1d85631c4SPeter Wemm /*- 2d85631c4SPeter Wemm * Copyright (c) 2003 Peter Wemm 3d85631c4SPeter Wemm * Copyright (c) 1982, 1987, 1990 The Regents of the University of California. 4d85631c4SPeter Wemm * All rights reserved. 5d85631c4SPeter Wemm * 6d85631c4SPeter Wemm * This code is derived from software contributed to Berkeley by 7d85631c4SPeter Wemm * William Jolitz. 8d85631c4SPeter Wemm * 9d85631c4SPeter Wemm * Redistribution and use in source and binary forms, with or without 10d85631c4SPeter Wemm * modification, are permitted provided that the following conditions 11d85631c4SPeter Wemm * are met: 12d85631c4SPeter Wemm * 1. Redistributions of source code must retain the above copyright 13d85631c4SPeter Wemm * notice, this list of conditions and the following disclaimer. 14d85631c4SPeter Wemm * 2. Redistributions in binary form must reproduce the above copyright 15d85631c4SPeter Wemm * notice, this list of conditions and the following disclaimer in the 16d85631c4SPeter Wemm * documentation and/or other materials provided with the distribution. 17d85631c4SPeter Wemm * 3. All advertising materials mentioning features or use of this software 18d85631c4SPeter Wemm * must display the following acknowledgement: 19d85631c4SPeter Wemm * This product includes software developed by the University of 20d85631c4SPeter Wemm * California, Berkeley and its contributors. 21d85631c4SPeter Wemm * 4. Neither the name of the University nor the names of its contributors 22d85631c4SPeter Wemm * may be used to endorse or promote products derived from this software 23d85631c4SPeter Wemm * without specific prior written permission. 24d85631c4SPeter Wemm * 25d85631c4SPeter Wemm * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 26d85631c4SPeter Wemm * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 27d85631c4SPeter Wemm * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 28d85631c4SPeter Wemm * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 29d85631c4SPeter Wemm * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 30d85631c4SPeter Wemm * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 31d85631c4SPeter Wemm * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 32d85631c4SPeter Wemm * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 33d85631c4SPeter Wemm * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 34d85631c4SPeter Wemm * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 35d85631c4SPeter Wemm * SUCH DAMAGE. 36d85631c4SPeter Wemm */ 37d85631c4SPeter Wemm 3856ae44c5SDavid E. O'Brien #include <sys/cdefs.h> 3956ae44c5SDavid E. O'Brien __FBSDID("$FreeBSD$"); 4056ae44c5SDavid E. O'Brien 41d85631c4SPeter Wemm #include "opt_compat.h" 42d85631c4SPeter Wemm 43d85631c4SPeter Wemm #include <sys/param.h> 44d85631c4SPeter Wemm #include <sys/exec.h> 45d85631c4SPeter Wemm #include <sys/fcntl.h> 46d85631c4SPeter Wemm #include <sys/imgact.h> 47d85631c4SPeter Wemm #include <sys/kernel.h> 48d85631c4SPeter Wemm #include <sys/lock.h> 49d85631c4SPeter Wemm #include <sys/malloc.h> 50d85631c4SPeter Wemm #include <sys/mutex.h> 51d85631c4SPeter Wemm #include <sys/mman.h> 52d85631c4SPeter Wemm #include <sys/namei.h> 53d85631c4SPeter Wemm #include <sys/pioctl.h> 54d85631c4SPeter Wemm #include <sys/proc.h> 55d85631c4SPeter Wemm #include <sys/procfs.h> 56d85631c4SPeter Wemm #include <sys/resourcevar.h> 57d85631c4SPeter Wemm #include <sys/systm.h> 58d85631c4SPeter Wemm #include <sys/signalvar.h> 59d85631c4SPeter Wemm #include <sys/stat.h> 60d85631c4SPeter Wemm #include <sys/sx.h> 61d85631c4SPeter Wemm #include <sys/syscall.h> 62d85631c4SPeter Wemm #include <sys/sysctl.h> 63d85631c4SPeter Wemm #include <sys/sysent.h> 64d85631c4SPeter Wemm #include <sys/vnode.h> 65d85631c4SPeter Wemm 66d85631c4SPeter Wemm #include <vm/vm.h> 67d85631c4SPeter Wemm #include <vm/vm_kern.h> 68d85631c4SPeter Wemm #include <vm/vm_param.h> 69d85631c4SPeter Wemm #include <vm/pmap.h> 70d85631c4SPeter Wemm #include <vm/vm_map.h> 71d85631c4SPeter Wemm #include <vm/vm_object.h> 72d85631c4SPeter Wemm #include <vm/vm_extern.h> 73d85631c4SPeter Wemm 7446159d1fSPeter Wemm #include <compat/freebsd32/freebsd32_util.h> 7546159d1fSPeter Wemm #include <compat/freebsd32/freebsd32_proto.h> 7646159d1fSPeter Wemm #include <compat/ia32/ia32_signal.h> 77d85631c4SPeter Wemm #include <machine/psl.h> 78d85631c4SPeter Wemm #include <machine/segments.h> 79d85631c4SPeter Wemm #include <machine/specialreg.h> 80d85631c4SPeter Wemm #include <machine/frame.h> 81d85631c4SPeter Wemm #include <machine/md_var.h> 82d85631c4SPeter Wemm #include <machine/pcb.h> 83d85631c4SPeter Wemm #include <machine/cpufunc.h> 84d85631c4SPeter Wemm 85d85631c4SPeter Wemm #ifdef COMPAT_FREEBSD4 86d85631c4SPeter Wemm static void freebsd4_ia32_sendsig(sig_t, int, sigset_t *, u_long); 87d85631c4SPeter Wemm #endif 88d85631c4SPeter Wemm static void ia32_get_fpcontext(struct thread *td, struct ia32_mcontext *mcp); 89d85631c4SPeter Wemm static int ia32_set_fpcontext(struct thread *td, const struct ia32_mcontext *mcp); 90d85631c4SPeter Wemm 91d85631c4SPeter Wemm extern int _ucode32sel, _udatasel; 92d85631c4SPeter Wemm 93d85631c4SPeter Wemm #define CS_SECURE(cs) (ISPL(cs) == SEL_UPL) 94d85631c4SPeter Wemm #define EFL_SECURE(ef, oef) ((((ef) ^ (oef)) & ~PSL_USERCHANGE) == 0) 95d85631c4SPeter Wemm 96d85631c4SPeter Wemm static void 97d85631c4SPeter Wemm ia32_get_fpcontext(struct thread *td, struct ia32_mcontext *mcp) 98d85631c4SPeter Wemm { 99d85631c4SPeter Wemm struct savefpu *addr; 100d85631c4SPeter Wemm 101d85631c4SPeter Wemm /* 102d85631c4SPeter Wemm * XXX mc_fpstate might be misaligned, since its declaration is not 103d85631c4SPeter Wemm * unportabilized using __attribute__((aligned(16))) like the 104d85631c4SPeter Wemm * declaration of struct savemm, and anyway, alignment doesn't work 105d85631c4SPeter Wemm * for auto variables since we don't use gcc's pessimal stack 106d85631c4SPeter Wemm * alignment. Work around this by abusing the spare fields after 107d85631c4SPeter Wemm * mcp->mc_fpstate. 108d85631c4SPeter Wemm * 109d85631c4SPeter Wemm * XXX unpessimize most cases by only aligning when fxsave might be 110d85631c4SPeter Wemm * called, although this requires knowing too much about 111bf2f09eeSPeter Wemm * fpugetregs()'s internals. 112d85631c4SPeter Wemm */ 113d85631c4SPeter Wemm addr = (struct savefpu *)&mcp->mc_fpstate; 114d85631c4SPeter Wemm if (td == PCPU_GET(fpcurthread) && ((uintptr_t)(void *)addr & 0xF)) { 115d85631c4SPeter Wemm do 116d85631c4SPeter Wemm addr = (void *)((char *)addr + 4); 117d85631c4SPeter Wemm while ((uintptr_t)(void *)addr & 0xF); 118d85631c4SPeter Wemm } 119bf2f09eeSPeter Wemm mcp->mc_ownedfp = fpugetregs(td, addr); 120d85631c4SPeter Wemm if (addr != (struct savefpu *)&mcp->mc_fpstate) { 121d85631c4SPeter Wemm bcopy(addr, &mcp->mc_fpstate, sizeof(mcp->mc_fpstate)); 122d85631c4SPeter Wemm bzero(&mcp->mc_spare2, sizeof(mcp->mc_spare2)); 123d85631c4SPeter Wemm } 124bf2f09eeSPeter Wemm mcp->mc_fpformat = fpuformat(); 125d85631c4SPeter Wemm } 126d85631c4SPeter Wemm 127d85631c4SPeter Wemm static int 128d85631c4SPeter Wemm ia32_set_fpcontext(struct thread *td, const struct ia32_mcontext *mcp) 129d85631c4SPeter Wemm { 130d85631c4SPeter Wemm struct savefpu *addr; 131d85631c4SPeter Wemm 132d85631c4SPeter Wemm if (mcp->mc_fpformat == _MC_FPFMT_NODEV) 133d85631c4SPeter Wemm return (0); 134d85631c4SPeter Wemm else if (mcp->mc_fpformat != _MC_FPFMT_XMM) 135d85631c4SPeter Wemm return (EINVAL); 136d85631c4SPeter Wemm else if (mcp->mc_ownedfp == _MC_FPOWNED_NONE) 137d85631c4SPeter Wemm /* We don't care what state is left in the FPU or PCB. */ 138d85631c4SPeter Wemm fpstate_drop(td); 139d85631c4SPeter Wemm else if (mcp->mc_ownedfp == _MC_FPOWNED_FPU || 140d85631c4SPeter Wemm mcp->mc_ownedfp == _MC_FPOWNED_PCB) { 141d85631c4SPeter Wemm /* XXX align as above. */ 142d85631c4SPeter Wemm addr = (struct savefpu *)&mcp->mc_fpstate; 143d85631c4SPeter Wemm if (td == PCPU_GET(fpcurthread) && 144d85631c4SPeter Wemm ((uintptr_t)(void *)addr & 0xF)) { 145d85631c4SPeter Wemm do 146d85631c4SPeter Wemm addr = (void *)((char *)addr + 4); 147d85631c4SPeter Wemm while ((uintptr_t)(void *)addr & 0xF); 148d85631c4SPeter Wemm bcopy(&mcp->mc_fpstate, addr, sizeof(mcp->mc_fpstate)); 149d85631c4SPeter Wemm } 150d85631c4SPeter Wemm /* 151bf2f09eeSPeter Wemm * XXX we violate the dubious requirement that fpusetregs() 152d85631c4SPeter Wemm * be called with interrupts disabled. 