirent = buf.previous; |
972 | if (lastdirent) { | |
2903ff01 | 973 | if (put_user(f.file->f_pos, &lastdirent->d_off)) |
1da177e4 LT |
974 | error = -EFAULT; |
975 | else | |
976 | error = count - buf.count; | |
977 | } | |
2903ff01 | 978 | fdput(f); |
1da177e4 LT |
979 | return error; |
980 | } | |
981 | ||
982 | #ifndef __ARCH_OMIT_COMPAT_SYS_GETDENTS64 | |
1da177e4 LT |
983 | |
984 | struct compat_getdents_callback64 { | |
985 | struct linux_dirent64 __user *current_dir; | |
986 | struct linux_dirent64 __user *previous; | |
987 | int count; | |
988 | int error; | |
989 | }; | |
990 | ||
991 | static int compat_filldir64(void * __buf, const char * name, int namlen, loff_t offset, | |
afefdbb2 | 992 | u64 ino, unsigned int d_type) |
1da177e4 LT |
993 | { |
994 | struct linux_dirent64 __user *dirent; | |
995 | struct compat_getdents_callback64 *buf = __buf; | |
85c9fe8f KW |
996 | int reclen = ALIGN(offsetof(struct linux_dirent64, d_name) + namlen + 1, |
997 | sizeof(u64)); | |
1da177e4 LT |
998 | u64 off; |
999 | ||
1000 | buf->error = -EINVAL; /* only used if we fail.. */ | |
1001 | if (reclen > buf->count) | |
1002 | return -EINVAL; | |
1003 | dirent = buf->previous; | |
1004 | ||
1005 | if (dirent) { | |
1006 | if (__put_user_unaligned(offset, &dirent->d_off)) | |
1007 | goto efault; | |
1008 | } | |
1009 | dirent = buf->current_dir; | |
1010 | if (__put_user_unaligned(ino, &dirent->d_ino)) | |
1011 | goto efault; | |
1012 | off = 0; | |
1013 | if (__put_user_unaligned(off, &dirent->d_off)) | |
1014 | goto efault; | |
1015 | if (__put_user(reclen, &dirent->d_reclen)) | |
1016 | goto efault; | |
1017 | if (__put_user(d_type, &dirent->d_type)) | |
1018 | goto efault; | |
1019 | if (copy_to_user(dirent->d_name, name, namlen)) | |
1020 | goto efault; | |
1021 | if (__put_user(0, dirent->d_name + namlen)) | |
1022 | goto efault; | |
1023 | buf->previous = dirent; | |
1024 | dirent = (void __user *)dirent + reclen; | |
1025 | buf->current_dir = dirent; | |
1026 | buf->count -= reclen; | |
1027 | return 0; | |
1028 | efault: | |
1029 | buf->error = -EFAULT; | |
1030 | return -EFAULT; | |
1031 | } | |
1032 | ||
1033 | asmlinkage long compat_sys_getdents64(unsigned int fd, | |
1034 | struct linux_dirent64 __user * dirent, unsigned int count) | |
1035 | { | |
2903ff01 | 1036 | struct fd f; |
1da177e4 LT |
1037 | struct linux_dirent64 __user * lastdirent; |
1038 | struct compat_getdents_callback64 buf; | |
1039 | int error; | |
1040 | ||
1da177e4 | 1041 | if (!access_ok(VERIFY_WRITE, dirent, count)) |
863ced7f | 1042 | return -EFAULT; |
1da177e4 | 1043 | |
2903ff01 AV |
1044 | f = fdget(fd); |
1045 | if (!f.file) | |
863ced7f | 1046 | return -EBADF; |
1da177e4 LT |
1047 | |
1048 | buf.current_dir = dirent; | |
1049 | buf.previous = NULL; | |
1050 | buf.count = count; | |
1051 | buf.error = 0; | |
1052 | ||
2903ff01 | 1053 | error = vfs_readdir(f.file, compat_filldir64, &buf); |
53c9c5c0 AV |
1054 | if (error >= 0) |
1055 | error = buf.error; | |
1da177e4 LT |
