linux/arch/x86/kernel/ldt.c
<<
>>
Prefs
   1/*
   2 * Copyright (C) 1992 Krishna Balasubramanian and Linus Torvalds
   3 * Copyright (C) 1999 Ingo Molnar <mingo@redhat.com>
   4 * Copyright (C) 2002 Andi Kleen
   5 *
   6 * This handles calls from both 32bit and 64bit mode.
   7 */
   8
   9#include <linux/errno.h>
  10#include <linux/gfp.h>
  11#include <linux/sched.h>
  12#include <linux/string.h>
  13#include <linux/mm.h>
  14#include <linux/smp.h>
  15#include <linux/vmalloc.h>
  16#include <linux/uaccess.h>
  17
  18#include <asm/system.h>
  19#include <asm/ldt.h>
  20#include <asm/desc.h>
  21#include <asm/mmu_context.h>
  22#include <asm/syscalls.h>
  23
  24#ifdef CONFIG_SMP
  25static void flush_ldt(void *current_mm)
  26{
  27        if (current->active_mm == current_mm)
  28                load_LDT(&current->active_mm->context);
  29}
  30#endif
  31
  32static int alloc_ldt(mm_context_t *pc, int mincount, int reload)
  33{
  34        void *oldldt, *newldt;
  35        int oldsize;
  36
  37        if (mincount <= pc->size)
  38                return 0;
  39        oldsize = pc->size;
  40        mincount = (mincount + (PAGE_SIZE / LDT_ENTRY_SIZE - 1)) &
  41                        (~(PAGE_SIZE / LDT_ENTRY_SIZE - 1));
  42        if (mincount * LDT_ENTRY_SIZE > PAGE_SIZE)
  43                newldt = vmalloc(mincount * LDT_ENTRY_SIZE);
  44        else
  45                newldt = (void *)__get_free_page(GFP_KERNEL);
  46
  47        if (!newldt)
  48                return -ENOMEM;
  49
  50        if (oldsize)
  51                memcpy(newldt, pc->ldt, oldsize * LDT_ENTRY_SIZE);
  52        oldldt = pc->ldt;
  53        memset(newldt + oldsize * LDT_ENTRY_SIZE, 0,
  54               (mincount - oldsize) * LDT_ENTRY_SIZE);
  55
  56        paravirt_alloc_ldt(newldt, mincount);
  57
  58#ifdef CONFIG_X86_64
  59        /* CHECKME: Do we really need this ? */
  60        wmb();
  61#endif
  62        pc->ldt = newldt;
  63        wmb();
  64        pc->size = mincount;
  65        wmb();
  66
  67        if (reload) {
  68#ifdef CONFIG_SMP
  69                preempt_disable();
  70                load_LDT(pc);
  71                if (!cpumask_equal(mm_cpumask(current->mm),
  72                                   cpumask_of(smp_processor_id())))
  73                        smp_call_function(flush_ldt, current->mm, 1);
  74                preempt_enable();
  75#else
  76                load_LDT(pc);
  77#endif
  78        }
  79        if (oldsize) {
  80                paravirt_free_ldt(oldldt, oldsize);
  81                if (oldsize * LDT_ENTRY_SIZE > PAGE_SIZE)
  82                        vfree(oldldt);
  83                else
  84                        put_page(virt_to_page(oldldt));
  85        }
  86        return 0;
  87}
  88
  89static inline int copy_ldt(mm_context_t *new, mm_context_t *old)
  90{
  91        int err = alloc_ldt(new, old->size, 0);
  92        int i;
  93
  94        if (err < 0)
  95                return err;
  96
  97        for (i = 0; i < old->size; i++)
  98                write_ldt_entry(new->ldt, i, old->ldt + i * LDT_ENTRY_SIZE);
  99        return 0;
 100}
 101
 102/*
 103 * we do not have to muck with descriptors here, that is
 104 * done in switch_mm() as needed.
 105 */
 106int init_new_context(struct task_struct *tsk, struct mm_struct *mm)
 107{
 108        struct mm_struct *old_mm;
 109        int retval = 0;
 110
 111        mutex_init(&mm->context.lock);
 112        mm->context.size = 0;
 113        old_mm = current->mm;
 114        if (old_mm && old_mm->context.size > 0) {
 115                mutex_lock(&old_mm->context.lock);
 116                retval = copy_ldt(&mm->context, &old_mm->context);
 117                mutex_unlock(&old_mm->context.lock);
 118        }
 119        return retval;
 120}
 121
 122/*
 123 * No need to lock the MM as we are the last user
 124 *
 125 * 64bit: Don't touch the LDT register - we're already in the next thread.
