ipc/compat.c

   1 /*
   2  * 32 bit compatibility code for System V IPC
   3  *
   4  * Copyright (C) 1997,1998      Jakub Jelinek (jj@sunsite.mff.cuni.cz)
   5  * Copyright (C) 1997           David S. Miller (davem@caip.rutgers.edu)
   6  * Copyright (C) 1999           Arun Sharma <arun.sharma@intel.com>
   7  * Copyright (C) 2000           VA Linux Co
   8  * Copyright (C) 2000           Don Dugger <n0ano@valinux.com>
   9  * Copyright (C) 2000           Hewlett-Packard Co.
  10  * Copyright (C) 2000           David Mosberger-Tang <davidm@hpl.hp.com>
  11  * Copyright (C) 2000           Gerhard Tonn (ton@de.ibm.com)
  12  * Copyright (C) 2000-2002      Andi Kleen, SuSE Labs (x86-64 port)
  13  * Copyright (C) 2000           Silicon Graphics, Inc.
  14  * Copyright (C) 2001           IBM
  15  * Copyright (C) 2004           IBM Deutschland Entwicklung GmbH, IBM Corporation
  16  * Copyright (C) 2004           Arnd Bergmann (arnd@arndb.de)
  17  *
  18  * This code is collected from the versions for sparc64, mips64, s390x, ia64,
  19  * ppc64 and x86_64, all of which are based on the original sparc64 version
  20  * by Jakub Jelinek.
  21  *
  22  */
  23 #include <linux/compat.h>
  24 #include <linux/errno.h>
  25 #include <linux/highuid.h>
  26 #include <linux/init.h>
  27 #include <linux/msg.h>
  28 #include <linux/shm.h>
  29 #include <linux/syscalls.h>
  30 #include <linux/ptrace.h>
  31
  32 #include <linux/mutex.h>
  33 #include <asm/uaccess.h>
  34
  35 #include "util.h"
  36
  37 struct compat_msgbuf {
  38         compat_long_t mtype;
  39         char mtext[1];
  40 };
  41
  42 struct compat_ipc_perm {
  43         key_t key;
  44         __compat_uid_t uid;
  45         __compat_gid_t gid;
  46         __compat_uid_t cuid;
  47         __compat_gid_t cgid;
  48         compat_mode_t mode;
  49         unsigned short seq;
  50 };
  51
  52 struct compat_semid_ds {
  53         struct compat_ipc_perm sem_perm;
  54         compat_time_t sem_otime;
  55         compat_time_t sem_ctime;
  56         compat_uptr_t sem_base;
  57         compat_uptr_t sem_pending;
  58         compat_uptr_t sem_pending_last;
  59         compat_uptr_t undo;
  60         unsigned short sem_nsems;
  61 };
  62
  63 struct compat_msqid_ds {
  64         struct compat_ipc_perm msg_perm;
  65         compat_uptr_t msg_first;
  66         compat_uptr_t msg_last;
  67         compat_time_t msg_stime;
  68         compat_time_t msg_rtime;
  69         compat_time_t msg_ctime;
  70         compat_ulong_t msg_lcbytes;
  71         compat_ulong_t msg_lqbytes;
  72         unsigned short msg_cbytes;
  73         unsigned short msg_qnum;
  74         unsigned short msg_qbytes;
  75         compat_ipc_pid_t msg_lspid;
  76         compat_ipc_pid_t msg_lrpid;
  77 };
  78
  79 struct compat_shmid_ds {
  80         struct compat_ipc_perm shm_perm;
  81         int shm_segsz;
  82         compat_time_t shm_atime;
  83         compat_time_t shm_dtime;
  84         compat_time_t shm_ctime;
  85         compat_ipc_pid_t shm_cpid;
  86         compat_ipc_pid_t shm_lpid;
  87         unsigned short shm_nattch;
  88         unsigned short shm_unused;
  89         compat_uptr_t shm_unused2;
  90         compat_uptr_t shm_unused3;
  91 };
  92
  93 struct compat_ipc_kludge {
  94         compat_uptr_t msgp;
  95         compat_long_t msgtyp;
  96 };
  97
  98 struct compat_shminfo64 {
  99         compat_ulong_t shmmax;
 100         compat_ulong_t shmmin;
 101         compat_ulong_t shmmni;
 102         compat_ulong_t shmseg;
 103         compat_ulong_t shmall;
 104         compat_ulong_t __unused1;
 105         compat_ulong_t __unused2;
 106         compat_ulong_t __unused3;
 107         compat_ulong_t __unused4;
