signal_32.c revision 2b3f8e87cf99a33fb6faf5026d7147748bbd77b6
1/*
2 * Signal handling for 32bit PPC and 32bit tasks on 64bit PPC
3 *
4 *  PowerPC version
5 *    Copyright (C) 1995-1996 Gary Thomas (gdt@linuxppc.org)
6 * Copyright (C) 2001 IBM
7 * Copyright (C) 1997,1998 Jakub Jelinek (jj@sunsite.mff.cuni.cz)
8 * Copyright (C) 1997 David S. Miller (davem@caip.rutgers.edu)
9 *
10 *  Derived from "arch/i386/kernel/signal.c"
11 *    Copyright (C) 1991, 1992 Linus Torvalds
12 *    1997-11-28  Modified for POSIX.1b signals by Richard Henderson
13 *
14 *  This program is free software; you can redistribute it and/or
15 *  modify it under the terms of the GNU General Public License
16 *  as published by the Free Software Foundation; either version
17 *  2 of the License, or (at your option) any later version.
18 */
19
20#include <linux/sched.h>
21#include <linux/mm.h>
22#include <linux/smp.h>
23#include <linux/kernel.h>
24#include <linux/signal.h>
25#include <linux/errno.h>
26#include <linux/elf.h>
27#include <linux/ptrace.h>
28#include <linux/ratelimit.h>
29#ifdef CONFIG_PPC64
30#include <linux/syscalls.h>
31#include <linux/compat.h>
32#else
33#include <linux/wait.h>
34#include <linux/unistd.h>
35#include <linux/stddef.h>
36#include <linux/tty.h>
37#include <linux/binfmts.h>
38#endif
39
40#include <asm/uaccess.h>
41#include <asm/cacheflush.h>
42#include <asm/syscalls.h>
43#include <asm/sigcontext.h>
44#include <asm/vdso.h>
45#include <asm/switch_to.h>
46#include <asm/tm.h>
47#ifdef CONFIG_PPC64
48#include "ppc32.h"
49#include <asm/unistd.h>
50#else
51#include <asm/ucontext.h>
52#include <asm/pgtable.h>
53#endif
54
55#include "signal.h"
56
57#undef DEBUG_SIG
58
59#ifdef CONFIG_PPC64
60#define sys_rt_sigreturn	compat_sys_rt_sigreturn
61#define sys_swapcontext	compat_sys_swapcontext
62#define sys_sigreturn	compat_sys_sigreturn
63
64#define old_sigaction	old_sigaction32
65#define sigcontext	sigcontext32
66#define mcontext	mcontext32
67#define ucontext	ucontext32
68
69#define __save_altstack __compat_save_altstack
70
71/*
72 * Userspace code may pass a ucontext which doesn't include VSX added
73 * at the end.  We need to check for this case.
74 */
75#define UCONTEXTSIZEWITHOUTVSX \
76		(sizeof(struct ucontext) - sizeof(elf_vsrreghalf_t32))
77
78/*
79 * Returning 0 means we return to userspace via
80 * ret_from_except and thus restore all user
81 * registers from *regs.  This is what we need
82 * to do when a signal has been delivered.
83 */
84
85#define GP_REGS_SIZE	min(sizeof(elf_gregset_t32), sizeof(struct pt_regs32))
86#undef __SIGNAL_FRAMESIZE
87#define __SIGNAL_FRAMESIZE	__SIGNAL_FRAMESIZE32
88#undef ELF_NVRREG
89#define ELF_NVRREG	ELF_NVRREG32
90
91/*
92 * Functions for flipping sigsets (thanks to brain dead generic
93 * implementation that makes things simple for little endian only)
94 */
95static inline int put_sigset_t(compat_sigset_t __user *uset, sigset_t *set)
96{
97	compat_sigset_t	cset;
98
99	switch (_NSIG_WORDS) {
100	case 4: cset.sig[6] = set->sig[3] & 0xffffffffull;
101		cset.sig[7] = set->sig[3] >> 32;
102	case 3: cset.sig[4] = set->sig[2] & 0xffffffffull;
103		cset.sig[5] = set->sig[2] >> 32;
104	case 2: cset.sig[2] = set->sig[1] & 0xffffffffull;
105		cset.sig[3] = set->sig[1] >> 32;
106	case 1: cset.sig[0] = set->sig[0] & 0xffffffffull;
107		cset.sig[1] = set->sig[0] >> 32;
108	}
109	return copy_to_user(uset, &cset, sizeof(*uset));
110}
111
112static inline int get_sigset_t(sigset_t *set,
113			       const compat_sigset_t __user *uset)
114{
115	compat_sigset_t s32;
116
117	if (copy_from_user(&s32, uset, sizeof(*uset)))
118		return -EFAULT;
119
120	/*
121	 * Swap the 2 words of the 64-bit sigset_t (they are stored
122	 * in the "wrong" endian in 32-bit user storage).
123	 */
124	switch (_NSIG_WORDS) {
125	case 4: set->sig[3] = s32.sig[6] | (((long)s32.sig[7]) << 32);
126	case 3: set->sig[2] = s32.sig[4] | (((long)s32.sig[5]) << 32);
127	case 2: set->sig[1] = s32.sig[2] | (((long)s32.sig[3]) << 32);
128	case 1: set->sig[0] = s32.sig[0] | (((long)s32.sig[1]) << 32);
129	}
130	return 0;
131}
132
133#define to_user_ptr(p)		ptr_to_compat(p)
134#define from_user_ptr(p)	compat_ptr(p)
135
136static inline int save_general_regs(struct pt_regs *regs,
137		struct mcontext __user *frame)
138{
139	elf_greg_t64 *gregs = (elf_greg_t64 *)regs;
140	int i;
141
142	WARN_ON(!FULL_REGS(regs));
143
144	for (i = 0; i <= PT_RESULT; i ++) {
145		if (i == 14 && !FULL_REGS(regs))
146			i = 32;
147		if (__put_user((unsigned int)gregs[i], &frame->mc_gregs[i]))
148			return -EFAULT;
149	}
150	return 0;
151}
152
153static inline int restore_general_regs(struct pt_regs *regs,
154		struct mcontext __user *sr)
155{
156	elf_greg_t64 *gregs = (elf_greg_t64 *)regs;
157	int i;
158
159	for (i = 0; i <= PT_RESULT; i++) {
160		if ((i == PT_MSR) || (i == PT_SOFTE))
161			continue;
162		if (__get_user(gregs[i], &sr->mc_gregs[i]))
163			return -EFAULT;
164	}
165	return 0;
166}
167
168#else /* CONFIG_PPC64 */
169
170#define GP_REGS_SIZE	min(sizeof(elf_gregset_t), sizeof(struct pt_regs))
171
172static inline int put_sigset_t(sigset_t __user *uset, sigset_t *set)
173{
174	return copy_to_user(uset, set, sizeof(*uset));
175}
176
177static inline int get_sigset_t(sigset_t *set, const sigset_t __user *uset)
178{
179	return copy_from_user(set, uset, sizeof(*uset));
180}
181
182#define to_user_ptr(p)		((unsigned long)(p))
183#define from_user_ptr(p)	((void __user *)(p))
184
185static inline int save_general_regs(struct pt_regs *regs,
186		struct mcontext __user *frame)
187{
188	WARN_ON(!FULL_REGS(regs));
189	return __copy_to_user(&frame->mc_gregs, regs, GP_REGS_SIZE);
190}
191
192static inline int restore_general_regs(struct pt_regs *regs,
193		struct mcontext __user *sr)
194{
195	/* copy up to but not including MSR */
196	if (__copy_from_user(regs, &sr->mc_gregs,
197				PT_MSR * sizeof(elf_greg_t)))
198		return -EFAULT;
199	/* copy from orig_r3 (the word after the MSR) up to the end */
200	if (__copy_from_user(&regs->orig_gpr3, &sr->mc_gregs[PT_ORIG_R3],
201				GP_REGS_SIZE - PT_ORIG_R3 * sizeof(elf_greg_t)))
202		return -EFAULT;
203	return 0;
204}
205#endif
206
207/*
208 * When we have signals to deliver, we set up on the
209 * user stack, going down from the original stack pointer:
210 *	an ABI gap of 56 words
211 *	an mcontext struct
212 *	a sigcontext struct
213 *	a gap of __SIGNAL_FRAMESIZE bytes
214 *
215 * Each of these things must be a multiple of 16 bytes in size. The following
216 * structure represent all of this except the __SIGNAL_FRAMESIZE gap
217 *
218 */
219struct sigframe {
220	struct sigcontext sctx;		/* the sigcontext */
221	struct mcontext	mctx;		/* all the register values */
222#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
223	struct sigcontext sctx_transact;
224	struct mcontext	mctx_transact;
225#endif
226	/*
227	 * Programs using the rs6000/xcoff abi can save up to 19 gp
228	 * regs and 18 fp regs below sp before decrementing it.
229	 */
230	int			abigap[56];
231};
232
233/* We use the mc_pad field for the signal return trampoline. */
234#define tramp	mc_pad
235
236/*
237 *  When we have rt signals to deliver, we set up on the
238 *  user stack, going down from the original stack pointer:
239 *	one rt_sigframe struct (siginfo + ucontext + ABI gap)
240 *	a gap of __SIGNAL_FRAMESIZE+16 bytes
241 *  (the +16 is to get the siginfo and ucontext in the same
242 *  positions as in older kernels).
243 *
244 *  Each of these things must be a multiple of 16 bytes in size.
245 *
246 */
247struct rt_sigframe {
248#ifdef CONFIG_PPC64
249	compat_siginfo_t info;
250#else
251	struct siginfo info;
252#endif
253	struct ucontext	uc;
254#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
255	struct ucontext	uc_transact;
256#endif
257	/*
258	 * Programs using the rs6000/xcoff abi can save up to 19 gp
259	 * regs and 18 fp regs below sp before decrementing it.
260	 */
261	int			abigap[56];
262};
263
264#ifdef CONFIG_VSX
265unsigned long copy_fpr_to_user(void __user *to,
266			       struct task_struct *task)
267{
268	double buf[ELF_NFPREG];
269	int i;
270
271	/* save FPR copy to local buffer then write to the thread_struct */
272	for (i = 0; i < (ELF_NFPREG - 1) ; i++)
273		buf[i] = task->thread.TS_FPR(i);
274	memcpy(&buf[i], &task->thread.fpscr, sizeof(double));
275	return __copy_to_user(to, buf, ELF_NFPREG * sizeof(double));
276}
277
278unsigned long copy_fpr_from_user(struct task_struct *task,
279				 void __user *from)
280{
281	double buf[ELF_NFPREG];
282	int i;
283
284	if (__copy_from_user(buf, from, ELF_NFPREG * sizeof(double)))
285		return 1;
286	for (i = 0; i < (ELF_NFPREG - 1) ; i++)
287		task->thread.TS_FPR(i) = buf[i];
288	memcpy(&task->thread.fpscr, &buf[i], sizeof(double));
289
290	return 0;
291}
292
293unsigned long copy_vsx_to_user(void __user *to,
294			       struct task_struct *task)
295{
296	double buf[ELF_NVSRHALFREG];
297	int i;
298
299	/* save FPR copy to local buffer then write to the thread_struct */
300	for (i = 0; i < ELF_NVSRHALFREG; i++)
301		buf[i] = task->thread.fpr[i][TS_VSRLOWOFFSET];
302	return __copy_to_user(to, buf, ELF_NVSRHALFREG * sizeof(double));
303}
304
305unsigned long copy_vsx_from_user(struct task_struct *task,
306				 void __user *from)
307{
308	double buf[ELF_NVSRHALFREG];
309	int i;
310
311	if (__copy_from_user(buf, from, ELF_NVSRHALFREG * sizeof(double)))
312		return 1;
313	for (i = 0; i < ELF_NVSRHALFREG ; i++)
314		task->thread.fpr[i][TS_VSRLOWOFFSET] = buf[i];
315	return 0;
316}
317
318#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
319unsigned long copy_transact_fpr_to_user(void __user *to,
320				  struct task_struct *task)
321{
322	double buf[ELF_NFPREG];
323	int i;
324
325	/* save FPR copy to local buffer then write to the thread_struct */
326	for (i = 0; i < (ELF_NFPREG - 1) ; i++)
327		buf[i] = task->thread.TS_TRANS_FPR(i);
328	memcpy(&buf[i], &task->thread.transact_fpscr, sizeof(double));
329	return __copy_to_user(to, buf, ELF_NFPREG * sizeof(double));
330}
331
332unsigned long copy_transact_fpr_from_user(struct task_struct *task,
333					  void __user *from)
334{
335	double buf[ELF_NFPREG];
336	int i;
337
338	if (__copy_from_user(buf, from, ELF_NFPREG * sizeof(double)))
339		return 1;
340	for (i = 0; i < (ELF_NFPREG - 1) ; i++)
341		task->thread.TS_TRANS_FPR(i) = buf[i];
342	memcpy(&task->thread.transact_fpscr, &buf[i], sizeof(double));
343
344	return 0;
345}
346
347unsigned long copy_transact_vsx_to_user(void __user *to,
348				  struct task_struct *task)
349{
350	double buf[ELF_NVSRHALFREG];
351	int i;
352
353	/* save FPR copy to local buffer then write to the thread_struct */
354	for (i = 0; i < ELF_NVSRHALFREG; i++)
355		buf[i] = task->thread.transact_fpr[i][TS_VSRLOWOFFSET];
356	return __copy_to_user(to, buf, ELF_NVSRHALFREG * sizeof(double));
357}
358
359unsigned long copy_transact_vsx_from_user(struct task_struct *task,
360					  void __user *from)
361{
362	double buf[ELF_NVSRHALFREG];
363	int i;
364
365	if (__copy_from_user(buf, from, ELF_NVSRHALFREG * sizeof(double)))
366		return 1;
367	for (i = 0; i < ELF_NVSRHALFREG ; i++)
368		task->thread.transact_fpr[i][TS_VSRLOWOFFSET] = buf[i];
369	return 0;
370}
371#endif /* CONFIG_PPC_TRANSACTIONAL_MEM */
372#else
373inline unsigned long copy_fpr_to_user(void __user *to,
374				      struct task_struct *task)
375{
376	return __copy_to_user(to, task->thread.fpr,
377			      ELF_NFPREG * sizeof(double));
378}
379
380inline unsigned long copy_fpr_from_user(struct task_struct *task,
381					void __user *from)
382{
383	return __copy_from_user(task->thread.fpr, from,
384			      ELF_NFPREG * sizeof(double));
385}
386
387#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
388inline unsigned long copy_transact_fpr_to_user(void __user *to,
389					 struct task_struct *task)
390{
391	return __copy_to_user(to, task->thread.transact_fpr,
392			      ELF_NFPREG * sizeof(double));
393}
394
395inline unsigned long copy_transact_fpr_from_user(struct task_struct *task,
396						 void __user *from)
397{
398	return __copy_from_user(task->thread.transact_fpr, from,
399				ELF_NFPREG * sizeof(double));
400}
401#endif /* CONFIG_PPC_TRANSACTIONAL_MEM */
402#endif
403
404/*
405 * Save the current user registers on the user stack.
406 * We only save the altivec/spe registers if the process has used
407 * altivec/spe instructions at some point.
408 */
409static int save_user_regs(struct pt_regs *regs, struct mcontext __user *frame,
410		int sigret, int ctx_has_vsx_region)
411{
412	unsigned long msr = regs->msr;
413
414	/* Make sure floating point registers are stored in regs */
415	flush_fp_to_thread(current);
416
417	/* save general registers */
418	if (save_general_regs(regs, frame))
419		return 1;
420
421#ifdef CONFIG_ALTIVEC
422	/* save altivec registers */
423	if (current->thread.used_vr) {
424		flush_altivec_to_thread(current);
425		if (__copy_to_user(&frame->mc_vregs, current->thread.vr,
426				   ELF_NVRREG * sizeof(vector128)))
427			return 1;
428		/* set MSR_VEC in the saved MSR value to indicate that
429		   frame->mc_vregs contains valid data */
430		msr |= MSR_VEC;
431	}
432	/* else assert((regs->msr & MSR_VEC) == 0) */
433
434	/* We always copy to/from vrsave, it's 0 if we don't have or don't
435	 * use altivec. Since VSCR only contains 32 bits saved in the least
436	 * significant bits of a vector, we "cheat" and stuff VRSAVE in the
437	 * most significant bits of that same vector. --BenH
438	 */
439	if (__put_user(current->thread.vrsave, (u32 __user *)&frame->mc_vregs[32]))
440		return 1;
441#endif /* CONFIG_ALTIVEC */
442	if (copy_fpr_to_user(&frame->mc_fregs, current))
443		return 1;
444#ifdef CONFIG_VSX
445	/*
446	 * Copy VSR 0-31 upper half from thread_struct to local
447	 * buffer, then write that to userspace.  Also set MSR_VSX in
448	 * the saved MSR value to indicate that frame->mc_vregs
449	 * contains valid data
450	 */
451	if (current->thread.used_vsr && ctx_has_vsx_region) {
452		__giveup_vsx(current);
453		if (copy_vsx_to_user(&frame->mc_vsregs, current))
454			return 1;
455		msr |= MSR_VSX;
456	}
457#endif /* CONFIG_VSX */
458#ifdef CONFIG_SPE
459	/* save spe registers */
460	if (current->thread.used_spe) {
461		flush_spe_to_thread(current);
462		if (__copy_to_user(&frame->mc_vregs, current->thread.evr,
463				   ELF_NEVRREG * sizeof(u32)))
464			return 1;
465		/* set MSR_SPE in the saved MSR value to indicate that
466		   frame->mc_vregs contains valid data */
467		msr |= MSR_SPE;
468	}
469	/* else assert((regs->msr & MSR_SPE) == 0) */
470
471	/* We always copy to/from spefscr */
472	if (__put_user(current->thread.spefscr, (u32 __user *)&frame->mc_vregs + ELF_NEVRREG))
473		return 1;
474#endif /* CONFIG_SPE */
475
476	if (__put_user(msr, &frame->mc_gregs[PT_MSR]))
477		return 1;
478	if (sigret) {
479		/* Set up the sigreturn trampoline: li r0,sigret; sc */
480		if (__put_user(0x38000000UL + sigret, &frame->tramp[0])
481		    || __put_user(0x44000002UL, &frame->tramp[1]))
482			return 1;
483		flush_icache_range((unsigned long) &frame->tramp[0],
484				   (unsigned long) &frame->tramp[2]);
485	}
486
487	return 0;
488}
489
490#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
491/*
492 * Save the current user registers on the user stack.
493 * We only save the altivec/spe registers if the process has used
494 * altivec/spe instructions at some point.
495 * We also save the transactional registers to a second ucontext in the
496 * frame.
497 *
498 * See save_user_regs() and signal_64.c:setup_tm_sigcontexts().
499 */
500static int save_tm_user_regs(struct pt_regs *regs,
501			     struct mcontext __user *frame,
502			     struct mcontext __user *tm_frame, int sigret)
503{
504	unsigned long msr = regs->msr;
505
506	/* Make sure floating point registers are stored in regs */
507	flush_fp_to_thread(current);
508
509	/* Save both sets of general registers */
510	if (save_general_regs(&current->thread.ckpt_regs, frame)
511	    || save_general_regs(regs, tm_frame))
512		return 1;
513
514	/* Stash the top half of the 64bit MSR into the 32bit MSR word
515	 * of the transactional mcontext.  This way we have a backward-compatible
516	 * MSR in the 'normal' (checkpointed) mcontext and additionally one can
517	 * also look at what type of transaction (T or S) was active at the
518	 * time of the signal.
519	 */
520	if (__put_user((msr >> 32), &tm_frame->mc_gregs[PT_MSR]))
521		return 1;
522
523#ifdef CONFIG_ALTIVEC
524	/* save altivec registers */
525	if (current->thread.used_vr) {
526		flush_altivec_to_thread(current);
527		if (__copy_to_user(&frame->mc_vregs, current->thread.vr,
528				   ELF_NVRREG * sizeof(vector128)))
529			return 1;
530		if (msr & MSR_VEC) {
531			if (__copy_to_user(&tm_frame->mc_vregs,
532					   current->thread.transact_vr,
533					   ELF_NVRREG * sizeof(vector128)))
534				return 1;
535		} else {
536			if (__copy_to_user(&tm_frame->mc_vregs,
537					   current->thread.vr,
538					   ELF_NVRREG * sizeof(vector128)))
539				return 1;
540		}
541
542		/* set MSR_VEC in the saved MSR value to indicate that
543		 * frame->mc_vregs contains valid data
544		 */
545		msr |= MSR_VEC;
546	}
547
548	/* We always copy to/from vrsave, it's 0 if we don't have or don't
549	 * use altivec. Since VSCR only contains 32 bits saved in the least
550	 * significant bits of a vector, we "cheat" and stuff VRSAVE in the
551	 * most significant bits of that same vector. --BenH
552	 */
553	if (__put_user(current->thread.vrsave,
554		       (u32 __user *)&frame->mc_vregs[32]))
555		return 1;
556	if (msr & MSR_VEC) {
557		if (__put_user(current->thread.transact_vrsave,
558			       (u32 __user *)&tm_frame->mc_vregs[32]))
559			return 1;
560	} else {
561		if (__put_user(current->thread.vrsave,
562			       (u32 __user *)&tm_frame->mc_vregs[32]))
563			return 1;
564	}
565#endif /* CONFIG_ALTIVEC */
566
567	if (copy_fpr_to_user(&frame->mc_fregs, current))
568		return 1;
569	if (msr & MSR_FP) {
570		if (copy_transact_fpr_to_user(&tm_frame->mc_fregs, current))
571			return 1;
572	} else {
573		if (copy_fpr_to_user(&tm_frame->mc_fregs, current))
574			return 1;
575	}
576
577#ifdef CONFIG_VSX
578	/*
579	 * Copy VSR 0-31 upper half from thread_struct to local
580	 * buffer, then write that to userspace.  Also set MSR_VSX in
581	 * the saved MSR value to indicate that frame->mc_vregs
582	 * contains valid data
583	 */
584	if (current->thread.used_vsr) {
585		__giveup_vsx(current);
586		if (copy_vsx_to_user(&frame->mc_vsregs, current))
587			return 1;
588		if (msr & MSR_VSX) {
589			if (copy_transact_vsx_to_user(&tm_frame->mc_vsregs,
590						      current))
591				return 1;
592		} else {
593			if (copy_vsx_to_user(&tm_frame->mc_vsregs, current))
594				return 1;
595		}
596
597		msr |= MSR_VSX;
598	}
599#endif /* CONFIG_VSX */
600#ifdef CONFIG_SPE
601	/* SPE regs are not checkpointed with TM, so this section is
602	 * simply the same as in save_user_regs().
