| lh | 9ed821d | 2023-04-07 01:36:19 -0700 | [diff] [blame] | 1 | /* | 
|  | 2 | *  linux/fs/compat.c | 
|  | 3 | * | 
|  | 4 | *  Kernel compatibililty routines for e.g. 32 bit syscall support | 
|  | 5 | *  on 64 bit kernels. | 
|  | 6 | * | 
|  | 7 | *  Copyright (C) 2002       Stephen Rothwell, IBM Corporation | 
|  | 8 | *  Copyright (C) 1997-2000  Jakub Jelinek  (jakub@redhat.com) | 
|  | 9 | *  Copyright (C) 1998       Eddie C. Dost  (ecd@skynet.be) | 
|  | 10 | *  Copyright (C) 2001,2002  Andi Kleen, SuSE Labs | 
|  | 11 | *  Copyright (C) 2003       Pavel Machek (pavel@ucw.cz) | 
|  | 12 | * | 
|  | 13 | *  This program is free software; you can redistribute it and/or modify | 
|  | 14 | *  it under the terms of the GNU General Public License version 2 as | 
|  | 15 | *  published by the Free Software Foundation. | 
|  | 16 | */ | 
|  | 17 |  | 
|  | 18 | #include <linux/stddef.h> | 
|  | 19 | #include <linux/kernel.h> | 
|  | 20 | #include <linux/linkage.h> | 
|  | 21 | #include <linux/compat.h> | 
|  | 22 | #include <linux/errno.h> | 
|  | 23 | #include <linux/time.h> | 
|  | 24 | #include <linux/fs.h> | 
|  | 25 | #include <linux/fcntl.h> | 
|  | 26 | #include <linux/namei.h> | 
|  | 27 | #include <linux/file.h> | 
|  | 28 | #include <linux/fdtable.h> | 
|  | 29 | #include <linux/vfs.h> | 
|  | 30 | #include <linux/ioctl.h> | 
|  | 31 | #include <linux/init.h> | 
|  | 32 | #include <linux/ncp_mount.h> | 
|  | 33 | #include <linux/nfs4_mount.h> | 
|  | 34 | #include <linux/syscalls.h> | 
|  | 35 | #include <linux/ctype.h> | 
|  | 36 | #include <linux/dirent.h> | 
|  | 37 | #include <linux/fsnotify.h> | 
|  | 38 | #include <linux/highuid.h> | 
|  | 39 | #include <linux/personality.h> | 
|  | 40 | #include <linux/rwsem.h> | 
|  | 41 | #include <linux/tsacct_kern.h> | 
|  | 42 | #include <linux/security.h> | 
|  | 43 | #include <linux/highmem.h> | 
|  | 44 | #include <linux/signal.h> | 
|  | 45 | #include <linux/poll.h> | 
|  | 46 | #include <linux/mm.h> | 
|  | 47 | #include <linux/eventpoll.h> | 
|  | 48 | #include <linux/fs_struct.h> | 
|  | 49 | #include <linux/slab.h> | 
|  | 50 | #include <linux/pagemap.h> | 
|  | 51 |  | 
|  | 52 | #include <asm/uaccess.h> | 
|  | 53 | #include <asm/mmu_context.h> | 
|  | 54 | #include <asm/ioctls.h> | 
|  | 55 | #include "internal.h" | 
|  | 56 |  | 
|  | 57 | int compat_log = 1; | 
|  | 58 |  | 
|  | 59 | int compat_printk(const char *fmt, ...) | 
|  | 60 | { | 
|  | 61 | va_list ap; | 
|  | 62 | int ret; | 
|  | 63 | if (!compat_log) | 
|  | 64 | return 0; | 
|  | 65 | va_start(ap, fmt); | 
|  | 66 | ret = vprintk(fmt, ap); | 
|  | 67 | va_end(ap); | 
|  | 68 | return ret; | 
|  | 69 | } | 
|  | 70 |  | 
|  | 71 | #include "read_write.h" | 
|  | 72 |  | 
|  | 73 | /* | 
|  | 74 | * Not all architectures have sys_utime, so implement this in terms | 
|  | 75 | * of sys_utimes. | 
|  | 76 | */ | 
|  | 77 | asmlinkage long compat_sys_utime(const char __user *filename, | 
|  | 78 | struct compat_utimbuf __user *t) | 
|  | 79 | { | 
|  | 80 | struct timespec tv[2]; | 
|  | 81 |  | 
|  | 82 | if (t) { | 
|  | 83 | if (get_user(tv[0].tv_sec, &t->actime) || | 
|  | 84 | get_user(tv[1].tv_sec, &t->modtime)) | 
|  | 85 | return -EFAULT; | 
|  | 86 | tv[0].tv_nsec = 0; | 
|  | 87 | tv[1].tv_nsec = 0; | 
|  | 88 | } | 
|  | 89 | return do_utimes(AT_FDCWD, filename, t ? tv : NULL, 0); | 
|  | 90 | } | 
|  | 91 |  | 
|  | 92 | asmlinkage long compat_sys_utimensat(unsigned int dfd, const char __user *filename, struct compat_timespec __user *t, int flags) | 
|  | 93 | { | 
|  | 94 | struct timespec tv[2]; | 
|  | 95 |  | 
|  | 96 | if  (t) { | 
|  | 97 | if (get_compat_timespec(&tv[0], &t[0]) || | 
|  | 98 | get_compat_timespec(&tv[1], &t[1])) | 
|  | 99 | return -EFAULT; | 
|  | 100 |  | 
|  | 101 | if (tv[0].tv_nsec == UTIME_OMIT && tv[1].tv_nsec == UTIME_OMIT) | 
|  | 102 | return 0; | 
|  | 103 | } | 
|  | 104 | return do_utimes(dfd, filename, t ? tv : NULL, flags); | 
|  | 105 | } | 
|  | 106 |  | 
|  | 107 | asmlinkage long compat_sys_futimesat(unsigned int dfd, const char __user *filename, struct compat_timeval __user *t) | 
|  | 108 | { | 
|  | 109 | struct timespec tv[2]; | 
|  | 110 |  | 
|  | 111 | if (t) { | 
|  | 112 | if (get_user(tv[0].tv_sec, &t[0].tv_sec) || | 
|  | 113 | get_user(tv[0].tv_nsec, &t[0].tv_usec) || | 
|  | 114 | get_user(tv[1].tv_sec, &t[1].tv_sec) || | 
|  | 115 | get_user(tv[1].tv_nsec, &t[1].tv_usec)) | 
|  | 116 | return -EFAULT; | 
|  | 117 | if (tv[0].tv_nsec >= 1000000 || tv[0].tv_nsec < 0 || | 
|  | 118 | tv[1].tv_nsec >= 1000000 || tv[1].tv_nsec < 0) | 
|  | 119 | return -EINVAL; | 
|  | 120 | tv[0].tv_nsec *= 1000; | 
|  | 121 | tv[1].tv_nsec *= 1000; | 
|  | 122 | } | 
|  | 123 | return do_utimes(dfd, filename, t ? tv : NULL, 0); | 
|  | 124 | } | 
|  | 125 |  | 
|  | 126 | asmlinkage long compat_sys_utimes(const char __user *filename, struct compat_timeval __user *t) | 
|  | 127 | { | 
|  | 128 | return compat_sys_futimesat(AT_FDCWD, filename, t); | 
|  | 129 | } | 
|  | 130 |  | 
|  | 131 | static int cp_compat_stat(struct kstat *stat, struct compat_stat __user *ubuf) | 
|  | 132 | { | 
|  | 133 | struct compat_stat tmp; | 
|  | 134 |  | 
|  | 135 | if (!old_valid_dev(stat->dev) || !old_valid_dev(stat->rdev)) | 
|  | 136 | return -EOVERFLOW; | 
|  | 137 |  | 
|  | 138 | memset(&tmp, 0, sizeof(tmp)); | 
|  | 139 | tmp.st_dev = old_encode_dev(stat->dev); | 
|  | 140 | tmp.st_ino = stat->ino; | 
|  | 141 | if (sizeof(tmp.st_ino) < sizeof(stat->ino) && tmp.st_ino != stat->ino) | 
|  | 142 | return -EOVERFLOW; | 
|  | 143 | tmp.st_mode = stat->mode; | 
|  | 144 | tmp.st_nlink = stat->nlink; | 
|  | 145 | if (tmp.st_nlink != stat->nlink) | 
|  | 146 | return -EOVERFLOW; | 
|  | 147 | SET_UID(tmp.st_uid, stat->uid); | 
|  | 148 | SET_GID(tmp.st_gid, stat->gid); | 
|  | 149 | tmp.st_rdev = old_encode_dev(stat->rdev); | 
|  | 150 | if ((u64) stat->size > MAX_NON_LFS) | 
|  | 151 | return -EOVERFLOW; | 
|  | 152 | tmp.st_size = stat->size; | 
|  | 153 | tmp.st_atime = stat->atime.tv_sec; | 
|  | 154 | tmp.st_atime_nsec = stat->atime.tv_nsec; | 
|  | 155 | tmp.st_mtime = stat->mtime.tv_sec; | 
|  | 156 | tmp.st_mtime_nsec = stat->mtime.tv_nsec; | 
|  | 157 | tmp.st_ctime = stat->ctime.tv_sec; | 
|  | 158 | tmp.st_ctime_nsec = stat->ctime.tv_nsec; | 
|  | 159 | tmp.st_blocks = stat->blocks; | 
|  | 160 | tmp.st_blksize = stat->blksize; | 
|  | 161 | return copy_to_user(ubuf, &tmp, sizeof(tmp)) ? -EFAULT : 0; | 
|  | 162 | } | 
|  | 163 |  | 
|  | 164 | asmlinkage long compat_sys_newstat(const char __user * filename, | 
|  | 165 | struct compat_stat __user *statbuf) | 
|  | 166 | { | 
|  | 167 | struct kstat stat; | 
|  | 168 | int error; | 
|  | 169 |  | 
|  | 170 | error = vfs_stat(filename, &stat); | 
|  | 171 | if (error) | 
|  | 172 | return error; | 
|  | 173 | return cp_compat_stat(&stat, statbuf); | 
|  | 174 | } | 
|  | 175 |  | 
|  | 176 | asmlinkage long compat_sys_newlstat(const char __user * filename, | 
|  | 177 | struct compat_stat __user *statbuf) | 
|  | 178 | { | 
|  | 179 | struct kstat stat; | 
|  | 180 | int error; | 
|  | 181 |  | 
|  | 182 | error = vfs_lstat(filename, &stat); | 
|  | 183 | if (error) | 
|  | 184 | return error; | 
|  | 185 | return cp_compat_stat(&stat, statbuf); | 
|  | 186 | } | 
|  | 187 |  | 
|  | 188 | #ifndef __ARCH_WANT_STAT64 | 
|  | 189 | asmlinkage long compat_sys_newfstatat(unsigned int dfd, | 
|  | 190 | const char __user *filename, | 
|  | 191 | struct compat_stat __user *statbuf, int flag) | 
|  | 192 | { | 
|  | 193 | struct kstat stat; | 
|  | 194 | int error; | 
|  | 195 |  | 
|  | 196 | error = vfs_fstatat(dfd, filename, &stat, flag); | 
|  | 197 | if (error) | 
|  | 198 | return error; | 
|  | 199 | return cp_compat_stat(&stat, statbuf); | 
|  | 200 | } | 
|  | 201 | #endif | 
|  | 202 |  | 
|  | 203 | asmlinkage long compat_sys_newfstat(unsigned int fd, | 
|  | 204 | struct compat_stat __user * statbuf) | 
|  | 205 | { | 
|  | 206 | struct kstat stat; | 
|  | 207 | int error = vfs_fstat(fd, &stat); | 
|  | 208 |  | 
|  | 209 | if (!error) | 
|  | 210 | error = cp_compat_stat(&stat, statbuf); | 
|  | 211 | return error; | 
|  | 212 | } | 
|  | 213 |  | 
|  | 214 | static int put_compat_statfs(struct compat_statfs __user *ubuf, struct kstatfs *kbuf) | 
|  | 215 | { | 
|  | 216 |  | 
|  | 217 | if (sizeof ubuf->f_blocks == 4) { | 
|  | 218 | if ((kbuf->f_blocks | kbuf->f_bfree | kbuf->f_bavail | | 
|  | 219 | kbuf->f_bsize | kbuf->f_frsize) & 0xffffffff00000000ULL) | 
|  | 220 | return -EOVERFLOW; | 
|  | 221 | /* f_files and f_ffree may be -1; it's okay | 
|  | 222 | * to stuff that into 32 bits */ | 
