cregit-Linux how code gets into the kernel

Release 4.14 arch/x86/math-emu/get_address.c

// SPDX-License-Identifier: GPL-2.0
/*---------------------------------------------------------------------------+
 |  get_address.c                                                            |
 |                                                                           |
 | Get the effective address from an FPU instruction.                        |
 |                                                                           |
 | Copyright (C) 1992,1993,1994,1997                                         |
 |                       W. Metzenthen, 22 Parker St, Ormond, Vic 3163,      |
 |                       Australia.  E-mail   billm@suburbia.net             |
 |                                                                           |
 |                                                                           |
 +---------------------------------------------------------------------------*/

/*---------------------------------------------------------------------------+
 | Note:                                                                     |
 |    The file contains code which accesses user memory.                     |
 |    Emulator static data may change when user memory is accessed, due to   |
 |    other processes using the emulator while swapping is in progress.      |
 +---------------------------------------------------------------------------*/

#include <linux/stddef.h>

#include <linux/uaccess.h>
#include <asm/vm86.h>

#include "fpu_system.h"
#include "exception.h"
#include "fpu_emu.h"


#define FPU_WRITE_BIT 0x10


static int reg_offset[] = {
	offsetof(struct pt_regs, ax),
	offsetof(struct pt_regs, cx),
	offsetof(struct pt_regs, dx),
	offsetof(struct pt_regs, bx),
	offsetof(struct pt_regs, sp),
	offsetof(struct pt_regs, bp),
	offsetof(struct pt_regs, si),
	offsetof(struct pt_regs, di)
};


#define REG_(x) (*(long *)(reg_offset[(x)] + (u_char *)FPU_info->regs))


static int reg_offset_vm86[] = {
	offsetof(struct pt_regs, cs),
	offsetof(struct kernel_vm86_regs, ds),
	offsetof(struct kernel_vm86_regs, es),
	offsetof(struct kernel_vm86_regs, fs),
	offsetof(struct kernel_vm86_regs, gs),
	offsetof(struct pt_regs, ss),
	offsetof(struct kernel_vm86_regs, ds)
};


#define VM86_REG_(x) (*(unsigned short *) \
                (reg_offset_vm86[((unsigned)x)] + (u_char *)FPU_info->regs))


static int reg_offset_pm[] = {
	offsetof(struct pt_regs, cs),
	offsetof(struct pt_regs, ds),
	offsetof(struct pt_regs, es),
	offsetof(struct pt_regs, fs),
	offsetof(struct pt_regs, ds),	/* dummy, not saved on stack */
	offsetof(struct pt_regs, ss),
	offsetof(struct pt_regs, ds)
};


#define PM_REG_(x) (*(unsigned short *) \
                (reg_offset_pm[((unsigned)x)] + (u_char *)FPU_info->regs))

/* Decode the SIB byte. This function assumes mod != 0 */

static int sib(int mod, unsigned long *fpu_eip) { u_char ss, index, base; long offset; RE_ENTRANT_CHECK_OFF; FPU_code_access_ok(1); FPU_get_user(base, (u_char __user *) (*fpu_eip)); /* The SIB byte */ RE_ENTRANT_CHECK_ON; (*fpu_eip)++; ss = base >> 6; index = (base >> 3) & 7; base &= 7; if ((mod == 0) && (base == 5)) offset = 0; /* No base register */ else offset = REG_(base); if (index == 4) { /* No index register */ /* A non-zero ss is illegal */ if (ss) EXCEPTION(EX_Invalid); } else { offset += (REG_(index)) << ss; } if (mod == 1) { /* 8 bit signed displacement */ long displacement; RE_ENTRANT_CHECK_OFF; FPU_code_access_ok(1); FPU_get_user(displacement, (signed char __user *)(*fpu_eip)); offset += displacement; RE_ENTRANT_CHECK_ON; (*fpu_eip)++; } else if (mod == 2 || base == 5) { /* The second condition also has mod==0 */ /* 32 bit displacement */ long displacement; RE_ENTRANT_CHECK_OFF; FPU_code_access_ok(4); FPU_get_user(displacement, (long __user *)(*fpu_eip)); offset += displacement; RE_ENTRANT_CHECK_ON; (*fpu_eip) += 4; } return offset; }

Contributors

PersonTokensPropCommitsCommitProp
Linus Torvalds (pre-git)23197.06%975.00%
Jesper Juhl31.26%18.33%
Al Viro31.26%18.33%
Ingo Molnar10.42%18.33%
Total238100.00%12100.00%


static unsigned long vm86_segment(u_char segment, struct address *addr) { segment--; #ifdef PARANOID if (segment > PREFIX_SS_) { EXCEPTION(EX_INTERNAL | 0x130); math_abort(FPU_info, SIGSEGV); } #endif /* PARANOID */ addr->selector = VM86_REG_(segment); return (unsigned long)VM86_REG_(segment) << 4; }

Contributors

PersonTokensPropCommitsCommitProp
Linus Torvalds (pre-git)6698.51%685.71%
Linus Torvalds11.49%114.29%
Total67100.00%7100.00%

/* This should work for 16 and 32 bit protected mode. */
static long pm_address(u_char FPU_modrm, u_char segment, struct address *addr, long offset) { struct desc_struct descriptor; unsigned long base_address, limit, address, seg_top; segment--; #ifdef PARANOID /* segment is unsigned, so this also detects if segment was 0: */ if (segment > PREFIX_SS_) { EXCEPTION(EX_INTERNAL | 0x132); math_abort(FPU_info, SIGSEGV); } #endif /* PARANOID */ switch (segment) { case PREFIX_GS_ - 1: /* user gs handling can be lazy, use special accessors */ addr->selector = get_user_gs(FPU_info->regs); break; default: addr->selector = PM_REG_(segment); } descriptor = FPU_get_ldt_descriptor(addr->selector); base_address = seg_get_base(&descriptor); address = base_address + offset; limit = seg_get_limit(&descriptor) + 1; limit *= seg_get_granularity(&descriptor); limit += base_address - 1; if (limit < base_address) limit = 0xffffffff; if (seg_expands_down(&descriptor)) { if (descriptor.g) { seg_top = 0xffffffff; } else { seg_top = base_address + (1 << 20); if (seg_top < base_address) seg_top = 0xffffffff; } access_limit = (address <= limit) || (address >= seg_top) ? 0 : ((seg_top - address) >= 255 ? 255 : seg_top - address); } else { access_limit = (address > limit) || (address < base_address) ? 0 : ((limit - address) >= 254 ? 255 : limit - address + 1); } if (seg_execute_only(&descriptor) || (!seg_writable(&descriptor) && (FPU_modrm & FPU_WRITE_BIT))) { access_limit = 0; } return address; }

Contributors

PersonTokensPropCommitsCommitProp
Linus Torvalds (pre-git)26788.12%753.85%
Thomas Gleixner237.59%17.69%
Tejun Heo72.31%17.69%
Andrew Lutomirski30.99%17.69%
Linus Torvalds10.33%17.69%
Zachary Amsden10.33%17.69%
Juergen Gross10.33%17.69%
Total303100.00%13100.00%

/* MOD R/M byte: MOD == 3 has a special use for the FPU SIB byte used iff R/M = 100b 7 6 5 4 3 2 1 0 ..... ......... ......... MOD OPCODE(2) R/M SIB byte 7 6 5 4 3 2 1 0 ..... ......... ......... SS INDEX BASE */
void __user *FPU_get_address(u_char FPU_modrm, unsigned long *fpu_eip, struct address *addr, fpu_addr_modes addr_modes) { u_char mod; unsigned rm = FPU_modrm & 7; long *cpu_reg_ptr; int address = 0; /* Initialized just to stop compiler warnings. */ /* Memory accessed via the cs selector is write protected in `non-segmented' 32 bit protected mode. */ if (!addr_modes.default_mode && (FPU_modrm & FPU_WRITE_BIT) && (addr_modes.override.segment == PREFIX_CS_)) { math_abort(FPU_info, SIGSEGV); } addr->selector = FPU_DS; /* Default, for 32 bit non-segmented mode. */ mod = (FPU_modrm >> 6) & 3; if (rm == 4 && mod != 3) { address = sib(mod, fpu_eip); } else { cpu_reg_ptr = &REG_(rm); switch (mod) { case 0: if (rm == 5) { /* Special case: disp32 */ RE_ENTRANT_CHECK_OFF; FPU_code_access_ok(4); FPU_get_user(address, (unsigned long __user *)(*fpu_eip)); (*fpu_eip) += 4; RE_ENTRANT_CHECK_ON; addr->offset = address; return (void __user *)address; } else { address = *cpu_reg_ptr; /* Just return the contents of the cpu register */ addr->offset = address; return (void __user *)address; } case 1: /* 8 bit signed displacement */ RE_ENTRANT_CHECK_OFF; FPU_code_access_ok(1); FPU_get_user(address, (signed char __user *)(*fpu_eip)); RE_ENTRANT_CHECK_ON; (*fpu_eip)++; break; case 2: /* 32 bit displacement */ RE_ENTRANT_CHECK_OFF; FPU_code_access_ok(4); FPU_get_user(address, (long __user *)(*fpu_eip)); (*fpu_eip) += 4; RE_ENTRANT_CHECK_ON; break; case 3: /* Not legal for the FPU */ EXCEPTION(EX_Invalid); } address += *cpu_reg_ptr; } addr->offset = address; switch (addr_modes.default_mode) { case 0: break; case VM86: address += vm86_segment(addr_modes.override.segment, addr); break; case PM16: case SEG32: address = pm_address(FPU_modrm, addr_modes.override.segment, addr, address); break; default: EXCEPTION(EX_INTERNAL | 0x133); } return (void __user *)address; }

