[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-arm] [PATCH for-2.12] linux-user/signal.c: Ensure AArch64 sign
From: |
Laurent Vivier |
Subject: |
Re: [Qemu-arm] [PATCH for-2.12] linux-user/signal.c: Ensure AArch64 signal frame isn't too small |
Date: |
Mon, 9 Apr 2018 16:48:57 +0200 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 |
Le 09/04/2018 à 16:07, Peter Maydell a écrit :
> The AArch64 signal frame design was extended for SVE in commit
> 8c5931de0ac77388096d79ceb, so that instead of having a fixed setup we
> now add various records to the frame, with some of them possibly
> overflowing into an extra space outside the original 4K reserved
> block in the target_sigcontext. However, we failed to ensure that we
> always at least allocate the 4K reserved block. This is ABI, and
> some userspace programs rely on it. In particular the dash shell
> would segfault if the frame wasn't as big enough.
>
> (Compare the kernel's sigframe_size() function in
> arch/arm64/kernel/signal.c.)
>
> Reported-by: Richard Henwood <address@hidden>
> Fixes: https://bugs.launchpad.net/bugs/1761535
> Fixes: 8c5931de0ac77388096d79ceb
> Signed-off-by: Peter Maydell <address@hidden>
> ---
> linux-user/signal.c | 6 ++++++
> 1 file changed, 6 insertions(+)
>
> diff --git a/linux-user/signal.c b/linux-user/signal.c
> index 046d4c8aa0..8d9e6e8410 100644
> --- a/linux-user/signal.c
> +++ b/linux-user/signal.c
> @@ -1850,6 +1850,12 @@ static void target_setup_frame(int usig, struct
> target_sigaction *ka,
> fr_ofs = layout.total_size;
> layout.total_size += sizeof(struct target_rt_frame_record);
>
> + /* We must always provide at least the standard 4K reserved space,
> + * even if we don't use all of it (this is part of the ABI)
> + */
> + layout.total_size = MAX(layout.total_size,
> + sizeof(struct target_rt_sigframe));
> +
> frame_addr = get_sigframe(ka, env, layout.total_size);
> trace_user_setup_frame(env, frame_addr);
> if (!lock_user_struct(VERIFY_WRITE, frame, frame_addr, 0)) {
>
Reviewed-by: Laurent Vivier <address@hidden>