|  | 223 | if (kbuf->f_files != 0xffffffffffffffffULL | 
|  | 224 | && (kbuf->f_files & 0xffffffff00000000ULL)) | 
|  | 225 | return -EOVERFLOW; | 
|  | 226 | if (kbuf->f_ffree != 0xffffffffffffffffULL | 
|  | 227 | && (kbuf->f_ffree & 0xffffffff00000000ULL)) | 
|  | 228 | return -EOVERFLOW; | 
|  | 229 | } | 
|  | 230 | if (!access_ok(VERIFY_WRITE, ubuf, sizeof(*ubuf)) || | 
|  | 231 | __put_user(kbuf->f_type, &ubuf->f_type) || | 
|  | 232 | __put_user(kbuf->f_bsize, &ubuf->f_bsize) || | 
|  | 233 | __put_user(kbuf->f_blocks, &ubuf->f_blocks) || | 
|  | 234 | __put_user(kbuf->f_bfree, &ubuf->f_bfree) || | 
|  | 235 | __put_user(kbuf->f_bavail, &ubuf->f_bavail) || | 
|  | 236 | __put_user(kbuf->f_files, &ubuf->f_files) || | 
|  | 237 | __put_user(kbuf->f_ffree, &ubuf->f_ffree) || | 
|  | 238 | __put_user(kbuf->f_namelen, &ubuf->f_namelen) || | 
|  | 239 | __put_user(kbuf->f_fsid.val[0], &ubuf->f_fsid.val[0]) || | 
|  | 240 | __put_user(kbuf->f_fsid.val[1], &ubuf->f_fsid.val[1]) || | 
|  | 241 | __put_user(kbuf->f_frsize, &ubuf->f_frsize) || | 
|  | 242 | __put_user(kbuf->f_flags, &ubuf->f_flags) || | 
|  | 243 | __clear_user(ubuf->f_spare, sizeof(ubuf->f_spare))) | 
|  | 244 | return -EFAULT; | 
|  | 245 | return 0; | 
|  | 246 | } | 
|  | 247 |  | 
|  | 248 | /* | 
|  | 249 | * The following statfs calls are copies of code from fs/statfs.c and | 
|  | 250 | * should be checked against those from time to time | 
|  | 251 | */ | 
|  | 252 | asmlinkage long compat_sys_statfs(const char __user *pathname, struct compat_statfs __user *buf) | 
|  | 253 | { | 
|  | 254 | struct kstatfs tmp; | 
|  | 255 | int error = user_statfs(pathname, &tmp); | 
|  | 256 | if (!error) | 
|  | 257 | error = put_compat_statfs(buf, &tmp); | 
|  | 258 | return error; | 
|  | 259 | } | 
|  | 260 |  | 
|  | 261 | asmlinkage long compat_sys_fstatfs(unsigned int fd, struct compat_statfs __user *buf) | 
|  | 262 | { | 
|  | 263 | struct kstatfs tmp; | 
|  | 264 | int error = fd_statfs(fd, &tmp); | 
|  | 265 | if (!error) | 
|  | 266 | error = put_compat_statfs(buf, &tmp); | 
|  | 267 | return error; | 
|  | 268 | } | 
|  | 269 |  | 
|  | 270 | static int put_compat_statfs64(struct compat_statfs64 __user *ubuf, struct kstatfs *kbuf) | 
|  | 271 | { | 
|  | 272 | if (sizeof ubuf->f_blocks == 4) { | 
|  | 273 | if ((kbuf->f_blocks | kbuf->f_bfree | kbuf->f_bavail | | 
|  | 274 | kbuf->f_bsize | kbuf->f_frsize) & 0xffffffff00000000ULL) | 
|  | 275 | return -EOVERFLOW; | 
|  | 276 | /* f_files and f_ffree may be -1; it's okay | 
|  | 277 | * to stuff that into 32 bits */ | 
|  | 278 | if (kbuf->f_files != 0xffffffffffffffffULL | 
|  | 279 | && (kbuf->f_files & 0xffffffff00000000ULL)) | 
|  | 280 | return -EOVERFLOW; | 
|  | 281 | if (kbuf->f_ffree != 0xffffffffffffffffULL | 
|  | 282 | && (kbuf->f_ffree & 0xffffffff00000000ULL)) | 
|  | 283 | return -EOVERFLOW; | 
|  | 284 | } | 
|  | 285 | if (!access_ok(VERIFY_WRITE, ubuf, sizeof(*ubuf)) || | 
|  | 286 | __put_user(kbuf->f_type, &ubuf->f_type) || | 
|  | 287 | __put_user(kbuf->f_bsize, &ubuf->f_bsize) || | 
|  | 288 | __put_user(kbuf->f_blocks, &ubuf->f_blocks) || | 
|  | 289 | __put_user(kbuf->f_bfree, &ubuf->f_bfree) || | 
|  | 290 | __put_user(kbuf->f_bavail, &ubuf->f_bavail) || | 
|  | 291 | __put_user(kbuf->f_files, &ubuf->f_files) || | 
|  | 292 | __put_user(kbuf->f_ffree, &ubuf->f_ffree) || | 
|  | 293 | __put_user(kbuf->f_namelen, &ubuf->f_namelen) || | 
|  | 294 | __put_user(kbuf->f_fsid.val[0], &ubuf->f_fsid.val[0]) || | 
|  | 295 | __put_user(kbuf->f_fsid.val[1], &ubuf->f_fsid.val[1]) || | 
|  | 296 | __put_user(kbuf->f_frsize, &ubuf->f_frsize) || | 
|  | 297 | __put_user(kbuf->f_flags, &ubuf->f_flags) || | 
|  | 298 | __clear_user(ubuf->f_spare, sizeof(ubuf->f_spare))) | 
|  | 299 | return -EFAULT; | 
|  | 300 | return 0; | 
|  | 301 | } | 
|  | 302 |  | 
|  | 303 | asmlinkage long compat_sys_statfs64(const char __user *pathname, compat_size_t sz, struct compat_statfs64 __user *buf) | 
|  | 304 | { | 
|  | 305 | struct kstatfs tmp; | 
|  | 306 | int error; | 
|  | 307 |  | 
|  | 308 | if (sz != sizeof(*buf)) | 
|  | 309 | return -EINVAL; | 
|  | 310 |  | 
|  | 311 | error = user_statfs(pathname, &tmp); | 
|  | 312 | if (!error) | 
|  | 313 | error = put_compat_statfs64(buf, &tmp); | 
|  | 314 | return error; | 
|  | 315 | } | 
|  | 316 |  | 
|  | 317 | asmlinkage long compat_sys_fstatfs64(unsigned int fd, compat_size_t sz, struct compat_statfs64 __user *buf) | 
|  | 318 | { | 
|  | 319 | struct kstatfs tmp; | 
|  | 320 | int error; | 
|  | 321 |  | 
|  | 322 | if (sz != sizeof(*buf)) | 
|  | 323 | return -EINVAL; | 
|  | 324 |  | 
|  | 325 | error = fd_statfs(fd, &tmp); | 
|  | 326 | if (!error) | 
|  | 327 | error = put_compat_statfs64(buf, &tmp); | 
|  | 328 | return error; | 
|  | 329 | } | 
|  | 330 |  | 
|  | 331 | /* | 
|  | 332 | * This is a copy of sys_ustat, just dealing with a structure layout. | 
|  | 333 | * Given how simple this syscall is that apporach is more maintainable | 
|  | 334 | * than the various conversion hacks. | 
|  | 335 | */ | 
|  | 336 | asmlinkage long compat_sys_ustat(unsigned dev, struct compat_ustat __user *u) | 
|  | 337 | { | 
|  | 338 | struct compat_ustat tmp; | 
|  | 339 | struct kstatfs sbuf; | 
|  | 340 | int err = vfs_ustat(new_decode_dev(dev), &sbuf); | 
|  | 341 | if (err) | 
|  | 342 | return err; | 
|  | 343 |  | 
|  | 344 | memset(&tmp, 0, sizeof(struct compat_ustat)); | 
|  | 345 | tmp.f_tfree = sbuf.f_bfree; | 
|  | 346 | tmp.f_tinode = sbuf.f_ffree; | 
|  | 347 | if (copy_to_user(u, &tmp, sizeof(struct compat_ustat))) | 
|  | 348 | return -EFAULT; | 
|  | 349 | return 0; | 
|  | 350 | } | 
|  | 351 |  | 
|  | 352 | static int get_compat_flock(struct flock *kfl, struct compat_flock __user *ufl) | 
|  | 353 | { | 
|  | 354 | if (!access_ok(VERIFY_READ, ufl, sizeof(*ufl)) || | 
|  | 355 | __get_user(kfl->l_type, &ufl->l_type) || | 
|  | 356 | __get_user(kfl->l_whence, &ufl->l_whence) || | 
|  | 357 | __get_user(kfl->l_start, &ufl->l_start) || | 
|  | 358 | __get_user(kfl->l_len, &ufl->l_len) || | 
|  | 359 | __get_user(kfl->l_pid, &ufl->l_pid)) | 
|  | 360 | return -EFAULT; | 
|  | 361 | return 0; | 
|  | 362 | } | 
|  | 363 |  | 
|  | 364 | static int put_compat_flock(struct flock *kfl, struct compat_flock __user *ufl) | 
|  | 365 | { | 
|  | 366 | if (!access_ok(VERIFY_WRITE, ufl, sizeof(*ufl)) || | 
|  | 367 | __put_user(kfl->l_type, &ufl->l_type) || | 
|  | 368 | __put_user(kfl->l_whence, &ufl->l_whence) || | 
|  | 369 | __put_user(kfl->l_start, &ufl->l_start) || | 
|  | 370 | __put_user(kfl->l_len, &ufl->l_len) || | 
|  | 371 | __put_user(kfl->l_pid, &ufl->l_pid)) | 
|  | 372 | return -EFAULT; | 
|  | 373 | return 0; | 
|  | 374 | } | 
|  | 375 |  | 
|  | 376 | #ifndef HAVE_ARCH_GET_COMPAT_FLOCK64 | 
|  | 377 | static int get_compat_flock64(struct flock *kfl, struct compat_flock64 __user *ufl) | 
|  | 378 | { | 
|  | 379 | if (!access_ok(VERIFY_READ, ufl, sizeof(*ufl)) || | 
|  | 380 | __get_user(kfl->l_type, &ufl->l_type) || | 
|  | 381 | __get_user(kfl->l_whence, &ufl->l_whence) || | 
|  | 382 | __get_user(kfl->l_start, &ufl->l_start) || | 
|  | 383 | __get_user(kfl->l_len, &ufl->l_len) || | 
|  | 384 | __get_user(kfl->l_pid, &ufl->l_pid)) | 
|  | 385 | return -EFAULT; | 
|  | 386 | return 0; | 
|  | 387 | } | 
|  | 388 | #endif | 
|  | 389 |  | 
|  | 390 | #ifndef HAVE_ARCH_PUT_COMPAT_FLOCK64 | 
|  | 391 | static int put_compat_flock64(struct flock *kfl, struct compat_flock64 __user *ufl) | 
|  | 392 | { | 
|  | 393 | if (!access_ok(VERIFY_WRITE, ufl, sizeof(*ufl)) || | 
|  | 394 | __put_user(kfl->l_type, &ufl->l_type) || | 
|  | 395 | __put_user(kfl->l_whence, &ufl->l_whence) || | 
|  | 396 | __put_user(kfl->l_start, &ufl->l_start) || | 
|  | 397 | __put_user(kfl->l_len, &ufl->l_len) || | 
|  | 398 | __put_user(kfl->l_pid, &ufl->l_pid)) | 
|  | 399 | return -EFAULT; | 
|  | 400 | return 0; | 
|  | 401 | } | 
|  | 402 | #endif | 
|  | 403 |  | 
|  | 404 | asmlinkage long compat_sys_fcntl64(unsigned int fd, unsigned int cmd, | 
|  | 405 | unsigned long arg) | 
|  | 406 | { | 
|  | 407 | mm_segment_t old_fs; | 
|  | 408 | struct flock f; | 
|  | 409 | long ret; | 
|  | 410 |  | 
|  | 411 | switch (cmd) { | 
|  | 412 | case F_GETLK: | 
|  | 413 | case F_SETLK: | 
|  | 414 | case F_SETLKW: | 
|  | 415 | ret = get_compat_flock(&f, compat_ptr(arg)); | 
|  | 416 | if (ret != 0) | 
|  | 417 | break; | 
|  | 418 | old_fs = get_fs(); | 
|  | 419 | set_fs(KERNEL_DS); | 
|  | 420 | ret = sys_fcntl(fd, cmd, (unsigned long)&f); | 
|  | 421 | set_fs(old_fs); | 
|  | 422 | if (cmd == F_GETLK && ret == 0) { | 
|  | 423 | /* GETLK was successful and we need to return the data... | 
|  | 424 | * but it needs to fit in the compat structure. | 
|  | 425 | * l_start shouldn't be too big, unless the original | 
|  | 426 | * start + end is greater than COMPAT_OFF_T_MAX, in which | 
|  | 427 | * case the app was asking for trouble, so we return | 
|  | 428 | * -EOVERFLOW in that case. | 
|  | 429 | * l_len could be too big, in which case we just truncate it, | 
|  | 430 | * and only allow the app to see that part of the conflicting | 
|  | 431 | * lock that might make sense to it anyway | 
|  | 432 | */ | 
|  | 433 |  | 
|  | 434 | if (f.l_start > COMPAT_OFF_T_MAX) | 
|  | 435 | ret = -EOVERFLOW; | 
|  | 436 | if (f.l_len > COMPAT_OFF_T_MAX) | 
|  | 437 | f.l_len = COMPAT_OFF_T_MAX; | 
|  | 438 | if (ret == 0) | 
|  | 439 | ret = put_compat_flock(&f, compat_ptr(arg)); | 
|  | 440 | } | 
|  | 441 | break; | 
|  | 442 |  | 
|  | 443 | case F_GETLK64: | 
|  | 444 | case F_SETLK64: | 
|  | 445 | case F_SETLKW64: | 
|  | 446 | ret = get_compat_flock64(&f, compat_ptr(arg)); | 
|  | 447 | if (ret != 0) | 
|  | 448 | break; | 
|  | 449 | old_fs = get_fs(); | 
|  | 450 | set_fs(KERNEL_DS); | 
|  | 451 | ret = sys_fcntl(fd, (cmd == F_GETLK64) ? F_GETLK : | 
|  | 452 | ((cmd == F_SETLK64) ? F_SETLK : F_SETLKW), | 
|  | 453 | (unsigned long)&f); | 
|  | 454 | set_fs(old_fs); | 
|  | 455 | if (cmd == F_GETLK64 && ret == 0) { | 
|  | 456 | /* need to return lock information - see above for commentary */ | 
|  | 457 | if (f.l_start > COMPAT_LOFF_T_MAX) | 
|  | 458 | ret = -EOVERFLOW; | 
|  | 459 | if (f.l_len > COMPAT_LOFF_T_MAX) | 
|  | 460 | f.l_len = COMPAT_LOFF_T_MAX; | 
|  | 461 | if (ret == 0) | 
|  | 462 | ret = put_compat_flock64(&f, compat_ptr(arg)); | 
|  | 463 | } | 
|  | 464 | break; | 
|  | 465 |  | 
|  | 466 | default: | 
|  | 467 | ret = sys_fcntl(fd, cmd, arg); | 
|  | 468 | break; | 
|  | 469 | } | 
|  | 470 | return ret; | 
|  | 471 | } | 
|  | 472 |  | 
|  | 473 | asmlinkage long compat_sys_fcntl(unsigned int fd, unsigned int cmd, | 
|  | 474 | unsigned long arg) | 
|  | 475 | { | 
|  | 476 | if ((cmd == F_GETLK64) || (cmd == F_SETLK64) || (cmd == F_SETLKW64)) | 
|  | 477 | return -EINVAL; | 
|  | 478 | return compat_sys_fcntl64(fd, cmd, arg); | 
|  | 479 | } | 
|  | 480 |  | 
|  | 481 | asmlinkage long | 
|  | 482 | compat_sys_io_setup(unsigned nr_reqs, u32 __user *ctx32p) | 
|  | 483 | { | 
|  | 484 | long ret; | 
|  | 485 | aio_context_t ctx64; | 
|  | 486 |  | 
|  | 487 | mm_segment_t oldfs = get_fs(); | 
|  | 488 | if (unlikely(get_user(ctx64, ctx32p))) | 
|  | 489 | return -EFAULT; | 
|  | 490 |  | 
|  | 491 | set_fs(KERNEL_DS); | 
|  | 492 | /* The __user pointer cast is valid because of the set_fs() */ | 
|  | 493 | ret = sys_io_setup(nr_reqs, (aio_context_t __user *) &ctx64); | 
|  | 494 | set_fs(oldfs); | 
|  | 495 | /* truncating is ok because it's a user address */ | 
|  | 496 | if (!ret) | 
|  | 497 | ret = put_user((u32) ctx64, ctx32p); | 
|  | 498 | return ret; | 
|  | 499 | } | 
|  | 500 |  | 
|  | 501 | asmlinkage long | 
|  | 502 | compat_sys_io_getevents(aio_context_t ctx_id, | 
|  | 503 | unsigned long min_nr, | 
|  | 504 | unsigned long nr, | 
|  | 505 | struct io_event __user *events, | 
|  | 506 | struct compat_timespec __user *timeout) | 
|  | 507 | { | 
|  | 508 | long ret; | 
|  | 509 | struct timespec t; | 
|  | 510 | struct timespec __user *ut = NULL; | 
|  | 511 |  | 
|  | 512 | ret = -EFAULT; | 
|  | 513 | if (unlikely(!access_ok(VERIFY_WRITE, events, | 
|  | 514 | nr * sizeof(struct io_event)))) | 
|  | 515 | goto out; | 
|  | 516 | if (timeout) { | 
|  | 517 | if (get_compat_timespec(&t, timeout)) | 
|  | 518 | goto out; | 
|  | 519 |  | 
|  | 520 | ut = compat_alloc_user_space(sizeof(*ut)); | 
|  | 521 | if (copy_to_user(ut, &t, sizeof(t)) ) | 
|  | 522 | goto out; | 
|  | 523 | } | 
|  | 524 | ret = sys_io_getevents(ctx_id, min_nr, nr, events, ut); | 
|  | 525 | out: | 
|  | 526 | return ret; | 
|  | 527 | } | 
|  | 528 |  | 
|  | 529 | /* A write operation does a read from user space and vice versa */ | 
|  | 530 | #define vrfy_dir(type) ((type) == READ ? VERIFY_WRITE : VERIFY_READ) | 
|  | 531 |  | 
|  | 532 | ssize_t compat_rw_copy_check_uvector(int type, | 
|  | 533 | const struct compat_iovec __user *uvector, unsigned long nr_segs, | 
|  | 534 | unsigned long fast_segs, struct iovec *fast_pointer, | 
|  | 535 | struct iovec **ret_pointer, int check_access) | 
|  | 536 | { | 
|  | 537 | compat_ssize_t tot_len; | 
|  | 538 | struct iovec *iov = *ret_pointer = fast_pointer; | 
|  | 539 | ssize_t ret = 0; | 
|  | 540 | int seg; | 
|  | 541 |  | 
|  | 542 | /* | 
|  | 543 | * SuS says "The readv() function *may* fail if the iovcnt argument | 
|  | 544 | * was less than or equal to 0, or greater than {IOV_MAX}.  Linux has | 
|  | 545 | * traditionally returned zero for zero segments, so... | 
|  | 546 | */ | 
|  | 547 | if (nr_segs == 0) | 
|  | 548 | goto out; | 
|  | 549 |  | 
|  | 550 | ret = -EINVAL; | 
|  | 551 | if (nr_segs > UIO_MAXIOV || nr_segs < 0) | 
|  | 552 | goto out; | 
|  | 553 | if (nr_segs > fast_segs) { | 
|  | 554 | ret = -ENOMEM; | 
|  | 555 | iov = kmalloc(nr_segs*sizeof(struct iovec), GFP_KERNEL); | 
|  | 556 | if (iov == NULL) | 
|  | 557 | goto out; | 
|  | 558 | } | 
|  | 559 | *ret_pointer = iov; | 
|  | 560 |  | 
|  | 561 | ret = -EFAULT; | 
|  | 562 | if (!access_ok(VERIFY_READ, uvector, nr_segs*sizeof(*uvector))) | 
|  | 563 | goto out; | 
|  | 564 |  | 
|  | 565 | /* | 
|  | 566 | * Single unix specification: | 
|  | 567 | * We should -EINVAL if an element length is not >= 0 and fitting an | 
|  | 568 | * ssize_t. | 
|  | 569 | * | 
|  | 570 | * In Linux, the total length is limited to MAX_RW_COUNT, there is | 
|  | 571 | * no overflow possibility. | 
|  | 572 | */ | 
|  | 573 | tot_len = 0; | 
|  | 574 | ret = -EINVAL; | 
|  | 575 | for (seg = 0; seg < nr_segs; seg++) { | 
|  | 576 | compat_uptr_t buf; | 
|  | 577 | compat_ssize_t len; | 
|  | 578 |  | 
|  | 579 | if (__get_user(len, &uvector->iov_len) || | 
|  | 580 | __get_user(buf, &uvector->iov_base)) { | 
|  | 581 | ret = -EFAULT; | 
|  | 582 | goto out; | 
|  | 583 | } | 
|  | 584 | if (len < 0)	/* size_t not fitting in compat_ssize_t .. */ | 
|  | 585 | goto out; | 
|  | 586 | if (check_access && | 
|  | 587 | !access_ok(vrfy_dir(type), compat_ptr(buf), len)) { | 
|  | 588 | ret = -EFAULT; | 
|  | 589 | goto out; | 
|  | 590 | } | 
|  | 591 | if (len > MAX_RW_COUNT - tot_len) | 
|  | 592 | len = MAX_RW_COUNT - tot_len; | 
|  | 593 | tot_len += len; | 
|  | 594 | iov->iov_base = compat_ptr(buf); | 
|  | 595 | iov->iov_len = (compat_size_t) len; | 
|  | 596 | uvector++; | 
|  | 597 | iov++; | 
|  | 598 | } | 
|  | 599 | ret = tot_len; | 
|  | 600 |  | 
|  | 601 | out: | 
|  | 602 | return ret; | 
|  | 603 | } | 
|  | 604 |  | 
|  | 605 | static inline long | 
|  | 606 | copy_iocb(long nr, u32 __user *ptr32, struct iocb __user * __user *ptr64) | 
|  | 607 | { | 
|  | 608 | compat_uptr_t uptr; | 
|  | 609 | int i; | 
|  | 610 |  | 
|  | 611 | for (i = 0; i < nr; ++i) { | 
|  | 612 | if (get_user(uptr, ptr32 + i)) | 
|  | 613 | return -EFAULT; | 
|  | 614 | if (put_user(compat_ptr(uptr), ptr64 + i)) | 
|  | 615 | return -EFAULT; | 
|  | 616 | } | 
|  | 617 | return 0; | 
|  | 618 | } | 
|  | 619 |  | 
|  | 620 | #define MAX_AIO_SUBMITS 	(PAGE_SIZE/sizeof(struct iocb *)) | 
|  | 621 |  | 
|  | 622 | asmlinkage long | 
|  | 623 | compat_sys_io_submit(aio_context_t ctx_id, int nr, u32 __user *iocb) | 
|  | 624 | { | 
|  | 625 | struct iocb __user * __user *iocb64; | 
|  | 626 | long ret; | 
|  | 627 |  | 
|  | 628 | if (unlikely(nr < 0)) | 
|  | 629 | return -EINVAL; | 
|  | 630 |  | 
|  | 631 | if (nr > MAX_AIO_SUBMITS) | 
|  | 632 | nr = MAX_AIO_SUBMITS; | 
|  | 633 |  | 
|  | 634 | iocb64 = compat_alloc_user_space(nr * sizeof(*iocb64)); | 
|  | 635 | ret = copy_iocb(nr, iocb, iocb64); | 
|  | 636 | if (!ret) | 
|  | 637 | ret = do_io_submit(ctx_id, nr, iocb64, 1); | 
|  | 638 | return ret; | 
|  | 639 | } | 
|  | 640 |  | 
|  | 641 | struct compat_ncp_mount_data { | 
|  | 642 | compat_int_t version; | 
|  | 643 | compat_uint_t ncp_fd; | 
|  | 644 | __compat_uid_t mounted_uid; | 
|  | 645 | compat_pid_t wdog_pid; | 
|  | 646 | unsigned char mounted_vol[NCP_VOLNAME_LEN + 1]; | 
|  | 647 | compat_uint_t time_out; | 
|  | 648 | compat_uint_t retry_count; | 
|  | 649 | compat_uint_t flags; | 
|  | 650 | __compat_uid_t uid; | 
|  | 651 | __compat_gid_t gid; | 
|  | 652 | compat_mode_t file_mode; | 
|  | 653 | compat_mode_t dir_mode; | 
|  | 654 | }; | 
|  | 655 |  | 
|  | 656 | struct compat_ncp_mount_data_v4 { | 
|  | 657 | compat_int_t version; | 
