Blame view
ipc/shm.c
33.3 KB
1da177e4c Linux-2.6.12-rc2 |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 |
/* * linux/ipc/shm.c * Copyright (C) 1992, 1993 Krishna Balasubramanian * Many improvements/fixes by Bruno Haible. * Replaced `struct shm_desc' by `struct vm_area_struct', July 1994. * Fixed the shm swap deallocation (shm_unuse()), August 1998 Andrea Arcangeli. * * /proc/sysvipc/shm support (c) 1999 Dragos Acostachioaie <dragos@iname.com> * BIGMEM support, Andrea Arcangeli <andrea@suse.de> * SMP thread shm, Jean-Luc Boyard <jean-luc.boyard@siemens.fr> * HIGHMEM support, Ingo Molnar <mingo@redhat.com> * Make shmmax, shmall, shmmni sysctl'able, Christoph Rohland <cr@sap.com> * Shared /dev/zero support, Kanoj Sarcar <kanoj@sgi.com> * Move the mm functionality over to mm/shmem.c, Christoph Rohland <cr@sap.com> * |
073115d6b [PATCH] Rework of... |
16 17 |
* support for audit of ipc object properties and permission changes * Dustin Kirkland <dustin.kirkland@us.ibm.com> |
4e9823111 [PATCH] IPC names... |
18 19 20 21 |
* * namespaces support * OpenVZ, SWsoft Inc. * Pavel Emelianov <xemul@openvz.org> |
c2c737a04 ipc,shm: shorten ... |
22 23 24 |
* * Better ipc lock (kern_ipc_perm.lock) handling * Davidlohr Bueso <davidlohr.bueso@hp.com>, June 2013. |
1da177e4c Linux-2.6.12-rc2 |
25 |
*/ |
1da177e4c Linux-2.6.12-rc2 |
26 27 28 29 30 31 32 |
#include <linux/slab.h> #include <linux/mm.h> #include <linux/hugetlb.h> #include <linux/shm.h> #include <linux/init.h> #include <linux/file.h> #include <linux/mman.h> |
1da177e4c Linux-2.6.12-rc2 |
33 34 35 36 |
#include <linux/shmem_fs.h> #include <linux/security.h> #include <linux/syscalls.h> #include <linux/audit.h> |
c59ede7b7 [PATCH] move capa... |
37 |
#include <linux/capability.h> |
7d87e14c2 [PATCH] consolida... |
38 |
#include <linux/ptrace.h> |
19b4946ca [PATCH] ipc: conv... |
39 |
#include <linux/seq_file.h> |
3e148c799 fix idr_find() lo... |
40 |
#include <linux/rwsem.h> |
4e9823111 [PATCH] IPC names... |
41 |
#include <linux/nsproxy.h> |
bc56bba8f [PATCH] shm: make... |
42 |
#include <linux/mount.h> |
ae5e1b22f namespaces: move ... |
43 |
#include <linux/ipc_namespace.h> |
7d87e14c2 [PATCH] consolida... |
44 |
|
7153e4027 ipc, kernel: use ... |
45 |
#include <linux/uaccess.h> |
1da177e4c Linux-2.6.12-rc2 |
46 47 |
#include "util.h" |
bc56bba8f [PATCH] shm: make... |
48 49 50 51 52 53 54 55 |
struct shm_file_data { int id; struct ipc_namespace *ns; struct file *file; const struct vm_operations_struct *vm_ops; }; #define shm_file_data(file) (*((struct shm_file_data **)&(file)->private_data)) |
9a32144e9 [PATCH] mark stru... |
56 |
static const struct file_operations shm_file_operations; |
f0f37e2f7 const: mark struc... |
57 |
static const struct vm_operations_struct shm_vm_ops; |
1da177e4c Linux-2.6.12-rc2 |
58 |
|
ed2ddbf88 IPC: make struct ... |
59 |
#define shm_ids(ns) ((ns)->ids[IPC_SHM_IDS]) |
1da177e4c Linux-2.6.12-rc2 |
60 |
|
4e9823111 [PATCH] IPC names... |
61 62 |
#define shm_unlock(shp) \ ipc_unlock(&(shp)->shm_perm) |
1da177e4c Linux-2.6.12-rc2 |
63 |
|
7748dbfaa ipc: unify the sy... |
64 |
static int newseg(struct ipc_namespace *, struct ipc_params *); |
bc56bba8f [PATCH] shm: make... |
65 66 |
static void shm_open(struct vm_area_struct *vma); static void shm_close(struct vm_area_struct *vma); |
239521f31 ipc: whitespace c... |
67 |
static void shm_destroy(struct ipc_namespace *ns, struct shmid_kernel *shp); |
1da177e4c Linux-2.6.12-rc2 |
68 |
#ifdef CONFIG_PROC_FS |
19b4946ca [PATCH] ipc: conv... |
69 |
static int sysvipc_shm_proc_show(struct seq_file *s, void *it); |
1da177e4c Linux-2.6.12-rc2 |
70 |
#endif |
ed2ddbf88 IPC: make struct ... |
71 |
void shm_init_ns(struct ipc_namespace *ns) |
4e9823111 [PATCH] IPC names... |
72 |
{ |
4e9823111 [PATCH] IPC names... |
73 74 75 |
ns->shm_ctlmax = SHMMAX; ns->shm_ctlall = SHMALL; ns->shm_ctlmni = SHMMNI; |
b34a6b1da ipc: introduce sh... |
76 |
ns->shm_rmid_forced = 0; |
4e9823111 [PATCH] IPC names... |
77 |
ns->shm_tot = 0; |
e8148f758 ipc: clean up ipc... |
78 |
ipc_init_ids(&shm_ids(ns)); |
4e9823111 [PATCH] IPC names... |
79 |
} |
f4566f048 ipc: fix wrong co... |
80 |
/* |
d9a605e40 ipc: rename ids->... |
81 82 |
* Called with shm_ids.rwsem (writer) and the shp structure locked. * Only shm_ids.rwsem remains locked on exit. |
f4566f048 ipc: fix wrong co... |
83 |
*/ |
01b8b07a5 IPC: consolidate ... |
84 |
static void do_shm_rmid(struct ipc_namespace *ns, struct kern_ipc_perm *ipcp) |
4e9823111 [PATCH] IPC names... |
85 |
{ |
01b8b07a5 IPC: consolidate ... |
86 87 |
struct shmid_kernel *shp; shp = container_of(ipcp, struct shmid_kernel, shm_perm); |
239521f31 ipc: whitespace c... |
88 |
if (shp->shm_nattch) { |
4e9823111 [PATCH] IPC names... |
89 90 91 92 93 94 95 |
shp->shm_perm.mode |= SHM_DEST; /* Do not find it any more */ shp->shm_perm.key = IPC_PRIVATE; shm_unlock(shp); } else shm_destroy(ns, shp); } |
ae5e1b22f namespaces: move ... |
96 |
#ifdef CONFIG_IPC_NS |
4e9823111 [PATCH] IPC names... |
97 98 |
void shm_exit_ns(struct ipc_namespace *ns) { |
01b8b07a5 IPC: consolidate ... |
99 |
free_ipcs(ns, &shm_ids(ns), do_shm_rmid); |
7d6feeb28 ipc ns: fix memor... |
100 |
idr_destroy(&ns->ids[IPC_SHM_IDS].ipcs_idr); |
4e9823111 [PATCH] IPC names... |
101 |
} |
ae5e1b22f namespaces: move ... |
102 |
#endif |
1da177e4c Linux-2.6.12-rc2 |
103 |
|
140d0b210 Do 'shm_init_ns()... |
104 |
static int __init ipc_ns_init(void) |
1da177e4c Linux-2.6.12-rc2 |
105 |
{ |
ed2ddbf88 IPC: make struct ... |
106 |
shm_init_ns(&init_ipc_ns); |
140d0b210 Do 'shm_init_ns()... |
107 108 109 110 |
return 0; } pure_initcall(ipc_ns_init); |
239521f31 ipc: whitespace c... |
111 |
void __init shm_init(void) |
140d0b210 Do 'shm_init_ns()... |
112 |
{ |
19b4946ca [PATCH] ipc: conv... |
113 |
ipc_init_proc_interface("sysvipc/shm", |
b79521807 ipc/shm.c: add RS... |
114 115 116 117 118 119 120 |
#if BITS_PER_LONG <= 32 " key shmid perms size cpid lpid nattch uid gid cuid cgid atime dtime ctime rss swap ", #else " key shmid perms size cpid lpid nattch uid gid cuid cgid atime dtime ctime rss swap ", #endif |
4e9823111 [PATCH] IPC names... |
121 |
IPC_SHM_IDS, sysvipc_shm_proc_show); |
1da177e4c Linux-2.6.12-rc2 |
122 |
} |
8b8d52ac3 ipc,shm: introduc... |
123 124 |
static inline struct shmid_kernel *shm_obtain_object(struct ipc_namespace *ns, int id) { |
55b7ae501 ipc: rename ipc_o... |
125 |
struct kern_ipc_perm *ipcp = ipc_obtain_object_idr(&shm_ids(ns), id); |
8b8d52ac3 ipc,shm: introduc... |
126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 |
if (IS_ERR(ipcp)) return ERR_CAST(ipcp); return container_of(ipcp, struct shmid_kernel, shm_perm); } static inline struct shmid_kernel *shm_obtain_object_check(struct ipc_namespace *ns, int id) { struct kern_ipc_perm *ipcp = ipc_obtain_object_check(&shm_ids(ns), id); if (IS_ERR(ipcp)) return ERR_CAST(ipcp); return container_of(ipcp, struct shmid_kernel, shm_perm); } |
3e148c799 fix idr_find() lo... |
142 |
/* |
d9a605e40 ipc: rename ids->... |
143 |
* shm_lock_(check_) routines are called in the paths where the rwsem |
00c2bf85d ipc: get rid of i... |
144 |
* is not necessarily held. |
3e148c799 fix idr_find() lo... |
145 |
*/ |
023a53557 ipc: integrate ip... |
146 |
static inline struct shmid_kernel *shm_lock(struct ipc_namespace *ns, int id) |
1da177e4c Linux-2.6.12-rc2 |
147 |
{ |
03f02c765 Storing ipcs into... |
148 |
struct kern_ipc_perm *ipcp = ipc_lock(&shm_ids(ns), id); |
c5c8975b2 ipc,shm: move BUG... |
149 |
/* |
1ac0b6dec ipc/shm: handle r... |
150 151 152 |
* Callers of shm_lock() must validate the status of the returned ipc * object pointer (as returned by ipc_lock()), and error out as * appropriate. |
c5c8975b2 ipc,shm: move BUG... |
153 |
*/ |
1ac0b6dec ipc/shm: handle r... |
154 155 |
if (IS_ERR(ipcp)) return (void *)ipcp; |
03f02c765 Storing ipcs into... |
156 |
return container_of(ipcp, struct shmid_kernel, shm_perm); |
023a53557 ipc: integrate ip... |
157 |
} |
4c677e2ee shm: optimize loc... |
158 159 160 |
static inline void shm_lock_by_ptr(struct shmid_kernel *ipcp) { rcu_read_lock(); |
cf9d5d78d ipc: close open c... |
161 |
ipc_lock_object(&ipcp->shm_perm); |
4c677e2ee shm: optimize loc... |
162 |
} |
53dad6d3a ipc: fix race wit... |
163 164 165 166 167 168 169 170 |
static void shm_rcu_free(struct rcu_head *head) { struct ipc_rcu *p = container_of(head, struct ipc_rcu, rcu); struct shmid_kernel *shp = ipc_rcu_to_struct(p); security_shm_free(shp); ipc_rcu_free(head); } |
7ca7e564e ipc: store ipcs i... |
171 |
static inline void shm_rmid(struct ipc_namespace *ns, struct shmid_kernel *s) |
1da177e4c Linux-2.6.12-rc2 |
172 |
{ |
ab602f799 shm: make exit_sh... |
173 |
list_del(&s->shm_clist); |
7ca7e564e ipc: store ipcs i... |
174 |
ipc_rmid(&shm_ids(ns), &s->shm_perm); |
1da177e4c Linux-2.6.12-rc2 |
175 |
} |
1da177e4c Linux-2.6.12-rc2 |
176 |
|
1ac0b6dec ipc/shm: handle r... |
177 |
static int __shm_open(struct vm_area_struct *vma) |
4e9823111 [PATCH] IPC names... |
178 |
{ |
bc56bba8f [PATCH] shm: make... |
179 180 |
struct file *file = vma->vm_file; struct shm_file_data *sfd = shm_file_data(file); |
1da177e4c Linux-2.6.12-rc2 |
181 |
struct shmid_kernel *shp; |
bc56bba8f [PATCH] shm: make... |
182 |
shp = shm_lock(sfd->ns, sfd->id); |
1ac0b6dec ipc/shm: handle r... |
183 184 185 |
if (IS_ERR(shp)) return PTR_ERR(shp); |
1da177e4c Linux-2.6.12-rc2 |
186 |
shp->shm_atim = get_seconds(); |
b488893a3 pid namespaces: c... |
187 |
shp->shm_lprid = task_tgid_vnr(current); |
1da177e4c Linux-2.6.12-rc2 |
188 189 |
shp->shm_nattch++; shm_unlock(shp); |
1ac0b6dec ipc/shm: handle r... |
190 191 192 193 194 195 196 197 198 199 200 201 |
return 0; } /* This is called by fork, once for every shm attach. */ static void shm_open(struct vm_area_struct *vma) { int err = __shm_open(vma); /* * We raced in the idr lookup or with shm_destroy(). * Either way, the ID is busted. */ WARN_ON_ONCE(err); |
1da177e4c Linux-2.6.12-rc2 |
202 |
} |
1da177e4c Linux-2.6.12-rc2 |
203 204 205 |
/* * shm_destroy - free the struct shmid_kernel * |
f4566f048 ipc: fix wrong co... |
206 |
* @ns: namespace |
1da177e4c Linux-2.6.12-rc2 |
207 208 |
* @shp: struct to free * |
d9a605e40 ipc: rename ids->... |
209 |
* It has to be called with shp and shm_ids.rwsem (writer) locked, |
1da177e4c Linux-2.6.12-rc2 |
210 211 |
* but returns with shp unlocked and freed. */ |
4e9823111 [PATCH] IPC names... |
212 |
static void shm_destroy(struct ipc_namespace *ns, struct shmid_kernel *shp) |
1da177e4c Linux-2.6.12-rc2 |
213 |
{ |
a399b29df ipc,shm: fix shm_... |
214 215 216 217 |
struct file *shm_file; shm_file = shp->shm_file; shp->shm_file = NULL; |
4e9823111 [PATCH] IPC names... |
218 |
ns->shm_tot -= (shp->shm_segsz + PAGE_SIZE - 1) >> PAGE_SHIFT; |
7ca7e564e ipc: store ipcs i... |
219 |
shm_rmid(ns, shp); |
1da177e4c Linux-2.6.12-rc2 |
220 |
shm_unlock(shp); |
a399b29df ipc,shm: fix shm_... |
221 222 |
if (!is_file_hugepages(shm_file)) shmem_lock(shm_file, 0, shp->mlock_user); |
353d5c30c mm: fix hugetlb b... |
223 |
else if (shp->mlock_user) |
07a46ed27 shmdt: use i_size... |
224 225 |
user_shm_unlock(i_size_read(file_inode(shm_file)), shp->mlock_user); |
a399b29df ipc,shm: fix shm_... |
226 |
fput(shm_file); |
53dad6d3a ipc: fix race wit... |
227 |
ipc_rcu_putref(shp, shm_rcu_free); |
1da177e4c Linux-2.6.12-rc2 |
228 229 230 |
} /* |
b34a6b1da ipc: introduce sh... |
231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 |
* shm_may_destroy - identifies whether shm segment should be destroyed now * * Returns true if and only if there are no active users of the segment and * one of the following is true: * * 1) shmctl(id, IPC_RMID, NULL) was called for this shp * * 2) sysctl kernel.shm_rmid_forced is set to 1. */ static bool shm_may_destroy(struct ipc_namespace *ns, struct shmid_kernel *shp) { return (shp->shm_nattch == 0) && (ns->shm_rmid_forced || (shp->shm_perm.mode & SHM_DEST)); } /* |
bc56bba8f [PATCH] shm: make... |
248 |
* remove the attach descriptor vma. |
1da177e4c Linux-2.6.12-rc2 |
249 250 251 252 |
* free memory for segment if it is marked destroyed. * The descriptor has already been removed from the current->mm->mmap list * and will later be kfree()d. */ |
bc56bba8f [PATCH] shm: make... |
253 |
static void shm_close(struct vm_area_struct *vma) |
1da177e4c Linux-2.6.12-rc2 |
254 |
{ |
239521f31 ipc: whitespace c... |
255 |
struct file *file = vma->vm_file; |
bc56bba8f [PATCH] shm: make... |
256 |
struct shm_file_data *sfd = shm_file_data(file); |
1da177e4c Linux-2.6.12-rc2 |
257 |
struct shmid_kernel *shp; |
bc56bba8f [PATCH] shm: make... |
258 |
struct ipc_namespace *ns = sfd->ns; |
4e9823111 [PATCH] IPC names... |
259 |
|
d9a605e40 ipc: rename ids->... |
260 |
down_write(&shm_ids(ns).rwsem); |
1da177e4c Linux-2.6.12-rc2 |
261 |
/* remove from the list of attaches of the shm segment */ |
00c2bf85d ipc: get rid of i... |
262 |
shp = shm_lock(ns, sfd->id); |
1ac0b6dec ipc/shm: handle r... |
263 264 265 266 267 268 269 |
/* * We raced in the idr lookup or with shm_destroy(). * Either way, the ID is busted. */ if (WARN_ON_ONCE(IS_ERR(shp))) goto done; /* no-op */ |
b488893a3 pid namespaces: c... |
270 |
shp->shm_lprid = task_tgid_vnr(current); |
1da177e4c Linux-2.6.12-rc2 |
271 272 |
shp->shm_dtim = get_seconds(); shp->shm_nattch--; |
b34a6b1da ipc: introduce sh... |
273 274 275 276 |
if (shm_may_destroy(ns, shp)) shm_destroy(ns, shp); else shm_unlock(shp); |
1ac0b6dec ipc/shm: handle r... |
277 |
done: |
d9a605e40 ipc: rename ids->... |
278 |
up_write(&shm_ids(ns).rwsem); |
b34a6b1da ipc: introduce sh... |
279 |
} |
d9a605e40 ipc: rename ids->... |
280 |
/* Called with ns->shm_ids(ns).rwsem locked */ |
b34a6b1da ipc: introduce sh... |
281 282 283 |
static int shm_try_destroy_orphaned(int id, void *p, void *data) { struct ipc_namespace *ns = data; |
4c677e2ee shm: optimize loc... |
284 285 |
struct kern_ipc_perm *ipcp = p; struct shmid_kernel *shp = container_of(ipcp, struct shmid_kernel, shm_perm); |
b34a6b1da ipc: introduce sh... |
286 287 288 289 |
/* * We want to destroy segments without users and with already * exit'ed originating process. |
4c677e2ee shm: optimize loc... |
290 |
* |
d9a605e40 ipc: rename ids->... |
291 |
* As shp->* are changed under rwsem, it's safe to skip shp locking. |
b34a6b1da ipc: introduce sh... |
292 |
*/ |
4c677e2ee shm: optimize loc... |
293 |
if (shp->shm_creator != NULL) |
b34a6b1da ipc: introduce sh... |
294 |
return 0; |
b34a6b1da ipc: introduce sh... |
295 |
|
4c677e2ee shm: optimize loc... |
296 297 |
if (shm_may_destroy(ns, shp)) { shm_lock_by_ptr(shp); |
4e9823111 [PATCH] IPC names... |
298 |
shm_destroy(ns, shp); |
4c677e2ee shm: optimize loc... |
299 |
} |
b34a6b1da ipc: introduce sh... |
300 301 302 303 304 |
return 0; } void shm_destroy_orphaned(struct ipc_namespace *ns) { |
d9a605e40 ipc: rename ids->... |
305 |
down_write(&shm_ids(ns).rwsem); |
33a30ed4b shm: fix wrong tests |
306 |
if (shm_ids(ns).in_use) |
4c677e2ee shm: optimize loc... |
307 |
idr_for_each(&shm_ids(ns).ipcs_idr, &shm_try_destroy_orphaned, ns); |
d9a605e40 ipc: rename ids->... |
308 |
up_write(&shm_ids(ns).rwsem); |
b34a6b1da ipc: introduce sh... |
309 |
} |
83293c0f5 shm: allow exit_s... |
310 |
/* Locking assumes this will only be called with task == current */ |
b34a6b1da ipc: introduce sh... |
311 312 |
void exit_shm(struct task_struct *task) { |
4c677e2ee shm: optimize loc... |
313 |
struct ipc_namespace *ns = task->nsproxy->ipc_ns; |
ab602f799 shm: make exit_sh... |
314 |
struct shmid_kernel *shp, *n; |
b34a6b1da ipc: introduce sh... |
315 |
|
83293c0f5 shm: allow exit_s... |
316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 |
if (list_empty(&task->sysvshm.shm_clist)) return; /* * If kernel.shm_rmid_forced is not set then only keep track of * which shmids are orphaned, so that a later set of the sysctl * can clean them up. */ if (!ns->shm_rmid_forced) { down_read(&shm_ids(ns).rwsem); list_for_each_entry(shp, &task->sysvshm.shm_clist, shm_clist) shp->shm_creator = NULL; /* * Only under read lock but we are only called on current * so no entry on the list will be shared. */ list_del(&task->sysvshm.shm_clist); up_read(&shm_ids(ns).rwsem); |
298507d4d shm: optimize exi... |
334 |
return; |
83293c0f5 shm: allow exit_s... |
335 |
} |
298507d4d shm: optimize exi... |
336 |
|
83293c0f5 shm: allow exit_s... |
337 338 339 340 341 |
/* * Destroy all already created segments, that were not yet mapped, * and mark any mapped as orphan to cover the sysctl toggling. * Destroy is skipped if shm_may_destroy() returns false. */ |
d9a605e40 ipc: rename ids->... |
342 |
down_write(&shm_ids(ns).rwsem); |
83293c0f5 shm: allow exit_s... |
343 344 345 346 347 348 349 350 351 352 |
list_for_each_entry_safe(shp, n, &task->sysvshm.shm_clist, shm_clist) { shp->shm_creator = NULL; if (shm_may_destroy(ns, shp)) { shm_lock_by_ptr(shp); shm_destroy(ns, shp); } } /* Remove the list head from any segments still attached. */ |
ab602f799 shm: make exit_sh... |
353 |
list_del(&task->sysvshm.shm_clist); |
d9a605e40 ipc: rename ids->... |
354 |
up_write(&shm_ids(ns).rwsem); |
1da177e4c Linux-2.6.12-rc2 |
355 |
} |
d0217ac04 mm: fault feedbac... |
356 |
static int shm_fault(struct vm_area_struct *vma, struct vm_fault *vmf) |
bc56bba8f [PATCH] shm: make... |
357 358 359 |
{ struct file *file = vma->vm_file; struct shm_file_data *sfd = shm_file_data(file); |
d0217ac04 mm: fault feedbac... |
360 |
return sfd->vm_ops->fault(vma, vmf); |
bc56bba8f [PATCH] shm: make... |
361 362 363 |
} #ifdef CONFIG_NUMA |
d823e3e75 ipc/shm.c: make 2... |
364 |
static int shm_set_policy(struct vm_area_struct *vma, struct mempolicy *new) |
bc56bba8f [PATCH] shm: make... |
365 366 367 368 369 370 371 372 |
{ struct file *file = vma->vm_file; struct shm_file_data *sfd = shm_file_data(file); int err = 0; if (sfd->vm_ops->set_policy) err = sfd->vm_ops->set_policy(vma, new); return err; } |
d823e3e75 ipc/shm.c: make 2... |
373 374 |
static struct mempolicy *shm_get_policy(struct vm_area_struct *vma, unsigned long addr) |
bc56bba8f [PATCH] shm: make... |
375 376 377 378 379 380 381 |
{ struct file *file = vma->vm_file; struct shm_file_data *sfd = shm_file_data(file); struct mempolicy *pol = NULL; if (sfd->vm_ops->get_policy) pol = sfd->vm_ops->get_policy(vma, addr); |
52cd3b074 mempolicy: rework... |
382 |
else if (vma->vm_policy) |
bc56bba8f [PATCH] shm: make... |
383 |
pol = vma->vm_policy; |
52cd3b074 mempolicy: rework... |
384 |
|
bc56bba8f [PATCH] shm: make... |
385 386 387 |
return pol; } #endif |
239521f31 ipc: whitespace c... |
388 |
static int shm_mmap(struct file *file, struct vm_area_struct *vma) |
1da177e4c Linux-2.6.12-rc2 |
389 |
{ |
bc56bba8f [PATCH] shm: make... |
390 |
struct shm_file_data *sfd = shm_file_data(file); |
b0e15190e [PATCH] NOMMU: Ma... |
391 |
int ret; |
1ac0b6dec ipc/shm: handle r... |
392 393 394 395 396 397 398 |
/* * In case of remap_file_pages() emulation, the file can represent * removed IPC ID: propogate shm_lock() error to caller. */ ret =__shm_open(vma); if (ret) return ret; |
bc56bba8f [PATCH] shm: make... |
399 |
ret = sfd->file->f_op->mmap(sfd->file, vma); |
1ac0b6dec ipc/shm: handle r... |
400 401 |
if (ret) { shm_close(vma); |
bc56bba8f [PATCH] shm: make... |
402 |
return ret; |
1ac0b6dec ipc/shm: handle r... |
403 |
} |
bc56bba8f [PATCH] shm: make... |
404 |
sfd->vm_ops = vma->vm_ops; |
2e92a3bae NOMMU: Fix SYSV I... |
405 |
#ifdef CONFIG_MMU |
d0edd8528 ipc: convert inva... |
406 |
WARN_ON(!sfd->vm_ops->fault); |
2e92a3bae NOMMU: Fix SYSV I... |
407 |
#endif |
bc56bba8f [PATCH] shm: make... |
408 |
vma->vm_ops = &shm_vm_ops; |
1ac0b6dec ipc/shm: handle r... |
409 |
return 0; |
1da177e4c Linux-2.6.12-rc2 |
410 |
} |
4e9823111 [PATCH] IPC names... |
411 412 |
static int shm_release(struct inode *ino, struct file *file) { |
bc56bba8f [PATCH] shm: make... |
413 |
struct shm_file_data *sfd = shm_file_data(file); |
4e9823111 [PATCH] IPC names... |
414 |
|
bc56bba8f [PATCH] shm: make... |
415 416 417 |
put_ipc_ns(sfd->ns); shm_file_data(file) = NULL; kfree(sfd); |
4e9823111 [PATCH] IPC names... |
418 419 |
return 0; } |
02c24a821 fs: push i_mutex ... |
420 |
static int shm_fsync(struct file *file, loff_t start, loff_t end, int datasync) |
516dffdcd [PATCH] Fix get_u... |
421 |
{ |
516dffdcd [PATCH] Fix get_u... |
422 |
struct shm_file_data *sfd = shm_file_data(file); |
516dffdcd [PATCH] Fix get_u... |
423 |
|
7ea808591 drop unused dentr... |
424 425 |
if (!sfd->file->f_op->fsync) return -EINVAL; |
02c24a821 fs: push i_mutex ... |
426 |
return sfd->file->f_op->fsync(sfd->file, start, end, datasync); |
516dffdcd [PATCH] Fix get_u... |
427 |
} |
7d8a45695 ipc: shm: restore... |
428 429 430 431 432 433 434 435 436 |
static long shm_fallocate(struct file *file, int mode, loff_t offset, loff_t len) { struct shm_file_data *sfd = shm_file_data(file); if (!sfd->file->f_op->fallocate) return -EOPNOTSUPP; return sfd->file->f_op->fallocate(file, mode, offset, len); } |
bc56bba8f [PATCH] shm: make... |
437 438 439 440 441 |
static unsigned long shm_get_unmapped_area(struct file *file, unsigned long addr, unsigned long len, unsigned long pgoff, unsigned long flags) { struct shm_file_data *sfd = shm_file_data(file); |
c4caa7781 file ->get_unmapp... |
442 443 |
return sfd->file->f_op->get_unmapped_area(sfd->file, addr, len, pgoff, flags); |
bc56bba8f [PATCH] shm: make... |
444 |
} |
bc56bba8f [PATCH] shm: make... |
445 |
|
9a32144e9 [PATCH] mark stru... |
446 |
static const struct file_operations shm_file_operations = { |
4e9823111 [PATCH] IPC names... |
447 |
.mmap = shm_mmap, |
516dffdcd [PATCH] Fix get_u... |
448 |
.fsync = shm_fsync, |
4e9823111 [PATCH] IPC names... |
449 |
.release = shm_release, |
ed5e5894b nommu: fix SYSV S... |
450 |
.get_unmapped_area = shm_get_unmapped_area, |
6038f373a llseek: automatic... |
451 |
.llseek = noop_llseek, |
7d8a45695 ipc: shm: restore... |
452 |
.fallocate = shm_fallocate, |
c4caa7781 file ->get_unmapp... |
453 |
}; |
c01d5b300 shmem: get_unmapp... |
454 455 456 457 |
/* * shm_file_operations_huge is now identical to shm_file_operations, * but we keep it distinct for the sake of is_file_shm_hugepages(). */ |
c4caa7781 file ->get_unmapp... |
458 459 460 461 |
static const struct file_operations shm_file_operations_huge = { .mmap = shm_mmap, .fsync = shm_fsync, .release = shm_release, |
bc56bba8f [PATCH] shm: make... |
462 |
.get_unmapped_area = shm_get_unmapped_area, |
6038f373a llseek: automatic... |
463 |
.llseek = noop_llseek, |
7d8a45695 ipc: shm: restore... |
464 |
.fallocate = shm_fallocate, |
1da177e4c Linux-2.6.12-rc2 |
465 |
}; |
2954e440b ipc/shm.c: is_fil... |
466 |
bool is_file_shm_hugepages(struct file *file) |
c4caa7781 file ->get_unmapp... |
467 468 469 |
{ return file->f_op == &shm_file_operations_huge; } |
f0f37e2f7 const: mark struc... |
470 |
static const struct vm_operations_struct shm_vm_ops = { |
1da177e4c Linux-2.6.12-rc2 |
471 472 |
.open = shm_open, /* callback for a new vm-area open */ .close = shm_close, /* callback for when the vm-area is released */ |
54cb8821d mm: merge populat... |
473 |
.fault = shm_fault, |
bc56bba8f [PATCH] shm: make... |
474 475 476 |
#if defined(CONFIG_NUMA) .set_policy = shm_set_policy, .get_policy = shm_get_policy, |
1da177e4c Linux-2.6.12-rc2 |
477 478 |
#endif }; |
f4566f048 ipc: fix wrong co... |
479 480 481 482 483 |
/** * newseg - Create a new shared memory segment * @ns: namespace * @params: ptr to the structure that contains key, size and shmflg * |
d9a605e40 ipc: rename ids->... |
484 |
* Called with shm_ids.rwsem held as a writer. |
f4566f048 ipc: fix wrong co... |
485 |
*/ |
7748dbfaa ipc: unify the sy... |
486 |
static int newseg(struct ipc_namespace *ns, struct ipc_params *params) |
1da177e4c Linux-2.6.12-rc2 |
487 |
{ |
7748dbfaa ipc: unify the sy... |
488 489 490 |
key_t key = params->key; int shmflg = params->flg; size_t size = params->u.size; |
1da177e4c Linux-2.6.12-rc2 |
491 492 |
int error; struct shmid_kernel *shp; |
d69f3bad4 ipc: sysv shared ... |
493 |
size_t numpages = (size + PAGE_SIZE - 1) >> PAGE_SHIFT; |
239521f31 ipc: whitespace c... |
494 |
struct file *file; |
1da177e4c Linux-2.6.12-rc2 |
495 496 |
char name[13]; int id; |
ca16d140a mm: don't access ... |
497 |
vm_flags_t acctflag = 0; |
1da177e4c Linux-2.6.12-rc2 |
498 |
|
4e9823111 [PATCH] IPC names... |
499 |
if (size < SHMMIN || size > ns->shm_ctlmax) |
1da177e4c Linux-2.6.12-rc2 |
500 |
return -EINVAL; |
1376327ce ipc/shm.c: check ... |
501 502 |
if (numpages << PAGE_SHIFT < size) return -ENOSPC; |
09c6eb1f6 ipc/shm.c: check ... |
503 504 |
if (ns->shm_tot + numpages < ns->shm_tot || ns->shm_tot + numpages > ns->shm_ctlall) |
1da177e4c Linux-2.6.12-rc2 |
505 506 507 508 509 510 511 |
return -ENOSPC; shp = ipc_rcu_alloc(sizeof(*shp)); if (!shp) return -ENOMEM; shp->shm_perm.key = key; |
b33291c0b [PATCH] ipc: expa... |
512 |
shp->shm_perm.mode = (shmflg & S_IRWXUGO); |
1da177e4c Linux-2.6.12-rc2 |
513 514 515 516 517 |
shp->mlock_user = NULL; shp->shm_perm.security = NULL; error = security_shm_alloc(shp); if (error) { |
53dad6d3a ipc: fix race wit... |
518 |
ipc_rcu_putref(shp, ipc_rcu_free); |
1da177e4c Linux-2.6.12-rc2 |
519 520 |
return error; } |
239521f31 ipc: whitespace c... |
521 |
sprintf(name, "SYSV%08x", key); |
1da177e4c Linux-2.6.12-rc2 |
522 |
if (shmflg & SHM_HUGETLB) { |
c103a4dc4 ipc/shmc.c: elimi... |
523 |
struct hstate *hs; |
091d0d55b shm: fix null poi... |
524 |
size_t hugesize; |
c103a4dc4 ipc/shmc.c: elimi... |
525 |
hs = hstate_sizelog((shmflg >> SHM_HUGE_SHIFT) & SHM_HUGE_MASK); |
091d0d55b shm: fix null poi... |
526 527 528 529 530 |
if (!hs) { error = -EINVAL; goto no_file; } hugesize = ALIGN(size, huge_page_size(hs)); |
af73e4d95 hugetlbfs: fix mm... |
531 |
|
5a6fe1259 Do not account fo... |
532 533 534 |
/* hugetlb_file_setup applies strict accounting */ if (shmflg & SHM_NORESERVE) acctflag = VM_NORESERVE; |
af73e4d95 hugetlbfs: fix mm... |
535 |
file = hugetlb_file_setup(name, hugesize, acctflag, |
42d7395fe mm: support more ... |
536 537 |
&shp->mlock_user, HUGETLB_SHMFS_INODE, (shmflg >> SHM_HUGE_SHIFT) & SHM_HUGE_MASK); |
1da177e4c Linux-2.6.12-rc2 |
538 |
} else { |
bf8f972d3 [PATCH] SHM_NORES... |
539 540 |
/* * Do not allow no accounting for OVERCOMMIT_NEVER, even |
239521f31 ipc: whitespace c... |
541 |
* if it's asked for. |
bf8f972d3 [PATCH] SHM_NORES... |
542 543 544 |
*/ if ((shmflg & SHM_NORESERVE) && sysctl_overcommit_memory != OVERCOMMIT_NEVER) |
fc8744adc Stop playing sill... |
545 |
acctflag = VM_NORESERVE; |
e1832f292 ipc: use private ... |
546 |
file = shmem_kernel_file_setup(name, size, acctflag); |
1da177e4c Linux-2.6.12-rc2 |
547 548 549 550 |
} error = PTR_ERR(file); if (IS_ERR(file)) goto no_file; |
b488893a3 pid namespaces: c... |
551 |
shp->shm_cprid = task_tgid_vnr(current); |
1da177e4c Linux-2.6.12-rc2 |
552 553 554 555 556 |
shp->shm_lprid = 0; shp->shm_atim = shp->shm_dtim = 0; shp->shm_ctim = get_seconds(); shp->shm_segsz = size; shp->shm_nattch = 0; |
1da177e4c Linux-2.6.12-rc2 |
557 |
shp->shm_file = file; |
5774ed014 shm: handle separ... |
558 |
shp->shm_creator = current; |
b9a532277 Initialize msg/sh... |
559 560 561 562 563 564 |
id = ipc_addid(&shm_ids(ns), &shp->shm_perm, ns->shm_ctlmni); if (id < 0) { error = id; goto no_id; } |
ab602f799 shm: make exit_sh... |
565 |
list_add(&shp->shm_clist, ¤t->sysvshm.shm_clist); |
dbfcd91f0 ipc: move rcu loc... |
566 |
|
30475cc12 Restore shmid as ... |
567 568 569 570 |
/* * shmid gets reported as "inode#" in /proc/pid/maps. * proc-ps tools use this. Changing this will break them. */ |
496ad9aa8 new helper: file_... |
571 |
file_inode(file)->i_ino = shp->shm_perm.id; |
551110a94 [PATCH] hugetlb: ... |
572 |
|
4e9823111 [PATCH] IPC names... |
573 |
ns->shm_tot += numpages; |
7ca7e564e ipc: store ipcs i... |
574 |
error = shp->shm_perm.id; |
dbfcd91f0 ipc: move rcu loc... |
575 |
|
cf9d5d78d ipc: close open c... |
576 |
ipc_unlock_object(&shp->shm_perm); |
dbfcd91f0 ipc: move rcu loc... |
577 |
rcu_read_unlock(); |
7ca7e564e ipc: store ipcs i... |
578 |
return error; |
1da177e4c Linux-2.6.12-rc2 |
579 580 |
no_id: |
2195d2818 fix undefined ref... |
581 |
if (is_file_hugepages(file) && shp->mlock_user) |
353d5c30c mm: fix hugetlb b... |
582 |
user_shm_unlock(size, shp->mlock_user); |
1da177e4c Linux-2.6.12-rc2 |
583 584 |
fput(file); no_file: |
53dad6d3a ipc: fix race wit... |
585 |
ipc_rcu_putref(shp, shm_rcu_free); |
1da177e4c Linux-2.6.12-rc2 |
586 587 |
return error; } |
f4566f048 ipc: fix wrong co... |
588 |
/* |
d9a605e40 ipc: rename ids->... |
589 |
* Called with shm_ids.rwsem and ipcp locked. |
f4566f048 ipc: fix wrong co... |
590 |
*/ |
03f02c765 Storing ipcs into... |
591 |
static inline int shm_security(struct kern_ipc_perm *ipcp, int shmflg) |
7748dbfaa ipc: unify the sy... |
592 |
{ |
03f02c765 Storing ipcs into... |
593 594 595 596 |
struct shmid_kernel *shp; shp = container_of(ipcp, struct shmid_kernel, shm_perm); return security_shm_associate(shp, shmflg); |
7748dbfaa ipc: unify the sy... |
597 |
} |
f4566f048 ipc: fix wrong co... |
598 |
/* |
d9a605e40 ipc: rename ids->... |
599 |
* Called with shm_ids.rwsem and ipcp locked. |
f4566f048 ipc: fix wrong co... |
600 |
*/ |
03f02c765 Storing ipcs into... |
601 602 |
static inline int shm_more_checks(struct kern_ipc_perm *ipcp, struct ipc_params *params) |
7748dbfaa ipc: unify the sy... |
603 |
{ |
03f02c765 Storing ipcs into... |
604 605 606 607 |
struct shmid_kernel *shp; shp = container_of(ipcp, struct shmid_kernel, shm_perm); if (shp->shm_segsz < params->u.size) |
7748dbfaa ipc: unify the sy... |
608 609 610 611 |
return -EINVAL; return 0; } |
d5460c997 [CVE-2009-0029] S... |
612 |
SYSCALL_DEFINE3(shmget, key_t, key, size_t, size, int, shmflg) |
1da177e4c Linux-2.6.12-rc2 |
613 |
{ |
4e9823111 [PATCH] IPC names... |
614 |
struct ipc_namespace *ns; |
eb66ec44f ipc: constify ipc... |
615 616 617 618 619 |
static const struct ipc_ops shm_ops = { .getnew = newseg, .associate = shm_security, .more_checks = shm_more_checks, }; |
7748dbfaa ipc: unify the sy... |
620 |
struct ipc_params shm_params; |
4e9823111 [PATCH] IPC names... |
621 622 |
ns = current->nsproxy->ipc_ns; |
1da177e4c Linux-2.6.12-rc2 |
623 |
|
7748dbfaa ipc: unify the sy... |
624 625 626 |
shm_params.key = key; shm_params.flg = shmflg; shm_params.u.size = size; |
1da177e4c Linux-2.6.12-rc2 |
627 |
|
7748dbfaa ipc: unify the sy... |
628 |
