xref: /openbmc/linux/arch/powerpc/kernel/signal_64.c (revision 384740dc)
1 /*
2  *  PowerPC version
3  *    Copyright (C) 1995-1996 Gary Thomas (gdt@linuxppc.org)
4  *
5  *  Derived from "arch/i386/kernel/signal.c"
6  *    Copyright (C) 1991, 1992 Linus Torvalds
7  *    1997-11-28  Modified for POSIX.1b signals by Richard Henderson
8  *
9  *  This program is free software; you can redistribute it and/or
10  *  modify it under the terms of the GNU General Public License
11  *  as published by the Free Software Foundation; either version
12  *  2 of the License, or (at your option) any later version.
13  */
14 
15 #include <linux/sched.h>
16 #include <linux/mm.h>
17 #include <linux/smp.h>
18 #include <linux/kernel.h>
19 #include <linux/signal.h>
20 #include <linux/errno.h>
21 #include <linux/wait.h>
22 #include <linux/unistd.h>
23 #include <linux/stddef.h>
24 #include <linux/elf.h>
25 #include <linux/ptrace.h>
26 #include <linux/module.h>
27 
28 #include <asm/sigcontext.h>
29 #include <asm/ucontext.h>
30 #include <asm/uaccess.h>
31 #include <asm/pgtable.h>
32 #include <asm/unistd.h>
33 #include <asm/cacheflush.h>
34 #include <asm/syscalls.h>
35 #include <asm/vdso.h>
36 
37 #include "signal.h"
38 
39 #define DEBUG_SIG 0
40 
41 #define GP_REGS_SIZE	min(sizeof(elf_gregset_t), sizeof(struct pt_regs))
42 #define FP_REGS_SIZE	sizeof(elf_fpregset_t)
43 
44 #define TRAMP_TRACEBACK	3
45 #define TRAMP_SIZE	6
46 
47 /*
48  * When we have signals to deliver, we set up on the user stack,
49  * going down from the original stack pointer:
50  *	1) a rt_sigframe struct which contains the ucontext
51  *	2) a gap of __SIGNAL_FRAMESIZE bytes which acts as a dummy caller
52  *	   frame for the signal handler.
53  */
54 
55 struct rt_sigframe {
56 	/* sys_rt_sigreturn requires the ucontext be the first field */
57 	struct ucontext uc;
58 	unsigned long _unused[2];
59 	unsigned int tramp[TRAMP_SIZE];
60 	struct siginfo __user *pinfo;
61 	void __user *puc;
62 	struct siginfo info;
63 	/* 64 bit ABI allows for 288 bytes below sp before decrementing it. */
64 	char abigap[288];
65 } __attribute__ ((aligned (16)));
66 
67 static const char fmt32[] = KERN_INFO \
68 	"%s[%d]: bad frame in %s: %08lx nip %08lx lr %08lx\n";
69 static const char fmt64[] = KERN_INFO \
70 	"%s[%d]: bad frame in %s: %016lx nip %016lx lr %016lx\n";
71 
72 /*
73  * Set up the sigcontext for the signal frame.
74  */
75 
76 static long setup_sigcontext(struct sigcontext __user *sc, struct pt_regs *regs,
77 		 int signr, sigset_t *set, unsigned long handler)
78 {
79 	/* When CONFIG_ALTIVEC is set, we _always_ setup v_regs even if the
80 	 * process never used altivec yet (MSR_VEC is zero in pt_regs of
81 	 * the context). This is very important because we must ensure we
82 	 * don't lose the VRSAVE content that may have been set prior to
83 	 * the process doing its first vector operation
84 	 * Userland shall check AT_HWCAP to know wether it can rely on the
85 	 * v_regs pointer or not
86 	 */
87 #ifdef CONFIG_ALTIVEC
88 	elf_vrreg_t __user *v_regs = (elf_vrreg_t __user *)(((unsigned long)sc->vmx_reserve + 15) & ~0xful);
89 #endif
90 	unsigned long msr = regs->msr;
91 	long err = 0;
92 
93 	flush_fp_to_thread(current);
94 
95 #ifdef CONFIG_ALTIVEC
96 	err |= __put_user(v_regs, &sc->v_regs);
97 
98 	/* save altivec registers */
99 	if (current->thread.used_vr) {
100 		flush_altivec_to_thread(current);
101 		/* Copy 33 vec registers (vr0..31 and vscr) to the stack */
102 		err |= __copy_to_user(v_regs, current->thread.vr, 33 * sizeof(vector128));
103 		/* set MSR_VEC in the MSR value in the frame to indicate that sc->v_reg)
104 		 * contains valid data.
