linux-toradex.git/arch/mips/kernel/scall64-64.S, branch v4.8-rc2

MIPS: scall: Handle seccomp filters which redirect syscalls

2016-05-13T12:02:00+00:00

Commit d218af78492a ("MIPS: scall: Always run the seccomp syscall
filters") modified the syscall code to always call the seccomp filters,
but missed the case where a filter may redirect the syscall, as
revealed by the seccomp_bpf self test.

The syscall path now restores the syscall from the stack after the
filter rather than saving it locally. Syscall number checking and
syscall function table lookup is done after the filter may have run such
that redirected syscalls are also checked, and executed.

The regular path of syscall number checking and pointer lookup is also
made more consistent between ABIs with scall64-64.S being the reference.

With this patch in place, the seccomp_bpf self test now passes
TRACE_syscall.syscall_redirected and TRACE_syscall.syscall_dropped on
all MIPS ABIs.

Fixes: d218af78492a ("MIPS: scall: Always run the seccomp syscall filters")
Signed-off-by: Matt Redfearn 
Acked-by: Kees Cook 
Cc: Eric B Munson 
Cc: James Hogan 
Cc: Andrew Morton 
Cc: linux-mips@linux-mips.org
Cc: IMG-MIPSLinuxKerneldevelopers@imgtec.com
Cc: linux-kernel@vger.kernel.org
Patchwork: https://patchwork.linux-mips.org/patch/12916/
Signed-off-by: Ralf Baechle

MIPS: Wire up preadv2 and pwrite2 syscalls.

2016-04-03T07:41:34+00:00

Signed-off-by: Ralf Baechle

MIPS: Wire up copy_file_range syscall.

2016-02-05T16:15:42+00:00

Signed-off-by: Ralf Baechle

mips: add entry for new mlock2 syscall

2015-11-09T23:11:24+00:00

A previous commit introduced the new mlock2 syscall, add entries for the
MIPS architecture.

Signed-off-by: Eric B Munson 
Acked-by: Ralf Baechle 
Cc: Catalin Marinas 
Cc: Geert Uytterhoeven 
Cc: Guenter Roeck 
Cc: Heiko Carstens 
Cc: Jonathan Corbet 
Cc: Kirill A. Shutemov 
Cc: Michael Kerrisk 
Cc: Michal Hocko 
Cc: Shuah Khan 
Cc: Stephen Rothwell 
Cc: Vlastimil Babka 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

MIPS: scall: Always run the seccomp syscall filters

2015-10-04T10:10:56+00:00

The MIPS syscall handler code used to return -ENOSYS on invalid
syscalls. Whilst this is expected, it caused problems for seccomp
filters because the said filters never had the change to run since
the code returned -ENOSYS before triggering them. This caused
problems on the chromium testsuite for filters looking for invalid
syscalls. This has now changed and the seccomp filters are always
run even if the syscall is invalid. We return -ENOSYS once we
return from the seccomp filters. Moreover, similar codepaths have
been merged in the process which simplifies somewhat the overall
syscall code.

Signed-off-by: Markos Chandras 
Cc: linux-mips@linux-mips.org
Patchwork: https://patchwork.linux-mips.org/patch/11236/
Signed-off-by: Ralf Baechle

MIPS: Wire up userfaultfd and membarrier syscalls.

2015-09-30T12:24:31+00:00

Signed-off-by: Ralf Baechle

MIPS: Fix seccomp syscall argument for MIPS64

2015-08-16T13:00:59+00:00

Commit 4c21b8fd8f14 ("MIPS: seccomp: Handle indirect system calls (o32)")
fixed indirect system calls on O32 but it also introduced a bug for MIPS64
where it erroneously modified the v0 (syscall) register with the assumption
that the sycall offset hasn't been taken into consideration. This breaks
seccomp on MIPS64 n64 and n32 ABIs. We fix this by replacing the addition
with a move instruction.

Fixes: 4c21b8fd8f14 ("MIPS: seccomp: Handle indirect system calls (o32)")
Cc:  # 3.15+
Reviewed-by: James Hogan 
Signed-off-by: Markos Chandras 
Cc: linux-mips@linux-mips.org
Patchwork: https://patchwork.linux-mips.org/patch/10951/
Signed-off-by: Ralf Baechle

MIPS: Wire up execveat(2).

2015-01-13T14:53:09+00:00

Signed-off-by: Ralf Baechle

MIPS: Wire up bpf syscall.

2014-10-27T02:37:42+00:00

Signed-off-by: Ralf Baechle

MIPS: Wire up new syscalls getrandom and memfd_create.

2014-08-26T01:03:40+00:00

Signed-off-by: Ralf Baechle