65 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			ArmAsm
		
	
	
	
	
	
			
		
		
	
	
			65 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			ArmAsm
		
	
	
	
	
	
/* SPDX-License-Identifier: GPL-2.0 */
 | 
						|
/* Copyright (C) 2019 ARM Limited */
 | 
						|
 | 
						|
#include <asm/unistd.h>
 | 
						|
 | 
						|
.section        .rodata, "a"
 | 
						|
call_fmt:
 | 
						|
	.asciz "Calling sigreturn with fake sigframe sized:%zd at SP @%08lX\n"
 | 
						|
 | 
						|
.text
 | 
						|
 | 
						|
.globl fake_sigreturn
 | 
						|
 | 
						|
/*	fake_sigreturn	x0:&sigframe,  x1:sigframe_size,  x2:misalign_bytes */
 | 
						|
fake_sigreturn:
 | 
						|
	stp	x29, x30, [sp, #-16]!
 | 
						|
	mov	x29, sp
 | 
						|
 | 
						|
	mov	x20, x0
 | 
						|
	mov	x21, x1
 | 
						|
	mov	x22, x2
 | 
						|
 | 
						|
	/* create space on the stack for fake sigframe 16 bytes-aligned */
 | 
						|
	add	x0, x21, x22
 | 
						|
	add	x0, x0, #15
 | 
						|
	bic	x0, x0, #15 /* round_up(sigframe_size + misalign_bytes, 16) */
 | 
						|
	sub	sp, sp, x0
 | 
						|
	add	x23, sp, x22 /* new sigframe base with misaligment if any */
 | 
						|
 | 
						|
	ldr	x0, =call_fmt
 | 
						|
	mov	x1, x21
 | 
						|
	mov	x2, x23
 | 
						|
	bl	printf
 | 
						|
 | 
						|
	/* memcpy the provided content, while still keeping SP aligned */
 | 
						|
	mov	x0, x23
 | 
						|
	mov	x1, x20
 | 
						|
	mov	x2, x21
 | 
						|
	bl	memcpy
 | 
						|
 | 
						|
	/*
 | 
						|
	 * Here saving a last minute SP to current->token acts as a marker:
 | 
						|
	 * if we got here, we are successfully faking a sigreturn; in other
 | 
						|
	 * words we are sure no bad fatal signal has been raised till now
 | 
						|
	 * for unrelated reasons, so we should consider the possibly observed
 | 
						|
	 * fatal signal like SEGV coming from Kernel restore_sigframe() and
 | 
						|
	 * triggered as expected from our test-case.
 | 
						|
	 * For simplicity this assumes that current field 'token' is laid out
 | 
						|
	 * as first in struct tdescr
 | 
						|
	 */
 | 
						|
	ldr	x0, current
 | 
						|
	str	x23, [x0]
 | 
						|
	/* finally move SP to misaligned address...if any requested */
 | 
						|
	mov	sp, x23
 | 
						|
 | 
						|
	mov	x8, #__NR_rt_sigreturn
 | 
						|
	svc	#0
 | 
						|
 | 
						|
	/*
 | 
						|
	 * Above sigreturn should not return...looping here leads to a timeout
 | 
						|
	 * and ensure proper and clean test failure, instead of jumping around
 | 
						|
	 * on a potentially corrupted stack.
 | 
						|
	 */
 | 
						|
	b	.
 |