Commit c7365330 authored by Ard Biesheuvel's avatar Ard Biesheuvel Committed by Mark Rutland

arm64: unwind: disregard frame.sp when validating frame pointer

Currently, when unwinding the call stack, we validate the frame pointer
of each frame against frame.sp, whose value is not clearly defined, and
which makes it more difficult to link stack frames together across
different stacks. It is far better to simply check whether the frame
pointer itself points into a valid stack.
Signed-off-by: default avatarArd Biesheuvel <ard.biesheuvel@linaro.org>
Signed-off-by: default avatarMark Rutland <mark.rutland@arm.com>
Cc: Catalin Marinas <catalin.marinas@arm.com>
Cc: James Morse <james.morse@arm.com>
Cc: Will Deacon <will.deacon@arm.com>
parent 09668372
...@@ -7,6 +7,7 @@ ...@@ -7,6 +7,7 @@
#ifndef __ASSEMBLER__ #ifndef __ASSEMBLER__
#include <linux/percpu.h> #include <linux/percpu.h>
#include <linux/sched/task_stack.h>
#include <asm-generic/irq.h> #include <asm-generic/irq.h>
#include <asm/thread_info.h> #include <asm/thread_info.h>
...@@ -49,12 +50,19 @@ static inline int nr_legacy_irqs(void) ...@@ -49,12 +50,19 @@ static inline int nr_legacy_irqs(void)
static inline bool on_irq_stack(unsigned long sp) static inline bool on_irq_stack(unsigned long sp)
{ {
/* variable names the same as kernel/stacktrace.c */
unsigned long low = (unsigned long)raw_cpu_ptr(irq_stack); unsigned long low = (unsigned long)raw_cpu_ptr(irq_stack);
unsigned long high = low + IRQ_STACK_START_SP; unsigned long high = low + IRQ_STACK_START_SP;
return (low <= sp && sp <= high); return (low <= sp && sp <= high);
} }
static inline bool on_task_stack(struct task_struct *tsk, unsigned long sp)
{
unsigned long low = (unsigned long)task_stack_page(tsk);
unsigned long high = low + THREAD_SIZE;
return (low <= sp && sp < high);
}
#endif /* !__ASSEMBLER__ */ #endif /* !__ASSEMBLER__ */
#endif #endif
...@@ -42,9 +42,10 @@ ...@@ -42,9 +42,10 @@
*/ */
int notrace unwind_frame(struct task_struct *tsk, struct stackframe *frame) int notrace unwind_frame(struct task_struct *tsk, struct stackframe *frame)
{ {
unsigned long high, low;
unsigned long fp = frame->fp; unsigned long fp = frame->fp;
unsigned long irq_stack_ptr;
if (fp & 0xf)
return -EINVAL;
if (!tsk) if (!tsk)
tsk = current; tsk = current;
...@@ -53,19 +54,8 @@ int notrace unwind_frame(struct task_struct *tsk, struct stackframe *frame) ...@@ -53,19 +54,8 @@ int notrace unwind_frame(struct task_struct *tsk, struct stackframe *frame)
* Switching between stacks is valid when tracing current and in * Switching between stacks is valid when tracing current and in
* non-preemptible context. * non-preemptible context.
*/ */
if (tsk == current && !preemptible()) if (!(tsk == current && !preemptible() && on_irq_stack(fp)) &&
irq_stack_ptr = IRQ_STACK_PTR(); !on_task_stack(tsk, fp))
else
irq_stack_ptr = 0;
low = frame->sp;
/* irq stacks are not THREAD_SIZE aligned */
if (on_irq_stack(frame->sp))
high = irq_stack_ptr;
else
high = ALIGN(low, THREAD_SIZE) - 0x20;
if (fp < low || fp > high || fp & 0xf)
return -EINVAL; return -EINVAL;
frame->sp = fp + 0x10; frame->sp = fp + 0x10;
...@@ -94,9 +84,9 @@ int notrace unwind_frame(struct task_struct *tsk, struct stackframe *frame) ...@@ -94,9 +84,9 @@ int notrace unwind_frame(struct task_struct *tsk, struct stackframe *frame)
* Check the frame->fp we read from the bottom of the irq_stack, * Check the frame->fp we read from the bottom of the irq_stack,
* and the original task stack pointer are both in current->stack. * and the original task stack pointer are both in current->stack.
*/ */
if (frame->sp == irq_stack_ptr) { if (frame->sp == IRQ_STACK_PTR()) {
struct pt_regs *irq_args; struct pt_regs *irq_args;
unsigned long orig_sp = IRQ_STACK_TO_TASK_STACK(irq_stack_ptr); unsigned long orig_sp = IRQ_STACK_TO_TASK_STACK(frame->sp);
if (object_is_on_stack((void *)orig_sp) && if (object_is_on_stack((void *)orig_sp) &&
object_is_on_stack((void *)frame->fp)) { object_is_on_stack((void *)frame->fp)) {
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment