1 // SPDX-License-Identifier: GPL-2.0
2 /*
3 * Ptrace user space interface.
4 *
5 * Copyright IBM Corp. 1999, 2010
6 * Author(s): Denis Joseph Barrow
7 * Martin Schwidefsky (schwidefsky@de.ibm.com)
8 */
9
10 #include "asm/ptrace.h"
11 #include <linux/kernel.h>
12 #include <linux/sched.h>
13 #include <linux/sched/task_stack.h>
14 #include <linux/mm.h>
15 #include <linux/smp.h>
16 #include <linux/errno.h>
17 #include <linux/ptrace.h>
18 #include <linux/user.h>
19 #include <linux/security.h>
20 #include <linux/audit.h>
21 #include <linux/signal.h>
22 #include <linux/elf.h>
23 #include <linux/regset.h>
24 #include <linux/seccomp.h>
25 #include <linux/compat.h>
26 #include <trace/syscall.h>
27 #include <asm/page.h>
28 #include <linux/uaccess.h>
29 #include <asm/unistd.h>
30 #include <asm/switch_to.h>
31 #include <asm/runtime_instr.h>
32 #include <asm/facility.h>
33
34 #include "entry.h"
35
36 #ifdef CONFIG_COMPAT
37 #include "compat_ptrace.h"
38 #endif
39
update_cr_regs(struct task_struct * task)40 void update_cr_regs(struct task_struct *task)
41 {
42 struct pt_regs *regs = task_pt_regs(task);
43 struct thread_struct *thread = &task->thread;
44 struct per_regs old, new;
45 union ctlreg0 cr0_old, cr0_new;
46 union ctlreg2 cr2_old, cr2_new;
47 int cr0_changed, cr2_changed;
48
49 __ctl_store(cr0_old.val, 0, 0);
50 __ctl_store(cr2_old.val, 2, 2);
51 cr0_new = cr0_old;
52 cr2_new = cr2_old;
53 /* Take care of the enable/disable of transactional execution. */
54 if (MACHINE_HAS_TE) {
55 /* Set or clear transaction execution TXC bit 8. */
56 cr0_new.tcx = 1;
57 if (task->thread.per_flags & PER_FLAG_NO_TE)
58 cr0_new.tcx = 0;
59 /* Set or clear transaction execution TDC bits 62 and 63. */
60 cr2_new.tdc = 0;
61 if (task->thread.per_flags & PER_FLAG_TE_ABORT_RAND) {
62 if (task->thread.per_flags & PER_FLAG_TE_ABORT_RAND_TEND)
63 cr2_new.tdc = 1;
64 else
65 cr2_new.tdc = 2;
66 }
67 }
68 /* Take care of enable/disable of guarded storage. */
69 if (MACHINE_HAS_GS) {
70 cr2_new.gse = 0;
71 if (task->thread.gs_cb)
72 cr2_new.gse = 1;
73 }
74 /* Load control register 0/2 iff changed */
75 cr0_changed = cr0_new.val != cr0_old.val;
76 cr2_changed = cr2_new.val != cr2_old.val;
77 if (cr0_changed)
78 __ctl_load(cr0_new.val, 0, 0);
79 if (cr2_changed)
80 __ctl_load(cr2_new.val, 2, 2);
81 /* Copy user specified PER registers */
82 new.control = thread->per_user.control;
83 new.start = thread->per_user.start;
84 new.end = thread->per_user.end;
85
86 /* merge TIF_SINGLE_STEP into user specified PER registers. */
87 if (test_tsk_thread_flag(task, TIF_SINGLE_STEP) ||
88 test_tsk_thread_flag(task, TIF_UPROBE_SINGLESTEP)) {
89 if (test_tsk_thread_flag(task, TIF_BLOCK_STEP))
90 new.control |= PER_EVENT_BRANCH;
91 else
92 new.control |= PER_EVENT_IFETCH;
93 new.control |= PER_CONTROL_SUSPENSION;
94 new.control |= PER_EVENT_TRANSACTION_END;
95 if (test_tsk_thread_flag(task, TIF_UPROBE_SINGLESTEP))
96 new.control |= PER_EVENT_IFETCH;
97 new.start = 0;
98 new.end = -1UL;
99 }
100
101 /* Take care of the PER enablement bit in the PSW. */
102 if (!(new.control & PER_EVENT_MASK)) {
103 regs->psw.mask &= ~PSW_MASK_PER;
104 return;
105 }
106 regs->psw.mask |= PSW_MASK_PER;
107 __ctl_store(old, 9, 11);
108 if (memcmp(&new, &old, sizeof(struct per_regs)) != 0)
109 __ctl_load(new, 9, 11);
110 }
111
user_enable_single_step(struct task_struct * task)112 void user_enable_single_step(struct task_struct *task)
113 {
114 clear_tsk_thread_flag(task, TIF_BLOCK_STEP);
115 set_tsk_thread_flag(task, TIF_SINGLE_STEP);
116 }
117
user_disable_single_step(struct task_struct * task)118 void user_disable_single_step(struct task_struct *task)
119 {
120 clear_tsk_thread_flag(task, TIF_BLOCK_STEP);
121 clear_tsk_thread_flag(task, TIF_SINGLE_STEP);
122 }
123
user_enable_block_step(struct task_struct * task)124 void user_enable_block_step(struct task_struct *task)
125 {
126 set_tsk_thread_flag(task, TIF_SINGLE_STEP);
127 set_tsk_thread_flag(task, TIF_BLOCK_STEP);
128 }
129
130 /*
131 * Called by kernel/ptrace.c when detaching..
132 *
133 * Clear all debugging related fields.
134 */
ptrace_disable(struct task_struct * task)135 void ptrace_disable(struct task_struct *task)
136 {
137 memset(&task->thread.per_user, 0, sizeof(task->thread.per_user));
138 memset(&task->thread.per_event, 0, sizeof(task->thread.per_event));
139 clear_tsk_thread_flag(task, TIF_SINGLE_STEP);
140 clear_tsk_thread_flag(task, TIF_PER_TRAP);
141 task->thread.per_flags = 0;
142 }
143
144 #define __ADDR_MASK 7
145
__peek_user_per(struct task_struct * child,addr_t addr)146 static inline unsigned long __peek_user_per(struct task_struct *child,
147 addr_t addr)
148 {
149 if (addr == offsetof(struct per_struct_kernel, cr9))
150 /* Control bits of the active per set. */
151 return test_thread_flag(TIF_SINGLE_STEP) ?
152 PER_EVENT_IFETCH : child->thread.per_user.control;
153 else if (addr == offsetof(struct per_struct_kernel, cr10))
154 /* Start address of the active per set. */
155 return test_thread_flag(TIF_SINGLE_STEP) ?
156 0 : child->thread.per_user.start;
157 else if (addr == offsetof(struct per_struct_kernel, cr11))
158 /* End address of the active per set. */
159 return test_thread_flag(TIF_SINGLE_STEP) ?
160 -1UL : child->thread.per_user.end;
161 else if (addr == offsetof(struct per_struct_kernel, bits))
162 /* Single-step bit. */
163 return test_thread_flag(TIF_SINGLE_STEP) ?
164 (1UL << (BITS_PER_LONG - 1)) : 0;
165 else if (addr == offsetof(struct per_struct_kernel, starting_addr))
166 /* Start address of the user specified per set. */
167 return child->thread.per_user.start;
168 else if (addr == offsetof(struct per_struct_kernel, ending_addr))
169 /* End address of the user specified per set. */
170 return child->thread.per_user.end;
171 else if (addr == offsetof(struct per_struct_kernel, perc_atmid))
172 /* PER code, ATMID and AI of the last PER trap */
173 return (unsigned long)
174 child->thread.per_event.cause << (BITS_PER_LONG - 16);
175 else if (addr == offsetof(struct per_struct_kernel, address))
176 /* Address of the last PER trap */
177 return child->thread.per_event.address;
178 else if (addr == offsetof(struct per_struct_kernel, access_id))
179 /* Access id of the last PER trap */
180 return (unsigned long)
181 child->thread.per_event.paid << (BITS_PER_LONG - 8);
182 return 0;
183 }
184
185 /*
186 * Read the word at offset addr from the user area of a process. The
187 * trouble here is that the information is littered over different
188 * locations. The process registers are found on the kernel stack,
189 * the floating point stuff and the trace settings are stored in
190 * the task structure. In addition the different structures in
191 * struct user contain pad bytes that should be read as zeroes.
