1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0-only
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * Based on arch/arm/kernel/signal.c
4*4882a593Smuzhiyun *
5*4882a593Smuzhiyun * Copyright (C) 1995-2009 Russell King
6*4882a593Smuzhiyun * Copyright (C) 2012 ARM Ltd.
7*4882a593Smuzhiyun */
8*4882a593Smuzhiyun
9*4882a593Smuzhiyun #include <linux/cache.h>
10*4882a593Smuzhiyun #include <linux/compat.h>
11*4882a593Smuzhiyun #include <linux/errno.h>
12*4882a593Smuzhiyun #include <linux/kernel.h>
13*4882a593Smuzhiyun #include <linux/signal.h>
14*4882a593Smuzhiyun #include <linux/personality.h>
15*4882a593Smuzhiyun #include <linux/freezer.h>
16*4882a593Smuzhiyun #include <linux/stddef.h>
17*4882a593Smuzhiyun #include <linux/uaccess.h>
18*4882a593Smuzhiyun #include <linux/sizes.h>
19*4882a593Smuzhiyun #include <linux/string.h>
20*4882a593Smuzhiyun #include <linux/tracehook.h>
21*4882a593Smuzhiyun #include <linux/ratelimit.h>
22*4882a593Smuzhiyun #include <linux/syscalls.h>
23*4882a593Smuzhiyun
24*4882a593Smuzhiyun #include <asm/daifflags.h>
25*4882a593Smuzhiyun #include <asm/debug-monitors.h>
26*4882a593Smuzhiyun #include <asm/elf.h>
27*4882a593Smuzhiyun #include <asm/cacheflush.h>
28*4882a593Smuzhiyun #include <asm/ucontext.h>
29*4882a593Smuzhiyun #include <asm/unistd.h>
30*4882a593Smuzhiyun #include <asm/fpsimd.h>
31*4882a593Smuzhiyun #include <asm/ptrace.h>
32*4882a593Smuzhiyun #include <asm/syscall.h>
33*4882a593Smuzhiyun #include <asm/signal32.h>
34*4882a593Smuzhiyun #include <asm/traps.h>
35*4882a593Smuzhiyun #include <asm/vdso.h>
36*4882a593Smuzhiyun
37*4882a593Smuzhiyun /*
38*4882a593Smuzhiyun * Do a signal return; undo the signal stack. These are aligned to 128-bit.
39*4882a593Smuzhiyun */
40*4882a593Smuzhiyun struct rt_sigframe {
41*4882a593Smuzhiyun struct siginfo info;
42*4882a593Smuzhiyun struct ucontext uc;
43*4882a593Smuzhiyun };
44*4882a593Smuzhiyun
45*4882a593Smuzhiyun struct frame_record {
46*4882a593Smuzhiyun u64 fp;
47*4882a593Smuzhiyun u64 lr;
48*4882a593Smuzhiyun };
49*4882a593Smuzhiyun
50*4882a593Smuzhiyun struct rt_sigframe_user_layout {
51*4882a593Smuzhiyun struct rt_sigframe __user *sigframe;
52*4882a593Smuzhiyun struct frame_record __user *next_frame;
53*4882a593Smuzhiyun
54*4882a593Smuzhiyun unsigned long size; /* size of allocated sigframe data */
55*4882a593Smuzhiyun unsigned long limit; /* largest allowed size */
56*4882a593Smuzhiyun
57*4882a593Smuzhiyun unsigned long fpsimd_offset;
58*4882a593Smuzhiyun unsigned long esr_offset;
59*4882a593Smuzhiyun unsigned long sve_offset;
60*4882a593Smuzhiyun unsigned long extra_offset;
61*4882a593Smuzhiyun unsigned long end_offset;
62*4882a593Smuzhiyun };
63*4882a593Smuzhiyun
64*4882a593Smuzhiyun #define BASE_SIGFRAME_SIZE round_up(sizeof(struct rt_sigframe), 16)
65*4882a593Smuzhiyun #define TERMINATOR_SIZE round_up(sizeof(struct _aarch64_ctx), 16)
66*4882a593Smuzhiyun #define EXTRA_CONTEXT_SIZE round_up(sizeof(struct extra_context), 16)
67*4882a593Smuzhiyun
init_user_layout(struct rt_sigframe_user_layout * user)68*4882a593Smuzhiyun static void init_user_layout(struct rt_sigframe_user_layout *user)
69*4882a593Smuzhiyun {
70*4882a593Smuzhiyun const size_t reserved_size =
71*4882a593Smuzhiyun sizeof(user->sigframe->uc.uc_mcontext.__reserved);
72*4882a593Smuzhiyun
73*4882a593Smuzhiyun memset(user, 0, sizeof(*user));
74*4882a593Smuzhiyun user->size = offsetof(struct rt_sigframe, uc.uc_mcontext.__reserved);
75*4882a593Smuzhiyun
76*4882a593Smuzhiyun user->limit = user->size + reserved_size;
77*4882a593Smuzhiyun
78*4882a593Smuzhiyun user->limit -= TERMINATOR_SIZE;
79*4882a593Smuzhiyun user->limit -= EXTRA_CONTEXT_SIZE;
80*4882a593Smuzhiyun /* Reserve space for extension and terminator ^ */
81*4882a593Smuzhiyun }
82*4882a593Smuzhiyun
sigframe_size(struct rt_sigframe_user_layout const * user)83*4882a593Smuzhiyun static size_t sigframe_size(struct rt_sigframe_user_layout const *user)
84*4882a593Smuzhiyun {
85*4882a593Smuzhiyun return round_up(max(user->size, sizeof(struct rt_sigframe)), 16);
86*4882a593Smuzhiyun }
87*4882a593Smuzhiyun
88*4882a593Smuzhiyun /*
89*4882a593Smuzhiyun * Sanity limit on the approximate maximum size of signal frame we'll
90*4882a593Smuzhiyun * try to generate. Stack alignment padding and the frame record are
91*4882a593Smuzhiyun * not taken into account. This limit is not a guarantee and is
92*4882a593Smuzhiyun * NOT ABI.
93*4882a593Smuzhiyun */
94*4882a593Smuzhiyun #define SIGFRAME_MAXSZ SZ_64K
95*4882a593Smuzhiyun
__sigframe_alloc(struct rt_sigframe_user_layout * user,unsigned long * offset,size_t size,bool extend)96*4882a593Smuzhiyun static int __sigframe_alloc(struct rt_sigframe_user_layout *user,
97*4882a593Smuzhiyun unsigned long *offset, size_t size, bool extend)
98*4882a593Smuzhiyun {
99*4882a593Smuzhiyun size_t padded_size = round_up(size, 16);
100*4882a593Smuzhiyun
101*4882a593Smuzhiyun if (padded_size > user->limit - user->size &&
102*4882a593Smuzhiyun !user->extra_offset &&
103*4882a593Smuzhiyun extend) {
104*4882a593Smuzhiyun int ret;
105*4882a593Smuzhiyun
106*4882a593Smuzhiyun user->limit += EXTRA_CONTEXT_SIZE;
107*4882a593Smuzhiyun ret = __sigframe_alloc(user, &user->extra_offset,
108*4882a593Smuzhiyun sizeof(struct extra_context), false);
109*4882a593Smuzhiyun if (ret) {
110*4882a593Smuzhiyun user->limit -= EXTRA_CONTEXT_SIZE;
111*4882a593Smuzhiyun return ret;
112*4882a593Smuzhiyun }
113*4882a593Smuzhiyun
114*4882a593Smuzhiyun /* Reserve space for the __reserved[] terminator */
115*4882a593Smuzhiyun user->size += TERMINATOR_SIZE;
116*4882a593Smuzhiyun
117*4882a593Smuzhiyun /*
118*4882a593Smuzhiyun * Allow expansion up to SIGFRAME_MAXSZ, ensuring space for
119*4882a593Smuzhiyun * the terminator:
120*4882a593Smuzhiyun */
121*4882a593Smuzhiyun user->limit = SIGFRAME_MAXSZ - TERMINATOR_SIZE;
122*4882a593Smuzhiyun }
123*4882a593Smuzhiyun
124*4882a593Smuzhiyun /* Still not enough space? Bad luck! */
125*4882a593Smuzhiyun if (padded_size > user->limit - user->size)
126*4882a593Smuzhiyun return -ENOMEM;
127*4882a593Smuzhiyun
128*4882a593Smuzhiyun *offset = user->size;
129*4882a593Smuzhiyun user->size += padded_size;
130*4882a593Smuzhiyun
131*4882a593Smuzhiyun return 0;
132*4882a593Smuzhiyun }
133*4882a593Smuzhiyun
134*4882a593Smuzhiyun /*
135*4882a593Smuzhiyun * Allocate space for an optional record of <size> bytes in the user
136*4882a593Smuzhiyun * signal frame. The offset from the signal frame base address to the
137*4882a593Smuzhiyun * allocated block is assigned to *offset.
138*4882a593Smuzhiyun */
sigframe_alloc(struct rt_sigframe_user_layout * user,unsigned long * offset,size_t size)139*4882a593Smuzhiyun static int sigframe_alloc(struct rt_sigframe_user_layout *user,
140*4882a593Smuzhiyun unsigned long *offset, size_t size)
141*4882a593Smuzhiyun {
142*4882a593Smuzhiyun return __sigframe_alloc(user, offset, size, true);
143*4882a593Smuzhiyun }
144*4882a593Smuzhiyun
145*4882a593Smuzhiyun /* Allocate the null terminator record and prevent further allocations */
sigframe_alloc_end(struct rt_sigframe_user_layout * user)146*4882a593Smuzhiyun static int sigframe_alloc_end(struct rt_sigframe_user_layout *user)
147*4882a593Smuzhiyun {
148*4882a593Smuzhiyun int ret;
149*4882a593Smuzhiyun
150*4882a593Smuzhiyun /* Un-reserve the space reserved for the terminator: */
151*4882a593Smuzhiyun user->limit += TERMINATOR_SIZE;
152*4882a593Smuzhiyun
153*4882a593Smuzhiyun ret = sigframe_alloc(user, &user->end_offset,
154*4882a593Smuzhiyun sizeof(struct _aarch64_ctx));
155*4882a593Smuzhiyun if (ret)
156*4882a593Smuzhiyun return ret;
157*4882a593Smuzhiyun
158*4882a593Smuzhiyun /* Prevent further allocation: */
159*4882a593Smuzhiyun user->limit = user->size;
160*4882a593Smuzhiyun return 0;
161*4882a593Smuzhiyun }
162*4882a593Smuzhiyun
apply_user_offset(struct rt_sigframe_user_layout const * user,unsigned long offset)163*4882a593Smuzhiyun static void __user *apply_user_offset(
164*4882a593Smuzhiyun struct rt_sigframe_user_layout const *user, unsigned long offset)
165*4882a593Smuzhiyun {
166*4882a593Smuzhiyun char __user *base = (char __user *)user->sigframe;
167*4882a593Smuzhiyun
168*4882a593Smuzhiyun return base + offset;
169*4882a593Smuzhiyun }
170*4882a593Smuzhiyun
preserve_fpsimd_context(struct fpsimd_context __user * ctx)171*4882a593Smuzhiyun static int preserve_fpsimd_context(struct fpsimd_context __user *ctx)
172*4882a593Smuzhiyun {
173*4882a593Smuzhiyun struct user_fpsimd_state const *fpsimd =
174*4882a593Smuzhiyun ¤t->thread.uw.fpsimd_state;
175*4882a593Smuzhiyun int err;
176*4882a593Smuzhiyun
177*4882a593Smuzhiyun /* copy the FP and status/control registers */
178*4882a593Smuzhiyun err = __copy_to_user(ctx->vregs, fpsimd->vregs, sizeof(fpsimd->vregs));
179*4882a593Smuzhiyun __put_user_error(fpsimd->fpsr, &ctx->fpsr, err);
180*4882a593Smuzhiyun __put_user_error(fpsimd->fpcr, &ctx->fpcr, err);
181*4882a593Smuzhiyun
182*4882a593Smuzhiyun /* copy the magic/size information */
183*4882a593Smuzhiyun __put_user_error(FPSIMD_MAGIC, &ctx->head.magic, err);
184*4882a593Smuzhiyun __put_user_error(sizeof(struct fpsimd_context), &ctx->head.size, err);
185*4882a593Smuzhiyun
186*4882a593Smuzhiyun return err ? -EFAULT : 0;
187*4882a593Smuzhiyun }
188*4882a593Smuzhiyun
restore_fpsimd_context(struct fpsimd_context __user * ctx)189*4882a593Smuzhiyun static int restore_fpsimd_context(struct fpsimd_context __user *ctx)
190*4882a593Smuzhiyun {
191*4882a593Smuzhiyun struct user_fpsimd_state fpsimd;
192*4882a593Smuzhiyun __u32 magic, size;
193*4882a593Smuzhiyun int err = 0;
194*4882a593Smuzhiyun
195*4882a593Smuzhiyun /* check the magic/size information */
196*4882a593Smuzhiyun __get_user_error(magic, &ctx->head.magic, err);
197*4882a593Smuzhiyun __get_user_error(size, &ctx->head.size, err);
198*4882a593Smuzhiyun if (err)
199*4882a593Smuzhiyun return -EFAULT;
200*4882a593Smuzhiyun if (magic != FPSIMD_MAGIC || size != sizeof(struct fpsimd_context))
201*4882a593Smuzhiyun return -EINVAL;
202*4882a593Smuzhiyun
203*4882a593Smuzhiyun /* copy the FP and status/control registers */
204*4882a593Smuzhiyun err = __copy_from_user(fpsimd.vregs, ctx->vregs,
205*4882a593Smuzhiyun sizeof(fpsimd.vregs));
206*4882a593Smuzhiyun __get_user_error(fpsimd.fpsr, &ctx->fpsr, err);
207*4882a593Smuzhiyun __get_user_error(fpsimd.fpcr, &ctx->fpcr, err);
208*4882a593Smuzhiyun
209*4882a593Smuzhiyun clear_thread_flag(TIF_SVE);
210*4882a593Smuzhiyun
211*4882a593Smuzhiyun /* load the hardware registers from the fpsimd_state structure */
212*4882a593Smuzhiyun if (!err)
213*4882a593Smuzhiyun fpsimd_update_current_state(&fpsimd);
214*4882a593Smuzhiyun
215*4882a593Smuzhiyun return err ? -EFAULT : 0;
216*4882a593Smuzhiyun }
217*4882a593Smuzhiyun
218*4882a593Smuzhiyun
219*4882a593Smuzhiyun struct user_ctxs {
220*4882a593Smuzhiyun struct fpsimd_context __user *fpsimd;
221*4882a593Smuzhiyun struct sve_context __user *sve;
222*4882a593Smuzhiyun };
223*4882a593Smuzhiyun
224*4882a593Smuzhiyun #ifdef CONFIG_ARM64_SVE
225*4882a593Smuzhiyun
preserve_sve_context(struct sve_context __user * ctx)226*4882a593Smuzhiyun static int preserve_sve_context(struct sve_context __user *ctx)
227*4882a593Smuzhiyun {
228*4882a593Smuzhiyun int err = 0;
229*4882a593Smuzhiyun u16 reserved[ARRAY_SIZE(ctx->__reserved)];
230*4882a593Smuzhiyun unsigned int vl = current->thread.sve_vl;
231*4882a593Smuzhiyun unsigned int vq = 0;
232*4882a593Smuzhiyun
233*4882a593Smuzhiyun if (test_thread_flag(TIF_SVE))
234*4882a593Smuzhiyun vq = sve_vq_from_vl(vl);
235*4882a593Smuzhiyun
236*4882a593Smuzhiyun memset(reserved, 0, sizeof(reserved));
237*4882a593Smuzhiyun
238*4882a593Smuzhiyun __put_user_error(SVE_MAGIC, &ctx->head.magic, err);
239*4882a593Smuzhiyun __put_user_error(round_up(SVE_SIG_CONTEXT_SIZE(vq), 16),
240*4882a593Smuzhiyun &ctx->head.size, err);
241*4882a593Smuzhiyun __put_user_error(vl, &ctx->vl, err);
242*4882a593Smuzhiyun BUILD_BUG_ON(sizeof(ctx->__reserved) != sizeof(reserved));
243*4882a593Smuzhiyun err |= __copy_to_user(&ctx->__reserved, reserved, sizeof(reserved));
244*4882a593Smuzhiyun
245*4882a593Smuzhiyun if (vq) {
246*4882a593Smuzhiyun /*
247*4882a593Smuzhiyun * This assumes that the SVE state has already been saved to
248*4882a593Smuzhiyun * the task struct by calling the function
249*4882a593Smuzhiyun * fpsimd_signal_preserve_current_state().
