xref: /OK3568_Linux_fs/kernel/arch/arm64/kernel/signal.c (revision 4882a59341e53eb6f0b4789bf948001014eff981)
1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0-only
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun  * Based on arch/arm/kernel/signal.c
4*4882a593Smuzhiyun  *
5*4882a593Smuzhiyun  * Copyright (C) 1995-2009 Russell King
6*4882a593Smuzhiyun  * Copyright (C) 2012 ARM Ltd.
7*4882a593Smuzhiyun  */
8*4882a593Smuzhiyun 
9*4882a593Smuzhiyun #include <linux/cache.h>
10*4882a593Smuzhiyun #include <linux/compat.h>
11*4882a593Smuzhiyun #include <linux/errno.h>
12*4882a593Smuzhiyun #include <linux/kernel.h>
13*4882a593Smuzhiyun #include <linux/signal.h>
14*4882a593Smuzhiyun #include <linux/personality.h>
15*4882a593Smuzhiyun #include <linux/freezer.h>
16*4882a593Smuzhiyun #include <linux/stddef.h>
17*4882a593Smuzhiyun #include <linux/uaccess.h>
18*4882a593Smuzhiyun #include <linux/sizes.h>
19*4882a593Smuzhiyun #include <linux/string.h>
20*4882a593Smuzhiyun #include <linux/tracehook.h>
21*4882a593Smuzhiyun #include <linux/ratelimit.h>
22*4882a593Smuzhiyun #include <linux/syscalls.h>
23*4882a593Smuzhiyun 
24*4882a593Smuzhiyun #include <asm/daifflags.h>
25*4882a593Smuzhiyun #include <asm/debug-monitors.h>
26*4882a593Smuzhiyun #include <asm/elf.h>
27*4882a593Smuzhiyun #include <asm/cacheflush.h>
28*4882a593Smuzhiyun #include <asm/ucontext.h>
29*4882a593Smuzhiyun #include <asm/unistd.h>
30*4882a593Smuzhiyun #include <asm/fpsimd.h>
31*4882a593Smuzhiyun #include <asm/ptrace.h>
32*4882a593Smuzhiyun #include <asm/syscall.h>
33*4882a593Smuzhiyun #include <asm/signal32.h>
34*4882a593Smuzhiyun #include <asm/traps.h>
35*4882a593Smuzhiyun #include <asm/vdso.h>
36*4882a593Smuzhiyun 
37*4882a593Smuzhiyun /*
38*4882a593Smuzhiyun  * Do a signal return; undo the signal stack. These are aligned to 128-bit.
39*4882a593Smuzhiyun  */
40*4882a593Smuzhiyun struct rt_sigframe {
41*4882a593Smuzhiyun 	struct siginfo info;
42*4882a593Smuzhiyun 	struct ucontext uc;
43*4882a593Smuzhiyun };
44*4882a593Smuzhiyun 
45*4882a593Smuzhiyun struct frame_record {
46*4882a593Smuzhiyun 	u64 fp;
47*4882a593Smuzhiyun 	u64 lr;
48*4882a593Smuzhiyun };
49*4882a593Smuzhiyun 
50*4882a593Smuzhiyun struct rt_sigframe_user_layout {
51*4882a593Smuzhiyun 	struct rt_sigframe __user *sigframe;
52*4882a593Smuzhiyun 	struct frame_record __user *next_frame;
53*4882a593Smuzhiyun 
54*4882a593Smuzhiyun 	unsigned long size;	/* size of allocated sigframe data */
55*4882a593Smuzhiyun 	unsigned long limit;	/* largest allowed size */
56*4882a593Smuzhiyun 
57*4882a593Smuzhiyun 	unsigned long fpsimd_offset;
58*4882a593Smuzhiyun 	unsigned long esr_offset;
59*4882a593Smuzhiyun 	unsigned long sve_offset;
60*4882a593Smuzhiyun 	unsigned long extra_offset;
61*4882a593Smuzhiyun 	unsigned long end_offset;
62*4882a593Smuzhiyun };
63*4882a593Smuzhiyun 
64*4882a593Smuzhiyun #define BASE_SIGFRAME_SIZE round_up(sizeof(struct rt_sigframe), 16)
65*4882a593Smuzhiyun #define TERMINATOR_SIZE round_up(sizeof(struct _aarch64_ctx), 16)
66*4882a593Smuzhiyun #define EXTRA_CONTEXT_SIZE round_up(sizeof(struct extra_context), 16)
67*4882a593Smuzhiyun 
init_user_layout(struct rt_sigframe_user_layout * user)68*4882a593Smuzhiyun static void init_user_layout(struct rt_sigframe_user_layout *user)
69*4882a593Smuzhiyun {
70*4882a593Smuzhiyun 	const size_t reserved_size =
71*4882a593Smuzhiyun 		sizeof(user->sigframe->uc.uc_mcontext.__reserved);
72*4882a593Smuzhiyun 
73*4882a593Smuzhiyun 	memset(user, 0, sizeof(*user));
74*4882a593Smuzhiyun 	user->size = offsetof(struct rt_sigframe, uc.uc_mcontext.__reserved);
75*4882a593Smuzhiyun 
76*4882a593Smuzhiyun 	user->limit = user->size + reserved_size;
77*4882a593Smuzhiyun 
78*4882a593Smuzhiyun 	user->limit -= TERMINATOR_SIZE;
79*4882a593Smuzhiyun 	user->limit -= EXTRA_CONTEXT_SIZE;
80*4882a593Smuzhiyun 	/* Reserve space for extension and terminator ^ */
81*4882a593Smuzhiyun }
82*4882a593Smuzhiyun 
sigframe_size(struct rt_sigframe_user_layout const * user)83*4882a593Smuzhiyun static size_t sigframe_size(struct rt_sigframe_user_layout const *user)
84*4882a593Smuzhiyun {
85*4882a593Smuzhiyun 	return round_up(max(user->size, sizeof(struct rt_sigframe)), 16);
86*4882a593Smuzhiyun }
87*4882a593Smuzhiyun 
88*4882a593Smuzhiyun /*
89*4882a593Smuzhiyun  * Sanity limit on the approximate maximum size of signal frame we'll
90*4882a593Smuzhiyun  * try to generate.  Stack alignment padding and the frame record are
91*4882a593Smuzhiyun  * not taken into account.  This limit is not a guarantee and is
92*4882a593Smuzhiyun  * NOT ABI.
93*4882a593Smuzhiyun  */
94*4882a593Smuzhiyun #define SIGFRAME_MAXSZ SZ_64K
95*4882a593Smuzhiyun 
__sigframe_alloc(struct rt_sigframe_user_layout * user,unsigned long * offset,size_t size,bool extend)96*4882a593Smuzhiyun static int __sigframe_alloc(struct rt_sigframe_user_layout *user,
97*4882a593Smuzhiyun 			    unsigned long *offset, size_t size, bool extend)
98*4882a593Smuzhiyun {
99*4882a593Smuzhiyun 	size_t padded_size = round_up(size, 16);
100*4882a593Smuzhiyun 
101*4882a593Smuzhiyun 	if (padded_size > user->limit - user->size &&
102*4882a593Smuzhiyun 	    !user->extra_offset &&
103*4882a593Smuzhiyun 	    extend) {
104*4882a593Smuzhiyun 		int ret;
105*4882a593Smuzhiyun 
106*4882a593Smuzhiyun 		user->limit += EXTRA_CONTEXT_SIZE;
107*4882a593Smuzhiyun 		ret = __sigframe_alloc(user, &user->extra_offset,
108*4882a593Smuzhiyun 				       sizeof(struct extra_context), false);
109*4882a593Smuzhiyun 		if (ret) {
110*4882a593Smuzhiyun 			user->limit -= EXTRA_CONTEXT_SIZE;
111*4882a593Smuzhiyun 			return ret;
112*4882a593Smuzhiyun 		}
113*4882a593Smuzhiyun 
114*4882a593Smuzhiyun 		/* Reserve space for the __reserved[] terminator */
115*4882a593Smuzhiyun 		user->size += TERMINATOR_SIZE;
116*4882a593Smuzhiyun 
117*4882a593Smuzhiyun 		/*
118*4882a593Smuzhiyun 		 * Allow expansion up to SIGFRAME_MAXSZ, ensuring space for
119*4882a593Smuzhiyun 		 * the terminator:
120*4882a593Smuzhiyun 		 */
121*4882a593Smuzhiyun 		user->limit = SIGFRAME_MAXSZ - TERMINATOR_SIZE;
122*4882a593Smuzhiyun 	}
123*4882a593Smuzhiyun 
124*4882a593Smuzhiyun 	/* Still not enough space?  Bad luck! */
125*4882a593Smuzhiyun 	if (padded_size > user->limit - user->size)
126*4882a593Smuzhiyun 		return -ENOMEM;
127*4882a593Smuzhiyun 
128*4882a593Smuzhiyun 	*offset = user->size;
129*4882a593Smuzhiyun 	user->size += padded_size;
130*4882a593Smuzhiyun 
131*4882a593Smuzhiyun 	return 0;
132*4882a593Smuzhiyun }
133*4882a593Smuzhiyun 
134*4882a593Smuzhiyun /*
135*4882a593Smuzhiyun  * Allocate space for an optional record of <size> bytes in the user
136*4882a593Smuzhiyun  * signal frame.  The offset from the signal frame base address to the
137*4882a593Smuzhiyun  * allocated block is assigned to *offset.