1056 | lastdirent = buf.previous; |
1057 | if (lastdirent) { | |
2903ff01 | 1058 | typeof(lastdirent->d_off) d_off = f.file->f_pos; |
7116e994 | 1059 | if (__put_user_unaligned(d_off, &lastdirent->d_off)) |
53c9c5c0 AV |
1060 | error = -EFAULT; |
1061 | else | |
1062 | error = count - buf.count; | |
1da177e4 | 1063 | } |
2903ff01 | 1064 | fdput(f); |
1da177e4 LT |
1065 | return error; |
1066 | } | |
1067 | #endif /* ! __ARCH_OMIT_COMPAT_SYS_GETDENTS64 */ | |
1068 | ||
e922efc3 MS |
1069 | /* |
1070 | * Exactly like fs/open.c:sys_open(), except that it doesn't set the | |
1071 | * O_LARGEFILE flag. | |
1072 | */ | |
f482e1b4 | 1073 | COMPAT_SYSCALL_DEFINE3(open, const char __user *, filename, int, flags, umode_t, mode) |
e922efc3 | 1074 | { |
5590ff0d UD |
1075 | return do_sys_open(AT_FDCWD, filename, flags, mode); |
1076 | } | |
1077 | ||
1078 | /* | |
1079 | * Exactly like fs/open.c:sys_openat(), except that it doesn't set the | |
1080 | * O_LARGEFILE flag. | |
1081 | */ | |
f482e1b4 | 1082 | COMPAT_SYSCALL_DEFINE4(openat, int, dfd, const char __user *, filename, int, flags, umode_t, mode) |
5590ff0d UD |
1083 | { |
1084 | return do_sys_open(dfd, filename, flags, mode); | |
e922efc3 MS |
1085 | } |
1086 | ||
1da177e4 LT |
1087 | #define __COMPAT_NFDBITS (8 * sizeof(compat_ulong_t)) |
1088 | ||
b773ad40 TG |
1089 | static int poll_select_copy_remaining(struct timespec *end_time, void __user *p, |
1090 | int timeval, int ret) | |
1091 | { | |
1092 | struct timespec ts; | |
1093 | ||
1094 | if (!p) | |
1095 | return ret; | |
1096 | ||
1097 | if (current->personality & STICKY_TIMEOUTS) | |
1098 | goto sticky; | |
1099 | ||
1100 | /* No update for zero timeout */ | |
1101 | if (!end_time->tv_sec && !end_time->tv_nsec) | |
1102 | return ret; | |
1103 | ||
1104 | ktime_get_ts(&ts); | |
1105 | ts = timespec_sub(*end_time, ts); | |
1106 | if (ts.tv_sec < 0) | |
1107 | ts.tv_sec = ts.tv_nsec = 0; | |
1108 | ||
1109 | if (timeval) { | |
1110 | struct compat_timeval rtv; | |
1111 | ||
1112 | rtv.tv_sec = ts.tv_sec; | |
1113 | rtv.tv_usec = ts.tv_nsec / NSEC_PER_USEC; | |
1114 | ||
1115 | if (!copy_to_user(p, &rtv, sizeof(rtv))) | |
1116 | return ret; | |
1117 | } else { | |
1118 | struct compat_timespec rts; | |
1119 | ||
1120 | rts.tv_sec = ts.tv_sec; | |
1121 | rts.tv_nsec = ts.tv_nsec; | |
1122 | ||
1123 | if (!copy_to_user(p, &rts, sizeof(rts))) | |
1124 | return ret; | |
1125 | } | |
1126 | /* | |
1127 | * If an application puts its timeval in read-only memory, we | |
1128 | * don't want the Linux-specific update to the timeval to | |
1129 | * cause a fault after the select has completed | |
1130 | * successfully. However, because we're not updating the | |
1131 | * timeval, we can't restart the system call. | |
1132 | */ | |
1133 | ||
1134 | sticky: | |
1135 | if (ret == -ERESTARTNOHAND) | |
1136 | ret = -EINTR; | |
1137 | return ret; | |
1138 | } | |
1139 | ||
1da177e4 LT |
1140 | /* |
1141 | * Ooo, nasty. We need here to frob 32-bit unsigned longs to | |
