2 * Based on arch/arm/kernel/ptrace.c
5 * edited by Linus Torvalds
6 * ARM modifications Copyright (C) 2000 Russell King
7 * Copyright (C) 2012 ARM Ltd.
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
18 * You should have received a copy of the GNU General Public License
19 * along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include <linux/audit.h>
23 #include <linux/compat.h>
24 #include <linux/kernel.h>
25 #include <linux/sched.h>
27 #include <linux/smp.h>
28 #include <linux/ptrace.h>
29 #include <linux/user.h>
30 #include <linux/seccomp.h>
31 #include <linux/security.h>
32 #include <linux/init.h>
33 #include <linux/signal.h>
34 #include <linux/uaccess.h>
35 #include <linux/perf_event.h>
36 #include <linux/hw_breakpoint.h>
37 #include <linux/regset.h>
38 #include <linux/tracehook.h>
39 #include <linux/elf.h>
41 #include <asm/compat.h>
42 #include <asm/debug-monitors.h>
43 #include <asm/pgtable.h>
44 #include <asm/syscall.h>
45 #include <asm/traps.h>
46 #include <asm/system_misc.h>
48 #define CREATE_TRACE_POINTS
49 #include <trace/events/syscalls.h>
51 struct pt_regs_offset
{
56 #define REG_OFFSET_NAME(r) {.name = #r, .offset = offsetof(struct pt_regs, r)}
57 #define REG_OFFSET_END {.name = NULL, .offset = 0}
58 #define GPR_OFFSET_NAME(r) \
59 {.name = "x" #r, .offset = offsetof(struct pt_regs, regs[r])}
61 static const struct pt_regs_offset regoffset_table
[] = {
93 {.name
= "lr", .offset
= offsetof(struct pt_regs
, regs
[30])},
96 REG_OFFSET_NAME(pstate
),
101 * regs_query_register_offset() - query register offset from its name
102 * @name: the name of a register
104 * regs_query_register_offset() returns the offset of a register in struct
105 * pt_regs from its name. If the name is invalid, this returns -EINVAL;
107 int regs_query_register_offset(const char *name
)
109 const struct pt_regs_offset
*roff
;
111 for (roff
= regoffset_table
; roff
->name
!= NULL
; roff
++)
112 if (!strcmp(roff
->name
, name
))
118 * regs_within_kernel_stack() - check the address in the stack
119 * @regs: pt_regs which contains kernel stack pointer.
120 * @addr: address which is checked.
122 * regs_within_kernel_stack() checks @addr is within the kernel stack page(s).
123 * If @addr is within the kernel stack, it returns true. If not, returns false.
125 static bool regs_within_kernel_stack(struct pt_regs
*regs
, unsigned long addr
)
127 return ((addr
& ~(THREAD_SIZE
- 1)) ==
128 (kernel_stack_pointer(regs
) & ~(THREAD_SIZE
- 1))) ||
129 on_irq_stack(addr
, raw_smp_processor_id());
133 * regs_get_kernel_stack_nth() - get Nth entry of the stack
134 * @regs: pt_regs which contains kernel stack pointer.
135 * @n: stack entry number.
137 * regs_get_kernel_stack_nth() returns @n th entry of the kernel stack which
138 * is specified by @regs. If the @n th entry is NOT in the kernel stack,
141 unsigned long regs_get_kernel_stack_nth(struct pt_regs
*regs
, unsigned int n
)
143 unsigned long *addr
= (unsigned long *)kernel_stack_pointer(regs
);
146 if (regs_within_kernel_stack(regs
, (unsigned long)addr
))
153 * TODO: does not yet catch signals sent when the child dies.
154 * in exit.c or in signal.c.
158 * Called by kernel/ptrace.c when detaching..
160 void ptrace_disable(struct task_struct
*child
)
163 * This would be better off in core code, but PTRACE_DETACH has
164 * grown its fair share of arch-specific worts and changing it
165 * is likely to cause regressions on obscure architectures.
167 user_disable_single_step(child
);
170 #ifdef CONFIG_HAVE_HW_BREAKPOINT
172 * Handle hitting a HW-breakpoint.
