mirror of
				git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
				synced 2025-10-31 16:54:21 +00:00 
			
		
		
		
	 0b8d616fb5
			
		
	
	
		0b8d616fb5
		
			
		
	
	
	
	
		
			
			When assiging and testing taskstats in taskstats_exit() there's a race
when setting up and reading sig->stats when a thread-group with more
than one thread exits:
write to 0xffff8881157bbe10 of 8 bytes by task 7951 on cpu 0:
 taskstats_tgid_alloc kernel/taskstats.c:567 [inline]
 taskstats_exit+0x6b7/0x717 kernel/taskstats.c:596
 do_exit+0x2c2/0x18e0 kernel/exit.c:864
 do_group_exit+0xb4/0x1c0 kernel/exit.c:983
 get_signal+0x2a2/0x1320 kernel/signal.c:2734
 do_signal+0x3b/0xc00 arch/x86/kernel/signal.c:815
 exit_to_usermode_loop+0x250/0x2c0 arch/x86/entry/common.c:159
 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:274 [inline]
 do_syscall_64+0x2d7/0x2f0 arch/x86/entry/common.c:299
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
read to 0xffff8881157bbe10 of 8 bytes by task 7949 on cpu 1:
 taskstats_tgid_alloc kernel/taskstats.c:559 [inline]
 taskstats_exit+0xb2/0x717 kernel/taskstats.c:596
 do_exit+0x2c2/0x18e0 kernel/exit.c:864
 do_group_exit+0xb4/0x1c0 kernel/exit.c:983
 __do_sys_exit_group kernel/exit.c:994 [inline]
 __se_sys_exit_group kernel/exit.c:992 [inline]
 __x64_sys_exit_group+0x2e/0x30 kernel/exit.c:992
 do_syscall_64+0xcf/0x2f0 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Fix this by using smp_load_acquire() and smp_store_release().
Reported-by: syzbot+c5d03165a1bd1dead0c1@syzkaller.appspotmail.com
Fixes: 34ec12349c ("taskstats: cleanup ->signal->stats allocation")
Cc: stable@vger.kernel.org
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
Acked-by: Marco Elver <elver@google.com>
Reviewed-by: Will Deacon <will@kernel.org>
Reviewed-by: Andrea Parri <parri.andrea@gmail.com>
Reviewed-by: Dmitry Vyukov <dvyukov@google.com>
Link: https://lore.kernel.org/r/20191009114809.8643-1-christian.brauner@ubuntu.com
		
	
			
		
			
				
	
	
		
			724 lines
		
	
	
	
		
			16 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			724 lines
		
	
	
	
		
