net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
[linux/fpc-iii.git] / ipc / ipc_sysctl.c
blobe8075b24749775f254c4d821ea1fb2c4a8a4c5f1
1 /*
2 * Copyright (C) 2007
4 * Author: Eric Biederman <ebiederm@xmision.com>
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License as
8 * published by the Free Software Foundation, version 2 of the
9 * License.
12 #include <linux/module.h>
13 #include <linux/ipc.h>
14 #include <linux/nsproxy.h>
15 #include <linux/sysctl.h>
16 #include <linux/uaccess.h>
17 #include <linux/ipc_namespace.h>
18 #include <linux/msg.h>
19 #include "util.h"
21 static void *get_ipc(struct ctl_table *table)
23 char *which = table->data;
24 struct ipc_namespace *ipc_ns = current->nsproxy->ipc_ns;
25 which = (which - (char *)&init_ipc_ns) + (char *)ipc_ns;
26 return which;
29 #ifdef CONFIG_PROC_SYSCTL
30 static int proc_ipc_dointvec(struct ctl_table *table, int write,
31 void __user *buffer, size_t *lenp, loff_t *ppos)
33 struct ctl_table ipc_table;
35 memcpy(&ipc_table, table, sizeof(ipc_table));
36 ipc_table.data = get_ipc(table);
38 return proc_dointvec(&ipc_table, write, buffer, lenp, ppos);
41 static int proc_ipc_dointvec_minmax(struct ctl_table *table, int write,
42 void __user *buffer, size_t *lenp, loff_t *ppos)
44 struct ctl_table ipc_table;
46 memcpy(&ipc_table, table, sizeof(ipc_table));
47 ipc_table.data = get_ipc(table);
49 return proc_dointvec_minmax(&ipc_table, write, buffer, lenp, ppos);
52 static int proc_ipc_dointvec_minmax_orphans(struct ctl_table *table, int write,
53 void __user *buffer, size_t *lenp, loff_t *ppos)
55 struct ipc_namespace *ns = current->nsproxy->ipc_ns;
56 int err = proc_ipc_dointvec_minmax(table, write, buffer, lenp, ppos);
58 if (err < 0)
59 return err;
60 if (ns->shm_rmid_forced)
61 shm_destroy_orphaned(ns);
62 return err;
65 static int proc_ipc_callback_dointvec_minmax(struct ctl_table *table, int write,
66 void __user *buffer, size_t *lenp, loff_t *ppos)
68 struct ctl_table ipc_table;
69 size_t lenp_bef = *lenp;
70 int rc;
72 memcpy(&ipc_table, table, sizeof(ipc_table));
73 ipc_table.data = get_ipc(table);
75 rc = proc_dointvec_minmax(&ipc_table, write, buffer, lenp, ppos);
77 if (write && !rc && lenp_bef == *lenp)
79 * Tunable has successfully been changed by hand. Disable its
80 * automatic adjustment. This simply requires unregistering
81 * the notifiers that trigger recalculation.
83 unregister_ipcns_notifier(current->nsproxy->ipc_ns);
85 return rc;
88 static int proc_ipc_doulongvec_minmax(struct ctl_table *table, int write,
89 void __user *buffer, size_t *lenp, loff_t *ppos)
91 struct ctl_table ipc_table;
92 memcpy(&ipc_table, table, sizeof(ipc_table));
93 ipc_table.data = get_ipc(table);
95 return proc_doulongvec_minmax(&ipc_table, write, buffer,
96 lenp, ppos);
100 * Routine that is called when the file "auto_msgmni" has successfully been
101 * written.
102 * Two values are allowed:
103 * 0: unregister msgmni's callback routine from the ipc namespace notifier
104 * chain. This means that msgmni won't be recomputed anymore upon memory
105 * add/remove or ipc namespace creation/removal.
106 * 1: register back the callback routine.
108 static void ipc_auto_callback(int val)
110 if (!val)
111 unregister_ipcns_notifier(current->nsproxy->ipc_ns);
112 else {
114 * Re-enable automatic recomputing only if not already
115 * enabled.
117 recompute_msgmni(current->nsproxy->ipc_ns);
118 cond_register_ipcns_notifier(current->nsproxy->ipc_ns);
122 static int proc_ipcauto_dointvec_minmax(struct ctl_table *table, int write,
123 void __user *buffer, size_t *lenp, loff_t *ppos)
125 struct ctl_table ipc_table;
126 int oldval;
127 int rc;
129 memcpy(&ipc_table, table, sizeof(ipc_table));
130 ipc_table.data = get_ipc(table);
131 oldval = *((int *)(ipc_table.data));
133 rc = proc_dointvec_minmax(&ipc_table, write, buffer, lenp, ppos);
135 if (write && !rc) {
136 int newval = *((int *)(ipc_table.data));
138 * The file "auto_msgmni" has correctly been set.
139 * React by (un)registering the corresponding tunable, if the
140 * value has changed.