174 static void ptrace_hbptriggered(struct perf_event
*bp
,
175 struct perf_sample_data
*data
,
176 struct pt_regs
*regs
)
178 struct arch_hw_breakpoint
*bkpt
= counter_arch_bp(bp
);
182 .si_code
= TRAP_HWBKPT
,
183 .si_addr
= (void __user
*)(bkpt
->trigger
),
189 if (!is_compat_task())
192 for (i
= 0; i
< ARM_MAX_BRP
; ++i
) {
193 if (current
->thread
.debug
.hbp_break
[i
] == bp
) {
194 info
.si_errno
= (i
<< 1) + 1;
199 for (i
= 0; i
< ARM_MAX_WRP
; ++i
) {
200 if (current
->thread
.debug
.hbp_watch
[i
] == bp
) {
201 info
.si_errno
= -((i
<< 1) + 1);
208 force_sig_info(SIGTRAP
, &info
, current
);
212 * Unregister breakpoints from this task and reset the pointers in
215 void flush_ptrace_hw_breakpoint(struct task_struct
*tsk
)
218 struct thread_struct
*t
= &tsk
->thread
;
220 for (i
= 0; i
< ARM_MAX_BRP
; i
++) {
221 if (t
->debug
.hbp_break
[i
]) {
222 unregister_hw_breakpoint(t
->debug
.hbp_break
[i
]);
223 t
->debug
.hbp_break
[i
] = NULL
;
227 for (i
= 0; i
< ARM_MAX_WRP
; i
++) {
228 if (t
->debug
.hbp_watch
[i
]) {
229 unregister_hw_breakpoint(t
->debug
.hbp_watch
[i
]);
230 t
->debug
.hbp_watch
[i
] = NULL
;
235 void ptrace_hw_copy_thread(struct task_struct
*tsk
)
237 memset(&tsk
->thread
.debug
, 0, sizeof(struct debug_info
));
240 static struct perf_event
*ptrace_hbp_get_event(unsigned int note_type
,
241 struct task_struct
*tsk
,
244 struct perf_event
*bp
= ERR_PTR(-EINVAL
);
247 case NT_ARM_HW_BREAK
:
248 if (idx
< ARM_MAX_BRP
)
249 bp
= tsk
->thread
.debug
.hbp_break
[idx
];
251 case NT_ARM_HW_WATCH
:
252 if (idx
< ARM_MAX_WRP
)
253 bp
= tsk
->thread
.debug
.hbp_watch
[idx
];
260 static int ptrace_hbp_set_event(unsigned int note_type
,
261 struct task_struct
*tsk
,
263 struct perf_event
*bp
)
268 case NT_ARM_HW_BREAK
:
269 if (idx
< ARM_MAX_BRP
) {
270 tsk
->thread
.debug
.hbp_break
[idx
] = bp
;
274 case NT_ARM_HW_WATCH
:
275 if (idx
< ARM_MAX_WRP
) {
276 tsk
->thread
.debug
.hbp_watch
[idx
] = bp
;
285 static struct perf_event
*ptrace_hbp_create(unsigned int note_type
,
286 struct task_struct
*tsk
,
289 struct perf_event
*bp
;
290 struct perf_event_attr attr
;
294 case NT_ARM_HW_BREAK
:
295 type
= HW_BREAKPOINT_X
;
297 case NT_ARM_HW_WATCH
:
298 type
= HW_BREAKPOINT_RW
;
301 return ERR_PTR(-EINVAL
);
304 ptrace_breakpoint_init(&attr
);
307 * Initialise fields to sane defaults
308 * (i.e. values that will pass validation).
311 attr
.bp_len
= HW_BREAKPOINT_LEN_4
;
315 bp
= register_user_hw_breakpoint(&attr
, ptrace_hbptriggered
, NULL
, tsk
);
319 err
= ptrace_hbp_set_event(note_type
, tsk
, idx
, bp
);
326 static int ptrace_hbp_fill_attr_ctrl(unsigned int note_type
,
327 struct arch_hw_breakpoint_ctrl ctrl
,
328 struct perf_event_attr
*attr
)
330 int err
, len
, type
, disabled
= !ctrl
.enabled
;
332 attr
->disabled
= disabled
;
336 err
= arch_bp_generic_fields(ctrl
, &len
, &type
);
341 case NT_ARM_HW_BREAK
:
342 if ((type
& HW_BREAKPOINT_X
) != type
)
345 case NT_ARM_HW_WATCH
:
346 if ((type
& HW_BREAKPOINT_RW
) != type
)
354 attr
->bp_type
= type
;
359 static int ptrace_hbp_get_resource_info(unsigned int note_type
, u32
*info
)
365 case NT_ARM_HW_BREAK
:
366 num
= hw_breakpoint_slots(TYPE_INST
);
368 case NT_ARM_HW_WATCH
:
369 num
= hw_breakpoint_slots(TYPE_DATA
);
375 reg
|= debug_monitors_arch();
383 static int ptrace_hbp_get_ctrl(unsigned int note_type
,
384 struct task_struct
*tsk
,
388 struct perf_event
*bp
= ptrace_hbp_get_event(note_type
, tsk
, idx
);
393 *ctrl
= bp
? encode_ctrl_reg(counter_arch_bp(bp
)->ctrl
) : 0;
397 static int ptrace_hbp_get_addr(unsigned int note_type
,
398 struct task_struct
*tsk
,
402 struct perf_event
*bp
= ptrace_hbp_get_event(note_type
, tsk
, idx
);
407 *addr
= bp
? bp
->attr
.bp_addr
