167 lines
7.3 KiB
Diff
167 lines
7.3 KiB
Diff
From 6a43e037faab2f3d084fce8b16d864f18b033a48 Mon Sep 17 00:00:00 2001
|
|
From: liqiang <liqiang64@huawei.com>
|
|
Date: Mon, 17 Jun 2024 11:18:43 +0800
|
|
Subject: [PATCH] refactor syscall wrapper for aarch64, reduce the memory range
|
|
to o be writable
|
|
|
|
Signed-off-by: liqiang <liqiang64@huawei.com>
|
|
---
|
|
qtfs/include/symbol_wrapper.h | 14 ++++++++++++--
|
|
qtfs/qtfs/syscall.c | 25 ++++++++++++-------------
|
|
qtfs/qtfs_common/symbol_wrapper.c | 18 ++++++------------
|
|
3 files changed, 30 insertions(+), 27 deletions(-)
|
|
|
|
diff --git a/qtfs/include/symbol_wrapper.h b/qtfs/include/symbol_wrapper.h
|
|
index cef2cd9..4ce500f 100644
|
|
--- a/qtfs/include/symbol_wrapper.h
|
|
+++ b/qtfs/include/symbol_wrapper.h
|
|
@@ -72,8 +72,18 @@ static inline int make_ro(unsigned long address)
|
|
|
|
#ifdef __aarch64__
|
|
extern void (*update_mapping_prot)(phys_addr_t phys, unsigned long virt, phys_addr_t size, pgprot_t prot);
|
|
-extern unsigned long start_rodata, end_rodata;
|
|
-#define section_size (end_rodata - start_rodata)
|
|
+static inline int make_rw(unsigned long address)
|
|
+{
|
|
+ update_mapping_prot(__pa_symbol(address & PAGE_MASK), (unsigned long)(address & PAGE_MASK), PAGE_SIZE, PAGE_KERNEL);
|
|
+ return 0;
|
|
+}
|
|
+
|
|
+static inline int make_ro(unsigned long address)
|
|
+{
|
|
+ update_mapping_prot(__pa_symbol(address & PAGE_MASK), (unsigned long)(address & PAGE_MASK), PAGE_SIZE, PAGE_KERNEL_RO);
|
|
+ return 0;
|
|
+}
|
|
+
|
|
#endif
|
|
|
|
int qtfs_syscall_replace_start(void);
|
|
diff --git a/qtfs/qtfs/syscall.c b/qtfs/qtfs/syscall.c
|
|
index a02a225..7b139a4 100644
|
|
--- a/qtfs/qtfs/syscall.c
|
|
+++ b/qtfs/qtfs/syscall.c
|
|
@@ -441,22 +441,22 @@ int qtfs_syscall_init(void)
|
|
symbols_origin[SYMBOL_SYSCALL_MOUNT] = qtfs_kern_syms.sys_call_table[__NR_mount];
|
|
symbols_origin[SYMBOL_SYSCALL_UMOUNT] = qtfs_kern_syms.sys_call_table[__NR_umount2];
|
|
symbols_origin[SYMBOL_SYSCALL_EPOLL_CTL] = qtfs_kern_syms.sys_call_table[__NR_epoll_ctl];
|
|
-#ifdef __x86_64__
|
|
+
|
|
make_rw((unsigned long)qtfs_kern_syms.sys_call_table);
|
|
+ make_rw((unsigned long)qtfs_kern_syms.sys_call_table + PAGE_SIZE);
|
|
+#ifdef __x86_64__
|
|
qtfs_kern_syms.sys_call_table[__NR_mount] = (unsigned long *)__x64_sys_qtfs_mount;
|
|
qtfs_kern_syms.sys_call_table[__NR_umount2] = (unsigned long *)__x64_sys_qtfs_umount;
|
|
qtfs_kern_syms.sys_call_table[__NR_epoll_ctl] = (unsigned long *)__x64_sys_qtfs_epoll_ctl;
|
|
- make_ro((unsigned long)qtfs_kern_syms.sys_call_table);
|
|
#endif
|
|
#ifdef __aarch64__
|
|
- // disable write protection
|
|
