Commit f8425c93 authored by Alessio Balsini's avatar Alessio Balsini Committed by Miklos Szeredi

fuse: 32-bit user space ioctl compat for fuse device

With a 64-bit kernel build the FUSE device cannot handle ioctl requests
coming from 32-bit user space.  This is due to the ioctl command
translation that generates different command identifiers that thus cannot
be used for direct comparisons without proper manipulation.

Explicitly extract type and number from the ioctl command to enable 32-bit
user space compatibility on 64-bit kernel builds.
Signed-off-by: default avatarAlessio Balsini <balsini@android.com>
Signed-off-by: default avatarMiklos Szeredi <mszeredi@redhat.com>
parent 3f9b9efd
...@@ -2229,19 +2229,21 @@ static int fuse_device_clone(struct fuse_conn *fc, struct file *new) ...@@ -2229,19 +2229,21 @@ static int fuse_device_clone(struct fuse_conn *fc, struct file *new)
static long fuse_dev_ioctl(struct file *file, unsigned int cmd, static long fuse_dev_ioctl(struct file *file, unsigned int cmd,
unsigned long arg) unsigned long arg)
{ {
int err = -ENOTTY; int res;
int oldfd;
struct fuse_dev *fud = NULL;
if (cmd == FUSE_DEV_IOC_CLONE) { if (_IOC_TYPE(cmd) != FUSE_DEV_IOC_MAGIC)
int oldfd; return -ENOTTY;
err = -EFAULT; switch (_IOC_NR(cmd)) {
if (!get_user(oldfd, (__u32 __user *) arg)) { case _IOC_NR(FUSE_DEV_IOC_CLONE):
res = -EFAULT;
if (!get_user(oldfd, (__u32 __user *)arg)) {
struct file *old = fget(oldfd); struct file *old = fget(oldfd);
err = -EINVAL; res = -EINVAL;
if (old) { if (old) {
struct fuse_dev *fud = NULL;
/* /*
* Check against file->f_op because CUSE * Check against file->f_op because CUSE
* uses the same ioctl handler. * uses the same ioctl handler.
...@@ -2252,14 +2254,18 @@ static long fuse_dev_ioctl(struct file *file, unsigned int cmd, ...@@ -2252,14 +2254,18 @@ static long fuse_dev_ioctl(struct file *file, unsigned int cmd,
if (fud) { if (fud) {
mutex_lock(&fuse_mutex); mutex_lock(&fuse_mutex);
err = fuse_device_clone(fud->fc, file); res = fuse_device_clone(fud->fc, file);
mutex_unlock(&fuse_mutex); mutex_unlock(&fuse_mutex);
} }
fput(old); fput(old);
} }
} }
break;
default:
res = -ENOTTY;
break;
} }
return err; return res;
} }
const struct file_operations fuse_dev_operations = { const struct file_operations fuse_dev_operations = {
......
...@@ -903,7 +903,8 @@ struct fuse_notify_retrieve_in { ...@@ -903,7 +903,8 @@ struct fuse_notify_retrieve_in {
}; };
/* Device ioctls: */ /* Device ioctls: */
#define FUSE_DEV_IOC_CLONE _IOR(229, 0, uint32_t) #define FUSE_DEV_IOC_MAGIC 229
#define FUSE_DEV_IOC_CLONE _IOR(FUSE_DEV_IOC_MAGIC, 0, uint32_t)
struct fuse_lseek_in { struct fuse_lseek_in {
uint64_t fh; uint64_t fh;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment