lua-lsm: fix AF_UNIX sockaddr marshalling lengths

arch/Kconfig

@@ -345,6 +345,15 @@ config ARCH_HAS_SET_MEMORY
 config ARCH_HAS_SET_DIRECT_MAP
 	bool
 
+# Select if arch has all setjmp/longjmp() functions
+config ARCH_HAS_SETJMP
+	bool
+
+config ARCH_SETJMP
+	bool
+	depends on ARCH_HAS_SETJMP
+	default n
+
 #
 # Select if the architecture provides the arch_dma_set_uncached symbol to
 # either provide an uncached segment alias for a DMA allocation, or

arch/arm64/Kconfig

@@ -48,6 +48,7 @@ config ARM64
 	select ARCH_HAS_SETUP_DMA_OPS
 	select ARCH_HAS_SET_DIRECT_MAP
 	select ARCH_HAS_SET_MEMORY
+	select ARCH_HAS_SETJMP
 	select ARCH_HAS_FORCE_DMA_UNENCRYPTED
 	select ARCH_STACKWALK
 	select ARCH_HAS_STRICT_KERNEL_RWX

arch/arm64/include/asm/setjmp.h

@@ -0,0 +1,15 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#ifndef _ASM_ARM64_SETJMP_H
+#define _ASM_ARM64_SETJMP_H
+
+#include <linux/types.h>
+
+struct label_t {
+	/* ABI x19 .. x30 (lr), sp */
+	uint64_t regs[13];
+};
+
+extern int setjmp(struct label_t *label);
+extern void longjmp(struct label_t *label, int val);
+
+#endif /* _ASM_ARM64_SETJMP_H */

arch/arm64/lib/Makefile

@@ -18,3 +18,5 @@ obj-$(CONFIG_FUNCTION_ERROR_INJECTION) += error-inject.o
 obj-$(CONFIG_ARM64_MTE) += mte.o
 
 obj-$(CONFIG_KASAN_SW_TAGS) += kasan_sw_tags.o
+
+obj-$(CONFIG_ARCH_SETJMP) += setjmp.o

arch/arm64/lib/setjmp.S

@@ -0,0 +1,44 @@
+/* SPDX-License-Identifier: GPL-2.0-only */
+/*
+ * Copyright (C) 2025 Alibaba Group.
+ */
+
+#include <linux/linkage.h>
+#include <asm/assembler.h>
+
+
+/*
+ * int setjmp(struct label_t *label);
+ */
+.align 3
+SYM_FUNC_START(setjmp)
+	stp		x19, x20, [x0, #(0 * 8)]
+	stp		x21, x22, [x0, #(2 * 8)]
+	stp		x23, x24, [x0, #(4 * 8)]
+	stp		x25, x26, [x0, #(6 * 8)]
+	stp		x27, x28, [x0, #(8 * 8)]
+	stp		x29, x30, [x0, #(10 * 8)]
+	mov		x1, sp
+	str		x1, [x0, #(12 * 8)]
+	mov		x0, #0
+	ret
+SYM_FUNC_END(setjmp)
+EXPORT_SYMBOL(setjmp)
+
+/*
+ * void longjmp(struct label_t *label, int val);
+ */
+.align 3
+SYM_FUNC_START(longjmp)
+	ldp		x19, x20, [x0, #(0 * 8)]
+	ldp		x21, x22, [x0, #(2 * 8)]
+	ldp		x23, x24, [x0, #(4 * 8)]
+	ldp		x25, x26, [x0, #(6 * 8)]
+	ldp		x27, x28, [x0, #(8 * 8)]
+	ldp		x29, x30, [x0, #(10 * 8)]
+	ldr		x0, [x0, #(12 * 8)]
+	mov		sp, x0
+	mov		x0, x1
+	ret
+SYM_FUNC_END(longjmp)
+EXPORT_SYMBOL(longjmp)

arch/x86/Kconfig

@@ -105,6 +105,7 @@ config X86
 	select ARCH_HAS_COPY_MC			if X86_64
 	select ARCH_HAS_SET_MEMORY
 	select ARCH_HAS_SET_DIRECT_MAP
+	select ARCH_HAS_SETJMP
 	select ARCH_HAS_STRICT_KERNEL_RWX
 	select ARCH_HAS_STRICT_MODULE_RWX
 	select ARCH_HAS_SYNC_CORE_BEFORE_USERMODE

arch/x86/include/asm/setjmp.h

@@ -0,0 +1,20 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#ifndef _ASM_X86_SETJMP_H
+#define _ASM_X86_SETJMP_H
+
+#include <linux/types.h>
+
+struct label_t {
+#ifdef CONFIG_X86_32
+	/* ABI (ebx, esp, ebp, esi, edi) and eip. */
+	uint32_t regs[6];
+#else
+	/* ABI (rbx, rsp, rbp, r12-r15) and rip. */
+	uint64_t regs[8];
+#endif
+};
+
+extern int setjmp(struct label_t *label);
+extern void longjmp(struct label_t *label, int val);
+
+#endif /* _ASM_X86_SETJMP_H */

arch/x86/lib/Makefile

@@ -41,6 +41,8 @@ lib-$(CONFIG_MITIGATION_RETPOLINE) += retpoline.o
 obj-y += msr.o msr-reg.o msr-reg-export.o hweight.o
 obj-y += iomem.o
 