138*4882a593Smuzhiyun  */
sigframe_alloc(struct rt_sigframe_user_layout * user,unsigned long * offset,size_t size)139*4882a593Smuzhiyun static int sigframe_alloc(struct rt_sigframe_user_layout *user,
140*4882a593Smuzhiyun 			  unsigned long *offset, size_t size)
141*4882a593Smuzhiyun {
142*4882a593Smuzhiyun 	return __sigframe_alloc(user, offset, size, true);
143*4882a593Smuzhiyun }
144*4882a593Smuzhiyun 
145*4882a593Smuzhiyun /* Allocate the null terminator record and prevent further allocations */
sigframe_alloc_end(struct rt_sigframe_user_layout * user)146*4882a593Smuzhiyun static int sigframe_alloc_end(struct rt_sigframe_user_layout *user)
147*4882a593Smuzhiyun {
148*4882a593Smuzhiyun 	int ret;
149*4882a593Smuzhiyun 
150*4882a593Smuzhiyun 	/* Un-reserve the space reserved for the terminator: */
151*4882a593Smuzhiyun 	user->limit += TERMINATOR_SIZE;
152*4882a593Smuzhiyun 
153*4882a593Smuzhiyun 	ret = sigframe_alloc(user, &user->end_offset,
154*4882a593Smuzhiyun 			     sizeof(struct _aarch64_ctx));
155*4882a593Smuzhiyun 	if (ret)
156*4882a593Smuzhiyun 		return ret;
157*4882a593Smuzhiyun 
158*4882a593Smuzhiyun 	/* Prevent further allocation: */
159*4882a593Smuzhiyun 	user->limit = user->size;
160*4882a593Smuzhiyun 	return 0;
161*4882a593Smuzhiyun }
162*4882a593Smuzhiyun 
apply_user_offset(struct rt_sigframe_user_layout const * user,unsigned long offset)163*4882a593Smuzhiyun static void __user *apply_user_offset(
164*4882a593Smuzhiyun 	struct rt_sigframe_user_layout const *user, unsigned long offset)
165*4882a593Smuzhiyun {
166*4882a593Smuzhiyun 	char __user *base = (char __user *)user->sigframe;
167*4882a593Smuzhiyun 
168*4882a593Smuzhiyun 	return base + offset;
169*4882a593Smuzhiyun }
170*4882a593Smuzhiyun 
preserve_fpsimd_context(struct fpsimd_context __user * ctx)171*4882a593Smuzhiyun static int preserve_fpsimd_context(struct fpsimd_context __user *ctx)
172*4882a593Smuzhiyun {
173*4882a593Smuzhiyun 	struct user_fpsimd_state const *fpsimd =
174*4882a593Smuzhiyun 		&current->thread.uw.fpsimd_state;
175*4882a593Smuzhiyun 	int err;
176*4882a593Smuzhiyun 
177*4882a593Smuzhiyun 	/* copy the FP and status/control registers */
178*4882a593Smuzhiyun 	err = __copy_to_user(ctx->vregs, fpsimd->vregs, sizeof(fpsimd->vregs));
179*4882a593Smuzhiyun 	__put_user_error(fpsimd->fpsr, &ctx->fpsr, err);
180*4882a593Smuzhiyun 	__put_user_error(fpsimd->fpcr, &ctx->fpcr, err);
181*4882a593Smuzhiyun 
182*4882a593Smuzhiyun 	/* copy the magic/size information */
183*4882a593Smuzhiyun 	__put_user_error(FPSIMD_MAGIC, &ctx->head.magic, err);
184*4882a593Smuzhiyun 	__put_user_error(sizeof(struct fpsimd_context), &ctx->head.size, err);
185*4882a593Smuzhiyun 
186*4882a593Smuzhiyun 	return err ? -EFAULT : 0;
187*4882a593Smuzhiyun }
188*4882a593Smuzhiyun 
restore_fpsimd_context(struct fpsimd_context __user * ctx)189*4882a593Smuzhiyun static int restore_fpsimd_context(struct fpsimd_context __user *ctx)
190*4882a593Smuzhiyun {
191*4882a593Smuzhiyun 	struct user_fpsimd_state fpsimd;
192*4882a593Smuzhiyun 	__u32 magic, size;
193*4882a593Smuzhiyun 	int err = 0;
194*4882a593Smuzhiyun 
195*4882a593Smuzhiyun 	/* check the magic/size information */
196*4882a593Smuzhiyun 	__get_user_error(magic, &ctx->head.magic, err);
197*4882a593Smuzhiyun 	__get_user_error(size, &ctx->head.size, err);
198*4882a593Smuzhiyun 	if (err)
199*4882a593Smuzhiyun 		return -EFAULT;
200*4882a593Smuzhiyun 	if (magic != FPSIMD_MAGIC || size != sizeof(struct fpsimd_context))
201*4882a593Smuzhiyun 		return -EINVAL;
202*4882a593Smuzhiyun 
203*4882a593Smuzhiyun 	/* copy the FP and status/control registers */
204*4882a593Smuzhiyun 	err = __copy_from_user(fpsimd.vregs, ctx->vregs,
205*4882a593Smuzhiyun 			       sizeof(fpsimd.vregs));
206*4882a593Smuzhiyun 	__get_user_error(fpsimd.fpsr, &ctx->fpsr, err);
207*4882a593Smuzhiyun 	__get_user_error(fpsimd.fpcr, &ctx->fpcr, err);
208*4882a593Smuzhiyun 
209*4882a593Smuzhiyun 	clear_thread_flag(TIF_SVE);
210*4882a593Smuzhiyun 
211*4882a593Smuzhiyun 	/* load the hardware registers from the fpsimd_state structure */
212*4882a593Smuzhiyun 	if (!err)
213*4882a593Smuzhiyun 		fpsimd_update_current_state(&fpsimd);
214*4882a593Smuzhiyun 
215*4882a593Smuzhiyun 	return err ? -EFAULT : 0;
216*4882a593Smuzhiyun }
217*4882a593Smuzhiyun 
218*4882a593Smuzhiyun 
219*4882a593Smuzhiyun struct user_ctxs {
220*4882a593Smuzhiyun 	struct fpsimd_context __user *fpsimd;
221*4882a593Smuzhiyun 	struct sve_context __user *sve;
222*4882a593Smuzhiyun };
223*4882a593Smuzhiyun 
224*4882a593Smuzhiyun #ifdef CONFIG_ARM64_SVE
225*4882a593Smuzhiyun 
preserve_sve_context(struct sve_context __user * ctx)226*4882a593Smuzhiyun static int preserve_sve_context(struct sve_context __user *ctx)
227*4882a593Smuzhiyun {
228*4882a593Smuzhiyun 	int err = 0;
229*4882a593Smuzhiyun 	u16 reserved[ARRAY_SIZE(ctx->__reserved)];
230*4882a593Smuzhiyun 	unsigned int vl = current->thread.sve_vl;
231*4882a593Smuzhiyun 	unsigned int vq = 0;
232*4882a593Smuzhiyun 
233*4882a593Smuzhiyun 	if (test_thread_flag(TIF_SVE))
234*4882a593Smuzhiyun 		vq = sve_vq_from_vl(vl);
235*4882a593Smuzhiyun 
236*4882a593Smuzhiyun 	memset(reserved, 0, sizeof(reserved));
237*4882a593Smuzhiyun 
238*4882a593Smuzhiyun 	__put_user_error(SVE_MAGIC, &ctx->head.magic, err);
239*4882a593Smuzhiyun 	__put_user_error(round_up(SVE_SIG_CONTEXT_SIZE(vq), 16),
240*4882a593Smuzhiyun 			 &ctx->head.size, err);
241*4882a593Smuzhiyun 	__put_user_error(vl, &ctx->vl, err);
242*4882a593Smuzhiyun 	BUILD_BUG_ON(sizeof(ctx->__reserved) != sizeof(reserved));
243*4882a593Smuzhiyun 	err |= __copy_to_user(&ctx->__reserved, reserved, sizeof(reserved));
244*4882a593Smuzhiyun 
245*4882a593Smuzhiyun 	if (vq) {
246*4882a593Smuzhiyun 		/*
247*4882a593Smuzhiyun 		 * This assumes that the SVE state has already been saved to
248*4882a593Smuzhiyun 		 * the task struct by calling the function
249*4882a593Smuzhiyun 		 * fpsimd_signal_preserve_current_state().
