sig_machdep.c revision 1.3 1 /* $NetBSD: sig_machdep.c,v 1.3 2003/07/15 02:29:41 lukem Exp $ */
2
3 /*-
4 * Copyright (c) 2002 The NetBSD Foundation, Inc.
5 * All rights reserved.
6 *
7 * This code is derived from software contributed to The NetBSD Foundation
8 * by Matthew Fredette.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 * 1. Redistributions of source code must retain the above copyright
14 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
18 * 3. All advertising materials mentioning features or use of this software
19 * must display the following acknowledgement:
20 * This product includes software developed by the NetBSD
21 * Foundation, Inc. and its contributors.
22 * 4. Neither the name of The NetBSD Foundation nor the names of its
23 * contributors may be used to endorse or promote products derived
24 * from this software without specific prior written permission.
25 *
26 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
27 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
28 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
29 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
30 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
31 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
32 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
33 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
34 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
35 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
36 * POSSIBILITY OF SUCH DAMAGE.
37 */
38
39 /*
40 * Copyright (c) 1988 University of Utah.
41 * Copyright (c) 1982, 1986, 1990, 1993
42 * The Regents of the University of California. All rights reserved.
43 *
44 * This code is derived from software contributed to Berkeley by
45 * the Systems Programming Group of the University of Utah Computer
46 * Science Department.
47 *
48 * Redistribution and use in source and binary forms, with or without
49 * modification, are permitted provided that the following conditions
50 * are met:
51 * 1. Redistributions of source code must retain the above copyright
52 * notice, this list of conditions and the following disclaimer.
53 * 2. Redistributions in binary form must reproduce the above copyright
54 * notice, this list of conditions and the following disclaimer in the
55 * documentation and/or other materials provided with the distribution.
56 * 3. All advertising materials mentioning features or use of this software
57 * must display the following acknowledgement:
58 * This product includes software developed by the University of
59 * California, Berkeley and its contributors.
60 * 4. Neither the name of the University nor the names of its contributors
61 * may be used to endorse or promote products derived from this software
62 * without specific prior written permission.
63 *
64 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
65 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
66 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
67 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
68 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
69 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
70 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
71 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
72 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
73 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
74 * SUCH DAMAGE.
75 *
76 * from: Utah Hdr: machdep.c 1.74 92/12/20
77 * from: @(#)machdep.c 8.10 (Berkeley) 4/20/94
78 */
79
80 #include <sys/cdefs.h>
81 __KERNEL_RCSID(0, "$NetBSD: sig_machdep.c,v 1.3 2003/07/15 02:29:41 lukem Exp $");
82
83 #include "opt_compat_netbsd.h"
84
85 #define __HPPA_SIGNAL_PRIVATE
86
87 #include <sys/param.h>
88 #include <sys/systm.h>
89 #include <sys/kernel.h>
90 #include <sys/proc.h>
91 #include <sys/user.h>
92 #include <sys/signal.h>
93 #include <sys/signalvar.h>
94
95 #include <sys/mount.h>
96 #include <sys/syscallargs.h>
97
98 #include <machine/cpu.h>
99 #include <machine/reg.h>
100
101 #ifdef DEBUG
102 int sigdebug = 0xff;
103 int sigpid = 0;
104 #define SDB_FOLLOW 0x01
105 #define SDB_KSTACK 0x02
106 #define SDB_FPSTATE 0x04
107 #endif
108
109 /*
110 * Send an interrupt to process.
111 */
112 void
113 sendsig(sig, mask, code)
114 int sig;
115 sigset_t *mask;
116 u_long code;
117 {
118 struct proc *p = curproc;
119 struct sigacts *ps = p->p_sigacts;
120 struct sigframe *fp, kf;
121 caddr_t sp;
122 struct trapframe *tf;
123 int onstack, fsize;
124 sig_t catcher = SIGACTION(p, sig).sa_handler;
125
126 tf = (struct trapframe *)p->p_md.md_regs;
127
128 /* Do we need to jump onto the signal stack? */
129 onstack =
130 (p->p_sigctx.ps_sigstk.ss_flags & (SS_DISABLE | SS_ONSTACK)) == 0 &&
131 (SIGACTION(p, sig).sa_flags & SA_ONSTACK) != 0;
132
133 /*
134 * Allocate space for the signal handler context.