105 		 */
106 		msr |= MSR_VEC;
107 	}
108 	/* We always copy to/from vrsave, it's 0 if we don't have or don't
109 	 * use altivec.
110 	 */
111 	err |= __put_user(current->thread.vrsave, (u32 __user *)&v_regs[33]);
112 #else /* CONFIG_ALTIVEC */
113 	err |= __put_user(0, &sc->v_regs);
114 #endif /* CONFIG_ALTIVEC */
115 	flush_fp_to_thread(current);
116 	/* copy fpr regs and fpscr */
117 	err |= copy_fpr_to_user(&sc->fp_regs, current);
118 #ifdef CONFIG_VSX
119 	/*
120 	 * Copy VSX low doubleword to local buffer for formatting,
121 	 * then out to userspace.  Update v_regs to point after the
122 	 * VMX data.
123 	 */
124 	if (current->thread.used_vsr) {
125 		__giveup_vsx(current);
126 		v_regs += ELF_NVRREG;
127 		err |= copy_vsx_to_user(v_regs, current);
128 		/* set MSR_VSX in the MSR value in the frame to
129 		 * indicate that sc->vs_reg) contains valid data.
130 		 */
131 		msr |= MSR_VSX;
132 	}
133 #endif /* CONFIG_VSX */
134 	err |= __put_user(&sc->gp_regs, &sc->regs);
135 	WARN_ON(!FULL_REGS(regs));
136 	err |= __copy_to_user(&sc->gp_regs, regs, GP_REGS_SIZE);
137 	err |= __put_user(msr, &sc->gp_regs[PT_MSR]);
138 	err |= __put_user(signr, &sc->signal);
139 	err |= __put_user(handler, &sc->handler);
140 	if (set != NULL)
141 		err |=  __put_user(set->sig[0], &sc->oldmask);
142 
143 	return err;
144 }
145 
146 /*
147  * Restore the sigcontext from the signal frame.
148  */
149 
150 static long restore_sigcontext(struct pt_regs *regs, sigset_t *set, int sig,
151 			      struct sigcontext __user *sc)
152 {
153 #ifdef CONFIG_ALTIVEC
154 	elf_vrreg_t __user *v_regs;
155 #endif
156 	unsigned long err = 0;
157 	unsigned long save_r13 = 0;
158 	unsigned long msr;
159 #ifdef CONFIG_VSX
160 	int i;
161 #endif
162 
163 	/* If this is not a signal return, we preserve the TLS in r13 */
164 	if (!sig)
165 		save_r13 = regs->gpr[13];
166 
167 	/* copy the GPRs */
168 	err |= __copy_from_user(regs->gpr, sc->gp_regs, sizeof(regs->gpr));
169 	err |= __get_user(regs->nip, &sc->gp_regs[PT_NIP]);
170 	/* get MSR separately, transfer the LE bit if doing signal return */
171 	err |= __get_user(msr, &sc->gp_regs[PT_MSR]);
172 	if (sig)
173 		regs->msr = (regs->msr & ~MSR_LE) | (msr & MSR_LE);
174 	err |= __get_user(regs->orig_gpr3, &sc->gp_regs[PT_ORIG_R3]);
175 	err |= __get_user(regs->ctr, &sc->gp_regs[PT_CTR]);
176 	err |= __get_user(regs->link, &sc->gp_regs[PT_LNK]);
177 	err |= __get_user(regs->xer, &sc->gp_regs[PT_XER]);
178 	err |= __get_user(regs->ccr, &sc->gp_regs[PT_CCR]);
179 	/* skip SOFTE */
180 	err |= __get_user(regs->trap, &sc->gp_regs[PT_TRAP]);
181 	err |= __get_user(regs->dar, &sc->gp_regs[PT_DAR]);
182 	err |= __get_user(regs->dsisr, &sc->gp_regs[PT_DSISR]);
183 	err |= __get_user(regs->result, &sc->gp_regs[PT_RESULT]);
184 
185 	if (!sig)
186 		regs->gpr[13] = save_r13;
187 	if (set != NULL)
188 		err |=  __get_user(set->sig[0], &sc->oldmask);
189 
190 	/*
191 	 * Do this before updating the thread state in
192 	 * current->thread.fpr/vr.  That way, if we get preempted
193 	 * and another task grabs the FPU/Altivec, it won't be
194 	 * tempted to save the current CPU state into the thread_struct
195 	 * and corrupt what we are writing there.