250*4882a593Smuzhiyun 		 */
251*4882a593Smuzhiyun 		err |= __copy_to_user((char __user *)ctx + SVE_SIG_REGS_OFFSET,
252*4882a593Smuzhiyun 				      current->thread.sve_state,
253*4882a593Smuzhiyun 				      SVE_SIG_REGS_SIZE(vq));
254*4882a593Smuzhiyun 	}
255*4882a593Smuzhiyun 
256*4882a593Smuzhiyun 	return err ? -EFAULT : 0;
257*4882a593Smuzhiyun }
258*4882a593Smuzhiyun 
restore_sve_fpsimd_context(struct user_ctxs * user)259*4882a593Smuzhiyun static int restore_sve_fpsimd_context(struct user_ctxs *user)
260*4882a593Smuzhiyun {
261*4882a593Smuzhiyun 	int err;
262*4882a593Smuzhiyun 	unsigned int vq;
263*4882a593Smuzhiyun 	struct user_fpsimd_state fpsimd;
264*4882a593Smuzhiyun 	struct sve_context sve;
265*4882a593Smuzhiyun 
266*4882a593Smuzhiyun 	if (__copy_from_user(&sve, user->sve, sizeof(sve)))
267*4882a593Smuzhiyun 		return -EFAULT;
268*4882a593Smuzhiyun 
269*4882a593Smuzhiyun 	if (sve.vl != current->thread.sve_vl)
270*4882a593Smuzhiyun 		return -EINVAL;
271*4882a593Smuzhiyun 
272*4882a593Smuzhiyun 	if (sve.head.size <= sizeof(*user->sve)) {
273*4882a593Smuzhiyun 		clear_thread_flag(TIF_SVE);
274*4882a593Smuzhiyun 		goto fpsimd_only;
275*4882a593Smuzhiyun 	}
276*4882a593Smuzhiyun 
277*4882a593Smuzhiyun 	vq = sve_vq_from_vl(sve.vl);
278*4882a593Smuzhiyun 
279*4882a593Smuzhiyun 	if (sve.head.size < SVE_SIG_CONTEXT_SIZE(vq))
280*4882a593Smuzhiyun 		return -EINVAL;
281*4882a593Smuzhiyun 
282*4882a593Smuzhiyun 	/*
283*4882a593Smuzhiyun 	 * Careful: we are about __copy_from_user() directly into
284*4882a593Smuzhiyun 	 * thread.sve_state with preemption enabled, so protection is
285*4882a593Smuzhiyun 	 * needed to prevent a racing context switch from writing stale
286*4882a593Smuzhiyun 	 * registers back over the new data.
287*4882a593Smuzhiyun 	 */
288*4882a593Smuzhiyun 
289*4882a593Smuzhiyun 	fpsimd_flush_task_state(current);
290*4882a593Smuzhiyun 	/* From now, fpsimd_thread_switch() won't touch thread.sve_state */
291*4882a593Smuzhiyun 
292*4882a593Smuzhiyun 	sve_alloc(current);
293*4882a593Smuzhiyun 	err = __copy_from_user(current->thread.sve_state,
294*4882a593Smuzhiyun 			       (char __user const *)user->sve +
295*4882a593Smuzhiyun 					SVE_SIG_REGS_OFFSET,
296*4882a593Smuzhiyun 			       SVE_SIG_REGS_SIZE(vq));
297*4882a593Smuzhiyun 	if (err)
298*4882a593Smuzhiyun 		return -EFAULT;
299*4882a593Smuzhiyun 
300*4882a593Smuzhiyun 	set_thread_flag(TIF_SVE);
301*4882a593Smuzhiyun 
302*4882a593Smuzhiyun fpsimd_only:
303*4882a593Smuzhiyun 	/* copy the FP and status/control registers */
304*4882a593Smuzhiyun 	/* restore_sigframe() already checked that user->fpsimd != NULL. */
305*4882a593Smuzhiyun 	err = __copy_from_user(fpsimd.vregs, user->fpsimd->vregs,
306*4882a593Smuzhiyun 			       sizeof(fpsimd.vregs));
307*4882a593Smuzhiyun 	__get_user_error(fpsimd.fpsr, &user->fpsimd->fpsr, err);
308*4882a593Smuzhiyun 	__get_user_error(fpsimd.fpcr, &user->fpsimd->fpcr, err);
309*4882a593Smuzhiyun 
310*4882a593Smuzhiyun 	/* load the hardware registers from the fpsimd_state structure */
311*4882a593Smuzhiyun 	if (!err)
312*4882a593Smuzhiyun 		fpsimd_update_current_state(&fpsimd);
313*4882a593Smuzhiyun 
314*4882a593Smuzhiyun 	return err ? -EFAULT : 0;
315*4882a593Smuzhiyun }
316*4882a593Smuzhiyun 
317*4882a593Smuzhiyun #else /* ! CONFIG_ARM64_SVE */
318*4882a593Smuzhiyun 
319*4882a593Smuzhiyun /* Turn any non-optimised out attempts to use these into a link error: */
320*4882a593Smuzhiyun extern int preserve_sve_context(void __user *ctx);
321*4882a593Smuzhiyun extern int restore_sve_fpsimd_context(struct user_ctxs *user);
322*4882a593Smuzhiyun 
323*4882a593Smuzhiyun #endif /* ! CONFIG_ARM64_SVE */
324*4882a593Smuzhiyun 
325*4882a593Smuzhiyun 
parse_user_sigframe(struct user_ctxs * user,struct rt_sigframe __user * sf)326*4882a593Smuzhiyun static int parse_user_sigframe(struct user_ctxs *user,
327*4882a593Smuzhiyun 			       struct rt_sigframe __user *sf)
328*4882a593Smuzhiyun {
329*4882a593Smuzhiyun 	struct sigcontext __user *const sc = &sf->uc.uc_mcontext;
330*4882a593Smuzhiyun 	struct _aarch64_ctx __user *head;
331*4882a593Smuzhiyun 	char __user *base = (char __user *)&sc->__reserved;
332*4882a593Smuzhiyun 	size_t offset = 0;
333*4882a593Smuzhiyun 	size_t limit = sizeof(sc->__reserved);
334*4882a593Smuzhiyun 	bool have_extra_context = false;
335*4882a593Smuzhiyun 	char const __user *const sfp = (char const __user *)sf;
336*4882a593Smuzhiyun 
337*4882a593Smuzhiyun 	user->fpsimd = NULL;
338*4882a593Smuzhiyun 	user->sve = NULL;
339*4882a593Smuzhiyun 
340*4882a593Smuzhiyun 	if (!IS_ALIGNED((unsigned long)base, 16))
341*4882a593Smuzhiyun 		goto invalid;
342*4882a593Smuzhiyun 
343*4882a593Smuzhiyun 	while (1) {
344*4882a593Smuzhiyun 		int err = 0;
345*4882a593Smuzhiyun 		u32 magic, size;
346*4882a593Smuzhiyun 		char const __user *userp;
347*4882a593Smuzhiyun 		struct extra_context const __user *extra;
348*4882a593Smuzhiyun 		u64 extra_datap;
349*4882a593Smuzhiyun 		u32 extra_size;
350*4882a593Smuzhiyun 		struct _aarch64_ctx const __user *end;
351*4882a593Smuzhiyun 		u32 end_magic, end_size;
352*4882a593Smuzhiyun 
353*4882a593Smuzhiyun 		if (limit - offset < sizeof(*head))
354*4882a593Smuzhiyun 			goto invalid;
355*4882a593Smuzhiyun 
356*4882a593Smuzhiyun 		if (!IS_ALIGNED(offset, 16))
357*4882a593Smuzhiyun 			goto invalid;
358*4882a593Smuzhiyun 
359*4882a593Smuzhiyun 		head = (struct _aarch64_ctx __user *)(base + offset);
360*4882a593Smuzhiyun 		__get_user_error(magic, &head->magic, err);
361*4882a593Smuzhiyun 		__get_user_error(size, &head->size, err);
362*4882a593Smuzhiyun 		if (err)
363*4882a593Smuzhiyun 			return err;
364*4882a593Smuzhiyun 
365*4882a593Smuzhiyun 		if (limit - offset < size)
366*4882a593Smuzhiyun 			goto invalid;
367*4882a593Smuzhiyun 
368*4882a593Smuzhiyun 		switch (magic) {
369*4882a593Smuzhiyun 		case 0:
370*4882a593Smuzhiyun 			if (size)
371*4882a593Smuzhiyun 				goto invalid;
372*4882a593Smuzhiyun 
373*4882a593Smuzhiyun 			goto done;
374*4882a593Smuzhiyun 
375*4882a593Smuzhiyun 		case FPSIMD_MAGIC:
376*4882a593Smuzhiyun 			if (!system_supports_fpsimd())
377*4882a593Smuzhiyun 				goto invalid;
378*4882a593Smuzhiyun 			if (user->fpsimd)
379*4882a593Smuzhiyun 				goto invalid;
380*4882a593Smuzhiyun 
381*4882a593Smuzhiyun 			if (size < sizeof(*user->fpsimd))
382*4882a593Smuzhiyun 				goto invalid;
383*4882a593Smuzhiyun 
384*4882a593Smuzhiyun 			user->fpsimd = (struct fpsimd_context __user *)head;
385*4882a593Smuzhiyun 			break;
386*4882a593Smuzhiyun 
387*4882a593Smuzhiyun 		case ESR_MAGIC:
388*4882a593Smuzhiyun 			/* ignore */
389*4882a593Smuzhiyun 			break;
390*4882a593Smuzhiyun 
391*4882a593Smuzhiyun 		case SVE_MAGIC:
392*4882a593Smuzhiyun 			if (!system_supports_sve())
393*4882a593Smuzhiyun 				goto invalid;
394*4882a593Smuzhiyun 
395*4882a593Smuzhiyun 			if (user->sve)
396*4882a593Smuzhiyun 				goto invalid;
397*4882a593Smuzhiyun 
398*4882a593Smuzhiyun 			if (size < sizeof(*user->sve))
399*4882a593Smuzhiyun 				goto invalid;
400*4882a593Smuzhiyun 
401*4882a593Smuzhiyun 			user->sve = (struct sve_context __user *)head;
402*4882a593Smuzhiyun 			break;
403*4882a593Smuzhiyun 
404*4882a593Smuzhiyun 		case EXTRA_MAGIC:
405*4882a593Smuzhiyun 			if (have_extra_context)
406*4882a593Smuzhiyun 				goto invalid;
407*4882a593Smuzhiyun 
408*4882a593Smuzhiyun 			if (size < sizeof(*extra))
409*4882a593Smuzhiyun 				goto invalid;
410*4882a593Smuzhiyun 
411*4882a593Smuzhiyun 			userp = (char const __user *)head;
412*4882a593Smuzhiyun 
413*4882a593Smuzhiyun 			extra = (struct extra_context const __user *)userp;
414*4882a593Smuzhiyun 			userp += size;
415*4882a593Smuzhiyun 
416*4882a593Smuzhiyun 			__get_user_error(extra_datap, &extra->datap, err);
417*4882a593Smuzhiyun 			__get_user_error(extra_size, &extra->size, err);
418*4882a593Smuzhiyun 			if (err)
419*4882a593Smuzhiyun 				return err;
420*4882a593Smuzhiyun 
421*4882a593Smuzhiyun 			/* Check for the dummy terminator in __reserved[]: */
422*4882a593Smuzhiyun 
423*4882a593Smuzhiyun 			if (limit - offset - size < TERMINATOR_SIZE)
424*4882a593Smuzhiyun 				goto invalid;
425*4882a593Smuzhiyun 
426*4882a593Smuzhiyun 			end = (struct _aarch64_ctx const __user *)userp;
427*4882a593Smuzhiyun 			userp += TERMINATOR_SIZE;
428*4882a593Smuzhiyun 
429*4882a593Smuzhiyun 			__get_user_error(end_magic, &end->magic, err);
430*4882a593Smuzhiyun 			__get_user_error(end_size, &end->size, err);
431*4882a593Smuzhiyun 			if (err)
432*4882a593Smuzhiyun 				return err;
433*4882a593Smuzhiyun 
434*4882a593Smuzhiyun 			if (end_magic || end_size)
435*4882a593Smuzhiyun 				goto invalid;
436*4882a593Smuzhiyun 
437*4882a593Smuzhiyun 			/* Prevent looping/repeated parsing of extra_context */
438*4882a593Smuzhiyun 			have_extra_context = true;
439*4882a593Smuzhiyun 
440*4882a593Smuzhiyun 			base = (__force void __user *)extra_datap;
441*4882a593Smuzhiyun 			if (!IS_ALIGNED((unsigned long)base, 16))
442*4882a593Smuzhiyun 				goto invalid;
443*4882a593Smuzhiyun 
444*4882a593Smuzhiyun 			if (!IS_ALIGNED(extra_size, 16))
445*4882a593Smuzhiyun 				goto invalid;
446*4882a593Smuzhiyun 
447*4882a593Smuzhiyun 			if (base != userp)
448*4882a593Smuzhiyun 				goto invalid;
449*4882a593Smuzhiyun 
450*4882a593Smuzhiyun 			/* Reject "unreasonably large" frames: */
451*4882a593Smuzhiyun 			if (extra_size > sfp + SIGFRAME_MAXSZ - userp)
452*4882a593Smuzhiyun 				goto invalid;
453*4882a593Smuzhiyun 
454*4882a593Smuzhiyun 			/*
455*4882a593Smuzhiyun 			 * Ignore trailing terminator in __reserved[]
456*4882a593Smuzhiyun 			 * and start parsing extra data:
457*4882a593Smuzhiyun 			 */
458*4882a593Smuzhiyun 			offset = 0;
459*4882a593Smuzhiyun 			limit = extra_size;
460*4882a593Smuzhiyun 
461*4882a593Smuzhiyun 			if (!access_ok(base, limit))
462*4882a593Smuzhiyun 				goto invalid;
463*4882a593Smuzhiyun 
464*4882a593Smuzhiyun 			continue;
465*4882a593Smuzhiyun 
466*4882a593Smuzhiyun 		default:
467*4882a593Smuzhiyun 			goto invalid;
468*4882a593Smuzhiyun 		}
469*4882a593Smuzhiyun 
470*4882a593Smuzhiyun 		if (size < sizeof(*head))
471*4882a593Smuzhiyun 			goto invalid;
472*4882a593Smuzhiyun 
473*4882a593Smuzhiyun 		if (limit - offset < size)
474*4882a593Smuzhiyun 			goto invalid;
475*4882a593Smuzhiyun 
476*4882a593Smuzhiyun 		offset += size;
477*4882a593Smuzhiyun 	}
478*4882a593Smuzhiyun 
479*4882a593Smuzhiyun done:
480*4882a593Smuzhiyun 	return 0;
481*4882a593Smuzhiyun 
482*4882a593Smuzhiyun invalid:
483*4882a593Smuzhiyun 	return -EINVAL;
484*4882a593Smuzhiyun }
485*4882a593Smuzhiyun 
restore_sigframe(struct pt_regs * regs,struct rt_sigframe __user * sf)486*4882a593Smuzhiyun static int restore_sigframe(struct pt_regs *regs,
487*4882a593Smuzhiyun 			    struct rt_sigframe __user *sf)
488*4882a593Smuzhiyun {
489*4882a593Smuzhiyun 	sigset_t set;
490*4882a593Smuzhiyun 	int i, err;
491*4882a593Smuzhiyun 	struct user_ctxs user;
492*4882a593Smuzhiyun 
493*4882a593Smuzhiyun 	err = __copy_from_user(&set, &sf->uc.uc_sigmask, sizeof(set));
494*4882a593Smuzhiyun 	if (err == 0)
495*4882a593Smuzhiyun 		set_current_blocked(&set);
496*4882a593Smuzhiyun 
497*4882a593Smuzhiyun 	for (i = 0; i < 31; i++)
498*4882a593Smuzhiyun 		__get_user_error(regs->regs[i], &sf->uc.uc_mcontext.regs[i],
499*4882a593Smuzhiyun 				 err);
500*4882a593Smuzhiyun 	__get_user_error(regs->sp, &sf->uc.uc_mcontext.sp, err);
501*4882a593Smuzhiyun 	__get_user_error(regs->pc, &sf->uc.uc_mcontext.pc, err);
502*4882a593Smuzhiyun 	__get_user_error(regs->pstate, &sf->uc.uc_mcontext.pstate, err);
503*4882a593Smuzhiyun 
504*4882a593Smuzhiyun 	/*
505*4882a593Smuzhiyun 	 * Avoid sys_rt_sigreturn() restarting.
