From: Linus Torvalds <torvalds@linux-foundation.org>
To: Stas Sergeev <stsp@list.ru>
Cc: Andy Lutomirski <luto@amacapital.net>,
Linux kernel <linux-kernel@vger.kernel.org>
Subject: Re: [regression] x86/signal/64: Fix SS handling for signals delivered to 64-bit programs breaks dosemu
Date: Thu, 13 Aug 2015 08:37:37 -0700 [thread overview]
Message-ID: <CA+55aFw5DzEn+jYmY0KwbkytBzowo45o3Czh1cQZ_aaR1+WZYA@mail.gmail.com> (raw)
In-Reply-To: <55CA90B4.2010205@list.ru>
[-- Attachment #1: Type: text/plain, Size: 736 bytes --]
On Tue, Aug 11, 2015 at 5:17 PM, Stas Sergeev <stsp@list.ru> wrote:
>
> I realize this patch may be good to have in general, but
> breaking userspace without a single warning is a bit
> discouraging. Seems like the old "we don't break userspace"
> rule have gone.
That rule hasn't gone anywhere.
Does a plain revert just fix everything? Because if so, that's the
right thing to do, and we can just re-visit this later.
I don't understand why Andy and Ingo are even discussing this. What
the f*ck, guys?
Stas, can you verify that this actually fixes it? There's two
different versions here: one that reverts *just* that one commit, and
one that reverts the fs/gs changes too. Can you test them both?
Linus
[-- Attachment #2: patch.diff --]
[-- Type: text/plain, Size: 4655 bytes --]
commit 68b72e2a41ae36de41a404e14388f73b16c4debe
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Thu Aug 13 08:25:20 2015 -0700
Revert x86 sigcontext cleanups
This reverts commits 9a036b93a344 ("x86/signal/64: Remove 'fs' and 'gs'
from sigcontext") and c6f2062935c8 ("x86/signal/64: Fix SS handling for
signals delivered to 64-bit programs").
They were cleanups, but they don't really matter,a nd they break dosemu
by changing the signal stack layout.
Reported-by: Stas Sergeev <stsp@list.ru>
Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Ingo Molnar <mingo@kernel.org>
Cc: stable@vger.kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
---
arch/x86/include/asm/sigcontext.h | 6 +++---
arch/x86/include/uapi/asm/sigcontext.h | 21 +++------------------
arch/x86/kernel/signal.c | 26 +++++++++++---------------
3 files changed, 17 insertions(+), 36 deletions(-)
diff --git a/arch/x86/include/asm/sigcontext.h b/arch/x86/include/asm/sigcontext.h
index 6fe6b182c998..9dfce4e0417d 100644
--- a/arch/x86/include/asm/sigcontext.h
+++ b/arch/x86/include/asm/sigcontext.h
@@ -57,9 +57,9 @@ struct sigcontext {
unsigned long ip;
unsigned long flags;
unsigned short cs;
- unsigned short __pad2; /* Was called gs, but was always zero. */
- unsigned short __pad1; /* Was called fs, but was always zero. */
- unsigned short ss;
+ unsigned short gs;
+ unsigned short fs;
+ unsigned short __pad0;
unsigned long err;
unsigned long trapno;
unsigned long oldmask;
diff --git a/arch/x86/include/uapi/asm/sigcontext.h b/arch/x86/include/uapi/asm/sigcontext.h
index 0e8a973de9ee..40836a9a7250 100644
--- a/arch/x86/include/uapi/asm/sigcontext.h
+++ b/arch/x86/include/uapi/asm/sigcontext.h
@@ -177,24 +177,9 @@ struct sigcontext {
__u64 rip;
__u64 eflags; /* RFLAGS */
__u16 cs;
-
- /*
- * Prior to 2.5.64 ("[PATCH] x86-64 updates for 2.5.64-bk3"),
- * Linux saved and restored fs and gs in these slots. This
- * was counterproductive, as fsbase and gsbase were never
- * saved, so arch_prctl was presumably unreliable.
- *
- * If these slots are ever needed for any other purpose, there
- * is some risk that very old 64-bit binaries could get
- * confused. I doubt that many such binaries still work,
- * though, since the same patch in 2.5.64 also removed the
- * 64-bit set_thread_area syscall, so it appears that there is
- * no TLS API that works in both pre- and post-2.5.64 kernels.