603	 */
604	if (current->thread.used_spe) {
605		flush_spe_to_thread(current);
606		if (__copy_to_user(&frame->mc_vregs, current->thread.evr,
607				   ELF_NEVRREG * sizeof(u32)))
608			return 1;
609		/* set MSR_SPE in the saved MSR value to indicate that
610		 * frame->mc_vregs contains valid data */
611		msr |= MSR_SPE;
612	}
613
614	/* We always copy to/from spefscr */
615	if (__put_user(current->thread.spefscr, (u32 __user *)&frame->mc_vregs + ELF_NEVRREG))
616		return 1;
617#endif /* CONFIG_SPE */
618
619	if (__put_user(msr, &frame->mc_gregs[PT_MSR]))
620		return 1;
621	if (sigret) {
622		/* Set up the sigreturn trampoline: li r0,sigret; sc */
623		if (__put_user(0x38000000UL + sigret, &frame->tramp[0])
624		    || __put_user(0x44000002UL, &frame->tramp[1]))
625			return 1;
626		flush_icache_range((unsigned long) &frame->tramp[0],
627				   (unsigned long) &frame->tramp[2]);
628	}
629
630	return 0;
631}
632#endif
633
634/*
635 * Restore the current user register values from the user stack,
636 * (except for MSR).
637 */
638static long restore_user_regs(struct pt_regs *regs,
639			      struct mcontext __user *sr, int sig)
640{
641	long err;
642	unsigned int save_r2 = 0;
643	unsigned long msr;
644#ifdef CONFIG_VSX
645	int i;
646#endif
647
648	/*
649	 * restore general registers but not including MSR or SOFTE. Also
650	 * take care of keeping r2 (TLS) intact if not a signal
651	 */
652	if (!sig)
653		save_r2 = (unsigned int)regs->gpr[2];
654	err = restore_general_regs(regs, sr);
655	regs->trap = 0;
656	err |= __get_user(msr, &sr->mc_gregs[PT_MSR]);
657	if (!sig)
658		regs->gpr[2] = (unsigned long) save_r2;
659	if (err)
660		return 1;
661
662	/* if doing signal return, restore the previous little-endian mode */
663	if (sig)
664		regs->msr = (regs->msr & ~MSR_LE) | (msr & MSR_LE);
665
666	/*
667	 * Do this before updating the thread state in
668	 * current->thread.fpr/vr/evr.  That way, if we get preempted
669	 * and another task grabs the FPU/Altivec/SPE, it won't be
670	 * tempted to save the current CPU state into the thread_struct
671	 * and corrupt what we are writing there.
672	 */
673	discard_lazy_cpu_state();
674
675#ifdef CONFIG_ALTIVEC
676	/*
677	 * Force the process to reload the altivec registers from
678	 * current->thread when it next does altivec instructions
679	 */
680	regs->msr &= ~MSR_VEC;
681	if (msr & MSR_VEC) {
682		/* restore altivec registers from the stack */
683		if (__copy_from_user(current->thread.vr, &sr->mc_vregs,
684				     sizeof(sr->mc_vregs)))
685			return 1;
686	} else if (current->thread.used_vr)
687		memset(current->thread.vr, 0, ELF_NVRREG * sizeof(vector128));
688
689	/* Always get VRSAVE back */
690	if (__get_user(current->thread.vrsave, (u32 __user *)&sr->mc_vregs[32]))
691		return 1;
692#endif /* CONFIG_ALTIVEC */
693	if (copy_fpr_from_user(current, &sr->mc_fregs))
694		return 1;
695
696#ifdef CONFIG_VSX
697	/*
698	 * Force the process to reload the VSX registers from
699	 * current->thread when it next does VSX instruction.
700	 */
701	regs->msr &= ~MSR_VSX;
702	if (msr & MSR_VSX) {
703		/*
704		 * Restore altivec registers from the stack to a local
705		 * buffer, then write this out to the thread_struct
706		 */
707		if (copy_vsx_from_user(current, &sr->mc_vsregs))
708			return 1;
709	} else if (current->thread.used_vsr)
710		for (i = 0; i < 32 ; i++)
711			current->thread.fpr[i][TS_VSRLOWOFFSET] = 0;
712#endif /* CONFIG_VSX */
713	/*
714	 * force the process to reload the FP registers from
715	 * current->thread when it next does FP instructions
716	 */
717	regs->msr &= ~(MSR_FP | MSR_FE0 | MSR_FE1);
718
719#ifdef CONFIG_SPE
720	/* force the process to reload the spe registers from
721	   current->thread when it next does spe instructions */
722	regs->msr &= ~MSR_SPE;
723	if (msr & MSR_SPE) {
724		/* restore spe registers from the stack */
725		if (__copy_from_user(current->thread.evr, &sr->mc_vregs,
726				     ELF_NEVRREG * sizeof(u32)))
727			return 1;
728	} else if (current->thread.used_spe)
729		memset(current->thread.evr, 0, ELF_NEVRREG * sizeof(u32));
730
731	/* Always get SPEFSCR back */
732	if (__get_user(current->thread.spefscr, (u32 __user *)&sr->mc_vregs + ELF_NEVRREG))
733		return 1;
734#endif /* CONFIG_SPE */
735
736	return 0;
737}
738
739#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
740/*
741 * Restore the current user register values from the user stack, except for
742 * MSR, and recheckpoint the original checkpointed register state for processes
743 * in transactions.
744 */
745static long restore_tm_user_regs(struct pt_regs *regs,
746				 struct mcontext __user *sr,
747				 struct mcontext __user *tm_sr)
748{
749	long err;
750	unsigned long msr;
751#ifdef CONFIG_VSX
752	int i;
753#endif
754
755	/*
756	 * restore general registers but not including MSR or SOFTE. Also
757	 * take care of keeping r2 (TLS) intact if not a signal.
758	 * See comment in signal_64.c:restore_tm_sigcontexts();
759	 * TFHAR is restored from the checkpointed NIP; TEXASR and TFIAR
760	 * were set by the signal delivery.
761	 */
762	err = restore_general_regs(regs, tm_sr);
763	err |= restore_general_regs(&current->thread.ckpt_regs, sr);
764
765	err |= __get_user(current->thread.tm_tfhar, &sr->mc_gregs[PT_NIP]);
766
767	err |= __get_user(msr, &sr->mc_gregs[PT_MSR]);
768	if (err)
769		return 1;
770
771	/* Restore the previous little-endian mode */
772	regs->msr = (regs->msr & ~MSR_LE) | (msr & MSR_LE);
773
774	/*
775	 * Do this before updating the thread state in
776	 * current->thread.fpr/vr/evr.  That way, if we get preempted
777	 * and another task grabs the FPU/Altivec/SPE, it won't be
778	 * tempted to save the current CPU state into the thread_struct
779	 * and corrupt what we are writing there.
780	 */
781	discard_lazy_cpu_state();
782
783#ifdef CONFIG_ALTIVEC
784	regs->msr &= ~MSR_VEC;
785	if (msr & MSR_VEC) {
786		/* restore altivec registers from the stack */
787		if (__copy_from_user(current->thread.vr, &sr->mc_vregs,
788				     sizeof(sr->mc_vregs)) ||
789		    __copy_from_user(current->thread.transact_vr,
790				     &tm_sr->mc_vregs,
791				     sizeof(sr->mc_vregs)))
792			return 1;
793	} else if (current->thread.used_vr) {
794		memset(current->thread.vr, 0, ELF_NVRREG * sizeof(vector128));
795		memset(current->thread.transact_vr, 0,
796		       ELF_NVRREG * sizeof(vector128));
797	}
798
799	/* Always get VRSAVE back */
800	if (__get_user(current->thread.vrsave,
801		       (u32 __user *)&sr->mc_vregs[32]) ||
802	    __get_user(current->thread.transact_vrsave,
803		       (u32 __user *)&tm_sr->mc_vregs[32]))
804		return 1;
805#endif /* CONFIG_ALTIVEC */
806
807	regs->msr &= ~(MSR_FP | MSR_FE0 | MSR_FE1);
808
809	if (copy_fpr_from_user(current, &sr->mc_fregs) ||
810	    copy_transact_fpr_from_user(current, &tm_sr->mc_fregs))
811		return 1;
812
813#ifdef CONFIG_VSX
814	regs->msr &= ~MSR_VSX;
815	if (msr & MSR_VSX) {
816		/*
817		 * Restore altivec registers from the stack to a local
818		 * buffer, then write this out to the thread_struct
819		 */
820		if (copy_vsx_from_user(current, &sr->mc_vsregs) ||
821		    copy_transact_vsx_from_user(current, &tm_sr->mc_vsregs))
822			return 1;
823	} else if (current->thread.used_vsr)
824		for (i = 0; i < 32 ; i++) {
825			current->thread.fpr[i][TS_VSRLOWOFFSET] = 0;
826			current->thread.transact_fpr[i][TS_VSRLOWOFFSET] = 0;
827		}
828#endif /* CONFIG_VSX */
829
830#ifdef CONFIG_SPE
831	/* SPE regs are not checkpointed with TM, so this section is
832	 * simply the same as in restore_user_regs().
833	 */
834	regs->msr &= ~MSR_SPE;
835	if (msr & MSR_SPE) {
836		if (__copy_from_user(current->thread.evr, &sr->mc_vregs,
837				     ELF_NEVRREG * sizeof(u32)))
838			return 1;
839	} else if (current->thread.used_spe)
840		memset(current->thread.evr, 0, ELF_NEVRREG * sizeof(u32));
841
842	/* Always get SPEFSCR back */
843	if (__get_user(current->thread.spefscr, (u32 __user *)&sr->mc_vregs
844		       + ELF_NEVRREG))
845		return 1;
846#endif /* CONFIG_SPE */
847
848	/* Now, recheckpoint.  This loads up all of the checkpointed (older)
849	 * registers, including FP and V[S]Rs.  After recheckpointing, the
850	 * transactional versions should be loaded.
851	 */
852	tm_enable();
853	/* This loads the checkpointed FP/VEC state, if used */
854	tm_recheckpoint(&current->thread, msr);
855	/* The task has moved into TM state S, so ensure MSR reflects this */
856	regs->msr = (regs->msr & ~MSR_TS_MASK) | MSR_TS_S;
857
858	/* This loads the speculative FP/VEC state, if used */
859	if (msr & MSR_FP) {
860		do_load_up_transact_fpu(&current->thread);
861		regs->msr |= (MSR_FP | current->thread.fpexc_mode);
862	}
863#ifdef CONFIG_ALTIVEC
864	if (msr & MSR_VEC) {
865		do_load_up_transact_altivec(&current->thread);
866		regs->msr |= MSR_VEC;
867	}
868#endif
869
870	return 0;
871}
872#endif
873
874#ifdef CONFIG_PPC64
875int copy_siginfo_to_user32(struct compat_siginfo __user *d, siginfo_t *s)
876{
877	int err;
878
879	if (!access_ok (VERIFY_WRITE, d, sizeof(*d)))
880		return -EFAULT;
881
882	/* If you change siginfo_t structure, please be sure
883	 * this code is fixed accordingly.
884	 * It should never copy any pad contained in the structure
885	 * to avoid security leaks, but must copy the generic
886	 * 3 ints plus the relevant union member.
887	 * This routine must convert siginfo from 64bit to 32bit as well
888	 * at the same time.
889	 */
890	err = __put_user(s->si_signo, &d->si_signo);
891	err |= __put_user(s->si_errno, &d->si_errno);
892	err |= __put_user((short)s->si_code, &d->si_code);
893	if (s->si_code < 0)
894		err |= __copy_to_user(&d->_sifields._pad, &s->_sifields._pad,
895				      SI_PAD_SIZE32);
896	else switch(s->si_code >> 16) {
897	case __SI_CHLD >> 16:
898		err |= __put_user(s->si_pid, &d->si_pid);
899		err |= __put_user(s->si_uid, &d->si_uid);
900		err |= __put_user(s->si_utime, &d->si_utime);
901		err |= __put_user(s->si_stime, &d->si_stime);
902		err |= __put_user(s->si_status, &d->si_status);
903		break;
904	case __SI_FAULT >> 16:
905		err |= __put_user((unsigned int)(unsigned long)s->si_addr,
906				  &d->si_addr);
907		break;
908	case __SI_POLL >> 16:
909		err |= __put_user(s->si_band, &d->si_band);
910		err |= __put_user(s->si_fd, &d->si_fd);
911		break;
912	case __SI_TIMER >> 16:
913		err |= __put_user(s->si_tid, &d->si_tid);
914		err |= __put_user(s->si_overrun, &d->si_overrun);
915		err |= __put_user(s->si_int, &d->si_int);
916		break;
917	case __SI_RT >> 16: /* This is not generated by the kernel as of now.  */
918	case __SI_MESGQ >> 16:
919		err |= __put_user(s->si_int, &d->si_int);
920		/* fallthrough */
921	case __SI_KILL >> 16:
922	default:
923		err |= __put_user(s->si_pid, &d->si_pid);
924		err |= __put_user(s->si_uid, &d->si_uid);
925		break;
926	}
927	return err;
928}
929
930#define copy_siginfo_to_user	copy_siginfo_to_user32
931
932int copy_siginfo_from_user32(siginfo_t *to, struct compat_siginfo __user *from)
933{
934	memset(to, 0, sizeof *to);
935
936	if (copy_from_user(to, from, 3*sizeof(int)) ||
937	    copy_from_user(to->_sifields._pad,
938			   from->_sifields._pad, SI_PAD_SIZE32))
939		return -EFAULT;
940
941	return 0;
942}
943#endif /* CONFIG_PPC64 */
944
945/*
946 * Set up a signal frame for a "real-time" signal handler
947 * (one which gets siginfo).