 108 };
 109
 110 struct compat_shm_info {
 111         compat_int_t used_ids;
 112         compat_ulong_t shm_tot, shm_rss, shm_swp;
 113         compat_ulong_t swap_attempts, swap_successes;
 114 };
 115
 116 extern int sem_ctls[];
 117 #define sc_semopm       (sem_ctls[2])
 118
 119 static inline int compat_ipc_parse_version(int *cmd)
 120 {
 121 #ifdef  CONFIG_ARCH_WANT_COMPAT_IPC_PARSE_VERSION
 122         int version = *cmd & IPC_64;
 123
 124         /* this is tricky: architectures that have support for the old
 125          * ipc structures in 64 bit binaries need to have IPC_64 set
 126          * in cmd, the others need to have it cleared */
 127 #ifndef ipc_parse_version
 128         *cmd |= IPC_64;
 129 #else
 130         *cmd &= ~IPC_64;
 131 #endif
 132         return version;
 133 #else
 134         /* With the asm-generic APIs, we always use the 64-bit versions. */
 135         return IPC_64;
 136 #endif
 137 }
 138
 139 static inline int __get_compat_ipc64_perm(struct ipc64_perm *p64,
 140                                           struct compat_ipc64_perm __user *up64)
 141 {
 142         int err;
 143
 144         err  = __get_user(p64->uid, &up64->uid);
 145         err |= __get_user(p64->gid, &up64->gid);
 146         err |= __get_user(p64->mode, &up64->mode);
 147         return err;
 148 }
 149
 150 static inline int __get_compat_ipc_perm(struct ipc64_perm *p,
 151                                         struct compat_ipc_perm __user *up)
 152 {
 153         int err;
 154
 155         err  = __get_user(p->uid, &up->uid);
 156         err |= __get_user(p->gid, &up->gid);
 157         err |= __get_user(p->mode, &up->mode);
 158         return err;
 159 }
 160
 161 static inline int __put_compat_ipc64_perm(struct ipc64_perm *p64,
 162                                           struct compat_ipc64_perm __user *up64)
 163 {
 164         int err;
 165
 166         err  = __put_user(p64->key, &up64->key);
 167         err |= __put_user(p64->uid, &up64->uid);
 168         err |= __put_user(p64->gid, &up64->gid);
 169         err |= __put_user(p64->cuid, &up64->cuid);
 170         err |= __put_user(p64->cgid, &up64->cgid);
 171         err |= __put_user(p64->mode, &up64->mode);
 172         err |= __put_user(p64->seq, &up64->seq);
 173         return err;
 174 }
 175
 176 static inline int __put_compat_ipc_perm(struct ipc64_perm *p,
 177                                         struct compat_ipc_perm __user *up)
 178 {
 179         int err;
 180         __compat_uid_t u;
 181         __compat_gid_t g;
 182
 183         err  = __put_user(p->key, &up->key);
 184         SET_UID(u, p->uid);
 185         err |= __put_user(u, &up->uid);
 186         SET_GID(g, p->gid);
 187         err |= __put_user(g, &up->gid);
 188         SET_UID(u, p->cuid);
 189         err |= __put_user(u, &up->cuid);
 190         SET_GID(g, p->cgid);
 191         err |= __put_user(g, &up->cgid);
 192         err |= __put_user(p->mode, &up->mode);
 193         err |= __put_user(p->seq, &up->seq);
 194         return err;
 195 }
 196
 197 static inline int get_compat_semid64_ds(struct semid64_ds *s64,
 198                                         struct compat_semid64_ds __user *up64)
 199 {
 200         if (!access_ok (VERIFY_READ, up64, sizeof(*up64)))
 201                 return -EFAULT;
 202         return __get_compat_ipc64_perm(&s64->sem_perm, &up64->sem_perm);
 203 }
 204
 205 static inline int get_compat_semid_ds(struct semid64_ds *s,
 206                                       struct compat_semid_ds __user *up)
 207 {
 208         if (!access_ok (VERIFY_READ, up, sizeof(*up)))
 209                 return -EFAULT;
 210         return __get_compat_ipc_perm(&s->sem_perm, &up->sem_perm);
 211 }
 212
 213 static inline int put_compat_semid64_ds(struct semid64_ds *s64,
 214                                         struct compat_semid64_ds __user *up64)
 215 {
 216         int err;
 217
 218         if (!access_ok (VERIFY_WRITE, up64, sizeof(*up64)))
 219                 return -EFAULT;
 220         err  = __put_compat_ipc64_perm(&s64->sem_perm, &up64->sem_perm);
 221         err |= __put_user(s64->sem_otime, &up64->sem_otime);
 222         err |= __put_user(s64->sem_ctime, &up64->sem_ctime);
 223         err |= __put_user(s64->sem_nsems, &up64->sem_nsems);
 224         return err;
 225 }
 226
 227 static inline int put_compat_semid_ds(struct semid64_ds *s,
 228                                       struct compat_semid_ds __user *up)
 229 {
 230         int err;
 231
 232         if (!access_ok (VERIFY_WRITE, up, sizeof(*up)))
 233                 return -EFAULT;
 234         err  = __put_compat_ipc_perm(&s->sem_perm, &up->sem_perm);
 235         err |= __put_user(s->sem_otime, &up->sem_otime);
 236         err |= __put_user(s->sem_ctime, &up->sem_ctime);
 237         err |= __put_user(s->sem_nsems, &up->sem_nsems);
 238         return err;
 239 }
 240
 241 static long do_compat_semctl(int first, int second, int third, u32 pad)
 242 {
 243         union semun fourth;
 244         int err, err2;
 245         struct semid64_ds s64;
 246         struct semid64_ds __user *up64;
 247         int version = compat_ipc_parse_version(&third);
 248
 249         memset(&s64, 0, sizeof(s64));
 250
 251         if ((third & (~IPC_64)) == SETVAL)
 252                 fourth.val = (int) pad;
 253         else
 254                 fourth.__pad = compat_ptr(pad);
 255         switch (third & (~IPC_64)) {
 256         case IPC_INFO:
 257         case IPC_RMID:
 258         case SEM_INFO:
 259         case GETVAL:
 260         case GETPID:
 261         case GETNCNT:
 262         case GETZCNT:
 263         case GETALL:
 264         case SETVAL:
 265         case SETALL:
 266                 err = sys_semctl(first, second, third, fourth);
 267                 break;
 268
 269         case IPC_STAT:
 270         case SEM_STAT:
 271                 up64 = compat_alloc_user_space(sizeof(s64));
 272                 fourth.__pad = up64;
 273                 err = sys_semctl(first, second, third, fourth);
 274                 if (err < 0)
 275                         break;
 276                 if (copy_from_user(&s64, up64, sizeof(s64)))
 277                         err2 = -EFAULT;
 278                 else if (version == IPC_64)
 279                         err2 = put_compat_semid64_ds(&s64, compat_ptr(pad));
 280                 else
 281                         err2 = put_compat_semid_ds(&s64, compat_ptr(pad));
 282                 if (err2)
 283                         err = -EFAULT;
 284                 break;
 285
 286         case IPC_SET:
 287                 if (version == IPC_64) {
 288                         err = get_compat_semid64_ds(&s64, compat_ptr(pad));
 289                 } else {
 290                         err = get_compat_semid_ds(&s64, compat_ptr(pad));
 291                 }
 292                 up64 = compat_alloc_user_space(sizeof(s64));
 293                 if (copy_to_user(up64, &s64, sizeof(s64)))
 294                         err = -EFAULT;
 295                 if (err)
 296                         break;
 297
 298                 fourth.__pad = up64;
 299                 err = sys_semctl(first, second, third, fourth);
 300                 break;
 301
 302         default:
 303                 err = -EINVAL;
 304                 break;
 305         }
 306         return err;
 307 }
 308
