xref: /freebsd/sys/amd64/ia32/ia32_signal.c (revision a30ec4b99c208c75dbc84b201beb239ba895d391)
1d85631c4SPeter Wemm /*-
2d85631c4SPeter Wemm  * Copyright (c) 2003 Peter Wemm
3d85631c4SPeter Wemm  * Copyright (c) 1982, 1987, 1990 The Regents of the University of California.
4d85631c4SPeter Wemm  * All rights reserved.
5d85631c4SPeter Wemm  *
6d85631c4SPeter Wemm  * This code is derived from software contributed to Berkeley by
7d85631c4SPeter Wemm  * William Jolitz.
8d85631c4SPeter Wemm  *
9d85631c4SPeter Wemm  * Redistribution and use in source and binary forms, with or without
10d85631c4SPeter Wemm  * modification, are permitted provided that the following conditions
11d85631c4SPeter Wemm  * are met:
12d85631c4SPeter Wemm  * 1. Redistributions of source code must retain the above copyright
13d85631c4SPeter Wemm  *    notice, this list of conditions and the following disclaimer.
14d85631c4SPeter Wemm  * 2. Redistributions in binary form must reproduce the above copyright
15d85631c4SPeter Wemm  *    notice, this list of conditions and the following disclaimer in the
16d85631c4SPeter Wemm  *    documentation and/or other materials provided with the distribution.
17d85631c4SPeter Wemm  * 3. All advertising materials mentioning features or use of this software
18d85631c4SPeter Wemm  *    must display the following acknowledgement:
19d85631c4SPeter Wemm  *      This product includes software developed by the University of
20d85631c4SPeter Wemm  *      California, Berkeley and its contributors.
21d85631c4SPeter Wemm  * 4. Neither the name of the University nor the names of its contributors
22d85631c4SPeter Wemm  *    may be used to endorse or promote products derived from this software
23d85631c4SPeter Wemm  *    without specific prior written permission.
24d85631c4SPeter Wemm  *
25d85631c4SPeter Wemm  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
26d85631c4SPeter Wemm  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
27d85631c4SPeter Wemm  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
28d85631c4SPeter Wemm  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
29d85631c4SPeter Wemm  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
30d85631c4SPeter Wemm  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
31d85631c4SPeter Wemm  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
32d85631c4SPeter Wemm  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
33d85631c4SPeter Wemm  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
34d85631c4SPeter Wemm  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35d85631c4SPeter Wemm  * SUCH DAMAGE.
36d85631c4SPeter Wemm  */
37d85631c4SPeter Wemm 
3856ae44c5SDavid E. O'Brien #include <sys/cdefs.h>
3956ae44c5SDavid E. O'Brien __FBSDID("$FreeBSD$");
4056ae44c5SDavid E. O'Brien 
41d85631c4SPeter Wemm #include "opt_compat.h"
42d85631c4SPeter Wemm 
43d85631c4SPeter Wemm #include <sys/param.h>
44d85631c4SPeter Wemm #include <sys/exec.h>
45d85631c4SPeter Wemm #include <sys/fcntl.h>
46d85631c4SPeter Wemm #include <sys/imgact.h>
47d85631c4SPeter Wemm #include <sys/kernel.h>
48d85631c4SPeter Wemm #include <sys/lock.h>
49d85631c4SPeter Wemm #include <sys/malloc.h>
50d85631c4SPeter Wemm #include <sys/mutex.h>
51d85631c4SPeter Wemm #include <sys/mman.h>
52d85631c4SPeter Wemm #include <sys/namei.h>
53d85631c4SPeter Wemm #include <sys/pioctl.h>
54d85631c4SPeter Wemm #include <sys/proc.h>
55d85631c4SPeter Wemm #include <sys/procfs.h>
56d85631c4SPeter Wemm #include <sys/resourcevar.h>
57d85631c4SPeter Wemm #include <sys/systm.h>
58d85631c4SPeter Wemm #include <sys/signalvar.h>
59d85631c4SPeter Wemm #include <sys/stat.h>
60d85631c4SPeter Wemm #include <sys/sx.h>
61d85631c4SPeter Wemm #include <sys/syscall.h>
62d85631c4SPeter Wemm #include <sys/sysctl.h>
63d85631c4SPeter Wemm #include <sys/sysent.h>
64d85631c4SPeter Wemm #include <sys/vnode.h>
65d85631c4SPeter Wemm 
66d85631c4SPeter Wemm #include <vm/vm.h>
67d85631c4SPeter Wemm #include <vm/vm_kern.h>
68d85631c4SPeter Wemm #include <vm/vm_param.h>
69d85631c4SPeter Wemm #include <vm/pmap.h>
70d85631c4SPeter Wemm #include <vm/vm_map.h>
71d85631c4SPeter Wemm #include <vm/vm_object.h>
72d85631c4SPeter Wemm #include <vm/vm_extern.h>
73d85631c4SPeter Wemm 
7446159d1fSPeter Wemm #include <compat/freebsd32/freebsd32_util.h>
7546159d1fSPeter Wemm #include <compat/freebsd32/freebsd32_proto.h>
7646159d1fSPeter Wemm #include <compat/ia32/ia32_signal.h>
77d85631c4SPeter Wemm #include <machine/psl.h>
78d85631c4SPeter Wemm #include <machine/segments.h>