196 	 */
197 	discard_lazy_cpu_state();
198 
199 	/*
200 	 * Force reload of FP/VEC.
201 	 * This has to be done before copying stuff into current->thread.fpr/vr
202 	 * for the reasons explained in the previous comment.
203 	 */
204 	regs->msr &= ~(MSR_FP | MSR_FE0 | MSR_FE1 | MSR_VEC | MSR_VSX);
205 
206 #ifdef CONFIG_ALTIVEC
207 	err |= __get_user(v_regs, &sc->v_regs);
208 	if (err)
209 		return err;
210 	if (v_regs && !access_ok(VERIFY_READ, v_regs, 34 * sizeof(vector128)))
211 		return -EFAULT;
212 	/* Copy 33 vec registers (vr0..31 and vscr) from the stack */
213 	if (v_regs != 0 && (msr & MSR_VEC) != 0)
214 		err |= __copy_from_user(current->thread.vr, v_regs,
215 					33 * sizeof(vector128));
216 	else if (current->thread.used_vr)
217 		memset(current->thread.vr, 0, 33 * sizeof(vector128));
218 	/* Always get VRSAVE back */
219 	if (v_regs != 0)
220 		err |= __get_user(current->thread.vrsave, (u32 __user *)&v_regs[33]);
221 	else
222 		current->thread.vrsave = 0;
223 #endif /* CONFIG_ALTIVEC */
224 	/* restore floating point */
225 	err |= copy_fpr_from_user(current, &sc->fp_regs);
226 #ifdef CONFIG_VSX
227 	/*
228 	 * Get additional VSX data. Update v_regs to point after the
229 	 * VMX data.  Copy VSX low doubleword from userspace to local
230 	 * buffer for formatting, then into the taskstruct.
231 	 */
232 	v_regs += ELF_NVRREG;
233 	if ((msr & MSR_VSX) != 0)
234 		err |= copy_vsx_from_user(current, v_regs);
235 	else
236 		for (i = 0; i < 32 ; i++)
237 			current->thread.fpr[i][TS_VSRLOWOFFSET] = 0;
238 
239 #else
240 #endif
241 	return err;
242 }
243 
244 /*
245  * Setup the trampoline code on the stack
246  */
247 static long setup_trampoline(unsigned int syscall, unsigned int __user *tramp)
248 {
249 	int i;
250 	long err = 0;
251 
252 	/* addi r1, r1, __SIGNAL_FRAMESIZE  # Pop the dummy stackframe */
253 	err |= __put_user(0x38210000UL | (__SIGNAL_FRAMESIZE & 0xffff), &tramp[0]);
254 	/* li r0, __NR_[rt_]sigreturn| */
255 	err |= __put_user(0x38000000UL | (syscall & 0xffff), &tramp[1]);
256 	/* sc */
257 	err |= __put_user(0x44000002UL, &tramp[2]);
258 
259 	/* Minimal traceback info */
260 	for (i=TRAMP_TRACEBACK; i < TRAMP_SIZE ;i++)
261 		err |= __put_user(0, &tramp[i]);
262 
263 	if (!err)
264 		flush_icache_range((unsigned long) &tramp[0],
265 			   (unsigned long) &tramp[TRAMP_SIZE]);
266 
267 	return err;
268 }
269 
270 /*
271  * Userspace code may pass a ucontext which doesn't include VSX added
272  * at the end.  We need to check for this case.
273  */
274 #define UCONTEXTSIZEWITHOUTVSX \
275 		(sizeof(struct ucontext) - 32*sizeof(long))
276 
277 /*
278  * Handle {get,set,swap}_context operations
279  */
280 int sys_swapcontext(struct ucontext __user *old_ctx,
281 		    struct ucontext __user *new_ctx,
282 		    long ctx_size, long r6, long r7, long r8, struct pt_regs *regs)
283 {
284 	unsigned char tmp;
285 	sigset_t set;
286 	unsigned long new_msr = 0;
287 
288 	if (new_ctx &&
289 	    __get_user(new_msr, &new_ctx->uc_mcontext.gp_regs[PT_MSR]))
290 		return -EFAULT;
291 	/*
292 	 * Check that the context is not smaller than the original
293 	 * size (with VMX but without VSX)
294 	 */
295 	if (ctx_size < UCONTEXTSIZEWITHOUTVSX)
296 		return -EINVAL;
297 	/*
298 	 * If the new context state sets the MSR VSX bits but
299 	 * it doesn't provide VSX state.