153d85631c4SPeter Wemm */ 154bf2f09eeSPeter Wemm fpusetregs(td, addr); 155d85631c4SPeter Wemm /* 156d85631c4SPeter Wemm * Don't bother putting things back where they were in the 157d85631c4SPeter Wemm * misaligned case, since we know that the caller won't use 158d85631c4SPeter Wemm * them again. 159d85631c4SPeter Wemm */ 160d85631c4SPeter Wemm } else 161d85631c4SPeter Wemm return (EINVAL); 162d85631c4SPeter Wemm return (0); 163d85631c4SPeter Wemm } 164d85631c4SPeter Wemm 165d85631c4SPeter Wemm /* 166d85631c4SPeter Wemm * Send an interrupt to process. 167d85631c4SPeter Wemm * 168d85631c4SPeter Wemm * Stack is set up to allow sigcode stored 169d85631c4SPeter Wemm * at top to call routine, followed by kcall 170d85631c4SPeter Wemm * to sigreturn routine below. After sigreturn 171d85631c4SPeter Wemm * resets the signal mask, the stack, and the 172d85631c4SPeter Wemm * frame pointer, it returns to the user 173d85631c4SPeter Wemm * specified pc, psl. 174d85631c4SPeter Wemm */ 175d85631c4SPeter Wemm #ifdef COMPAT_FREEBSD4 176d85631c4SPeter Wemm static void 177d85631c4SPeter Wemm freebsd4_ia32_sendsig(sig_t catcher, int sig, sigset_t *mask, u_long code) 178d85631c4SPeter Wemm { 179d85631c4SPeter Wemm struct ia32_sigframe4 sf, *sfp; 180d85631c4SPeter Wemm struct proc *p; 181d85631c4SPeter Wemm struct thread *td; 182d85631c4SPeter Wemm struct sigacts *psp; 183d85631c4SPeter Wemm struct trapframe *regs; 184d85631c4SPeter Wemm int oonstack; 185d85631c4SPeter Wemm 186d85631c4SPeter Wemm td = curthread; 187d85631c4SPeter Wemm p = td->td_proc; 188d85631c4SPeter Wemm PROC_LOCK_ASSERT(p, MA_OWNED); 189d85631c4SPeter Wemm psp = p->p_sigacts; 1903554ecf0SPeter Wemm mtx_assert(&psp->ps_mtx, MA_OWNED); 191d85631c4SPeter Wemm regs = td->td_frame; 192d85631c4SPeter Wemm oonstack = sigonstack(regs->tf_rsp); 193d85631c4SPeter Wemm 194d85631c4SPeter Wemm /* Save user context. */ 195d85631c4SPeter Wemm bzero(&sf, sizeof(sf)); 196d85631c4SPeter Wemm sf.sf_uc.uc_sigmask = *mask; 197a30ec4b9SDavid Xu sf.sf_uc.uc_stack.ss_sp = (uintptr_t)td->td_sigstk.ss_sp; 198a30ec4b9SDavid Xu sf.sf_uc.uc_stack.ss_size = td->td_sigstk.ss_size; 199a30ec4b9SDavid Xu sf.sf_uc.uc_stack.ss_flags = (td->td_pflags & TDP_ALTSTACK) 200d85631c4SPeter Wemm ? ((oonstack) ? SS_ONSTACK : 0) : SS_DISABLE; 201d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_onstack = (oonstack) ? 1 : 0; 202d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_gs = rgs(); 203d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_fs = rfs(); 204d85631c4SPeter Wemm __asm __volatile("movl %%es,%0" : "=rm" (sf.sf_uc.uc_mcontext.mc_es)); 205d85631c4SPeter Wemm __asm __volatile("movl %%ds,%0" : "=rm" (sf.sf_uc.uc_mcontext.mc_ds)); 206d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_edi = regs->tf_rdi; 207d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_esi = regs->tf_rsi; 208d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_ebp = regs->tf_rbp; 209d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_isp = regs->tf_rsp; /* XXX */ 210d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_ebx = regs->tf_rbx; 211d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_edx = regs->tf_rdx; 212d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_ecx = regs->tf_rcx; 213d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_eax = regs->tf_rax; 214d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_trapno = regs->tf_trapno; 215d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_err = regs->tf_err; 216d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_eip = regs->tf_rip; 217d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_cs = regs->tf_cs; 218d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_eflags = regs->tf_rflags; 219d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_esp = regs->tf_rsp; 220d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_ss = regs->tf_ss; 221d85631c4SPeter Wemm 222d85631c4SPeter Wemm /* Allocate space for the signal handler context. */ 223a30ec4b9SDavid Xu if ((td->td_pflags & TDP_ALTSTACK) != 0 && !oonstack && 224d85631c4SPeter Wemm SIGISMEMBER(psp->ps_sigonstack, sig)) { 225a30ec4b9SDavid Xu sfp = (struct ia32_sigframe4 *)(td->td_sigstk.ss_sp + 226a30ec4b9SDavid Xu td->td_sigstk.ss_size - sizeof(sf)); 227d85631c4SPeter Wemm } else 228d85631c4SPeter Wemm sfp = (struct ia32_sigframe4 *)regs->tf_rsp - 1; 229d85631c4SPeter Wemm PROC_UNLOCK(p); 230d85631c4SPeter Wemm 231d85631c4SPeter Wemm /* Translate the signal if appropriate. */ 232d85631c4SPeter Wemm if (p->p_sysent->sv_sigtbl && sig <= p->p_sysent->sv_sigsize) 233d85631c4SPeter Wemm sig = p->p_sysent->sv_sigtbl[_SIG_IDX(sig)]; 234d85631c4SPeter Wemm 235d85631c4SPeter Wemm /* Build the argument list for the signal handler. */ 236d85631c4SPeter Wemm sf.sf_signum = sig; 237d85631c4SPeter Wemm sf.sf_ucontext = (register_t)&sfp->sf_uc; 238d85631c4SPeter Wemm PROC_LOCK(p); 239d85631c4SPeter Wemm if (SIGISMEMBER(p->p_sigacts->ps_siginfo, sig)) { 240d85631c4SPeter Wemm /* Signal handler installed with SA_SIGINFO. */ 241d85631c4SPeter Wemm sf.sf_siginfo = (u_int32_t)(uintptr_t)&sfp->sf_si; 242d85631c4SPeter Wemm sf.sf_ah = (u_int32_t)(uintptr_t)catcher; 243d85631c4SPeter Wemm 244d85631c4SPeter Wemm /* Fill in POSIX parts */ 245d85631c4SPeter Wemm sf.sf_si.si_signo = sig; 246d85631c4SPeter Wemm sf.sf_si.si_code = code; 247d85631c4SPeter Wemm sf.sf_si.si_addr = regs->tf_addr; 248d85631c4SPeter Wemm } else { 249d85631c4SPeter Wemm /* Old FreeBSD-style arguments. */ 250d85631c4SPeter Wemm sf.sf_siginfo = code; 251d85631c4SPeter Wemm sf.sf_addr = regs->tf_addr; 252d85631c4SPeter Wemm sf.sf_ah = (u_int32_t)(uintptr_t)catcher; 253d85631c4SPeter Wemm } 2543554ecf0SPeter Wemm mtx_unlock(&psp->ps_mtx); 255d85631c4SPeter Wemm PROC_UNLOCK(p); 256d85631c4SPeter Wemm 257d85631c4SPeter Wemm /* 258d85631c4SPeter Wemm * Copy the sigframe out to the user's stack. 259d85631c4SPeter Wemm */ 260d85631c4SPeter Wemm if (copyout(&sf, sfp, sizeof(*sfp)) != 0) { 261d85631c4SPeter Wemm #ifdef DEBUG 262d85631c4SPeter Wemm printf("process %ld has trashed its stack\n", (long)p->p_pid); 263d85631c4SPeter Wemm #endif 264d85631c4SPeter Wemm PROC_LOCK(p); 265d85631c4SPeter Wemm sigexit(td, SIGILL); 266d85631c4SPeter Wemm } 267d85631c4SPeter Wemm 268d85631c4SPeter Wemm regs->tf_rsp = (uintptr_t)sfp; 26946159d1fSPeter Wemm regs->tf_rip = FREEBSD32_PS_STRINGS - sz_freebsd4_ia32_sigcode; 270d85631c4SPeter Wemm regs->tf_rflags &= ~PSL_T; 271d85631c4SPeter Wemm regs->tf_cs = _ucode32sel; 272d85631c4SPeter Wemm regs->tf_ss = _udatasel; 273d85631c4SPeter Wemm load_ds(_udatasel); 274d85631c4SPeter Wemm td->td_pcb->pcb_ds = _udatasel; 275d85631c4SPeter Wemm load_es(_udatasel); 276d85631c4SPeter Wemm td->td_pcb->pcb_es = _udatasel; 277d85631c4SPeter Wemm /* leave user %fs and %gs untouched */ 278d85631c4SPeter Wemm PROC_LOCK(p); 2793554ecf0SPeter Wemm mtx_lock(&psp->ps_mtx); 280d85631c4SPeter Wemm } 281d85631c4SPeter Wemm #endif /* COMPAT_FREEBSD4 */ 282d85631c4SPeter Wemm 283d85631c4SPeter Wemm void 284d85631c4SPeter Wemm ia32_sendsig(sig_t catcher, int sig, sigset_t *mask, u_long code) 285d85631c4SPeter Wemm { 286d85631c4SPeter Wemm struct ia32_sigframe sf, *sfp; 287d85631c4SPeter Wemm struct proc *p; 288d85631c4SPeter Wemm struct thread *td; 289d85631c4SPeter Wemm struct sigacts *psp; 290d85631c4SPeter Wemm char *sp; 291d85631c4SPeter Wemm struct trapframe *regs; 292d85631c4SPeter Wemm int oonstack; 293d85631c4SPeter Wemm 294d85631c4SPeter Wemm td = curthread; 295d85631c4SPeter Wemm p = td->td_proc; 296d85631c4SPeter Wemm PROC_LOCK_ASSERT(p, MA_OWNED); 297d85631c4SPeter Wemm psp = p->p_sigacts; 298d85631c4SPeter Wemm #ifdef COMPAT_FREEBSD4 299d85631c4SPeter Wemm if (SIGISMEMBER(psp->ps_freebsd4, sig)) { 300d85631c4SPeter Wemm freebsd4_ia32_sendsig(catcher, sig, mask, code); 