- update_mapping_prot(__pa_symbol(start_rodata), (unsigned long)start_rodata, section_size, PAGE_KERNEL);
|
|
qtfs_kern_syms.sys_call_table[__NR_mount] = (unsigned long *)__arm64_sys_qtfs_mount;
|
|
qtfs_kern_syms.sys_call_table[__NR_umount2] = (unsigned long *)__arm64_sys_qtfs_umount;
|
|
qtfs_kern_syms.sys_call_table[__NR_epoll_ctl] = (unsigned long *)__arm64_sys_qtfs_epoll_ctl;
|
|
- // enable write protection
|
|
- update_mapping_prot(__pa_symbol(start_rodata), (unsigned long)start_rodata, section_size, PAGE_KERNEL_RO);
|
|
#endif
|
|
+ // enable write protection
|
|
+ make_ro((unsigned long)qtfs_kern_syms.sys_call_table);
|
|
+ make_ro((unsigned long)qtfs_kern_syms.sys_call_table + PAGE_SIZE);
|
|
qtfs_debug("qtfs use qtfs_mount instead of mount and umount\n");
|
|
qtfs_debug("qtfs use qtfs_epoll_ctl instead of epoll_ctl\n");
|
|
return 0;
|
|
@@ -464,23 +464,22 @@ int qtfs_syscall_init(void)
|
|
|
|
int qtfs_syscall_fini(void)
|
|
{
|
|
-#ifdef __x86_64__
|
|
make_rw((unsigned long)qtfs_kern_syms.sys_call_table);
|
|
+ make_rw((unsigned long)qtfs_kern_syms.sys_call_table + PAGE_SIZE);
|
|
+#ifdef __x86_64__
|
|
qtfs_kern_syms.sys_call_table[__NR_mount] = (unsigned long *)symbols_origin[SYMBOL_SYSCALL_MOUNT];
|
|
qtfs_kern_syms.sys_call_table[__NR_umount2] = (unsigned long *)symbols_origin[SYMBOL_SYSCALL_UMOUNT];
|
|
qtfs_kern_syms.sys_call_table[__NR_epoll_ctl] = (unsigned long *)symbols_origin[SYMBOL_SYSCALL_EPOLL_CTL];
|
|
- /*set mkdir syscall to the original one */
|
|
- make_ro((unsigned long)qtfs_kern_syms.sys_call_table);
|
|
#endif
|
|
#ifdef __aarch64__
|
|
- // disable write protection
|
|
- update_mapping_prot(__pa_symbol(start_rodata), (unsigned long)start_rodata, section_size, PAGE_KERNEL);
|
|
qtfs_kern_syms.sys_call_table[__NR_mount] = (unsigned long *)symbols_origin[SYMBOL_SYSCALL_MOUNT];
|
|
qtfs_kern_syms.sys_call_table[__NR_umount2] = (unsigned long *)symbols_origin[SYMBOL_SYSCALL_UMOUNT];
|
|
qtfs_kern_syms.sys_call_table[__NR_epoll_ctl] = (unsigned long *)symbols_origin[SYMBOL_SYSCALL_EPOLL_CTL];
|
|
- // enable write protection
|
|
- update_mapping_prot(__pa_symbol(start_rodata), (unsigned long)start_rodata, section_size, PAGE_KERNEL_RO);
|
|
#endif
|
|
+ // enable write protection
|
|
+ make_ro((unsigned long)qtfs_kern_syms.sys_call_table);
|
|
+ make_ro((unsigned long)qtfs_kern_syms.sys_call_table + PAGE_SIZE);
|
|
+
|
|
qtfs_info("qtfs mount umount and epoll_ctl resumed\n");
|
|
atomic_inc(&replace_available);
|
|
return 0;
|
|
diff --git a/qtfs/qtfs_common/symbol_wrapper.c b/qtfs/qtfs_common/symbol_wrapper.c
|
|
index 84c1bd5..5ceaf5f 100644
|
|
--- a/qtfs/qtfs_common/symbol_wrapper.c
|
|
+++ b/qtfs/qtfs_common/symbol_wrapper.c
|
|