Contributors

PersonTokensPropCommitsCommitProp
Linus Torvalds (pre-git)36196.78%1280.00%
Al Viro71.88%16.67%
Jesper Juhl30.80%16.67%
Ingo Molnar20.54%16.67%
Total373100.00%15100.00%


void __user *FPU_get_address_16(u_char FPU_modrm, unsigned long *fpu_eip, struct address *addr, fpu_addr_modes addr_modes) { u_char mod; unsigned rm = FPU_modrm & 7; int address = 0; /* Default used for mod == 0 */ /* Memory accessed via the cs selector is write protected in `non-segmented' 32 bit protected mode. */ if (!addr_modes.default_mode && (FPU_modrm & FPU_WRITE_BIT) && (addr_modes.override.segment == PREFIX_CS_)) { math_abort(FPU_info, SIGSEGV); } addr->selector = FPU_DS; /* Default, for 32 bit non-segmented mode. */ mod = (FPU_modrm >> 6) & 3; switch (mod) { case 0: if (rm == 6) { /* Special case: disp16 */ RE_ENTRANT_CHECK_OFF; FPU_code_access_ok(2); FPU_get_user(address, (unsigned short __user *)(*fpu_eip)); (*fpu_eip) += 2; RE_ENTRANT_CHECK_ON; goto add_segment; } break; case 1: /* 8 bit signed displacement */ RE_ENTRANT_CHECK_OFF; FPU_code_access_ok(1); FPU_get_user(address, (signed char __user *)(*fpu_eip)); RE_ENTRANT_CHECK_ON; (*fpu_eip)++; break; case 2: /* 16 bit displacement */ RE_ENTRANT_CHECK_OFF; FPU_code_access_ok(2); FPU_get_user(address, (unsigned short __user *)(*fpu_eip)); (*fpu_eip) += 2; RE_ENTRANT_CHECK_ON; break; case 3: /* Not legal for the FPU */ EXCEPTION(EX_Invalid); break; } switch (rm) { case 0: address += FPU_info->regs->bx + FPU_info->regs->si; break; case 1: address += FPU_info->regs->bx + FPU_info->regs->di; break; case 2: address += FPU_info->regs->bp + FPU_info->regs->si; if (addr_modes.override.segment == PREFIX_DEFAULT) addr_modes.override.segment = PREFIX_SS_; break; case 3: address += FPU_info->regs->bp + FPU_info->regs->di; if (addr_modes.override.segment == PREFIX_DEFAULT) addr_modes.override.segment = PREFIX_SS_; break; case 4: address += FPU_info->regs->si; break; case 5: address += FPU_info->regs->di; break; case 6: address += FPU_info->regs->bp; if (addr_modes.override.segment == PREFIX_DEFAULT) addr_modes.override.segment = PREFIX_SS_; break; case 7: address += FPU_info->regs->bx; break; } add_segment: address &= 0xffff; addr->offset = address; switch (addr_modes.default_mode) { case 0: break; case VM86: address += vm86_segment(addr_modes.override.segment, addr); break; case PM16: case SEG32: address = pm_address(FPU_modrm, addr_modes.override.segment, addr, address); break; default: EXCEPTION(EX_INTERNAL | 0x131); } return (void __user *)address; }

Contributors

PersonTokensPropCommitsCommitProp
Linus Torvalds (pre-git)44290.76%1066.67%
Tejun Heo367.39%213.33%
Al Viro51.03%16.67%
Jesper Juhl30.62%16.67%
Ingo Molnar10.21%16.67%
Total487100.00%15100.00%


Overall Contributors

PersonTokensPropCommitsCommitProp
Linus Torvalds (pre-git)155790.95%1754.84%
Tejun Heo915.32%39.68%
Thomas Gleixner231.34%13.23%
Al Viro150.88%13.23%
Jesper Juhl90.53%13.23%
Ingo Molnar50.29%13.23%
Andrew Lutomirski30.18%13.23%
Linus Torvalds30.18%26.45%
Brian Gerst30.18%13.23%
Zachary Amsden10.06%13.23%
Juergen Gross10.06%13.23%
Greg Kroah-Hartman10.06%13.23%
Total1712100.00%31100.00%
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.
Created with cregit.