192 * Lovely...
193 */
__peek_user(struct task_struct * child,addr_t addr)194 static unsigned long __peek_user(struct task_struct *child, addr_t addr)
195 {
196 addr_t offset, tmp;
197
198 if (addr < offsetof(struct user, regs.acrs)) {
199 /*
200 * psw and gprs are stored on the stack
201 */
202 tmp = *(addr_t *)((addr_t) &task_pt_regs(child)->psw + addr);
203 if (addr == offsetof(struct user, regs.psw.mask)) {
204 /* Return a clean psw mask. */
205 tmp &= PSW_MASK_USER | PSW_MASK_RI;
206 tmp |= PSW_USER_BITS;
207 }
208
209 } else if (addr < offsetof(struct user, regs.orig_gpr2)) {
210 /*
211 * access registers are stored in the thread structure
212 */
213 offset = addr - offsetof(struct user, regs.acrs);
214 /*
215 * Very special case: old & broken 64 bit gdb reading
216 * from acrs[15]. Result is a 64 bit value. Read the
217 * 32 bit acrs[15] value and shift it by 32. Sick...
218 */
219 if (addr == offsetof(struct user, regs.acrs[15]))
220 tmp = ((unsigned long) child->thread.acrs[15]) << 32;
221 else
222 tmp = *(addr_t *)((addr_t) &child->thread.acrs + offset);
223
224 } else if (addr == offsetof(struct user, regs.orig_gpr2)) {
225 /*
226 * orig_gpr2 is stored on the kernel stack
227 */
228 tmp = (addr_t) task_pt_regs(child)->orig_gpr2;
229
230 } else if (addr < offsetof(struct user, regs.fp_regs)) {
231 /*
232 * prevent reads of padding hole between
233 * orig_gpr2 and fp_regs on s390.
234 */
235 tmp = 0;
236
237 } else if (addr == offsetof(struct user, regs.fp_regs.fpc)) {
238 /*
239 * floating point control reg. is in the thread structure
240 */
241 tmp = child->thread.fpu.fpc;
242 tmp <<= BITS_PER_LONG - 32;
243
244 } else if (addr < offsetof(struct user, regs.fp_regs) + sizeof(s390_fp_regs)) {
245 /*
246 * floating point regs. are either in child->thread.fpu
247 * or the child->thread.fpu.vxrs array
248 */
249 offset = addr - offsetof(struct user, regs.fp_regs.fprs);
250 if (MACHINE_HAS_VX)
251 tmp = *(addr_t *)
252 ((addr_t) child->thread.fpu.vxrs + 2*offset);
253 else
254 tmp = *(addr_t *)
255 ((addr_t) child->thread.fpu.fprs + offset);
256
257 } else if (addr < offsetof(struct user, regs.per_info) + sizeof(per_struct)) {
258 /*
259 * Handle access to the per_info structure.
260 */
261 addr -= offsetof(struct user, regs.per_info);
262 tmp = __peek_user_per(child, addr);
263
264 } else
265 tmp = 0;
266
267 return tmp;
268 }
269
270 static int
peek_user(struct task_struct * child,addr_t addr,addr_t data)271 peek_user(struct task_struct *child, addr_t addr, addr_t data)
272 {
273 addr_t tmp, mask;
274
275 /*
276 * Stupid gdb peeks/pokes the access registers in 64 bit with
277 * an alignment of 4. Programmers from hell...
278 */
279 mask = __ADDR_MASK;
280 if (addr >= offsetof(struct user, regs.acrs) &&
281 addr < offsetof(struct user, regs.orig_gpr2))
282 mask = 3;
283 if ((addr & mask) || addr > sizeof(struct user) - __ADDR_MASK)
284 return -EIO;
285
286 tmp = __peek_user(child, addr);
287 return put_user(tmp, (addr_t __user *) data);
288 }
289
__poke_user_per(struct task_struct * child,addr_t addr,addr_t data)290 static inline void __poke_user_per(struct task_struct *child,
291 addr_t addr, addr_t data)
292 {
293 /*
294 * There are only three fields in the per_info struct that the
295 * debugger user can write to.
296 * 1) cr9: the debugger wants to set a new PER event mask
297 * 2) starting_addr: the debugger wants to set a new starting
298 * address to use with the PER event mask.
299 * 3) ending_addr: the debugger wants to set a new ending
300 * address to use with the PER event mask.
301 * The user specified PER event mask and the start and end
302 * addresses are used only if single stepping is not in effect.
303 * Writes to any other field in per_info are ignored.
304 */
305 if (addr == offsetof(struct per_struct_kernel, cr9))
306 /* PER event mask of the user specified per set. */
307 child->thread.per_user.control =
308 data & (PER_EVENT_MASK | PER_CONTROL_MASK);
309 else if (addr == offsetof(struct per_struct_kernel, starting_addr))
310 /* Starting address of the user specified per set. */
311 child->thread.per_user.start = data;
312 else if (addr == offsetof(struct per_struct_kernel, ending_addr))
313 /* Ending address of the user specified per set. */
314 child->thread.per_user.end = data;
315 }
316
317 /*
318 * Write a word to the user area of a process at location addr. This
319 * operation does have an additional problem compared to peek_user.
320 * Stores to the program status word and on the floating point
321 * control register needs to get checked for validity.
322 */
__poke_user(struct task_struct * child,addr_t addr,addr_t data)323 static int __poke_user(struct task_struct *child, addr_t addr, addr_t data)
324 {
325 addr_t offset;
326
327
328 if (addr < offsetof(struct user, regs.acrs)) {
329 struct pt_regs *regs = task_pt_regs(child);
330 /*
331 * psw and gprs are stored on the stack
332 */
333 if (addr == offsetof(struct user, regs.psw.mask)) {
334 unsigned long mask = PSW_MASK_USER;
335
336 mask |= is_ri_task(child) ? PSW_MASK_RI : 0;
337 if ((data ^ PSW_USER_BITS) & ~mask)
338 /* Invalid psw mask. */
339 return -EINVAL;
340 if ((data & PSW_MASK_ASC) == PSW_ASC_HOME)
341 /* Invalid address-space-control bits */
342 return -EINVAL;
343 if ((data & PSW_MASK_EA) && !(data & PSW_MASK_BA))
344 /* Invalid addressing mode bits */
345 return -EINVAL;
346 }
347
348 if (test_pt_regs_flag(regs, PIF_SYSCALL) &&
349 addr == offsetof(struct user, regs.gprs[2])) {
350 struct pt_regs *regs = task_pt_regs(child);
351
352 regs->int_code = 0x20000 | (data & 0xffff);
353 }
354 *(addr_t *)((addr_t) ®s->psw + addr) = data;
355 } else if (addr < offsetof(struct user, regs.orig_gpr2)) {
356 /*
357 * access registers are stored in the thread structure
358 */
359 offset = addr - offsetof(struct user, regs.acrs);
360 /*
361 * Very special case: old & broken 64 bit gdb writing
362 * to acrs[15] with a 64 bit value. Ignore the lower
363 * half of the value and write the upper 32 bit to
364 * acrs[15]. Sick...
365 */
366 if (addr == offsetof(struct user, regs.acrs[15]))
367 child->thread.acrs[15] = (unsigned int) (data >> 32);
368 else
369 *(addr_t *)((addr_t) &child->thread.acrs + offset) = data;
370
371 } else if (addr == offsetof(struct user, regs.orig_gpr2)) {
372 /*
373 * orig_gpr2 is stored on the kernel stack
374 */
375 task_pt_regs(child)->orig_gpr2 = data;
376
377 } else if (addr < offsetof(struct user, regs.fp_regs)) {
378 /*
379 * prevent writes of padding hole between
380 * orig_gpr2 and fp_regs on s390.
381 */
382 return 0;
383
384 } else if (addr == offsetof(struct user, regs.fp_regs.fpc)) {
385 /*
386 * floating point control reg. is in the thread structure
387 */
388 save_fpu_regs();
389 if ((unsigned int) data != 0 ||
390 test_fp_ctl(data >> (BITS_PER_LONG - 32)))
391 return -EINVAL;
392 child->thread.fpu.fpc = data >> (BITS_PER_LONG - 32);
393
394 } else if (addr < offsetof(struct user, regs.fp_regs) + sizeof(s390_fp_regs)) {
395 /*
396 * floating point regs. are either in child->thread.fpu
397 * or the child->thread.fpu.vxrs array
398 */
399 offset = addr - offsetof(struct user, regs.fp_regs.fprs);
400 if (MACHINE_HAS_VX)
401 *(addr_t *)((addr_t)
402 child->thread.fpu.vxrs + 2*offset) = data;
403 else
404 *(addr_t *)((addr_t)
405 child->thread.fpu.fprs + offset) = data;
406
407 } else if (addr < offsetof(struct user, regs.per_info) + sizeof(per_struct)) {
408 /*
409 * Handle access to the per_info structure.
410 */
411 addr -= offsetof(struct user, regs.per_info);
412 __poke_user_per(child, addr, data);
413
414 }
415
416 return 0;
417 }
418
poke_user(struct task_struct * child,addr_t addr,addr_t data)419 static int poke_user(struct task_struct *child, addr_t addr, addr_t data)
420 {
421 addr_t mask;
422
423 /*
424 * Stupid gdb peeks/pokes the access registers in 64 bit with
425 * an alignment of 4. Programmers from hell indeed...
426 */
427 mask = __ADDR_MASK;
428 if (addr >= offsetof(struct user, regs.acrs) &&
429 addr < offsetof(struct user, regs.orig_gpr2))
430 mask = 3;
431 if ((addr & mask) || addr > sizeof(struct user) - __ADDR_MASK)
432 return -EIO;
433
434 return __poke_user(child, addr, data);
435 }
436
arch_ptrace(struct task_struct * child,long request,unsigned long addr,unsigned long data)437 long arch_ptrace(struct task_struct *child, long request,
438 unsigned long addr, unsigned long data)
439 {
440 ptrace_area parea;
441 int copied, ret;
442
443 switch (request) {
444 case PTRACE_PEEKUSR:
445 /* read the word at location addr in the USER area. */
446 return peek_user(child, addr, data);
447
448 case PTRACE_POKEUSR:
449 /* write the word at location addr in the USER area */
450 return poke_user(child, addr, data);
451
452 case PTRACE_PEEKUSR_AREA:
453 case PTRACE_POKEUSR_AREA:
454 if (copy_from_user(&parea, (void __force __user *) addr,
455 sizeof(parea)))
456 return -EFAULT;
457 addr = parea.kernel_addr;
458 data = parea.process_addr;
459 copied = 0;
460 while (copied < parea.len) {
461 if (request == PTRACE_PEEKUSR_AREA)
462 ret = peek_user(child, addr, data);
463 else {
464 addr_t utmp;
465 if (get_user(utmp,
466 (addr_t __force __user *) data))
467 return -EFAULT;
468 ret = poke_user(child, addr, utmp);
469 }
470 if (ret)
471 return ret;
472 addr += sizeof(unsigned long);
473 data += sizeof(unsigned long);
474 copied += sizeof(unsigned long);
475 }
476 return 0;
477 case PTRACE_GET_LAST_BREAK:
478 return put_user(child->thread.last_break, (unsigned long __user *)data);
479 case PTRACE_ENABLE_TE:
480 if (!MACHINE_HAS_TE)
481 return -EIO;
482 child->thread.per_flags &= ~PER_FLAG_NO_TE;
483 return 0;
484 case PTRACE_DISABLE_TE:
485 if (!MACHINE_HAS_TE)
486 return -EIO;
487 child->thread.per_flags |= PER_FLAG_NO_TE;
488 child->thread.per_flags &= ~PER_FLAG_TE_ABORT_RAND;
489 return 0;
490 case PTRACE_TE_ABORT_RAND:
491 if (!MACHINE_HAS_TE || (child->thread.per_flags & PER_FLAG_NO_TE))
492 return -EIO;
493 switch (data) {
494 case 0UL:
495 child->thread.per_flags &= ~PER_FLAG_TE_ABORT_RAND;
496 break;
497 case 1UL:
498 child->thread.per_flags |= PER_FLAG_TE_ABORT_RAND;
499 child->thread.per_flags |= PER_FLAG_TE_ABORT_RAND_TEND;
500 break;
501 case 2UL:
502 child->thread.per_flags |= PER_FLAG_TE_ABORT_RAND;
503 child->thread.per_flags &= ~PER_FLAG_TE_ABORT_RAND_TEND;
504 break;
505 default:
506 return -EINVAL;
507 }
508 return 0;
509 default:
510 return ptrace_request(child, request, addr, data);
511 }
512 }
513
514 #ifdef CONFIG_COMPAT
515 /*
516 * Now the fun part starts... a 31 bit program running in the
517 * 31 bit emulation tracing another program. PTRACE_PEEKTEXT,
518 * PTRACE_PEEKDATA, PTRACE_POKETEXT and PTRACE_POKEDATA are easy
519 * to handle, the difference to the 64 bit versions of the requests
520 * is that the access is done in multiples of 4 byte instead of
521 * 8 bytes (sizeof(unsigned long) on 31/64 bit).
522 * The ugly part are PTRACE_PEEKUSR, PTRACE_PEEKUSR_AREA,
523 * PTRACE_POKEUSR and PTRACE_POKEUSR_AREA. If the traced program
524 * is a 31 bit program too, the content of struct user can be
525 * emulated. A 31 bit program peeking into the struct user of
526 * a 64 bit program is a no-no.
527 */
528
529 /*
530 * Same as peek_user_per but for a 31 bit program.
531 */
__peek_user_per_compat(struct task_struct * child,addr_t addr)532 static inline __u32 __peek_user_per_compat(struct task_struct *child,
533 addr_t addr)
534 {
535 if (addr == offsetof(struct compat_per_struct_kernel, cr9))
536 /* Control bits of the active per set. */
537 return (__u32) test_thread_flag(TIF_SINGLE_STEP) ?
538 PER_EVENT_IFETCH : child->thread.per_user.control;
539 else if (addr == offsetof(struct compat_per_struct_kernel, cr10))
540 /* Start address of the active per set. */
541 return (__u32) test_thread_flag(TIF_SINGLE_STEP) ?
542 0 : child->thread.per_user.start;
543 else if (addr == offsetof(struct compat_per_struct_kernel, cr11))
544 /* End address of the active per set. */
545 return test_thread_flag(TIF_SINGLE_STEP) ?
546 PSW32_ADDR_INSN : child->thread.per_user.end;
547 else if (addr == offsetof(struct compat_per_struct_kernel, bits))
548 /* Single-step bit. */
549 return (__u32) test_thread_flag(TIF_SINGLE_STEP) ?
550 0x80000000 : 0;
551 else if (addr == offsetof(struct compat_per_struct_kernel, starting_addr))
552 /* Start address of the user specified per set. */
553 return (__u32) child->thread.per_user.start;
554 else if (addr == offsetof(struct compat_per_struct_kernel, ending_addr))
555 /* End address of the user specified per set. */
556 return (__u32) child->thread.per_user.end;
557 else if (addr == offsetof(struct compat_per_struct_kernel, perc_atmid))
558 /* PER code, ATMID and AI of the last PER trap */
559 return (__u32) child->thread.per_event.cause << 16;
560 else if (addr == offsetof(struct compat_per_struct_kernel, address))
561 /* Address of the last PER trap */
562 return (__u32) child->thread.per_event.address;
563 else if (addr == offsetof(struct compat_per_struct_kernel, access_id))
564 /* Access id of the last PER trap */
565 return (__u32) child->thread.per_event.paid << 24;
566 return 0;
567 }
568
569 /*
570 * Same as peek_user but for a 31 bit program.
