Greg Kroah-Hartman | b244131 | 2017-11-01 15:07:57 +0100 | [diff] [blame] | 1 | // SPDX-License-Identifier: GPL-2.0 |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 2 | #include <linux/slab.h> |
| 3 | #include <linux/file.h> |
| 4 | #include <linux/fdtable.h> |
Andrey Ryabinin | 70d78fe | 2016-11-10 10:46:38 -0800 | [diff] [blame] | 5 | #include <linux/freezer.h> |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 6 | #include <linux/mm.h> |
| 7 | #include <linux/stat.h> |
| 8 | #include <linux/fcntl.h> |
| 9 | #include <linux/swap.h> |
| 10 | #include <linux/string.h> |
| 11 | #include <linux/init.h> |
| 12 | #include <linux/pagemap.h> |
| 13 | #include <linux/perf_event.h> |
| 14 | #include <linux/highmem.h> |
| 15 | #include <linux/spinlock.h> |
| 16 | #include <linux/key.h> |
| 17 | #include <linux/personality.h> |
| 18 | #include <linux/binfmts.h> |
Alex Kelly | 179899f | 2012-10-04 17:15:24 -0700 | [diff] [blame] | 19 | #include <linux/coredump.h> |
Ingo Molnar | f7ccbae | 2017-02-08 18:51:30 +0100 | [diff] [blame] | 20 | #include <linux/sched/coredump.h> |
Ingo Molnar | 3f07c01 | 2017-02-08 18:51:30 +0100 | [diff] [blame] | 21 | #include <linux/sched/signal.h> |
Ingo Molnar | 68db0cf | 2017-02-08 18:51:37 +0100 | [diff] [blame] | 22 | #include <linux/sched/task_stack.h> |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 23 | #include <linux/utsname.h> |
| 24 | #include <linux/pid_namespace.h> |
| 25 | #include <linux/module.h> |
| 26 | #include <linux/namei.h> |
| 27 | #include <linux/mount.h> |
| 28 | #include <linux/security.h> |
| 29 | #include <linux/syscalls.h> |
| 30 | #include <linux/tsacct_kern.h> |
| 31 | #include <linux/cn_proc.h> |
| 32 | #include <linux/audit.h> |
| 33 | #include <linux/tracehook.h> |
| 34 | #include <linux/kmod.h> |
| 35 | #include <linux/fsnotify.h> |
| 36 | #include <linux/fs_struct.h> |
| 37 | #include <linux/pipe_fs_i.h> |
| 38 | #include <linux/oom.h> |
| 39 | #include <linux/compat.h> |
Jann Horn | 378c652 | 2016-03-22 14:25:36 -0700 | [diff] [blame] | 40 | #include <linux/fs.h> |
| 41 | #include <linux/path.h> |
Arnd Bergmann | 03927c8 | 2015-11-25 16:22:25 +0100 | [diff] [blame] | 42 | #include <linux/timekeeping.h> |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 43 | |
Linus Torvalds | 7c0f6ba | 2016-12-24 11:46:01 -0800 | [diff] [blame] | 44 | #include <linux/uaccess.h> |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 45 | #include <asm/mmu_context.h> |
| 46 | #include <asm/tlb.h> |
| 47 | #include <asm/exec.h> |
| 48 | |
| 49 | #include <trace/events/task.h> |
| 50 | #include "internal.h" |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 51 | |
| 52 | #include <trace/events/sched.h> |
| 53 | |
| 54 | int core_uses_pid; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 55 | unsigned int core_pipe_limit; |
Oleg Nesterov | 3ceadcf | 2013-07-03 15:08:22 -0700 | [diff] [blame] | 56 | char core_pattern[CORENAME_MAX_SIZE] = "core"; |
| 57 | static int core_name_size = CORENAME_MAX_SIZE; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 58 | |
| 59 | struct core_name { |
| 60 | char *corename; |
| 61 | int used, size; |
| 62 | }; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 63 | |
| 64 | /* The maximal length of core_pattern is also specified in sysctl.c */ |
| 65 | |
Oleg Nesterov | 3ceadcf | 2013-07-03 15:08:22 -0700 | [diff] [blame] | 66 | static int expand_corename(struct core_name *cn, int size) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 67 | { |
Oleg Nesterov | e7fd154 | 2013-07-03 15:08:16 -0700 | [diff] [blame] | 68 | char *corename = krealloc(cn->corename, size, GFP_KERNEL); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 69 | |
Oleg Nesterov | e7fd154 | 2013-07-03 15:08:16 -0700 | [diff] [blame] | 70 | if (!corename) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 71 | return -ENOMEM; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 72 | |
Oleg Nesterov | 3ceadcf | 2013-07-03 15:08:22 -0700 | [diff] [blame] | 73 | if (size > core_name_size) /* racy but harmless */ |
| 74 | core_name_size = size; |
| 75 | |
| 76 | cn->size = ksize(corename); |
Oleg Nesterov | e7fd154 | 2013-07-03 15:08:16 -0700 | [diff] [blame] | 77 | cn->corename = corename; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 78 | return 0; |
| 79 | } |
| 80 | |
Nicolas Iooss | b4176b7 | 2015-06-25 15:03:53 -0700 | [diff] [blame] | 81 | static __printf(2, 0) int cn_vprintf(struct core_name *cn, const char *fmt, |
| 82 | va_list arg) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 83 | { |
Oleg Nesterov | 5fe9d8c | 2013-07-03 15:08:19 -0700 | [diff] [blame] | 84 | int free, need; |
Eric Dumazet | 404ca80 | 2014-04-19 10:15:07 -0700 | [diff] [blame] | 85 | va_list arg_copy; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 86 | |
Oleg Nesterov | 5fe9d8c | 2013-07-03 15:08:19 -0700 | [diff] [blame] | 87 | again: |
| 88 | free = cn->size - cn->used; |
Eric Dumazet | 404ca80 | 2014-04-19 10:15:07 -0700 | [diff] [blame] | 89 | |
| 90 | va_copy(arg_copy, arg); |
| 91 | need = vsnprintf(cn->corename + cn->used, free, fmt, arg_copy); |
| 92 | va_end(arg_copy); |
| 93 | |
Oleg Nesterov | 5fe9d8c | 2013-07-03 15:08:19 -0700 | [diff] [blame] | 94 | if (need < free) { |
| 95 | cn->used += need; |
| 96 | return 0; |
| 97 | } |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 98 | |
