2 * Based on arch/arm/kernel/ptrace.c
5 * edited by Linus Torvalds
6 * ARM modifications Copyright (C) 2000 Russell King
7 * Copyright (C) 2012 ARM Ltd.
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License version 2 as
11 * published by the Free Software Foundation.
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
18 * You should have received a copy of the GNU General Public License
19 * along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include <linux/audit.h>
23 #include <linux/compat.h>
24 #include <linux/kernel.h>
25 #include <linux/sched.h>
27 #include <linux/smp.h>
28 #include <linux/ptrace.h>
29 #include <linux/user.h>
30 #include <linux/seccomp.h>
31 #include <linux/security.h>
32 #include <linux/init.h>
33 #include <linux/signal.h>
34 #include <linux/uaccess.h>
35 #include <linux/perf_event.h>
36 #include <linux/hw_breakpoint.h>
37 #include <linux/regset.h>
38 #include <linux/tracehook.h>
39 #include <linux/elf.h>
41 #include <asm/compat.h>
42 #include <asm/cpufeature.h>
43 #include <asm/debug-monitors.h>
44 #include <asm/pgtable.h>
45 #include <asm/syscall.h>
46 #include <asm/traps.h>
47 #include <asm/system_misc.h>
49 #define CREATE_TRACE_POINTS
50 #include <trace/events/syscalls.h>
53 * TODO: does not yet catch signals sent when the child dies.
54 * in exit.c or in signal.c.
58 * Called by kernel/ptrace.c when detaching..
60 void ptrace_disable(struct task_struct *child)
63 * This would be better off in core code, but PTRACE_DETACH has
64 * grown its fair share of arch-specific worts and changing it
65 * is likely to cause regressions on obscure architectures.
67 user_disable_single_step(child);
70 #ifdef CONFIG_HAVE_HW_BREAKPOINT
72 * Handle hitting a HW-breakpoint.
74 static void ptrace_hbptriggered(struct perf_event *bp,
75 struct perf_sample_data *data,
78 struct arch_hw_breakpoint *bkpt = counter_arch_bp(bp);
82 .si_code = TRAP_HWBKPT,
83 .si_addr = (void __user *)(bkpt->trigger),
89 if (!is_compat_task())
92 for (i = 0; i < ARM_MAX_BRP; ++i) {
93 if (current->thread.debug.hbp_break[i] == bp) {
94 info.si_errno = (i << 1) + 1;
99 for (i = 0; i < ARM_MAX_WRP; ++i) {
100 if (current->thread.debug.hbp_watch[i] == bp) {
101 info.si_errno = -((i << 1) + 1);
108 force_sig_info(SIGTRAP, &info, current);
112 * Unregister breakpoints from this task and reset the pointers in
115 void flush_ptrace_hw_breakpoint(struct task_struct *tsk)
118 struct thread_struct *t = &tsk->thread;
120 for (i = 0; i < ARM_MAX_BRP; i++) {
121 if (t->debug.hbp_break[i]) {
122 unregister_hw_breakpoint(t->debug.hbp_break[i]);
123 t->debug.hbp_break[i] = NULL;
127 for (i = 0; i < ARM_MAX_WRP; i++) {
128 if (t->debug.hbp_watch[i]) {
129 unregister_hw_breakpoint(t->debug.hbp_watch[i]);
130 t->debug.hbp_watch[i] = NULL;
135 void ptrace_hw_copy_thread(struct task_struct *tsk)
137 memset(&tsk->thread.debug, 0, sizeof(struct debug_info));
140 static struct perf_event *ptrace_hbp_get_event(unsigned int note_type,
141 struct task_struct *tsk,
144 struct perf_event *bp = ERR_PTR(-EINVAL);
147 case NT_ARM_HW_BREAK:
148 if (idx < ARM_MAX_BRP)
149 bp = tsk->thread.debug.hbp_break[idx];
151 case NT_ARM_HW_WATCH:
152 if (idx < ARM_MAX_WRP)
153 bp = tsk->thread.debug.hbp_watch[idx];
160 static int ptrace_hbp_set_event(unsigned int note_type,
161 struct task_struct *tsk,
163 struct perf_event *bp)
168 case NT_ARM_HW_BREAK:
169 if (idx < ARM_MAX_BRP) {
170 tsk->thread.debug.hbp_break[idx] = bp;
174 case NT_ARM_HW_WATCH:
175 if (idx < ARM_MAX_WRP) {
176 tsk->thread.debug.hbp_watch[idx] = bp;
185 static struct perf_event *ptrace_hbp_create(unsigned int note_type,
186 struct task_struct *tsk,
189 struct perf_event *bp;
190 struct perf_event_attr attr;
194 case NT_ARM_HW_BREAK:
195 type = HW_BREAKPOINT_X;
197 case NT_ARM_HW_WATCH:
198 type = HW_BREAKPOINT_RW;
201 return ERR_PTR(-EINVAL);
204 ptrace_breakpoint_init(&attr);
207 * Initialise fields to sane defaults
208 * (i.e. values that will pass validation).
211 attr.bp_len = HW_BREAKPOINT_LEN_4;
215 bp = register_user_hw_breakpoint(&attr, ptrace_hbptriggered, NULL, tsk);
219 err = ptrace_hbp_set_event(note_type, tsk, idx, bp);
226 static int ptrace_hbp_fill_attr_ctrl(unsigned int note_type,
227 struct arch_hw_breakpoint_ctrl ctrl,
228 struct perf_event_attr *attr)
230 int err, len, type, disabled = !ctrl.enabled;
232 attr->disabled = disabled;
236 err = arch_bp_generic_fields(ctrl, &len, &type);
241 case NT_ARM_HW_BREAK:
242 if ((type & HW_BREAKPOINT_X) != type)
245 case NT_ARM_HW_WATCH:
246 if ((type & HW_BREAKPOINT_RW) != type)
254 attr->bp_type = type;
259 static int ptrace_hbp_get_resource_info(unsigned int note_type, u32 *info)
265 case NT_ARM_HW_BREAK:
266 num = hw_breakpoint_slots(TYPE_INST);
268 case NT_ARM_HW_WATCH:
269 num = hw_breakpoint_slots(TYPE_DATA);
275 reg |= debug_monitors_arch();
283 static int ptrace_hbp_get_ctrl(unsigned int note_type,
284 struct task_struct *tsk,
288 struct perf_event *bp = ptrace_hbp_get_event(note_type, tsk, idx);
293 *ctrl = bp ? encode_ctrl_reg(counter_arch_bp(bp)->ctrl) : 0;
297 static int ptrace_hbp_get_addr(unsigned int note_type,
298 struct task_struct *tsk,
302 struct perf_event *bp = ptrace_hbp_get_event(note_type, tsk, idx);
307 *addr = bp ? bp->attr.bp_addr : 0;
311 static struct perf_event *ptrace_hbp_get_initialised_bp(unsigned int note_type,
312 struct task_struct *tsk,
315 struct perf_event *bp = ptrace_hbp_get_event(note_type, tsk, idx);
318 bp = ptrace_hbp_create(note_type, tsk, idx);
323 static int ptrace_hbp_set_ctrl(unsigned int note_type,
324 struct task_struct *tsk,
329 struct perf_event *bp;
330 struct perf_event_attr attr;
331 struct arch_hw_breakpoint_ctrl ctrl;
333 bp = ptrace_hbp_get_initialised_bp(note_type, tsk, idx);
340 decode_ctrl_reg(uctrl, &ctrl);
341 err = ptrace_hbp_fill_attr_ctrl(note_type, ctrl, &attr);
345 return modify_user_hw_breakpoint(bp, &attr);
348 static int ptrace_hbp_set_addr(unsigned int note_type,
349 struct task_struct *tsk,
354 struct perf_event *bp;
355 struct perf_event_attr attr;
357 bp = ptrace_hbp_get_initialised_bp(note_type, tsk, idx);
365 err = modify_user_hw_breakpoint(bp, &attr);
369 #define PTRACE_HBP_ADDR_SZ sizeof(u64)
370 #define PTRACE_HBP_CTRL_SZ sizeof(u32)
371 #define PTRACE_HBP_PAD_SZ sizeof(u32)
373 static int hw_break_get(struct task_struct *target,
374 const struct user_regset *regset,
375 unsigned int pos, unsigned int count,
376 void *kbuf, void __user *ubuf)
378 unsigned int note_type = regset->core_note_type;
379 int ret, idx = 0, offset, limit;
384 ret = ptrace_hbp_get_resource_info(note_type, &info);
388 ret = user_regset_copyout(&pos, &count, &kbuf, &ubuf, &info, 0,
394 offset = offsetof(struct user_hwdebug_state, pad);
395 ret = user_regset_copyout_zero(&pos, &count, &kbuf, &ubuf, offset,
396 offset + PTRACE_HBP_PAD_SZ);
400 /* (address, ctrl) registers */
401 offset = offsetof(struct user_hwdebug_state, dbg_regs);
402 limit = regset->n * regset->size;
403 while (count && offset < limit) {
404 ret = ptrace_hbp_get_addr(note_type, target, idx, &addr);
407 ret = user_regset_copyout(&pos, &count, &kbuf, &ubuf, &addr,
408 offset, offset + PTRACE_HBP_ADDR_SZ);
411 offset += PTRACE_HBP_ADDR_SZ;
413 ret = ptrace_hbp_get_ctrl(note_type, target, idx, &ctrl);
416 ret = user_regset_copyout(&pos, &count, &kbuf, &ubuf, &ctrl,
417 offset, offset + PTRACE_HBP_CTRL_SZ);
420 offset += PTRACE_HBP_CTRL_SZ;
422 ret = user_regset_copyout_zero(&pos, &count, &kbuf, &ubuf,
424 offset + PTRACE_HBP_PAD_SZ);
427 offset += PTRACE_HBP_PAD_SZ;
434 static int hw_break_set(struct task_struct *target,
