Messages in this thread Patch in this message | | | From | "Chang S. Bae" <> | Subject | [PATCH] x86/fsgsbase/64: Fix the base write helper functions | Date | Tue, 30 Oct 2018 10:27:19 -0700 |
| |
Factor out the code to change index from x86_fsbase_write_cpu() and x86_gsbase_write_cpu_inactive(). Now the code is located in do_arch_prctl_64().
The helper functions that purport to write the base register should just write the base register only. It shouldn't have magic optimizations to change the index.
putreg() in ptrace does not write the current task, but a stopped task.
Suggested-by: Andy Lutomirski <luto@kernel.org> Signed-off-by: Chang S. Bae <chang.seok.bae@intel.com> Cc: Ingo Molnar <mingo@kernel.org> Cc: Thomas Gleixner <tglx@linutronix.de> Cc: H. Peter Anvin <hpa@zytor.com> Cc: Andi Kleen <ak@linux.intel.com> Cc: Dave Hansen <dave.hansen@linux.intel.com> --- arch/x86/kernel/process_64.c | 67 +++++++++++++++++++++--------------- 1 file changed, 39 insertions(+), 28 deletions(-)
diff --git a/arch/x86/kernel/process_64.c b/arch/x86/kernel/process_64.c index 31b4755369f0..4fd865fb7097 100644 --- a/arch/x86/kernel/process_64.c +++ b/arch/x86/kernel/process_64.c @@ -339,19 +339,11 @@ static unsigned long x86_fsgsbase_read_task(struct task_struct *task, void x86_fsbase_write_cpu(unsigned long fsbase) { - /* - * Set the selector to 0 as a notion, that the segment base is - * overwritten, which will be checked for skipping the segment load - * during context switch. - */ - loadseg(FS, 0); wrmsrl(MSR_FS_BASE, fsbase); } void x86_gsbase_write_cpu_inactive(unsigned long gsbase) { - /* Set the selector to 0 for the same reason as %fs above. */ - loadseg(GS, 0); wrmsrl(MSR_KERNEL_GS_BASE, gsbase); } @@ -359,9 +351,7 @@ unsigned long x86_fsbase_read_task(struct task_struct *task) { unsigned long fsbase; - if (task == current) - fsbase = x86_fsbase_read_cpu(); - else if (task->thread.fsindex == 0) + if (task->thread.fsindex == 0) fsbase = task->thread.fsbase; else fsbase = x86_fsgsbase_read_task(task, task->thread.fsindex); @@ -373,9 +363,7 @@ unsigned long x86_gsbase_read_task(struct task_struct *task) { unsigned long gsbase; - if (task == current) - gsbase = x86_gsbase_read_cpu_inactive(); - else if (task->thread.gsindex == 0) + if (task->thread.gsindex == 0) gsbase = task->thread.gsbase; else gsbase = x86_fsgsbase_read_task(task, task->thread.gsindex); @@ -392,12 +380,8 @@ int x86_fsbase_write_task(struct task_struct *task, unsigned long fsbase) if (unlikely(fsbase >= TASK_SIZE_MAX)) return -EPERM; - preempt_disable(); task->thread.fsbase = fsbase; - if (task == current) - x86_fsbase_write_cpu(fsbase); task->thread.fsindex = 0; - preempt_enable(); return 0; } @@ -407,12 +391,8 @@ int x86_gsbase_write_task(struct task_struct *task, unsigned long gsbase) if (unlikely(gsbase >= TASK_SIZE_MAX)) return -EPERM; - preempt_disable(); task->thread.gsbase = gsbase; - if (task == current) - x86_gsbase_write_cpu_inactive(gsbase); task->thread.gsindex = 0; - preempt_enable(); return 0; } @@ -757,22 +737,53 @@ long do_arch_prctl_64(struct task_struct *task, int option, unsigned long arg2) int ret = 0; switch (option) { - case ARCH_SET_GS: { - ret = x86_gsbase_write_task(task, arg2); - break; - } case ARCH_SET_FS: { + preempt_disable(); ret = x86_fsbase_write_task(task, arg2); + if (task == current && ret == 0) { + /* + * Set the selector to 0, implying that the base is + * overwritten. The index value will be checked + * during context switch for skipping segment reload. + */ + loadseg(FS, 0); + x86_fsbase_write_cpu(arg2); + } + preempt_enable(); + break; + } + case ARCH_SET_GS: { + preempt_disable(); + ret = x86_gsbase_write_task(task, arg2); + if (task == current && ret == 0) { + /* + * Set the selector to 0 for the same reason + * as %fs above. + */ + loadseg(GS, 0); + x86_gsbase_write_cpu_inactive(arg2); + } + preempt_enable(); break; } case ARCH_GET_FS: { - unsigned long base = x86_fsbase_read_task(task); + unsigned long base; + + if (task == current) + base = x86_fsbase_read_cpu(); + else + base = x86_fsbase_read_task(task); ret = put_user(base, (unsigned long __user *)arg2); break; } case ARCH_GET_GS: { - unsigned long base = x86_gsbase_read_task(task); + unsigned long base; + + if (task == current) + base = x86_gsbase_read_cpu_inactive(); + else + base = x86_gsbase_read_task(task); ret = put_user(base, (unsigned long __user *)arg2); break; -- 2.19.1
| |