300 	 */
301 	if ((ctx_size < sizeof(struct ucontext)) &&
302 	    (new_msr & MSR_VSX))
303 		return -EINVAL;
304 #ifdef CONFIG_VSX
305 	/*
306 	 * If userspace doesn't provide enough room for VSX data,
307 	 * but current thread has used VSX, we don't have anywhere
308 	 * to store the full context back into.
309 	 */
310 	if ((ctx_size < sizeof(struct ucontext)) &&
311 	    (current->thread.used_vsr && old_ctx))
312 		return -EINVAL;
313 #endif
314 	if (old_ctx != NULL) {
315 		if (!access_ok(VERIFY_WRITE, old_ctx, sizeof(*old_ctx))
316 		    || setup_sigcontext(&old_ctx->uc_mcontext, regs, 0, NULL, 0)
317 		    || __copy_to_user(&old_ctx->uc_sigmask,
318 				      &current->blocked, sizeof(sigset_t)))
319 			return -EFAULT;
320 	}
321 	if (new_ctx == NULL)
322 		return 0;
323 	if (!access_ok(VERIFY_READ, new_ctx, sizeof(*new_ctx))
324 	    || __get_user(tmp, (u8 __user *) new_ctx)
325 	    || __get_user(tmp, (u8 __user *) (new_ctx + 1) - 1))
326 		return -EFAULT;
327 
328 	/*
329 	 * If we get a fault copying the context into the kernel's
330 	 * image of the user's registers, we can't just return -EFAULT
331 	 * because the user's registers will be corrupted.  For instance
332 	 * the NIP value may have been updated but not some of the
333 	 * other registers.  Given that we have done the access_ok
334 	 * and successfully read the first and last bytes of the region
335 	 * above, this should only happen in an out-of-memory situation
336 	 * or if another thread unmaps the region containing the context.
337 	 * We kill the task with a SIGSEGV in this situation.
338 	 */
339 
340 	if (__copy_from_user(&set, &new_ctx->uc_sigmask, sizeof(set)))
341 		do_exit(SIGSEGV);
342 	restore_sigmask(&set);
343 	if (restore_sigcontext(regs, NULL, 0, &new_ctx->uc_mcontext))
344 		do_exit(SIGSEGV);
345 
346 	/* This returns like rt_sigreturn */
347 	set_thread_flag(TIF_RESTOREALL);
348 	return 0;
349 }
350 
351 
352 /*
353  * Do a signal return; undo the signal stack.
354  */
355 
356 int sys_rt_sigreturn(unsigned long r3, unsigned long r4, unsigned long r5,
357 		     unsigned long r6, unsigned long r7, unsigned long r8,
358 		     struct pt_regs *regs)
359 {
360 	struct ucontext __user *uc = (struct ucontext __user *)regs->gpr[1];
361 	sigset_t set;
362 
363 	/* Always make any pending restarted system calls return -EINTR */
364 	current_thread_info()->restart_block.fn = do_no_restart_syscall;
365 
366 	if (!access_ok(VERIFY_READ, uc, sizeof(*uc)))
367 		goto badframe;
368 
369 	if (__copy_from_user(&set, &uc->uc_sigmask, sizeof(set)))
370 		goto badframe;
371 	restore_sigmask(&set);
372 	if (restore_sigcontext(regs, NULL, 1, &uc->uc_mcontext))
373 		goto badframe;
374 
375 	/* do_sigaltstack expects a __user pointer and won't modify
376 	 * what's in there anyway
377 	 */
378 	do_sigaltstack(&uc->uc_stack, NULL, regs->gpr[1]);
379 
380 	set_thread_flag(TIF_RESTOREALL);
381 	return 0;
382 
383 badframe:
384 #if DEBUG_SIG
385 	printk("badframe in sys_rt_sigreturn, regs=%p uc=%p &uc->uc_mcontext=%p\n",
386 	       regs, uc, &uc->uc_mcontext);
387 #endif
388 	if (show_unhandled_signals && printk_ratelimit())
389 		printk(regs->msr & MSR_SF ? fmt64 : fmt32,
390 			current->comm, current->pid, "rt_sigreturn",
391 			(long)uc, regs->nip, regs->link);
392 
393 	force_sig(SIGSEGV, current);
394 	return 0;
395 }
396 
397 int handle_rt_signal64(int signr, struct k_sigaction *ka, siginfo_t *info,
398 		sigset_t *set, struct pt_regs *regs)
399 {
400 	/* Handler is *really* a pointer to the function descriptor for
401 	 * the signal routine.  The first entry in the function
402 	 * descriptor is the entry address of signal and the second
403 	 * entry is the TOC value we need to use.