435 const struct user_regset *regset,
436 unsigned int pos, unsigned int count,
437 const void *kbuf, const void __user *ubuf)
439 unsigned int note_type = regset->core_note_type;
440 int ret, idx = 0, offset, limit;
444 /* Resource info and pad */
445 offset = offsetof(struct user_hwdebug_state, dbg_regs);
446 ret = user_regset_copyin_ignore(&pos, &count, &kbuf, &ubuf, 0, offset);
450 /* (address, ctrl) registers */
451 limit = regset->n * regset->size;
452 while (count && offset < limit) {
453 ret = user_regset_copyin(&pos, &count, &kbuf, &ubuf, &addr,
454 offset, offset + PTRACE_HBP_ADDR_SZ);
457 ret = ptrace_hbp_set_addr(note_type, target, idx, addr);
460 offset += PTRACE_HBP_ADDR_SZ;
462 ret = user_regset_copyin(&pos, &count, &kbuf, &ubuf, &ctrl,
463 offset, offset + PTRACE_HBP_CTRL_SZ);
466 ret = ptrace_hbp_set_ctrl(note_type, target, idx, ctrl);
469 offset += PTRACE_HBP_CTRL_SZ;
471 ret = user_regset_copyin_ignore(&pos, &count, &kbuf, &ubuf,
473 offset + PTRACE_HBP_PAD_SZ);
476 offset += PTRACE_HBP_PAD_SZ;
482 #endif /* CONFIG_HAVE_HW_BREAKPOINT */
484 static int gpr_get(struct task_struct *target,
485 const struct user_regset *regset,
486 unsigned int pos, unsigned int count,
487 void *kbuf, void __user *ubuf)
489 struct user_pt_regs *uregs = &task_pt_regs(target)->user_regs;
490 return user_regset_copyout(&pos, &count, &kbuf, &ubuf, uregs, 0, -1);
493 static int gpr_set(struct task_struct *target, const struct user_regset *regset,
494 unsigned int pos, unsigned int count,
495 const void *kbuf, const void __user *ubuf)
498 struct user_pt_regs newregs = task_pt_regs(target)->user_regs;
500 ret = user_regset_copyin(&pos, &count, &kbuf, &ubuf, &newregs, 0, -1);
504 if (!valid_user_regs(&newregs, target))
507 task_pt_regs(target)->user_regs = newregs;
512 * TODO: update fp accessors for lazy context switching (sync/flush hwstate)
514 static int fpr_get(struct task_struct *target, const struct user_regset *regset,
515 unsigned int pos, unsigned int count,
516 void *kbuf, void __user *ubuf)
518 struct user_fpsimd_state *uregs;
519 uregs = &target->thread.fpsimd_state.user_fpsimd;
520 return user_regset_copyout(&pos, &count, &kbuf, &ubuf, uregs, 0, -1);
523 static int fpr_set(struct task_struct *target, const struct user_regset *regset,
524 unsigned int pos, unsigned int count,
525 const void *kbuf, const void __user *ubuf)
528 struct user_fpsimd_state newstate =
529 target->thread.fpsimd_state.user_fpsimd;
531 ret = user_regset_copyin(&pos, &count, &kbuf, &ubuf, &newstate, 0, -1);
535 target->thread.fpsimd_state.user_fpsimd = newstate;
536 fpsimd_flush_task_state(target);
540 static int tls_get(struct task_struct *target, const struct user_regset *regset,
541 unsigned int pos, unsigned int count,
542 void *kbuf, void __user *ubuf)
544 unsigned long *tls = &target->thread.tp_value;
545 return user_regset_copyout(&pos, &count, &kbuf, &ubuf, tls, 0, -1);
548 static int tls_set(struct task_struct *target, const struct user_regset *regset,
549 unsigned int pos, unsigned int count,
550 const void *kbuf, const void __user *ubuf)
553 unsigned long tls = target->thread.tp_value;
555 ret = user_regset_copyin(&pos, &count, &kbuf, &ubuf, &tls, 0, -1);
559 target->thread.tp_value = tls;
563 static int system_call_get(struct task_struct *target,
564 const struct user_regset *regset,
565 unsigned int pos, unsigned int count,
566 void *kbuf, void __user *ubuf)
568 int syscallno = task_pt_regs(target)->syscallno;
570 return user_regset_copyout(&pos, &count, &kbuf, &ubuf,
574 static int system_call_set(struct task_struct *target,
