1 // SPDX-License-Identifier: GPL-2.0+
3 * flexible mmap layout support
5 * Copyright 2003-2004 Red Hat Inc., Durham, North Carolina.
8 * Started by Ingo Molnar <mingo@elte.hu>
11 #include <linux/elf-randomize.h>
12 #include <linux/personality.h>
14 #include <linux/mman.h>
15 #include <linux/sched/signal.h>
16 #include <linux/sched/mm.h>
17 #include <linux/random.h>
18 #include <linux/compat.h>
19 #include <linux/security.h>
22 static unsigned long stack_maxrandom_size(void)
24 if (!(current
->flags
& PF_RANDOMIZE
))
26 return STACK_RND_MASK
<< PAGE_SHIFT
;
29 static inline int mmap_is_legacy(struct rlimit
*rlim_stack
)
31 if (current
->personality
& ADDR_COMPAT_LAYOUT
)
33 if (rlim_stack
->rlim_cur
== RLIM_INFINITY
)
35 return sysctl_legacy_va_layout
;
38 unsigned long arch_mmap_rnd(void)
40 return (get_random_int() & MMAP_RND_MASK
) << PAGE_SHIFT
;
43 static unsigned long mmap_base_legacy(unsigned long rnd
)
45 return TASK_UNMAPPED_BASE
+ rnd
;
48 static inline unsigned long mmap_base(unsigned long rnd
,
49 struct rlimit
*rlim_stack
)
51 unsigned long gap
= rlim_stack
->rlim_cur
;
52 unsigned long pad
= stack_maxrandom_size() + stack_guard_gap
;
53 unsigned long gap_min
, gap_max
;
55 /* Values close to RLIM_INFINITY can overflow. */
60 * Top of mmap area (just below the process stack).
61 * Leave at least a ~32 MB hole.
63 gap_min
= 32 * 1024 * 1024UL;
64 gap_max
= (STACK_TOP
/ 6) * 5;
68 else if (gap
> gap_max
)
71 return PAGE_ALIGN(STACK_TOP
- gap
- rnd
);
74 unsigned long arch_get_unmapped_area(struct file
*filp
, unsigned long addr
,
75 unsigned long len
, unsigned long pgoff
,
78 struct mm_struct
*mm
= current
->mm
;
79 struct vm_area_struct
*vma
;
80 struct vm_unmapped_area_info info
;
82 if (len
> TASK_SIZE
- mmap_min_addr
)
85 if (flags
& MAP_FIXED
)
86 goto check_asce_limit
;
89 addr
= PAGE_ALIGN(addr
);
90 vma
= find_vma(mm
, addr
);
91 if (TASK_SIZE
- len
>= addr
&& addr
>= mmap_min_addr
&&
92 (!vma
|| addr
+ len
<= vm_start_gap(vma
)))
93 goto check_asce_limit
;
98 info
.low_limit
= mm
->mmap_base
;
99 info
.high_limit
= TASK_SIZE
;
100 if (filp
|| (flags
& MAP_SHARED
))
101 info
.align_mask
= MMAP_ALIGN_MASK
<< PAGE_SHIFT
;
104 info
.align_offset
= pgoff
<< PAGE_SHIFT
;
105 addr
= vm_unmapped_area(&info
);
106 if (offset_in_page(addr
))
110 return check_asce_limit(mm
, addr
, len
);
113 unsigned long arch_get_unmapped_area_topdown(struct file
*filp
, unsigned long addr
,
114 unsigned long len
, unsigned long pgoff
,
117 struct vm_area_struct
*vma
;
118 struct mm_struct
*mm
= current
->mm
;
119 struct vm_unmapped_area_info info
;
121 /* requested length too big for entire address space */
122 if (len
> TASK_SIZE
- mmap_min_addr
)
125 if (flags
& MAP_FIXED
)
126 goto check_asce_limit
;
128 /* requesting a specific address */
130 addr
= PAGE_ALIGN(addr
);
131 vma
= find_vma(mm
, addr
);
132 if (TASK_SIZE
- len
>= addr
&& addr
>= mmap_min_addr
&&
133 (!vma
|| addr
+ len
<= vm_start_gap(vma
)))
134 goto check_asce_limit
;
137 info
.flags
= VM_UNMAPPED_AREA_TOPDOWN
;
139 info
.low_limit
= max(PAGE_SIZE
, mmap_min_addr
);
140 info
.high_limit
= mm
->mmap_base
;
141 if (filp
|| (flags
& MAP_SHARED
))
142 info
.align_mask
= MMAP_ALIGN_MASK
<< PAGE_SHIFT
;
145 info
.align_offset
= pgoff
<< PAGE_SHIFT
;
146 addr
= vm_unmapped_area(&info
);
149 * A failed mmap() very likely causes application failure,
150 * so fall back to the bottom-up function here. This scenario
151 * can happen with large stack limits and large mmap()
154 if (offset_in_page(addr
)) {
155 VM_BUG_ON(addr
!= -ENOMEM
);
157 info
.low_limit
= TASK_UNMAPPED_BASE
;
158 info
.high_limit
= TASK_SIZE
;
159 addr
= vm_unmapped_area(&info
);
160 if (offset_in_page(addr
))
165 return check_asce_limit(mm
, addr
, len
);
169 * This function, called very early during the creation of a new
170 * process VM image, sets up which VM layout function to use:
172 void arch_pick_mmap_layout(struct mm_struct
*mm
, struct rlimit
*rlim_stack
)
174 unsigned long random_factor
= 0UL;
176 if (current
->flags
& PF_RANDOMIZE
)
177 random_factor
= arch_mmap_rnd();
180 * Fall back to the standard layout if the personality
181 * bit is set, or if the expected stack growth is unlimited:
183 if (mmap_is_legacy(rlim_stack
)) {
184 mm
->mmap_base
= mmap_base_legacy(random_factor
);
185 mm
->get_unmapped_area
= arch_get_unmapped_area
;
187 mm
->mmap_base
= mmap_base(random_factor
, rlim_stack
);
188 mm
->get_unmapped_area
= arch_get_unmapped_area_topdown
;