mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-29 05:44:11 +00:00
74a0496748
ADI is a new feature supported on SPARC M7 and newer processors to allow hardware to catch rogue accesses to memory. ADI is supported for data fetches only and not instruction fetches. An app can enable ADI on its data pages, set version tags on them and use versioned addresses to access the data pages. Upper bits of the address contain the version tag. On M7 processors, upper four bits (bits 63-60) contain the version tag. If a rogue app attempts to access ADI enabled data pages, its access is blocked and processor generates an exception. Please see Documentation/sparc/adi.txt for further details. This patch extends mprotect to enable ADI (TSTATE.mcde), enable/disable MCD (Memory Corruption Detection) on selected memory ranges, enable TTE.mcd in PTEs, return ADI parameters to userspace and save/restore ADI version tags on page swap out/in or migration. ADI is not enabled by default for any task. A task must explicitly enable ADI on a memory range and set version tag for ADI to be effective for the task. Signed-off-by: Khalid Aziz <khalid.aziz@oracle.com> Cc: Khalid Aziz <khalid@gonehiking.org> Reviewed-by: Anthony Yznaga <anthony.yznaga@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>
93 lines
2.3 KiB
C
93 lines
2.3 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#ifndef __SPARC_MMAN_H__
|
|
#define __SPARC_MMAN_H__
|
|
|
|
#include <uapi/asm/mman.h>
|
|
|
|
#ifndef __ASSEMBLY__
|
|
#define arch_mmap_check(addr,len,flags) sparc_mmap_check(addr,len)
|
|
int sparc_mmap_check(unsigned long addr, unsigned long len);
|
|
|
|
#ifdef CONFIG_SPARC64
|
|
#include <asm/adi_64.h>
|
|
|
|
static inline void ipi_set_tstate_mcde(void *arg)
|
|
{
|
|
struct mm_struct *mm = arg;
|
|
|
|
/* Set TSTATE_MCDE for the task using address map that ADI has been
|
|
* enabled on if the task is running. If not, it will be set
|
|
* automatically at the next context switch
|
|
*/
|
|
if (current->mm == mm) {
|
|
struct pt_regs *regs;
|
|
|
|
regs = task_pt_regs(current);
|
|
regs->tstate |= TSTATE_MCDE;
|
|
}
|
|
}
|
|
|
|
#define arch_calc_vm_prot_bits(prot, pkey) sparc_calc_vm_prot_bits(prot)
|
|
static inline unsigned long sparc_calc_vm_prot_bits(unsigned long prot)
|
|
{
|
|
if (adi_capable() && (prot & PROT_ADI)) {
|
|
struct pt_regs *regs;
|
|
|
|
if (!current->mm->context.adi) {
|
|
regs = task_pt_regs(current);
|
|
regs->tstate |= TSTATE_MCDE;
|
|
current->mm->context.adi = true;
|
|
on_each_cpu_mask(mm_cpumask(current->mm),
|
|
ipi_set_tstate_mcde, current->mm, 0);
|
|
}
|
|
return VM_SPARC_ADI;
|
|
} else {
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
#define arch_vm_get_page_prot(vm_flags) sparc_vm_get_page_prot(vm_flags)
|
|
static inline pgprot_t sparc_vm_get_page_prot(unsigned long vm_flags)
|
|
{
|
|
return (vm_flags & VM_SPARC_ADI) ? __pgprot(_PAGE_MCD_4V) : __pgprot(0);
|
|
}
|
|
|
|
#define arch_validate_prot(prot, addr) sparc_validate_prot(prot, addr)
|
|
static inline int sparc_validate_prot(unsigned long prot, unsigned long addr)
|
|
{
|
|
if (prot & ~(PROT_READ | PROT_WRITE | PROT_EXEC | PROT_SEM | PROT_ADI))
|
|
return 0;
|
|
if (prot & PROT_ADI) {
|
|
if (!adi_capable())
|
|
return 0;
|
|
|
|
if (addr) {
|
|
struct vm_area_struct *vma;
|
|
|
|
vma = find_vma(current->mm, addr);
|
|
if (vma) {
|
|
/* ADI can not be enabled on PFN
|
|
* mapped pages
|
|
*/
|
|
if (vma->vm_flags & (VM_PFNMAP | VM_MIXEDMAP))
|
|
return 0;
|
|
|
|
/* Mergeable pages can become unmergeable
|
|
* if ADI is enabled on them even if they
|
|
* have identical data on them. This can be
|
|
* because ADI enabled pages with identical
|
|
* data may still not have identical ADI
|
|
* tags on them. Disallow ADI on mergeable
|
|
* pages.
|
|
*/
|
|
if (vma->vm_flags & VM_MERGEABLE)
|
|
return 0;
|
|
}
|
|
}
|
|
}
|
|
return 1;
|
|
}
|
|
#endif /* CONFIG_SPARC64 */
|
|
|
|
#endif /* __ASSEMBLY__ */
|
|
#endif /* __SPARC_MMAN_H__ */
|