- */
- __u16 __pad2; /* Was gs. */
- __u16 __pad1; /* Was fs. */
-
- __u16 ss;
+ __u16 gs;
+ __u16 fs;
+ __u16 __pad0;
__u64 err;
__u64 trapno;
__u64 oldmask;
diff --git a/arch/x86/kernel/signal.c b/arch/x86/kernel/signal.c
index 206996c1669d..71820c42b6ce 100644
--- a/arch/x86/kernel/signal.c
+++ b/arch/x86/kernel/signal.c
@@ -93,8 +93,15 @@ int restore_sigcontext(struct pt_regs *regs, struct sigcontext __user *sc)
COPY(r15);
#endif /* CONFIG_X86_64 */
+#ifdef CONFIG_X86_32
COPY_SEG_CPL3(cs);
COPY_SEG_CPL3(ss);
+#else /* !CONFIG_X86_32 */
+ /* Kernel saves and restores only the CS segment register on signals,
+ * which is the bare minimum needed to allow mixed 32/64-bit code.
+ * App's signal handler can save/restore other segments if needed. */
+ COPY_SEG_CPL3(cs);
+#endif /* CONFIG_X86_32 */
get_user_ex(tmpflags, &sc->flags);
regs->flags = (regs->flags & ~FIX_EFLAGS) | (tmpflags & FIX_EFLAGS);
@@ -154,9 +161,8 @@ int setup_sigcontext(struct sigcontext __user *sc, void __user *fpstate,
#else /* !CONFIG_X86_32 */
put_user_ex(regs->flags, &sc->flags);
put_user_ex(regs->cs, &sc->cs);
- put_user_ex(0, &sc->__pad2);
- put_user_ex(0, &sc->__pad1);
- put_user_ex(regs->ss, &sc->ss);
+ put_user_ex(0, &sc->gs);
+ put_user_ex(0, &sc->fs);
#endif /* CONFIG_X86_32 */
put_user_ex(fpstate, &sc->fpstate);
@@ -451,19 +457,9 @@ static int __setup_rt_frame(int sig, struct ksignal *ksig,
regs->sp = (unsigned long)frame;
- /*
- * Set up the CS and SS registers to run signal handlers in
- * 64-bit mode, even if the handler happens to be interrupting
- * 32-bit or 16-bit code.
- *
- * SS is subtle. In 64-bit mode, we don't need any particular
- * SS descriptor, but we do need SS to be valid. It's possible
- * that the old SS is entirely bogus -- this can happen if the
- * signal we're trying to deliver is #GP or #SS caused by a bad
- * SS value.
- */
+ /* Set up the CS register to run signal handlers in 64-bit mode,
+ even if the handler happens to be interrupting 32-bit code. */
regs->cs = __USER_CS;
- regs->ss = __USER_DS;
return 0;
}
[-- Attachment #3: patch-minimal.diff --]
[-- Type: text/plain, Size: 2970 bytes --]
arch/x86/include/asm/sigcontext.h | 2 +-
arch/x86/include/uapi/asm/sigcontext.h | 2 +-
arch/x86/kernel/signal.c | 22 +++++++++-------------
3 files changed, 11 insertions(+), 15 deletions(-)
diff --git a/arch/x86/include/asm/sigcontext.h b/arch/x86/include/asm/sigcontext.h
index 6fe6b182c998..2cefce9b52bd 100644
--- a/arch/x86/include/asm/sigcontext.h
+++ b/arch/x86/include/asm/sigcontext.h
@@ -59,7 +59,7 @@ struct sigcontext {
unsigned short cs;
unsigned short __pad2; /* Was called gs, but was always zero. */
unsigned short __pad1; /* Was called fs, but was always zero. */
- unsigned short ss;
+ unsigned short __pad0;
unsigned long err;
unsigned long trapno;
unsigned long oldmask;
diff --git a/arch/x86/include/uapi/asm/sigcontext.h b/arch/x86/include/uapi/asm/sigcontext.h
index 0e8a973de9ee..b659f3ee464d 100644
--- a/arch/x86/include/uapi/asm/sigcontext.h
+++ b/arch/x86/include/uapi/asm/sigcontext.h
@@ -194,7 +194,7 @@ struct sigcontext {
__u16 __pad2; /* Was gs. */
__u16 __pad1; /* Was fs. */
- __u16 ss;
+ __u16 __pad0;
__u64 err;
__u64 trapno;
__u64 oldmask;
diff --git a/arch/x86/kernel/signal.c b/arch/x86/kernel/signal.c
index 206996c1669d..cecc669d397a 100644
--- a/arch/x86/kernel/signal.c
+++ b/arch/x86/kernel/signal.c
@@ -93,8 +93,15 @@ int restore_sigcontext(struct pt_regs *regs, struct sigcontext __user *sc)
COPY(r15);
#endif /* CONFIG_X86_64 */
+#ifdef CONFIG_X86_32
COPY_SEG_CPL3(cs);
COPY_SEG_CPL3(ss);
+#else /* !CONFIG_X86_32 */
+ /* Kernel saves and restores only the CS segment register on signals,
+ * which is the bare minimum needed to allow mixed 32/64-bit code.
+ * App's signal handler can save/restore other segments if needed. */
+ COPY_SEG_CPL3(cs);
+#endif /* CONFIG_X86_32 */
get_user_ex(tmpflags, &sc->flags);
regs->flags = (regs->flags & ~FIX_EFLAGS) | (tmpflags & FIX_EFLAGS);
@@ -156,7 +163,6 @@ int setup_sigcontext(struct sigcontext __user *sc, void __user *fpstate,
put_user_ex(regs->cs, &sc->cs);
put_user_ex(0, &sc->__pad2);
put_user_ex(0, &sc->__pad1);
- put_user_ex(regs->ss, &sc->ss);
#endif /* CONFIG_X86_32 */
put_user_ex(fpstate, &sc->fpstate);
@@ -451,19 +457,9 @@ static int __setup_rt_frame(int sig, struct ksignal *ksig,
regs->sp = (unsigned long)frame;
- /*
- * Set up the CS and SS registers to run signal handlers in
- * 64-bit mode, even if the handler happens to be interrupting
- * 32-bit or 16-bit code.
- *
- * SS is subtle. In 64-bit mode, we don't need any particular
- * SS descriptor, but we do need SS to be valid. It's possible
- * that the old SS is entirely bogus -- this can happen if the
- * signal we're trying to deliver is #GP or #SS caused by a bad
- * SS value.
- */
+ /* Set up the CS register to run signal handlers in 64-bit mode,
+ even if the handler happens to be interrupting 32-bit code. */
regs->cs = __USER_CS;
- regs->ss = __USER_DS;
return 0;
}
next prev parent reply other threads:[~2015-08-13 15:37 UTC|newest]
Thread overview: 121+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-08-12 0:17 [regression] x86/signal/64: Fix SS handling for signals delivered to 64-bit programs breaks dosemu Stas Sergeev
2015-08-12 0:38 ` Andy Lutomirski
2015-08-12 8:02 ` Stas Sergeev
2015-08-12 16:19 ` Andy Lutomirski
2015-08-12 17:00 ` Stas Sergeev
2015-08-12 18:25 ` Andy Lutomirski
2015-08-12 18:55 ` Stas Sergeev
2015-08-12 19:20 ` Andy Lutomirski
2015-08-12 19:55 ` Stas Sergeev
2015-08-12 20:01 ` Andy Lutomirski
2015-08-12 20:14 ` Stas Sergeev
2015-08-12 20:28 ` Andy Lutomirski
2015-08-12 20:45 ` Stas Sergeev
2015-08-12 20:47 ` Andy Lutomirski
2015-08-12 20:55 ` Stas Sergeev
2015-08-12 21:37 ` Andy Lutomirski
2015-08-12 21:50 ` Stas Sergeev
2015-08-12 22:00 ` Andy Lutomirski
2015-08-13 8:39 ` Ingo Molnar
2015-08-13 10:14 ` Stas Sergeev
2015-08-13 12:44 ` Stas Sergeev
2015-08-13 14:58 ` Andy Lutomirski
2015-08-13 15:22 ` Stas Sergeev
2015-08-13 15:38 ` Andy Lutomirski
2015-08-13 16:03 ` Stas Sergeev
2015-08-13 16:09 ` Andy Lutomirski
2015-08-13 16:20 ` Stas Sergeev
2015-08-13 16:24 ` Andy Lutomirski
2015-08-13 16:38 ` Stas Sergeev
2015-08-13 16:42 ` Andy Lutomirski
2015-08-13 16:48 ` Stas Sergeev
2015-08-13 16:59 ` Andy Lutomirski
2015-08-13 17:13 ` Stas Sergeev
2015-08-13 17:17 ` Andy Lutomirski
2015-08-13 18:00 ` Stas Sergeev
2015-08-13 18:05 ` Andy Lutomirski
2015-08-13 18:19 ` Stas Sergeev
2015-08-13 18:25 ` Andy Lutomirski
2015-08-13 18:35 ` Stas Sergeev
2015-08-22 12:38 ` Ingo Molnar
2015-08-22 14:19 ` Stas Sergeev
2015-08-23 6:25 ` Ingo Molnar
2015-08-13 11:08 ` Stas Sergeev