 309 long compat_do_msg_fill(void __user *dest, struct msg_msg *msg, size_t bufsz)
 310 {
 311         struct compat_msgbuf __user *msgp = dest;
 312         size_t msgsz;
 313
 314         if (put_user(msg->m_type, &msgp->mtype))
 315                 return -EFAULT;
 316
 317         msgsz = (bufsz > msg->m_ts) ? msg->m_ts : bufsz;
 318         if (store_msg(msgp->mtext, msg, msgsz))
 319                 return -EFAULT;
 320         return msgsz;
 321 }
 322
 323 #ifdef CONFIG_ARCH_WANT_OLD_COMPAT_IPC
 324 long compat_sys_semctl(int first, int second, int third, void __user *uptr)
 325 {
 326         u32 pad;
 327
 328         if (!uptr)
 329                 return -EINVAL;
 330         if (get_user(pad, (u32 __user *) uptr))
 331                 return -EFAULT;
 332         return do_compat_semctl(first, second, third, pad);
 333 }
 334
 335 long compat_sys_msgsnd(int first, int second, int third, void __user *uptr)
 336 {
 337         struct compat_msgbuf __user *up = uptr;
 338         long type;
 339
 340         if (first < 0)
 341                 return -EINVAL;
 342         if (second < 0)
 343                 return -EINVAL;
 344
 345         if (get_user(type, &up->mtype))
 346                 return -EFAULT;
 347
 348         return do_msgsnd(first, type, up->mtext, second, third);
 349 }
 350
 351 long compat_sys_msgrcv(int first, int second, int msgtyp, int third,
 352                            int version, void __user *uptr)
 353 {
 354         if (first < 0)
 355                 return -EINVAL;
 356         if (second < 0)
 357                 return -EINVAL;
 358
 359         if (!version) {
 360                 struct compat_ipc_kludge ipck;
 361                 if (!uptr)
 362                         return -EINVAL;
 363                 if (copy_from_user (&ipck, uptr, sizeof(ipck)))
 364                         return -EFAULT;
 365                 uptr = compat_ptr(ipck.msgp);
 366                 msgtyp = ipck.msgtyp;
 367         }
 368         return do_msgrcv(first, uptr, second, msgtyp, third,
 369                          compat_do_msg_fill);
 370 }
 371
 372 COMPAT_SYSCALL_DEFINE6(ipc, u32, call, int, first, int, second,
 373         u32, third, compat_uptr_t, ptr, u32, fifth)
 374 {
 375         int version;
 376
 377         version = call >> 16; /* hack for backward compatibility */
 378         call &= 0xffff;
 379
 380         switch (call) {
 381         case SEMOP:
 382                 /* struct sembuf is the same on 32 and 64bit :)) */
 383                 return sys_semtimedop(first, compat_ptr(ptr), second, NULL);
 384         case SEMTIMEDOP:
 385                 return compat_sys_semtimedop(first, compat_ptr(ptr), second,
 386                                                 compat_ptr(fifth));
 387         case SEMGET:
 388                 return sys_semget(first, second, third);
 389         case SEMCTL:
 390                 return compat_sys_semctl(first, second, third, compat_ptr(ptr));
 391
 392         case MSGSND:
 393                 return compat_sys_msgsnd(first, second, third, compat_ptr(ptr));
 394         case MSGRCV:
 395                 return compat_sys_msgrcv(first, second, fifth, third,
 396                                          version, compat_ptr(ptr));
 397         case MSGGET:
 398                 return sys_msgget(first, second);
 399         case MSGCTL:
 400                 return compat_sys_msgctl(first, second, compat_ptr(ptr));
 401
 402         case SHMAT:
 403                 return compat_sys_shmat(first, second, third, version,
 404                                         compat_ptr(ptr));
 405         case SHMDT:
 406                 return sys_shmdt(compat_ptr(ptr));
 407         case SHMGET:
 408                 return sys_shmget(first, (unsigned)second, third);
 409         case SHMCTL:
 410                 return compat_sys_shmctl(first, second, compat_ptr(ptr));
 411         }
 412
 413         return -ENOSYS;
 414 }
 415 #else
 416 long compat_sys_semctl(int semid, int semnum, int cmd, int arg)
 417 {
 418         return do_compat_semctl(semid, semnum, cmd, arg);
 419 }
 420
 421 long compat_sys_msgsnd(int msqid, struct compat_msgbuf __user *msgp,
 422                        compat_ssize_t msgsz, int msgflg)
 423 {
 424         compat_long_t mtype;
 425
 426         if (get_user(mtype, &msgp->mtype))
 427                 return -EFAULT;
 428         return do_msgsnd(msqid, mtype, msgp->mtext, (ssize_t)msgsz, msgflg);
 429 }
 430
 431 long compat_sys_msgrcv(int msqid, struct compat_msgbuf __user *msgp,
 432                        compat_ssize_t msgsz, long msgtyp, int msgflg)
 433 {
 434         return do_msgrcv(msqid, msgp, (ssize_t)msgsz, msgtyp, msgflg,
 435                          compat_do_msg_fill);
 436 }
 437 #endif
 438
 439 static inline int get_compat_msqid64(struct msqid64_ds *m64,
 440                                      struct compat_msqid64_ds __user *up64)
 441 {
 442         int err;
 443
 444         if (!access_ok(VERIFY_READ, up64, sizeof(*up64)))
 445                 return -EFAULT;
 446         err  = __get_compat_ipc64_perm(&m64->msg_perm, &up64->msg_perm);
 447         err |= __get_user(m64->msg_qbytes, &up64->msg_qbytes);
 448         return err;
 449 }
 450
 451 static inline int get_compat_msqid(struct msqid64_ds *m,
 452                                    struct compat_msqid_ds __user *up)
 453 {
 454         int err;
 455
 456         if (!access_ok(VERIFY_READ, up, sizeof(*up)))
 457                 return -EFAULT;
 458         err  = __get_compat_ipc_perm(&m->msg_perm, &up->msg_perm);
 459         err |= __get_user(m->msg_qbytes, &up->msg_qbytes);
 460         return err;
 461 }
 462
 463 static inline int put_compat_msqid64_ds(struct msqid64_ds *m64,
 464                                  struct compat_msqid64_ds __user *up64)
 465 {
 466         int err;
 467
 468         if (!access_ok(VERIFY_WRITE, up64, sizeof(*up64)))
 469                 return -EFAULT;
 470         err  = __put_compat_ipc64_perm(&m64->msg_perm, &up64->msg_perm);
 471         err |= __put_user(m64->msg_stime, &up64->msg_stime);
 472         err |= __put_user(m64->msg_rtime, &up64->msg_rtime);
 473         err |= __put_user(m64->msg_ctime, &up64->msg_ctime);
 474         err |= __put_user(m64->msg_cbytes, &up64->msg_cbytes);
 475         err |= __put_user(m64->msg_qnum, &up64->msg_qnum);
 476         err |= __put_user(m64->msg_qbytes, &up64->msg_qbytes);
 477         err |= __put_user(m64->msg_lspid, &up64->msg_lspid);
 478         err |= __put_user(m64->msg_lrpid, &up64->msg_lrpid);
 479         return err;
 480 }
 481
 482 static inline int put_compat_msqid_ds(struct msqid64_ds *m,
 483                                       struct compat_msqid_ds __user *up)
 484 {
 485         int err;
 486
 487         if (!access_ok(VERIFY_WRITE, up, sizeof(*up)))
 488                 return -EFAULT;
 489         err  = __put_compat_ipc_perm(&m->msg_perm, &up->msg_perm);
 490         err |= __put_user(m->msg_stime, &up->msg_stime);
 491         err |= __put_user(m->msg_rtime, &up->msg_rtime);
 492         err |= __put_user(m->msg_ctime, &up->msg_ctime);
 493         err |= __put_user(m->msg_cbytes, &up->msg_cbytes);
 494         err |= __put_user(m->msg_qnum, &up->msg_qnum);
 495         err |= __put_user(m->msg_qbytes, &up->msg_qbytes);
 496         err |= __put_user(m->msg_lspid, &up->msg_lspid);
 497         err |= __put_user(m->msg_lrpid, &up->msg_lrpid);
 498         return err;
 499 }
 500
 501 long compat_sys_msgctl(int first, int second, void __user *uptr)
 502 {
 503         int err, err2;
 504         struct msqid64_ds m64;
 505         int version = compat_ipc_parse_version(&second);
 506         void __user *p;
 507
 508         memset(&m64, 0, sizeof(m64));
 509
 510         switch (second & (~IPC_64)) {
 511         case IPC_INFO:
 512         case IPC_RMID:
 513         case MSG_INFO:
 514                 err = sys_msgctl(first, second, uptr);
 515                 break;
 516
 517         case IPC_SET:
 518                 if (version == IPC_64) {
 519                         err = get_compat_msqid64(&m64, uptr);
 520                 } else {
 521                         err = get_compat_msqid(&m64, uptr);
 522                 }
 523                 if (err)
 524                         break;
 525                 p = compat_alloc_user_space(sizeof(m64));
 526                 if (copy_to_user(p, &m64, sizeof(m64)))
 527                         err = -EFAULT;
 528                 else
 529                         err = sys_msgctl(first, second, p);
 530                 break;
 531
 532         case IPC_STAT:
 533         case MSG_STAT:
 534                 p = compat_alloc_user_space(sizeof(m64));
 535                 err = sys_msgctl(first, second, p);
 536                 if (err < 0)
 537                         break;
 538                 if (copy_from_user(&m64, p, sizeof(m64)))
 539                         err2 = -EFAULT;
 540                 else if (version == IPC_64)
 541                         err2 = put_compat_msqid64_ds(&m64, uptr);
 542                 else
 543                         err2 = put_compat_msqid_ds(&m64, uptr);
 544                 if (err2)
 545                         err = -EFAULT;
 546                 break;
 547
 548         default:
 549                 err = -EINVAL;
 550                 break;
 551         }
 552         return err;
 553 }
 554
 555 #ifndef COMPAT_SHMLBA
 556 #define COMPAT_SHMLBA   SHMLBA
 557 #endif
 558
 559 #ifdef CONFIG_ARCH_WANT_OLD_COMPAT_IPC
 560 long compat_sys_shmat(int first, int second, compat_uptr_t third, int version,
 561                         void __user *uptr)
 562 {
 563         int err;
 564         unsigned long raddr;
 565         compat_ulong_t __user *uaddr;
 566
 567         if (version == 1)
 568                 return -EINVAL;
 569         err = do_shmat(first, uptr, second, &raddr, COMPAT_SHMLBA);
 570         if (err < 0)
 571                 return err;
 572         uaddr = compat_ptr(third);
 573         return put_user(raddr, uaddr);
 574 }
 575 #else
 576 long compat_sys_shmat(int shmid, compat_uptr_t shmaddr, int shmflg)
 577 {
 578         unsigned long ret;
 579         long err;
 580
 581         err = do_shmat(shmid, compat_ptr(shmaddr), shmflg, &ret, COMPAT_SHMLBA);
 582         if (err)
 583                 return err;
 584         force_successful_syscall_return();
 585         return (long)ret;
 586 }
 587 #endif
 588
 589 static inline int get_compat_shmid64_ds(struct shmid64_ds *s64,
 590                                         struct compat_shmid64_ds __user *up64)
 591 {
 592         if (!access_ok(VERIFY_READ, up64, sizeof(*up64)))
 593                 return -EFAULT;
 594         return __get_compat_ipc64_perm(&s64->shm_perm, &up64->shm_perm);
 595 }
 596
 597 static inline int get_compat_shmid_ds(struct shmid64_ds *s,
 598                                       struct compat_shmid_ds __user *up)
 599 {
 600         if (!access_ok(VERIFY_READ, up, sizeof(*up)))
 601                 return -EFAULT;
 602         return __get_compat_ipc_perm(&s->shm_perm, &up->shm_perm);
 603 }
 604
 605 static inline int put_compat_shmid64_ds(struct shmid64_ds *s64,
