.. | .. |
---|
| 1 | +// SPDX-License-Identifier: GPL-2.0 |
---|
1 | 2 | /* |
---|
2 | 3 | * Copyright (C) 2000 - 2007 Jeff Dike (jdike@{addtoit,linux.intel}.com) |
---|
3 | | - * Licensed under the GPL |
---|
4 | 4 | */ |
---|
5 | 5 | |
---|
6 | 6 | #include <linux/mm.h> |
---|
7 | 7 | #include <linux/module.h> |
---|
8 | 8 | #include <linux/sched/signal.h> |
---|
9 | 9 | |
---|
10 | | -#include <asm/pgtable.h> |
---|
11 | 10 | #include <asm/tlbflush.h> |
---|
12 | 11 | #include <as-layout.h> |
---|
13 | 12 | #include <mem_user.h> |
---|
.. | .. |
---|
37 | 36 | } mprotect; |
---|
38 | 37 | } u; |
---|
39 | 38 | } ops[1]; |
---|
| 39 | + int userspace; |
---|
40 | 40 | int index; |
---|
41 | | - struct mm_id *id; |
---|
| 41 | + struct mm_struct *mm; |
---|
42 | 42 | void *data; |
---|
43 | 43 | int force; |
---|
44 | 44 | }; |
---|
45 | 45 | |
---|
46 | | -#define INIT_HVC(mm, force) \ |
---|
| 46 | +#define INIT_HVC(mm, force, userspace) \ |
---|
47 | 47 | ((struct host_vm_change) \ |
---|
48 | 48 | { .ops = { { .type = NONE } }, \ |
---|
49 | | - .id = &mm->context.id, \ |
---|
| 49 | + .mm = mm, \ |
---|
50 | 50 | .data = NULL, \ |
---|
| 51 | + .userspace = userspace, \ |
---|
51 | 52 | .index = 0, \ |
---|
52 | 53 | .force = force }) |
---|
53 | 54 | |
---|
.. | .. |
---|
68 | 69 | op = &hvc->ops[i]; |
---|
69 | 70 | switch (op->type) { |
---|
70 | 71 | case MMAP: |
---|
71 | | - ret = map(hvc->id, op->u.mmap.addr, op->u.mmap.len, |
---|
72 | | - op->u.mmap.prot, op->u.mmap.fd, |
---|
73 | | - op->u.mmap.offset, finished, &hvc->data); |
---|
| 72 | + if (hvc->userspace) |
---|
| 73 | + ret = map(&hvc->mm->context.id, op->u.mmap.addr, |
---|
| 74 | + op->u.mmap.len, op->u.mmap.prot, |
---|
| 75 | + op->u.mmap.fd, |
---|
| 76 | + op->u.mmap.offset, finished, |
---|
| 77 | + &hvc->data); |
---|
| 78 | + else |
---|
| 79 | + map_memory(op->u.mmap.addr, op->u.mmap.offset, |
---|
| 80 | + op->u.mmap.len, 1, 1, 1); |
---|
74 | 81 | break; |
---|
75 | 82 | case MUNMAP: |
---|
76 | | - ret = unmap(hvc->id, op->u.munmap.addr, |
---|
77 | | - op->u.munmap.len, finished, &hvc->data); |
---|
| 83 | + if (hvc->userspace) |
---|
| 84 | + ret = unmap(&hvc->mm->context.id, |
---|
| 85 | + op->u.munmap.addr, |
---|
| 86 | + op->u.munmap.len, finished, |
---|
| 87 | + &hvc->data); |
---|
| 88 | + else |
---|
| 89 | + ret = os_unmap_memory( |
---|
| 90 | + (void *) op->u.munmap.addr, |
---|
| 91 | + op->u.munmap.len); |
---|
| 92 | + |
---|
78 | 93 | break; |
---|
79 | 94 | case MPROTECT: |
---|
80 | | - ret = protect(hvc->id, op->u.mprotect.addr, |
---|
81 | | - op->u.mprotect.len, op->u.mprotect.prot, |
---|
82 | | - finished, &hvc->data); |
---|
| 95 | + if (hvc->userspace) |
---|
| 96 | + ret = protect(&hvc->mm->context.id, |
---|
| 97 | + op->u.mprotect.addr, |
---|
| 98 | + op->u.mprotect.len, |
---|
| 99 | + op->u.mprotect.prot, |
---|
| 100 | + finished, &hvc->data); |
---|
| 101 | + else |
---|
| 102 | + ret = os_protect_memory( |
---|
| 103 | + (void *) op->u.mprotect.addr, |
---|
| 104 | + op->u.mprotect.len, |
---|
| 105 | + 1, 1, 1); |
---|
83 | 106 | break; |
---|
84 | 107 | default: |
---|
85 | 108 | printk(KERN_ERR "Unknown op type %d in do_ops\n", |
---|
.. | .. |
---|
100 | 123 | { |
---|
101 | 124 | __u64 offset; |
---|
102 | 125 | struct host_vm_op *last; |
---|
103 | | - int fd, ret = 0; |
---|
| 126 | + int fd = -1, ret = 0; |
---|
104 | 127 | |
---|
105 | | - fd = phys_mapping(phys, &offset); |
---|
| 128 | + if (virt + len > STUB_START && virt < STUB_END) |
---|
| 129 | + return -EINVAL; |
---|
| 130 | + |
---|
| 131 | + if (hvc->userspace) |
---|
| 132 | + fd = phys_mapping(phys, &offset); |
---|
| 133 | + else |
---|
| 134 | + offset = phys; |
---|
106 | 135 | if (hvc->index != 0) { |
---|
107 | 136 | last = &hvc->ops[hvc->index - 1]; |
---|
108 | 137 | if ((last->type == MMAP) && |
---|
.. | .. |
---|
136 | 165 | struct host_vm_op *last; |
---|
137 | 166 | int ret = 0; |
---|
138 | 167 | |
---|
139 | | - if ((addr >= STUB_START) && (addr < STUB_END)) |
---|
| 168 | + if (addr + len > STUB_START && addr < STUB_END) |
---|
140 | 169 | return -EINVAL; |
---|
141 | 170 | |
---|
142 | 171 | if (hvc->index != 0) { |
---|
.. | .. |
---|
165 | 194 | { |
---|
166 | 195 | struct host_vm_op *last; |
---|
167 | 196 | int ret = 0; |
---|
| 197 | + |
---|
| 198 | + if (addr + len > STUB_START && addr < STUB_END) |
---|
| 199 | + return -EINVAL; |
---|
168 | 200 | |
---|
169 | 201 | if (hvc->index != 0) { |
---|
170 | 202 | last = &hvc->ops[hvc->index - 1]; |
---|
.. | .. |
---|
215 | 247 | prot = ((r ? UM_PROT_READ : 0) | (w ? UM_PROT_WRITE : 0) | |
---|
216 | 248 | (x ? UM_PROT_EXEC : 0)); |
---|
217 | 249 | if (hvc->force || pte_newpage(*pte)) { |
---|
218 | | - if (pte_present(*pte)) |
---|
219 | | - ret = add_mmap(addr, pte_val(*pte) & PAGE_MASK, |
---|
220 | | - PAGE_SIZE, prot, hvc); |
---|
221 | | - else |
---|
| 250 | + if (pte_present(*pte)) { |
---|
| 251 | + if (pte_newpage(*pte)) |
---|
| 252 | + ret = add_mmap(addr, pte_val(*pte) & PAGE_MASK, |
---|
| 253 | + PAGE_SIZE, prot, hvc); |
---|
| 254 | + } else |
---|
222 | 255 | ret = add_munmap(addr, PAGE_SIZE, hvc); |
---|
223 | 256 | } else if (pte_newprot(*pte)) |
---|
224 | 257 | ret = add_mprotect(addr, PAGE_SIZE, prot, hvc); |
---|
.. | .. |
---|
249 | 282 | return ret; |
---|
250 | 283 | } |
---|
251 | 284 | |
---|
252 | | -static inline int update_pud_range(pgd_t *pgd, unsigned long addr, |
---|
| 285 | +static inline int update_pud_range(p4d_t *p4d, unsigned long addr, |
---|
253 | 286 | unsigned long end, |
---|
254 | 287 | struct host_vm_change *hvc) |
---|
255 | 288 | { |
---|
.. | .. |
---|
257 | 290 | unsigned long next; |
---|
258 | 291 | int ret = 0; |
---|
259 | 292 | |
---|
260 | | - pud = pud_offset(pgd, addr); |
---|
| 293 | + pud = pud_offset(p4d, addr); |
---|
261 | 294 | do { |
---|
262 | 295 | next = pud_addr_end(addr, end); |
---|
263 | 296 | if (!pud_present(*pud)) { |
---|
.. | .. |
---|
271 | 304 | return ret; |
---|
272 | 305 | } |
---|
273 | 306 | |
---|
| 307 | +static inline int update_p4d_range(pgd_t *pgd, unsigned long addr, |
---|
| 308 | + unsigned long end, |
---|
| 309 | + struct host_vm_change *hvc) |
---|
| 310 | +{ |
---|
| 311 | + p4d_t *p4d; |
---|
| 312 | + unsigned long next; |
---|
| 313 | + int ret = 0; |
---|
| 314 | + |
---|
| 315 | + p4d = p4d_offset(pgd, addr); |
---|
| 316 | + do { |
---|
| 317 | + next = p4d_addr_end(addr, end); |
---|
| 318 | + if (!p4d_present(*p4d)) { |
---|
| 319 | + if (hvc->force || p4d_newpage(*p4d)) { |
---|
| 320 | + ret = add_munmap(addr, next - addr, hvc); |
---|
| 321 | + p4d_mkuptodate(*p4d); |
---|
| 322 | + } |
---|
| 323 | + } else |
---|
| 324 | + ret = update_pud_range(p4d, addr, next, hvc); |
---|
| 325 | + } while (p4d++, addr = next, ((addr < end) && !ret)); |
---|
| 326 | + return ret; |
---|
| 327 | +} |
---|
| 328 | + |
---|
274 | 329 | void fix_range_common(struct mm_struct *mm, unsigned long start_addr, |
---|
275 | 330 | unsigned long end_addr, int force) |
---|
276 | 331 | { |
---|
277 | 332 | pgd_t *pgd; |
---|
278 | 333 | struct host_vm_change hvc; |
---|
279 | 334 | unsigned long addr = start_addr, next; |
---|
280 | | - int ret = 0; |
---|
| 335 | + int ret = 0, userspace = 1; |
---|
281 | 336 | |
---|
282 | | - hvc = INIT_HVC(mm, force); |
---|
| 337 | + hvc = INIT_HVC(mm, force, userspace); |
---|
283 | 338 | pgd = pgd_offset(mm, addr); |
---|
284 | 339 | do { |
---|
285 | 340 | next = pgd_addr_end(addr, end_addr); |
---|
.. | .. |
---|
288 | 343 | ret = add_munmap(addr, next - addr, &hvc); |
---|
289 | 344 | pgd_mkuptodate(*pgd); |
---|
290 | 345 | } |
---|
291 | | - } |
---|
292 | | - else ret = update_pud_range(pgd, addr, next, &hvc); |
---|
| 346 | + } else |
---|
| 347 | + ret = update_p4d_range(pgd, addr, next, &hvc); |
---|
293 | 348 | } while (pgd++, addr = next, ((addr < end_addr) && !ret)); |
---|
294 | 349 | |
---|
295 | 350 | if (!ret) |
---|
.. | .. |
---|
297 | 352 | |
---|
298 | 353 | /* This is not an else because ret is modified above */ |
---|
299 | 354 | if (ret) { |
---|
| 355 | + struct mm_id *mm_idp = ¤t->mm->context.id; |
---|
| 356 | + |
---|
300 | 357 | printk(KERN_ERR "fix_range_common: failed, killing current " |
---|
301 | 358 | "process: %d\n", task_tgid_vnr(current)); |
---|
302 | | - /* We are under mmap_sem, release it such that current can terminate */ |
---|
303 | | - up_write(¤t->mm->mmap_sem); |
---|
304 | | - force_sig(SIGKILL, current); |
---|
305 | | - do_signal(¤t->thread.regs); |
---|
| 359 | + mm_idp->kill = 1; |
---|
306 | 360 | } |
---|
307 | 361 | } |
---|
308 | 362 | |
---|
.. | .. |
---|
310 | 364 | { |
---|
311 | 365 | struct mm_struct *mm; |
---|
312 | 366 | pgd_t *pgd; |
---|
| 367 | + p4d_t *p4d; |
---|
313 | 368 | pud_t *pud; |
---|
314 | 369 | pmd_t *pmd; |
---|
315 | 370 | pte_t *pte; |
---|
316 | 371 | unsigned long addr, last; |
---|
317 | | - int updated = 0, err; |
---|
| 372 | + int updated = 0, err = 0, force = 0, userspace = 0; |
---|
| 373 | + struct host_vm_change hvc; |
---|
318 | 374 | |
---|
319 | 375 | mm = &init_mm; |
---|
| 376 | + hvc = INIT_HVC(mm, force, userspace); |
---|
320 | 377 | for (addr = start; addr < end;) { |
---|
321 | 378 | pgd = pgd_offset(mm, addr); |
---|
322 | 379 | if (!pgd_present(*pgd)) { |
---|
.. | .. |
---|
325 | 382 | last = end; |
---|
326 | 383 | if (pgd_newpage(*pgd)) { |
---|
327 | 384 | updated = 1; |
---|
328 | | - err = os_unmap_memory((void *) addr, |
---|
329 | | - last - addr); |
---|
| 385 | + err = add_munmap(addr, last - addr, &hvc); |
---|
330 | 386 | if (err < 0) |
---|
331 | 387 | panic("munmap failed, errno = %d\n", |
---|
332 | 388 | -err); |
---|
.. | .. |
---|
335 | 391 | continue; |
---|
336 | 392 | } |
---|
337 | 393 | |
---|
338 | | - pud = pud_offset(pgd, addr); |
---|
| 394 | + p4d = p4d_offset(pgd, addr); |
---|
| 395 | + if (!p4d_present(*p4d)) { |
---|
| 396 | + last = ADD_ROUND(addr, P4D_SIZE); |
---|
| 397 | + if (last > end) |
---|
| 398 | + last = end; |
---|
| 399 | + if (p4d_newpage(*p4d)) { |
---|
| 400 | + updated = 1; |
---|
| 401 | + err = add_munmap(addr, last - addr, &hvc); |
---|
| 402 | + if (err < 0) |
---|
| 403 | + panic("munmap failed, errno = %d\n", |
---|
| 404 | + -err); |
---|
| 405 | + } |
---|
| 406 | + addr = last; |
---|
| 407 | + continue; |
---|
| 408 | + } |
---|
| 409 | + |
---|
| 410 | + pud = pud_offset(p4d, addr); |
---|
339 | 411 | if (!pud_present(*pud)) { |
---|
340 | 412 | last = ADD_ROUND(addr, PUD_SIZE); |
---|
341 | 413 | if (last > end) |
---|
342 | 414 | last = end; |
---|
343 | 415 | if (pud_newpage(*pud)) { |
---|
344 | 416 | updated = 1; |
---|
345 | | - err = os_unmap_memory((void *) addr, |
---|
346 | | - last - addr); |
---|
| 417 | + err = add_munmap(addr, last - addr, &hvc); |
---|
347 | 418 | if (err < 0) |
---|
348 | 419 | panic("munmap failed, errno = %d\n", |
---|
349 | 420 | -err); |
---|
.. | .. |
---|
359 | 430 | last = end; |
---|
360 | 431 | if (pmd_newpage(*pmd)) { |
---|
361 | 432 | updated = 1; |
---|
362 | | - err = os_unmap_memory((void *) addr, |
---|
363 | | - last - addr); |
---|
| 433 | + err = add_munmap(addr, last - addr, &hvc); |
---|
364 | 434 | if (err < 0) |
---|
365 | 435 | panic("munmap failed, errno = %d\n", |
---|
366 | 436 | -err); |
---|
.. | .. |
---|
372 | 442 | pte = pte_offset_kernel(pmd, addr); |
---|
373 | 443 | if (!pte_present(*pte) || pte_newpage(*pte)) { |
---|
374 | 444 | updated = 1; |
---|
375 | | - err = os_unmap_memory((void *) addr, |
---|
376 | | - PAGE_SIZE); |
---|
| 445 | + err = add_munmap(addr, PAGE_SIZE, &hvc); |
---|
377 | 446 | if (err < 0) |
---|
378 | 447 | panic("munmap failed, errno = %d\n", |
---|
379 | 448 | -err); |
---|
380 | 449 | if (pte_present(*pte)) |
---|
381 | | - map_memory(addr, |
---|
382 | | - pte_val(*pte) & PAGE_MASK, |
---|
383 | | - PAGE_SIZE, 1, 1, 1); |
---|
| 450 | + err = add_mmap(addr, pte_val(*pte) & PAGE_MASK, |
---|
| 451 | + PAGE_SIZE, 0, &hvc); |
---|
384 | 452 | } |
---|
385 | 453 | else if (pte_newprot(*pte)) { |
---|
386 | 454 | updated = 1; |
---|
387 | | - os_protect_memory((void *) addr, PAGE_SIZE, 1, 1, 1); |
---|
| 455 | + err = add_mprotect(addr, PAGE_SIZE, 0, &hvc); |
---|
388 | 456 | } |
---|
389 | 457 | addr += PAGE_SIZE; |
---|
390 | 458 | } |
---|
| 459 | + if (!err) |
---|
| 460 | + err = do_ops(&hvc, hvc.index, 1); |
---|
| 461 | + |
---|
| 462 | + if (err < 0) |
---|
| 463 | + panic("flush_tlb_kernel failed, errno = %d\n", err); |
---|
391 | 464 | return updated; |
---|
392 | 465 | } |
---|
393 | 466 | |
---|
394 | 467 | void flush_tlb_page(struct vm_area_struct *vma, unsigned long address) |
---|
395 | 468 | { |
---|
396 | 469 | pgd_t *pgd; |
---|
| 470 | + p4d_t *p4d; |
---|
397 | 471 | pud_t *pud; |
---|
398 | 472 | pmd_t *pmd; |
---|
399 | 473 | pte_t *pte; |
---|
.. | .. |
---|
403 | 477 | struct mm_id *mm_id; |
---|
404 | 478 | |
---|
405 | 479 | address &= PAGE_MASK; |
---|
| 480 | + |
---|
| 481 | + if (address >= STUB_START && address < STUB_END) |
---|
| 482 | + goto kill; |
---|
| 483 | + |
---|
406 | 484 | pgd = pgd_offset(mm, address); |
---|
407 | 485 | if (!pgd_present(*pgd)) |
---|
408 | 486 | goto kill; |
---|
409 | 487 | |
---|
410 | | - pud = pud_offset(pgd, address); |
---|
| 488 | + p4d = p4d_offset(pgd, address); |
---|
| 489 | + if (!p4d_present(*p4d)) |
---|
| 490 | + goto kill; |
---|
| 491 | + |
---|
| 492 | + pud = pud_offset(p4d, address); |
---|
411 | 493 | if (!pud_present(*pud)) |
---|
412 | 494 | goto kill; |
---|
413 | 495 | |
---|
.. | .. |
---|
457 | 539 | |
---|
458 | 540 | kill: |
---|