506*4882a593Smuzhiyun 	 */
507*4882a593Smuzhiyun 	forget_syscall(regs);
508*4882a593Smuzhiyun 
509*4882a593Smuzhiyun 	err |= !valid_user_regs(&regs->user_regs, current);
510*4882a593Smuzhiyun 	if (err == 0)
511*4882a593Smuzhiyun 		err = parse_user_sigframe(&user, sf);
512*4882a593Smuzhiyun 
513*4882a593Smuzhiyun 	if (err == 0 && system_supports_fpsimd()) {
514*4882a593Smuzhiyun 		if (!user.fpsimd)
515*4882a593Smuzhiyun 			return -EINVAL;
516*4882a593Smuzhiyun 
517*4882a593Smuzhiyun 		if (user.sve) {
518*4882a593Smuzhiyun 			if (!system_supports_sve())
519*4882a593Smuzhiyun 				return -EINVAL;
520*4882a593Smuzhiyun 
521*4882a593Smuzhiyun 			err = restore_sve_fpsimd_context(&user);
522*4882a593Smuzhiyun 		} else {
523*4882a593Smuzhiyun 			err = restore_fpsimd_context(user.fpsimd);
524*4882a593Smuzhiyun 		}
525*4882a593Smuzhiyun 	}
526*4882a593Smuzhiyun 
527*4882a593Smuzhiyun 	return err;
528*4882a593Smuzhiyun }
529*4882a593Smuzhiyun 
SYSCALL_DEFINE0(rt_sigreturn)530*4882a593Smuzhiyun SYSCALL_DEFINE0(rt_sigreturn)
531*4882a593Smuzhiyun {
532*4882a593Smuzhiyun 	struct pt_regs *regs = current_pt_regs();
533*4882a593Smuzhiyun 	struct rt_sigframe __user *frame;
534*4882a593Smuzhiyun 
535*4882a593Smuzhiyun 	/* Always make any pending restarted system calls return -EINTR */
536*4882a593Smuzhiyun 	current->restart_block.fn = do_no_restart_syscall;
537*4882a593Smuzhiyun 
538*4882a593Smuzhiyun 	/*
539*4882a593Smuzhiyun 	 * Since we stacked the signal on a 128-bit boundary, then 'sp' should
540*4882a593Smuzhiyun 	 * be word aligned here.
541*4882a593Smuzhiyun 	 */
542*4882a593Smuzhiyun 	if (regs->sp & 15)
543*4882a593Smuzhiyun 		goto badframe;
544*4882a593Smuzhiyun 
545*4882a593Smuzhiyun 	frame = (struct rt_sigframe __user *)regs->sp;
546*4882a593Smuzhiyun 
547*4882a593Smuzhiyun 	if (!access_ok(frame, sizeof (*frame)))
548*4882a593Smuzhiyun 		goto badframe;
549*4882a593Smuzhiyun 
550*4882a593Smuzhiyun 	if (restore_sigframe(regs, frame))
551*4882a593Smuzhiyun 		goto badframe;
552*4882a593Smuzhiyun 
553*4882a593Smuzhiyun 	if (restore_altstack(&frame->uc.uc_stack))
554*4882a593Smuzhiyun 		goto badframe;
555*4882a593Smuzhiyun 
556*4882a593Smuzhiyun 	return regs->regs[0];
557*4882a593Smuzhiyun 
558*4882a593Smuzhiyun badframe:
559*4882a593Smuzhiyun 	arm64_notify_segfault(regs->sp);
560*4882a593Smuzhiyun 	return 0;
561*4882a593Smuzhiyun }
562*4882a593Smuzhiyun 
563*4882a593Smuzhiyun /*
564*4882a593Smuzhiyun  * Determine the layout of optional records in the signal frame
565*4882a593Smuzhiyun  *
566*4882a593Smuzhiyun  * add_all: if true, lays out the biggest possible signal frame for
567*4882a593Smuzhiyun  *	this task; otherwise, generates a layout for the current state
568*4882a593Smuzhiyun  *	of the task.
569*4882a593Smuzhiyun  */
setup_sigframe_layout(struct rt_sigframe_user_layout * user,bool add_all)570*4882a593Smuzhiyun static int setup_sigframe_layout(struct rt_sigframe_user_layout *user,
571*4882a593Smuzhiyun 				 bool add_all)
572*4882a593Smuzhiyun {
573*4882a593Smuzhiyun 	int err;
574*4882a593Smuzhiyun 
575*4882a593Smuzhiyun 	if (system_supports_fpsimd()) {
576*4882a593Smuzhiyun 		err = sigframe_alloc(user, &user->fpsimd_offset,
577*4882a593Smuzhiyun 				     sizeof(struct fpsimd_context));
578*4882a593Smuzhiyun 		if (err)
579*4882a593Smuzhiyun 			return err;
580*4882a593Smuzhiyun 	}
581*4882a593Smuzhiyun 
582*4882a593Smuzhiyun 	/* fault information, if valid */
583*4882a593Smuzhiyun 	if (add_all || current->thread.fault_code) {
584*4882a593Smuzhiyun 		err = sigframe_alloc(user, &user->esr_offset,
585*4882a593Smuzhiyun 				     sizeof(struct esr_context));
586*4882a593Smuzhiyun 		if (err)
587*4882a593Smuzhiyun 			return err;
588*4882a593Smuzhiyun 	}
589*4882a593Smuzhiyun 
590*4882a593Smuzhiyun 	if (system_supports_sve()) {
591*4882a593Smuzhiyun 		unsigned int vq = 0;
592*4882a593Smuzhiyun 
593*4882a593Smuzhiyun 		if (add_all || test_thread_flag(TIF_SVE)) {
594*4882a593Smuzhiyun 			int vl = sve_max_vl;
595*4882a593Smuzhiyun 
596*4882a593Smuzhiyun 			if (!add_all)
597*4882a593Smuzhiyun 				vl = current->thread.sve_vl;
598*4882a593Smuzhiyun 
599*4882a593Smuzhiyun 			vq = sve_vq_from_vl(vl);
600*4882a593Smuzhiyun 		}
601*4882a593Smuzhiyun 
602*4882a593Smuzhiyun 		err = sigframe_alloc(user, &user->sve_offset,
603*4882a593Smuzhiyun 				     SVE_SIG_CONTEXT_SIZE(vq));
604*4882a593Smuzhiyun 		if (err)
605*4882a593Smuzhiyun 			return err;
606*4882a593Smuzhiyun 	}
607*4882a593Smuzhiyun 
608*4882a593Smuzhiyun 	return sigframe_alloc_end(user);
609*4882a593Smuzhiyun }
610*4882a593Smuzhiyun 
setup_sigframe(struct rt_sigframe_user_layout * user,struct pt_regs * regs,sigset_t * set)611*4882a593Smuzhiyun static int setup_sigframe(struct rt_sigframe_user_layout *user,
612*4882a593Smuzhiyun 			  struct pt_regs *regs, sigset_t *set)
613*4882a593Smuzhiyun {
614*4882a593Smuzhiyun 	int i, err = 0;
615*4882a593Smuzhiyun 	struct rt_sigframe __user *sf = user->sigframe;
616*4882a593Smuzhiyun 
617*4882a593Smuzhiyun 	/* set up the stack frame for unwinding */
618*4882a593Smuzhiyun 	__put_user_error(regs->regs[29], &user->next_frame->fp, err);
619*4882a593Smuzhiyun 	__put_user_error(regs->regs[30], &user->next_frame->lr, err);
620*4882a593Smuzhiyun 
621*4882a593Smuzhiyun 	for (i = 0; i < 31; i++)
622*4882a593Smuzhiyun 		__put_user_error(regs->regs[i], &sf->uc.uc_mcontext.regs[i],
623*4882a593Smuzhiyun 				 err);
624*4882a593Smuzhiyun 	__put_user_error(regs->sp, &sf->uc.uc_mcontext.sp, err);
625*4882a593Smuzhiyun 	__put_user_error(regs->pc, &sf->uc.uc_mcontext.pc, err);
626*4882a593Smuzhiyun 	__put_user_error(regs->pstate, &sf->uc.uc_mcontext.pstate, err);
627*4882a593Smuzhiyun 
628*4882a593Smuzhiyun 	__put_user_error(current->thread.fault_address, &sf->uc.uc_mcontext.fault_address, err);
629*4882a593Smuzhiyun 
630*4882a593Smuzhiyun 	err |= __copy_to_user(&sf->uc.uc_sigmask, set, sizeof(*set));