250*4882a593Smuzhiyun */
251*4882a593Smuzhiyun err |= __copy_to_user((char __user *)ctx + SVE_SIG_REGS_OFFSET,
252*4882a593Smuzhiyun current->thread.sve_state,
253*4882a593Smuzhiyun SVE_SIG_REGS_SIZE(vq));
254*4882a593Smuzhiyun }
255*4882a593Smuzhiyun
256*4882a593Smuzhiyun return err ? -EFAULT : 0;
257*4882a593Smuzhiyun }
258*4882a593Smuzhiyun
restore_sve_fpsimd_context(struct user_ctxs * user)259*4882a593Smuzhiyun static int restore_sve_fpsimd_context(struct user_ctxs *user)
260*4882a593Smuzhiyun {
261*4882a593Smuzhiyun int err;
262*4882a593Smuzhiyun unsigned int vq;
263*4882a593Smuzhiyun struct user_fpsimd_state fpsimd;
264*4882a593Smuzhiyun struct sve_context sve;
265*4882a593Smuzhiyun
266*4882a593Smuzhiyun if (__copy_from_user(&sve, user->sve, sizeof(sve)))
267*4882a593Smuzhiyun return -EFAULT;
268*4882a593Smuzhiyun
269*4882a593Smuzhiyun if (sve.vl != current->thread.sve_vl)
270*4882a593Smuzhiyun return -EINVAL;
271*4882a593Smuzhiyun
272*4882a593Smuzhiyun if (sve.head.size <= sizeof(*user->sve)) {
273*4882a593Smuzhiyun clear_thread_flag(TIF_SVE);
274*4882a593Smuzhiyun goto fpsimd_only;
275*4882a593Smuzhiyun }
276*4882a593Smuzhiyun
277*4882a593Smuzhiyun vq = sve_vq_from_vl(sve.vl);
278*4882a593Smuzhiyun
279*4882a593Smuzhiyun if (sve.head.size < SVE_SIG_CONTEXT_SIZE(vq))
280*4882a593Smuzhiyun return -EINVAL;
281*4882a593Smuzhiyun
282*4882a593Smuzhiyun /*
283*4882a593Smuzhiyun * Careful: we are about __copy_from_user() directly into
284*4882a593Smuzhiyun * thread.sve_state with preemption enabled, so protection is
285*4882a593Smuzhiyun * needed to prevent a racing context switch from writing stale
286*4882a593Smuzhiyun * registers back over the new data.
287*4882a593Smuzhiyun */
288*4882a593Smuzhiyun
289*4882a593Smuzhiyun fpsimd_flush_task_state(current);
290*4882a593Smuzhiyun /* From now, fpsimd_thread_switch() won't touch thread.sve_state */
291*4882a593Smuzhiyun
292*4882a593Smuzhiyun sve_alloc(current);
293*4882a593Smuzhiyun err = __copy_from_user(current->thread.sve_state,
294*4882a593Smuzhiyun (char __user const *)user->sve +
295*4882a593Smuzhiyun SVE_SIG_REGS_OFFSET,
296*4882a593Smuzhiyun SVE_SIG_REGS_SIZE(vq));
297*4882a593Smuzhiyun if (err)
298*4882a593Smuzhiyun return -EFAULT;
299*4882a593Smuzhiyun
300*4882a593Smuzhiyun set_thread_flag(TIF_SVE);
301*4882a593Smuzhiyun
302*4882a593Smuzhiyun fpsimd_only:
303*4882a593Smuzhiyun /* copy the FP and status/control registers */
304*4882a593Smuzhiyun /* restore_sigframe() already checked that user->fpsimd != NULL. */
305*4882a593Smuzhiyun err = __copy_from_user(fpsimd.vregs, user->fpsimd->vregs,
306*4882a593Smuzhiyun sizeof(fpsimd.vregs));
307*4882a593Smuzhiyun __get_user_error(fpsimd.fpsr, &user->fpsimd->fpsr, err);
308*4882a593Smuzhiyun __get_user_error(fpsimd.fpcr, &user->fpsimd->fpcr, err);
309*4882a593Smuzhiyun
310*4882a593Smuzhiyun /* load the hardware registers from the fpsimd_state structure */
311*4882a593Smuzhiyun if (!err)
312*4882a593Smuzhiyun fpsimd_update_current_state(&fpsimd);
313*4882a593Smuzhiyun
314*4882a593Smuzhiyun return err ? -EFAULT : 0;
315*4882a593Smuzhiyun }
316*4882a593Smuzhiyun
317*4882a593Smuzhiyun #else /* ! CONFIG_ARM64_SVE */
318*4882a593Smuzhiyun
319*4882a593Smuzhiyun /* Turn any non-optimised out attempts to use these into a link error: */
320*4882a593Smuzhiyun extern int preserve_sve_context(void __user *ctx);
321*4882a593Smuzhiyun extern int restore_sve_fpsimd_context(struct user_ctxs *user);
322*4882a593Smuzhiyun
323*4882a593Smuzhiyun #endif /* ! CONFIG_ARM64_SVE */
324*4882a593Smuzhiyun
325*4882a593Smuzhiyun
parse_user_sigframe(struct user_ctxs * user,struct rt_sigframe __user * sf)326*4882a593Smuzhiyun static int parse_user_sigframe(struct user_ctxs *user,
327*4882a593Smuzhiyun struct rt_sigframe __user *sf)
328*4882a593Smuzhiyun {
329*4882a593Smuzhiyun struct sigcontext __user *const sc = &sf->uc.uc_mcontext;
330*4882a593Smuzhiyun struct _aarch64_ctx __user *head;
331*4882a593Smuzhiyun char __user *base = (char __user *)&sc->__reserved;
332*4882a593Smuzhiyun size_t offset = 0;
333*4882a593Smuzhiyun size_t limit = sizeof(sc->__reserved);
334*4882a593Smuzhiyun bool have_extra_context = false;
335*4882a593Smuzhiyun char const __user *const sfp = (char const __user *)sf;
336*4882a593Smuzhiyun
337*4882a593Smuzhiyun user->fpsimd = NULL;
338*4882a593Smuzhiyun user->sve = NULL;
339*4882a593Smuzhiyun
340*4882a593Smuzhiyun if (!IS_ALIGNED((unsigned long)base, 16))
341*4882a593Smuzhiyun goto invalid;
342*4882a593Smuzhiyun
343*4882a593Smuzhiyun while (1) {
344*4882a593Smuzhiyun int err = 0;
345*4882a593Smuzhiyun u32 magic, size;
346*4882a593Smuzhiyun char const __user *userp;
347*4882a593Smuzhiyun struct extra_context const __user *extra;
348*4882a593Smuzhiyun u64 extra_datap;
349*4882a593Smuzhiyun u32 extra_size;
350*4882a593Smuzhiyun struct _aarch64_ctx const __user *end;
351*4882a593Smuzhiyun u32 end_magic, end_size;
352*4882a593Smuzhiyun
353*4882a593Smuzhiyun if (limit - offset < sizeof(*head))
354*4882a593Smuzhiyun goto invalid;
355*4882a593Smuzhiyun
356*4882a593Smuzhiyun if (!IS_ALIGNED(offset, 16))
357*4882a593Smuzhiyun goto invalid;
358*4882a593Smuzhiyun
359*4882a593Smuzhiyun head = (struct _aarch64_ctx __user *)(base + offset);
360*4882a593Smuzhiyun __get_user_error(magic, &head->magic, err);
361*4882a593Smuzhiyun __get_user_error(size, &head->size, err);
362*4882a593Smuzhiyun if (err)
363*4882a593Smuzhiyun return err;
364*4882a593Smuzhiyun
365*4882a593Smuzhiyun if (limit - offset < size)
366*4882a593Smuzhiyun goto invalid;
367*4882a593Smuzhiyun
368*4882a593Smuzhiyun switch (magic) {
369*4882a593Smuzhiyun case 0:
370*4882a593Smuzhiyun if (size)
371*4882a593Smuzhiyun goto invalid;
372*4882a593Smuzhiyun
373*4882a593Smuzhiyun goto done;
374*4882a593Smuzhiyun
375*4882a593Smuzhiyun case FPSIMD_MAGIC:
376*4882a593Smuzhiyun if (!system_supports_fpsimd())
377*4882a593Smuzhiyun goto invalid;
378*4882a593Smuzhiyun if (user->fpsimd)
379*4882a593Smuzhiyun goto invalid;
380*4882a593Smuzhiyun
381*4882a593Smuzhiyun if (size < sizeof(*user->fpsimd))
382*4882a593Smuzhiyun goto invalid;
383*4882a593Smuzhiyun
384*4882a593Smuzhiyun user->fpsimd = (struct fpsimd_context __user *)head;
385*4882a593Smuzhiyun break;
386*4882a593Smuzhiyun
387*4882a593Smuzhiyun case ESR_MAGIC:
388*4882a593Smuzhiyun /* ignore */
389*4882a593Smuzhiyun break;
390*4882a593Smuzhiyun
391*4882a593Smuzhiyun case SVE_MAGIC:
392*4882a593Smuzhiyun if (!system_supports_sve())
393*4882a593Smuzhiyun goto invalid;
394*4882a593Smuzhiyun
395*4882a593Smuzhiyun if (user->sve)
396*4882a593Smuzhiyun goto invalid;
397*4882a593Smuzhiyun
398*4882a593Smuzhiyun if (size < sizeof(*user->sve))
399*4882a593Smuzhiyun goto invalid;
400*4882a593Smuzhiyun
401*4882a593Smuzhiyun user->sve = (struct sve_context __user *)head;
402*4882a593Smuzhiyun break;
403*4882a593Smuzhiyun
404*4882a593Smuzhiyun case EXTRA_MAGIC:
405*4882a593Smuzhiyun if (have_extra_context)
406*4882a593Smuzhiyun goto invalid;
407*4882a593Smuzhiyun
408*4882a593Smuzhiyun if (size < sizeof(*extra))
409*4882a593Smuzhiyun goto invalid;
410*4882a593Smuzhiyun
411*4882a593Smuzhiyun userp = (char const __user *)head;
412*4882a593Smuzhiyun
413*4882a593Smuzhiyun extra = (struct extra_context const __user *)userp;
414*4882a593Smuzhiyun userp += size;
415*4882a593Smuzhiyun
416*4882a593Smuzhiyun __get_user_error(extra_datap, &extra->datap, err);
417*4882a593Smuzhiyun __get_user_error(extra_size, &extra->size, err);
418*4882a593Smuzhiyun if (err)
419*4882a593Smuzhiyun return err;
420*4882a593Smuzhiyun
421*4882a593Smuzhiyun /* Check for the dummy terminator in __reserved[]: */
422*4882a593Smuzhiyun
423*4882a593Smuzhiyun if (limit - offset - size < TERMINATOR_SIZE)
424*4882a593Smuzhiyun goto invalid;
425*4882a593Smuzhiyun
426*4882a593Smuzhiyun end = (struct _aarch64_ctx const __user *)userp;
427*4882a593Smuzhiyun userp += TERMINATOR_SIZE;
428*4882a593Smuzhiyun
429*4882a593Smuzhiyun __get_user_error(end_magic, &end->magic, err);
430*4882a593Smuzhiyun __get_user_error(end_size, &end->size, err);
431*4882a593Smuzhiyun if (err)
432*4882a593Smuzhiyun return err;
433*4882a593Smuzhiyun
434*4882a593Smuzhiyun if (end_magic || end_size)
435*4882a593Smuzhiyun goto invalid;
436*4882a593Smuzhiyun
437*4882a593Smuzhiyun /* Prevent looping/repeated parsing of extra_context */
438*4882a593Smuzhiyun have_extra_context = true;
439*4882a593Smuzhiyun
440*4882a593Smuzhiyun base = (__force void __user *)extra_datap;
441*4882a593Smuzhiyun if (!IS_ALIGNED((unsigned long)base, 16))
442*4882a593Smuzhiyun goto invalid;
443*4882a593Smuzhiyun
444*4882a593Smuzhiyun if (!IS_ALIGNED(extra_size, 16))
445*4882a593Smuzhiyun goto invalid;
446*4882a593Smuzhiyun
447*4882a593Smuzhiyun if (base != userp)
448*4882a593Smuzhiyun goto invalid;
449*4882a593Smuzhiyun
450*4882a593Smuzhiyun /* Reject "unreasonably large" frames: */
451*4882a593Smuzhiyun if (extra_size > sfp + SIGFRAME_MAXSZ - userp)
452*4882a593Smuzhiyun goto invalid;
453*4882a593Smuzhiyun
454*4882a593Smuzhiyun /*
455*4882a593Smuzhiyun * Ignore trailing terminator in __reserved[]
456*4882a593Smuzhiyun * and start parsing extra data:
457*4882a593Smuzhiyun */
458*4882a593Smuzhiyun offset = 0;
459*4882a593Smuzhiyun limit = extra_size;
460*4882a593Smuzhiyun
461*4882a593Smuzhiyun if (!access_ok(base, limit))
462*4882a593Smuzhiyun goto invalid;
463*4882a593Smuzhiyun
464*4882a593Smuzhiyun continue;
465*4882a593Smuzhiyun
466*4882a593Smuzhiyun default:
467*4882a593Smuzhiyun goto invalid;
468*4882a593Smuzhiyun }
469*4882a593Smuzhiyun
470*4882a593Smuzhiyun if (size < sizeof(*head))
471*4882a593Smuzhiyun goto invalid;
472*4882a593Smuzhiyun
473*4882a593Smuzhiyun if (limit - offset < size)
474*4882a593Smuzhiyun goto invalid;
475*4882a593Smuzhiyun
476*4882a593Smuzhiyun offset += size;
477*4882a593Smuzhiyun }
478*4882a593Smuzhiyun
479*4882a593Smuzhiyun done:
480*4882a593Smuzhiyun return 0;
481*4882a593Smuzhiyun
482*4882a593Smuzhiyun invalid:
483*4882a593Smuzhiyun return -EINVAL;
484*4882a593Smuzhiyun }
485*4882a593Smuzhiyun
restore_sigframe(struct pt_regs * regs,struct rt_sigframe __user * sf)486*4882a593Smuzhiyun static int restore_sigframe(struct pt_regs *regs,
487*4882a593Smuzhiyun struct rt_sigframe __user *sf)
488*4882a593Smuzhiyun {
489*4882a593Smuzhiyun sigset_t set;
490*4882a593Smuzhiyun int i, err;
491*4882a593Smuzhiyun struct user_ctxs user;
492*4882a593Smuzhiyun
493*4882a593Smuzhiyun err = __copy_from_user(&set, &sf->uc.uc_sigmask, sizeof(set));
494*4882a593Smuzhiyun if (err == 0)
495*4882a593Smuzhiyun set_current_blocked(&set);
496*4882a593Smuzhiyun
497*4882a593Smuzhiyun for (i = 0; i < 31; i++)
498*4882a593Smuzhiyun __get_user_error(regs->regs[i], &sf->uc.uc_mcontext.regs[i],
499*4882a593Smuzhiyun err);
500*4882a593Smuzhiyun __get_user_error(regs->sp, &sf->uc.uc_mcontext.sp, err);
501*4882a593Smuzhiyun __get_user_error(regs->pc, &sf->uc.uc_mcontext.pc, err);
502*4882a593Smuzhiyun __get_user_error(regs->pstate, &sf->uc.uc_mcontext.pstate, err);
503*4882a593Smuzhiyun
504*4882a593Smuzhiyun /*
505*4882a593Smuzhiyun * Avoid sys_rt_sigreturn() restarting.
