Re: [PATCH v3 02/22] compat: provide compat_ptr() on all architectures

From: Arnd Bergmann
Date: Tue Jan 07 2020 - 03:40:27 EST


On Tue, Jan 7, 2020 at 9:20 AM H. Peter Anvin <hpa@xxxxxxxxx> wrote:
>
> <linuxppc-dev@xxxxxxxxxxxxxxxx>,oprofile-list@xxxxxxxxxxxx,linux-s390 <linux-s390@xxxxxxxxxxxxxxx>,sparclinux <sparclinux@xxxxxxxxxxxxxxx>
> From: hpa@xxxxxxxxx
> Message-ID: <41625F06-D755-4C82-86DF-A9415FEEE13D@xxxxxxxxx>
>
> On January 7, 2020 12:08:31 AM PST, Arnd Bergmann <arnd@xxxxxxxx> wrote:
> >On Tue, Jan 7, 2020 at 3:05 AM Michael Ellerman <mpe@xxxxxxxxxxxxxx>
> >wrote:
> >> Arnd Bergmann <arnd@xxxxxxxx> writes:
> >> > +
> >> > +static inline compat_uptr_t ptr_to_compat(void __user *uptr)
> >> > +{
> >> > + return (u32)(unsigned long)uptr;
> >> > +}
> >>
> >> Is there a reason we cast to u32 directly instead of using
> >compat_uptr_t?
> >
> >Probably Al found this to be more explicit at the time when he
> >introduced
> >it on all the architectures in 2005. I just moved it here and kept the
> >definition.
> >
> > Arnd
>
> Did compat_uptr_t exist back then?

Yes, compat_uptr_t (and the earlier compat_ptr_t) goes back
to at least 2003 with the introduction of compat_ptr().

These are some related commits from bitkeeper:

commit 29d04cca305a93cfa90afe1c6440ce5421837213
Author: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
Date: Sun Mar 23 04:59:16 2003 -0800

[PATCH] compat_uptr_t and compat_ptr

This creates compat_uptr_t (to represent a user mode pointer passed to
the kernel other than as a syscall parameter) and compat_ptr() to
convert it to a kernel pointer.

This fixes a couple of bugs in s390x (where the conversion of pointers
actually does something).

diff --git a/include/asm-s390x/compat.h b/include/asm-s390x/compat.h
index 55e23c9b36fe..d1e948ae4bff 100644
--- a/include/asm-s390x/compat.h
+++ b/include/asm-s390x/compat.h
@@ -101,4 +101,17 @@ typedef u32 compat_sigset_word;
#define COMPAT_OFF_T_MAX 0x7fffffff
#define COMPAT_LOFF_T_MAX 0x7fffffffffffffffL

+/*
+ * A pointer passed in from user mode. This should not
+ * be used for syscall parameters, just declare them
+ * as pointers because the syscall entry code will have
+ * appropriately comverted them already.
+ */
+typedef u32 compat_uptr_t;
+
+static inline void *compat_ptr(compat_ptr_t uptr)
+{
+ return (void *)(uptr & 0x7fffffffUL);
+}
+
#endif /* _ASM_S390X_COMPAT_H */


commit 9d814250b08868cb39cc5a4f43f5cbf5e517f5f4
Author: Alexander Viro <viro@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Tue Feb 1 21:21:39 2005 -0800

[PATCH] sparc64 compat annotations

same story as for amd64 - ptr_to_compat() + normal __user annotations

Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
Signed-off-by: Linus Torvalds <torvalds@xxxxxxxx>

diff --git a/include/asm-sparc64/compat.h b/include/asm-sparc64/compat.h
index 874b136ded90..e26d7d85c55a 100644
--- a/include/asm-sparc64/compat.h
+++ b/include/asm-sparc64/compat.h
@@ -121,6 +121,11 @@ static inline void __user *compat_ptr(compat_uptr_t uptr)
return (void __user *)(unsigned long)uptr;
}

+static inline compat_uptr_t ptr_to_compat(void __user *uptr)
+{
+ return (u32)(unsigned long)uptr;
+}
+
static __inline__ void __user *compat_alloc_user_space(long len)
{
struct pt_regs *regs = current_thread_info()->kregs;