1 // SPDX-License-Identifier: GPL-2.0-or-later 2 3 /* 4 * Copyright (C) 2004 Benjamin Herrenschmidt, IBM Corp. 5 * <benh@kernel.crashing.org> 6 */ 7 8 #include <linux/errno.h> 9 #include <linux/sched.h> 10 #include <linux/kernel.h> 11 #include <linux/mm.h> 12 #include <linux/smp.h> 13 #include <linux/stddef.h> 14 #include <linux/unistd.h> 15 #include <linux/slab.h> 16 #include <linux/user.h> 17 #include <linux/elf.h> 18 #include <linux/security.h> 19 #include <linux/memblock.h> 20 #include <linux/syscalls.h> 21 #include <linux/time_namespace.h> 22 #include <vdso/datapage.h> 23 24 #include <asm/syscall.h> 25 #include <asm/processor.h> 26 #include <asm/mmu.h> 27 #include <asm/mmu_context.h> 28 #include <asm/machdep.h> 29 #include <asm/cputable.h> 30 #include <asm/sections.h> 31 #include <asm/firmware.h> 32 #include <asm/vdso.h> 33 #include <asm/vdso_datapage.h> 34 #include <asm/setup.h> 35 36 /* The alignment of the vDSO */ 37 #define VDSO_ALIGNMENT (1 << 16) 38 39 extern char vdso32_start, vdso32_end; 40 extern char vdso64_start, vdso64_end; 41 42 /* 43 * The vdso data page (aka. systemcfg for old ppc64 fans) is here. 44 * Once the early boot kernel code no longer needs to muck around 45 * with it, it will become dynamically allocated 46 */ 47 static union { 48 struct vdso_arch_data data; 49 u8 page[PAGE_SIZE]; 50 } vdso_data_store __page_aligned_data; 51 struct vdso_arch_data *vdso_data = &vdso_data_store.data; 52 53 enum vvar_pages { 54 VVAR_DATA_PAGE_OFFSET, 55 VVAR_TIMENS_PAGE_OFFSET, 56 VVAR_NR_PAGES, 57 }; 58 59 static int vdso_mremap(const struct vm_special_mapping *sm, struct vm_area_struct *new_vma, 60 unsigned long text_size) 61 { 62 unsigned long new_size = new_vma->vm_end - new_vma->vm_start; 63 64 if (new_size != text_size) 65 return -EINVAL; 66 67 current->mm->context.vdso = (void __user *)new_vma->vm_start; 68 69 return 0; 70 } 71 72 static int vdso32_mremap(const struct vm_special_mapping *sm, struct vm_area_struct *new_vma) 73 { 74 return vdso_mremap(sm, new_vma, &vdso32_end - &vdso32_start); 75 } 76 77 static int vdso64_mremap(const struct vm_special_mapping *sm, struct vm_area_struct *new_vma) 78 { 79 return vdso_mremap(sm, new_vma, &vdso64_end - &vdso64_start); 80 } 81 82 static vm_fault_t vvar_fault(const struct vm_special_mapping *sm, 83 struct vm_area_struct *vma, struct vm_fault *vmf); 84 85 static struct vm_special_mapping vvar_spec __ro_after_init = { 86 .name = "[vvar]", 87 .fault = vvar_fault, 88 }; 89 90 static struct vm_special_mapping vdso32_spec __ro_after_init = { 91 .name = "[vdso]", 92 .mremap = vdso32_mremap, 93 }; 94 95 static struct vm_special_mapping vdso64_spec __ro_after_init = { 96 .name = "[vdso]", 97 .mremap = vdso64_mremap, 98 }; 99 100 #ifdef CONFIG_TIME_NS 101 struct vdso_data *arch_get_vdso_data(void *vvar_page) 102 { 103 return ((struct vdso_arch_data *)vvar_page)->data; 104 } 105 106 /* 107 * The vvar mapping contains data for a specific time namespace, so when a task 108 * changes namespace we must unmap its vvar data for the old namespace. 