1 // SPDX-License-Identifier: GPL-2.0-or-later
2
3 /*
4 * Copyright (C) 2004 Benjamin Herrenschmidt, IBM Corp.
5 * <benh@kernel.crashing.org>
6 */
7
8 #include <linux/errno.h>
9 #include <linux/sched.h>
10 #include <linux/kernel.h>
11 #include <linux/mm.h>
12 #include <linux/smp.h>
13 #include <linux/stddef.h>
14 #include <linux/unistd.h>
15 #include <linux/slab.h>
16 #include <linux/user.h>
17 #include <linux/elf.h>
18 #include <linux/security.h>
19 #include <linux/memblock.h>
20 #include <linux/syscalls.h>
21 #include <linux/time_namespace.h>
22 #include <vdso/datapage.h>
23
24 #include <asm/syscall.h>
25 #include <asm/processor.h>
26 #include <asm/mmu.h>
27 #include <asm/mmu_context.h>
28 #include <asm/machdep.h>
29 #include <asm/cputable.h>
30 #include <asm/sections.h>
31 #include <asm/firmware.h>
32 #include <asm/vdso.h>
33 #include <asm/vdso_datapage.h>
34 #include <asm/setup.h>
35
36 /* The alignment of the vDSO */
37 #define VDSO_ALIGNMENT (1 << 16)
38
39 extern char vdso32_start, vdso32_end;
40 extern char vdso64_start, vdso64_end;
41
42 long sys_ni_syscall(void);
43
44 /*
45 * The vdso data page (aka. systemcfg for old ppc64 fans) is here.
46 * Once the early boot kernel code no longer needs to muck around
47 * with it, it will become dynamically allocated
48 */
49 static union {
50 struct vdso_arch_data data;
51 u8 page[PAGE_SIZE];
52 } vdso_data_store __page_aligned_data;
53 struct vdso_arch_data *vdso_data = &vdso_data_store.data;
54
55 enum vvar_pages {
56 VVAR_DATA_PAGE_OFFSET,
57 VVAR_TIMENS_PAGE_OFFSET,
58 VVAR_NR_PAGES,
59 };
60
vdso_mremap(const struct vm_special_mapping * sm,struct vm_area_struct * new_vma,unsigned long text_size)61 static int vdso_mremap(const struct vm_special_mapping *sm, struct vm_area_struct *new_vma,
62 unsigned long text_size)
63 {
64 unsigned long new_size = new_vma->vm_end - new_vma->vm_start;
65
66 if (new_size != text_size)
67 return -EINVAL;
68
69 current->mm->context.vdso = (void __user *)new_vma->vm_start;
70
71 return 0;
72 }
73
vdso32_mremap(const struct vm_special_mapping * sm,struct vm_area_struct * new_vma)74 static int vdso32_mremap(const struct vm_special_mapping *sm, struct vm_area_struct *new_vma)
75 {
76 return vdso_mremap(sm, new_vma, &vdso32_end - &vdso32_start);
77 }
78
vdso64_mremap(const struct vm_special_mapping * sm,struct vm_area_struct * new_vma)79 static int vdso64_mremap(const struct vm_special_mapping *sm, struct vm_area_struct *new_vma)
80 {
81 return vdso_mremap(sm, new_vma, &vdso64_end - &vdso64_start);
82 }
83
vdso_close(const struct vm_special_mapping * sm,struct vm_area_struct * vma)84 static void vdso_close(const struct vm_special_mapping *sm, struct vm_area_struct *vma)
85 {
86 struct mm_struct *mm = vma->vm_mm;
87
88 /*
89 * close() is called for munmap() but also for mremap(). In the mremap()
90 * case the vdso pointer has already been updated by the mremap() hook
91 * above, so it must not be set to NULL here.
92 */
93 if (vma->vm_start != (unsigned long)mm->context.vdso)
94 return;
95
96 mm->context.vdso = NULL;
97 }
98
99 static vm_fault_t vvar_fault(const struct vm_special_mapping *sm,
100 struct vm_area_struct *vma, struct vm_fault *vmf);
101
102 static struct vm_special_mapping vvar_spec __ro_after_init = {
103 .name = "[vvar]",
104 .fault = vvar_fault,
105 };
106
107 static struct vm_special_mapping vdso32_spec __ro_after_init = {
108 .name = "[vdso]",
109 .mremap = vdso32_mremap,
110 .close = vdso_close,
111 };
112
113 static struct vm_special_mapping vdso64_spec __ro_after_init = {
114 .name = "[vdso]",
115 .mremap = vdso64_mremap,
116 .close = vdso_close,
117 };
118
119 #ifdef CONFIG_TIME_NS
arch_get_vdso_data(void * vvar_page)120 struct vdso_data *arch_get_vdso_data(void *vvar_page)
121 {
122 return ((struct vdso_arch_data *)vvar_page)->data;
123 }
124
125 /*
126 * The vvar mapping contains data for a specific time namespace, so when a task
127 * changes namespace we must unmap its vvar data for the old namespace.
128 * Subsequent faults will map in data for the new namespace.
129 *
130 * For more details see timens_setup_vdso_data().
131 */
vdso_join_timens(struct task_struct * task,struct time_namespace * ns)132 int vdso_join_timens(struct task_struct *task, struct time_namespace *ns)
133 {
134 struct mm_struct *mm = task->mm;
135 VMA_ITERATOR(vmi, mm, 0);
136 struct vm_area_struct *vma;
137
138 mmap_read_lock(mm);
139 for_each_vma(vmi, vma) {
140 if (vma_is_special_mapping(vma, &vvar_spec))
141 zap_vma_pages(vma);
142 }
143 mmap_read_unlock(mm);
144
145 return 0;
146 }
147 #endif
148
vvar_fault(const struct vm_special_mapping * sm,struct vm_area_struct * vma,struct vm_fault * vmf)149 static vm_fault_t vvar_fault(const struct vm_special_mapping *sm,
150 struct vm_area_struct *vma, struct vm_fault *vmf)
151 {
152 struct page *timens_page = find_timens_vvar_page(vma);
153 unsigned long pfn;
154
155 switch (vmf->pgoff) {
156 case VVAR_DATA_PAGE_OFFSET:
157 if (timens_page)
158 pfn = page_to_pfn(timens_page);
159 else
160 pfn = virt_to_pfn(vdso_data);
161 break;
162 #ifdef CONFIG_TIME_NS
163 case VVAR_TIMENS_PAGE_OFFSET:
164 /*
165 * If a task belongs to a time namespace then a namespace
166 * specific VVAR is mapped with the VVAR_DATA_PAGE_OFFSET and
167 * the real VVAR page is mapped with the VVAR_TIMENS_PAGE_OFFSET
168 * offset.
169 * See also the comment near timens_setup_vdso_data().
170 */
171 if (!timens_page)
172 return VM_FAULT_SIGBUS;
173 pfn = virt_to_pfn(vdso_data);
174 break;
175 #endif /* CONFIG_TIME_NS */
176 default:
177 return VM_FAULT_SIGBUS;
178 }
179
180 return vmf_insert_pfn(vma, vmf->address, pfn);
181 }
182
183 /*
184 * This is called from binfmt_elf, we create the special vma for the
185 * vDSO and insert it into the mm struct tree
186 */
__arch_setup_additional_pages(struct linux_binprm * bprm,int uses_interp)187 static int __arch_setup_additional_pages(struct linux_binprm *bprm, int uses_interp)
188 {
189 unsigned long vdso_size, vdso_base, mappings_size;
190 struct vm_special_mapping *vdso_spec;
191 unsigned long vvar_size = VVAR_NR_PAGES * PAGE_SIZE;
192 struct mm_struct *mm = current->mm;
193 struct vm_area_struct *vma;
194
195 if (is_32bit_task()) {
196 vdso_spec = &vdso32_spec;
197 vdso_size = &vdso32_end - &vdso32_start;
198 } else {
199 vdso_spec = &vdso64_spec;
200 vdso_size = &vdso64_end - &vdso64_start;
201 }
202
203 mappings_size = vdso_size + vvar_size;
204 mappings_size += (VDSO_ALIGNMENT - 1) & PAGE_MASK;
205
206 /*
207 * Pick a base address for the vDSO in process space.
208 * Add enough to the size so that the result can be aligned.
209 */
210 vdso_base = get_unmapped_area(NULL, 0, mappings_size, 0, 0);
211 if (IS_ERR_VALUE(vdso_base))
212 return vdso_base;
213
214 /* Add required alignment. */
215 vdso_base = ALIGN(vdso_base, VDSO_ALIGNMENT);
216
217 vma = _install_special_mapping(mm, vdso_base, vvar_size,
218 VM_READ | VM_MAYREAD | VM_IO |
219 VM_DONTDUMP | VM_PFNMAP, &vvar_spec);
220 if (IS_ERR(vma))
221 return PTR_ERR(vma);
222
223 /*
224 * our vma flags don't have VM_WRITE so by default, the process isn't
225 * allowed to write those pages.
226 * gdb can break that with ptrace interface, and thus trigger COW on
227 * those pages but it's then your responsibility to never do that on
228 * the "data" page of the vDSO or you'll stop getting kernel updates
229 * and your nice userland gettimeofday will be totally dead.
230 * It's fine to use that for setting breakpoints in the vDSO code
231 * pages though.
232 */
233 vma = _install_special_mapping(mm, vdso_base + vvar_size, vdso_size,
234 VM_READ | VM_EXEC | VM_MAYREAD |
235 VM_MAYWRITE | VM_MAYEXEC, vdso_spec);
236 if (IS_ERR(vma)) {
237 do_munmap(mm, vdso_base, vvar_size, NULL);
238 return PTR_ERR(vma);
239 }
240
241 // Now that the mappings are in place, set the mm VDSO pointer
242 mm->context.vdso = (void __user *)vdso_base + vvar_size;
243
244 return 0;
245 }
246
arch_setup_additional_pages(struct linux_binprm * bprm,int uses_interp)247 int arch_setup_additional_pages(struct linux_binprm *bprm, int uses_interp)
248 {
249 struct mm_struct *mm = current->mm;
250 int rc;
251
252 mm->context.vdso = NULL;
253
254 if (mmap_write_lock_killable(mm))
255 return -EINTR;
256
257 rc = __arch_setup_additional_pages(bprm, uses_interp);
258
259 mmap_write_unlock(mm);
260 return rc;
261 }
262
263 #define VDSO_DO_FIXUPS(type, value, bits, sec) do { \
264 void *__start = (void *)VDSO##bits##_SYMBOL(&vdso##bits##_start, sec##_start); \
265 void *__end = (void *)VDSO##bits##_SYMBOL(&vdso##bits##_start, sec##_end); \
266 \
267 do_##type##_fixups((value), __start, __end); \
268 } while (0)
269
vdso_fixup_features(void)270 static void __init vdso_fixup_features(void)
271 {
272 #ifdef CONFIG_PPC64
273 VDSO_DO_FIXUPS(feature, cur_cpu_spec->cpu_features, 64, ftr_fixup);
274 VDSO_DO_FIXUPS(feature, cur_cpu_spec->mmu_features, 64, mmu_ftr_fixup);
275 VDSO_DO_FIXUPS(feature, powerpc_firmware_features, 64, fw_ftr_fixup);
276 VDSO_DO_FIXUPS(lwsync, cur_cpu_spec->cpu_features, 64, lwsync_fixup);
277 #endif /* CONFIG_PPC64 */
278
279 #ifdef CONFIG_VDSO32
280 VDSO_DO_FIXUPS(feature, cur_cpu_spec->cpu_features, 32, ftr_fixup);
281 VDSO_DO_FIXUPS(feature, cur_cpu_spec->mmu_features, 32, mmu_ftr_fixup);
282 #ifdef CONFIG_PPC64
283 VDSO_DO_FIXUPS(feature, powerpc_firmware_features, 32, fw_ftr_fixup);
284 #endif /* CONFIG_PPC64 */
285 VDSO_DO_FIXUPS(lwsync, cur_cpu_spec->cpu_features, 32, lwsync_fixup);
286 #endif
287 }
288
289 /*
290 * Called from setup_arch to initialize the bitmap of available
291 * syscalls in the systemcfg page
292 */
vdso_setup_syscall_map(void)293 static void __init vdso_setup_syscall_map(void)
294 {
295 unsigned int i;
296
297 for (i = 0; i < NR_syscalls; i++) {
298 if (sys_call_table[i] != (void *)&sys_ni_syscall)
299 vdso_data->syscall_map[i >> 5] |= 0x80000000UL >> (i & 0x1f);
300 if (IS_ENABLED(CONFIG_COMPAT) &&
301 compat_sys_call_table[i] != (void *)&sys_ni_syscall)
302 vdso_data->compat_syscall_map[i >> 5] |= 0x80000000UL >> (i & 0x1f);
303 }
304 }
305
306 #ifdef CONFIG_PPC64
vdso_getcpu_init(void)307 int vdso_getcpu_init(void)
308 {
309 unsigned long cpu, node, val;
310
311 /*
312 * SPRG_VDSO contains the CPU in the bottom 16 bits and the NUMA node
313 * in the next 16 bits. The VDSO uses this to implement getcpu().
