xref: /linux/kernel/signal.c (revision 550087a0ba91eb001c139f563a193b1e9ef5a8dd)
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  *  linux/kernel/signal.c
4  *
5  *  Copyright (C) 1991, 1992  Linus Torvalds
6  *
7  *  1997-11-02  Modified for POSIX.1b signals by Richard Henderson
8  *
9  *  2003-06-02  Jim Houston - Concurrent Computer Corp.
10  *		Changes to use preallocated sigqueue structures
11  *		to allow signals to be sent reliably.
12  */
13 
14 #include <linux/slab.h>
15 #include <linux/export.h>
16 #include <linux/init.h>
17 #include <linux/sched/mm.h>
18 #include <linux/sched/user.h>
19 #include <linux/sched/debug.h>
20 #include <linux/sched/task.h>
21 #include <linux/sched/task_stack.h>
22 #include <linux/sched/cputime.h>
23 #include <linux/file.h>
24 #include <linux/fs.h>
25 #include <linux/mm.h>
26 #include <linux/proc_fs.h>
27 #include <linux/tty.h>
28 #include <linux/binfmts.h>
29 #include <linux/coredump.h>
30 #include <linux/security.h>
31 #include <linux/syscalls.h>
32 #include <linux/ptrace.h>
33 #include <linux/signal.h>
34 #include <linux/signalfd.h>
35 #include <linux/ratelimit.h>
36 #include <linux/task_work.h>
37 #include <linux/capability.h>
38 #include <linux/freezer.h>
39 #include <linux/pid_namespace.h>
40 #include <linux/nsproxy.h>
41 #include <linux/user_namespace.h>
42 #include <linux/uprobes.h>
43 #include <linux/compat.h>
44 #include <linux/cn_proc.h>
45 #include <linux/compiler.h>
46 #include <linux/posix-timers.h>
47 #include <linux/cgroup.h>
48 #include <linux/audit.h>
49 #include <linux/sysctl.h>
50 
51 #define CREATE_TRACE_POINTS
52 #include <trace/events/signal.h>
53 
54 #include <asm/param.h>
55 #include <linux/uaccess.h>
56 #include <asm/unistd.h>
57 #include <asm/siginfo.h>
58 #include <asm/cacheflush.h>
59 #include <asm/syscall.h>	/* for syscall_get_* */
60 
61 /*
62  * SLAB caches for signal bits.
63  */
64 
65 static struct kmem_cache *sigqueue_cachep;
66 
67 int print_fatal_signals __read_mostly;
68 
69 static void __user *sig_handler(struct task_struct *t, int sig)
70 {
71 	return t->sighand->action[sig - 1].sa.sa_handler;
72 }
73 
74 static inline bool sig_handler_ignored(void __user *handler, int sig)
75 {
76 	/* Is it explicitly or implicitly ignored? */
77 	return handler == SIG_IGN ||
78 	       (handler == SIG_DFL && sig_kernel_ignore(sig));
79 }
80 
81 static bool sig_task_ignored(struct task_struct *t, int sig, bool force)
82 {
83 	void __user *handler;
84 
85 	handler = sig_handler(t, sig);
86 
87 	/* SIGKILL and SIGSTOP may not be sent to the global init */
88 	if (unlikely(is_global_init(t) && sig_kernel_only(sig)))
89 		return true;
90 
91 	if (unlikely(t->signal->flags & SIGNAL_UNKILLABLE) &&
92 	    handler == SIG_DFL && !(force && sig_kernel_only(sig)))
93 		return true;
94 
95 	/* Only allow kernel generated signals to this kthread */
96 	if (unlikely((t->flags & PF_KTHREAD) &&
97 		     (handler == SIG_KTHREAD_KERNEL) && !force))
98 		return true;
99 
100 	return sig_handler_ignored(handler, sig);
101 }
102 
103 static bool sig_ignored(struct task_struct *t, int sig, bool force)
104 {
105 	/*
106 	 * Blocked signals are never ignored, since the
107 	 * signal handler may change by the time it is
108 	 * unblocked.
109 	 */
110 	if (sigismember(&t->blocked, sig) || sigismember(&t->real_blocked, sig))
111 		return false;
112 
113 	/*
114 	 * Tracers may want to know about even ignored signal unless it
115 	 * is SIGKILL which can't be reported anyway but can be ignored
116 	 * by SIGNAL_UNKILLABLE task.
117 	 */
118 	if (t->ptrace && sig != SIGKILL)
119 		return false;
120 
121 	return sig_task_ignored(t, sig, force);
122 }
123 
124 /*
125  * Re-calculate pending state from the set of locally pending
126  * signals, globally pending signals, and blocked signals.
127  */
128 static inline bool has_pending_signals(sigset_t *signal, sigset_t *blocked)
129 {
130 	unsigned long ready;
131 	long i;
132 
133 	switch (_NSIG_WORDS) {
134 	default:
135 		for (i = _NSIG_WORDS, ready = 0; --i >= 0 ;)
136 			ready |= signal->sig[i] &~ blocked->sig[i];
137 		break;
138 
139 	case 4: ready  = signal->sig[3] &~ blocked->sig[3];
140 		ready |= signal->sig[2] &~ blocked->sig[2];
141 		ready |= signal->sig[1] &~ blocked->sig[1];
142 		ready |= signal->sig[0] &~ blocked->sig[0];
143 		break;
144 
145 	case 2: ready  = signal->sig[1] &~ blocked->sig[1];
146 		ready |= signal->sig[0] &~ blocked->sig[0];
147 		break;
148 
149 	case 1: ready  = signal->sig[0] &~ blocked->sig[0];
150 	}
151 	return ready !=	0;
152 }
153 
154 #define PENDING(p,b) has_pending_signals(&(p)->signal, (b))
155 
156 static bool recalc_sigpending_tsk(struct task_struct *t)
157 {
158 	if ((t->jobctl & (JOBCTL_PENDING_MASK | JOBCTL_TRAP_FREEZE)) ||
159 	    PENDING(&t->pending, &t->blocked) ||
160 	    PENDING(&t->signal->shared_pending, &t->blocked) ||
161 	    cgroup_task_frozen(t)) {
162 		set_tsk_thread_flag(t, TIF_SIGPENDING);
163 		return true;
164 	}
165 
166 	/*
167 	 * We must never clear the flag in another thread, or in current
168 	 * when it's possible the current syscall is returning -ERESTART*.
169 	 * So we don't clear it here, and only callers who know they should do.
170 	 */
171 	return false;
172 }
173 
174 /*
175  * After recalculating TIF_SIGPENDING, we need to make sure the task wakes up.
176  * This is superfluous when called on current, the wakeup is a harmless no-op.
177  */
178 void recalc_sigpending_and_wake(struct task_struct *t)
179 {
180 	if (recalc_sigpending_tsk(t))
181 		signal_wake_up(t, 0);
182 }
183 
184 void recalc_sigpending(void)
185 {
186 	if (!recalc_sigpending_tsk(current) && !freezing(current))
187 		clear_thread_flag(TIF_SIGPENDING);
188 
189 }
190 EXPORT_SYMBOL(recalc_sigpending);
191 
192 void calculate_sigpending(void)
193 {
194 	/* Have any signals or users of TIF_SIGPENDING been delayed
195 	 * until after fork?
196 	 */
197 	spin_lock_irq(&current->sighand->siglock);
198 	set_tsk_thread_flag(current, TIF_SIGPENDING);
199 	recalc_sigpending();
200 	spin_unlock_irq(&current->sighand->siglock);
201 }
202 
203 /* Given the mask, find the first available signal that should be serviced. */
204 
205 #define SYNCHRONOUS_MASK \
206 	(sigmask(SIGSEGV) | sigmask(SIGBUS) | sigmask(SIGILL) | \
207 	 sigmask(SIGTRAP) | sigmask(SIGFPE) | sigmask(SIGSYS))
208 
209 int next_signal(struct sigpending *pending, sigset_t *mask)
210 {
211 	unsigned long i, *s, *m, x;
212 	int sig = 0;
213 
214 	s = pending->signal.sig;
215 	m = mask->sig;
216 
217 	/*
218 	 * Handle the first word specially: it contains the
219 	 * synchronous signals that need to be dequeued first.
220 	 */
221 	x = *s &~ *m;
222 	if (x) {
223 		if (x & SYNCHRONOUS_MASK)
224 			x &= SYNCHRONOUS_MASK;
225 		sig = ffz(~x) + 1;
226 		return sig;
227 	}
228 
229 	switch (_NSIG_WORDS) {
230 	default:
231 		for (i = 1; i < _NSIG_WORDS; ++i) {
232 			x = *++s &~ *++m;
233 			if (!x)
234 				continue;
235 			sig = ffz(~x) + i*_NSIG_BPW + 1;
236 			break;
237 		}
238 		break;
239 
240 	case 2:
241 		x = s[1] &~ m[1];
242 		if (!x)
243 			break;
244 		sig = ffz(~x) + _NSIG_BPW + 1;
245 		break;
246 
247 	case 1:
248 		/* Nothing to do */
249 		break;
250 	}
251 
252 	return sig;
253 }
254 
255 static inline void print_dropped_signal(int sig)
256 {
257 	static DEFINE_RATELIMIT_STATE(ratelimit_state, 5 * HZ, 10);
258 
259 	if (!print_fatal_signals)
260 		return;
261 
262 	if (!__ratelimit(&ratelimit_state))
263 		return;
264 
265 	pr_info("%s/%d: reached RLIMIT_SIGPENDING, dropped signal %d\n",
266 				current->comm, current->pid, sig);
267 }
268 
269 /**
270  * task_set_jobctl_pending - set jobctl pending bits
271  * @task: target task
272  * @mask: pending bits to set
273  *
274  * Clear @mask from @task->jobctl.  @mask must be subset of
275  * %JOBCTL_PENDING_MASK | %JOBCTL_STOP_CONSUME | %JOBCTL_STOP_SIGMASK |
276  * %JOBCTL_TRAPPING.  If stop signo is being set, the existing signo is
277  * cleared.  If @task is already being killed or exiting, this function
278  * becomes noop.
279  *
280  * CONTEXT:
281  * Must be called with @task->sighand->siglock held.
282  *
283  * RETURNS:
284  * %true if @mask is set, %false if made noop because @task was dying.
285  */
286 bool task_set_jobctl_pending(struct task_struct *task, unsigned long mask)
287 {
288 	BUG_ON(mask & ~(JOBCTL_PENDING_MASK | JOBCTL_STOP_CONSUME |
289 			JOBCTL_STOP_SIGMASK | JOBCTL_TRAPPING));
290 	BUG_ON((mask & JOBCTL_TRAPPING) && !(mask & JOBCTL_PENDING_MASK));
291 
292 	if (unlikely(fatal_signal_pending(task) || (task->flags & PF_EXITING)))
293 		return false;
294 
295 	if (mask & JOBCTL_STOP_SIGMASK)
296 		task->jobctl &= ~JOBCTL_STOP_SIGMASK;
297 
298 	task->jobctl |= mask;
299 	return true;
300 }
301 
302 /**
303  * task_clear_jobctl_trapping - clear jobctl trapping bit
304  * @task: target task
305  *
306  * If JOBCTL_TRAPPING is set, a ptracer is waiting for us to enter TRACED.
307  * Clear it and wake up the ptracer.  Note that we don't need any further
308  * locking.  @task->siglock guarantees that @task->parent points to the
309  * ptracer.
310  *
311  * CONTEXT:
312  * Must be called with @task->sighand->siglock held.
313  */
314 void task_clear_jobctl_trapping(struct task_struct *task)
315 {
316 	if (unlikely(task->jobctl & JOBCTL_TRAPPING)) {
317 		task->jobctl &= ~JOBCTL_TRAPPING;
318 		smp_mb();	/* advised by wake_up_bit() */
319 		wake_up_bit(&task->jobctl, JOBCTL_TRAPPING_BIT);
320 	}
321 }
322 
323 /**
324  * task_clear_jobctl_pending - clear jobctl pending bits
325  * @task: target task
326  * @mask: pending bits to clear
327  *
328  * Clear @mask from @task->jobctl.  @mask must be subset of
329  * %JOBCTL_PENDING_MASK.  If %JOBCTL_STOP_PENDING is being cleared, other
330  * STOP bits are cleared together.
331  *
332  * If clearing of @mask leaves no stop or trap pending, this function calls
333  * task_clear_jobctl_trapping().
334  *
335  * CONTEXT:
336  * Must be called with @task->sighand->siglock held.
337  */
338 void task_clear_jobctl_pending(struct task_struct *task, unsigned long mask)
339 {
340 	BUG_ON(mask & ~JOBCTL_PENDING_MASK);
341 
342 	if (mask & JOBCTL_STOP_PENDING)
343 		mask |= JOBCTL_STOP_CONSUME | JOBCTL_STOP_DEQUEUED;
344 
345 	task->jobctl &= ~mask;
346 
347 	if (!(task->jobctl & JOBCTL_PENDING_MASK))
348 		task_clear_jobctl_trapping(task);
349 }
350 
351 /**
352  * task_participate_group_stop - participate in a group stop
353  * @task: task participating in a group stop
354  *
355  * @task has %JOBCTL_STOP_PENDING set and is participating in a group stop.
356  * Group stop states are cleared and the group stop count is consumed if
357  * %JOBCTL_STOP_CONSUME was set.  If the consumption completes the group
358  * stop, the appropriate `SIGNAL_*` flags are set.
359  *
360  * CONTEXT:
361  * Must be called with @task->sighand->siglock held.
362  *
363  * RETURNS:
364  * %true if group stop completion should be notified to the parent, %false
365  * otherwise.
366  */
367 static bool task_participate_group_stop(struct task_struct *task)
368 {
369 	struct signal_struct *sig = task->signal;
370 	bool consume = task->jobctl & JOBCTL_STOP_CONSUME;
371 
372 	WARN_ON_ONCE(!(task->jobctl & JOBCTL_STOP_PENDING));
373 
374 	task_clear_jobctl_pending(task, JOBCTL_STOP_PENDING);
375 
376 	if (!consume)
377 		return false;
378 
379 	if (!WARN_ON_ONCE(sig->group_stop_count == 0))
380 		sig->group_stop_count--;
381 
382 	/*
383 	 * Tell the caller to notify completion iff we are entering into a
384 	 * fresh group stop.  Read comment in do_signal_stop() for details.
385 	 */
386 	if (!sig->group_stop_count && !(sig->flags & SIGNAL_STOP_STOPPED)) {
387 		signal_set_stop_flags(sig, SIGNAL_STOP_STOPPED);
388 		return true;
389 	}
390 	return false;
391 }
392 
393 void task_join_group_stop(struct task_struct *task)
394 {
395 	unsigned long mask = current->jobctl & JOBCTL_STOP_SIGMASK;
396 	struct signal_struct *sig = current->signal;
397 
398 	if (sig->group_stop_count) {
399 		sig->group_stop_count++;
400 		mask |= JOBCTL_STOP_CONSUME;
401 	} else if (!(sig->flags & SIGNAL_STOP_STOPPED))
402 		return;
403 
404 	/* Have the new thread join an on-going signal group stop */
405 	task_set_jobctl_pending(task, mask | JOBCTL_STOP_PENDING);
406 }
407 
408 /*
409  * allocate a new signal queue record
410  * - this may be called without locks if and only if t == current, otherwise an
411  *   appropriate lock must be held to stop the target task from exiting
412  */
413 static struct sigqueue *
414 __sigqueue_alloc(int sig, struct task_struct *t, gfp_t gfp_flags,
415 		 int override_rlimit, const unsigned int sigqueue_flags)
416 {
417 	struct sigqueue *q = NULL;
418 	struct ucounts *ucounts = NULL;
419 	long sigpending;
420 
421 	/*
422 	 * Protect access to @t credentials. This can go away when all
423 	 * callers hold rcu read lock.
424 	 *
425 	 * NOTE! A pending signal will hold on to the user refcount,
426 	 * and we get/put the refcount only when the sigpending count
427 	 * changes from/to zero.
428 	 */
429 	rcu_read_lock();
430 	ucounts = task_ucounts(t);
431 	sigpending = inc_rlimit_get_ucounts(ucounts, UCOUNT_RLIMIT_SIGPENDING);
432 	rcu_read_unlock();
433 	if (!sigpending)
434 		return NULL;
435 
436 	if (override_rlimit || likely(sigpending <= task_rlimit(t, RLIMIT_SIGPENDING))) {
437 		q = kmem_cache_alloc(sigqueue_cachep, gfp_flags);
438 	} else {
439 		print_dropped_signal(sig);
440 	}
441 
442 	if (unlikely(q == NULL)) {
443 		dec_rlimit_put_ucounts(ucounts, UCOUNT_RLIMIT_SIGPENDING);
444 	} else {
445 		INIT_LIST_HEAD(&q->list);
446 		q->flags = sigqueue_flags;
447 		q->ucounts = ucounts;
448 	}
449 	return q;
450 }
451 
452 static void __sigqueue_free(struct sigqueue *q)
453 {
454 	if (q->flags & SIGQUEUE_PREALLOC)
455 		return;
456 	if (q->ucounts) {
457 		dec_rlimit_put_ucounts(q->ucounts, UCOUNT_RLIMIT_SIGPENDING);
458 		q->ucounts = NULL;
459 	}
460 	kmem_cache_free(sigqueue_cachep, q);
461 }
462 
463 void flush_sigqueue(struct sigpending *queue)
464 {
465 	struct sigqueue *q;
466 
467 	sigemptyset(&queue->signal);
468 	while (!list_empty(&queue->list)) {
469 		q = list_entry(queue->list.next, struct sigqueue , list);
470 		list_del_init(&q->list);
471 		__sigqueue_free(q);
472 	}
473 }
474 
475 /*
476  * Flush all pending signals for this kthread.
477  */
478 void flush_signals(struct task_struct *t)
479 {
480 	unsigned long flags;
481 
482 	spin_lock_irqsave(&t->sighand->siglock, flags);
483 	clear_tsk_thread_flag(t, TIF_SIGPENDING);
484 	flush_sigqueue(&t->pending);
485 	flush_sigqueue(&t->signal->shared_pending);
486 	spin_unlock_irqrestore(&t->sighand->siglock, flags);
487 }
488 EXPORT_SYMBOL(flush_signals);
489 
490 #ifdef CONFIG_POSIX_TIMERS
491 static void __flush_itimer_signals(struct sigpending *pending)
492 {
493 	sigset_t signal, retain;
494 	struct sigqueue *q, *n;
495 
496 	signal = pending->signal;
497 	sigemptyset(&retain);
498 
499 	list_for_each_entry_safe(q, n, &pending->list, list) {
500 		int sig = q->info.si_signo;
501 
502 		if (likely(q->info.si_code != SI_TIMER)) {
503 			sigaddset(&retain, sig);
504 		} else {
505 			sigdelset(&signal, sig);
506 			list_del_init(&q->list);
507 			__sigqueue_free(q);
508 		}
509 	}
510 
511 	sigorsets(&pending->signal, &signal, &retain);
512 }
513 
514 void flush_itimer_signals(void)
515 {
516 	struct task_struct *tsk = current;
517 	unsigned long flags;
518 
519 	spin_lock_irqsave(&tsk->sighand->siglock, flags);
520 	__flush_itimer_signals(&tsk->pending);
521 	__flush_itimer_signals(&tsk->signal->shared_pending);
522 	spin_unlock_irqrestore(&tsk->sighand->siglock, flags);
523 }
524 #endif
525 
526 void ignore_signals(struct task_struct *t)
527 {
528 	int i;
529 
530 	for (i = 0; i < _NSIG; ++i)
531 		t->sighand->action[i].sa.sa_handler = SIG_IGN;
532 
533 	flush_signals(t);
534 }
535 
536 /*
537  * Flush all handlers for a task.
538  */
539 
540 void
541 flush_signal_handlers(struct task_struct *t, int force_default)
542 {
543 	int i;
544 	struct k_sigaction *ka = &t->sighand->action[0];
545 	for (i = _NSIG ; i != 0 ; i--) {
546 		if (force_default || ka->sa.sa_handler != SIG_IGN)
547 			ka->sa.sa_handler = SIG_DFL;
548 		ka->sa.sa_flags = 0;
549 #ifdef __ARCH_HAS_SA_RESTORER
550 		ka->sa.sa_restorer = NULL;
551 #endif
552 		sigemptyset(&ka->sa.sa_mask);
553 		ka++;
554 	}
555 }
556 
557 bool unhandled_signal(struct task_struct *tsk, int sig)
558 {
559 	void __user *handler = tsk->sighand->action[sig-1].sa.sa_handler;
560 	if (is_global_init(tsk))
561 		return true;
562 
563 	if (handler != SIG_IGN && handler != SIG_DFL)
564 		return false;
565 
566 	/* If dying, we handle all new signals by ignoring them */
567 	if (fatal_signal_pending(tsk))
568 		return false;
569 
570 	/* if ptraced, let the tracer determine */
571 	return !tsk->ptrace;
572 }
573 
574 static void collect_signal(int sig, struct sigpending *list, kernel_siginfo_t *info,
575 			   bool *resched_timer)
576 {
577 	struct sigqueue *q, *first = NULL;
578 
579 	/*
580 	 * Collect the siginfo appropriate to this signal.  Check if
581 	 * there is another siginfo for the same signal.
582 	*/
583 	list_for_each_entry(q, &list->list, list) {
584 		if (q->info.si_signo == sig) {
585 			if (first)
586 				goto still_pending;
587 			first = q;
588 		}
589 	}
590 
591 	sigdelset(&list->signal, sig);
592 
593 	if (first) {
594 still_pending:
595 		list_del_init(&first->list);
596 		copy_siginfo(info, &first->info);
597 
598 		*resched_timer =
599 			(first->flags & SIGQUEUE_PREALLOC) &&
600 			(info->si_code == SI_TIMER) &&
601 			(info->si_sys_private);
602 
603 		__sigqueue_free(first);
604 	} else {
605 		/*
606 		 * Ok, it wasn't in the queue.  This must be
607 		 * a fast-pathed signal or we must have been
608 		 * out of queue space.  So zero out the info.
609 		 */
610 		clear_siginfo(info);
611 		info->si_signo = sig;
612 		info->si_errno = 0;
613 		info->si_code = SI_USER;
614 		info->si_pid = 0;
615 		info->si_uid = 0;
616 	}
617 }
618 
619 static int __dequeue_signal(struct sigpending *pending, sigset_t *mask,
620 			kernel_siginfo_t *info, bool *resched_timer)
621 {
622 	int sig = next_signal(pending, mask);
623 
624 	if (sig)
625 		collect_signal(sig, pending, info, resched_timer);
626 	return sig;
627 }
628 
629 /*
630  * Dequeue a signal and return the element to the caller, which is
631  * expected to free it.
632  *
633  * All callers have to hold the siglock.
634  */
635 int dequeue_signal(struct task_struct *tsk, sigset_t *mask,
636 		   kernel_siginfo_t *info, enum pid_type *type)
637 {
638 	bool resched_timer = false;
639 	int signr;
640 
641 	/* We only dequeue private signals from ourselves, we don't let
642 	 * signalfd steal them
643 	 */
644 	*type = PIDTYPE_PID;
645 	signr = __dequeue_signal(&tsk->pending, mask, info, &resched_timer);
646 	if (!signr) {
647 		*type = PIDTYPE_TGID;
648 		signr = __dequeue_signal(&tsk->signal->shared_pending,
649 					 mask, info, &resched_timer);
650 #ifdef CONFIG_POSIX_TIMERS
651 		/*
652 		 * itimer signal ?
653 		 *
654 		 * itimers are process shared and we restart periodic
655 		 * itimers in the signal delivery path to prevent DoS
656 		 * attacks in the high resolution timer case. This is
657 		 * compliant with the old way of self-restarting
658 		 * itimers, as the SIGALRM is a legacy signal and only
659 		 * queued once. Changing the restart behaviour to
660 		 * restart the timer in the signal dequeue path is
661 		 * reducing the timer noise on heavy loaded !highres
662 		 * systems too.
663 		 */
664 		if (unlikely(signr == SIGALRM)) {
665 			struct hrtimer *tmr = &tsk->signal->real_timer;
666 
667 			if (!hrtimer_is_queued(tmr) &&
668 			    tsk->signal->it_real_incr != 0) {
669 				hrtimer_forward(tmr, tmr->base->get_time(),
670 						tsk->signal->it_real_incr);
671 				hrtimer_restart(tmr);
672 			}
673 		}
674 #endif
675 	}
676 
677 	recalc_sigpending();
678 	if (!signr)
679 		return 0;
680 
681 	if (unlikely(sig_kernel_stop(signr))) {
682 		/*
683 		 * Set a marker that we have dequeued a stop signal.  Our
684 		 * caller might release the siglock and then the pending
685 		 * stop signal it is about to process is no longer in the
686 		 * pending bitmasks, but must still be cleared by a SIGCONT
687 		 * (and overruled by a SIGKILL).  So those cases clear this
688 		 * shared flag after we've set it.  Note that this flag may
689 		 * remain set after the signal we return is ignored or
690 		 * handled.  That doesn't matter because its only purpose
691 		 * is to alert stop-signal processing code when another
692 		 * processor has come along and cleared the flag.
693 		 */
694 		current->jobctl |= JOBCTL_STOP_DEQUEUED;
695 	}
696 #ifdef CONFIG_POSIX_TIMERS
697 	if (resched_timer) {
698 		/*
699 		 * Release the siglock to ensure proper locking order
700 		 * of timer locks outside of siglocks.  Note, we leave
701 		 * irqs disabled here, since the posix-timers code is
702 		 * about to disable them again anyway.
703 		 */
704 		spin_unlock(&tsk->sighand->siglock);
705 		posixtimer_rearm(info);
706 		spin_lock(&tsk->sighand->siglock);
707 
708 		/* Don't expose the si_sys_private value to userspace */
709 		info->si_sys_private = 0;
710 	}
711 #endif
712 	return signr;
713 }
714 EXPORT_SYMBOL_GPL(dequeue_signal);
715 
716 static int dequeue_synchronous_signal(kernel_siginfo_t *info)
717 {
718 	struct task_struct *tsk = current;
719 	struct sigpending *pending = &tsk->pending;
720 	struct sigqueue *q, *sync = NULL;
721 
722 	/*
723 	 * Might a synchronous signal be in the queue?
724 	 */
725 	if (!((pending->signal.sig[0] & ~tsk->blocked.sig[0]) & SYNCHRONOUS_MASK))
726 		return 0;
727 
728 	/*
729 	 * Return the first synchronous signal in the queue.
730 	 */
731 	list_for_each_entry(q, &pending->list, list) {
732 		/* Synchronous signals have a positive si_code */
733 		if ((q->info.si_code > SI_USER) &&
734 		    (sigmask(q->info.si_signo) & SYNCHRONOUS_MASK)) {
735 			sync = q;
736 			goto next;
737 		}
738 	}
739 	return 0;
740 next:
741 	/*
742 	 * Check if there is another siginfo for the same signal.
743 	 */
744 	list_for_each_entry_continue(q, &pending->list, list) {
745 		if (q->info.si_signo == sync->info.si_signo)
746 			goto still_pending;
747 	}
748 
749 	sigdelset(&pending->signal, sync->info.si_signo);
750 	recalc_sigpending();
751 still_pending:
752 	list_del_init(&sync->list);
753 	copy_siginfo(info, &sync->info);
754 	__sigqueue_free(sync);
755 	return info->si_signo;
756 }
757 
758 /*
759  * Tell a process that it has a new active signal..
760  *
761  * NOTE! we rely on the previous spin_lock to
762  * lock interrupts for us! We can only be called with
763  * "siglock" held, and the local interrupt must
764  * have been disabled when that got acquired!
765  *
766  * No need to set need_resched since signal event passing
767  * goes through ->blocked
768  */
769 void signal_wake_up_state(struct task_struct *t, unsigned int state)
770 {
771 	lockdep_assert_held(&t->sighand->siglock);
772 
773 	set_tsk_thread_flag(t, TIF_SIGPENDING);
774 
775 	/*
776 	 * TASK_WAKEKILL also means wake it up in the stopped/traced/killable
777 	 * case. We don't check t->state here because there is a race with it
778 	 * executing another processor and just now entering stopped state.
779 	 * By using wake_up_state, we ensure the process will wake up and
780 	 * handle its death signal.
781 	 */
782 	if (!wake_up_state(t, state | TASK_INTERRUPTIBLE))
783 		kick_process(t);
784 }
785 
786 /*
787  * Remove signals in mask from the pending set and queue.
788  * Returns 1 if any signals were found.
789  *
790  * All callers must be holding the siglock.
791  */
792 static void flush_sigqueue_mask(sigset_t *mask, struct sigpending *s)
793 {
794 	struct sigqueue *q, *n;
795 	sigset_t m;
796 
797 	sigandsets(&m, mask, &s->signal);
798 	if (sigisemptyset(&m))
799 		return;
800 
801 	sigandnsets(&s->signal, &s->signal, mask);
802 	list_for_each_entry_safe(q, n, &s->list, list) {
803 		if (sigismember(mask, q->info.si_signo)) {
804 			list_del_init(&q->list);
805 			__sigqueue_free(q);
806 		}
807 	}
808 }
809 
810 static inline int is_si_special(const struct kernel_siginfo *info)
811 {
812 	return info <= SEND_SIG_PRIV;
813 }
814 
815 static inline bool si_fromuser(const struct kernel_siginfo *info)
816 {
817 	return info == SEND_SIG_NOINFO ||
818 		(!is_si_special(info) && SI_FROMUSER(info));
819 }
820 
821 /*
822  * called with RCU read lock from check_kill_permission()
823  */
824 static bool kill_ok_by_cred(struct task_struct *t)
825 {
826 	const struct cred *cred = current_cred();
827 	const struct cred *tcred = __task_cred(t);
828 
829 	return uid_eq(cred->euid, tcred->suid) ||
830 	       uid_eq(cred->euid, tcred->uid) ||
831 	       uid_eq(cred->uid, tcred->suid) ||
832 	       uid_eq(cred->uid, tcred->uid) ||
833 	       ns_capable(tcred->user_ns, CAP_KILL);
834 }
835 
836 /*
837  * Bad permissions for sending the signal
838  * - the caller must hold the RCU read lock
839  */
840 static int check_kill_permission(int sig, struct kernel_siginfo *info,
841 				 struct task_struct *t)
842 {
843 	struct pid *sid;
844 	int error;
845 
846 	if (!valid_signal(sig))
847 		return -EINVAL;
848 
849 	if (!si_fromuser(info))
850 		return 0;
851 
852 	error = audit_signal_info(sig, t); /* Let audit system see the signal */
853 	if (error)
854 		return error;
855 
856 	if (!same_thread_group(current, t) &&
857 	    !kill_ok_by_cred(t)) {
858 		switch (sig) {
859 		case SIGCONT:
860 			sid = task_session(t);
861 			/*
862 			 * We don't return the error if sid == NULL. The
863 			 * task was unhashed, the caller must notice this.
864 			 */
865 			if (!sid || sid == task_session(current))
866 				break;
867 			fallthrough;
868 		default:
869 			return -EPERM;
870 		}
871 	}
872 
873 	return security_task_kill(t, info, sig, NULL);
874 }
875 
876 /**
877  * ptrace_trap_notify - schedule trap to notify ptracer
878  * @t: tracee wanting to notify tracer
879  *
880  * This function schedules sticky ptrace trap which is cleared on the next
881  * TRAP_STOP to notify ptracer of an event.  @t must have been seized by
882  * ptracer.
883  *
884  * If @t is running, STOP trap will be taken.  If trapped for STOP and
885  * ptracer is listening for events, tracee is woken up so that it can
886  * re-trap for the new event.  If trapped otherwise, STOP trap will be
887  * eventually taken without returning to userland after the existing traps
888  * are finished by PTRACE_CONT.
889  *
890  * CONTEXT:
891  * Must be called with @task->sighand->siglock held.
892  */
893 static void ptrace_trap_notify(struct task_struct *t)
894 {
895 	WARN_ON_ONCE(!(t->ptrace & PT_SEIZED));
896 	lockdep_assert_held(&t->sighand->siglock);
897 
898 	task_set_jobctl_pending(t, JOBCTL_TRAP_NOTIFY);
899 	ptrace_signal_wake_up(t, t->jobctl & JOBCTL_LISTENING);
900 }
901 
902 /*
903  * Handle magic process-wide effects of stop/continue signals. Unlike
904  * the signal actions, these happen immediately at signal-generation
905  * time regardless of blocking, ignoring, or handling.  This does the
906  * actual continuing for SIGCONT, but not the actual stopping for stop
907  * signals. The process stop is done as a signal action for SIG_DFL.
908  *
909  * Returns true if the signal should be actually delivered, otherwise
910  * it should be dropped.
911  */
912 static bool prepare_signal(int sig, struct task_struct *p, bool force)
913 {
914 	struct signal_struct *signal = p->signal;
915 	struct task_struct *t;
916 	sigset_t flush;
917 
918 	if (signal->flags & SIGNAL_GROUP_EXIT) {
919 		if (signal->core_state)
920 			return sig == SIGKILL;
921 		/*
922 		 * The process is in the middle of dying, drop the signal.
923 		 */
924 		return false;
925 	} else if (sig_kernel_stop(sig)) {
926 		/*
927 		 * This is a stop signal.  Remove SIGCONT from all queues.
928 		 */
929 		siginitset(&flush, sigmask(SIGCONT));
930 		flush_sigqueue_mask(&flush, &signal->shared_pending);
931 		for_each_thread(p, t)
932 			flush_sigqueue_mask(&flush, &t->pending);
933 	} else if (sig == SIGCONT) {
934 		unsigned int why;
935 		/*
936 		 * Remove all stop signals from all queues, wake all threads.
937 		 */
938 		siginitset(&flush, SIG_KERNEL_STOP_MASK);
939 		flush_sigqueue_mask(&flush, &signal->shared_pending);
940 		for_each_thread(p, t) {
941 			flush_sigqueue_mask(&flush, &t->pending);
942 			task_clear_jobctl_pending(t, JOBCTL_STOP_PENDING);
943 			if (likely(!(t->ptrace & PT_SEIZED))) {
944 				t->jobctl &= ~JOBCTL_STOPPED;
945 				wake_up_state(t, __TASK_STOPPED);
946 			} else
947 				ptrace_trap_notify(t);
948 		}
949 
950 		/*
951 		 * Notify the parent with CLD_CONTINUED if we were stopped.
952 		 *
953 		 * If we were in the middle of a group stop, we pretend it
954 		 * was already finished, and then continued. Since SIGCHLD
955 		 * doesn't queue we report only CLD_STOPPED, as if the next
956 		 * CLD_CONTINUED was dropped.
957 		 */
958 		why = 0;
959 		if (signal->flags & SIGNAL_STOP_STOPPED)
960 			why |= SIGNAL_CLD_CONTINUED;
961 		else if (signal->group_stop_count)
962 			why |= SIGNAL_CLD_STOPPED;
963 
964 		if (why) {
965 			/*
966 			 * The first thread which returns from do_signal_stop()
967 			 * will take ->siglock, notice SIGNAL_CLD_MASK, and
968 			 * notify its parent. See get_signal().
969 			 */
970 			signal_set_stop_flags(signal, why | SIGNAL_STOP_CONTINUED);
971 			signal->group_stop_count = 0;
972 			signal->group_exit_code = 0;
973 		}
974 	}
975 
976 	return !sig_ignored(p, sig, force);
977 }
978 
979 /*
980  * Test if P wants to take SIG.  After we've checked all threads with this,
981  * it's equivalent to finding no threads not blocking SIG.  Any threads not
982  * blocking SIG were ruled out because they are not running and already
983  * have pending signals.  Such threads will dequeue from the shared queue
984  * as soon as they're available, so putting the signal on the shared queue
985  * will be equivalent to sending it to one such thread.
986  */
987 static inline bool wants_signal(int sig, struct task_struct *p)
988 {
989 	if (sigismember(&p->blocked, sig))
990 		return false;
991 
992 	if (p->flags & PF_EXITING)
993 		return false;
994 
995 	if (sig == SIGKILL)
996 		return true;
997 
998 	if (task_is_stopped_or_traced(p))
999 		return false;
1000 
1001 	return task_curr(p) || !task_sigpending(p);
1002 }
1003 
1004 static void complete_signal(int sig, struct task_struct *p, enum pid_type type)
1005 {
1006 	struct signal_struct *signal = p->signal;
1007 	struct task_struct *t;
1008 
1009 	/*
1010 	 * Now find a thread we can wake up to take the signal off the queue.
1011 	 *
1012 	 * Try the suggested task first (may or may not be the main thread).
1013 	 */
1014 	if (wants_signal(sig, p))
1015 		t = p;
1016 	else if ((type == PIDTYPE_PID) || thread_group_empty(p))
1017 		/*
1018 		 * There is just one thread and it does not need to be woken.
1019 		 * It will dequeue unblocked signals before it runs again.
1020 		 */
1021 		return;
1022 	else {
1023 		/*
1024 		 * Otherwise try to find a suitable thread.
1025 		 */
1026 		t = signal->curr_target;
1027 		while (!wants_signal(sig, t)) {
1028 			t = next_thread(t);
1029 			if (t == signal->curr_target)
1030 				/*
1031 				 * No thread needs to be woken.
1032 				 * Any eligible threads will see
1033 				 * the signal in the queue soon.
1034 				 */
1035 				return;
1036 		}
1037 		signal->curr_target = t;
1038 	}
1039 
1040 	/*
1041 	 * Found a killable thread.  If the signal will be fatal,
1042 	 * then start taking the whole group down immediately.
1043 	 */
1044 	if (sig_fatal(p, sig) &&
1045 	    (signal->core_state || !(signal->flags & SIGNAL_GROUP_EXIT)) &&
1046 	    !sigismember(&t->real_blocked, sig) &&
1047 	    (sig == SIGKILL || !p->ptrace)) {
1048 		/*
1049 		 * This signal will be fatal to the whole group.
1050 		 */
1051 		if (!sig_kernel_coredump(sig)) {
1052 			/*
1053 			 * Start a group exit and wake everybody up.
1054 			 * This way we don't have other threads
1055 			 * running and doing things after a slower
1056 			 * thread has the fatal signal pending.
1057 			 */
1058 			signal->flags = SIGNAL_GROUP_EXIT;
1059 			signal->group_exit_code = sig;
1060 			signal->group_stop_count = 0;
1061 			t = p;
1062 			do {
1063 				task_clear_jobctl_pending(t, JOBCTL_PENDING_MASK);
1064 				sigaddset(&t->pending.signal, SIGKILL);
1065 				signal_wake_up(t, 1);
1066 			} while_each_thread(p, t);
1067 			return;
1068 		}
1069 	}
1070 
1071 	/*
1072 	 * The signal is already in the shared-pending queue.
1073 	 * Tell the chosen thread to wake up and dequeue it.
1074 	 */
1075 	signal_wake_up(t, sig == SIGKILL);
1076 	return;
1077 }
1078 
1079 static inline bool legacy_queue(struct sigpending *signals, int sig)
1080 {
1081 	return (sig < SIGRTMIN) && sigismember(&signals->signal, sig);
1082 }
1083 
1084 static int __send_signal_locked(int sig, struct kernel_siginfo *info,
1085 				struct task_struct *t, enum pid_type type, bool force)
1086 {
1087 	struct sigpending *pending;
1088 	struct sigqueue *q;
1089 	int override_rlimit;
1090 	int ret = 0, result;
1091 
1092 	lockdep_assert_held(&t->sighand->siglock);
1093 
1094 	result = TRACE_SIGNAL_IGNORED;
1095 	if (!prepare_signal(sig, t, force))
1096 		goto ret;
1097 
1098 	pending = (type != PIDTYPE_PID) ? &t->signal->shared_pending : &t->pending;
1099 	/*
1100 	 * Short-circuit ignored signals and support queuing
1101 	 * exactly one non-rt signal, so that we can get more
1102 	 * detailed information about the cause of the signal.
1103 	 */
1104 	result = TRACE_SIGNAL_ALREADY_PENDING;
1105 	if (legacy_queue(pending, sig))
1106 		goto ret;
1107 
1108 	result = TRACE_SIGNAL_DELIVERED;
1109 	/*
1110 	 * Skip useless siginfo allocation for SIGKILL and kernel threads.
1111 	 */
1112 	if ((sig == SIGKILL) || (t->flags & PF_KTHREAD))
1113 		goto out_set;
1114 
1115 	/*
1116 	 * Real-time signals must be queued if sent by sigqueue, or
1117 	 * some other real-time mechanism.  It is implementation
1118 	 * defined whether kill() does so.  We attempt to do so, on
1119 	 * the principle of least surprise, but since kill is not
1120 	 * allowed to fail with EAGAIN when low on memory we just
1121 	 * make sure at least one signal gets delivered and don't
1122 	 * pass on the info struct.
1123 	 */
1124 	if (sig < SIGRTMIN)
1125 		override_rlimit = (is_si_special(info) || info->si_code >= 0);
1126 	else
1127 		override_rlimit = 0;
1128 
1129 	q = __sigqueue_alloc(sig, t, GFP_ATOMIC, override_rlimit, 0);
1130 
1131 	if (q) {
1132 		list_add_tail(&q->list, &pending->list);
1133 		switch ((unsigned long) info) {
1134 		case (unsigned long) SEND_SIG_NOINFO:
1135 			clear_siginfo(&q->info);
1136 			q->info.si_signo = sig;
1137 			q->info.si_errno = 0;
1138 			q->info.si_code = SI_USER;
1139 			q->info.si_pid = task_tgid_nr_ns(current,
1140 							task_active_pid_ns(t));
1141 			rcu_read_lock();
1142 			q->info.si_uid =
1143 				from_kuid_munged(task_cred_xxx(t, user_ns),
1144 						 current_uid());
1145 			rcu_read_unlock();
1146 			break;
1147 		case (unsigned long) SEND_SIG_PRIV:
1148 			clear_siginfo(&q->info);
1149 			q->info.si_signo = sig;
1150 			q->info.si_errno = 0;
1151 			q->info.si_code = SI_KERNEL;
1152 			q->info.si_pid = 0;
1153 			q->info.si_uid = 0;
1154 			break;
1155 		default:
1156 			copy_siginfo(&q->info, info);
1157 			break;
1158 		}
1159 	} else if (!is_si_special(info) &&
1160 		   sig >= SIGRTMIN && info->si_code != SI_USER) {
1161 		/*
1162 		 * Queue overflow, abort.  We may abort if the
1163 		 * signal was rt and sent by user using something
1164 		 * other than kill().
1165 		 */
1166 		result = TRACE_SIGNAL_OVERFLOW_FAIL;
1167 		ret = -EAGAIN;
1168 		goto ret;
1169 	} else {
1170 		/*
1171 		 * This is a silent loss of information.  We still
1172 		 * send the signal, but the *info bits are lost.
1173 		 */
1174 		result = TRACE_SIGNAL_LOSE_INFO;
1175 	}
1176 
1177 out_set:
1178 	signalfd_notify(t, sig);
1179 	sigaddset(&pending->signal, sig);
1180 
1181 	/* Let multiprocess signals appear after on-going forks */
1182 	if (type > PIDTYPE_TGID) {
1183 		struct multiprocess_signals *delayed;
1184 		hlist_for_each_entry(delayed, &t->signal->multiprocess, node) {
1185 			sigset_t *signal = &delayed->signal;
1186 			/* Can't queue both a stop and a continue signal */
1187 			if (sig == SIGCONT)
1188 				sigdelsetmask(signal, SIG_KERNEL_STOP_MASK);
1189 			else if (sig_kernel_stop(sig))
1190 				sigdelset(signal, SIGCONT);
1191 			sigaddset(signal, sig);
1192 		}
1193 	}
1194 
1195 	complete_signal(sig, t, type);
1196 ret:
1197 	trace_signal_generate(sig, info, t, type != PIDTYPE_PID, result);
1198 	return ret;
1199 }
1200 
1201 static inline bool has_si_pid_and_uid(struct kernel_siginfo *info)
1202 {
1203 	bool ret = false;
1204 	switch (siginfo_layout(info->si_signo, info->si_code)) {
1205 	case SIL_KILL:
1206 	case SIL_CHLD:
1207 	case SIL_RT:
1208 		ret = true;
1209 		break;
1210 	case SIL_TIMER:
1211 	case SIL_POLL:
1212 	case SIL_FAULT:
1213 	case SIL_FAULT_TRAPNO:
1214 	case SIL_FAULT_MCEERR:
1215 	case SIL_FAULT_BNDERR:
1216 	case SIL_FAULT_PKUERR:
1217 	case SIL_FAULT_PERF_EVENT:
1218 	case SIL_SYS:
1219 		ret = false;
1220 		break;
1221 	}
1222 	return ret;
1223 }
1224 
1225 int send_signal_locked(int sig, struct kernel_siginfo *info,
1226 		       struct task_struct *t, enum pid_type type)
1227 {
1228 	/* Should SIGKILL or SIGSTOP be received by a pid namespace init? */
1229 	bool force = false;
1230 
1231 	if (info == SEND_SIG_NOINFO) {
1232 		/* Force if sent from an ancestor pid namespace */
1233 		force = !task_pid_nr_ns(current, task_active_pid_ns(t));
1234 	} else if (info == SEND_SIG_PRIV) {
1235 		/* Don't ignore kernel generated signals */
1236 		force = true;
1237 	} else if (has_si_pid_and_uid(info)) {
1238 		/* SIGKILL and SIGSTOP is special or has ids */
1239 		struct user_namespace *t_user_ns;
1240 
1241 		rcu_read_lock();
1242 		t_user_ns = task_cred_xxx(t, user_ns);
1243 		if (current_user_ns() != t_user_ns) {
1244 			kuid_t uid = make_kuid(current_user_ns(), info->si_uid);
1245 			info->si_uid = from_kuid_munged(t_user_ns, uid);
1246 		}
1247 		rcu_read_unlock();
1248 
1249 		/* A kernel generated signal? */
1250 		force = (info->si_code == SI_KERNEL);
1251 
1252 		/* From an ancestor pid namespace? */
1253 		if (!task_pid_nr_ns(current, task_active_pid_ns(t))) {
1254 			info->si_pid = 0;
1255 			force = true;
1256 		}
1257 	}
1258 	return __send_signal_locked(sig, info, t, type, force);
1259 }
1260 
1261 static void print_fatal_signal(int signr)
1262 {
1263 	struct pt_regs *regs = task_pt_regs(current);
1264 	struct file *exe_file;
1265 
1266 	exe_file = get_task_exe_file(current);
1267 	if (exe_file) {
1268 		pr_info("%pD: %s: potentially unexpected fatal signal %d.\n",
1269 			exe_file, current->comm, signr);
1270 		fput(exe_file);
1271 	} else {
1272 		pr_info("%s: potentially unexpected fatal signal %d.\n",
1273 			current->comm, signr);
1274 	}
1275 
1276 #if defined(__i386__) && !defined(__arch_um__)
1277 	pr_info("code at %08lx: ", regs->ip);
1278 	{
1279 		int i;
1280 		for (i = 0; i < 16; i++) {
1281 			unsigned char insn;
1282 
1283 			if (get_user(insn, (unsigned char *)(regs->ip + i)))
1284 				break;
1285 			pr_cont("%02x ", insn);
1286 		}
1287 	}
1288 	pr_cont("\n");
1289 #endif
1290 	preempt_disable();
1291 	show_regs(regs);
1292 	preempt_enable();
1293 }
1294 
1295 static int __init setup_print_fatal_signals(char *str)
1296 {
1297 	get_option (&str, &print_fatal_signals);
1298 
1299 	return 1;
1300 }
1301 
1302 __setup("print-fatal-signals=", setup_print_fatal_signals);
1303 
1304 int do_send_sig_info(int sig, struct kernel_siginfo *info, struct task_struct *p,
1305 			enum pid_type type)
1306 {
1307 	unsigned long flags;
1308 	int ret = -ESRCH;
1309 
1310 	if (lock_task_sighand(p, &flags)) {
1311 		ret = send_signal_locked(sig, info, p, type);
1312 		unlock_task_sighand(p, &flags);
1313 	}
1314 
1315 	return ret;
1316 }
1317 
1318 enum sig_handler {
1319 	HANDLER_CURRENT, /* If reachable use the current handler */
1320 	HANDLER_SIG_DFL, /* Always use SIG_DFL handler semantics */
1321 	HANDLER_EXIT,	 /* Only visible as the process exit code */
1322 };
1323 
1324 /*
1325  * Force a signal that the process can't ignore: if necessary
1326  * we unblock the signal and change any SIG_IGN to SIG_DFL.