631*4882a593Smuzhiyun 
632*4882a593Smuzhiyun 	if (err == 0 && system_supports_fpsimd()) {
633*4882a593Smuzhiyun 		struct fpsimd_context __user *fpsimd_ctx =
634*4882a593Smuzhiyun 			apply_user_offset(user, user->fpsimd_offset);
635*4882a593Smuzhiyun 		err |= preserve_fpsimd_context(fpsimd_ctx);
636*4882a593Smuzhiyun 	}
637*4882a593Smuzhiyun 
638*4882a593Smuzhiyun 	/* fault information, if valid */
639*4882a593Smuzhiyun 	if (err == 0 && user->esr_offset) {
640*4882a593Smuzhiyun 		struct esr_context __user *esr_ctx =
641*4882a593Smuzhiyun 			apply_user_offset(user, user->esr_offset);
642*4882a593Smuzhiyun 
643*4882a593Smuzhiyun 		__put_user_error(ESR_MAGIC, &esr_ctx->head.magic, err);
644*4882a593Smuzhiyun 		__put_user_error(sizeof(*esr_ctx), &esr_ctx->head.size, err);
645*4882a593Smuzhiyun 		__put_user_error(current->thread.fault_code, &esr_ctx->esr, err);
646*4882a593Smuzhiyun 	}
647*4882a593Smuzhiyun 
648*4882a593Smuzhiyun 	/* Scalable Vector Extension state, if present */
649*4882a593Smuzhiyun 	if (system_supports_sve() && err == 0 && user->sve_offset) {
650*4882a593Smuzhiyun 		struct sve_context __user *sve_ctx =
651*4882a593Smuzhiyun 			apply_user_offset(user, user->sve_offset);
652*4882a593Smuzhiyun 		err |= preserve_sve_context(sve_ctx);
653*4882a593Smuzhiyun 	}
654*4882a593Smuzhiyun 
655*4882a593Smuzhiyun 	if (err == 0 && user->extra_offset) {
656*4882a593Smuzhiyun 		char __user *sfp = (char __user *)user->sigframe;
657*4882a593Smuzhiyun 		char __user *userp =
658*4882a593Smuzhiyun 			apply_user_offset(user, user->extra_offset);
659*4882a593Smuzhiyun 
660*4882a593Smuzhiyun 		struct extra_context __user *extra;
661*4882a593Smuzhiyun 		struct _aarch64_ctx __user *end;
662*4882a593Smuzhiyun 		u64 extra_datap;
663*4882a593Smuzhiyun 		u32 extra_size;
664*4882a593Smuzhiyun 
665*4882a593Smuzhiyun 		extra = (struct extra_context __user *)userp;
666*4882a593Smuzhiyun 		userp += EXTRA_CONTEXT_SIZE;
667*4882a593Smuzhiyun 
668*4882a593Smuzhiyun 		end = (struct _aarch64_ctx __user *)userp;
669*4882a593Smuzhiyun 		userp += TERMINATOR_SIZE;
670*4882a593Smuzhiyun 
671*4882a593Smuzhiyun 		/*
672*4882a593Smuzhiyun 		 * extra_datap is just written to the signal frame.
673*4882a593Smuzhiyun 		 * The value gets cast back to a void __user *
674*4882a593Smuzhiyun 		 * during sigreturn.
675*4882a593Smuzhiyun 		 */
676*4882a593Smuzhiyun 		extra_datap = (__force u64)userp;
677*4882a593Smuzhiyun 		extra_size = sfp + round_up(user->size, 16) - userp;
678*4882a593Smuzhiyun 
679*4882a593Smuzhiyun 		__put_user_error(EXTRA_MAGIC, &extra->head.magic, err);
680*4882a593Smuzhiyun 		__put_user_error(EXTRA_CONTEXT_SIZE, &extra->head.size, err);
681*4882a593Smuzhiyun 		__put_user_error(extra_datap, &extra->datap, err);
682*4882a593Smuzhiyun 		__put_user_error(extra_size, &extra->size, err);
683*4882a593Smuzhiyun 
684*4882a593Smuzhiyun 		/* Add the terminator */
685*4882a593Smuzhiyun 		__put_user_error(0, &end->magic, err);
686*4882a593Smuzhiyun 		__put_user_error(0, &end->size, err);
687*4882a593Smuzhiyun 	}
688*4882a593Smuzhiyun 
689*4882a593Smuzhiyun 	/* set the "end" magic */
690*4882a593Smuzhiyun 	if (err == 0) {
691*4882a593Smuzhiyun 		struct _aarch64_ctx __user *end =
692*4882a593Smuzhiyun 			apply_user_offset(user, user->end_offset);
693*4882a593Smuzhiyun 
694*4882a593Smuzhiyun 		__put_user_error(0, &end->magic, err);
695*4882a593Smuzhiyun 		__put_user_error(0, &end->size, err);
696*4882a593Smuzhiyun 	}
697*4882a593Smuzhiyun 
698*4882a593Smuzhiyun 	return err;
699*4882a593Smuzhiyun }
700*4882a593Smuzhiyun 
get_sigframe(struct rt_sigframe_user_layout * user,struct ksignal * ksig,struct pt_regs * regs)701*4882a593Smuzhiyun static int get_sigframe(struct rt_sigframe_user_layout *user,
702*4882a593Smuzhiyun 			 struct ksignal *ksig, struct pt_regs *regs)
703*4882a593Smuzhiyun {
704*4882a593Smuzhiyun 	unsigned long sp, sp_top;
705*4882a593Smuzhiyun 	int err;
706*4882a593Smuzhiyun 
707*4882a593Smuzhiyun 	init_user_layout(user);
708*4882a593Smuzhiyun 	err = setup_sigframe_layout(user, false);
709*4882a593Smuzhiyun 	if (err)
710*4882a593Smuzhiyun 		return err;
711*4882a593Smuzhiyun 
712*4882a593Smuzhiyun 	sp = sp_top = sigsp(regs->sp, ksig);
713*4882a593Smuzhiyun 
714*4882a593Smuzhiyun 	sp = round_down(sp - sizeof(struct frame_record), 16);
715*4882a593Smuzhiyun 	user->next_frame = (struct frame_record __user *)sp;
716*4882a593Smuzhiyun 
717*4882a593Smuzhiyun 	sp = round_down(sp, 16) - sigframe_size(user);
718*4882a593Smuzhiyun 	user->sigframe = (struct rt_sigframe __user *)sp;
719*4882a593Smuzhiyun 
720*4882a593Smuzhiyun 	/*
721*4882a593Smuzhiyun 	 * Check that we can actually write to the signal frame.
722*4882a593Smuzhiyun 	 */
723*4882a593Smuzhiyun 	if (!access_ok(user->sigframe, sp_top - sp))
724*4882a593Smuzhiyun 		return -EFAULT;
725*4882a593Smuzhiyun 
726*4882a593Smuzhiyun 	return 0;
727*4882a593Smuzhiyun }
728*4882a593Smuzhiyun 
setup_return(struct pt_regs * regs,struct k_sigaction * ka,struct rt_sigframe_user_layout * user,int usig)729*4882a593Smuzhiyun static void setup_return(struct pt_regs *regs, struct k_sigaction *ka,
730*4882a593Smuzhiyun 			 struct rt_sigframe_user_layout *user, int usig)
731*4882a593Smuzhiyun {
732*4882a593Smuzhiyun 	__sigrestore_t sigtramp;
733*4882a593Smuzhiyun 
734*4882a593Smuzhiyun 	regs->regs[0] = usig;
735*4882a593Smuzhiyun 	regs->sp = (unsigned long)user->sigframe;
736*4882a593Smuzhiyun 	regs->regs[29] = (unsigned long)&user->next_frame->fp;
737*4882a593Smuzhiyun 	regs->pc = (unsigned long)ka->sa.sa_handler;
738*4882a593Smuzhiyun 
739*4882a593Smuzhiyun 	/*
740*4882a593Smuzhiyun 	 * Signal delivery is a (wacky) indirect function call in
741*4882a593Smuzhiyun 	 * userspace, so simulate the same setting of BTYPE as a BLR
742*4882a593Smuzhiyun 	 * <register containing the signal handler entry point>.
743*4882a593Smuzhiyun 	 * Signal delivery to a location in a PROT_BTI guarded page
744*4882a593Smuzhiyun 	 * that is not a function entry point will now trigger a
745*4882a593Smuzhiyun 	 * SIGILL in userspace.
746*4882a593Smuzhiyun 	 *
747*4882a593Smuzhiyun 	 * If the signal handler entry point is not in a PROT_BTI
748*4882a593Smuzhiyun 	 * guarded page, this is harmless.
749*4882a593Smuzhiyun 	 */
750*4882a593Smuzhiyun 	if (system_supports_bti()) {
751*4882a593Smuzhiyun 		regs->pstate &= ~PSR_BTYPE_MASK;
752*4882a593Smuzhiyun 		regs->pstate |= PSR_BTYPE_C;
753*4882a593Smuzhiyun 	}
754*4882a593Smuzhiyun 
755*4882a593Smuzhiyun 	/* TCO (Tag Check Override) always cleared for signal handlers */
756*4882a593Smuzhiyun 	regs->pstate &= ~PSR_TCO_BIT;
757*4882a593Smuzhiyun 
758*4882a593Smuzhiyun 	if (ka->sa.sa_flags & SA_RESTORER)
759*4882a593Smuzhiyun 		sigtramp = ka->sa.sa_restorer;
760*4882a593Smuzhiyun 	else
761*4882a593Smuzhiyun 		sigtramp = VDSO_SYMBOL(current->mm->context.vdso, sigtramp);
762*4882a593Smuzhiyun 
763*4882a593Smuzhiyun 	regs->regs[30] = (unsigned long)sigtramp;
764*4882a593Smuzhiyun }
765*4882a593Smuzhiyun 
setup_rt_frame(int usig,struct ksignal * ksig,sigset_t * set,struct pt_regs * regs)766*4882a593Smuzhiyun static int setup_rt_frame(int usig, struct ksignal *ksig, sigset_t *set,
767*4882a593Smuzhiyun 			  struct pt_regs *regs)
768*4882a593Smuzhiyun {
769*4882a593Smuzhiyun 	struct rt_sigframe_user_layout user;
770*4882a593Smuzhiyun 	struct rt_sigframe __user *frame;
771*4882a593Smuzhiyun 	int err = 0;
772*4882a593Smuzhiyun 
773*4882a593Smuzhiyun 	fpsimd_signal_preserve_current_state();
774*4882a593Smuzhiyun 
775*4882a593Smuzhiyun 	if (get_sigframe(&user, ksig, regs))
776*4882a593Smuzhiyun 		return 1;
777*4882a593Smuzhiyun 
778*4882a593Smuzhiyun 	frame = user.sigframe;
779*4882a593Smuzhiyun 
780*4882a593Smuzhiyun 	__put_user_error(0, &frame->uc.uc_flags, err);
781*4882a593Smuzhiyun 	__put_user_error(NULL, &frame->uc.uc_link, err);
782*4882a593Smuzhiyun 
783*4882a593Smuzhiyun 	err |= __save_altstack(&frame->uc.uc_stack, regs->sp);
784*4882a593Smuzhiyun 	err |= setup_sigframe(&user, regs, set);
785*4882a593Smuzhiyun 	if (err == 0) {
786*4882a593Smuzhiyun 		setup_return(regs, &ksig->ka, &user, usig);
787*4882a593Smuzhiyun 		if (ksig->ka.sa.sa_flags & SA_SIGINFO) {
788*4882a593Smuzhiyun 			err |= copy_siginfo_to_user(&frame->info, &ksig->info);
789*4882a593Smuzhiyun 			regs->regs[1] = (unsigned long)&frame->info;
790*4882a593Smuzhiyun 			regs->regs[2] = (unsigned long)&frame->uc;
791*4882a593Smuzhiyun 		}
792*4882a593Smuzhiyun 	}
793*4882a593Smuzhiyun 
794*4882a593Smuzhiyun 	return err;
795*4882a593Smuzhiyun }
796*4882a593Smuzhiyun 
setup_restart_syscall(struct pt_regs * regs)797*4882a593Smuzhiyun static void setup_restart_syscall(struct pt_regs *regs)
798*4882a593Smuzhiyun {
799*4882a593Smuzhiyun 	if (is_compat_task())
800*4882a593Smuzhiyun 		compat_setup_restart_syscall(regs);
801*4882a593Smuzhiyun 	else
802*4882a593Smuzhiyun 		regs->regs[8] = __NR_restart_syscall;
803*4882a593Smuzhiyun }
804*4882a593Smuzhiyun 
805*4882a593Smuzhiyun /*
806*4882a593Smuzhiyun  * OK, we're invoking a handler
807*4882a593Smuzhiyun  */
handle_signal(struct ksignal * ksig,struct pt_regs * regs)808*4882a593Smuzhiyun static void handle_signal(struct ksignal *ksig, struct pt_regs *regs)
809*4882a593Smuzhiyun {
810*4882a593Smuzhiyun 	sigset_t *oldset = sigmask_to_save();
811*4882a593Smuzhiyun 	int usig = ksig->sig;
812*4882a593Smuzhiyun 	int ret;
813*4882a593Smuzhiyun 
814*4882a593Smuzhiyun 	rseq_signal_deliver(ksig, regs);
815*4882a593Smuzhiyun 
816*4882a593Smuzhiyun 	/*
817*4882a593Smuzhiyun 	 * Set up the stack frame
818*4882a593Smuzhiyun 	 */
819*4882a593Smuzhiyun 	if (is_compat_task()) {
820*4882a593Smuzhiyun 		if (ksig->ka.sa.sa_flags & SA_SIGINFO)
821*4882a593Smuzhiyun 			ret = compat_setup_rt_frame(usig, ksig, oldset, regs);
822*4882a593Smuzhiyun 		else
823*4882a593Smuzhiyun 			ret = compat_setup_frame(usig, ksig, oldset, regs);
824*4882a593Smuzhiyun 	} else {
825*4882a593Smuzhiyun 		ret = setup_rt_frame(usig, ksig, oldset, regs);
826*4882a593Smuzhiyun 	}
827*4882a593Smuzhiyun 
828*4882a593Smuzhiyun 	/*
829*4882a593Smuzhiyun 	 * Check that the resulting registers are actually sane.
830*4882a593Smuzhiyun 	 */
831*4882a593Smuzhiyun 	ret |= !valid_user_regs(&regs->user_regs, current);
832*4882a593Smuzhiyun 
833*4882a593Smuzhiyun 	/* Step into the signal handler if we are stepping */
834*4882a593Smuzhiyun 	signal_setup_done(ret, ksig, test_thread_flag(TIF_SINGLESTEP));
835*4882a593Smuzhiyun }
836*4882a593Smuzhiyun 
837*4882a593Smuzhiyun /*
838*4882a593Smuzhiyun  * Note that 'init' is a special process: it doesn't get signals it doesn't
839*4882a593Smuzhiyun  * want to handle. Thus you cannot kill init even with a SIGKILL even by
840*4882a593Smuzhiyun  * mistake.
841*4882a593Smuzhiyun  *
842*4882a593Smuzhiyun  * Note that we go through the signals twice: once to check the signals that
843*4882a593Smuzhiyun  * the kernel can handle, and then we build all the user-level signal handling
844*4882a593Smuzhiyun  * stack-frames in one go after that.
845*4882a593Smuzhiyun  */
do_signal(struct pt_regs * regs)846*4882a593Smuzhiyun static void do_signal(struct pt_regs *regs)
847*4882a593Smuzhiyun {
848*4882a593Smuzhiyun 	unsigned long continue_addr = 0, restart_addr = 0;
849*4882a593Smuzhiyun 	int retval = 0;
850*4882a593Smuzhiyun 	struct ksignal ksig;
851*4882a593Smuzhiyun 	bool syscall = in_syscall(regs);
852*4882a593Smuzhiyun 
853*4882a593Smuzhiyun 	/*
854*4882a593Smuzhiyun 	 * If we were from a system call, check for system call restarting...
855*4882a593Smuzhiyun 	 */
856*4882a593Smuzhiyun 	if (syscall) {
857*4882a593Smuzhiyun 		continue_addr = regs->pc;
858*4882a593Smuzhiyun 		restart_addr = continue_addr - (compat_thumb_mode(regs) ? 2 : 4);
859*4882a593Smuzhiyun 		retval = regs->regs[0];
860*4882a593Smuzhiyun 
861*4882a593Smuzhiyun 		/*
862*4882a593Smuzhiyun 		 * Avoid additional syscall restarting via ret_to_user.