575 const struct user_regset *regset,
576 unsigned int pos, unsigned int count,
577 const void *kbuf, const void __user *ubuf)
579 int syscallno = task_pt_regs(target)->syscallno;
582 ret = user_regset_copyin(&pos, &count, &kbuf, &ubuf, &syscallno, 0, -1);
586 task_pt_regs(target)->syscallno = syscallno;
590 enum aarch64_regset {
594 #ifdef CONFIG_HAVE_HW_BREAKPOINT
601 static const struct user_regset aarch64_regsets[] = {
603 .core_note_type = NT_PRSTATUS,
604 .n = sizeof(struct user_pt_regs) / sizeof(u64),
606 .align = sizeof(u64),
611 .core_note_type = NT_PRFPREG,
612 .n = sizeof(struct user_fpsimd_state) / sizeof(u32),
614 * We pretend we have 32-bit registers because the fpsr and
615 * fpcr are 32-bits wide.
618 .align = sizeof(u32),
623 .core_note_type = NT_ARM_TLS,
625 .size = sizeof(void *),
626 .align = sizeof(void *),
630 #ifdef CONFIG_HAVE_HW_BREAKPOINT
631 [REGSET_HW_BREAK] = {
632 .core_note_type = NT_ARM_HW_BREAK,
633 .n = sizeof(struct user_hwdebug_state) / sizeof(u32),
635 .align = sizeof(u32),
639 [REGSET_HW_WATCH] = {
640 .core_note_type = NT_ARM_HW_WATCH,
641 .n = sizeof(struct user_hwdebug_state) / sizeof(u32),
643 .align = sizeof(u32),
648 [REGSET_SYSTEM_CALL] = {
649 .core_note_type = NT_ARM_SYSTEM_CALL,
652 .align = sizeof(int),
653 .get = system_call_get,
654 .set = system_call_set,
658 static const struct user_regset_view user_aarch64_view = {
659 .name = "aarch64", .e_machine = EM_AARCH64,
660 .regsets = aarch64_regsets, .n = ARRAY_SIZE(aarch64_regsets)
664 #include <linux/compat.h>
671 static int compat_gpr_get(struct task_struct *target,
672 const struct user_regset *regset,
673 unsigned int pos, unsigned int count,
674 void *kbuf, void __user *ubuf)
677 unsigned int i, start, num_regs;
679 /* Calculate the number of AArch32 registers contained in count */
680 num_regs = count / regset->size;
682 /* Convert pos into an register number */
683 start = pos / regset->size;
685 if (start + num_regs > regset->n)
688 for (i = 0; i < num_regs; ++i) {
689 unsigned int idx = start + i;
694 reg = task_pt_regs(target)->pc;
697 reg = task_pt_regs(target)->pstate;
700 reg = task_pt_regs(target)->orig_x0;
703 reg = task_pt_regs(target)->regs[idx];
707 memcpy(kbuf, ®, sizeof(reg));
710 ret = copy_to_user(ubuf, ®, sizeof(reg));
723 static int compat_gpr_set(struct task_struct *target,
724 const struct user_regset *regset,
725 unsigned int pos, unsigned int count,
726 const void *kbuf, const void __user *ubuf)
728 struct pt_regs newregs;
730 unsigned int i, start, num_regs;
732 /* Calculate the number of AArch32 registers contained in count */
733 num_regs = count / regset->size;
735 /* Convert pos into an register number */
736 start = pos / regset->size;
738 if (start + num_regs > regset->n)
741 newregs = *task_pt_regs(target);
743 for (i = 0; i < num_regs; ++i) {
744 unsigned int idx = start + i;
748 memcpy(®, kbuf, sizeof(reg));
751 ret = copy_from_user(®, ubuf, sizeof(reg));
765 newregs.pstate = reg;
768 newregs.orig_x0 = reg;
771 newregs.regs[idx] = reg;
776 if (valid_user_regs(&newregs.user_regs, target))
777 *task_pt_regs(target) = newregs;
784 static int compat_vfp_get(struct task_struct *target,
785 const struct user_regset *regset,
786 unsigned int pos, unsigned int count,
787 void *kbuf, void __user *ubuf)
789 struct user_fpsimd_state *uregs;
790 compat_ulong_t fpscr;
793 uregs = &target->thread.fpsimd_state.user_fpsimd;
796 * The VFP registers are packed into the fpsimd_state, so they all sit
797 * nicely together for us. We just need to create the fpscr separately.
799 ret = user_regset_copyout(&pos, &count, &kbuf, &ubuf, uregs, 0,
800 VFP_STATE_SIZE - sizeof(compat_ulong_t));
803 fpscr = (uregs->fpsr & VFP_FPSCR_STAT_MASK) |
804 (uregs->fpcr & VFP_FPSCR_CTRL_MASK);
805 ret = put_user(fpscr, (compat_ulong_t *)ubuf);
811 static int compat_vfp_set(struct task_struct *target,
812 const struct user_regset *regset,
813 unsigned int pos, unsigned int count,
814 const void *kbuf, const void __user *ubuf)
816 struct user_fpsimd_state *uregs;
817 compat_ulong_t fpscr;
820 if (pos + count > VFP_STATE_SIZE)
823 uregs = &target->thread.fpsimd_state.user_fpsimd;
825 ret = user_regset_copyin(&pos, &count, &kbuf, &ubuf, uregs, 0,
826 VFP_STATE_SIZE - sizeof(compat_ulong_t));
829 ret = get_user(fpscr, (compat_ulong_t *)ubuf);
830 uregs->fpsr = fpscr & VFP_FPSCR_STAT_MASK;
831 uregs->fpcr = fpscr & VFP_FPSCR_CTRL_MASK;
834 fpsimd_flush_task_state(target);
838 static int compat_tls_get(struct task_struct *target,
839 const struct user_regset *regset, unsigned int pos,
840 unsigned int count, void *kbuf, void __user *ubuf)
842 compat_ulong_t tls = (compat_ulong_t)target->thread.tp_value;
843 return user_regset_copyout(&pos, &count, &kbuf, &ubuf, &tls, 0, -1);
846 static int compat_tls_set(struct task_struct *target,
847 const struct user_regset *regset, unsigned int pos,
848 unsigned int count, const void *kbuf,
849 const void __user *ubuf)
852 compat_ulong_t tls = target->thread.tp_value;
854 ret = user_regset_copyin(&pos, &count, &kbuf, &ubuf, &tls, 0, -1);
858 target->thread.tp_value = tls;
862 static const struct user_regset aarch32_regsets[] = {
863 [REGSET_COMPAT_GPR] = {
864 .core_note_type = NT_PRSTATUS,
865 .n = COMPAT_ELF_NGREG,
866 .size = sizeof(compat_elf_greg_t),
867 .align = sizeof(compat_elf_greg_t),
868 .get = compat_gpr_get,
869 .set = compat_gpr_set
871 [REGSET_COMPAT_VFP] = {
872 .core_note_type = NT_ARM_VFP,
873 .n = VFP_STATE_SIZE / sizeof(compat_ulong_t),
874 .size = sizeof(compat_ulong_t),
875 .align = sizeof(compat_ulong_t),
876 .get = compat_vfp_get,
877 .set = compat_vfp_set
881 static const struct user_regset_view user_aarch32_view = {
882 .name = "aarch32", .e_machine = EM_ARM,
883 .regsets = aarch32_regsets, .n = ARRAY_SIZE(aarch32_regsets)
886 static const struct user_regset aarch32_ptrace_regsets[] = {
888 .core_note_type = NT_PRSTATUS,
889 .n = COMPAT_ELF_NGREG,
890 .size = sizeof(compat_elf_greg_t),