79d85631c4SPeter Wemm #include <machine/specialreg.h>
80d85631c4SPeter Wemm #include <machine/frame.h>
81d85631c4SPeter Wemm #include <machine/md_var.h>
82d85631c4SPeter Wemm #include <machine/pcb.h>
83d85631c4SPeter Wemm #include <machine/cpufunc.h>
84d85631c4SPeter Wemm 
85d85631c4SPeter Wemm #ifdef COMPAT_FREEBSD4
86d85631c4SPeter Wemm static void freebsd4_ia32_sendsig(sig_t, int, sigset_t *, u_long);
87d85631c4SPeter Wemm #endif
88d85631c4SPeter Wemm static void ia32_get_fpcontext(struct thread *td, struct ia32_mcontext *mcp);
89d85631c4SPeter Wemm static int ia32_set_fpcontext(struct thread *td, const struct ia32_mcontext *mcp);
90d85631c4SPeter Wemm 
91d85631c4SPeter Wemm extern int _ucode32sel, _udatasel;
92d85631c4SPeter Wemm 
93d85631c4SPeter Wemm #define	CS_SECURE(cs)		(ISPL(cs) == SEL_UPL)
94d85631c4SPeter Wemm #define	EFL_SECURE(ef, oef)	((((ef) ^ (oef)) & ~PSL_USERCHANGE) == 0)
95d85631c4SPeter Wemm 
96d85631c4SPeter Wemm static void
97d85631c4SPeter Wemm ia32_get_fpcontext(struct thread *td, struct ia32_mcontext *mcp)
98d85631c4SPeter Wemm {
99d85631c4SPeter Wemm 	struct savefpu *addr;
100d85631c4SPeter Wemm 
101d85631c4SPeter Wemm 	/*
102d85631c4SPeter Wemm 	 * XXX mc_fpstate might be misaligned, since its declaration is not
103d85631c4SPeter Wemm 	 * unportabilized using __attribute__((aligned(16))) like the
104d85631c4SPeter Wemm 	 * declaration of struct savemm, and anyway, alignment doesn't work
105d85631c4SPeter Wemm 	 * for auto variables since we don't use gcc's pessimal stack
106d85631c4SPeter Wemm 	 * alignment.  Work around this by abusing the spare fields after
107d85631c4SPeter Wemm 	 * mcp->mc_fpstate.
108d85631c4SPeter Wemm 	 *
109d85631c4SPeter Wemm 	 * XXX unpessimize most cases by only aligning when fxsave might be
110d85631c4SPeter Wemm 	 * called, although this requires knowing too much about
111bf2f09eeSPeter Wemm 	 * fpugetregs()'s internals.
112d85631c4SPeter Wemm 	 */
113d85631c4SPeter Wemm 	addr = (struct savefpu *)&mcp->mc_fpstate;
114d85631c4SPeter Wemm 	if (td == PCPU_GET(fpcurthread) && ((uintptr_t)(void *)addr & 0xF)) {
115d85631c4SPeter Wemm 		do
116d85631c4SPeter Wemm 			addr = (void *)((char *)addr + 4);
117d85631c4SPeter Wemm 		while ((uintptr_t)(void *)addr & 0xF);
118d85631c4SPeter Wemm 	}
119bf2f09eeSPeter Wemm 	mcp->mc_ownedfp = fpugetregs(td, addr);
120d85631c4SPeter Wemm 	if (addr != (struct savefpu *)&mcp->mc_fpstate) {
121d85631c4SPeter Wemm 		bcopy(addr, &mcp->mc_fpstate, sizeof(mcp->mc_fpstate));
122d85631c4SPeter Wemm 		bzero(&mcp->mc_spare2, sizeof(mcp->mc_spare2));
123d85631c4SPeter Wemm 	}
124bf2f09eeSPeter Wemm 	mcp->mc_fpformat = fpuformat();
125d85631c4SPeter Wemm }
126d85631c4SPeter Wemm 
127d85631c4SPeter Wemm static int
128d85631c4SPeter Wemm ia32_set_fpcontext(struct thread *td, const struct ia32_mcontext *mcp)
129d85631c4SPeter Wemm {
130d85631c4SPeter Wemm 	struct savefpu *addr;
131d85631c4SPeter Wemm 
132d85631c4SPeter Wemm 	if (mcp->mc_fpformat == _MC_FPFMT_NODEV)
133d85631c4SPeter Wemm 		return (0);
134d85631c4SPeter Wemm 	else if (mcp->mc_fpformat != _MC_FPFMT_XMM)
135d85631c4SPeter Wemm 		return (EINVAL);
136d85631c4SPeter Wemm 	else if (mcp->mc_ownedfp == _MC_FPOWNED_NONE)
137d85631c4SPeter Wemm 		/* We don't care what state is left in the FPU or PCB. */
138d85631c4SPeter Wemm 		fpstate_drop(td);
139d85631c4SPeter Wemm 	else if (mcp->mc_ownedfp == _MC_FPOWNED_FPU ||
140d85631c4SPeter Wemm 	    mcp->mc_ownedfp == _MC_FPOWNED_PCB) {
141d85631c4SPeter Wemm 		/* XXX align as above. */
142d85631c4SPeter Wemm 		addr = (struct savefpu *)&mcp->mc_fpstate;
143d85631c4SPeter Wemm 		if (td == PCPU_GET(fpcurthread) &&
144d85631c4SPeter Wemm 		    ((uintptr_t)(void *)addr & 0xF)) {
145d85631c4SPeter Wemm 			do
146d85631c4SPeter Wemm 				addr = (void *)((char *)addr + 4);
147d85631c4SPeter Wemm 			while ((uintptr_t)(void *)addr & 0xF);
148d85631c4SPeter Wemm 			bcopy(&mcp->mc_fpstate, addr, sizeof(mcp->mc_fpstate));
149d85631c4SPeter Wemm 		}
150d85631c4SPeter Wemm 		/*
151bf2f09eeSPeter Wemm 		 * XXX we violate the dubious requirement that fpusetregs()
152d85631c4SPeter Wemm 		 * be called with interrupts disabled.
153d85631c4SPeter Wemm 		 */
154bf2f09eeSPeter Wemm 		fpusetregs(td, addr);
155d85631c4SPeter Wemm 		/*
156d85631c4SPeter Wemm 		 * Don't bother putting things back where they were in the
157d85631c4SPeter Wemm 		 * misaligned case, since we know that the caller won't use
158d85631c4SPeter Wemm 		 * them again.