1327  *
1328  * Note: If we unblock the signal, we always reset it to SIG_DFL,
1329  * since we do not want to have a signal handler that was blocked
1330  * be invoked when user space had explicitly blocked it.
1331  *
1332  * We don't want to have recursive SIGSEGV's etc, for example,
1333  * that is why we also clear SIGNAL_UNKILLABLE.
1334  */
1335 static int
1336 force_sig_info_to_task(struct kernel_siginfo *info, struct task_struct *t,
1337 	enum sig_handler handler)
1338 {
1339 	unsigned long int flags;
1340 	int ret, blocked, ignored;
1341 	struct k_sigaction *action;
1342 	int sig = info->si_signo;
1343 
1344 	spin_lock_irqsave(&t->sighand->siglock, flags);
1345 	action = &t->sighand->action[sig-1];
1346 	ignored = action->sa.sa_handler == SIG_IGN;
1347 	blocked = sigismember(&t->blocked, sig);
1348 	if (blocked || ignored || (handler != HANDLER_CURRENT)) {
1349 		action->sa.sa_handler = SIG_DFL;
1350 		if (handler == HANDLER_EXIT)
1351 			action->sa.sa_flags |= SA_IMMUTABLE;
1352 		if (blocked) {
1353 			sigdelset(&t->blocked, sig);
1354 			recalc_sigpending_and_wake(t);
1355 		}
1356 	}
1357 	/*
1358 	 * Don't clear SIGNAL_UNKILLABLE for traced tasks, users won't expect
1359 	 * debugging to leave init killable. But HANDLER_EXIT is always fatal.
1360 	 */
1361 	if (action->sa.sa_handler == SIG_DFL &&
1362 	    (!t->ptrace || (handler == HANDLER_EXIT)))
1363 		t->signal->flags &= ~SIGNAL_UNKILLABLE;
1364 	ret = send_signal_locked(sig, info, t, PIDTYPE_PID);
1365 	spin_unlock_irqrestore(&t->sighand->siglock, flags);
1366 
1367 	return ret;
1368 }
1369 
1370 int force_sig_info(struct kernel_siginfo *info)
1371 {
1372 	return force_sig_info_to_task(info, current, HANDLER_CURRENT);
1373 }
1374 
1375 /*
1376  * Nuke all other threads in the group.
1377  */
1378 int zap_other_threads(struct task_struct *p)
1379 {
1380 	struct task_struct *t = p;
1381 	int count = 0;
1382 
1383 	p->signal->group_stop_count = 0;
1384 
1385 	while_each_thread(p, t) {
1386 		task_clear_jobctl_pending(t, JOBCTL_PENDING_MASK);
1387 		/* Don't require de_thread to wait for the vhost_worker */
1388 		if ((t->flags & (PF_IO_WORKER | PF_USER_WORKER)) != PF_USER_WORKER)
1389 			count++;
1390 
1391 		/* Don't bother with already dead threads */
1392 		if (t->exit_state)
1393 			continue;
1394 		sigaddset(&t->pending.signal, SIGKILL);
1395 		signal_wake_up(t, 1);
1396 	}
1397 
1398 	return count;
1399 }
1400 
1401 struct sighand_struct *__lock_task_sighand(struct task_struct *tsk,
1402 					   unsigned long *flags)
1403 {
1404 	struct sighand_struct *sighand;
1405 
1406 	rcu_read_lock();
1407 	for (;;) {
1408 		sighand = rcu_dereference(tsk->sighand);
1409 		if (unlikely(sighand == NULL))
1410 			break;
1411 
1412 		/*
1413 		 * This sighand can be already freed and even reused, but
1414 		 * we rely on SLAB_TYPESAFE_BY_RCU and sighand_ctor() which
1415 		 * initializes ->siglock: this slab can't go away, it has
1416 		 * the same object type, ->siglock can't be reinitialized.
1417 		 *
1418 		 * We need to ensure that tsk->sighand is still the same
1419 		 * after we take the lock, we can race with de_thread() or
1420 		 * __exit_signal(). In the latter case the next iteration
1421 		 * must see ->sighand == NULL.
1422 		 */
1423 		spin_lock_irqsave(&sighand->siglock, *flags);
1424 		if (likely(sighand == rcu_access_pointer(tsk->sighand)))
1425 			break;
1426 		spin_unlock_irqrestore(&sighand->siglock, *flags);
1427 	}
1428 	rcu_read_unlock();
1429 
1430 	return sighand;
1431 }
1432 
1433 #ifdef CONFIG_LOCKDEP
1434 void lockdep_assert_task_sighand_held(struct task_struct *task)
1435 {
1436 	struct sighand_struct *sighand;
1437 
1438 	rcu_read_lock();
1439 	sighand = rcu_dereference(task->sighand);
1440 	if (sighand)
1441 		lockdep_assert_held(&sighand->siglock);
1442 	else
1443 		WARN_ON_ONCE(1);
1444 	rcu_read_unlock();
1445 }
1446 #endif
1447 
1448 /*
1449  * send signal info to all the members of a group
1450  */
1451 int group_send_sig_info(int sig, struct kernel_siginfo *info,
1452 			struct task_struct *p, enum pid_type type)
1453 {
1454 	int ret;
1455 
1456 	rcu_read_lock();
1457 	ret = check_kill_permission(sig, info, p);
1458 	rcu_read_unlock();
1459 
1460 	if (!ret && sig)
1461 		ret = do_send_sig_info(sig, info, p, type);
1462 
1463 	return ret;
1464 }
1465 
1466 /*
1467  * __kill_pgrp_info() sends a signal to a process group: this is what the tty
1468  * control characters do (^C, ^Z etc)
1469  * - the caller must hold at least a readlock on tasklist_lock
1470  */
1471 int __kill_pgrp_info(int sig, struct kernel_siginfo *info, struct pid *pgrp)
1472 {
1473 	struct task_struct *p = NULL;
1474 	int retval, success;
1475 
1476 	success = 0;
1477 	retval = -ESRCH;
1478 	do_each_pid_task(pgrp, PIDTYPE_PGID, p) {
1479 		int err = group_send_sig_info(sig, info, p, PIDTYPE_PGID);
1480 		success |= !err;
1481 		retval = err;
1482 	} while_each_pid_task(pgrp, PIDTYPE_PGID, p);
1483 	return success ? 0 : retval;
1484 }
1485 
1486 int kill_pid_info(int sig, struct kernel_siginfo *info, struct pid *pid)
1487 {
1488 	int error = -ESRCH;
1489 	struct task_struct *p;
1490 
1491 	for (;;) {
1492 		rcu_read_lock();
1493 		p = pid_task(pid, PIDTYPE_PID);
1494 		if (p)
1495 			error = group_send_sig_info(sig, info, p, PIDTYPE_TGID);
1496 		rcu_read_unlock();
1497 		if (likely(!p || error != -ESRCH))
1498 			return error;
1499 
1500 		/*
1501 		 * The task was unhashed in between, try again.  If it
1502 		 * is dead, pid_task() will return NULL, if we race with
1503 		 * de_thread() it will find the new leader.
1504 		 */
1505 	}
1506 }
1507 
1508 static int kill_proc_info(int sig, struct kernel_siginfo *info, pid_t pid)
1509 {
1510 	int error;
1511 	rcu_read_lock();
1512 	error = kill_pid_info(sig, info, find_vpid(pid));
1513 	rcu_read_unlock();
1514 	return error;
1515 }
1516 
1517 static inline bool kill_as_cred_perm(const struct cred *cred,
1518 				     struct task_struct *target)
1519 {
1520 	const struct cred *pcred = __task_cred(target);
1521 
1522 	return uid_eq(cred->euid, pcred->suid) ||
1523 	       uid_eq(cred->euid, pcred->uid) ||
1524 	       uid_eq(cred->uid, pcred->suid) ||
1525 	       uid_eq(cred->uid, pcred->uid);
1526 }
1527 
1528 /*
1529  * The usb asyncio usage of siginfo is wrong.  The glibc support
1530  * for asyncio which uses SI_ASYNCIO assumes the layout is SIL_RT.
1531  * AKA after the generic fields:
1532  *	kernel_pid_t	si_pid;
1533  *	kernel_uid32_t	si_uid;
1534  *	sigval_t	si_value;
1535  *
1536  * Unfortunately when usb generates SI_ASYNCIO it assumes the layout
1537  * after the generic fields is:
1538  *	void __user 	*si_addr;
1539  *
1540  * This is a practical problem when there is a 64bit big endian kernel
1541  * and a 32bit userspace.  As the 32bit address will encoded in the low
1542  * 32bits of the pointer.  Those low 32bits will be stored at higher
1543  * address than appear in a 32 bit pointer.  So userspace will not
1544  * see the address it was expecting for it's completions.
1545  *
1546  * There is nothing in the encoding that can allow
1547  * copy_siginfo_to_user32 to detect this confusion of formats, so
1548  * handle this by requiring the caller of kill_pid_usb_asyncio to
1549  * notice when this situration takes place and to store the 32bit
1550  * pointer in sival_int, instead of sival_addr of the sigval_t addr
1551  * parameter.
1552  */
1553 int kill_pid_usb_asyncio(int sig, int errno, sigval_t addr,
1554 			 struct pid *pid, const struct cred *cred)
1555 {
1556 	struct kernel_siginfo info;
1557 	struct task_struct *p;
1558 	unsigned long flags;
1559 	int ret = -EINVAL;
1560 
1561 	if (!valid_signal(sig))
1562 		return ret;
1563 
1564 	clear_siginfo(&info);
1565 	info.si_signo = sig;
1566 	info.si_errno = errno;
1567 	info.si_code = SI_ASYNCIO;
1568 	*((sigval_t *)&info.si_pid) = addr;
1569 
1570 	rcu_read_lock();
1571 	p = pid_task(pid, PIDTYPE_PID);
1572 	if (!p) {
1573 		ret = -ESRCH;
1574 		goto out_unlock;
1575 	}
1576 	if (!kill_as_cred_perm(cred, p)) {
1577 		ret = -EPERM;
1578 		goto out_unlock;
1579 	}
1580 	ret = security_task_kill(p, &info, sig, cred);
1581 	if (ret)
1582 		goto out_unlock;
1583 
1584 	if (sig) {
1585 		if (lock_task_sighand(p, &flags)) {
1586 			ret = __send_signal_locked(sig, &info, p, PIDTYPE_TGID, false);
1587 			unlock_task_sighand(p, &flags);
1588 		} else
1589 			ret = -ESRCH;
1590 	}
1591 out_unlock:
1592 	rcu_read_unlock();
1593 	return ret;
1594 }
1595 EXPORT_SYMBOL_GPL(kill_pid_usb_asyncio);
1596 
1597 /*
1598  * kill_something_info() interprets pid in interesting ways just like kill(2).
1599  *
1600  * POSIX specifies that kill(-1,sig) is unspecified, but what we have
1601  * is probably wrong.  Should make it like BSD or SYSV.
1602  */
1603 
1604 static int kill_something_info(int sig, struct kernel_siginfo *info, pid_t pid)
1605 {
1606 	int ret;
1607 
1608 	if (pid > 0)
1609 		return kill_proc_info(sig, info, pid);
1610 
1611 	/* -INT_MIN is undefined.  Exclude this case to avoid a UBSAN warning */
1612 	if (pid == INT_MIN)
1613 		return -ESRCH;
1614 
1615 	read_lock(&tasklist_lock);
1616 	if (pid != -1) {
1617 		ret = __kill_pgrp_info(sig, info,
1618 				pid ? find_vpid(-pid) : task_pgrp(current));
1619 	} else {
1620 		int retval = 0, count = 0;
1621 		struct task_struct * p;
1622 
1623 		for_each_process(p) {
1624 			if (task_pid_vnr(p) > 1 &&
1625 					!same_thread_group(p, current)) {
1626 				int err = group_send_sig_info(sig, info, p,
1627 							      PIDTYPE_MAX);
1628 				++count;
1629 				if (err != -EPERM)
1630 					retval = err;
1631 			}
1632 		}
1633 		ret = count ? retval : -ESRCH;
1634 	}
1635 	read_unlock(&tasklist_lock);
1636 
1637 	return ret;
1638 }
1639 
1640 /*
1641  * These are for backward compatibility with the rest of the kernel source.
1642  */
1643 
1644 int send_sig_info(int sig, struct kernel_siginfo *info, struct task_struct *p)
1645 {
1646 	/*
1647 	 * Make sure legacy kernel users don't send in bad values
1648 	 * (normal paths check this in check_kill_permission).
1649 	 */
1650 	if (!valid_signal(sig))
1651 		return -EINVAL;
1652 
1653 	return do_send_sig_info(sig, info, p, PIDTYPE_PID);
1654 }
1655 EXPORT_SYMBOL(send_sig_info);
1656 
1657 #define __si_special(priv) \
1658 	((priv) ? SEND_SIG_PRIV : SEND_SIG_NOINFO)
1659 
1660 int
1661 send_sig(int sig, struct task_struct *p, int priv)
1662 {
1663 	return send_sig_info(sig, __si_special(priv), p);
1664 }
1665 EXPORT_SYMBOL(send_sig);
1666 
1667 void force_sig(int sig)
1668 {
1669 	struct kernel_siginfo info;
1670 
1671 	clear_siginfo(&info);
1672 	info.si_signo = sig;
1673 	info.si_errno = 0;
1674 	info.si_code = SI_KERNEL;
1675 	info.si_pid = 0;
1676 	info.si_uid = 0;
1677 	force_sig_info(&info);
1678 }
1679 EXPORT_SYMBOL(force_sig);
1680 
1681 void force_fatal_sig(int sig)
1682 {
1683 	struct kernel_siginfo info;
1684 
1685 	clear_siginfo(&info);
1686 	info.si_signo = sig;
1687 	info.si_errno = 0;
1688 	info.si_code = SI_KERNEL;
1689 	info.si_pid = 0;
1690 	info.si_uid = 0;
1691 	force_sig_info_to_task(&info, current, HANDLER_SIG_DFL);
1692 }
1693 
1694 void force_exit_sig(int sig)
1695 {
1696 	struct kernel_siginfo info;
1697 
1698 	clear_siginfo(&info);
1699 	info.si_signo = sig;
1700 	info.si_errno = 0;
1701 	info.si_code = SI_KERNEL;
1702 	info.si_pid = 0;
1703 	info.si_uid = 0;
1704 	force_sig_info_to_task(&info, current, HANDLER_EXIT);
1705 }
1706 
1707 /*
1708  * When things go south during signal handling, we
1709  * will force a SIGSEGV. And if the signal that caused
1710  * the problem was already a SIGSEGV, we'll want to
1711  * make sure we don't even try to deliver the signal..
1712  */
1713 void force_sigsegv(int sig)
1714 {
1715 	if (sig == SIGSEGV)
1716 		force_fatal_sig(SIGSEGV);
1717 	else
1718 		force_sig(SIGSEGV);
1719 }
1720 
1721 int force_sig_fault_to_task(int sig, int code, void __user *addr,
1722 			    struct task_struct *t)
1723 {
1724 	struct kernel_siginfo info;
1725 
1726 	clear_siginfo(&info);
1727 	info.si_signo = sig;
1728 	info.si_errno = 0;
1729 	info.si_code  = code;
1730 	info.si_addr  = addr;
1731 	return force_sig_info_to_task(&info, t, HANDLER_CURRENT);
1732 }
1733 
1734 int force_sig_fault(int sig, int code, void __user *addr)
1735 {
1736 	return force_sig_fault_to_task(sig, code, addr, current);
1737 }
1738 
1739 int send_sig_fault(int sig, int code, void __user *addr, struct task_struct *t)
1740 {
1741 	struct kernel_siginfo info;
1742 
1743 	clear_siginfo(&info);
1744 	info.si_signo = sig;
1745 	info.si_errno = 0;
1746 	info.si_code  = code;
1747 	info.si_addr  = addr;
1748 	return send_sig_info(info.si_signo, &info, t);
1749 }
1750 
1751 int force_sig_mceerr(int code, void __user *addr, short lsb)
1752 {
1753 	struct kernel_siginfo info;
1754 
1755 	WARN_ON((code != BUS_MCEERR_AO) && (code != BUS_MCEERR_AR));
1756 	clear_siginfo(&info);
1757 	info.si_signo = SIGBUS;
1758 	info.si_errno = 0;
1759 	info.si_code = code;
1760 	info.si_addr = addr;
1761 	info.si_addr_lsb = lsb;
1762 	return force_sig_info(&info);
1763 }
1764 
1765 int send_sig_mceerr(int code, void __user *addr, short lsb, struct task_struct *t)
1766 {
1767 	struct kernel_siginfo info;
1768 
1769 	WARN_ON((code != BUS_MCEERR_AO) && (code != BUS_MCEERR_AR));
1770 	clear_siginfo(&info);
1771 	info.si_signo = SIGBUS;
1772 	info.si_errno = 0;
1773 	info.si_code = code;
1774 	info.si_addr = addr;
1775 	info.si_addr_lsb = lsb;
1776 	return send_sig_info(info.si_signo, &info, t);
1777 }
1778 EXPORT_SYMBOL(send_sig_mceerr);
1779 
1780 int force_sig_bnderr(void __user *addr, void __user *lower, void __user *upper)
1781 {
1782 	struct kernel_siginfo info;
1783 
1784 	clear_siginfo(&info);
1785 	info.si_signo = SIGSEGV;
1786 	info.si_errno = 0;
1787 	info.si_code  = SEGV_BNDERR;
1788 	info.si_addr  = addr;
1789 	info.si_lower = lower;
1790 	info.si_upper = upper;
1791 	return force_sig_info(&info);
1792 }
1793 
1794 #ifdef SEGV_PKUERR
1795 int force_sig_pkuerr(void __user *addr, u32 pkey)
1796 {
1797 	struct kernel_siginfo info;
1798 
1799 	clear_siginfo(&info);
1800 	info.si_signo = SIGSEGV;
1801 	info.si_errno = 0;
1802 	info.si_code  = SEGV_PKUERR;
1803 	info.si_addr  = addr;
1804 	info.si_pkey  = pkey;
1805 	return force_sig_info(&info);
1806 }
1807 #endif
1808 
1809 int send_sig_perf(void __user *addr, u32 type, u64 sig_data)
1810 {
1811 	struct kernel_siginfo info;
1812 
1813 	clear_siginfo(&info);
1814 	info.si_signo     = SIGTRAP;
1815 	info.si_errno     = 0;
1816 	info.si_code      = TRAP_PERF;
1817 	info.si_addr      = addr;
1818 	info.si_perf_data = sig_data;
1819 	info.si_perf_type = type;
1820 
1821 	/*
1822 	 * Signals generated by perf events should not terminate the whole
1823 	 * process if SIGTRAP is blocked, however, delivering the signal
1824 	 * asynchronously is better than not delivering at all. But tell user
1825 	 * space if the signal was asynchronous, so it can clearly be
1826 	 * distinguished from normal synchronous ones.
1827 	 */
1828 	info.si_perf_flags = sigismember(&current->blocked, info.si_signo) ?
1829 				     TRAP_PERF_FLAG_ASYNC :
1830 				     0;
1831 
1832 	return send_sig_info(info.si_signo, &info, current);
1833 }
1834 
1835 /**
1836  * force_sig_seccomp - signals the task to allow in-process syscall emulation
1837  * @syscall: syscall number to send to userland
1838  * @reason: filter-supplied reason code to send to userland (via si_errno)
1839  * @force_coredump: true to trigger a coredump
1840  *
1841  * Forces a SIGSYS with a code of SYS_SECCOMP and related sigsys info.
1842  */
1843 int force_sig_seccomp(int syscall, int reason, bool force_coredump)
1844 {
1845 	struct kernel_siginfo info;
1846 
1847 	clear_siginfo(&info);
1848 	info.si_signo = SIGSYS;
1849 	info.si_code = SYS_SECCOMP;
1850 	info.si_call_addr = (void __user *)KSTK_EIP(current);
1851 	info.si_errno = reason;
1852 	info.si_arch = syscall_get_arch(current);
1853 	info.si_syscall = syscall;
1854 	return force_sig_info_to_task(&info, current,
1855 		force_coredump ? HANDLER_EXIT : HANDLER_CURRENT);
1856 }
1857 
1858 /* For the crazy architectures that include trap information in
1859  * the errno field, instead of an actual errno value.
1860  */
1861 int force_sig_ptrace_errno_trap(int errno, void __user *addr)
1862 {
1863 	struct kernel_siginfo info;
1864 
1865 	clear_siginfo(&info);
1866 	info.si_signo = SIGTRAP;
1867 	info.si_errno = errno;
1868 	info.si_code  = TRAP_HWBKPT;
1869 	info.si_addr  = addr;
1870 	return force_sig_info(&info);
1871 }
1872 
1873 /* For the rare architectures that include trap information using
1874  * si_trapno.
1875  */
1876 int force_sig_fault_trapno(int sig, int code, void __user *addr, int trapno)
1877 {
1878 	struct kernel_siginfo info;
1879 
1880 	clear_siginfo(&info);
1881 	info.si_signo = sig;
1882 	info.si_errno = 0;
1883 	info.si_code  = code;
1884 	info.si_addr  = addr;
1885 	info.si_trapno = trapno;
1886 	return force_sig_info(&info);
1887 }
1888 
1889 /* For the rare architectures that include trap information using
1890  * si_trapno.
1891  */
1892 int send_sig_fault_trapno(int sig, int code, void __user *addr, int trapno,
1893 			  struct task_struct *t)
1894 {
1895 	struct kernel_siginfo info;
1896 
1897 	clear_siginfo(&info);
1898 	info.si_signo = sig;
1899 	info.si_errno = 0;
1900 	info.si_code  = code;
1901 	info.si_addr  = addr;
1902 	info.si_trapno = trapno;
1903 	return send_sig_info(info.si_signo, &info, t);
1904 }
1905 
1906 int kill_pgrp(struct pid *pid, int sig, int priv)
1907 {
1908 	int ret;
1909 
1910 	read_lock(&tasklist_lock);
1911 	ret = __kill_pgrp_info(sig, __si_special(priv), pid);
1912 	read_unlock(&tasklist_lock);
1913 
1914 	return ret;
1915 }
1916 EXPORT_SYMBOL(kill_pgrp);
1917 
1918 int kill_pid(struct pid *pid, int sig, int priv)
1919 {
1920 	return kill_pid_info(sig, __si_special(priv), pid);
1921 }
1922 EXPORT_SYMBOL(kill_pid);
1923 
1924 /*
1925  * These functions support sending signals using preallocated sigqueue
1926  * structures.  This is needed "because realtime applications cannot
1927  * afford to lose notifications of asynchronous events, like timer
1928  * expirations or I/O completions".  In the case of POSIX Timers
1929  * we allocate the sigqueue structure from the timer_create.  If this
1930  * allocation fails we are able to report the failure to the application
1931  * with an EAGAIN error.