Oleg Nesterov | 3ceadcf | 2013-07-03 15:08:22 -0700 | [diff] [blame] | 99 | if (!expand_corename(cn, cn->size + need - free + 1)) |
Oleg Nesterov | 5fe9d8c | 2013-07-03 15:08:19 -0700 | [diff] [blame] | 100 | goto again; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 101 | |
Oleg Nesterov | 5fe9d8c | 2013-07-03 15:08:19 -0700 | [diff] [blame] | 102 | return -ENOMEM; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 103 | } |
| 104 | |
Nicolas Iooss | b4176b7 | 2015-06-25 15:03:53 -0700 | [diff] [blame] | 105 | static __printf(2, 3) int cn_printf(struct core_name *cn, const char *fmt, ...) |
Oleg Nesterov | bc03c69 | 2013-07-03 15:08:17 -0700 | [diff] [blame] | 106 | { |
| 107 | va_list arg; |
| 108 | int ret; |
| 109 | |
| 110 | va_start(arg, fmt); |
| 111 | ret = cn_vprintf(cn, fmt, arg); |
| 112 | va_end(arg); |
| 113 | |
| 114 | return ret; |
| 115 | } |
| 116 | |
Nicolas Iooss | b4176b7 | 2015-06-25 15:03:53 -0700 | [diff] [blame] | 117 | static __printf(2, 3) |
| 118 | int cn_esc_printf(struct core_name *cn, const char *fmt, ...) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 119 | { |
Oleg Nesterov | 923bed03 | 2013-07-03 15:08:20 -0700 | [diff] [blame] | 120 | int cur = cn->used; |
| 121 | va_list arg; |
| 122 | int ret; |
| 123 | |
| 124 | va_start(arg, fmt); |
| 125 | ret = cn_vprintf(cn, fmt, arg); |
| 126 | va_end(arg); |
| 127 | |
Jann Horn | ac94b6e | 2016-01-20 15:00:08 -0800 | [diff] [blame] | 128 | if (ret == 0) { |
| 129 | /* |
| 130 | * Ensure that this coredump name component can't cause the |
| 131 | * resulting corefile path to consist of a ".." or ".". |
| 132 | */ |
| 133 | if ((cn->used - cur == 1 && cn->corename[cur] == '.') || |
| 134 | (cn->used - cur == 2 && cn->corename[cur] == '.' |
| 135 | && cn->corename[cur+1] == '.')) |
| 136 | cn->corename[cur] = '!'; |
| 137 | |
| 138 | /* |
| 139 | * Empty names are fishy and could be used to create a "//" in a |
| 140 | * corefile name, causing the coredump to happen one directory |
| 141 | * level too high. Enforce that all components of the core |
| 142 | * pattern are at least one character long. |
| 143 | */ |
| 144 | if (cn->used == cur) |
| 145 | ret = cn_printf(cn, "!"); |
| 146 | } |
| 147 | |
Oleg Nesterov | 923bed03 | 2013-07-03 15:08:20 -0700 | [diff] [blame] | 148 | for (; cur < cn->used; ++cur) { |
| 149 | if (cn->corename[cur] == '/') |
| 150 | cn->corename[cur] = '!'; |
| 151 | } |
| 152 | return ret; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 153 | } |
| 154 | |
| 155 | static int cn_print_exe_file(struct core_name *cn) |
| 156 | { |
| 157 | struct file *exe_file; |
| 158 | char *pathbuf, *path; |
| 159 | int ret; |
| 160 | |
| 161 | exe_file = get_mm_exe_file(current->mm); |
Oleg Nesterov | 923bed03 | 2013-07-03 15:08:20 -0700 | [diff] [blame] | 162 | if (!exe_file) |
| 163 | return cn_esc_printf(cn, "%s (path unknown)", current->comm); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 164 | |
Michal Hocko | 0ee931c | 2017-09-13 16:28:29 -0700 | [diff] [blame] | 165 | pathbuf = kmalloc(PATH_MAX, GFP_KERNEL); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 166 | if (!pathbuf) { |
| 167 | ret = -ENOMEM; |
| 168 | goto put_exe_file; |
| 169 | } |
| 170 | |
Miklos Szeredi | 9bf39ab | 2015-06-19 10:29:13 +0200 | [diff] [blame] | 171 | path = file_path(exe_file, pathbuf, PATH_MAX); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 172 | if (IS_ERR(path)) { |
| 173 | ret = PTR_ERR(path); |
| 174 | goto free_buf; |
| 175 | } |
| 176 | |
Oleg Nesterov | 923bed03 | 2013-07-03 15:08:20 -0700 | [diff] [blame] | 177 | ret = cn_esc_printf(cn, "%s", path); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 178 | |
| 179 | free_buf: |
| 180 | kfree(pathbuf); |
| 181 | put_exe_file: |
| 182 | fput(exe_file); |
| 183 | return ret; |
| 184 | } |
| 185 | |
| 186 | /* format_corename will inspect the pattern parameter, and output a |
| 187 | * name into corename, which must have space for at least |
| 188 | * CORENAME_MAX_SIZE bytes plus one byte for the zero terminator. |
| 189 | */ |
Oleg Nesterov | 12a2b4b | 2012-10-04 17:15:25 -0700 | [diff] [blame] | 190 | static int format_corename(struct core_name *cn, struct coredump_params *cprm) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 191 | { |
| 192 | const struct cred *cred = current_cred(); |
| 193 | const char *pat_ptr = core_pattern; |
| 194 | int ispipe = (*pat_ptr == '|'); |
| 195 | int pid_in_pattern = 0; |
| 196 | int err = 0; |
| 197 | |
Oleg Nesterov | e7fd154 | 2013-07-03 15:08:16 -0700 | [diff] [blame] | 198 | cn->used = 0; |
Oleg Nesterov | 3ceadcf | 2013-07-03 15:08:22 -0700 | [diff] [blame] | 199 | cn->corename = NULL; |
| 200 | if (expand_corename(cn, core_name_size)) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 201 | return -ENOMEM; |
Oleg Nesterov | 888ffc5 | 2013-07-03 15:08:23 -0700 | [diff] [blame] | 202 | cn->corename[0] = '\0'; |
| 203 | |
| 204 | if (ispipe) |
| 205 | ++pat_ptr; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 206 | |
| 207 | /* Repeat as long as we have more pattern to process and more output |
| 208 | space */ |
| 209 | while (*pat_ptr) { |
| 210 | if (*pat_ptr != '%') { |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 211 | err = cn_printf(cn, "%c", *pat_ptr++); |
| 212 | } else { |
| 213 | switch (*++pat_ptr) { |
| 214 | /* single % at the end, drop that */ |
| 215 | case 0: |
| 216 | goto out; |
| 217 | /* Double percent, output one percent */ |
| 218 | case '%': |
| 219 | err = cn_printf(cn, "%c", '%'); |
| 220 | break; |
| 221 | /* pid */ |
| 222 | case 'p': |
| 223 | pid_in_pattern = 1; |
| 224 | err = cn_printf(cn, "%d", |
| 225 | task_tgid_vnr(current)); |
| 226 | break; |
Stéphane Graber | 65aafb1 | 2013-09-11 14:24:32 -0700 | [diff] [blame] | 227 | /* global pid */ |
| 228 | case 'P': |
| 229 | err = cn_printf(cn, "%d", |
| 230 | task_tgid_nr(current)); |
| 231 | break; |
Oleg Nesterov | b03023e | 2014-10-13 15:53:35 -0700 | [diff] [blame] | 232 | case 'i': |
| 233 | err = cn_printf(cn, "%d", |
| 234 | task_pid_vnr(current)); |
| 235 | break; |
| 236 | case 'I': |
| 237 | err = cn_printf(cn, "%d", |
| 238 | task_pid_nr(current)); |
| 239 | break; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 240 | /* uid */ |
| 241 | case 'u': |
Nicolas Iooss | 5202efe | 2015-06-25 15:03:51 -0700 | [diff] [blame] | 242 | err = cn_printf(cn, "%u", |
| 243 | from_kuid(&init_user_ns, |
| 244 | cred->uid)); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 245 | break; |
| 246 | /* gid */ |
| 247 | case 'g': |
Nicolas Iooss | 5202efe | 2015-06-25 15:03:51 -0700 | [diff] [blame] | 248 | err = cn_printf(cn, "%u", |
| 249 | from_kgid(&init_user_ns, |
| 250 | cred->gid)); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 251 | break; |
Oleg Nesterov | 12a2b4b | 2012-10-04 17:15:25 -0700 | [diff] [blame] | 252 | case 'd': |
| 253 | err = cn_printf(cn, "%d", |
| 254 | __get_dumpable(cprm->mm_flags)); |
| 255 | break; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 256 | /* signal that caused the coredump */ |
| 257 | case 's': |
Nicolas Iooss | b4176b7 | 2015-06-25 15:03:53 -0700 | [diff] [blame] | 258 | err = cn_printf(cn, "%d", |
| 259 | cprm->siginfo->si_signo); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 260 | break; |
| 261 | /* UNIX time of coredump */ |
| 262 | case 't': { |
Arnd Bergmann | 03927c8 | 2015-11-25 16:22:25 +0100 | [diff] [blame] | 263 | time64_t time; |
| 264 | |
| 265 | time = ktime_get_real_seconds(); |
| 266 | err = cn_printf(cn, "%lld", time); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 267 | break; |
| 268 | } |
| 269 | /* hostname */ |
Oleg Nesterov | 923bed03 | 2013-07-03 15:08:20 -0700 | [diff] [blame] | 270 | case 'h': |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 271 | down_read(&uts_sem); |
Oleg Nesterov | 923bed03 | 2013-07-03 15:08:20 -0700 | [diff] [blame] | 272 | err = cn_esc_printf(cn, "%s", |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 273 | utsname()->nodename); |
| 274 | up_read(&uts_sem); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 275 | break; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 276 | /* executable */ |
Oleg Nesterov | 923bed03 | 2013-07-03 15:08:20 -0700 | [diff] [blame] | 277 | case 'e': |
| 278 | err = cn_esc_printf(cn, "%s", current->comm); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 279 | break; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 280 | case 'E': |
| 281 | err = cn_print_exe_file(cn); |
| 282 | break; |
| 283 | /* core limit size */ |
| 284 | case 'c': |
| 285 | err = cn_printf(cn, "%lu", |
| 286 | rlimit(RLIMIT_CORE)); |
| 287 | break; |
| 288 | default: |
| 289 | break; |
| 290 | } |
| 291 | ++pat_ptr; |
| 292 | } |
| 293 | |
| 294 | if (err) |
| 295 | return err; |
| 296 | } |
| 297 | |
Oleg Nesterov | 888ffc5 | 2013-07-03 15:08:23 -0700 | [diff] [blame] | 298 | out: |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 299 | /* Backward compatibility with core_uses_pid: |
| 300 | * |
| 301 | * If core_pattern does not include a %p (as is the default) |
| 302 | * and core_uses_pid is set, then .%pid will be appended to |
| 303 | * the filename. Do not do this for piped commands. */ |
| 304 | if (!ispipe && !pid_in_pattern && core_uses_pid) { |
| 305 | err = cn_printf(cn, ".%d", task_tgid_vnr(current)); |
| 306 | if (err) |
| 307 | return err; |
| 308 | } |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 309 | return ispipe; |
| 310 | } |
| 311 | |
Oleg Nesterov | 5fa534c | 2015-11-06 16:32:31 -0800 | [diff] [blame] | 312 | static int zap_process(struct task_struct *start, int exit_code, int flags) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 313 | { |
| 314 | struct task_struct *t; |
| 315 | int nr = 0; |
| 316 | |
Oleg Nesterov | 5fa534c | 2015-11-06 16:32:31 -0800 | [diff] [blame] | 317 | /* ignore all signals except SIGKILL, see prepare_signal() */ |
| 318 | start->signal->flags = SIGNAL_GROUP_COREDUMP | flags; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 319 | start->signal->group_exit_code = exit_code; |
| 320 | start->signal->group_stop_count = 0; |
| 321 | |
Oleg Nesterov | d61ba58 | 2015-11-06 16:32:34 -0800 | [diff] [blame] | 322 | for_each_thread(start, t) { |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 323 | task_clear_jobctl_pending(t, JOBCTL_PENDING_MASK); |
| 324 | if (t != current && t->mm) { |
| 325 | sigaddset(&t->pending.signal, SIGKILL); |
| 326 | signal_wake_up(t, 1); |
| 327 | nr++; |
| 328 | } |
Oleg Nesterov | d61ba58 | 2015-11-06 16:32:34 -0800 | [diff] [blame] | 329 | } |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 330 | |