			16 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| // SPDX-License-Identifier: GPL-2.0-or-later
 | |
| /*
 | |
|  * taskstats.c - Export per-task statistics to userland
 | |
|  *
 | |
|  * Copyright (C) Shailabh Nagar, IBM Corp. 2006
 | |
|  *           (C) Balbir Singh,   IBM Corp. 2006
 | |
|  */
 | |
| 
 | |
| #include <linux/kernel.h>
 | |
| #include <linux/taskstats_kern.h>
 | |
| #include <linux/tsacct_kern.h>
 | |
| #include <linux/delayacct.h>
 | |
| #include <linux/cpumask.h>
 | |
| #include <linux/percpu.h>
 | |
| #include <linux/slab.h>
 | |
| #include <linux/cgroupstats.h>
 | |
| #include <linux/cgroup.h>
 | |
| #include <linux/fs.h>
 | |
| #include <linux/file.h>
 | |
| #include <linux/pid_namespace.h>
 | |
| #include <net/genetlink.h>
 | |
| #include <linux/atomic.h>
 | |
| #include <linux/sched/cputime.h>
 | |
| 
 | |
| /*
 | |
|  * Maximum length of a cpumask that can be specified in
 | |
|  * the TASKSTATS_CMD_ATTR_REGISTER/DEREGISTER_CPUMASK attribute
 | |
|  */
 | |
| #define TASKSTATS_CPUMASK_MAXLEN	(100+6*NR_CPUS)
 | |
| 
 | |
| static DEFINE_PER_CPU(__u32, taskstats_seqnum);
 | |
| static int family_registered;
 | |
| struct kmem_cache *taskstats_cache;
 | |
| 
 | |
| static struct genl_family family;
 | |
| 
 | |
| static const struct nla_policy taskstats_cmd_get_policy[TASKSTATS_CMD_ATTR_MAX+1] = {
 | |
| 	[TASKSTATS_CMD_ATTR_PID]  = { .type = NLA_U32 },
 | |
| 	[TASKSTATS_CMD_ATTR_TGID] = { .type = NLA_U32 },
 | |
| 	[TASKSTATS_CMD_ATTR_REGISTER_CPUMASK] = { .type = NLA_STRING },
 | |
| 	[TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK] = { .type = NLA_STRING },};
 | |
| 
 | |
| /*
 | |
|  * We have to use TASKSTATS_CMD_ATTR_MAX here, it is the maxattr in the family.
 | |
|  * Make sure they are always aligned.
 | |
|  */
 | |
| static const struct nla_policy cgroupstats_cmd_get_policy[TASKSTATS_CMD_ATTR_MAX+1] = {
 | |
| 	[CGROUPSTATS_CMD_ATTR_FD] = { .type = NLA_U32 },
 | |
| };
 | |
| 
 | |
| struct listener {
 | |
| 	struct list_head list;
 | |
| 	pid_t pid;
 | |
| 	char valid;
 | |
| };
 | |
| 
 | |
| struct listener_list {
 | |
| 	struct rw_semaphore sem;
 | |
| 	struct list_head list;
 | |
| };
 | |
| static DEFINE_PER_CPU(struct listener_list, listener_array);
 | |
| 
 | |
| enum actions {
 | |
| 	REGISTER,
 | |
| 	DEREGISTER,
 | |
| 	CPU_DONT_CARE
 | |
| };
 | |
| 
 | |
| static int prepare_reply(struct genl_info *info, u8 cmd, struct sk_buff **skbp,
 | |
| 				size_t size)
 | |
| {
 | |
| 	struct sk_buff *skb;
 | |
| 	void *reply;
 | |
| 
 | |
| 	/*
 | |
| 	 * If new attributes are added, please revisit this allocation
 | |
| 	 */
 | |
| 	skb = genlmsg_new(size, GFP_KERNEL);
 | |
| 	if (!skb)
 | |
| 		return -ENOMEM;
 | |
| 
 | |
| 	if (!info) {
 | |
| 		int seq = this_cpu_inc_return(taskstats_seqnum) - 1;
 | |
| 
 | |
| 		reply = genlmsg_put(skb, 0, seq, &family, 0, cmd);
 | |
| 	} else
 | |
| 		reply = genlmsg_put_reply(skb, info, &family, 0, cmd);
 | |
| 	if (reply == NULL) {
 | |
| 		nlmsg_free(skb);
 | |
| 		return -EINVAL;
 | |
| 	}
 | |
| 
 | |
