1 /* $NetBSD: subr_csan.c,v 1.5 2019/11/15 08:11:37 maxv Exp $ */ 2 3 /* 4 * Copyright (c) 2019 The NetBSD Foundation, Inc. 5 * All rights reserved. 6 * Copyright (c) 2019 Andrew Turner 7 * 8 * This code is derived from software contributed to The NetBSD Foundation 9 * by Maxime Villard. 10 * 11 * Redistribution and use in source and binary forms, with or without 12 * modification, are permitted provided that the following conditions 13 * are met: 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 20 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 21 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 22 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 23 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 24 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 25 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 26 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 27 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 28 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 29 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 30 * POSSIBILITY OF SUCH DAMAGE. 31 */ 32 33 #define SAN_RUNTIME 34 35 #include "opt_ddb.h" 36 37 #include <sys/cdefs.h> 38 __FBSDID("$FreeBSD$"); 39 40 #include <sys/param.h> 41 #include <sys/kernel.h> 42 #include <sys/bus.h> 43 #include <sys/conf.h> 44 #include <sys/cpu.h> 45 #include <sys/csan.h> 46 #include <sys/proc.h> 47 #include <sys/smp.h> 48 #include <sys/systm.h> 49 50 #include <ddb/ddb.h> 51 #include <ddb/db_sym.h> 52 53 #ifdef KCSAN_PANIC 54 #define REPORT panic 55 #else 56 #define REPORT printf 57 #endif 58 59 typedef struct { 60 uintptr_t addr; 61 uint32_t size; 62 bool write:1; 63 bool atomic:1; 64 uintptr_t pc; 65 } csan_cell_t; 66 67 typedef struct { 68 bool inited; 69 uint32_t cnt; 70 csan_cell_t cell; 71 } csan_cpu_t; 72 73 static csan_cpu_t kcsan_cpus[MAXCPU]; 74 static bool kcsan_enabled __read_mostly; 75 76 #define __RET_ADDR (uintptr_t)__builtin_return_address(0) 77 78 #define KCSAN_NACCESSES 1024 79 #define KCSAN_DELAY 10 /* 10 microseconds */ 80 81 /* -------------------------------------------------------------------------- */ 82 83 /* The MD code. */ 84 #include <machine/csan.h> 85 86 /* -------------------------------------------------------------------------- */ 87 88 static void 89 kcsan_enable(void *dummy __unused) 90 { 91 92 printf("Enabling KCSCAN, expect reduced performance.\n"); 93 kcsan_enabled = true; 94 } 95 SYSINIT(kcsan_enable, SI_SUB_SMP, SI_ORDER_SECOND, kcsan_enable, NULL); 96 97 void 98 kcsan_cpu_init(u_int cpu) 99 { 100 kcsan_cpus[cpu].inited = true; 101 } 102 103 /* -------------------------------------------------------------------------- */ 104 105 static inline void 106 kcsan_report(csan_cell_t *new, u_int newcpu, csan_cell_t *old, u_int oldcpu) 107 { 108 const char *newsym, *oldsym; 109 #ifdef DDB 110 c_db_sym_t sym; 111 db_expr_t offset; 112 113 sym = db_search_symbol((vm_offset_t)new->pc, DB_STGY_PROC, &offset); 114 db_symbol_values(sym, &newsym, NULL); 115 116 sym = db_search_symbol((vm_offset_t)old->pc, DB_STGY_PROC, &offset); 117 db_symbol_values(sym, &oldsym, NULL); 118 #else 119 newsym = ""; 120 oldsym = ""; 121 #endif 122 REPORT("CSan: Racy Access " 123 "[Cpu%u %s%s Addr=%p Size=%u PC=%p<%s>] " 124 "[Cpu%u %s%s Addr=%p Size=%u PC=%p<%s>]\n", 125 newcpu, 126 (new->atomic ? "Atomic " : ""), (new->write ? "Write" : "Read"), 127 (void *)new->addr, new->size, (void *)new->pc, newsym, 128 oldcpu, 129 (old->atomic ? "Atomic " : ""), (old->write ? "Write" : "Read"), 130 (void *)old->addr, old->size, (void *)old->pc, oldsym); 131 kcsan_md_unwind(); 132 } 133 134 static inline bool 135 kcsan_access_is_atomic(csan_cell_t *new, csan_cell_t *old) 136 { 137 if (new->write && !new->atomic) 138 return false; 139 if (old->write && !old->atomic) 140 return false; 141 return true; 142 } 143 144 static inline void 145 kcsan_access(uintptr_t addr, size_t size, bool write, bool atomic, uintptr_t pc) 146 { 147 csan_cell_t old, new; 148 csan_cpu_t *cpu; 149 uint64_t intr; 150 size_t i; 151 152 if (__predict_false(!kcsan_enabled)) 153 return; 154 if (__predict_false(kcsan_md_unsupported((vm_offset_t)addr))) 155 return; 156 if (KERNEL_PANICKED()) 157 return; 158 159 new.addr = addr; 160 new.size = size; 161 new.write = write; 162 new.atomic = atomic; 163 new.pc = pc; 164 165 CPU_FOREACH(i) { 166 __builtin_memcpy(&old, &kcsan_cpus[i].cell, sizeof(old)); 167 168 if (old.addr + old.size <= new.addr) 169 continue; 170 if (new.addr + new.size <= old.addr) 171 continue; 172 if (__predict_true(!old.write && !new.write)) 173 continue; 174 if (__predict_true(kcsan_access_is_atomic(&new, &old))) 175 continue; 176 177 kcsan_report(&new, PCPU_GET(cpuid), &old, i); 178 break; 179 } 180 181 if (__predict_false(!kcsan_md_is_avail())) 182 return; 183 184 kcsan_md_disable_intrs(&intr); 185 186 cpu = &kcsan_cpus[PCPU_GET(cpuid)]; 187 if (__predict_false(!cpu->inited)) 188 goto out; 189 cpu->cnt = (cpu->cnt + 1) % KCSAN_NACCESSES; 190 if (__predict_true(cpu->cnt != 0)) 191 goto out; 192 193 __builtin_memcpy(&cpu->cell, &new, sizeof(new)); 194 kcsan_md_delay(KCSAN_DELAY); 195 __builtin_memset(&cpu->cell, 0, sizeof(new)); 196 197 out: 198 kcsan_md_enable_intrs(&intr); 199 } 200 201 #define CSAN_READ(size) \ 202 void __tsan_read##size(uintptr_t); \ 203 void __tsan_read##size(uintptr_t addr) \ 204 { \ 205 kcsan_access(addr, size, false, false, __RET_ADDR); \ 206 } \ 207 void __tsan_unaligned_read##size(uintptr_t); \ 208 void __tsan_unaligned_read##size(uintptr_t addr) \ 209 { \ 210 kcsan_access(addr, size, false, false, __RET_ADDR); \ 211 } 212 213 CSAN_READ(1) 214 CSAN_READ(2) 215 CSAN_READ(4) 216 CSAN_READ(8) 217 CSAN_READ(16) 218 219 #define CSAN_WRITE(size) \ 220 void __tsan_write##size(uintptr_t); \ 221 void __tsan_write##size(uintptr_t addr) \ 222 { \ 223 kcsan_access(addr, size, true, false, __RET_ADDR); \ 224 } \ 225 void __tsan_unaligned_write##size(uintptr_t); \ 226 void __tsan_unaligned_write##size(uintptr_t addr) \ 227 { \ 228 kcsan_access(addr, size, true, false, __RET_ADDR); \ 229 } 230 231 CSAN_WRITE(1) 232 CSAN_WRITE(2) 233 CSAN_WRITE(4) 234 CSAN_WRITE(8) 235 CSAN_WRITE(16) 236 237 void __tsan_read_range(uintptr_t, size_t); 238 void __tsan_write_range(uintptr_t, size_t); 239 240 void 241 __tsan_read_range(uintptr_t addr, size_t size) 242 { 243 kcsan_access(addr, size, false, false, __RET_ADDR); 244 } 245 246 void 247 __tsan_write_range(uintptr_t addr, size_t size) 248 { 249 kcsan_access(addr, size, true, false, __RET_ADDR); 250 } 251 252 void __tsan_init(void); 253 void __tsan_func_entry(void *); 254 void __tsan_func_exit(void); 255 256 void 257 __tsan_init(void) 258 { 259 } 260 261 void 262 __tsan_func_entry(void *call_pc) 263 { 264 } 265 266 void 267 __tsan_func_exit(void) 268 { 269 } 270 271 /* -------------------------------------------------------------------------- */ 272 273 void * 274 kcsan_memcpy(void *dst, const void *src, size_t len) 275 { 276 kcsan_access((uintptr_t)src, len, false, false, __RET_ADDR); 277 kcsan_access((uintptr_t)dst, len, true, false, __RET_ADDR); 278 return __builtin_memcpy(dst, src, len); 279 } 280 281 int 282 kcsan_memcmp(const void *b1, const void *b2, size_t len) 283 { 284 kcsan_access((uintptr_t)b1, len, false, false, __RET_ADDR); 285 kcsan_access((uintptr_t)b2, len, false, false, __RET_ADDR); 286 return __builtin_memcmp(b1, b2, len); 287 } 288 289 void * 290 kcsan_memset(void *b, int c, size_t len) 291 { 292 kcsan_access((uintptr_t)b, len, true, false, __RET_ADDR); 293 return __builtin_memset(b, c, len); 294 } 295 296 void * 297 kcsan_memmove(void *dst, const void *src, size_t len) 298 { 299 kcsan_access((uintptr_t)src, len, false, false, __RET_ADDR); 300 kcsan_access((uintptr_t)dst, len, true, false, __RET_ADDR); 301 return __builtin_memmove(dst, src, len); 302 } 303 304 char * 305 kcsan_strcpy(char *dst, const char *src) 306 { 307 char *save = dst; 308 309 while (1) { 310 kcsan_access((uintptr_t)src, 1, false, false, __RET_ADDR); 311 kcsan_access((uintptr_t)dst, 1, true, false, __RET_ADDR); 312 *dst = *src; 313 if (*src == '\0') 314 break; 315 src++, dst++; 316 } 317 318 return save; 319 } 320 321 int 322 kcsan_strcmp(const char *s1, const char *s2) 323 { 324 while (1) { 325 kcsan_access((uintptr_t)s1, 1, false, false, __RET_ADDR); 326 kcsan_access((uintptr_t)s2, 1, false, false, __RET_ADDR); 327 if (*s1 != *s2) 328 break; 329 if (*s1 == '\0') 330 return 0; 331 s1++, s2++; 332 } 333 334 return (*(const unsigned char *)s1 - *(const unsigned char *)s2); 335 } 336 337 size_t 338 kcsan_strlen(const char *str) 339 { 340 const char *s; 341 342 s = str; 343 while (1) { 344 kcsan_access((uintptr_t)s, 1, false, false, __RET_ADDR); 345 if (*s == '\0') 346 break; 347 s++; 348 } 349 350 return (s - str); 351 } 352 353 int 354 kcsan_copyin(const void *uaddr, void *kaddr, size_t len) 355 { 356 kcsan_access((uintptr_t)kaddr, len, true, false, __RET_ADDR); 357 return copyin(uaddr, kaddr, len); 358 } 359 360 int 361 kcsan_copyinstr(const void *uaddr, void *kaddr, size_t len, size_t *done) 362 { 363 kcsan_access((uintptr_t)kaddr, len, true, false, __RET_ADDR); 364 return copyinstr(uaddr, kaddr, len, done); 365 } 366 367 int 368 kcsan_copyout(const void *kaddr, void *uaddr, size_t len) 369 { 370 kcsan_access((uintptr_t)kaddr, len, false, false, __RET_ADDR); 371 return copyout(kaddr, uaddr, len); 372 } 373 374 /* -------------------------------------------------------------------------- */ 375 376 #include <machine/atomic.h> 377 #define ATOMIC_SAN_PREFIX kcsan 378 #include <sys/atomic_san.h> 379 380 #define _CSAN_ATOMIC_FUNC_ADD(name, type) \ 381 void kcsan_atomic_add_##name(volatile type *ptr, type val) \ 382 { \ 383 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 384 __RET_ADDR); \ 385 atomic_add_##name(ptr, val); \ 386 } 387 388 #define CSAN_ATOMIC_FUNC_ADD(name, type) \ 389 _CSAN_ATOMIC_FUNC_ADD(name, type) \ 390 _CSAN_ATOMIC_FUNC_ADD(acq_##name, type) \ 391 _CSAN_ATOMIC_FUNC_ADD(rel_##name, type) 392 393 #define _CSAN_ATOMIC_FUNC_CLEAR(name, type) \ 394 void kcsan_atomic_clear_##name(volatile type *ptr, type val) \ 395 { \ 396 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 397 __RET_ADDR); \ 398 atomic_clear_##name(ptr, val); \ 399 } 400 401 #define CSAN_ATOMIC_FUNC_CLEAR(name, type) \ 402 _CSAN_ATOMIC_FUNC_CLEAR(name, type) \ 403 _CSAN_ATOMIC_FUNC_CLEAR(acq_##name, type) \ 404 _CSAN_ATOMIC_FUNC_CLEAR(rel_##name, type) 405 406 #define _CSAN_ATOMIC_FUNC_CMPSET(name, type) \ 407 int kcsan_atomic_cmpset_##name(volatile type *ptr, type val1, \ 408 type val2) \ 409 { \ 410 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 411 __RET_ADDR); \ 412 return (atomic_cmpset_##name(ptr, val1, val2)); \ 413 } 414 415 #define CSAN_ATOMIC_FUNC_CMPSET(name, type) \ 416 _CSAN_ATOMIC_FUNC_CMPSET(name, type) \ 417 _CSAN_ATOMIC_FUNC_CMPSET(acq_##name, type) \ 418 _CSAN_ATOMIC_FUNC_CMPSET(rel_##name, type) 419 420 #define _CSAN_ATOMIC_FUNC_FCMPSET(name, type) \ 421 int kcsan_atomic_fcmpset_##name(volatile type *ptr, type *val1, \ 422 type val2) \ 423 { \ 424 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 425 __RET_ADDR); \ 426 return (atomic_fcmpset_##name(ptr, val1, val2)); \ 427 } 428 429 #define CSAN_ATOMIC_FUNC_FCMPSET(name, type) \ 430 _CSAN_ATOMIC_FUNC_FCMPSET(name, type) \ 431 _CSAN_ATOMIC_FUNC_FCMPSET(acq_##name, type) \ 432 _CSAN_ATOMIC_FUNC_FCMPSET(rel_##name, type) 433 434 #define CSAN_ATOMIC_FUNC_FETCHADD(name, type) \ 435 type kcsan_atomic_fetchadd_##name(volatile type *ptr, type val) \ 436 { \ 437 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 438 __RET_ADDR); \ 439 return (atomic_fetchadd_##name(ptr, val)); \ 440 } 441 442 #define _CSAN_ATOMIC_FUNC_LOAD(name, type) \ 443 type kcsan_atomic_load_##name(volatile type *ptr) \ 444 { \ 445 kcsan_access((uintptr_t)ptr, sizeof(type), false, true, \ 446 __RET_ADDR); \ 447 return (atomic_load_##name(ptr)); \ 448 } 449 450 #define CSAN_ATOMIC_FUNC_LOAD(name, type) \ 451 _CSAN_ATOMIC_FUNC_LOAD(name, type) \ 452 _CSAN_ATOMIC_FUNC_LOAD(acq_##name, type) \ 453 454 #define CSAN_ATOMIC_FUNC_READANDCLEAR(name, type) \ 455 type kcsan_atomic_readandclear_##name(volatile type *ptr) \ 456 { \ 457 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 458 __RET_ADDR); \ 459 return (atomic_readandclear_##name(ptr)); \ 460 } 461 462 #define _CSAN_ATOMIC_FUNC_SET(name, type) \ 463 void kcsan_atomic_set_##name(volatile type *ptr, type val) \ 464 { \ 465 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 466 __RET_ADDR); \ 467 atomic_set_##name(ptr, val); \ 468 } 469 470 #define CSAN_ATOMIC_FUNC_SET(name, type) \ 471 _CSAN_ATOMIC_FUNC_SET(name, type) \ 472 _CSAN_ATOMIC_FUNC_SET(acq_##name, type) \ 473 _CSAN_ATOMIC_FUNC_SET(rel_##name, type) 474 475 #define _CSAN_ATOMIC_FUNC_SUBTRACT(name, type) \ 476 void kcsan_atomic_subtract_##name(volatile type *ptr, type val) \ 477 { \ 478 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 479 __RET_ADDR); \ 480 atomic_subtract_##name(ptr, val); \ 481 } 482 483 #define CSAN_ATOMIC_FUNC_SUBTRACT(name, type) \ 484 _CSAN_ATOMIC_FUNC_SUBTRACT(name, type) \ 485 _CSAN_ATOMIC_FUNC_SUBTRACT(acq_##name, type) \ 486 _CSAN_ATOMIC_FUNC_SUBTRACT(rel_##name, type) 487 488 #define _CSAN_ATOMIC_FUNC_STORE(name, type) \ 489 void kcsan_atomic_store_##name(volatile type *ptr, type val) \ 490 { \ 491 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 492 __RET_ADDR); \ 493 atomic_store_##name(ptr, val); \ 494 } 495 496 #define CSAN_ATOMIC_FUNC_STORE(name, type) \ 497 _CSAN_ATOMIC_FUNC_STORE(name, type) \ 498 _CSAN_ATOMIC_FUNC_STORE(rel_##name, type) 499 500 #define CSAN_ATOMIC_FUNC_SWAP(name, type) \ 501 type kcsan_atomic_swap_##name(volatile type *ptr, type val) \ 502 { \ 503 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 504 __RET_ADDR); \ 505 return(atomic_swap_##name(ptr, val)); \ 506 } 507 508 #define CSAN_ATOMIC_FUNC_TESTANDCLEAR(name, type) \ 509 int kcsan_atomic_testandclear_##name(volatile type *ptr, u_int val) \ 510 { \ 511 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 512 __RET_ADDR); \ 513 return(atomic_testandclear_##name(ptr, val)); \ 514 } 515 516 #define CSAN_ATOMIC_FUNC_TESTANDSET(name, type) \ 517 int kcsan_atomic_testandset_##name(volatile type *ptr, u_int val) \ 518 { \ 519 kcsan_access((uintptr_t)ptr, sizeof(type), true, true, \ 520 __RET_ADDR); \ 521 return (atomic_testandset_##name(ptr, val)); \ 522 } 523 524 CSAN_ATOMIC_FUNC_ADD(8, uint8_t) 525 CSAN_ATOMIC_FUNC_CLEAR(8, uint8_t) 526 CSAN_ATOMIC_FUNC_CMPSET(8, uint8_t) 527 CSAN_ATOMIC_FUNC_FCMPSET(8, uint8_t) 528 CSAN_ATOMIC_FUNC_LOAD(8, uint8_t) 529 CSAN_ATOMIC_FUNC_SET(8, uint8_t) 530 CSAN_ATOMIC_FUNC_SUBTRACT(8, uint8_t) 531 _CSAN_ATOMIC_FUNC_STORE(8, uint8_t) 532 #if 0 533 CSAN_ATOMIC_FUNC_FETCHADD(8, uint8_t) 534 CSAN_ATOMIC_FUNC_READANDCLEAR(8, uint8_t) 535 CSAN_ATOMIC_FUNC_SWAP(8, uint8_t) 536 CSAN_ATOMIC_FUNC_TESTANDCLEAR(8, uint8_t) 537 CSAN_ATOMIC_FUNC_TESTANDSET(8, uint8_t) 538 #endif 539 540 CSAN_ATOMIC_FUNC_ADD(16, uint16_t) 541 CSAN_ATOMIC_FUNC_CLEAR(16, uint16_t) 542 CSAN_ATOMIC_FUNC_CMPSET(16, uint16_t) 543 CSAN_ATOMIC_FUNC_FCMPSET(16, uint16_t) 544 CSAN_ATOMIC_FUNC_LOAD(16, uint16_t) 545 CSAN_ATOMIC_FUNC_SET(16, uint16_t) 546 CSAN_ATOMIC_FUNC_SUBTRACT(16, uint16_t) 547 _CSAN_ATOMIC_FUNC_STORE(16, uint16_t) 548 #if 0 549 CSAN_ATOMIC_FUNC_FETCHADD(16, uint16_t) 550 CSAN_ATOMIC_FUNC_READANDCLEAR(16, uint16_t) 551 CSAN_ATOMIC_FUNC_SWAP(16, uint16_t) 552 CSAN_ATOMIC_FUNC_TESTANDCLEAR(16, uint16_t) 553 CSAN_ATOMIC_FUNC_TESTANDSET(16, uint16_t) 554 #endif 555 556 CSAN_ATOMIC_FUNC_ADD(32, uint32_t) 557 CSAN_ATOMIC_FUNC_CLEAR(32, uint32_t) 558 CSAN_ATOMIC_FUNC_CMPSET(32, uint32_t) 559 CSAN_ATOMIC_FUNC_FCMPSET(32, uint32_t) 560 CSAN_ATOMIC_FUNC_FETCHADD(32, uint32_t) 561 CSAN_ATOMIC_FUNC_LOAD(32, uint32_t) 562 CSAN_ATOMIC_FUNC_READANDCLEAR(32, uint32_t) 563 CSAN_ATOMIC_FUNC_SET(32, uint32_t) 564 CSAN_ATOMIC_FUNC_SUBTRACT(32, uint32_t) 565 CSAN_ATOMIC_FUNC_STORE(32, uint32_t) 566 CSAN_ATOMIC_FUNC_SWAP(32, uint32_t) 567 #if !defined(__aarch64__) 568 CSAN_ATOMIC_FUNC_TESTANDCLEAR(32, uint32_t) 569 CSAN_ATOMIC_FUNC_TESTANDSET(32, uint32_t) 570 #endif 571 572 CSAN_ATOMIC_FUNC_ADD(64, uint64_t) 573 CSAN_ATOMIC_FUNC_CLEAR(64, uint64_t) 574 CSAN_ATOMIC_FUNC_CMPSET(64, uint64_t) 575 CSAN_ATOMIC_FUNC_FCMPSET(64, uint64_t) 576 CSAN_ATOMIC_FUNC_FETCHADD(64, uint64_t) 577 CSAN_ATOMIC_FUNC_LOAD(64, uint64_t) 578 CSAN_ATOMIC_FUNC_READANDCLEAR(64, uint64_t) 579 CSAN_ATOMIC_FUNC_SET(64, uint64_t) 580 CSAN_ATOMIC_FUNC_SUBTRACT(64, uint64_t) 581 CSAN_ATOMIC_FUNC_STORE(64, uint64_t) 582 CSAN_ATOMIC_FUNC_SWAP(64, uint64_t) 583 #if !defined(__aarch64__) 584 CSAN_ATOMIC_FUNC_TESTANDCLEAR(64, uint64_t) 585 CSAN_ATOMIC_FUNC_TESTANDSET(64, uint64_t) 586 #endif 587 588 CSAN_ATOMIC_FUNC_ADD(char, uint8_t) 589 CSAN_ATOMIC_FUNC_CLEAR(char, uint8_t) 590 CSAN_ATOMIC_FUNC_CMPSET(char, uint8_t) 591 CSAN_ATOMIC_FUNC_FCMPSET(char, uint8_t) 592 CSAN_ATOMIC_FUNC_LOAD(char, uint8_t) 593 CSAN_ATOMIC_FUNC_SET(char, uint8_t) 594 CSAN_ATOMIC_FUNC_SUBTRACT(char, uint8_t) 595 _CSAN_ATOMIC_FUNC_STORE(char, uint8_t) 596 #if 0 597 CSAN_ATOMIC_FUNC_FETCHADD(char, uint8_t) 598 CSAN_ATOMIC_FUNC_READANDCLEAR(char, uint8_t) 599 CSAN_ATOMIC_FUNC_SWAP(char, uint8_t) 600 CSAN_ATOMIC_FUNC_TESTANDCLEAR(char, uint8_t) 601 CSAN_ATOMIC_FUNC_TESTANDSET(char, uint8_t) 602 #endif 603 604 CSAN_ATOMIC_FUNC_ADD(short, uint16_t) 605 CSAN_ATOMIC_FUNC_CLEAR(short, uint16_t) 606 CSAN_ATOMIC_FUNC_CMPSET(short, uint16_t) 607 CSAN_ATOMIC_FUNC_FCMPSET(short, uint16_t) 608 CSAN_ATOMIC_FUNC_LOAD(short, uint16_t) 609 CSAN_ATOMIC_FUNC_SET(short, uint16_t) 610 CSAN_ATOMIC_FUNC_SUBTRACT(short, uint16_t) 611 _CSAN_ATOMIC_FUNC_STORE(short, uint16_t) 612 #if 0 613 CSAN_ATOMIC_FUNC_FETCHADD(short, uint16_t) 614 CSAN_ATOMIC_FUNC_READANDCLEAR(short, uint16_t) 615 CSAN_ATOMIC_FUNC_SWAP(short, uint16_t) 616 CSAN_ATOMIC_FUNC_TESTANDCLEAR(short, uint16_t) 617 CSAN_ATOMIC_FUNC_TESTANDSET(short, uint16_t) 618 #endif 619 620 CSAN_ATOMIC_FUNC_ADD(int, u_int) 621 CSAN_ATOMIC_FUNC_CLEAR(int, u_int) 622 CSAN_ATOMIC_FUNC_CMPSET(int, u_int) 623 CSAN_ATOMIC_FUNC_FCMPSET(int, u_int) 624 CSAN_ATOMIC_FUNC_FETCHADD(int, u_int) 625 CSAN_ATOMIC_FUNC_LOAD(int, u_int) 626 CSAN_ATOMIC_FUNC_READANDCLEAR(int, u_int) 627 CSAN_ATOMIC_FUNC_SET(int, u_int) 628 CSAN_ATOMIC_FUNC_SUBTRACT(int, u_int) 629 CSAN_ATOMIC_FUNC_STORE(int, u_int) 630 CSAN_ATOMIC_FUNC_SWAP(int, u_int) 631 #if !defined(__aarch64__) 632 CSAN_ATOMIC_FUNC_TESTANDCLEAR(int, u_int) 633 CSAN_ATOMIC_FUNC_TESTANDSET(int, u_int) 634 #endif 635 636 CSAN_ATOMIC_FUNC_ADD(long, u_long) 637 CSAN_ATOMIC_FUNC_CLEAR(long, u_long) 638 CSAN_ATOMIC_FUNC_CMPSET(long, u_long) 639 CSAN_ATOMIC_FUNC_FCMPSET(long, u_long) 640 CSAN_ATOMIC_FUNC_FETCHADD(long, u_long) 641 CSAN_ATOMIC_FUNC_LOAD(long, u_long) 642 CSAN_ATOMIC_FUNC_READANDCLEAR(long, u_long) 643 CSAN_ATOMIC_FUNC_SET(long, u_long) 644 CSAN_ATOMIC_FUNC_SUBTRACT(long, u_long) 645 CSAN_ATOMIC_FUNC_STORE(long, u_long) 646 CSAN_ATOMIC_FUNC_SWAP(long, u_long) 647 #if !defined(__aarch64__) 648 CSAN_ATOMIC_FUNC_TESTANDCLEAR(long, u_long) 649 CSAN_ATOMIC_FUNC_TESTANDSET(long, u_long) 650 CSAN_ATOMIC_FUNC_TESTANDSET(acq_long, u_long) 651 #endif 652 653 CSAN_ATOMIC_FUNC_ADD(ptr, uintptr_t) 654 CSAN_ATOMIC_FUNC_CLEAR(ptr, uintptr_t) 655 CSAN_ATOMIC_FUNC_CMPSET(ptr, uintptr_t) 656 CSAN_ATOMIC_FUNC_FCMPSET(ptr, uintptr_t) 657 #if !defined(__amd64__) 658 CSAN_ATOMIC_FUNC_FETCHADD(ptr, uintptr_t) 659 #endif 660 CSAN_ATOMIC_FUNC_LOAD(ptr, uintptr_t) 661 CSAN_ATOMIC_FUNC_READANDCLEAR(ptr, uintptr_t) 662 CSAN_ATOMIC_FUNC_SET(ptr, uintptr_t) 663 CSAN_ATOMIC_FUNC_SUBTRACT(ptr, uintptr_t) 664 CSAN_ATOMIC_FUNC_STORE(ptr, uintptr_t) 665 CSAN_ATOMIC_FUNC_SWAP(ptr, uintptr_t) 666 #if 0 667 CSAN_ATOMIC_FUNC_TESTANDCLEAR(ptr, uintptr_t) 668 CSAN_ATOMIC_FUNC_TESTANDSET(ptr, uintptr_t) 669 #endif 670 671 #define CSAN_ATOMIC_FUNC_THREAD_FENCE(name) \ 672 void kcsan_atomic_thread_fence_##name(void) \ 673 { \ 674 atomic_thread_fence_##name(); \ 675 } 676 677 CSAN_ATOMIC_FUNC_THREAD_FENCE(acq) 678 CSAN_ATOMIC_FUNC_THREAD_FENCE(acq_rel) 679 CSAN_ATOMIC_FUNC_THREAD_FENCE(rel) 680 CSAN_ATOMIC_FUNC_THREAD_FENCE(seq_cst) 681 682 void 683 kcsan_atomic_interrupt_fence(void) 684 { 685 atomic_interrupt_fence(); 686 } 687 688 /* -------------------------------------------------------------------------- */ 689 690 #include <sys/bus.h> 691 #include <machine/bus.h> 692 #define BUS_SAN_PREFIX kcsan 693 #include <sys/bus_san.h> 694 695 int 696 kcsan_bus_space_map(bus_space_tag_t tag, bus_addr_t hnd, bus_size_t size, 697 int flags, bus_space_handle_t *handlep) 698 { 699 700 return (bus_space_map(tag, hnd, size, flags, handlep)); 701 } 702 703 void 704 kcsan_bus_space_unmap(bus_space_tag_t tag, bus_space_handle_t hnd, 705 bus_size_t size) 706 { 707 708 bus_space_unmap(tag, hnd, size); 709 } 710 711 int 712 kcsan_bus_space_subregion(bus_space_tag_t tag, bus_space_handle_t hnd, 713 bus_size_t offset, bus_size_t size, bus_space_handle_t *handlep) 714 { 715 716 return (bus_space_subregion(tag, hnd, offset, size, handlep)); 717 } 718 719 #if !defined(__amd64__) 720 int 721 kcsan_bus_space_alloc(bus_space_tag_t tag, bus_addr_t reg_start, 722 bus_addr_t reg_end, bus_size_t size, bus_size_t alignment, 723 bus_size_t boundary, int flags, bus_addr_t *addrp, 724 bus_space_handle_t *handlep) 725 { 726 727 return (bus_space_alloc(tag, reg_start, reg_end, size, alignment, 728 boundary, flags, addrp, handlep)); 729 } 730 #endif 731 732 void 733 kcsan_bus_space_free(bus_space_tag_t tag, bus_space_handle_t hnd, 734 bus_size_t size) 735 { 736 737 bus_space_free(tag, hnd, size); 738 } 739 740 void 741 kcsan_bus_space_barrier(bus_space_tag_t tag, bus_space_handle_t hnd, 742 bus_size_t offset, bus_size_t size, int flags) 743 { 744 745 bus_space_barrier(tag, hnd, offset, size, flags); 746 } 747 748 #define CSAN_BUS_READ_FUNC(func, width, type) \ 749 type kcsan_bus_space_read##func##_##width(bus_space_tag_t tag, \ 750 bus_space_handle_t hnd, bus_size_t offset) \ 751 { \ 752 return (bus_space_read##func##_##width(tag, hnd, \ 753 offset)); \ 754 } \ 755 756 #define CSAN_BUS_READ_PTR_FUNC(func, width, type) \ 757 void kcsan_bus_space_read_##func##_##width(bus_space_tag_t tag, \ 758 bus_space_handle_t hnd, bus_size_t size, type *buf, \ 759 bus_size_t count) \ 760 { \ 761 kcsan_access((uintptr_t)buf, sizeof(type) * count, \ 762 false, false, __RET_ADDR); \ 763 bus_space_read_##func##_##width(tag, hnd, size, buf, \ 764 count); \ 765 } 766 767 CSAN_BUS_READ_FUNC(, 1, uint8_t) 768 CSAN_BUS_READ_FUNC(_stream, 1, uint8_t) 769 CSAN_BUS_READ_PTR_FUNC(multi, 1, uint8_t) 770 CSAN_BUS_READ_PTR_FUNC(multi_stream, 1, uint8_t) 771 CSAN_BUS_READ_PTR_FUNC(region, 1, uint8_t) 772 CSAN_BUS_READ_PTR_FUNC(region_stream, 1, uint8_t) 773 774 CSAN_BUS_READ_FUNC(, 2, uint16_t) 775 CSAN_BUS_READ_FUNC(_stream, 2, uint16_t) 776 CSAN_BUS_READ_PTR_FUNC(multi, 2, uint16_t) 777 CSAN_BUS_READ_PTR_FUNC(multi_stream, 2, uint16_t) 778 CSAN_BUS_READ_PTR_FUNC(region, 2, uint16_t) 779 CSAN_BUS_READ_PTR_FUNC(region_stream, 2, uint16_t) 780 781 CSAN_BUS_READ_FUNC(, 4, uint32_t) 782 CSAN_BUS_READ_FUNC(_stream, 4, uint32_t) 783 CSAN_BUS_READ_PTR_FUNC(multi, 4, uint32_t) 784 CSAN_BUS_READ_PTR_FUNC(multi_stream, 4, uint32_t) 785 CSAN_BUS_READ_PTR_FUNC(region, 4, uint32_t) 786 CSAN_BUS_READ_PTR_FUNC(region_stream, 4, uint32_t) 787 788 CSAN_BUS_READ_FUNC(, 8, uint64_t) 789 #if defined(__aarch64__) 790 CSAN_BUS_READ_FUNC(_stream, 8, uint64_t) 791 CSAN_BUS_READ_PTR_FUNC(multi, 8, uint64_t) 792 CSAN_BUS_READ_PTR_FUNC(multi_stream, 8, uint64_t) 793 CSAN_BUS_READ_PTR_FUNC(region, 8, uint64_t) 794 CSAN_BUS_READ_PTR_FUNC(region_stream, 8, uint64_t) 795 #endif 796 797 #define CSAN_BUS_WRITE_FUNC(func, width, type) \ 798 void kcsan_bus_space_write##func##_##width(bus_space_tag_t tag, \ 799 bus_space_handle_t hnd, bus_size_t offset, type value) \ 800 { \ 801 bus_space_write##func##_##width(tag, hnd, offset, value); \ 802 } \ 803 804 #define CSAN_BUS_WRITE_PTR_FUNC(func, width, type) \ 805 void kcsan_bus_space_write_##func##_##width(bus_space_tag_t tag, \ 806 bus_space_handle_t hnd, bus_size_t size, const type *buf, \ 807 bus_size_t count) \ 808 { \ 809 kcsan_access((uintptr_t)buf, sizeof(type) * count, \ 810 true, false, __RET_ADDR); \ 811 bus_space_write_##func##_##width(tag, hnd, size, buf, \ 812 count); \ 813 } 814 815 CSAN_BUS_WRITE_FUNC(, 1, uint8_t) 816 CSAN_BUS_WRITE_FUNC(_stream, 1, uint8_t) 817 CSAN_BUS_WRITE_PTR_FUNC(multi, 1, uint8_t) 818 CSAN_BUS_WRITE_PTR_FUNC(multi_stream, 1, uint8_t) 819 CSAN_BUS_WRITE_PTR_FUNC(region, 1, uint8_t) 820 CSAN_BUS_WRITE_PTR_FUNC(region_stream, 1, uint8_t) 821 822 CSAN_BUS_WRITE_FUNC(, 2, uint16_t) 823 CSAN_BUS_WRITE_FUNC(_stream, 2, uint16_t) 824 CSAN_BUS_WRITE_PTR_FUNC(multi, 2, uint16_t) 825 CSAN_BUS_WRITE_PTR_FUNC(multi_stream, 2, uint16_t) 826 CSAN_BUS_WRITE_PTR_FUNC(region, 2, uint16_t) 827 CSAN_BUS_WRITE_PTR_FUNC(region_stream, 2, uint16_t) 828 829 CSAN_BUS_WRITE_FUNC(, 4, uint32_t) 830 CSAN_BUS_WRITE_FUNC(_stream, 4, uint32_t) 831 CSAN_BUS_WRITE_PTR_FUNC(multi, 4, uint32_t) 832 CSAN_BUS_WRITE_PTR_FUNC(multi_stream, 4, uint32_t) 833 CSAN_BUS_WRITE_PTR_FUNC(region, 4, uint32_t) 834 CSAN_BUS_WRITE_PTR_FUNC(region_stream, 4, uint32_t) 835 836 CSAN_BUS_WRITE_FUNC(, 8, uint64_t) 837 #if defined(__aarch64__) 838 CSAN_BUS_WRITE_FUNC(_stream, 8, uint64_t) 839 CSAN_BUS_WRITE_PTR_FUNC(multi, 8, uint64_t) 840 CSAN_BUS_WRITE_PTR_FUNC(multi_stream, 8, uint64_t) 841 CSAN_BUS_WRITE_PTR_FUNC(region, 8, uint64_t) 842 CSAN_BUS_WRITE_PTR_FUNC(region_stream, 8, uint64_t) 843 #endif 844 845 #define CSAN_BUS_SET_FUNC(func, width, type) \ 846 void kcsan_bus_space_set_##func##_##width(bus_space_tag_t tag, \ 847 bus_space_handle_t hnd, bus_size_t offset, type value, \ 848 bus_size_t count) \ 849 { \ 850 bus_space_set_##func##_##width(tag, hnd, offset, value, \ 851 count); \ 852 } 853 854 CSAN_BUS_SET_FUNC(multi, 1, uint8_t) 855 CSAN_BUS_SET_FUNC(region, 1, uint8_t) 856 #if !defined(__aarch64__) 857 CSAN_BUS_SET_FUNC(multi_stream, 1, uint8_t) 858 CSAN_BUS_SET_FUNC(region_stream, 1, uint8_t) 859 #endif 860 861 CSAN_BUS_SET_FUNC(multi, 2, uint16_t) 862 CSAN_BUS_SET_FUNC(region, 2, uint16_t) 863 #if !defined(__aarch64__) 864 CSAN_BUS_SET_FUNC(multi_stream, 2, uint16_t) 865 CSAN_BUS_SET_FUNC(region_stream, 2, uint16_t) 866 #endif 867 868 CSAN_BUS_SET_FUNC(multi, 4, uint32_t) 869 CSAN_BUS_SET_FUNC(region, 4, uint32_t) 870 #if !defined(__aarch64__) 871 CSAN_BUS_SET_FUNC(multi_stream, 4, uint32_t) 872 CSAN_BUS_SET_FUNC(region_stream, 4, uint32_t) 873 #endif 874 875 #if !defined(__amd64__) 876 CSAN_BUS_SET_FUNC(multi, 8, uint64_t) 877 CSAN_BUS_SET_FUNC(region, 8, uint64_t) 878 #if !defined(__aarch64__) 879 CSAN_BUS_SET_FUNC(multi_stream, 8, uint64_t) 880 CSAN_BUS_SET_FUNC(region_stream, 8, uint64_t) 881 #endif 882 #endif 883 884 #define CSAN_BUS_PEEK_FUNC(width, type) \ 885 int kcsan_bus_space_peek_##width(bus_space_tag_t tag, \ 886 bus_space_handle_t hnd, bus_size_t offset, type *value) \ 887 { \ 888 kcsan_access((uintptr_t)value, sizeof(type), true, false, \ 889 __RET_ADDR); \ 890 return (bus_space_peek_##width(tag, hnd, offset, value)); \ 891 } 892 893 CSAN_BUS_PEEK_FUNC(1, uint8_t) 894 CSAN_BUS_PEEK_FUNC(2, uint16_t) 895 CSAN_BUS_PEEK_FUNC(4, uint32_t) 896 #if !defined(__i386__) 897 CSAN_BUS_PEEK_FUNC(8, uint64_t) 898 #endif 899 900 #define CSAN_BUS_POKE_FUNC(width, type) \ 901 int kcsan_bus_space_poke_##width(bus_space_tag_t tag, \ 902 bus_space_handle_t hnd, bus_size_t offset, type value) \ 903 { \ 904 return (bus_space_poke_##width(tag, hnd, offset, value)); \ 905 } 906 907 CSAN_BUS_POKE_FUNC(1, uint8_t) 908 CSAN_BUS_POKE_FUNC(2, uint16_t) 909 CSAN_BUS_POKE_FUNC(4, uint32_t) 910 #if !defined(__i386__) 911 CSAN_BUS_POKE_FUNC(8, uint64_t) 912 #endif 913