arch/s390/kernel/ptrace.c

   1 /*
   2  *  Ptrace user space interface.
   3  *
   4  *    Copyright IBM Corp. 1999, 2010
   5  *    Author(s): Denis Joseph Barrow
   6  *               Martin Schwidefsky (schwidefsky@de.ibm.com)
   7  */
   8
   9 #include <linux/kernel.h>
  10 #include <linux/sched.h>
  11 #include <linux/mm.h>
  12 #include <linux/smp.h>
  13 #include <linux/errno.h>
  14 #include <linux/ptrace.h>
  15 #include <linux/user.h>
  16 #include <linux/security.h>
  17 #include <linux/audit.h>
  18 #include <linux/signal.h>
  19 #include <linux/elf.h>
  20 #include <linux/regset.h>
  21 #include <linux/tracehook.h>
  22 #include <linux/seccomp.h>
  23 #include <linux/compat.h>
  24 #include <trace/syscall.h>
  25 #include <asm/segment.h>
  26 #include <asm/page.h>
  27 #include <asm/pgtable.h>
  28 #include <asm/pgalloc.h>
  29 #include <asm/uaccess.h>
  30 #include <asm/unistd.h>
  31 #include <asm/switch_to.h>
  32 #include "entry.h"
  33
  34 #ifdef CONFIG_COMPAT
  35 #include "compat_ptrace.h"
  36 #endif
  37
  38 #define CREATE_TRACE_POINTS
  39 #include <trace/events/syscalls.h>
  40
  41 enum s390_regset {
  42         REGSET_GENERAL,
  43         REGSET_FP,
  44         REGSET_LAST_BREAK,
  45         REGSET_SYSTEM_CALL,
  46         REGSET_GENERAL_EXTENDED,
  47 };
  48
  49 void update_per_regs(struct task_struct *task)
  50 {
  51         struct pt_regs *regs = task_pt_regs(task);
  52         struct thread_struct *thread = &task->thread;
  53         struct per_regs old, new;
  54
  55         /* Copy user specified PER registers */
  56         new.control = thread->per_user.control;
  57         new.start = thread->per_user.start;
  58         new.end = thread->per_user.end;
  59
  60         /* merge TIF_SINGLE_STEP into user specified PER registers. */
  61         if (test_tsk_thread_flag(task, TIF_SINGLE_STEP)) {
  62                 new.control |= PER_EVENT_IFETCH;
  63                 new.start = 0;
  64                 new.end = PSW_ADDR_INSN;
  65         }
  66
  67         /* Take care of the PER enablement bit in the PSW. */
  68         if (!(new.control & PER_EVENT_MASK)) {
  69                 regs->psw.mask &= ~PSW_MASK_PER;
  70                 return;
  71         }
  72         regs->psw.mask |= PSW_MASK_PER;
  73         __ctl_store(old, 9, 11);
  74         if (memcmp(&new, &old, sizeof(struct per_regs)) != 0)
  75                 __ctl_load(new, 9, 11);
  76 }
  77
  78 void user_enable_single_step(struct task_struct *task)
  79 {
  80         set_tsk_thread_flag(task, TIF_SINGLE_STEP);
  81         if (task == current)
  82                 update_per_regs(task);
  83 }
  84
  85 void user_disable_single_step(struct task_struct *task)
  86 {
  87         clear_tsk_thread_flag(task, TIF_SINGLE_STEP);
  88         if (task == current)
  89                 update_per_regs(task);
  90 }
  91
  92 /*
  93  * Called by kernel/ptrace.c when detaching..
  94  *
  95  * Clear all debugging related fields.
  96  */
  97 void ptrace_disable(struct task_struct *task)
  98 {
  99         memset(&task->thread.per_user, 0, sizeof(task->thread.per_user));
 100         memset(&task->thread.per_event, 0, sizeof(task->thread.per_event));
 101         clear_tsk_thread_flag(task, TIF_SINGLE_STEP);
 102         clear_tsk_thread_flag(task, TIF_PER_TRAP);
 103 }
 104
 105 #ifndef CONFIG_64BIT
 106 # define __ADDR_MASK 3
 107 #else
 108 # define __ADDR_MASK 7
 109 #endif
 110
 111 static inline unsigned long __peek_user_per(struct task_struct *child,
 112                                             addr_t addr)
 113 {
 114         struct per_struct_kernel *dummy = NULL;
 115
 116         if (addr == (addr_t) &dummy->cr9)
 117                 /* Control bits of the active per set. */
 118                 return test_thread_flag(TIF_SINGLE_STEP) ?
 119                         PER_EVENT_IFETCH : child->thread.per_user.control;
 120         else if (addr == (addr_t) &dummy->cr10)
 121                 /* Start address of the active per set. */
 122                 return test_thread_flag(TIF_SINGLE_STEP) ?
 123                         0 : child->thread.per_user.start;
 124         else if (addr == (addr_t) &dummy->cr11)
 125                 /* End address of the active per set. */
 126                 return test_thread_flag(TIF_SINGLE_STEP) ?
 127                         PSW_ADDR_INSN : child->thread.per_user.end;
 128         else if (addr == (addr_t) &dummy->bits)
 129                 /* Single-step bit. */
 130                 return test_thread_flag(TIF_SINGLE_STEP) ?
 131                         (1UL << (BITS_PER_LONG - 1)) : 0;
 132         else if (addr == (addr_t) &dummy->starting_addr)
 133                 /* Start address of the user specified per set. */
 134                 return child->thread.per_user.start;
 135         else if (addr == (addr_t) &dummy->ending_addr)
 136                 /* End address of the user specified per set. */
 137                 return child->thread.per_user.end;
 138         else if (addr == (addr_t) &dummy->perc_atmid)
 139                 /* PER code, ATMID and AI of the last PER trap */
 140                 return (unsigned long)
 141                         child->thread.per_event.cause << (BITS_PER_LONG - 16);
 142         else if (addr == (addr_t) &dummy->address)
 143                 /* Address of the last PER trap */
 144                 return child->thread.per_event.address;
 145         else if (addr == (addr_t) &dummy->access_id)
 146                 /* Access id of the last PER trap */
 147                 return (unsigned long)
 148                         child->thread.per_event.paid << (BITS_PER_LONG - 8);
 149         return 0;
 150 }
 151
 152 /*
 153  * Read the word at offset addr from the user area of a process. The
 154  * trouble here is that the information is littered over different
 155  * locations. The process registers are found on the kernel stack,
 156  * the floating point stuff and the trace settings are stored in
 157  * the task structure. In addition the different structures in
 158  * struct user contain pad bytes that should be read as zeroes.
 159  * Lovely...
 160  */
 161 static unsigned long __peek_user(struct task_struct *child, addr_t addr)
 162 {
 163         struct user *dummy = NULL;
 164         addr_t offset, tmp;
 165
 166         if (addr < (addr_t) &dummy->regs.acrs) {
 167                 /*
 168                  * psw and gprs are stored on the stack
 169                  */
 170                 tmp = *(addr_t *)((addr_t) &task_pt_regs(child)->psw + addr);
 171                 if (addr == (addr_t) &dummy->regs.psw.mask)
 172                         /* Return a clean psw mask. */
 173                         tmp = psw_user_bits | (tmp & PSW_MASK_USER);
 174
 175         } else if (addr < (addr_t) &dummy->regs.orig_gpr2) {
 176                 /*
 177                  * access registers are stored in the thread structure
 178                  */
 179                 offset = addr - (addr_t) &dummy->regs.acrs;
 180 #ifdef CONFIG_64BIT
 181                 /*
 182                  * Very special case: old & broken 64 bit gdb reading
 183                  * from acrs[15]. Result is a 64 bit value. Read the
 184                  * 32 bit acrs[15] value and shift it by 32. Sick...
 185                  */
 186                 if (addr == (addr_t) &dummy->regs.acrs[15])
 187                         tmp = ((unsigned long) child->thread.acrs[15]) << 32;
 188                 else
 189 #endif
 190                 tmp = *(addr_t *)((addr_t) &child->thread.acrs + offset);
 191
 192         } else if (addr == (addr_t) &dummy->regs.orig_gpr2) {
 193                 /*
 194                  * orig_gpr2 is stored on the kernel stack
 195                  */
 196                 tmp = (addr_t) task_pt_regs(child)->orig_gpr2;
 197
 198         } else if (addr < (addr_t) &dummy->regs.fp_regs) {
 199                 /*
 200                  * prevent reads of padding hole between
 201                  * orig_gpr2 and fp_regs on s390.
 202                  */
 203                 tmp = 0;
 204
 205         } else if (addr < (addr_t) (&dummy->regs.fp_regs + 1)) {
 206                 /*
 207                  * floating point regs. are stored in the thread structure
 208                  */
 209                 offset = addr - (addr_t) &dummy->regs.fp_regs;
 210                 tmp = *(addr_t *)((addr_t) &child->thread.fp_regs + offset);
 211                 if (addr == (addr_t) &dummy->regs.fp_regs.fpc)
 212                         tmp &= (unsigned long) FPC_VALID_MASK
 213                                 << (BITS_PER_LONG - 32);
 214
 215         } else if (addr < (addr_t) (&dummy->regs.per_info + 1)) {
 216                 /*
 217                  * Handle access to the per_info structure.
 218                  */
 219                 addr -= (addr_t) &dummy->regs.per_info;
 220                 tmp = __peek_user_per(child, addr);
 221
 222         } else
 223                 tmp = 0;
 224
 225         return tmp;
 226 }
 227
 228 static int
 229 peek_user(struct task_struct *child, addr_t addr, addr_t data)
 230 {
 231         addr_t tmp, mask;
 232
 233         /*
 234          * Stupid gdb peeks/pokes the access registers in 64 bit with
 235          * an alignment of 4. Programmers from hell...
 236          */
 237         mask = __ADDR_MASK;
 238 #ifdef CONFIG_64BIT
 239         if (addr >= (addr_t) &((struct user *) NULL)->regs.acrs &&
 240             addr < (addr_t) &((struct user *) NULL)->regs.orig_gpr2)
 241                 mask = 3;
 242 #endif
 243         if ((addr & mask) || addr > sizeof(struct user) - __ADDR_MASK)
 244                 return -EIO;
 245
 246         tmp = __peek_user(child, addr);
 247         return put_user(tmp, (addr_t __user *) data);
 248 }
 249
 250 static inline void __poke_user_per(struct task_struct *child,
 251                                    addr_t addr, addr_t data)
 252 {
 253         struct per_struct_kernel *dummy = NULL;
 254
 255         /*
 256          * There are only three fields in the per_info struct that the
 257          * debugger user can write to.
 258          * 1) cr9: the debugger wants to set a new PER event mask
 259          * 2) starting_addr: the debugger wants to set a new starting
 260          *    address to use with the PER event mask.
 261          * 3) ending_addr: the debugger wants to set a new ending
 262          *    address to use with the PER event mask.
 263          * The user specified PER event mask and the start and end
 264          * addresses are used only if single stepping is not in effect.
 265          * Writes to any other field in per_info are ignored.
 266          */
 267         if (addr == (addr_t) &dummy->cr9)
 268                 /* PER event mask of the user specified per set. */
 269                 child->thread.per_user.control =
 270                         data & (PER_EVENT_MASK | PER_CONTROL_MASK);
 271         else if (addr == (addr_t) &dummy->starting_addr)
 272                 /* Starting address of the user specified per set. */
 273                 child->thread.per_user.start = data;
 274         else if (addr == (addr_t) &dummy->ending_addr)
 275                 /* Ending address of the user specified per set. */
 276                 child->thread.per_user.end = data;
 277 }
 278
 279 /*
 280  * Write a word to the user area of a process at location addr. This
 281  * operation does have an additional problem compared to peek_user.
 282  * Stores to the program status word and on the floating point
 283  * control register needs to get checked for validity.
 284  */
 285 static int __poke_user(struct task_struct *child, addr_t addr, addr_t data)
 286 {
 287         struct user *dummy = NULL;
 288         addr_t offset;
 289
 290         if (addr < (addr_t) &dummy->regs.acrs) {
 291                 /*
 292                  * psw and gprs are stored on the stack
 293                  */
 294                 if (addr == (addr_t) &dummy->regs.psw.mask &&
 295                     ((data & ~PSW_MASK_USER) != psw_user_bits ||
 296                      ((data & PSW_MASK_EA) && !(data & PSW_MASK_BA))))
 297                         /* Invalid psw mask. */
 298                         return -EINVAL;
 299                 *(addr_t *)((addr_t) &task_pt_regs(child)->psw + addr) = data;
 300
 301         } else if (addr < (addr_t) (&dummy->regs.orig_gpr2)) {
 302                 /*
 303                  * access registers are stored in the thread structure
 304                  */
 305                 offset = addr - (addr_t) &dummy->regs.acrs;
 306 #ifdef CONFIG_64BIT
 307                 /*
 308                  * Very special case: old & broken 64 bit gdb writing
 309                  * to acrs[15] with a 64 bit value. Ignore the lower
 310                  * half of the value and write the upper 32 bit to
 311                  * acrs[15]. Sick...
 312                  */
 313                 if (addr == (addr_t) &dummy->regs.acrs[15])
 314                         child->thread.acrs[15] = (unsigned int) (data >> 32);
 315                 else
 316 #endif
 317                 *(addr_t *)((addr_t) &child->thread.acrs + offset) = data;
 318
 319         } else if (addr == (addr_t) &dummy->regs.orig_gpr2) {
 320                 /*
 321                  * orig_gpr2 is stored on the kernel stack
 322                  */
 323                 task_pt_regs(child)->orig_gpr2 = data;
 324
 325         } else if (addr < (addr_t) &dummy->regs.fp_regs) {
 326                 /*
 327                  * prevent writes of padding hole between
 328                  * orig_gpr2 and fp_regs on s390.
 329                  */
 330                 return 0;
 331
 332         } else if (addr < (addr_t) (&dummy->regs.fp_regs + 1)) {
 333                 /*
 334                  * floating point regs. are stored in the thread structure
 335                  */
 336                 if (addr == (addr_t) &dummy->regs.fp_regs.fpc &&
 337                     (data & ~((unsigned long) FPC_VALID_MASK
 338                               << (BITS_PER_LONG - 32))) != 0)
 339                         return -EINVAL;
 340                 offset = addr - (addr_t) &dummy->regs.fp_regs;
 341                 *(addr_t *)((addr_t) &child->thread.fp_regs + offset) = data;
 342
 343         } else if (addr < (addr_t) (&dummy->regs.per_info + 1)) {
 344                 /*
 345                  * Handle access to the per_info structure.
 346                  */
 347                 addr -= (addr_t) &dummy->regs.per_info;
 348                 __poke_user_per(child, addr, data);
 349
 350         }
 351
 352         return 0;
 353 }
 354
 355 static int poke_user(struct task_struct *child, addr_t addr, addr_t data)
 356 {
 357         addr_t mask;
 358
 359         /*
 360          * Stupid gdb peeks/pokes the access registers in 64 bit with
 361          * an alignment of 4. Programmers from hell indeed...
 362          */
 363         mask = __ADDR_MASK;
 364 #ifdef CONFIG_64BIT
 365         if (addr >= (addr_t) &((struct user *) NULL)->regs.acrs &&
 366             addr < (addr_t) &((struct user *) NULL)->regs.orig_gpr2)
 367                 mask = 3;
 368 #endif
 369         if ((addr & mask) || addr > sizeof(struct user) - __ADDR_MASK)
 370                 return -EIO;
 371
 372         return __poke_user(child, addr, data);
 373 }
 374
 375 long arch_ptrace(struct task_struct *child, long request,
 376                  unsigned long addr, unsigned long data)
 377 {
 378         ptrace_area parea;
 379         int copied, ret;
 380
 381         switch (request) {
 382         case PTRACE_PEEKUSR:
 383                 /* read the word at location addr in the USER area. */
 384                 return peek_user(child, addr, data);
 385
 386         case PTRACE_POKEUSR:
 387                 /* write the word at location addr in the USER area */
 388                 return poke_user(child, addr, data);
 389
 390         case PTRACE_PEEKUSR_AREA:
 391         case PTRACE_POKEUSR_AREA:
 392                 if (copy_from_user(&parea, (void __force __user *) addr,
 393                                                         sizeof(parea)))
 394                         return -EFAULT;
 395                 addr = parea.kernel_addr;
 396                 data = parea.process_addr;
 397                 copied = 0;
 398                 while (copied < parea.len) {
 399                         if (request == PTRACE_PEEKUSR_AREA)
 400                                 ret = peek_user(child, addr, data);
 401                         else {
 402                                 addr_t utmp;
 403                                 if (get_user(utmp,
 404                                              (addr_t __force __user *) data))
 405                                         return -EFAULT;
 406                                 ret = poke_user(child, addr, utmp);
 407                         }
 408                         if (ret)
 409                                 return ret;
 410                         addr += sizeof(unsigned long);
 411                         data += sizeof(unsigned long);
 412                         copied += sizeof(unsigned long);
 413                 }
 414                 return 0;
 415         case PTRACE_GET_LAST_BREAK:
 416                 put_user(task_thread_info(child)->last_break,
 417                          (unsigned long __user *) data);
 418                 return 0;
 419         default:
 420                 /* Removing high order bit from addr (only for 31 bit). */
 421                 addr &= PSW_ADDR_INSN;
 422                 return ptrace_request(child, request, addr, data);
 423         }
 424 }
 425
 426 #ifdef CONFIG_COMPAT
 427 /*
 428  * Now the fun part starts... a 31 bit program running in the
 429  * 31 bit emulation tracing another program. PTRACE_PEEKTEXT,
 430  * PTRACE_PEEKDATA, PTRACE_POKETEXT and PTRACE_POKEDATA are easy
 431  * to handle, the difference to the 64 bit versions of the requests
 432  * is that the access is done in multiples of 4 byte instead of
 433  * 8 bytes (sizeof(unsigned long) on 31/64 bit).
 434  * The ugly part are PTRACE_PEEKUSR, PTRACE_PEEKUSR_AREA,
 435  * PTRACE_POKEUSR and PTRACE_POKEUSR_AREA. If the traced program
 436  * is a 31 bit program too, the content of struct user can be
 437  * emulated. A 31 bit program peeking into the struct user of
 438  * a 64 bit program is a no-no.
 439  */
 440
 441 /*
 442  * Same as peek_user_per but for a 31 bit program.
 443  */
 444 static inline __u32 __peek_user_per_compat(struct task_struct *child,
 445                                            addr_t addr)
 446 {
 447         struct compat_per_struct_kernel *dummy32 = NULL;
 448
 449         if (addr == (addr_t) &dummy32->cr9)
 450                 /* Control bits of the active per set. */
 451                 return (__u32) test_thread_flag(TIF_SINGLE_STEP) ?