2015-08-13 15:37 ` Linus Torvalds [this message]
2015-08-13 15:43 ` Andy Lutomirski
2015-08-13 16:19 ` Linus Torvalds
2015-08-13 16:23 ` Andy Lutomirski
2015-08-13 16:34 ` Linus Torvalds
2015-08-13 16:43 ` Linus Torvalds
2015-08-13 16:44 ` Andy Lutomirski
2015-08-13 17:00 ` Brian Gerst
2015-08-18 6:29 ` Stas Sergeev
2015-08-18 22:42 ` Andy Lutomirski
2015-08-18 22:47 ` Andy Lutomirski
2015-08-19 9:35 ` Stas Sergeev
2015-08-19 15:46 ` Andy Lutomirski
2015-08-19 16:30 ` Stas Sergeev
2015-09-02 5:12 ` Andy Lutomirski
2015-09-02 9:17 ` Stas Sergeev
2015-09-02 14:21 ` Andy Lutomirski
2015-09-02 15:02 ` Andy Lutomirski
2015-09-02 17:46 ` Stas Sergeev
2015-09-02 18:17 ` Andy Lutomirski
2015-09-02 18:23 ` Stas Sergeev
2015-09-02 19:06 ` Andy Lutomirski
2015-09-02 21:01 ` Stas Sergeev
2015-09-02 21:39 ` Andy Lutomirski
2015-09-02 22:25 ` Stas Sergeev
2015-09-02 22:25 ` Andy Lutomirski
2015-09-02 23:01 ` Stas Sergeev
2015-08-19 10:10 ` Stas Sergeev
2015-08-19 15:35 ` Andy Lutomirski
2015-08-14 8:10 ` Cyrill Gorcunov
2015-08-13 17:51 ` Stas Sergeev
2015-08-13 18:35 ` Linus Torvalds
2015-08-13 18:41 ` Andy Lutomirski
2015-08-13 19:05 ` Stas Sergeev
2015-08-13 19:49 ` Andy Lutomirski
2015-08-13 20:09 ` Stas Sergeev
2015-08-13 19:53 ` Linus Torvalds
2015-08-13 20:08 ` Cyrill Gorcunov
2015-08-13 20:09 ` Linus Torvalds
2015-08-13 21:42 ` Raymond Jennings
2015-08-13 21:46 ` Linus Torvalds
2015-08-13 22:01 ` Raymond Jennings
2015-08-13 22:05 ` Stas Sergeev
2015-08-13 23:05 ` Linus Torvalds
2015-08-13 23:18 ` Linus Torvalds
2015-08-13 23:35 ` Raymond Jennings
2015-08-13 23:43 ` Stas Sergeev
2015-08-14 0:02 ` Linus Torvalds
2015-08-13 22:02 ` Stas Sergeev
2015-08-13 22:11 ` Andy Lutomirski
2015-08-13 22:25 ` Stas Sergeev
2015-08-13 22:29 ` Andy Lutomirski
2015-08-13 22:51 ` Stas Sergeev
2015-08-13 23:00 ` Andy Lutomirski
2015-08-13 23:17 ` Stas Sergeev
2015-08-14 0:00 ` Stas Sergeev
2015-08-14 0:05 ` Andy Lutomirski
2015-08-14 0:17 ` Stas Sergeev
2015-08-14 0:27 ` Linus Torvalds
2015-08-14 0:50 ` Stas Sergeev
2015-08-14 1:21 ` Andy Lutomirski
2015-08-14 1:32 ` Stas Sergeev
2015-08-14 1:37 ` Andy Lutomirski
2015-08-14 2:03 ` Stas Sergeev
2015-08-18 6:19 ` Stas Sergeev
2015-08-14 0:08 ` Linus Torvalds
2015-08-14 0:24 ` Andy Lutomirski
2015-08-14 0:40 ` Linus Torvalds
2015-08-14 7:22 ` Cyrill Gorcunov
2015-08-14 10:02 ` Pavel Emelyanov
2015-08-14 10:53 ` Cyrill Gorcunov
2015-08-13 18:57 ` Stas Sergeev
2015-08-13 19:01 ` Andy Lutomirski
2015-08-13 19:13 ` Stas Sergeev
2015-08-13 19:37 ` Linus Torvalds
2015-08-13 19:59 ` Stas Sergeev
2015-08-13 20:07 ` Linus Torvalds
2015-08-18 6:40 ` Stas Sergeev
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=CA+55aFw5DzEn+jYmY0KwbkytBzowo45o3Czh1cQZ_aaR1+WZYA@mail.gmail.com \
--to=torvalds@linux-foundation.org \
--cc=linux-kernel@vger.kernel.org \
--cc=luto@amacapital.net \
--cc=stsp@list.ru \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).