xref: /linux/arch/riscv/kernel/module.c (revision 3a39d672e7f48b8d6b91a09afa4b55352773b4b5)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  *
4  *  Copyright (C) 2017 Zihao Yu
5  */
6 
7 #include <linux/elf.h>
8 #include <linux/err.h>
9 #include <linux/errno.h>
10 #include <linux/hashtable.h>
11 #include <linux/kernel.h>
12 #include <linux/log2.h>
13 #include <linux/moduleloader.h>
14 #include <linux/sizes.h>
15 #include <linux/pgtable.h>
16 #include <asm/alternative.h>
17 #include <asm/sections.h>
18 
19 struct used_bucket {
20 	struct list_head head;
21 	struct hlist_head *bucket;
22 };
23 
24 struct relocation_head {
25 	struct hlist_node node;
26 	struct list_head *rel_entry;
27 	void *location;
28 };
29 
30 struct relocation_entry {
31 	struct list_head head;
32 	Elf_Addr value;
33 	unsigned int type;
34 };
35 
36 struct relocation_handlers {
37 	int (*reloc_handler)(struct module *me, void *location, Elf_Addr v);
38 	int (*accumulate_handler)(struct module *me, void *location,
39 				  long buffer);
40 };
41 
42 /*
43  * The auipc+jalr instruction pair can reach any PC-relative offset
44  * in the range [-2^31 - 2^11, 2^31 - 2^11)
45  */
riscv_insn_valid_32bit_offset(ptrdiff_t val)46 static bool riscv_insn_valid_32bit_offset(ptrdiff_t val)
47 {
48 #ifdef CONFIG_32BIT
49 	return true;
50 #else
51 	return (-(1L << 31) - (1L << 11)) <= val && val < ((1L << 31) - (1L << 11));
52 #endif
53 }
54 
riscv_insn_rmw(void * location,u32 keep,u32 set)55 static int riscv_insn_rmw(void *location, u32 keep, u32 set)
56 {
57 	__le16 *parcel = location;
58 	u32 insn = (u32)le16_to_cpu(parcel[0]) | (u32)le16_to_cpu(parcel[1]) << 16;
59 
60 	insn &= keep;
61 	insn |= set;
62 
63 	parcel[0] = cpu_to_le16(insn);
64 	parcel[1] = cpu_to_le16(insn >> 16);
65 	return 0;
66 }
67 
riscv_insn_rvc_rmw(void * location,u16 keep,u16 set)68 static int riscv_insn_rvc_rmw(void *location, u16 keep, u16 set)
69 {
70 	__le16 *parcel = location;
71 	u16 insn = le16_to_cpu(*parcel);
72 
73 	insn &= keep;
74 	insn |= set;
75 
76 	*parcel = cpu_to_le16(insn);
77 	return 0;
78 }
79 
apply_r_riscv_32_rela(struct module * me,void * location,Elf_Addr v)80 static int apply_r_riscv_32_rela(struct module *me, void *location, Elf_Addr v)
81 {
82 	if (v != (u32)v) {
83 		pr_err("%s: value %016llx out of range for 32-bit field\n",
84 		       me->name, (long long)v);
85 		return -EINVAL;
86 	}
87 	*(u32 *)location = v;
88 	return 0;
89 }
90 
apply_r_riscv_64_rela(struct module * me,void * location,Elf_Addr v)91 static int apply_r_riscv_64_rela(struct module *me, void *location, Elf_Addr v)
92 {
93 	*(u64 *)location = v;
94 	return 0;
95 }
96 
apply_r_riscv_branch_rela(struct module * me,void * location,Elf_Addr v)97 static int apply_r_riscv_branch_rela(struct module *me, void *location,
98 				     Elf_Addr v)
99 {
100 	ptrdiff_t offset = (void *)v - location;
101 	u32 imm12 = (offset & 0x1000) << (31 - 12);