: 0;
411 static struct perf_event
*ptrace_hbp_get_initialised_bp(unsigned int note_type
,
412 struct task_struct
*tsk
,
415 struct perf_event
*bp
= ptrace_hbp_get_event(note_type
, tsk
, idx
);
418 bp
= ptrace_hbp_create(note_type
, tsk
, idx
);
423 static int ptrace_hbp_set_ctrl(unsigned int note_type
,
424 struct task_struct
*tsk
,
429 struct perf_event
*bp
;
430 struct perf_event_attr attr
;
431 struct arch_hw_breakpoint_ctrl ctrl
;
433 bp
= ptrace_hbp_get_initialised_bp(note_type
, tsk
, idx
);
440 decode_ctrl_reg(uctrl
, &ctrl
);
441 err
= ptrace_hbp_fill_attr_ctrl(note_type
, ctrl
, &attr
);
445 return modify_user_hw_breakpoint(bp
, &attr
);
448 static int ptrace_hbp_set_addr(unsigned int note_type
,
449 struct task_struct
*tsk
,
454 struct perf_event
*bp
;
455 struct perf_event_attr attr
;
457 bp
= ptrace_hbp_get_initialised_bp(note_type
, tsk
, idx
);
465 err
= modify_user_hw_breakpoint(bp
, &attr
);
469 #define PTRACE_HBP_ADDR_SZ sizeof(u64)
470 #define PTRACE_HBP_CTRL_SZ sizeof(u32)
471 #define PTRACE_HBP_PAD_SZ sizeof(u32)
473 static int hw_break_get(struct task_struct
*target
,
474 const struct user_regset
*regset
,
475 unsigned int pos
, unsigned int count
,
476 void *kbuf
, void __user
*ubuf
)
478 unsigned int note_type
= regset
->core_note_type
;
479 int ret
, idx
= 0, offset
, limit
;
484 ret
= ptrace_hbp_get_resource_info(note_type
, &info
);
488 ret
= user_regset_copyout(&pos
, &count
, &kbuf
, &ubuf
, &info
, 0,
494 offset
= offsetof(struct user_hwdebug_state
, pad
);
495 ret
= user_regset_copyout_zero(&pos
, &count
, &kbuf
, &ubuf
, offset
,
496 offset
+ PTRACE_HBP_PAD_SZ
);
500 /* (address, ctrl) registers */
501 offset
= offsetof(struct user_hwdebug_state
, dbg_regs
);
502 limit
= regset
->n
* regset
->size
;
503 while (count
&& offset
< limit
) {
504 ret
= ptrace_hbp_get_addr(note_type
, target
, idx
, &addr
);
507 ret
= user_regset_copyout(&pos
, &count
, &kbuf
, &ubuf
, &addr
,
508 offset
, offset
+ PTRACE_HBP_ADDR_SZ
);
511 offset
+= PTRACE_HBP_ADDR_SZ
;
513 ret
= ptrace_hbp_get_ctrl(note_type
, target
, idx
, &ctrl
);
516 ret
= user_regset_copyout(&pos
, &count
, &kbuf
, &ubuf
, &ctrl
,
517 offset
, offset
+ PTRACE_HBP_CTRL_SZ
);
520 offset
+= PTRACE_HBP_CTRL_SZ
;
522 ret
= user_regset_copyout_zero(&pos
, &count
, &kbuf
, &ubuf
,
524 offset
+ PTRACE_HBP_PAD_SZ
);
527 offset
+= PTRACE_HBP_PAD_SZ
;
534 static int hw_break_set(struct task_struct
*target
,
535 const struct user_regset
*regset
,
536 unsigned int pos
, unsigned int count
,
537 const void *kbuf
, const void __user
*ubuf
)
539 unsigned int note_type
= regset
->core_note_type
;
540 int ret
, idx
= 0, offset
, limit
;
544 /* Resource info and pad */
545 offset
= offsetof(struct user_hwdebug_state
, dbg_regs
);
546 ret
= user_regset_copyin_ignore(&pos
, &count
, &kbuf
, &ubuf
, 0, offset
);
550 /* (address, ctrl) registers */
551 limit
= regset
->n
* regset
->size
;
552 while (count
&& offset
< limit
) {
553 ret
= user_regset_copyin(&pos
, &count
, &kbuf
, &ubuf
, &addr
,
554 offset
, offset
+ PTRACE_HBP_ADDR_SZ
);
557 ret
= ptrace_hbp_set_addr(note_type
, target
, idx
, addr
);
560 offset
+= PTRACE_HBP_ADDR_SZ
;
562 ret
= user_regset_copyin(&pos
, &count
, &kbuf
, &ubuf
, &ctrl
,
563 offset
, offset
+ PTRACE_HBP_CTRL_SZ
);
566 ret
= ptrace_hbp_set_ctrl(note_type
, target
, idx
, ctrl
);
569 offset
+= PTRACE_HBP_CTRL_SZ
;
571 ret
= user_regset_copyin_ignore(&pos
, &count
, &kbuf
, &ubuf
,
573 offset
+ PTRACE_HBP_PAD_SZ
);
576 offset
+= PTRACE_HBP_PAD_SZ
;
582 #endif /* CONFIG_HAVE_HW_BREAKPOINT */
584 static int gpr_get(struct task_struct
*target
,
585 const struct user_regset
*regset
,
586 unsigned int pos
, unsigned int count
,
587 void *kbuf
, void __user
*ubuf
)
589 struct user_pt_regs
*uregs
= &task_pt_regs(target
)->user_regs
;
590 return user_regset_copyout(&pos
, &count
, &kbuf
, &ubuf
, uregs
, 0, -1);
593 static int gpr_set(struct task_struct
*target
, const struct user_regset
*regset
,
594 unsigned int pos
, unsigned int count
,
595 const void *kbuf
, const void __user
*ubuf
)
598 struct user_pt_regs newregs
;
600 ret
= user_regset_copyin(&pos
, &count
, &kbuf
, &ubuf
, &newregs
, 0, -1);
604 if (!valid_user_regs(&newregs
, target
))
607 task_pt_regs(target
)->user_regs
= newregs
;
612 * TODO: update fp accessors for lazy context switching (sync/flush hwstate)
614 static int fpr_get(struct task_struct
*target
, const struct user_regset
*regset
,
615 unsigned int pos
, unsigned int count
,
616 void *kbuf
, void __user
*ubuf
)
618 struct user_fpsimd_state
*uregs
;
619 uregs
= &target
->thread
.fpsimd_state
.user_fpsimd
;
620 return user_regset_copyout(&pos
, &count
, &kbuf
, &ubuf
, uregs
, 0, -1);
623 static int fpr_set(struct task_struct
*target
, const struct user_regset
*regset
,
624 unsigned int pos
, unsigned int count
,
625 const void *kbuf
, const void __user
*ubuf
)
628 struct user_fpsimd_state newstate
;
630 ret
= user_regset_copyin(&pos
, &count
, &kbuf
, &ubuf
, &newstate
, 0, -1);
634 target
->thread
.fpsimd_state
.user_fpsimd
= newstate
;
635 fpsimd_flush_task_state(target
);
639 static int tls_get(struct task_struct
*target
, const struct user_regset
*regset
,
640 unsigned int pos
, unsigned int count
,
641 void *kbuf
, void __user
*ubuf
)
643 unsigned long *tls
= &target
->thread
.tp_value
;
644 return user_regset_copyout(&pos
, &count
, &kbuf
, &ubuf
, tls
, 0, -1);
647 static int tls_set(struct task_struct
*target
, const struct user_regset
*regset
,
648 unsigned int pos
, unsigned int count
,
649 const void *kbuf
, const void __user
*ubuf
)
654 ret
= user_regset_copyin(&pos
, &count
, &kbuf
, &ubuf
, &tls
, 0, -1);
658 target
->thread
.tp_value
= tls
;
662 static int system_call_get(struct task_struct
*target
,
663 const struct user_regset
*regset
,
664 unsigned int pos
, unsigned int count
,
665 void *kbuf
, void __user
*ubuf
)
667 int syscallno
= task_pt_regs(target
)->syscallno
;
669 return user_regset_copyout(&pos
, &count
, &kbuf
, &ubuf
,
673 static int system_call_set(struct task_struct
*target
,
674 const struct user_regset
*regset
,
675 unsigned int pos
, unsigned int count
,
676 const void *kbuf
, const void __user
*ubuf
)
680 ret
= user_regset_copyin(&pos
, &count
, &kbuf
, &ubuf
, &syscallno
, 0, -1);
684 task_pt_regs(target
)->syscallno
= syscallno
;
688 enum aarch64_regset
{
692 #ifdef CONFIG_HAVE_HW_BREAKPOINT
699 static const struct user_regset aarch64_regsets
[] = {
701 .core_note_type
= NT_PRSTATUS
,
702 .n
= sizeof(struct user_pt_regs
) / sizeof(u64
),
704 .align
= sizeof(u64
),
709 .core_note_type
= NT_PRFPREG
,
710 .n
= sizeof(struct user_fpsimd_state
) / sizeof(u32
),
712 * We pretend we have 32-bit registers because the fpsr and
713 * fpcr are 32-bits wide.
716 .align
= sizeof(u32
),
721 .core_note_type
= NT_ARM_TLS
,
723 .size
= sizeof(void *),
724 .align
= sizeof(void *),
728 #ifdef CONFIG_HAVE_HW_BREAKPOINT
729 [REGSET_HW_BREAK
] = {
730 .core_note_type
= NT_ARM_HW_BREAK
,
731 .n
= sizeof(struct user_hwdebug_state
) / sizeof(u32
),
733 .align
= sizeof(u32
),
737 [REGSET_HW_WATCH
] = {
738 .core_note_type
= NT_ARM_HW_WATCH
,
739 .n
= sizeof(struct user_hwdebug_state
) / sizeof(u32
),
741 .align
= sizeof(u32
),
746 [REGSET_SYSTEM_CALL
] = {
747 .core_note_type
= NT_ARM_SYSTEM_CALL
,
750 .align
= sizeof(int),
751 .get
= system_call_get
,
752 .set
= system_call_set
,
756 static const struct user_regset_view user_aarch64_view
= {
757 .name
= "aarch64", .e_machine
= EM_AARCH64
,
758 .regsets
= aarch64_regsets
, .n
= ARRAY_SIZE(aarch64_regsets
)
762 #include <linux/compat.h>
769 static int compat_gpr_get(struct task_struct
*target
,
770 const struct user_regset
*regset
,
771 unsigned int pos
, unsigned int count
,
772 void *kbuf
, void __user
*ubuf
)
775 unsigned int i
, start
, num_regs
;
777 /* Calculate the number of AArch32 registers contained in count */
778 num_regs
= count
/ regset
->size
;
780 /* Convert pos into an register number */
781 start
= pos
/ regset
->size
;
783 if (start
+ num_regs
> regset
->n
)
786 for (i
= 0; i
< num_regs
; ++i
) {
787 unsigned int idx
= start
+ i
;
792 reg
= task_pt_regs(target
)->pc
;
795 reg
= task_pt_regs(target
)->pstate
;
798 reg
= task_pt_regs(target
)->orig_x0
;
801 reg
= task_pt_regs(target
)->regs
[idx
];
805 memcpy(kbuf
, ®
, sizeof(reg
));
808 ret
= copy_to_user(ubuf
, ®
, sizeof(reg
));
821 static int compat_gpr_set(struct task_struct
*target
,
822 const struct user_regset
*regset
,
823 unsigned int pos
, unsigned int count
,
824 const void *kbuf
, const void __user
*ubuf
)
826 struct pt_regs newregs
;
828 unsigned int i
, start
, num_regs
;
830 /* Calculate the number of AArch32 registers contained in count */
831 num_regs
= count
/ regset
->size
;
833 /* Convert pos into an register number */
834 start
= pos
/ regset
->size
;
836 if (start
+ num_regs
> regset
->n
)
839 newregs
= *task_pt_regs(target
);
841 for (i
= 0; i
< num_regs
; ++i
) {
842 unsigned int idx
= start
+ i
;
846 memcpy(®
, kbuf
, sizeof(reg
));
849 ret
= copy_from_user(®
, ubuf
, sizeof(reg
));
863 newregs
.pstate
= reg
;
866 newregs
.orig_x0
= reg
;
869 newregs
.regs
[idx
] = reg
;
874 if (valid_user_regs(&newregs
.user_regs
, target
))
875 *task_pt_regs(target
) = newregs
;
882 static int compat_vfp_get(struct task_struct
*target
,
883 const struct user_regset
*regset
,
884 unsigned int pos
, unsigned int count
,
885 void *kbuf
, void __user
*ubuf
)
887 struct user_fpsimd_state
*uregs
;
888 compat_ulong_t fpscr
;
891 uregs
= &target
->thread
.fpsimd_state
.user_fpsimd
;
894 * The VFP registers are packed into the fpsimd_state, so they all sit
895 * nicely together for us. We just need to create the fpscr separately.
897 ret
= user_regset_copyout(&pos
, &count
, &kbuf
, &ubuf
, uregs
, 0,
898 VFP_STATE_SIZE
- sizeof(compat_ulong_t
));
901 fpscr
= (uregs
->fpsr
& VFP_FPSCR_STAT_MASK
) |
902 (uregs
->fpcr
& VFP_FPSCR_CTRL_MASK
);
903 ret
= put_user(fpscr
, (compat_ulong_t
*)ubuf
);
909 static int compat_vfp_set(struct task_struct
*target
,
910 const struct user_regset
*regset
,
911 unsigned int pos
, unsigned int count
,
912 const void *kbuf
, const void __user
*ubuf
)
914 struct user_fpsimd_state
*uregs
;
915 compat_ulong_t fpscr
;
918 if (pos
+ count
> VFP_STATE_SIZE
)
921 uregs
= &target
->thread
.fpsimd_state
.user_fpsimd
;
923 ret
= user_regset_copyin(&pos
, &count
, &kbuf
, &ubuf
, uregs
, 0,
924 VFP_STATE_SIZE
- sizeof(compat_ulong_t
));
927 ret
= get_user(fpscr
, (compat_ulong_t
*)ubuf
);
928 uregs
->fpsr
= fpscr
& VFP_FPSCR_STAT_MASK
;
929 uregs
->fpcr
= fpscr
& VFP_FPSCR_CTRL_MASK
;
932 fpsimd_flush_task_state(target
);
936 static int compat_tls_get(struct task_struct
*target
,
937 const struct user_regset
*regset
, unsigned int pos
,
938 unsigned int count
, void *kbuf
, void __user
*ubuf
)
940 compat_ulong_t tls
= (compat_ulong_t
)target
->thread
.tp_value
;
941 return user_regset_copyout(&pos
, &count
, &kbuf
, &ubuf
, &tls
, 0, -1);
944 static int compat_tls_set(struct task_struct
*target
,
945 const struct user_regset
*regset
, unsigned int pos
,
946 unsigned int count
, const void *kbuf
,
947 const void __user
*ubuf
)
952 ret