891 .align = sizeof(compat_elf_greg_t),
892 .get = compat_gpr_get,
893 .set = compat_gpr_set
896 .core_note_type = NT_ARM_VFP,
897 .n = VFP_STATE_SIZE / sizeof(compat_ulong_t),
898 .size = sizeof(compat_ulong_t),
899 .align = sizeof(compat_ulong_t),
900 .get = compat_vfp_get,
901 .set = compat_vfp_set
904 .core_note_type = NT_ARM_TLS,
906 .size = sizeof(compat_ulong_t),
907 .align = sizeof(compat_ulong_t),
908 .get = compat_tls_get,
909 .set = compat_tls_set,
911 #ifdef CONFIG_HAVE_HW_BREAKPOINT
912 [REGSET_HW_BREAK] = {
913 .core_note_type = NT_ARM_HW_BREAK,
914 .n = sizeof(struct user_hwdebug_state) / sizeof(u32),
916 .align = sizeof(u32),
920 [REGSET_HW_WATCH] = {
921 .core_note_type = NT_ARM_HW_WATCH,
922 .n = sizeof(struct user_hwdebug_state) / sizeof(u32),
924 .align = sizeof(u32),
929 [REGSET_SYSTEM_CALL] = {
930 .core_note_type = NT_ARM_SYSTEM_CALL,
933 .align = sizeof(int),
934 .get = system_call_get,
935 .set = system_call_set,
939 static const struct user_regset_view user_aarch32_ptrace_view = {
940 .name = "aarch32", .e_machine = EM_ARM,
941 .regsets = aarch32_ptrace_regsets, .n = ARRAY_SIZE(aarch32_ptrace_regsets)
944 static int compat_ptrace_read_user(struct task_struct *tsk, compat_ulong_t off,
945 compat_ulong_t __user *ret)
952 if (off == COMPAT_PT_TEXT_ADDR)
953 tmp = tsk->mm->start_code;
954 else if (off == COMPAT_PT_DATA_ADDR)
955 tmp = tsk->mm->start_data;
956 else if (off == COMPAT_PT_TEXT_END_ADDR)
957 tmp = tsk->mm->end_code;
958 else if (off < sizeof(compat_elf_gregset_t))
959 return copy_regset_to_user(tsk, &user_aarch32_view,
960 REGSET_COMPAT_GPR, off,
961 sizeof(compat_ulong_t), ret);
962 else if (off >= COMPAT_USER_SZ)
967 return put_user(tmp, ret);
970 static int compat_ptrace_write_user(struct task_struct *tsk, compat_ulong_t off,
974 mm_segment_t old_fs = get_fs();
976 if (off & 3 || off >= COMPAT_USER_SZ)
979 if (off >= sizeof(compat_elf_gregset_t))
983 ret = copy_regset_from_user(tsk, &user_aarch32_view,
984 REGSET_COMPAT_GPR, off,
985 sizeof(compat_ulong_t),
992 #ifdef CONFIG_HAVE_HW_BREAKPOINT
995 * Convert a virtual register number into an index for a thread_info
996 * breakpoint array. Breakpoints are identified using positive numbers
997 * whilst watchpoints are negative. The registers are laid out as pairs
998 * of (address, control), each pair mapping to a unique hw_breakpoint struct.
999 * Register 0 is reserved for describing resource information.