102 	u32 imm11 = (offset & 0x800) >> (11 - 7);
103 	u32 imm10_5 = (offset & 0x7e0) << (30 - 10);
104 	u32 imm4_1 = (offset & 0x1e) << (11 - 4);
105 
106 	return riscv_insn_rmw(location, 0x1fff07f, imm12 | imm11 | imm10_5 | imm4_1);
107 }
108 
apply_r_riscv_jal_rela(struct module * me,void * location,Elf_Addr v)109 static int apply_r_riscv_jal_rela(struct module *me, void *location,
110 				  Elf_Addr v)
111 {
112 	ptrdiff_t offset = (void *)v - location;
113 	u32 imm20 = (offset & 0x100000) << (31 - 20);
114 	u32 imm19_12 = (offset & 0xff000);
115 	u32 imm11 = (offset & 0x800) << (20 - 11);
116 	u32 imm10_1 = (offset & 0x7fe) << (30 - 10);
117 
118 	return riscv_insn_rmw(location, 0xfff, imm20 | imm19_12 | imm11 | imm10_1);
119 }
120 
apply_r_riscv_rvc_branch_rela(struct module * me,void * location,Elf_Addr v)121 static int apply_r_riscv_rvc_branch_rela(struct module *me, void *location,
122 					 Elf_Addr v)
123 {
124 	ptrdiff_t offset = (void *)v - location;
125 	u16 imm8 = (offset & 0x100) << (12 - 8);
126 	u16 imm7_6 = (offset & 0xc0) >> (6 - 5);
127 	u16 imm5 = (offset & 0x20) >> (5 - 2);
128 	u16 imm4_3 = (offset & 0x18) << (12 - 5);
129 	u16 imm2_1 = (offset & 0x6) << (12 - 10);
130 
131 	return riscv_insn_rvc_rmw(location, 0xe383,
132 			imm8 | imm7_6 | imm5 | imm4_3 | imm2_1);
133 }
134 
apply_r_riscv_rvc_jump_rela(struct module * me,void * location,Elf_Addr v)135 static int apply_r_riscv_rvc_jump_rela(struct module *me, void *location,
136 				       Elf_Addr v)
137 {
138 	ptrdiff_t offset = (void *)v - location;
139 	u16 imm11 = (offset & 0x800) << (12 - 11);
140 	u16 imm10 = (offset & 0x400) >> (10 - 8);
141 	u16 imm9_8 = (offset & 0x300) << (12 - 11);
142 	u16 imm7 = (offset & 0x80) >> (7 - 6);
143 	u16 imm6 = (offset & 0x40) << (12 - 11);
144 	u16 imm5 = (offset & 0x20) >> (5 - 2);
145 	u16 imm4 = (offset & 0x10) << (12 - 5);
146 	u16 imm3_1 = (offset & 0xe) << (12 - 10);
147 
148 	return riscv_insn_rvc_rmw(location, 0xe003,
149 			imm11 | imm10 | imm9_8 | imm7 | imm6 | imm5 | imm4 | imm3_1);
150 }
151 
apply_r_riscv_pcrel_hi20_rela(struct module * me,void * location,Elf_Addr v)152 static int apply_r_riscv_pcrel_hi20_rela(struct module *me, void *location,
153 					 Elf_Addr v)
154 {
155 	ptrdiff_t offset = (void *)v - location;
156 
157 	if (!riscv_insn_valid_32bit_offset(offset)) {
158 		pr_err(
159 		  "%s: target %016llx can not be addressed by the 32-bit offset from PC = %p\n",
160 		  me->name, (long long)v, location);
161 		return -EINVAL;
162 	}
163 
164 	return riscv_insn_rmw(location, 0xfff, (offset + 0x800) & 0xfffff000);
165 }
166 
apply_r_riscv_pcrel_lo12_i_rela(struct module * me,void * location,Elf_Addr v)167 static int apply_r_riscv_pcrel_lo12_i_rela(struct module *me, void *location,
168 					   Elf_Addr v)
169 {
170 	/*
171 	 * v is the lo12 value to fill. It is calculated before calling this
172 	 * handler.