= user_regset_copyin(&pos
, &count
, &kbuf
, &ubuf
, &tls
, 0, -1);
956 target
->thread
.tp_value
= tls
;
960 static const struct user_regset aarch32_regsets
[] = {
961 [REGSET_COMPAT_GPR
] = {
962 .core_note_type
= NT_PRSTATUS
,
963 .n
= COMPAT_ELF_NGREG
,
964 .size
= sizeof(compat_elf_greg_t
),
965 .align
= sizeof(compat_elf_greg_t
),
966 .get
= compat_gpr_get
,
967 .set
= compat_gpr_set
969 [REGSET_COMPAT_VFP
] = {
970 .core_note_type
= NT_ARM_VFP
,
971 .n
= VFP_STATE_SIZE
/ sizeof(compat_ulong_t
),
972 .size
= sizeof(compat_ulong_t
),
973 .align
= sizeof(compat_ulong_t
),
974 .get
= compat_vfp_get
,
975 .set
= compat_vfp_set
979 static const struct user_regset_view user_aarch32_view
= {
980 .name
= "aarch32", .e_machine
= EM_ARM
,
981 .regsets
= aarch32_regsets
, .n
= ARRAY_SIZE(aarch32_regsets
)
984 static const struct user_regset aarch32_ptrace_regsets
[] = {
986 .core_note_type
= NT_PRSTATUS
,
987 .n
= COMPAT_ELF_NGREG
,
988 .size
= sizeof(compat_elf_greg_t
),
989 .align
= sizeof(compat_elf_greg_t
),
990 .get
= compat_gpr_get
,
991 .set
= compat_gpr_set
994 .core_note_type
= NT_ARM_VFP
,
995 .n
= VFP_STATE_SIZE
/ sizeof(compat_ulong_t
),
996 .size
= sizeof(compat_ulong_t
),
997 .align
= sizeof(compat_ulong_t
),
998 .get
= compat_vfp_get
,
999 .set
= compat_vfp_set
1002 .core_note_type
= NT_ARM_TLS
,
1004 .size
= sizeof(compat_ulong_t
),
1005 .align
= sizeof(compat_ulong_t
),
1006 .get
= compat_tls_get
,
1007 .set
= compat_tls_set
,
1009 #ifdef CONFIG_HAVE_HW_BREAKPOINT
1010 [REGSET_HW_BREAK
] = {
1011 .core_note_type
= NT_ARM_HW_BREAK
,
1012 .n
= sizeof(struct user_hwdebug_state
) / sizeof(u32
),
1013 .size
= sizeof(u32
),
1014 .align
= sizeof(u32
),
1015 .get
= hw_break_get
,
1016 .set
= hw_break_set
,
1018 [REGSET_HW_WATCH
] = {
1019 .core_note_type
= NT_ARM_HW_WATCH
,
1020 .n
= sizeof(struct user_hwdebug_state
) / sizeof(u32
),
1021 .size
= sizeof(u32
),
1022 .align
= sizeof(u32
),
1023 .get
= hw_break_get
,
1024 .set
= hw_break_set
,
1027 [REGSET_SYSTEM_CALL
] = {
1028 .core_note_type
= NT_ARM_SYSTEM_CALL
,
1030 .size
= sizeof(int),
1031 .align
= sizeof(int),
1032 .get
= system_call_get
,
1033 .set
= system_call_set
,
1037 static const struct user_regset_view user_aarch32_ptrace_view
= {
1038 .name
= "aarch32", .e_machine
= EM_ARM
,
1039 .regsets
= aarch32_ptrace_regsets
, .n
= ARRAY_SIZE(aarch32_ptrace_regsets
)
1042 static int compat_ptrace_read_user(struct task_struct
*tsk
, compat_ulong_t off
,
1043 compat_ulong_t __user
*ret
)
1050 if (off
== COMPAT_PT_TEXT_ADDR
)
1051 tmp
= tsk
->mm
->start_code
;
1052 else if (off
== COMPAT_PT_DATA_ADDR
)
1053 tmp
= tsk
->mm
->start_data
;
1054 else if (off
== COMPAT_PT_TEXT_END_ADDR
)
1055 tmp
= tsk
->mm
->end_code
;
1056 else if (off
< sizeof(compat_elf_gregset_t
))
1057 return copy_regset_to_user(tsk
, &user_aarch32_view
,
1058 REGSET_COMPAT_GPR
, off
,
1059 sizeof(compat_ulong_t
), ret
);
1060 else if (off
>= COMPAT_USER_SZ
)
1065 return put_user(tmp
, ret
);
1068 static int compat_ptrace_write_user(struct task_struct
*tsk
, compat_ulong_t off
,
1072 mm_segment_t old_fs
= get_fs();
1074 if (off
& 3 || off
>= COMPAT_USER_SZ
)
1077 if (off
>= sizeof(compat_elf_gregset_t
))
1081 ret
= copy_regset_from_user(tsk
, &user_aarch32_view
,
1082 REGSET_COMPAT_GPR
, off
,
1083 sizeof(compat_ulong_t
),
1090 #ifdef CONFIG_HAVE_HW_BREAKPOINT
1093 * Convert a virtual register number into an index for a thread_info
1094 * breakpoint array. Breakpoints are identified using positive numbers
1095 * whilst watchpoints are negative. The registers are laid out as pairs
1096 * of (address, control), each pair mapping to a unique hw_breakpoint struct.
1097 * Register 0 is reserved for describing resource information.