 606                                         struct compat_shmid64_ds __user *up64)
 607 {
 608         int err;
 609
 610         if (!access_ok(VERIFY_WRITE, up64, sizeof(*up64)))
 611                 return -EFAULT;
 612         err  = __put_compat_ipc64_perm(&s64->shm_perm, &up64->shm_perm);
 613         err |= __put_user(s64->shm_atime, &up64->shm_atime);
 614         err |= __put_user(s64->shm_dtime, &up64->shm_dtime);
 615         err |= __put_user(s64->shm_ctime, &up64->shm_ctime);
 616         err |= __put_user(s64->shm_segsz, &up64->shm_segsz);
 617         err |= __put_user(s64->shm_nattch, &up64->shm_nattch);
 618         err |= __put_user(s64->shm_cpid, &up64->shm_cpid);
 619         err |= __put_user(s64->shm_lpid, &up64->shm_lpid);
 620         return err;
 621 }
 622
 623 static inline int put_compat_shmid_ds(struct shmid64_ds *s,
 624                                       struct compat_shmid_ds __user *up)
 625 {
 626         int err;
 627
 628         if (!access_ok(VERIFY_WRITE, up, sizeof(*up)))
 629                 return -EFAULT;
 630         err  = __put_compat_ipc_perm(&s->shm_perm, &up->shm_perm);
 631         err |= __put_user(s->shm_atime, &up->shm_atime);
 632         err |= __put_user(s->shm_dtime, &up->shm_dtime);
 633         err |= __put_user(s->shm_ctime, &up->shm_ctime);
 634         err |= __put_user(s->shm_segsz, &up->shm_segsz);
 635         err |= __put_user(s->shm_nattch, &up->shm_nattch);
 636         err |= __put_user(s->shm_cpid, &up->shm_cpid);
 637         err |= __put_user(s->shm_lpid, &up->shm_lpid);
 638         return err;
 639 }
 640
 641 static inline int put_compat_shminfo64(struct shminfo64 *smi,
 642                                        struct compat_shminfo64 __user *up64)
 643 {
 644         int err;
 645
 646         if (!access_ok(VERIFY_WRITE, up64, sizeof(*up64)))
 647                 return -EFAULT;
 648         if (smi->shmmax > INT_MAX)
 649                 smi->shmmax = INT_MAX;
 650         err  = __put_user(smi->shmmax, &up64->shmmax);
 651         err |= __put_user(smi->shmmin, &up64->shmmin);
 652         err |= __put_user(smi->shmmni, &up64->shmmni);
 653         err |= __put_user(smi->shmseg, &up64->shmseg);
 654         err |= __put_user(smi->shmall, &up64->shmall);
 655         return err;
 656 }
 657
 658 static inline int put_compat_shminfo(struct shminfo64 *smi,
 659                                      struct shminfo __user *up)
 660 {
 661         int err;
 662
 663         if (!access_ok(VERIFY_WRITE, up, sizeof(*up)))
 664                 return -EFAULT;
 665         if (smi->shmmax > INT_MAX)
 666                 smi->shmmax = INT_MAX;
 667         err  = __put_user(smi->shmmax, &up->shmmax);
 668         err |= __put_user(smi->shmmin, &up->shmmin);
 669         err |= __put_user(smi->shmmni, &up->shmmni);
 670         err |= __put_user(smi->shmseg, &up->shmseg);
 671         err |= __put_user(smi->shmall, &up->shmall);
 672         return err;
 673 }
 674
 675 static inline int put_compat_shm_info(struct shm_info __user *ip,
 676                                       struct compat_shm_info __user *uip)
 677 {
 678         int err;
 679         struct shm_info si;
 680
 681         if (!access_ok(VERIFY_WRITE, uip, sizeof(*uip)) ||
 682             copy_from_user(&si, ip, sizeof(si)))
 683                 return -EFAULT;
 684         err  = __put_user(si.used_ids, &uip->used_ids);
 685         err |= __put_user(si.shm_tot, &uip->shm_tot);
 686         err |= __put_user(si.shm_rss, &uip->shm_rss);
 687         err |= __put_user(si.shm_swp, &uip->shm_swp);
 688         err |= __put_user(si.swap_attempts, &uip->swap_attempts);
 689         err |= __put_user(si.swap_successes, &uip->swap_successes);