142 if (newval != oldval)
143 ipc_auto_callback(newval);
146 return rc;
149 #else
150 #define proc_ipc_doulongvec_minmax NULL
151 #define proc_ipc_dointvec NULL
152 #define proc_ipc_dointvec_minmax NULL
153 #define proc_ipc_dointvec_minmax_orphans NULL
154 #define proc_ipc_callback_dointvec_minmax NULL
155 #define proc_ipcauto_dointvec_minmax NULL
156 #endif
158 static int zero;
159 static int one = 1;
160 static int int_max = INT_MAX;
162 static struct ctl_table ipc_kern_table[] = {
164 .procname = "shmmax",
165 .data = &init_ipc_ns.shm_ctlmax,
166 .maxlen = sizeof(init_ipc_ns.shm_ctlmax),
167 .mode = 0644,
168 .proc_handler = proc_ipc_doulongvec_minmax,
171 .procname = "shmall",
172 .data = &init_ipc_ns.shm_ctlall,
173 .maxlen = sizeof(init_ipc_ns.shm_ctlall),
174 .mode = 0644,
175 .proc_handler = proc_ipc_doulongvec_minmax,
178 .procname = "shmmni",
179 .data = &init_ipc_ns.shm_ctlmni,
180 .maxlen = sizeof(init_ipc_ns.shm_ctlmni),
181 .mode = 0644,
182 .proc_handler = proc_ipc_dointvec,
185 .procname = "shm_rmid_forced",
186 .data = &init_ipc_ns.shm_rmid_forced,
187 .maxlen = sizeof(init_ipc_ns.shm_rmid_forced),
188 .mode = 0644,
189 .proc_handler = proc_ipc_dointvec_minmax_orphans,
190 .extra1 = &zero,
191 .extra2 = &one,
194 .procname = "msgmax",
195 .data = &init_ipc_ns.msg_ctlmax,
196 .maxlen = sizeof(init_ipc_ns.msg_ctlmax),
197 .mode = 0644,
198 .proc_handler = proc_ipc_dointvec_minmax,
199 .extra1 = &zero,
200 .extra2 = &int_max,
203 .procname = "msgmni",
204 .data = &init_ipc_ns.msg_ctlmni,
205 .maxlen = sizeof(init_ipc_ns.msg_ctlmni),
206 .mode = 0644,
207 .proc_handler = proc_ipc_callback_dointvec_minmax,
208 .extra1 = &zero,
209 .extra2 = &int_max,
212 .procname = "msgmnb",
213 .data = &init_ipc_ns.msg_ctlmnb,
214 .maxlen = sizeof(init_ipc_ns.msg_ctlmnb),
215 .mode = 0644,
216 .proc_handler = proc_ipc_dointvec_minmax,
217 .extra1 = &zero,
218 .extra2 = &int_max,
221 .procname = "sem",
222 .data = &init_ipc_ns.sem_ctls,
223 .maxlen = 4*sizeof(int),
224 .mode = 0644,
225 .proc_handler = proc_ipc_dointvec,
228 .procname = "auto_msgmni",
229 .data = &init_ipc_ns.auto_msgmni,
230 .maxlen = sizeof(int),
231 .mode = 0644,
232 .proc_handler = proc_ipcauto_dointvec_minmax,
233 .extra1 = &zero,
234 .extra2 = &one,
236 #ifdef CONFIG_CHECKPOINT_RESTORE
238 .procname = "sem_next_id",
239 .data = &init_ipc_ns.ids[IPC_SEM_IDS].next_id,
240 .maxlen = sizeof(init_ipc_ns.ids[IPC_SEM_IDS].next_id),
241 .mode = 0644,
242 .proc_handler = proc_ipc_dointvec_minmax,
243 .extra1 = &zero,
244 .extra2 = &int_max,
247 .procname = "msg_next_id",
248 .data = &init_ipc_ns.ids[IPC_MSG_IDS].next_id,
249 .maxlen = sizeof(init_ipc_ns.ids[IPC_MSG_IDS].next_id),
250 .mode = 0644,
251 .proc_handler = proc_ipc_dointvec_minmax,
252 .extra1 = &zero,
253 .extra2 = &int_max,
256 .procname = "shm_next_id",
257 .data = &init_ipc_ns.ids[IPC_SHM_IDS].next_id,
258 .maxlen = sizeof(init_ipc_ns.ids[IPC_SHM_IDS].next_id),
259 .mode = 0644,
260 .proc_handler = proc_ipc_dointvec_minmax,
261 .extra1 = &zero,
262 .extra2 = &int_max,
264 #endif
268 static struct ctl_table ipc_root_table[] = {
270 .procname = "kernel",
271 .mode = 0555,
272 .child = ipc_kern_table,
277 static int __init ipc_sysctl_init(void)
279 register_sysctl_table(ipc_root_table);
280 return 0;
283 device_initcall(ipc_sysctl_init);