1142 | * 64-bit unsigned longs. | |
1143 | */ | |
858119e1 | 1144 | static |
1da177e4 LT |
1145 | int compat_get_fd_set(unsigned long nr, compat_ulong_t __user *ufdset, |
1146 | unsigned long *fdset) | |
1147 | { | |
022a1692 | 1148 | nr = DIV_ROUND_UP(nr, __COMPAT_NFDBITS); |
1da177e4 LT |
1149 | if (ufdset) { |
1150 | unsigned long odd; | |
1151 | ||
1152 | if (!access_ok(VERIFY_WRITE, ufdset, nr*sizeof(compat_ulong_t))) | |
1153 | return -EFAULT; | |
1154 | ||
1155 | odd = nr & 1UL; | |
1156 | nr &= ~1UL; | |
1157 | while (nr) { | |
1158 | unsigned long h, l; | |
7116e994 HC |
1159 | if (__get_user(l, ufdset) || __get_user(h, ufdset+1)) |
1160 | return -EFAULT; | |
1da177e4 LT |
1161 | ufdset += 2; |
1162 | *fdset++ = h << 32 | l; | |
1163 | nr -= 2; | |
1164 | } | |
7116e994 HC |
1165 | if (odd && __get_user(*fdset, ufdset)) |
1166 | return -EFAULT; | |
1da177e4 LT |
1167 | } else { |
1168 | /* Tricky, must clear full unsigned long in the | |
1169 | * kernel fdset at the end, this makes sure that | |
1170 | * actually happens. | |
1171 | */ | |
1172 | memset(fdset, 0, ((nr + 1) & ~1)*sizeof(compat_ulong_t)); | |
1173 | } | |
1174 | return 0; | |
1175 | } | |
1176 | ||
858119e1 | 1177 | static |
7116e994 HC |
1178 | int compat_set_fd_set(unsigned long nr, compat_ulong_t __user *ufdset, |
1179 | unsigned long *fdset) | |
1da177e4 LT |
1180 | { |
1181 | unsigned long odd; | |
022a1692 | 1182 | nr = DIV_ROUND_UP(nr, __COMPAT_NFDBITS); |
1da177e4 LT |
1183 | |
1184 | if (!ufdset) | |
7116e994 | 1185 | return 0; |
1da177e4 LT |
1186 | |
1187 | odd = nr & 1UL; | |
1188 | nr &= ~1UL; | |
1189 | while (nr) { | |
1190 | unsigned long h, l; | |
1191 | l = *fdset++; | |
1192 | h = l >> 32; | |
7116e994 HC |
1193 | if (__put_user(l, ufdset) || __put_user(h, ufdset+1)) |
1194 | return -EFAULT; | |
1da177e4 LT |
1195 | ufdset += 2; |
1196 | nr -= 2; | |
1197 | } | |
7116e994 HC |
1198 | if (odd && __put_user(*fdset, ufdset)) |
1199 | return -EFAULT; | |
1200 | return 0; | |
1da177e4 LT |
1201 | } |
1202 | ||
1203 | ||
1204 | /* | |
1205 | * This is a virtual copy of sys_select from fs/select.c and probably | |
1206 | * should be compared to it from time to time | |
1207 | */ | |
1da177e4 LT |
1208 | |
1209 | /* | |
1210 | * We can actually return ERESTARTSYS instead of EINTR, but I'd | |
1211 | * like to be certain this leads to no problems. So I return | |
1212 | * EINTR just for safety. | |
1213 | * | |
1214 | * Update: ERESTARTSYS breaks at least the xview clock binary, so | |
1215 | * I'm trying ERESTARTNOHAND which restart only when you want to. | |
1216 | */ | |
9f72949f | 1217 | int compat_core_sys_select(int n, compat_ulong_t __user *inp, |
8ff3e8e8 AV |
1218 | compat_ulong_t __user *outp, compat_ulong_t __user *exp, |
1219 | struct timespec *end_time) | |
1da177e4 LT |
1220 | { |
1221 | fd_set_bits fds; | |
6087b2da | 1222 | void *bits; |
bbea9f69 | 1223 | int size, max_fds, ret = -EINVAL; |
a4531edd | 1224 | struct fdtable *fdt; |