 690         return err;
 691 }
 692
 693 long compat_sys_shmctl(int first, int second, void __user *uptr)
 694 {
 695         void __user *p;
 696         struct shmid64_ds s64;
 697         struct shminfo64 smi;
 698         int err, err2;
 699         int version = compat_ipc_parse_version(&second);
 700
 701         memset(&s64, 0, sizeof(s64));
 702
 703         switch (second & (~IPC_64)) {
 704         case IPC_RMID:
 705         case SHM_LOCK:
 706         case SHM_UNLOCK:
 707                 err = sys_shmctl(first, second, uptr);
 708                 break;
 709
 710         case IPC_INFO:
 711                 p = compat_alloc_user_space(sizeof(smi));
 712                 err = sys_shmctl(first, second, p);
 713                 if (err < 0)
 714                         break;
 715                 if (copy_from_user(&smi, p, sizeof(smi)))
 716                         err2 = -EFAULT;
 717                 else if (version == IPC_64)
 718                         err2 = put_compat_shminfo64(&smi, uptr);
 719                 else
 720                         err2 = put_compat_shminfo(&smi, uptr);
 721                 if (err2)
 722                         err = -EFAULT;
 723                 break;
 724
 725
 726         case IPC_SET:
 727                 if (version == IPC_64) {
 728                         err = get_compat_shmid64_ds(&s64, uptr);
 729                 } else {
 730                         err = get_compat_shmid_ds(&s64, uptr);
 731                 }
 732                 if (err)
 733                         break;
 734                 p = compat_alloc_user_space(sizeof(s64));
 735                 if (copy_to_user(p, &s64, sizeof(s64)))
 736                         err = -EFAULT;
 737                 else
 738                         err = sys_shmctl(first, second, p);
 739                 break;
 740
 741         case IPC_STAT:
 742         case SHM_STAT:
 743                 p = compat_alloc_user_space(sizeof(s64));
 744                 err = sys_shmctl(first, second, p);
 745                 if (err < 0)
 746                         break;
 747                 if (copy_from_user(&s64, p, sizeof(s64)))
 748                         err2 = -EFAULT;
 749                 else if (version == IPC_64)
 750                         err2 = put_compat_shmid64_ds(&s64, uptr);
 751                 else
 752                         err2 = put_compat_shmid_ds(&s64, uptr);
 753                 if (err2)
 754                         err = -EFAULT;
 755                 break;
 756
 757         case SHM_INFO:
 758                 p = compat_alloc_user_space(sizeof(struct shm_info));
 759                 err = sys_shmctl(first, second, p);
 760                 if (err < 0)
 761                         break;
 762                 err2 = put_compat_shm_info(p, uptr);
 763                 if (err2)
 764                         err = -EFAULT;
 765                 break;
 766
 767         default:
 768                 err = -EINVAL;
 769                 break;
 770         }
 771         return err;
 772 }
 773
 774 long compat_sys_semtimedop(int semid, struct sembuf __user *tsems,
 775                 unsigned nsops, const struct compat_timespec __user *timeout)
 776 {
 777         struct timespec __user *ts64 = NULL;
 778         if (timeout) {
 779                 struct timespec ts;
 780                 ts64 = compat_alloc_user_space(sizeof(*ts64));
 781                 if (get_compat_timespec(&ts, timeout))
 782                         return -EFAULT;
 783                 if (copy_to_user(ts64, &ts, sizeof(ts)))
 784                         return -EFAULT;
 785         }
 786         return sys_semtimedop(semid, tsems, nsops, ts64);
 787 }