1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-10-19 02:29:40 +00:00
freebsd/sys/i386/include
Bruce Evans 20415301cd Fix security holes in sigreturn(), ptrace() and procfs. sigreturn()
attempted to check for insecure and fatal eflags and segment
selectors, but missed many cases and got the IOPL check back to
front.  The other syscalls didn't check at all.

sys_process.c, machdep.c:
Only allow PT_WRITE_U to write to the registers (ordinary and FP).

psl.h, locore.s, machdep.c:
Eliminate PSL_MBZ, PSL_MBO and PSL_USERCLR.  We are not supposed
to assume anything about the reserved bits.  Use PSL_USERCHANGE
and PSL_KERNEL instead.  Rename PSL_USERSET to PSL_USER.

exception.s:
Define a private label for use by doreti when returning to user
mode fails.

machdep.c:
In syscalls, allow changing only the eflags that can be changed on
486's in user mode (no longer attempt to allow benign IOPL changes;
allow changing the nasty PSL_NT; don't allow changing the i586
bits).

Don't attempt to check all the cases involving invalid selectors
and %eip's.  Just check for privilege violations and let the invalid
things cause a trap.

procfs_machdep.c:
Call the ptrace register functions to do all the work for reading
and writing ordinary registers and for single stepping.

trap.c:
Ignore traps caused by PSL_NT being set.  Previously, users could
cause a fatal trap in user mode by setting PSL_NT and executing an
iret, and a fatal trap in kernel mode by setting PSL_NT and making
a syscall.  PSL_NT was cleared too late and not in enough modes to
fix the problem.

Make all traps in user mode (except T_NMI) nonfatal.

Recover from traps caused by attempting to load invalid user
registers in doreti by restarting the traps so that they appear to
occur in user mode.
---

Fix bogons that I noticed while fixing the above:

psl.h:
Fix some comments.

Uniformize idempotency ifdef.

exception.s, machdep.c:
Remove rsvd[0-14].  rsvd0 hasn't been reserved since the 486 came
out.  Replace rsvd0 by `align'.  rsvd[0-11] used wrong (magic
non-unique) trap numbers.  Replace rsvd[1-14] by rsvd.

locore.s:
Enable alignment check flag on 486's and 586's.

machdep.c:
Use a better type for kstack[].

Use TFREGP() to find the registers.

Reformat ptrace functions from SEF to something closer to KNF.

procfs_machdep.c:
The wrong pointer to the registers got fixed as a side effect.

Implement reading and writing of FP registers.

/proc/*/*regs now work (only) for processes that are in memory.

Clean up comments.