|  | 658 | compat_ulong_t flags; | 
|  | 659 | compat_ulong_t mounted_uid; | 
|  | 660 | compat_long_t wdog_pid; | 
|  | 661 | compat_uint_t ncp_fd; | 
|  | 662 | compat_uint_t time_out; | 
|  | 663 | compat_uint_t retry_count; | 
|  | 664 | compat_ulong_t uid; | 
|  | 665 | compat_ulong_t gid; | 
|  | 666 | compat_ulong_t file_mode; | 
|  | 667 | compat_ulong_t dir_mode; | 
|  | 668 | }; | 
|  | 669 |  | 
|  | 670 | static void *do_ncp_super_data_conv(void *raw_data) | 
|  | 671 | { | 
|  | 672 | int version = *(unsigned int *)raw_data; | 
|  | 673 |  | 
|  | 674 | if (version == 3) { | 
|  | 675 | struct compat_ncp_mount_data *c_n = raw_data; | 
|  | 676 | struct ncp_mount_data *n = raw_data; | 
|  | 677 |  | 
|  | 678 | n->dir_mode = c_n->dir_mode; | 
|  | 679 | n->file_mode = c_n->file_mode; | 
|  | 680 | n->gid = c_n->gid; | 
|  | 681 | n->uid = c_n->uid; | 
|  | 682 | memmove (n->mounted_vol, c_n->mounted_vol, (sizeof (c_n->mounted_vol) + 3 * sizeof (unsigned int))); | 
|  | 683 | n->wdog_pid = c_n->wdog_pid; | 
|  | 684 | n->mounted_uid = c_n->mounted_uid; | 
|  | 685 | } else if (version == 4) { | 
|  | 686 | struct compat_ncp_mount_data_v4 *c_n = raw_data; | 
|  | 687 | struct ncp_mount_data_v4 *n = raw_data; | 
|  | 688 |  | 
|  | 689 | n->dir_mode = c_n->dir_mode; | 
|  | 690 | n->file_mode = c_n->file_mode; | 
|  | 691 | n->gid = c_n->gid; | 
|  | 692 | n->uid = c_n->uid; | 
|  | 693 | n->retry_count = c_n->retry_count; | 
|  | 694 | n->time_out = c_n->time_out; | 
|  | 695 | n->ncp_fd = c_n->ncp_fd; | 
|  | 696 | n->wdog_pid = c_n->wdog_pid; | 
|  | 697 | n->mounted_uid = c_n->mounted_uid; | 
|  | 698 | n->flags = c_n->flags; | 
|  | 699 | } else if (version != 5) { | 
|  | 700 | return NULL; | 
|  | 701 | } | 
|  | 702 |  | 
|  | 703 | return raw_data; | 
|  | 704 | } | 
|  | 705 |  | 
|  | 706 |  | 
|  | 707 | struct compat_nfs_string { | 
|  | 708 | compat_uint_t len; | 
|  | 709 | compat_uptr_t data; | 
|  | 710 | }; | 
|  | 711 |  | 
|  | 712 | static inline void compat_nfs_string(struct nfs_string *dst, | 
|  | 713 | struct compat_nfs_string *src) | 
|  | 714 | { | 
|  | 715 | dst->data = compat_ptr(src->data); | 
|  | 716 | dst->len = src->len; | 
|  | 717 | } | 
|  | 718 |  | 
|  | 719 | struct compat_nfs4_mount_data_v1 { | 
|  | 720 | compat_int_t version; | 
|  | 721 | compat_int_t flags; | 
|  | 722 | compat_int_t rsize; | 
|  | 723 | compat_int_t wsize; | 
|  | 724 | compat_int_t timeo; | 
|  | 725 | compat_int_t retrans; | 
|  | 726 | compat_int_t acregmin; | 
|  | 727 | compat_int_t acregmax; | 
|  | 728 | compat_int_t acdirmin; | 
|  | 729 | compat_int_t acdirmax; | 
|  | 730 | struct compat_nfs_string client_addr; | 
|  | 731 | struct compat_nfs_string mnt_path; | 
|  | 732 | struct compat_nfs_string hostname; | 
|  | 733 | compat_uint_t host_addrlen; | 
|  | 734 | compat_uptr_t host_addr; | 
|  | 735 | compat_int_t proto; | 
|  | 736 | compat_int_t auth_flavourlen; | 
|  | 737 | compat_uptr_t auth_flavours; | 
|  | 738 | }; | 
|  | 739 |  | 
|  | 740 | static int do_nfs4_super_data_conv(void *raw_data) | 
|  | 741 | { | 
|  | 742 | int version = *(compat_uint_t *) raw_data; | 
|  | 743 |  | 
|  | 744 | if (version == 1) { | 
|  | 745 | struct compat_nfs4_mount_data_v1 *raw = raw_data; | 
|  | 746 | struct nfs4_mount_data *real = raw_data; | 
|  | 747 |  | 
|  | 748 | /* copy the fields backwards */ | 
|  | 749 | real->auth_flavours = compat_ptr(raw->auth_flavours); | 
|  | 750 | real->auth_flavourlen = raw->auth_flavourlen; | 
|  | 751 | real->proto = raw->proto; | 
|  | 752 | real->host_addr = compat_ptr(raw->host_addr); | 
|  | 753 | real->host_addrlen = raw->host_addrlen; | 
|  | 754 | compat_nfs_string(&real->hostname, &raw->hostname); | 
|  | 755 | compat_nfs_string(&real->mnt_path, &raw->mnt_path); | 
|  | 756 | compat_nfs_string(&real->client_addr, &raw->client_addr); | 
|  | 757 | real->acdirmax = raw->acdirmax; | 
|  | 758 | real->acdirmin = raw->acdirmin; | 
|  | 759 | real->acregmax = raw->acregmax; | 
|  | 760 | real->acregmin = raw->acregmin; | 
|  | 761 | real->retrans = raw->retrans; | 
|  | 762 | real->timeo = raw->timeo; | 
|  | 763 | real->wsize = raw->wsize; | 
|  | 764 | real->rsize = raw->rsize; | 
|  | 765 | real->flags = raw->flags; | 
|  | 766 | real->version = raw->version; | 
|  | 767 | } | 
|  | 768 |  | 
|  | 769 | return 0; | 
|  | 770 | } | 
|  | 771 |  | 
|  | 772 | #define NCPFS_NAME      "ncpfs" | 
|  | 773 | #define NFS4_NAME	"nfs4" | 
|  | 774 |  | 
|  | 775 | asmlinkage long compat_sys_mount(const char __user * dev_name, | 
|  | 776 | const char __user * dir_name, | 
|  | 777 | const char __user * type, unsigned long flags, | 
|  | 778 | const void __user * data) | 
|  | 779 | { | 
|  | 780 | char *kernel_type; | 
|  | 781 | unsigned long data_page; | 
|  | 782 | char *kernel_dev; | 
|  | 783 | char *dir_page; | 
|  | 784 | int retval; | 
|  | 785 |  | 
|  | 786 | retval = copy_mount_string(type, &kernel_type); | 
|  | 787 | if (retval < 0) | 
|  | 788 | goto out; | 
|  | 789 |  | 
|  | 790 | dir_page = getname(dir_name); | 
|  | 791 | retval = PTR_ERR(dir_page); | 
|  | 792 | if (IS_ERR(dir_page)) | 
|  | 793 | goto out1; | 
|  | 794 |  | 
|  | 795 | retval = copy_mount_string(dev_name, &kernel_dev); | 
|  | 796 | if (retval < 0) | 
|  | 797 | goto out2; | 
|  | 798 |  | 
|  | 799 | retval = copy_mount_options(data, &data_page); | 
|  | 800 | if (retval < 0) | 
|  | 801 | goto out3; | 
|  | 802 |  | 
|  | 803 | retval = -EINVAL; | 
|  | 804 |  | 
|  | 805 | if (kernel_type && data_page) { | 
|  | 806 | if (!strcmp(kernel_type, NCPFS_NAME)) { | 
|  | 807 | do_ncp_super_data_conv((void *)data_page); | 
|  | 808 | } else if (!strcmp(kernel_type, NFS4_NAME)) { | 
|  | 809 | if (do_nfs4_super_data_conv((void *) data_page)) | 
|  | 810 | goto out4; | 
|  | 811 | } | 
|  | 812 | } | 
|  | 813 |  | 
|  | 814 | retval = do_mount(kernel_dev, dir_page, kernel_type, | 
|  | 815 | flags, (void*)data_page); | 
|  | 816 |  | 
|  | 817 | out4: | 
|  | 818 | free_page(data_page); | 
|  | 819 | out3: | 
|  | 820 | kfree(kernel_dev); | 
|  | 821 | out2: | 
|  | 822 | putname(dir_page); | 
|  | 823 | out1: | 
|  | 824 | kfree(kernel_type); | 
|  | 825 | out: | 
|  | 826 | return retval; | 
|  | 827 | } | 
|  | 828 |  | 
|  | 829 | struct compat_old_linux_dirent { | 
|  | 830 | compat_ulong_t	d_ino; | 
|  | 831 | compat_ulong_t	d_offset; | 
|  | 832 | unsigned short	d_namlen; | 
|  | 833 | char		d_name[1]; | 
|  | 834 | }; | 
|  | 835 |  | 
|  | 836 | struct compat_readdir_callback { | 
|  | 837 | struct compat_old_linux_dirent __user *dirent; | 
|  | 838 | int result; | 
|  | 839 | }; | 
|  | 840 |  | 
|  | 841 | static int compat_fillonedir(void *__buf, const char *name, int namlen, | 
|  | 842 | loff_t offset, u64 ino, unsigned int d_type) | 
|  | 843 | { | 
|  | 844 | struct compat_readdir_callback *buf = __buf; | 
|  | 845 | struct compat_old_linux_dirent __user *dirent; | 
|  | 846 | compat_ulong_t d_ino; | 
|  | 847 |  | 
|  | 848 | if (buf->result) | 
|  | 849 | return -EINVAL; | 
|  | 850 | d_ino = ino; | 
|  | 851 | if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) { | 
|  | 852 | buf->result = -EOVERFLOW; | 
|  | 853 | return -EOVERFLOW; | 
|  | 854 | } | 
|  | 855 | buf->result++; | 
|  | 856 | dirent = buf->dirent; | 
|  | 857 | if (!access_ok(VERIFY_WRITE, dirent, | 
|  | 858 | (unsigned long)(dirent->d_name + namlen + 1) - | 
|  | 859 | (unsigned long)dirent)) | 
|  | 860 | goto efault; | 
|  | 861 | if (	__put_user(d_ino, &dirent->d_ino) || | 
|  | 862 | __put_user(offset, &dirent->d_offset) || | 
|  | 863 | __put_user(namlen, &dirent->d_namlen) || | 
|  | 864 | __copy_to_user(dirent->d_name, name, namlen) || | 
|  | 865 | __put_user(0, dirent->d_name + namlen)) | 
|  | 866 | goto efault; | 
|  | 867 | return 0; | 
|  | 868 | efault: | 
|  | 869 | buf->result = -EFAULT; | 
|  | 870 | return -EFAULT; | 
|  | 871 | } | 
|  | 872 |  | 
|  | 873 | asmlinkage long compat_sys_old_readdir(unsigned int fd, | 
|  | 874 | struct compat_old_linux_dirent __user *dirent, unsigned int count) | 
|  | 875 | { | 
|  | 876 | int error; | 
|  | 877 | struct file *file; | 
|  | 878 | struct compat_readdir_callback buf; | 
|  | 879 |  | 
|  | 880 | error = -EBADF; | 
|  | 881 | file = fget(fd); | 
|  | 882 | if (!file) | 
|  | 883 | goto out; | 
|  | 884 |  | 
|  | 885 | buf.result = 0; | 
|  | 886 | buf.dirent = dirent; | 
|  | 887 |  | 
|  | 888 | error = vfs_readdir(file, compat_fillonedir, &buf); | 
|  | 889 | if (buf.result) | 
|  | 890 | error = buf.result; | 
|  | 891 |  | 
|  | 892 | fput(file); | 
|  | 893 | out: | 
|  | 894 | return error; | 
|  | 895 | } | 
|  | 896 |  | 
|  | 897 | struct compat_linux_dirent { | 
|  | 898 | compat_ulong_t	d_ino; | 
|  | 899 | compat_ulong_t	d_off; | 
|  | 900 | unsigned short	d_reclen; | 
|  | 901 | char		d_name[1]; | 
|  | 902 | }; | 
|  | 903 |  | 
|  | 904 | struct compat_getdents_callback { | 
|  | 905 | struct compat_linux_dirent __user *current_dir; | 
|  | 906 | struct compat_linux_dirent __user *previous; | 
|  | 907 | int count; | 
|  | 908 | int error; | 
|  | 909 | }; | 
|  | 910 |  | 
|  | 911 | static int compat_filldir(void *__buf, const char *name, int namlen, | 
|  | 912 | loff_t offset, u64 ino, unsigned int d_type) | 
|  | 913 | { | 
|  | 914 | struct compat_linux_dirent __user * dirent; | 
|  | 915 | struct compat_getdents_callback *buf = __buf; | 
|  | 916 | compat_ulong_t d_ino; | 
|  | 917 | int reclen = ALIGN(offsetof(struct compat_linux_dirent, d_name) + | 
|  | 918 | namlen + 2, sizeof(compat_long_t)); | 
|  | 919 |  | 
|  | 920 | buf->error = -EINVAL;	/* only used if we fail.. */ | 
|  | 921 | if (reclen > buf->count) | 
|  | 922 | return -EINVAL; | 
|  | 923 | d_ino = ino; | 
|  | 924 | if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) { | 
|  | 925 | buf->error = -EOVERFLOW; | 
|  | 926 | return -EOVERFLOW; | 
|  | 927 | } | 
|  | 928 | dirent = buf->previous; | 
|  | 929 | if (dirent) { | 
|  | 930 | if (__put_user(offset, &dirent->d_off)) | 
|  | 931 | goto efault; | 
|  | 932 | } | 
|  | 933 | dirent = buf->current_dir; | 
|  | 934 | if (__put_user(d_ino, &dirent->d_ino)) | 
|  | 935 | goto efault; | 
|  | 936 | if (__put_user(reclen, &dirent->d_reclen)) | 
|  | 937 | goto efault; | 
|  | 938 | if (copy_to_user(dirent->d_name, name, namlen)) | 
|  | 939 | goto efault; | 
|  | 940 | if (__put_user(0, dirent->d_name + namlen)) | 
|  | 941 | goto efault; | 
|  | 942 | if (__put_user(d_type, (char  __user *) dirent + reclen - 1)) | 
|  | 943 | goto efault; | 
|  | 944 | buf->previous = dirent; | 
|  | 945 | dirent = (void __user *)dirent + reclen; | 
|  | 946 | buf->current_dir = dirent; | 
|  | 947 | buf->count -= reclen; | 
|  | 948 | return 0; | 
|  | 949 | efault: | 
|  | 950 | buf->error = -EFAULT; | 
|  | 951 | return -EFAULT; | 
|  | 952 | } | 
|  | 953 |  | 
|  | 954 | asmlinkage long compat_sys_getdents(unsigned int fd, | 
|  | 955 | struct compat_linux_dirent __user *dirent, unsigned int count) | 
|  | 956 | { | 
|  | 957 | struct file * file; | 
|  | 958 | struct compat_linux_dirent __user * lastdirent; | 
|  | 959 | struct compat_getdents_callback buf; | 
|  | 960 | int error; | 
|  | 961 |  | 
|  | 962 | error = -EFAULT; | 
|  | 963 | if (!access_ok(VERIFY_WRITE, dirent, count)) | 
|  | 964 | goto out; | 
|  | 965 |  | 
|  | 966 | error = -EBADF; | 
|  | 967 | file = fget(fd); | 
|  | 968 | if (!file) | 
|  | 969 | goto out; | 
|  | 970 |  | 
|  | 971 | buf.current_dir = dirent; | 
|  | 972 | buf.previous = NULL; | 
|  | 973 | buf.count = count; | 
|  | 974 | buf.error = 0; | 
|  | 975 |  | 
|  | 976 | error = vfs_readdir(file, compat_filldir, &buf); | 
|  | 977 | if (error >= 0) | 
|  | 978 | error = buf.error; | 
|  | 979 | lastdirent = buf.previous; | 
|  | 980 | if (lastdirent) { | 
|  | 981 | if (put_user(file->f_pos, &lastdirent->d_off)) | 
|  | 982 | error = -EFAULT; | 
|  | 983 | else | 
|  | 984 | error = count - buf.count; | 
|  | 985 | } | 
|  | 986 | fput(file); | 
|  | 987 | out: | 
|  | 988 | return error; | 
|  | 989 | } | 
|  | 990 |  | 
|  | 991 | #ifndef __ARCH_OMIT_COMPAT_SYS_GETDENTS64 | 
|  | 992 |  | 
|  | 993 | struct compat_getdents_callback64 { | 
|  | 994 | struct linux_dirent64 __user *current_dir; | 
|  | 995 | struct linux_dirent64 __user *previous; | 
|  | 996 | int count; | 
|  | 997 | int error; | 
|  | 998 | }; | 
|  | 999 |  | 
|  | 1000 | static int compat_filldir64(void * __buf, const char * name, int namlen, loff_t offset, | 
|  | 1001 | u64 ino, unsigned int d_type) | 
|  | 1002 | { | 
|  | 1003 | struct linux_dirent64 __user *dirent; | 
|  | 1004 | struct compat_getdents_callback64 *buf = __buf; | 
|  | 1005 | int reclen = ALIGN(offsetof(struct linux_dirent64, d_name) + namlen + 1, | 
|  | 1006 | sizeof(u64)); | 
|  | 1007 | u64 off; | 
|  | 1008 |  | 
|  | 1009 | buf->error = -EINVAL;	/* only used if we fail.. */ | 
|  | 1010 | if (reclen > buf->count) | 
|  | 1011 | return -EINVAL; | 
|  | 1012 | dirent = buf->previous; | 
|  | 1013 |  | 
|  | 1014 | if (dirent) { | 
|  | 1015 | if (__put_user_unaligned(offset, &dirent->d_off)) | 
|  | 1016 | goto efault; | 
|  | 1017 | } | 
|  | 1018 | dirent = buf->current_dir; | 
|  | 1019 | if (__put_user_unaligned(ino, &dirent->d_ino)) | 
|  | 1020 | goto efault; | 
|  | 1021 | off = 0; | 
|  | 1022 | if (__put_user_unaligned(off, &dirent->d_off)) | 
|  | 1023 | goto efault; | 
|  | 1024 | if (__put_user(reclen, &dirent->d_reclen)) | 
|  | 1025 | goto efault; | 
|  | 1026 | if (__put_user(d_type, &dirent->d_type)) | 
|  | 1027 | goto efault; | 
|  | 1028 | if (copy_to_user(dirent->d_name, name, namlen)) | 
|  | 1029 | goto efault; | 
|  | 1030 | if (__put_user(0, dirent->d_name + namlen)) | 
|  | 1031 | goto efault; | 
|  | 1032 | buf->previous = dirent; | 
|  | 1033 | dirent = (void __user *)dirent + reclen; | 
|  | 1034 | buf->current_dir = dirent; | 
|  | 1035 | buf->count -= reclen; | 
|  | 1036 | return 0; | 
|  | 1037 | efault: | 
|  | 1038 | buf->error = -EFAULT; | 
|  | 1039 | return -EFAULT; | 
|  | 1040 | } | 
|  | 1041 |  | 
|  | 1042 | asmlinkage long compat_sys_getdents64(unsigned int fd, | 
|  | 1043 | struct linux_dirent64 __user * dirent, unsigned int count) | 
|  | 1044 | { | 
|  | 1045 | struct file * file; | 
|  | 1046 | struct linux_dirent64 __user * lastdirent; | 
|  | 1047 | struct compat_getdents_callback64 buf; | 
|  | 1048 | int error; | 
|  | 1049 |  | 
|  | 1050 | error = -EFAULT; | 
|  | 1051 | if (!access_ok(VERIFY_WRITE, dirent, count)) | 
|  | 1052 | goto out; | 
|  | 1053 |  | 
|  | 1054 | error = -EBADF; | 
|  | 1055 | file = fget(fd); | 
|  | 1056 | if (!file) | 
|  | 1057 | goto out; | 
|  | 1058 |  | 
|  | 1059 | buf.current_dir = dirent; | 
|  | 1060 | buf.previous = NULL; | 
|  | 1061 | buf.count = count; | 
|  | 1062 | buf.error = 0; | 
|  | 1063 |  | 
|  | 1064 | error = vfs_readdir(file, compat_filldir64, &buf); | 
|  | 1065 | if (error >= 0) | 
|  | 1066 | error = buf.error; | 
|  | 1067 | lastdirent = buf.previous; | 
|  | 1068 | if (lastdirent) { | 
|  | 1069 | typeof(lastdirent->d_off) d_off = file->f_pos; | 
|  | 1070 | if (__put_user_unaligned(d_off, &lastdirent->d_off)) | 
|  | 1071 | error = -EFAULT; | 
|  | 1072 | else | 
|  | 1073 | error = count - buf.count; | 
|  | 1074 | } | 
|  | 1075 | fput(file); | 
|  | 1076 | out: | 
|  | 1077 | return error; | 
|  | 1078 | } | 
|  | 1079 | #endif /* ! __ARCH_OMIT_COMPAT_SYS_GETDENTS64 */ | 
|  | 1080 |  | 
|  | 1081 | static ssize_t compat_do_readv_writev(int type, struct file *file, | 
|  | 1082 | const struct compat_iovec __user *uvector, | 
|  | 1083 | unsigned long nr_segs, loff_t *pos) | 
|  | 1084 | { | 
|  | 1085 | compat_ssize_t tot_len; | 
|  | 1086 | struct iovec iovstack[UIO_FASTIOV]; | 
|  | 1087 | struct iovec *iov = iovstack; | 
|  | 1088 | ssize_t ret; | 
|  | 1089 | io_fn_t fn; | 
|  | 1090 | iov_fn_t fnv; | 
|  | 1091 |  | 
|  | 1092 | ret = -EINVAL; | 
|  | 1093 | if (!file->f_op) | 
|  | 1094 | goto out; | 
|  | 1095 |  | 
|  | 1096 | ret = compat_rw_copy_check_uvector(type, uvector, nr_segs, | 
|  | 1097 | UIO_FASTIOV, iovstack, &iov, 1); | 
|  | 1098 | if (ret <= 0) | 
|  | 1099 | goto out; | 
|  | 1100 |  | 
|  | 1101 | tot_len = ret; | 
|  | 1102 | ret = rw_verify_area(type, file, pos, tot_len); | 
|  | 1103 | if (ret < 0) | 
|  | 1104 | goto out; | 
|  | 1105 |  | 
|  | 1106 | fnv = NULL; | 
|  | 1107 | if (type == READ) { | 
|  | 1108 | fn = file->f_op->read; | 
|  | 1109 | fnv = file->f_op->aio_read; | 
|  | 1110 | } else { | 
|  | 1111 | fn = (io_fn_t)file->f_op->write; | 
|  | 1112 | fnv = file->f_op->aio_write; | 
|  | 1113 | } | 
|  | 1114 |  | 
|  | 1115 | if (fnv) | 
|  | 1116 | ret = do_sync_readv_writev(file, iov, nr_segs, tot_len, | 
|  | 1117 | pos, fnv); | 
|  | 1118 | else | 
|  | 1119 | ret = do_loop_readv_writev(file, iov, nr_segs, pos, fn); | 
|  | 1120 |  | 
|  | 1121 | out: | 
|  | 1122 | if (iov != iovstack) | 
|  | 1123 | kfree(iov); | 
|  | 1124 | if ((ret + (type == READ)) > 0) { | 
|  | 1125 | if (type == READ) | 
|  | 1126 | fsnotify_access(file); | 
|  | 1127 | else | 
|  | 1128 | fsnotify_modify(file); | 
|  | 1129 | } | 
|  | 1130 | return ret; | 
|  | 1131 | } | 
|  | 1132 |  | 
|  | 1133 | static size_t compat_readv(struct file *file, | 