| 331 | return nr; |
| 332 | } |
| 333 | |
Oleg Nesterov | 403bad7 | 2013-04-30 15:28:10 -0700 | [diff] [blame] | 334 | static int zap_threads(struct task_struct *tsk, struct mm_struct *mm, |
| 335 | struct core_state *core_state, int exit_code) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 336 | { |
| 337 | struct task_struct *g, *p; |
| 338 | unsigned long flags; |
| 339 | int nr = -EAGAIN; |
| 340 | |
| 341 | spin_lock_irq(&tsk->sighand->siglock); |
| 342 | if (!signal_group_exit(tsk->signal)) { |
| 343 | mm->core_state = core_state; |
Oleg Nesterov | 6cd8f0a | 2013-04-30 15:28:12 -0700 | [diff] [blame] | 344 | tsk->signal->group_exit_task = tsk; |
Oleg Nesterov | 5fa534c | 2015-11-06 16:32:31 -0800 | [diff] [blame] | 345 | nr = zap_process(tsk, exit_code, 0); |
Oleg Nesterov | 403bad7 | 2013-04-30 15:28:10 -0700 | [diff] [blame] | 346 | clear_tsk_thread_flag(tsk, TIF_SIGPENDING); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 347 | } |
| 348 | spin_unlock_irq(&tsk->sighand->siglock); |
| 349 | if (unlikely(nr < 0)) |
| 350 | return nr; |
| 351 | |
Silesh C V | aed8adb | 2014-07-23 13:59:59 -0700 | [diff] [blame] | 352 | tsk->flags |= PF_DUMPCORE; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 353 | if (atomic_read(&mm->mm_users) == nr + 1) |
| 354 | goto done; |
| 355 | /* |
| 356 | * We should find and kill all tasks which use this mm, and we should |
| 357 | * count them correctly into ->nr_threads. We don't take tasklist |
| 358 | * lock, but this is safe wrt: |
| 359 | * |
| 360 | * fork: |
| 361 | * None of sub-threads can fork after zap_process(leader). All |
| 362 | * processes which were created before this point should be |
| 363 | * visible to zap_threads() because copy_process() adds the new |
| 364 | * process to the tail of init_task.tasks list, and lock/unlock |
| 365 | * of ->siglock provides a memory barrier. |
| 366 | * |
| 367 | * do_exit: |
| 368 | * The caller holds mm->mmap_sem. This means that the task which |
| 369 | * uses this mm can't pass exit_mm(), so it can't exit or clear |
| 370 | * its ->mm. |
| 371 | * |
| 372 | * de_thread: |
| 373 | * It does list_replace_rcu(&leader->tasks, ¤t->tasks), |
| 374 | * we must see either old or new leader, this does not matter. |
| 375 | * However, it can change p->sighand, so lock_task_sighand(p) |
| 376 | * must be used. Since p->mm != NULL and we hold ->mmap_sem |
| 377 | * it can't fail. |
| 378 | * |
| 379 | * Note also that "g" can be the old leader with ->mm == NULL |
| 380 | * and already unhashed and thus removed from ->thread_group. |
| 381 | * This is OK, __unhash_process()->list_del_rcu() does not |
| 382 | * clear the ->next pointer, we will find the new leader via |
| 383 | * next_thread(). |
| 384 | */ |
| 385 | rcu_read_lock(); |
| 386 | for_each_process(g) { |
| 387 | if (g == tsk->group_leader) |
| 388 | continue; |
| 389 | if (g->flags & PF_KTHREAD) |
| 390 | continue; |
Oleg Nesterov | d61ba58 | 2015-11-06 16:32:34 -0800 | [diff] [blame] | 391 | |
| 392 | for_each_thread(g, p) { |
| 393 | if (unlikely(!p->mm)) |
| 394 | continue; |
| 395 | if (unlikely(p->mm == mm)) { |
| 396 | lock_task_sighand(p, &flags); |
| 397 | nr += zap_process(p, exit_code, |
| 398 | SIGNAL_GROUP_EXIT); |
| 399 | unlock_task_sighand(p, &flags); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 400 | } |
Oleg Nesterov | d61ba58 | 2015-11-06 16:32:34 -0800 | [diff] [blame] | 401 | break; |
| 402 | } |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 403 | } |
| 404 | rcu_read_unlock(); |
| 405 | done: |
| 406 | atomic_set(&core_state->nr_threads, nr); |
| 407 | return nr; |
| 408 | } |
| 409 | |
| 410 | static int coredump_wait(int exit_code, struct core_state *core_state) |
| 411 | { |
| 412 | struct task_struct *tsk = current; |
| 413 | struct mm_struct *mm = tsk->mm; |
| 414 | int core_waiters = -EBUSY; |
| 415 | |
| 416 | init_completion(&core_state->startup); |
| 417 | core_state->dumper.task = tsk; |
| 418 | core_state->dumper.next = NULL; |
| 419 | |
Michal Hocko | 4136c26 | 2016-05-23 16:25:57 -0700 | [diff] [blame] | 420 | if (down_write_killable(&mm->mmap_sem)) |
| 421 | return -EINTR; |
| 422 | |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 423 | if (!mm->core_state) |
| 424 | core_waiters = zap_threads(tsk, mm, core_state, exit_code); |
| 425 | up_write(&mm->mmap_sem); |
| 426 | |
| 427 | if (core_waiters > 0) { |
| 428 | struct core_thread *ptr; |
| 429 | |
Andrey Ryabinin | 70d78fe | 2016-11-10 10:46:38 -0800 | [diff] [blame] | 430 | freezer_do_not_count(); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 431 | wait_for_completion(&core_state->startup); |
Andrey Ryabinin | 70d78fe | 2016-11-10 10:46:38 -0800 | [diff] [blame] | 432 | freezer_count(); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 433 | /* |
| 434 | * Wait for all the threads to become inactive, so that |
| 435 | * all the thread context (extended register state, like |
| 436 | * fpu etc) gets copied to the memory. |
| 437 | */ |
| 438 | ptr = core_state->dumper.next; |
| 439 | while (ptr != NULL) { |
| 440 | wait_task_inactive(ptr->task, 0); |
| 441 | ptr = ptr->next; |
| 442 | } |
| 443 | } |
| 444 | |
| 445 | return core_waiters; |
| 446 | } |
| 447 | |