506*4882a593Smuzhiyun */
507*4882a593Smuzhiyun forget_syscall(regs);
508*4882a593Smuzhiyun
509*4882a593Smuzhiyun err |= !valid_user_regs(®s->user_regs, current);
510*4882a593Smuzhiyun if (err == 0)
511*4882a593Smuzhiyun err = parse_user_sigframe(&user, sf);
512*4882a593Smuzhiyun
513*4882a593Smuzhiyun if (err == 0 && system_supports_fpsimd()) {
514*4882a593Smuzhiyun if (!user.fpsimd)
515*4882a593Smuzhiyun return -EINVAL;
516*4882a593Smuzhiyun
517*4882a593Smuzhiyun if (user.sve) {
518*4882a593Smuzhiyun if (!system_supports_sve())
519*4882a593Smuzhiyun return -EINVAL;
520*4882a593Smuzhiyun
521*4882a593Smuzhiyun err = restore_sve_fpsimd_context(&user);
522*4882a593Smuzhiyun } else {
523*4882a593Smuzhiyun err = restore_fpsimd_context(user.fpsimd);
524*4882a593Smuzhiyun }
525*4882a593Smuzhiyun }
526*4882a593Smuzhiyun
527*4882a593Smuzhiyun return err;
528*4882a593Smuzhiyun }
529*4882a593Smuzhiyun
SYSCALL_DEFINE0(rt_sigreturn)530*4882a593Smuzhiyun SYSCALL_DEFINE0(rt_sigreturn)
531*4882a593Smuzhiyun {
532*4882a593Smuzhiyun struct pt_regs *regs = current_pt_regs();
533*4882a593Smuzhiyun struct rt_sigframe __user *frame;
534*4882a593Smuzhiyun
535*4882a593Smuzhiyun /* Always make any pending restarted system calls return -EINTR */
536*4882a593Smuzhiyun current->restart_block.fn = do_no_restart_syscall;
537*4882a593Smuzhiyun
538*4882a593Smuzhiyun /*
539*4882a593Smuzhiyun * Since we stacked the signal on a 128-bit boundary, then 'sp' should
540*4882a593Smuzhiyun * be word aligned here.
541*4882a593Smuzhiyun */
542*4882a593Smuzhiyun if (regs->sp & 15)
543*4882a593Smuzhiyun goto badframe;
544*4882a593Smuzhiyun
545*4882a593Smuzhiyun frame = (struct rt_sigframe __user *)regs->sp;
546*4882a593Smuzhiyun
547*4882a593Smuzhiyun if (!access_ok(frame, sizeof (*frame)))
548*4882a593Smuzhiyun goto badframe;
549*4882a593Smuzhiyun
550*4882a593Smuzhiyun if (restore_sigframe(regs, frame))
551*4882a593Smuzhiyun goto badframe;
552*4882a593Smuzhiyun
553*4882a593Smuzhiyun if (restore_altstack(&frame->uc.uc_stack))
554*4882a593Smuzhiyun goto badframe;
555*4882a593Smuzhiyun
556*4882a593Smuzhiyun return regs->regs[0];
557*4882a593Smuzhiyun
558*4882a593Smuzhiyun badframe:
559*4882a593Smuzhiyun arm64_notify_segfault(regs->sp);
560*4882a593Smuzhiyun return 0;
561*4882a593Smuzhiyun }
562*4882a593Smuzhiyun
563*4882a593Smuzhiyun /*
564*4882a593Smuzhiyun * Determine the layout of optional records in the signal frame
565*4882a593Smuzhiyun *
566*4882a593Smuzhiyun * add_all: if true, lays out the biggest possible signal frame for
567*4882a593Smuzhiyun * this task; otherwise, generates a layout for the current state
568*4882a593Smuzhiyun * of the task.
569*4882a593Smuzhiyun */
setup_sigframe_layout(struct rt_sigframe_user_layout * user,bool add_all)570*4882a593Smuzhiyun static int setup_sigframe_layout(struct rt_sigframe_user_layout *user,
571*4882a593Smuzhiyun bool add_all)
572*4882a593Smuzhiyun {
573*4882a593Smuzhiyun int err;
574*4882a593Smuzhiyun
575*4882a593Smuzhiyun if (system_supports_fpsimd()) {
576*4882a593Smuzhiyun err = sigframe_alloc(user, &user->fpsimd_offset,
577*4882a593Smuzhiyun sizeof(struct fpsimd_context));
578*4882a593Smuzhiyun if (err)
579*4882a593Smuzhiyun return err;
580*4882a593Smuzhiyun }
581*4882a593Smuzhiyun
582*4882a593Smuzhiyun /* fault information, if valid */
583*4882a593Smuzhiyun if (add_all || current->thread.fault_code) {
584*4882a593Smuzhiyun err = sigframe_alloc(user, &user->esr_offset,
585*4882a593Smuzhiyun sizeof(struct esr_context));
586*4882a593Smuzhiyun if (err)
587*4882a593Smuzhiyun return err;
588*4882a593Smuzhiyun }
589*4882a593Smuzhiyun
590*4882a593Smuzhiyun if (system_supports_sve()) {
591*4882a593Smuzhiyun unsigned int vq = 0;
592*4882a593Smuzhiyun
593*4882a593Smuzhiyun if (add_all || test_thread_flag(TIF_SVE)) {
594*4882a593Smuzhiyun int vl = sve_max_vl;
595*4882a593Smuzhiyun
596*4882a593Smuzhiyun if (!add_all)
597*4882a593Smuzhiyun vl = current->thread.sve_vl;
598*4882a593Smuzhiyun
599*4882a593Smuzhiyun vq = sve_vq_from_vl(vl);
600*4882a593Smuzhiyun }
601*4882a593Smuzhiyun
602*4882a593Smuzhiyun err = sigframe_alloc(user, &user->sve_offset,
603*4882a593Smuzhiyun SVE_SIG_CONTEXT_SIZE(vq));
604*4882a593Smuzhiyun if (err)
605*4882a593Smuzhiyun return err;
606*4882a593Smuzhiyun }
607*4882a593Smuzhiyun
608*4882a593Smuzhiyun return sigframe_alloc_end(user);
609*4882a593Smuzhiyun }
610*4882a593Smuzhiyun
setup_sigframe(struct rt_sigframe_user_layout * user,struct pt_regs * regs,sigset_t * set)611*4882a593Smuzhiyun static int setup_sigframe(struct rt_sigframe_user_layout *user,
612*4882a593Smuzhiyun struct pt_regs *regs, sigset_t *set)
613*4882a593Smuzhiyun {
614*4882a593Smuzhiyun int i, err = 0;
615*4882a593Smuzhiyun struct rt_sigframe __user *sf = user->sigframe;
616*4882a593Smuzhiyun
617*4882a593Smuzhiyun /* set up the stack frame for unwinding */
618*4882a593Smuzhiyun __put_user_error(regs->regs[29], &user->next_frame->fp, err);
619*4882a593Smuzhiyun __put_user_error(regs->regs[30], &user->next_frame->lr, err);
620*4882a593Smuzhiyun
621*4882a593Smuzhiyun for (i = 0; i < 31; i++)
622*4882a593Smuzhiyun __put_user_error(regs->regs[i], &sf->uc.uc_mcontext.regs[i],
623*4882a593Smuzhiyun err);
624*4882a593Smuzhiyun __put_user_error(regs->sp, &sf->uc.uc_mcontext.sp, err);
625*4882a593Smuzhiyun __put_user_error(regs->pc, &sf->uc.uc_mcontext.pc, err);
626*4882a593Smuzhiyun __put_user_error(regs->pstate, &sf->uc.uc_mcontext.pstate, err);
627*4882a593Smuzhiyun
628*4882a593Smuzhiyun __put_user_error(current->thread.fault_address, &sf->uc.uc_mcontext.fault_address, err);
629*4882a593Smuzhiyun
630*4882a593Smuzhiyun err |= __copy_to_user(&sf->uc.uc_sigmask, set, sizeof(*set));
631*4882a593Smuzhiyun
632*4882a593Smuzhiyun if (err == 0 && system_supports_fpsimd()) {
633*4882a593Smuzhiyun struct fpsimd_context __user *fpsimd_ctx =
634*4882a593Smuzhiyun apply_user_offset(user, user->fpsimd_offset);
635*4882a593Smuzhiyun err |= preserve_fpsimd_context(fpsimd_ctx);
636*4882a593Smuzhiyun }
637*4882a593Smuzhiyun
638*4882a593Smuzhiyun /* fault information, if valid */
639*4882a593Smuzhiyun if (err == 0 && user->esr_offset) {
640*4882a593Smuzhiyun struct esr_context __user *esr_ctx =
641*4882a593Smuzhiyun apply_user_offset(user, user->esr_offset);
642*4882a593Smuzhiyun
643*4882a593Smuzhiyun __put_user_error(ESR_MAGIC, &esr_ctx->head.magic, err);
644*4882a593Smuzhiyun __put_user_error(sizeof(*esr_ctx), &esr_ctx->head.size, err);
645*4882a593Smuzhiyun __put_user_error(current->thread.fault_code, &esr_ctx->esr, err);
646*4882a593Smuzhiyun }
647*4882a593Smuzhiyun
648*4882a593Smuzhiyun /* Scalable Vector Extension state, if present */
649*4882a593Smuzhiyun if (system_supports_sve() && err == 0 && user->sve_offset) {
650*4882a593Smuzhiyun struct sve_context __user *sve_ctx =
651*4882a593Smuzhiyun apply_user_offset(user, user->sve_offset);
652*4882a593Smuzhiyun err |= preserve_sve_context(sve_ctx);
653*4882a593Smuzhiyun }
654*4882a593Smuzhiyun
655*4882a593Smuzhiyun if (err == 0 && user->extra_offset) {
656*4882a593Smuzhiyun char __user *sfp = (char __user *)user->sigframe;
657*4882a593Smuzhiyun char __user *userp =
658*4882a593Smuzhiyun apply_user_offset(user, user->extra_offset);
659*4882a593Smuzhiyun
660*4882a593Smuzhiyun struct extra_context __user *extra;
661*4882a593Smuzhiyun struct _aarch64_ctx __user *end;
662*4882a593Smuzhiyun u64 extra_datap;
663*4882a593Smuzhiyun u32 extra_size;
664*4882a593Smuzhiyun
665*4882a593Smuzhiyun extra = (struct extra_context __user *)userp;
666*4882a593Smuzhiyun userp += EXTRA_CONTEXT_SIZE;
667*4882a593Smuzhiyun
668*4882a593Smuzhiyun end = (struct _aarch64_ctx __user *)userp;
669*4882a593Smuzhiyun userp += TERMINATOR_SIZE;
670*4882a593Smuzhiyun
671*4882a593Smuzhiyun /*
672*4882a593Smuzhiyun * extra_datap is just written to the signal frame.
673*4882a593Smuzhiyun * The value gets cast back to a void __user *
674*4882a593Smuzhiyun * during sigreturn.
675*4882a593Smuzhiyun */
676*4882a593Smuzhiyun extra_datap = (__force u64)userp;
677*4882a593Smuzhiyun extra_size = sfp + round_up(user->size, 16) - userp;
678*4882a593Smuzhiyun
679*4882a593Smuzhiyun __put_user_error(EXTRA_MAGIC, &extra->head.magic, err);
680*4882a593Smuzhiyun __put_user_error(EXTRA_CONTEXT_SIZE, &extra->head.size, err);
681*4882a593Smuzhiyun __put_user_error(extra_datap, &extra->datap, err);
682*4882a593Smuzhiyun __put_user_error(extra_size, &extra->size, err);
683*4882a593Smuzhiyun
684*4882a593Smuzhiyun /* Add the terminator */
685*4882a593Smuzhiyun __put_user_error(0, &end->magic, err);
686*4882a593Smuzhiyun __put_user_error(0, &end->size, err);
687*4882a593Smuzhiyun }
688*4882a593Smuzhiyun
689*4882a593Smuzhiyun /* set the "end" magic */
690*4882a593Smuzhiyun if (err == 0) {
691*4882a593Smuzhiyun struct _aarch64_ctx __user *end =
692*4882a593Smuzhiyun apply_user_offset(user, user->end_offset);
693*4882a593Smuzhiyun
694*4882a593Smuzhiyun __put_user_error(0, &end->magic, err);
695*4882a593Smuzhiyun __put_user_error(0, &end->size, err);
696*4882a593Smuzhiyun }
697*4882a593Smuzhiyun
698*4882a593Smuzhiyun return err;
699*4882a593Smuzhiyun }
700*4882a593Smuzhiyun
get_sigframe(struct rt_sigframe_user_layout * user,struct ksignal * ksig,struct pt_regs * regs)701*4882a593Smuzhiyun static int get_sigframe(struct rt_sigframe_user_layout *user,
702*4882a593Smuzhiyun struct ksignal *ksig, struct pt_regs *regs)
703*4882a593Smuzhiyun {
704*4882a593Smuzhiyun unsigned long sp, sp_top;
705*4882a593Smuzhiyun int err;
706*4882a593Smuzhiyun
707*4882a593Smuzhiyun init_user_layout(user);
708*4882a593Smuzhiyun err = setup_sigframe_layout(user, false);
709*4882a593Smuzhiyun if (err)
710*4882a593Smuzhiyun return err;
711*4882a593Smuzhiyun
712*4882a593Smuzhiyun sp = sp_top = sigsp(regs->sp, ksig);
713*4882a593Smuzhiyun
714*4882a593Smuzhiyun sp = round_down(sp - sizeof(struct frame_record), 16);
715*4882a593Smuzhiyun user->next_frame = (struct frame_record __user *)sp;
716*4882a593Smuzhiyun
717*4882a593Smuzhiyun sp = round_down(sp, 16) - sigframe_size(user);
718*4882a593Smuzhiyun user->sigframe = (struct rt_sigframe __user *)sp;
719*4882a593Smuzhiyun
720*4882a593Smuzhiyun /*
721*4882a593Smuzhiyun * Check that we can actually write to the signal frame.
722*4882a593Smuzhiyun */
723*4882a593Smuzhiyun if (!access_ok(user->sigframe, sp_top - sp))
724*4882a593Smuzhiyun return -EFAULT;
725*4882a593Smuzhiyun
726*4882a593Smuzhiyun return 0;
727*4882a593Smuzhiyun }
728*4882a593Smuzhiyun
setup_return(struct pt_regs * regs,struct k_sigaction * ka,struct rt_sigframe_user_layout * user,int usig)729*4882a593Smuzhiyun static void setup_return(struct pt_regs *regs, struct k_sigaction *ka,
730*4882a593Smuzhiyun struct rt_sigframe_user_layout *user, int usig)
731*4882a593Smuzhiyun {
732*4882a593Smuzhiyun __sigrestore_t sigtramp;
733*4882a593Smuzhiyun
734*4882a593Smuzhiyun regs->regs[0] = usig;
735*4882a593Smuzhiyun regs->sp = (unsigned long)user->sigframe;
736*4882a593Smuzhiyun regs->regs[29] = (unsigned long)&user->next_frame->fp;
737*4882a593Smuzhiyun regs->pc = (unsigned long)ka->sa.sa_handler;
738*4882a593Smuzhiyun
739*4882a593Smuzhiyun /*
740*4882a593Smuzhiyun * Signal delivery is a (wacky) indirect function call in
741*4882a593Smuzhiyun * userspace, so simulate the same setting of BTYPE as a BLR
742*4882a593Smuzhiyun * <register containing the signal handler entry point>.