159d85631c4SPeter Wemm 		 */
160d85631c4SPeter Wemm 	} else
161d85631c4SPeter Wemm 		return (EINVAL);
162d85631c4SPeter Wemm 	return (0);
163d85631c4SPeter Wemm }
164d85631c4SPeter Wemm 
165d85631c4SPeter Wemm /*
166d85631c4SPeter Wemm  * Send an interrupt to process.
167d85631c4SPeter Wemm  *
168d85631c4SPeter Wemm  * Stack is set up to allow sigcode stored
169d85631c4SPeter Wemm  * at top to call routine, followed by kcall
170d85631c4SPeter Wemm  * to sigreturn routine below.  After sigreturn
171d85631c4SPeter Wemm  * resets the signal mask, the stack, and the
172d85631c4SPeter Wemm  * frame pointer, it returns to the user
173d85631c4SPeter Wemm  * specified pc, psl.
174d85631c4SPeter Wemm  */
175d85631c4SPeter Wemm #ifdef COMPAT_FREEBSD4
176d85631c4SPeter Wemm static void
177d85631c4SPeter Wemm freebsd4_ia32_sendsig(sig_t catcher, int sig, sigset_t *mask, u_long code)
178d85631c4SPeter Wemm {
179d85631c4SPeter Wemm 	struct ia32_sigframe4 sf, *sfp;
180d85631c4SPeter Wemm 	struct proc *p;
181d85631c4SPeter Wemm 	struct thread *td;
182d85631c4SPeter Wemm 	struct sigacts *psp;
183d85631c4SPeter Wemm 	struct trapframe *regs;
184d85631c4SPeter Wemm 	int oonstack;
185d85631c4SPeter Wemm 
186d85631c4SPeter Wemm 	td = curthread;
187d85631c4SPeter Wemm 	p = td->td_proc;
188d85631c4SPeter Wemm 	PROC_LOCK_ASSERT(p, MA_OWNED);
189d85631c4SPeter Wemm 	psp = p->p_sigacts;
1903554ecf0SPeter Wemm 	mtx_assert(&psp->ps_mtx, MA_OWNED);
191d85631c4SPeter Wemm 	regs = td->td_frame;
192d85631c4SPeter Wemm 	oonstack = sigonstack(regs->tf_rsp);
193d85631c4SPeter Wemm 
194d85631c4SPeter Wemm 	/* Save user context. */
195d85631c4SPeter Wemm 	bzero(&sf, sizeof(sf));
196d85631c4SPeter Wemm 	sf.sf_uc.uc_sigmask = *mask;
197a30ec4b9SDavid Xu 	sf.sf_uc.uc_stack.ss_sp = (uintptr_t)td->td_sigstk.ss_sp;
198a30ec4b9SDavid Xu 	sf.sf_uc.uc_stack.ss_size = td->td_sigstk.ss_size;
199a30ec4b9SDavid Xu 	sf.sf_uc.uc_stack.ss_flags = (td->td_pflags & TDP_ALTSTACK)
200d85631c4SPeter Wemm 	    ? ((oonstack) ? SS_ONSTACK : 0) : SS_DISABLE;
201d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_onstack = (oonstack) ? 1 : 0;
202d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_gs = rgs();
203d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_fs = rfs();
204d85631c4SPeter Wemm 	__asm __volatile("movl %%es,%0" : "=rm" (sf.sf_uc.uc_mcontext.mc_es));
205d85631c4SPeter Wemm 	__asm __volatile("movl %%ds,%0" : "=rm" (sf.sf_uc.uc_mcontext.mc_ds));
206d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_edi = regs->tf_rdi;
207d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_esi = regs->tf_rsi;
208d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_ebp = regs->tf_rbp;
209d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_isp = regs->tf_rsp; /* XXX */
210d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_ebx = regs->tf_rbx;
211d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_edx = regs->tf_rdx;
212d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_ecx = regs->tf_rcx;
213d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_eax = regs->tf_rax;
214d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_trapno = regs->tf_trapno;
215d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_err = regs->tf_err;
216d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_eip = regs->tf_rip;
217d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_cs = regs->tf_cs;
218d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_eflags = regs->tf_rflags;
219d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_esp = regs->tf_rsp;
220d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_ss = regs->tf_ss;
221d85631c4SPeter Wemm 
222d85631c4SPeter Wemm 	/* Allocate space for the signal handler context. */
223a30ec4b9SDavid Xu 	if ((td->td_pflags & TDP_ALTSTACK) != 0 && !oonstack &&
224d85631c4SPeter Wemm 	    SIGISMEMBER(psp->ps_sigonstack, sig)) {
225a30ec4b9SDavid Xu 		sfp = (struct ia32_sigframe4 *)(td->td_sigstk.ss_sp +
226a30ec4b9SDavid Xu 		    td->td_sigstk.ss_size - sizeof(sf));
227d85631c4SPeter Wemm 	} else
228d85631c4SPeter Wemm 		sfp = (struct ia32_sigframe4 *)regs->tf_rsp - 1;
229d85631c4SPeter Wemm 	PROC_UNLOCK(p);
230d85631c4SPeter Wemm 
231d85631c4SPeter Wemm 	/* Translate the signal if appropriate. */
232d85631c4SPeter Wemm 	if (p->p_sysent->sv_sigtbl && sig <= p->p_sysent->sv_sigsize)
233d85631c4SPeter Wemm 		sig = p->p_sysent->sv_sigtbl[_SIG_IDX(sig)];
234d85631c4SPeter Wemm 
235d85631c4SPeter Wemm 	/* Build the argument list for the signal handler. */
236d85631c4SPeter Wemm 	sf.sf_signum = sig;
237d85631c4SPeter Wemm 	sf.sf_ucontext = (register_t)&sfp->sf_uc;
238d85631c4SPeter Wemm 	PROC_LOCK(p);
239d85631c4SPeter Wemm 	if (SIGISMEMBER(p->p_sigacts->ps_siginfo, sig)) {
240d85631c4SPeter Wemm 		/* Signal handler installed with SA_SIGINFO. */
241d85631c4SPeter Wemm 		sf.sf_siginfo = (u_int32_t)(uintptr_t)&sfp->sf_si;
242d85631c4SPeter Wemm 		sf.sf_ah = (u_int32_t)(uintptr_t)catcher;
243d85631c4SPeter Wemm 
244d85631c4SPeter Wemm 		/* Fill in POSIX parts */
245d85631c4SPeter Wemm 		sf.sf_si.si_signo = sig;
246d85631c4SPeter Wemm 		sf.sf_si.si_code = code;
247d85631c4SPeter Wemm 		sf.sf_si.si_addr = regs->tf_addr;
248d85631c4SPeter Wemm 	} else {
249d85631c4SPeter Wemm 		/* Old FreeBSD-style arguments. */
250d85631c4SPeter Wemm 		sf.sf_siginfo = code;
251d85631c4SPeter Wemm 		sf.sf_addr = regs->tf_addr;
252d85631c4SPeter Wemm 		sf.sf_ah = (u_int32_t)(uintptr_t)catcher;
253d85631c4SPeter Wemm 	}
2543554ecf0SPeter Wemm 	mtx_unlock(&psp->ps_mtx);
255d85631c4SPeter Wemm 	PROC_UNLOCK(p);
256d85631c4SPeter Wemm 
257d85631c4SPeter Wemm 	/*
258d85631c4SPeter Wemm 	 * Copy the sigframe out to the user's stack.
259d85631c4SPeter Wemm 	 */
260d85631c4SPeter Wemm 	if (copyout(&sf, sfp, sizeof(*sfp)) != 0) {
261d85631c4SPeter Wemm #ifdef DEBUG
262d85631c4SPeter Wemm 		printf("process %ld has trashed its stack\n", (long)p->p_pid);
263d85631c4SPeter Wemm #endif
264d85631c4SPeter Wemm 		PROC_LOCK(p);
265d85631c4SPeter Wemm 		sigexit(td, SIGILL);
266d85631c4SPeter Wemm 	}
267d85631c4SPeter Wemm 
268d85631c4SPeter Wemm 	regs->tf_rsp = (uintptr_t)sfp;
26946159d1fSPeter Wemm 	regs->tf_rip = FREEBSD32_PS_STRINGS - sz_freebsd4_ia32_sigcode;
270d85631c4SPeter Wemm 	regs->tf_rflags &= ~PSL_T;
271d85631c4SPeter Wemm 	regs->tf_cs = _ucode32sel;
272d85631c4SPeter Wemm 	regs->tf_ss = _udatasel;
273d85631c4SPeter Wemm 	load_ds(_udatasel);
274d85631c4SPeter Wemm 	td->td_pcb->pcb_ds = _udatasel;
275d85631c4SPeter Wemm 	load_es(_udatasel);
276d85631c4SPeter Wemm 	td->td_pcb->pcb_es = _udatasel;
277d85631c4SPeter Wemm 	/* leave user %fs and %gs untouched */
278d85631c4SPeter Wemm 	PROC_LOCK(p);
2793554ecf0SPeter Wemm 	mtx_lock(&psp->ps_mtx);
280d85631c4SPeter Wemm }
281d85631c4SPeter Wemm #endif	/* COMPAT_FREEBSD4 */
282d85631c4SPeter Wemm 
283d85631c4SPeter Wemm void
284d85631c4SPeter Wemm ia32_sendsig(sig_t catcher, int sig, sigset_t *mask, u_long code)
285d85631c4SPeter Wemm {
286d85631c4SPeter Wemm 	struct ia32_sigframe sf, *sfp;
287d85631c4SPeter Wemm 	struct proc *p;
288d85631c4SPeter Wemm 	struct thread *td;
289d85631c4SPeter Wemm 	struct sigacts *psp;
290d85631c4SPeter Wemm 	char *sp;
291d85631c4SPeter Wemm 	struct trapframe *regs;
292d85631c4SPeter Wemm 	int oonstack;
293d85631c4SPeter Wemm 
294d85631c4SPeter Wemm 	td = curthread;
295d85631c4SPeter Wemm 	p = td->td_proc;
296d85631c4SPeter Wemm 	PROC_LOCK_ASSERT(p, MA_OWNED);
297d85631c4SPeter Wemm 	psp = p->p_sigacts;
298d85631c4SPeter Wemm #ifdef COMPAT_FREEBSD4
299d85631c4SPeter Wemm 	if (SIGISMEMBER(psp->ps_freebsd4, sig)) {
300d85631c4SPeter Wemm 		freebsd4_ia32_sendsig(catcher, sig, mask, code);
301d85631c4SPeter Wemm 		return;
302d85631c4SPeter Wemm 	}
303d85631c4SPeter Wemm #endif
3043554ecf0SPeter Wemm 	mtx_assert(&psp->ps_mtx, MA_OWNED);
305d85631c4SPeter Wemm 	regs = td->td_frame;
306d85631c4SPeter Wemm 	oonstack = sigonstack(regs->tf_rsp);
307d85631c4SPeter Wemm 
308d85631c4SPeter Wemm 	/* Save user context. */
309d85631c4SPeter Wemm 	bzero(&sf, sizeof(sf));
310d85631c4SPeter Wemm 	sf.sf_uc.uc_sigmask = *mask;
311a30ec4b9SDavid Xu 	sf.sf_uc.uc_stack.ss_sp = (uintptr_t)td->td_sigstk.ss_sp;
312a30ec4b9SDavid Xu 	sf.sf_uc.uc_stack.ss_size = td->td_sigstk.ss_size;
313a30ec4b9SDavid Xu 	sf.sf_uc.uc_stack.ss_flags = (td->td_pflags & TDP_ALTSTACK)
314d85631c4SPeter Wemm 	    ? ((oonstack) ? SS_ONSTACK : 0) : SS_DISABLE;
315d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_onstack = (oonstack) ? 1 : 0;
316d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_gs = rgs();
317d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_fs = rfs();
318d85631c4SPeter Wemm 	__asm __volatile("movl %%es,%0" : "=rm" (sf.sf_uc.uc_mcontext.mc_es));
319d85631c4SPeter Wemm 	__asm __volatile("movl %%ds,%0" : "=rm" (sf.sf_uc.uc_mcontext.mc_ds));
320d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_edi = regs->tf_rdi;
321d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_esi = regs->tf_rsi;
322d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_ebp = regs->tf_rbp;
323d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_isp = regs->tf_rsp; /* XXX */
324d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_ebx = regs->tf_rbx;
325d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_edx = regs->tf_rdx;
326d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_ecx = regs->tf_rcx;
327d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_eax = regs->tf_rax;
328d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_trapno = regs->tf_trapno;
329d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_err = regs->tf_err;
330d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_eip = regs->tf_rip;
331d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_cs = regs->tf_cs;
332d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_eflags = regs->tf_rflags;
333d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_esp = regs->tf_rsp;
334d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_ss = regs->tf_ss;
335d85631c4SPeter Wemm 	sf.sf_uc.uc_mcontext.mc_len = sizeof(sf.sf_uc.uc_mcontext); /* magic */
336d85631c4SPeter Wemm 	ia32_get_fpcontext(td, &sf.sf_uc.uc_mcontext);
337d85631c4SPeter Wemm 	fpstate_drop(td);
338d85631c4SPeter Wemm 
339d85631c4SPeter Wemm 	/* Allocate space for the signal handler context. */
340a30ec4b9SDavid Xu 	if ((td->td_pflags & TDP_ALTSTACK) != 0 && !oonstack &&
341d85631c4SPeter Wemm 	    SIGISMEMBER(psp->ps_sigonstack, sig)) {
342a30ec4b9SDavid Xu 		sp = td->td_sigstk.ss_sp +
343a30ec4b9SDavid Xu 		    td->td_sigstk.ss_size - sizeof(sf);
344d85631c4SPeter Wemm 	} else
345d85631c4SPeter Wemm 		sp = (char *)regs->tf_rsp - sizeof(sf);
346d85631c4SPeter Wemm 	/* Align to 16 bytes. */
347d85631c4SPeter Wemm 	sfp = (struct ia32_sigframe *)((uintptr_t)sp & ~0xF);
348d85631c4SPeter Wemm 	PROC_UNLOCK(p);
349d85631c4SPeter Wemm 
350d85631c4SPeter Wemm 	/* Translate the signal if appropriate. */
351d85631c4SPeter Wemm 	if (p->p_sysent->sv_sigtbl && sig <= p->p_sysent->sv_sigsize)
352d85631c4SPeter Wemm 		sig = p->p_sysent->sv_sigtbl[_SIG_IDX(sig)];
353d85631c4SPeter Wemm 
354d85631c4SPeter Wemm 	/* Build the argument list for the signal handler. */
355d85631c4SPeter Wemm 	sf.sf_signum = sig;
356d85631c4SPeter Wemm 	sf.sf_ucontext = (register_t)&sfp->sf_uc;
357d85631c4SPeter Wemm 	PROC_LOCK(p);
358d85631c4SPeter Wemm 	if (SIGISMEMBER(p->p_sigacts->ps_siginfo, sig)) {
359d85631c4SPeter Wemm 		/* Signal handler installed with SA_SIGINFO. */
360d85631c4SPeter Wemm 		sf.sf_siginfo = (u_int32_t)(uintptr_t)&sfp->sf_si;
361d85631c4SPeter Wemm 		sf.sf_ah = (u_int32_t)(uintptr_t)catcher;
362d85631c4SPeter Wemm 
363d85631c4SPeter Wemm 		/* Fill in POSIX parts */
364d85631c4SPeter Wemm 		sf.sf_si.si_signo = sig;
365d85631c4SPeter Wemm 		sf.sf_si.si_code = code;
366d85631c4SPeter Wemm 		sf.sf_si.si_addr = regs->tf_addr;
367d85631c4SPeter Wemm 	} else {
368d85631c4SPeter Wemm 		/* Old FreeBSD-style arguments. */
369d85631c4SPeter Wemm 		sf.sf_siginfo = code;
3709f0c4ab3SPeter Wemm 		sf.sf_addr = regs->tf_addr;
371d85631c4SPeter Wemm 		sf.sf_ah = (u_int32_t)(uintptr_t)catcher;
372d85631c4SPeter Wemm 	}
3733554ecf0SPeter Wemm 	mtx_unlock(&psp->ps_mtx);
374d85631c4SPeter Wemm 	PROC_UNLOCK(p);
375d85631c4SPeter Wemm 
376d85631c4SPeter Wemm 	/*
377d85631c4SPeter Wemm 	 * Copy the sigframe out to the user's stack.