|  | 1134 | const struct compat_iovec __user *vec, | 
|  | 1135 | unsigned long vlen, loff_t *pos) | 
|  | 1136 | { | 
|  | 1137 | ssize_t ret = -EBADF; | 
|  | 1138 |  | 
|  | 1139 | if (!(file->f_mode & FMODE_READ)) | 
|  | 1140 | goto out; | 
|  | 1141 |  | 
|  | 1142 | ret = -EINVAL; | 
|  | 1143 | if (!file->f_op || (!file->f_op->aio_read && !file->f_op->read)) | 
|  | 1144 | goto out; | 
|  | 1145 |  | 
|  | 1146 | ret = compat_do_readv_writev(READ, file, vec, vlen, pos); | 
|  | 1147 |  | 
|  | 1148 | out: | 
|  | 1149 | if (ret > 0) | 
|  | 1150 | add_rchar(current, ret); | 
|  | 1151 | inc_syscr(current); | 
|  | 1152 | return ret; | 
|  | 1153 | } | 
|  | 1154 |  | 
|  | 1155 | asmlinkage ssize_t | 
|  | 1156 | compat_sys_readv(unsigned long fd, const struct compat_iovec __user *vec, | 
|  | 1157 | unsigned long vlen) | 
|  | 1158 | { | 
|  | 1159 | struct file *file; | 
|  | 1160 | int fput_needed; | 
|  | 1161 | ssize_t ret; | 
|  | 1162 | loff_t pos; | 
|  | 1163 |  | 
|  | 1164 | file = fget_light(fd, &fput_needed); | 
|  | 1165 | if (!file) | 
|  | 1166 | return -EBADF; | 
|  | 1167 | pos = file->f_pos; | 
|  | 1168 | ret = compat_readv(file, vec, vlen, &pos); | 
|  | 1169 | file->f_pos = pos; | 
|  | 1170 | fput_light(file, fput_needed); | 
|  | 1171 | return ret; | 
|  | 1172 | } | 
|  | 1173 |  | 
|  | 1174 | asmlinkage ssize_t | 
|  | 1175 | compat_sys_preadv64(unsigned long fd, const struct compat_iovec __user *vec, | 
|  | 1176 | unsigned long vlen, loff_t pos) | 
|  | 1177 | { | 
|  | 1178 | struct file *file; | 
|  | 1179 | int fput_needed; | 
|  | 1180 | ssize_t ret; | 
|  | 1181 |  | 
|  | 1182 | if (pos < 0) | 
|  | 1183 | return -EINVAL; | 
|  | 1184 | file = fget_light(fd, &fput_needed); | 
|  | 1185 | if (!file) | 
|  | 1186 | return -EBADF; | 
|  | 1187 | ret = -ESPIPE; | 
|  | 1188 | if (file->f_mode & FMODE_PREAD) | 
|  | 1189 | ret = compat_readv(file, vec, vlen, &pos); | 
|  | 1190 | fput_light(file, fput_needed); | 
|  | 1191 | return ret; | 
|  | 1192 | } | 
|  | 1193 |  | 
|  | 1194 | asmlinkage ssize_t | 
|  | 1195 | compat_sys_preadv(unsigned long fd, const struct compat_iovec __user *vec, | 
|  | 1196 | unsigned long vlen, u32 pos_low, u32 pos_high) | 
|  | 1197 | { | 
|  | 1198 | loff_t pos = ((loff_t)pos_high << 32) | pos_low; | 
|  | 1199 | return compat_sys_preadv64(fd, vec, vlen, pos); | 
|  | 1200 | } | 
|  | 1201 |  | 
|  | 1202 | static size_t compat_writev(struct file *file, | 
|  | 1203 | const struct compat_iovec __user *vec, | 
|  | 1204 | unsigned long vlen, loff_t *pos) | 
|  | 1205 | { | 
|  | 1206 | ssize_t ret = -EBADF; | 
|  | 1207 |  | 
|  | 1208 | if (!(file->f_mode & FMODE_WRITE)) | 
|  | 1209 | goto out; | 
|  | 1210 |  | 
|  | 1211 | ret = -EINVAL; | 
|  | 1212 | if (!file->f_op || (!file->f_op->aio_write && !file->f_op->write)) | 
|  | 1213 | goto out; | 
|  | 1214 |  | 
|  | 1215 | ret = compat_do_readv_writev(WRITE, file, vec, vlen, pos); | 
|  | 1216 |  | 
|  | 1217 | out: | 
|  | 1218 | if (ret > 0) | 
|  | 1219 | add_wchar(current, ret); | 
|  | 1220 | inc_syscw(current); | 
|  | 1221 | return ret; | 
|  | 1222 | } | 
|  | 1223 |  | 
|  | 1224 | asmlinkage ssize_t | 
|  | 1225 | compat_sys_writev(unsigned long fd, const struct compat_iovec __user *vec, | 
|  | 1226 | unsigned long vlen) | 
|  | 1227 | { | 
|  | 1228 | struct file *file; | 
|  | 1229 | int fput_needed; | 
|  | 1230 | ssize_t ret; | 
|  | 1231 | loff_t pos; | 
|  | 1232 |  | 
|  | 1233 | file = fget_light(fd, &fput_needed); | 
|  | 1234 | if (!file) | 
|  | 1235 | return -EBADF; | 
|  | 1236 | pos = file->f_pos; | 
|  | 1237 | ret = compat_writev(file, vec, vlen, &pos); | 
|  | 1238 | file->f_pos = pos; | 
|  | 1239 | fput_light(file, fput_needed); | 
|  | 1240 | return ret; | 
|  | 1241 | } | 
|  | 1242 |  | 
|  | 1243 | asmlinkage ssize_t | 
|  | 1244 | compat_sys_pwritev64(unsigned long fd, const struct compat_iovec __user *vec, | 
|  | 1245 | unsigned long vlen, loff_t pos) | 
|  | 1246 | { | 
|  | 1247 | struct file *file; | 
|  | 1248 | int fput_needed; | 
|  | 1249 | ssize_t ret; | 
|  | 1250 |  | 
|  | 1251 | if (pos < 0) | 
|  | 1252 | return -EINVAL; | 
|  | 1253 | file = fget_light(fd, &fput_needed); | 
|  | 1254 | if (!file) | 
|  | 1255 | return -EBADF; | 
|  | 1256 | ret = -ESPIPE; | 
|  | 1257 | if (file->f_mode & FMODE_PWRITE) | 
|  | 1258 | ret = compat_writev(file, vec, vlen, &pos); | 
|  | 1259 | fput_light(file, fput_needed); | 
|  | 1260 | return ret; | 
|  | 1261 | } | 
|  | 1262 |  | 
|  | 1263 | asmlinkage ssize_t | 
|  | 1264 | compat_sys_pwritev(unsigned long fd, const struct compat_iovec __user *vec, | 
|  | 1265 | unsigned long vlen, u32 pos_low, u32 pos_high) | 
|  | 1266 | { | 
|  | 1267 | loff_t pos = ((loff_t)pos_high << 32) | pos_low; | 
|  | 1268 | return compat_sys_pwritev64(fd, vec, vlen, pos); | 
|  | 1269 | } | 
|  | 1270 |  | 
|  | 1271 | asmlinkage long | 
|  | 1272 | compat_sys_vmsplice(int fd, const struct compat_iovec __user *iov32, | 
|  | 1273 | unsigned int nr_segs, unsigned int flags) | 
|  | 1274 | { | 
|  | 1275 | unsigned i; | 
|  | 1276 | struct iovec __user *iov; | 
|  | 1277 | if (nr_segs > UIO_MAXIOV) | 
|  | 1278 | return -EINVAL; | 
|  | 1279 | iov = compat_alloc_user_space(nr_segs * sizeof(struct iovec)); | 
|  | 1280 | for (i = 0; i < nr_segs; i++) { | 
|  | 1281 | struct compat_iovec v; | 
|  | 1282 | if (get_user(v.iov_base, &iov32[i].iov_base) || | 
|  | 1283 | get_user(v.iov_len, &iov32[i].iov_len) || | 
|  | 1284 | put_user(compat_ptr(v.iov_base), &iov[i].iov_base) || | 
|  | 1285 | put_user(v.iov_len, &iov[i].iov_len)) | 
|  | 1286 | return -EFAULT; | 
|  | 1287 | } | 
|  | 1288 | return sys_vmsplice(fd, iov, nr_segs, flags); | 
|  | 1289 | } | 
|  | 1290 |  | 
|  | 1291 | /* | 
|  | 1292 | * Exactly like fs/open.c:sys_open(), except that it doesn't set the | 
|  | 1293 | * O_LARGEFILE flag. | 
|  | 1294 | */ | 
|  | 1295 | asmlinkage long | 
|  | 1296 | compat_sys_open(const char __user *filename, int flags, umode_t mode) | 
|  | 1297 | { | 
|  | 1298 | return do_sys_open(AT_FDCWD, filename, flags, mode); | 
|  | 1299 | } | 
|  | 1300 |  | 
|  | 1301 | /* | 
|  | 1302 | * Exactly like fs/open.c:sys_openat(), except that it doesn't set the | 
|  | 1303 | * O_LARGEFILE flag. | 
|  | 1304 | */ | 
|  | 1305 | asmlinkage long | 
|  | 1306 | compat_sys_openat(unsigned int dfd, const char __user *filename, int flags, umode_t mode) | 
|  | 1307 | { | 
|  | 1308 | return do_sys_open(dfd, filename, flags, mode); | 
|  | 1309 | } | 
|  | 1310 |  | 
|  | 1311 | #define __COMPAT_NFDBITS       (8 * sizeof(compat_ulong_t)) | 
|  | 1312 |  | 
|  | 1313 | static int poll_select_copy_remaining(struct timespec *end_time, void __user *p, | 
|  | 1314 | int timeval, int ret) | 
|  | 1315 | { | 
|  | 1316 | struct timespec ts; | 
|  | 1317 |  | 
|  | 1318 | if (!p) | 
|  | 1319 | return ret; | 
|  | 1320 |  | 
|  | 1321 | if (current->personality & STICKY_TIMEOUTS) | 
|  | 1322 | goto sticky; | 
|  | 1323 |  | 
|  | 1324 | /* No update for zero timeout */ | 
|  | 1325 | if (!end_time->tv_sec && !end_time->tv_nsec) | 
|  | 1326 | return ret; | 
|  | 1327 |  | 
|  | 1328 | ktime_get_ts(&ts); | 
|  | 1329 | ts = timespec_sub(*end_time, ts); | 
|  | 1330 | if (ts.tv_sec < 0) | 
|  | 1331 | ts.tv_sec = ts.tv_nsec = 0; | 
|  | 1332 |  | 
|  | 1333 | if (timeval) { | 
|  | 1334 | struct compat_timeval rtv; | 
|  | 1335 |  | 
|  | 1336 | rtv.tv_sec = ts.tv_sec; | 
|  | 1337 | rtv.tv_usec = ts.tv_nsec / NSEC_PER_USEC; | 
|  | 1338 |  | 
|  | 1339 | if (!copy_to_user(p, &rtv, sizeof(rtv))) | 
|  | 1340 | return ret; | 
|  | 1341 | } else { | 
|  | 1342 | struct compat_timespec rts; | 
|  | 1343 |  | 
|  | 1344 | rts.tv_sec = ts.tv_sec; | 
|  | 1345 | rts.tv_nsec = ts.tv_nsec; | 
|  | 1346 |  | 
|  | 1347 | if (!copy_to_user(p, &rts, sizeof(rts))) | 
|  | 1348 | return ret; | 
|  | 1349 | } | 
|  | 1350 | /* | 
|  | 1351 | * If an application puts its timeval in read-only memory, we | 
|  | 1352 | * don't want the Linux-specific update to the timeval to | 
|  | 1353 | * cause a fault after the select has completed | 
|  | 1354 | * successfully. However, because we're not updating the | 
|  | 1355 | * timeval, we can't restart the system call. | 
|  | 1356 | */ | 
|  | 1357 |  | 
|  | 1358 | sticky: | 
|  | 1359 | if (ret == -ERESTARTNOHAND) | 
|  | 1360 | ret = -EINTR; | 
|  | 1361 | return ret; | 
|  | 1362 | } | 
|  | 1363 |  | 
|  | 1364 | /* | 
|  | 1365 | * Ooo, nasty.  We need here to frob 32-bit unsigned longs to | 
|  | 1366 | * 64-bit unsigned longs. | 
|  | 1367 | */ | 
|  | 1368 | static | 
|  | 1369 | int compat_get_fd_set(unsigned long nr, compat_ulong_t __user *ufdset, | 