109 * Subsequent faults will map in data for the new namespace. 110 * 111 * For more details see timens_setup_vdso_data(). 112 */ 113 int vdso_join_timens(struct task_struct *task, struct time_namespace *ns) 114 { 115 struct mm_struct *mm = task->mm; 116 struct vm_area_struct *vma; 117 118 mmap_read_lock(mm); 119 120 for (vma = mm->mmap; vma; vma = vma->vm_next) { 121 unsigned long size = vma->vm_end - vma->vm_start; 122 123 if (vma_is_special_mapping(vma, &vvar_spec)) 124 zap_page_range(vma, vma->vm_start, size); 125 } 126 127 mmap_read_unlock(mm); 128 return 0; 129 } 130 131 static struct page *find_timens_vvar_page(struct vm_area_struct *vma) 132 { 133 if (likely(vma->vm_mm == current->mm)) 134 return current->nsproxy->time_ns->vvar_page; 135 136 /* 137 * VM_PFNMAP | VM_IO protect .fault() handler from being called 138 * through interfaces like /proc/$pid/mem or 139 * process_vm_{readv,writev}() as long as there's no .access() 140 * in special_mapping_vmops. 141 * For more details check_vma_flags() and __access_remote_vm() 142 */ 143 WARN(1, "vvar_page accessed remotely"); 144 145 return NULL; 146 } 147 #else 148 static struct page *find_timens_vvar_page(struct vm_area_struct *vma) 149 { 150 return NULL; 151 } 152 #endif 153 154 static vm_fault_t vvar_fault(const struct vm_special_mapping *sm, 155 struct vm_area_struct *vma, struct vm_fault *vmf) 156 { 157 struct page *timens_page = find_timens_vvar_page(vma); 158 unsigned long pfn; 159 160 switch (vmf->pgoff) { 161 case VVAR_DATA_PAGE_OFFSET: 162 if (timens_page) 163 pfn = page_to_pfn(timens_page); 164 else 165 pfn = virt_to_pfn(vdso_data); 166 break; 167 #ifdef CONFIG_TIME_NS 168 case VVAR_TIMENS_PAGE_OFFSET: 169 /* 170 * If a task belongs to a time namespace then a namespace 171 * specific VVAR is mapped with the VVAR_DATA_PAGE_OFFSET and 172 * the real VVAR page is mapped with the VVAR_TIMENS_PAGE_OFFSET 173 * offset. 174 * See also the comment near timens_setup_vdso_data(). 175 */ 176 if (!timens_page) 177 return VM_FAULT_SIGBUS; 178 pfn = virt_to_pfn(vdso_data); 179 break; 180 #endif /* CONFIG_TIME_NS */ 181 default: 182 return VM_FAULT_SIGBUS; 183 } 184 185 return vmf_insert_pfn(vma, vmf->address, pfn); 186 } 187 188 /* 189 * This is called from binfmt_elf, we create the special vma for the 190 * vDSO and insert it into the mm struct tree 191 */ 192 static int __arch_setup_additional_pages(struct linux_binprm *bprm, int uses_interp) 193 { 194 unsigned long vdso_size, vdso_base, mappings_size; 195 struct vm_special_mapping *vdso_spec; 196 unsigned long vvar_size = VVAR_NR_PAGES * PAGE_SIZE; 197 struct mm_struct *mm = current->mm; 198 struct vm_area_struct *vma; 199 200 if (is_32bit_task()) { 201 vdso_spec = &vdso32_spec; 202 vdso_size = &vdso32_end - &vdso32_start; 203 } else { 204 vdso_spec = &vdso64_spec; 205 vdso_size = &vdso64_end - &vdso64_start; 206 } 207 208 mappings_size = vdso_size + vvar_size; 209 mappings_size += (VDSO_ALIGNMENT - 1) & PAGE_MASK; 210 211 /* 212 * Pick a base address for the vDSO in process space. 