ptrace.c 20.1 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9
/*
 * linux/kernel/ptrace.c
 *
 * (C) Copyright 1999 Linus Torvalds
 *
 * Common interfaces for "ptrace()" which we do not want
 * to continually duplicate across every architecture.
 */

10
#include <linux/capability.h>
L
Linus Torvalds 已提交
11 12 13 14 15 16 17 18
#include <linux/module.h>
#include <linux/sched.h>
#include <linux/errno.h>
#include <linux/mm.h>
#include <linux/highmem.h>
#include <linux/pagemap.h>
#include <linux/ptrace.h>
#include <linux/security.h>
19
#include <linux/signal.h>
A
Al Viro 已提交
20
#include <linux/audit.h>
21
#include <linux/pid_namespace.h>
22
#include <linux/syscalls.h>
R
Roland McGrath 已提交
23
#include <linux/uaccess.h>
24
#include <linux/regset.h>
L
Linus Torvalds 已提交
25

26

L
Linus Torvalds 已提交
27 28 29 30 31 32
/*
 * ptrace a task: make the debugger its new parent and
 * move it to the ptrace list.
 *
 * Must be called with the tasklist lock write-held.
 */
33
void __ptrace_link(struct task_struct *child, struct task_struct *new_parent)
L
Linus Torvalds 已提交
34
{
R
Roland McGrath 已提交
35 36
	BUG_ON(!list_empty(&child->ptrace_entry));
	list_add(&child->ptrace_entry, &new_parent->ptraced);
L
Linus Torvalds 已提交
37 38
	child->parent = new_parent;
}
R
Roland McGrath 已提交
39

L
Linus Torvalds 已提交
40 41 42 43 44 45 46
/*
 * Turn a tracing stop into a normal stop now, since with no tracer there
 * would be no way to wake it up with SIGCONT or SIGKILL.  If there was a
 * signal sent that would resume the child, but didn't because it was in
 * TASK_TRACED, resume it now.
 * Requires that irqs be disabled.
 */
A
Adrian Bunk 已提交
47
static void ptrace_untrace(struct task_struct *child)
L
Linus Torvalds 已提交
48 49
{
	spin_lock(&child->sighand->siglock);
M
Matthew Wilcox 已提交
50
	if (task_is_traced(child)) {
51 52 53 54 55 56
		/*
		 * If the group stop is completed or in progress,
		 * this thread was already counted as stopped.
		 */
		if (child->signal->flags & SIGNAL_STOP_STOPPED ||
		    child->signal->group_stop_count)
57
			__set_task_state(child, TASK_STOPPED);
58
		else
L
Linus Torvalds 已提交
59 60 61 62 63 64 65 66 67 68 69
			signal_wake_up(child, 1);
	}
	spin_unlock(&child->sighand->siglock);
}

/*
 * unptrace a task: move it back to its original parent and
 * remove it from the ptrace list.
 *
 * Must be called with the tasklist lock write-held.
 */
70
void __ptrace_unlink(struct task_struct *child)
L
Linus Torvalds 已提交
71
{
72 73
	BUG_ON(!child->ptrace);

L
Linus Torvalds 已提交
74
	child->ptrace = 0;
R
Roland McGrath 已提交
75 76
	child->parent = child->real_parent;
	list_del_init(&child->ptrace_entry);
L
Linus Torvalds 已提交
77

M
Matthew Wilcox 已提交
78
	if (task_is_traced(child))
79
		ptrace_untrace(child);
L
Linus Torvalds 已提交
80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96
}

/*
 * Check that we have indeed attached to the thing..
 */
int ptrace_check_attach(struct task_struct *child, int kill)
{
	int ret = -ESRCH;

	/*
	 * We take the read lock around doing both checks to close a
	 * possible race where someone else was tracing our child and
	 * detached between these two checks.  After this locked check,
	 * we are sure that this is our traced child and that can only
	 * be changed by us so it's not changing right after this.
	 */
	read_lock(&tasklist_lock);
97
	if ((child->ptrace & PT_PTRACED) && child->parent == current) {
L
Linus Torvalds 已提交
98
		ret = 0;
99 100 101 102
		/*
		 * child->sighand can't be NULL, release_task()
		 * does ptrace_unlink() before __exit_signal().
		 */
L
Linus Torvalds 已提交
103
		spin_lock_irq(&child->sighand->siglock);
104
		if (task_is_stopped(child))
L
Linus Torvalds 已提交
105
			child->state = TASK_TRACED;
106
		else if (!task_is_traced(child) && !kill)
L
Linus Torvalds 已提交
107 108 109 110 111
			ret = -ESRCH;
		spin_unlock_irq(&child->sighand->siglock);
	}
	read_unlock(&tasklist_lock);

112
	if (!ret && !kill)
R
Roland McGrath 已提交
113
		ret = wait_task_inactive(child, TASK_TRACED) ? 0 : -ESRCH;
L
Linus Torvalds 已提交
114 115 116 117 118

	/* All systems go.. */
	return ret;
}

119
int __ptrace_may_access(struct task_struct *task, unsigned int mode)
120
{
121
	const struct cred *cred = current_cred(), *tcred;
122

123 124 125 126 127 128 129 130 131 132 133 134
	/* May we inspect the given task?
	 * This check is used both for attaching with ptrace
	 * and for allowing access to sensitive information in /proc.
	 *
	 * ptrace_attach denies several cases that /proc allows
	 * because setting up the necessary parent/child relationship
	 * or halting the specified task is impossible.
	 */
	int dumpable = 0;
	/* Don't let security modules deny introspection */
	if (task == current)
		return 0;
135 136 137 138 139 140 141 142 143 144
	rcu_read_lock();
	tcred = __task_cred(task);
	if ((cred->uid != tcred->euid ||
	     cred->uid != tcred->suid ||
	     cred->uid != tcred->uid  ||
	     cred->gid != tcred->egid ||
	     cred->gid != tcred->sgid ||
	     cred->gid != tcred->gid) &&
	    !capable(CAP_SYS_PTRACE)) {
		rcu_read_unlock();
145
		return -EPERM;
146 147
	}
	rcu_read_unlock();
148
	smp_rmb();
149
	if (task->mm)
150
		dumpable = get_dumpable(task->mm);
151
	if (!dumpable && !capable(CAP_SYS_PTRACE))
152 153
		return -EPERM;

154
	return security_ptrace_access_check(task, mode);
155 156
}

157
bool ptrace_may_access(struct task_struct *task, unsigned int mode)
158 159 160
{
	int err;
	task_lock(task);
161
	err = __ptrace_may_access(task, mode);
162
	task_unlock(task);
R
Roland McGrath 已提交
163
	return !err;
164 165
}

166
static int ptrace_attach(struct task_struct *task)
L
Linus Torvalds 已提交
167 168
{
	int retval;
169

A
Al Viro 已提交
170 171
	audit_ptrace(task);

L
Linus Torvalds 已提交
172
	retval = -EPERM;
173 174
	if (unlikely(task->flags & PF_KTHREAD))
		goto out;
175
	if (same_thread_group(task, current))
176 177
		goto out;

178 179
	/*
	 * Protect exec's credential calculations against our interference;
180 181
	 * interference; SUID, SGID and LSM creds get determined differently
	 * under ptrace.
D
David Howells 已提交
182
	 */
183
	retval = -ERESTARTNOINTR;
184
	if (mutex_lock_interruptible(&task->signal->cred_guard_mutex))
D
David Howells 已提交
185
		goto out;
186

187
	task_lock(task);
188
	retval = __ptrace_may_access(task, PTRACE_MODE_ATTACH);
189
	task_unlock(task);
L
Linus Torvalds 已提交
190
	if (retval)
191
		goto unlock_creds;
L
Linus Torvalds 已提交
192

193
	write_lock_irq(&tasklist_lock);
194 195
	retval = -EPERM;
	if (unlikely(task->exit_state))
196
		goto unlock_tasklist;
197
	if (task->ptrace)
198
		goto unlock_tasklist;
199

200
	task->ptrace = PT_PTRACED;
L
Linus Torvalds 已提交
201 202 203 204
	if (capable(CAP_SYS_PTRACE))
		task->ptrace |= PT_PTRACE_CAP;

	__ptrace_link(task, current);
205
	send_sig_info(SIGSTOP, SEND_SIG_FORCED, task);
206 207

	retval = 0;
208 209 210
unlock_tasklist:
	write_unlock_irq(&tasklist_lock);
unlock_creds:
211
	mutex_unlock(&task->signal->cred_guard_mutex);
212
out:
L
Linus Torvalds 已提交
213 214 215
	return retval;
}

216 217 218 219 220 221
/**
 * ptrace_traceme  --  helper for PTRACE_TRACEME
 *
 * Performs checks and sets PT_PTRACED.
 * Should be used by all ptrace implementations for PTRACE_TRACEME.
 */
222
static int ptrace_traceme(void)
223 224 225
{
	int ret = -EPERM;

226 227
	write_lock_irq(&tasklist_lock);
	/* Are we already being traced? */
228 229 230 231 232 233 234 235 236 237 238 239
	if (!current->ptrace) {
		ret = security_ptrace_traceme(current->parent);
		/*
		 * Check PF_EXITING to ensure ->real_parent has not passed
		 * exit_ptrace(). Otherwise we don't report the error but
		 * pretend ->real_parent untraces us right after return.
		 */
		if (!ret && !(current->real_parent->flags & PF_EXITING)) {
			current->ptrace = PT_PTRACED;
			__ptrace_link(current, current->real_parent);
		}
	}
240 241
	write_unlock_irq(&tasklist_lock);

242 243 244
	return ret;
}

245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267
/*
 * Called with irqs disabled, returns true if childs should reap themselves.
 */
static int ignoring_children(struct sighand_struct *sigh)
{
	int ret;
	spin_lock(&sigh->siglock);
	ret = (sigh->action[SIGCHLD-1].sa.sa_handler == SIG_IGN) ||
	      (sigh->action[SIGCHLD-1].sa.sa_flags & SA_NOCLDWAIT);
	spin_unlock(&sigh->siglock);
	return ret;
}

/*
 * Called with tasklist_lock held for writing.
 * Unlink a traced task, and clean it up if it was a traced zombie.
 * Return true if it needs to be reaped with release_task().
 * (We can't call release_task() here because we already hold tasklist_lock.)
 *
 * If it's a zombie, our attachedness prevented normal parent notification
 * or self-reaping.  Do notification now if it would have happened earlier.
 * If it should reap itself, return true.
 *
268 269 270 271
 * If it's our own child, there is no notification to do. But if our normal
 * children self-reap, then this child was prevented by ptrace and we must
 * reap it now, in that case we must also wake up sub-threads sleeping in
 * do_wait().
272 273 274 275 276 277 278 279 280
 */
static bool __ptrace_detach(struct task_struct *tracer, struct task_struct *p)
{
	__ptrace_unlink(p);

	if (p->exit_state == EXIT_ZOMBIE) {
		if (!task_detached(p) && thread_group_empty(p)) {
			if (!same_thread_group(p->real_parent, tracer))
				do_notify_parent(p, p->exit_signal);
281 282
			else if (ignoring_children(tracer->sighand)) {
				__wake_up_parent(p, tracer);
283
				p->exit_signal = -1;
284
			}
285 286 287 288 289 290 291 292 293 294 295
		}
		if (task_detached(p)) {
			/* Mark it as in the process of being reaped. */
			p->exit_state = EXIT_DEAD;
			return true;
		}
	}

	return false;
}

296
static int ptrace_detach(struct task_struct *child, unsigned int data)
L
Linus Torvalds 已提交
297
{
298
	bool dead = false;
299

300
	if (!valid_signal(data))
301
		return -EIO;
L
Linus Torvalds 已提交
302 303 304

	/* Architecture-specific hardware disable .. */
	ptrace_disable(child);
305
	clear_tsk_thread_flag(child, TIF_SYSCALL_TRACE);
L
Linus Torvalds 已提交
306