| 	*skbp = skb;
 | |
| 	return 0;
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * Send taskstats data in @skb to listener with nl_pid @pid
 | |
|  */
 | |
| static int send_reply(struct sk_buff *skb, struct genl_info *info)
 | |
| {
 | |
| 	struct genlmsghdr *genlhdr = nlmsg_data(nlmsg_hdr(skb));
 | |
| 	void *reply = genlmsg_data(genlhdr);
 | |
| 
 | |
| 	genlmsg_end(skb, reply);
 | |
| 
 | |
| 	return genlmsg_reply(skb, info);
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * Send taskstats data in @skb to listeners registered for @cpu's exit data
 | |
|  */
 | |
| static void send_cpu_listeners(struct sk_buff *skb,
 | |
| 					struct listener_list *listeners)
 | |
| {
 | |
| 	struct genlmsghdr *genlhdr = nlmsg_data(nlmsg_hdr(skb));
 | |
| 	struct listener *s, *tmp;
 | |
| 	struct sk_buff *skb_next, *skb_cur = skb;
 | |
| 	void *reply = genlmsg_data(genlhdr);
 | |
| 	int rc, delcount = 0;
 | |
| 
 | |
| 	genlmsg_end(skb, reply);
 | |
| 
 | |
| 	rc = 0;
 | |
| 	down_read(&listeners->sem);
 | |
| 	list_for_each_entry(s, &listeners->list, list) {
 | |
| 		skb_next = NULL;
 | |
| 		if (!list_is_last(&s->list, &listeners->list)) {
 | |
| 			skb_next = skb_clone(skb_cur, GFP_KERNEL);
 | |
| 			if (!skb_next)
 | |
| 				break;
 | |
| 		}
 | |
| 		rc = genlmsg_unicast(&init_net, skb_cur, s->pid);
 | |
| 		if (rc == -ECONNREFUSED) {
 | |
| 			s->valid = 0;
 | |
| 			delcount++;
 | |
| 		}
 | |
| 		skb_cur = skb_next;
 | |
| 	}
 | |
| 	up_read(&listeners->sem);
 | |
| 
 | |
| 	if (skb_cur)
 | |
| 		nlmsg_free(skb_cur);
 | |
| 
 | |
| 	if (!delcount)
 | |
| 		return;
 | |
| 
 | |
| 	/* Delete invalidated entries */
 | |
| 	down_write(&listeners->sem);
 | |
| 	list_for_each_entry_safe(s, tmp, &listeners->list, list) {
 | |
| 		if (!s->valid) {
 | |
| 			list_del(&s->list);
 | |
| 			kfree(s);
 | |
| 		}
 | |
| 	}
 | |
| 	up_write(&listeners->sem);
 | |
| }
 | |
| 
 | |
| static void fill_stats(struct user_namespace *user_ns,
 | |
| 		       struct pid_namespace *pid_ns,
 | |
| 		       struct task_struct *tsk, struct taskstats *stats)
 | |
| {
 | |
| 	memset(stats, 0, sizeof(*stats));
 | |
| 	/*
 | |
| 	 * Each accounting subsystem adds calls to its functions to
 | |
| 	 * fill in relevant parts of struct taskstsats as follows
 | |
| 	 *
 | |
| 	 *	per-task-foo(stats, tsk);
 | |
| 	 */
 | |
| 
 | |
| 	delayacct_add_tsk(stats, tsk);
 | |
| 
 | |
| 	/* fill in basic acct fields */
 | |
| 	stats->version = TASKSTATS_VERSION;
 | |
| 	stats->nvcsw = tsk->nvcsw;
 | |
| 	stats->nivcsw = tsk->nivcsw;
 | |
| 	bacct_add_tsk(user_ns, pid_ns, stats, tsk);
 | |
| 
 | |
| 	/* fill in extended acct fields */
 | |
| 	xacct_add_tsk(stats, tsk);
 | |
| }
 | |
| 
 | |
| static int fill_stats_for_pid(pid_t pid, struct taskstats *stats)
 | |
| {
 | |
| 	struct task_struct *tsk;
 | |
| 
 | |
| 	tsk = find_get_task_by_vpid(pid);
 | |
| 	if (!tsk)
 | |
| 		return -ESRCH;
 | |
| 	fill_stats(current_user_ns(), task_active_pid_ns(current), tsk, stats);
 | |
| 	put_task_struct(tsk);
 | |
| 	return 0;
 | |
| }
 | |
| 
 | |
| static int fill_stats_for_tgid(pid_t tgid, struct taskstats *stats)
 | |
| {
 | |
| 	struct task_struct *tsk, *first;
 | |
| 	unsigned long flags;
 | |
| 	int rc = -ESRCH;
 | |
| 	u64 delta, utime, stime;
 | |
| 	u64 start_time;
 | |
| 
 | |
| 	/*
 | |
| 	 * Add additional stats from live tasks except zombie thread group
 | |
| 	 * leaders who are already counted with the dead tasks
 | |
| 	 */
 | |
| 	rcu_read_lock();
 | |
| 	first = find_task_by_vpid(tgid);
 | |
| 
 | |
| 	if (!first || !lock_task_sighand(first, &flags))
 | |
| 		goto out;
 | |
| 
 | |
| 	if (first->signal->stats)
 | |
| 		memcpy(stats, first->signal->stats, sizeof(*stats));
 | |
| 	else
 | |
| 		memset(stats, 0, sizeof(*stats));
 | |
| 
 | |
| 	tsk = first;
 | |
| 	start_time = ktime_get_ns();
 | |
| 	do {
 | |
| 		if (tsk->exit_state)
 | |
| 			continue;
 | |
| 		/*
 | |
| 		 * Accounting subsystem can call its functions here to
 | |
| 		 * fill in relevant parts of struct taskstsats as follows
 | |
| 		 *
 | |
| 		 *	per-task-foo(stats, tsk);
 | |
| 		 */
 | |
| 		delayacct_add_tsk(stats, tsk);
 | |
| 
 | |
| 		/* calculate task elapsed time in nsec */
 | |
| 		delta = start_time - tsk->start_time;
 | |
| 		/* Convert to micro seconds */
 | |
| 		do_div(delta, NSEC_PER_USEC);
 | |
| 		stats->ac_etime += delta;
 | |
| 
 | |
| 		task_cputime(tsk, &utime, &stime);
 | |
| 		stats->ac_utime += div_u64(utime, NSEC_PER_USEC);
 | |
| 		stats->ac_stime += div_u64(stime, NSEC_PER_USEC);
 | |
| 
 | |
| 		stats->nvcsw += tsk->nvcsw;
 | |
| 		stats->nivcsw += tsk->nivcsw;
 | |
| 	} while_each_thread(first, tsk);
 | |
| 
 | |
| 	unlock_task_sighand(first, &flags);
 | |
| 	rc = 0;
 | |
| out:
 | |
| 	rcu_read_unlock();
 | |
| 
 | |
| 	stats->version = TASKSTATS_VERSION;
 | |
| 	/*
 | |
| 	 * Accounting subsystems can also add calls here to modify
 | |
| 	 * fields of taskstats.
 | |
| 	 */
 | |
| 	return rc;
 | |
| }
 | |
| 
 | |
| static void fill_tgid_exit(struct task_struct *tsk)
 | |
| {
 | |
| 	unsigned long flags;
 | |
| 
 | |
| 	spin_lock_irqsave(&tsk->sighand->siglock, flags);
 | |
| 	if (!tsk->signal->stats)
 | |
| 		goto ret;
 | |
| 
 | |
| 	/*
 | |
| 	 * Each accounting subsystem calls its functions here to
 | |
| 	 * accumalate its per-task stats for tsk, into the per-tgid structure
 | |
| 	 *
 | |
| 	 *	per-task-foo(tsk->signal->stats, tsk);
 | |
| 	 */
 | |
| 	delayacct_add_tsk(tsk->signal->stats, tsk);
 | |
| ret:
 | |
| 	spin_unlock_irqrestore(&tsk->sighand->siglock, flags);
 | |
| 	return;
 | |
| }
 | |
| 
 | |
| static int add_del_listener(pid_t pid, const struct cpumask *mask, int isadd)
 | |
| {
 | |
| 	struct listener_list *listeners;
 | |
| 	struct listener *s, *tmp, *s2;
 | |
| 	unsigned int cpu;
 | |
| 	int ret = 0;
 | |
| 
 | |
| 	if (!cpumask_subset(mask, cpu_possible_mask))
 | |
| 		return -EINVAL;
 | |
| 
 | |
| 	if (current_user_ns() != &init_user_ns)
 | |
| 		return -EINVAL;
 | |
| 
 | |
| 	if (task_active_pid_ns(current) != &init_pid_ns)
 | |
| 		return -EINVAL;
 | |
| 
 | |
| 	if (isadd == REGISTER) {
 | |