404 	 */
405 	func_descr_t __user *funct_desc_ptr;
406 	struct rt_sigframe __user *frame;
407 	unsigned long newsp = 0;
408 	long err = 0;
409 
410 	frame = get_sigframe(ka, regs, sizeof(*frame));
411 	if (unlikely(frame == NULL))
412 		goto badframe;
413 
414 	err |= __put_user(&frame->info, &frame->pinfo);
415 	err |= __put_user(&frame->uc, &frame->puc);
416 	err |= copy_siginfo_to_user(&frame->info, info);
417 	if (err)
418 		goto badframe;
419 
420 	/* Create the ucontext.  */
421 	err |= __put_user(0, &frame->uc.uc_flags);
422 	err |= __put_user(0, &frame->uc.uc_link);
423 	err |= __put_user(current->sas_ss_sp, &frame->uc.uc_stack.ss_sp);
424 	err |= __put_user(sas_ss_flags(regs->gpr[1]),
425 			  &frame->uc.uc_stack.ss_flags);
426 	err |= __put_user(current->sas_ss_size, &frame->uc.uc_stack.ss_size);
427 	err |= setup_sigcontext(&frame->uc.uc_mcontext, regs, signr, NULL,
428 				(unsigned long)ka->sa.sa_handler);
429 	err |= __copy_to_user(&frame->uc.uc_sigmask, set, sizeof(*set));
430 	if (err)
431 		goto badframe;
432 
433 	/* Make sure signal handler doesn't get spurious FP exceptions */
434 	current->thread.fpscr.val = 0;
435 
436 	/* Set up to return from userspace. */
437 	if (vdso64_rt_sigtramp && current->mm->context.vdso_base) {
438 		regs->link = current->mm->context.vdso_base + vdso64_rt_sigtramp;
439 	} else {
440 		err |= setup_trampoline(__NR_rt_sigreturn, &frame->tramp[0]);
441 		if (err)
442 			goto badframe;
443 		regs->link = (unsigned long) &frame->tramp[0];
444 	}
445 	funct_desc_ptr = (func_descr_t __user *) ka->sa.sa_handler;
446 
447 	/* Allocate a dummy caller frame for the signal handler. */
448 	newsp = ((unsigned long)frame) - __SIGNAL_FRAMESIZE;
449 	err |= put_user(regs->gpr[1], (unsigned long __user *)newsp);
450 
451 	/* Set up "regs" so we "return" to the signal handler. */
452 	err |= get_user(regs->nip, &funct_desc_ptr->entry);
453 	/* enter the signal handler in big-endian mode */
454 	regs->msr &= ~MSR_LE;
455 	regs->gpr[1] = newsp;
456 	err |= get_user(regs->gpr[2], &funct_desc_ptr->toc);
457 	regs->gpr[3] = signr;
458 	regs->result = 0;
459 	if (ka->sa.sa_flags & SA_SIGINFO) {
460 		err |= get_user(regs->gpr[4], (unsigned long __user *)&frame->pinfo);
461 		err |= get_user(regs->gpr[5], (unsigned long __user *)&frame->puc);
462 		regs->gpr[6] = (unsigned long) frame;
463 	} else {
464 		regs->gpr[4] = (unsigned long)&frame->uc.uc_mcontext;
465 	}
466 	if (err)
467 		goto badframe;
468 
469 	return 1;
470 
471 badframe:
472 #if DEBUG_SIG
473 	printk("badframe in setup_rt_frame, regs=%p frame=%p newsp=%lx\n",
474 	       regs, frame, newsp);
475 #endif
476 	if (show_unhandled_signals && printk_ratelimit())
477 		printk(regs->msr & MSR_SF ? fmt64 : fmt32,
478 			current->comm, current->pid, "setup_rt_frame",
479 			(long)frame, regs->nip, regs->link);
480 
481 	force_sigsegv(signr, current);
482 	return 0;
483 }
484