173 	 */
174 	return riscv_insn_rmw(location, 0xfffff, (v & 0xfff) << 20);
175 }
176 
apply_r_riscv_pcrel_lo12_s_rela(struct module * me,void * location,Elf_Addr v)177 static int apply_r_riscv_pcrel_lo12_s_rela(struct module *me, void *location,
178 					   Elf_Addr v)
179 {
180 	/*
181 	 * v is the lo12 value to fill. It is calculated before calling this
182 	 * handler.
183 	 */
184 	u32 imm11_5 = (v & 0xfe0) << (31 - 11);
185 	u32 imm4_0 = (v & 0x1f) << (11 - 4);
186 
187 	return riscv_insn_rmw(location, 0x1fff07f, imm11_5 | imm4_0);
188 }
189 
apply_r_riscv_hi20_rela(struct module * me,void * location,Elf_Addr v)190 static int apply_r_riscv_hi20_rela(struct module *me, void *location,
191 				   Elf_Addr v)
192 {
193 	if (IS_ENABLED(CONFIG_CMODEL_MEDLOW)) {
194 		pr_err(
195 		  "%s: target %016llx can not be addressed by the 32-bit offset from PC = %p\n",
196 		  me->name, (long long)v, location);
197 		return -EINVAL;
198 	}
199 
200 	return riscv_insn_rmw(location, 0xfff, ((s32)v + 0x800) & 0xfffff000);
201 }
202 
apply_r_riscv_lo12_i_rela(struct module * me,void * location,Elf_Addr v)203 static int apply_r_riscv_lo12_i_rela(struct module *me, void *location,
204 				     Elf_Addr v)
205 {
206 	/* Skip medlow checking because of filtering by HI20 already */
207 	s32 hi20 = ((s32)v + 0x800) & 0xfffff000;
208 	s32 lo12 = ((s32)v - hi20);
209 
210 	return riscv_insn_rmw(location, 0xfffff, (lo12 & 0xfff) << 20);
211 }
212 
apply_r_riscv_lo12_s_rela(struct module * me,void * location,Elf_Addr v)213 static int apply_r_riscv_lo12_s_rela(struct module *me, void *location,
214 				     Elf_Addr v)
215 {
216 	/* Skip medlow checking because of filtering by HI20 already */
217 	s32 hi20 = ((s32)v + 0x800) & 0xfffff000;
218 	s32 lo12 = ((s32)v - hi20);
219 	u32 imm11_5 = (lo12 & 0xfe0) << (31 - 11);
220 	u32 imm4_0 = (lo12 & 0x1f) << (11 - 4);
221 
222 	return riscv_insn_rmw(location, 0x1fff07f, imm11_5 | imm4_0);
223 }
224 
apply_r_riscv_got_hi20_rela(struct module * me,void * location,Elf_Addr v)225 static int apply_r_riscv_got_hi20_rela(struct module *me, void *location,
226 				       Elf_Addr v)
227 {
228 	ptrdiff_t offset = (void *)v - location;
229 
230 	/* Always emit the got entry */
231 	if (IS_ENABLED(CONFIG_MODULE_SECTIONS)) {
232 		offset = (void *)module_emit_got_entry(me, v) - location;
233 	} else {
234 		pr_err(
235 		  "%s: can not generate the GOT entry for symbol = %016llx from PC = %p\n",
236 		  me->name, (long long)v, location);
237 		return -EINVAL;
238 	}
239 
240 	return riscv_insn_rmw(location, 0xfff, (offset + 0x800) & 0xfffff000);
241 }
242 
apply_r_riscv_call_plt_rela(struct module * me,void * location,Elf_Addr v)243 static int apply_r_riscv_call_plt_rela(struct module *me, void *location,
244 				       Elf_Addr v)
245 {
246 	ptrdiff_t offset = (void *)v - location;
247 	u32 hi20, lo12;
248 
249 	if (!riscv_insn_valid_32bit_offset(offset)) {
250 		/* Only emit the plt entry if offset over 32-bit range */
251 		if (IS_ENABLED(CONFIG_MODULE_SECTIONS)) {
252 			offset = (void *)module_emit_plt_entry(me, v) - location;
253 		} else {
254 			pr_err(
255 			  "%s: target %016llx can not be addressed by the 32-bit offset from PC = %p\n",
256 			  me->name, (long long)v, location);
257 			return -EINVAL;
258 		}
259 	}
260 
261 	hi20 = (offset + 0x800) & 0xfffff000;
262 	lo12 = (offset - hi20) & 0xfff;
263 	riscv_insn_rmw(location, 0xfff, hi20);
264 	return riscv_insn_rmw(location + 4, 0xfffff, lo12 << 20);
265 }
266 
apply_r_riscv_call_rela(struct module * me,void * location,Elf_Addr v)267 static int apply_r_riscv_call_rela(struct module *me, void *location,
268 				   Elf_Addr v)
269 {
270 	ptrdiff_t offset = (void *)v - location;
271 	u32 hi20, lo12;
272 
273 	if (!riscv_insn_valid_32bit_offset(offset)) {
274 		pr_err(
275 		  "%s: target %016llx can not be addressed by the 32-bit offset from PC = %p\n",
276 		  me->name, (long long)v, location);
277 		return -EINVAL;
278 	}
279 
280 	hi20 = (offset + 0x800) & 0xfffff000;
281 	lo12 = (offset - hi20) & 0xfff;
282 	riscv_insn_rmw(location, 0xfff, hi20);
283 	return riscv_insn_rmw(location + 4, 0xfffff, lo12 << 20);
284 }
285 
apply_r_riscv_relax_rela(struct module * me,void * location,Elf_Addr v)286 static int apply_r_riscv_relax_rela(struct module *me, void *location,
287 				    Elf_Addr v)
288 {
289 	return 0;
290 }
291 
apply_r_riscv_align_rela(struct module * me,void * location,Elf_Addr v)292 static int apply_r_riscv_align_rela(struct module *me, void *location,
293 				    Elf_Addr v)
294 {
295 	pr_err(
296 	  "%s: The unexpected relocation type 'R_RISCV_ALIGN' from PC = %p\n",
297 	  me->name, location);
298 	return -EINVAL;
299 }
300 
apply_r_riscv_add8_rela(struct module * me,void * location,Elf_Addr v)301 static int apply_r_riscv_add8_rela(struct module *me, void *location, Elf_Addr v)
302 {
303 	*(u8 *)location += (u8)v;
304 	return 0;
305 }
306 
apply_r_riscv_add16_rela(struct module * me,void * location,Elf_Addr v)307 static int apply_r_riscv_add16_rela(struct module *me, void *location,
308 				    Elf_Addr v)
309 {
310 	*(u16 *)location += (u16)v;
311 	return 0;
312 }
313 
apply_r_riscv_add32_rela(struct module * me,void * location,Elf_Addr v)314 static int apply_r_riscv_add32_rela(struct module *me, void *location,
315 				    Elf_Addr v)
316 {
317 	*(u32 *)location += (u32)v;
318 	return 0;
319 }
320 
apply_r_riscv_add64_rela(struct module * me,void * location,Elf_Addr v)321 static int apply_r_riscv_add64_rela(struct module *me, void *location,
322 				    Elf_Addr v)
323 {
324 	*(u64 *)location += (u64)v;
325 	return 0;
326 }
327 
apply_r_riscv_sub8_rela(struct module * me,void * location,Elf_Addr v)328 static int apply_r_riscv_sub8_rela(struct module *me, void *location, Elf_Addr v)
329 {
330 	*(u8 *)location -= (u8)v;
331 	return 0;
332 }
333 
apply_r_riscv_sub16_rela(struct module * me,void * location,Elf_Addr v)334 static int apply_r_riscv_sub16_rela(struct module *me, void *location,
335 				    Elf_Addr v)
336 {
337 	*(u16 *)location -= (u16)v;
338 	return 0;
339 }
340 