1099 static int compat_ptrace_hbp_num_to_idx(compat_long_t num
)
1101 return (abs(num
) - 1) >> 1;
1104 static int compat_ptrace_hbp_get_resource_info(u32
*kdata
)
1106 u8 num_brps
, num_wrps
, debug_arch
, wp_len
;
1109 num_brps
= hw_breakpoint_slots(TYPE_INST
);
1110 num_wrps
= hw_breakpoint_slots(TYPE_DATA
);
1112 debug_arch
= debug_monitors_arch();
1126 static int compat_ptrace_hbp_get(unsigned int note_type
,
1127 struct task_struct
*tsk
,
1134 int err
, idx
= compat_ptrace_hbp_num_to_idx(num
);;
1137 err
= ptrace_hbp_get_addr(note_type
, tsk
, idx
, &addr
);
1140 err
= ptrace_hbp_get_ctrl(note_type
, tsk
, idx
, &ctrl
);
1147 static int compat_ptrace_hbp_set(unsigned int note_type
,
1148 struct task_struct
*tsk
,
1155 int err
, idx
= compat_ptrace_hbp_num_to_idx(num
);
1159 err
= ptrace_hbp_set_addr(note_type
, tsk
, idx
, addr
);
1162 err
= ptrace_hbp_set_ctrl(note_type
, tsk
, idx
, ctrl
);
1168 static int compat_ptrace_gethbpregs(struct task_struct
*tsk
, compat_long_t num
,
1169 compat_ulong_t __user
*data
)
1173 mm_segment_t old_fs
= get_fs();
1178 ret
= compat_ptrace_hbp_get(NT_ARM_HW_WATCH
, tsk
, num
, &kdata
);
1180 } else if (num
== 0) {
1181 ret
= compat_ptrace_hbp_get_resource_info(&kdata
);
1184 ret
= compat_ptrace_hbp_get(NT_ARM_HW_BREAK
, tsk
, num
, &kdata
);
1189 ret
= put_user(kdata
, data
);
1194 static int compat_ptrace_sethbpregs(struct task_struct
*tsk
, compat_long_t num
,
1195 compat_ulong_t __user
*data
)
1199 mm_segment_t old_fs
= get_fs();
1204 ret
= get_user(kdata
, data
);
1210 ret
= compat_ptrace_hbp_set(NT_ARM_HW_WATCH
, tsk
, num
, &kdata
);
1212 ret
= compat_ptrace_hbp_set(NT_ARM_HW_BREAK
, tsk
, num
, &kdata
);
1217 #endif /* CONFIG_HAVE_HW_BREAKPOINT */
1219 long compat_arch_ptrace(struct task_struct
*child
, compat_long_t request
,
1220 compat_ulong_t caddr
, compat_ulong_t cdata
)
1222 unsigned long addr
= caddr
;
1223 unsigned long data
= cdata
;
1224 void __user
*datap
= compat_ptr(data
);
1228 case PTRACE_PEEKUSR
:
1229 ret
= compat_ptrace_read_user(child
, addr
, datap
);
1232 case PTRACE_POKEUSR
:
1233 ret
= compat_ptrace_write_user(child
, addr
, data
);
1236 case COMPAT_PTRACE_GETREGS
:
1237 ret
= copy_regset_to_user(child
,
1240 0, sizeof(compat_elf_gregset_t
),
1244 case COMPAT_PTRACE_SETREGS
:
1245 ret
= copy_regset_from_user(child
,
1248 0, sizeof(compat_elf_gregset_t
),
1252 case COMPAT_PTRACE_GET_THREAD_AREA
:
1253 ret
= put_user((compat_ulong_t
)child
->thread
.tp_value
,
1254 (compat_ulong_t __user
*)datap
);
1257 case COMPAT_PTRACE_SET_SYSCALL
:
1258 task_pt_regs(child
)->syscallno
= data
;
1262 case COMPAT_PTRACE_GETVFPREGS
:
1263 ret
= copy_regset_to_user(child
,
1270 case COMPAT_PTRACE_SETVFPREGS
:
1271 ret
= copy_regset_from_user(child
,
1278 #ifdef CONFIG_HAVE_HW_BREAKPOINT
1279 case COMPAT_PTRACE_GETHBPREGS
:
1280 ret
= compat_ptrace_gethbpregs(child
, addr
, datap
);
1283 case COMPAT_PTRACE_SETHBPREGS
:
1284 ret
= compat_ptrace_sethbpregs(child
, addr
, datap
);
1289 ret
= compat_ptrace_request(child
, request
, addr
,
1296 #endif /* CONFIG_COMPAT */
1298 const struct user_regset_view
*task_user_regset_view(struct task_struct
*task
)
1300 #ifdef CONFIG_COMPAT
1302 * Core dumping of 32-bit tasks or compat ptrace requests must use the
1303 * user_aarch32_view compatible with arm32. Native ptrace requests on
1304 * 32-bit children use an extended user_aarch32_ptrace_view to allow
1305 * access to the TLS register.