301d85631c4SPeter Wemm return; 302d85631c4SPeter Wemm } 303d85631c4SPeter Wemm #endif 3043554ecf0SPeter Wemm mtx_assert(&psp->ps_mtx, MA_OWNED); 305d85631c4SPeter Wemm regs = td->td_frame; 306d85631c4SPeter Wemm oonstack = sigonstack(regs->tf_rsp); 307d85631c4SPeter Wemm 308d85631c4SPeter Wemm /* Save user context. */ 309d85631c4SPeter Wemm bzero(&sf, sizeof(sf)); 310d85631c4SPeter Wemm sf.sf_uc.uc_sigmask = *mask; 311a30ec4b9SDavid Xu sf.sf_uc.uc_stack.ss_sp = (uintptr_t)td->td_sigstk.ss_sp; 312a30ec4b9SDavid Xu sf.sf_uc.uc_stack.ss_size = td->td_sigstk.ss_size; 313a30ec4b9SDavid Xu sf.sf_uc.uc_stack.ss_flags = (td->td_pflags & TDP_ALTSTACK) 314d85631c4SPeter Wemm ? ((oonstack) ? SS_ONSTACK : 0) : SS_DISABLE; 315d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_onstack = (oonstack) ? 1 : 0; 316d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_gs = rgs(); 317d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_fs = rfs(); 318d85631c4SPeter Wemm __asm __volatile("movl %%es,%0" : "=rm" (sf.sf_uc.uc_mcontext.mc_es)); 319d85631c4SPeter Wemm __asm __volatile("movl %%ds,%0" : "=rm" (sf.sf_uc.uc_mcontext.mc_ds)); 320d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_edi = regs->tf_rdi; 321d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_esi = regs->tf_rsi; 322d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_ebp = regs->tf_rbp; 323d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_isp = regs->tf_rsp; /* XXX */ 324d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_ebx = regs->tf_rbx; 325d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_edx = regs->tf_rdx; 326d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_ecx = regs->tf_rcx; 327d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_eax = regs->tf_rax; 328d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_trapno = regs->tf_trapno; 329d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_err = regs->tf_err; 330d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_eip = regs->tf_rip; 331d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_cs = regs->tf_cs; 332d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_eflags = regs->tf_rflags; 333d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_esp = regs->tf_rsp; 334d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_ss = regs->tf_ss; 335d85631c4SPeter Wemm sf.sf_uc.uc_mcontext.mc_len = sizeof(sf.sf_uc.uc_mcontext); /* magic */ 336d85631c4SPeter Wemm ia32_get_fpcontext(td, &sf.sf_uc.uc_mcontext); 337d85631c4SPeter Wemm fpstate_drop(td); 338d85631c4SPeter Wemm 339d85631c4SPeter Wemm /* Allocate space for the signal handler context. */ 340a30ec4b9SDavid Xu if ((td->td_pflags & TDP_ALTSTACK) != 0 && !oonstack && 341d85631c4SPeter Wemm SIGISMEMBER(psp->ps_sigonstack, sig)) { 342a30ec4b9SDavid Xu sp = td->td_sigstk.ss_sp + 343a30ec4b9SDavid Xu td->td_sigstk.ss_size - sizeof(sf); 344d85631c4SPeter Wemm } else 345d85631c4SPeter Wemm sp = (char *)regs->tf_rsp - sizeof(sf); 346d85631c4SPeter Wemm /* Align to 16 bytes. */ 347d85631c4SPeter Wemm sfp = (struct ia32_sigframe *)((uintptr_t)sp & ~0xF); 348d85631c4SPeter Wemm PROC_UNLOCK(p); 349d85631c4SPeter Wemm 350d85631c4SPeter Wemm /* Translate the signal if appropriate. */ 351d85631c4SPeter Wemm if (p->p_sysent->sv_sigtbl && sig <= p->p_sysent->sv_sigsize) 352d85631c4SPeter Wemm sig = p->p_sysent->sv_sigtbl[_SIG_IDX(sig)]; 353d85631c4SPeter Wemm 354d85631c4SPeter Wemm /* Build the argument list for the signal handler. */ 355d85631c4SPeter Wemm sf.sf_signum = sig; 356d85631c4SPeter Wemm sf.sf_ucontext = (register_t)&sfp->sf_uc; 357d85631c4SPeter Wemm PROC_LOCK(p); 358d85631c4SPeter Wemm if (SIGISMEMBER(p->p_sigacts->ps_siginfo, sig)) { 359d85631c4SPeter Wemm /* Signal handler installed with SA_SIGINFO. */ 360d85631c4SPeter Wemm sf.sf_siginfo = (u_int32_t)(uintptr_t)&sfp->sf_si; 361d85631c4SPeter Wemm sf.sf_ah = (u_int32_t)(uintptr_t)catcher; 362d85631c4SPeter Wemm 363d85631c4SPeter Wemm /* Fill in POSIX parts */ 364d85631c4SPeter Wemm sf.sf_si.si_signo = sig; 365d85631c4SPeter Wemm sf.sf_si.si_code = code; 366d85631c4SPeter Wemm sf.sf_si.si_addr = regs->tf_addr; 367d85631c4SPeter Wemm } else { 368d85631c4SPeter Wemm /* Old FreeBSD-style arguments. */ 369d85631c4SPeter Wemm sf.sf_siginfo = code; 3709f0c4ab3SPeter Wemm sf.sf_addr = regs->tf_addr; 371d85631c4SPeter Wemm sf.sf_ah = (u_int32_t)(uintptr_t)catcher; 372d85631c4SPeter Wemm } 3733554ecf0SPeter Wemm mtx_unlock(&psp->ps_mtx); 374d85631c4SPeter Wemm PROC_UNLOCK(p); 375d85631c4SPeter Wemm 376d85631c4SPeter Wemm /* 377d85631c4SPeter Wemm * Copy the sigframe out to the user's stack. 