Oleg Nesterov | acdedd9 | 2013-04-30 15:28:13 -0700 | [diff] [blame] | 448 | static void coredump_finish(struct mm_struct *mm, bool core_dumped) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 449 | { |
| 450 | struct core_thread *curr, *next; |
| 451 | struct task_struct *task; |
| 452 | |
Oleg Nesterov | 6cd8f0a | 2013-04-30 15:28:12 -0700 | [diff] [blame] | 453 | spin_lock_irq(¤t->sighand->siglock); |
Oleg Nesterov | acdedd9 | 2013-04-30 15:28:13 -0700 | [diff] [blame] | 454 | if (core_dumped && !__fatal_signal_pending(current)) |
| 455 | current->signal->group_exit_code |= 0x80; |
Oleg Nesterov | 6cd8f0a | 2013-04-30 15:28:12 -0700 | [diff] [blame] | 456 | current->signal->group_exit_task = NULL; |
| 457 | current->signal->flags = SIGNAL_GROUP_EXIT; |
| 458 | spin_unlock_irq(¤t->sighand->siglock); |
| 459 | |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 460 | next = mm->core_state->dumper.next; |
| 461 | while ((curr = next) != NULL) { |
| 462 | next = curr->next; |
| 463 | task = curr->task; |
| 464 | /* |
| 465 | * see exit_mm(), curr->task must not see |
| 466 | * ->task == NULL before we read ->next. |
| 467 | */ |
| 468 | smp_mb(); |
| 469 | curr->task = NULL; |
| 470 | wake_up_process(task); |
| 471 | } |
| 472 | |
| 473 | mm->core_state = NULL; |
| 474 | } |
| 475 | |
Oleg Nesterov | 528f827 | 2013-04-30 15:28:15 -0700 | [diff] [blame] | 476 | static bool dump_interrupted(void) |
| 477 | { |
| 478 | /* |
| 479 | * SIGKILL or freezing() interrupt the coredumping. Perhaps we |
| 480 | * can do try_to_freeze() and check __fatal_signal_pending(), |
| 481 | * but then we need to teach dump_write() to restart and clear |
| 482 | * TIF_SIGPENDING. |
| 483 | */ |
| 484 | return signal_pending(current); |
| 485 | } |
| 486 | |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 487 | static void wait_for_dump_helpers(struct file *file) |
| 488 | { |
Al Viro | de32ec4 | 2013-03-21 11:16:56 -0400 | [diff] [blame] | 489 | struct pipe_inode_info *pipe = file->private_data; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 490 | |
| 491 | pipe_lock(pipe); |
| 492 | pipe->readers++; |
| 493 | pipe->writers--; |
Oleg Nesterov | dc7ee2a | 2013-04-30 15:28:17 -0700 | [diff] [blame] | 494 | wake_up_interruptible_sync(&pipe->wait); |
| 495 | kill_fasync(&pipe->fasync_readers, SIGIO, POLL_IN); |
| 496 | pipe_unlock(pipe); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 497 | |
Oleg Nesterov | dc7ee2a | 2013-04-30 15:28:17 -0700 | [diff] [blame] | 498 | /* |
| 499 | * We actually want wait_event_freezable() but then we need |
| 500 | * to clear TIF_SIGPENDING and improve dump_interrupted(). |
| 501 | */ |
| 502 | wait_event_interruptible(pipe->wait, pipe->readers == 1); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 503 | |
Oleg Nesterov | dc7ee2a | 2013-04-30 15:28:17 -0700 | [diff] [blame] | 504 | pipe_lock(pipe); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 505 | pipe->readers--; |
| 506 | pipe->writers++; |
| 507 | pipe_unlock(pipe); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 508 | } |
| 509 | |
| 510 | /* |
| 511 | * umh_pipe_setup |
| 512 | * helper function to customize the process used |
| 513 | * to collect the core in userspace. Specifically |
| 514 | * it sets up a pipe and installs it as fd 0 (stdin) |
| 515 | * for the process. Returns 0 on success, or |
| 516 | * PTR_ERR on failure. |
| 517 | * Note that it also sets the core limit to 1. This |
| 518 | * is a special value that we use to trap recursive |
| 519 | * core dumps |
| 520 | */ |
| 521 | static int umh_pipe_setup(struct subprocess_info *info, struct cred *new) |
| 522 | { |
| 523 | struct file *files[2]; |
| 524 | struct coredump_params *cp = (struct coredump_params *)info->data; |
| 525 | int err = create_pipe_files(files, 0); |
| 526 | if (err) |
| 527 | return err; |
| 528 | |
| 529 | cp->file = files[1]; |
| 530 | |
Al Viro | 45525b2 | 2012-10-16 13:30:07 -0400 | [diff] [blame] | 531 | err = replace_fd(0, files[0], 0); |
| 532 | fput(files[0]); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 533 | /* and disallow core files too */ |
| 534 | current->signal->rlim[RLIMIT_CORE] = (struct rlimit){1, 1}; |
| 535 | |
Al Viro | 45525b2 | 2012-10-16 13:30:07 -0400 | [diff] [blame] | 536 | return err; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 537 | } |
| 538 | |
Al Viro | ec57941 | 2013-10-13 17:57:29 -0400 | [diff] [blame] | 539 | void do_coredump(const siginfo_t *siginfo) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 540 | { |
| 541 | struct core_state core_state; |
| 542 | struct core_name cn; |
| 543 | struct mm_struct *mm = current->mm; |
| 544 | struct linux_binfmt * binfmt; |
| 545 | const struct cred *old_cred; |
| 546 | struct cred *cred; |
| 547 | int retval = 0; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 548 | int ispipe; |
| 549 | struct files_struct *displaced; |
Jann Horn | fbb1816 | 2015-09-09 15:38:28 -0700 | [diff] [blame] | 550 | /* require nonrelative corefile path and be extra careful */ |
| 551 | bool need_suid_safe = false; |
Oleg Nesterov | acdedd9 | 2013-04-30 15:28:13 -0700 | [diff] [blame] | 552 | bool core_dumped = false; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 553 | static atomic_t core_dump_count = ATOMIC_INIT(0); |
| 554 | struct coredump_params cprm = { |
Denys Vlasenko | 5ab1c30 | 2012-10-04 17:15:29 -0700 | [diff] [blame] | 555 | .siginfo = siginfo, |