 452                         PER_EVENT_IFETCH : child->thread.per_user.control;
 453         else if (addr == (addr_t) &dummy32->cr10)
 454                 /* Start address of the active per set. */
 455                 return (__u32) test_thread_flag(TIF_SINGLE_STEP) ?
 456                         0 : child->thread.per_user.start;
 457         else if (addr == (addr_t) &dummy32->cr11)
 458                 /* End address of the active per set. */
 459                 return test_thread_flag(TIF_SINGLE_STEP) ?
 460                         PSW32_ADDR_INSN : child->thread.per_user.end;
 461         else if (addr == (addr_t) &dummy32->bits)
 462                 /* Single-step bit. */
 463                 return (__u32) test_thread_flag(TIF_SINGLE_STEP) ?
 464                         0x80000000 : 0;
 465         else if (addr == (addr_t) &dummy32->starting_addr)
 466                 /* Start address of the user specified per set. */
 467                 return (__u32) child->thread.per_user.start;
 468         else if (addr == (addr_t) &dummy32->ending_addr)
 469                 /* End address of the user specified per set. */
 470                 return (__u32) child->thread.per_user.end;
 471         else if (addr == (addr_t) &dummy32->perc_atmid)
 472                 /* PER code, ATMID and AI of the last PER trap */
 473                 return (__u32) child->thread.per_event.cause << 16;
 474         else if (addr == (addr_t) &dummy32->address)
 475                 /* Address of the last PER trap */
 476                 return (__u32) child->thread.per_event.address;
 477         else if (addr == (addr_t) &dummy32->access_id)
 478                 /* Access id of the last PER trap */
 479                 return (__u32) child->thread.per_event.paid << 24;
 480         return 0;
 481 }
 482
 483 /*
 484  * Same as peek_user but for a 31 bit program.
 485  */
 486 static u32 __peek_user_compat(struct task_struct *child, addr_t addr)
 487 {
 488         struct compat_user *dummy32 = NULL;
 489         addr_t offset;
 490         __u32 tmp;
 491
 492         if (addr < (addr_t) &dummy32->regs.acrs) {
 493                 struct pt_regs *regs = task_pt_regs(child);
 494                 /*
 495                  * psw and gprs are stored on the stack
 496                  */
 497                 if (addr == (addr_t) &dummy32->regs.psw.mask) {
 498                         /* Fake a 31 bit psw mask. */
 499                         tmp = (__u32)(regs->psw.mask >> 32);
 500                         tmp = psw32_user_bits | (tmp & PSW32_MASK_USER);
 501                 } else if (addr == (addr_t) &dummy32->regs.psw.addr) {
 502                         /* Fake a 31 bit psw address. */
 503                         tmp = (__u32) regs->psw.addr |
 504                                 (__u32)(regs->psw.mask & PSW_MASK_BA);
 505                 } else {
 506                         /* gpr 0-15 */
 507                         tmp = *(__u32 *)((addr_t) &regs->psw + addr*2 + 4);
 508                 }
 509         } else if (addr < (addr_t) (&dummy32->regs.orig_gpr2)) {
 510                 /*
 511                  * access registers are stored in the thread structure
 512                  */
 513                 offset = addr - (addr_t) &dummy32->regs.acrs;
 514                 tmp = *(__u32*)((addr_t) &child->thread.acrs + offset);
 515
 516         } else if (addr == (addr_t) (&dummy32->regs.orig_gpr2)) {
 517                 /*
 518                  * orig_gpr2 is stored on the kernel stack
 519                  */
 520                 tmp = *(__u32*)((addr_t) &task_pt_regs(child)->orig_gpr2 + 4);
 521
 522         } else if (addr < (addr_t) &dummy32->regs.fp_regs) {
 523                 /*
 524                  * prevent reads of padding hole between
 525                  * orig_gpr2 and fp_regs on s390.
 526                  */
 527                 tmp = 0;
 528
 529         } else if (addr < (addr_t) (&dummy32->regs.fp_regs + 1)) {
 530                 /*
 531                  * floating point regs. are stored in the thread structure
 532                  */
 533                 offset = addr - (addr_t) &dummy32->regs.fp_regs;
 534                 tmp = *(__u32 *)((addr_t) &child->thread.fp_regs + offset);
 535
 536         } else if (addr < (addr_t) (&dummy32->regs.per_info + 1)) {
 537                 /*
 538                  * Handle access to the per_info structure.
 539                  */
 540                 addr -= (addr_t) &dummy32->regs.per_info;
 541                 tmp = __peek_user_per_compat(child, addr);
 542
 543         } else
 544                 tmp = 0;
 545
 546         return tmp;
 547 }
 548
 549 static int peek_user_compat(struct task_struct *child,
 550                             addr_t addr, addr_t data)
 551 {
 552         __u32 tmp;
 553
 554         if (!is_compat_task() || (addr & 3) || addr > sizeof(struct user) - 3)
 555                 return -EIO;
 556
 557         tmp = __peek_user_compat(child, addr);
 558         return put_user(tmp, (__u32 __user *) data);
 559 }
 560
 561 /*
 562  * Same as poke_user_per but for a 31 bit program.
 563  */
 564 static inline void __poke_user_per_compat(struct task_struct *child,
 565                                           addr_t addr, __u32 data)
 566 {
 567         struct compat_per_struct_kernel *dummy32 = NULL;
 568
 569         if (addr == (addr_t) &dummy32->cr9)
 570                 /* PER event mask of the user specified per set. */
 571                 child->thread.per_user.control =
 572                         data & (PER_EVENT_MASK | PER_CONTROL_MASK);
 573         else if (addr == (addr_t) &dummy32->starting_addr)
 574                 /* Starting address of the user specified per set. */
 575                 child->thread.per_user.start = data;
 576         else if (addr == (addr_t) &dummy32->ending_addr)
 577                 /* Ending address of the user specified per set. */
 578                 child->thread.per_user.end = data;
 579 }
 580
 581 /*
 582  * Same as poke_user but for a 31 bit program.
 583  */
 584 static int __poke_user_compat(struct task_struct *child,
 585                               addr_t addr, addr_t data)
 586 {
 587         struct compat_user *dummy32 = NULL;
 588         __u32 tmp = (__u32) data;
 589         addr_t offset;
 590
 591         if (addr < (addr_t) &dummy32->regs.acrs) {
 592                 struct pt_regs *regs = task_pt_regs(child);
 593                 /*
 594                  * psw, gprs, acrs and orig_gpr2 are stored on the stack
 595                  */
 596                 if (addr == (addr_t) &dummy32->regs.psw.mask) {
 597                         /* Build a 64 bit psw mask from 31 bit mask. */
 598                         if ((tmp & ~PSW32_MASK_USER) != psw32_user_bits)
 599                                 /* Invalid psw mask. */
 600                                 return -EINVAL;
 601                         regs->psw.mask = (regs->psw.mask & ~PSW_MASK_USER) |
 602                                 (regs->psw.mask & PSW_MASK_BA) |
 603                                 (__u64)(tmp & PSW32_MASK_USER) << 32;
 604                 } else if (addr == (addr_t) &dummy32->regs.psw.addr) {
 605                         /* Build a 64 bit psw address from 31 bit address. */
 606                         regs->psw.addr = (__u64) tmp & PSW32_ADDR_INSN;
 607                         /* Transfer 31 bit amode bit to psw mask. */
 608                         regs->psw.mask = (regs->psw.mask & ~PSW_MASK_BA) |
 609                                 (__u64)(tmp & PSW32_ADDR_AMODE);
 610                 } else {
 611                         /* gpr 0-15 */
 612                         *(__u32*)((addr_t) &regs->psw + addr*2 + 4) = tmp;
 613                 }
 614         } else if (addr < (addr_t) (&dummy32->regs.orig_gpr2)) {
 615                 /*
 616                  * access registers are stored in the thread structure
 617                  */
 618                 offset = addr - (addr_t) &dummy32->regs.acrs;
 619                 *(__u32*)((addr_t) &child->thread.acrs + offset) = tmp;
 620
 621         } else if (addr == (addr_t) (&dummy32->regs.orig_gpr2)) {
 622                 /*
 623                  * orig_gpr2 is stored on the kernel stack
 624                  */
 625                 *(__u32*)((addr_t) &task_pt_regs(child)->orig_gpr2 + 4) = tmp;
 626
 627         } else if (addr < (addr_t) &dummy32->regs.fp_regs) {
 628                 /*
 629                  * prevent writess of padding hole between
 630                  * orig_gpr2 and fp_regs on s390.
 631                  */
 632                 return 0;
 633
 634         } else if (addr < (addr_t) (&dummy32->regs.fp_regs + 1)) {
 635                 /*
 636                  * floating point regs. are stored in the thread structure
 637                  */
 638                 if (addr == (addr_t) &dummy32->regs.fp_regs.fpc &&
 639                     (tmp & ~FPC_VALID_MASK) != 0)
 640                         /* Invalid floating point control. */
 641                         return -EINVAL;
 642                 offset = addr - (addr_t) &dummy32->regs.fp_regs;
 643                 *(__u32 *)((addr_t) &child->thread.fp_regs + offset) = tmp;
 644
 645         } else if (addr < (addr_t) (&dummy32->regs.per_info + 1)) {
 646                 /*
 647                  * Handle access to the per_info structure.
 648                  */
 649                 addr -= (addr_t) &dummy32->regs.per_info;
 650                 __poke_user_per_compat(child, addr, data);
 651         }
 652
 653         return 0;
 654 }
 655
 656 static int poke_user_compat(struct task_struct *child,
 657                             addr_t addr, addr_t data)
 658 {
 659         if (!is_compat_task() || (addr & 3) ||
 660             addr > sizeof(struct compat_user) - 3)
 661                 return -EIO;
 662
 663         return __poke_user_compat(child, addr, data);
 664 }
 665
 666 long compat_arch_ptrace(struct task_struct *child, compat_long_t request,
 667                         compat_ulong_t caddr, compat_ulong_t cdata)
 668 {
 669         unsigned long addr = caddr;
 670         unsigned long data = cdata;
 671         compat_ptrace_area parea;
 672         int copied, ret;
 673
 674         switch (request) {
 675         case PTRACE_PEEKUSR:
 676                 /* read the word at location addr in the USER area. */
 677                 return peek_user_compat(child, addr, data);
 678
 679         case PTRACE_POKEUSR:
 680                 /* write the word at location addr in the USER area */
 681                 return poke_user_compat(child, addr, data);
 682
 683         case PTRACE_PEEKUSR_AREA:
 684         case PTRACE_POKEUSR_AREA:
 685                 if (copy_from_user(&parea, (void __force __user *) addr,
 686                                                         sizeof(parea)))
 687                         return -EFAULT;
 688                 addr = parea.kernel_addr;
 689                 data = parea.process_addr;
 690                 copied = 0;
 691                 while (copied < parea.len) {
 692                         if (request == PTRACE_PEEKUSR_AREA)
 693                                 ret = peek_user_compat(child, addr, data);
 694                         else {
 695                                 __u32 utmp;
 696                                 if (get_user(utmp,
 697                                              (__u32 __force __user *) data))
 698                                         return -EFAULT;
 699                                 ret = poke_user_compat(child, addr, utmp);
 700                         }
 701                         if (ret)
 702                                 return ret;
 703                         addr += sizeof(unsigned int);
 704                         data += sizeof(unsigned int);
 705                         copied += sizeof(unsigned int);
 706                 }
 707                 return 0;
 708         case PTRACE_GET_LAST_BREAK:
 709                 put_user(task_thread_info(child)->last_break,
 710                          (unsigned int __user *) data);
 711                 return 0;
 712         }
 713         return compat_ptrace_request(child, request, addr, data);
 714 }
 715 #endif
 716
 717 asmlinkage long do_syscall_trace_enter(struct pt_regs *regs)
 718 {
 719         long ret = 0;
 720
 721         /* Do the secure computing check first. */
 722         secure_computing_strict(regs->gprs[2]);
 723
 724         /*
 725          * The sysc_tracesys code in entry.S stored the system
 726          * call number to gprs[2].
 727          */
 728         if (test_thread_flag(TIF_SYSCALL_TRACE) &&
 729             (tracehook_report_syscall_entry(regs) ||
 730              regs->gprs[2] >= NR_syscalls)) {
 731                 /*
 732                  * Tracing decided this syscall should not happen or the
 733                  * debugger stored an invalid system call number. Skip
 734                  * the system call and the system call restart handling.
