On Tue, May 18, 2021 at 8:40 AM Christoph Hellwig <hch@xxxxxxxxxxxxx> wrote: > > On Mon, May 17, 2021 at 10:57:24PM -0500, Eric W. Biederman wrote: > > We open ourselves up to bugs whenever we lie to the type system. > > > > Skimming through the code it looks like it should be possible > > to not need the in_compat_syscall and the casts to the wrong > > type by changing the order of the code a little bit. There are obviously other ways of doing the same. The reason for doing it this specific way is so I can eliminate the compat entry point entirely in patch 4/4. > What kind of bug do you expect? We must only copy from user addresses > once anyway. I've never seen bugs due the use of in_compat_syscall, > but plenty due to cruft code trying to avoid it. Right, I've used the same approach of passing a native-typed __user pointer and converting it in a copy_from_user/copy_to_user wrapper in a number of other places, as this tends to produce the most readable version by concentrating the tricky logic in the one place that already has to be careful. Most of the bugs I've seen with compat code are from duplicated code paths that diverge over time when a bugfix for the native version is applied incorrectly or not at all to the compat version. Arnd _______________________________________________ kexec mailing list kexec@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/kexec