Al Viro | 541880d | 2012-11-05 13:11:26 -0500 | [diff] [blame] | 556 | .regs = signal_pt_regs(), |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 557 | .limit = rlimit(RLIMIT_CORE), |
| 558 | /* |
| 559 | * We must use the same mm->flags while dumping core to avoid |
| 560 | * inconsistency of bit flags, since this flag is not protected |
| 561 | * by any locks. |
| 562 | */ |
| 563 | .mm_flags = mm->flags, |
| 564 | }; |
| 565 | |
Denys Vlasenko | 5ab1c30 | 2012-10-04 17:15:29 -0700 | [diff] [blame] | 566 | audit_core_dumps(siginfo->si_signo); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 567 | |
| 568 | binfmt = mm->binfmt; |
| 569 | if (!binfmt || !binfmt->core_dump) |
| 570 | goto fail; |
| 571 | if (!__get_dumpable(cprm.mm_flags)) |
| 572 | goto fail; |
| 573 | |
| 574 | cred = prepare_creds(); |
| 575 | if (!cred) |
| 576 | goto fail; |
| 577 | /* |
| 578 | * We cannot trust fsuid as being the "true" uid of the process |
| 579 | * nor do we know its entire history. We only know it was tainted |
| 580 | * so we dump it as root in mode 2, and only into a controlled |
| 581 | * environment (pipe handler or fully qualified path). |
| 582 | */ |
Kees Cook | e579d2c | 2013-02-27 17:03:15 -0800 | [diff] [blame] | 583 | if (__get_dumpable(cprm.mm_flags) == SUID_DUMP_ROOT) { |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 584 | /* Setuid core dump mode */ |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 585 | cred->fsuid = GLOBAL_ROOT_UID; /* Dump root private */ |
Jann Horn | fbb1816 | 2015-09-09 15:38:28 -0700 | [diff] [blame] | 586 | need_suid_safe = true; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 587 | } |
| 588 | |
Denys Vlasenko | 5ab1c30 | 2012-10-04 17:15:29 -0700 | [diff] [blame] | 589 | retval = coredump_wait(siginfo->si_signo, &core_state); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 590 | if (retval < 0) |
| 591 | goto fail_creds; |
| 592 | |
| 593 | old_cred = override_creds(cred); |
| 594 | |
Oleg Nesterov | 12a2b4b | 2012-10-04 17:15:25 -0700 | [diff] [blame] | 595 | ispipe = format_corename(&cn, &cprm); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 596 | |
Lucas De Marchi | fb96c47 | 2013-04-30 15:28:06 -0700 | [diff] [blame] | 597 | if (ispipe) { |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 598 | int dump_count; |
| 599 | char **helper_argv; |
Lucas De Marchi | 907ed13 | 2013-04-30 15:28:07 -0700 | [diff] [blame] | 600 | struct subprocess_info *sub_info; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 601 | |
| 602 | if (ispipe < 0) { |
| 603 | printk(KERN_WARNING "format_corename failed\n"); |
| 604 | printk(KERN_WARNING "Aborting core\n"); |
Oleg Nesterov | e7fd154 | 2013-07-03 15:08:16 -0700 | [diff] [blame] | 605 | goto fail_unlock; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 606 | } |
| 607 | |
| 608 | if (cprm.limit == 1) { |
| 609 | /* See umh_pipe_setup() which sets RLIMIT_CORE = 1. |
| 610 | * |
| 611 | * Normally core limits are irrelevant to pipes, since |
| 612 | * we're not writing to the file system, but we use |
Bastien Nocera | fcbc32b | 2015-02-05 14:35:05 +0100 | [diff] [blame] | 613 | * cprm.limit of 1 here as a special value, this is a |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 614 | * consistent way to catch recursive crashes. |
| 615 | * We can still crash if the core_pattern binary sets |
| 616 | * RLIM_CORE = !1, but it runs as root, and can do |
| 617 | * lots of stupid things. |
| 618 | * |
| 619 | * Note that we use task_tgid_vnr here to grab the pid |
| 620 | * of the process group leader. That way we get the |
| 621 | * right pid if a thread in a multi-threaded |
| 622 | * core_pattern process dies. |
| 623 | */ |
| 624 | printk(KERN_WARNING |
| 625 | "Process %d(%s) has RLIMIT_CORE set to 1\n", |
| 626 | task_tgid_vnr(current), current->comm); |
| 627 | printk(KERN_WARNING "Aborting core\n"); |
| 628 | goto fail_unlock; |
| 629 | } |
| 630 | cprm.limit = RLIM_INFINITY; |
| 631 | |
| 632 | dump_count = atomic_inc_return(&core_dump_count); |
| 633 | if (core_pipe_limit && (core_pipe_limit < dump_count)) { |
| 634 | printk(KERN_WARNING "Pid %d(%s) over core_pipe_limit\n", |
| 635 | task_tgid_vnr(current), current->comm); |
| 636 | printk(KERN_WARNING "Skipping core dump\n"); |
| 637 | goto fail_dropcount; |
| 638 | } |
| 639 | |
Oleg Nesterov | 888ffc5 | 2013-07-03 15:08:23 -0700 | [diff] [blame] | 640 | helper_argv = argv_split(GFP_KERNEL, cn.corename, NULL); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 641 | if (!helper_argv) { |
| 642 | printk(KERN_WARNING "%s failed to allocate memory\n", |
| 643 | __func__); |
| 644 | goto fail_dropcount; |
| 645 | } |
| 646 | |
Lucas De Marchi | 907ed13 | 2013-04-30 15:28:07 -0700 | [diff] [blame] | 647 | retval = -ENOMEM; |
| 648 | sub_info = call_usermodehelper_setup(helper_argv[0], |
| 649 | helper_argv, NULL, GFP_KERNEL, |
| 650 | umh_pipe_setup, NULL, &cprm); |
| 651 | if (sub_info) |
| 652 | retval = call_usermodehelper_exec(sub_info, |
| 653 | UMH_WAIT_EXEC); |
| 654 | |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 655 | argv_free(helper_argv); |
| 656 | if (retval) { |
Oleg Nesterov | 888ffc5 | 2013-07-03 15:08:23 -0700 | [diff] [blame] | 657 | printk(KERN_INFO "Core dump to |%s pipe failed\n", |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 658 | cn.corename); |