743*4882a593Smuzhiyun * Signal delivery to a location in a PROT_BTI guarded page
744*4882a593Smuzhiyun * that is not a function entry point will now trigger a
745*4882a593Smuzhiyun * SIGILL in userspace.
746*4882a593Smuzhiyun *
747*4882a593Smuzhiyun * If the signal handler entry point is not in a PROT_BTI
748*4882a593Smuzhiyun * guarded page, this is harmless.
749*4882a593Smuzhiyun */
750*4882a593Smuzhiyun if (system_supports_bti()) {
751*4882a593Smuzhiyun regs->pstate &= ~PSR_BTYPE_MASK;
752*4882a593Smuzhiyun regs->pstate |= PSR_BTYPE_C;
753*4882a593Smuzhiyun }
754*4882a593Smuzhiyun
755*4882a593Smuzhiyun /* TCO (Tag Check Override) always cleared for signal handlers */
756*4882a593Smuzhiyun regs->pstate &= ~PSR_TCO_BIT;
757*4882a593Smuzhiyun
758*4882a593Smuzhiyun if (ka->sa.sa_flags & SA_RESTORER)
759*4882a593Smuzhiyun sigtramp = ka->sa.sa_restorer;
760*4882a593Smuzhiyun else
761*4882a593Smuzhiyun sigtramp = VDSO_SYMBOL(current->mm->context.vdso, sigtramp);
762*4882a593Smuzhiyun
763*4882a593Smuzhiyun regs->regs[30] = (unsigned long)sigtramp;
764*4882a593Smuzhiyun }
765*4882a593Smuzhiyun
setup_rt_frame(int usig,struct ksignal * ksig,sigset_t * set,struct pt_regs * regs)766*4882a593Smuzhiyun static int setup_rt_frame(int usig, struct ksignal *ksig, sigset_t *set,
767*4882a593Smuzhiyun struct pt_regs *regs)
768*4882a593Smuzhiyun {
769*4882a593Smuzhiyun struct rt_sigframe_user_layout user;
770*4882a593Smuzhiyun struct rt_sigframe __user *frame;
771*4882a593Smuzhiyun int err = 0;
772*4882a593Smuzhiyun
773*4882a593Smuzhiyun fpsimd_signal_preserve_current_state();
774*4882a593Smuzhiyun
775*4882a593Smuzhiyun if (get_sigframe(&user, ksig, regs))
776*4882a593Smuzhiyun return 1;
777*4882a593Smuzhiyun
778*4882a593Smuzhiyun frame = user.sigframe;
779*4882a593Smuzhiyun
780*4882a593Smuzhiyun __put_user_error(0, &frame->uc.uc_flags, err);
781*4882a593Smuzhiyun __put_user_error(NULL, &frame->uc.uc_link, err);
782*4882a593Smuzhiyun
783*4882a593Smuzhiyun err |= __save_altstack(&frame->uc.uc_stack, regs->sp);
784*4882a593Smuzhiyun err |= setup_sigframe(&user, regs, set);
785*4882a593Smuzhiyun if (err == 0) {
786*4882a593Smuzhiyun setup_return(regs, &ksig->ka, &user, usig);
787*4882a593Smuzhiyun if (ksig->ka.sa.sa_flags & SA_SIGINFO) {
788*4882a593Smuzhiyun err |= copy_siginfo_to_user(&frame->info, &ksig->info);
789*4882a593Smuzhiyun regs->regs[1] = (unsigned long)&frame->info;
790*4882a593Smuzhiyun regs->regs[2] = (unsigned long)&frame->uc;
791*4882a593Smuzhiyun }
792*4882a593Smuzhiyun }
793*4882a593Smuzhiyun
794*4882a593Smuzhiyun return err;
795*4882a593Smuzhiyun }
796*4882a593Smuzhiyun
setup_restart_syscall(struct pt_regs * regs)797*4882a593Smuzhiyun static void setup_restart_syscall(struct pt_regs *regs)
798*4882a593Smuzhiyun {
799*4882a593Smuzhiyun if (is_compat_task())
800*4882a593Smuzhiyun compat_setup_restart_syscall(regs);
801*4882a593Smuzhiyun else
802*4882a593Smuzhiyun regs->regs[8] = __NR_restart_syscall;
803*4882a593Smuzhiyun }
804*4882a593Smuzhiyun
805*4882a593Smuzhiyun /*
806*4882a593Smuzhiyun * OK, we're invoking a handler
807*4882a593Smuzhiyun */
handle_signal(struct ksignal * ksig,struct pt_regs * regs)808*4882a593Smuzhiyun static void handle_signal(struct ksignal *ksig, struct pt_regs *regs)
809*4882a593Smuzhiyun {
810*4882a593Smuzhiyun sigset_t *oldset = sigmask_to_save();
811*4882a593Smuzhiyun int usig = ksig->sig;
812*4882a593Smuzhiyun int ret;
813*4882a593Smuzhiyun
814*4882a593Smuzhiyun rseq_signal_deliver(ksig, regs);
815*4882a593Smuzhiyun
816*4882a593Smuzhiyun /*
817*4882a593Smuzhiyun * Set up the stack frame
818*4882a593Smuzhiyun */
819*4882a593Smuzhiyun if (is_compat_task()) {
820*4882a593Smuzhiyun if (ksig->ka.sa.sa_flags & SA_SIGINFO)
821*4882a593Smuzhiyun ret = compat_setup_rt_frame(usig, ksig, oldset, regs);
822*4882a593Smuzhiyun else
823*4882a593Smuzhiyun ret = compat_setup_frame(usig, ksig, oldset, regs);
824*4882a593Smuzhiyun } else {
825*4882a593Smuzhiyun ret = setup_rt_frame(usig, ksig, oldset, regs);
826*4882a593Smuzhiyun }
827*4882a593Smuzhiyun
828*4882a593Smuzhiyun /*
829*4882a593Smuzhiyun * Check that the resulting registers are actually sane.
830*4882a593Smuzhiyun */
831*4882a593Smuzhiyun ret |= !valid_user_regs(®s->user_regs, current);
832*4882a593Smuzhiyun
833*4882a593Smuzhiyun /* Step into the signal handler if we are stepping */
834*4882a593Smuzhiyun signal_setup_done(ret, ksig, test_thread_flag(TIF_SINGLESTEP));
835*4882a593Smuzhiyun }
836*4882a593Smuzhiyun
837*4882a593Smuzhiyun /*
838*4882a593Smuzhiyun * Note that 'init' is a special process: it doesn't get signals it doesn't
839*4882a593Smuzhiyun * want to handle. Thus you cannot kill init even with a SIGKILL even by
840*4882a593Smuzhiyun * mistake.
841*4882a593Smuzhiyun *
842*4882a593Smuzhiyun * Note that we go through the signals twice: once to check the signals that
843*4882a593Smuzhiyun * the kernel can handle, and then we build all the user-level signal handling
844*4882a593Smuzhiyun * stack-frames in one go after that.
845*4882a593Smuzhiyun */
do_signal(struct pt_regs * regs)846*4882a593Smuzhiyun static void do_signal(struct pt_regs *regs)
847*4882a593Smuzhiyun {
848*4882a593Smuzhiyun unsigned long continue_addr = 0, restart_addr = 0;
849*4882a593Smuzhiyun int retval = 0;
850*4882a593Smuzhiyun struct ksignal ksig;
851*4882a593Smuzhiyun bool syscall = in_syscall(regs);
852*4882a593Smuzhiyun
853*4882a593Smuzhiyun /*
854*4882a593Smuzhiyun * If we were from a system call, check for system call restarting...
