From nobody Fri Nov 14 19:43:52 2025 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=fail; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org Return-Path: Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1760214064933728.0472749465209; Sat, 11 Oct 2025 13:21:04 -0700 (PDT) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1v7g3n-0007Y1-0n; Sat, 11 Oct 2025 16:19:23 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1v7fp1-000540-2W; Sat, 11 Oct 2025 16:04:07 -0400 Received: from mlugg.co.uk ([104.238.170.239] helo=mail.mlugg.co.uk) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1v7fox-0006n9-UH; Sat, 11 Oct 2025 16:04:06 -0400 Received: from localhost.localdomain (7.1.8.2.8.1.e.f.f.f.e.d.0.b.e.f.f.b.9.2.0.c.b.a.0.b.8.0.1.0.0.2.ip6.arpa [IPv6:2001:8b0:abc0:29bf:feb0:deff:fe18:2817]) by mail.mlugg.co.uk (Postfix) with ESMTPSA id 93F4535324; Sat, 11 Oct 2025 20:04:01 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mlugg.co.uk; s=20200703; t=1760213041; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=iIXFL4xk4x30Y5a7OuQM/O0iDcWc+2aUW58n+TpLjT8=; b=gYLXuyDjBx5/6l2zpzPq5Am2xeUnixpzzpKaJDLVoTfeUjaYClNeWeeskCfTf63wz0zoUw ktDfzPW/eM+8XYuQzkSu+d0L5PfdGSBzLCy4Ou+0foBlnfED922o58l59zD7Xe9EOtK4Kh ki/1SnT6qtjjl5XK3fySy/EMAHaKodQ= From: Matthew Lugg To: qemu-devel@nongnu.org Cc: laurent@vivier.eu, qemu-stable@nongnu.org, Matthew Lugg Subject: [PATCH 2/4] linux-user: fix mremap errors for invalid ranges Date: Sat, 11 Oct 2025 21:03:35 +0100 Message-ID: <20251011200337.30258-3-mlugg@mlugg.co.uk> X-Mailer: git-send-email 2.51.0 In-Reply-To: <20251011200337.30258-1-mlugg@mlugg.co.uk> References: <20251011200337.30258-1-mlugg@mlugg.co.uk> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists.gnu.org; Received-SPF: pass client-ip=104.238.170.239; envelope-from=mlugg@mlugg.co.uk; helo=mail.mlugg.co.uk X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Mailman-Approved-At: Sat, 11 Oct 2025 16:19:20 -0400 X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: qemu-devel-bounces+importer=patchew.org@nongnu.org X-ZohoMail-DKIM: fail (Header signature does not verify) X-ZM-MESSAGEID: 1760214067957154100 Content-Type: text/plain; charset="utf-8" If an address range given to `mremap` is invalid (exceeds addressing bounds on the guest), we were previously returning `ENOMEM`, which is not correct. The manpage and the Linux kernel implementation both agree that if `old_addr`/`old_size` refer to an invalid address, `EFAULT` is returned, and if `new_addr`/`new_size` refer to an invalid address, `EINVAL` is returned. Signed-off-by: Matthew Lugg Reviewed-by: Peter Maydell --- linux-user/mmap.c | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/linux-user/mmap.c b/linux-user/mmap.c index ec8392b35b..4c5fe832ad 100644 --- a/linux-user/mmap.c +++ b/linux-user/mmap.c @@ -1103,12 +1103,15 @@ abi_long target_mremap(abi_ulong old_addr, abi_ulon= g old_size, int prot; void *host_addr; =20 - if (!guest_range_valid_untagged(old_addr, old_size) || - ((flags & MREMAP_FIXED) && + if (!guest_range_valid_untagged(old_addr, old_size)) { + errno =3D EFAULT; + return -1; + } + if (((flags & MREMAP_FIXED) && !guest_range_valid_untagged(new_addr, new_size)) || ((flags & MREMAP_MAYMOVE) =3D=3D 0 && !guest_range_valid_untagged(old_addr, new_size))) { - errno =3D ENOMEM; + errno =3D EINVAL; return -1; } =20 --=20 2.51.0