Loading...
1// SPDX-License-Identifier: GPL-2.0-or-later
2/* 32-bit compatibility syscall for 64-bit systems
3 *
4 * Copyright (C) 2004-5 Red Hat, Inc. All Rights Reserved.
5 * Written by David Howells (dhowells@redhat.com)
6 */
7
8#include <linux/syscalls.h>
9#include <linux/keyctl.h>
10#include <linux/compat.h>
11#include <linux/slab.h>
12#include "internal.h"
13
14/*
15 * The key control system call, 32-bit compatibility version for 64-bit archs
16 */
17COMPAT_SYSCALL_DEFINE5(keyctl, u32, option,
18 u32, arg2, u32, arg3, u32, arg4, u32, arg5)
19{
20 switch (option) {
21 case KEYCTL_GET_KEYRING_ID:
22 return keyctl_get_keyring_ID(arg2, arg3);
23
24 case KEYCTL_JOIN_SESSION_KEYRING:
25 return keyctl_join_session_keyring(compat_ptr(arg2));
26
27 case KEYCTL_UPDATE:
28 return keyctl_update_key(arg2, compat_ptr(arg3), arg4);
29
30 case KEYCTL_REVOKE:
31 return keyctl_revoke_key(arg2);
32
33 case KEYCTL_DESCRIBE:
34 return keyctl_describe_key(arg2, compat_ptr(arg3), arg4);
35
36 case KEYCTL_CLEAR:
37 return keyctl_keyring_clear(arg2);
38
39 case KEYCTL_LINK:
40 return keyctl_keyring_link(arg2, arg3);
41
42 case KEYCTL_UNLINK:
43 return keyctl_keyring_unlink(arg2, arg3);
44
45 case KEYCTL_SEARCH:
46 return keyctl_keyring_search(arg2, compat_ptr(arg3),
47 compat_ptr(arg4), arg5);
48
49 case KEYCTL_READ:
50 return keyctl_read_key(arg2, compat_ptr(arg3), arg4);
51
52 case KEYCTL_CHOWN:
53 return keyctl_chown_key(arg2, arg3, arg4);
54
55 case KEYCTL_SETPERM:
56 return keyctl_setperm_key(arg2, arg3);
57
58 case KEYCTL_INSTANTIATE:
59 return keyctl_instantiate_key(arg2, compat_ptr(arg3), arg4,
60 arg5);
61
62 case KEYCTL_NEGATE:
63 return keyctl_negate_key(arg2, arg3, arg4);
64
65 case KEYCTL_SET_REQKEY_KEYRING:
66 return keyctl_set_reqkey_keyring(arg2);
67
68 case KEYCTL_SET_TIMEOUT:
69 return keyctl_set_timeout(arg2, arg3);
70
71 case KEYCTL_ASSUME_AUTHORITY:
72 return keyctl_assume_authority(arg2);
73
74 case KEYCTL_GET_SECURITY:
75 return keyctl_get_security(arg2, compat_ptr(arg3), arg4);
76
77 case KEYCTL_SESSION_TO_PARENT:
78 return keyctl_session_to_parent();
79
80 case KEYCTL_REJECT:
81 return keyctl_reject_key(arg2, arg3, arg4, arg5);
82
83 case KEYCTL_INSTANTIATE_IOV:
84 return keyctl_instantiate_key_iov(arg2, compat_ptr(arg3), arg4,
85 arg5);
86
87 case KEYCTL_INVALIDATE:
88 return keyctl_invalidate_key(arg2);
89
90 case KEYCTL_GET_PERSISTENT:
91 return keyctl_get_persistent(arg2, arg3);
92
93 case KEYCTL_DH_COMPUTE:
94 return compat_keyctl_dh_compute(compat_ptr(arg2),
95 compat_ptr(arg3),