return ipcget(ns, &shm_ids(ns), &shm_ops, &shm_params); |
1da177e4c Linux-2.6.12-rc2 |
629 630 631 632 |
} static inline unsigned long copy_shmid_to_user(void __user *buf, struct shmid64_ds *in, int version) { |
239521f31 ipc: whitespace c... |
633 |
switch (version) { |
1da177e4c Linux-2.6.12-rc2 |
634 635 636 637 638 |
case IPC_64: return copy_to_user(buf, in, sizeof(*in)); case IPC_OLD: { struct shmid_ds out; |
3af54c9bd ipc: shm: fix inf... |
639 |
memset(&out, 0, sizeof(out)); |
1da177e4c Linux-2.6.12-rc2 |
640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 |
ipc64_perm_to_ipc_perm(&in->shm_perm, &out.shm_perm); out.shm_segsz = in->shm_segsz; out.shm_atime = in->shm_atime; out.shm_dtime = in->shm_dtime; out.shm_ctime = in->shm_ctime; out.shm_cpid = in->shm_cpid; out.shm_lpid = in->shm_lpid; out.shm_nattch = in->shm_nattch; return copy_to_user(buf, &out, sizeof(out)); } default: return -EINVAL; } } |
016d7132f IPC: get rid of t... |
655 656 |
static inline unsigned long copy_shmid_from_user(struct shmid64_ds *out, void __user *buf, int version) |
1da177e4c Linux-2.6.12-rc2 |
657 |
{ |
239521f31 ipc: whitespace c... |
658 |
switch (version) { |
1da177e4c Linux-2.6.12-rc2 |
659 |
case IPC_64: |
016d7132f IPC: get rid of t... |
660 |
if (copy_from_user(out, buf, sizeof(*out))) |
1da177e4c Linux-2.6.12-rc2 |
661 |
return -EFAULT; |
1da177e4c Linux-2.6.12-rc2 |
662 |
return 0; |
1da177e4c Linux-2.6.12-rc2 |
663 664 665 666 667 668 |
case IPC_OLD: { struct shmid_ds tbuf_old; if (copy_from_user(&tbuf_old, buf, sizeof(tbuf_old))) return -EFAULT; |
016d7132f IPC: get rid of t... |
669 670 671 |
out->shm_perm.uid = tbuf_old.shm_perm.uid; out->shm_perm.gid = tbuf_old.shm_perm.gid; out->shm_perm.mode = tbuf_old.shm_perm.mode; |
1da177e4c Linux-2.6.12-rc2 |
672 673 674 675 676 677 678 679 680 681 |
return 0; } default: return -EINVAL; } } static inline unsigned long copy_shminfo_to_user(void __user *buf, struct shminfo64 *in, int version) { |
239521f31 ipc: whitespace c... |
682 |
switch (version) { |
1da177e4c Linux-2.6.12-rc2 |
683 684 685 686 687 |
case IPC_64: return copy_to_user(buf, in, sizeof(*in)); case IPC_OLD: { struct shminfo out; |
239521f31 ipc: whitespace c... |
688 |
if (in->shmmax > INT_MAX) |
1da177e4c Linux-2.6.12-rc2 |
689 690 691 692 693 694 695 |
out.shmmax = INT_MAX; else out.shmmax = (int)in->shmmax; out.shmmin = in->shmmin; out.shmmni = in->shmmni; out.shmseg = in->shmseg; |
46c0a8ca3 ipc, kernel: clea... |
696 |
out.shmall = in->shmall; |
1da177e4c Linux-2.6.12-rc2 |
697 698 699 700 701 702 703 |
return copy_to_user(buf, &out, sizeof(out)); } default: return -EINVAL; } } |
f4566f048 ipc: fix wrong co... |
704 |
/* |
b79521807 ipc/shm.c: add RS... |
705 |
* Calculate and add used RSS and swap pages of a shm. |
d9a605e40 ipc: rename ids->... |
706 |
* Called with shm_ids.rwsem held as a reader |
b79521807 ipc/shm.c: add RS... |
707 708 709 710 711 |
*/ static void shm_add_rss_swap(struct shmid_kernel *shp, unsigned long *rss_add, unsigned long *swp_add) { struct inode *inode; |
496ad9aa8 new helper: file_... |
712 |
inode = file_inode(shp->shm_file); |
b79521807 ipc/shm.c: add RS... |
713 714 715 716 717 718 719 720 |
if (is_file_hugepages(shp->shm_file)) { struct address_space *mapping = inode->i_mapping; struct hstate *h = hstate_file(shp->shm_file); *rss_add += pages_per_huge_page(h) * mapping->nrpages; } else { #ifdef CONFIG_SHMEM struct shmem_inode_info *info = SHMEM_I(inode); |
4595ef88d shmem: make shmem... |
721 |
spin_lock_irq(&info->lock); |
b79521807 ipc/shm.c: add RS... |
722 723 |
*rss_add += inode->i_mapping->nrpages; *swp_add += info->swapped; |
4595ef88d shmem: make shmem... |
724 |
spin_unlock_irq(&info->lock); |
b79521807 ipc/shm.c: add RS... |
725 726 727 728 729 730 731 |
#else *rss_add += inode->i_mapping->nrpages; #endif } } /* |
d9a605e40 ipc: rename ids->... |
732 |
* Called with shm_ids.rwsem held as a reader |
f4566f048 ipc: fix wrong co... |
733 |
*/ |
4e9823111 [PATCH] IPC names... |
734 735 |
static void shm_get_stat(struct ipc_namespace *ns, unsigned long *rss, unsigned long *swp) |
1da177e4c Linux-2.6.12-rc2 |
736 |
{ |
7ca7e564e ipc: store ipcs i... |
737 738 |
int next_id; int total, in_use; |
1da177e4c Linux-2.6.12-rc2 |
739 740 741 |
*rss = 0; *swp = 0; |
7ca7e564e ipc: store ipcs i... |
742 743 744 |
in_use = shm_ids(ns).in_use; for (total = 0, next_id = 0; total < in_use; next_id++) { |
e562aebc6 ipc: make shm_get... |
745 |
struct kern_ipc_perm *ipc; |
1da177e4c Linux-2.6.12-rc2 |
746 |
struct shmid_kernel *shp; |
1da177e4c Linux-2.6.12-rc2 |
747 |
|
e562aebc6 ipc: make shm_get... |
748 749 |
ipc = idr_find(&shm_ids(ns).ipcs_idr, next_id); if (ipc == NULL) |
1da177e4c Linux-2.6.12-rc2 |
750 |
continue; |
e562aebc6 ipc: make shm_get... |
751 |
shp = container_of(ipc, struct shmid_kernel, shm_perm); |
1da177e4c Linux-2.6.12-rc2 |
752 |
|
b79521807 ipc/shm.c: add RS... |
753 |
shm_add_rss_swap(shp, rss, swp); |
7ca7e564e ipc: store ipcs i... |
754 755 |
total++; |
1da177e4c Linux-2.6.12-rc2 |
756 757 |
} } |
8d4cc8b5c IPC/shared memory... |
758 |
/* |
d9a605e40 ipc: rename ids->... |
759 |
* This function handles some shmctl commands which require the rwsem |
8d4cc8b5c IPC/shared memory... |
760 |
* to be held in write mode. |
d9a605e40 ipc: rename ids->... |
761 |
* NOTE: no locks must be held, the rwsem is taken inside this function. |
8d4cc8b5c IPC/shared memory... |
762 763 764 |
*/ static int shmctl_down(struct ipc_namespace *ns, int shmid, int cmd, struct shmid_ds __user *buf, int version) |
1da177e4c Linux-2.6.12-rc2 |
765 |
{ |
8d4cc8b5c IPC/shared memory... |
766 |
struct kern_ipc_perm *ipcp; |
016d7132f IPC: get rid of t... |
767 |
struct shmid64_ds shmid64; |
1da177e4c Linux-2.6.12-rc2 |
768 |
struct shmid_kernel *shp; |
8d4cc8b5c IPC/shared memory... |
769 770 771 |
int err; if (cmd == IPC_SET) { |
016d7132f IPC: get rid of t... |
772 |
if (copy_shmid_from_user(&shmid64, buf, version)) |
8d4cc8b5c IPC/shared memory... |
773 774 |
return -EFAULT; } |
d9a605e40 ipc: rename ids->... |
775 |
down_write(&shm_ids(ns).rwsem); |
7b4cc5d84 ipc: move locking... |
776 |
rcu_read_lock(); |
79ccf0f8c ipc,shm: shorten ... |
777 778 |
ipcp = ipcctl_pre_down_nolock(ns, &shm_ids(ns), shmid, cmd, &shmid64.shm_perm, 0); |
7b4cc5d84 ipc: move locking... |
779 780 |
if (IS_ERR(ipcp)) { err = PTR_ERR(ipcp); |
7b4cc5d84 ipc: move locking... |
781 782 |
goto out_unlock1; } |
8d4cc8b5c IPC/shared memory... |
783 |
|
a5f75e7f2 IPC: consolidate ... |
784 |
shp = container_of(ipcp, struct shmid_kernel, shm_perm); |
8d4cc8b5c IPC/shared memory... |
785 786 787 |
err = security_shm_shmctl(shp, cmd); if (err) |
79ccf0f8c ipc,shm: shorten ... |
788 |
goto out_unlock1; |
7b4cc5d84 ipc: move locking... |
789 |
|
8d4cc8b5c IPC/shared memory... |
790 791 |
switch (cmd) { case IPC_RMID: |
79ccf0f8c ipc,shm: shorten ... |
792 |
ipc_lock_object(&shp->shm_perm); |
7b4cc5d84 ipc: move locking... |
793 |
/* do_shm_rmid unlocks the ipc object and rcu */ |
8d4cc8b5c IPC/shared memory... |
794 795 796 |
do_shm_rmid(ns, ipcp); goto out_up; case IPC_SET: |
79ccf0f8c ipc,shm: shorten ... |
797 |
ipc_lock_object(&shp->shm_perm); |
1efdb69b0 userns: Convert i... |
798 799 |
err = ipc_update_perm(&shmid64.shm_perm, ipcp); if (err) |
7b4cc5d84 ipc: move locking... |
800 |
goto out_unlock0; |
8d4cc8b5c IPC/shared memory... |
801 802 803 804 |
shp->shm_ctim = get_seconds(); break; default: err = -EINVAL; |
79ccf0f8c ipc,shm: shorten ... |
805 |
goto out_unlock1; |
8d4cc8b5c IPC/shared memory... |
806 |
} |
7b4cc5d84 ipc: move locking... |
807 808 809 810 811 |
out_unlock0: ipc_unlock_object(&shp->shm_perm); out_unlock1: rcu_read_unlock(); |
8d4cc8b5c IPC/shared memory... |
812 |
out_up: |
d9a605e40 ipc: rename ids->... |
813 |
up_write(&shm_ids(ns).rwsem); |
8d4cc8b5c IPC/shared memory... |
814 815 |
return err; } |
68eccc1dc ipc,shm: introduc... |
816 817 |
static int shmctl_nolock(struct ipc_namespace *ns, int shmid, int cmd, int version, void __user *buf) |
8d4cc8b5c IPC/shared memory... |
818 |
{ |
68eccc1dc ipc,shm: introduc... |
819 |
int err; |
8d4cc8b5c IPC/shared memory... |
820 |
struct shmid_kernel *shp; |
1da177e4c Linux-2.6.12-rc2 |
821 |
|
68eccc1dc ipc,shm: introduc... |
822 823 824 825 826 |
/* preliminary security checks for *_INFO */ if (cmd == IPC_INFO || cmd == SHM_INFO) { err = security_shm_shmctl(NULL, cmd); if (err) return err; |
1da177e4c Linux-2.6.12-rc2 |
827 |
} |
68eccc1dc ipc,shm: introduc... |
828 |
switch (cmd) { |
1da177e4c Linux-2.6.12-rc2 |
829 830 831 |
case IPC_INFO: { struct shminfo64 shminfo; |
e8148f758 ipc: clean up ipc... |
832 |
memset(&shminfo, 0, sizeof(shminfo)); |
4e9823111 [PATCH] IPC names... |
833 834 835 |
shminfo.shmmni = shminfo.shmseg = ns->shm_ctlmni; shminfo.shmmax = ns->shm_ctlmax; shminfo.shmall = ns->shm_ctlall; |
1da177e4c Linux-2.6.12-rc2 |
836 837 |
shminfo.shmmin = SHMMIN; |
239521f31 ipc: whitespace c... |
838 |
if (copy_shminfo_to_user(buf, &shminfo, version)) |
1da177e4c Linux-2.6.12-rc2 |
839 |
return -EFAULT; |
f4566f048 ipc: fix wrong co... |
840 |
|
d9a605e40 ipc: rename ids->... |
841 |
down_read(&shm_ids(ns).rwsem); |
7ca7e564e ipc: store ipcs i... |
842 |
err = ipc_get_maxid(&shm_ids(ns)); |
d9a605e40 ipc: rename ids->... |
843 |
up_read(&shm_ids(ns).rwsem); |
f4566f048 ipc: fix wrong co... |
844 |
|
239521f31 ipc: whitespace c... |
845 |
if (err < 0) |
1da177e4c Linux-2.6.12-rc2 |
846 847 848 849 850 851 |
err = 0; goto out; } case SHM_INFO: { struct shm_info shm_info; |
e8148f758 ipc: clean up ipc... |
852 |
memset(&shm_info, 0, sizeof(shm_info)); |
d9a605e40 ipc: rename ids->... |
853 |
down_read(&shm_ids(ns).rwsem); |
4e9823111 [PATCH] IPC names... |
854 |
shm_info.used_ids = shm_ids(ns).in_use; |
239521f31 ipc: whitespace c... |
855 |
shm_get_stat(ns, &shm_info.shm_rss, &shm_info.shm_swp); |
4e9823111 [PATCH] IPC names... |
856 |
shm_info.shm_tot = ns->shm_tot; |
1da177e4c Linux-2.6.12-rc2 |
857 858 |
shm_info.swap_attempts = 0; shm_info.swap_successes = 0; |
7ca7e564e ipc: store ipcs i... |
859 |
err = ipc_get_maxid(&shm_ids(ns)); |
d9a605e40 ipc: rename ids->... |
860 |
up_read(&shm_ids(ns).rwsem); |
e8148f758 ipc: clean up ipc... |
861 |
if (copy_to_user(buf, &shm_info, sizeof(shm_info))) { |
1da177e4c Linux-2.6.12-rc2 |
862 863 864 865 866 867 868 869 870 871 872 873 |
err = -EFAULT; goto out; } err = err < 0 ? 0 : err; goto out; } case SHM_STAT: case IPC_STAT: { struct shmid64_ds tbuf; int result; |
023a53557 ipc: integrate ip... |
874 |
|
c97cb9cca ipc,shm: make shm... |
875 |
rcu_read_lock(); |
023a53557 ipc: integrate ip... |
876 |
if (cmd == SHM_STAT) { |
c97cb9cca ipc,shm: make shm... |
877 |
shp = shm_obtain_object(ns, shmid); |
023a53557 ipc: integrate ip... |
878 879 |
if (IS_ERR(shp)) { err = PTR_ERR(shp); |
c97cb9cca ipc,shm: make shm... |
880 |
goto out_unlock; |
023a53557 ipc: integrate ip... |
881 |
} |
7ca7e564e ipc: store ipcs i... |
882 |
result = shp->shm_perm.id; |
1da177e4c Linux-2.6.12-rc2 |
883 |
} else { |
c97cb9cca ipc,shm: make shm... |
884 |
shp = shm_obtain_object_check(ns, shmid); |
023a53557 ipc: integrate ip... |
885 886 |
if (IS_ERR(shp)) { err = PTR_ERR(shp); |
c97cb9cca ipc,shm: make shm... |
887 |
goto out_unlock; |
023a53557 ipc: integrate ip... |
888 |
} |
1da177e4c Linux-2.6.12-rc2 |
889 890 |
result = 0; } |
c97cb9cca ipc,shm: make shm... |
891 |
|
e8148f758 ipc: clean up ipc... |
892 |
err = -EACCES; |
b0e77598f userns: user name... |
893 |
if (ipcperms(ns, &shp->shm_perm, S_IRUGO)) |
1da177e4c Linux-2.6.12-rc2 |
894 |
goto out_unlock; |
c97cb9cca ipc,shm: make shm... |
895 |
|
1da177e4c Linux-2.6.12-rc2 |
896 897 898 |
err = security_shm_shmctl(shp, cmd); if (err) goto out_unlock; |
c97cb9cca ipc,shm: make shm... |
899 |
|
023a53557 ipc: integrate ip... |
900 |
memset(&tbuf, 0, sizeof(tbuf)); |
1da177e4c Linux-2.6.12-rc2 |
901 902 903 904 905 906 907 |
kernel_to_ipc64_perm(&shp->shm_perm, &tbuf.shm_perm); tbuf.shm_segsz = shp->shm_segsz; tbuf.shm_atime = shp->shm_atim; tbuf.shm_dtime = shp->shm_dtim; tbuf.shm_ctime = shp->shm_ctim; tbuf.shm_cpid = shp->shm_cprid; tbuf.shm_lpid = shp->shm_lprid; |
bc56bba8f [PATCH] shm: make... |
908 |
tbuf.shm_nattch = shp->shm_nattch; |
c97cb9cca ipc,shm: make shm... |
909 910 911 |
rcu_read_unlock(); if (copy_shmid_to_user(buf, &tbuf, version)) |
1da177e4c Linux-2.6.12-rc2 |
912 913 914 915 916 |
err = -EFAULT; else err = result; goto out; } |
68eccc1dc ipc,shm: introduc... |
917 918 919 920 921 |
default: return -EINVAL; } out_unlock: |
c97cb9cca ipc,shm: make shm... |
922 |
rcu_read_unlock(); |
68eccc1dc ipc,shm: introduc... |
923 924 925 926 927 928 929 930 931 |
out: return err; } SYSCALL_DEFINE3(shmctl, int, shmid, int, cmd, struct shmid_ds __user *, buf) { struct shmid_kernel *shp; int err, version; struct ipc_namespace *ns; |
2caacaa82 ipc,shm: shorten ... |
932 933 |
if (cmd < 0 || shmid < 0) return -EINVAL; |
68eccc1dc ipc,shm: introduc... |
934 935 936 937 938 939 940 941 942 943 |
version = ipc_parse_version(&cmd); ns = current->nsproxy->ipc_ns; switch (cmd) { case IPC_INFO: case SHM_INFO: case SHM_STAT: case IPC_STAT: return shmctl_nolock(ns, shmid, cmd, version, buf); |
2caacaa82 ipc,shm: shorten ... |
944 945 946 |
case IPC_RMID: case IPC_SET: return shmctl_down(ns, shmid, cmd, buf, version); |
1da177e4c Linux-2.6.12-rc2 |
947 948 949 |
case SHM_LOCK: case SHM_UNLOCK: { |
85046579b SHM_UNLOCK: fix l... |
950 |
struct file *shm_file; |
89e004ea5 SHM_LOCKED pages ... |
951 |
|
2caacaa82 ipc,shm: shorten ... |
952 953 |
rcu_read_lock(); shp = shm_obtain_object_check(ns, shmid); |
023a53557 ipc: integrate ip... |
954 955 |
if (IS_ERR(shp)) { err = PTR_ERR(shp); |
2caacaa82 ipc,shm: shorten ... |
956 |
goto out_unlock1; |
1da177e4c Linux-2.6.12-rc2 |
957 |
} |
1da177e4c Linux-2.6.12-rc2 |
958 |
|
a33e67510 sanitize audit_ip... |
959 |
audit_ipc_obj(&(shp->shm_perm)); |
2caacaa82 ipc,shm: shorten ... |
960 961 962 |
err = security_shm_shmctl(shp, cmd); if (err) goto out_unlock1; |
073115d6b [PATCH] Rework of... |
963 |
|
2caacaa82 ipc,shm: shorten ... |
964 |
ipc_lock_object(&shp->shm_perm); |
0f3d2b013 ipc: introduce ip... |
965 966 967 968 969 970 |
/* check if shm_destroy() is tearing down shp */ if (!ipc_valid_object(&shp->shm_perm)) { err = -EIDRM; goto out_unlock0; } |
b0e77598f userns: user name... |
971 |
if (!ns_capable(ns->user_ns, CAP_IPC_LOCK)) { |
1efdb69b0 userns: Convert i... |
972 |
kuid_t euid = current_euid(); |
1efdb69b0 userns: Convert i... |
973 |
if (!uid_eq(euid, shp->shm_perm.uid) && |
3a72660b0 ipc,shm: correct ... |
974 975 |
!uid_eq(euid, shp->shm_perm.cuid)) { err = -EPERM; |
2caacaa82 ipc,shm: shorten ... |
976 |
goto out_unlock0; |
3a72660b0 ipc,shm: correct ... |
977 978 979 |
} if (cmd == SHM_LOCK && !rlimit(RLIMIT_MEMLOCK)) { err = -EPERM; |
2caacaa82 ipc,shm: shorten ... |
980 |
goto out_unlock0; |
3a72660b0 ipc,shm: correct ... |
981 |
} |
1da177e4c Linux-2.6.12-rc2 |
982 |
} |
85046579b SHM_UNLOCK: fix l... |
983 984 |
shm_file = shp->shm_file; if (is_file_hugepages(shm_file)) |
2caacaa82 ipc,shm: shorten ... |
985 |
goto out_unlock0; |
85046579b SHM_UNLOCK: fix l... |
986 987 |
if (cmd == SHM_LOCK) { |
86a264abe CRED: Wrap curren... |