948 */
949int handle_rt_signal32(unsigned long sig, struct k_sigaction *ka,
950		siginfo_t *info, sigset_t *oldset,
951		struct pt_regs *regs)
952{
953	struct rt_sigframe __user *rt_sf;
954	struct mcontext __user *frame;
955	void __user *addr;
956	unsigned long newsp = 0;
957	int sigret;
958	unsigned long tramp;
959
960	/* Set up Signal Frame */
961	/* Put a Real Time Context onto stack */
962	rt_sf = get_sigframe(ka, get_tm_stackpointer(regs), sizeof(*rt_sf), 1);
963	addr = rt_sf;
964	if (unlikely(rt_sf == NULL))
965		goto badframe;
966
967	/* Put the siginfo & fill in most of the ucontext */
968	if (copy_siginfo_to_user(&rt_sf->info, info)
969	    || __put_user(0, &rt_sf->uc.uc_flags)
970	    || __save_altstack(&rt_sf->uc.uc_stack, regs->gpr[1])
971	    || __put_user(to_user_ptr(&rt_sf->uc.uc_mcontext),
972		    &rt_sf->uc.uc_regs)
973	    || put_sigset_t(&rt_sf->uc.uc_sigmask, oldset))
974		goto badframe;
975
976	/* Save user registers on the stack */
977	frame = &rt_sf->uc.uc_mcontext;
978	addr = frame;
979	if (vdso32_rt_sigtramp && current->mm->context.vdso_base) {
980		sigret = 0;
981		tramp = current->mm->context.vdso_base + vdso32_rt_sigtramp;
982	} else {
983		sigret = __NR_rt_sigreturn;
984		tramp = (unsigned long) frame->tramp;
985	}
986
987#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
988	if (MSR_TM_ACTIVE(regs->msr)) {
989		if (save_tm_user_regs(regs, &rt_sf->uc.uc_mcontext,
990				      &rt_sf->uc_transact.uc_mcontext, sigret))
991			goto badframe;
992	}
993	else
994#endif
995		if (save_user_regs(regs, frame, sigret, 1))
996			goto badframe;
997	regs->link = tramp;
998
999#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
1000	if (MSR_TM_ACTIVE(regs->msr)) {
1001		if (__put_user((unsigned long)&rt_sf->uc_transact,
1002			       &rt_sf->uc.uc_link)
1003		    || __put_user(to_user_ptr(&rt_sf->uc_transact.uc_mcontext),
1004				  &rt_sf->uc_transact.uc_regs))
1005			goto badframe;
1006	}
1007	else
1008#endif
1009		if (__put_user(0, &rt_sf->uc.uc_link))
1010			goto badframe;
1011
1012	current->thread.fpscr.val = 0;	/* turn off all fp exceptions */
1013
1014	/* create a stack frame for the caller of the handler */
1015	newsp = ((unsigned long)rt_sf) - (__SIGNAL_FRAMESIZE + 16);
1016	addr = (void __user *)regs->gpr[1];
1017	if (put_user(regs->gpr[1], (u32 __user *)newsp))
1018		goto badframe;
1019
1020	/* Fill registers for signal handler */
1021	regs->gpr[1] = newsp;
1022	regs->gpr[3] = sig;
1023	regs->gpr[4] = (unsigned long) &rt_sf->info;
1024	regs->gpr[5] = (unsigned long) &rt_sf->uc;
1025	regs->gpr[6] = (unsigned long) rt_sf;
1026	regs->nip = (unsigned long) ka->sa.sa_handler;
1027	/* enter the signal handler in big-endian mode */
1028	regs->msr &= ~MSR_LE;
1029#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
1030	/* Remove TM bits from thread's MSR.  The MSR in the sigcontext
1031	 * just indicates to userland that we were doing a transaction, but we
1032	 * don't want to return in transactional state:
1033	 */
1034	regs->msr &= ~MSR_TS_MASK;
1035#endif
1036	return 1;
1037
1038badframe:
1039#ifdef DEBUG_SIG
1040	printk("badframe in handle_rt_signal, regs=%p frame=%p newsp=%lx\n",
1041	       regs, frame, newsp);
1042#endif
1043	if (show_unhandled_signals)
1044		printk_ratelimited(KERN_INFO
1045				   "%s[%d]: bad frame in handle_rt_signal32: "
1046				   "%p nip %08lx lr %08lx\n",
1047				   current->comm, current->pid,
1048				   addr, regs->nip, regs->link);
1049
1050	force_sigsegv(sig, current);
1051	return 0;
1052}
1053
1054static int do_setcontext(struct ucontext __user *ucp, struct pt_regs *regs, int sig)
1055{
1056	sigset_t set;
1057	struct mcontext __user *mcp;
1058
1059	if (get_sigset_t(&set, &ucp->uc_sigmask))
1060		return -EFAULT;
1061#ifdef CONFIG_PPC64
1062	{
1063		u32 cmcp;
1064
1065		if (__get_user(cmcp, &ucp->uc_regs))
1066			return -EFAULT;
1067		mcp = (struct mcontext __user *)(u64)cmcp;
1068		/* no need to check access_ok(mcp), since mcp < 4GB */
1069	}
1070#else
1071	if (__get_user(mcp, &ucp->uc_regs))
1072		return -EFAULT;
1073	if (!access_ok(VERIFY_READ, mcp, sizeof(*mcp)))
1074		return -EFAULT;
1075#endif
1076	set_current_blocked(&set);
1077	if (restore_user_regs(regs, mcp, sig))
1078		return -EFAULT;
1079
1080	return 0;
1081}
1082
1083#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
1084static int do_setcontext_tm(struct ucontext __user *ucp,
1085			    struct ucontext __user *tm_ucp,
1086			    struct pt_regs *regs)
1087{
1088	sigset_t set;
1089	struct mcontext __user *mcp;
1090	struct mcontext __user *tm_mcp;
1091	u32 cmcp;
1092	u32 tm_cmcp;
1093
1094	if (get_sigset_t(&set, &ucp->uc_sigmask))
1095		return -EFAULT;
1096
1097	if (__get_user(cmcp, &ucp->uc_regs) ||
1098	    __get_user(tm_cmcp, &tm_ucp->uc_regs))
1099		return -EFAULT;
1100	mcp = (struct mcontext __user *)(u64)cmcp;
1101	tm_mcp = (struct mcontext __user *)(u64)tm_cmcp;
1102	/* no need to check access_ok(mcp), since mcp < 4GB */
1103
1104	set_current_blocked(&set);
1105	if (restore_tm_user_regs(regs, mcp, tm_mcp))
1106		return -EFAULT;
1107
1108	return 0;
1109}
1110#endif
1111
1112long sys_swapcontext(struct ucontext __user *old_ctx,
1113		     struct ucontext __user *new_ctx,
1114		     int ctx_size, int r6, int r7, int r8, struct pt_regs *regs)
1115{
1116	unsigned char tmp;
1117	int ctx_has_vsx_region = 0;
1118
1119#ifdef CONFIG_PPC64
1120	unsigned long new_msr = 0;
1121
1122	if (new_ctx) {
1123		struct mcontext __user *mcp;
1124		u32 cmcp;
1125
1126		/*
1127		 * Get pointer to the real mcontext.  No need for
1128		 * access_ok since we are dealing with compat
1129		 * pointers.
1130		 */
1131		if (__get_user(cmcp, &new_ctx->uc_regs))
1132			return -EFAULT;
1133		mcp = (struct mcontext __user *)(u64)cmcp;
1134		if (__get_user(new_msr, &mcp->mc_gregs[PT_MSR]))
1135			return -EFAULT;
1136	}
1137	/*
1138	 * Check that the context is not smaller than the original
1139	 * size (with VMX but without VSX)
1140	 */
1141	if (ctx_size < UCONTEXTSIZEWITHOUTVSX)
1142		return -EINVAL;
1143	/*
1144	 * If the new context state sets the MSR VSX bits but
1145	 * it doesn't provide VSX state.
1146	 */
1147	if ((ctx_size < sizeof(struct ucontext)) &&
1148	    (new_msr & MSR_VSX))
1149		return -EINVAL;
1150	/* Does the context have enough room to store VSX data? */
1151	if (ctx_size >= sizeof(struct ucontext))
1152		ctx_has_vsx_region = 1;
1153#else
1154	/* Context size is for future use. Right now, we only make sure
1155	 * we are passed something we understand
1156	 */
1157	if (ctx_size < sizeof(struct ucontext))
1158		return -EINVAL;
1159#endif
1160	if (old_ctx != NULL) {
1161		struct mcontext __user *mctx;
1162
1163		/*
1164		 * old_ctx might not be 16-byte aligned, in which
1165		 * case old_ctx->uc_mcontext won't be either.