571 */
__peek_user_compat(struct task_struct * child,addr_t addr)572 static u32 __peek_user_compat(struct task_struct *child, addr_t addr)
573 {
574 addr_t offset;
575 __u32 tmp;
576
577 if (addr < offsetof(struct compat_user, regs.acrs)) {
578 struct pt_regs *regs = task_pt_regs(child);
579 /*
580 * psw and gprs are stored on the stack
581 */
582 if (addr == offsetof(struct compat_user, regs.psw.mask)) {
583 /* Fake a 31 bit psw mask. */
584 tmp = (__u32)(regs->psw.mask >> 32);
585 tmp &= PSW32_MASK_USER | PSW32_MASK_RI;
586 tmp |= PSW32_USER_BITS;
587 } else if (addr == offsetof(struct compat_user, regs.psw.addr)) {
588 /* Fake a 31 bit psw address. */
589 tmp = (__u32) regs->psw.addr |
590 (__u32)(regs->psw.mask & PSW_MASK_BA);
591 } else {
592 /* gpr 0-15 */
593 tmp = *(__u32 *)((addr_t) ®s->psw + addr*2 + 4);
594 }
595 } else if (addr < offsetof(struct compat_user, regs.orig_gpr2)) {
596 /*
597 * access registers are stored in the thread structure
598 */
599 offset = addr - offsetof(struct compat_user, regs.acrs);
600 tmp = *(__u32*)((addr_t) &child->thread.acrs + offset);
601
602 } else if (addr == offsetof(struct compat_user, regs.orig_gpr2)) {
603 /*
604 * orig_gpr2 is stored on the kernel stack
605 */
606 tmp = *(__u32*)((addr_t) &task_pt_regs(child)->orig_gpr2 + 4);
607
608 } else if (addr < offsetof(struct compat_user, regs.fp_regs)) {
609 /*
610 * prevent reads of padding hole between
611 * orig_gpr2 and fp_regs on s390.
612 */
613 tmp = 0;
614
615 } else if (addr == offsetof(struct compat_user, regs.fp_regs.fpc)) {
616 /*
617 * floating point control reg. is in the thread structure
618 */
619 tmp = child->thread.fpu.fpc;
620
621 } else if (addr < offsetof(struct compat_user, regs.fp_regs) + sizeof(s390_fp_regs)) {
622 /*
623 * floating point regs. are either in child->thread.fpu
624 * or the child->thread.fpu.vxrs array
625 */
626 offset = addr - offsetof(struct compat_user, regs.fp_regs.fprs);
627 if (MACHINE_HAS_VX)
628 tmp = *(__u32 *)
629 ((addr_t) child->thread.fpu.vxrs + 2*offset);
630 else
631 tmp = *(__u32 *)
632 ((addr_t) child->thread.fpu.fprs + offset);
633
634 } else if (addr < offsetof(struct compat_user, regs.per_info) + sizeof(struct compat_per_struct_kernel)) {
635 /*
636 * Handle access to the per_info structure.
637 */
638 addr -= offsetof(struct compat_user, regs.per_info);
639 tmp = __peek_user_per_compat(child, addr);
640
641 } else
642 tmp = 0;
643
644 return tmp;
645 }
646
peek_user_compat(struct task_struct * child,addr_t addr,addr_t data)647 static int peek_user_compat(struct task_struct *child,
648 addr_t addr, addr_t data)
649 {
650 __u32 tmp;
651
652 if (!is_compat_task() || (addr & 3) || addr > sizeof(struct user) - 3)
653 return -EIO;
654
655 tmp = __peek_user_compat(child, addr);
656 return put_user(tmp, (__u32 __user *) data);
657 }
658
659 /*
660 * Same as poke_user_per but for a 31 bit program.
661 */
__poke_user_per_compat(struct task_struct * child,addr_t addr,__u32 data)662 static inline void __poke_user_per_compat(struct task_struct *child,
663 addr_t addr, __u32 data)
664 {
665 if (addr == offsetof(struct compat_per_struct_kernel, cr9))
666 /* PER event mask of the user specified per set. */
667 child->thread.per_user.control =
668 data & (PER_EVENT_MASK | PER_CONTROL_MASK);
669 else if (addr == offsetof(struct compat_per_struct_kernel, starting_addr))
670 /* Starting address of the user specified per set. */
671 child->thread.per_user.start = data;
672 else if (addr == offsetof(struct compat_per_struct_kernel, ending_addr))
673 /* Ending address of the user specified per set. */
674 child->thread.per_user.end = data;
675 }
676
677 /*
678 * Same as poke_user but for a 31 bit program.
679 */
__poke_user_compat(struct task_struct * child,addr_t addr,addr_t data)680 static int __poke_user_compat(struct task_struct *child,
681 addr_t addr, addr_t data)
682 {
683 __u32 tmp = (__u32) data;
684 addr_t offset;
685
686 if (addr < offsetof(struct compat_user, regs.acrs)) {
687 struct pt_regs *regs = task_pt_regs(child);
688 /*
689 * psw, gprs, acrs and orig_gpr2 are stored on the stack
690 */
691 if (addr == offsetof(struct compat_user, regs.psw.mask)) {
692 __u32 mask = PSW32_MASK_USER;
693
694 mask |= is_ri_task(child) ? PSW32_MASK_RI : 0;
695 /* Build a 64 bit psw mask from 31 bit mask. */
696 if ((tmp ^ PSW32_USER_BITS) & ~mask)
697 /* Invalid psw mask. */
698 return -EINVAL;
699 if ((data & PSW32_MASK_ASC) == PSW32_ASC_HOME)
700 /* Invalid address-space-control bits */
701 return -EINVAL;
702 regs->psw.mask = (regs->psw.mask & ~PSW_MASK_USER) |
703 (regs->psw.mask & PSW_MASK_BA) |
704 (__u64)(tmp & mask) << 32;
705 } else if (addr == offsetof(struct compat_user, regs.psw.addr)) {
706 /* Build a 64 bit psw address from 31 bit address. */
707 regs->psw.addr = (__u64) tmp & PSW32_ADDR_INSN;
708 /* Transfer 31 bit amode bit to psw mask. */
709 regs->psw.mask = (regs->psw.mask & ~PSW_MASK_BA) |
710 (__u64)(tmp & PSW32_ADDR_AMODE);
711 } else {
712 if (test_pt_regs_flag(regs, PIF_SYSCALL) &&
713 addr == offsetof(struct compat_user, regs.gprs[2])) {
714 struct pt_regs *regs = task_pt_regs(child);
715
716 regs->int_code = 0x20000 | (data & 0xffff);
717 }
718 /* gpr 0-15 */
719 *(__u32*)((addr_t) ®s->psw + addr*2 + 4) = tmp;
720 }
721 } else if (addr < offsetof(struct compat_user, regs.orig_gpr2)) {
722 /*
723 * access registers are stored in the thread structure
724 */
725 offset = addr - offsetof(struct compat_user, regs.acrs);
726 *(__u32*)((addr_t) &child->thread.acrs + offset) = tmp;
727
728 } else if (addr == offsetof(struct compat_user, regs.orig_gpr2)) {
729 /*
730 * orig_gpr2 is stored on the kernel stack
731 */
732 *(__u32*)((addr_t) &task_pt_regs(child)->orig_gpr2 + 4) = tmp;
733
734 } else if (addr < offsetof(struct compat_user, regs.fp_regs)) {
735 /*
736 * prevent writess of padding hole between
737 * orig_gpr2 and fp_regs on s390.
