git: 47f7345baba0 - main - linux: fix PTRACE_POKEDATA and PTRACE_POKETEXT.
Edward Tomasz Napierala
trasz at freebsd.org
Tue Jan 19 12:25:43 UTC 2021
On 0119T1314, Konstantin Belousov wrote:
> On Tue, Jan 19, 2021 at 10:53:38AM +0000, Edward Tomasz Napierala wrote:
> > The branch main has been updated by trasz:
> >
> > URL: https://cgit.FreeBSD.org/src/commit/?id=47f7345baba01121e29c22b43f68345399a32912
> >
> > commit 47f7345baba01121e29c22b43f68345399a32912
> > Author: Edward Tomasz Napierala <trasz at FreeBSD.org>
> > AuthorDate: 2021-01-15 16:57:24 +0000
> > Commit: Edward Tomasz Napierala <trasz at FreeBSD.org>
> > CommitDate: 2021-01-19 10:30:55 +0000
> >
> > linux: fix PTRACE_POKEDATA and PTRACE_POKETEXT.
> >
> > Sponsored by: The FreeBSD Foundation
> > ---
> > sys/amd64/linux/linux_ptrace.c | 9 +++++++--
> > 1 file changed, 7 insertions(+), 2 deletions(-)
> >
> > diff --git a/sys/amd64/linux/linux_ptrace.c b/sys/amd64/linux/linux_ptrace.c
> > index a14155ed7e97..c1d05db5bc42 100644
> > --- a/sys/amd64/linux/linux_ptrace.c
> > +++ b/sys/amd64/linux/linux_ptrace.c
> > @@ -594,10 +594,15 @@ linux_ptrace(struct thread *td, struct linux_ptrace_args *uap)
> > error = linux_ptrace_peekuser(td, pid, addr, (void *)uap->data);
> > break;
> > case LINUX_PTRACE_POKETEXT:
> > - error = kern_ptrace(td, PT_WRITE_I, pid, addr, uap->data);
> > - break;
> This is wrong. You should access text AS if linux request was for text.
Do we actually want to maintain that distinction? Looking
at sys/kern/sys_process.c, they are synonyms.
> > case LINUX_PTRACE_POKEDATA:
> > error = kern_ptrace(td, PT_WRITE_D, pid, addr, uap->data);
> > + if (error != 0)
> > + return (error);
> > + /*
> > + * Linux expects this syscall to write 64 bits, not 32.
> > + */
> > + error = kern_ptrace(td, PT_WRITE_D, pid,
> > + (void *)(uap->addr + 4), uap->data >> 32);
> > break;
> You should use PT_IO there instead of doing two accesses (to the wrong AS).
Hm, you're right. The only problem I can see is that PT_IO fetches
struct ptrace_io_desc from userspace, which makes wrapping somewhat
hard. How about introducing PT_READ64 and PT_WRITE64 request types
and using them instead?
Thanks!
More information about the dev-commits-src-main
mailing list