blob: 276565fca2a6ed58ec6d0b5989dc090f6cfc6990 [file] [log] [blame]
Dave Jones199a9af2006-09-29 01:59:00 -07001/*
2 * Copyright 2006, Red Hat, Inc., Dave Jones
3 * Released under the General Public License (GPL).
4 *
Kees Cook791e53f2016-08-17 14:42:08 -07005 * This file contains the linked list validation for DEBUG_LIST.
Dave Jones199a9af2006-09-29 01:59:00 -07006 */
7
Paul Gortmaker8bc3bcc2011-11-16 21:29:17 -05008#include <linux/export.h>
Dave Jones199a9af2006-09-29 01:59:00 -07009#include <linux/list.h>
Paul Gortmaker50af5ea2012-01-20 18:35:53 -050010#include <linux/bug.h>
Paul Gortmakerb116ee42012-01-20 18:46:49 -050011#include <linux/kernel.h>
Dave Jones559f9ba2012-03-14 22:17:39 -040012#include <linux/rculist.h>
Dave Jones199a9af2006-09-29 01:59:00 -070013
14/*
Kees Cook791e53f2016-08-17 14:42:08 -070015 * Check that the data structures for the list manipulations are reasonably
16 * valid. Failures here indicate memory corruption (and possibly an exploit
17 * attempt).
Dave Jones199a9af2006-09-29 01:59:00 -070018 */
19
Kees Cook791e53f2016-08-17 14:42:08 -070020bool __list_add_valid(struct list_head *new, struct list_head *prev,
21 struct list_head *next)
Dave Jones199a9af2006-09-29 01:59:00 -070022{
Kees Cook791e53f2016-08-17 14:42:08 -070023 if (unlikely(next->prev != prev)) {
24 WARN(1, "list_add corruption. next->prev should be prev (%p), but was %p. (next=%p).\n",
25 prev, next->prev, next);
26 return false;
27 }
28 if (unlikely(prev->next != next)) {
29 WARN(1, "list_add corruption. prev->next should be next (%p), but was %p. (prev=%p).\n",
30 next, prev->next, prev);
31 return false;
32 }
33 if (unlikely(new == prev || new == next)) {
34 WARN(1, "list_add double add: new=%p, prev=%p, next=%p.\n",
35 new, prev, next);
36 return false;
37 }
38 return true;
Dave Jones199a9af2006-09-29 01:59:00 -070039}
Kees Cook791e53f2016-08-17 14:42:08 -070040EXPORT_SYMBOL(__list_add_valid);
Dave Jones199a9af2006-09-29 01:59:00 -070041
Kees Cookca48e8c2016-08-17 14:42:10 -070042bool __list_del_entry_valid(struct list_head *entry)
Linus Torvalds3c18d4d2011-02-18 11:32:28 -080043{
44 struct list_head *prev, *next;
45
46 prev = entry->prev;
47 next = entry->next;
48
Kees Cookca48e8c2016-08-17 14:42:10 -070049 if (unlikely(next == LIST_POISON1)) {
50 WARN(1, "list_del corruption, %p->next is LIST_POISON1 (%p)\n",
51 entry, LIST_POISON1);
52 return false;
53 }
54 if (unlikely(prev == LIST_POISON2)) {
55 WARN(1, "list_del corruption, %p->prev is LIST_POISON2 (%p)\n",
56 entry, LIST_POISON2);
57 return false;
58 }
59 if (unlikely(prev->next != entry)) {
60 WARN(1, "list_del corruption. prev->next should be %p, but was %p\n",
61 entry, prev->next);
62 return false;
63 }
64 if (unlikely(next->prev != entry)) {
65 WARN(1, "list_del corruption. next->prev should be %p, but was %p\n",
66 entry, next->prev);
67 return false;
68 }
69 return true;
Linus Torvalds3c18d4d2011-02-18 11:32:28 -080070
Linus Torvalds3c18d4d2011-02-18 11:32:28 -080071}
Kees Cookca48e8c2016-08-17 14:42:10 -070072EXPORT_SYMBOL(__list_del_entry_valid);