From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.8 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER,INCLUDES_PATCH, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 35587C433DB for ; Fri, 19 Feb 2021 22:51:39 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id E666664EB3 for ; Fri, 19 Feb 2021 22:51:38 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229767AbhBSWvR (ORCPT ); Fri, 19 Feb 2021 17:51:17 -0500 Received: from vmicros1.altlinux.org ([194.107.17.57]:60876 "EHLO vmicros1.altlinux.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229577AbhBSWvP (ORCPT ); Fri, 19 Feb 2021 17:51:15 -0500 Received: from mua.local.altlinux.org (mua.local.altlinux.org [192.168.1.14]) by vmicros1.altlinux.org (Postfix) with ESMTP id 20AF88A309F; Sat, 20 Feb 2021 01:50:31 +0300 (MSK) Received: by mua.local.altlinux.org (Postfix, from userid 508) id E7F7A7CC8A2; Sat, 20 Feb 2021 01:50:30 +0300 (MSK) Date: Sat, 20 Feb 2021 01:50:30 +0300 From: "Dmitry V. Levin" To: "David S. Miller" Cc: "Eric W. Biederman" , Alexey Gladkov , Gleb Fotengauer-Malinovskiy , Anatoly Pugachev , sparclinux@vger.kernel.org, linux-kernel@vger.kernel.org Subject: [PATCH v2] sparc: make copy_thread honor pid namespaces Message-ID: <20210219225030.GA23520@altlinux.org> References: <20210217080000.GA25861@altlinux.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On sparc, fork and clone syscalls have an unusual semantics of returning the pid of the parent process to the child process. Apparently, the implementation did not honor pid namespaces at all, so the child used to get the pid of its parent in the init namespace. Fortunately, most users of these syscalls are not affected by this bug because they use another register to distinguish the parent process from its child, and the pid of the parent process is often discarded. Reproducer: $ gcc -Wall -O2 -xc - <<'EOF' #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include static void test_fork(void) { int pid = syscall(__NR_fork); if (pid < 0) err(1, "fork"); fprintf(stderr, "current: %d, parent: %d, fork returned: %d\n", getpid(), getppid(), pid); int status; if (wait(&status) < 0) { if (errno == ECHILD) _exit(0); err(1, "wait"); } if (!WIFEXITED(status) || WEXITSTATUS(status) != 0) errx(1, "wait: %#x", status); } int main(void) { test_fork(); if (unshare(CLONE_NEWPID | CLONE_NEWUSER) < 0) err(1, "unshare"); test_fork(); return 0; } EOF $ sh -c ./a.out current: 10001, parent: 10000, fork returned: 10002 current: 10002, parent: 10001, fork returned: 10001 current: 10001, parent: 10000, fork returned: 10003 current: 1, parent: 0, fork returned: 10001 This bug was found by strace test suite. Cc: Eric W. Biederman Cc: stable@vger.kernel.org Signed-off-by: Dmitry V. Levin --- v2: Replaced task_active_pid_ns(p) with current->nsproxy->pid_ns_for_children as suggested by Eric. arch/sparc/kernel/process_32.c | 3 ++- arch/sparc/kernel/process_64.c | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/arch/sparc/kernel/process_32.c b/arch/sparc/kernel/process_32.c index a02363735915..3be653e40204 100644 --- a/arch/sparc/kernel/process_32.c +++ b/arch/sparc/kernel/process_32.c @@ -368,7 +368,8 @@ int copy_thread(unsigned long clone_flags, unsigned long sp, unsigned long arg, #endif /* Set the return value for the child. */ - childregs->u_regs[UREG_I0] = current->pid; + childregs->u_regs[UREG_I0] = + task_pid_nr_ns(current, current->nsproxy->pid_ns_for_children); childregs->u_regs[UREG_I1] = 1; /* Set the return value for the parent. */ diff --git a/arch/sparc/kernel/process_64.c b/arch/sparc/kernel/process_64.c index 6f8c7822fc06..f53ef5cff46a 100644 --- a/arch/sparc/kernel/process_64.c +++ b/arch/sparc/kernel/process_64.c @@ -629,7 +629,8 @@ int copy_thread(unsigned long clone_flags, unsigned long sp, unsigned long arg, t->utraps[0]++; /* Set the return value for the child. */ - t->kregs->u_regs[UREG_I0] = current->pid; + t->kregs->u_regs[UREG_I0] = + task_pid_nr_ns(current, current->nsproxy->pid_ns_for_children); t->kregs->u_regs[UREG_I1] = 1; /* Set the second return value for the parent. */ -- ldv