1166		 * Because we have the old_ctx->uc_pad2 field
1167		 * before old_ctx->uc_mcontext, we need to round down
1168		 * from &old_ctx->uc_mcontext to a 16-byte boundary.
1169		 */
1170		mctx = (struct mcontext __user *)
1171			((unsigned long) &old_ctx->uc_mcontext & ~0xfUL);
1172		if (!access_ok(VERIFY_WRITE, old_ctx, ctx_size)
1173		    || save_user_regs(regs, mctx, 0, ctx_has_vsx_region)
1174		    || put_sigset_t(&old_ctx->uc_sigmask, &current->blocked)
1175		    || __put_user(to_user_ptr(mctx), &old_ctx->uc_regs))
1176			return -EFAULT;
1177	}
1178	if (new_ctx == NULL)
1179		return 0;
1180	if (!access_ok(VERIFY_READ, new_ctx, ctx_size)
1181	    || __get_user(tmp, (u8 __user *) new_ctx)
1182	    || __get_user(tmp, (u8 __user *) new_ctx + ctx_size - 1))
1183		return -EFAULT;
1184
1185	/*
1186	 * If we get a fault copying the context into the kernel's
1187	 * image of the user's registers, we can't just return -EFAULT
1188	 * because the user's registers will be corrupted.  For instance
1189	 * the NIP value may have been updated but not some of the
1190	 * other registers.  Given that we have done the access_ok
1191	 * and successfully read the first and last bytes of the region
1192	 * above, this should only happen in an out-of-memory situation
1193	 * or if another thread unmaps the region containing the context.
1194	 * We kill the task with a SIGSEGV in this situation.
1195	 */
1196	if (do_setcontext(new_ctx, regs, 0))
1197		do_exit(SIGSEGV);
1198
1199	set_thread_flag(TIF_RESTOREALL);
1200	return 0;
1201}
1202
1203long sys_rt_sigreturn(int r3, int r4, int r5, int r6, int r7, int r8,
1204		     struct pt_regs *regs)
1205{
1206	struct rt_sigframe __user *rt_sf;
1207#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
1208	struct ucontext __user *uc_transact;
1209	unsigned long msr_hi;
1210	unsigned long tmp;
1211	int tm_restore = 0;
1212#endif
1213	/* Always make any pending restarted system calls return -EINTR */
1214	current_thread_info()->restart_block.fn = do_no_restart_syscall;
1215
1216	rt_sf = (struct rt_sigframe __user *)
1217		(regs->gpr[1] + __SIGNAL_FRAMESIZE + 16);
1218	if (!access_ok(VERIFY_READ, rt_sf, sizeof(*rt_sf)))
1219		goto bad;
1220#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
1221	if (__get_user(tmp, &rt_sf->uc.uc_link))
1222		goto bad;
1223	uc_transact = (struct ucontext __user *)(uintptr_t)tmp;
1224	if (uc_transact) {
1225		u32 cmcp;
1226		struct mcontext __user *mcp;
1227
1228		if (__get_user(cmcp, &uc_transact->uc_regs))
1229			return -EFAULT;
1230		mcp = (struct mcontext __user *)(u64)cmcp;
1231		/* The top 32 bits of the MSR are stashed in the transactional
1232		 * ucontext. */
1233		if (__get_user(msr_hi, &mcp->mc_gregs[PT_MSR]))
1234			goto bad;
1235
1236		if (MSR_TM_SUSPENDED(msr_hi<<32)) {
1237			/* We only recheckpoint on return if we're
1238			 * transaction.
1239			 */
1240			tm_restore = 1;
1241			if (do_setcontext_tm(&rt_sf->uc, uc_transact, regs))
1242				goto bad;
1243		}
1244	}
1245	if (!tm_restore)
1246		/* Fall through, for non-TM restore */
1247#endif
1248	if (do_setcontext(&rt_sf->uc, regs, 1))
1249		goto bad;
1250
1251	/*
1252	 * It's not clear whether or why it is desirable to save the
1253	 * sigaltstack setting on signal delivery and restore it on
1254	 * signal return.  But other architectures do this and we have
1255	 * always done it up until now so it is probably better not to
1256	 * change it.  -- paulus
1257	 */
1258#ifdef CONFIG_PPC64
1259	if (compat_restore_altstack(&rt_sf->uc.uc_stack))
1260		goto bad;
1261#else
1262	if (restore_altstack(&rt_sf->uc.uc_stack))
1263		goto bad;
1264#endif
1265	set_thread_flag(TIF_RESTOREALL);
1266	return 0;
1267
1268 bad:
1269	if (show_unhandled_signals)
1270		printk_ratelimited(KERN_INFO
1271				   "%s[%d]: bad frame in sys_rt_sigreturn: "
1272				   "%p nip %08lx lr %08lx\n",
1273				   current->comm, current->pid,
1274				   rt_sf, regs->nip, regs->link);
1275
1276	force_sig(SIGSEGV, current);
1277	return 0;
1278}
1279
1280#ifdef CONFIG_PPC32
1281int sys_debug_setcontext(struct ucontext __user *ctx,
1282			 int ndbg, struct sig_dbg_op __user *dbg,
1283			 int r6, int r7, int r8,
1284			 struct pt_regs *regs)
1285{
1286	struct sig_dbg_op op;
1287	int i;
1288	unsigned char tmp;
1289	unsigned long new_msr = regs->msr;
1290#ifdef CONFIG_PPC_ADV_DEBUG_REGS
1291	unsigned long new_dbcr0 = current->thread.dbcr0;
1292#endif
1293
1294	for (i=0; i<ndbg; i++) {
1295		if (copy_from_user(&op, dbg + i, sizeof(op)))
1296			return -EFAULT;
1297		switch (op.dbg_type) {
1298		case SIG_DBG_SINGLE_STEPPING:
1299#ifdef CONFIG_PPC_ADV_DEBUG_REGS
1300			if (op.dbg_value) {
1301				new_msr |= MSR_DE;
1302				new_dbcr0 |= (DBCR0_IDM | DBCR0_IC);
1303			} else {
1304				new_dbcr0 &= ~DBCR0_IC;
1305				if (!DBCR_ACTIVE_EVENTS(new_dbcr0,
1306						current->thread.dbcr1)) {
1307					new_msr &= ~MSR_DE;
1308					new_dbcr0 &= ~DBCR0_IDM;
1309				}
1310			}
1311#else
1312			if (op.dbg_value)
1313				new_msr |= MSR_SE;
1314			else
1315				new_msr &= ~MSR_SE;
1316#endif
1317			break;
1318		case SIG_DBG_BRANCH_TRACING:
1319#ifdef CONFIG_PPC_ADV_DEBUG_REGS
1320			return -EINVAL;
1321#else
1322			if (op.dbg_value)
1323				new_msr |= MSR_BE;
1324			else
1325				new_msr &= ~MSR_BE;
1326#endif
1327			break;
1328
1329		default:
1330			return -EINVAL;
1331		}
1332	}
1333
1334	/* We wait until here to actually install the values in the
1335	   registers so if we fail in the above loop, it will not
1336	   affect the contents of these registers.  After this point,
1337	   failure is a problem, anyway, and it's very unlikely unless
1338	   the user is really doing something wrong. */
1339	regs->msr = new_msr;
1340#ifdef CONFIG_PPC_ADV_DEBUG_REGS
1341	current->thread.dbcr0 = new_dbcr0;
1342#endif
1343
1344	if (!access_ok(VERIFY_READ, ctx, sizeof(*ctx))
1345	    || __get_user(tmp, (u8 __user *) ctx)
1346	    || __get_user(tmp, (u8 __user *) (ctx + 1) - 1))
1347		return -EFAULT;
1348
1349	/*
1350	 * If we get a fault copying the context into the kernel's
1351	 * image of the user's registers, we can't just return -EFAULT
1352	 * because the user's registers will be corrupted.  For instance
1353	 * the NIP value may have been updated but not some of the
1354	 * other registers.  Given that we have done the access_ok
1355	 * and successfully read the first and last bytes of the region
1356	 * above, this should only happen in an out-of-memory situation
1357	 * or if another thread unmaps the region containing the context.