|  | 1370 | unsigned long *fdset) | 
|  | 1371 | { | 
|  | 1372 | nr = DIV_ROUND_UP(nr, __COMPAT_NFDBITS); | 
|  | 1373 | if (ufdset) { | 
|  | 1374 | unsigned long odd; | 
|  | 1375 |  | 
|  | 1376 | if (!access_ok(VERIFY_WRITE, ufdset, nr*sizeof(compat_ulong_t))) | 
|  | 1377 | return -EFAULT; | 
|  | 1378 |  | 
|  | 1379 | odd = nr & 1UL; | 
|  | 1380 | nr &= ~1UL; | 
|  | 1381 | while (nr) { | 
|  | 1382 | unsigned long h, l; | 
|  | 1383 | if (__get_user(l, ufdset) || __get_user(h, ufdset+1)) | 
|  | 1384 | return -EFAULT; | 
|  | 1385 | ufdset += 2; | 
|  | 1386 | *fdset++ = h << 32 | l; | 
|  | 1387 | nr -= 2; | 
|  | 1388 | } | 
|  | 1389 | if (odd && __get_user(*fdset, ufdset)) | 
|  | 1390 | return -EFAULT; | 
|  | 1391 | } else { | 
|  | 1392 | /* Tricky, must clear full unsigned long in the | 
|  | 1393 | * kernel fdset at the end, this makes sure that | 
|  | 1394 | * actually happens. | 
|  | 1395 | */ | 
|  | 1396 | memset(fdset, 0, ((nr + 1) & ~1)*sizeof(compat_ulong_t)); | 
|  | 1397 | } | 
|  | 1398 | return 0; | 
|  | 1399 | } | 
|  | 1400 |  | 
|  | 1401 | static | 
|  | 1402 | int compat_set_fd_set(unsigned long nr, compat_ulong_t __user *ufdset, | 
|  | 1403 | unsigned long *fdset) | 
|  | 1404 | { | 
|  | 1405 | unsigned long odd; | 
|  | 1406 | nr = DIV_ROUND_UP(nr, __COMPAT_NFDBITS); | 
|  | 1407 |  | 
|  | 1408 | if (!ufdset) | 
|  | 1409 | return 0; | 
|  | 1410 |  | 
|  | 1411 | odd = nr & 1UL; | 
|  | 1412 | nr &= ~1UL; | 
|  | 1413 | while (nr) { | 
|  | 1414 | unsigned long h, l; | 
|  | 1415 | l = *fdset++; | 
|  | 1416 | h = l >> 32; | 
|  | 1417 | if (__put_user(l, ufdset) || __put_user(h, ufdset+1)) | 
|  | 1418 | return -EFAULT; | 
|  | 1419 | ufdset += 2; | 
|  | 1420 | nr -= 2; | 
|  | 1421 | } | 
|  | 1422 | if (odd && __put_user(*fdset, ufdset)) | 
|  | 1423 | return -EFAULT; | 
|  | 1424 | return 0; | 
|  | 1425 | } | 
|  | 1426 |  | 
|  | 1427 |  | 
|  | 1428 | /* | 
|  | 1429 | * This is a virtual copy of sys_select from fs/select.c and probably | 
|  | 1430 | * should be compared to it from time to time | 
|  | 1431 | */ | 
|  | 1432 |  | 
|  | 1433 | /* | 
|  | 1434 | * We can actually return ERESTARTSYS instead of EINTR, but I'd | 
|  | 1435 | * like to be certain this leads to no problems. So I return | 
|  | 1436 | * EINTR just for safety. | 
|  | 1437 | * | 
|  | 1438 | * Update: ERESTARTSYS breaks at least the xview clock binary, so | 
|  | 1439 | * I'm trying ERESTARTNOHAND which restart only when you want to. | 
|  | 1440 | */ | 
|  | 1441 | int compat_core_sys_select(int n, compat_ulong_t __user *inp, | 
|  | 1442 | compat_ulong_t __user *outp, compat_ulong_t __user *exp, | 
|  | 1443 | struct timespec *end_time) | 
|  | 1444 | { | 
|  | 1445 | fd_set_bits fds; | 
|  | 1446 | void *bits; | 
|  | 1447 | int size, max_fds, ret = -EINVAL; | 
|  | 1448 | struct fdtable *fdt; | 
|  | 1449 | long stack_fds[SELECT_STACK_ALLOC/sizeof(long)]; | 
|  | 1450 |  | 
|  | 1451 | if (n < 0) | 
|  | 1452 | goto out_nofds; | 
|  | 1453 |  | 
|  | 1454 | /* max_fds can increase, so grab it once to avoid race */ | 
|  | 1455 | rcu_read_lock(); | 
|  | 1456 | fdt = files_fdtable(current->files); | 
|  | 1457 | max_fds = fdt->max_fds; | 
|  | 1458 | rcu_read_unlock(); | 
|  | 1459 | if (n > max_fds) | 
|  | 1460 | n = max_fds; | 
|  | 1461 |  | 
|  | 1462 | /* | 
|  | 1463 | * We need 6 bitmaps (in/out/ex for both incoming and outgoing), | 
|  | 1464 | * since we used fdset we need to allocate memory in units of | 
|  | 1465 | * long-words. | 
|  | 1466 | */ | 
|  | 1467 | size = FDS_BYTES(n); | 
|  | 1468 | bits = stack_fds; | 
|  | 1469 | if (size > sizeof(stack_fds) / 6) { | 
|  | 1470 | bits = kmalloc(6 * size, GFP_KERNEL); | 
|  | 1471 | ret = -ENOMEM; | 
|  | 1472 | if (!bits) | 
|  | 1473 | goto out_nofds; | 
|  | 1474 | } | 
|  | 1475 | fds.in      = (unsigned long *)  bits; | 
|  | 1476 | fds.out     = (unsigned long *) (bits +   size); | 
|  | 1477 | fds.ex      = (unsigned long *) (bits + 2*size); | 
|  | 1478 | fds.res_in  = (unsigned long *) (bits + 3*size); | 
|  | 1479 | fds.res_out = (unsigned long *) (bits + 4*size); | 
|  | 1480 | fds.res_ex  = (unsigned long *) (bits + 5*size); | 
|  | 1481 |  | 
|  | 1482 | if ((ret = compat_get_fd_set(n, inp, fds.in)) || | 
|  | 1483 | (ret = compat_get_fd_set(n, outp, fds.out)) || | 
|  | 1484 | (ret = compat_get_fd_set(n, exp, fds.ex))) | 
|  | 1485 | goto out; | 
|  | 1486 | zero_fd_set(n, fds.res_in); | 
|  | 1487 | zero_fd_set(n, fds.res_out); | 
|  | 1488 | zero_fd_set(n, fds.res_ex); | 
|  | 1489 |  | 
|  | 1490 | ret = do_select(n, &fds, end_time); | 
|  | 1491 |  | 
|  | 1492 | if (ret < 0) | 
|  | 1493 | goto out; | 
|  | 1494 | if (!ret) { | 
|  | 1495 | ret = -ERESTARTNOHAND; | 
|  | 1496 | if (signal_pending(current)) | 
|  | 1497 | goto out; | 
|  | 1498 | ret = 0; | 
|  | 1499 | } | 
|  | 1500 |  | 
|  | 1501 | if (compat_set_fd_set(n, inp, fds.res_in) || | 
|  | 1502 | compat_set_fd_set(n, outp, fds.res_out) || | 
|  | 1503 | compat_set_fd_set(n, exp, fds.res_ex)) | 
|  | 1504 | ret = -EFAULT; | 
|  | 1505 | out: | 
|  | 1506 | if (bits != stack_fds) | 
|  | 1507 | kfree(bits); | 
|  | 1508 | out_nofds: | 
|  | 1509 | return ret; | 
|  | 1510 | } | 
|  | 1511 |  | 
|  | 1512 | asmlinkage long compat_sys_select(int n, compat_ulong_t __user *inp, | 
|  | 1513 | compat_ulong_t __user *outp, compat_ulong_t __user *exp, | 
|  | 1514 | struct compat_timeval __user *tvp) | 
|  | 1515 | { | 
|  | 1516 | struct timespec end_time, *to = NULL; | 
|  | 1517 | struct compat_timeval tv; | 
|  | 1518 | int ret; | 
|  | 1519 |  | 
|  | 1520 | if (tvp) { | 
|  | 1521 | if (copy_from_user(&tv, tvp, sizeof(tv))) | 
|  | 1522 | return -EFAULT; | 
|  | 1523 |  | 
|  | 1524 | to = &end_time; | 
|  | 1525 | if (poll_select_set_timeout(to, | 
|  | 1526 | tv.tv_sec + (tv.tv_usec / USEC_PER_SEC), | 
|  | 1527 | (tv.tv_usec % USEC_PER_SEC) * NSEC_PER_USEC)) | 
|  | 1528 | return -EINVAL; | 
|  | 1529 | } | 
|  | 1530 |  | 
|  | 1531 | ret = compat_core_sys_select(n, inp, outp, exp, to); | 
|  | 1532 | ret = poll_select_copy_remaining(&end_time, tvp, 1, ret); | 
|  | 1533 |  | 
|  | 1534 | return ret; | 
|  | 1535 | } | 
|  | 1536 |  | 
|  | 1537 | struct compat_sel_arg_struct { | 
|  | 1538 | compat_ulong_t n; | 
|  | 1539 | compat_uptr_t inp; | 
|  | 1540 | compat_uptr_t outp; | 
|  | 1541 | compat_uptr_t exp; | 
|  | 1542 | compat_uptr_t tvp; | 
|  | 1543 | }; | 
|  | 1544 |  | 
|  | 1545 | asmlinkage long compat_sys_old_select(struct compat_sel_arg_struct __user *arg) | 
|  | 1546 | { | 
|  | 1547 | struct compat_sel_arg_struct a; | 
|  | 1548 |  | 
|  | 1549 | if (copy_from_user(&a, arg, sizeof(a))) | 
|  | 1550 | return -EFAULT; | 
|  | 1551 | return compat_sys_select(a.n, compat_ptr(a.inp), compat_ptr(a.outp), | 
|  | 1552 | compat_ptr(a.exp), compat_ptr(a.tvp)); | 
|  | 1553 | } | 
|  | 1554 |  | 
|  | 1555 | #ifdef HAVE_SET_RESTORE_SIGMASK | 
|  | 1556 | static long do_compat_pselect(int n, compat_ulong_t __user *inp, | 
|  | 1557 | compat_ulong_t __user *outp, compat_ulong_t __user *exp, | 
|  | 1558 | struct compat_timespec __user *tsp, compat_sigset_t __user *sigmask, | 
|  | 1559 | compat_size_t sigsetsize) | 
|  | 1560 | { | 
|  | 1561 | compat_sigset_t ss32; | 
|  | 1562 | sigset_t ksigmask, sigsaved; | 
|  | 1563 | struct compat_timespec ts; | 
|  | 1564 | struct timespec end_time, *to = NULL; | 
|  | 1565 | int ret; | 
|  | 1566 |  | 
|  | 1567 | if (tsp) { | 
|  | 1568 | if (copy_from_user(&ts, tsp, sizeof(ts))) | 
|  | 1569 | return -EFAULT; | 
|  | 1570 |  | 
|  | 1571 | to = &end_time; | 
|  | 1572 | if (poll_select_set_timeout(to, ts.tv_sec, ts.tv_nsec)) | 
|  | 1573 | return -EINVAL; | 
|  | 1574 | } | 
|  | 1575 |  | 
|  | 1576 | if (sigmask) { | 
|  | 1577 | if (sigsetsize != sizeof(compat_sigset_t)) | 
|  | 1578 | return -EINVAL; | 
|  | 1579 | if (copy_from_user(&ss32, sigmask, sizeof(ss32))) | 
|  | 1580 | return -EFAULT; | 
|  | 1581 | sigset_from_compat(&ksigmask, &ss32); | 
|  | 1582 |  | 
|  | 1583 | sigdelsetmask(&ksigmask, sigmask(SIGKILL)|sigmask(SIGSTOP)); | 
|  | 1584 | sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved); | 
|  | 1585 | } | 
|  | 1586 |  | 
|  | 1587 | ret = compat_core_sys_select(n, inp, outp, exp, to); | 
|  | 1588 | ret = poll_select_copy_remaining(&end_time, tsp, 0, ret); | 
|  | 1589 |  | 
|  | 1590 | if (ret == -ERESTARTNOHAND) { | 
|  | 1591 | /* | 
|  | 1592 | * Don't restore the signal mask yet. Let do_signal() deliver | 
|  | 1593 | * the signal on the way back to userspace, before the signal | 
|  | 1594 | * mask is restored. | 
