1 /* SPDX-License-Identifier: GPL-2.0 */
2 #ifndef __ASM_GENERIC_UACCESS_H
3 #define __ASM_GENERIC_UACCESS_H
4
5 /*
6 * User space memory access functions, these should work
7 * on any machine that has kernel and user data in the same
8 * address space, e.g. all NOMMU machines.
9 */
10 #include <linux/string.h>
11
12 #ifdef CONFIG_UACCESS_MEMCPY
13 static inline __must_check unsigned long
raw_copy_from_user(void * to,const void __user * from,unsigned long n)14 raw_copy_from_user(void *to, const void __user * from, unsigned long n)
15 {
16 if (__builtin_constant_p(n)) {
17 switch(n) {
18 case 1:
19 *(u8 *)to = *(u8 __force *)from;
20 return 0;
21 case 2:
22 *(u16 *)to = *(u16 __force *)from;
23 return 0;
24 case 4:
25 *(u32 *)to = *(u32 __force *)from;
26 return 0;
27 #ifdef CONFIG_64BIT
28 case 8:
29 *(u64 *)to = *(u64 __force *)from;
30 return 0;
31 #endif
32 }
33 }
34
35 memcpy(to, (const void __force *)from, n);
36 return 0;
37 }
38
39 static inline __must_check unsigned long
raw_copy_to_user(void __user * to,const void * from,unsigned long n)40 raw_copy_to_user(void __user *to, const void *from, unsigned long n)
41 {
42 if (__builtin_constant_p(n)) {
43 switch(n) {
44 case 1:
45 *(u8 __force *)to = *(u8 *)from;
46 return 0;
47 case 2:
48 *(u16 __force *)to = *(u16 *)from;
49 return 0;
50 case 4:
51 *(u32 __force *)to = *(u32 *)from;
52 return 0;
53 #ifdef CONFIG_64BIT
54 case 8:
55 *(u64 __force *)to = *(u64 *)from;
56 return 0;
57 #endif
58 default:
59 break;
60 }
61 }
62
63 memcpy((void __force *)to, from, n);
64 return 0;
65 }
66 #define INLINE_COPY_FROM_USER
67 #define INLINE_COPY_TO_USER
68 #endif /* CONFIG_UACCESS_MEMCPY */
69
70 #define MAKE_MM_SEG(s) ((mm_segment_t) { (s) })
71
72 #ifndef KERNEL_DS
73 #define KERNEL_DS MAKE_MM_SEG(~0UL)
74 #endif
75
76 #ifndef USER_DS
77 #define USER_DS MAKE_MM_SEG(TASK_SIZE - 1)
78 #endif
79
80 #ifndef get_fs
81 #define get_fs() (current_thread_info()->addr_limit)
82
set_fs(mm_segment_t fs)83 static inline void set_fs(mm_segment_t fs)
84 {
85 current_thread_info()->addr_limit = fs;
86 }
87 #endif
88
89 #ifndef segment_eq
90 #define segment_eq(a, b) ((a).seg == (b).seg)
91 #endif
92
93 #define access_ok(addr, size) __access_ok((unsigned long)(addr),(size))
94
95 /*
96 * The architecture should really override this if possible, at least
97 * doing a check on the get_fs()
98 */
99 #ifndef __access_ok
__access_ok(unsigned long addr,unsigned long size)100 static inline int __access_ok(unsigned long addr, unsigned long size)
101 {
102 return 1;
103 }
104 #endif
105
106 /*
107 * These are the main single-value transfer routines. They automatically
108 * use the right size if we just have the right pointer type.
109 * This version just falls back to copy_{from,to}_user, which should
110 * provide a fast-path for small values.