855*4882a593Smuzhiyun */
856*4882a593Smuzhiyun if (syscall) {
857*4882a593Smuzhiyun continue_addr = regs->pc;
858*4882a593Smuzhiyun restart_addr = continue_addr - (compat_thumb_mode(regs) ? 2 : 4);
859*4882a593Smuzhiyun retval = regs->regs[0];
860*4882a593Smuzhiyun
861*4882a593Smuzhiyun /*
862*4882a593Smuzhiyun * Avoid additional syscall restarting via ret_to_user.
863*4882a593Smuzhiyun */
864*4882a593Smuzhiyun forget_syscall(regs);
865*4882a593Smuzhiyun
866*4882a593Smuzhiyun /*
867*4882a593Smuzhiyun * Prepare for system call restart. We do this here so that a
868*4882a593Smuzhiyun * debugger will see the already changed PC.
869*4882a593Smuzhiyun */
870*4882a593Smuzhiyun switch (retval) {
871*4882a593Smuzhiyun case -ERESTARTNOHAND:
872*4882a593Smuzhiyun case -ERESTARTSYS:
873*4882a593Smuzhiyun case -ERESTARTNOINTR:
874*4882a593Smuzhiyun case -ERESTART_RESTARTBLOCK:
875*4882a593Smuzhiyun regs->regs[0] = regs->orig_x0;
876*4882a593Smuzhiyun regs->pc = restart_addr;
877*4882a593Smuzhiyun break;
878*4882a593Smuzhiyun }
879*4882a593Smuzhiyun }
880*4882a593Smuzhiyun
881*4882a593Smuzhiyun /*
882*4882a593Smuzhiyun * Get the signal to deliver. When running under ptrace, at this point
883*4882a593Smuzhiyun * the debugger may change all of our registers.
884*4882a593Smuzhiyun */
885*4882a593Smuzhiyun if (get_signal(&ksig)) {
886*4882a593Smuzhiyun /*
887*4882a593Smuzhiyun * Depending on the signal settings, we may need to revert the
888*4882a593Smuzhiyun * decision to restart the system call, but skip this if a
889*4882a593Smuzhiyun * debugger has chosen to restart at a different PC.
890*4882a593Smuzhiyun */
891*4882a593Smuzhiyun if (regs->pc == restart_addr &&
892*4882a593Smuzhiyun (retval == -ERESTARTNOHAND ||
893*4882a593Smuzhiyun retval == -ERESTART_RESTARTBLOCK ||
894*4882a593Smuzhiyun (retval == -ERESTARTSYS &&
895*4882a593Smuzhiyun !(ksig.ka.sa.sa_flags & SA_RESTART)))) {
896*4882a593Smuzhiyun syscall_set_return_value(current, regs, -EINTR, 0);
897*4882a593Smuzhiyun regs->pc = continue_addr;
898*4882a593Smuzhiyun }
899*4882a593Smuzhiyun
900*4882a593Smuzhiyun handle_signal(&ksig, regs);
901*4882a593Smuzhiyun return;
902*4882a593Smuzhiyun }
903*4882a593Smuzhiyun
904*4882a593Smuzhiyun /*
905*4882a593Smuzhiyun * Handle restarting a different system call. As above, if a debugger
906*4882a593Smuzhiyun * has chosen to restart at a different PC, ignore the restart.
907*4882a593Smuzhiyun */
908*4882a593Smuzhiyun if (syscall && regs->pc == restart_addr) {
909*4882a593Smuzhiyun if (retval == -ERESTART_RESTARTBLOCK)
910*4882a593Smuzhiyun setup_restart_syscall(regs);
911*4882a593Smuzhiyun user_rewind_single_step(current);
912*4882a593Smuzhiyun }
913*4882a593Smuzhiyun
914*4882a593Smuzhiyun restore_saved_sigmask();
915*4882a593Smuzhiyun }
916*4882a593Smuzhiyun
do_notify_resume(struct pt_regs * regs,unsigned long thread_flags)917*4882a593Smuzhiyun asmlinkage void do_notify_resume(struct pt_regs *regs,
918*4882a593Smuzhiyun unsigned long thread_flags)
919*4882a593Smuzhiyun {
920*4882a593Smuzhiyun do {
921*4882a593Smuzhiyun /* Check valid user FS if needed */
922*4882a593Smuzhiyun addr_limit_user_check();
923*4882a593Smuzhiyun
924*4882a593Smuzhiyun if (thread_flags & _TIF_NEED_RESCHED) {
925*4882a593Smuzhiyun /* Unmask Debug and SError for the next task */
926*4882a593Smuzhiyun local_daif_restore(DAIF_PROCCTX_NOIRQ);
927*4882a593Smuzhiyun
928*4882a593Smuzhiyun schedule();
929*4882a593Smuzhiyun } else {
930*4882a593Smuzhiyun local_daif_restore(DAIF_PROCCTX);
931*4882a593Smuzhiyun
932*4882a593Smuzhiyun if (thread_flags & _TIF_UPROBE)
933*4882a593Smuzhiyun uprobe_notify_resume(regs);
934*4882a593Smuzhiyun
935*4882a593Smuzhiyun if (thread_flags & _TIF_MTE_ASYNC_FAULT) {
936*4882a593Smuzhiyun clear_thread_flag(TIF_MTE_ASYNC_FAULT);
937*4882a593Smuzhiyun send_sig_fault(SIGSEGV, SEGV_MTEAERR,
938*4882a593Smuzhiyun (void __user *)NULL, current);
939*4882a593Smuzhiyun }
940*4882a593Smuzhiyun
941*4882a593Smuzhiyun if (thread_flags & (_TIF_SIGPENDING | _TIF_NOTIFY_SIGNAL))
942*4882a593Smuzhiyun do_signal(regs);
943*4882a593Smuzhiyun
944*4882a593Smuzhiyun if (thread_flags & _TIF_NOTIFY_RESUME) {
945*4882a593Smuzhiyun tracehook_notify_resume(regs);
946*4882a593Smuzhiyun rseq_handle_notify_resume(NULL, regs);
947*4882a593Smuzhiyun }
948*4882a593Smuzhiyun
949*4882a593Smuzhiyun if (thread_flags & _TIF_FOREIGN_FPSTATE)
950*4882a593Smuzhiyun fpsimd_restore_current_state();
951*4882a593Smuzhiyun }
952*4882a593Smuzhiyun
953*4882a593Smuzhiyun local_daif_mask();
954*4882a593Smuzhiyun thread_flags = READ_ONCE(current_thread_info()->flags);
955*4882a593Smuzhiyun } while (thread_flags & _TIF_WORK_MASK);
956*4882a593Smuzhiyun }
957*4882a593Smuzhiyun
958*4882a593Smuzhiyun unsigned long __ro_after_init signal_minsigstksz;
959*4882a593Smuzhiyun
960*4882a593Smuzhiyun /*
961*4882a593Smuzhiyun * Determine the stack space required for guaranteed signal devliery.
962*4882a593Smuzhiyun * This function is used to populate AT_MINSIGSTKSZ at process startup.
963*4882a593Smuzhiyun * cpufeatures setup is assumed to be complete.
964*4882a593Smuzhiyun */
minsigstksz_setup(void)965*4882a593Smuzhiyun void __init minsigstksz_setup(void)
966*4882a593Smuzhiyun {
967*4882a593Smuzhiyun struct rt_sigframe_user_layout user;
968*4882a593Smuzhiyun
969*4882a593Smuzhiyun init_user_layout(&user);
970*4882a593Smuzhiyun
971*4882a593Smuzhiyun /*
972*4882a593Smuzhiyun * If this fails, SIGFRAME_MAXSZ needs to be enlarged. It won't
973*4882a593Smuzhiyun * be big enough, but it's our best guess:
974*4882a593Smuzhiyun */
975*4882a593Smuzhiyun if (WARN_ON(setup_sigframe_layout(&user, true)))
976*4882a593Smuzhiyun return;
977*4882a593Smuzhiyun
978*4882a593Smuzhiyun signal_minsigstksz = sigframe_size(&user) +
979*4882a593Smuzhiyun round_up(sizeof(struct frame_record), 16) +
980*4882a593Smuzhiyun 16; /* max alignment padding */
981*4882a593Smuzhiyun }
982