mirror of
				https://github.com/torvalds/linux.git
				synced 2025-11-04 10:40:15 +02:00 
			
		
		
		
	maccess: allow architectures to provide kernel probing directly
Provide alternative versions of probe_kernel_read, probe_kernel_write
and strncpy_from_kernel_unsafe that don't need set_fs magic, but instead
use arch hooks that are modelled after unsafe_{get,put}_user to access
kernel memory in an exception safe way.
Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Cc: Alexei Starovoitov <ast@kernel.org>
Cc: Daniel Borkmann <daniel@iogearbox.net>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Cc: Ingo Molnar <mingo@elte.hu>
Cc: Masami Hiramatsu <mhiramat@kernel.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Link: http://lkml.kernel.org/r/20200521152301.2587579-19-hch@lst.de
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
			
			
This commit is contained in:
		
							parent
							
								
									fc3562d794
								
							
						
					
					
						commit
						b58294ead1
					
				
					 1 changed files with 76 additions and 0 deletions
				
			
		
							
								
								
									
										76
									
								
								mm/maccess.c
									
									
									
									
									
								
							
							
						
						
									
										76
									
								
								mm/maccess.c
									
									
									
									
									
								
							| 
						 | 
					@ -11,6 +11,81 @@ bool __weak probe_kernel_read_allowed(const void *unsafe_src, size_t size)
 | 
				
			||||||
	return true;
 | 
						return true;
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					#ifdef HAVE_GET_KERNEL_NOFAULT
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					#define probe_kernel_read_loop(dst, src, len, type, err_label)		\
 | 
				
			||||||
 | 
						while (len >= sizeof(type)) {					\
 | 
				
			||||||
 | 
							__get_kernel_nofault(dst, src, type, err_label);		\
 | 
				
			||||||
 | 
							dst += sizeof(type);					\
 | 
				
			||||||
 | 
							src += sizeof(type);					\
 | 
				
			||||||
 | 
							len -= sizeof(type);					\
 | 
				
			||||||
 | 
						}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					long probe_kernel_read(void *dst, const void *src, size_t size)
 | 
				
			||||||
 | 
					{
 | 
				
			||||||
 | 
						if (!probe_kernel_read_allowed(src, size))
 | 
				
			||||||
 | 
							return -EFAULT;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
						pagefault_disable();
 | 
				
			||||||
 | 
						probe_kernel_read_loop(dst, src, size, u64, Efault);
 | 
				
			||||||
 | 
						probe_kernel_read_loop(dst, src, size, u32, Efault);
 | 
				
			||||||
 | 
						probe_kernel_read_loop(dst, src, size, u16, Efault);
 | 
				
			||||||
 | 
						probe_kernel_read_loop(dst, src, size, u8, Efault);
 | 
				
			||||||
 | 
						pagefault_enable();
 | 
				
			||||||
 | 
						return 0;
 | 
				
			||||||
 | 
					Efault:
 | 
				
			||||||
 | 
						pagefault_enable();
 | 
				
			||||||
 | 
						return -EFAULT;
 | 
				
			||||||
 | 
					}
 | 
				
			||||||
 | 
					EXPORT_SYMBOL_GPL(probe_kernel_read);
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					#define probe_kernel_write_loop(dst, src, len, type, err_label)		\
 | 
				
			||||||
 | 
						while (len >= sizeof(type)) {					\
 | 
				
			||||||
 | 
							__put_kernel_nofault(dst, src, type, err_label);		\
 | 
				
			||||||
 | 
							dst += sizeof(type);					\
 | 
				
			||||||
 | 
							src += sizeof(type);					\
 | 
				
			||||||
 | 
							len -= sizeof(type);					\
 | 
				
			||||||
 | 
						}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					long probe_kernel_write(void *dst, const void *src, size_t size)
 | 
				
			||||||
 | 
					{
 | 
				
			||||||
 | 
						pagefault_disable();
 | 
				
			||||||
 | 
						probe_kernel_write_loop(dst, src, size, u64, Efault);
 | 
				
			||||||
 | 
						probe_kernel_write_loop(dst, src, size, u32, Efault);
 | 
				
			||||||
 | 
						probe_kernel_write_loop(dst, src, size, u16, Efault);
 | 
				
			||||||
 | 
						probe_kernel_write_loop(dst, src, size, u8, Efault);
 | 
				
			||||||
 | 
						pagefault_enable();
 | 
				
			||||||
 | 
						return 0;
 | 
				
			||||||
 | 
					Efault:
 | 
				
			||||||
 | 
						pagefault_enable();
 | 
				
			||||||
 | 
						return -EFAULT;
 | 
				
			||||||
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					long strncpy_from_kernel_nofault(char *dst, const void *unsafe_addr, long count)
 | 
				
			||||||
 | 
					{
 | 
				
			||||||
 | 
						const void *src = unsafe_addr;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
						if (unlikely(count <= 0))
 | 
				
			||||||
 | 
							return 0;
 | 
				
			||||||
 | 
						if (!probe_kernel_read_allowed(unsafe_addr, count))
 | 
				
			||||||
 | 
							return -EFAULT;
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
						pagefault_disable();
 | 
				
			||||||
 | 
						do {
 | 
				
			||||||
 | 
							__get_kernel_nofault(dst, src, u8, Efault);
 | 
				
			||||||
 | 
							dst++;
 | 
				
			||||||
 | 
							src++;
 | 
				
			||||||
 | 
						} while (dst[-1] && src - unsafe_addr < count);
 | 
				
			||||||
 | 
						pagefault_enable();
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
						dst[-1] = '\0';
 | 
				
			||||||
 | 
						return src - unsafe_addr;
 | 
				
			||||||
 | 
					Efault:
 | 
				
			||||||
 | 
						pagefault_enable();
 | 
				
			||||||
 | 
						dst[-1] = '\0';
 | 
				
			||||||
 | 
						return -EFAULT;
 | 
				
			||||||
 | 
					}
 | 
				
			||||||
 | 
					#else /* HAVE_GET_KERNEL_NOFAULT */
 | 
				
			||||||
/**
 | 
					/**
 | 
				
			||||||
 * probe_kernel_read(): safely attempt to read from kernel-space
 | 
					 * probe_kernel_read(): safely attempt to read from kernel-space
 | 
				
			||||||
 * @dst: pointer to the buffer that shall take the data
 | 
					 * @dst: pointer to the buffer that shall take the data
 | 
				
			||||||
| 
						 | 
					@ -113,6 +188,7 @@ long strncpy_from_kernel_nofault(char *dst, const void *unsafe_addr, long count)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
	return ret ? -EFAULT : src - unsafe_addr;
 | 
						return ret ? -EFAULT : src - unsafe_addr;
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					#endif /* HAVE_GET_KERNEL_NOFAULT */
 | 
				
			||||||
 | 
					
 | 
				
			||||||
/**
 | 
					/**
 | 
				
			||||||
 * probe_user_read(): safely attempt to read from a user-space location
 | 
					 * probe_user_read(): safely attempt to read from a user-space location
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in a new issue