459 | 541 | printk(KERN_ERR "Failed to flush page for address 0x%lx\n", address); |
---|
460 | | - force_sig(SIGKILL, current); |
---|
461 | | -} |
---|
462 | | - |
---|
463 | | -pgd_t *pgd_offset_proc(struct mm_struct *mm, unsigned long address) |
---|
464 | | -{ |
---|
465 | | - return pgd_offset(mm, address); |
---|
466 | | -} |
---|
467 | | - |
---|
468 | | -pud_t *pud_offset_proc(pgd_t *pgd, unsigned long address) |
---|
469 | | -{ |
---|
470 | | - return pud_offset(pgd, address); |
---|
471 | | -} |
---|
472 | | - |
---|
473 | | -pmd_t *pmd_offset_proc(pud_t *pud, unsigned long address) |
---|
474 | | -{ |
---|
475 | | - return pmd_offset(pud, address); |
---|
476 | | -} |
---|
477 | | - |
---|
478 | | -pte_t *pte_offset_proc(pmd_t *pmd, unsigned long address) |
---|
479 | | -{ |
---|
480 | | - return pte_offset_kernel(pmd, address); |
---|
481 | | -} |
---|
482 | | - |
---|
483 | | -pte_t *addr_pte(struct task_struct *task, unsigned long addr) |
---|
484 | | -{ |
---|
485 | | - pgd_t *pgd = pgd_offset(task->mm, addr); |
---|
486 | | - pud_t *pud = pud_offset(pgd, addr); |
---|
487 | | - pmd_t *pmd = pmd_offset(pud, addr); |
---|
488 | | - |
---|
489 | | - return pte_offset_map(pmd, addr); |
---|
| 542 | + force_sig(SIGKILL); |
---|
490 | 543 | } |
---|
491 | 544 | |
---|
492 | 545 | void flush_tlb_all(void) |
---|
493 | 546 | { |
---|
| 547 | + /* |
---|
| 548 | + * Don't bother flushing if this address space is about to be |
---|
| 549 | + * destroyed. |
---|
| 550 | + */ |
---|
| 551 | + if (atomic_read(¤t->mm->mm_users) == 0) |
---|
| 552 | + return; |
---|
| 553 | + |
---|
494 | 554 | flush_tlb_mm(current->mm); |
---|
495 | 555 | } |
---|
496 | 556 | |
---|
.. | .. |
---|
512 | 572 | static void fix_range(struct mm_struct *mm, unsigned long start_addr, |
---|
513 | 573 | unsigned long end_addr, int force) |
---|
514 | 574 | { |
---|
| 575 | + /* |
---|
| 576 | + * Don't bother flushing if this address space is about to be |
---|
| 577 | + * destroyed. |
---|
| 578 | + */ |
---|
| 579 | + if (atomic_read(&mm->mm_users) == 0) |
---|
| 580 | + return; |
---|
| 581 | + |
---|
515 | 582 | fix_range_common(mm, start_addr, end_addr, force); |
---|
516 | 583 | } |
---|
517 | 584 | |
---|
.. | .. |
---|
527 | 594 | void flush_tlb_mm_range(struct mm_struct *mm, unsigned long start, |
---|
528 | 595 | unsigned long end) |
---|
529 | 596 | { |
---|
530 | | - /* |
---|
531 | | - * Don't bother flushing if this address space is about to be |
---|
532 | | - * destroyed. |
---|
533 | | - */ |
---|
534 | | - if (atomic_read(&mm->mm_users) == 0) |
---|
535 | | - return; |
---|
536 | | - |
---|
537 | 597 | fix_range(mm, start, end, 0); |
---|
538 | 598 | } |
---|
539 | 599 | |
---|