blob: 149dd57b583b7243a632ce9cf315254407fc47c7 [file] [log] [blame]
Dave Jones199a9af2006-09-29 01:59:00 -07001/*
2 * Copyright 2006, Red Hat, Inc., Dave Jones
3 * Released under the General Public License (GPL).
4 *
Kees Cook791e53f2016-08-17 14:42:08 -07005 * This file contains the linked list validation for DEBUG_LIST.
Dave Jones199a9af2006-09-29 01:59:00 -07006 */
7
Paul Gortmaker8bc3bcc2011-11-16 21:29:17 -05008#include <linux/export.h>
Dave Jones199a9af2006-09-29 01:59:00 -07009#include <linux/list.h>
Paul Gortmaker50af5ea2012-01-20 18:35:53 -050010#include <linux/bug.h>
Paul Gortmakerb116ee42012-01-20 18:46:49 -050011#include <linux/kernel.h>
Dave Jones559f9ba2012-03-14 22:17:39 -040012#include <linux/rculist.h>
Dave Jones199a9af2006-09-29 01:59:00 -070013
14/*
Kees Cook791e53f2016-08-17 14:42:08 -070015 * Check that the data structures for the list manipulations are reasonably
16 * valid. Failures here indicate memory corruption (and possibly an exploit
17 * attempt).
Dave Jones199a9af2006-09-29 01:59:00 -070018 */
19
Kees Cook791e53f2016-08-17 14:42:08 -070020bool __list_add_valid(struct list_head *new, struct list_head *prev,
21 struct list_head *next)
Dave Jones199a9af2006-09-29 01:59:00 -070022{
Kees Cook791e53f2016-08-17 14:42:08 -070023 if (unlikely(next->prev != prev)) {
24 WARN(1, "list_add corruption. next->prev should be prev (%p), but was %p. (next=%p).\n",
25 prev, next->prev, next);
26 return false;
27 }
28 if (unlikely(prev->next != next)) {
29 WARN(1, "list_add corruption. prev->next should be next (%p), but was %p. (prev=%p).\n",
30 next, prev->next, prev);
31 return false;
32 }
33 if (unlikely(new == prev || new == next)) {
34 WARN(1, "list_add double add: new=%p, prev=%p, next=%p.\n",
35 new, prev, next);
36 return false;
37 }
38 return true;
Dave Jones199a9af2006-09-29 01:59:00 -070039}
Kees Cook791e53f2016-08-17 14:42:08 -070040EXPORT_SYMBOL(__list_add_valid);
Dave Jones199a9af2006-09-29 01:59:00 -070041
Linus Torvalds3c18d4d2011-02-18 11:32:28 -080042void __list_del_entry(struct list_head *entry)
43{
44 struct list_head *prev, *next;
45
46 prev = entry->prev;
47 next = entry->next;
48
49 if (WARN(next == LIST_POISON1,
50 "list_del corruption, %p->next is LIST_POISON1 (%p)\n",
51 entry, LIST_POISON1) ||
52 WARN(prev == LIST_POISON2,
53 "list_del corruption, %p->prev is LIST_POISON2 (%p)\n",
54 entry, LIST_POISON2) ||
55 WARN(prev->next != entry,
56 "list_del corruption. prev->next should be %p, "
57 "but was %p\n", entry, prev->next) ||
58 WARN(next->prev != entry,
59 "list_del corruption. next->prev should be %p, "
60 "but was %p\n", entry, next->prev))
61 return;
62
63 __list_del(prev, next);
64}
65EXPORT_SYMBOL(__list_del_entry);
66
Dave Jones199a9af2006-09-29 01:59:00 -070067/**
Dave Jones199a9af2006-09-29 01:59:00 -070068 * list_del - deletes entry from list.
69 * @entry: the element to delete from the list.
70 * Note: list_empty on entry does not return true after this, the entry is
71 * in an undefined state.
72 */
73void list_del(struct list_head *entry)
74{
Linus Torvalds3c18d4d2011-02-18 11:32:28 -080075 __list_del_entry(entry);
Dave Jones199a9af2006-09-29 01:59:00 -070076 entry->next = LIST_POISON1;
77 entry->prev = LIST_POISON2;
78}
79EXPORT_SYMBOL(list_del);
Dave Jones559f9ba2012-03-14 22:17:39 -040080
81/*
82 * RCU variants.
83 */
84void __list_add_rcu(struct list_head *new,
85 struct list_head *prev, struct list_head *next)
86{
87 WARN(next->prev != prev,
Paul E. McKenney5cf05ad2012-05-17 15:12:45 -070088 "list_add_rcu corruption. next->prev should be prev (%p), but was %p. (next=%p).\n",
Dave Jones559f9ba2012-03-14 22:17:39 -040089 prev, next->prev, next);
90 WARN(prev->next != next,
Paul E. McKenney5cf05ad2012-05-17 15:12:45 -070091 "list_add_rcu corruption. prev->next should be next (%p), but was %p. (prev=%p).\n",
Dave Jones559f9ba2012-03-14 22:17:39 -040092 next, prev->next, prev);
93 new->next = next;
94 new->prev = prev;
95 rcu_assign_pointer(list_next_rcu(prev), new);
96 next->prev = new;
97}
98EXPORT_SYMBOL(__list_add_rcu);