988 |
struct user_struct *user = current_user(); |
85046579b SHM_UNLOCK: fix l... |
989 990 991 992 |
err = shmem_lock(shm_file, 1, user); if (!err && !(shp->shm_perm.mode & SHM_LOCKED)) { shp->shm_perm.mode |= SHM_LOCKED; shp->mlock_user = user; |
1da177e4c Linux-2.6.12-rc2 |
993 |
} |
2caacaa82 ipc,shm: shorten ... |
994 |
goto out_unlock0; |
1da177e4c Linux-2.6.12-rc2 |
995 |
} |
85046579b SHM_UNLOCK: fix l... |
996 997 998 |
/* SHM_UNLOCK */ if (!(shp->shm_perm.mode & SHM_LOCKED)) |
2caacaa82 ipc,shm: shorten ... |
999 |
goto out_unlock0; |
85046579b SHM_UNLOCK: fix l... |
1000 1001 1002 1003 |
shmem_lock(shm_file, 0, shp->mlock_user); shp->shm_perm.mode &= ~SHM_LOCKED; shp->mlock_user = NULL; get_file(shm_file); |
2caacaa82 ipc,shm: shorten ... |
1004 1005 |
ipc_unlock_object(&shp->shm_perm); rcu_read_unlock(); |
245132643 SHM_UNLOCK: fix U... |
1006 |
shmem_unlock_mapping(shm_file->f_mapping); |
2caacaa82 ipc,shm: shorten ... |
1007 |
|
85046579b SHM_UNLOCK: fix l... |
1008 |
fput(shm_file); |
8d4cc8b5c IPC/shared memory... |
1009 |
return err; |
2caacaa82 ipc,shm: shorten ... |
1010 |
} |
1da177e4c Linux-2.6.12-rc2 |
1011 |
default: |
8d4cc8b5c IPC/shared memory... |
1012 |
return -EINVAL; |
1da177e4c Linux-2.6.12-rc2 |
1013 |
} |
2caacaa82 ipc,shm: shorten ... |
1014 1015 1016 1017 |
out_unlock0: ipc_unlock_object(&shp->shm_perm); out_unlock1: rcu_read_unlock(); |
1da177e4c Linux-2.6.12-rc2 |
1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 |
return err; } /* * Fix shmaddr, allocate descriptor, map shm, add attach descriptor to lists. * * NOTE! Despite the name, this is NOT a direct system call entrypoint. The * "raddr" thing points to kernel space, and there has to be a wrapper around * this. */ |
079a96ae3 ipc: add COMPAT_S... |
1028 1029 |
long do_shmat(int shmid, char __user *shmaddr, int shmflg, ulong *raddr, unsigned long shmlba) |
1da177e4c Linux-2.6.12-rc2 |
1030 1031 1032 1033 |
{ struct shmid_kernel *shp; unsigned long addr; unsigned long size; |
239521f31 ipc: whitespace c... |
1034 |
struct file *file; |
1da177e4c Linux-2.6.12-rc2 |
1035 1036 1037 |
int err; unsigned long flags; unsigned long prot; |
1da177e4c Linux-2.6.12-rc2 |
1038 |
int acc_mode; |
4e9823111 [PATCH] IPC names... |
1039 |
struct ipc_namespace *ns; |
bc56bba8f [PATCH] shm: make... |
1040 1041 |
struct shm_file_data *sfd; struct path path; |
aeb5d7270 [PATCH] introduce... |
1042 |
fmode_t f_mode; |
41badc15c mm: make do_mmap_... |
1043 |
unsigned long populate = 0; |
1da177e4c Linux-2.6.12-rc2 |
1044 |
|
bc56bba8f [PATCH] shm: make... |
1045 1046 |
err = -EINVAL; if (shmid < 0) |
1da177e4c Linux-2.6.12-rc2 |
1047 |
goto out; |
bc56bba8f [PATCH] shm: make... |
1048 |
else if ((addr = (ulong)shmaddr)) { |
079a96ae3 ipc: add COMPAT_S... |
1049 |
if (addr & (shmlba - 1)) { |
1da177e4c Linux-2.6.12-rc2 |
1050 |
if (shmflg & SHM_RND) |
079a96ae3 ipc: add COMPAT_S... |
1051 |
addr &= ~(shmlba - 1); /* round down */ |
1da177e4c Linux-2.6.12-rc2 |
1052 1053 1054 1055 |
else #ifndef __ARCH_FORCE_SHMLBA if (addr & ~PAGE_MASK) #endif |
bc56bba8f [PATCH] shm: make... |
1056 |
goto out; |
1da177e4c Linux-2.6.12-rc2 |
1057 1058 1059 1060 |
} flags = MAP_SHARED | MAP_FIXED; } else { if ((shmflg & SHM_REMAP)) |
bc56bba8f [PATCH] shm: make... |
1061 |
goto out; |
1da177e4c Linux-2.6.12-rc2 |
1062 1063 1064 1065 1066 1067 |
flags = MAP_SHARED; } if (shmflg & SHM_RDONLY) { prot = PROT_READ; |
1da177e4c Linux-2.6.12-rc2 |
1068 |
acc_mode = S_IRUGO; |
bc56bba8f [PATCH] shm: make... |
1069 |
f_mode = FMODE_READ; |
1da177e4c Linux-2.6.12-rc2 |
1070 1071 |
} else { prot = PROT_READ | PROT_WRITE; |
1da177e4c Linux-2.6.12-rc2 |
1072 |
acc_mode = S_IRUGO | S_IWUGO; |
bc56bba8f [PATCH] shm: make... |
1073 |
f_mode = FMODE_READ | FMODE_WRITE; |
1da177e4c Linux-2.6.12-rc2 |
1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 |
} if (shmflg & SHM_EXEC) { prot |= PROT_EXEC; acc_mode |= S_IXUGO; } /* * We cannot rely on the fs check since SYSV IPC does have an * additional creator id... */ |
4e9823111 [PATCH] IPC names... |
1084 |
ns = current->nsproxy->ipc_ns; |
c2c737a04 ipc,shm: shorten ... |
1085 1086 |
rcu_read_lock(); shp = shm_obtain_object_check(ns, shmid); |
023a53557 ipc: integrate ip... |
1087 1088 |
if (IS_ERR(shp)) { err = PTR_ERR(shp); |
c2c737a04 ipc,shm: shorten ... |
1089 |
goto out_unlock; |
023a53557 ipc: integrate ip... |
1090 |
} |
bc56bba8f [PATCH] shm: make... |
1091 1092 |
err = -EACCES; |
b0e77598f userns: user name... |
1093 |
if (ipcperms(ns, &shp->shm_perm, acc_mode)) |
bc56bba8f [PATCH] shm: make... |
1094 |
goto out_unlock; |
1da177e4c Linux-2.6.12-rc2 |
1095 1096 |
err = security_shm_shmat(shp, shmaddr, shmflg); |
bc56bba8f [PATCH] shm: make... |
1097 1098 |
if (err) goto out_unlock; |
c2c737a04 ipc,shm: shorten ... |
1099 |
ipc_lock_object(&shp->shm_perm); |
a399b29df ipc,shm: fix shm_... |
1100 1101 |
/* check if shm_destroy() is tearing down shp */ |
0f3d2b013 ipc: introduce ip... |
1102 |
if (!ipc_valid_object(&shp->shm_perm)) { |
a399b29df ipc,shm: fix shm_... |
1103 1104 1105 1106 |
ipc_unlock_object(&shp->shm_perm); err = -EIDRM; goto out_unlock; } |
2c48b9c45 switch alloc_file... |
1107 1108 |
path = shp->shm_file->f_path; path_get(&path); |
1da177e4c Linux-2.6.12-rc2 |
1109 |
shp->shm_nattch++; |
75c3cfa85 VFS: assorted wei... |
1110 |
size = i_size_read(d_inode(path.dentry)); |
c2c737a04 ipc,shm: shorten ... |
1111 1112 |
ipc_unlock_object(&shp->shm_perm); rcu_read_unlock(); |
1da177e4c Linux-2.6.12-rc2 |
1113 |
|
bc56bba8f [PATCH] shm: make... |
1114 1115 |
err = -ENOMEM; sfd = kzalloc(sizeof(*sfd), GFP_KERNEL); |
f42569b13 ipc,shm: cleanup ... |
1116 1117 1118 1119 |
if (!sfd) { path_put(&path); goto out_nattch; } |
bc56bba8f [PATCH] shm: make... |
1120 |
|
2c48b9c45 switch alloc_file... |
1121 1122 |
file = alloc_file(&path, f_mode, is_file_hugepages(shp->shm_file) ? |
c4caa7781 file ->get_unmapp... |
1123 1124 |
&shm_file_operations_huge : &shm_file_operations); |
39b652527 fs: Preserve erro... |
1125 |
err = PTR_ERR(file); |
f42569b13 ipc,shm: cleanup ... |
1126 1127 1128 1129 1130 |
if (IS_ERR(file)) { kfree(sfd); path_put(&path); goto out_nattch; } |
bc56bba8f [PATCH] shm: make... |
1131 |
|
bc56bba8f [PATCH] shm: make... |
1132 |
file->private_data = sfd; |
bc56bba8f [PATCH] shm: make... |
1133 |
file->f_mapping = shp->shm_file->f_mapping; |
7ca7e564e ipc: store ipcs i... |
1134 |
sfd->id = shp->shm_perm.id; |
bc56bba8f [PATCH] shm: make... |
1135 1136 1137 |
sfd->ns = get_ipc_ns(ns); sfd->file = shp->shm_file; sfd->vm_ops = NULL; |
8b3ec6814 take security_mma... |
1138 1139 1140 |
err = security_mmap_file(file, prot, flags); if (err) goto out_fput; |
91f4f94ea ipc, shm: make sh... |
1141 1142 1143 1144 |
if (down_write_killable(¤t->mm->mmap_sem)) { err = -EINTR; goto out_fput; } |
1da177e4c Linux-2.6.12-rc2 |
1145 |
if (addr && !(shmflg & SHM_REMAP)) { |
bc56bba8f [PATCH] shm: make... |
1146 |
err = -EINVAL; |
247a8ce82 ipc/shm.c: check ... |
1147 1148 |
if (addr + size < addr) goto invalid; |
1da177e4c Linux-2.6.12-rc2 |
1149 1150 |
if (find_vma_intersection(current->mm, addr, addr + size)) goto invalid; |
1da177e4c Linux-2.6.12-rc2 |
1151 |
} |
f42569b13 ipc,shm: cleanup ... |
1152 |
|
bebeb3d68 mm: introduce mm_... |
1153 1154 |
addr = do_mmap_pgoff(file, addr, size, prot, flags, 0, &populate); *raddr = addr; |
bc56bba8f [PATCH] shm: make... |
1155 |
err = 0; |
bebeb3d68 mm: introduce mm_... |
1156 1157 |
if (IS_ERR_VALUE(addr)) err = (long)addr; |
1da177e4c Linux-2.6.12-rc2 |
1158 1159 |
invalid: up_write(¤t->mm->mmap_sem); |