 735                  */
 736                 clear_thread_flag(TIF_SYSCALL);
 737                 ret = -1;
 738         }
 739
 740         if (unlikely(test_thread_flag(TIF_SYSCALL_TRACEPOINT)))
 741                 trace_sys_enter(regs, regs->gprs[2]);
 742
 743         audit_syscall_entry(is_compat_task() ?
 744                                 AUDIT_ARCH_S390 : AUDIT_ARCH_S390X,
 745                             regs->gprs[2], regs->orig_gpr2,
 746                             regs->gprs[3], regs->gprs[4],
 747                             regs->gprs[5]);
 748         return ret ?: regs->gprs[2];
 749 }
 750
 751 asmlinkage void do_syscall_trace_exit(struct pt_regs *regs)
 752 {
 753         audit_syscall_exit(regs);
 754
 755         if (unlikely(test_thread_flag(TIF_SYSCALL_TRACEPOINT)))
 756                 trace_sys_exit(regs, regs->gprs[2]);
 757
 758         if (test_thread_flag(TIF_SYSCALL_TRACE))
 759                 tracehook_report_syscall_exit(regs, 0);
 760 }
 761
 762 /*
 763  * user_regset definitions.
 764  */
 765
 766 static int s390_regs_get(struct task_struct *target,
 767                          const struct user_regset *regset,
 768                          unsigned int pos, unsigned int count,
 769                          void *kbuf, void __user *ubuf)
 770 {
 771         if (target == current)
 772                 save_access_regs(target->thread.acrs);
 773
 774         if (kbuf) {
 775                 unsigned long *k = kbuf;
 776                 while (count > 0) {
 777                         *k++ = __peek_user(target, pos);
 778                         count -= sizeof(*k);
 779                         pos += sizeof(*k);
 780                 }
 781         } else {
 782                 unsigned long __user *u = ubuf;
 783                 while (count > 0) {
 784                         if (__put_user(__peek_user(target, pos), u++))
 785                                 return -EFAULT;
 786                         count -= sizeof(*u);
 787                         pos += sizeof(*u);
 788                 }
 789         }
 790         return 0;
 791 }
 792
 793 static int s390_regs_set(struct task_struct *target,
 794                          const struct user_regset *regset,
 795                          unsigned int pos, unsigned int count,
 796                          const void *kbuf, const void __user *ubuf)
 797 {
 798         int rc = 0;
 799
 800         if (target == current)
 801                 save_access_regs(target->thread.acrs);
 802
 803         if (kbuf) {
 804                 const unsigned long *k = kbuf;
 805                 while (count > 0 && !rc) {
 806                         rc = __poke_user(target, pos, *k++);
 807                         count -= sizeof(*k);
 808                         pos += sizeof(*k);
 809                 }
 810         } else {
 811                 const unsigned long  __user *u = ubuf;
 812                 while (count > 0 && !rc) {
 813                         unsigned long word;
 814                         rc = __get_user(word, u++);
 815                         if (rc)
 816                                 break;
 817                         rc = __poke_user(target, pos, word);
 818                         count -= sizeof(*u);
 819                         pos += sizeof(*u);
 820                 }
 821         }
 822
 823         if (rc == 0 && target == current)
 824                 restore_access_regs(target->thread.acrs);
 825
 826         return rc;
 827 }
 828
 829 static int s390_fpregs_get(struct task_struct *target,
 830                            const struct user_regset *regset, unsigned int pos,
 831                            unsigned int count, void *kbuf, void __user *ubuf)
 832 {
 833         if (target == current)
 834                 save_fp_regs(&target->thread.fp_regs);
 835
 836         return user_regset_copyout(&pos, &count, &kbuf, &ubuf,
 837                                    &target->thread.fp_regs, 0, -1);
 838 }
 839
 840 static int s390_fpregs_set(struct task_struct *target,
 841                            const struct user_regset *regset, unsigned int pos,
 842                            unsigned int count, const void *kbuf,
 843                            const void __user *ubuf)
 844 {
 845         int rc = 0;
 846
 847         if (target == current)
 848                 save_fp_regs(&target->thread.fp_regs);
 849
 850         /* If setting FPC, must validate it first. */
 851         if (count > 0 && pos < offsetof(s390_fp_regs, fprs)) {
 852                 u32 fpc[2] = { target->thread.fp_regs.fpc, 0 };
 853                 rc = user_regset_copyin(&pos, &count, &kbuf, &ubuf, &fpc,
 854                                         0, offsetof(s390_fp_regs, fprs));
 855                 if (rc)
 856                         return rc;
 857                 if ((fpc[0] & ~FPC_VALID_MASK) != 0 || fpc[1] != 0)
 858                         return -EINVAL;
 859                 target->thread.fp_regs.fpc = fpc[0];
 860         }
 861
 862         if (rc == 0 && count > 0)
 863                 rc = user_regset_copyin(&pos, &count, &kbuf, &ubuf,
 864                                         target->thread.fp_regs.fprs,
 865                                         offsetof(s390_fp_regs, fprs), -1);
 866
 867         if (rc == 0 && target == current)
 868                 restore_fp_regs(&target->thread.fp_regs);
 869
 870         return rc;
 871 }
 872
 873 #ifdef CONFIG_64BIT
 874
 875 static int s390_last_break_get(struct task_struct *target,
 876                                const struct user_regset *regset,
 877                                unsigned int pos, unsigned int count,
 878                                void *kbuf, void __user *ubuf)
 879 {
 880         if (count > 0) {
 881                 if (kbuf) {
 882                         unsigned long *k = kbuf;
 883                         *k = task_thread_info(target)->last_break;
 884                 } else {
 885                         unsigned long  __user *u = ubuf;
 886                         if (__put_user(task_thread_info(target)->last_break, u))
 887                                 return -EFAULT;
 888                 }
 889         }
 890         return 0;
 891 }
 892
 893 static int s390_last_break_set(struct task_struct *target,
 894                                const struct user_regset *regset,
 895                                unsigned int pos, unsigned int count,
 896                                const void *kbuf, const void __user *ubuf)
 897 {
 898         return 0;
 899 }
 900
 901 #endif
 902
 903 static int s390_system_call_get(struct task_struct *target,