@@ -55,7 +55,6 @@ struct pt_regs;
|
|
#endif
|
|
#ifdef __aarch64__
|
|
void (*update_mapping_prot)(phys_addr_t phys, unsigned long virt, phys_addr_t size, pgprot_t prot);
|
|
-unsigned long start_rodata, end_rodata;
|
|
|
|
// symbols not finded in sys call table
|
|
enum qtfs_sym_a64 {
|
|
@@ -132,9 +131,7 @@ int qtfs_kallsyms_hack_init(void)
|
|
|
|
#ifdef __aarch64__
|
|
update_mapping_prot = (void *)qtfs_kallsyms_lookup_name("update_mapping_prot");
|
|
- start_rodata = (unsigned long)qtfs_kallsyms_lookup_name("__start_rodata");
|
|
- end_rodata = (unsigned long)qtfs_kallsyms_lookup_name("__end_rodata");
|
|
- if (update_mapping_prot == NULL || (void *)start_rodata == NULL || (void *)end_rodata == NULL) {
|
|
+ if (update_mapping_prot == NULL) {
|
|
qtfs_err("failed to init memory protect handler");
|
|
return -1;
|
|
}
|
|
@@ -170,33 +167,30 @@ int qtfs_syscall_replace_start(void)
|
|
}
|
|
|
|
symbols_origin[SYMBOL_SYSCALL_CONNECT] = qtfs_kern_syms.sys_call_table[__NR_connect];
|
|
+ make_rw((unsigned long)&qtfs_kern_syms.sys_call_table[__NR_connect]);
|
|
#ifdef __x86_64__
|
|
- make_rw((unsigned long)qtfs_kern_syms.sys_call_table);
|
|
qtfs_kern_syms.sys_call_table[__NR_connect] = (unsigned long *)__x64_sys_qtfs_connect;
|
|
- make_ro((unsigned long)qtfs_kern_syms.sys_call_table);
|
|
#endif
|
|
|
|
#ifdef __aarch64__
|
|
- update_mapping_prot(__pa_symbol(start_rodata), (unsigned long)start_rodata, section_size, PAGE_KERNEL);
|
|
qtfs_kern_syms.sys_call_table[__NR_connect] = (unsigned long *)__arm64_sys_qtfs_connect;
|
|
- update_mapping_prot(__pa_symbol(start_rodata), (unsigned long)start_rodata, section_size, PAGE_KERNEL_RO);
|
|
#endif
|
|
+ make_ro((unsigned long)&qtfs_kern_syms.sys_call_table[__NR_connect]);
|
|
return 0;
|
|
}
|
|
|
|
void qtfs_syscall_replace_stop(void)
|
|
{
|
|
+ make_rw((unsigned long)&qtfs_kern_syms.sys_call_table[__NR_connect]);
|
|
#ifdef __x86_64__
|
|
- make_rw((unsigned long)qtfs_kern_syms.sys_call_table);
|
|
qtfs_kern_syms.sys_call_table[__NR_connect] = (void *)qtfs_kallsyms_lookup_name("__x64_sys_connect");
|
|
- make_ro((unsigned long)qtfs_kern_syms.sys_call_table);
|
|
#endif
|
|
|
|
#ifdef __aarch64__
|
|
- update_mapping_prot(__pa_symbol(start_rodata), (unsigned long)start_rodata, section_size, PAGE_KERNEL);
|
|
qtfs_kern_syms.sys_call_table[__NR_connect] = (void *)qtfs_kallsyms_lookup_name("__arm64_sys_connect");
|
|
- update_mapping_prot(__pa_symbol(start_rodata), (unsigned long)start_rodata, section_size, PAGE_KERNEL_RO);
|
|
#endif
|
|
+ make_ro((unsigned long)&qtfs_kern_syms.sys_call_table[__NR_connect]);
|
|
+
|
|
atomic_inc(&replace_available);
|
|
}
|
|
|
|
--
|
|
2.37.1 (Apple Git-137.1)
|
|
|