 126 */
 127void destroy_context(struct mm_struct *mm)
 128{
 129        if (mm->context.size) {
 130#ifdef CONFIG_X86_32
 131                /* CHECKME: Can this ever happen ? */
 132                if (mm == current->active_mm)
 133                        clear_LDT();
 134#endif
 135                paravirt_free_ldt(mm->context.ldt, mm->context.size);
 136                if (mm->context.size * LDT_ENTRY_SIZE > PAGE_SIZE)
 137                        vfree(mm->context.ldt);
 138                else
 139                        put_page(virt_to_page(mm->context.ldt));
 140                mm->context.size = 0;
 141        }
 142}
 143
 144static int read_ldt(void __user *ptr, unsigned long bytecount)
 145{
 146        int err;
 147        unsigned long size;
 148        struct mm_struct *mm = current->mm;
 149
 150        if (!mm->context.size)
 151                return 0;
 152        if (bytecount > LDT_ENTRY_SIZE * LDT_ENTRIES)
 153                bytecount = LDT_ENTRY_SIZE * LDT_ENTRIES;
 154
 155        mutex_lock(&mm->context.lock);
 156        size = mm->context.size * LDT_ENTRY_SIZE;
 157        if (size > bytecount)
 158                size = bytecount;
 159
 160        err = 0;
 161        if (copy_to_user(ptr, mm->context.ldt, size))
 162                err = -EFAULT;
 163        mutex_unlock(&mm->context.lock);
 164        if (err < 0)
 165                goto error_return;
 166        if (size != bytecount) {
 167                /* zero-fill the rest */
 168                if (clear_user(ptr + size, bytecount - size) != 0) {
 169                        err = -EFAULT;
 170                        goto error_return;
 171                }
 172        }
 173        return bytecount;
 174error_return:
 175        return err;
 176}
 177
 178static int read_default_ldt(void __user *ptr, unsigned long bytecount)
 179{
 180        /* CHECKME: Can we use _one_ random number ? */
 181#ifdef CONFIG_X86_32
 182        unsigned long size = 5 * sizeof(struct desc_struct);
 183#else
 184        unsigned long size = 128;
 185#endif
 186        if (bytecount > size)
 187                bytecount = size;
 188        if (clear_user(ptr, bytecount))
 189                return -EFAULT;
 190        return bytecount;
 191}
 192
 193static int write_ldt(void __user *ptr, unsigned long bytecount, int oldmode)
 194{
 195        struct mm_struct *mm = current->mm;
 196        struct desc_struct ldt;
 197        int error;
 198        struct user_desc ldt_info;
 199
 200        error = -EINVAL;
 201        if (bytecount != sizeof(ldt_info))
 202                goto out;
 203        error = -EFAULT;
 204        if (copy_from_user(&ldt_info, ptr, sizeof(ldt_info)))
 205                goto out;
 206
 207        error = -EINVAL;
 208        if (ldt_info.entry_number >= LDT_ENTRIES)
 209                goto out;
 210        if (ldt_info.contents == 3) {
 211                if (oldmode)
 212                        goto out;
 213                if (ldt_info.seg_not_present == 0)
 214                        goto out;
 215        }
 216
 217        mutex_lock(&mm->context.lock);
 218        if (ldt_info.entry_number >= mm->context.size) {
 219                error = alloc_ldt(&current->mm->context,
 220                                  ldt_info.entry_number + 1, 1);
 221                if (error < 0)
 222                        goto out_unlock;
 223        }
 224
 225        /* Allow LDTs to be cleared by the user. */
 226        if (ldt_info.base_addr == 0 && ldt_info.limit == 0) {
 227                if (oldmode || LDT_empty(&ldt_info)) {
 228                        memset(&ldt, 0, sizeof(ldt));
 229                        goto install;
 230                }
 231        }
 232
 233        fill_ldt(&ldt, &ldt_info);
 234        if (oldmode)
 235                ldt.avl = 0;
 236
 237        /* Install the new entry ...  */
 238install:
 239        write_ldt_entry(mm->context.ldt, ldt_info.entry_number, &ldt);
 240        error = 0;
 241
 242out_unlock:
 243        mutex_unlock(&mm->context.lock);
 244out:
 245        return error;
 246}
 247
 248asmlinkage int sys_modify_ldt(int func, void __user *ptr,
 249                              unsigned long bytecount)
 250{
 251        int ret = -ENOSYS;
 252
 253        switch (func) {
 254        case 0:
 255                ret = read_ldt(ptr, bytecount);
 256                break;
 257        case 1:
 258                ret = write_ldt(ptr, bytecount, 1);
 259                break;
 260        case 2:
 261                ret = read_default_ldt(ptr, bytecount);
 262                break;
 263        case 0x11:
 264                ret = write_ldt(ptr, bytecount, 0);
 265                break;
 266        }
 267        return ret;
 268}
 269