378d85631c4SPeter Wemm 	 */
379d85631c4SPeter Wemm 	if (copyout(&sf, sfp, sizeof(*sfp)) != 0) {
380d85631c4SPeter Wemm #ifdef DEBUG
381d85631c4SPeter Wemm 		printf("process %ld has trashed its stack\n", (long)p->p_pid);
382d85631c4SPeter Wemm #endif
383d85631c4SPeter Wemm 		PROC_LOCK(p);
384d85631c4SPeter Wemm 		sigexit(td, SIGILL);
385d85631c4SPeter Wemm 	}
386d85631c4SPeter Wemm 
387d85631c4SPeter Wemm 	regs->tf_rsp = (uintptr_t)sfp;
38846159d1fSPeter Wemm 	regs->tf_rip = FREEBSD32_PS_STRINGS - *(p->p_sysent->sv_szsigcode);
389d85631c4SPeter Wemm 	regs->tf_rflags &= ~PSL_T;
390d85631c4SPeter Wemm 	regs->tf_cs = _ucode32sel;
391d85631c4SPeter Wemm 	regs->tf_ss = _udatasel;
392d85631c4SPeter Wemm 	load_ds(_udatasel);
393d85631c4SPeter Wemm 	td->td_pcb->pcb_ds = _udatasel;
394d85631c4SPeter Wemm 	load_es(_udatasel);
395d85631c4SPeter Wemm 	td->td_pcb->pcb_es = _udatasel;
396d85631c4SPeter Wemm 	/* leave user %fs and %gs untouched */
397d85631c4SPeter Wemm 	PROC_LOCK(p);
3983554ecf0SPeter Wemm 	mtx_lock(&psp->ps_mtx);
399d85631c4SPeter Wemm }
400d85631c4SPeter Wemm 
401d85631c4SPeter Wemm /*
402d85631c4SPeter Wemm  * System call to cleanup state after a signal
403d85631c4SPeter Wemm  * has been taken.  Reset signal mask and
404d85631c4SPeter Wemm  * stack state from context left by sendsig (above).
405d85631c4SPeter Wemm  * Return to previous pc and psl as specified by
406d85631c4SPeter Wemm  * context left by sendsig. Check carefully to
407d85631c4SPeter Wemm  * make sure that the user has not modified the
408d85631c4SPeter Wemm  * state to gain improper privileges.
409d85631c4SPeter Wemm  */
410d85631c4SPeter Wemm #ifdef COMPAT_FREEBSD4
411d85631c4SPeter Wemm /*
412d85631c4SPeter Wemm  * MPSAFE
413d85631c4SPeter Wemm  */
414d85631c4SPeter Wemm int
41546159d1fSPeter Wemm freebsd4_freebsd32_sigreturn(td, uap)
416d85631c4SPeter Wemm 	struct thread *td;
41746159d1fSPeter Wemm 	struct freebsd4_freebsd32_sigreturn_args /* {
41846159d1fSPeter Wemm 		const struct freebsd4_freebsd32_ucontext *sigcntxp;
419d85631c4SPeter Wemm 	} */ *uap;
420d85631c4SPeter Wemm {
421d85631c4SPeter Wemm 	struct ia32_ucontext4 uc;
422d85631c4SPeter Wemm 	struct proc *p = td->td_proc;
423d85631c4SPeter Wemm 	struct trapframe *regs;
424d85631c4SPeter Wemm 	const struct ia32_ucontext4 *ucp;
425d85631c4SPeter Wemm 	int cs, eflags, error;
426d85631c4SPeter Wemm 
427d85631c4SPeter Wemm 	error = copyin(uap->sigcntxp, &uc, sizeof(uc));
428d85631c4SPeter Wemm 	if (error != 0)
429d85631c4SPeter Wemm 		return (error);
430d85631c4SPeter Wemm 	ucp = &uc;
431d85631c4SPeter Wemm 	regs = td->td_frame;
432d85631c4SPeter Wemm 	eflags = ucp->uc_mcontext.mc_eflags;
433d85631c4SPeter Wemm 	/*
434d85631c4SPeter Wemm 	 * Don't allow users to change privileged or reserved flags.
435d85631c4SPeter Wemm 	 */
436d85631c4SPeter Wemm 	/*
437d85631c4SPeter Wemm 	 * XXX do allow users to change the privileged flag PSL_RF.
438d85631c4SPeter Wemm 	 * The cpu sets PSL_RF in tf_eflags for faults.  Debuggers
439d85631c4SPeter Wemm 	 * should sometimes set it there too.  tf_eflags is kept in
440d85631c4SPeter Wemm 	 * the signal context during signal handling and there is no
441d85631c4SPeter Wemm 	 * other place to remember it, so the PSL_RF bit may be
442d85631c4SPeter Wemm 	 * corrupted by the signal handler without us knowing.
443d85631c4SPeter Wemm 	 * Corruption of the PSL_RF bit at worst causes one more or
444d85631c4SPeter Wemm 	 * one less debugger trap, so allowing it is fairly harmless.
445d85631c4SPeter Wemm 	 */
446d85631c4SPeter Wemm 	if (!EFL_SECURE(eflags & ~PSL_RF, regs->tf_rflags & ~PSL_RF)) {
44746159d1fSPeter Wemm 		printf("freebsd4_freebsd32_sigreturn: eflags = 0x%x\n", eflags);
448d85631c4SPeter Wemm 		return (EINVAL);
449d85631c4SPeter Wemm 	}
450d85631c4SPeter Wemm 
451d85631c4SPeter Wemm 	/*
452d85631c4SPeter Wemm 	 * Don't allow users to load a valid privileged %cs.  Let the
453d85631c4SPeter Wemm 	 * hardware check for invalid selectors, excess privilege in
454d85631c4SPeter Wemm 	 * other selectors, invalid %eip's and invalid %esp's.
455d85631c4SPeter Wemm 	 */
456d85631c4SPeter Wemm 	cs = ucp->uc_mcontext.mc_cs;
457d85631c4SPeter Wemm 	if (!CS_SECURE(cs)) {
458d85631c4SPeter Wemm 		printf("freebsd4_sigreturn: cs = 0x%x\n", cs);
459d85631c4SPeter Wemm 		trapsignal(td, SIGBUS, T_PROTFLT);
460d85631c4SPeter Wemm 		return (EINVAL);
461d85631c4SPeter Wemm 	}
462d85631c4SPeter Wemm 
463d85631c4SPeter Wemm 	/* Segment selectors restored by sigtramp.S */
464d85631c4SPeter Wemm 	regs->tf_rdi = ucp->uc_mcontext.mc_edi;
465d85631c4SPeter Wemm 	regs->tf_rsi = ucp->uc_mcontext.mc_esi;
466d85631c4SPeter Wemm 	regs->tf_rbp = ucp->uc_mcontext.mc_ebp;
467d85631c4SPeter Wemm 	regs->tf_rbx = ucp->uc_mcontext.mc_ebx;
468d85631c4SPeter Wemm 	regs->tf_rdx = ucp->uc_mcontext.mc_edx;
469d85631c4SPeter Wemm 	regs->tf_rcx = ucp->uc_mcontext.mc_ecx;
470d85631c4SPeter Wemm 	regs->tf_rax = ucp->uc_mcontext.mc_eax;
471d85631c4SPeter Wemm 	regs->tf_trapno = ucp->uc_mcontext.mc_trapno;
472d85631c4SPeter Wemm 	regs->tf_err = ucp->uc_mcontext.mc_err;
473d85631c4SPeter Wemm 	regs->tf_rip = ucp->uc_mcontext.mc_eip;
474d85631c4SPeter Wemm 	regs->tf_cs = cs;
475d85631c4SPeter Wemm 	regs->tf_rflags = ucp->uc_mcontext.mc_eflags;
476d85631c4SPeter Wemm 	regs->tf_rsp = ucp->uc_mcontext.mc_esp;
477d85631c4SPeter Wemm 	regs->tf_ss = ucp->uc_mcontext.mc_ss;
478d85631c4SPeter Wemm 
479d85631c4SPeter Wemm 	PROC_LOCK(p);
480d85631c4SPeter Wemm 	td->td_sigmask = ucp->uc_sigmask;
481d85631c4SPeter Wemm 	SIG_CANTMASK(td->td_sigmask);
482d85631c4SPeter Wemm 	signotify(td);
483d85631c4SPeter Wemm 	PROC_UNLOCK(p);
484d85631c4SPeter Wemm 	return (EJUSTRETURN);
485d85631c4SPeter Wemm }
486d85631c4SPeter Wemm #endif	/* COMPAT_FREEBSD4 */
487d85631c4SPeter Wemm 
488d85631c4SPeter Wemm /*
489d85631c4SPeter Wemm  * MPSAFE
490d85631c4SPeter Wemm  */
491d85631c4SPeter Wemm int
49246159d1fSPeter Wemm freebsd32_sigreturn(td, uap)
493d85631c4SPeter Wemm 	struct thread *td;
49446159d1fSPeter Wemm 	struct freebsd32_sigreturn_args /* {
49546159d1fSPeter Wemm 		const struct freebsd32_ucontext *sigcntxp;
496d85631c4SPeter Wemm 	} */ *uap;
497d85631c4SPeter Wemm {
498d85631c4SPeter Wemm 	struct ia32_ucontext uc;
499d85631c4SPeter Wemm 	struct proc *p = td->td_proc;
500d85631c4SPeter Wemm 	struct trapframe *regs;
501d85631c4SPeter Wemm 	const struct ia32_ucontext *ucp;
502d85631c4SPeter Wemm 	int cs, eflags, error, ret;
503d85631c4SPeter Wemm 
504d85631c4SPeter Wemm 	error = copyin(uap->sigcntxp, &uc, sizeof(uc));
505d85631c4SPeter Wemm 	if (error != 0)
506d85631c4SPeter Wemm 		return (error);
507d85631c4SPeter Wemm 	ucp = &uc;
508d85631c4SPeter Wemm 	regs = td->td_frame;
509d85631c4SPeter Wemm 	eflags = ucp->uc_mcontext.mc_eflags;
510d85631c4SPeter Wemm 	/*
511d85631c4SPeter Wemm 	 * Don't allow users to change privileged or reserved flags.
512d85631c4SPeter Wemm 	 */
513d85631c4SPeter Wemm 	/*
514d85631c4SPeter Wemm 	 * XXX do allow users to change the privileged flag PSL_RF.
515d85631c4SPeter Wemm 	 * The cpu sets PSL_RF in tf_eflags for faults.  Debuggers
516d85631c4SPeter Wemm 	 * should sometimes set it there too.  tf_eflags is kept in
517d85631c4SPeter Wemm 	 * the signal context during signal handling and there is no
518d85631c4SPeter Wemm 	 * other place to remember it, so the PSL_RF bit may be
519d85631c4SPeter Wemm 	 * corrupted by the signal handler without us knowing.
520d85631c4SPeter Wemm 	 * Corruption of the PSL_RF bit at worst causes one more or
521d85631c4SPeter Wemm 	 * one less debugger trap, so allowing it is fairly harmless.
522d85631c4SPeter Wemm 	 */
523d85631c4SPeter Wemm 	if (!EFL_SECURE(eflags & ~PSL_RF, regs->tf_rflags & ~PSL_RF)) {
52446159d1fSPeter Wemm 		printf("freebsd32_sigreturn: eflags = 0x%x\n", eflags);
525d85631c4SPeter Wemm 		return (EINVAL);
526d85631c4SPeter Wemm 	}
527d85631c4SPeter Wemm 
528d85631c4SPeter Wemm 	/*
529d85631c4SPeter Wemm 	 * Don't allow users to load a valid privileged %cs.  Let the
530d85631c4SPeter Wemm 	 * hardware check for invalid selectors, excess privilege in
531d85631c4SPeter Wemm 	 * other selectors, invalid %eip's and invalid %esp's.
532d85631c4SPeter Wemm 	 */
533d85631c4SPeter Wemm 	cs = ucp->uc_mcontext.mc_cs;
534d85631c4SPeter Wemm 	if (!CS_SECURE(cs)) {
535d85631c4SPeter Wemm 		printf("sigreturn: cs = 0x%x\n", cs);
536d85631c4SPeter Wemm 		trapsignal(td, SIGBUS, T_PROTFLT);
537d85631c4SPeter Wemm 		return (EINVAL);
538d85631c4SPeter Wemm 	}
539d85631c4SPeter Wemm 
540d85631c4SPeter Wemm 	ret = ia32_set_fpcontext(td, &ucp->uc_mcontext);
541d85631c4SPeter Wemm 	if (ret != 0)
542d85631c4SPeter Wemm 		return (ret);
543d85631c4SPeter Wemm 
544d85631c4SPeter Wemm 	/* Segment selectors restored by sigtramp.S */
545d85631c4SPeter Wemm 	regs->tf_rdi = ucp->uc_mcontext.mc_edi;
546d85631c4SPeter Wemm 	regs->tf_rsi = ucp->uc_mcontext.mc_esi;
547d85631c4SPeter Wemm 	regs->tf_rbp = ucp->uc_mcontext.mc_ebp;
548d85631c4SPeter Wemm 	regs->tf_rbx = ucp->uc_mcontext.mc_ebx;
549d85631c4SPeter Wemm 	regs->tf_rdx = ucp->uc_mcontext.mc_edx;
550d85631c4SPeter Wemm 	regs->tf_rcx = ucp->uc_mcontext.mc_ecx;
551d85631c4SPeter Wemm 	regs->tf_rax = ucp->uc_mcontext.mc_eax;
552d85631c4SPeter Wemm 	regs->tf_trapno = ucp->uc_mcontext.mc_trapno;
553d85631c4SPeter Wemm 	regs->tf_err = ucp->uc_mcontext.mc_err;
554d85631c4SPeter Wemm 	regs->tf_rip = ucp->uc_mcontext.mc_eip;
555d85631c4SPeter Wemm 	regs->tf_cs = cs;
556d85631c4SPeter Wemm 	regs->tf_rflags = ucp->uc_mcontext.mc_eflags;
557d85631c4SPeter Wemm 	regs->tf_rsp = ucp->uc_mcontext.mc_esp;
558d85631c4SPeter Wemm 	regs->tf_ss = ucp->uc_mcontext.mc_ss;
559d85631c4SPeter Wemm 
560d85631c4SPeter Wemm 	PROC_LOCK(p);
561d85631c4SPeter Wemm 	td->td_sigmask = ucp->uc_sigmask;
562d85631c4SPeter Wemm 	SIG_CANTMASK(td->td_sigmask);
563d85631c4SPeter Wemm 	signotify(td);
564d85631c4SPeter Wemm 	PROC_UNLOCK(p);
565d85631c4SPeter Wemm 	return (EJUSTRETURN);
566d85631c4SPeter Wemm }
5674cd2d525SPeter Wemm 
5684cd2d525SPeter Wemm /*
5694cd2d525SPeter Wemm  * Clear registers on exec
5704cd2d525SPeter Wemm  */
5714cd2d525SPeter Wemm void
5724cd2d525SPeter Wemm ia32_setregs(td, entry, stack, ps_strings)
5734cd2d525SPeter Wemm 	struct thread *td;
5744cd2d525SPeter Wemm 	u_long entry;
5754cd2d525SPeter Wemm 	u_long stack;
5764cd2d525SPeter Wemm 	u_long ps_strings;
5774cd2d525SPeter Wemm {
5784cd2d525SPeter Wemm 	struct trapframe *regs = td->td_frame;
5794cd2d525SPeter Wemm 	struct pcb *pcb = td->td_pcb;
5804cd2d525SPeter Wemm 
5814cd2d525SPeter Wemm 	wrmsr(MSR_FSBASE, 0);
5824cd2d525SPeter Wemm 	wrmsr(MSR_KGSBASE, 0);	/* User value while we're in the kernel */
5834cd2d525SPeter Wemm 	pcb->pcb_fsbase = 0;
5844cd2d525SPeter Wemm 	pcb->pcb_gsbase = 0;
5854cd2d525SPeter Wemm 	load_ds(_udatasel);
5864cd2d525SPeter Wemm 	load_es(_udatasel);
5874cd2d525SPeter Wemm 	load_fs(_udatasel);
5884cd2d525SPeter Wemm 	load_gs(_udatasel);
5894cd2d525SPeter Wemm 	pcb->pcb_ds = _udatasel;
5904cd2d525SPeter Wemm 	pcb->pcb_es = _udatasel;
5914cd2d525SPeter Wemm 	pcb->pcb_fs = _udatasel;
5924cd2d525SPeter Wemm 	pcb->pcb_gs = _udatasel;
5934cd2d525SPeter Wemm 
5944cd2d525SPeter Wemm 	bzero((char *)regs, sizeof(struct trapframe));
5954cd2d525SPeter Wemm 	regs->tf_rip = entry;
5964cd2d525SPeter Wemm 	regs->tf_rsp = stack;
5974cd2d525SPeter Wemm 	regs->tf_rflags = PSL_USER | (regs->tf_rflags & PSL_T);
5984cd2d525SPeter Wemm 	regs->tf_ss = _udatasel;
5994cd2d525SPeter Wemm 	regs->tf_cs = _ucode32sel;
6004cd2d525SPeter Wemm 	regs->tf_rbx = ps_strings;
6014cd2d525SPeter Wemm 	load_cr0(rcr0() | CR0_MP | CR0_TS);
6024cd2d525SPeter Wemm 	fpstate_drop(td);
6034cd2d525SPeter Wemm 
6044cd2d525SPeter Wemm 	/* Return via doreti so that we can change to a different %cs */
6054cd2d525SPeter Wemm 	pcb->pcb_flags |= PCB_FULLCTX;
6064cd2d525SPeter Wemm 	td->td_retval[1] = 0;
6074cd2d525SPeter Wemm }
608