111 */
112 #define __put_user(x, ptr) \
113 ({ \
114 __typeof__(*(ptr)) __x = (x); \
115 int __pu_err = -EFAULT; \
116 __chk_user_ptr(ptr); \
117 switch (sizeof (*(ptr))) { \
118 case 1: \
119 case 2: \
120 case 4: \
121 case 8: \
122 __pu_err = __put_user_fn(sizeof (*(ptr)), \
123 ptr, &__x); \
124 break; \
125 default: \
126 __put_user_bad(); \
127 break; \
128 } \
129 __pu_err; \
130 })
131
132 #define put_user(x, ptr) \
133 ({ \
134 void __user *__p = (ptr); \
135 might_fault(); \
136 access_ok(__p, sizeof(*ptr)) ? \
137 __put_user((x), ((__typeof__(*(ptr)) __user *)__p)) : \
138 -EFAULT; \
139 })
140
141 #ifndef __put_user_fn
142
__put_user_fn(size_t size,void __user * ptr,void * x)143 static inline int __put_user_fn(size_t size, void __user *ptr, void *x)
144 {
145 return unlikely(raw_copy_to_user(ptr, x, size)) ? -EFAULT : 0;
146 }
147
148 #define __put_user_fn(sz, u, k) __put_user_fn(sz, u, k)
149
150 #endif
151
152 extern int __put_user_bad(void) __attribute__((noreturn));
153
154 #define __get_user(x, ptr) \
155 ({ \
156 int __gu_err = -EFAULT; \
157 __chk_user_ptr(ptr); \
158 switch (sizeof(*(ptr))) { \
159 case 1: { \
160 unsigned char __x = 0; \
161 __gu_err = __get_user_fn(sizeof (*(ptr)), \
162 ptr, &__x); \
163 (x) = *(__force __typeof__(*(ptr)) *) &__x; \
164 break; \
165 }; \
166 case 2: { \
167 unsigned short __x = 0; \
168 __gu_err = __get_user_fn(sizeof (*(ptr)), \
169 ptr, &__x); \
170 (x) = *(__force __typeof__(*(ptr)) *) &__x; \
171 break; \
172 }; \
173 case 4: { \
174 unsigned int __x = 0; \
175 __gu_err = __get_user_fn(sizeof (*(ptr)), \
176 ptr, &__x); \
177 (x) = *(__force __typeof__(*(ptr)) *) &__x; \
178 break; \
179 }; \
180 case 8: { \
181 unsigned long long __x = 0; \
182 __gu_err = __get_user_fn(sizeof (*(ptr)), \
183 ptr, &__x); \
184 (x) = *(__force __typeof__(*(ptr)) *) &__x; \
185 break; \
186 }; \
187 default: \
188 __get_user_bad(); \
189 break; \
190 } \
191 __gu_err; \
192 })
193
194 #define get_user(x, ptr) \
195 ({ \
196 const void __user *__p = (ptr); \
197 might_fault(); \
198 access_ok(__p, sizeof(*ptr)) ? \
199 __get_user((x), (__typeof__(*(ptr)) __user *)__p) :\
200 ((x) = (__typeof__(*(ptr)))0,-EFAULT); \
201 })
202
203 #ifndef __get_user_fn
__get_user_fn(size_t size,const void __user * ptr,void * x)204 static inline int __get_user_fn(size_t size, const void __user *ptr, void *x)
205 {
206 return unlikely(raw_copy_from_user(x, ptr, size)) ? -EFAULT : 0;
207 }
208
209 #define __get_user_fn(sz, u, k) __get_user_fn(sz, u, k)
210
211 #endif
212
213 extern int __get_user_bad(void) __attribute__((noreturn));
214
215 /*
216 * Copy a null terminated string from userspace.
217 */
218 #ifndef __strncpy_from_user
219 static inline long
__strncpy_from_user(char * dst,const char __user * src,long count)220 __strncpy_from_user(char *dst, const char __user *src, long count)
221 {
222 char *tmp;
223 strncpy(dst, (const char __force *)src, count);
224 for (tmp = dst; *tmp && count > 0; tmp++, count--)
225 ;
226 return (tmp - dst);
227 }
228 #endif
229
230 static inline long
strncpy_from_user(char * dst,const char __user * src,long count)231 strncpy_from_user(char *dst, const char __user *src, long count)
232 {
233 if (!access_ok(src, 1))
234 return -EFAULT;
235 return __strncpy_from_user(dst, src, count);
236 }
237
238 /*
239 * Return the size of a string (including the ending 0)
240 *
241 * Return 0 on exception, a value greater than N if too long
242 */
243 #ifndef __strnlen_user
244 #define __strnlen_user(s, n) (strnlen((s), (n)) + 1)
245 #endif
246
247 /*
248 * Unlike strnlen, strnlen_user includes the nul terminator in
249 * its returned count. Callers should check for a returned value
250 * greater than N as an indication the string is too long.
251 */
strnlen_user(const char __user * src,long n)252 static inline long strnlen_user(const char __user *src, long n)
253 {
254 if (!access_ok(src, 1))
255 return 0;
256 return __strnlen_user(src, n);
257 }
258
259 /*
260 * Zero Userspace
261 */
262 #ifndef __clear_user
263 static inline __must_check unsigned long
__clear_user(void __user * to,unsigned long n)264 __clear_user(void __user *to, unsigned long n)
265 {
266 memset((void __force *)to, 0, n);
267 return 0;
268 }
269 #endif
270
271 static inline __must_check unsigned long
clear_user(void __user * to,unsigned long n)272 clear_user(void __user *to, unsigned long n)
273 {
274 might_fault();
275 if (!access_ok(to, n))
276 return n;
277
278 return __clear_user(to, n);
279 }
280
281 #include <asm/extable.h>
282
283 #endif /* __ASM_GENERIC_UACCESS_H */
284