 904                                 const struct user_regset *regset,
 905                                 unsigned int pos, unsigned int count,
 906                                 void *kbuf, void __user *ubuf)
 907 {
 908         unsigned int *data = &task_thread_info(target)->system_call;
 909         return user_regset_copyout(&pos, &count, &kbuf, &ubuf,
 910                                    data, 0, sizeof(unsigned int));
 911 }
 912
 913 static int s390_system_call_set(struct task_struct *target,
 914                                 const struct user_regset *regset,
 915                                 unsigned int pos, unsigned int count,
 916                                 const void *kbuf, const void __user *ubuf)
 917 {
 918         unsigned int *data = &task_thread_info(target)->system_call;
 919         return user_regset_copyin(&pos, &count, &kbuf, &ubuf,
 920                                   data, 0, sizeof(unsigned int));
 921 }
 922
 923 static const struct user_regset s390_regsets[] = {
 924         [REGSET_GENERAL] = {
 925                 .core_note_type = NT_PRSTATUS,
 926                 .n = sizeof(s390_regs) / sizeof(long),
 927                 .size = sizeof(long),
 928                 .align = sizeof(long),
 929                 .get = s390_regs_get,
 930                 .set = s390_regs_set,
 931         },
 932         [REGSET_FP] = {
 933                 .core_note_type = NT_PRFPREG,
 934                 .n = sizeof(s390_fp_regs) / sizeof(long),
 935                 .size = sizeof(long),
 936                 .align = sizeof(long),
 937                 .get = s390_fpregs_get,
 938                 .set = s390_fpregs_set,
 939         },
 940 #ifdef CONFIG_64BIT
 941         [REGSET_LAST_BREAK] = {
 942                 .core_note_type = NT_S390_LAST_BREAK,
 943                 .n = 1,
 944                 .size = sizeof(long),
 945                 .align = sizeof(long),
 946                 .get = s390_last_break_get,
 947                 .set = s390_last_break_set,
 948         },
 949 #endif
 950         [REGSET_SYSTEM_CALL] = {
 951                 .core_note_type = NT_S390_SYSTEM_CALL,
 952                 .n = 1,
 953                 .size = sizeof(unsigned int),
 954                 .align = sizeof(unsigned int),
 955                 .get = s390_system_call_get,
 956                 .set = s390_system_call_set,
 957         },
 958 };
 959
 960 static const struct user_regset_view user_s390_view = {
 961         .name = UTS_MACHINE,
 962         .e_machine = EM_S390,
 963         .regsets = s390_regsets,
 964         .n = ARRAY_SIZE(s390_regsets)
 965 };
 966
 967 #ifdef CONFIG_COMPAT
 968 static int s390_compat_regs_get(struct task_struct *target,
 969                                 const struct user_regset *regset,
 970                                 unsigned int pos, unsigned int count,
 971                                 void *kbuf, void __user *ubuf)
 972 {
 973         if (target == current)
 974                 save_access_regs(target->thread.acrs);
 975
 976         if (kbuf) {
 977                 compat_ulong_t *k = kbuf;
 978                 while (count > 0) {
 979                         *k++ = __peek_user_compat(target, pos);
 980                         count -= sizeof(*k);
 981                         pos += sizeof(*k);
 982                 }
 983         } else {
 984                 compat_ulong_t __user *u = ubuf;
 985                 while (count > 0) {
 986                         if (__put_user(__peek_user_compat(target, pos), u++))
 987                                 return -EFAULT;
 988                         count -= sizeof(*u);
 989                         pos += sizeof(*u);
 990                 }
 991         }
 992         return 0;
 993 }
 994
 995 static int s390_compat_regs_set(struct task_struct *target,
 996                                 const struct user_regset *regset,
 997                                 unsigned int pos, unsigned int count,
 998                                 const void *kbuf, const void __user *ubuf)
 999 {
1000         int rc = 0;
1001
1002         if (target == current)
1003                 save_access_regs(target->thread.acrs);
1004
1005         if (kbuf) {
1006                 const compat_ulong_t *k = kbuf;
1007                 while (count > 0 && !rc) {
1008                         rc = __poke_user_compat(target, pos, *k++);
1009                         count -= sizeof(*k);
1010                         pos += sizeof(*k);
1011                 }
1012         } else {
1013                 const compat_ulong_t  __user *u = ubuf;
1014                 while (count > 0 && !rc) {
1015                         compat_ulong_t word;
1016                         rc = __get_user(word, u++);
1017                         if (rc)
1018                                 break;
1019                         rc = __poke_user_compat(target, pos, word);
1020                         count -= sizeof(*u);
1021                         pos += sizeof(*u);
1022                 }
1023         }
1024
1025         if (rc == 0 && target == current)
1026                 restore_access_regs(target->thread.acrs);
1027
1028         return rc;
1029 }
1030
1031 static int s390_compat_regs_high_get(struct task_struct *target,
1032                                      const struct user_regset *regset,
1033                                      unsigned int pos, unsigned int count,
1034                                      void *kbuf, void __user *ubuf)
1035 {
1036         compat_ulong_t *gprs_high;
1037
1038         gprs_high = (compat_ulong_t *)
1039                 &task_pt_regs(target)->gprs[pos / sizeof(compat_ulong_t)];
1040         if (kbuf) {
1041                 compat_ulong_t *k = kbuf;
1042                 while (count > 0) {
1043                         *k++ = *gprs_high;
1044                         gprs_high += 2;
1045                         count -= sizeof(*k);
1046                 }
1047         } else {
1048                 compat_ulong_t __user *u = ubuf;
1049                 while (count > 0) {
1050                         if (__put_user(*gprs_high, u++))
1051                                 return -EFAULT;
1052                         gprs_high += 2;
1053                         count -= sizeof(*u);
1054                 }
1055         }
1056         return 0;
1057 }
1058
1059 static int s390_compat_regs_high_set(struct task_struct *target,
1060                                      const struct user_regset *regset,
1061                                      unsigned int pos, unsigned int count,
1062                                      const void *kbuf, const void __user *ubuf)