| 659 | goto close_fail; |
Lucas De Marchi | fb96c47 | 2013-04-30 15:28:06 -0700 | [diff] [blame] | 660 | } |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 661 | } else { |
| 662 | struct inode *inode; |
Jann Horn | 378c652 | 2016-03-22 14:25:36 -0700 | [diff] [blame] | 663 | int open_flags = O_CREAT | O_RDWR | O_NOFOLLOW | |
| 664 | O_LARGEFILE | O_EXCL; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 665 | |
| 666 | if (cprm.limit < binfmt->min_coredump) |
| 667 | goto fail_unlock; |
| 668 | |
Jann Horn | fbb1816 | 2015-09-09 15:38:28 -0700 | [diff] [blame] | 669 | if (need_suid_safe && cn.corename[0] != '/') { |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 670 | printk(KERN_WARNING "Pid %d(%s) can only dump core "\ |
| 671 | "to fully qualified path!\n", |
| 672 | task_tgid_vnr(current), current->comm); |
| 673 | printk(KERN_WARNING "Skipping core dump\n"); |
| 674 | goto fail_unlock; |
| 675 | } |
| 676 | |
Jann Horn | fbb1816 | 2015-09-09 15:38:28 -0700 | [diff] [blame] | 677 | /* |
| 678 | * Unlink the file if it exists unless this is a SUID |
| 679 | * binary - in that case, we're running around with root |
| 680 | * privs and don't want to unlink another user's coredump. |
| 681 | */ |
| 682 | if (!need_suid_safe) { |
Jann Horn | fbb1816 | 2015-09-09 15:38:28 -0700 | [diff] [blame] | 683 | /* |
| 684 | * If it doesn't exist, that's fine. If there's some |
| 685 | * other problem, we'll catch it at the filp_open(). |
| 686 | */ |
Christoph Hellwig | 9627165 | 2017-11-04 13:44:46 +0300 | [diff] [blame] | 687 | do_unlinkat(AT_FDCWD, getname_kernel(cn.corename)); |
Jann Horn | fbb1816 | 2015-09-09 15:38:28 -0700 | [diff] [blame] | 688 | } |
| 689 | |
| 690 | /* |
| 691 | * There is a race between unlinking and creating the |
| 692 | * file, but if that causes an EEXIST here, that's |
| 693 | * fine - another process raced with us while creating |
| 694 | * the corefile, and the other process won. To userspace, |
| 695 | * what matters is that at least one of the two processes |
| 696 | * writes its coredump successfully, not which one. |
| 697 | */ |
Jann Horn | 378c652 | 2016-03-22 14:25:36 -0700 | [diff] [blame] | 698 | if (need_suid_safe) { |
| 699 | /* |
| 700 | * Using user namespaces, normal user tasks can change |
| 701 | * their current->fs->root to point to arbitrary |
| 702 | * directories. Since the intention of the "only dump |
| 703 | * with a fully qualified path" rule is to control where |
| 704 | * coredumps may be placed using root privileges, |
| 705 | * current->fs->root must not be used. Instead, use the |
| 706 | * root directory of init_task. |
| 707 | */ |
| 708 | struct path root; |
| 709 | |
| 710 | task_lock(&init_task); |
| 711 | get_fs_root(init_task.fs, &root); |
| 712 | task_unlock(&init_task); |
| 713 | cprm.file = file_open_root(root.dentry, root.mnt, |
| 714 | cn.corename, open_flags, 0600); |
| 715 | path_put(&root); |
| 716 | } else { |
| 717 | cprm.file = filp_open(cn.corename, open_flags, 0600); |
| 718 | } |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 719 | if (IS_ERR(cprm.file)) |
| 720 | goto fail_unlock; |
| 721 | |
Al Viro | 496ad9a | 2013-01-23 17:07:38 -0500 | [diff] [blame] | 722 | inode = file_inode(cprm.file); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 723 | if (inode->i_nlink > 1) |
| 724 | goto close_fail; |
| 725 | if (d_unhashed(cprm.file->f_path.dentry)) |
| 726 | goto close_fail; |
| 727 | /* |
| 728 | * AK: actually i see no reason to not allow this for named |
| 729 | * pipes etc, but keep the previous behaviour for now. |
| 730 | */ |
| 731 | if (!S_ISREG(inode->i_mode)) |
| 732 | goto close_fail; |
| 733 | /* |
Jann Horn | 40f705a | 2015-09-09 15:38:30 -0700 | [diff] [blame] | 734 | * Don't dump core if the filesystem changed owner or mode |
| 735 | * of the file during file creation. This is an issue when |
| 736 | * a process dumps core while its cwd is e.g. on a vfat |
| 737 | * filesystem. |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 738 | */ |
| 739 | if (!uid_eq(inode->i_uid, current_fsuid())) |
| 740 | goto close_fail; |
Jann Horn | 40f705a | 2015-09-09 15:38:30 -0700 | [diff] [blame] | 741 | if ((inode->i_mode & 0677) != 0600) |
| 742 | goto close_fail; |
Al Viro | 86cc058 | 2015-04-03 15:23:17 -0400 | [diff] [blame] | 743 | if (!(cprm.file->f_mode & FMODE_CAN_WRITE)) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 744 | goto close_fail; |
| 745 | if (do_truncate(cprm.file->f_path.dentry, 0, 0, cprm.file)) |
| 746 | goto close_fail; |
| 747 | } |
| 748 | |
| 749 | /* get us an unshared descriptor table; almost always a no-op */ |
| 750 | retval = unshare_files(&displaced); |
| 751 | if (retval) |
| 752 | goto close_fail; |
| 753 | if (displaced) |
| 754 | put_files_struct(displaced); |
Al Viro | e86d35c | 2013-05-04 14:45:54 -0400 | [diff] [blame] | 755 | if (!dump_interrupted()) { |
Luis Chamberlain | f3a6bc0 | 2020-04-16 16:28:59 +0000 | [diff] [blame] | 756 | /* |
| 757 | * umh disabled with CONFIG_STATIC_USERMODEHELPER_PATH="" would |
| 758 | * have this set to NULL. |
| 759 | */ |
| 760 | if (!cprm.file) { |
| 761 | pr_info("Core dump to |%s disabled\n", cn.corename); |
| 762 | goto close_fail; |
| 763 | } |
Al Viro | e86d35c | 2013-05-04 14:45:54 -0400 | [diff] [blame] | 764 | file_start_write(cprm.file); |