| 		for_each_cpu(cpu, mask) {
 | |
| 			s = kmalloc_node(sizeof(struct listener),
 | |
| 					GFP_KERNEL, cpu_to_node(cpu));
 | |
| 			if (!s) {
 | |
| 				ret = -ENOMEM;
 | |
| 				goto cleanup;
 | |
| 			}
 | |
| 			s->pid = pid;
 | |
| 			s->valid = 1;
 | |
| 
 | |
| 			listeners = &per_cpu(listener_array, cpu);
 | |
| 			down_write(&listeners->sem);
 | |
| 			list_for_each_entry(s2, &listeners->list, list) {
 | |
| 				if (s2->pid == pid && s2->valid)
 | |
| 					goto exists;
 | |
| 			}
 | |
| 			list_add(&s->list, &listeners->list);
 | |
| 			s = NULL;
 | |
| exists:
 | |
| 			up_write(&listeners->sem);
 | |
| 			kfree(s); /* nop if NULL */
 | |
| 		}
 | |
| 		return 0;
 | |
| 	}
 | |
| 
 | |
| 	/* Deregister or cleanup */
 | |
| cleanup:
 | |
| 	for_each_cpu(cpu, mask) {
 | |
| 		listeners = &per_cpu(listener_array, cpu);
 | |
| 		down_write(&listeners->sem);
 | |
| 		list_for_each_entry_safe(s, tmp, &listeners->list, list) {
 | |
| 			if (s->pid == pid) {
 | |
| 				list_del(&s->list);
 | |
| 				kfree(s);
 | |
| 				break;
 | |
| 			}
 | |
| 		}
 | |
| 		up_write(&listeners->sem);
 | |
| 	}
 | |
| 	return ret;
 | |
| }
 | |
| 
 | |
| static int parse(struct nlattr *na, struct cpumask *mask)
 | |
| {
 | |
| 	char *data;
 | |
| 	int len;
 | |
| 	int ret;
 | |
| 
 | |
| 	if (na == NULL)
 | |
| 		return 1;
 | |
| 	len = nla_len(na);
 | |
| 	if (len > TASKSTATS_CPUMASK_MAXLEN)
 | |
| 		return -E2BIG;
 | |
| 	if (len < 1)
 | |
| 		return -EINVAL;
 | |
| 	data = kmalloc(len, GFP_KERNEL);
 | |
| 	if (!data)
 | |
| 		return -ENOMEM;
 | |
| 	nla_strlcpy(data, na, len);
 | |
| 	ret = cpulist_parse(data, mask);
 | |
| 	kfree(data);
 | |
| 	return ret;
 | |
| }
 | |
| 
 | |
| static struct taskstats *mk_reply(struct sk_buff *skb, int type, u32 pid)
 | |
| {
 | |
| 	struct nlattr *na, *ret;
 | |
| 	int aggr;
 | |
| 
 | |
| 	aggr = (type == TASKSTATS_TYPE_PID)
 | |
| 			? TASKSTATS_TYPE_AGGR_PID
 | |
| 			: TASKSTATS_TYPE_AGGR_TGID;
 | |
| 
 | |
| 	na = nla_nest_start_noflag(skb, aggr);
 | |
| 	if (!na)
 | |
| 		goto err;
 | |
| 
 | |
| 	if (nla_put(skb, type, sizeof(pid), &pid) < 0) {
 | |
| 		nla_nest_cancel(skb, na);
 | |
| 		goto err;
 | |
| 	}
 | |
| 	ret = nla_reserve_64bit(skb, TASKSTATS_TYPE_STATS,
 | |
| 				sizeof(struct taskstats), TASKSTATS_TYPE_NULL);
 | |
| 	if (!ret) {
 | |
| 		nla_nest_cancel(skb, na);
 | |
| 		goto err;
 | |
| 	}
 | |
| 	nla_nest_end(skb, na);
 | |
| 
 | |
| 	return nla_data(ret);
 | |
| err:
 | |
| 	return NULL;
 | |
| }
 | |
| 
 | |
| static int cgroupstats_user_cmd(struct sk_buff *skb, struct genl_info *info)
 | |
| {
 | |
| 	int rc = 0;
 | |
| 	struct sk_buff *rep_skb;
 | |
| 	struct cgroupstats *stats;
 | |
| 	struct nlattr *na;
 | |
| 	size_t size;
 | |
| 	u32 fd;
 | |
| 	struct fd f;
 | |
| 
 | |
| 	na = info->attrs[CGROUPSTATS_CMD_ATTR_FD];
 | |
| 	if (!na)
 | |
| 		return -EINVAL;
 | |
| 
 | |
| 	fd = nla_get_u32(info->attrs[CGROUPSTATS_CMD_ATTR_FD]);
 | |
| 	f = fdget(fd);
 | |
| 	if (!f.file)
 | |
| 		return 0;
 | |
| 
 | |
| 	size = nla_total_size(sizeof(struct cgroupstats));