6087b2da | 1225 | long stack_fds[SELECT_STACK_ALLOC/sizeof(long)]; |
1da177e4 | 1226 | |
1da177e4 LT |
1227 | if (n < 0) |
1228 | goto out_nofds; | |
1229 | ||
bbea9f69 | 1230 | /* max_fds can increase, so grab it once to avoid race */ |
ac5b8b6f | 1231 | rcu_read_lock(); |
a4531edd | 1232 | fdt = files_fdtable(current->files); |
bbea9f69 | 1233 | max_fds = fdt->max_fds; |
ac5b8b6f | 1234 | rcu_read_unlock(); |
bbea9f69 VL |
1235 | if (n > max_fds) |
1236 | n = max_fds; | |
1da177e4 LT |
1237 | |
1238 | /* | |
1239 | * We need 6 bitmaps (in/out/ex for both incoming and outgoing), | |
1240 | * since we used fdset we need to allocate memory in units of | |
1241 | * long-words. | |
1242 | */ | |
1da177e4 | 1243 | size = FDS_BYTES(n); |
6087b2da BP |
1244 | bits = stack_fds; |
1245 | if (size > sizeof(stack_fds) / 6) { | |
1246 | bits = kmalloc(6 * size, GFP_KERNEL); | |
1247 | ret = -ENOMEM; | |
1248 | if (!bits) | |
1249 | goto out_nofds; | |
1250 | } | |
1da177e4 LT |
1251 | fds.in = (unsigned long *) bits; |
1252 | fds.out = (unsigned long *) (bits + size); | |
1253 | fds.ex = (unsigned long *) (bits + 2*size); | |
1254 | fds.res_in = (unsigned long *) (bits + 3*size); | |
1255 | fds.res_out = (unsigned long *) (bits + 4*size); | |
1256 | fds.res_ex = (unsigned long *) (bits + 5*size); | |
1257 | ||
1258 | if ((ret = compat_get_fd_set(n, inp, fds.in)) || | |
1259 | (ret = compat_get_fd_set(n, outp, fds.out)) || | |
1260 | (ret = compat_get_fd_set(n, exp, fds.ex))) | |
1261 | goto out; | |
1262 | zero_fd_set(n, fds.res_in); | |
1263 | zero_fd_set(n, fds.res_out); | |
1264 | zero_fd_set(n, fds.res_ex); | |
1265 | ||
8ff3e8e8 | 1266 | ret = do_select(n, &fds, end_time); |
1da177e4 LT |
1267 | |
1268 | if (ret < 0) | |
1269 | goto out; | |
1270 | if (!ret) { | |
1271 | ret = -ERESTARTNOHAND; | |
1272 | if (signal_pending(current)) | |
1273 | goto out; | |
1274 | ret = 0; | |
1275 | } | |
1276 | ||
7116e994 HC |
1277 | if (compat_set_fd_set(n, inp, fds.res_in) || |
1278 | compat_set_fd_set(n, outp, fds.res_out) || | |
1279 | compat_set_fd_set(n, exp, fds.res_ex)) | |
1280 | ret = -EFAULT; | |
1da177e4 | 1281 | out: |
6087b2da BP |
1282 | if (bits != stack_fds) |
1283 | kfree(bits); | |
1da177e4 LT |
1284 | out_nofds: |
1285 | return ret; | |
1286 | } | |
1287 | ||
9f72949f DW |
1288 | asmlinkage long compat_sys_select(int n, compat_ulong_t __user *inp, |
1289 | compat_ulong_t __user *outp, compat_ulong_t __user *exp, | |
1290 | struct compat_timeval __user *tvp) | |
1291 | { | |
8ff3e8e8 | 1292 | struct timespec end_time, *to = NULL; |
9f72949f DW |
1293 | struct compat_timeval tv; |
1294 | int ret; | |
1295 | ||
1296 | if (tvp) { | |
1297 | if (copy_from_user(&tv, tvp, sizeof(tv))) | |
1298 | return -EFAULT; | |
1299 | ||
8ff3e8e8 | 1300 | to = &end_time; |
4d36a9e6 AV |
1301 | if (poll_select_set_timeout(to, |
1302 | tv.tv_sec + (tv.tv_usec / USEC_PER_SEC), | |
1303 | (tv.tv_usec % USEC_PER_SEC) * NSEC_PER_USEC)) | |
9f72949f | 1304 | return -EINVAL; |
9f72949f DW |