307
	write_lock_irq(&tasklist_lock);
308 309 310 311
	/*
	 * This child can be already killed. Make sure de_thread() or
	 * our sub-thread doing do_wait() didn't do release_task() yet.
	 */
312 313
	if (child->ptrace) {
		child->exit_code = data;
314
		dead = __ptrace_detach(current, child);
315
	}
L
Linus Torvalds 已提交
316 317
	write_unlock_irq(&tasklist_lock);

318 319 320
	if (unlikely(dead))
		release_task(child);

L
Linus Torvalds 已提交
321 322 323
	return 0;
}

324
/*
325 326 327
 * Detach all tasks we were using ptrace on. Called with tasklist held
 * for writing, and returns with it held too. But note it can release
 * and reacquire the lock.
328 329
 */
void exit_ptrace(struct task_struct *tracer)
330 331
	__releases(&tasklist_lock)
	__acquires(&tasklist_lock)
332 333 334 335
{
	struct task_struct *p, *n;
	LIST_HEAD(ptrace_dead);

336 337 338
	if (likely(list_empty(&tracer->ptraced)))
		return;

339 340 341 342 343
	list_for_each_entry_safe(p, n, &tracer->ptraced, ptrace_entry) {
		if (__ptrace_detach(tracer, p))
			list_add(&p->ptrace_entry, &ptrace_dead);
	}

344
	write_unlock_irq(&tasklist_lock);
345 346 347 348 349 350
	BUG_ON(!list_empty(&tracer->ptraced));

	list_for_each_entry_safe(p, n, &ptrace_dead, ptrace_entry) {
		list_del_init(&p->ptrace_entry);
		release_task(p);
	}
351 352

	write_lock_irq(&tasklist_lock);
353 354
}

L
Linus Torvalds 已提交
355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374
int ptrace_readdata(struct task_struct *tsk, unsigned long src, char __user *dst, int len)
{
	int copied = 0;

	while (len > 0) {
		char buf[128];
		int this_len, retval;

		this_len = (len > sizeof(buf)) ? sizeof(buf) : len;
		retval = access_process_vm(tsk, src, buf, this_len, 0);
		if (!retval) {
			if (copied)
				break;
			return -EIO;
		}
		if (copy_to_user(dst, buf, retval))
			return -EFAULT;
		copied += retval;
		src += retval;
		dst += retval;
R
Roland McGrath 已提交
375
		len -= retval;
L
Linus Torvalds 已提交
376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399
	}
	return copied;
}

int ptrace_writedata(struct task_struct *tsk, char __user *src, unsigned long dst, int len)
{
	int copied = 0;

	while (len > 0) {
		char buf[128];
		int this_len, retval;

		this_len = (len > sizeof(buf)) ? sizeof(buf) : len;
		if (copy_from_user(buf, src, this_len))
			return -EFAULT;
		retval = access_process_vm(tsk, dst, buf, this_len, 1);
		if (!retval) {
			if (copied)
				break;
			return -EIO;
		}
		copied += retval;
		src += retval;
		dst += retval;
R
Roland McGrath 已提交
400
		len -= retval;
L
Linus Torvalds 已提交
401 402 403 404
	}
	return copied;
}

405
static int ptrace_setoptions(struct task_struct *child, unsigned long data)
L
Linus Torvalds 已提交
406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432
{
	child->ptrace &= ~PT_TRACE_MASK;

	if (data & PTRACE_O_TRACESYSGOOD)
		child->ptrace |= PT_TRACESYSGOOD;

	if (data & PTRACE_O_TRACEFORK)
		child->ptrace |= PT_TRACE_FORK;

	if (data & PTRACE_O_TRACEVFORK)
		child->ptrace |= PT_TRACE_VFORK;

	if (data & PTRACE_O_TRACECLONE)
		child->ptrace |= PT_TRACE_CLONE;

	if (data & PTRACE_O_TRACEEXEC)
		child->ptrace |= PT_TRACE_EXEC;

	if (data & PTRACE_O_TRACEVFORKDONE)
		child->ptrace |= PT_TRACE_VFORK_DONE;

	if (data & PTRACE_O_TRACEEXIT)
		child->ptrace |= PT_TRACE_EXIT;

	return (data & ~PTRACE_O_MASK) ? -EINVAL : 0;
}

433
static int ptrace_getsiginfo(struct task_struct *child, siginfo_t *info)
L
Linus Torvalds 已提交
434
{
435
	unsigned long flags;
L
Linus Torvalds 已提交
436 437
	int error = -ESRCH;