1063 {
1064         compat_ulong_t *gprs_high;
1065         int rc = 0;
1066
1067         gprs_high = (compat_ulong_t *)
1068                 &task_pt_regs(target)->gprs[pos / sizeof(compat_ulong_t)];
1069         if (kbuf) {
1070                 const compat_ulong_t *k = kbuf;
1071                 while (count > 0) {
1072                         *gprs_high = *k++;
1073                         *gprs_high += 2;
1074                         count -= sizeof(*k);
1075                 }
1076         } else {
1077                 const compat_ulong_t  __user *u = ubuf;
1078                 while (count > 0 && !rc) {
1079                         unsigned long word;
1080                         rc = __get_user(word, u++);
1081                         if (rc)
1082                                 break;
1083                         *gprs_high = word;
1084                         *gprs_high += 2;
1085                         count -= sizeof(*u);
1086                 }
1087         }
1088
1089         return rc;
1090 }
1091
1092 static int s390_compat_last_break_get(struct task_struct *target,
1093                                       const struct user_regset *regset,
1094                                       unsigned int pos, unsigned int count,
1095                                       void *kbuf, void __user *ubuf)
1096 {
1097         compat_ulong_t last_break;
1098
1099         if (count > 0) {
1100                 last_break = task_thread_info(target)->last_break;
1101                 if (kbuf) {
1102                         unsigned long *k = kbuf;
1103                         *k = last_break;
1104                 } else {
1105                         unsigned long  __user *u = ubuf;
1106                         if (__put_user(last_break, u))
1107                                 return -EFAULT;
1108                 }
1109         }
1110         return 0;
1111 }
1112
1113 static int s390_compat_last_break_set(struct task_struct *target,
1114                                       const struct user_regset *regset,
1115                                       unsigned int pos, unsigned int count,
1116                                       const void *kbuf, const void __user *ubuf)
1117 {
1118         return 0;
1119 }
1120
1121 static const struct user_regset s390_compat_regsets[] = {
1122         [REGSET_GENERAL] = {
1123                 .core_note_type = NT_PRSTATUS,
1124                 .n = sizeof(s390_compat_regs) / sizeof(compat_long_t),
1125                 .size = sizeof(compat_long_t),
1126                 .align = sizeof(compat_long_t),
1127                 .get = s390_compat_regs_get,
1128                 .set = s390_compat_regs_set,
1129         },
1130         [REGSET_FP] = {
1131                 .core_note_type = NT_PRFPREG,
1132                 .n = sizeof(s390_fp_regs) / sizeof(compat_long_t),
1133                 .size = sizeof(compat_long_t),
1134                 .align = sizeof(compat_long_t),
1135                 .get = s390_fpregs_get,
1136                 .set = s390_fpregs_set,
1137         },
1138         [REGSET_LAST_BREAK] = {
1139                 .core_note_type = NT_S390_LAST_BREAK,
1140                 .n = 1,
1141                 .size = sizeof(long),
1142                 .align = sizeof(long),
1143                 .get = s390_compat_last_break_get,
1144                 .set = s390_compat_last_break_set,
1145         },
1146         [REGSET_SYSTEM_CALL] = {
1147                 .core_note_type = NT_S390_SYSTEM_CALL,
1148                 .n = 1,
1149                 .size = sizeof(compat_uint_t),
1150                 .align = sizeof(compat_uint_t),
1151                 .get = s390_system_call_get,
1152                 .set = s390_system_call_set,
1153         },
1154         [REGSET_GENERAL_EXTENDED] = {
1155                 .core_note_type = NT_S390_HIGH_GPRS,
1156                 .n = sizeof(s390_compat_regs_high) / sizeof(compat_long_t),
1157                 .size = sizeof(compat_long_t),
1158                 .align = sizeof(compat_long_t),
1159                 .get = s390_compat_regs_high_get,
1160                 .set = s390_compat_regs_high_set,
1161         },
1162 };
1163
1164 static const struct user_regset_view user_s390_compat_view = {
1165         .name = "s390",
1166         .e_machine = EM_S390,
1167         .regsets = s390_compat_regsets,
1168         .n = ARRAY_SIZE(s390_compat_regsets)
1169 };
1170 #endif
1171
1172 const struct user_regset_view *task_user_regset_view(struct task_struct *task)
1173 {
1174 #ifdef CONFIG_COMPAT
1175         if (test_tsk_thread_flag(task, TIF_31BIT))
1176                 return &user_s390_compat_view;
1177 #endif
1178         return &user_s390_view;
1179 }
1180
1181 static const char *gpr_names[NUM_GPRS] = {
1182         "r0", "r1",  "r2",  "r3",  "r4",  "r5",  "r6",  "r7",
1183         "r8", "r9", "r10", "r11", "r12", "r13", "r14", "r15",
1184 };
1185
1186 unsigned long regs_get_register(struct pt_regs *regs, unsigned int offset)
1187 {
1188         if (offset >= NUM_GPRS)
1189                 return 0;
1190         return regs->gprs[offset];
1191 }
1192
1193 int regs_query_register_offset(const char *name)
1194 {
1195         unsigned long offset;
1196
1197         if (!name || *name != 'r')
1198                 return -EINVAL;
1199         if (strict_strtoul(name + 1, 10, &offset))
1200                 return -EINVAL;
1201         if (offset >= NUM_GPRS)
1202                 return -EINVAL;
1203         return offset;
1204 }
1205
1206 const char *regs_query_register_name(unsigned int offset)
1207 {
1208         if (offset >= NUM_GPRS)
1209                 return NULL;
1210         return gpr_names[offset];
1211 }
1212
1213 static int regs_within_kernel_stack(struct pt_regs *regs, unsigned long addr)
1214 {
1215         unsigned long ksp = kernel_stack_pointer(regs);
1216
1217         return (addr & ~(THREAD_SIZE - 1)) == (ksp & ~(THREAD_SIZE - 1));
1218 }
1219
1220 /**
1221  * regs_get_kernel_stack_nth() - get Nth entry of the stack
1222  * @regs:pt_regs which contains kernel stack pointer.
1223  * @n:stack entry number.
1224  *
1225  * regs_get_kernel_stack_nth() returns @n th entry of the kernel stack which
1226  * is specifined by @regs. If the @n th entry is NOT in the kernel stack,
1227  * this returns 0.
1228  */
1229 unsigned long regs_get_kernel_stack_nth(struct pt_regs *regs, unsigned int n)
1230 {
1231         unsigned long addr;
1232
1233         addr = kernel_stack_pointer(regs) + n * sizeof(long);
1234         if (!regs_within_kernel_stack(regs, addr))
1235                 return 0;
1236         return *(unsigned long *)addr;
1237 }