kmod.c 5.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179
  1. /*
  2. * kmod - the kernel module loader
  3. */
  4. #include <linux/module.h>
  5. #include <linux/sched.h>
  6. #include <linux/sched/task.h>
  7. #include <linux/binfmts.h>
  8. #include <linux/syscalls.h>
  9. #include <linux/unistd.h>
  10. #include <linux/kmod.h>
  11. #include <linux/slab.h>
  12. #include <linux/completion.h>
  13. #include <linux/cred.h>
  14. #include <linux/file.h>
  15. #include <linux/fdtable.h>
  16. #include <linux/workqueue.h>
  17. #include <linux/security.h>
  18. #include <linux/mount.h>
  19. #include <linux/kernel.h>
  20. #include <linux/init.h>
  21. #include <linux/resource.h>
  22. #include <linux/notifier.h>
  23. #include <linux/suspend.h>
  24. #include <linux/rwsem.h>
  25. #include <linux/ptrace.h>
  26. #include <linux/async.h>
  27. #include <linux/uaccess.h>
  28. #include <trace/events/module.h>
  29. /*
  30. * Assuming:
  31. *
  32. * threads = div64_u64((u64) totalram_pages * (u64) PAGE_SIZE,
  33. * (u64) THREAD_SIZE * 8UL);
  34. *
  35. * If you need less than 50 threads would mean we're dealing with systems
  36. * smaller than 3200 pages. This assuems you are capable of having ~13M memory,
  37. * and this would only be an be an upper limit, after which the OOM killer
  38. * would take effect. Systems like these are very unlikely if modules are
  39. * enabled.
  40. */
  41. #define MAX_KMOD_CONCURRENT 50
  42. static atomic_t kmod_concurrent_max = ATOMIC_INIT(MAX_KMOD_CONCURRENT);
  43. static DECLARE_WAIT_QUEUE_HEAD(kmod_wq);
  44. /*
  45. * This is a restriction on having *all* MAX_KMOD_CONCURRENT threads
  46. * running at the same time without returning. When this happens we
  47. * believe you've somehow ended up with a recursive module dependency
  48. * creating a loop.
  49. *
  50. * We have no option but to fail.
  51. *
  52. * Userspace should proactively try to detect and prevent these.
  53. */
  54. #define MAX_KMOD_ALL_BUSY_TIMEOUT 5
  55. /*
  56. modprobe_path is set via /proc/sys.
  57. */
  58. char modprobe_path[KMOD_PATH_LEN] = "/sbin/modprobe";
  59. static void free_modprobe_argv(struct subprocess_info *info)
  60. {
  61. kfree(info->argv[3]); /* check call_modprobe() */
  62. kfree(info->argv);
  63. }
  64. static int call_modprobe(char *module_name, int wait)
  65. {
  66. struct subprocess_info *info;
  67. static char *envp[] = {
  68. "HOME=/",
  69. "TERM=linux",
  70. "PATH=/sbin:/usr/sbin:/bin:/usr/bin",
  71. NULL
  72. };
  73. char **argv = kmalloc(sizeof(char *[5]), GFP_KERNEL);
  74. if (!argv)
  75. goto out;
  76. module_name = kstrdup(module_name, GFP_KERNEL);
  77. if (!module_name)
  78. goto free_argv;
  79. argv[0] = modprobe_path;
  80. argv[1] = "-q";
  81. argv[2] = "--";
  82. argv[3] = module_name; /* check free_modprobe_argv() */
  83. argv[4] = NULL;
  84. info = call_usermodehelper_setup(modprobe_path, argv, envp, GFP_KERNEL,
  85. NULL, free_modprobe_argv, NULL);
  86. if (!info)
  87. goto free_module_name;
  88. return call_usermodehelper_exec(info, wait | UMH_KILLABLE);
  89. free_module_name:
  90. kfree(module_name);
  91. free_argv:
  92. kfree(argv);
  93. out:
  94. return -ENOMEM;
  95. }
  96. /**
  97. * __request_module - try to load a kernel module
  98. * @wait: wait (or not) for the operation to complete
  99. * @fmt: printf style format string for the name of the module
  100. * @...: arguments as specified in the format string
  101. *
  102. * Load a module using the user mode module loader. The function returns
  103. * zero on success or a negative errno code or positive exit code from
  104. * "modprobe" on failure. Note that a successful module load does not mean
  105. * the module did not then unload and exit on an error of its own. Callers
  106. * must check that the service they requested is now available not blindly
  107. * invoke it.
  108. *
  109. * If module auto-loading support is disabled then this function
  110. * simply returns -ENOENT.
  111. */
  112. int __request_module(bool wait, const char *fmt, ...)
  113. {
  114. va_list args;
  115. char module_name[MODULE_NAME_LEN];
  116. int ret;
  117. /*
  118. * We don't allow synchronous module loading from async. Module
  119. * init may invoke async_synchronize_full() which will end up
  120. * waiting for this task which already is waiting for the module
  121. * loading to complete, leading to a deadlock.
  122. */
  123. WARN_ON_ONCE(wait && current_is_async());
  124. if (!modprobe_path[0])
  125. return -ENOENT;
  126. va_start(args, fmt);
  127. ret = vsnprintf(module_name, MODULE_NAME_LEN, fmt, args);
  128. va_end(args);
  129. if (ret >= MODULE_NAME_LEN)
  130. return -ENAMETOOLONG;
  131. ret = security_kernel_module_request(module_name);
  132. if (ret)
  133. return ret;
  134. if (atomic_dec_if_positive(&kmod_concurrent_max) < 0) {
  135. pr_warn_ratelimited("request_module: kmod_concurrent_max (%u) close to 0 (max_modprobes: %u), for module %s, throttling...",
  136. atomic_read(&kmod_concurrent_max),
  137. MAX_KMOD_CONCURRENT, module_name);
  138. ret = wait_event_killable_timeout(kmod_wq,
  139. atomic_dec_if_positive(&kmod_concurrent_max) >= 0,
  140. MAX_KMOD_ALL_BUSY_TIMEOUT * HZ);
  141. if (!ret) {
  142. pr_warn_ratelimited("request_module: modprobe %s cannot be processed, kmod busy with %d threads for more than %d seconds now",
  143. module_name, MAX_KMOD_CONCURRENT, MAX_KMOD_ALL_BUSY_TIMEOUT);
  144. return -ETIME;
  145. } else if (ret == -ERESTARTSYS) {
  146. pr_warn_ratelimited("request_module: sigkill sent for modprobe %s, giving up", module_name);
  147. return ret;
  148. }
  149. }
  150. trace_module_request(module_name, wait, _RET_IP_);
  151. ret = call_modprobe(module_name, wait ? UMH_WAIT_PROC : UMH_WAIT_EXEC);
  152. atomic_inc(&kmod_concurrent_max);
  153. wake_up(&kmod_wq);
  154. return ret;
  155. }
  156. EXPORT_SYMBOL(__request_module);