Skip to content

Commit

Permalink
arch: Add SuperH 32-bit support
Browse files Browse the repository at this point in the history
Initial support for seccomp for SuperH in Linux was added in 2.6.27-rc2,
support for SECCOMP_FILTER was added for Linux 5.9. This adds support
for SuperH in libseccomp, both for little-endian and big-endian mode.

Signed-off-by: John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>
Acked-by: Tom Hromatka <tom.hromatka@oracle.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
  • Loading branch information
glaubitz authored and pcmoore committed Mar 9, 2021
1 parent 83d7b02 commit c12945d
Show file tree
Hide file tree
Showing 24 changed files with 183 additions and 7 deletions.
1 change: 1 addition & 0 deletions CREDITS
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,7 @@ Jan Willeke <willeke@linux.vnet.ibm.com>
Jay Guo <guojiannan@cn.ibm.com>
Jiannan Guo <guojiannan1101@gmail.com>
Joe MacDonald <joe@deserted.net>
John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>
Jonah Petri <jonah@petri.us>
Justin Cormack <justin.cormack@docker.com>
Kees Cook <keescook@chromium.org>
Expand Down
2 changes: 2 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -54,6 +54,8 @@ The libseccomp library currently supports the architectures listed below:
* 32-bit s390 (s390)
* 64-bit s390x (s390x)
* 64-bit RISC-V (riscv64)
* 32-bit SuperH big endian (sheb)
* 32-bit SuperH (sh)

## Documentation

Expand Down
2 changes: 1 addition & 1 deletion doc/man/man1/scmp_sys_resolver.1
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ The architecture to use for resolving the system call. Valid
.I ARCH
values are "x86", "x86_64", "x32", "arm", "aarch64", "mips", "mipsel", "mips64",
"mipsel64", "mips64n32", "mipsel64n32", "parisc", "parisc64", "ppc", "ppc64",
"ppc64le", "s390" and "s390x".
"ppc64le", "s390", "s390x", "sheb" and "sh".
.TP
.B \-t
If necessary, translate the system call name to the proper system call number,
Expand Down
6 changes: 6 additions & 0 deletions include/seccomp.h.in
Original file line number Diff line number Diff line change
Expand Up @@ -216,6 +216,12 @@ struct scmp_arg_cmp {
#endif /* AUDIT_ARCH_RISCV64 */
#define SCMP_ARCH_RISCV64 AUDIT_ARCH_RISCV64

/**
* The SuperH architecture tokens
*/
#define SCMP_ARCH_SHEB AUDIT_ARCH_SH
#define SCMP_ARCH_SH AUDIT_ARCH_SHEL /* Little-endian SH is more common than big */

/**
* Convert a syscall name into the associated syscall number
* @param x the syscall name
Expand Down
1 change: 1 addition & 0 deletions src/Makefile.am
Original file line number Diff line number Diff line change
Expand Up @@ -46,6 +46,7 @@ SOURCES_ALL = \
arch-riscv64.h arch-riscv64.c \
arch-s390.h arch-s390.c \
arch-s390x.h arch-s390x.c \
arch-sh.h arch-sh.c \
syscalls.h syscalls.c syscalls.perf.c

EXTRA_DIST = \
Expand Down
42 changes: 42 additions & 0 deletions src/arch-sh.c
Original file line number Diff line number Diff line change
@@ -0,0 +1,42 @@
/*
* This library is free software; you can redistribute it and/or modify it
* under the terms of version 2.1 of the GNU Lesser General Public License as
* published by the Free Software Foundation.
*
* This library is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License
* for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* along with this library; if not, see <http://www.gnu.org/licenses>.
*/