apply_r_riscv_sub32_rela(struct module * me,void * location,Elf_Addr v)341 static int apply_r_riscv_sub32_rela(struct module *me, void *location,
342 				    Elf_Addr v)
343 {
344 	*(u32 *)location -= (u32)v;
345 	return 0;
346 }
347 
apply_r_riscv_sub64_rela(struct module * me,void * location,Elf_Addr v)348 static int apply_r_riscv_sub64_rela(struct module *me, void *location,
349 				    Elf_Addr v)
350 {
351 	*(u64 *)location -= (u64)v;
352 	return 0;
353 }
354 
dynamic_linking_not_supported(struct module * me,void * location,Elf_Addr v)355 static int dynamic_linking_not_supported(struct module *me, void *location,
356 					 Elf_Addr v)
357 {
358 	pr_err("%s: Dynamic linking not supported in kernel modules PC = %p\n",
359 	       me->name, location);
360 	return -EINVAL;
361 }
362 
tls_not_supported(struct module * me,void * location,Elf_Addr v)363 static int tls_not_supported(struct module *me, void *location, Elf_Addr v)
364 {
365 	pr_err("%s: Thread local storage not supported in kernel modules PC = %p\n",
366 	       me->name, location);
367 	return -EINVAL;
368 }
369 
apply_r_riscv_sub6_rela(struct module * me,void * location,Elf_Addr v)370 static int apply_r_riscv_sub6_rela(struct module *me, void *location, Elf_Addr v)
371 {
372 	u8 *byte = location;
373 	u8 value = v;
374 
375 	*byte = (*byte - (value & 0x3f)) & 0x3f;
376 	return 0;
377 }
378 
apply_r_riscv_set6_rela(struct module * me,void * location,Elf_Addr v)379 static int apply_r_riscv_set6_rela(struct module *me, void *location, Elf_Addr v)
380 {
381 	u8 *byte = location;
382 	u8 value = v;
383 
384 	*byte = (*byte & 0xc0) | (value & 0x3f);
385 	return 0;
386 }
387 
apply_r_riscv_set8_rela(struct module * me,void * location,Elf_Addr v)388 static int apply_r_riscv_set8_rela(struct module *me, void *location, Elf_Addr v)
389 {
390 	*(u8 *)location = (u8)v;
391 	return 0;
392 }
393 
apply_r_riscv_set16_rela(struct module * me,void * location,Elf_Addr v)394 static int apply_r_riscv_set16_rela(struct module *me, void *location,
395 				    Elf_Addr v)
396 {
397 	*(u16 *)location = (u16)v;
398 	return 0;
399 }
400 
apply_r_riscv_set32_rela(struct module * me,void * location,Elf_Addr v)401 static int apply_r_riscv_set32_rela(struct module *me, void *location,
402 				    Elf_Addr v)
403 {
404 	*(u32 *)location = (u32)v;
405 	return 0;
406 }
407 
apply_r_riscv_32_pcrel_rela(struct module * me,void * location,Elf_Addr v)408 static int apply_r_riscv_32_pcrel_rela(struct module *me, void *location,
409 				       Elf_Addr v)
410 {
411 	*(u32 *)location = v - (uintptr_t)location;
412 	return 0;
413 }
414 
apply_r_riscv_plt32_rela(struct module * me,void * location,Elf_Addr v)415 static int apply_r_riscv_plt32_rela(struct module *me, void *location,
416 				    Elf_Addr v)
417 {
418 	ptrdiff_t offset = (void *)v - location;
419 
420 	if (!riscv_insn_valid_32bit_offset(offset)) {
421 		/* Only emit the plt entry if offset over 32-bit range */
422 		if (IS_ENABLED(CONFIG_MODULE_SECTIONS)) {
423 			offset = (void *)module_emit_plt_entry(me, v) - location;
424 		} else {
425 			pr_err("%s: target %016llx can not be addressed by the 32-bit offset from PC = %p\n",