738 */
739 return 0;
740
741 } else if (addr == offsetof(struct compat_user, regs.fp_regs.fpc)) {
742 /*
743 * floating point control reg. is in the thread structure
744 */
745 save_fpu_regs();
746 if (test_fp_ctl(tmp))
747 return -EINVAL;
748 child->thread.fpu.fpc = data;
749
750 } else if (addr < offsetof(struct compat_user, regs.fp_regs) + sizeof(s390_fp_regs)) {
751 /*
752 * floating point regs. are either in child->thread.fpu
753 * or the child->thread.fpu.vxrs array
754 */
755 offset = addr - offsetof(struct compat_user, regs.fp_regs.fprs);
756 if (MACHINE_HAS_VX)
757 *(__u32 *)((addr_t)
758 child->thread.fpu.vxrs + 2*offset) = tmp;
759 else
760 *(__u32 *)((addr_t)
761 child->thread.fpu.fprs + offset) = tmp;
762
763 } else if (addr < offsetof(struct compat_user, regs.per_info) + sizeof(struct compat_per_struct_kernel)) {
764 /*
765 * Handle access to the per_info structure.
766 */
767 addr -= offsetof(struct compat_user, regs.per_info);
768 __poke_user_per_compat(child, addr, data);
769 }
770
771 return 0;
772 }
773
poke_user_compat(struct task_struct * child,addr_t addr,addr_t data)774 static int poke_user_compat(struct task_struct *child,
775 addr_t addr, addr_t data)
776 {
777 if (!is_compat_task() || (addr & 3) ||
778 addr > sizeof(struct compat_user) - 3)
779 return -EIO;
780
781 return __poke_user_compat(child, addr, data);
782 }
783
compat_arch_ptrace(struct task_struct * child,compat_long_t request,compat_ulong_t caddr,compat_ulong_t cdata)784 long compat_arch_ptrace(struct task_struct *child, compat_long_t request,
785 compat_ulong_t caddr, compat_ulong_t cdata)
786 {
787 unsigned long addr = caddr;
788 unsigned long data = cdata;
789 compat_ptrace_area parea;
790 int copied, ret;
791
792 switch (request) {
793 case PTRACE_PEEKUSR:
794 /* read the word at location addr in the USER area. */
795 return peek_user_compat(child, addr, data);
796
797 case PTRACE_POKEUSR:
798 /* write the word at location addr in the USER area */
799 return poke_user_compat(child, addr, data);
800
801 case PTRACE_PEEKUSR_AREA:
802 case PTRACE_POKEUSR_AREA:
803 if (copy_from_user(&parea, (void __force __user *) addr,
804 sizeof(parea)))
805 return -EFAULT;
806 addr = parea.kernel_addr;
807 data = parea.process_addr;
808 copied = 0;
809 while (copied < parea.len) {
810 if (request == PTRACE_PEEKUSR_AREA)
811 ret = peek_user_compat(child, addr, data);
812 else {
813 __u32 utmp;
814 if (get_user(utmp,
815 (__u32 __force __user *) data))
816 return -EFAULT;
817 ret = poke_user_compat(child, addr, utmp);
818 }
819 if (ret)
820 return ret;
821 addr += sizeof(unsigned int);
822 data += sizeof(unsigned int);
823 copied += sizeof(unsigned int);
824 }
825 return 0;
826 case PTRACE_GET_LAST_BREAK:
827 return put_user(child->thread.last_break, (unsigned int __user *)data);
828 }
829 return compat_ptrace_request(child, request, addr, data);
830 }
831 #endif
832
833 /*
834 * user_regset definitions.
835 */
836
s390_regs_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)837 static int s390_regs_get(struct task_struct *target,
838 const struct user_regset *regset,
839 struct membuf to)
840 {
841 unsigned pos;
842 if (target == current)
843 save_access_regs(target->thread.acrs);
844
845 for (pos = 0; pos < sizeof(s390_regs); pos += sizeof(long))
846 membuf_store(&to, __peek_user(target, pos));
847 return 0;
848 }
849
s390_regs_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)850 static int s390_regs_set(struct task_struct *target,
851 const struct user_regset *regset,
852 unsigned int pos, unsigned int count,
853 const void *kbuf, const void __user *ubuf)
854 {
855 int rc = 0;
856
857 if (target == current)
858 save_access_regs(target->thread.acrs);
859
860 if (kbuf) {
861 const unsigned long *k = kbuf;
862 while (count > 0 && !rc) {
863 rc = __poke_user(target, pos, *k++);
864 count -= sizeof(*k);
865 pos += sizeof(*k);
866 }
867 } else {
868 const unsigned long __user *u = ubuf;
869 while (count > 0 && !rc) {
870 unsigned long word;
871 rc = __get_user(word, u++);
872 if (rc)
873 break;
874 rc = __poke_user(target, pos, word);
875 count -= sizeof(*u);
876 pos += sizeof(*u);
877 }
878 }
879
880 if (rc == 0 && target == current)
881 restore_access_regs(target->thread.acrs);
882
883 return rc;
884 }
885
s390_fpregs_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)886 static int s390_fpregs_get(struct task_struct *target,
887 const struct user_regset *regset,
888 struct membuf to)
889 {
890 _s390_fp_regs fp_regs;
891
892 if (target == current)
893 save_fpu_regs();
894
895 fp_regs.fpc = target->thread.fpu.fpc;
896 fpregs_store(&fp_regs, &target->thread.fpu);
897
898 return membuf_write(&to, &fp_regs, sizeof(fp_regs));
899 }
900
s390_fpregs_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)901 static int s390_fpregs_set(struct task_struct *target,
902 const struct user_regset *regset, unsigned int pos,
903 unsigned int count, const void *kbuf,
904 const void __user *ubuf)
905 {
906 int rc = 0;
907 freg_t fprs[__NUM_FPRS];
908
909 save_fpu_regs();
910 if (MACHINE_HAS_VX)
911 convert_vx_to_fp(fprs, target->thread.fpu.vxrs);
912 else
913 memcpy(&fprs, target->thread.fpu.fprs, sizeof(fprs));
914
915 /* If setting FPC, must validate it first. */
916 if (count > 0 && pos < offsetof(s390_fp_regs, fprs)) {
917 u32 ufpc[2] = { target->thread.fpu.fpc, 0 };
918 rc = user_regset_copyin(&pos, &count, &kbuf, &ubuf, &ufpc,
919 0, offsetof(s390_fp_regs, fprs));
920 if (rc)
921 return rc;
922 if (ufpc[1] != 0 || test_fp_ctl(ufpc[0]))
923 return -EINVAL;
924 target->thread.fpu.fpc = ufpc[0];
925 }
926
927 if (rc == 0 && count > 0)
928 rc = user_regset_copyin(&pos, &count, &kbuf, &ubuf,
929 fprs, offsetof(s390_fp_regs, fprs), -1);
930 if (rc)
931 return rc;
932
933 if (MACHINE_HAS_VX)
934 convert_fp_to_vx(target->thread.fpu.vxrs, fprs);
935 else
936 memcpy(target->thread.fpu.fprs, &fprs, sizeof(fprs));
937
938 return rc;
939 }
940
s390_last_break_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)941 static int s390_last_break_get(struct task_struct *target,
942 const struct user_regset *regset,
943 struct membuf to)
944 {
945 return membuf_store(&to, target->thread.last_break);
946 }
947
s390_last_break_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)948 static int s390_last_break_set(struct task_struct *target,
949 const struct user_regset *regset,
950 unsigned int pos, unsigned int count,
951 const void *kbuf, const void __user *ubuf)
952 {
953 return 0;
954 }
955
s390_tdb_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)956 static int s390_tdb_get(struct task_struct *target,
957 const struct user_regset *regset,
958 struct membuf to)
959 {
960 struct pt_regs *regs = task_pt_regs(target);
961 size_t size;
962
963 if (!(regs->int_code & 0x200))
964 return -ENODATA;
965 size = sizeof(target->thread.trap_tdb.data);
966 return membuf_write(&to, target->thread.trap_tdb.data, size);
967 }
968
s390_tdb_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)969 static int s390_tdb_set(struct task_struct *target,
970 const struct user_regset *regset,
971 unsigned int pos, unsigned int count,
972 const void *kbuf, const void __user *ubuf)
973 {
974 return 0;
975 }
976
s390_vxrs_low_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)977 static int s390_vxrs_low_get(struct task_struct *target,
978 const struct user_regset *regset,
979 struct membuf to)
980 {
981 __u64 vxrs[__NUM_VXRS_LOW];
982 int i;
983
984 if (!MACHINE_HAS_VX)
985 return -ENODEV;
986 if (target == current)
987 save_fpu_regs();
988 for (i = 0; i < __NUM_VXRS_LOW; i++)
989 vxrs[i] = target->thread.fpu.vxrs[i].low;
990 return membuf_write(&to, vxrs, sizeof(vxrs));
991 }
992
s390_vxrs_low_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)993 static int s390_vxrs_low_set(struct task_struct *target,
994 const struct user_regset *regset,
995 unsigned int pos, unsigned int count,
996 const void *kbuf, const void __user *ubuf)
997 {
998 __u64 vxrs[__NUM_VXRS_LOW];
999 int i, rc;
1000
1001 if (!MACHINE_HAS_VX)
1002 return -ENODEV;
1003 if (target == current)
1004 save_fpu_regs();
1005
1006 for (i = 0; i < __NUM_VXRS_LOW; i++)
1007 vxrs[i] = target->thread.fpu.vxrs[i].low;
1008
1009 rc = user_regset_copyin(&pos, &count, &kbuf, &ubuf, vxrs, 0, -1);
1010 if (rc == 0)
1011 for (i = 0; i < __NUM_VXRS_LOW; i++)
1012 target->thread.fpu.vxrs[i].low = vxrs[i];
1013
1014 return rc;
1015 }
1016
s390_vxrs_high_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)1017 static int s390_vxrs_high_get(struct task_struct *target,
1018 const struct user_regset *regset,
1019 struct membuf to)
1020 {
1021 if (!MACHINE_HAS_VX)
1022 return -ENODEV;
1023 if (target == current)
1024 save_fpu_regs();
1025 return membuf_write(&to, target->thread.fpu.vxrs + __NUM_VXRS_LOW,
1026 __NUM_VXRS_HIGH * sizeof(__vector128));
1027 }
1028
s390_vxrs_high_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)1029 static int s390_vxrs_high_set(struct task_struct *target,
1030 const struct user_regset *regset,
1031 unsigned int pos, unsigned int count,
1032 const void *kbuf, const void __user *ubuf)
1033 {
1034 int rc;
1035
1036 if (!MACHINE_HAS_VX)
1037 return -ENODEV;
1038 if (target == current)
1039 save_fpu_regs();
1040
1041 rc = user_regset_copyin(&pos, &count, &kbuf, &ubuf,
1042 target->thread.fpu.vxrs + __NUM_VXRS_LOW, 0, -1);
1043 return rc;
1044 }
1045
s390_system_call_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)1046 static int s390_system_call_get(struct task_struct *target,
1047 const struct user_regset *regset,
1048 struct membuf to)
1049 {
1050 return membuf_store(&to, target->thread.system_call);
1051 }
1052
s390_system_call_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)1053 static int s390_system_call_set(struct task_struct *target,
1054 const struct user_regset *regset,
1055 unsigned int pos, unsigned int count,
1056 const void *kbuf, const void __user *ubuf)
1057 {
1058 unsigned int *data = &target->thread.system_call;
1059 return user_regset_copyin(&pos, &count, &kbuf, &ubuf,
1060 data, 0, sizeof(unsigned int));
1061 }
1062
s390_gs_cb_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)1063 static int s390_gs_cb_get(struct task_struct *target,
1064 const struct user_regset *regset,
1065 struct membuf to)
1066 {
1067 struct gs_cb *data = target->thread.gs_cb;
1068
1069 if (!MACHINE_HAS_GS)
1070 return -ENODEV;
1071 if (!data)
1072 return -ENODATA;
1073 if (target == current)
1074 save_gs_cb(data);
1075 return membuf_write(&to, data, sizeof(struct gs_cb));
1076 }
1077
s390_gs_cb_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)1078 static int s390_gs_cb_set(struct task_struct *target,
1079 const struct user_regset *regset,
1080 unsigned int pos, unsigned int count,
1081 const void *kbuf, const void __user *ubuf)
1082 {
1083 struct gs_cb gs_cb = { }, *data = NULL;
1084 int rc;
1085
1086 if (!MACHINE_HAS_GS)
1087 return -ENODEV;
1088 if (!target->thread.gs_cb) {
1089 data = kzalloc(sizeof(*data), GFP_KERNEL);
1090 if (!data)
1091 return -ENOMEM;
1092 }
1093 if (!target->thread.gs_cb)
1094 gs_cb.gsd = 25;
1095 else if (target == current)
1096 save_gs_cb(&gs_cb);
1097 else
1098 gs_cb = *target->thread.gs_cb;
1099 rc = user_regset_copyin(&pos, &count, &kbuf, &ubuf,
1100 &gs_cb, 0, sizeof(gs_cb));
1101 if (rc) {
1102 kfree(data);
1103 return -EFAULT;
1104 }
1105 preempt_disable();
1106 if (!target->thread.gs_cb)
1107 target->thread.gs_cb = data;
1108 *target->thread.gs_cb = gs_cb;
1109 if (target == current) {
1110 __ctl_set_bit(2, 4);
1111 restore_gs_cb(target->thread.gs_cb);
1112 }
1113 preempt_enable();
1114 return rc;
1115 }
1116
s390_gs_bc_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)1117 static int s390_gs_bc_get(struct task_struct *target,
1118 const struct user_regset *regset,
1119 struct membuf to)
1120 {
1121 struct gs_cb *data = target->thread.gs_bc_cb;
1122
1123 if (!MACHINE_HAS_GS)
1124 return -ENODEV;
1125 if (!data)
1126 return -ENODATA;
1127 return membuf_write(&to, data, sizeof(struct gs_cb));
1128 }
1129
s390_gs_bc_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)1130 static int s390_gs_bc_set(struct task_struct *target,
1131 const struct user_regset *regset,
1132 unsigned int pos, unsigned int count,
1133 const void *kbuf, const void __user *ubuf)
1134 {
1135 struct gs_cb *data = target->thread.gs_bc_cb;
1136
1137 if (!MACHINE_HAS_GS)
1138 return -ENODEV;
1139 if (!data) {
1140 data = kzalloc(sizeof(*data), GFP_KERNEL);
1141 if (!data)
1142 return -ENOMEM;
1143 target->thread.gs_bc_cb = data;
1144 }
1145 return user_regset_copyin(&pos, &count, &kbuf, &ubuf,
1146 data, 0, sizeof(struct gs_cb));
1147 }
1148
is_ri_cb_valid(struct runtime_instr_cb * cb)1149 static bool is_ri_cb_valid(struct runtime_instr_cb *cb)
1150 {
1151 return (cb->rca & 0x1f) == 0 &&
1152 (cb->roa & 0xfff) == 0 &&
1153 (cb->rla & 0xfff) == 0xfff &&
1154 cb->s == 1 &&
1155 cb->k == 1 &&
1156 cb->h == 0 &&
1157 cb->reserved1 == 0 &&
1158 cb->ps == 1 &&
1159 cb->qs == 0 &&
1160 cb->pc == 1 &&
1161 cb->qc == 0 &&
1162 cb->reserved2 == 0 &&
1163 cb->reserved3 == 0 &&
1164 cb->reserved4 == 0 &&
1165 cb->reserved5 == 0 &&
1166 cb->reserved6 == 0 &&
1167 cb->reserved7 == 0 &&
1168 cb->reserved8 == 0 &&
1169 cb->rla >= cb->roa &&
1170 cb->rca >= cb->roa &&
1171 cb->rca <= cb->rla+1 &&
1172 cb->m < 3;
1173 }
1174
s390_runtime_instr_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)1175 static int s390_runtime_instr_get(struct task_struct *target,
1176 const struct user_regset *regset,
1177 struct membuf to)
1178 {
1179 struct runtime_instr_cb *data = target->thread.ri_cb;
1180
1181 if (!test_facility(64))
1182 return -ENODEV;
1183 if (!data)
1184 return -ENODATA;
1185
1186 return membuf_write(&to, data, sizeof(struct runtime_instr_cb));
1187 }
1188
s390_runtime_instr_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)1189 static int s390_runtime_instr_set(struct task_struct *target,
1190 const struct user_regset *regset,
1191 unsigned int pos, unsigned int count,
1192 const void *kbuf, const void __user *ubuf)
1193 {
1194 struct runtime_instr_cb ri_cb = { }, *data = NULL;
1195 int rc;
1196
1197 if (!test_facility(64))
1198 return -ENODEV;
1199
1200 if (!target->thread.ri_cb) {
1201 data = kzalloc(sizeof(*data), GFP_KERNEL);
1202 if (!data)
1203 return -ENOMEM;
1204 }
1205
1206 if (target->thread.ri_cb) {
1207 if (target == current)
1208 store_runtime_instr_cb(&ri_cb);
1209 else
1210 ri_cb = *target->thread.ri_cb;
1211 }
1212
1213 rc = user_regset_copyin(&pos, &count, &kbuf, &ubuf,
1214 &ri_cb, 0, sizeof(struct runtime_instr_cb));
1215 if (rc) {
1216 kfree(data);
1217 return -EFAULT;
1218 }
1219
1220 if (!is_ri_cb_valid(&ri_cb)) {
1221 kfree(data);
1222 return -EINVAL;
1223 }
1224 /*
1225 * Override access key in any case, since user space should
1226 * not be able to set it, nor should it care about it.
