For a UKL thread, returning to a signal handler is not done with iret or sysret. This means we need to adjust the way the return stack frame is handled for these threads. When constructing the signal frame, we leave the previous frame in place because we will return to it from the signal handler. We also leave space for pushing eflags and the return address. UKL threads will only use the __KERNEL_DS value in the ss register and 0xC3 in the cs register. Cc: Jonathan Corbet <corbet@xxxxxxx> Cc: Masahiro Yamada <masahiroy@xxxxxxxxxx> Cc: Michal Marek <michal.lkml@xxxxxxxxxxx> Cc: Nick Desaulniers <ndesaulniers@xxxxxxxxxx> Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx> Cc: Ingo Molnar <mingo@xxxxxxxxxx> Cc: Borislav Petkov <bp@xxxxxxxxx> Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx> Cc: "H. Peter Anvin" <hpa@xxxxxxxxx> Cc: Andy Lutomirski <luto@xxxxxxxxxx> Cc: Eric Biederman <ebiederm@xxxxxxxxxxxx> Cc: Kees Cook <keescook@xxxxxxxxxxxx> Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx> Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx> Cc: Arnd Bergmann <arnd@xxxxxxxx> Cc: Juri Lelli <juri.lelli@xxxxxxxxxx> Cc: Vincent Guittot <vincent.guittot@xxxxxxxxxx> Cc: Dietmar Eggemann <dietmar.eggemann@xxxxxxx> Cc: Steven Rostedt <rostedt@xxxxxxxxxxx> Cc: Ben Segall <bsegall@xxxxxxxxxx> Cc: Mel Gorman <mgorman@xxxxxxx> Cc: Daniel Bristot de Oliveira <bristot@xxxxxxxxxx> Cc: Valentin Schneider <vschneid@xxxxxxxxxx> Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx> Cc: Josh Poimboeuf <jpoimboe@xxxxxxxxxx> Co-developed-by: Eric B Munson <munsoner@xxxxxx> Signed-off-by: Eric B Munson <munsoner@xxxxxx> Co-developed-by: Ali Raza <aliraza@xxxxxx> Signed-off-by: Ali Raza <aliraza@xxxxxx> --- arch/x86/kernel/signal.c | 22 ++++++++++++++++------ 1 file changed, 16 insertions(+), 6 deletions(-) diff --git a/arch/x86/kernel/signal.c b/arch/x86/kernel/signal.c index 9c7265b524c7..a95c12f6dac6 100644 --- a/arch/x86/kernel/signal.c +++ b/arch/x86/kernel/signal.c @@ -121,8 +121,10 @@ static bool restore_sigcontext(struct pt_regs *regs, #endif /* CONFIG_X86_64 */ /* Get CS/SS and force CPL3 */ - regs->cs = sc.cs | 0x03; - regs->ss = sc.ss | 0x03; + if (!is_ukl_thread()) { + regs->cs = sc.cs | 0x03; + regs->ss = sc.ss | 0x03; + } regs->flags = (regs->flags & ~FIX_EFLAGS) | (sc.flags & FIX_EFLAGS); /* disable syscall checks */ @@ -522,10 +524,15 @@ static int __setup_rt_frame(int sig, struct ksignal *ksig, * a trampoline.) So we do our best: if the old SS was valid, * we keep it. Otherwise we replace it. */ - regs->cs = __USER_CS; + if (!is_ukl_thread()) { + regs->cs = __USER_CS; - if (unlikely(regs->ss != __USER_DS)) - force_valid_ss(regs); + if (unlikely(regs->ss != __USER_DS)) + force_valid_ss(regs); + } else { + regs->cs = 0xC3; + regs->ss = __KERNEL_DS; + } return 0; @@ -662,7 +669,10 @@ SYSCALL_DEFINE0(rt_sigreturn) sigset_t set; unsigned long uc_flags; - frame = (struct rt_sigframe __user *)(regs->sp - sizeof(long)); + if (is_ukl_thread()) + frame = (struct rt_sigframe __user *)(regs->sp + sizeof(long)); + else + frame = (struct rt_sigframe __user *)(regs->sp - sizeof(long)); if (!access_ok(frame, sizeof(*frame))) goto badframe; if (__get_user(*(__u64 *)&set, (__u64 __user *)&frame->uc.uc_sigmask)) -- 2.21.3