1932  */
1933 struct sigqueue *sigqueue_alloc(void)
1934 {
1935 	return __sigqueue_alloc(-1, current, GFP_KERNEL, 0, SIGQUEUE_PREALLOC);
1936 }
1937 
1938 void sigqueue_free(struct sigqueue *q)
1939 {
1940 	unsigned long flags;
1941 	spinlock_t *lock = &current->sighand->siglock;
1942 
1943 	BUG_ON(!(q->flags & SIGQUEUE_PREALLOC));
1944 	/*
1945 	 * We must hold ->siglock while testing q->list
1946 	 * to serialize with collect_signal() or with
1947 	 * __exit_signal()->flush_sigqueue().
1948 	 */
1949 	spin_lock_irqsave(lock, flags);
1950 	q->flags &= ~SIGQUEUE_PREALLOC;
1951 	/*
1952 	 * If it is queued it will be freed when dequeued,
1953 	 * like the "regular" sigqueue.
1954 	 */
1955 	if (!list_empty(&q->list))
1956 		q = NULL;
1957 	spin_unlock_irqrestore(lock, flags);
1958 
1959 	if (q)
1960 		__sigqueue_free(q);
1961 }
1962 
1963 int send_sigqueue(struct sigqueue *q, struct pid *pid, enum pid_type type)
1964 {
1965 	int sig = q->info.si_signo;
1966 	struct sigpending *pending;
1967 	struct task_struct *t;
1968 	unsigned long flags;
1969 	int ret, result;
1970 
1971 	BUG_ON(!(q->flags & SIGQUEUE_PREALLOC));
1972 
1973 	ret = -1;
1974 	rcu_read_lock();
1975 
1976 	/*
1977 	 * This function is used by POSIX timers to deliver a timer signal.
1978 	 * Where type is PIDTYPE_PID (such as for timers with SIGEV_THREAD_ID
1979 	 * set), the signal must be delivered to the specific thread (queues
1980 	 * into t->pending).
1981 	 *
1982 	 * Where type is not PIDTYPE_PID, signals must be delivered to the
1983 	 * process. In this case, prefer to deliver to current if it is in
1984 	 * the same thread group as the target process, which avoids
1985 	 * unnecessarily waking up a potentially idle task.
1986 	 */
1987 	t = pid_task(pid, type);
1988 	if (!t)
1989 		goto ret;
1990 	if (type != PIDTYPE_PID && same_thread_group(t, current))
1991 		t = current;
1992 	if (!likely(lock_task_sighand(t, &flags)))
1993 		goto ret;
1994 
1995 	ret = 1; /* the signal is ignored */
1996 	result = TRACE_SIGNAL_IGNORED;
1997 	if (!prepare_signal(sig, t, false))
1998 		goto out;
1999 
2000 	ret = 0;
2001 	if (unlikely(!list_empty(&q->list))) {
2002 		/*
2003 		 * If an SI_TIMER entry is already queue just increment
2004 		 * the overrun count.
2005 		 */
2006 		BUG_ON(q->info.si_code != SI_TIMER);
2007 		q->info.si_overrun++;
2008 		result = TRACE_SIGNAL_ALREADY_PENDING;
2009 		goto out;
2010 	}
2011 	q->info.si_overrun = 0;
2012 
2013 	signalfd_notify(t, sig);
2014 	pending = (type != PIDTYPE_PID) ? &t->signal->shared_pending : &t->pending;
2015 	list_add_tail(&q->list, &pending->list);
2016 	sigaddset(&pending->signal, sig);
2017 	complete_signal(sig, t, type);
2018 	result = TRACE_SIGNAL_DELIVERED;
2019 out:
2020 	trace_signal_generate(sig, &q->info, t, type != PIDTYPE_PID, result);
2021 	unlock_task_sighand(t, &flags);
2022 ret:
2023 	rcu_read_unlock();
2024 	return ret;
2025 }
2026 
2027 static void do_notify_pidfd(struct task_struct *task)
2028 {
2029 	struct pid *pid;
2030 
2031 	WARN_ON(task->exit_state == 0);
2032 	pid = task_pid(task);
2033 	wake_up_all(&pid->wait_pidfd);
2034 }
2035 
2036 /*
2037  * Let a parent know about the death of a child.
2038  * For a stopped/continued status change, use do_notify_parent_cldstop instead.
2039  *
2040  * Returns true if our parent ignored us and so we've switched to
2041  * self-reaping.
2042  */
2043 bool do_notify_parent(struct task_struct *tsk, int sig)
2044 {
2045 	struct kernel_siginfo info;
2046 	unsigned long flags;
2047 	struct sighand_struct *psig;
2048 	bool autoreap = false;
2049 	u64 utime, stime;
2050 
2051 	WARN_ON_ONCE(sig == -1);
2052 
2053 	/* do_notify_parent_cldstop should have been called instead.  */
2054 	WARN_ON_ONCE(task_is_stopped_or_traced(tsk));
2055 
2056 	WARN_ON_ONCE(!tsk->ptrace &&
2057 	       (tsk->group_leader != tsk || !thread_group_empty(tsk)));
2058 
2059 	/* Wake up all pidfd waiters */
2060 	do_notify_pidfd(tsk);
2061 
2062 	if (sig != SIGCHLD) {
2063 		/*
2064 		 * This is only possible if parent == real_parent.
2065 		 * Check if it has changed security domain.
2066 		 */
2067 		if (tsk->parent_exec_id != READ_ONCE(tsk->parent->self_exec_id))
2068 			sig = SIGCHLD;
2069 	}
2070 
2071 	clear_siginfo(&info);
2072 	info.si_signo = sig;
2073 	info.si_errno = 0;
2074 	/*
2075 	 * We are under tasklist_lock here so our parent is tied to
2076 	 * us and cannot change.
2077 	 *
2078 	 * task_active_pid_ns will always return the same pid namespace
2079 	 * until a task passes through release_task.
2080 	 *
2081 	 * write_lock() currently calls preempt_disable() which is the
2082 	 * same as rcu_read_lock(), but according to Oleg, this is not
2083 	 * correct to rely on this
2084 	 */
2085 	rcu_read_lock();
2086 	info.si_pid = task_pid_nr_ns(tsk, task_active_pid_ns(tsk->parent));
2087 	info.si_uid = from_kuid_munged(task_cred_xxx(tsk->parent, user_ns),
2088 				       task_uid(tsk));
2089 	rcu_read_unlock();
2090 
2091 	task_cputime(tsk, &utime, &stime);
2092 	info.si_utime = nsec_to_clock_t(utime + tsk->signal->utime);
2093 	info.si_stime = nsec_to_clock_t(stime + tsk->signal->stime);
2094 
2095 	info.si_status = tsk->exit_code & 0x7f;
2096 	if (tsk->exit_code & 0x80)
2097 		info.si_code = CLD_DUMPED;
2098 	else if (tsk->exit_code & 0x7f)
2099 		info.si_code = CLD_KILLED;
2100 	else {
2101 		info.si_code = CLD_EXITED;
2102 		info.si_status = tsk->exit_code >> 8;
2103 	}
2104 
2105 	psig = tsk->parent->sighand;
2106 	spin_lock_irqsave(&psig->siglock, flags);
2107 	if (!tsk->ptrace && sig == SIGCHLD &&
2108 	    (psig->action[SIGCHLD-1].sa.sa_handler == SIG_IGN ||
2109 	     (psig->action[SIGCHLD-1].sa.sa_flags & SA_NOCLDWAIT))) {
2110 		/*
2111 		 * We are exiting and our parent doesn't care.  POSIX.1
2112 		 * defines special semantics for setting SIGCHLD to SIG_IGN
2113 		 * or setting the SA_NOCLDWAIT flag: we should be reaped
2114 		 * automatically and not left for our parent's wait4 call.
2115 		 * Rather than having the parent do it as a magic kind of
2116 		 * signal handler, we just set this to tell do_exit that we
2117 		 * can be cleaned up without becoming a zombie.  Note that
2118 		 * we still call __wake_up_parent in this case, because a
2119 		 * blocked sys_wait4 might now return -ECHILD.
2120 		 *
2121 		 * Whether we send SIGCHLD or not for SA_NOCLDWAIT
2122 		 * is implementation-defined: we do (if you don't want
2123 		 * it, just use SIG_IGN instead).
2124 		 */
2125 		autoreap = true;
2126 		if (psig->action[SIGCHLD-1].sa.sa_handler == SIG_IGN)
2127 			sig = 0;
2128 	}
2129 	/*
2130 	 * Send with __send_signal as si_pid and si_uid are in the
2131 	 * parent's namespaces.
2132 	 */
2133 	if (valid_signal(sig) && sig)
2134 		__send_signal_locked(sig, &info, tsk->parent, PIDTYPE_TGID, false);
2135 	__wake_up_parent(tsk, tsk->parent);
2136 	spin_unlock_irqrestore(&psig->siglock, flags);
2137 
2138 	return autoreap;
2139 }
2140 
2141 /**
2142  * do_notify_parent_cldstop - notify parent of stopped/continued state change
2143  * @tsk: task reporting the state change
2144  * @for_ptracer: the notification is for ptracer
2145  * @why: CLD_{CONTINUED|STOPPED|TRAPPED} to report
2146  *
2147  * Notify @tsk's parent that the stopped/continued state has changed.  If
2148  * @for_ptracer is %false, @tsk's group leader notifies to its real parent.
2149  * If %true, @tsk reports to @tsk->parent which should be the ptracer.
2150  *
2151  * CONTEXT:
2152  * Must be called with tasklist_lock at least read locked.
2153  */
2154 static void do_notify_parent_cldstop(struct task_struct *tsk,
2155 				     bool for_ptracer, int why)
2156 {
2157 	struct kernel_siginfo info;
2158 	unsigned long flags;
2159 	struct task_struct *parent;
2160 	struct sighand_struct *sighand;
2161 	u64 utime, stime;
2162 
2163 	if (for_ptracer) {
2164 		parent = tsk->parent;
2165 	} else {
2166 		tsk = tsk->group_leader;
2167 		parent = tsk->real_parent;
2168 	}
2169 
2170 	clear_siginfo(&info);
2171 	info.si_signo = SIGCHLD;
2172 	info.si_errno = 0;
2173 	/*
2174 	 * see comment in do_notify_parent() about the following 4 lines
2175 	 */
2176 	rcu_read_lock();
2177 	info.si_pid = task_pid_nr_ns(tsk, task_active_pid_ns(parent));
2178 	info.si_uid = from_kuid_munged(task_cred_xxx(parent, user_ns), task_uid(tsk));
2179 	rcu_read_unlock();
2180 
2181 	task_cputime(tsk, &utime, &stime);
2182 	info.si_utime = nsec_to_clock_t(utime);
2183 	info.si_stime = nsec_to_clock_t(stime);
2184 
2185  	info.si_code = why;
2186  	switch (why) {
2187  	case CLD_CONTINUED:
2188  		info.si_status = SIGCONT;
2189  		break;
2190  	case CLD_STOPPED:
2191  		info.si_status = tsk->signal->group_exit_code & 0x7f;
2192  		break;
2193  	case CLD_TRAPPED:
2194  		info.si_status = tsk->exit_code & 0x7f;
2195  		break;
2196  	default:
2197  		BUG();
2198  	}
2199 
2200 	sighand = parent->sighand;
2201 	spin_lock_irqsave(&sighand->siglock, flags);
2202 	if (sighand->action[SIGCHLD-1].sa.sa_handler != SIG_IGN &&
2203 	    !(sighand->action[SIGCHLD-1].sa.sa_flags & SA_NOCLDSTOP))
2204 		send_signal_locked(SIGCHLD, &info, parent, PIDTYPE_TGID);
2205 	/*
2206 	 * Even if SIGCHLD is not generated, we must wake up wait4 calls.
2207 	 */
2208 	__wake_up_parent(tsk, parent);
2209 	spin_unlock_irqrestore(&sighand->siglock, flags);
2210 }
2211 
2212 /*
2213  * This must be called with current->sighand->siglock held.
2214  *
2215  * This should be the path for all ptrace stops.
2216  * We always set current->last_siginfo while stopped here.
2217  * That makes it a way to test a stopped process for
2218  * being ptrace-stopped vs being job-control-stopped.
2219  *
2220  * Returns the signal the ptracer requested the code resume
2221  * with.  If the code did not stop because the tracer is gone,
2222  * the stop signal remains unchanged unless clear_code.
2223  */
2224 static int ptrace_stop(int exit_code, int why, unsigned long message,
2225 		       kernel_siginfo_t *info)
2226 	__releases(&current->sighand->siglock)
2227 	__acquires(&current->sighand->siglock)
2228 {
2229 	bool gstop_done = false;
2230 
2231 	if (arch_ptrace_stop_needed()) {
2232 		/*
2233 		 * The arch code has something special to do before a
2234 		 * ptrace stop.  This is allowed to block, e.g. for faults
2235 		 * on user stack pages.  We can't keep the siglock while
2236 		 * calling arch_ptrace_stop, so we must release it now.
2237 		 * To preserve proper semantics, we must do this before
2238 		 * any signal bookkeeping like checking group_stop_count.
2239 		 */
2240 		spin_unlock_irq(&current->sighand->siglock);
2241 		arch_ptrace_stop();
2242 		spin_lock_irq(&current->sighand->siglock);
2243 	}
2244 
2245 	/*
2246 	 * After this point ptrace_signal_wake_up or signal_wake_up
2247 	 * will clear TASK_TRACED if ptrace_unlink happens or a fatal
2248 	 * signal comes in.  Handle previous ptrace_unlinks and fatal
2249 	 * signals here to prevent ptrace_stop sleeping in schedule.
2250 	 */
2251 	if (!current->ptrace || __fatal_signal_pending(current))
2252 		return exit_code;
2253 
2254 	set_special_state(TASK_TRACED);
2255 	current->jobctl |= JOBCTL_TRACED;
2256 
2257 	/*
2258 	 * We're committing to trapping.  TRACED should be visible before
2259 	 * TRAPPING is cleared; otherwise, the tracer might fail do_wait().
2260 	 * Also, transition to TRACED and updates to ->jobctl should be
2261 	 * atomic with respect to siglock and should be done after the arch
2262 	 * hook as siglock is released and regrabbed across it.
2263 	 *
2264 	 *     TRACER				    TRACEE
2265 	 *
2266 	 *     ptrace_attach()
2267 	 * [L]   wait_on_bit(JOBCTL_TRAPPING)	[S] set_special_state(TRACED)
2268 	 *     do_wait()
2269 	 *       set_current_state()                smp_wmb();
2270 	 *       ptrace_do_wait()
2271 	 *         wait_task_stopped()
2272 	 *           task_stopped_code()
2273 	 * [L]         task_is_traced()		[S] task_clear_jobctl_trapping();
2274 	 */
2275 	smp_wmb();
2276 
2277 	current->ptrace_message = message;
2278 	current->last_siginfo = info;
2279 	current->exit_code = exit_code;
2280 
2281 	/*
2282 	 * If @why is CLD_STOPPED, we're trapping to participate in a group
2283 	 * stop.  Do the bookkeeping.  Note that if SIGCONT was delievered
2284 	 * across siglock relocks since INTERRUPT was scheduled, PENDING
2285 	 * could be clear now.  We act as if SIGCONT is received after
2286 	 * TASK_TRACED is entered - ignore it.
2287 	 */
2288 	if (why == CLD_STOPPED && (current->jobctl & JOBCTL_STOP_PENDING))
2289 		gstop_done = task_participate_group_stop(current);
2290 
2291 	/* any trap clears pending STOP trap, STOP trap clears NOTIFY */
2292 	task_clear_jobctl_pending(current, JOBCTL_TRAP_STOP);
2293 	if (info && info->si_code >> 8 == PTRACE_EVENT_STOP)
2294 		task_clear_jobctl_pending(current, JOBCTL_TRAP_NOTIFY);
2295 
2296 	/* entering a trap, clear TRAPPING */
2297 	task_clear_jobctl_trapping(current);
2298 
2299 	spin_unlock_irq(&current->sighand->siglock);
2300 	read_lock(&tasklist_lock);
2301 	/*
2302 	 * Notify parents of the stop.
2303 	 *
2304 	 * While ptraced, there are two parents - the ptracer and
2305 	 * the real_parent of the group_leader.  The ptracer should
2306 	 * know about every stop while the real parent is only
2307 	 * interested in the completion of group stop.  The states
2308 	 * for the two don't interact with each other.  Notify
2309 	 * separately unless they're gonna be duplicates.
2310 	 */
2311 	if (current->ptrace)
2312 		do_notify_parent_cldstop(current, true, why);
2313 	if (gstop_done && (!current->ptrace || ptrace_reparented(current)))
2314 		do_notify_parent_cldstop(current, false, why);
2315 
2316 	/*
2317 	 * Don't want to allow preemption here, because
2318 	 * sys_ptrace() needs this task to be inactive.
2319 	 *
2320 	 * XXX: implement read_unlock_no_resched().
2321 	 */
2322 	preempt_disable();
2323 	read_unlock(&tasklist_lock);
2324 	cgroup_enter_frozen();
2325 	preempt_enable_no_resched();
2326 	schedule();
2327 	cgroup_leave_frozen(true);
2328 
2329 	/*
2330 	 * We are back.  Now reacquire the siglock before touching
2331 	 * last_siginfo, so that we are sure to have synchronized with
2332 	 * any signal-sending on another CPU that wants to examine it.
2333 	 */
2334 	spin_lock_irq(&current->sighand->siglock);
2335 	exit_code = current->exit_code;
2336 	current->last_siginfo = NULL;
2337 	current->ptrace_message = 0;
2338 	current->exit_code = 0;
2339 
2340 	/* LISTENING can be set only during STOP traps, clear it */
2341 	current->jobctl &= ~(JOBCTL_LISTENING | JOBCTL_PTRACE_FROZEN);
2342 
2343 	/*
2344 	 * Queued signals ignored us while we were stopped for tracing.
2345 	 * So check for any that we should take before resuming user mode.
2346 	 * This sets TIF_SIGPENDING, but never clears it.
2347 	 */
2348 	recalc_sigpending_tsk(current);
2349 	return exit_code;
2350 }
2351 
2352 static int ptrace_do_notify(int signr, int exit_code, int why, unsigned long message)
2353 {
2354 	kernel_siginfo_t info;
2355 
2356 	clear_siginfo(&info);
2357 	info.si_signo = signr;
2358 	info.si_code = exit_code;
2359 	info.si_pid = task_pid_vnr(current);
2360 	info.si_uid = from_kuid_munged(current_user_ns(), current_uid());
2361 
2362 	/* Let the debugger run.  */
2363 	return ptrace_stop(exit_code, why, message, &info);
2364 }
2365 
2366 int ptrace_notify(int exit_code, unsigned long message)
2367 {
2368 	int signr;
2369 
2370 	BUG_ON((exit_code & (0x7f | ~0xffff)) != SIGTRAP);
2371 	if (unlikely(task_work_pending(current)))
2372 		task_work_run();
2373 
2374 	spin_lock_irq(&current->sighand->siglock);
2375 	signr = ptrace_do_notify(SIGTRAP, exit_code, CLD_TRAPPED, message);
2376 	spin_unlock_irq(&current->sighand->siglock);
2377 	return signr;
2378 }
2379 
2380 /**
2381  * do_signal_stop - handle group stop for SIGSTOP and other stop signals
2382  * @signr: signr causing group stop if initiating
2383  *
2384  * If %JOBCTL_STOP_PENDING is not set yet, initiate group stop with @signr
2385  * and participate in it.  If already set, participate in the existing
2386  * group stop.  If participated in a group stop (and thus slept), %true is
2387  * returned with siglock released.
2388  *
2389  * If ptraced, this function doesn't handle stop itself.  Instead,
2390  * %JOBCTL_TRAP_STOP is scheduled and %false is returned with siglock
2391  * untouched.  The caller must ensure that INTERRUPT trap handling takes
2392  * places afterwards.
2393  *
2394  * CONTEXT:
2395  * Must be called with @current->sighand->siglock held, which is released
2396  * on %true return.
2397  *
2398  * RETURNS:
2399  * %false if group stop is already cancelled or ptrace trap is scheduled.
2400  * %true if participated in group stop.
2401  */
2402 static bool do_signal_stop(int signr)
2403 	__releases(&current->sighand->siglock)
2404 {
2405 	struct signal_struct *sig = current->signal;
2406 
2407 	if (!(current->jobctl & JOBCTL_STOP_PENDING)) {
2408 		unsigned long gstop = JOBCTL_STOP_PENDING | JOBCTL_STOP_CONSUME;
2409 		struct task_struct *t;
2410 
2411 		/* signr will be recorded in task->jobctl for retries */
2412 		WARN_ON_ONCE(signr & ~JOBCTL_STOP_SIGMASK);
2413 
2414 		if (!likely(current->jobctl & JOBCTL_STOP_DEQUEUED) ||
2415 		    unlikely(sig->flags & SIGNAL_GROUP_EXIT) ||
2416 		    unlikely(sig->group_exec_task))
2417 			return false;
2418 		/*
2419 		 * There is no group stop already in progress.  We must
2420 		 * initiate one now.
2421 		 *
2422 		 * While ptraced, a task may be resumed while group stop is
2423 		 * still in effect and then receive a stop signal and
2424 		 * initiate another group stop.  This deviates from the
2425 		 * usual behavior as two consecutive stop signals can't
2426 		 * cause two group stops when !ptraced.  That is why we
2427 		 * also check !task_is_stopped(t) below.
2428 		 *
2429 		 * The condition can be distinguished by testing whether
2430 		 * SIGNAL_STOP_STOPPED is already set.  Don't generate
2431 		 * group_exit_code in such case.
2432 		 *
2433 		 * This is not necessary for SIGNAL_STOP_CONTINUED because
2434 		 * an intervening stop signal is required to cause two
2435 		 * continued events regardless of ptrace.
2436 		 */
2437 		if (!(sig->flags & SIGNAL_STOP_STOPPED))
2438 			sig->group_exit_code = signr;
2439 
2440 		sig->group_stop_count = 0;
2441 
2442 		if (task_set_jobctl_pending(current, signr | gstop))
2443 			sig->group_stop_count++;
2444 
2445 		t = current;
2446 		while_each_thread(current, t) {
2447 			/*
2448 			 * Setting state to TASK_STOPPED for a group
2449 			 * stop is always done with the siglock held,
2450 			 * so this check has no races.
2451 			 */
2452 			if (!task_is_stopped(t) &&
2453 			    task_set_jobctl_pending(t, signr | gstop)) {
2454 				sig->group_stop_count++;
2455 				if (likely(!(t->ptrace & PT_SEIZED)))
2456 					signal_wake_up(t, 0);
2457 				else
2458 					ptrace_trap_notify(t);
2459 			}
2460 		}
2461 	}
2462 
2463 	if (likely(!current->ptrace)) {
2464 		int notify = 0;
2465 
2466 		/*
2467 		 * If there are no other threads in the group, or if there
2468 		 * is a group stop in progress and we are the last to stop,
2469 		 * report to the parent.