 | |
| 
 | |
| 	rc = prepare_reply(info, CGROUPSTATS_CMD_NEW, &rep_skb,
 | |
| 				size);
 | |
| 	if (rc < 0)
 | |
| 		goto err;
 | |
| 
 | |
| 	na = nla_reserve(rep_skb, CGROUPSTATS_TYPE_CGROUP_STATS,
 | |
| 				sizeof(struct cgroupstats));
 | |
| 	if (na == NULL) {
 | |
| 		nlmsg_free(rep_skb);
 | |
| 		rc = -EMSGSIZE;
 | |
| 		goto err;
 | |
| 	}
 | |
| 
 | |
| 	stats = nla_data(na);
 | |
| 	memset(stats, 0, sizeof(*stats));
 | |
| 
 | |
| 	rc = cgroupstats_build(stats, f.file->f_path.dentry);
 | |
| 	if (rc < 0) {
 | |
| 		nlmsg_free(rep_skb);
 | |
| 		goto err;
 | |
| 	}
 | |
| 
 | |
| 	rc = send_reply(rep_skb, info);
 | |
| 
 | |
| err:
 | |
| 	fdput(f);
 | |
| 	return rc;
 | |
| }
 | |
| 
 | |
| static int cmd_attr_register_cpumask(struct genl_info *info)
 | |
| {
 | |
| 	cpumask_var_t mask;
 | |
| 	int rc;
 | |
| 
 | |
| 	if (!alloc_cpumask_var(&mask, GFP_KERNEL))
 | |
| 		return -ENOMEM;
 | |
| 	rc = parse(info->attrs[TASKSTATS_CMD_ATTR_REGISTER_CPUMASK], mask);
 | |
| 	if (rc < 0)
 | |
| 		goto out;
 | |
| 	rc = add_del_listener(info->snd_portid, mask, REGISTER);
 | |
| out:
 | |
| 	free_cpumask_var(mask);
 | |
| 	return rc;
 | |
| }
 | |
| 
 | |
| static int cmd_attr_deregister_cpumask(struct genl_info *info)
 | |
| {
 | |
| 	cpumask_var_t mask;
 | |
| 	int rc;
 | |
| 
 | |
| 	if (!alloc_cpumask_var(&mask, GFP_KERNEL))
 | |
| 		return -ENOMEM;
 | |
| 	rc = parse(info->attrs[TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK], mask);
 | |
| 	if (rc < 0)
 | |
| 		goto out;
 | |
| 	rc = add_del_listener(info->snd_portid, mask, DEREGISTER);
 | |
| out:
 | |
| 	free_cpumask_var(mask);
 | |
| 	return rc;
 | |
| }
 | |
| 
 | |
| static size_t taskstats_packet_size(void)
 | |
| {
 | |
| 	size_t size;
 | |
| 
 | |
| 	size = nla_total_size(sizeof(u32)) +
 | |
| 		nla_total_size_64bit(sizeof(struct taskstats)) +
 | |
| 		nla_total_size(0);
 | |
| 
 | |
| 	return size;
 | |
| }
 | |
| 
 | |
| static int cmd_attr_pid(struct genl_info *info)
 | |
| {
 | |
| 	struct taskstats *stats;
 | |
| 	struct sk_buff *rep_skb;
 | |
| 	size_t size;
 | |
| 	u32 pid;
 | |
| 	int rc;
 | |
| 
 | |
| 	size = taskstats_packet_size();
 | |
| 
 | |
| 	rc = prepare_reply(info, TASKSTATS_CMD_NEW, &rep_skb, size);
 | |
| 	if (rc < 0)
 | |
| 		return rc;
 | |
| 
 | |
| 	rc = -EINVAL;
 | |
| 	pid = nla_get_u32(info->attrs[TASKSTATS_CMD_ATTR_PID]);
 | |
| 	stats = mk_reply(rep_skb, TASKSTATS_TYPE_PID, pid);
 | |
| 	if (!stats)
 | |
| 		goto err;
 | |
| 
 | |
| 	rc = fill_stats_for_pid(pid, stats);
 | |
| 	if (rc < 0)
 | |
| 		goto err;
 | |
| 	return send_reply(rep_skb, info);
 | |
| err:
 | |
| 	nlmsg_free(rep_skb);
 | |
| 	return rc;
 | |
| }
 | |
| 
 | |
| static int cmd_attr_tgid(struct genl_info *info)
 | |
| {
 | |
| 	struct taskstats *stats;
 | |
| 	struct sk_buff *rep_skb;
 | |
| 	size_t size;
 | |
| 	u32 tgid;
 | |
| 	int rc;
 | |
| 
 | |
| 	size = taskstats_packet_size();
 | |
| 
 | |
| 	rc = prepare_reply(info, TASKSTATS_CMD_NEW, &rep_skb, size);
 | |
| 	if (rc < 0)
 | |
| 		return rc;
 | |
| 
 | |
| 	rc = -EINVAL;
 | |
| 	tgid = nla_get_u32(info->attrs[TASKSTATS_CMD_ATTR_TGID]);
 | |
| 	stats = mk_reply(rep_skb, TASKSTATS_TYPE_TGID, tgid);
 | |
| 	if (!stats)
 | |
| 		goto err;
 | |
| 
 | |
| 	rc = fill_stats_for_tgid(tgid, stats);
 | |
| 	if (rc < 0)
 | |
| 		goto err;
 | |
| 	return send_reply(rep_skb, info);
 | |
| err:
 | |
| 	nlmsg_free(rep_skb);
 | |
| 	return rc;
 | |
| }
 | |
| 
 | |
| static int taskstats_user_cmd(struct sk_buff *skb, struct genl_info *info)
 | |
| {
 | |
| 	if (info->attrs[TASKSTATS_CMD_ATTR_REGISTER_CPUMASK])
 | |
| 		return cmd_attr_register_cpumask(info);
 | |
| 	else if (info->attrs[TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK])
 | |
| 		return cmd_attr_deregister_cpumask(info);
 | |
| 	else if (info->attrs[TASKSTATS_CMD_ATTR_PID])
 | |
| 		return cmd_attr_pid(info);
 | |
| 	else if (info->attrs[TASKSTATS_CMD_ATTR_TGID])
 | |
| 		return cmd_attr_tgid(info);
 | |
| 	else
 | |
| 		return -EINVAL;
 | |
| }
 | |
| 
 | |
| static struct taskstats *taskstats_tgid_alloc(struct task_struct *tsk)
 | |
| {
 | |
| 	struct signal_struct *sig = tsk->signal;
 | |
| 	struct taskstats *stats_new, *stats;
 | |
| 
 | |
| 	/* Pairs with smp_store_release() below. */
 | |
| 	stats = smp_load_acquire(&sig->stats);
 | |
| 	if (stats || thread_group_empty(tsk))
 | |
| 		return stats;
 | |
| 
 | |
| 	/* No problem if kmem_cache_zalloc() fails */
 | |
| 	stats_new = kmem_cache_zalloc(taskstats_cache, GFP_KERNEL);
 | |
| 
 | |
| 	spin_lock_irq(&tsk->sighand->siglock);
 | |
| 	stats = sig->stats;
 | |
| 	if (!stats) {
 | |
| 		/*
 | |
| 		 * Pairs with smp_store_release() above and order the
 | |
| 		 * kmem_cache_zalloc().
 | |
| 		 */
 | |
| 		smp_store_release(&sig->stats, stats_new);
 | |
| 		stats = stats_new;
 | |
| 		stats_new = NULL;
 | |
| 	}
 | |
| 	spin_unlock_irq(&tsk->sighand->siglock);
 | |
| 
 | |
| 	if (stats_new)
 | |
| 		kmem_cache_free(taskstats_cache, stats_new);
 | |
| 
 | |
| 	return stats;
 | |
| }
 | |
| 
 | |
| /* Send pid data out on exit */
 | |
| void taskstats_exit(struct task_struct *tsk, int group_dead)
 | |
| {
 | |
| 	int rc;
 | |
| 	struct listener_list *listeners;
 | |
| 	struct taskstats *stats;
 | |
| 	struct sk_buff *rep_skb;
 | |
| 	size_t size;
 | |
| 	int is_thread_group;
 | |
| 
 | |
| 	if (!family_registered)
 | |
| 		return;
 | |
| 
 | |
| 	/*
 | |
| 	 * Size includes space for nested attributes
 | |
| 	 */
 | |
| 	size = taskstats_packet_size();
 | |
| 
 | |
| 	is_thread_group = !!taskstats_tgid_alloc(tsk);
 | |
| 	if (is_thread_group) {
 | |
| 		/* PID + STATS + TGID + STATS */
 | |
| 		size = 2 * size;
 | |
| 		/* fill the tsk->signal->stats structure */
 | |
| 		fill_tgid_exit(tsk);
 | |
| 	}
 | |
| 
 | |
| 	listeners = raw_cpu_ptr(&listener_array);
 | |
| 	if (list_empty(&listeners->list))
 | |
| 		return;
 | |
| 
 | |
| 	rc = prepare_reply(NULL, TASKSTATS_CMD_NEW, &rep_skb, size);
 | |
| 	if (rc < 0)
 | |
| 		return;
 | |
| 
 | |
| 	stats = mk_reply(rep_skb, TASKSTATS_TYPE_PID,
 | |
| 			 task_pid_nr_ns(tsk, &init_pid_ns));
 | |
| 	if (!stats)
 | |