438
	if (lock_task_sighand(child, &flags)) {
L
Linus Torvalds 已提交
439 440
		error = -EINVAL;
		if (likely(child->last_siginfo != NULL)) {
441
			*info = *child->last_siginfo;
L
Linus Torvalds 已提交
442 443
			error = 0;
		}
444
		unlock_task_sighand(child, &flags);
L
Linus Torvalds 已提交
445 446 447 448
	}
	return error;
}

449
static int ptrace_setsiginfo(struct task_struct *child, const siginfo_t *info)
L
Linus Torvalds 已提交
450
{
451
	unsigned long flags;
L
Linus Torvalds 已提交
452 453
	int error = -ESRCH;

454
	if (lock_task_sighand(child, &flags)) {
L
Linus Torvalds 已提交
455 456
		error = -EINVAL;
		if (likely(child->last_siginfo != NULL)) {
457
			*child->last_siginfo = *info;
L
Linus Torvalds 已提交
458 459
			error = 0;
		}
460
		unlock_task_sighand(child, &flags);
L
Linus Torvalds 已提交
461 462 463 464
	}
	return error;
}

R
Roland McGrath 已提交
465 466 467 468 469 470 471

#ifdef PTRACE_SINGLESTEP
#define is_singlestep(request)		((request) == PTRACE_SINGLESTEP)
#else
#define is_singlestep(request)		0
#endif

472 473 474 475 476 477
#ifdef PTRACE_SINGLEBLOCK
#define is_singleblock(request)		((request) == PTRACE_SINGLEBLOCK)
#else
#define is_singleblock(request)		0
#endif

R
Roland McGrath 已提交
478 479 480 481 482 483
#ifdef PTRACE_SYSEMU
#define is_sysemu_singlestep(request)	((request) == PTRACE_SYSEMU_SINGLESTEP)
#else
#define is_sysemu_singlestep(request)	0
#endif

484 485
static int ptrace_resume(struct task_struct *child, long request,
			 unsigned long data)
R
Roland McGrath 已提交
486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501
{
	if (!valid_signal(data))
		return -EIO;

	if (request == PTRACE_SYSCALL)
		set_tsk_thread_flag(child, TIF_SYSCALL_TRACE);
	else
		clear_tsk_thread_flag(child, TIF_SYSCALL_TRACE);

#ifdef TIF_SYSCALL_EMU
	if (request == PTRACE_SYSEMU || request == PTRACE_SYSEMU_SINGLESTEP)
		set_tsk_thread_flag(child, TIF_SYSCALL_EMU);
	else
		clear_tsk_thread_flag(child, TIF_SYSCALL_EMU);
#endif

502 503 504 505 506
	if (is_singleblock(request)) {
		if (unlikely(!arch_has_block_step()))
			return -EIO;
		user_enable_block_step(child);
	} else if (is_singlestep(request) || is_sysemu_singlestep(request)) {
R
Roland McGrath 已提交
507 508 509
		if (unlikely(!arch_has_single_step()))
			return -EIO;
		user_enable_single_step(child);
R
Roland McGrath 已提交
510
	} else {
R
Roland McGrath 已提交
511
		user_disable_single_step(child);
R
Roland McGrath 已提交
512
	}
R
Roland McGrath 已提交
513 514 515 516 517 518 519

	child->exit_code = data;
	wake_up_process(child);

	return 0;
}

520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544
#ifdef CONFIG_HAVE_ARCH_TRACEHOOK

static const struct user_regset *
find_regset(const struct user_regset_view *view, unsigned int type)
{
	const struct user_regset *regset;
	int n;

	for (n = 0; n < view->n; ++n) {
		regset = view->regsets + n;
		if (regset->core_note_type == type)
			return regset;
	}

	return NULL;
}

static int ptrace_regset(struct task_struct *task, int req, unsigned int type,
			 struct iovec *kiov)
{
	const struct user_regset_view *view = task_user_regset_view(task);
	const struct user_regset *regset = find_regset(view, type);
	int regset_no;

	if (!regset || (kiov->iov_len % regset->size) != 0)
545
		return -EINVAL;
546 547 548 549 550 551 552 553 554 555 556 557 558 559 560

	regset_no = regset - view->regsets;
	kiov->iov_len = min(kiov->iov_len,
			    (__kernel_size_t) (regset->n * regset->size));

	if (req == PTRACE_GETREGSET)
		return copy_regset_to_user(task, view, regset_no, 0,
					   kiov->iov_len, kiov->iov_base);
	else
		return copy_regset_from_user(task, view, regset_no, 0,
					     kiov->iov_len, kiov->iov_base);
}

#endif

L
Linus Torvalds 已提交
561
int ptrace_request(struct task_struct *child, long request,
562
		   unsigned long addr, unsigned long data)
L
Linus Torvalds 已提交
563 564
{
	int ret = -EIO;
565
	siginfo_t siginfo;
N
Namhyung Kim 已提交
566 567
	void __user *datavp = (void __user *) data;
	unsigned long __user *datalp = datavp;
L
Linus Torvalds 已提交
568 569

	switch (request) {
570 571 572 573 574 575 576
	case PTRACE_PEEKTEXT:
	case PTRACE_PEEKDATA:
		return generic_ptrace_peekdata(child, addr, data);
	case PTRACE_POKETEXT:
	case PTRACE_POKEDATA:
		return generic_ptrace_pokedata(child, addr, data);

L
Linus Torvalds 已提交
577 578 579 580 581 582 583
#ifdef PTRACE_OLDSETOPTIONS
	case PTRACE_OLDSETOPTIONS:
#endif
	case PTRACE_SETOPTIONS:
		ret = ptrace_setoptions(child, data);
		break;
	case PTRACE_GETEVENTMSG:
N
Namhyung Kim 已提交
584
		ret = put_user(child->ptrace_message, datalp);
L
Linus Torvalds 已提交
585
		break;
586

L
Linus Torvalds 已提交
587
	case PTRACE_GETSIGINFO:
588 589
		ret = ptrace_getsiginfo(child, &siginfo);
		if (!ret)
N
Namhyung Kim 已提交
590
			ret = copy_siginfo_to_user(datavp, &siginfo);
L
Linus Torvalds 已提交
591
		break;
592

L
Linus Torvalds 已提交
593
	case PTRACE_SETSIGINFO:
N
Namhyung Kim 已提交
594
		if (copy_from_user(&siginfo, datavp, sizeof siginfo))
595 596 597
			ret = -EFAULT;
		else
			ret = ptrace_setsiginfo(child, &siginfo);
L
Linus Torvalds 已提交
598
		break;
599

A
Alexey Dobriyan 已提交
600 601 602
	case PTRACE_DETACH:	 /* detach a process that was attached. */
		ret = ptrace_detach(child, data);
		break;
R
Roland McGrath 已提交
603

604 605
#ifdef CONFIG_BINFMT_ELF_FDPIC
	case PTRACE_GETFDPIC: {
606
		struct mm_struct *mm = get_task_mm(child);
607 608
		unsigned long tmp = 0;

609 610 611 612
		ret = -ESRCH;
		if (!mm)
			break;

613 614
		switch (addr) {
		case PTRACE_GETFDPIC_EXEC:
615
			tmp = mm->context.exec_fdpic_loadmap;
616 617
			break;
		case PTRACE_GETFDPIC_INTERP:
618
			tmp = mm->context.interp_fdpic_loadmap;
619 620 621 622
			break;
		default:
			break;
		}
623
		mmput(mm);
624

N
Namhyung Kim 已提交
625
		ret = put_user(tmp, datalp);
626 627 628 629
		break;
	}
#endif

R
Roland McGrath 已提交
630 631 632
#ifdef PTRACE_SINGLESTEP
	case PTRACE_SINGLESTEP:
#endif
633 634 635
#ifdef PTRACE_SINGLEBLOCK
	case PTRACE_SINGLEBLOCK:
#endif
R
Roland McGrath 已提交
636 637 638 639 640 641 642 643 644 645 646 647 648
#ifdef PTRACE_SYSEMU
	case PTRACE_SYSEMU:
	case PTRACE_SYSEMU_SINGLESTEP:
#endif
	case PTRACE_SYSCALL:
	case PTRACE_CONT:
		return ptrace_resume(child, request, data);

	case PTRACE_KILL:
		if (child->exit_state)	/* already dead */
			return 0;
		return ptrace_resume(child, request, SIGKILL);

649 650 651 652 653
#ifdef CONFIG_HAVE_ARCH_TRACEHOOK
	case PTRACE_GETREGSET:
	case PTRACE_SETREGSET:
	{
		struct iovec kiov;
N
Namhyung Kim 已提交
654
		struct iovec __user *uiov = datavp;
655 656 657 658 659 660 661 662 663 664 665 666 667 668

		if (!access_ok(VERIFY_WRITE, uiov, sizeof(*uiov)))
			return -EFAULT;

		if (__get_user(kiov.iov_base, &uiov->iov_base) ||
		    __get_user(kiov.iov_len, &uiov->iov_len))
			return -EFAULT;

		ret = ptrace_regset(child, request, addr, &kiov);
		if (!ret)
			ret = __put_user(kiov.iov_len, &uiov->iov_len);
		break;
	}
#endif
L
Linus Torvalds 已提交
669 670 671 672 673 674
	default:
		break;
	}

	return ret;
}
675

676
static struct task_struct *ptrace_get_task_struct(pid_t pid)
677 678
{
	struct task_struct *child;
679

680
	rcu_read_lock();
681
	child = find_task_by_vpid(pid);
682 683
	if (child)
		get_task_struct(child);
684
	rcu_read_unlock();
685

686
	if (!child)
687 688
		return ERR_PTR(-ESRCH);
	return child;
689 690
}

691 692 693 694
#ifndef arch_ptrace_attach
#define arch_ptrace_attach(child)	do { } while (0)
#endif

695 696
SYSCALL_DEFINE4(ptrace, long, request, long, pid, unsigned long, addr,
		unsigned long, data)
697 698 699 700
{
	struct task_struct *child;
	long ret;

701 702
	if (request == PTRACE_TRACEME) {
		ret = ptrace_traceme();
703 704
		if (!ret)
			arch_ptrace_attach(current);
705
		goto out;
706 707 708 709 710 711 712
	}

	child = ptrace_get_task_struct(pid);
	if (IS_ERR(child)) {
		ret = PTR_ERR(child);
		goto out;
	}
713 714 715

	if (request == PTRACE_ATTACH) {
		ret = ptrace_attach(child);
716 717 718 719 720 721
		/*
		 * Some architectures need to do book-keeping after
		 * a ptrace attach.
		 */
		if (!ret)
			arch_ptrace_attach(child);
722
		goto out_put_task_struct;
723 724 725 726 727 728 729 730 731 732 733 734 735
	}

	ret = ptrace_check_attach(child, request == PTRACE_KILL);
	if (ret < 0)
		goto out_put_task_struct;

	ret = arch_ptrace(child, request, addr, data);

 out_put_task_struct:
	put_task_struct(child);
 out:
	return ret;
}
A
Alexey Dobriyan 已提交
736

737 738
int generic_ptrace_peekdata(struct task_struct *tsk, unsigned long addr,
			    unsigned long data)
A
Alexey Dobriyan 已提交
739 740 741 742 743 744 745 746 747
{
	unsigned long tmp;
	int copied;

	copied = access_process_vm(tsk, addr, &tmp, sizeof(tmp), 0);
	if (copied != sizeof(tmp))
		return -EIO;
	return put_user(tmp, (unsigned long __user *)data);
}
A
Alexey Dobriyan 已提交
748