1305 | } |
1306 | ||
8ff3e8e8 AV |
1307 | ret = compat_core_sys_select(n, inp, outp, exp, to); |
1308 | ret = poll_select_copy_remaining(&end_time, tvp, 1, ret); | |
9f72949f DW |
1309 | |
1310 | return ret; | |
1311 | } | |
1312 | ||
5d0e5283 CH |
1313 | struct compat_sel_arg_struct { |
1314 | compat_ulong_t n; | |
1315 | compat_uptr_t inp; | |
1316 | compat_uptr_t outp; | |
1317 | compat_uptr_t exp; | |
1318 | compat_uptr_t tvp; | |
1319 | }; | |
1320 | ||
1321 | asmlinkage long compat_sys_old_select(struct compat_sel_arg_struct __user *arg) | |
1322 | { | |
1323 | struct compat_sel_arg_struct a; | |
1324 | ||
1325 | if (copy_from_user(&a, arg, sizeof(a))) | |
1326 | return -EFAULT; | |
1327 | return compat_sys_select(a.n, compat_ptr(a.inp), compat_ptr(a.outp), | |
1328 | compat_ptr(a.exp), compat_ptr(a.tvp)); | |
1329 | } | |
1330 | ||
c9da9f21 | 1331 | static long do_compat_pselect(int n, compat_ulong_t __user *inp, |
9f72949f DW |
1332 | compat_ulong_t __user *outp, compat_ulong_t __user *exp, |
1333 | struct compat_timespec __user *tsp, compat_sigset_t __user *sigmask, | |
1334 | compat_size_t sigsetsize) | |
1335 | { | |
1336 | compat_sigset_t ss32; | |
1337 | sigset_t ksigmask, sigsaved; | |
9f72949f | 1338 | struct compat_timespec ts; |
8ff3e8e8 | 1339 | struct timespec end_time, *to = NULL; |
9f72949f DW |
1340 | int ret; |
1341 | ||
1342 | if (tsp) { | |
1343 | if (copy_from_user(&ts, tsp, sizeof(ts))) | |
1344 | return -EFAULT; | |
1345 | ||
8ff3e8e8 AV |
1346 | to = &end_time; |
1347 | if (poll_select_set_timeout(to, ts.tv_sec, ts.tv_nsec)) | |
9f72949f DW |
1348 | return -EINVAL; |
1349 | } | |
1350 | ||
1351 | if (sigmask) { | |
1352 | if (sigsetsize != sizeof(compat_sigset_t)) | |
1353 | return -EINVAL; | |
1354 | if (copy_from_user(&ss32, sigmask, sizeof(ss32))) | |
1355 | return -EFAULT; | |
1356 | sigset_from_compat(&ksigmask, &ss32); | |
1357 | ||
1358 | sigdelsetmask(&ksigmask, sigmask(SIGKILL)|sigmask(SIGSTOP)); | |
1359 | sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved); | |
1360 | } | |
1361 | ||
8ff3e8e8 AV |
1362 | ret = compat_core_sys_select(n, inp, outp, exp, to); |
1363 | ret = poll_select_copy_remaining(&end_time, tsp, 0, ret); | |
9f72949f DW |
1364 | |
1365 | if (ret == -ERESTARTNOHAND) { | |
1366 | /* | |
1367 | * Don't restore the signal mask yet. Let do_signal() deliver | |
1368 | * the signal on the way back to userspace, before the signal | |
1369 | * mask is restored. | |
1370 | */ | |
1371 | if (sigmask) { | |
1372 | memcpy(¤t->saved_sigmask, &sigsaved, | |
1373 | sizeof(sigsaved)); | |
4e4c22c7 | 1374 | set_restore_sigmask(); |
9f72949f DW |
1375 | } |
1376 | } else if (sigmask) | |
1377 | sigprocmask(SIG_SETMASK, &sigsaved, NULL); | |
1378 | ||
1379 | return ret; | |
1380 | } | |
1381 | ||
1382 | asmlinkage long compat_sys_pselect6(int n, compat_ulong_t __user *inp, | |
1383 | compat_ulong_t __user *outp, compat_ulong_t __user *exp, | |
1384 | struct compat_timespec __user *tsp, void __user *sig) | |