| 		goto err;
 | |
| 
 | |
| 	fill_stats(&init_user_ns, &init_pid_ns, tsk, stats);
 | |
| 
 | |
| 	/*
 | |
| 	 * Doesn't matter if tsk is the leader or the last group member leaving
 | |
| 	 */
 | |
| 	if (!is_thread_group || !group_dead)
 | |
| 		goto send;
 | |
| 
 | |
| 	stats = mk_reply(rep_skb, TASKSTATS_TYPE_TGID,
 | |
| 			 task_tgid_nr_ns(tsk, &init_pid_ns));
 | |
| 	if (!stats)
 | |
| 		goto err;
 | |
| 
 | |
| 	memcpy(stats, tsk->signal->stats, sizeof(*stats));
 | |
| 
 | |
| send:
 | |
| 	send_cpu_listeners(rep_skb, listeners);
 | |
| 	return;
 | |
| err:
 | |
| 	nlmsg_free(rep_skb);
 | |
| }
 | |
| 
 | |
| static const struct genl_ops taskstats_ops[] = {
 | |
| 	{
 | |
| 		.cmd		= TASKSTATS_CMD_GET,
 | |
| 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
 | |
| 		.doit		= taskstats_user_cmd,
 | |
| 		/* policy enforced later */
 | |
| 		.flags		= GENL_ADMIN_PERM | GENL_CMD_CAP_HASPOL,
 | |
| 	},
 | |
| 	{
 | |
| 		.cmd		= CGROUPSTATS_CMD_GET,
 | |
| 		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
 | |
| 		.doit		= cgroupstats_user_cmd,
 | |
| 		/* policy enforced later */
 | |
| 		.flags		= GENL_CMD_CAP_HASPOL,
 | |
| 	},
 | |
| };
 | |
| 
 | |
| static int taskstats_pre_doit(const struct genl_ops *ops, struct sk_buff *skb,
 | |
| 			      struct genl_info *info)
 | |
| {
 | |
| 	const struct nla_policy *policy = NULL;
 | |
| 
 | |
| 	switch (ops->cmd) {
 | |
| 	case TASKSTATS_CMD_GET:
 | |
| 		policy = taskstats_cmd_get_policy;
 | |
| 		break;
 | |
| 	case CGROUPSTATS_CMD_GET:
 | |
| 		policy = cgroupstats_cmd_get_policy;
 | |
| 		break;
 | |
| 	default:
 | |
| 		return -EINVAL;
 | |
| 	}
 | |
| 
 | |
| 	return nlmsg_validate_deprecated(info->nlhdr, GENL_HDRLEN,
 | |
| 					 TASKSTATS_CMD_ATTR_MAX, policy,
 | |
| 					 info->extack);
 | |
| }
 | |
| 
 | |
| static struct genl_family family __ro_after_init = {
 | |
| 	.name		= TASKSTATS_GENL_NAME,
 | |
| 	.version	= TASKSTATS_GENL_VERSION,
 | |
| 	.maxattr	= TASKSTATS_CMD_ATTR_MAX,
 | |
| 	.module		= THIS_MODULE,
 | |
| 	.ops		= taskstats_ops,
 | |
| 	.n_ops		= ARRAY_SIZE(taskstats_ops),
 | |
| 	.pre_doit	= taskstats_pre_doit,
 | |
| };
 | |
| 
 | |
| /* Needed early in initialization */
 | |
| void __init taskstats_init_early(void)
 | |
| {
 | |
| 	unsigned int i;
 | |
| 
 | |
| 	taskstats_cache = KMEM_CACHE(taskstats, SLAB_PANIC);
 | |
| 	for_each_possible_cpu(i) {
 | |
| 		INIT_LIST_HEAD(&(per_cpu(listener_array, i).list));
 | |
| 		init_rwsem(&(per_cpu(listener_array, i).sem));
 | |
| 	}
 | |
| }
 | |
| 
 | |
| static int __init taskstats_init(void)
 | |
| {
 | |
| 	int rc;
 | |
| 
 | |
| 	rc = genl_register_family(&family);
 | |
| 	if (rc)
 | |
| 		return rc;
 | |
| 
 | |
| 	family_registered = 1;
 | |
| 	pr_info("registered taskstats version %d\n", TASKSTATS_GENL_VERSION);
 | |
| 	return 0;
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * late initcall ensures initialization of statistics collection
 | |
|  * mechanisms precedes initialization of the taskstats interface
 | |
|  */
 | |
| late_initcall(taskstats_init);
 |