bebeb3d68 mm: introduce mm_... |
1160 |
if (populate) |
41badc15c mm: make do_mmap_... |
1161 |
mm_populate(addr, populate); |
1da177e4c Linux-2.6.12-rc2 |
1162 |
|
8b3ec6814 take security_mma... |
1163 |
out_fput: |
bc56bba8f [PATCH] shm: make... |
1164 1165 1166 |
fput(file); out_nattch: |
d9a605e40 ipc: rename ids->... |
1167 |
down_write(&shm_ids(ns).rwsem); |
00c2bf85d ipc: get rid of i... |
1168 |
shp = shm_lock(ns, shmid); |
1da177e4c Linux-2.6.12-rc2 |
1169 |
shp->shm_nattch--; |
b34a6b1da ipc: introduce sh... |
1170 |
if (shm_may_destroy(ns, shp)) |
4e9823111 [PATCH] IPC names... |
1171 |
shm_destroy(ns, shp); |
1da177e4c Linux-2.6.12-rc2 |
1172 1173 |
else shm_unlock(shp); |
d9a605e40 ipc: rename ids->... |
1174 |
up_write(&shm_ids(ns).rwsem); |
1da177e4c Linux-2.6.12-rc2 |
1175 |
return err; |
bc56bba8f [PATCH] shm: make... |
1176 1177 |
out_unlock: |
c2c737a04 ipc,shm: shorten ... |
1178 |
rcu_read_unlock(); |
f42569b13 ipc,shm: cleanup ... |
1179 1180 |
out: return err; |
1da177e4c Linux-2.6.12-rc2 |
1181 |
} |
d5460c997 [CVE-2009-0029] S... |
1182 |
SYSCALL_DEFINE3(shmat, int, shmid, char __user *, shmaddr, int, shmflg) |
7d87e14c2 [PATCH] consolida... |
1183 1184 1185 |
{ unsigned long ret; long err; |
079a96ae3 ipc: add COMPAT_S... |
1186 |
err = do_shmat(shmid, shmaddr, shmflg, &ret, SHMLBA); |
7d87e14c2 [PATCH] consolida... |
1187 1188 1189 1190 1191 |
if (err) return err; force_successful_syscall_return(); return (long)ret; } |
1da177e4c Linux-2.6.12-rc2 |
1192 1193 1194 1195 |
/* * detach and kill segment if marked destroyed. * The work is done in shm_close. */ |
d5460c997 [CVE-2009-0029] S... |
1196 |
SYSCALL_DEFINE1(shmdt, char __user *, shmaddr) |
1da177e4c Linux-2.6.12-rc2 |
1197 1198 |
{ struct mm_struct *mm = current->mm; |
586c7e6a2 shm: fix unused w... |
1199 |
struct vm_area_struct *vma; |
1da177e4c Linux-2.6.12-rc2 |
1200 |
unsigned long addr = (unsigned long)shmaddr; |
1da177e4c Linux-2.6.12-rc2 |
1201 |
int retval = -EINVAL; |
586c7e6a2 shm: fix unused w... |
1202 1203 |
#ifdef CONFIG_MMU loff_t size = 0; |
d3c97900b ipc/shm.c: fix ov... |
1204 |
struct file *file; |
586c7e6a2 shm: fix unused w... |
1205 1206 |
struct vm_area_struct *next; #endif |
1da177e4c Linux-2.6.12-rc2 |
1207 |
|
df1e2fb54 [PATCH] shmdt: ch... |
1208 1209 |
if (addr & ~PAGE_MASK) return retval; |
91f4f94ea ipc, shm: make sh... |
1210 1211 |
if (down_write_killable(&mm->mmap_sem)) return -EINTR; |
1da177e4c Linux-2.6.12-rc2 |
1212 1213 1214 1215 1216 1217 1218 1219 1220 |
/* * This function tries to be smart and unmap shm segments that * were modified by partial mlock or munmap calls: * - It first determines the size of the shm segment that should be * unmapped: It searches for a vma that is backed by shm and that * started at address shmaddr. It records it's size and then unmaps * it. * - Then it unmaps all shm vmas that started at shmaddr and that |
d3c97900b ipc/shm.c: fix ov... |
1221 1222 |
* are within the initially determined size and that are from the * same shm segment from which we determined the size. |
1da177e4c Linux-2.6.12-rc2 |
1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 |
* Errors from do_munmap are ignored: the function only fails if * it's called with invalid parameters or if it's called to unmap * a part of a vma. Both calls in this function are for full vmas, * the parameters are directly copied from the vma itself and always * valid - therefore do_munmap cannot fail. (famous last words?) */ /* * If it had been mremap()'d, the starting address would not * match the usual checks anyway. So assume all vma's are * above the starting address given. */ vma = find_vma(mm, addr); |
8feae1311 NOMMU: Make VMAs ... |
1235 |
#ifdef CONFIG_MMU |
1da177e4c Linux-2.6.12-rc2 |
1236 1237 1238 1239 1240 1241 1242 1243 |
while (vma) { next = vma->vm_next; /* * Check if the starting address would match, i.e. it's * a fragment created by mprotect() and/or munmap(), or it * otherwise it starts at this address with no hassles. */ |
bc56bba8f [PATCH] shm: make... |
1244 |
if ((vma->vm_ops == &shm_vm_ops) && |
1da177e4c Linux-2.6.12-rc2 |
1245 |
(vma->vm_start - addr)/PAGE_SIZE == vma->vm_pgoff) { |
d3c97900b ipc/shm.c: fix ov... |
1246 1247 1248 1249 1250 1251 1252 |
/* * Record the file of the shm segment being * unmapped. With mremap(), someone could place * page from another segment but with equal offsets * in the range we are unmapping. */ file = vma->vm_file; |
07a46ed27 shmdt: use i_size... |
1253 |
size = i_size_read(file_inode(vma->vm_file)); |
1da177e4c Linux-2.6.12-rc2 |
1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 |
do_munmap(mm, vma->vm_start, vma->vm_end - vma->vm_start); /* * We discovered the size of the shm segment, so * break out of here and fall through to the next * loop that uses the size information to stop * searching for matching vma's. */ retval = 0; vma = next; break; } vma = next; } /* * We need look no further than the maximum address a fragment * could possibly have landed at. Also cast things to loff_t to |
25985edce Fix common misspe... |
1271 |
* prevent overflows and make comparisons vs. equal-width types. |
1da177e4c Linux-2.6.12-rc2 |
1272 |
*/ |
8e36709d8 [PATCH] shmdt can... |
1273 |
size = PAGE_ALIGN(size); |
1da177e4c Linux-2.6.12-rc2 |
1274 1275 1276 1277 |
while (vma && (loff_t)(vma->vm_end - addr) <= size) { next = vma->vm_next; /* finding a matching vma now does not alter retval */ |
bc56bba8f [PATCH] shm: make... |
1278 |
if ((vma->vm_ops == &shm_vm_ops) && |
d3c97900b ipc/shm.c: fix ov... |
1279 1280 |
((vma->vm_start - addr)/PAGE_SIZE == vma->vm_pgoff) && (vma->vm_file == file)) |
1da177e4c Linux-2.6.12-rc2 |
1281 1282 1283 |
do_munmap(mm, vma->vm_start, vma->vm_end - vma->vm_start); vma = next; } |
8feae1311 NOMMU: Make VMAs ... |
1284 1285 1286 |
#else /* CONFIG_MMU */ /* under NOMMU conditions, the exact address to be destroyed must be * given */ |
530fcd16d ipc, shm: guard a... |
1287 |
if (vma && vma->vm_start == addr && vma->vm_ops == &shm_vm_ops) { |
8feae1311 NOMMU: Make VMAs ... |
1288 1289 1290 1291 1292 |
do_munmap(mm, vma->vm_start, vma->vm_end - vma->vm_start); retval = 0; } #endif |
1da177e4c Linux-2.6.12-rc2 |
1293 1294 1295 1296 1297 |
up_write(&mm->mmap_sem); return retval; } #ifdef CONFIG_PROC_FS |
19b4946ca [PATCH] ipc: conv... |
1298 |
static int sysvipc_shm_proc_show(struct seq_file *s, void *it) |
1da177e4c Linux-2.6.12-rc2 |
1299 |
{ |
1efdb69b0 userns: Convert i... |
1300 |
struct user_namespace *user_ns = seq_user_ns(s); |
19b4946ca [PATCH] ipc: conv... |
1301 |
struct shmid_kernel *shp = it; |
b79521807 ipc/shm.c: add RS... |
1302 1303 1304 |
unsigned long rss = 0, swp = 0; shm_add_rss_swap(shp, &rss, &swp); |
1da177e4c Linux-2.6.12-rc2 |
1305 |
|
6c826818f /proc/sysvipc/shm... |
1306 1307 1308 1309 1310 |
#if BITS_PER_LONG <= 32 #define SIZE_SPEC "%10lu" #else #define SIZE_SPEC "%21lu" #endif |
1da177e4c Linux-2.6.12-rc2 |
1311 |
|
7f032d6ef ipc: remove use o... |
1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 |
seq_printf(s, "%10d %10d %4o " SIZE_SPEC " %5u %5u " "%5lu %5u %5u %5u %5u %10lu %10lu %10lu " SIZE_SPEC " " SIZE_SPEC " ", shp->shm_perm.key, shp->shm_perm.id, shp->shm_perm.mode, shp->shm_segsz, shp->shm_cprid, shp->shm_lprid, shp->shm_nattch, from_kuid_munged(user_ns, shp->shm_perm.uid), from_kgid_munged(user_ns, shp->shm_perm.gid), from_kuid_munged(user_ns, shp->shm_perm.cuid), from_kgid_munged(user_ns, shp->shm_perm.cgid), shp->shm_atim, shp->shm_dtim, shp->shm_ctim, rss * PAGE_SIZE, swp * PAGE_SIZE); return 0; |
1da177e4c Linux-2.6.12-rc2 |
1335 1336 |
} #endif |