2 * This contains the io-permission bitmap code - written by obz, with changes
6 #include <linux/sched.h>
7 #include <linux/kernel.h>
8 #include <linux/capability.h>
9 #include <linux/errno.h>
10 #include <linux/types.h>
11 #include <linux/ioport.h>
12 #include <linux/smp.h>
13 #include <linux/stddef.h>
14 #include <linux/slab.h>
15 #include <linux/thread_info.h>
16 #include <linux/syscalls.h>
18 /* Set EXTENT bits starting at BASE in BITMAP to value TURN_ON. */
19 static void set_bitmap(unsigned long *bitmap, unsigned int base, unsigned int extent, int new_value)
23 for (i = base; i < base + extent; i++)
26 for (i = base; i < base + extent; i++)
31 * this changes the io permissions bitmap in the current task.
33 asmlinkage long sys_ioperm(unsigned long from, unsigned long num, int turn_on)
35 unsigned int i, max_long, bytes, bytes_updated;
36 struct thread_struct * t = ¤t->thread;
37 struct tss_struct * tss;
38 unsigned long *bitmap;
40 if ((from + num <= from) || (from + num > IO_BITMAP_BITS))
42 if (turn_on && !capable(CAP_SYS_RAWIO))
46 * If it's the first ioperm() call in this thread's lifetime, set the
47 * IO bitmap up. ioperm() is much less timing critical than clone(),
48 * this is why we delay this operation until now:
50 if (!t->io_bitmap_ptr) {
51 bitmap = kmalloc(IO_BITMAP_BYTES, GFP_KERNEL);
55 memset(bitmap, 0xff, IO_BITMAP_BYTES);
56 t->io_bitmap_ptr = bitmap;
57 set_thread_flag(TIF_IO_BITMAP);
61 * do it in the per-thread copy and in the TSS ...
63 * Disable preemption via get_cpu() - we must not switch away
64 * because the ->io_bitmap_max value must match the bitmap
67 tss = &per_cpu(init_tss, get_cpu());
69 set_bitmap(t->io_bitmap_ptr, from, num, !turn_on);
72 * Search for a (possibly new) maximum. This is simple and stupid,
73 * to keep it obviously correct:
76 for (i = 0; i < IO_BITMAP_LONGS; i++)
77 if (t->io_bitmap_ptr[i] != ~0UL)
80 bytes = (max_long + 1) * sizeof(long);
81 bytes_updated = max(bytes, t->io_bitmap_max);
83 t->io_bitmap_max = bytes;
86 memcpy(tss->io_bitmap, t->io_bitmap_ptr, bytes_updated);
94 * sys_iopl has to be used when you want to access the IO ports
95 * beyond the 0x3ff range: to get the full 65536 ports bitmapped
96 * you'd need 8kB of bitmaps/process, which is a bit excessive.
98 * Here we just change the eflags value on the stack: we allow
99 * only the super-user to do it. This depends on the stack-layout
100 * on system-call entry - see also fork() and the signal handling
104 asmlinkage long sys_iopl(unsigned int level, struct pt_regs *regs)
106 unsigned int old = (regs->eflags >> 12) & 3;
110 /* Trying to gain more privileges? */
112 if (!capable(CAP_SYS_RAWIO))
115 regs->eflags = (regs->eflags &~ X86_EFLAGS_IOPL) | (level << 12);