Lines Matching refs:bprm
81 static int bprm_creds_from_file(struct linux_binprm *bprm);
185 static void acct_arg_size(struct linux_binprm *bprm, unsigned long pages) in acct_arg_size() argument
188 long diff = (long)(pages - bprm->vma_pages); in acct_arg_size()
193 bprm->vma_pages = pages; in acct_arg_size()
197 static struct page *get_arg_page(struct linux_binprm *bprm, unsigned long pos, in get_arg_page() argument
201 struct vm_area_struct *vma = bprm->vma; in get_arg_page()
202 struct mm_struct *mm = bprm->mm; in get_arg_page()
233 acct_arg_size(bprm, vma_pages(vma)); in get_arg_page()
243 static void free_arg_pages(struct linux_binprm *bprm) in free_arg_pages() argument
247 static void flush_arg_page(struct linux_binprm *bprm, unsigned long pos, in flush_arg_page() argument
250 flush_cache_page(bprm->vma, pos, page_to_pfn(page)); in flush_arg_page()
253 static int __bprm_mm_init(struct linux_binprm *bprm) in __bprm_mm_init() argument
257 struct mm_struct *mm = bprm->mm; in __bprm_mm_init()
259 bprm->vma = vma = vm_area_alloc(mm); in __bprm_mm_init()
295 bprm->p = vma->vm_end - sizeof(void *); in __bprm_mm_init()
302 bprm->vma = NULL; in __bprm_mm_init()
307 static bool valid_arg_len(struct linux_binprm *bprm, long len) in valid_arg_len() argument
314 static inline void acct_arg_size(struct linux_binprm *bprm, unsigned long pages) in acct_arg_size() argument
318 static struct page *get_arg_page(struct linux_binprm *bprm, unsigned long pos, in get_arg_page() argument
323 page = bprm->page[pos / PAGE_SIZE]; in get_arg_page()
328 bprm->page[pos / PAGE_SIZE] = page; in get_arg_page()
338 static void free_arg_page(struct linux_binprm *bprm, int i) in free_arg_page() argument
340 if (bprm->page[i]) { in free_arg_page()
341 __free_page(bprm->page[i]); in free_arg_page()
342 bprm->page[i] = NULL; in free_arg_page()
346 static void free_arg_pages(struct linux_binprm *bprm) in free_arg_pages() argument
351 free_arg_page(bprm, i); in free_arg_pages()
354 static void flush_arg_page(struct linux_binprm *bprm, unsigned long pos, in flush_arg_page() argument
359 static int __bprm_mm_init(struct linux_binprm *bprm) in __bprm_mm_init() argument
361 bprm->p = PAGE_SIZE * MAX_ARG_PAGES - sizeof(void *); in __bprm_mm_init()
365 static bool valid_arg_len(struct linux_binprm *bprm, long len) in valid_arg_len() argument
367 return len <= bprm->p; in valid_arg_len()
378 static int bprm_mm_init(struct linux_binprm *bprm) in bprm_mm_init() argument
383 bprm->mm = mm = mm_alloc(); in bprm_mm_init()
390 bprm->rlim_stack = current->signal->rlim[RLIMIT_STACK]; in bprm_mm_init()
393 err = __bprm_mm_init(bprm); in bprm_mm_init()
401 bprm->mm = NULL; in bprm_mm_init()
487 static inline int bprm_set_stack_limit(struct linux_binprm *bprm, in bprm_set_stack_limit() argument
492 if (bprm->p < limit) in bprm_set_stack_limit()
494 bprm->argmin = bprm->p - limit; in bprm_set_stack_limit()
498 static inline bool bprm_hit_stack_limit(struct linux_binprm *bprm) in bprm_hit_stack_limit() argument
501 return bprm->p < bprm->argmin; in bprm_hit_stack_limit()
516 static int bprm_stack_limits(struct linux_binprm *bprm) in bprm_stack_limits() argument
529 limit = min(limit, bprm->rlim_stack.rlim_cur / 4); in bprm_stack_limits()
536 if (bprm->argc < 0 || bprm->envc < 0) in bprm_stack_limits()
551 if (check_add_overflow(max(bprm->argc, 1), bprm->envc, &ptr_size) || in bprm_stack_limits()
558 return bprm_set_stack_limit(bprm, limit); in bprm_stack_limits()
567 struct linux_binprm *bprm) in copy_strings() argument
589 if (!valid_arg_len(bprm, len)) in copy_strings()
593 pos = bprm->p; in copy_strings()
595 bprm->p -= len; in copy_strings()
596 if (bprm_hit_stack_limit(bprm)) in copy_strings()
624 page = get_arg_page(bprm, pos, 1); in copy_strings()
638 flush_arg_page(bprm, kpos, kmapped_page); in copy_strings()
659 int copy_string_kernel(const char *arg, struct linux_binprm *bprm) in copy_string_kernel() argument
662 unsigned long pos = bprm->p; in copy_string_kernel()
666 if (!valid_arg_len(bprm, len)) in copy_string_kernel()
671 bprm->p -= len; in copy_string_kernel()
672 if (bprm_hit_stack_limit(bprm)) in copy_string_kernel()
684 page = get_arg_page(bprm, pos, 1); in copy_string_kernel()
687 flush_arg_page(bprm, pos & PAGE_MASK, page); in copy_string_kernel()
697 struct linux_binprm *bprm) in copy_strings_kernel() argument
700 int ret = copy_string_kernel(argv[argc], bprm); in copy_strings_kernel()
716 int setup_arg_pages(struct linux_binprm *bprm, in setup_arg_pages() argument
723 struct vm_area_struct *vma = bprm->vma; in setup_arg_pages()
735 stack_base = bprm->rlim_stack.rlim_max; in setup_arg_pages()
750 mm->arg_start = bprm->p - stack_shift; in setup_arg_pages()
751 bprm->p = vma->vm_end - stack_shift; in setup_arg_pages()
762 bprm->p -= stack_shift; in setup_arg_pages()
763 mm->arg_start = bprm->p; in setup_arg_pages()
766 if (bprm->loader) in setup_arg_pages()
767 bprm->loader -= stack_shift; in setup_arg_pages()
768 bprm->exec -= stack_shift; in setup_arg_pages()
800 bprm->file); in setup_arg_pages()
824 rlim_stack = bprm->rlim_stack.rlim_cur & PAGE_MASK; in setup_arg_pages()
833 current->mm->start_stack = bprm->p; in setup_arg_pages()
850 int transfer_args_to_stack(struct linux_binprm *bprm, in transfer_args_to_stack() argument
856 stop = bprm->p >> PAGE_SHIFT; in transfer_args_to_stack()
860 unsigned int offset = index == stop ? bprm->p & ~PAGE_MASK : 0; in transfer_args_to_stack()
861 char *src = kmap_local_page(bprm->page[index]) + offset; in transfer_args_to_stack()
870 bprm->exec += *sp_location - MAX_ARG_PAGES * PAGE_SIZE; in transfer_args_to_stack()
1222 int begin_new_exec(struct linux_binprm * bprm) in begin_new_exec() argument
1228 retval = bprm_creds_from_file(bprm); in begin_new_exec()
1238 trace_sched_prepare_exec(current, bprm); in begin_new_exec()
1243 bprm->point_of_no_return = true; in begin_new_exec()
1267 retval = set_mm_exe_file(bprm->mm, bprm->file); in begin_new_exec()
1272 would_dump(bprm, bprm->file); in begin_new_exec()
1273 if (bprm->have_execfd) in begin_new_exec()
1274 would_dump(bprm, bprm->executable); in begin_new_exec()
1279 acct_arg_size(bprm, 0); in begin_new_exec()
1280 retval = exec_mmap(bprm->mm); in begin_new_exec()
1284 bprm->mm = NULL; in begin_new_exec()
1308 me->personality &= ~bprm->per_clear; in begin_new_exec()
1320 if (bprm->secureexec) { in begin_new_exec()
1331 if (bprm->rlim_stack.rlim_cur > _STK_LIM) in begin_new_exec()
1332 bprm->rlim_stack.rlim_cur = _STK_LIM; in begin_new_exec()
1342 if (bprm->interp_flags & BINPRM_FLAGS_ENFORCE_NONDUMP || in begin_new_exec()
1350 __set_task_comm(me, kbasename(bprm->filename), true); in begin_new_exec()
1357 retval = set_cred_ucounts(bprm->cred); in begin_new_exec()
1364 security_bprm_committing_creds(bprm); in begin_new_exec()
1366 commit_creds(bprm->cred); in begin_new_exec()
1367 bprm->cred = NULL; in begin_new_exec()
1382 security_bprm_committed_creds(bprm); in begin_new_exec()
1385 if (bprm->have_execfd) { in begin_new_exec()
1389 fd_install(retval, bprm->executable); in begin_new_exec()
1390 bprm->executable = NULL; in begin_new_exec()
1391 bprm->execfd = retval; in begin_new_exec()
1397 if (!bprm->cred) in begin_new_exec()
1405 void would_dump(struct linux_binprm *bprm, struct file *file) in would_dump() argument
1411 bprm->interp_flags |= BINPRM_FLAGS_ENFORCE_NONDUMP; in would_dump()
1414 user_ns = old = bprm->mm->user_ns; in would_dump()
1420 bprm->mm->user_ns = get_user_ns(user_ns); in would_dump()
1427 void setup_new_exec(struct linux_binprm * bprm) in setup_new_exec() argument
1432 arch_pick_mmap_layout(me->mm, &bprm->rlim_stack); in setup_new_exec()
1447 void finalize_exec(struct linux_binprm *bprm) in finalize_exec() argument
1451 current->signal->rlim[RLIMIT_STACK] = bprm->rlim_stack; in finalize_exec()
1462 static int prepare_bprm_creds(struct linux_binprm *bprm) in prepare_bprm_creds() argument
1467 bprm->cred = prepare_exec_creds(); in prepare_bprm_creds()
1468 if (likely(bprm->cred)) in prepare_bprm_creds()
1482 static void free_bprm(struct linux_binprm *bprm) in free_bprm() argument
1484 if (bprm->mm) { in free_bprm()
1485 acct_arg_size(bprm, 0); in free_bprm()
1486 mmput(bprm->mm); in free_bprm()
1488 free_arg_pages(bprm); in free_bprm()
1489 if (bprm->cred) { in free_bprm()
1491 abort_creds(bprm->cred); in free_bprm()
1493 do_close_execat(bprm->file); in free_bprm()
1494 if (bprm->executable) in free_bprm()
1495 fput(bprm->executable); in free_bprm()
1497 if (bprm->interp != bprm->filename) in free_bprm()
1498 kfree(bprm->interp); in free_bprm()
1499 kfree(bprm->fdpath); in free_bprm()
1500 kfree(bprm); in free_bprm()
1505 struct linux_binprm *bprm; in alloc_bprm() local
1513 bprm = kzalloc(sizeof(*bprm), GFP_KERNEL); in alloc_bprm()
1514 if (!bprm) { in alloc_bprm()
1519 bprm->file = file; in alloc_bprm()
1522 bprm->filename = filename->name; in alloc_bprm()
1525 bprm->fdpath = kasprintf(GFP_KERNEL, "/dev/fd/%d", fd); in alloc_bprm()
1527 bprm->fdpath = kasprintf(GFP_KERNEL, "/dev/fd/%d/%s", in alloc_bprm()
1529 if (!bprm->fdpath) in alloc_bprm()
1542 bprm->interp_flags |= BINPRM_FLAGS_PATH_INACCESSIBLE; in alloc_bprm()
1544 bprm->filename = bprm->fdpath; in alloc_bprm()
1546 bprm->interp = bprm->filename; in alloc_bprm()
1548 retval = bprm_mm_init(bprm); in alloc_bprm()
1550 return bprm; in alloc_bprm()
1553 free_bprm(bprm); in alloc_bprm()
1557 int bprm_change_interp(const char *interp, struct linux_binprm *bprm) in bprm_change_interp() argument
1560 if (bprm->interp != bprm->filename) in bprm_change_interp()
1561 kfree(bprm->interp); in bprm_change_interp()
1562 bprm->interp = kstrdup(interp, GFP_KERNEL); in bprm_change_interp()
1563 if (!bprm->interp) in bprm_change_interp()
1574 static void check_unsafe_exec(struct linux_binprm *bprm) in check_unsafe_exec() argument
1580 bprm->unsafe |= LSM_UNSAFE_PTRACE; in check_unsafe_exec()
1587 bprm->unsafe |= LSM_UNSAFE_NO_NEW_PRIVS; in check_unsafe_exec()
1606 bprm->unsafe |= LSM_UNSAFE_SHARE; in check_unsafe_exec()
1612 static void bprm_fill_uid(struct linux_binprm *bprm, struct file *file) in bprm_fill_uid() argument
1649 if (!vfsuid_has_mapping(bprm->cred->user_ns, vfsuid) || in bprm_fill_uid()
1650 !vfsgid_has_mapping(bprm->cred->user_ns, vfsgid)) in bprm_fill_uid()
1654 bprm->per_clear |= PER_CLEAR_ON_SETID; in bprm_fill_uid()
1655 bprm->cred->euid = vfsuid_into_kuid(vfsuid); in bprm_fill_uid()
1659 bprm->per_clear |= PER_CLEAR_ON_SETID; in bprm_fill_uid()
1660 bprm->cred->egid = vfsgid_into_kgid(vfsgid); in bprm_fill_uid()
1667 static int bprm_creds_from_file(struct linux_binprm *bprm) in bprm_creds_from_file() argument
1670 struct file *file = bprm->execfd_creds ? bprm->executable : bprm->file; in bprm_creds_from_file()
1672 bprm_fill_uid(bprm, file); in bprm_creds_from_file()
1673 return security_bprm_creds_from_file(bprm, file); in bprm_creds_from_file()
1682 static int prepare_binprm(struct linux_binprm *bprm) in prepare_binprm() argument
1686 memset(bprm->buf, 0, BINPRM_BUF_SIZE); in prepare_binprm()
1687 return kernel_read(bprm->file, bprm->buf, BINPRM_BUF_SIZE, &pos); in prepare_binprm()
1695 int remove_arg_zero(struct linux_binprm *bprm) in remove_arg_zero() argument
1701 if (!bprm->argc) in remove_arg_zero()
1705 offset = bprm->p & ~PAGE_MASK; in remove_arg_zero()
1706 page = get_arg_page(bprm, bprm->p, 0); in remove_arg_zero()
1712 offset++, bprm->p++) in remove_arg_zero()
1719 bprm->p++; in remove_arg_zero()
1720 bprm->argc--; in remove_arg_zero()
1730 static int search_binary_handler(struct linux_binprm *bprm) in search_binary_handler() argument
1736 retval = prepare_binprm(bprm); in search_binary_handler()
1740 retval = security_bprm_check(bprm); in search_binary_handler()
1752 retval = fmt->load_binary(bprm); in search_binary_handler()
1756 if (bprm->point_of_no_return || (retval != -ENOEXEC)) { in search_binary_handler()
1764 if (printable(bprm->buf[0]) && printable(bprm->buf[1]) && in search_binary_handler()
1765 printable(bprm->buf[2]) && printable(bprm->buf[3])) in search_binary_handler()
1767 if (request_module("binfmt-%04x", *(ushort *)(bprm->buf + 2)) < 0) in search_binary_handler()
1777 static int exec_binprm(struct linux_binprm *bprm) in exec_binprm() argument
1794 ret = search_binary_handler(bprm); in exec_binprm()
1797 if (!bprm->interpreter) in exec_binprm()
1800 exec = bprm->file; in exec_binprm()
1801 bprm->file = bprm->interpreter; in exec_binprm()
1802 bprm->interpreter = NULL; in exec_binprm()
1804 if (unlikely(bprm->have_execfd)) { in exec_binprm()
1805 if (bprm->executable) { in exec_binprm()
1809 bprm->executable = exec; in exec_binprm()
1814 audit_bprm(bprm); in exec_binprm()
1815 trace_sched_process_exec(current, old_pid, bprm); in exec_binprm()
1821 static int bprm_execve(struct linux_binprm *bprm) in bprm_execve() argument
1825 retval = prepare_bprm_creds(bprm); in bprm_execve()
1834 check_unsafe_exec(bprm); in bprm_execve()
1841 retval = security_bprm_creds_for_exec(bprm); in bprm_execve()
1845 retval = exec_binprm(bprm); in bprm_execve()
1866 if (bprm->point_of_no_return && !fatal_signal_pending(current)) in bprm_execve()
1881 struct linux_binprm *bprm; in do_execveat_common() local
1903 bprm = alloc_bprm(fd, filename, flags); in do_execveat_common()
1904 if (IS_ERR(bprm)) { in do_execveat_common()
1905 retval = PTR_ERR(bprm); in do_execveat_common()
1912 current->comm, bprm->filename); in do_execveat_common()
1915 bprm->argc = retval; in do_execveat_common()
1920 bprm->envc = retval; in do_execveat_common()
1922 retval = bprm_stack_limits(bprm); in do_execveat_common()
1926 retval = copy_string_kernel(bprm->filename, bprm); in do_execveat_common()
1929 bprm->exec = bprm->p; in do_execveat_common()
1931 retval = copy_strings(bprm->envc, envp, bprm); in do_execveat_common()
1935 retval = copy_strings(bprm->argc, argv, bprm); in do_execveat_common()
1945 if (bprm->argc == 0) { in do_execveat_common()
1946 retval = copy_string_kernel("", bprm); in do_execveat_common()
1949 bprm->argc = 1; in do_execveat_common()
1952 retval = bprm_execve(bprm); in do_execveat_common()
1954 free_bprm(bprm); in do_execveat_common()
1965 struct linux_binprm *bprm; in kernel_execve() local
1977 bprm = alloc_bprm(fd, filename, 0); in kernel_execve()
1978 if (IS_ERR(bprm)) { in kernel_execve()
1979 retval = PTR_ERR(bprm); in kernel_execve()
1988 bprm->argc = retval; in kernel_execve()
1993 bprm->envc = retval; in kernel_execve()
1995 retval = bprm_stack_limits(bprm); in kernel_execve()
1999 retval = copy_string_kernel(bprm->filename, bprm); in kernel_execve()
2002 bprm->exec = bprm->p; in kernel_execve()
2004 retval = copy_strings_kernel(bprm->envc, envp, bprm); in kernel_execve()
2008 retval = copy_strings_kernel(bprm->argc, argv, bprm); in kernel_execve()
2012 retval = bprm_execve(bprm); in kernel_execve()
2014 free_bprm(bprm); in kernel_execve()