namei: allow nd_jump_link() to produce errors

In preparation for LOOKUP_NO_MAGICLINKS, it's necessary to add the
ability for nd_jump_link() to return an error which the corresponding
get_link() caller must propogate back up to the VFS.

Suggested-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

diff --git a/fs/namei.c b/fs/namei.c
index 17ebaac2da494b6c1d4adb668c702581da214aae..fb8a3637237656a1186a11edd57c3e7e37eaefcf 100644 (file)
--- a/fs/namei.c
+++ b/fs/namei.c
@@ -859,7 +859,7 @@ static int nd_jump_root(struct nameidata *nd)
  * Helper to directly jump to a known parsed path from ->get_link,
  * caller must have taken a reference to path beforehand.
  */
-void nd_jump_link(struct path *path)
+int nd_jump_link(struct path *path)
 {
        struct nameidata *nd = current->nameidata;
        path_put(&nd->path);
@@ -867,6 +867,7 @@ void nd_jump_link(struct path *path)
        nd->path = *path;
        nd->inode = nd->path.dentry->d_inode;
        nd->flags |= LOOKUP_JUMPED;
+       return 0;
 }
 
 static inline void put_link(struct nameidata *nd)

diff --git a/fs/proc/base.c b/fs/proc/base.c
index ebea9501afb84cd8969d2a4a4a25361a91e353c3..ee97dd322f3ebf4f422f0bf2001e357a1f3c9814 100644 (file)
--- a/fs/proc/base.c
+++ b/fs/proc/base.c
@@ -1626,8 +1626,7 @@ static const char *proc_pid_get_link(struct dentry *dentry,
        if (error)
                goto out;
 
-       nd_jump_link(&path);
-       return NULL;
+       error = nd_jump_link(&path);
 out:
        return ERR_PTR(error);
 }

diff --git a/fs/proc/namespaces.c b/fs/proc/namespaces.c
index 08dd94df1a669a834a7331249aea8f2535f60b1c..a8cca516f1a9dd024ae90a90087533be65fd58e7 100644 (file)
--- a/fs/proc/namespaces.c
+++ b/fs/proc/namespaces.c
@@ -51,11 +51,15 @@ static const char *proc_ns_get_link(struct dentry *dentry,
        if (!task)
                return ERR_PTR(-EACCES);
 
-       if (ptrace_may_access(task, PTRACE_MODE_READ_FSCREDS)) {
-               error = ns_get_path(&ns_path, task, ns_ops);
-               if (!error)
-                       nd_jump_link(&ns_path);
-       }
+       if (!ptrace_may_access(task, PTRACE_MODE_READ_FSCREDS))
+               goto out;
+
+       error = ns_get_path(&ns_path, task, ns_ops);
+       if (error)
+               goto out;
+
+       error = nd_jump_link(&ns_path);
+out:
        put_task_struct(task);
        return ERR_PTR(error);
 }

diff --git a/include/linux/namei.h b/include/linux/namei.h
index 7fe7b87a3ded914ab89fd021aed3bed9218ef5b2..b2479cc119c68b1d95e7ea599dab6ff2ca58a1d5 100644 (file)
--- a/include/linux/namei.h
+++ b/include/linux/namei.h
@@ -69,7 +69,7 @@ extern int follow_up(struct path *);
 extern struct dentry *lock_rename(struct dentry *, struct dentry *);
 extern void unlock_rename(struct dentry *, struct dentry *);
 
-extern void nd_jump_link(struct path *path);
+extern int __must_check nd_jump_link(struct path *path);
 
 static inline void nd_terminate_link(void *name, size_t len, size_t maxlen)
 {

diff --git a/security/apparmor/apparmorfs.c b/security/apparmor/apparmorfs.c
index 09996f2552ee45b1503d3fae321032a90e03cc14..7f27ce2a011311522c8249c474bee783ae428b70 100644 (file)
--- a/security/apparmor/apparmorfs.c
+++ b/security/apparmor/apparmorfs.c
@@ -2573,16 +2573,18 @@ static const char *policy_get_link(struct dentry *dentry,
 {
        struct aa_ns *ns;
        struct path path;
+       int error;
 
        if (!dentry)
                return ERR_PTR(-ECHILD);
+
        ns = aa_get_current_ns();
        path.mnt = mntget(aafs_mnt);
        path.dentry = dget(ns_dir(ns));
-       nd_jump_link(&path);
+       error = nd_jump_link(&path);
        aa_put_ns(ns);
 
-       return NULL;
+       return ERR_PTR(error);
 }
 
 static int policy_readlink(struct dentry *dentry, char __user *buffer,