863*4882a593Smuzhiyun 		 */
864*4882a593Smuzhiyun 		forget_syscall(regs);
865*4882a593Smuzhiyun 
866*4882a593Smuzhiyun 		/*
867*4882a593Smuzhiyun 		 * Prepare for system call restart. We do this here so that a
868*4882a593Smuzhiyun 		 * debugger will see the already changed PC.
869*4882a593Smuzhiyun 		 */
870*4882a593Smuzhiyun 		switch (retval) {
871*4882a593Smuzhiyun 		case -ERESTARTNOHAND:
872*4882a593Smuzhiyun 		case -ERESTARTSYS:
873*4882a593Smuzhiyun 		case -ERESTARTNOINTR:
874*4882a593Smuzhiyun 		case -ERESTART_RESTARTBLOCK:
875*4882a593Smuzhiyun 			regs->regs[0] = regs->orig_x0;
876*4882a593Smuzhiyun 			regs->pc = restart_addr;
877*4882a593Smuzhiyun 			break;
878*4882a593Smuzhiyun 		}
879*4882a593Smuzhiyun 	}
880*4882a593Smuzhiyun 
881*4882a593Smuzhiyun 	/*
882*4882a593Smuzhiyun 	 * Get the signal to deliver. When running under ptrace, at this point
883*4882a593Smuzhiyun 	 * the debugger may change all of our registers.
884*4882a593Smuzhiyun 	 */
885*4882a593Smuzhiyun 	if (get_signal(&ksig)) {
886*4882a593Smuzhiyun 		/*
887*4882a593Smuzhiyun 		 * Depending on the signal settings, we may need to revert the
888*4882a593Smuzhiyun 		 * decision to restart the system call, but skip this if a
889*4882a593Smuzhiyun 		 * debugger has chosen to restart at a different PC.
890*4882a593Smuzhiyun 		 */
891*4882a593Smuzhiyun 		if (regs->pc == restart_addr &&
892*4882a593Smuzhiyun 		    (retval == -ERESTARTNOHAND ||
893*4882a593Smuzhiyun 		     retval == -ERESTART_RESTARTBLOCK ||
894*4882a593Smuzhiyun 		     (retval == -ERESTARTSYS &&
895*4882a593Smuzhiyun 		      !(ksig.ka.sa.sa_flags & SA_RESTART)))) {
896*4882a593Smuzhiyun 			syscall_set_return_value(current, regs, -EINTR, 0);
897*4882a593Smuzhiyun 			regs->pc = continue_addr;
898*4882a593Smuzhiyun 		}
899*4882a593Smuzhiyun 
900*4882a593Smuzhiyun 		handle_signal(&ksig, regs);
901*4882a593Smuzhiyun 		return;
902*4882a593Smuzhiyun 	}
903*4882a593Smuzhiyun 
904*4882a593Smuzhiyun 	/*
905*4882a593Smuzhiyun 	 * Handle restarting a different system call. As above, if a debugger
906*4882a593Smuzhiyun 	 * has chosen to restart at a different PC, ignore the restart.
907*4882a593Smuzhiyun 	 */
908*4882a593Smuzhiyun 	if (syscall && regs->pc == restart_addr) {
909*4882a593Smuzhiyun 		if (retval == -ERESTART_RESTARTBLOCK)
910*4882a593Smuzhiyun 			setup_restart_syscall(regs);
911*4882a593Smuzhiyun 		user_rewind_single_step(current);
912*4882a593Smuzhiyun 	}
913*4882a593Smuzhiyun 
914*4882a593Smuzhiyun 	restore_saved_sigmask();
915*4882a593Smuzhiyun }
916*4882a593Smuzhiyun 
do_notify_resume(struct pt_regs * regs,unsigned long thread_flags)917*4882a593Smuzhiyun asmlinkage void do_notify_resume(struct pt_regs *regs,
918*4882a593Smuzhiyun 				 unsigned long thread_flags)
919*4882a593Smuzhiyun {
920*4882a593Smuzhiyun 	do {
921*4882a593Smuzhiyun 		/* Check valid user FS if needed */
922*4882a593Smuzhiyun 		addr_limit_user_check();
923*4882a593Smuzhiyun 
924*4882a593Smuzhiyun 		if (thread_flags & _TIF_NEED_RESCHED) {
925*4882a593Smuzhiyun 			/* Unmask Debug and SError for the next task */
926*4882a593Smuzhiyun 			local_daif_restore(DAIF_PROCCTX_NOIRQ);
927*4882a593Smuzhiyun 
928*4882a593Smuzhiyun 			schedule();
929*4882a593Smuzhiyun 		} else {
930*4882a593Smuzhiyun 			local_daif_restore(DAIF_PROCCTX);
931*4882a593Smuzhiyun 
932*4882a593Smuzhiyun 			if (thread_flags & _TIF_UPROBE)
933*4882a593Smuzhiyun 				uprobe_notify_resume(regs);
934*4882a593Smuzhiyun 
935*4882a593Smuzhiyun 			if (thread_flags & _TIF_MTE_ASYNC_FAULT) {
936*4882a593Smuzhiyun 				clear_thread_flag(TIF_MTE_ASYNC_FAULT);
937*4882a593Smuzhiyun 				send_sig_fault(SIGSEGV, SEGV_MTEAERR,
938*4882a593Smuzhiyun 					       (void __user *)NULL, current);
939*4882a593Smuzhiyun 			}
940*4882a593Smuzhiyun 
941*4882a593Smuzhiyun 			if (thread_flags & (_TIF_SIGPENDING | _TIF_NOTIFY_SIGNAL))
942*4882a593Smuzhiyun 				do_signal(regs);
943*4882a593Smuzhiyun 
944*4882a593Smuzhiyun 			if (thread_flags & _TIF_NOTIFY_RESUME) {
945*4882a593Smuzhiyun 				tracehook_notify_resume(regs);
946*4882a593Smuzhiyun 				rseq_handle_notify_resume(NULL, regs);
947*4882a593Smuzhiyun 			}
948*4882a593Smuzhiyun 
949*4882a593Smuzhiyun 			if (thread_flags & _TIF_FOREIGN_FPSTATE)
950*4882a593Smuzhiyun 				fpsimd_restore_current_state();
951*4882a593Smuzhiyun 		}
952*4882a593Smuzhiyun 
953*4882a593Smuzhiyun 		local_daif_mask();
954*4882a593Smuzhiyun 		thread_flags = READ_ONCE(current_thread_info()->flags);
955*4882a593Smuzhiyun 	} while (thread_flags & _TIF_WORK_MASK);
956*4882a593Smuzhiyun }
957*4882a593Smuzhiyun 
958*4882a593Smuzhiyun unsigned long __ro_after_init signal_minsigstksz;
959*4882a593Smuzhiyun 
960*4882a593Smuzhiyun /*
961*4882a593Smuzhiyun  * Determine the stack space required for guaranteed signal devliery.
962*4882a593Smuzhiyun  * This function is used to populate AT_MINSIGSTKSZ at process startup.
963*4882a593Smuzhiyun  * cpufeatures setup is assumed to be complete.
964*4882a593Smuzhiyun  */
minsigstksz_setup(void)965*4882a593Smuzhiyun void __init minsigstksz_setup(void)
966*4882a593Smuzhiyun {
967*4882a593Smuzhiyun 	struct rt_sigframe_user_layout user;
968*4882a593Smuzhiyun 
969*4882a593Smuzhiyun 	init_user_layout(&user);
970*4882a593Smuzhiyun 
971*4882a593Smuzhiyun 	/*
972*4882a593Smuzhiyun 	 * If this fails, SIGFRAME_MAXSZ needs to be enlarged.  It won't
973*4882a593Smuzhiyun 	 * be big enough, but it's our best guess:
974*4882a593Smuzhiyun 	 */
975*4882a593Smuzhiyun 	if (WARN_ON(setup_sigframe_layout(&user, true)))
976*4882a593Smuzhiyun 		return;
977*4882a593Smuzhiyun 
978*4882a593Smuzhiyun 	signal_minsigstksz = sigframe_size(&user) +
979*4882a593Smuzhiyun 		round_up(sizeof(struct frame_record), 16) +
980*4882a593Smuzhiyun 		16; /* max alignment padding */
981*4882a593Smuzhiyun }
982