1227 */
1228 ri_cb.key = PAGE_DEFAULT_KEY >> 4;
1229 preempt_disable();
1230 if (!target->thread.ri_cb)
1231 target->thread.ri_cb = data;
1232 *target->thread.ri_cb = ri_cb;
1233 if (target == current)
1234 load_runtime_instr_cb(target->thread.ri_cb);
1235 preempt_enable();
1236
1237 return 0;
1238 }
1239
1240 static const struct user_regset s390_regsets[] = {
1241 {
1242 .core_note_type = NT_PRSTATUS,
1243 .n = sizeof(s390_regs) / sizeof(long),
1244 .size = sizeof(long),
1245 .align = sizeof(long),
1246 .regset_get = s390_regs_get,
1247 .set = s390_regs_set,
1248 },
1249 {
1250 .core_note_type = NT_PRFPREG,
1251 .n = sizeof(s390_fp_regs) / sizeof(long),
1252 .size = sizeof(long),
1253 .align = sizeof(long),
1254 .regset_get = s390_fpregs_get,
1255 .set = s390_fpregs_set,
1256 },
1257 {
1258 .core_note_type = NT_S390_SYSTEM_CALL,
1259 .n = 1,
1260 .size = sizeof(unsigned int),
1261 .align = sizeof(unsigned int),
1262 .regset_get = s390_system_call_get,
1263 .set = s390_system_call_set,
1264 },
1265 {
1266 .core_note_type = NT_S390_LAST_BREAK,
1267 .n = 1,
1268 .size = sizeof(long),
1269 .align = sizeof(long),
1270 .regset_get = s390_last_break_get,
1271 .set = s390_last_break_set,
1272 },
1273 {
1274 .core_note_type = NT_S390_TDB,
1275 .n = 1,
1276 .size = 256,
1277 .align = 1,
1278 .regset_get = s390_tdb_get,
1279 .set = s390_tdb_set,
1280 },
1281 {
1282 .core_note_type = NT_S390_VXRS_LOW,
1283 .n = __NUM_VXRS_LOW,
1284 .size = sizeof(__u64),
1285 .align = sizeof(__u64),
1286 .regset_get = s390_vxrs_low_get,
1287 .set = s390_vxrs_low_set,
1288 },
1289 {
1290 .core_note_type = NT_S390_VXRS_HIGH,
1291 .n = __NUM_VXRS_HIGH,
1292 .size = sizeof(__vector128),
1293 .align = sizeof(__vector128),
1294 .regset_get = s390_vxrs_high_get,
1295 .set = s390_vxrs_high_set,
1296 },
1297 {
1298 .core_note_type = NT_S390_GS_CB,
1299 .n = sizeof(struct gs_cb) / sizeof(__u64),
1300 .size = sizeof(__u64),
1301 .align = sizeof(__u64),
1302 .regset_get = s390_gs_cb_get,
1303 .set = s390_gs_cb_set,
1304 },
1305 {
1306 .core_note_type = NT_S390_GS_BC,
1307 .n = sizeof(struct gs_cb) / sizeof(__u64),
1308 .size = sizeof(__u64),
1309 .align = sizeof(__u64),
1310 .regset_get = s390_gs_bc_get,
1311 .set = s390_gs_bc_set,
1312 },
1313 {
1314 .core_note_type = NT_S390_RI_CB,
1315 .n = sizeof(struct runtime_instr_cb) / sizeof(__u64),
1316 .size = sizeof(__u64),
1317 .align = sizeof(__u64),
1318 .regset_get = s390_runtime_instr_get,
1319 .set = s390_runtime_instr_set,
1320 },
1321 };
1322
1323 static const struct user_regset_view user_s390_view = {
1324 .name = "s390x",
1325 .e_machine = EM_S390,
1326 .regsets = s390_regsets,
1327 .n = ARRAY_SIZE(s390_regsets)
1328 };
1329
1330 #ifdef CONFIG_COMPAT
s390_compat_regs_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)1331 static int s390_compat_regs_get(struct task_struct *target,
1332 const struct user_regset *regset,
1333 struct membuf to)
1334 {
1335 unsigned n;
1336
1337 if (target == current)
1338 save_access_regs(target->thread.acrs);
1339
1340 for (n = 0; n < sizeof(s390_compat_regs); n += sizeof(compat_ulong_t))
1341 membuf_store(&to, __peek_user_compat(target, n));
1342 return 0;
1343 }
1344
s390_compat_regs_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)1345 static int s390_compat_regs_set(struct task_struct *target,
1346 const struct user_regset *regset,
1347 unsigned int pos, unsigned int count,
1348 const void *kbuf, const void __user *ubuf)
1349 {
1350 int rc = 0;
1351
1352 if (target == current)
1353 save_access_regs(target->thread.acrs);
1354
1355 if (kbuf) {
1356 const compat_ulong_t *k = kbuf;
1357 while (count > 0 && !rc) {
1358 rc = __poke_user_compat(target, pos, *k++);
1359 count -= sizeof(*k);
1360 pos += sizeof(*k);
1361 }
1362 } else {
1363 const compat_ulong_t __user *u = ubuf;
1364 while (count > 0 && !rc) {
1365 compat_ulong_t word;
1366 rc = __get_user(word, u++);
1367 if (rc)
1368 break;
1369 rc = __poke_user_compat(target, pos, word);
1370 count -= sizeof(*u);
1371 pos += sizeof(*u);
1372 }
1373 }
1374
1375 if (rc == 0 && target == current)
1376 restore_access_regs(target->thread.acrs);
1377
1378 return rc;
1379 }
1380
s390_compat_regs_high_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)1381 static int s390_compat_regs_high_get(struct task_struct *target,
1382 const struct user_regset *regset,
1383 struct membuf to)
1384 {
1385 compat_ulong_t *gprs_high;
1386 int i;
1387
1388 gprs_high = (compat_ulong_t *)task_pt_regs(target)->gprs;
1389 for (i = 0; i < NUM_GPRS; i++, gprs_high += 2)
1390 membuf_store(&to, *gprs_high);
1391 return 0;
1392 }
1393
s390_compat_regs_high_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)1394 static int s390_compat_regs_high_set(struct task_struct *target,
1395 const struct user_regset *regset,
1396 unsigned int pos, unsigned int count,
1397 const void *kbuf, const void __user *ubuf)
1398 {
1399 compat_ulong_t *gprs_high;
1400 int rc = 0;
1401
1402 gprs_high = (compat_ulong_t *)
1403 &task_pt_regs(target)->gprs[pos / sizeof(compat_ulong_t)];
1404 if (kbuf) {
1405 const compat_ulong_t *k = kbuf;
1406 while (count > 0) {
1407 *gprs_high = *k++;
1408 *gprs_high += 2;
1409 count -= sizeof(*k);
1410 }
1411 } else {
1412 const compat_ulong_t __user *u = ubuf;
1413 while (count > 0 && !rc) {
1414 unsigned long word;
1415 rc = __get_user(word, u++);
1416 if (rc)
1417 break;
1418 *gprs_high = word;
1419 *gprs_high += 2;
1420 count -= sizeof(*u);
1421 }
1422 }
1423
1424 return rc;
1425 }
1426
s390_compat_last_break_get(struct task_struct * target,const struct user_regset * regset,struct membuf to)1427 static int s390_compat_last_break_get(struct task_struct *target,
