Re: [PATCH v4 18/26] arm64: vdso32: Replace TASK_SIZE_32 check in vgettimeofday

From: Catalin Marinas
Date: Tue Mar 17 2020 - 10:38:41 EST


On Tue, Mar 17, 2020 at 12:22:12PM +0000, Vincenzo Frascino wrote:
> diff --git a/arch/arm64/kernel/vdso32/vgettimeofday.c b/arch/arm64/kernel/vdso32/vgettimeofday.c
> index 54fc1c2ce93f..91138077b073 100644
> --- a/arch/arm64/kernel/vdso32/vgettimeofday.c
> +++ b/arch/arm64/kernel/vdso32/vgettimeofday.c
> @@ -8,11 +8,14 @@
> #include <linux/time.h>
> #include <linux/types.h>
>
> +#define VALID_CLOCK_ID(x) \
> + ((x >= 0) && (x < VDSO_BASES))
> +
> int __vdso_clock_gettime(clockid_t clock,
> struct old_timespec32 *ts)
> {
> /* The checks below are required for ABI consistency with arm */
> - if ((u32)ts >= TASK_SIZE_32)
> + if ((u32)ts > UINTPTR_MAX - sizeof(*ts) + 1)
> return -EFAULT;
>
> return __cvdso_clock_gettime32(clock, ts);

I probably miss something but I can't find the TASK_SIZE check in the
arch/arm/vdso/vgettimeofday.c code. Is this done elsewhere?

> @@ -22,7 +25,7 @@ int __vdso_clock_gettime64(clockid_t clock,
> struct __kernel_timespec *ts)
> {
> /* The checks below are required for ABI consistency with arm */
> - if ((u32)ts >= TASK_SIZE_32)
> + if ((u32)ts > UINTPTR_MAX - sizeof(*ts) + 1)
> return -EFAULT;
>
> return __cvdso_clock_gettime(clock, ts);
> @@ -38,9 +41,12 @@ int __vdso_clock_getres(clockid_t clock_id,
> struct old_timespec32 *res)
> {
> /* The checks below are required for ABI consistency with arm */
> - if ((u32)res >= TASK_SIZE_32)
> + if ((u32)res > UINTPTR_MAX - sizeof(res) + 1)
> return -EFAULT;
>
> + if (!VALID_CLOCK_ID(clock_id) && res == NULL)
> + return -EINVAL;

This last check needs an explanation. If the clock_id is invalid but res
is not NULL, we allow it. I don't see where the compatibility issue is,
arm32 doesn't have such check.

--
Catalin