749 750
int generic_ptrace_pokedata(struct task_struct *tsk, unsigned long addr,
			    unsigned long data)
A
Alexey Dobriyan 已提交
751 752 753 754 755 756
{
	int copied;

	copied = access_process_vm(tsk, addr, &data, sizeof(data), 1);
	return (copied == sizeof(data)) ? 0 : -EIO;
}
R
Roland McGrath 已提交
757

758
#if defined CONFIG_COMPAT
R
Roland McGrath 已提交
759 760 761 762 763 764 765
#include <linux/compat.h>

int compat_ptrace_request(struct task_struct *child, compat_long_t request,
			  compat_ulong_t addr, compat_ulong_t data)
{
	compat_ulong_t __user *datap = compat_ptr(data);
	compat_ulong_t word;
766
	siginfo_t siginfo;
R
Roland McGrath 已提交
767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788
	int ret;

	switch (request) {
	case PTRACE_PEEKTEXT:
	case PTRACE_PEEKDATA:
		ret = access_process_vm(child, addr, &word, sizeof(word), 0);
		if (ret != sizeof(word))
			ret = -EIO;
		else
			ret = put_user(word, datap);
		break;

	case PTRACE_POKETEXT:
	case PTRACE_POKEDATA:
		ret = access_process_vm(child, addr, &data, sizeof(data), 1);
		ret = (ret != sizeof(data) ? -EIO : 0);
		break;

	case PTRACE_GETEVENTMSG:
		ret = put_user((compat_ulong_t) child->ptrace_message, datap);
		break;

789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804
	case PTRACE_GETSIGINFO:
		ret = ptrace_getsiginfo(child, &siginfo);
		if (!ret)
			ret = copy_siginfo_to_user32(
				(struct compat_siginfo __user *) datap,
				&siginfo);
		break;

	case PTRACE_SETSIGINFO:
		memset(&siginfo, 0, sizeof siginfo);
		if (copy_siginfo_from_user32(
			    &siginfo, (struct compat_siginfo __user *) datap))
			ret = -EFAULT;
		else
			ret = ptrace_setsiginfo(child, &siginfo);
		break;
805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830
#ifdef CONFIG_HAVE_ARCH_TRACEHOOK
	case PTRACE_GETREGSET:
	case PTRACE_SETREGSET:
	{
		struct iovec kiov;
		struct compat_iovec __user *uiov =
			(struct compat_iovec __user *) datap;
		compat_uptr_t ptr;
		compat_size_t len;

		if (!access_ok(VERIFY_WRITE, uiov, sizeof(*uiov)))
			return -EFAULT;

		if (__get_user(ptr, &uiov->iov_base) ||
		    __get_user(len, &uiov->iov_len))
			return -EFAULT;

		kiov.iov_base = compat_ptr(ptr);
		kiov.iov_len = len;

		ret = ptrace_regset(child, request, addr, &kiov);
		if (!ret)
			ret = __put_user(kiov.iov_len, &uiov->iov_len);
		break;
	}
#endif
831

R
Roland McGrath 已提交
832 833 834 835 836 837
	default:
		ret = ptrace_request(child, request, addr, data);
	}

	return ret;
}
R
Roland McGrath 已提交
838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875

asmlinkage long compat_sys_ptrace(compat_long_t request, compat_long_t pid,
				  compat_long_t addr, compat_long_t data)
{
	struct task_struct *child;
	long ret;

	if (request == PTRACE_TRACEME) {
		ret = ptrace_traceme();
		goto out;
	}

	child = ptrace_get_task_struct(pid);
	if (IS_ERR(child)) {
		ret = PTR_ERR(child);
		goto out;
	}

	if (request == PTRACE_ATTACH) {
		ret = ptrace_attach(child);
		/*
		 * Some architectures need to do book-keeping after
		 * a ptrace attach.
		 */
		if (!ret)
			arch_ptrace_attach(child);
		goto out_put_task_struct;
	}

	ret = ptrace_check_attach(child, request == PTRACE_KILL);
	if (!ret)
		ret = compat_arch_ptrace(child, request, addr, data);

 out_put_task_struct:
	put_task_struct(child);
 out:
	return ret;
}
876
#endif	/* CONFIG_COMPAT */