378d85631c4SPeter Wemm */ 379d85631c4SPeter Wemm if (copyout(&sf, sfp, sizeof(*sfp)) != 0) { 380d85631c4SPeter Wemm #ifdef DEBUG 381d85631c4SPeter Wemm printf("process %ld has trashed its stack\n", (long)p->p_pid); 382d85631c4SPeter Wemm #endif 383d85631c4SPeter Wemm PROC_LOCK(p); 384d85631c4SPeter Wemm sigexit(td, SIGILL); 385d85631c4SPeter Wemm } 386d85631c4SPeter Wemm 387d85631c4SPeter Wemm regs->tf_rsp = (uintptr_t)sfp; 38846159d1fSPeter Wemm regs->tf_rip = FREEBSD32_PS_STRINGS - *(p->p_sysent->sv_szsigcode); 389d85631c4SPeter Wemm regs->tf_rflags &= ~PSL_T; 390d85631c4SPeter Wemm regs->tf_cs = _ucode32sel; 391d85631c4SPeter Wemm regs->tf_ss = _udatasel; 392d85631c4SPeter Wemm load_ds(_udatasel); 393d85631c4SPeter Wemm td->td_pcb->pcb_ds = _udatasel; 394d85631c4SPeter Wemm load_es(_udatasel); 395d85631c4SPeter Wemm td->td_pcb->pcb_es = _udatasel; 396d85631c4SPeter Wemm /* leave user %fs and %gs untouched */ 397d85631c4SPeter Wemm PROC_LOCK(p); 3983554ecf0SPeter Wemm mtx_lock(&psp->ps_mtx); 399d85631c4SPeter Wemm } 400d85631c4SPeter Wemm 401d85631c4SPeter Wemm /* 402d85631c4SPeter Wemm * System call to cleanup state after a signal 403d85631c4SPeter Wemm * has been taken. Reset signal mask and 404d85631c4SPeter Wemm * stack state from context left by sendsig (above). 405d85631c4SPeter Wemm * Return to previous pc and psl as specified by 406d85631c4SPeter Wemm * context left by sendsig. Check carefully to 407d85631c4SPeter Wemm * make sure that the user has not modified the 408d85631c4SPeter Wemm * state to gain improper privileges. 409d85631c4SPeter Wemm */ 410d85631c4SPeter Wemm #ifdef COMPAT_FREEBSD4 411d85631c4SPeter Wemm /* 412d85631c4SPeter Wemm * MPSAFE 413d85631c4SPeter Wemm */ 414d85631c4SPeter Wemm int 41546159d1fSPeter Wemm freebsd4_freebsd32_sigreturn(td, uap) 416d85631c4SPeter Wemm struct thread *td; 41746159d1fSPeter Wemm struct freebsd4_freebsd32_sigreturn_args /* { 41846159d1fSPeter Wemm const struct freebsd4_freebsd32_ucontext *sigcntxp; 419d85631c4SPeter Wemm } */ *uap; 420d85631c4SPeter Wemm { 421d85631c4SPeter Wemm struct ia32_ucontext4 uc; 422d85631c4SPeter Wemm struct proc *p = td->td_proc; 423d85631c4SPeter Wemm struct trapframe *regs; 424d85631c4SPeter Wemm const struct ia32_ucontext4 *ucp; 425d85631c4SPeter Wemm int cs, eflags, error; 426d85631c4SPeter Wemm 427d85631c4SPeter Wemm error = copyin(uap->sigcntxp, &uc, sizeof(uc)); 428d85631c4SPeter Wemm if (error != 0) 429d85631c4SPeter Wemm return (error); 430d85631c4SPeter Wemm ucp = &uc; 431d85631c4SPeter Wemm regs = td->td_frame; 432d85631c4SPeter Wemm eflags = ucp->uc_mcontext.mc_eflags; 433d85631c4SPeter Wemm /* 434d85631c4SPeter Wemm * Don't allow users to change privileged or reserved flags. 435d85631c4SPeter Wemm */ 436d85631c4SPeter Wemm /* 437d85631c4SPeter Wemm * XXX do allow users to change the privileged flag PSL_RF. 438d85631c4SPeter Wemm * The cpu sets PSL_RF in tf_eflags for faults. Debuggers 439d85631c4SPeter Wemm * should sometimes set it there too. tf_eflags is kept in 440d85631c4SPeter Wemm * the signal context during signal handling and there is no 441d85631c4SPeter Wemm * other place to remember it, so the PSL_RF bit may be 442d85631c4SPeter Wemm * corrupted by the signal handler without us knowing. 443d85631c4SPeter Wemm * Corruption of the PSL_RF bit at worst causes one more or 444d85631c4SPeter Wemm * one less debugger trap, so allowing it is fairly harmless. 445d85631c4SPeter Wemm */ 446d85631c4SPeter Wemm if (!EFL_SECURE(eflags & ~PSL_RF, regs->tf_rflags & ~PSL_RF)) { 44746159d1fSPeter Wemm printf("freebsd4_freebsd32_sigreturn: eflags = 0x%x\n", eflags); 448d85631c4SPeter Wemm return (EINVAL); 449d85631c4SPeter Wemm } 450d85631c4SPeter Wemm 451d85631c4SPeter Wemm /* 452d85631c4SPeter Wemm * Don't allow users to load a valid privileged %cs. Let the 453d85631c4SPeter Wemm * hardware check for invalid selectors, excess privilege in 454d85631c4SPeter Wemm * other selectors, invalid %eip's and invalid %esp's. 455d85631c4SPeter Wemm */ 456d85631c4SPeter Wemm cs = ucp->uc_mcontext.mc_cs; 457d85631c4SPeter Wemm if (!CS_SECURE(cs)) { 458d85631c4SPeter Wemm printf("freebsd4_sigreturn: cs = 0x%x\n", cs); 459d85631c4SPeter Wemm trapsignal(td, SIGBUS, T_PROTFLT); 460d85631c4SPeter Wemm return (EINVAL); 461d85631c4SPeter Wemm } 462d85631c4SPeter Wemm 463d85631c4SPeter Wemm /* Segment selectors restored by sigtramp.S */ 464d85631c4SPeter Wemm regs->tf_rdi = ucp->uc_mcontext.mc_edi; 465d85631c4SPeter Wemm regs->tf_rsi = ucp->uc_mcontext.mc_esi; 466d85631c4SPeter Wemm regs->tf_rbp = ucp->uc_mcontext.mc_ebp; 467d85631c4SPeter Wemm regs->tf_rbx = ucp->uc_mcontext.mc_ebx; 468d85631c4SPeter Wemm regs->tf_rdx = ucp->uc_mcontext.mc_edx; 469d85631c4SPeter Wemm regs->tf_rcx = ucp->uc_mcontext.mc_ecx; 470d85631c4SPeter Wemm regs->tf_rax = ucp->uc_mcontext.mc_eax; 471d85631c4SPeter Wemm regs->tf_trapno = ucp->uc_mcontext.mc_trapno; 472d85631c4SPeter Wemm regs->tf_err = ucp->uc_mcontext.mc_err; 473d85631c4SPeter Wemm regs->tf_rip = ucp->uc_mcontext.mc_eip; 474d85631c4SPeter Wemm regs->tf_cs = cs; 475d85631c4SPeter Wemm regs->tf_rflags = ucp->uc_mcontext.mc_eflags; 476d85631c4SPeter Wemm regs->tf_rsp = ucp->uc_mcontext.mc_esp; 477d85631c4SPeter Wemm regs->tf_ss = ucp->uc_mcontext.mc_ss; 478d85631c4SPeter Wemm 479d85631c4SPeter Wemm PROC_LOCK(p); 480d85631c4SPeter Wemm td->td_sigmask = ucp->uc_sigmask; 481d85631c4SPeter Wemm SIG_CANTMASK(td->td_sigmask); 482d85631c4SPeter Wemm signotify(td); 483d85631c4SPeter Wemm PROC_UNLOCK(p); 484d85631c4SPeter Wemm return (EJUSTRETURN); 485d85631c4SPeter Wemm } 486d85631c4SPeter Wemm #endif /* COMPAT_FREEBSD4 */ 487d85631c4SPeter Wemm 488d85631c4SPeter Wemm /* 489d85631c4SPeter Wemm * MPSAFE 490d85631c4SPeter Wemm */ 491d85631c4SPeter Wemm int 49246159d1fSPeter Wemm freebsd32_sigreturn(td, uap) 493d85631c4SPeter Wemm struct thread *td; 49446159d1fSPeter Wemm struct freebsd32_sigreturn_args /* { 49546159d1fSPeter Wemm const struct freebsd32_ucontext *sigcntxp; 496d85631c4SPeter Wemm } */ *uap; 497d85631c4SPeter Wemm { 498d85631c4SPeter Wemm struct ia32_ucontext uc; 499d85631c4SPeter Wemm struct proc *p = td->td_proc; 500d85631c4SPeter Wemm struct trapframe *regs; 501d85631c4SPeter Wemm const struct ia32_ucontext *ucp; 502d85631c4SPeter Wemm int cs, eflags, error, ret; 503d85631c4SPeter Wemm 504d85631c4SPeter Wemm error = copyin(uap->sigcntxp, &uc, sizeof(uc)); 505d85631c4SPeter Wemm if (error != 0) 506d85631c4SPeter Wemm return (error); 507d85631c4SPeter Wemm ucp = &uc; 508d85631c4SPeter Wemm regs = td->td_frame; 509d85631c4SPeter Wemm eflags = ucp->uc_mcontext.mc_eflags; 510d85631c4SPeter Wemm /* 511d85631c4SPeter Wemm * Don't allow users to change privileged or reserved flags. 512d85631c4SPeter Wemm */ 513d85631c4SPeter Wemm /* 514d85631c4SPeter Wemm * XXX do allow users to change the privileged flag PSL_RF. 515d85631c4SPeter Wemm * The cpu sets PSL_RF in tf_eflags for faults. Debuggers 516d85631c4SPeter Wemm * should sometimes set it there too. tf_eflags is kept in 517d85631c4SPeter Wemm * the signal context during signal handling and there is no 518d85631c4SPeter Wemm * other place to remember it, so the PSL_RF bit may be 519d85631c4SPeter Wemm * corrupted by the signal handler without us knowing. 520d85631c4SPeter Wemm * Corruption of the PSL_RF bit at worst causes one more or 521d85631c4SPeter Wemm * one less debugger trap, so allowing it is fairly harmless. 