2470 		 */
2471 		if (task_participate_group_stop(current))
2472 			notify = CLD_STOPPED;
2473 
2474 		current->jobctl |= JOBCTL_STOPPED;
2475 		set_special_state(TASK_STOPPED);
2476 		spin_unlock_irq(&current->sighand->siglock);
2477 
2478 		/*
2479 		 * Notify the parent of the group stop completion.  Because
2480 		 * we're not holding either the siglock or tasklist_lock
2481 		 * here, ptracer may attach inbetween; however, this is for
2482 		 * group stop and should always be delivered to the real
2483 		 * parent of the group leader.  The new ptracer will get
2484 		 * its notification when this task transitions into
2485 		 * TASK_TRACED.
2486 		 */
2487 		if (notify) {
2488 			read_lock(&tasklist_lock);
2489 			do_notify_parent_cldstop(current, false, notify);
2490 			read_unlock(&tasklist_lock);
2491 		}
2492 
2493 		/* Now we don't run again until woken by SIGCONT or SIGKILL */
2494 		cgroup_enter_frozen();
2495 		schedule();
2496 		return true;
2497 	} else {
2498 		/*
2499 		 * While ptraced, group stop is handled by STOP trap.
2500 		 * Schedule it and let the caller deal with it.
2501 		 */
2502 		task_set_jobctl_pending(current, JOBCTL_TRAP_STOP);
2503 		return false;
2504 	}
2505 }
2506 
2507 /**
2508  * do_jobctl_trap - take care of ptrace jobctl traps
2509  *
2510  * When PT_SEIZED, it's used for both group stop and explicit
2511  * SEIZE/INTERRUPT traps.  Both generate PTRACE_EVENT_STOP trap with
2512  * accompanying siginfo.  If stopped, lower eight bits of exit_code contain
2513  * the stop signal; otherwise, %SIGTRAP.
2514  *
2515  * When !PT_SEIZED, it's used only for group stop trap with stop signal
2516  * number as exit_code and no siginfo.
2517  *
2518  * CONTEXT:
2519  * Must be called with @current->sighand->siglock held, which may be
2520  * released and re-acquired before returning with intervening sleep.
2521  */
2522 static void do_jobctl_trap(void)
2523 {
2524 	struct signal_struct *signal = current->signal;
2525 	int signr = current->jobctl & JOBCTL_STOP_SIGMASK;
2526 
2527 	if (current->ptrace & PT_SEIZED) {
2528 		if (!signal->group_stop_count &&
2529 		    !(signal->flags & SIGNAL_STOP_STOPPED))
2530 			signr = SIGTRAP;
2531 		WARN_ON_ONCE(!signr);
2532 		ptrace_do_notify(signr, signr | (PTRACE_EVENT_STOP << 8),
2533 				 CLD_STOPPED, 0);
2534 	} else {
2535 		WARN_ON_ONCE(!signr);
2536 		ptrace_stop(signr, CLD_STOPPED, 0, NULL);
2537 	}
2538 }
2539 
2540 /**
2541  * do_freezer_trap - handle the freezer jobctl trap
2542  *
2543  * Puts the task into frozen state, if only the task is not about to quit.
2544  * In this case it drops JOBCTL_TRAP_FREEZE.
2545  *
2546  * CONTEXT:
2547  * Must be called with @current->sighand->siglock held,
2548  * which is always released before returning.
2549  */
2550 static void do_freezer_trap(void)
2551 	__releases(&current->sighand->siglock)
2552 {
2553 	/*
2554 	 * If there are other trap bits pending except JOBCTL_TRAP_FREEZE,
2555 	 * let's make another loop to give it a chance to be handled.
2556 	 * In any case, we'll return back.
2557 	 */
2558 	if ((current->jobctl & (JOBCTL_PENDING_MASK | JOBCTL_TRAP_FREEZE)) !=
2559 	     JOBCTL_TRAP_FREEZE) {
2560 		spin_unlock_irq(&current->sighand->siglock);
2561 		return;
2562 	}
2563 
2564 	/*
2565 	 * Now we're sure that there is no pending fatal signal and no
2566 	 * pending traps. Clear TIF_SIGPENDING to not get out of schedule()
2567 	 * immediately (if there is a non-fatal signal pending), and
2568 	 * put the task into sleep.
2569 	 */
2570 	__set_current_state(TASK_INTERRUPTIBLE|TASK_FREEZABLE);
2571 	clear_thread_flag(TIF_SIGPENDING);
2572 	spin_unlock_irq(&current->sighand->siglock);
2573 	cgroup_enter_frozen();
2574 	schedule();
2575 }
2576 
2577 static int ptrace_signal(int signr, kernel_siginfo_t *info, enum pid_type type)
2578 {
2579 	/*
2580 	 * We do not check sig_kernel_stop(signr) but set this marker
2581 	 * unconditionally because we do not know whether debugger will
2582 	 * change signr. This flag has no meaning unless we are going
2583 	 * to stop after return from ptrace_stop(). In this case it will
2584 	 * be checked in do_signal_stop(), we should only stop if it was
2585 	 * not cleared by SIGCONT while we were sleeping. See also the
2586 	 * comment in dequeue_signal().
2587 	 */
2588 	current->jobctl |= JOBCTL_STOP_DEQUEUED;
2589 	signr = ptrace_stop(signr, CLD_TRAPPED, 0, info);
2590 
2591 	/* We're back.  Did the debugger cancel the sig?  */
2592 	if (signr == 0)
2593 		return signr;
2594 
2595 	/*
2596 	 * Update the siginfo structure if the signal has
2597 	 * changed.  If the debugger wanted something
2598 	 * specific in the siginfo structure then it should
2599 	 * have updated *info via PTRACE_SETSIGINFO.
2600 	 */
2601 	if (signr != info->si_signo) {
2602 		clear_siginfo(info);
2603 		info->si_signo = signr;
2604 		info->si_errno = 0;
2605 		info->si_code = SI_USER;
2606 		rcu_read_lock();
2607 		info->si_pid = task_pid_vnr(current->parent);
2608 		info->si_uid = from_kuid_munged(current_user_ns(),
2609 						task_uid(current->parent));
2610 		rcu_read_unlock();
2611 	}
2612 
2613 	/* If the (new) signal is now blocked, requeue it.  */
2614 	if (sigismember(&current->blocked, signr) ||
2615 	    fatal_signal_pending(current)) {
2616 		send_signal_locked(signr, info, current, type);
2617 		signr = 0;
2618 	}
2619 
2620 	return signr;
2621 }
2622 
2623 static void hide_si_addr_tag_bits(struct ksignal *ksig)
2624 {
2625 	switch (siginfo_layout(ksig->sig, ksig->info.si_code)) {
2626 	case SIL_FAULT:
2627 	case SIL_FAULT_TRAPNO:
2628 	case SIL_FAULT_MCEERR:
2629 	case SIL_FAULT_BNDERR:
2630 	case SIL_FAULT_PKUERR:
2631 	case SIL_FAULT_PERF_EVENT:
2632 		ksig->info.si_addr = arch_untagged_si_addr(
2633 			ksig->info.si_addr, ksig->sig, ksig->info.si_code);
2634 		break;
2635 	case SIL_KILL:
2636 	case SIL_TIMER:
2637 	case SIL_POLL:
2638 	case SIL_CHLD:
2639 	case SIL_RT:
2640 	case SIL_SYS:
2641 		break;
2642 	}
2643 }
2644 
2645 bool get_signal(struct ksignal *ksig)
2646 {
2647 	struct sighand_struct *sighand = current->sighand;
2648 	struct signal_struct *signal = current->signal;
2649 	int signr;
2650 
2651 	clear_notify_signal();
2652 	if (unlikely(task_work_pending(current)))
2653 		task_work_run();
2654 
2655 	if (!task_sigpending(current))
2656 		return false;
2657 
2658 	if (unlikely(uprobe_deny_signal()))
2659 		return false;
2660 
2661 	/*
2662 	 * Do this once, we can't return to user-mode if freezing() == T.
2663 	 * do_signal_stop() and ptrace_stop() do freezable_schedule() and
2664 	 * thus do not need another check after return.
2665 	 */
2666 	try_to_freeze();
2667 
2668 relock:
2669 	spin_lock_irq(&sighand->siglock);
2670 
2671 	/*
2672 	 * Every stopped thread goes here after wakeup. Check to see if
2673 	 * we should notify the parent, prepare_signal(SIGCONT) encodes
2674 	 * the CLD_ si_code into SIGNAL_CLD_MASK bits.
2675 	 */
2676 	if (unlikely(signal->flags & SIGNAL_CLD_MASK)) {
2677 		int why;
2678 
2679 		if (signal->flags & SIGNAL_CLD_CONTINUED)
2680 			why = CLD_CONTINUED;
2681 		else
2682 			why = CLD_STOPPED;
2683 
2684 		signal->flags &= ~SIGNAL_CLD_MASK;
2685 
2686 		spin_unlock_irq(&sighand->siglock);
2687 
2688 		/*
2689 		 * Notify the parent that we're continuing.  This event is
2690 		 * always per-process and doesn't make whole lot of sense
2691 		 * for ptracers, who shouldn't consume the state via
2692 		 * wait(2) either, but, for backward compatibility, notify
2693 		 * the ptracer of the group leader too unless it's gonna be
2694 		 * a duplicate.
2695 		 */
2696 		read_lock(&tasklist_lock);
2697 		do_notify_parent_cldstop(current, false, why);
2698 
2699 		if (ptrace_reparented(current->group_leader))
2700 			do_notify_parent_cldstop(current->group_leader,
2701 						true, why);
2702 		read_unlock(&tasklist_lock);
2703 
2704 		goto relock;
2705 	}
2706 
2707 	for (;;) {
2708 		struct k_sigaction *ka;
2709 		enum pid_type type;
2710 
2711 		/* Has this task already been marked for death? */
2712 		if ((signal->flags & SIGNAL_GROUP_EXIT) ||
2713 		     signal->group_exec_task) {
2714 			clear_siginfo(&ksig->info);
2715 			ksig->info.si_signo = signr = SIGKILL;
2716 			sigdelset(&current->pending.signal, SIGKILL);
2717 			trace_signal_deliver(SIGKILL, SEND_SIG_NOINFO,
2718 				&sighand->action[SIGKILL - 1]);
2719 			recalc_sigpending();
2720 			goto fatal;
2721 		}
2722 
2723 		if (unlikely(current->jobctl & JOBCTL_STOP_PENDING) &&
2724 		    do_signal_stop(0))
2725 			goto relock;
2726 
2727 		if (unlikely(current->jobctl &
2728 			     (JOBCTL_TRAP_MASK | JOBCTL_TRAP_FREEZE))) {
2729 			if (current->jobctl & JOBCTL_TRAP_MASK) {
2730 				do_jobctl_trap();
2731 				spin_unlock_irq(&sighand->siglock);
2732 			} else if (current->jobctl & JOBCTL_TRAP_FREEZE)
2733 				do_freezer_trap();
2734 
2735 			goto relock;
2736 		}
2737 
2738 		/*
2739 		 * If the task is leaving the frozen state, let's update
2740 		 * cgroup counters and reset the frozen bit.
2741 		 */
2742 		if (unlikely(cgroup_task_frozen(current))) {
2743 			spin_unlock_irq(&sighand->siglock);
2744 			cgroup_leave_frozen(false);
2745 			goto relock;
2746 		}
2747 
2748 		/*
2749 		 * Signals generated by the execution of an instruction
2750 		 * need to be delivered before any other pending signals
2751 		 * so that the instruction pointer in the signal stack
2752 		 * frame points to the faulting instruction.
2753 		 */
2754 		type = PIDTYPE_PID;
2755 		signr = dequeue_synchronous_signal(&ksig->info);
2756 		if (!signr)
2757 			signr = dequeue_signal(current, &current->blocked,
2758 					       &ksig->info, &type);
2759 
2760 		if (!signr)
2761 			break; /* will return 0 */
2762 
2763 		if (unlikely(current->ptrace) && (signr != SIGKILL) &&
2764 		    !(sighand->action[signr -1].sa.sa_flags & SA_IMMUTABLE)) {
2765 			signr = ptrace_signal(signr, &ksig->info, type);
2766 			if (!signr)
2767 				continue;
2768 		}
2769 
2770 		ka = &sighand->action[signr-1];
2771 
2772 		/* Trace actually delivered signals. */
2773 		trace_signal_deliver(signr, &ksig->info, ka);
2774 
2775 		if (ka->sa.sa_handler == SIG_IGN) /* Do nothing.  */
2776 			continue;
2777 		if (ka->sa.sa_handler != SIG_DFL) {
2778 			/* Run the handler.  */
2779 			ksig->ka = *ka;
2780 
2781 			if (ka->sa.sa_flags & SA_ONESHOT)
2782 				ka->sa.sa_handler = SIG_DFL;
2783 
2784 			break; /* will return non-zero "signr" value */
2785 		}
2786 
2787 		/*
2788 		 * Now we are doing the default action for this signal.
2789 		 */
2790 		if (sig_kernel_ignore(signr)) /* Default is nothing. */
2791 			continue;
2792 
2793 		/*
2794 		 * Global init gets no signals it doesn't want.
2795 		 * Container-init gets no signals it doesn't want from same
2796 		 * container.
2797 		 *
2798 		 * Note that if global/container-init sees a sig_kernel_only()
2799 		 * signal here, the signal must have been generated internally
2800 		 * or must have come from an ancestor namespace. In either
2801 		 * case, the signal cannot be dropped.
2802 		 */
2803 		if (unlikely(signal->flags & SIGNAL_UNKILLABLE) &&
2804 				!sig_kernel_only(signr))
2805 			continue;
2806 
2807 		if (sig_kernel_stop(signr)) {
2808 			/*
2809 			 * The default action is to stop all threads in
2810 			 * the thread group.  The job control signals
2811 			 * do nothing in an orphaned pgrp, but SIGSTOP
2812 			 * always works.  Note that siglock needs to be
2813 			 * dropped during the call to is_orphaned_pgrp()
2814 			 * because of lock ordering with tasklist_lock.
2815 			 * This allows an intervening SIGCONT to be posted.
2816 			 * We need to check for that and bail out if necessary.
2817 			 */
2818 			if (signr != SIGSTOP) {
2819 				spin_unlock_irq(&sighand->siglock);
2820 
2821 				/* signals can be posted during this window */
2822 
2823 				if (is_current_pgrp_orphaned())
2824 					goto relock;
2825 
2826 				spin_lock_irq(&sighand->siglock);
2827 			}
2828 
2829 			if (likely(do_signal_stop(ksig->info.si_signo))) {
2830 				/* It released the siglock.  */
2831 				goto relock;
2832 			}
2833 
2834 			/*
2835 			 * We didn't actually stop, due to a race
2836 			 * with SIGCONT or something like that.
2837 			 */
2838 			continue;
2839 		}
2840 
2841 	fatal:
2842 		spin_unlock_irq(&sighand->siglock);
2843 		if (unlikely(cgroup_task_frozen(current)))
2844 			cgroup_leave_frozen(true);
2845 
2846 		/*
2847 		 * Anything else is fatal, maybe with a core dump.
2848 		 */
2849 		current->flags |= PF_SIGNALED;
2850 
2851 		if (sig_kernel_coredump(signr)) {
2852 			if (print_fatal_signals)
2853 				print_fatal_signal(ksig->info.si_signo);
2854 			proc_coredump_connector(current);
2855 			/*
2856 			 * If it was able to dump core, this kills all
2857 			 * other threads in the group and synchronizes with
2858 			 * their demise.  If we lost the race with another
2859 			 * thread getting here, it set group_exit_code
2860 			 * first and our do_group_exit call below will use
2861 			 * that value and ignore the one we pass it.
2862 			 */
2863 			do_coredump(&ksig->info);
2864 		}
2865 
2866 		/*
2867 		 * PF_USER_WORKER threads will catch and exit on fatal signals
2868 		 * themselves. They have cleanup that must be performed, so
2869 		 * we cannot call do_exit() on their behalf.
2870 		 */
2871 		if (current->flags & PF_USER_WORKER)
2872 			goto out;
2873 
2874 		/*
2875 		 * Death signals, no core dump.
2876 		 */
2877 		do_group_exit(ksig->info.si_signo);
2878 		/* NOTREACHED */
2879 	}
2880 	spin_unlock_irq(&sighand->siglock);
2881 out:
2882 	ksig->sig = signr;
2883 
2884 	if (!(ksig->ka.sa.sa_flags & SA_EXPOSE_TAGBITS))
2885 		hide_si_addr_tag_bits(ksig);
2886 
2887 	return ksig->sig > 0;
2888 }
2889 
2890 /**
2891  * signal_delivered - called after signal delivery to update blocked signals
2892  * @ksig:		kernel signal struct
2893  * @stepping:		nonzero if debugger single-step or block-step in use
2894  *
2895  * This function should be called when a signal has successfully been
2896  * delivered. It updates the blocked signals accordingly (@ksig->ka.sa.sa_mask
2897  * is always blocked), and the signal itself is blocked unless %SA_NODEFER
2898  * is set in @ksig->ka.sa.sa_flags.  Tracing is notified.
2899  */
2900 static void signal_delivered(struct ksignal *ksig, int stepping)
2901 {
2902 	sigset_t blocked;
2903 
2904 	/* A signal was successfully delivered, and the
2905 	   saved sigmask was stored on the signal frame,
2906 	   and will be restored by sigreturn.  So we can
2907 	   simply clear the restore sigmask flag.  */
2908 	clear_restore_sigmask();
2909 
2910 	sigorsets(&blocked, &current->blocked, &ksig->ka.sa.sa_mask);
2911 	if (!(ksig->ka.sa.sa_flags & SA_NODEFER))
2912 		sigaddset(&blocked, ksig->sig);
2913 	set_current_blocked(&blocked);
2914 	if (current->sas_ss_flags & SS_AUTODISARM)
2915 		sas_ss_reset(current);
2916 	if (stepping)
2917 		ptrace_notify(SIGTRAP, 0);
2918 }
2919 
2920 void signal_setup_done(int failed, struct ksignal *ksig, int stepping)
2921 {
2922 	if (failed)
2923 		force_sigsegv(ksig->sig);
2924 	else
2925 		signal_delivered(ksig, stepping);
2926 }
2927 
2928 /*
2929  * It could be that complete_signal() picked us to notify about the
2930  * group-wide signal. Other threads should be notified now to take
2931  * the shared signals in @which since we will not.
2932  */
2933 static void retarget_shared_pending(struct task_struct *tsk, sigset_t *which)
2934 {
2935 	sigset_t retarget;
2936 	struct task_struct *t;
2937 
2938 	sigandsets(&retarget, &tsk->signal->shared_pending.signal, which);
2939 	if (sigisemptyset(&retarget))
2940 		return;
2941 
2942 	t = tsk;
2943 	while_each_thread(tsk, t) {
2944 		if (t->flags & PF_EXITING)
2945 			continue;
2946 
2947 		if (!has_pending_signals(&retarget, &t->blocked))
2948 			continue;
2949 		/* Remove the signals this thread can handle. */
2950 		sigandsets(&retarget, &retarget, &t->blocked);
2951 
2952 		if (!task_sigpending(t))
2953 			signal_wake_up(t, 0);
2954 
2955 		if (sigisemptyset(&retarget))
2956 			break;
2957 	}
2958 }
2959 
2960 void exit_signals(struct task_struct *tsk)
2961 {
2962 	int group_stop = 0;
2963 	sigset_t unblocked;
2964 
2965 	/*
2966 	 * @tsk is about to have PF_EXITING set - lock out users which
2967 	 * expect stable threadgroup.
2968 	 */
2969 	cgroup_threadgroup_change_begin(tsk);
2970 
2971 	if (thread_group_empty(tsk) || (tsk->signal->flags & SIGNAL_GROUP_EXIT)) {
2972 		sched_mm_cid_exit_signals(tsk);
2973 		tsk->flags |= PF_EXITING;
2974 		cgroup_threadgroup_change_end(tsk);
2975 		return;
2976 	}
2977 
2978 	spin_lock_irq(&tsk->sighand->siglock);
2979 	/*
2980 	 * From now this task is not visible for group-wide signals,
2981 	 * see wants_signal(), do_signal_stop().
2982 	 */
2983 	sched_mm_cid_exit_signals(tsk);
2984 	tsk->flags |= PF_EXITING;
2985 
2986 	cgroup_threadgroup_change_end(tsk);
2987 
2988 	if (!task_sigpending(tsk))
2989 		goto out;
2990 
2991 	unblocked = tsk->blocked;
2992 	signotset(&unblocked);
2993 	retarget_shared_pending(tsk, &unblocked);
2994 
2995 	if (unlikely(tsk->jobctl & JOBCTL_STOP_PENDING) &&
2996 	    task_participate_group_stop(tsk))
2997 		group_stop = CLD_STOPPED;
2998 out:
2999 	spin_unlock_irq(&tsk->sighand->siglock);
3000 
3001 	/*
3002 	 * If group stop has completed, deliver the notification.  This
3003 	 * should always go to the real parent of the group leader.
3004 	 */
3005 	if (unlikely(group_stop)) {
3006 		read_lock(&tasklist_lock);
3007 		do_notify_parent_cldstop(tsk, false, group_stop);
3008 		read_unlock(&tasklist_lock);
3009 	}
3010 }
3011 
3012 /*
3013  * System call entry points.
3014  */
3015 
3016 /**
3017  *  sys_restart_syscall - restart a system call
3018  */
3019 SYSCALL_DEFINE0(restart_syscall)
3020 {
3021 	struct restart_block *restart = &current->restart_block;
3022 	return restart->fn(restart);
3023 }
3024 
3025 long do_no_restart_syscall(struct restart_block *param)
3026 {
3027 	return -EINTR;
3028 }
3029 
3030 static void __set_task_blocked(struct task_struct *tsk, const sigset_t *newset)
3031 {
3032 	if (task_sigpending(tsk) && !thread_group_empty(tsk)) {
3033 		sigset_t newblocked;
3034 		/* A set of now blocked but previously unblocked signals. */
3035 		sigandnsets(&newblocked, newset, &current->blocked);
3036 		retarget_shared_pending(tsk, &newblocked);
3037 	}
3038 	tsk->blocked = *newset;
3039 	recalc_sigpending();
3040 }
3041 
3042 /**
3043  * set_current_blocked - change current->blocked mask
3044  * @newset: new mask
3045  *
3046  * It is wrong to change ->blocked directly, this helper should be used
3047  * to ensure the process can't miss a shared signal we are going to block.
3048  */
3049 void set_current_blocked(sigset_t *newset)
3050 {
3051 	sigdelsetmask(newset, sigmask(SIGKILL) | sigmask(SIGSTOP));
3052 	__set_current_blocked(newset);
3053 }
3054 
3055 void __set_current_blocked(const sigset_t *newset)
3056 {
3057 	struct task_struct *tsk = current;
3058 
3059 	/*
3060 	 * In case the signal mask hasn't changed, there is nothing we need
3061 	 * to do. The current->blocked shouldn't be modified by other task.
3062 	 */
3063 	if (sigequalsets(&tsk->blocked, newset))
3064 		return;
3065 
3066 	spin_lock_irq(&tsk->sighand->siglock);
3067 	__set_task_blocked(tsk, newset);
3068 	spin_unlock_irq(&tsk->sighand->siglock);
3069 }
3070 
3071 /*
3072  * This is also useful for kernel threads that want to temporarily
3073  * (or permanently) block certain signals.
3074  *
3075  * NOTE! Unlike the user-mode sys_sigprocmask(), the kernel
3076  * interface happily blocks "unblockable" signals like SIGKILL
3077  * and friends.