314 */
315 cpu = get_cpu();
316 WARN_ON_ONCE(cpu > 0xffff);
317
318 node = cpu_to_node(cpu);
319 WARN_ON_ONCE(node > 0xffff);
320
321 val = (cpu & 0xffff) | ((node & 0xffff) << 16);
322 mtspr(SPRN_SPRG_VDSO_WRITE, val);
323 get_paca()->sprg_vdso = val;
324
325 put_cpu();
326
327 return 0;
328 }
329 /* We need to call this before SMP init */
330 early_initcall(vdso_getcpu_init);
331 #endif
332
vdso_setup_pages(void * start,void * end)333 static struct page ** __init vdso_setup_pages(void *start, void *end)
334 {
335 int i;
336 struct page **pagelist;
337 int pages = (end - start) >> PAGE_SHIFT;
338
339 pagelist = kcalloc(pages + 1, sizeof(struct page *), GFP_KERNEL);
340 if (!pagelist)
341 panic("%s: Cannot allocate page list for VDSO", __func__);
342
343 for (i = 0; i < pages; i++)
344 pagelist[i] = virt_to_page(start + i * PAGE_SIZE);
345
346 return pagelist;
347 }
348
vdso_init(void)349 static int __init vdso_init(void)
350 {
351 #ifdef CONFIG_PPC64
352 /*
353 * Fill up the "systemcfg" stuff for backward compatibility
354 */
355 strcpy((char *)vdso_data->eye_catcher, "SYSTEMCFG:PPC64");
356 vdso_data->version.major = SYSTEMCFG_MAJOR;
357 vdso_data->version.minor = SYSTEMCFG_MINOR;
358 vdso_data->processor = mfspr(SPRN_PVR);
359 /*
360 * Fake the old platform number for pSeries and add
361 * in LPAR bit if necessary
362 */
363 vdso_data->platform = 0x100;
364 if (firmware_has_feature(FW_FEATURE_LPAR))
365 vdso_data->platform |= 1;
366 vdso_data->physicalMemorySize = memblock_phys_mem_size();
367 vdso_data->dcache_size = ppc64_caches.l1d.size;
368 vdso_data->dcache_line_size = ppc64_caches.l1d.line_size;
369 vdso_data->icache_size = ppc64_caches.l1i.size;
370 vdso_data->icache_line_size = ppc64_caches.l1i.line_size;
371 vdso_data->dcache_block_size = ppc64_caches.l1d.block_size;
372 vdso_data->icache_block_size = ppc64_caches.l1i.block_size;
373 vdso_data->dcache_log_block_size = ppc64_caches.l1d.log_block_size;
374 vdso_data->icache_log_block_size = ppc64_caches.l1i.log_block_size;
375 #endif /* CONFIG_PPC64 */
376
377 vdso_setup_syscall_map();
378
379 vdso_fixup_features();
380
381 if (IS_ENABLED(CONFIG_VDSO32))
382 vdso32_spec.pages = vdso_setup_pages(&vdso32_start, &vdso32_end);
383
384 if (IS_ENABLED(CONFIG_PPC64))
385 vdso64_spec.pages = vdso_setup_pages(&vdso64_start, &vdso64_end);
386
387 smp_wmb();
388
389 return 0;
390 }
391 arch_initcall(vdso_init);
392