522d85631c4SPeter Wemm */ 523d85631c4SPeter Wemm if (!EFL_SECURE(eflags & ~PSL_RF, regs->tf_rflags & ~PSL_RF)) { 52446159d1fSPeter Wemm printf("freebsd32_sigreturn: eflags = 0x%x\n", eflags); 525d85631c4SPeter Wemm return (EINVAL); 526d85631c4SPeter Wemm } 527d85631c4SPeter Wemm 528d85631c4SPeter Wemm /* 529d85631c4SPeter Wemm * Don't allow users to load a valid privileged %cs. Let the 530d85631c4SPeter Wemm * hardware check for invalid selectors, excess privilege in 531d85631c4SPeter Wemm * other selectors, invalid %eip's and invalid %esp's. 532d85631c4SPeter Wemm */ 533d85631c4SPeter Wemm cs = ucp->uc_mcontext.mc_cs; 534d85631c4SPeter Wemm if (!CS_SECURE(cs)) { 535d85631c4SPeter Wemm printf("sigreturn: cs = 0x%x\n", cs); 536d85631c4SPeter Wemm trapsignal(td, SIGBUS, T_PROTFLT); 537d85631c4SPeter Wemm return (EINVAL); 538d85631c4SPeter Wemm } 539d85631c4SPeter Wemm 540d85631c4SPeter Wemm ret = ia32_set_fpcontext(td, &ucp->uc_mcontext); 541d85631c4SPeter Wemm if (ret != 0) 542d85631c4SPeter Wemm return (ret); 543d85631c4SPeter Wemm 544d85631c4SPeter Wemm /* Segment selectors restored by sigtramp.S */ 545d85631c4SPeter Wemm regs->tf_rdi = ucp->uc_mcontext.mc_edi; 546d85631c4SPeter Wemm regs->tf_rsi = ucp->uc_mcontext.mc_esi; 547d85631c4SPeter Wemm regs->tf_rbp = ucp->uc_mcontext.mc_ebp; 548d85631c4SPeter Wemm regs->tf_rbx = ucp->uc_mcontext.mc_ebx; 549d85631c4SPeter Wemm regs->tf_rdx = ucp->uc_mcontext.mc_edx; 550d85631c4SPeter Wemm regs->tf_rcx = ucp->uc_mcontext.mc_ecx; 551d85631c4SPeter Wemm regs->tf_rax = ucp->uc_mcontext.mc_eax; 552d85631c4SPeter Wemm regs->tf_trapno = ucp->uc_mcontext.mc_trapno; 553d85631c4SPeter Wemm regs->tf_err = ucp->uc_mcontext.mc_err; 554d85631c4SPeter Wemm regs->tf_rip = ucp->uc_mcontext.mc_eip; 555d85631c4SPeter Wemm regs->tf_cs = cs; 556d85631c4SPeter Wemm regs->tf_rflags = ucp->uc_mcontext.mc_eflags; 557d85631c4SPeter Wemm regs->tf_rsp = ucp->uc_mcontext.mc_esp; 558d85631c4SPeter Wemm regs->tf_ss = ucp->uc_mcontext.mc_ss; 559d85631c4SPeter Wemm 560d85631c4SPeter Wemm PROC_LOCK(p); 561d85631c4SPeter Wemm td->td_sigmask = ucp->uc_sigmask; 562d85631c4SPeter Wemm SIG_CANTMASK(td->td_sigmask); 563d85631c4SPeter Wemm signotify(td); 564d85631c4SPeter Wemm PROC_UNLOCK(p); 565d85631c4SPeter Wemm return (EJUSTRETURN); 566d85631c4SPeter Wemm } 5674cd2d525SPeter Wemm 5684cd2d525SPeter Wemm /* 5694cd2d525SPeter Wemm * Clear registers on exec 5704cd2d525SPeter Wemm */ 5714cd2d525SPeter Wemm void 5724cd2d525SPeter Wemm ia32_setregs(td, entry, stack, ps_strings) 5734cd2d525SPeter Wemm struct thread *td; 5744cd2d525SPeter Wemm u_long entry; 5754cd2d525SPeter Wemm u_long stack; 5764cd2d525SPeter Wemm u_long ps_strings; 5774cd2d525SPeter Wemm { 5784cd2d525SPeter Wemm struct trapframe *regs = td->td_frame; 5794cd2d525SPeter Wemm struct pcb *pcb = td->td_pcb; 5804cd2d525SPeter Wemm 5814cd2d525SPeter Wemm wrmsr(MSR_FSBASE, 0); 5824cd2d525SPeter Wemm wrmsr(MSR_KGSBASE, 0); /* User value while we're in the kernel */ 5834cd2d525SPeter Wemm pcb->pcb_fsbase = 0; 5844cd2d525SPeter Wemm pcb->pcb_gsbase = 0; 5854cd2d525SPeter Wemm load_ds(_udatasel); 5864cd2d525SPeter Wemm load_es(_udatasel); 5874cd2d525SPeter Wemm load_fs(_udatasel); 5884cd2d525SPeter Wemm load_gs(_udatasel); 5894cd2d525SPeter Wemm pcb->pcb_ds = _udatasel; 5904cd2d525SPeter Wemm pcb->pcb_es = _udatasel; 5914cd2d525SPeter Wemm pcb->pcb_fs = _udatasel; 5924cd2d525SPeter Wemm pcb->pcb_gs = _udatasel; 5934cd2d525SPeter Wemm 5944cd2d525SPeter Wemm bzero((char *)regs, sizeof(struct trapframe)); 5954cd2d525SPeter Wemm regs->tf_rip = entry; 5964cd2d525SPeter Wemm regs->tf_rsp = stack; 5974cd2d525SPeter Wemm regs->tf_rflags = PSL_USER | (regs->tf_rflags & PSL_T); 5984cd2d525SPeter Wemm regs->tf_ss = _udatasel; 5994cd2d525SPeter Wemm regs->tf_cs = _ucode32sel; 6004cd2d525SPeter Wemm regs->tf_rbx = ps_strings; 6014cd2d525SPeter Wemm load_cr0(rcr0() | CR0_MP | CR0_TS); 6024cd2d525SPeter Wemm fpstate_drop(td); 6034cd2d525SPeter Wemm 6044cd2d525SPeter Wemm /* Return via doreti so that we can change to a different %cs */ 6054cd2d525SPeter Wemm pcb->pcb_flags |= PCB_FULLCTX; 6064cd2d525SPeter Wemm td->td_retval[1] = 0; 6074cd2d525SPeter Wemm } 608