3078  */
3079 int sigprocmask(int how, sigset_t *set, sigset_t *oldset)
3080 {
3081 	struct task_struct *tsk = current;
3082 	sigset_t newset;
3083 
3084 	/* Lockless, only current can change ->blocked, never from irq */
3085 	if (oldset)
3086 		*oldset = tsk->blocked;
3087 
3088 	switch (how) {
3089 	case SIG_BLOCK:
3090 		sigorsets(&newset, &tsk->blocked, set);
3091 		break;
3092 	case SIG_UNBLOCK:
3093 		sigandnsets(&newset, &tsk->blocked, set);
3094 		break;
3095 	case SIG_SETMASK:
3096 		newset = *set;
3097 		break;
3098 	default:
3099 		return -EINVAL;
3100 	}
3101 
3102 	__set_current_blocked(&newset);
3103 	return 0;
3104 }
3105 EXPORT_SYMBOL(sigprocmask);
3106 
3107 /*
3108  * The api helps set app-provided sigmasks.
3109  *
3110  * This is useful for syscalls such as ppoll, pselect, io_pgetevents and
3111  * epoll_pwait where a new sigmask is passed from userland for the syscalls.
3112  *
3113  * Note that it does set_restore_sigmask() in advance, so it must be always
3114  * paired with restore_saved_sigmask_unless() before return from syscall.
3115  */
3116 int set_user_sigmask(const sigset_t __user *umask, size_t sigsetsize)
3117 {
3118 	sigset_t kmask;
3119 
3120 	if (!umask)
3121 		return 0;
3122 	if (sigsetsize != sizeof(sigset_t))
3123 		return -EINVAL;
3124 	if (copy_from_user(&kmask, umask, sizeof(sigset_t)))
3125 		return -EFAULT;
3126 
3127 	set_restore_sigmask();
3128 	current->saved_sigmask = current->blocked;
3129 	set_current_blocked(&kmask);
3130 
3131 	return 0;
3132 }
3133 
3134 #ifdef CONFIG_COMPAT
3135 int set_compat_user_sigmask(const compat_sigset_t __user *umask,
3136 			    size_t sigsetsize)
3137 {
3138 	sigset_t kmask;
3139 
3140 	if (!umask)
3141 		return 0;
3142 	if (sigsetsize != sizeof(compat_sigset_t))
3143 		return -EINVAL;
3144 	if (get_compat_sigset(&kmask, umask))
3145 		return -EFAULT;
3146 
3147 	set_restore_sigmask();
3148 	current->saved_sigmask = current->blocked;
3149 	set_current_blocked(&kmask);
3150 
3151 	return 0;
3152 }
3153 #endif
3154 
3155 /**
3156  *  sys_rt_sigprocmask - change the list of currently blocked signals
3157  *  @how: whether to add, remove, or set signals
3158  *  @nset: stores pending signals
3159  *  @oset: previous value of signal mask if non-null
3160  *  @sigsetsize: size of sigset_t type
3161  */
3162 SYSCALL_DEFINE4(rt_sigprocmask, int, how, sigset_t __user *, nset,
3163 		sigset_t __user *, oset, size_t, sigsetsize)
3164 {
3165 	sigset_t old_set, new_set;
3166 	int error;
3167 
3168 	/* XXX: Don't preclude handling different sized sigset_t's.  */
3169 	if (sigsetsize != sizeof(sigset_t))
3170 		return -EINVAL;
3171 
3172 	old_set = current->blocked;
3173 
3174 	if (nset) {
3175 		if (copy_from_user(&new_set, nset, sizeof(sigset_t)))
3176 			return -EFAULT;
3177 		sigdelsetmask(&new_set, sigmask(SIGKILL)|sigmask(SIGSTOP));
3178 
3179 		error = sigprocmask(how, &new_set, NULL);
3180 		if (error)
3181 			return error;
3182 	}
3183 
3184 	if (oset) {
3185 		if (copy_to_user(oset, &old_set, sizeof(sigset_t)))
3186 			return -EFAULT;
3187 	}
3188 
3189 	return 0;
3190 }
3191 
3192 #ifdef CONFIG_COMPAT
3193 COMPAT_SYSCALL_DEFINE4(rt_sigprocmask, int, how, compat_sigset_t __user *, nset,
3194 		compat_sigset_t __user *, oset, compat_size_t, sigsetsize)
3195 {
3196 	sigset_t old_set = current->blocked;
3197 
3198 	/* XXX: Don't preclude handling different sized sigset_t's.  */
3199 	if (sigsetsize != sizeof(sigset_t))
3200 		return -EINVAL;
3201 
3202 	if (nset) {
3203 		sigset_t new_set;
3204 		int error;
3205 		if (get_compat_sigset(&new_set, nset))
3206 			return -EFAULT;
3207 		sigdelsetmask(&new_set, sigmask(SIGKILL)|sigmask(SIGSTOP));
3208 
3209 		error = sigprocmask(how, &new_set, NULL);
3210 		if (error)
3211 			return error;
3212 	}
3213 	return oset ? put_compat_sigset(oset, &old_set, sizeof(*oset)) : 0;
3214 }
3215 #endif
3216 
3217 static void do_sigpending(sigset_t *set)
3218 {
3219 	spin_lock_irq(&current->sighand->siglock);
3220 	sigorsets(set, &current->pending.signal,
3221 		  &current->signal->shared_pending.signal);
3222 	spin_unlock_irq(&current->sighand->siglock);
3223 
3224 	/* Outside the lock because only this thread touches it.  */
3225 	sigandsets(set, &current->blocked, set);
3226 }
3227 
3228 /**
3229  *  sys_rt_sigpending - examine a pending signal that has been raised
3230  *			while blocked
3231  *  @uset: stores pending signals
3232  *  @sigsetsize: size of sigset_t type or larger
3233  */
3234 SYSCALL_DEFINE2(rt_sigpending, sigset_t __user *, uset, size_t, sigsetsize)
3235 {
3236 	sigset_t set;
3237 
3238 	if (sigsetsize > sizeof(*uset))
3239 		return -EINVAL;
3240 
3241 	do_sigpending(&set);
3242 
3243 	if (copy_to_user(uset, &set, sigsetsize))
3244 		return -EFAULT;
3245 
3246 	return 0;
3247 }
3248 
3249 #ifdef CONFIG_COMPAT
3250 COMPAT_SYSCALL_DEFINE2(rt_sigpending, compat_sigset_t __user *, uset,
3251 		compat_size_t, sigsetsize)
3252 {
3253 	sigset_t set;
3254 
3255 	if (sigsetsize > sizeof(*uset))
3256 		return -EINVAL;
3257 
3258 	do_sigpending(&set);
3259 
3260 	return put_compat_sigset(uset, &set, sigsetsize);
3261 }
3262 #endif
3263 
3264 static const struct {
3265 	unsigned char limit, layout;
3266 } sig_sicodes[] = {
3267 	[SIGILL]  = { NSIGILL,  SIL_FAULT },
3268 	[SIGFPE]  = { NSIGFPE,  SIL_FAULT },
3269 	[SIGSEGV] = { NSIGSEGV, SIL_FAULT },
3270 	[SIGBUS]  = { NSIGBUS,  SIL_FAULT },
3271 	[SIGTRAP] = { NSIGTRAP, SIL_FAULT },
3272 #if defined(SIGEMT)
3273 	[SIGEMT]  = { NSIGEMT,  SIL_FAULT },
3274 #endif
3275 	[SIGCHLD] = { NSIGCHLD, SIL_CHLD },
3276 	[SIGPOLL] = { NSIGPOLL, SIL_POLL },
3277 	[SIGSYS]  = { NSIGSYS,  SIL_SYS },
3278 };
3279 
3280 static bool known_siginfo_layout(unsigned sig, int si_code)
3281 {
3282 	if (si_code == SI_KERNEL)
3283 		return true;
3284 	else if ((si_code > SI_USER)) {
3285 		if (sig_specific_sicodes(sig)) {
3286 			if (si_code <= sig_sicodes[sig].limit)
3287 				return true;
3288 		}
3289 		else if (si_code <= NSIGPOLL)
3290 			return true;
3291 	}
3292 	else if (si_code >= SI_DETHREAD)
3293 		return true;
3294 	else if (si_code == SI_ASYNCNL)
3295 		return true;
3296 	return false;
3297 }
3298 
3299 enum siginfo_layout siginfo_layout(unsigned sig, int si_code)
3300 {
3301 	enum siginfo_layout layout = SIL_KILL;
3302 	if ((si_code > SI_USER) && (si_code < SI_KERNEL)) {
3303 		if ((sig < ARRAY_SIZE(sig_sicodes)) &&
3304 		    (si_code <= sig_sicodes[sig].limit)) {
3305 			layout = sig_sicodes[sig].layout;
3306 			/* Handle the exceptions */
3307 			if ((sig == SIGBUS) &&
3308 			    (si_code >= BUS_MCEERR_AR) && (si_code <= BUS_MCEERR_AO))
3309 				layout = SIL_FAULT_MCEERR;
3310 			else if ((sig == SIGSEGV) && (si_code == SEGV_BNDERR))
3311 				layout = SIL_FAULT_BNDERR;
3312 #ifdef SEGV_PKUERR
3313 			else if ((sig == SIGSEGV) && (si_code == SEGV_PKUERR))
3314 				layout = SIL_FAULT_PKUERR;
3315 #endif
3316 			else if ((sig == SIGTRAP) && (si_code == TRAP_PERF))
3317 				layout = SIL_FAULT_PERF_EVENT;
3318 			else if (IS_ENABLED(CONFIG_SPARC) &&
3319 				 (sig == SIGILL) && (si_code == ILL_ILLTRP))
3320 				layout = SIL_FAULT_TRAPNO;
3321 			else if (IS_ENABLED(CONFIG_ALPHA) &&
3322 				 ((sig == SIGFPE) ||
3323 				  ((sig == SIGTRAP) && (si_code == TRAP_UNK))))
3324 				layout = SIL_FAULT_TRAPNO;
3325 		}
3326 		else if (si_code <= NSIGPOLL)
3327 			layout = SIL_POLL;
3328 	} else {
3329 		if (si_code == SI_TIMER)
3330 			layout = SIL_TIMER;
3331 		else if (si_code == SI_SIGIO)
3332 			layout = SIL_POLL;
3333 		else if (si_code < 0)
3334 			layout = SIL_RT;
3335 	}
3336 	return layout;
3337 }
3338 
3339 static inline char __user *si_expansion(const siginfo_t __user *info)
3340 {
3341 	return ((char __user *)info) + sizeof(struct kernel_siginfo);
3342 }
3343 
3344 int copy_siginfo_to_user(siginfo_t __user *to, const kernel_siginfo_t *from)
3345 {
3346 	char __user *expansion = si_expansion(to);
3347 	if (copy_to_user(to, from , sizeof(struct kernel_siginfo)))
3348 		return -EFAULT;
3349 	if (clear_user(expansion, SI_EXPANSION_SIZE))
3350 		return -EFAULT;
3351 	return 0;
3352 }
3353 
3354 static int post_copy_siginfo_from_user(kernel_siginfo_t *info,
3355 				       const siginfo_t __user *from)
3356 {
3357 	if (unlikely(!known_siginfo_layout(info->si_signo, info->si_code))) {
3358 		char __user *expansion = si_expansion(from);
3359 		char buf[SI_EXPANSION_SIZE];
3360 		int i;
3361 		/*
3362 		 * An unknown si_code might need more than
3363 		 * sizeof(struct kernel_siginfo) bytes.  Verify all of the
3364 		 * extra bytes are 0.  This guarantees copy_siginfo_to_user
3365 		 * will return this data to userspace exactly.
3366 		 */
3367 		if (copy_from_user(&buf, expansion, SI_EXPANSION_SIZE))
3368 			return -EFAULT;
3369 		for (i = 0; i < SI_EXPANSION_SIZE; i++) {
3370 			if (buf[i] != 0)
3371 				return -E2BIG;
3372 		}
3373 	}
3374 	return 0;
3375 }
3376 
3377 static int __copy_siginfo_from_user(int signo, kernel_siginfo_t *to,
3378 				    const siginfo_t __user *from)
3379 {
3380 	if (copy_from_user(to, from, sizeof(struct kernel_siginfo)))
3381 		return -EFAULT;
3382 	to->si_signo = signo;
3383 	return post_copy_siginfo_from_user(to, from);
3384 }
3385 
3386 int copy_siginfo_from_user(kernel_siginfo_t *to, const siginfo_t __user *from)
3387 {
3388 	if (copy_from_user(to, from, sizeof(struct kernel_siginfo)))
3389 		return -EFAULT;
3390 	return post_copy_siginfo_from_user(to, from);
3391 }
3392 
3393 #ifdef CONFIG_COMPAT
3394 /**
3395  * copy_siginfo_to_external32 - copy a kernel siginfo into a compat user siginfo
3396  * @to: compat siginfo destination
3397  * @from: kernel siginfo source
3398  *
3399  * Note: This function does not work properly for the SIGCHLD on x32, but
3400  * fortunately it doesn't have to.  The only valid callers for this function are
3401  * copy_siginfo_to_user32, which is overriden for x32 and the coredump code.
3402  * The latter does not care because SIGCHLD will never cause a coredump.
3403  */
3404 void copy_siginfo_to_external32(struct compat_siginfo *to,
3405 		const struct kernel_siginfo *from)
3406 {
3407 	memset(to, 0, sizeof(*to));
3408 
3409 	to->si_signo = from->si_signo;
3410 	to->si_errno = from->si_errno;
3411 	to->si_code  = from->si_code;
3412 	switch(siginfo_layout(from->si_signo, from->si_code)) {
3413 	case SIL_KILL:
3414 		to->si_pid = from->si_pid;
3415 		to->si_uid = from->si_uid;
3416 		break;
3417 	case SIL_TIMER:
3418 		to->si_tid     = from->si_tid;
3419 		to->si_overrun = from->si_overrun;
3420 		to->si_int     = from->si_int;
3421 		break;
3422 	case SIL_POLL:
3423 		to->si_band = from->si_band;
3424 		to->si_fd   = from->si_fd;
3425 		break;
3426 	case SIL_FAULT:
3427 		to->si_addr = ptr_to_compat(from->si_addr);
3428 		break;
3429 	case SIL_FAULT_TRAPNO:
3430 		to->si_addr = ptr_to_compat(from->si_addr);
3431 		to->si_trapno = from->si_trapno;
3432 		break;
3433 	case SIL_FAULT_MCEERR:
3434 		to->si_addr = ptr_to_compat(from->si_addr);
3435 		to->si_addr_lsb = from->si_addr_lsb;
3436 		break;
3437 	case SIL_FAULT_BNDERR:
3438 		to->si_addr = ptr_to_compat(from->si_addr);
3439 		to->si_lower = ptr_to_compat(from->si_lower);
3440 		to->si_upper = ptr_to_compat(from->si_upper);
3441 		break;
3442 	case SIL_FAULT_PKUERR:
3443 		to->si_addr = ptr_to_compat(from->si_addr);
3444 		to->si_pkey = from->si_pkey;
3445 		break;
3446 	case SIL_FAULT_PERF_EVENT:
3447 		to->si_addr = ptr_to_compat(from->si_addr);
3448 		to->si_perf_data = from->si_perf_data;
3449 		to->si_perf_type = from->si_perf_type;
3450 		to->si_perf_flags = from->si_perf_flags;
3451 		break;
3452 	case SIL_CHLD:
3453 		to->si_pid = from->si_pid;
3454 		to->si_uid = from->si_uid;
3455 		to->si_status = from->si_status;
3456 		to->si_utime = from->si_utime;
3457 		to->si_stime = from->si_stime;
3458 		break;
3459 	case SIL_RT:
3460 		to->si_pid = from->si_pid;
3461 		to->si_uid = from->si_uid;
3462 		to->si_int = from->si_int;
3463 		break;
3464 	case SIL_SYS:
3465 		to->si_call_addr = ptr_to_compat(from->si_call_addr);
3466 		to->si_syscall   = from->si_syscall;
3467 		to->si_arch      = from->si_arch;
3468 		break;
3469 	}
3470 }
3471 
3472 int __copy_siginfo_to_user32(struct compat_siginfo __user *to,
3473 			   const struct kernel_siginfo *from)
3474 {
3475 	struct compat_siginfo new;
3476 
3477 	copy_siginfo_to_external32(&new, from);
3478 	if (copy_to_user(to, &new, sizeof(struct compat_siginfo)))
3479 		return -EFAULT;
3480 	return 0;
3481 }
3482 
3483 static int post_copy_siginfo_from_user32(kernel_siginfo_t *to,
3484 					 const struct compat_siginfo *from)
3485 {
3486 	clear_siginfo(to);
3487 	to->si_signo = from->si_signo;
3488 	to->si_errno = from->si_errno;
3489 	to->si_code  = from->si_code;
3490 	switch(siginfo_layout(from->si_signo, from->si_code)) {
3491 	case SIL_KILL:
3492 		to->si_pid = from->si_pid;
3493 		to->si_uid = from->si_uid;
3494 		break;
3495 	case SIL_TIMER:
3496 		to->si_tid     = from->si_tid;
3497 		to->si_overrun = from->si_overrun;
3498 		to->si_int     = from->si_int;
3499 		break;
3500 	case SIL_POLL:
3501 		to->si_band = from->si_band;
3502 		to->si_fd   = from->si_fd;
3503 		break;
3504 	case SIL_FAULT:
3505 		to->si_addr = compat_ptr(from->si_addr);
3506 		break;
3507 	case SIL_FAULT_TRAPNO:
3508 		to->si_addr = compat_ptr(from->si_addr);
3509 		to->si_trapno = from->si_trapno;
3510 		break;
3511 	case SIL_FAULT_MCEERR:
3512 		to->si_addr = compat_ptr(from->si_addr);
3513 		to->si_addr_lsb = from->si_addr_lsb;
3514 		break;
3515 	case SIL_FAULT_BNDERR:
3516 		to->si_addr = compat_ptr(from->si_addr);
3517 		to->si_lower = compat_ptr(from->si_lower);
3518 		to->si_upper = compat_ptr(from->si_upper);
3519 		break;
3520 	case SIL_FAULT_PKUERR:
3521 		to->si_addr = compat_ptr(from->si_addr);
3522 		to->si_pkey = from->si_pkey;
3523 		break;
3524 	case SIL_FAULT_PERF_EVENT:
3525 		to->si_addr = compat_ptr(from->si_addr);
3526 		to->si_perf_data = from->si_perf_data;
3527 		to->si_perf_type = from->si_perf_type;
3528 		to->si_perf_flags = from->si_perf_flags;
3529 		break;
3530 	case SIL_CHLD:
3531 		to->si_pid    = from->si_pid;
3532 		to->si_uid    = from->si_uid;
3533 		to->si_status = from->si_status;
3534 #ifdef CONFIG_X86_X32_ABI
3535 		if (in_x32_syscall()) {
3536 			to->si_utime = from->_sifields._sigchld_x32._utime;
3537 			to->si_stime = from->_sifields._sigchld_x32._stime;
3538 		} else
3539 #endif
3540 		{
3541 			to->si_utime = from->si_utime;
3542 			to->si_stime = from->si_stime;
3543 		}
3544 		break;
3545 	case SIL_RT:
3546 		to->si_pid = from->si_pid;
3547 		to->si_uid = from->si_uid;
3548 		to->si_int = from->si_int;
3549 		break;
3550 	case SIL_SYS:
3551 		to->si_call_addr = compat_ptr(from->si_call_addr);
3552 		to->si_syscall   = from->si_syscall;
3553 		to->si_arch      = from->si_arch;
3554 		break;
3555 	}
3556 	return 0;
3557 }
3558 
3559 static int __copy_siginfo_from_user32(int signo, struct kernel_siginfo *to,
3560 				      const struct compat_siginfo __user *ufrom)
3561 {
3562 	struct compat_siginfo from;
3563 
3564 	if (copy_from_user(&from, ufrom, sizeof(struct compat_siginfo)))
3565 		return -EFAULT;
3566 
3567 	from.si_signo = signo;
3568 	return post_copy_siginfo_from_user32(to, &from);
3569 }
3570 
3571 int copy_siginfo_from_user32(struct kernel_siginfo *to,
3572 			     const struct compat_siginfo __user *ufrom)
3573 {
3574 	struct compat_siginfo from;
3575 
3576 	if (copy_from_user(&from, ufrom, sizeof(struct compat_siginfo)))
3577 		return -EFAULT;
3578 
3579 	return post_copy_siginfo_from_user32(to, &from);
3580 }
3581 #endif /* CONFIG_COMPAT */
3582 
3583 /**
3584  *  do_sigtimedwait - wait for queued signals specified in @which
3585  *  @which: queued signals to wait for
3586  *  @info: if non-null, the signal's siginfo is returned here
3587  *  @ts: upper bound on process time suspension
3588  */
3589 static int do_sigtimedwait(const sigset_t *which, kernel_siginfo_t *info,
3590 		    const struct timespec64 *ts)
3591 {
3592 	ktime_t *to = NULL, timeout = KTIME_MAX;
3593 	struct task_struct *tsk = current;
3594 	sigset_t mask = *which;
3595 	enum pid_type type;
3596 	int sig, ret = 0;
3597 
3598 	if (ts) {
3599 		if (!timespec64_valid(ts))
3600 			return -EINVAL;
3601 		timeout = timespec64_to_ktime(*ts);
3602 		to = &timeout;
3603 	}
3604 
3605 	/*
3606 	 * Invert the set of allowed signals to get those we want to block.
3607 	 */
3608 	sigdelsetmask(&mask, sigmask(SIGKILL) | sigmask(SIGSTOP));
3609 	signotset(&mask);
3610 
3611 	spin_lock_irq(&tsk->sighand->siglock);
3612 	sig = dequeue_signal(tsk, &mask, info, &type);
3613 	if (!sig && timeout) {
3614 		/*
3615 		 * None ready, temporarily unblock those we're interested
3616 		 * while we are sleeping in so that we'll be awakened when
3617 		 * they arrive. Unblocking is always fine, we can avoid
3618 		 * set_current_blocked().