1428 const struct user_regset *regset,
1429 struct membuf to)
1430 {
1431 compat_ulong_t last_break = target->thread.last_break;
1432
1433 return membuf_store(&to, (unsigned long)last_break);
1434 }
1435
s390_compat_last_break_set(struct task_struct * target,const struct user_regset * regset,unsigned int pos,unsigned int count,const void * kbuf,const void __user * ubuf)1436 static int s390_compat_last_break_set(struct task_struct *target,
1437 const struct user_regset *regset,
1438 unsigned int pos, unsigned int count,
1439 const void *kbuf, const void __user *ubuf)
1440 {
1441 return 0;
1442 }
1443
1444 static const struct user_regset s390_compat_regsets[] = {
1445 {
1446 .core_note_type = NT_PRSTATUS,
1447 .n = sizeof(s390_compat_regs) / sizeof(compat_long_t),
1448 .size = sizeof(compat_long_t),
1449 .align = sizeof(compat_long_t),
1450 .regset_get = s390_compat_regs_get,
1451 .set = s390_compat_regs_set,
1452 },
1453 {
1454 .core_note_type = NT_PRFPREG,
1455 .n = sizeof(s390_fp_regs) / sizeof(compat_long_t),
1456 .size = sizeof(compat_long_t),
1457 .align = sizeof(compat_long_t),
1458 .regset_get = s390_fpregs_get,
1459 .set = s390_fpregs_set,
1460 },
1461 {
1462 .core_note_type = NT_S390_SYSTEM_CALL,
1463 .n = 1,
1464 .size = sizeof(compat_uint_t),
1465 .align = sizeof(compat_uint_t),
1466 .regset_get = s390_system_call_get,
1467 .set = s390_system_call_set,
1468 },
1469 {
1470 .core_note_type = NT_S390_LAST_BREAK,
1471 .n = 1,
1472 .size = sizeof(long),
1473 .align = sizeof(long),
1474 .regset_get = s390_compat_last_break_get,
1475 .set = s390_compat_last_break_set,
1476 },
1477 {
1478 .core_note_type = NT_S390_TDB,
1479 .n = 1,
1480 .size = 256,
1481 .align = 1,
1482 .regset_get = s390_tdb_get,
1483 .set = s390_tdb_set,
1484 },
1485 {
1486 .core_note_type = NT_S390_VXRS_LOW,
1487 .n = __NUM_VXRS_LOW,
1488 .size = sizeof(__u64),
1489 .align = sizeof(__u64),
1490 .regset_get = s390_vxrs_low_get,
1491 .set = s390_vxrs_low_set,
1492 },
1493 {
1494 .core_note_type = NT_S390_VXRS_HIGH,
1495 .n = __NUM_VXRS_HIGH,
1496 .size = sizeof(__vector128),
1497 .align = sizeof(__vector128),
1498 .regset_get = s390_vxrs_high_get,
1499 .set = s390_vxrs_high_set,
1500 },
1501 {
1502 .core_note_type = NT_S390_HIGH_GPRS,
1503 .n = sizeof(s390_compat_regs_high) / sizeof(compat_long_t),
1504 .size = sizeof(compat_long_t),
1505 .align = sizeof(compat_long_t),
1506 .regset_get = s390_compat_regs_high_get,
1507 .set = s390_compat_regs_high_set,
1508 },
1509 {
1510 .core_note_type = NT_S390_GS_CB,
1511 .n = sizeof(struct gs_cb) / sizeof(__u64),
1512 .size = sizeof(__u64),
1513 .align = sizeof(__u64),
1514 .regset_get = s390_gs_cb_get,
1515 .set = s390_gs_cb_set,
1516 },
1517 {
1518 .core_note_type = NT_S390_GS_BC,
1519 .n = sizeof(struct gs_cb) / sizeof(__u64),
1520 .size = sizeof(__u64),
1521 .align = sizeof(__u64),
1522 .regset_get = s390_gs_bc_get,
1523 .set = s390_gs_bc_set,
1524 },
1525 {
1526 .core_note_type = NT_S390_RI_CB,
1527 .n = sizeof(struct runtime_instr_cb) / sizeof(__u64),
1528 .size = sizeof(__u64),
1529 .align = sizeof(__u64),
1530 .regset_get = s390_runtime_instr_get,
1531 .set = s390_runtime_instr_set,
1532 },
1533 };
1534
1535 static const struct user_regset_view user_s390_compat_view = {
1536 .name = "s390",
1537 .e_machine = EM_S390,
1538 .regsets = s390_compat_regsets,
1539 .n = ARRAY_SIZE(s390_compat_regsets)
1540 };
1541 #endif
1542
task_user_regset_view(struct task_struct * task)1543 const struct user_regset_view *task_user_regset_view(struct task_struct *task)
1544 {
1545 #ifdef CONFIG_COMPAT
1546 if (test_tsk_thread_flag(task, TIF_31BIT))
1547 return &user_s390_compat_view;
1548 #endif
1549 return &user_s390_view;
1550 }
1551
1552 static const char *gpr_names[NUM_GPRS] = {
1553 "r0", "r1", "r2", "r3", "r4", "r5", "r6", "r7",
1554 "r8", "r9", "r10", "r11", "r12", "r13", "r14", "r15",
1555 };
1556
regs_get_register(struct pt_regs * regs,unsigned int offset)1557 unsigned long regs_get_register(struct pt_regs *regs, unsigned int offset)
1558 {
1559 if (offset >= NUM_GPRS)
1560 return 0;
1561 return regs->gprs[offset];
1562 }
1563
regs_query_register_offset(const char * name)1564 int regs_query_register_offset(const char *name)
1565 {
1566 unsigned long offset;
1567
1568 if (!name || *name != 'r')
1569 return -EINVAL;
1570 if (kstrtoul(name + 1, 10, &offset))
1571 return -EINVAL;
1572 if (offset >= NUM_GPRS)
1573 return -EINVAL;
1574 return offset;
1575 }
1576
regs_query_register_name(unsigned int offset)1577 const char *regs_query_register_name(unsigned int offset)
1578 {
1579 if (offset >= NUM_GPRS)
1580 return NULL;
1581 return gpr_names[offset];
1582 }
1583
regs_within_kernel_stack(struct pt_regs * regs,unsigned long addr)1584 static int regs_within_kernel_stack(struct pt_regs *regs, unsigned long addr)
1585 {
1586 unsigned long ksp = kernel_stack_pointer(regs);
1587
1588 return (addr & ~(THREAD_SIZE - 1)) == (ksp & ~(THREAD_SIZE - 1));
1589 }
1590
1591 /**
1592 * regs_get_kernel_stack_nth() - get Nth entry of the stack
1593 * @regs:pt_regs which contains kernel stack pointer.
1594 * @n:stack entry number.
1595 *
1596 * regs_get_kernel_stack_nth() returns @n th entry of the kernel stack which
1597 * is specifined by @regs. If the @n th entry is NOT in the kernel stack,
1598 * this returns 0.
1599 */
regs_get_kernel_stack_nth(struct pt_regs * regs,unsigned int n)1600 unsigned long regs_get_kernel_stack_nth(struct pt_regs *regs, unsigned int n)
1601 {
1602 unsigned long addr;
1603
1604 addr = kernel_stack_pointer(regs) + n * sizeof(long);
1605 if (!regs_within_kernel_stack(regs, addr))
1606 return 0;
1607 return *(unsigned long *)addr;
1608 }
1609