mirror of
https://github.com/LadybirdBrowser/ladybird.git
synced 2024-09-21 10:19:03 +03:00
e87eac9273
This achieves two things: - Programs can now intentionally perform arbitrary syscalls by calling syscall(). This allows us to work on things like syscall fuzzing. - It restricts the ability of userspace to make syscalls to a single 4KB page of code. In order to call the kernel directly, an attacker must now locate this page and call through it.
136 lines
4.4 KiB
C
136 lines
4.4 KiB
C
/*
|
|
* Copyright (c) 2018-2021, Andreas Kling <kling@serenityos.org>
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright notice, this
|
|
* list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright notice,
|
|
* this list of conditions and the following disclaimer in the documentation
|
|
* and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
|
* DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
|
* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
|
|
* CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
|
* OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
|
* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <stdio.h>
|
|
#include <sys/types.h>
|
|
#include <unistd.h>
|
|
|
|
__BEGIN_DECLS
|
|
|
|
int disown(pid_t);
|
|
|
|
int module_load(const char* path, size_t path_length);
|
|
int module_unload(const char* name, size_t name_length);
|
|
|
|
int profiling_enable(pid_t);
|
|
int profiling_disable(pid_t);
|
|
|
|
#define THREAD_PRIORITY_MIN 1
|
|
#define THREAD_PRIORITY_LOW 10
|
|
#define THREAD_PRIORITY_NORMAL 30
|
|
#define THREAD_PRIORITY_HIGH 50
|
|
#define THREAD_PRIORITY_MAX 99
|
|
|
|
#define _FUTEX_OP_SHIFT_OP 28
|
|
#define _FUTEX_OP_MASK_OP 0xf
|
|
#define _FUTEX_OP_SHIFT_CMP 24
|
|
#define _FUTEX_OP_MASK_CMP 0xf
|
|
#define _FUTEX_OP_SHIFT_OP_ARG 12
|
|
#define _FUTEX_OP_MASK_OP_ARG 0xfff
|
|
#define _FUTEX_OP_SHIFT_CMP_ARG 0
|
|
#define _FUTEX_OP_MASK_CMP_ARG 0xfff
|
|
|
|
#define FUTEX_OP(op, op_arg, cmp, cmp_arg) \
|
|
((((op)&_FUTEX_OP_MASK_OP) << _FUTEX_OP_SHIFT_OP) | (((cmp)&_FUTEX_OP_MASK_CMP) << _FUTEX_OP_SHIFT_CMP) | (((op_arg)&_FUTEX_OP_MASK_OP_ARG) << _FUTEX_OP_SHIFT_OP_ARG) | (((cmp_arg)&_FUTEX_OP_MASK_CMP_ARG) << _FUTEX_OP_SHIFT_CMP_ARG))
|
|
|
|
#define FUTEX_OP_SET 0
|
|
#define FUTEX_OP_ADD 1
|
|
#define FUTEX_OP_OR 2
|
|
#define FUTEX_OP_ANDN 3
|
|
#define FUTEX_OP_XOR 4
|
|
#define FUTEX_OP_ARG_SHIFT 8
|
|
|
|
#define FUTEX_OP_CMP_EQ 0
|
|
#define FUTEX_OP_CMP_NE 1
|
|
#define FUTEX_OP_CMP_LT 2
|
|
#define FUTEX_OP_CMP_LE 3
|
|
#define FUTEX_OP_CMP_GT 4
|
|
#define FUTEX_OP_CMP_GE 5
|
|
|
|
#define FUTEX_WAIT 1
|
|
#define FUTEX_WAKE 2
|
|
|
|
#define FUTEX_REQUEUE 3
|
|
#define FUTEX_CMP_REQUEUE 4
|
|
#define FUTEX_WAKE_OP 5
|
|
#define FUTEX_WAIT_BITSET 9
|
|
#define FUTEX_WAKE_BITSET 10
|
|
|
|
#define FUTEX_PRIVATE_FLAG (1 << 7)
|
|
#define FUTEX_CLOCK_REALTIME (1 << 8)
|
|
#define FUTEX_CMD_MASK ~(FUTEX_PRIVATE_FLAG | FUTEX_CLOCK_REALTIME)
|
|
|
|
#define FUTEX_BITSET_MATCH_ANY 0xffffffff
|
|
|
|
int futex(uint32_t* userspace_address, int futex_op, uint32_t value, const struct timespec* timeout, uint32_t* userspace_address2, uint32_t value3);
|
|
|
|
#define PURGE_ALL_VOLATILE 0x1
|
|
#define PURGE_ALL_CLEAN_INODE 0x2
|
|
|
|
int purge(int mode);
|
|
|
|
#define PERF_EVENT_SAMPLE 0
|
|
#define PERF_EVENT_MALLOC 1
|
|
#define PERF_EVENT_FREE 2
|
|
|
|
int perf_event(int type, uintptr_t arg1, uintptr_t arg2);
|
|
|
|
int get_stack_bounds(uintptr_t* user_stack_base, size_t* user_stack_size);
|
|
|
|
int anon_create(size_t size, int options);
|
|
|
|
int serenity_readlink(const char* path, size_t path_length, char* buffer, size_t buffer_size);
|
|
|
|
int getkeymap(char* name_buffer, size_t name_buffer_size, uint32_t* map, uint32_t* shift_map, uint32_t* alt_map, uint32_t* altgr_map, uint32_t* shift_altgr_map);
|
|
int setkeymap(const char* name, const uint32_t* map, uint32_t* const shift_map, const uint32_t* alt_map, const uint32_t* altgr_map, const uint32_t* shift_altgr_map);
|
|
|
|
#ifdef __i386__
|
|
ALWAYS_INLINE void send_secret_data_to_userspace_emulator(uintptr_t data1, uintptr_t data2, uintptr_t data3)
|
|
{
|
|
asm volatile(
|
|
".byte 0xd6\n"
|
|
".byte 0xd6\n" ::
|
|
: "eax");
|
|
asm volatile(
|
|
"push %%eax\n"
|
|
"push %%ecx\n"
|
|
"push %%edx\n"
|
|
"pop %%edx\n"
|
|
"pop %%ecx\n"
|
|
"pop %%eax\n" ::"a"(data1),
|
|
"c"(data2), "d"(data3)
|
|
: "memory");
|
|
}
|
|
#elif __x86_64__
|
|
ALWAYS_INLINE void send_secret_data_to_userspace_emulator(uintptr_t, uintptr_t, uintptr_t)
|
|
{
|
|
}
|
|
#endif
|
|
|
|
__END_DECLS
|