1385 | { | |
1386 | compat_size_t sigsetsize = 0; | |
1387 | compat_uptr_t up = 0; | |
1388 | ||
1389 | if (sig) { | |
1390 | if (!access_ok(VERIFY_READ, sig, | |
1391 | sizeof(compat_uptr_t)+sizeof(compat_size_t)) || | |
1392 | __get_user(up, (compat_uptr_t __user *)sig) || | |
1393 | __get_user(sigsetsize, | |
1394 | (compat_size_t __user *)(sig+sizeof(up)))) | |
1395 | return -EFAULT; | |
1396 | } | |
c9da9f21 HC |
1397 | return do_compat_pselect(n, inp, outp, exp, tsp, compat_ptr(up), |
1398 | sigsetsize); | |
9f72949f DW |
1399 | } |
1400 | ||
1401 | asmlinkage long compat_sys_ppoll(struct pollfd __user *ufds, | |
1402 | unsigned int nfds, struct compat_timespec __user *tsp, | |
1403 | const compat_sigset_t __user *sigmask, compat_size_t sigsetsize) | |
1404 | { | |
1405 | compat_sigset_t ss32; | |
1406 | sigset_t ksigmask, sigsaved; | |
1407 | struct compat_timespec ts; | |
8ff3e8e8 | 1408 | struct timespec end_time, *to = NULL; |
9f72949f DW |
1409 | int ret; |
1410 | ||
1411 | if (tsp) { | |
1412 | if (copy_from_user(&ts, tsp, sizeof(ts))) | |
1413 | return -EFAULT; | |
1414 | ||
8ff3e8e8 AV |
1415 | to = &end_time; |
1416 | if (poll_select_set_timeout(to, ts.tv_sec, ts.tv_nsec)) | |
1417 | return -EINVAL; | |
9f72949f DW |
1418 | } |
1419 | ||
1420 | if (sigmask) { | |
3835a9bd | 1421 | if (sigsetsize != sizeof(compat_sigset_t)) |
9f72949f DW |
1422 | return -EINVAL; |
1423 | if (copy_from_user(&ss32, sigmask, sizeof(ss32))) | |
1424 | return -EFAULT; | |
1425 | sigset_from_compat(&ksigmask, &ss32); | |
1426 | ||
1427 | sigdelsetmask(&ksigmask, sigmask(SIGKILL)|sigmask(SIGSTOP)); | |
1428 | sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved); | |
1429 | } | |
1430 | ||
8ff3e8e8 | 1431 | ret = do_sys_poll(ufds, nfds, to); |
9f72949f DW |
1432 | |
1433 | /* We can restart this syscall, usually */ | |
1434 | if (ret == -EINTR) { | |
1435 | /* | |
1436 | * Don't restore the signal mask yet. Let do_signal() deliver | |
1437 | * the signal on the way back to userspace, before the signal | |
1438 | * mask is restored. | |
1439 | */ | |
1440 | if (sigmask) { | |
1441 | memcpy(¤t->saved_sigmask, &sigsaved, | |
1442 | sizeof(sigsaved)); | |
4e4c22c7 | 1443 | set_restore_sigmask(); |
9f72949f DW |
1444 | } |
1445 | ret = -ERESTARTNOHAND; | |
1446 | } else if (sigmask) | |
1447 | sigprocmask(SIG_SETMASK, &sigsaved, NULL); | |
1448 | ||
8ff3e8e8 | 1449 | ret = poll_select_copy_remaining(&end_time, tsp, 0, ret); |
9f72949f DW |
1450 | |
1451 | return ret; | |
1452 | } | |
9f72949f | 1453 | |
becfd1f3 AK |
1454 | #ifdef CONFIG_FHANDLE |
1455 | /* | |
1456 | * Exactly like fs/open.c:sys_open_by_handle_at(), except that it | |
1457 | * doesn't set the O_LARGEFILE flag. | |
1458 | */ | |
f482e1b4 AV |
1459 | COMPAT_SYSCALL_DEFINE3(open_by_handle_at, int, mountdirfd, |
1460 | struct file_handle __user *, handle, int, flags) | |
becfd1f3 AK |
1461 | { |
1462 | return do_handle_open(mountdirfd, handle, flags); | |
1463 | } | |
1464 | #endif |