| 765 | core_dumped = binfmt->core_dump(&cprm); |
| 766 | file_end_write(cprm.file); |
| 767 | } |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 768 | if (ispipe && core_pipe_limit) |
| 769 | wait_for_dump_helpers(cprm.file); |
| 770 | close_fail: |
| 771 | if (cprm.file) |
| 772 | filp_close(cprm.file, NULL); |
| 773 | fail_dropcount: |
| 774 | if (ispipe) |
| 775 | atomic_dec(&core_dump_count); |
| 776 | fail_unlock: |
| 777 | kfree(cn.corename); |
Oleg Nesterov | acdedd9 | 2013-04-30 15:28:13 -0700 | [diff] [blame] | 778 | coredump_finish(mm, core_dumped); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 779 | revert_creds(old_cred); |
| 780 | fail_creds: |
| 781 | put_cred(cred); |
| 782 | fail: |
| 783 | return; |
| 784 | } |
| 785 | |
| 786 | /* |
| 787 | * Core dumping helper functions. These are the only things you should |
| 788 | * do on a core-file: use only these functions to write out all the |
| 789 | * necessary info. |
| 790 | */ |
Al Viro | ecc8c77 | 2013-10-05 15:32:35 -0400 | [diff] [blame] | 791 | int dump_emit(struct coredump_params *cprm, const void *addr, int nr) |
| 792 | { |
| 793 | struct file *file = cprm->file; |
Al Viro | 2507a4f | 2013-10-08 09:11:48 -0400 | [diff] [blame] | 794 | loff_t pos = file->f_pos; |
| 795 | ssize_t n; |
Omar Sandoval | 2c4cb04 | 2016-05-11 15:16:37 -0700 | [diff] [blame] | 796 | if (cprm->written + nr > cprm->limit) |
Al Viro | ecc8c77 | 2013-10-05 15:32:35 -0400 | [diff] [blame] | 797 | return 0; |
Al Viro | 2507a4f | 2013-10-08 09:11:48 -0400 | [diff] [blame] | 798 | while (nr) { |
| 799 | if (dump_interrupted()) |
| 800 | return 0; |
Al Viro | 52da40a | 2013-11-15 21:58:33 -0500 | [diff] [blame] | 801 | n = __kernel_write(file, addr, nr, &pos); |
Al Viro | 2507a4f | 2013-10-08 09:11:48 -0400 | [diff] [blame] | 802 | if (n <= 0) |
| 803 | return 0; |
| 804 | file->f_pos = pos; |
Omar Sandoval | 2c4cb04 | 2016-05-11 15:16:37 -0700 | [diff] [blame] | 805 | cprm->written += n; |
Mateusz Guzik | 1607f09 | 2016-06-05 23:14:14 +0200 | [diff] [blame] | 806 | cprm->pos += n; |
Al Viro | 2507a4f | 2013-10-08 09:11:48 -0400 | [diff] [blame] | 807 | nr -= n; |
| 808 | } |
Al Viro | ecc8c77 | 2013-10-05 15:32:35 -0400 | [diff] [blame] | 809 | return 1; |
| 810 | } |
| 811 | EXPORT_SYMBOL(dump_emit); |
| 812 | |
Al Viro | 9b56d54 | 2013-10-08 09:26:08 -0400 | [diff] [blame] | 813 | int dump_skip(struct coredump_params *cprm, size_t nr) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 814 | { |
Al Viro | 9b56d54 | 2013-10-08 09:26:08 -0400 | [diff] [blame] | 815 | static char zeroes[PAGE_SIZE]; |
| 816 | struct file *file = cprm->file; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 817 | if (file->f_op->llseek && file->f_op->llseek != no_llseek) { |
Oleg Nesterov | 528f827 | 2013-04-30 15:28:15 -0700 | [diff] [blame] | 818 | if (dump_interrupted() || |
Al Viro | 9b56d54 | 2013-10-08 09:26:08 -0400 | [diff] [blame] | 819 | file->f_op->llseek(file, nr, SEEK_CUR) < 0) |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 820 | return 0; |
Mateusz Guzik | 1607f09 | 2016-06-05 23:14:14 +0200 | [diff] [blame] | 821 | cprm->pos += nr; |
Al Viro | 9b56d54 | 2013-10-08 09:26:08 -0400 | [diff] [blame] | 822 | return 1; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 823 | } else { |
Al Viro | 9b56d54 | 2013-10-08 09:26:08 -0400 | [diff] [blame] | 824 | while (nr > PAGE_SIZE) { |
| 825 | if (!dump_emit(cprm, zeroes, PAGE_SIZE)) |
| 826 | return 0; |
| 827 | nr -= PAGE_SIZE; |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 828 | } |
Al Viro | 9b56d54 | 2013-10-08 09:26:08 -0400 | [diff] [blame] | 829 | return dump_emit(cprm, zeroes, nr); |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 830 | } |
Alex Kelly | 10c28d9 | 2012-09-26 21:52:08 -0400 | [diff] [blame] | 831 | } |
Al Viro | 9b56d54 | 2013-10-08 09:26:08 -0400 | [diff] [blame] | 832 | EXPORT_SYMBOL(dump_skip); |
Al Viro | 22a8cb8 | 2013-10-08 11:05:01 -0400 | [diff] [blame] | 833 | |
| 834 | int dump_align(struct coredump_params *cprm, int align) |
| 835 | { |
Mateusz Guzik | 1607f09 | 2016-06-05 23:14:14 +0200 | [diff] [blame] | 836 | unsigned mod = cprm->pos & (align - 1); |
Al Viro | 22a8cb8 | 2013-10-08 11:05:01 -0400 | [diff] [blame] | 837 | if (align & (align - 1)) |
Al Viro | db51242 | 2013-11-15 21:55:52 -0500 | [diff] [blame] | 838 | return 0; |
| 839 | return mod ? dump_skip(cprm, align - mod) : 1; |
Al Viro | 22a8cb8 | 2013-10-08 11:05:01 -0400 | [diff] [blame] | 840 | } |
| 841 | EXPORT_SYMBOL(dump_align); |
Dave Kleikamp | 4d22c75 | 2017-01-11 13:25:00 -0600 | [diff] [blame] | 842 | |
| 843 | /* |
| 844 | * Ensures that file size is big enough to contain the current file |
| 845 | * postion. This prevents gdb from complaining about a truncated file |
| 846 | * if the last "write" to the file was dump_skip. |
| 847 | */ |
| 848 | void dump_truncate(struct coredump_params *cprm) |
| 849 | { |
| 850 | struct file *file = cprm->file; |
| 851 | loff_t offset; |
| 852 | |
| 853 | if (file->f_op->llseek && file->f_op->llseek != no_llseek) { |
| 854 | offset = file->f_op->llseek(file, 0, SEEK_CUR); |
| 855 | if (i_size_read(file->f_mapping->host) < offset) |
| 856 | do_truncate(file->f_path.dentry, offset, 0, file); |
| 857 | } |
| 858 | } |
| 859 | EXPORT_SYMBOL(dump_truncate); |