96 arg4, compat_ptr(arg5));
97
98 case KEYCTL_RESTRICT_KEYRING:
99 return keyctl_restrict_keyring(arg2, compat_ptr(arg3),
100 compat_ptr(arg4));
101
102 case KEYCTL_PKEY_QUERY:
103 if (arg3 != 0)
104 return -EINVAL;
105 return keyctl_pkey_query(arg2,
106 compat_ptr(arg4),
107 compat_ptr(arg5));
108
109 case KEYCTL_PKEY_ENCRYPT:
110 case KEYCTL_PKEY_DECRYPT:
111 case KEYCTL_PKEY_SIGN:
112 return keyctl_pkey_e_d_s(option,
113 compat_ptr(arg2), compat_ptr(arg3),
114 compat_ptr(arg4), compat_ptr(arg5));
115
116 case KEYCTL_PKEY_VERIFY:
117 return keyctl_pkey_verify(compat_ptr(arg2), compat_ptr(arg3),
118 compat_ptr(arg4), compat_ptr(arg5));
119
120 case KEYCTL_MOVE:
121 return keyctl_keyring_move(arg2, arg3, arg4, arg5);
122
123 case KEYCTL_CAPABILITIES:
124 return keyctl_capabilities(compat_ptr(arg2), arg3);
125
126 case KEYCTL_WATCH_KEY:
127 return keyctl_watch_key(arg2, arg3, arg4);
128
129 default:
130 return -EOPNOTSUPP;
131 }
132}
1// SPDX-License-Identifier: GPL-2.0-or-later
2/* 32-bit compatibility syscall for 64-bit systems
3 *
4 * Copyright (C) 2004-5 Red Hat, Inc. All Rights Reserved.
5 * Written by David Howells (dhowells@redhat.com)
6 */
7
8#include <linux/syscalls.h>
9#include <linux/keyctl.h>
10#include <linux/compat.h>
11#include <linux/slab.h>
12#include "internal.h"
13
14/*
15 * Instantiate a key with the specified compatibility multipart payload and
16 * link the key into the destination keyring if one is given.
17 *
18 * The caller must have the appropriate instantiation permit set for this to
19 * work (see keyctl_assume_authority). No other permissions are required.
20 *
21 * If successful, 0 will be returned.
22 */
23static long compat_keyctl_instantiate_key_iov(
24 key_serial_t id,
25 const struct compat_iovec __user *_payload_iov,
26 unsigned ioc,
27 key_serial_t ringid)
28{
29 struct iovec iovstack[UIO_FASTIOV], *iov = iovstack;
30 struct iov_iter from;
31 long ret;
32
33 if (!_payload_iov)
34 ioc = 0;
35
36 ret = compat_import_iovec(WRITE, _payload_iov, ioc,
37 ARRAY_SIZE(iovstack), &iov,
38 &from);
39 if (ret < 0)
40 return ret;
41
42 ret = keyctl_instantiate_key_common(id, &from, ringid);
43 kfree(iov);
44 return ret;
45}
46
47/*
48 * The key control system call, 32-bit compatibility version for 64-bit archs
49 *
50 * This should only be called if the 64-bit arch uses weird pointers in 32-bit
51 * mode or doesn't guarantee that the top 32-bits of the argument registers on
52 * taking a 32-bit syscall are zero. If you can, you should call sys_keyctl()
53 * directly.
54 */
55COMPAT_SYSCALL_DEFINE5(keyctl, u32, option,
56 u32, arg2, u32, arg3, u32, arg4, u32, arg5)
57{
58 switch (option) {
59 case KEYCTL_GET_KEYRING_ID:
60 return keyctl_get_keyring_ID(arg2, arg3);
61
62 case KEYCTL_JOIN_SESSION_KEYRING:
63 return keyctl_join_session_keyring(compat_ptr(arg2));
64
65 case KEYCTL_UPDATE:
66 return keyctl_update_key(arg2, compat_ptr(arg3), arg4);
67
68 case KEYCTL_REVOKE:
69 return keyctl_revoke_key(arg2);
70
71 case KEYCTL_DESCRIBE:
72 return keyctl_describe_key(arg2, compat_ptr(arg3), arg4);
73
74 case KEYCTL_CLEAR:
75 return keyctl_keyring_clear(arg2);
76
77 case KEYCTL_LINK:
78 return keyctl_keyring_link(arg2, arg3);
79
80 case KEYCTL_UNLINK:
81 return keyctl_keyring_unlink(arg2, arg3);
82
83 case KEYCTL_SEARCH:
84 return keyctl_keyring_search(arg2, compat_ptr(arg3),
85 compat_ptr(arg4), arg5);
86
87 case KEYCTL_READ:
88 return keyctl_read_key(arg2, compat_ptr(arg3), arg4);
89
90 case KEYCTL_CHOWN:
91 return keyctl_chown_key(arg2, arg3, arg4);
92
93 case KEYCTL_SETPERM:
94 return keyctl_setperm_key(arg2, arg3);
95
96 case KEYCTL_INSTANTIATE:
97 return keyctl_instantiate_key(arg2, compat_ptr(arg3), arg4,
98 arg5);
99
100 case KEYCTL_NEGATE:
101 return keyctl_negate_key(arg2, arg3, arg4);
102
103 case KEYCTL_SET_REQKEY_KEYRING:
104 return keyctl_set_reqkey_keyring(arg2);
105
106 case KEYCTL_SET_TIMEOUT:
107 return keyctl_set_timeout(arg2, arg3);
108
109 case KEYCTL_ASSUME_AUTHORITY:
110 return keyctl_assume_authority(arg2);
111
112 case KEYCTL_GET_SECURITY:
113 return keyctl_get_security(arg2, compat_ptr(arg3), arg4);
114
115 case KEYCTL_SESSION_TO_PARENT:
116 return keyctl_session_to_parent();
117
118 case KEYCTL_REJECT:
119 return keyctl_reject_key(arg2, arg3, arg4, arg5);
120
121 case KEYCTL_INSTANTIATE_IOV:
122 return compat_keyctl_instantiate_key_iov(
123 arg2, compat_ptr(arg3), arg4, arg5);
124
125 case KEYCTL_INVALIDATE:
126 return keyctl_invalidate_key(arg2);
127
128 case KEYCTL_GET_PERSISTENT:
129 return keyctl_get_persistent(arg2, arg3);
130
131 case KEYCTL_DH_COMPUTE:
132 return compat_keyctl_dh_compute(compat_ptr(arg2),
133 compat_ptr(arg3),
134 arg4, compat_ptr(arg5));
135
136 case KEYCTL_RESTRICT_KEYRING:
137 return keyctl_restrict_keyring(arg2, compat_ptr(arg3),
138 compat_ptr(arg4));
139
140 case KEYCTL_PKEY_QUERY:
141 if (arg3 != 0)
142 return -EINVAL;
143 return keyctl_pkey_query(arg2,
144 compat_ptr(arg4),
145 compat_ptr(arg5));
146
147 case KEYCTL_PKEY_ENCRYPT:
148 case KEYCTL_PKEY_DECRYPT:
149 case KEYCTL_PKEY_SIGN:
150 return keyctl_pkey_e_d_s(option,
151 compat_ptr(arg2), compat_ptr(arg3),
152 compat_ptr(arg4), compat_ptr(arg5));
153
154 case KEYCTL_PKEY_VERIFY:
155 return keyctl_pkey_verify(compat_ptr(arg2), compat_ptr(arg3),
156 compat_ptr(arg4), compat_ptr(arg5));
157
158 case KEYCTL_MOVE:
159 return keyctl_keyring_move(arg2, arg3, arg4, arg5);
160
161 case KEYCTL_CAPABILITIES:
162 return keyctl_capabilities(compat_ptr(arg2), arg3);
163
164 default:
165 return -EOPNOTSUPP;
166 }
167}