Commit 03275591 authored by Roland McGrath's avatar Roland McGrath

x86: auditsyscall: fix fastpath return value after reschedule

In the CONFIG_AUDITSYSCALL fast-path for x86 64-bit system calls,
we can pass a bad return value and/or error indication for the
system call to audit_syscall_exit().  This happens when
TIF_NEED_RESCHED was set as the system call returned, so we went
out to schedule() and came back to the exit-audit fast-path.  The
fix is to reload the user return value register from the pt_regs
before using it for audit_syscall_exit().

Both the 32-bit kernel's fast path and the 64-bit kernel's 32-bit
system call fast paths work slightly differently, so that they
always leave the fast path entirely to reschedule and don't return
there, so they don't have the analogous bugs.
Reported-by: default avatarAlexander Viro <aviro@redhat.com>
Signed-off-by: default avatarRoland McGrath <roland@redhat.com>
parent cd5b8f87
...@@ -571,8 +571,8 @@ auditsys: ...@@ -571,8 +571,8 @@ auditsys:
* masked off. * masked off.
*/ */
sysret_audit: sysret_audit:
movq %rax,%rsi /* second arg, syscall return value */ movq RAX-ARGOFFSET(%rsp),%rsi /* second arg, syscall return value */
cmpq $0,%rax /* is it < 0? */ cmpq $0,%rsi /* is it < 0? */
setl %al /* 1 if so, 0 if not */ setl %al /* 1 if so, 0 if not */
movzbl %al,%edi /* zero-extend that into %edi */ movzbl %al,%edi /* zero-extend that into %edi */
inc %edi /* first arg, 0->1(AUDITSC_SUCCESS), 1->2(AUDITSC_FAILURE) */ inc %edi /* first arg, 0->1(AUDITSC_SUCCESS), 1->2(AUDITSC_FAILURE) */
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment