All of lore.kernel.org
 help / color / mirror / Atom feed
From: Luis Henriques <luis.henriques@canonical.com>
To: Eugene Shatokhin <eugene.shatokhin@rosalab.ru>
Cc: stable@vger.kernel.org,
	Masami Hiramatsu <masami.hiramatsu.pt@hitachi.com>,
	Ingo Molnar <mingo@kernel.org>
Subject: Re: [PATCH 3.16.y,3.18.y] kprobes/x86: Return correct length in __copy_instruction()
Date: Mon, 25 May 2015 10:07:21 +0100	[thread overview]
Message-ID: <20150525090721.GA1887@ares> (raw)
In-Reply-To: <1432043894-29260-1-git-send-email-eugene.shatokhin@rosalab.ru>

On Tue, May 19, 2015 at 04:58:14PM +0300, Eugene Shatokhin wrote:
> Commit c80e5c0c23ce2282476fdc64c4b5e3d3a40723fd upstream.
> This is the backport of that fix for 3.16.y-3.18.y.
>

Thank you, Eugene.  I'll queue this for the 3.16 kernel.

Cheers,
--
Lu�s

> On x86-64, __copy_instruction() always returns 0 (error) if the
> instruction uses %rip-relative addressing. This is because
> kernel_insn_init() is called the second time for 'insn' instance
> in such cases and sets all its fields to 0.
> 
> Because of this, trying to place a kprobe on such instruction
> will fail, register_kprobe() will return -EINVAL.
> 
> This patch fixes the problem.
> 
> Signed-off-by: Eugene Shatokhin <eugene.shatokhin@rosalab.ru>
> ---
>  arch/x86/kernel/kprobes/core.c | 7 +++++--
>  1 file changed, 5 insertions(+), 2 deletions(-)
> 
> diff --git a/arch/x86/kernel/kprobes/core.c b/arch/x86/kernel/kprobes/core.c
> index 93d2c04..f2e281c 100644
> --- a/arch/x86/kernel/kprobes/core.c
> +++ b/arch/x86/kernel/kprobes/core.c
> @@ -330,13 +330,16 @@ int __copy_instruction(u8 *dest, u8 *src)
>  {
>  	struct insn insn;
>  	kprobe_opcode_t buf[MAX_INSN_SIZE];
> +	int length;
>  
>  	kernel_insn_init(&insn, (void *)recover_probed_instruction(buf, (unsigned long)src));
>  	insn_get_length(&insn);
> +	length = insn.length;
> +
>  	/* Another subsystem puts a breakpoint, failed to recover */
>  	if (insn.opcode.bytes[0] == BREAKPOINT_INSTRUCTION)
>  		return 0;
> -	memcpy(dest, insn.kaddr, insn.length);
> +	memcpy(dest, insn.kaddr, length);
>  
>  #ifdef CONFIG_X86_64
>  	if (insn_rip_relative(&insn)) {
> @@ -366,7 +369,7 @@ int __copy_instruction(u8 *dest, u8 *src)
>  		*(s32 *) disp = (s32) newdisp;
>  	}
>  #endif
> -	return insn.length;
> +	return length;
>  }
>  
>  static int arch_copy_kprobe(struct kprobe *p)
> -- 
> 2.3.2
> 
> --
> To unsubscribe from this list: send the line "unsubscribe stable" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html

      reply	other threads:[~2015-05-25  9:07 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-05-19 13:58 [PATCH 3.16.y,3.18.y] kprobes/x86: Return correct length in __copy_instruction() Eugene Shatokhin
2015-05-25  9:07 ` Luis Henriques [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20150525090721.GA1887@ares \
    --to=luis.henriques@canonical.com \
    --cc=eugene.shatokhin@rosalab.ru \
    --cc=masami.hiramatsu.pt@hitachi.com \
    --cc=mingo@kernel.org \
    --cc=stable@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.