1001 static int compat_ptrace_hbp_num_to_idx(compat_long_t num)
1003 return (abs(num) - 1) >> 1;
1006 static int compat_ptrace_hbp_get_resource_info(u32 *kdata)
1008 u8 num_brps, num_wrps, debug_arch, wp_len;
1011 num_brps = hw_breakpoint_slots(TYPE_INST);
1012 num_wrps = hw_breakpoint_slots(TYPE_DATA);
1014 debug_arch = debug_monitors_arch();
1028 static int compat_ptrace_hbp_get(unsigned int note_type,
1029 struct task_struct *tsk,
1036 int err, idx = compat_ptrace_hbp_num_to_idx(num);;
1039 err = ptrace_hbp_get_addr(note_type, tsk, idx, &addr);
1042 err = ptrace_hbp_get_ctrl(note_type, tsk, idx, &ctrl);
1049 static int compat_ptrace_hbp_set(unsigned int note_type,
1050 struct task_struct *tsk,
1057 int err, idx = compat_ptrace_hbp_num_to_idx(num);
1061 err = ptrace_hbp_set_addr(note_type, tsk, idx, addr);
1064 err = ptrace_hbp_set_ctrl(note_type, tsk, idx, ctrl);
1070 static int compat_ptrace_gethbpregs(struct task_struct *tsk, compat_long_t num,
1071 compat_ulong_t __user *data)
1075 mm_segment_t old_fs = get_fs();
1080 ret = compat_ptrace_hbp_get(NT_ARM_HW_WATCH, tsk, num, &kdata);
1082 } else if (num == 0) {
1083 ret = compat_ptrace_hbp_get_resource_info(&kdata);
1086 ret = compat_ptrace_hbp_get(NT_ARM_HW_BREAK, tsk, num, &kdata);
1091 ret = put_user(kdata, data);
1096 static int compat_ptrace_sethbpregs(struct task_struct *tsk, compat_long_t num,
1097 compat_ulong_t __user *data)
1101 mm_segment_t old_fs = get_fs();
1106 ret = get_user(kdata, data);
1112 ret = compat_ptrace_hbp_set(NT_ARM_HW_WATCH, tsk, num, &kdata);
1114 ret = compat_ptrace_hbp_set(NT_ARM_HW_BREAK, tsk, num, &kdata);
1119 #endif /* CONFIG_HAVE_HW_BREAKPOINT */
1121 long compat_arch_ptrace(struct task_struct *child, compat_long_t request,
1122 compat_ulong_t caddr, compat_ulong_t cdata)
1124 unsigned long addr = caddr;
1125 unsigned long data = cdata;
1126 void __user *datap = compat_ptr(data);
1130 case PTRACE_PEEKUSR:
1131 ret = compat_ptrace_read_user(child, addr, datap);
1134 case PTRACE_POKEUSR:
1135 ret = compat_ptrace_write_user(child, addr, data);
1138 case COMPAT_PTRACE_GETREGS:
1139 ret = copy_regset_to_user(child,
1142 0, sizeof(compat_elf_gregset_t),
1146 case COMPAT_PTRACE_SETREGS:
1147 ret = copy_regset_from_user(child,
1150 0, sizeof(compat_elf_gregset_t),
1154 case COMPAT_PTRACE_GET_THREAD_AREA:
1155 ret = put_user((compat_ulong_t)child->thread.tp_value,
1156 (compat_ulong_t __user *)datap);
1159 case COMPAT_PTRACE_SET_SYSCALL:
1160 task_pt_regs(child)->syscallno = data;
1164 case COMPAT_PTRACE_GETVFPREGS:
1165 ret = copy_regset_to_user(child,
1172 case COMPAT_PTRACE_SETVFPREGS:
1173 ret = copy_regset_from_user(child,
1180 #ifdef CONFIG_HAVE_HW_BREAKPOINT
1181 case COMPAT_PTRACE_GETHBPREGS:
1182 ret = compat_ptrace_gethbpregs(child, addr, datap);
1185 case COMPAT_PTRACE_SETHBPREGS:
1186 ret = compat_ptrace_sethbpregs(child, addr, datap);
1191 ret = compat_ptrace_request(child, request, addr,
1198 #endif /* CONFIG_COMPAT */
1200 const struct user_regset_view *task_user_regset_view(struct task_struct *task)
1202 #ifdef CONFIG_COMPAT
1204 * Core dumping of 32-bit tasks or compat ptrace requests must use the
1205 * user_aarch32_view compatible with arm32. Native ptrace requests on
1206 * 32-bit children use an extended user_aarch32_ptrace_view to allow
1207 * access to the TLS register.
1209 if (is_compat_task())
1210 return &user_aarch32_view;
1211 else if (is_compat_thread(task_thread_info(task)))
1212 return &user_aarch32_ptrace_view;
1214 return &user_aarch64_view;
1217 long arch_ptrace(struct task_struct *child, long request,
1218 unsigned long addr, unsigned long data)
1220 return ptrace_request(child, request, addr, data);
1223 enum ptrace_syscall_dir {
1224 PTRACE_SYSCALL_ENTER = 0,
1225 PTRACE_SYSCALL_EXIT,
1228 static void tracehook_report_syscall(struct pt_regs *regs,
1229 enum ptrace_syscall_dir dir)
1232 unsigned long saved_reg;
1235 * A scratch register (ip(r12) on AArch32, x7 on AArch64) is
1236 * used to denote syscall entry/exit:
1238 regno = (is_compat_task() ? 12 : 7);
1239 saved_reg = regs->regs[regno];
1240 regs->regs[regno] = dir;
1242 if (dir == PTRACE_SYSCALL_EXIT)
1243 tracehook_report_syscall_exit(regs, 0);
1244 else if (tracehook_report_syscall_entry(regs))
1245 regs->syscallno = ~0UL;
1247 regs->regs[regno] = saved_reg;
1250 asmlinkage int syscall_trace_enter(struct pt_regs *regs)
1252 /* Do the secure computing check first; failures should be fast. */
1253 if (secure_computing() == -1)
1256 if (test_thread_flag(TIF_SYSCALL_TRACE))
1257 tracehook_report_syscall(regs, PTRACE_SYSCALL_ENTER);
1259 if (test_thread_flag(TIF_SYSCALL_TRACEPOINT))
1260 trace_sys_enter(regs, regs->syscallno);
1262 audit_syscall_entry(regs->syscallno, regs->orig_x0, regs->regs[1],
1263 regs->regs[2], regs->regs[3]);
1265 return regs->syscallno;
1268 asmlinkage void syscall_trace_exit(struct pt_regs *regs)
1270 audit_syscall_exit(regs);
1272 if (test_thread_flag(TIF_SYSCALL_TRACEPOINT))
1273 trace_sys_exit(regs, regs_return_value(regs));
1275 if (test_thread_flag(TIF_SYSCALL_TRACE))
1276 tracehook_report_syscall(regs, PTRACE_SYSCALL_EXIT);
1280 * Bits which are always architecturally RES0 per ARM DDI 0487A.h
1281 * Userspace cannot use these until they have an architectural meaning.
1282 * We also reserve IL for the kernel; SS is handled dynamically.
1284 #define SPSR_EL1_AARCH64_RES0_BITS \
1285 (GENMASK_ULL(63,32) | GENMASK_ULL(27, 22) | GENMASK_ULL(20, 10) | \
1287 #define SPSR_EL1_AARCH32_RES0_BITS \
1288 (GENMASK_ULL(63,32) | GENMASK_ULL(24, 22) | GENMASK_ULL(20,20))
1290 static int valid_compat_regs(struct user_pt_regs *regs)
1292 regs->pstate &= ~SPSR_EL1_AARCH32_RES0_BITS;
1294 if (!system_supports_mixed_endian_el0()) {
1295 if (IS_ENABLED(CONFIG_CPU_BIG_ENDIAN))
1296 regs->pstate |= COMPAT_PSR_E_BIT;
1298 regs->pstate &= ~COMPAT_PSR_E_BIT;
1301 if (user_mode(regs) && (regs->pstate & PSR_MODE32_BIT) &&
1302 (regs->pstate & COMPAT_PSR_A_BIT) == 0 &&
1303 (regs->pstate & COMPAT_PSR_I_BIT) == 0 &&
1304 (regs->pstate & COMPAT_PSR_F_BIT) == 0) {
1309 * Force PSR to a valid 32-bit EL0t, preserving the same bits as
1312 regs->pstate &= COMPAT_PSR_N_BIT | COMPAT_PSR_Z_BIT |
1313 COMPAT_PSR_C_BIT | COMPAT_PSR_V_BIT |
1314 COMPAT_PSR_Q_BIT | COMPAT_PSR_IT_MASK |
1315 COMPAT_PSR_GE_MASK | COMPAT_PSR_E_BIT |
1317 regs->pstate |= PSR_MODE32_BIT;
1322 static int valid_native_regs(struct user_pt_regs *regs)
1324 regs->pstate &= ~SPSR_EL1_AARCH64_RES0_BITS;
1326 if (user_mode(regs) && !(regs->pstate & PSR_MODE32_BIT) &&
1327 (regs->pstate & PSR_D_BIT) == 0 &&
1328 (regs->pstate & PSR_A_BIT) == 0 &&
1329 (regs->pstate & PSR_I_BIT) == 0 &&
1330 (regs->pstate & PSR_F_BIT) == 0) {
1334 /* Force PSR to a valid 64-bit EL0t */
1335 regs->pstate &= PSR_N_BIT | PSR_Z_BIT | PSR_C_BIT | PSR_V_BIT;
1341 * Are the current registers suitable for user mode? (used to maintain
1342 * security in signal handlers)
1344 int valid_user_regs(struct user_pt_regs *regs, struct task_struct *task)
1346 if (!test_tsk_thread_flag(task, TIF_SINGLESTEP))
1347 regs->pstate &= ~DBG_SPSR_SS;
1349 if (is_compat_thread(task_thread_info(task)))
1350 return valid_compat_regs(regs);
1352 return valid_native_regs(regs);