#include <stdlib.h>
#include <errno.h>
#include <linux/audit.h>

#include "arch.h"
#include "arch-sh.h"

const struct arch_def arch_def_sheb = {
.token = SCMP_ARCH_SHEB,
.token_bpf = AUDIT_ARCH_SH,
.size = ARCH_SIZE_32,
.endian = ARCH_ENDIAN_BIG,
.syscall_resolve_name = sh_syscall_resolve_name,
.syscall_resolve_num = sh_syscall_resolve_num,
.syscall_rewrite = NULL,
.rule_add = NULL,
};

const struct arch_def arch_def_sh = {
.token = SCMP_ARCH_SH,
.token_bpf = AUDIT_ARCH_SHEL,
.size = ARCH_SIZE_32,
.endian = ARCH_ENDIAN_LITTLE,
.syscall_resolve_name = sh_syscall_resolve_name,
.syscall_resolve_num = sh_syscall_resolve_num,
.syscall_rewrite = NULL,
.rule_add = NULL,
};
23 changes: 23 additions & 0 deletions src/arch-sh.h
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
/*
* This library is free software; you can redistribute it and/or modify it
* under the terms of version 2.1 of the GNU Lesser General Public License as
* published by the Free Software Foundation.
*
* This library is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License
* for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* along with this library; if not, see <http://www.gnu.org/licenses>.
*/

#ifndef _ARCH_SH_H
#define _ARCH_SH_H

#include "arch.h"

ARCH_DECL(sheb)
ARCH_DECL(sh)

#endif
12 changes: 11 additions & 1 deletion src/arch-syscall-check.c
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,7 @@
#include "arch-ppc64.h"
#include "arch-s390.h"
#include "arch-s390x.h"
#include "arch-sh.h"

/**
* compare the syscall values
Expand Down Expand Up @@ -77,6 +78,7 @@ int main(int argc, char *argv[])
int i_ppc64 = 0;
int i_s390 = 0;
int i_s390x = 0;
int i_sh = 0;
char str_miss[256];
const char *sys_name;
const struct arch_syscall_def *sys;
Expand Down Expand Up @@ -115,6 +117,8 @@ int main(int argc, char *argv[])
s390_syscall_iterate(i_s390));
syscall_check(str_miss, sys_name, "s390x",
s390x_syscall_iterate(i_s390x));
syscall_check(str_miss, sys_name, "sh",
sh_syscall_iterate(i_sh));

/* output the results */
printf("%s: ", sys_name);
Expand Down Expand Up @@ -151,12 +155,14 @@ int main(int argc, char *argv[])
i_s390 = -1;
if (!s390x_syscall_iterate(++i_s390x)->name)
i_s390x = -1;
if (!sh_syscall_iterate(++i_sh)->name)
i_sh = -1;
} while (i_x86_64 >= 0 && i_x32 >= 0 &&
i_arm >= 0 && i_aarch64 >= 0 &&
i_mips >= 0 && i_mips64 >= 0 && i_mips64n32 >= 0 &&
i_parisc >= 0 &&
i_ppc >= 0 && i_ppc64 >= 0 &&
i_s390 >= 0 && i_s390x >= 0);
i_s390 >= 0 && i_s390x >= 0 && i_sh >= 0);

/* check for any leftovers */
sys = x86_syscall_iterate(i_x86 + 1);
Expand Down Expand Up @@ -212,6 +218,10 @@ int main(int argc, char *argv[])
printf("ERROR, s390x has additional syscalls\n");
return 1;
}
if (i_sh >= 0) {
printf("ERROR, sh has additional syscalls\n");
return 1;
}

/* if we made it here, all is good */
return 0;
Expand Down
5 changes: 5 additions & 0 deletions src/arch-syscall-dump.c
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,7 @@
#include "arch-riscv64.h"
#include "arch-s390.h"
#include "arch-s390x.h"
#include "arch-sh.h"

/**
* Print the usage information to stderr and exit
Expand Down Expand Up @@ -140,6 +141,10 @@ int main(int argc, char *argv[])
case SCMP_ARCH_S390X:
sys = s390x_syscall_iterate(iter);
break;
case SCMP_ARCH_SH:
case SCMP_ARCH_SHEB:
sys = sh_syscall_iterate(iter);
break;
default:
/* invalid arch */
exit_usage(argv[0]);
Expand Down
35 changes: 34 additions & 1 deletion src/arch-syscall-validate
Original file line number Diff line number Diff line change
Expand Up @@ -567,6 +567,31 @@ function dump_lib_s390x() {
dump_lib_arch s390x | mangle_lib_syscall s390x
}

#
# Dump the sh system syscall table
#
# Arguments:
# 1 path to the kernel source
#
# Dump the architecture's syscall table to stdout.
#
function dump_sys_sh() {
cat $1/arch/sh/kernel/syscalls/syscall.tbl | \
grep -v "^#" | \
sed -n "/[0-9]\+[ \t]\+\(common\)/p" | \
awk '{ print $3","$1 }' | \
sort
}

#
# Dump the sh library syscall table
#
# Dump the library's syscall table to stdout.
#
function dump_lib_sh() {
dump_lib_arch sh | mangle_lib_syscall sh
}

#
# Dump the system syscall table
#
Expand Down Expand Up @@ -623,6 +648,9 @@ function dump_sys() {
s390x)
dump_sys_s390x "$2"
;;
sh)
dump_sys_sh "$2"
;;
*)
echo ""
return 1
Expand Down Expand Up @@ -687,6 +715,9 @@ function dump_lib() {
s390x)
dump_lib_s390x
;;
sh)
dump_lib_sh
;;
*)
echo ""
return 1
Expand Down Expand Up @@ -722,6 +753,7 @@ function gen_csv() {
abi_list+=" ppc ppc64"
abi_list+=" riscv64"
abi_list+=" s390 s390x"
abi_list+=" sh"

# get the full syscall list
for abi in $abi_list; do
Expand Down Expand Up @@ -809,7 +841,8 @@ if [[ $opt_arches == "" ]]; then
mips mips64 mips64n32 \
parisc parisc64 \
ppc ppc64 \
s390 s390x"
s390 s390x \
sh"
fi

# sanity checks
Expand Down
15 changes: 15 additions & 0 deletions src/arch.c
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,7 @@
#include "arch-riscv64.h"
#include "arch-s390.h"
#include "arch-s390x.h"
#include "arch-sh.h"
#include "db.h"
#include "system.h"

Expand Down Expand Up @@ -98,6 +99,12 @@ const struct arch_def *arch_def_native = &arch_def_s390x;
const struct arch_def *arch_def_native = &arch_def_s390;
#elif __riscv && __riscv_xlen == 64
const struct arch_def *arch_def_native = &arch_def_riscv64;
#elif __sh__
#ifdef __BIG_ENDIAN__
const struct arch_def *arch_def_native = &arch_def_sheb;
#else
const struct arch_def *arch_def_native = &arch_def_sh;
#endif
#else
#error the arch code needs to know about your machine type
#endif /* machine type guess */
Expand Down Expand Up @@ -162,6 +169,10 @@ const struct arch_def *arch_def_lookup(uint32_t token)
return &arch_def_s390x;
case SCMP_ARCH_RISCV64:
return &arch_def_riscv64;
case SCMP_ARCH_SHEB:
return &arch_def_sheb;
case SCMP_ARCH_SH:
return &arch_def_sh;
}

return NULL;
Expand Down Expand Up @@ -214,6 +225,10 @@ const struct arch_def *arch_def_lookup_name(const char *arch_name)
return &arch_def_s390x;
else if (strcmp(arch_name, "riscv64") == 0)
return &arch_def_riscv64;
else if (strcmp(arch_name, "sheb") == 0)
return &arch_def_sheb;
else if (strcmp(arch_name, "sh") == 0)
return &arch_def_sh;

return NULL;
}
Expand Down
4 changes: 4 additions & 0 deletions src/gen_pfc.c
Original file line number Diff line number Diff line change
Expand Up @@ -89,6 +89,10 @@ static const char *_pfc_arch(const struct arch_def *arch)
return "s390";
case SCMP_ARCH_RISCV64:
return "riscv64";
case SCMP_ARCH_SHEB:
return "sheb";
case SCMP_ARCH_SH:
return "sh";
default:
return "UNKNOWN";
}
Expand Down
1 change: 1 addition & 0 deletions src/syscalls.c
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,7 @@ ARCH_DEF(ppc64)
ARCH_DEF(ppc)
ARCH_DEF(s390)
ARCH_DEF(s390x)
ARCH_DEF(sh)
ARCH_DEF(x32)
ARCH_DEF(x86)
ARCH_DEF(riscv64)
2 changes: 2 additions & 0 deletions src/syscalls.h
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,7 @@
#include "arch-ppc.h"
#include "arch-s390.h"
#include "arch-s390x.h"
#include "arch-sh.h"
#include "arch-x32.h"
#include "arch-x86_64.h"
#include "arch-x86.h"
Expand Down Expand Up @@ -51,6 +52,7 @@ struct arch_syscall_table {
int riscv64;
int s390;
int s390x;
int sh;
};
#define OFFSET_ARCH(NAME) offsetof(struct arch_syscall_table, NAME)

Expand Down
3 changes: 3 additions & 0 deletions tests/16-sim-arch_basic.c
Original file line number Diff line number Diff line change
Expand Up @@ -93,6 +93,9 @@ int main(int argc, char *argv[])
if (rc != 0)
goto out;
rc = seccomp_arch_add(ctx, SCMP_ARCH_RISCV64);
if (rc != 0)
goto out;
rc = seccomp_arch_add(ctx, SCMP_ARCH_SH);
if (rc != 0)
goto out;

Expand Down
1 change: 1 addition & 0 deletions tests/16-sim-arch_basic.py
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,7 @@ def test(args):
f.add_arch(Arch("mipsel64n32"))
f.add_arch(Arch("ppc64le"))
f.add_arch(Arch("riscv64"))
f.add_arch(Arch("sh"))
f.add_rule(ALLOW, "read", Arg(0, EQ, sys.stdin.fileno()))
f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stdout.fileno()))
f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stderr.fileno()))
Expand Down
3 changes: 3 additions & 0 deletions tests/23-sim-arch_all_le_basic.c
Original file line number Diff line number Diff line change
Expand Up @@ -72,6 +72,9 @@ int main(int argc, char *argv[])
if (rc != 0)
goto out;
rc = seccomp_arch_add(ctx, seccomp_arch_resolve_name("riscv64"));
if (rc != 0)
goto out;
rc = seccomp_arch_add(ctx, seccomp_arch_resolve_name("sh"));
if (rc != 0)
goto out;

Expand Down
1 change: 1 addition & 0 deletions tests/23-sim-arch_all_le_basic.py
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,7 @@ def test(args):
f.add_arch(Arch("mipsel64n32"))
f.add_arch(Arch("ppc64le"))
f.add_arch(Arch("riscv64"))
f.add_arch(Arch("sh"))
f.add_rule(ALLOW, "read", Arg(0, EQ, sys.stdin.fileno()))
f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stdout.fileno()))
f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stderr.fileno()))
Expand Down
3 changes: 3 additions & 0 deletions tests/26-sim-arch_all_be_basic.c
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,9 @@ int main(int argc, char *argv[])
if (rc != 0)
goto out;
rc = seccomp_arch_add(ctx, seccomp_arch_resolve_name("s390x"));
if (rc != 0)
goto out;
rc = seccomp_arch_add(ctx, seccomp_arch_resolve_name("sheb"));
if (rc != 0)
goto out;

Expand Down
1 change: 1 addition & 0 deletions tests/26-sim-arch_all_be_basic.py
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,7 @@ def test(args):
f.add_arch(Arch("ppc64"))
f.add_arch(Arch("s390"))
f.add_arch(Arch("s390x"))
f.add_arch(Arch("sheb"))
f.add_rule(ALLOW, "read", Arg(0, EQ, sys.stdin.fileno()))
f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stdout.fileno()))
f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stderr.fileno()))
Expand Down
Loading

1 comment on commit c12945d

@Schtiev
Copy link

@Schtiev Schtiev commented on c12945d May 3, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IMG_20210502_225438

Please sign in to comment.