1307 if (is_compat_task())
1308 return &user_aarch32_view
;
1309 else if (is_compat_thread(task_thread_info(task
)))
1310 return &user_aarch32_ptrace_view
;
1312 return &user_aarch64_view
;
1315 long arch_ptrace(struct task_struct
*child
, long request
,
1316 unsigned long addr
, unsigned long data
)
1318 return ptrace_request(child
, request
, addr
, data
);
1321 enum ptrace_syscall_dir
{
1322 PTRACE_SYSCALL_ENTER
= 0,
1323 PTRACE_SYSCALL_EXIT
,
1326 static void tracehook_report_syscall(struct pt_regs
*regs
,
1327 enum ptrace_syscall_dir dir
)
1330 unsigned long saved_reg
;
1333 * A scratch register (ip(r12) on AArch32, x7 on AArch64) is
1334 * used to denote syscall entry/exit:
1336 regno
= (is_compat_task() ? 12 : 7);
1337 saved_reg
= regs
->regs
[regno
];
1338 regs
->regs
[regno
] = dir
;
1340 if (dir
== PTRACE_SYSCALL_EXIT
)
1341 tracehook_report_syscall_exit(regs
, 0);
1342 else if (tracehook_report_syscall_entry(regs
))
1343 regs
->syscallno
= ~0UL;
1345 regs
->regs
[regno
] = saved_reg
;
1348 asmlinkage
int syscall_trace_enter(struct pt_regs
*regs
)
1350 if (test_thread_flag(TIF_SYSCALL_TRACE
))
1351 tracehook_report_syscall(regs
, PTRACE_SYSCALL_ENTER
);
1353 /* Do the secure computing after ptrace; failures should be fast. */
1354 if (secure_computing(NULL
) == -1)
1357 if (test_thread_flag(TIF_SYSCALL_TRACEPOINT
))
1358 trace_sys_enter(regs
, regs
->syscallno
);
1360 audit_syscall_entry(regs
->syscallno
, regs
->orig_x0
, regs
->regs
[1],
1361 regs
->regs
[2], regs
->regs
[3]);
1363 return regs
->syscallno
;
1366 asmlinkage
void syscall_trace_exit(struct pt_regs
*regs
)
1368 audit_syscall_exit(regs
);
1370 if (test_thread_flag(TIF_SYSCALL_TRACEPOINT
))
1371 trace_sys_exit(regs
, regs_return_value(regs
));
1373 if (test_thread_flag(TIF_SYSCALL_TRACE
))
1374 tracehook_report_syscall(regs
, PTRACE_SYSCALL_EXIT
);
1378 * Bits which are always architecturally RES0 per ARM DDI 0487A.h
1379 * Userspace cannot use these until they have an architectural meaning.
1380 * We also reserve IL for the kernel; SS is handled dynamically.
1382 #define SPSR_EL1_AARCH64_RES0_BITS \
1383 (GENMASK_ULL(63,32) | GENMASK_ULL(27, 22) | GENMASK_ULL(20, 10) | \
1385 #define SPSR_EL1_AARCH32_RES0_BITS \
1386 (GENMASK_ULL(63,32) | GENMASK_ULL(24, 22) | GENMASK_ULL(20,20))
1388 static int valid_compat_regs(struct user_pt_regs
*regs
)
1390 regs
->pstate
&= ~SPSR_EL1_AARCH32_RES0_BITS
;
1392 if (!system_supports_mixed_endian_el0()) {
1393 if (IS_ENABLED(CONFIG_CPU_BIG_ENDIAN
))
1394 regs
->pstate
|= COMPAT_PSR_E_BIT
;
1396 regs
->pstate
&= ~COMPAT_PSR_E_BIT
;
1399 if (user_mode(regs
) && (regs
->pstate
& PSR_MODE32_BIT
) &&
1400 (regs
->pstate
& COMPAT_PSR_A_BIT
) == 0 &&
1401 (regs
->pstate
& COMPAT_PSR_I_BIT
) == 0 &&
1402 (regs
->pstate
& COMPAT_PSR_F_BIT
) == 0) {
1407 * Force PSR to a valid 32-bit EL0t, preserving the same bits as
1410 regs
->pstate
&= COMPAT_PSR_N_BIT
| COMPAT_PSR_Z_BIT
|
1411 COMPAT_PSR_C_BIT
| COMPAT_PSR_V_BIT
|
1412 COMPAT_PSR_Q_BIT
| COMPAT_PSR_IT_MASK
|
1413 COMPAT_PSR_GE_MASK
| COMPAT_PSR_E_BIT
|
1415 regs
->pstate
|= PSR_MODE32_BIT
;
1420 static int valid_native_regs(struct user_pt_regs
*regs
)
1422 regs
->pstate
&= ~SPSR_EL1_AARCH64_RES0_BITS
;
1424 if (user_mode(regs
) && !(regs
->pstate
& PSR_MODE32_BIT
) &&
1425 (regs
->pstate
& PSR_D_BIT
) == 0 &&
1426 (regs
->pstate
& PSR_A_BIT
) == 0 &&
1427 (regs
->pstate
& PSR_I_BIT
) == 0 &&
1428 (regs
->pstate
& PSR_F_BIT
) == 0) {
1432 /* Force PSR to a valid 64-bit EL0t */
1433 regs
->pstate
&= PSR_N_BIT
| PSR_Z_BIT
| PSR_C_BIT
| PSR_V_BIT
;
1439 * Are the current registers suitable for user mode? (used to maintain
1440 * security in signal handlers)
1442 int valid_user_regs(struct user_pt_regs
*regs
, struct task_struct
*task
)
1444 if (!test_tsk_thread_flag(task
, TIF_SINGLESTEP
))
1445 regs
->pstate
&= ~DBG_SPSR_SS
;
1447 if (is_compat_thread(task_thread_info(task
)))
1448 return valid_compat_regs(regs
);
1450 return valid_native_regs(regs
);