arm64: compat: Avoid sending SIGILL for unallocated syscall numbers
authorWill Deacon <will.deacon@arm.com>
Thu, 3 Jan 2019 17:45:07 +0000 (17:45 +0000)
committerWill Deacon <will.deacon@arm.com>
Fri, 4 Jan 2019 14:18:01 +0000 (14:18 +0000)
The ARM Linux kernel handles the EABI syscall numbers as follows:

  0           - NR_SYSCALLS-1 : Invoke syscall via syscall table
  NR_SYSCALLS - 0xeffff : -ENOSYS (to be allocated in future)
  0xf0000     - 0xf07ff : Private syscall or -ENOSYS if not allocated
  > 0xf07ff : SIGILL

Our compat code gets this wrong and ends up sending SIGILL in response
to all syscalls greater than NR_SYSCALLS which have a value greater
than 0x7ff in the bottom 16 bits.

Fix this by defining the end of the ARM private syscall region and
checking the syscall number against that directly. Update the comment
while we're at it.

Cc: <stable@vger.kernel.org>
Cc: Dave Martin <Dave.Martin@arm.com>
Reported-by: Pi-Hsun Shih <pihsun@chromium.org>
Signed-off-by: Will Deacon <will.deacon@arm.com>
arch/arm64/include/asm/unistd.h
arch/arm64/kernel/sys_compat.c

index b13ca091f83329fe4eb3fb5cba348ce4c57f1cf7..85d5c102620473a5d96a3ef5ebc4e94e572b00fb 100644 (file)
@@ -40,8 +40,9 @@
  * The following SVCs are ARM private.
  */
 #define __ARM_NR_COMPAT_BASE           0x0f0000
-#define __ARM_NR_compat_cacheflush     (__ARM_NR_COMPAT_BASE+2)
-#define __ARM_NR_compat_set_tls                (__ARM_NR_COMPAT_BASE+5)
+#define __ARM_NR_compat_cacheflush     (__ARM_NR_COMPAT_BASE + 2)
+#define __ARM_NR_compat_set_tls                (__ARM_NR_COMPAT_BASE + 5)
+#define __ARM_NR_COMPAT_END            (__ARM_NR_COMPAT_BASE + 0x800)
 
 #define __NR_compat_syscalls           399
 #endif
index 32653d156747e7d8c23ce34ec72ba17341be43a3..a79db4e485a64f906a6ee920c7e448f8737ea839 100644 (file)
@@ -102,12 +102,12 @@ long compat_arm_syscall(struct pt_regs *regs)
 
        default:
                /*
-                * Calls 9f00xx..9f07ff are defined to return -ENOSYS
+                * Calls 0xf0xxx..0xf07ff are defined to return -ENOSYS
                 * if not implemented, rather than raising SIGILL. This
                 * way the calling program can gracefully determine whether
                 * a feature is supported.
                 */
-               if ((no & 0xffff) <= 0x7ff)
+               if (no < __ARM_NR_COMPAT_END)
                        return -ENOSYS;
                break;
        }