Dave Jones | 199a9af | 2006-09-29 01:59:00 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright 2006, Red Hat, Inc., Dave Jones |
| 3 | * Released under the General Public License (GPL). |
| 4 | * |
Kees Cook | d7c8167 | 2016-08-17 14:42:08 -0700 | [diff] [blame^] | 5 | * This file contains the linked list validation for DEBUG_LIST. |
Dave Jones | 199a9af | 2006-09-29 01:59:00 -0700 | [diff] [blame] | 6 | */ |
| 7 | |
Paul Gortmaker | 8bc3bcc | 2011-11-16 21:29:17 -0500 | [diff] [blame] | 8 | #include <linux/export.h> |
Dave Jones | 199a9af | 2006-09-29 01:59:00 -0700 | [diff] [blame] | 9 | #include <linux/list.h> |
Paul Gortmaker | 50af5ea | 2012-01-20 18:35:53 -0500 | [diff] [blame] | 10 | #include <linux/bug.h> |
Paul Gortmaker | b116ee4 | 2012-01-20 18:46:49 -0500 | [diff] [blame] | 11 | #include <linux/kernel.h> |
Dave Jones | 559f9ba | 2012-03-14 22:17:39 -0400 | [diff] [blame] | 12 | #include <linux/rculist.h> |
Dave Jones | 199a9af | 2006-09-29 01:59:00 -0700 | [diff] [blame] | 13 | |
| 14 | /* |
Kees Cook | d7c8167 | 2016-08-17 14:42:08 -0700 | [diff] [blame^] | 15 | * Check that the data structures for the list manipulations are reasonably |
| 16 | * valid. Failures here indicate memory corruption (and possibly an exploit |
| 17 | * attempt). |
Dave Jones | 199a9af | 2006-09-29 01:59:00 -0700 | [diff] [blame] | 18 | */ |
| 19 | |
Kees Cook | d7c8167 | 2016-08-17 14:42:08 -0700 | [diff] [blame^] | 20 | bool __list_add_valid(struct list_head *new, struct list_head *prev, |
| 21 | struct list_head *next) |
Dave Jones | 199a9af | 2006-09-29 01:59:00 -0700 | [diff] [blame] | 22 | { |
Kees Cook | d7c8167 | 2016-08-17 14:42:08 -0700 | [diff] [blame^] | 23 | if (unlikely(next->prev != prev)) { |
| 24 | WARN(1, "list_add corruption. next->prev should be prev (%p), but was %p. (next=%p).\n", |
| 25 | prev, next->prev, next); |
| 26 | return false; |
| 27 | } |
| 28 | if (unlikely(prev->next != next)) { |
| 29 | WARN(1, "list_add corruption. prev->next should be next (%p), but was %p. (prev=%p).\n", |
| 30 | next, prev->next, prev); |
| 31 | return false; |
| 32 | } |
| 33 | if (unlikely(new == prev || new == next)) { |
| 34 | WARN(1, "list_add double add: new=%p, prev=%p, next=%p.\n", |
| 35 | new, prev, next); |
| 36 | return false; |
| 37 | } |
| 38 | return true; |
Dave Jones | 199a9af | 2006-09-29 01:59:00 -0700 | [diff] [blame] | 39 | } |
Kees Cook | d7c8167 | 2016-08-17 14:42:08 -0700 | [diff] [blame^] | 40 | EXPORT_SYMBOL(__list_add_valid); |
Dave Jones | 199a9af | 2006-09-29 01:59:00 -0700 | [diff] [blame] | 41 | |
Linus Torvalds | 3c18d4d | 2011-02-18 11:32:28 -0800 | [diff] [blame] | 42 | void __list_del_entry(struct list_head *entry) |
| 43 | { |
| 44 | struct list_head *prev, *next; |
| 45 | |
| 46 | prev = entry->prev; |
| 47 | next = entry->next; |
| 48 | |
| 49 | if (WARN(next == LIST_POISON1, |
| 50 | "list_del corruption, %p->next is LIST_POISON1 (%p)\n", |
| 51 | entry, LIST_POISON1) || |
| 52 | WARN(prev == LIST_POISON2, |
| 53 | "list_del corruption, %p->prev is LIST_POISON2 (%p)\n", |
| 54 | entry, LIST_POISON2) || |
| 55 | WARN(prev->next != entry, |
| 56 | "list_del corruption. prev->next should be %p, " |
| 57 | "but was %p\n", entry, prev->next) || |
| 58 | WARN(next->prev != entry, |
| 59 | "list_del corruption. next->prev should be %p, " |
| 60 | "but was %p\n", entry, next->prev)) |
| 61 | return; |
| 62 | |
| 63 | __list_del(prev, next); |
| 64 | } |
| 65 | EXPORT_SYMBOL(__list_del_entry); |
| 66 | |
Dave Jones | 199a9af | 2006-09-29 01:59:00 -0700 | [diff] [blame] | 67 | /** |
Dave Jones | 199a9af | 2006-09-29 01:59:00 -0700 | [diff] [blame] | 68 | * list_del - deletes entry from list. |
| 69 | * @entry: the element to delete from the list. |
| 70 | * Note: list_empty on entry does not return true after this, the entry is |
| 71 | * in an undefined state. |
| 72 | */ |
| 73 | void list_del(struct list_head *entry) |
| 74 | { |
Linus Torvalds | 3c18d4d | 2011-02-18 11:32:28 -0800 | [diff] [blame] | 75 | __list_del_entry(entry); |
Dave Jones | 199a9af | 2006-09-29 01:59:00 -0700 | [diff] [blame] | 76 | entry->next = LIST_POISON1; |
| 77 | entry->prev = LIST_POISON2; |
| 78 | } |
| 79 | EXPORT_SYMBOL(list_del); |
Dave Jones | 559f9ba | 2012-03-14 22:17:39 -0400 | [diff] [blame] | 80 | |
| 81 | /* |
| 82 | * RCU variants. |
| 83 | */ |
| 84 | void __list_add_rcu(struct list_head *new, |
| 85 | struct list_head *prev, struct list_head *next) |
| 86 | { |
| 87 | WARN(next->prev != prev, |
Paul E. McKenney | 5cf05ad | 2012-05-17 15:12:45 -0700 | [diff] [blame] | 88 | "list_add_rcu corruption. next->prev should be prev (%p), but was %p. (next=%p).\n", |
Dave Jones | 559f9ba | 2012-03-14 22:17:39 -0400 | [diff] [blame] | 89 | prev, next->prev, next); |
| 90 | WARN(prev->next != next, |
Paul E. McKenney | 5cf05ad | 2012-05-17 15:12:45 -0700 | [diff] [blame] | 91 | "list_add_rcu corruption. prev->next should be next (%p), but was %p. (prev=%p).\n", |
Dave Jones | 559f9ba | 2012-03-14 22:17:39 -0400 | [diff] [blame] | 92 | next, prev->next, prev); |
| 93 | new->next = next; |
| 94 | new->prev = prev; |
| 95 | rcu_assign_pointer(list_next_rcu(prev), new); |
| 96 | next->prev = new; |
| 97 | } |
| 98 | EXPORT_SYMBOL(__list_add_rcu); |