213 * Add enough to the size so that the result can be aligned. 214 */ 215 vdso_base = get_unmapped_area(NULL, 0, mappings_size, 0, 0); 216 if (IS_ERR_VALUE(vdso_base)) 217 return vdso_base; 218 219 /* Add required alignment. */ 220 vdso_base = ALIGN(vdso_base, VDSO_ALIGNMENT); 221 222 /* 223 * Put vDSO base into mm struct. We need to do this before calling 224 * install_special_mapping or the perf counter mmap tracking code 225 * will fail to recognise it as a vDSO. 226 */ 227 mm->context.vdso = (void __user *)vdso_base + vvar_size; 228 229 vma = _install_special_mapping(mm, vdso_base, vvar_size, 230 VM_READ | VM_MAYREAD | VM_IO | 231 VM_DONTDUMP | VM_PFNMAP, &vvar_spec); 232 if (IS_ERR(vma)) 233 return PTR_ERR(vma); 234 235 /* 236 * our vma flags don't have VM_WRITE so by default, the process isn't 237 * allowed to write those pages. 238 * gdb can break that with ptrace interface, and thus trigger COW on 239 * those pages but it's then your responsibility to never do that on 240 * the "data" page of the vDSO or you'll stop getting kernel updates 241 * and your nice userland gettimeofday will be totally dead. 242 * It's fine to use that for setting breakpoints in the vDSO code 243 * pages though. 244 */ 245 vma = _install_special_mapping(mm, vdso_base + vvar_size, vdso_size, 246 VM_READ | VM_EXEC | VM_MAYREAD | 247 VM_MAYWRITE | VM_MAYEXEC, vdso_spec); 248 if (IS_ERR(vma)) 249 do_munmap(mm, vdso_base, vvar_size, NULL); 250 251 return PTR_ERR_OR_ZERO(vma); 252 } 253 254 int arch_setup_additional_pages(struct linux_binprm *bprm, int uses_interp) 255 { 256 struct mm_struct *mm = current->mm; 257 int rc; 258 259 mm->context.vdso = NULL; 260 261 if (mmap_write_lock_killable(mm)) 262 return -EINTR; 263 264 rc = __arch_setup_additional_pages(bprm, uses_interp); 265 if (rc) 266 mm->context.vdso = NULL; 267 268 mmap_write_unlock(mm); 269 return rc; 270 } 271 272 #define VDSO_DO_FIXUPS(type, value, bits, sec) do { \ 273 void *__start = (void *)VDSO##bits##_SYMBOL(&vdso##bits##_start, sec##_start); \ 274 void *__end = (void *)VDSO##bits##_SYMBOL(&vdso##bits##_start, sec##_end); \ 275 \ 276 do_##type##_fixups((value), __start, __end); \ 277 } while (0) 278 279 static void __init vdso_fixup_features(void) 280 { 281 #ifdef CONFIG_PPC64 282 VDSO_DO_FIXUPS(feature, cur_cpu_spec->cpu_features, 64, ftr_fixup); 283 VDSO_DO_FIXUPS(feature, cur_cpu_spec->mmu_features, 64, mmu_ftr_fixup); 284 VDSO_DO_FIXUPS(feature, powerpc_firmware_features, 64, fw_ftr_fixup); 285 VDSO_DO_FIXUPS(lwsync, cur_cpu_spec->cpu_features, 64, lwsync_fixup); 286 #endif /* CONFIG_PPC64 */ 287 288 #ifdef CONFIG_VDSO32 289 VDSO_DO_FIXUPS(feature, cur_cpu_spec->cpu_features, 32, ftr_fixup); 290 VDSO_DO_FIXUPS(feature, cur_cpu_spec->mmu_features, 32, mmu_ftr_fixup); 291 #ifdef CONFIG_PPC64 292 VDSO_DO_FIXUPS(feature, powerpc_firmware_features, 32, fw_ftr_fixup); 293 #endif /* CONFIG_PPC64 */ 294 VDSO_DO_FIXUPS(lwsync, cur_cpu_spec->cpu_features, 32, lwsync_fixup); 295 #endif 296 } 297 298 /* 299 * Called from setup_arch to initialize the bitmap of available 300 * syscalls in the