When copy_thread is given a kernel function to run in arg->fn, this does
not necessarily mean it is a kernel thread. User threads can be created
this way (e.g., kernel_init, see also x86's copy_thread). These user
threads run a kernel function which may kernel_execve and return, which
then returns like a userspace exec syscall. Kernel threads can be
differentiated by PF_KTHREAD, will always have arg->fn set, and should
never return from that function, but call kthread_exit() to exit.

Create separate paths for the kthread and user kernel thread creation
logic. The kthread path will never exit and does not require a user
interrupt frame, so it gets a minimal stack frame.

Signed-off-by: Nicholas Piggin <npig...@gmail.com>
---
 arch/powerpc/kernel/process.c | 99 +++++++++++++++++++++--------------
 1 file changed, 61 insertions(+), 38 deletions(-)

diff --git a/arch/powerpc/kernel/process.c b/arch/powerpc/kernel/process.c
index 6cea224b7e60..82aad157c5f6 100644
--- a/arch/powerpc/kernel/process.c
+++ b/arch/powerpc/kernel/process.c
@@ -1739,10 +1739,7 @@ static void setup_ksp_vsid(struct task_struct *p, 
unsigned long sp)
  */
 int copy_thread(struct task_struct *p, const struct kernel_clone_args *args)
 {
-       unsigned long clone_flags = args->flags;
-       unsigned long usp = args->stack;
-       unsigned long tls = args->tls;
-       struct pt_regs *childregs, *kregs;
+       struct pt_regs *kregs; /* Switch frame regs */
        extern void ret_from_fork(void);
        extern void ret_from_fork_scv(void);
        extern void ret_from_kernel_thread(void);
@@ -1755,49 +1752,77 @@ int copy_thread(struct task_struct *p, const struct 
kernel_clone_args *args)
 
        klp_init_thread_info(p);
 
-       /* Create initial stack frame. */
-       sp -= STACK_USER_INT_FRAME_SIZE;
-       *(unsigned long *)(sp + STACK_INT_FRAME_MARKER) = 
STACK_FRAME_REGS_MARKER;
-
-       /* Copy registers */
-       childregs = (struct pt_regs *)(sp + STACK_INT_FRAME_REGS);
-       if (unlikely(args->fn)) {
+       if (unlikely(p->flags & PF_KTHREAD)) {
                /* kernel thread */
+
+               /* Create initial minimum stack frame. */
+               sp -= STACK_FRAME_MIN_SIZE;
                ((unsigned long *)sp)[0] = 0;
-               memset(childregs, 0, sizeof(struct pt_regs));
-               childregs->gpr[1] = sp + STACK_USER_INT_FRAME_SIZE;
-               /* function */
-               if (args->fn)
-                       childregs->gpr[14] = ppc_function_entry((void 
*)args->fn);
+
+               f = ret_from_kernel_thread;
+               p->thread.regs = NULL;  /* no user register state */
 #ifdef CONFIG_PPC64
                clear_tsk_thread_flag(p, TIF_32BIT);
-               childregs->softe = IRQS_ENABLED;
 #endif
-               childregs->gpr[15] = (unsigned long)args->fn_arg;
-               p->thread.regs = NULL;  /* no user register state */
-               ti->flags |= _TIF_RESTOREALL;
-               f = ret_from_kernel_thread;
        } else {
                /* user thread */
-               struct pt_regs *regs = current_pt_regs();
-               *childregs = *regs;
-               if (usp)
-                       childregs->gpr[1] = usp;
-               ((unsigned long *)sp)[0] = childregs->gpr[1];
-               p->thread.regs = childregs;
-               if (clone_flags & CLONE_SETTLS) {
-                       if (!is_32bit_task())
-                               childregs->gpr[13] = tls;
+               struct pt_regs *childregs;
+
+               /* Create initial user return stack frame. */
+               sp -= STACK_USER_INT_FRAME_SIZE;
+               *(unsigned long *)(sp + STACK_INT_FRAME_MARKER) = 
STACK_FRAME_REGS_MARKER;
+
+               childregs = (struct pt_regs *)(sp + STACK_INT_FRAME_REGS);
+
+               if (unlikely(args->fn)) {
+                       /*
+                        * A user space thread, but it first runs a kernel
+                        * thread, and then returns as though it had called
+                        * execve rather than fork.
+                        */
+                       ((unsigned long *)sp)[0] = 0;
+                       memset(childregs, 0, sizeof(struct pt_regs));
+#ifdef CONFIG_PPC64
+                       childregs->softe = IRQS_ENABLED;
+#endif
+                       ti->flags |= _TIF_RESTOREALL;
+                       f = ret_from_kernel_thread;
+               } else {
+                       struct pt_regs *regs = current_pt_regs();
+                       unsigned long clone_flags = args->flags;
+                       unsigned long usp = args->stack;
+
+                       /* Copy registers */
+                       *childregs = *regs;
+                       if (usp)
+                               childregs->gpr[1] = usp;
+                       ((unsigned long *)sp)[0] = childregs->gpr[1];
+#ifdef CONFIG_PPC_IRQ_SOFT_MASK_DEBUG
+                       WARN_ON_ONCE(childregs->softe != IRQS_ENABLED);
+#endif
+                       if (clone_flags & CLONE_SETTLS) {
+                               unsigned long tls = args->tls;
+
+                               if (!is_32bit_task())
+                                       childregs->gpr[13] = tls;
+                               else
+                                       childregs->gpr[2] = tls;
+                       }
+
+                       if (trap_is_scv(regs))
+                               f = ret_from_fork_scv;
                        else
-                               childregs->gpr[2] = tls;
+                               f = ret_from_fork;
                }
 
-               if (trap_is_scv(regs))
-                       f = ret_from_fork_scv;
-               else
-                       f = ret_from_fork;
+#ifdef CONFIG_PPC64
+               if (cpu_has_feature(CPU_FTR_HAS_PPR))
+                       childregs->ppr = DEFAULT_PPR;
+#endif
+
+               childregs->msr &= ~(MSR_FP|MSR_VEC|MSR_VSX);
+               p->thread.regs = childregs;
        }
-       childregs->msr &= ~(MSR_FP|MSR_VEC|MSR_VSX);
 
        /*
         * The way this works is that at some point in the future
@@ -1848,8 +1873,6 @@ int copy_thread(struct task_struct *p, const struct 
kernel_clone_args *args)
                p->thread.dscr_inherit = current->thread.dscr_inherit;
                p->thread.dscr = mfspr(SPRN_DSCR);
        }
-       if (cpu_has_feature(CPU_FTR_HAS_PPR))
-               childregs->ppr = DEFAULT_PPR;
 
        p->thread.tidr = 0;
 #endif
-- 
2.37.2

Reply via email to