1358	 * We kill the task with a SIGSEGV in this situation.
1359	 */
1360	if (do_setcontext(ctx, regs, 1)) {
1361		if (show_unhandled_signals)
1362			printk_ratelimited(KERN_INFO "%s[%d]: bad frame in "
1363					   "sys_debug_setcontext: %p nip %08lx "
1364					   "lr %08lx\n",
1365					   current->comm, current->pid,
1366					   ctx, regs->nip, regs->link);
1367
1368		force_sig(SIGSEGV, current);
1369		goto out;
1370	}
1371
1372	/*
1373	 * It's not clear whether or why it is desirable to save the
1374	 * sigaltstack setting on signal delivery and restore it on
1375	 * signal return.  But other architectures do this and we have
1376	 * always done it up until now so it is probably better not to
1377	 * change it.  -- paulus
1378	 */
1379	restore_altstack(&ctx->uc_stack);
1380
1381	set_thread_flag(TIF_RESTOREALL);
1382 out:
1383	return 0;
1384}
1385#endif
1386
1387/*
1388 * OK, we're invoking a handler
1389 */
1390int handle_signal32(unsigned long sig, struct k_sigaction *ka,
1391		    siginfo_t *info, sigset_t *oldset, struct pt_regs *regs)
1392{
1393	struct sigcontext __user *sc;
1394	struct sigframe __user *frame;
1395	unsigned long newsp = 0;
1396	int sigret;
1397	unsigned long tramp;
1398
1399	/* Set up Signal Frame */
1400	frame = get_sigframe(ka, get_tm_stackpointer(regs), sizeof(*frame), 1);
1401	if (unlikely(frame == NULL))
1402		goto badframe;
1403	sc = (struct sigcontext __user *) &frame->sctx;
1404
1405#if _NSIG != 64
1406#error "Please adjust handle_signal()"
1407#endif
1408	if (__put_user(to_user_ptr(ka->sa.sa_handler), &sc->handler)
1409	    || __put_user(oldset->sig[0], &sc->oldmask)
1410#ifdef CONFIG_PPC64
1411	    || __put_user((oldset->sig[0] >> 32), &sc->_unused[3])
1412#else
1413	    || __put_user(oldset->sig[1], &sc->_unused[3])
1414#endif
1415	    || __put_user(to_user_ptr(&frame->mctx), &sc->regs)
1416	    || __put_user(sig, &sc->signal))
1417		goto badframe;
1418
1419	if (vdso32_sigtramp && current->mm->context.vdso_base) {
1420		sigret = 0;
1421		tramp = current->mm->context.vdso_base + vdso32_sigtramp;
1422	} else {
1423		sigret = __NR_sigreturn;
1424		tramp = (unsigned long) frame->mctx.tramp;
1425	}
1426
1427#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
1428	if (MSR_TM_ACTIVE(regs->msr)) {
1429		if (save_tm_user_regs(regs, &frame->mctx, &frame->mctx_transact,
1430				      sigret))
1431			goto badframe;
1432	}
1433	else
1434#endif
1435		if (save_user_regs(regs, &frame->mctx, sigret, 1))
1436			goto badframe;
1437
1438	regs->link = tramp;
1439
1440	current->thread.fpscr.val = 0;	/* turn off all fp exceptions */
1441
1442	/* create a stack frame for the caller of the handler */
1443	newsp = ((unsigned long)frame) - __SIGNAL_FRAMESIZE;
1444	if (put_user(regs->gpr[1], (u32 __user *)newsp))
1445		goto badframe;
1446
1447	regs->gpr[1] = newsp;
1448	regs->gpr[3] = sig;
1449	regs->gpr[4] = (unsigned long) sc;
1450	regs->nip = (unsigned long) ka->sa.sa_handler;
1451	/* enter the signal handler in big-endian mode */
1452	regs->msr &= ~MSR_LE;
1453#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
1454	/* Remove TM bits from thread's MSR.  The MSR in the sigcontext
1455	 * just indicates to userland that we were doing a transaction, but we
1456	 * don't want to return in transactional state:
1457	 */
1458	regs->msr &= ~MSR_TS_MASK;
1459#endif
1460	return 1;
1461
1462badframe:
1463#ifdef DEBUG_SIG
1464	printk("badframe in handle_signal, regs=%p frame=%p newsp=%lx\n",
1465	       regs, frame, newsp);
1466#endif
1467	if (show_unhandled_signals)
1468		printk_ratelimited(KERN_INFO
1469				   "%s[%d]: bad frame in handle_signal32: "
1470				   "%p nip %08lx lr %08lx\n",
1471				   current->comm, current->pid,
1472				   frame, regs->nip, regs->link);
1473
1474	force_sigsegv(sig, current);
1475	return 0;
1476}
1477
1478/*
1479 * Do a signal return; undo the signal stack.
1480 */
1481long sys_sigreturn(int r3, int r4, int r5, int r6, int r7, int r8,
1482		       struct pt_regs *regs)
1483{
1484	struct sigcontext __user *sc;
1485	struct sigcontext sigctx;
1486	struct mcontext __user *sr;
1487	void __user *addr;
1488	sigset_t set;
1489
1490	/* Always make any pending restarted system calls return -EINTR */
1491	current_thread_info()->restart_block.fn = do_no_restart_syscall;
1492
1493	sc = (struct sigcontext __user *)(regs->gpr[1] + __SIGNAL_FRAMESIZE);
1494	addr = sc;
1495	if (copy_from_user(&sigctx, sc, sizeof(sigctx)))
1496		goto badframe;
1497
1498#ifdef CONFIG_PPC64
1499	/*
1500	 * Note that PPC32 puts the upper 32 bits of the sigmask in the
1501	 * unused part of the signal stackframe
1502	 */
1503	set.sig[0] = sigctx.oldmask + ((long)(sigctx._unused[3]) << 32);
1504#else
1505	set.sig[0] = sigctx.oldmask;
1506	set.sig[1] = sigctx._unused[3];
1507#endif
1508	set_current_blocked(&set);
1509
1510	sr = (struct mcontext __user *)from_user_ptr(sigctx.regs);
1511	addr = sr;
1512	if (!access_ok(VERIFY_READ, sr, sizeof(*sr))
1513	    || restore_user_regs(regs, sr, 1))
1514		goto badframe;
1515
1516	set_thread_flag(TIF_RESTOREALL);
1517	return 0;
1518
1519badframe:
1520	if (show_unhandled_signals)
1521		printk_ratelimited(KERN_INFO
1522				   "%s[%d]: bad frame in sys_sigreturn: "
1523				   "%p nip %08lx lr %08lx\n",
1524				   current->comm, current->pid,
1525				   addr, regs->nip, regs->link);
1526
1527	force_sig(SIGSEGV, current);
1528	return 0;
1529}
1530