systemcfg page 301 */ 302 static void __init vdso_setup_syscall_map(void) 303 { 304 unsigned int i; 305 306 for (i = 0; i < NR_syscalls; i++) { 307 if (sys_call_table[i] != (unsigned long)&sys_ni_syscall) 308 vdso_data->syscall_map[i >> 5] |= 0x80000000UL >> (i & 0x1f); 309 if (IS_ENABLED(CONFIG_COMPAT) && 310 compat_sys_call_table[i] != (unsigned long)&sys_ni_syscall) 311 vdso_data->compat_syscall_map[i >> 5] |= 0x80000000UL >> (i & 0x1f); 312 } 313 } 314 315 #ifdef CONFIG_PPC64 316 int vdso_getcpu_init(void) 317 { 318 unsigned long cpu, node, val; 319 320 /* 321 * SPRG_VDSO contains the CPU in the bottom 16 bits and the NUMA node 322 * in the next 16 bits. The VDSO uses this to implement getcpu(). 323 */ 324 cpu = get_cpu(); 325 WARN_ON_ONCE(cpu > 0xffff); 326 327 node = cpu_to_node(cpu); 328 WARN_ON_ONCE(node > 0xffff); 329 330 val = (cpu & 0xffff) | ((node & 0xffff) << 16); 331 mtspr(SPRN_SPRG_VDSO_WRITE, val); 332 get_paca()->sprg_vdso = val; 333 334 put_cpu(); 335 336 return 0; 337 } 338 /* We need to call this before SMP init */ 339 early_initcall(vdso_getcpu_init); 340 #endif 341 342 static struct page ** __init vdso_setup_pages(void *start, void *end) 343 { 344 int i; 345 struct page **pagelist; 346 int pages = (end - start) >> PAGE_SHIFT; 347 348 pagelist = kcalloc(pages + 1, sizeof(struct page *), GFP_KERNEL); 349 if (!pagelist) 350 panic("%s: Cannot allocate page list for VDSO", __func__); 351 352 for (i = 0; i < pages; i++) 353 pagelist[i] = virt_to_page(start + i * PAGE_SIZE); 354 355 return pagelist; 356 } 357 358 static int __init vdso_init(void) 359 { 360 #ifdef CONFIG_PPC64 361 /* 362 * Fill up the "systemcfg" stuff for backward compatibility 363 */ 364 strcpy((char *)vdso_data->eye_catcher, "SYSTEMCFG:PPC64"); 365 vdso_data->version.major = SYSTEMCFG_MAJOR; 366 vdso_data->version.minor = SYSTEMCFG_MINOR; 367 vdso_data->processor = mfspr(SPRN_PVR); 368 /* 369 * Fake the old platform number for pSeries and add 370 * in LPAR bit if necessary 371 */ 372 vdso_data->platform = 0x100; 373 if (firmware_has_feature(FW_FEATURE_LPAR)) 374 vdso_data->platform |= 1; 375 vdso_data->physicalMemorySize = memblock_phys_mem_size(); 376 vdso_data->dcache_size = ppc64_caches.l1d.size; 377 vdso_data->dcache_line_size = ppc64_caches.l1d.line_size; 378 vdso_data->icache_size = ppc64_caches.l1i.size; 379 vdso_data->icache_line_size = ppc64_caches.l1i.line_size; 380 vdso_data->dcache_block_size = ppc64_caches.l1d.block_size; 381 vdso_data->icache_block_size = ppc64_caches.l1i.block_size; 382 vdso_data->dcache_log_block_size = ppc64_caches.l1d.log_block_size; 383 vdso_data->icache_log_block_size = ppc64_caches.l1i.log_block_size; 384 #endif /* CONFIG_PPC64 */ 385 386 vdso_setup_syscall_map(); 387 388 vdso_fixup_features(); 389 390 if (IS_ENABLED(CONFIG_VDSO32)) 391 vdso32_spec.pages = vdso_setup_pages(&vdso32_start, &vdso32_end); 392 393 if (IS_ENABLED(CONFIG_PPC64)) 394 vdso64_spec.pages = vdso_setup_pages(&vdso64_start, &vdso64_end); 395 396 smp_wmb(); 397 398 return 0; 399 } 400 arch_initcall(vdso_init); 401