+obj-$(CONFIG_ARCH_SETJMP) += setjmp_$(BITS).o
+
 ifeq ($(CONFIG_X86_32),y)
         obj-y += atomic64_32.o
         lib-y += atomic64_cx8_32.o

arch/x86/lib/setjmp_32.S

@@ -0,0 +1,39 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+
+#include <linux/export.h>
+#include <linux/linkage.h>
+
+/*
+ * int setjmp(struct label_t *label);
+ */
+SYM_FUNC_START(setjmp)
+	movl		4(%esp), %eax
+	movl		%ebx,   (%eax)		/* save ebx */
+	movl		%esp,  4(%eax)		/* save esp */
+	movl		%ebp,  8(%eax)		/* save ebp */
+	movl		%esi, 12(%eax)		/* save esi */
+	movl		%edi, 16(%eax)		/* save edi */
+	movl		(%esp), %edx		/* get retaddr */
+	movl		%edx, 20(%eax)		/* save eip */
+	xorl		%eax, %eax		/* return 0 */
+	RET
+SYM_FUNC_END(setjmp)
+EXPORT_SYMBOL(setjmp)
+
+/*
+ * void longjmp(struct label_t *label, int val);
+ */
+SYM_FUNC_START(longjmp)
+	movl		4(%esp), %eax
+	movl		8(%esp), %edx
+	movl		  (%eax), %ebx		/* restore ebx */
+	movl		 4(%eax), %esp		/* restore esp */
+	movl		 8(%eax), %ebp		/* restore ebp */
+	movl		12(%eax), %esi		/* restore esi */
+	movl		16(%eax), %edi		/* restore edi */
+	movl		20(%eax), %eax		/* get retaddr */
+	movl		%eax, (%esp)		/* put in return frame */
+	movl		%edx, %eax		/* return val */
+	RET
+SYM_FUNC_END(longjmp)
+EXPORT_SYMBOL(longjmp)

arch/x86/lib/setjmp_64.S

@@ -0,0 +1,50 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+
+#include <linux/export.h>
+#include <linux/linkage.h>
+
+.section .noinstr.text, "ax"
+
+/*
+ * int setjmp(struct label_t *label);
+ */
+SYM_FUNC_START(setjmp)
+	/*
+	 * Only save registers that must be preserved across function
+	 * calls according to the ABI (%rbx, %rsp, %rbp, %r12-%r15)
+	 * and %rip.
+	 */
+	movq		%rdi, %rax
+	movq		%rbx,   (%rax)
+	movq		%rsp,  8(%rax)
+	movq		%rbp, 16(%rax)
+	movq		%r12, 24(%rax)
+	movq		%r13, 32(%rax)
+	movq		%r14, 40(%rax)
+	movq		%r15, 48(%rax)
+	movq		(%rsp), %rdx
+	movq		%rdx, 56(%rax)
+	xorq		%rax, %rax
+	RET
+SYM_FUNC_END(setjmp)
+EXPORT_SYMBOL(setjmp)
+
+/*
+ * void longjmp(struct label_t *label, int val);
+ */
+SYM_FUNC_START(longjmp)
+	movq		%rdi, %rax
+	movq		  (%rax), %rbx
+	movq		 8(%rax), %rsp
+	movq		16(%rax), %rbp
+	movq		24(%rax), %r12
+	movq		32(%rax), %r13
+	movq		40(%rax), %r14
+	movq		48(%rax), %r15
+	movq		56(%rax), %rdx
+	movq		%rdx, (%rsp)
+	movq		%rsi, %rax
+	RET
+SYM_FUNC_END(longjmp)
+EXPORT_SYMBOL(longjmp)
+

env_macos.sh

@@ -0,0 +1,27 @@
+#!/bin/sh
+
+
+#brew install coreutils findutils gnu-sed gnu-tar grep llvm make pkg-config
+
+
+export PATH="$(brew --prefix make)/libexec/gnubin:$PATH"
+export PATH="$(brew --prefix llvm)/bin:$PATH"
+export PATH="$(brew --prefix lld)/bin:$PATH"
+
+
+# UUID_T and GETHOSTUUID_H Eliminate compile errors of scripts/mod/file2alias.c
+# O_LARGEFILE Eliminate compile errors of usr/gen_init_cpio.c
+export HOSTCFLAGS="-D_UUID_T -D__GETHOSTUUID_H -DO_LARGEFILE=0"
+
+
+# Use gnu coreutils instead of builtin tools
+alias sed='gsed'
+
+
+# Maybe the symlink is missed on macOS
+# git config --global core.symlinks true
+
+#make ARCH=arm64 LLVM=1
+
+#make LLVM=1 menuconfig
+#make LLVM=1 -j8

fs/file_table.c

@@ -156,11 +156,6 @@ static int init_file(struct file *f, int flags, const struct cred *cred)
 	int error;
 
 	f->f_cred = get_cred(cred);
-	error = security_file_alloc(f);
-	if (unlikely(error)) {
-		put_cred(f->f_cred);
-		return error;
-	}
 
 	spin_lock_init(&f->f_lock);
 	/*
@@ -202,6 +197,14 @@ static int init_file(struct file *f, int flags, const struct cred *cred)
 	 * They may be enabled later by fsnotify_open_perm_and_set_mode().
 	 */
 	file_set_fsnotify_mode(f, FMODE_NONOTIFY_PERM);
+
+	error = security_file_alloc(f);
+	if (unlikely(error)) {
+		mutex_destroy(&f->f_pos_lock);
+		put_cred(f->f_cred);
+		return error;
+	}
+
 	return 0;
 }
 

include/asm-generic/asm-prototypes.h

@@ -12,3 +12,8 @@ extern void *memset(void *, int, __kernel_size_t);
 extern void *memcpy(void *, const void *, __kernel_size_t);
 #undef memmove
 extern void *memmove(void *, const void *, __kernel_size_t);
+struct label_t;
+#undef setjmp
+extern int setjmp(struct label_t *);
+#undef longjmp
+extern void longjmp(struct label_t *, int);