|  | 1595 | */ | 
|  | 1596 | if (sigmask) { | 
|  | 1597 | memcpy(¤t->saved_sigmask, &sigsaved, | 
|  | 1598 | sizeof(sigsaved)); | 
|  | 1599 | set_restore_sigmask(); | 
|  | 1600 | } | 
|  | 1601 | } else if (sigmask) | 
|  | 1602 | sigprocmask(SIG_SETMASK, &sigsaved, NULL); | 
|  | 1603 |  | 
|  | 1604 | return ret; | 
|  | 1605 | } | 
|  | 1606 |  | 
|  | 1607 | asmlinkage long compat_sys_pselect6(int n, compat_ulong_t __user *inp, | 
|  | 1608 | compat_ulong_t __user *outp, compat_ulong_t __user *exp, | 
|  | 1609 | struct compat_timespec __user *tsp, void __user *sig) | 
|  | 1610 | { | 
|  | 1611 | compat_size_t sigsetsize = 0; | 
|  | 1612 | compat_uptr_t up = 0; | 
|  | 1613 |  | 
|  | 1614 | if (sig) { | 
|  | 1615 | if (!access_ok(VERIFY_READ, sig, | 
|  | 1616 | sizeof(compat_uptr_t)+sizeof(compat_size_t)) || | 
|  | 1617 | __get_user(up, (compat_uptr_t __user *)sig) || | 
|  | 1618 | __get_user(sigsetsize, | 
|  | 1619 | (compat_size_t __user *)(sig+sizeof(up)))) | 
|  | 1620 | return -EFAULT; | 
|  | 1621 | } | 
|  | 1622 | return do_compat_pselect(n, inp, outp, exp, tsp, compat_ptr(up), | 
|  | 1623 | sigsetsize); | 
|  | 1624 | } | 
|  | 1625 |  | 
|  | 1626 | asmlinkage long compat_sys_ppoll(struct pollfd __user *ufds, | 
|  | 1627 | unsigned int nfds, struct compat_timespec __user *tsp, | 
|  | 1628 | const compat_sigset_t __user *sigmask, compat_size_t sigsetsize) | 
|  | 1629 | { | 
|  | 1630 | compat_sigset_t ss32; | 
|  | 1631 | sigset_t ksigmask, sigsaved; | 
|  | 1632 | struct compat_timespec ts; | 
|  | 1633 | struct timespec end_time, *to = NULL; | 
|  | 1634 | int ret; | 
|  | 1635 |  | 
|  | 1636 | if (tsp) { | 
|  | 1637 | if (copy_from_user(&ts, tsp, sizeof(ts))) | 
|  | 1638 | return -EFAULT; | 
|  | 1639 |  | 
|  | 1640 | to = &end_time; | 
|  | 1641 | if (poll_select_set_timeout(to, ts.tv_sec, ts.tv_nsec)) | 
|  | 1642 | return -EINVAL; | 
|  | 1643 | } | 
|  | 1644 |  | 
|  | 1645 | if (sigmask) { | 
|  | 1646 | if (sigsetsize != sizeof(compat_sigset_t)) | 
|  | 1647 | return -EINVAL; | 
|  | 1648 | if (copy_from_user(&ss32, sigmask, sizeof(ss32))) | 
|  | 1649 | return -EFAULT; | 
|  | 1650 | sigset_from_compat(&ksigmask, &ss32); | 
|  | 1651 |  | 
|  | 1652 | sigdelsetmask(&ksigmask, sigmask(SIGKILL)|sigmask(SIGSTOP)); | 
|  | 1653 | sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved); | 
|  | 1654 | } | 
|  | 1655 |  | 
|  | 1656 | ret = do_sys_poll(ufds, nfds, to); | 
|  | 1657 |  | 
|  | 1658 | /* We can restart this syscall, usually */ | 
|  | 1659 | if (ret == -EINTR) { | 
|  | 1660 | /* | 
|  | 1661 | * Don't restore the signal mask yet. Let do_signal() deliver | 
|  | 1662 | * the signal on the way back to userspace, before the signal | 
|  | 1663 | * mask is restored. | 
|  | 1664 | */ | 
|  | 1665 | if (sigmask) { | 
|  | 1666 | memcpy(¤t->saved_sigmask, &sigsaved, | 
|  | 1667 | sizeof(sigsaved)); | 
|  | 1668 | set_restore_sigmask(); | 
|  | 1669 | } | 
|  | 1670 | ret = -ERESTARTNOHAND; | 
|  | 1671 | } else if (sigmask) | 
|  | 1672 | sigprocmask(SIG_SETMASK, &sigsaved, NULL); | 
|  | 1673 |  | 
|  | 1674 | ret = poll_select_copy_remaining(&end_time, tsp, 0, ret); | 
|  | 1675 |  | 
|  | 1676 | return ret; | 
|  | 1677 | } | 
|  | 1678 | #endif /* HAVE_SET_RESTORE_SIGMASK */ | 
|  | 1679 |  | 
|  | 1680 | #ifdef CONFIG_EPOLL | 
|  | 1681 |  | 
|  | 1682 | #ifdef HAVE_SET_RESTORE_SIGMASK | 
|  | 1683 | asmlinkage long compat_sys_epoll_pwait(int epfd, | 
|  | 1684 | struct compat_epoll_event __user *events, | 
|  | 1685 | int maxevents, int timeout, | 
|  | 1686 | const compat_sigset_t __user *sigmask, | 
|  | 1687 | compat_size_t sigsetsize) | 
|  | 1688 | { | 
|  | 1689 | long err; | 
|  | 1690 | compat_sigset_t csigmask; | 
|  | 1691 | sigset_t ksigmask, sigsaved; | 
|  | 1692 |  | 
|  | 1693 | /* | 
|  | 1694 | * If the caller wants a certain signal mask to be set during the wait, | 
|  | 1695 | * we apply it here. | 
|  | 1696 | */ | 
|  | 1697 | if (sigmask) { | 
|  | 1698 | if (sigsetsize != sizeof(compat_sigset_t)) | 
|  | 1699 | return -EINVAL; | 
|  | 1700 | if (copy_from_user(&csigmask, sigmask, sizeof(csigmask))) | 
|  | 1701 | return -EFAULT; | 
|  | 1702 | sigset_from_compat(&ksigmask, &csigmask); | 
|  | 1703 | sigdelsetmask(&ksigmask, sigmask(SIGKILL) | sigmask(SIGSTOP)); | 
|  | 1704 | sigprocmask(SIG_SETMASK, &ksigmask, &sigsaved); | 
|  | 1705 | } | 
|  | 1706 |  | 
|  | 1707 | err = sys_epoll_wait(epfd, events, maxevents, timeout); | 
|  | 1708 |  | 
|  | 1709 | /* | 
|  | 1710 | * If we changed the signal mask, we need to restore the original one. | 
|  | 1711 | * In case we've got a signal while waiting, we do not restore the | 
|  | 1712 | * signal mask yet, and we allow do_signal() to deliver the signal on | 
|  | 1713 | * the way back to userspace, before the signal mask is restored. | 
|  | 1714 | */ | 
|  | 1715 | if (sigmask) { | 
|  | 1716 | if (err == -EINTR) { | 
|  | 1717 | memcpy(¤t->saved_sigmask, &sigsaved, | 
|  | 1718 | sizeof(sigsaved)); | 
|  | 1719 | set_restore_sigmask(); | 
|  | 1720 | } else | 
|  | 1721 | sigprocmask(SIG_SETMASK, &sigsaved, NULL); | 
|  | 1722 | } | 
|  | 1723 |  | 
|  | 1724 | return err; | 
|  | 1725 | } | 
|  | 1726 | #endif /* HAVE_SET_RESTORE_SIGMASK */ | 
|  | 1727 |  | 
|  | 1728 | #endif /* CONFIG_EPOLL */ | 
|  | 1729 |  | 
|  | 1730 | #ifdef CONFIG_SIGNALFD | 
|  | 1731 |  | 
|  | 1732 | asmlinkage long compat_sys_signalfd4(int ufd, | 
|  | 1733 | const compat_sigset_t __user *sigmask, | 
|  | 1734 | compat_size_t sigsetsize, int flags) | 
|  | 1735 | { | 
|  | 1736 | compat_sigset_t ss32; | 
|  | 1737 | sigset_t tmp; | 
|  | 1738 | sigset_t __user *ksigmask; | 
|  | 1739 |  | 
|  | 1740 | if (sigsetsize != sizeof(compat_sigset_t)) | 
|  | 1741 | return -EINVAL; | 
|  | 1742 | if (copy_from_user(&ss32, sigmask, sizeof(ss32))) | 
|  | 1743 | return -EFAULT; | 
|  | 1744 | sigset_from_compat(&tmp, &ss32); | 
|  | 1745 | ksigmask = compat_alloc_user_space(sizeof(sigset_t)); | 
|  | 1746 | if (copy_to_user(ksigmask, &tmp, sizeof(sigset_t))) | 
|  | 1747 | return -EFAULT; | 
|  | 1748 |  | 
|  | 1749 | return sys_signalfd4(ufd, ksigmask, sizeof(sigset_t), flags); | 
|  | 1750 | } | 
|  | 1751 |  | 
|  | 1752 | asmlinkage long compat_sys_signalfd(int ufd, | 
|  | 1753 | const compat_sigset_t __user *sigmask, | 
|  | 1754 | compat_size_t sigsetsize) | 
|  | 1755 | { | 
|  | 1756 | return compat_sys_signalfd4(ufd, sigmask, sigsetsize, 0); | 
|  | 1757 | } | 
|  | 1758 | #endif /* CONFIG_SIGNALFD */ | 
|  | 1759 |  | 
|  | 1760 | #ifdef CONFIG_TIMERFD | 
|  | 1761 |  | 
|  | 1762 | asmlinkage long compat_sys_timerfd_settime(int ufd, int flags, | 
|  | 1763 | const struct compat_itimerspec __user *utmr, | 
|  | 1764 | struct compat_itimerspec __user *otmr) | 
|  | 1765 | { | 
|  | 1766 | int error; | 
|  | 1767 | struct itimerspec t; | 
|  | 1768 | struct itimerspec __user *ut; | 
|  | 1769 |  | 
|  | 1770 | if (get_compat_itimerspec(&t, utmr)) | 
|  | 1771 | return -EFAULT; | 
|  | 1772 | ut = compat_alloc_user_space(2 * sizeof(struct itimerspec)); | 
|  | 1773 | if (copy_to_user(&ut[0], &t, sizeof(t))) | 
|  | 1774 | return -EFAULT; | 
|  | 1775 | error = sys_timerfd_settime(ufd, flags, &ut[0], &ut[1]); | 
|  | 1776 | if (!error && otmr) | 
|  | 1777 | error = (copy_from_user(&t, &ut[1], sizeof(struct itimerspec)) || | 
|  | 1778 | put_compat_itimerspec(otmr, &t)) ? -EFAULT: 0; | 
|  | 1779 |  | 
|  | 1780 | return error; | 
|  | 1781 | } | 
|  | 1782 |  | 
|  | 1783 | asmlinkage long compat_sys_timerfd_gettime(int ufd, | 
|  | 1784 | struct compat_itimerspec __user *otmr) | 
|  | 1785 | { | 
|  | 1786 | int error; | 
|  | 1787 | struct itimerspec t; | 
|  | 1788 | struct itimerspec __user *ut; | 
|  | 1789 |  | 
|  | 1790 | ut = compat_alloc_user_space(sizeof(struct itimerspec)); | 
|  | 1791 | error = sys_timerfd_gettime(ufd, ut); | 
|  | 1792 | if (!error) | 
|  | 1793 | error = (copy_from_user(&t, ut, sizeof(struct itimerspec)) || | 
|  | 1794 | put_compat_itimerspec(otmr, &t)) ? -EFAULT: 0; | 
|  | 1795 |  | 
|  | 1796 | return error; | 
|  | 1797 | } | 
|  | 1798 |  | 
|  | 1799 | #endif /* CONFIG_TIMERFD */ | 
|  | 1800 |  | 
|  | 1801 | #ifdef CONFIG_FHANDLE | 
|  | 1802 | /* | 
|  | 1803 | * Exactly like fs/open.c:sys_open_by_handle_at(), except that it | 
|  | 1804 | * doesn't set the O_LARGEFILE flag. | 
|  | 1805 | */ | 
|  | 1806 | asmlinkage long | 
|  | 1807 | compat_sys_open_by_handle_at(int mountdirfd, | 
|  | 1808 | struct file_handle __user *handle, int flags) | 
|  | 1809 | { | 
|  | 1810 | return do_handle_open(mountdirfd, handle, flags); | 
|  | 1811 | } | 
|  | 1812 | #endif |