trap.c, trap.h:
Remove unused trap types.
1995-01-14 13:20:26 +00:00
..
pc Removed all patch kit headers, sccsid and rcsid strings, put $Id$ in, some 1993-10-16 14:40:57 +00:00
_limits.h Added $Id$ 1994-08-02 07:55:43 +00:00
ansi.h Added $Id$ 1994-08-02 07:55:43 +00:00
apm_bios.h apm_bios.h: removed the equiv-stuff. Not needed now that the kernel module 1994-10-02 17:31:29 +00:00
apm_segments.h Added $Id$ 1994-10-01 05:13:37 +00:00
asmacros.h Get all the definitions from DEFS.h and not directly from asmacros.h 1994-09-08 12:25:18 +00:00
bootinfo.h Declare the bootinfo structure in the kernel. 1994-11-18 05:26:52 +00:00
clock.h Declare the full uglyness of the interfaces to the clock driver (except 1994-11-05 22:51:17 +00:00
cons.h Added $Id$ 1994-08-02 07:55:43 +00:00
console.h First round in syscons update. Several new features has been added: 1995-01-12 11:47:05 +00:00
cpu.h Disable CLKF_BASEPRI() again. I forgot to edit an unwanted change out of 1994-12-03 10:18:24 +00:00
cpufunc.h Corrected the list of volatile registers for outsb, outsw, and outsl. 1995-01-04 20:42:25 +00:00
cputypes.h Detect if we're running on a Cyrix 486DLC and enable automatic cache 1994-09-04 19:59:24 +00:00
cronyx.h Cronyx/Sigma sync/async serial driver with PPP support 1994-12-02 23:23:01 +00:00
db_machdep.h Remove reference to impossible trap type T_KDBTRAP. We don't support 1995-01-14 10:34:52 +00:00
devconf.h Submitted by: Wolfgang Stanglmeier <wolf@dentaro.GUN.de> 1994-11-02 23:44:11 +00:00
dkio.h Quote the first arg to _IO(). Not quoting it didn't matter because 1994-09-08 12:26:07 +00:00
eflags.h Removed all patch kit headers, sccsid and rcsid strings, put $Id$ in, some 1993-10-16 14:40:57 +00:00
endian.h Change "asm" to "__asm" - makes it possible to compile code with 1994-09-10 20:03:14 +00:00
exec.h Shuffled macros and definitions around to facilitate architecture 1994-09-24 21:37:01 +00:00
float.h Made all header files idempotent and moved incorrect common data from 1993-11-07 17:43:17 +00:00
floatingpoint.h Don't provide bogus source operands in some asms. This probably shouldn't 1994-09-20 22:26:37 +00:00
frame.h The big 4.4BSD Lite to FreeBSD 2.0.0 (Development) patch. 1994-05-25 09:21:21 +00:00
gsc.h Gunther Schadow <gusw@fub46.zedat.fu-berlin.de>'s 1995-01-07 14:52:08 +00:00
ieeefp.h Delete redundant #ifdef __i386__, be consistent about idempotency 1994-08-05 14:36:04 +00:00
ioctl_ctx.h Added Cortex-I Frame Grabber by Paul S. LaFollette, Jr. 1994-10-01 17:59:42 +00:00
ioctl_fd.h Included the command definition for FD_DEBUG. 1994-10-30 19:17:39 +00:00
ioctl_pc.h >From Theo Derradt 1993-09-08 19:29:54 +00:00
ipl.h Added $Id$ 1994-08-02 07:55:43 +00:00
limits.h Added $Id$ 1994-08-02 07:55:43 +00:00
lpt.h Added $Id$ 1994-08-02 07:55:43 +00:00
mouse.h Added the psm driver from 1.1.5. 1994-09-09 11:27:50 +00:00
mtpr.h Removed all patch kit headers, sccsid and rcsid strings, put $Id$ in, some 1993-10-16 14:40:57 +00:00
npx.h Replace sv_ex_tw by padding (it is no longer used; the tag word in sv_env 1995-01-03 03:57:46 +00:00
param.h Replace unsigned' by u_int' so that it is not necessary to include 1994-09-18 22:05:22 +00:00
pcaudioio.h Changed header sligthly. 1994-09-29 08:31:39 +00:00
pcb.h i386/exception.s, 1994-12-03 10:03:19 +00:00
pio.h Made all header files idempotent and moved incorrect common data from 1993-11-07 17:43:17 +00:00
pmap.h These changes embody the support of the fully coherent merged VM buffer cache, 1995-01-09 16:06:02 +00:00
proc.h The big 4.4BSD Lite to FreeBSD 2.0.0 (Development) patch. 1994-05-25 09:21:21 +00:00
profile.h Added MCOUNT_ENTER and MCOUNT_EXIT macros to profile.h 1994-09-15 16:27:14 +00:00
psl.h Fix security holes in sigreturn(), ptrace() and procfs. sigreturn() 1995-01-14 13:20:26 +00:00
pte.h Improved some comments. 1994-09-04 23:10:27 +00:00
ptrace.h Added $Id$ 1994-08-02 07:55:43 +00:00
reg.h Declare a real `struct fpreg' to prepare for implementing reading and 1995-01-14 10:41:41 +00:00
reloc.h Made idempotent. 1994-08-21 04:55:31 +00:00
segments.h Make gdt_segs[] public again for APM. 1994-11-15 14:12:55 +00:00
signal.h Made idempotent. 1994-08-21 04:55:31 +00:00
soundcard.h Remove extra idempotency ifdef and uniformize the other one. 1994-11-14 14:13:13 +00:00
speaker.h Added $Id$ 1994-08-02 07:55:43 +00:00
specialreg.h Enable define of CR0_AM to prepare for implementing alignment checking. 1995-01-14 10:44:55 +00:00
spl.h spl.h: 1994-12-30 12:42:15 +00:00
stdarg.h Added $Id$ 1994-08-02 07:55:43 +00:00
sysarch.h Added $Id$ 1994-08-02 07:55:43 +00:00
trap.h Fix security holes in sigreturn(), ptrace() and procfs. sigreturn() 1995-01-14 13:20:26 +00:00
tss.h Fixed comments that start within a comment, so code compiles cleanly with 1993-11-17 23:25:28 +00:00
types.h Added $Id$ 1994-08-02 07:55:43 +00:00
ultrasound.h Added $Id$ 1994-08-02 07:55:43 +00:00
varargs.h Added $Id$ 1994-08-02 07:55:43 +00:00
vmparam.h These changes embody the support of the fully coherent merged VM buffer cache, 1995-01-09 16:06:02 +00:00