3619 		 */
3620 		tsk->real_blocked = tsk->blocked;
3621 		sigandsets(&tsk->blocked, &tsk->blocked, &mask);
3622 		recalc_sigpending();
3623 		spin_unlock_irq(&tsk->sighand->siglock);
3624 
3625 		__set_current_state(TASK_INTERRUPTIBLE|TASK_FREEZABLE);
3626 		ret = schedule_hrtimeout_range(to, tsk->timer_slack_ns,
3627 					       HRTIMER_MODE_REL);
3628 		spin_lock_irq(&tsk->sighand->siglock);
3629 		__set_task_blocked(tsk, &tsk->real_blocked);
3630 		sigemptyset(&tsk->real_blocked);
3631 		sig = dequeue_signal(tsk, &mask, info, &type);
3632 	}
3633 	spin_unlock_irq(&tsk->sighand->siglock);
3634 
3635 	if (sig)
3636 		return sig;
3637 	return ret ? -EINTR : -EAGAIN;
3638 }
3639 
3640 /**
3641  *  sys_rt_sigtimedwait - synchronously wait for queued signals specified
3642  *			in @uthese
3643  *  @uthese: queued signals to wait for
3644  *  @uinfo: if non-null, the signal's siginfo is returned here
3645  *  @uts: upper bound on process time suspension
3646  *  @sigsetsize: size of sigset_t type
3647  */
3648 SYSCALL_DEFINE4(rt_sigtimedwait, const sigset_t __user *, uthese,
3649 		siginfo_t __user *, uinfo,
3650 		const struct __kernel_timespec __user *, uts,
3651 		size_t, sigsetsize)
3652 {
3653 	sigset_t these;
3654 	struct timespec64 ts;
3655 	kernel_siginfo_t info;
3656 	int ret;
3657 
3658 	/* XXX: Don't preclude handling different sized sigset_t's.  */
3659 	if (sigsetsize != sizeof(sigset_t))
3660 		return -EINVAL;
3661 
3662 	if (copy_from_user(&these, uthese, sizeof(these)))
3663 		return -EFAULT;
3664 
3665 	if (uts) {
3666 		if (get_timespec64(&ts, uts))
3667 			return -EFAULT;
3668 	}
3669 
3670 	ret = do_sigtimedwait(&these, &info, uts ? &ts : NULL);
3671 
3672 	if (ret > 0 && uinfo) {
3673 		if (copy_siginfo_to_user(uinfo, &info))
3674 			ret = -EFAULT;
3675 	}
3676 
3677 	return ret;
3678 }
3679 
3680 #ifdef CONFIG_COMPAT_32BIT_TIME
3681 SYSCALL_DEFINE4(rt_sigtimedwait_time32, const sigset_t __user *, uthese,
3682 		siginfo_t __user *, uinfo,
3683 		const struct old_timespec32 __user *, uts,
3684 		size_t, sigsetsize)
3685 {
3686 	sigset_t these;
3687 	struct timespec64 ts;
3688 	kernel_siginfo_t info;
3689 	int ret;
3690 
3691 	if (sigsetsize != sizeof(sigset_t))
3692 		return -EINVAL;
3693 
3694 	if (copy_from_user(&these, uthese, sizeof(these)))
3695 		return -EFAULT;
3696 
3697 	if (uts) {
3698 		if (get_old_timespec32(&ts, uts))
3699 			return -EFAULT;
3700 	}
3701 
3702 	ret = do_sigtimedwait(&these, &info, uts ? &ts : NULL);
3703 
3704 	if (ret > 0 && uinfo) {
3705 		if (copy_siginfo_to_user(uinfo, &info))
3706 			ret = -EFAULT;
3707 	}
3708 
3709 	return ret;
3710 }
3711 #endif
3712 
3713 #ifdef CONFIG_COMPAT
3714 COMPAT_SYSCALL_DEFINE4(rt_sigtimedwait_time64, compat_sigset_t __user *, uthese,
3715 		struct compat_siginfo __user *, uinfo,
3716 		struct __kernel_timespec __user *, uts, compat_size_t, sigsetsize)
3717 {
3718 	sigset_t s;
3719 	struct timespec64 t;
3720 	kernel_siginfo_t info;
3721 	long ret;
3722 
3723 	if (sigsetsize != sizeof(sigset_t))
3724 		return -EINVAL;
3725 
3726 	if (get_compat_sigset(&s, uthese))
3727 		return -EFAULT;
3728 
3729 	if (uts) {
3730 		if (get_timespec64(&t, uts))
3731 			return -EFAULT;
3732 	}
3733 
3734 	ret = do_sigtimedwait(&s, &info, uts ? &t : NULL);
3735 
3736 	if (ret > 0 && uinfo) {
3737 		if (copy_siginfo_to_user32(uinfo, &info))
3738 			ret = -EFAULT;
3739 	}
3740 
3741 	return ret;
3742 }
3743 
3744 #ifdef CONFIG_COMPAT_32BIT_TIME
3745 COMPAT_SYSCALL_DEFINE4(rt_sigtimedwait_time32, compat_sigset_t __user *, uthese,
3746 		struct compat_siginfo __user *, uinfo,
3747 		struct old_timespec32 __user *, uts, compat_size_t, sigsetsize)
3748 {
3749 	sigset_t s;
3750 	struct timespec64 t;
3751 	kernel_siginfo_t info;
3752 	long ret;
3753 
3754 	if (sigsetsize != sizeof(sigset_t))
3755 		return -EINVAL;
3756 
3757 	if (get_compat_sigset(&s, uthese))
3758 		return -EFAULT;
3759 
3760 	if (uts) {
3761 		if (get_old_timespec32(&t, uts))
3762 			return -EFAULT;
3763 	}
3764 
3765 	ret = do_sigtimedwait(&s, &info, uts ? &t : NULL);
3766 
3767 	if (ret > 0 && uinfo) {
3768 		if (copy_siginfo_to_user32(uinfo, &info))
3769 			ret = -EFAULT;
3770 	}
3771 
3772 	return ret;
3773 }
3774 #endif
3775 #endif
3776 
3777 static inline void prepare_kill_siginfo(int sig, struct kernel_siginfo *info)
3778 {
3779 	clear_siginfo(info);
3780 	info->si_signo = sig;
3781 	info->si_errno = 0;
3782 	info->si_code = SI_USER;
3783 	info->si_pid = task_tgid_vnr(current);
3784 	info->si_uid = from_kuid_munged(current_user_ns(), current_uid());
3785 }
3786 
3787 /**
3788  *  sys_kill - send a signal to a process
3789  *  @pid: the PID of the process
3790  *  @sig: signal to be sent
3791  */
3792 SYSCALL_DEFINE2(kill, pid_t, pid, int, sig)
3793 {
3794 	struct kernel_siginfo info;
3795 
3796 	prepare_kill_siginfo(sig, &info);
3797 
3798 	return kill_something_info(sig, &info, pid);
3799 }
3800 
3801 /*
3802  * Verify that the signaler and signalee either are in the same pid namespace
3803  * or that the signaler's pid namespace is an ancestor of the signalee's pid
3804  * namespace.
3805  */
3806 static bool access_pidfd_pidns(struct pid *pid)
3807 {
3808 	struct pid_namespace *active = task_active_pid_ns(current);
3809 	struct pid_namespace *p = ns_of_pid(pid);
3810 
3811 	for (;;) {
3812 		if (!p)
3813 			return false;
3814 		if (p == active)
3815 			break;
3816 		p = p->parent;
3817 	}
3818 
3819 	return true;
3820 }
3821 
3822 static int copy_siginfo_from_user_any(kernel_siginfo_t *kinfo,
3823 		siginfo_t __user *info)
3824 {
3825 #ifdef CONFIG_COMPAT
3826 	/*
3827 	 * Avoid hooking up compat syscalls and instead handle necessary
3828 	 * conversions here. Note, this is a stop-gap measure and should not be
3829 	 * considered a generic solution.
3830 	 */
3831 	if (in_compat_syscall())
3832 		return copy_siginfo_from_user32(
3833 			kinfo, (struct compat_siginfo __user *)info);
3834 #endif
3835 	return copy_siginfo_from_user(kinfo, info);
3836 }
3837 
3838 static struct pid *pidfd_to_pid(const struct file *file)
3839 {
3840 	struct pid *pid;
3841 
3842 	pid = pidfd_pid(file);
3843 	if (!IS_ERR(pid))
3844 		return pid;
3845 
3846 	return tgid_pidfd_to_pid(file);
3847 }
3848 
3849 /**
3850  * sys_pidfd_send_signal - Signal a process through a pidfd
3851  * @pidfd:  file descriptor of the process
3852  * @sig:    signal to send
3853  * @info:   signal info
3854  * @flags:  future flags
3855  *
3856  * The syscall currently only signals via PIDTYPE_PID which covers
3857  * kill(<positive-pid>, <signal>. It does not signal threads or process
3858  * groups.
3859  * In order to extend the syscall to threads and process groups the @flags
3860  * argument should be used. In essence, the @flags argument will determine
3861  * what is signaled and not the file descriptor itself. Put in other words,
3862  * grouping is a property of the flags argument not a property of the file
3863  * descriptor.
3864  *
3865  * Return: 0 on success, negative errno on failure
3866  */
3867 SYSCALL_DEFINE4(pidfd_send_signal, int, pidfd, int, sig,
3868 		siginfo_t __user *, info, unsigned int, flags)
3869 {
3870 	int ret;
3871 	struct fd f;
3872 	struct pid *pid;
3873 	kernel_siginfo_t kinfo;
3874 
3875 	/* Enforce flags be set to 0 until we add an extension. */
3876 	if (flags)
3877 		return -EINVAL;
3878 
3879 	f = fdget(pidfd);
3880 	if (!f.file)
3881 		return -EBADF;
3882 
3883 	/* Is this a pidfd? */
3884 	pid = pidfd_to_pid(f.file);
3885 	if (IS_ERR(pid)) {
3886 		ret = PTR_ERR(pid);
3887 		goto err;
3888 	}
3889 
3890 	ret = -EINVAL;
3891 	if (!access_pidfd_pidns(pid))
3892 		goto err;
3893 
3894 	if (info) {
3895 		ret = copy_siginfo_from_user_any(&kinfo, info);
3896 		if (unlikely(ret))
3897 			goto err;
3898 
3899 		ret = -EINVAL;
3900 		if (unlikely(sig != kinfo.si_signo))
3901 			goto err;
3902 
3903 		/* Only allow sending arbitrary signals to yourself. */
3904 		ret = -EPERM;
3905 		if ((task_pid(current) != pid) &&
3906 		    (kinfo.si_code >= 0 || kinfo.si_code == SI_TKILL))
3907 			goto err;
3908 	} else {
3909 		prepare_kill_siginfo(sig, &kinfo);
3910 	}
3911 
3912 	ret = kill_pid_info(sig, &kinfo, pid);
3913 
3914 err:
3915 	fdput(f);
3916 	return ret;
3917 }
3918 
3919 static int
3920 do_send_specific(pid_t tgid, pid_t pid, int sig, struct kernel_siginfo *info)
3921 {
3922 	struct task_struct *p;
3923 	int error = -ESRCH;
3924 
3925 	rcu_read_lock();
3926 	p = find_task_by_vpid(pid);
3927 	if (p && (tgid <= 0 || task_tgid_vnr(p) == tgid)) {
3928 		error = check_kill_permission(sig, info, p);
3929 		/*
3930 		 * The null signal is a permissions and process existence
3931 		 * probe.  No signal is actually delivered.
3932 		 */
3933 		if (!error && sig) {
3934 			error = do_send_sig_info(sig, info, p, PIDTYPE_PID);
3935 			/*
3936 			 * If lock_task_sighand() failed we pretend the task
3937 			 * dies after receiving the signal. The window is tiny,
3938 			 * and the signal is private anyway.
3939 			 */
3940 			if (unlikely(error == -ESRCH))
3941 				error = 0;
3942 		}
3943 	}
3944 	rcu_read_unlock();
3945 
3946 	return error;
3947 }
3948 
3949 static int do_tkill(pid_t tgid, pid_t pid, int sig)
3950 {
3951 	struct kernel_siginfo info;
3952 
3953 	clear_siginfo(&info);
3954 	info.si_signo = sig;
3955 	info.si_errno = 0;
3956 	info.si_code = SI_TKILL;
3957 	info.si_pid = task_tgid_vnr(current);
3958 	info.si_uid = from_kuid_munged(current_user_ns(), current_uid());
3959 
3960 	return do_send_specific(tgid, pid, sig, &info);
3961 }
3962 
3963 /**
3964  *  sys_tgkill - send signal to one specific thread
3965  *  @tgid: the thread group ID of the thread
3966  *  @pid: the PID of the thread
3967  *  @sig: signal to be sent
3968  *
3969  *  This syscall also checks the @tgid and returns -ESRCH even if the PID
3970  *  exists but it's not belonging to the target process anymore. This
3971  *  method solves the problem of threads exiting and PIDs getting reused.
3972  */
3973 SYSCALL_DEFINE3(tgkill, pid_t, tgid, pid_t, pid, int, sig)
3974 {
3975 	/* This is only valid for single tasks */
3976 	if (pid <= 0 || tgid <= 0)
3977 		return -EINVAL;
3978 
3979 	return do_tkill(tgid, pid, sig);
3980 }
3981 
3982 /**
3983  *  sys_tkill - send signal to one specific task
3984  *  @pid: the PID of the task
3985  *  @sig: signal to be sent
3986  *
3987  *  Send a signal to only one task, even if it's a CLONE_THREAD task.
3988  */
3989 SYSCALL_DEFINE2(tkill, pid_t, pid, int, sig)
3990 {
3991 	/* This is only valid for single tasks */
3992 	if (pid <= 0)
3993 		return -EINVAL;
3994 
3995 	return do_tkill(0, pid, sig);
3996 }
3997 
3998 static int do_rt_sigqueueinfo(pid_t pid, int sig, kernel_siginfo_t *info)
3999 {
4000 	/* Not even root can pretend to send signals from the kernel.
4001 	 * Nor can they impersonate a kill()/tgkill(), which adds source info.
4002 	 */
4003 	if ((info->si_code >= 0 || info->si_code == SI_TKILL) &&
4004 	    (task_pid_vnr(current) != pid))
4005 		return -EPERM;
4006 
4007 	/* POSIX.1b doesn't mention process groups.  */
4008 	return kill_proc_info(sig, info, pid);
4009 }
4010 
4011 /**
4012  *  sys_rt_sigqueueinfo - send signal information to a signal
4013  *  @pid: the PID of the thread
4014  *  @sig: signal to be sent
4015  *  @uinfo: signal info to be sent
4016  */
4017 SYSCALL_DEFINE3(rt_sigqueueinfo, pid_t, pid, int, sig,
4018 		siginfo_t __user *, uinfo)
4019 {
4020 	kernel_siginfo_t info;
4021 	int ret = __copy_siginfo_from_user(sig, &info, uinfo);
4022 	if (unlikely(ret))
4023 		return ret;
4024 	return do_rt_sigqueueinfo(pid, sig, &info);
4025 }
4026 
4027 #ifdef CONFIG_COMPAT
4028 COMPAT_SYSCALL_DEFINE3(rt_sigqueueinfo,
4029 			compat_pid_t, pid,
4030 			int, sig,
4031 			struct compat_siginfo __user *, uinfo)
4032 {
4033 	kernel_siginfo_t info;
4034 	int ret = __copy_siginfo_from_user32(sig, &info, uinfo);
4035 	if (unlikely(ret))
4036 		return ret;
4037 	return do_rt_sigqueueinfo(pid, sig, &info);
4038 }
4039 #endif
4040 
4041 static int do_rt_tgsigqueueinfo(pid_t tgid, pid_t pid, int sig, kernel_siginfo_t *info)
4042 {
4043 	/* This is only valid for single tasks */
4044 	if (pid <= 0 || tgid <= 0)
4045 		return -EINVAL;
4046 
4047 	/* Not even root can pretend to send signals from the kernel.
4048 	 * Nor can they impersonate a kill()/tgkill(), which adds source info.
4049 	 */
4050 	if ((info->si_code >= 0 || info->si_code == SI_TKILL) &&
4051 	    (task_pid_vnr(current) != pid))
4052 		return -EPERM;
4053 
4054 	return do_send_specific(tgid, pid, sig, info);
4055 }
4056 
4057 SYSCALL_DEFINE4(rt_tgsigqueueinfo, pid_t, tgid, pid_t, pid, int, sig,
4058 		siginfo_t __user *, uinfo)
4059 {
4060 	kernel_siginfo_t info;
4061 	int ret = __copy_siginfo_from_user(sig, &info, uinfo);
4062 	if (unlikely(ret))
4063 		return ret;
4064 	return do_rt_tgsigqueueinfo(tgid, pid, sig, &info);
4065 }
4066 
4067 #ifdef CONFIG_COMPAT
4068 COMPAT_SYSCALL_DEFINE4(rt_tgsigqueueinfo,
4069 			compat_pid_t, tgid,
4070 			compat_pid_t, pid,
4071 			int, sig,
4072 			struct compat_siginfo __user *, uinfo)
4073 {
4074 	kernel_siginfo_t info;
4075 	int ret = __copy_siginfo_from_user32(sig, &info, uinfo);
4076 	if (unlikely(ret))
4077 		return ret;
4078 	return do_rt_tgsigqueueinfo(tgid, pid, sig, &info);
4079 }
4080 #endif
4081 
4082 /*
4083  * For kthreads only, must not be used if cloned with CLONE_SIGHAND
4084  */
4085 void kernel_sigaction(int sig, __sighandler_t action)
4086 {
4087 	spin_lock_irq(&current->sighand->siglock);
4088 	current->sighand->action[sig - 1].sa.sa_handler = action;
4089 	if (action == SIG_IGN) {
4090 		sigset_t mask;
4091 
4092 		sigemptyset(&mask);
4093 		sigaddset(&mask, sig);
4094 
4095 		flush_sigqueue_mask(&mask, &current->signal->shared_pending);
4096 		flush_sigqueue_mask(&mask, &current->pending);
4097 		recalc_sigpending();
4098 	}
4099 	spin_unlock_irq(&current->sighand->siglock);
4100 }
4101 EXPORT_SYMBOL(kernel_sigaction);
4102 
4103 void __weak sigaction_compat_abi(struct k_sigaction *act,
4104 		struct k_sigaction *oact)
4105 {
4106 }
4107 
4108 int do_sigaction(int sig, struct k_sigaction *act, struct k_sigaction *oact)
4109 {
4110 	struct task_struct *p = current, *t;
4111 	struct k_sigaction *k;
4112 	sigset_t mask;
4113 
4114 	if (!valid_signal(sig) || sig < 1 || (act && sig_kernel_only(sig)))
4115 		return -EINVAL;
4116 
4117 	k = &p->sighand->action[sig-1];
4118 
4119 	spin_lock_irq(&p->sighand->siglock);
4120 	if (k->sa.sa_flags & SA_IMMUTABLE) {
4121 		spin_unlock_irq(&p->sighand->siglock);
4122 		return -EINVAL;
4123 	}
4124 	if (oact)
4125 		*oact = *k;
4126 
4127 	/*
4128 	 * Make sure that we never accidentally claim to support SA_UNSUPPORTED,
4129 	 * e.g. by having an architecture use the bit in their uapi.
4130 	 */
4131 	BUILD_BUG_ON(UAPI_SA_FLAGS & SA_UNSUPPORTED);
4132 
4133 	/*
4134 	 * Clear unknown flag bits in order to allow userspace to detect missing
4135 	 * support for flag bits and to allow the kernel to use non-uapi bits
4136 	 * internally.
4137 	 */
4138 	if (act)
4139 		act->sa.sa_flags &= UAPI_SA_FLAGS;
4140 	if (oact)
4141 		oact->sa.sa_flags &= UAPI_SA_FLAGS;
4142 
4143 	sigaction_compat_abi(act, oact);
4144 
4145 	if (act) {
4146 		sigdelsetmask(&act->sa.sa_mask,
4147 			      sigmask(SIGKILL) | sigmask(SIGSTOP));
4148 		*k = *act;
4149 		/*
4150 		 * POSIX 3.3.1.3:
4151 		 *  "Setting a signal action to SIG_IGN for a signal that is
4152 		 *   pending shall cause the pending signal to be discarded,
4153 		 *   whether or not it is blocked."
4154 		 *
4155 		 *  "Setting a signal action to SIG_DFL for a signal that is
4156 		 *   pending and whose default action is to ignore the signal
4157 		 *   (for example, SIGCHLD), shall cause the pending signal to
4158 		 *   be discarded, whether or not it is blocked"
4159 		 */
4160 		if (sig_handler_ignored(sig_handler(p, sig), sig)) {
4161 			sigemptyset(&mask);
4162 			sigaddset(&mask, sig);
4163 			flush_sigqueue_mask(&mask, &p->signal->shared_pending);
4164 			for_each_thread(p, t)
4165 				flush_sigqueue_mask(&mask, &t->pending);
4166 		}
4167 	}
4168 
4169 	spin_unlock_irq(&p->sighand->siglock);
4170 	return 0;
4171 }
4172 
4173 #ifdef CONFIG_DYNAMIC_SIGFRAME
4174 static inline void sigaltstack_lock(void)
4175 	__acquires(&current->sighand->siglock)
4176 {
4177 	spin_lock_irq(&current->sighand->siglock);
4178 }
4179 
4180 static inline void sigaltstack_unlock(void)
4181 	__releases(&current->sighand->siglock)
4182 {
4183 	spin_unlock_irq(&current->sighand->siglock);
4184 }
4185 #else
4186 static inline void sigaltstack_lock(void) { }
4187 static inline void sigaltstack_unlock(void) { }
4188 #endif
4189 
4190 static int
4191 do_sigaltstack (const stack_t *ss, stack_t *oss, unsigned long sp,
4192 		size_t min_ss_size)
4193 {
4194 	struct task_struct *t = current;
4195 	int ret = 0;
4196 
4197 	if (oss) {
4198 		memset(oss, 0, sizeof(stack_t));
4199 		oss->ss_sp = (void __user *) t->sas_ss_sp;
4200 		oss->ss_size = t->sas_ss_size;
4201 		oss->ss_flags = sas_ss_flags(sp) |
4202 			(current->sas_ss_flags & SS_FLAG_BITS);
4203 	}
4204 
4205 	if (ss) {
4206 		void __user *ss_sp = ss->ss_sp;
4207 		size_t ss_size = ss->ss_size;
4208 		unsigned ss_flags = ss->ss_flags;
4209 		int ss_mode;
4210 
4211 		if (unlikely(on_sig_stack(sp)))
4212 			return -EPERM;
4213 
4214 		ss_mode = ss_flags & ~SS_FLAG_BITS;
4215 		if (unlikely(ss_mode != SS_DISABLE && ss_mode != SS_ONSTACK &&
4216 				ss_mode != 0))
4217 			return -EINVAL;
4218 
4219 		/*
4220 		 * Return before taking any locks if no actual
4221 		 * sigaltstack changes were requested.
4222 		 */
4223 		if (t->sas_ss_sp == (unsigned long)ss_sp &&
4224 		    t->sas_ss_size == ss_size &&
4225 		    t->sas_ss_flags == ss_flags)
4226 			return 0;
4227 
4228 		sigaltstack_lock();
4229 		if (ss_mode == SS_DISABLE) {
4230 			ss_size = 0;
4231 			ss_sp = NULL;
4232 		} else {
4233 			if (unlikely(ss_size < min_ss_size))
4234 				ret = -ENOMEM;
4235 			if (!sigaltstack_size_valid(ss_size))
4236 				ret = -ENOMEM;
4237 		}
4238 		if (!ret) {
4239 			t->sas_ss_sp = (unsigned long) ss_sp;
4240 			t->sas_ss_size = ss_size;
4241 			t->sas_ss_flags = ss_flags;
4242 		}
4243 		sigaltstack_unlock();
4244 	}
4245 	return ret;
4246 }
4247 
4248 SYSCALL_DEFINE2(sigaltstack,const stack_t __user *,uss, stack_t __user *,uoss)
4249 {
4250 	stack_t new, old;
4251 	int err;
4252 	if (uss && copy_from_user(&new, uss, sizeof(stack_t)))
4253 		return -EFAULT;
4254 	err = do_sigaltstack(uss ? &new : NULL, uoss ? &old : NULL,
4255 			      current_user_stack_pointer(),
4256 			      MINSIGSTKSZ);
4257 	if (!err && uoss && copy_to_user(uoss, &old, sizeof(stack_t)))
4258 		err = -EFAULT;
4259 	return err;
4260 }
4261 
4262 int restore_altstack(const stack_t __user *uss)
4263 {
4264 	stack_t new;
4265 	if (copy_from_user(&new, uss, sizeof(stack_t)))
4266 		return -EFAULT;
4267 	(void)do_sigaltstack(&new, NULL, current_user_stack_pointer(),
4268 			     MINSIGSTKSZ);
4269 	/* squash all but EFAULT for now */
4270 	return 0;
4271 }
4272 
4273 int __save_altstack(stack_t __user *uss, unsigned long sp)
4274 {
4275 	struct task_struct *t = current;
4276 	int err = __put_user((void __user *)t->sas_ss_sp, &uss->ss_sp) |
4277 		__put_user(t->sas_ss_flags, &uss->ss_flags) |
4278 		__put_user(t->sas_ss_size, &uss->ss_size);
4279 	return err;
4280 }
4281 
4282 #ifdef CONFIG_COMPAT
4283 static int do_compat_sigaltstack(const compat_stack_t __user *uss_ptr,
4284 				 compat_stack_t __user *uoss_ptr)
4285 {
4286 	stack_t uss, uoss;
4287 	int ret;
4288 
4289 	if (uss_ptr) {
4290 		compat_stack_t uss32;
4291 		if (copy_from_user(&uss32, uss_ptr, sizeof(compat_stack_t)))
4292 			return -EFAULT;
4293 		uss.ss_sp = compat_ptr(uss32.ss_sp);
4294 		uss.ss_flags = uss32.ss_flags;
4295 		uss.ss_size = uss32.ss_size;
4296 	}
4297 	ret = do_sigaltstack(uss_ptr ? &uss : NULL, &uoss,
4298 			     compat_user_stack_pointer(),
4299 			     COMPAT_MINSIGSTKSZ);
4300 	if (ret >= 0 && uoss_ptr)  {
4301 		compat_stack_t old;
4302 		memset(&old, 0, sizeof(old));
4303 		old.ss_sp = ptr_to_compat(uoss.ss_sp);
4304 		old.ss_flags = uoss.ss_flags;
4305 		old.ss_size = uoss.ss_size;
4306 		if (copy_to_user(uoss_ptr, &old, sizeof(compat_stack_t)))
4307 			ret = -EFAULT;
4308 	}
4309 	return ret;
4310 }
4311 
4312 COMPAT_SYSCALL_DEFINE2(sigaltstack,
4313 			const compat_stack_t __user *, uss_ptr,
4314 			compat_stack_t __user *, uoss_ptr)
4315 {
4316 	return do_compat_sigaltstack(uss_ptr, uoss_ptr);
4317 }
4318 
4319 int compat_restore_altstack(const compat_stack_t __user *uss)
4320 {
4321 	int err = do_compat_sigaltstack(uss, NULL);
4322 	/* squash all but -EFAULT for now */
4323 	return err == -EFAULT ? err : 0;
4324 }
4325 
4326 int __compat_save_altstack(compat_stack_t __user *uss, unsigned long sp)
4327 {
4328 	int err;
4329 	struct task_struct *t = current;
4330 	err = __put_user(ptr_to_compat((void __user *)t->sas_ss_sp),
4331 			 &uss->ss_sp) |
4332 		__put_user(t->sas_ss_flags, &uss->ss_flags) |
4333 		__put_user(t->sas_ss_size, &uss->ss_size);
4334 	return err;
4335 }
4336 #endif
4337 
4338 #ifdef __ARCH_WANT_SYS_SIGPENDING
4339 
4340 /**
4341  *  sys_sigpending - examine pending signals
4342  *  @uset: where mask of pending signal is returned
4343  */
4344 SYSCALL_DEFINE1(sigpending, old_sigset_t __user *, uset)
4345 {
4346 	sigset_t set;
4347 
4348 	if (sizeof(old_sigset_t) > sizeof(*uset))
4349 		return -EINVAL;
4350 
4351 	do_sigpending(&set);
4352 
4353 	if (copy_to_user(uset, &set, sizeof(old_sigset_t)))
4354 		return -EFAULT;
4355 
4356 	return 0;
4357 }
4358 
4359 #ifdef CONFIG_COMPAT
4360 COMPAT_SYSCALL_DEFINE1(sigpending, compat_old_sigset_t __user *, set32)
4361 {
4362 	sigset_t set;
4363 
4364 	do_sigpending(&set);
4365 
4366 	return put_user(set.sig[0], set32);
4367 }
4368 #endif
4369 
4370 #endif
4371 
4372 #ifdef __ARCH_WANT_SYS_SIGPROCMASK
4373 /**
4374  *  sys_sigprocmask - examine and change blocked signals
4375  *  @how: whether to add, remove, or set signals
4376  *  @nset: signals to add or remove (if non-null)
4377  *  @oset: previous value of signal mask if non-null
4378  *
4379  * Some platforms have their own version with special arguments;
4380  * others support only sys_rt_sigprocmask.
4381  */
4382 
4383 SYSCALL_DEFINE3(sigprocmask, int, how, old_sigset_t __user *, nset,
4384 		old_sigset_t __user *, oset)
4385 {
4386 	old_sigset_t old_set, new_set;
4387 	sigset_t new_blocked;
4388 
4389 	old_set = current->blocked.sig[0];
4390 
4391 	if (nset) {
4392 		if (copy_from_user(&new_set, nset, sizeof(*nset)))
4393 			return -EFAULT;
4394 
4395 		new_blocked = current->blocked;
4396 
4397 		switch (how) {
4398 		case SIG_BLOCK:
4399 			sigaddsetmask(&new_blocked, new_set);
4400 			break;
4401 		case SIG_UNBLOCK:
4402 			sigdelsetmask(&new_blocked, new_set);
4403 			break;
4404 		case SIG_SETMASK:
4405 			new_blocked.sig[0] = new_set;
4406 			break;
4407 		default:
4408 			return -EINVAL;
4409 		}
4410 
4411 		set_current_blocked(&new_blocked);
4412 	}
4413 
4414 	if (oset) {
4415 		if (copy_to_user(oset, &old_set, sizeof(*oset)))
4416 			return -EFAULT;
4417 	}
4418 
4419 	return 0;
4420 }
4421 #endif /* __ARCH_WANT_SYS_SIGPROCMASK */
4422 
4423 #ifndef CONFIG_ODD_RT_SIGACTION
4424 /**
4425  *  sys_rt_sigaction - alter an action taken by a process
4426  *  @sig: signal to be sent
4427  *  @act: new sigaction
4428  *  @oact: used to save the previous sigaction
4429  *  @sigsetsize: size of sigset_t type
4430  */
4431 SYSCALL_DEFINE4(rt_sigaction, int, sig,
4432 		const struct sigaction __user *, act,
4433 		struct sigaction __user *, oact,
4434 		size_t, sigsetsize)
4435 {
4436 	struct k_sigaction new_sa, old_sa;
4437 	int ret;
4438 
4439 	/* XXX: Don't preclude handling different sized sigset_t's.  */
4440 	if (sigsetsize != sizeof(sigset_t))
4441 		return -EINVAL;
4442 
4443 	if (act && copy_from_user(&new_sa.sa, act, sizeof(new_sa.sa)))
4444 		return -EFAULT;
4445 
4446 	ret = do_sigaction(sig, act ? &new_sa : NULL, oact ? &old_sa : NULL);
4447 	if (ret)
4448 		return ret;
4449 
4450 	if (oact && copy_to_user(oact, &old_sa.sa, sizeof(old_sa.sa)))
4451 		return -EFAULT;
4452 
4453 	return 0;
4454 }
4455 #ifdef CONFIG_COMPAT
4456 COMPAT_SYSCALL_DEFINE4(rt_sigaction, int, sig,
4457 		const struct compat_sigaction __user *, act,
4458 		struct compat_sigaction __user *, oact,
4459 		compat_size_t, sigsetsize)
4460 {
4461 	struct k_sigaction new_ka, old_ka;
4462 #ifdef __ARCH_HAS_SA_RESTORER
4463 	compat_uptr_t restorer;
4464 #endif
4465 	int ret;
4466 
4467 	/* XXX: Don't preclude handling different sized sigset_t's.  */
4468 	if (sigsetsize != sizeof(compat_sigset_t))
4469 		return -EINVAL;
4470 
4471 	if (act) {
4472 		compat_uptr_t handler;
4473 		ret = get_user(handler, &act->sa_handler);
4474 		new_ka.sa.sa_handler = compat_ptr(handler);
4475 #ifdef __ARCH_HAS_SA_RESTORER
4476 		ret |= get_user(restorer, &act->sa_restorer);
4477 		new_ka.sa.sa_restorer = compat_ptr(restorer);
4478 #endif
4479 		ret |= get_compat_sigset(&new_ka.sa.sa_mask, &act->sa_mask);
4480 		ret |= get_user(new_ka.sa.sa_flags, &act->sa_flags);
4481 		if (ret)
4482 			return -EFAULT;
4483 	}
4484 
4485 	ret = do_sigaction(sig, act ? &new_ka : NULL, oact ? &old_ka : NULL);
4486 	if (!ret && oact) {
4487 		ret = put_user(ptr_to_compat(old_ka.sa.sa_handler),
4488 			       &oact->sa_handler);
4489 		ret |= put_compat_sigset(&oact->sa_mask, &old_ka.sa.sa_mask,
4490 					 sizeof(oact->sa_mask));
4491 		ret |= put_user(old_ka.sa.sa_flags, &oact->sa_flags);
4492 #ifdef __ARCH_HAS_SA_RESTORER
4493 		ret |= put_user(ptr_to_compat(old_ka.sa.sa_restorer),
4494 				&oact->sa_restorer);
4495 #endif
4496 	}
4497 	return ret;
4498 }
4499 #endif
4500 #endif /* !CONFIG_ODD_RT_SIGACTION */
4501 
4502 #ifdef CONFIG_OLD_SIGACTION
4503 SYSCALL_DEFINE3(sigaction, int, sig,
4504 		const struct old_sigaction __user *, act,
4505 	        struct old_sigaction __user *, oact)
4506 {
4507 	struct k_sigaction new_ka, old_ka;
4508 	int ret;
4509 
4510 	if (act) {
4511 		old_sigset_t mask;
4512 		if (!access_ok(act, sizeof(*act)) ||
4513 		    __get_user(new_ka.sa.sa_handler, &act->sa_handler) ||
4514 		    __get_user(new_ka.sa.sa_restorer, &act->sa_restorer) ||
4515 		    __get_user(new_ka.sa.sa_flags, &act->sa_flags) ||
4516 		    __get_user(mask, &act->sa_mask))
4517 			return -EFAULT;
4518 #ifdef __ARCH_HAS_KA_RESTORER
4519 		new_ka.ka_restorer = NULL;
4520 #endif
4521 		siginitset(&new_ka.sa.sa_mask, mask);
4522 	}
4523 
4524 	ret = do_sigaction(sig, act ? &new_ka : NULL, oact ? &old_ka : NULL);
4525 
4526 	if (!ret && oact) {
4527 		if (!access_ok(oact, sizeof(*oact)) ||
4528 		    __put_user(old_ka.sa.sa_handler, &oact->sa_handler) ||
4529 		    __put_user(old_ka.sa.sa_restorer, &oact->sa_restorer) ||
4530 		    __put_user(old_ka.sa.sa_flags, &oact->sa_flags) ||
4531 		    __put_user(old_ka.sa.sa_mask.sig[0], &oact->sa_mask))
4532 			return -EFAULT;
4533 	}
4534 
4535 	return ret;
4536 }
4537 #endif
4538 #ifdef CONFIG_COMPAT_OLD_SIGACTION
4539 COMPAT_SYSCALL_DEFINE3(sigaction, int, sig,
4540 		const struct compat_old_sigaction __user *, act,
4541 	        struct compat_old_sigaction __user *, oact)
4542 {
4543 	struct k_sigaction new_ka, old_ka;
4544 	int ret;
4545 	compat_old_sigset_t mask;
4546 	compat_uptr_t handler, restorer;
4547 
4548 	if (act) {
4549 		if (!access_ok(act, sizeof(*act)) ||
4550 		    __get_user(handler, &act->sa_handler) ||
4551 		    __get_user(restorer, &act->sa_restorer) ||
4552 		    __get_user(new_ka.sa.sa_flags, &act->sa_flags) ||
4553 		    __get_user(mask, &act->sa_mask))
4554 			return -EFAULT;
4555 
4556 #ifdef __ARCH_HAS_KA_RESTORER
4557 		new_ka.ka_restorer = NULL;
4558 #endif
4559 		new_ka.sa.sa_handler = compat_ptr(handler);
4560 		new_ka.sa.sa_restorer = compat_ptr(restorer);
4561 		siginitset(&new_ka.sa.sa_mask, mask);
4562 	}
4563 
4564 	ret = do_sigaction(sig, act ? &new_ka : NULL, oact ? &old_ka : NULL);
4565 
4566 	if (!ret && oact) {
4567 		if (!access_ok(oact, sizeof(*oact)) ||
4568 		    __put_user(ptr_to_compat(old_ka.sa.sa_handler),
4569 			       &oact->sa_handler) ||
4570 		    __put_user(ptr_to_compat(old_ka.sa.sa_restorer),
4571 			       &oact->sa_restorer) ||
4572 		    __put_user(old_ka.sa.sa_flags, &oact->sa_flags) ||
4573 		    __put_user(old_ka.sa.sa_mask.sig[0], &oact->sa_mask))
4574 			return -EFAULT;
4575 	}
4576 	return ret;
4577 }
4578 #endif
4579 
4580 #ifdef CONFIG_SGETMASK_SYSCALL
4581 
4582 /*
4583  * For backwards compatibility.  Functionality superseded by sigprocmask.
4584  */
4585 SYSCALL_DEFINE0(sgetmask)
4586 {
4587 	/* SMP safe */
4588 	return current->blocked.sig[0];
4589 }
4590 
4591 SYSCALL_DEFINE1(ssetmask, int, newmask)
4592 {
4593 	int old = current->blocked.sig[0];
4594 	sigset_t newset;
4595 
4596 	siginitset(&newset, newmask);
4597 	set_current_blocked(&newset);
4598 
4599 	return old;
4600 }
4601 #endif /* CONFIG_SGETMASK_SYSCALL */
4602 
4603 #ifdef __ARCH_WANT_SYS_SIGNAL
4604 /*
4605  * For backwards compatibility.  Functionality superseded by sigaction.
4606  */
4607 SYSCALL_DEFINE2(signal, int, sig, __sighandler_t, handler)
4608 {
4609 	struct k_sigaction new_sa, old_sa;
4610 	int ret;
4611 
4612 	new_sa.sa.sa_handler = handler;
4613 	new_sa.sa.sa_flags = SA_ONESHOT | SA_NOMASK;
4614 	sigemptyset(&new_sa.sa.sa_mask);
4615 
4616 	ret = do_sigaction(sig, &new_sa, &old_sa);
4617 
4618 	return ret ? ret : (unsigned long)old_sa.sa.sa_handler;
4619 }
4620 #endif /* __ARCH_WANT_SYS_SIGNAL */
4621 
4622 #ifdef __ARCH_WANT_SYS_PAUSE
4623 
4624 SYSCALL_DEFINE0(pause)
4625 {
4626 	while (!signal_pending(current)) {
4627 		__set_current_state(TASK_INTERRUPTIBLE);
4628 		schedule();
4629 	}
4630 	return -ERESTARTNOHAND;
4631 }
4632 
4633 #endif
4634 
4635 static int sigsuspend(sigset_t *set)
4636 {
4637 	current->saved_sigmask = current->blocked;
4638 	set_current_blocked(set);
4639 
4640 	while (!signal_pending(current)) {
4641 		__set_current_state(TASK_INTERRUPTIBLE);
4642 		schedule();
4643 	}
4644 	set_restore_sigmask();
4645 	return -ERESTARTNOHAND;
4646 }
4647 
4648 /**
4649  *  sys_rt_sigsuspend - replace the signal mask for a value with the
4650  *	@unewset value until a signal is received
4651  *  @unewset: new signal mask value
4652  *  @sigsetsize: size of sigset_t type
4653  */
4654 SYSCALL_DEFINE2(rt_sigsuspend, sigset_t __user *, unewset, size_t, sigsetsize)
4655 {
4656 	sigset_t newset;
4657 
4658 	/* XXX: Don't preclude handling different sized sigset_t's.  */
4659 	if (sigsetsize != sizeof(sigset_t))
4660 		return -EINVAL;
4661 
4662 	if (copy_from_user(&newset, unewset, sizeof(newset)))
4663 		return -EFAULT;
4664 	return sigsuspend(&newset);
4665 }
4666 
4667 #ifdef CONFIG_COMPAT
4668 COMPAT_SYSCALL_DEFINE2(rt_sigsuspend, compat_sigset_t __user *, unewset, compat_size_t, sigsetsize)
4669 {
4670 	sigset_t newset;
4671 
4672 	/* XXX: Don't preclude handling different sized sigset_t's.  */
4673 	if (sigsetsize != sizeof(sigset_t))
4674 		return -EINVAL;
4675 
4676 	if (get_compat_sigset(&newset, unewset))
4677 		return -EFAULT;
4678 	return sigsuspend(&newset);
4679 }
4680 #endif
4681 
4682 #ifdef CONFIG_OLD_SIGSUSPEND
4683 SYSCALL_DEFINE1(sigsuspend, old_sigset_t, mask)
4684 {
4685 	sigset_t blocked;
4686 	siginitset(&blocked, mask);
4687 	return sigsuspend(&blocked);
4688 }
4689 #endif
4690 #ifdef CONFIG_OLD_SIGSUSPEND3
4691 SYSCALL_DEFINE3(sigsuspend, int, unused1, int, unused2, old_sigset_t, mask)
4692 {
4693 	sigset_t blocked;
4694 	siginitset(&blocked, mask);
4695 	return sigsuspend(&blocked);
4696 }
4697 #endif
4698 
4699 __weak const char *arch_vma_name(struct vm_area_struct *vma)
4700 {
4701 	return NULL;
4702 }
4703 
4704 static inline void siginfo_buildtime_checks(void)
4705 {
4706 	BUILD_BUG_ON(sizeof(struct siginfo) != SI_MAX_SIZE);
4707 
4708 	/* Verify the offsets in the two siginfos match */
4709 #define CHECK_OFFSET(field) \
4710 	BUILD_BUG_ON(offsetof(siginfo_t, field) != offsetof(kernel_siginfo_t, field))
4711 
4712 	/* kill */
4713 	CHECK_OFFSET(si_pid);
4714 	CHECK_OFFSET(si_uid);
4715 
4716 	/* timer */
4717 	CHECK_OFFSET(si_tid);
4718 	CHECK_OFFSET(si_overrun);
4719 	CHECK_OFFSET(si_value);
4720 
4721 	/* rt */
4722 	CHECK_OFFSET(si_pid);
4723 	CHECK_OFFSET(si_uid);
4724 	CHECK_OFFSET(si_value);
4725 
4726 	/* sigchld */
4727 	CHECK_OFFSET(si_pid);
4728 	CHECK_OFFSET(si_uid);
4729 	CHECK_OFFSET(si_status);
4730 	CHECK_OFFSET(si_utime);
4731 	CHECK_OFFSET(si_stime);
4732 
4733 	/* sigfault */
4734 	CHECK_OFFSET(si_addr);
4735 	CHECK_OFFSET(si_trapno);
4736 	CHECK_OFFSET(si_addr_lsb);
4737 	CHECK_OFFSET(si_lower);
4738 	CHECK_OFFSET(si_upper);
4739 	CHECK_OFFSET(si_pkey);
4740 	CHECK_OFFSET(si_perf_data);
4741 	CHECK_OFFSET(si_perf_type);
4742 	CHECK_OFFSET(si_perf_flags);
4743 
4744 	/* sigpoll */
4745 	CHECK_OFFSET(si_band);
4746 	CHECK_OFFSET(si_fd);
4747 
4748 	/* sigsys */
4749 	CHECK_OFFSET(si_call_addr);
4750 	CHECK_OFFSET(si_syscall);
4751 	CHECK_OFFSET(si_arch);
4752 #undef CHECK_OFFSET
4753 
4754 	/* usb asyncio */
4755 	BUILD_BUG_ON(offsetof(struct siginfo, si_pid) !=
4756 		     offsetof(struct siginfo, si_addr));
4757 	if (sizeof(int) == sizeof(void __user *)) {
4758 		BUILD_BUG_ON(sizeof_field(struct siginfo, si_pid) !=
4759 			     sizeof(void __user *));
4760 	} else {
4761 		BUILD_BUG_ON((sizeof_field(struct siginfo, si_pid) +
4762 			      sizeof_field(struct siginfo, si_uid)) !=
4763 			     sizeof(void __user *));
4764 		BUILD_BUG_ON(offsetofend(struct siginfo, si_pid) !=
4765 			     offsetof(struct siginfo, si_uid));
4766 	}
4767 #ifdef CONFIG_COMPAT
4768 	BUILD_BUG_ON(offsetof(struct compat_siginfo, si_pid) !=
4769 		     offsetof(struct compat_siginfo, si_addr));
4770 	BUILD_BUG_ON(sizeof_field(struct compat_siginfo, si_pid) !=
4771 		     sizeof(compat_uptr_t));
4772 	BUILD_BUG_ON(sizeof_field(struct compat_siginfo, si_pid) !=
4773 		     sizeof_field(struct siginfo, si_pid));
4774 #endif
4775 }
4776 
4777 #if defined(CONFIG_SYSCTL)
4778 static struct ctl_table signal_debug_table[] = {
4779 #ifdef CONFIG_SYSCTL_EXCEPTION_TRACE
4780 	{
4781 		.procname	= "exception-trace",
4782 		.data		= &show_unhandled_signals,
4783 		.maxlen		= sizeof(int),
4784 		.mode		= 0644,
4785 		.proc_handler	= proc_dointvec
4786 	},
4787 #endif
4788 	{ }
4789 };
4790 
4791 static int __init init_signal_sysctls(void)
4792 {
4793 	register_sysctl_init("debug", signal_debug_table);
4794 	return 0;
4795 }
4796 early_initcall(init_signal_sysctls);
4797 #endif /* CONFIG_SYSCTL */
4798 
4799 void __init signals_init(void)
4800 {
4801 	siginfo_buildtime_checks();
4802 
4803 	sigqueue_cachep = KMEM_CACHE(sigqueue, SLAB_PANIC | SLAB_ACCOUNT);
4804 }
4805 
4806 #ifdef CONFIG_KGDB_KDB
4807 #include <linux/kdb.h>
4808 /*
4809  * kdb_send_sig - Allows kdb to send signals without exposing
4810  * signal internals.  This function checks if the required locks are
4811  * available before calling the main signal code, to avoid kdb
4812  * deadlocks.
4813  */
4814 void kdb_send_sig(struct task_struct *t, int sig)
4815 {
4816 	static struct task_struct *kdb_prev_t;
4817 	int new_t, ret;
4818 	if (!spin_trylock(&t->sighand->siglock)) {
4819 		kdb_printf("Can't do kill command now.\n"
4820 			   "The sigmask lock is held somewhere else in "
4821 			   "kernel, try again later\n");
4822 		return;
4823 	}
4824 	new_t = kdb_prev_t != t;
4825 	kdb_prev_t = t;
4826 	if (!task_is_running(t) && new_t) {
4827 		spin_unlock(&t->sighand->siglock);
4828 		kdb_printf("Process is not RUNNING, sending a signal from "
4829 			   "kdb risks deadlock\n"
4830 			   "on the run queue locks. "
4831 			   "The signal has _not_ been sent.\n"
4832 			   "Reissue the kill command if you want to risk "
4833 			   "the deadlock.\n");
4834 		return;
4835 	}
4836 	ret = send_signal_locked(sig, SEND_SIG_PRIV, t, PIDTYPE_PID);
4837 	spin_unlock(&t->sighand->siglock);
4838 	if (ret)
4839 		kdb_printf("Fail to deliver Signal %d to process %d.\n",
4840 			   sig, t->pid);
4841 	else
4842 		kdb_printf("Signal %d is sent to process %d.\n", sig, t->pid);
4843 }
4844 #endif	/* CONFIG_KGDB_KDB */
4845