135 * The PA-RISC calling convention mandates that
136 * the stack pointer must always be 64-byte aligned,
137 * and points to the first *unused* byte.
138 */
139 fsize = sizeof(struct sigframe);
140 sp = (onstack ?
141 (caddr_t)p->p_sigctx.ps_sigstk.ss_sp :
142 (caddr_t)tf->tf_sp);
143 sp = (caddr_t)(((u_int)(sp + fsize + 63)) & ~63);
144 fp = (struct sigframe *) (sp - fsize);
145
146 #ifdef DEBUG
147 if ((sigdebug & SDB_FOLLOW) && (!sigpid || p->p_pid == sigpid))
148 printf("sendsig: %s[%d] sig %d catcher %p\n",
149 p->p_comm, p->p_pid, sig, catcher);
150 #endif
151
152 /*
153 * Save necessary hardware state. Currently this includes:
154 * - original exception frame
155 * - FP coprocessor state
156 */
157 kf.sf_state.ss_flags = SS_USERREGS;
158 memcpy(&kf.sf_state.ss_frame, tf, sizeof(*tf));
159 /* XXX FP state */
160
161 /* Build the signal context to be used by sigreturn. */
162 kf.sf_sc.sc_sp = tf->tf_sp;
163 kf.sf_sc.sc_fp = tf->tf_sp; /* XXX fredette - is this right? */
164 kf.sf_sc.sc_ap = (int)&fp->sf_state;
165 kf.sf_sc.sc_pcsqh = tf->tf_iisq_head;
166 kf.sf_sc.sc_pcoqh = tf->tf_iioq_head;
167 kf.sf_sc.sc_pcsqt = tf->tf_iisq_tail;
168 kf.sf_sc.sc_pcoqt = tf->tf_iioq_tail;
169 kf.sf_sc.sc_ps = tf->tf_ipsw;
170
171 /* Save signal stack. */
172 kf.sf_sc.sc_onstack = p->p_sigctx.ps_sigstk.ss_flags & SS_ONSTACK;
173
174 /* Save signal mask. */
175 kf.sf_sc.sc_mask = *mask;
176
177 /* Fill the calling convention part of the signal frame. */
178 kf.sf_psp = 0;
179 kf.sf_clup = 0; /* XXX fredette - is this right? */
180 kf.sf_sl = 0; /* XXX fredette - is this right? */
181 kf.sf_edp = 0; /* XXX fredette - is this right? */
182
183 /* Copy out the signal frame. */
184 if (copyout(&kf, fp, fsize)) {
185 #ifdef DEBUG
186 if ((sigdebug & SDB_KSTACK) && p->p_pid == sigpid)
187 printf("sendsig(%d): copyout failed on sig %d\n",
188 p->p_pid, sig);
189 #endif
190 /*
191 * Process has trashed its stack; give it an illegal
192 * instruction to halt it in its tracks.
193 */
194 sigexit(p, SIGILL);
195 /* NOTREACHED */
196 }
197 #ifdef DEBUG
198 if (sigdebug & SDB_FOLLOW)
199 printf("sendsig(%d): sig %d scp %p fp %p sc_sp %x sc_ap %x\n",
200 p->p_pid, sig, &fp->sf_sc, fp,
201 kf.sf_sc.sc_sp, kf.sf_sc.sc_ap);
202 #endif
203
204 /* Set up the registers to return to sigcode. */
205 switch (ps->sa_sigdesc[sig].sd_vers) {
206 #if 1 /* COMPAT_16 */
207 case 0: /* legacy on-stack sigtramp */
208 tf->tf_iioq_head =
209 (int)p->p_sigctx.ps_sigcode | HPPA_PC_PRIV_USER;
210 tf->tf_iioq_tail = tf->tf_iioq_head + 4;
211 break;
212 #endif
213
214 case 1:
215 tf->tf_iioq_head =
216 (int)ps->sa_sigdesc[sig].sd_tramp | HPPA_PC_PRIV_USER;
217 tf->tf_iioq_tail = tf->tf_iioq_head + 4;
218 break;
219
220 default:
221 /* Don't know what trampoline version; kill it. */
222 sigexit(p, SIGILL);
223 }
224
225 tf->tf_sp = (int)sp;
226 tf->tf_r3 = (int)&fp->sf_sc;
227 tf->tf_arg0 = sig;
228 tf->tf_arg1 = code;
229 tf->tf_arg2 = (int)&fp->sf_sc;
230 tf->tf_arg3 = (int)catcher;
231
232 /* Remember that we're now on the signal stack. */
233 if (onstack)
234 p->p_sigctx.ps_sigstk.ss_flags |= SS_ONSTACK;
235
236 #ifdef DEBUG
237 if ((sigdebug & SDB_KSTACK) && p->p_pid == sigpid)
238 printf("sendsig(%d): sig %d returns\n",
239 p->p_pid, sig);
240 #endif
241 }
242
243 int
244 sys___sigreturn14(p, v, retval)
245 struct proc *p;
246 void *v;
247 register_t *retval;
248 {
249 struct sys___sigreturn14_args /* {
250 syscallarg(struct sigcontext *) sigcntxp;
251 } */ *uap = v;
252 struct sigcontext *scp;
253 struct trapframe *tf;
254 struct sigcontext tsigc;
255 struct sigstate tstate;
256 int rf, flags;
257
258 /*
259 * The trampoline code hands us the context.
260 * It is unsafe to keep track of it ourselves, in the event that a
261 * program jumps out of a signal handler.
262 */
263 scp = SCARG(uap, sigcntxp);
264 #ifdef DEBUG
265 if (sigdebug & SDB_FOLLOW)
266 printf("sigreturn: pid %d, scp %p\n", p->p_pid, scp);
267 #endif
268 if ((int)scp & 3)
269 return (EINVAL);
270
271 if (copyin(scp, &tsigc, sizeof(tsigc)) != 0)
272 return (EFAULT);
273 scp = &tsigc;
274
275 /* Make sure the user isn't pulling a fast one on us! */
276 /* XXX fredette - until this is done, huge security hole here. */
277 /* XXX fredette - requiring that PSL_R be zero will hurt debuggers. */
278 #define PSW_MBS (PSW_C|PSW_Q|PSW_P|PSW_D|PSW_I)
279 #define PSW_MBZ (PSW_Y|PSW_Z|PSW_S|PSW_X|PSW_M|PSW_R)
280 if ((scp->sc_ps & (PSW_MBS|PSW_MBZ)) != PSW_MBS)
281 return (EINVAL);
282
283 /* Restore register context. */
284 tf = (struct trapframe *) p->p_md.md_regs;
285
286 /*
287 * Grab pointer to hardware state information.
288 * If zero, the user is probably doing a longjmp.
289 */
290 if ((rf = scp->sc_ap) == 0)
291 goto restore;
292
293 /*
294 * See if there is anything to do before we go to the
295 * expense of copying in the trapframe
296 */
297 flags = fuword((caddr_t)rf);
298 #ifdef DEBUG
299 if (sigdebug & SDB_FOLLOW)
300 printf("sigreturn(%d): sc_ap %x flags %x\n",
301 p->p_pid, rf, flags);
302 #endif
303 /* fuword failed (bogus sc_ap value). */
304 if (flags == -1)
305 return (EINVAL);
306
307 if (flags == 0 || copyin((caddr_t)rf, &tstate, sizeof(tstate)) != 0)
308 goto restore;
309 #ifdef DEBUG
310 if ((sigdebug & SDB_KSTACK) && p->p_pid == sigpid)
311 printf("sigreturn(%d): ssp %p usp %x scp %p\n",
312 p->p_pid, &flags, scp->sc_sp, SCARG(uap, sigcntxp));
313 #endif
314
315 /*
316 * Restore most of the users registers except for those
317 * in the sigcontext; they will be handled below.
318 */
319 if (flags & SS_USERREGS) {
320
321 /*
322 * There are more registers that the user can tell
323 * us to bash than registers that, for security
324 * or other reasons, we must protect. So it's
325 * easier (but not faster), to copy these sensitive
326 * register values into the user-provided frame,
327 * then bulk-copy the user-provided frame into
328 * the process' frame.
329 */
330 #define SIG_PROTECT(r) tstate.ss_frame.r = tf->r
331 /* SRs 5,6,7 must be protected. */
332 SIG_PROTECT(tf_sr5);
333 SIG_PROTECT(tf_sr6);
334 SIG_PROTECT(tf_sr7);
335
336 /* all CRs except CR11 must be protected. */
337 SIG_PROTECT(tf_rctr); /* CR0 */
338 /* CRs 1-8 are reserved */
339 SIG_PROTECT(tf_pidr1); /* CR8 */
340 SIG_PROTECT(tf_pidr2); /* CR9 */
341 SIG_PROTECT(tf_ccr); /* CR10 */
342 SIG_PROTECT(tf_pidr3); /* CR12 */
343 SIG_PROTECT(tf_pidr4); /* CR14 */
344 SIG_PROTECT(tf_eiem); /* CR15 */
345 /* CR17 is the IISQ head */
346 /* CR18 is the IIOQ head */
347 SIG_PROTECT(tf_iir); /* CR19 */
348 SIG_PROTECT(tf_isr); /* CR20 */
349 SIG_PROTECT(tf_ior); /* CR21 */
350 /* CR22 is the IPSW */
351 SIG_PROTECT(tf_eirr); /* CR23 */
352 SIG_PROTECT(tf_hptm); /* CR24 */
353 SIG_PROTECT(tf_vtop); /* CR25 */
354 /* XXX where are CR26, CR27, CR29, CR31? */
355 SIG_PROTECT(tf_cr28); /* CR28 */
356 SIG_PROTECT(tf_cr30); /* CR30 */
357 #undef SIG_PROTECT
358
359 /* The bulk copy. */
360 *tf = tstate.ss_frame;
361 }
362
363 /*
364 * Restore the original FP context
365 */
366 /* XXX fredette */
367
368 restore:
369 /*
370 * Restore the user supplied information.
371 * This should be at the last so that the error (EINVAL)
372 * is reported to the sigreturn caller, not to the
373 * jump destination.
374 */
375
376 tf->tf_sp = scp->sc_sp;
377 /* XXX should we be doing the space registers? */
378 tf->tf_iisq_head = scp->sc_pcsqh;
379 tf->tf_iioq_head = scp->sc_pcoqh | HPPA_PC_PRIV_USER;
380 tf->tf_iisq_tail = scp->sc_pcsqt;
381 tf->tf_iioq_tail = scp->sc_pcoqt | HPPA_PC_PRIV_USER;
382 tf->tf_ipsw = scp->sc_ps;
383
384 /* Restore signal stack. */
385 if (scp->sc_onstack & SS_ONSTACK)
386 p->p_sigctx.ps_sigstk.ss_flags |= SS_ONSTACK;
387 else
388 p->p_sigctx.ps_sigstk.ss_flags &= ~SS_ONSTACK;
389
390 /* Restore signal mask. */
391 (void) sigprocmask1(p, SIG_SETMASK, &scp->sc_mask, 0);
392
393 #ifdef DEBUG
394 #if 0 /* XXX FP state */
395 if ((sigdebug & SDB_FPSTATE) && *(char *)&tstate.ss_fpstate)
396 printf("sigreturn(%d): copied in FP state (%x) at %p\n",
397 p->p_pid, *(u_int *)&tstate.ss_fpstate,
398 &tstate.ss_fpstate);
399 #endif
400 if ((sigdebug & SDB_FOLLOW) ||
401 ((sigdebug & SDB_KSTACK) && p->p_pid == sigpid))
402 printf("sigreturn(%d): returns\n", p->p_pid);
403 #endif
404 return (EJUSTRETURN);
405 }
406
407