426 			       me->name, (long long)v, location);
427 			return -EINVAL;
428 		}
429 	}
430 
431 	*(u32 *)location = (u32)offset;
432 	return 0;
433 }
434 
apply_r_riscv_set_uleb128(struct module * me,void * location,Elf_Addr v)435 static int apply_r_riscv_set_uleb128(struct module *me, void *location, Elf_Addr v)
436 {
437 	*(long *)location = v;
438 	return 0;
439 }
440 
apply_r_riscv_sub_uleb128(struct module * me,void * location,Elf_Addr v)441 static int apply_r_riscv_sub_uleb128(struct module *me, void *location, Elf_Addr v)
442 {
443 	*(long *)location -= v;
444 	return 0;
445 }
446 
apply_6_bit_accumulation(struct module * me,void * location,long buffer)447 static int apply_6_bit_accumulation(struct module *me, void *location, long buffer)
448 {
449 	u8 *byte = location;
450 	u8 value = buffer;
451 
452 	if (buffer > 0x3f) {
453 		pr_err("%s: value %ld out of range for 6-bit relocation.\n",
454 		       me->name, buffer);
455 		return -EINVAL;
456 	}
457 
458 	*byte = (*byte & 0xc0) | (value & 0x3f);
459 	return 0;
460 }
461 
apply_8_bit_accumulation(struct module * me,void * location,long buffer)462 static int apply_8_bit_accumulation(struct module *me, void *location, long buffer)
463 {
464 	if (buffer > U8_MAX) {
465 		pr_err("%s: value %ld out of range for 8-bit relocation.\n",
466 		       me->name, buffer);
467 		return -EINVAL;
468 	}
469 	*(u8 *)location = (u8)buffer;
470 	return 0;
471 }
472 
apply_16_bit_accumulation(struct module * me,void * location,long buffer)473 static int apply_16_bit_accumulation(struct module *me, void *location, long buffer)
474 {
475 	if (buffer > U16_MAX) {
476 		pr_err("%s: value %ld out of range for 16-bit relocation.\n",
477 		       me->name, buffer);
478 		return -EINVAL;
479 	}
480 	*(u16 *)location = (u16)buffer;
481 	return 0;
482 }
483 
apply_32_bit_accumulation(struct module * me,void * location,long buffer)484 static int apply_32_bit_accumulation(struct module *me, void *location, long buffer)
485 {
486 	if (buffer > U32_MAX) {
487 		pr_err("%s: value %ld out of range for 32-bit relocation.\n",
488 		       me->name, buffer);
489 		return -EINVAL;
490 	}
491 	*(u32 *)location = (u32)buffer;
492 	return 0;
493 }
494 
apply_64_bit_accumulation(struct module * me,void * location,long buffer)495 static int apply_64_bit_accumulation(struct module *me, void *location, long buffer)
496 {
497 	*(u64 *)location = (u64)buffer;
498 	return 0;
499 }
500 
apply_uleb128_accumulation(struct module * me,void * location,long buffer)501 static int apply_uleb128_accumulation(struct module *me, void *location, long buffer)
502 {
503 	/*
504 	 * ULEB128 is a variable length encoding. Encode the buffer into
505 	 * the ULEB128 data format.
506 	 */
507 	u8 *p = location;
508 
509 	while (buffer != 0) {
510 		u8 value = buffer & 0x7f;
511 
512 		buffer >>= 7;
513 		value |= (!!buffer) << 7;
514 
515 		*p++ = value;
516 	}
517 	return 0;
518 }
519 
520 /*
521  * Relocations defined in the riscv-elf-psabi-doc.
522  * This handles static linking only.
523  */
524 static const struct relocation_handlers reloc_handlers[] = {
525 	[R_RISCV_32]		= { .reloc_handler = apply_r_riscv_32_rela },
526 	[R_RISCV_64]		= { .reloc_handler = apply_r_riscv_64_rela },
527 	[R_RISCV_RELATIVE]	= { .reloc_handler = dynamic_linking_not_supported },
528 	[R_RISCV_COPY]		= { .reloc_handler = dynamic_linking_not_supported },
529 	[R_RISCV_JUMP_SLOT]	= { .reloc_handler = dynamic_linking_not_supported },
530 	[R_RISCV_TLS_DTPMOD32]	= { .reloc_handler = dynamic_linking_not_supported },
531 	[R_RISCV_TLS_DTPMOD64]	= { .reloc_handler = dynamic_linking_not_supported },
532 	[R_RISCV_TLS_DTPREL32]	= { .reloc_handler = dynamic_linking_not_supported },
533 	[R_RISCV_TLS_DTPREL64]	= { .reloc_handler = dynamic_linking_not_supported },
534 	[R_RISCV_TLS_TPREL32]	= { .reloc_handler = dynamic_linking_not_supported },
535 	[R_RISCV_TLS_TPREL64]	= { .reloc_handler = dynamic_linking_not_supported },
536 	/* 12-15 undefined */
537 	[R_RISCV_BRANCH]	= { .reloc_handler = apply_r_riscv_branch_rela },
538 	[R_RISCV_JAL]		= { .reloc_handler = apply_r_riscv_jal_rela },
539 	[R_RISCV_CALL]		= { .reloc_handler = apply_r_riscv_call_rela },
540 	[R_RISCV_CALL_PLT]	= { .reloc_handler = apply_r_riscv_call_plt_rela },
541 	[R_RISCV_GOT_HI20]	= { .reloc_handler = apply_r_riscv_got_hi20_rela },
542 	[R_RISCV_TLS_GOT_HI20]	= { .reloc_handler = tls_not_supported },
543 	[R_RISCV_TLS_GD_HI20]	= { .reloc_handler = tls_not_supported },
544 	[R_RISCV_PCREL_HI20]	= { .reloc_handler = apply_r_riscv_pcrel_hi20_rela },
545 	[R_RISCV_PCREL_LO12_I]	= { .reloc_handler = apply_r_riscv_pcrel_lo12_i_rela },
546 	[R_RISCV_PCREL_LO12_S]	= { .reloc_handler = apply_r_riscv_pcrel_lo12_s_rela },
547 	[R_RISCV_HI20]		= { .reloc_handler = apply_r_riscv_hi20_rela },
548 	[R_RISCV_LO12_I]	= { .reloc_handler = apply_r_riscv_lo12_i_rela },
549 	[R_RISCV_LO12_S]	= { .reloc_handler = apply_r_riscv_lo12_s_rela },
550 	[R_RISCV_TPREL_HI20]	= { .reloc_handler = tls_not_supported },
551 	[R_RISCV_TPREL_LO12_I]	= { .reloc_handler = tls_not_supported },
552 	[R_RISCV_TPREL_LO12_S]	= { .reloc_handler = tls_not_supported },
553 	[R_RISCV_TPREL_ADD]	= { .reloc_handler = tls_not_supported },
554 	[R_RISCV_ADD8]		= { .reloc_handler = apply_r_riscv_add8_rela,
555 				    .accumulate_handler = apply_8_bit_accumulation },
556 	[R_RISCV_ADD16]		= { .reloc_handler = apply_r_riscv_add16_rela,
557 				    .accumulate_handler = apply_16_bit_accumulation },
558 	[R_RISCV_ADD32]		= { .reloc_handler = apply_r_riscv_add32_rela,
559 				    .accumulate_handler = apply_32_bit_accumulation },
560 	[R_RISCV_ADD64]		= { .reloc_handler = apply_r_riscv_add64_rela,
561 				    .accumulate_handler = apply_64_bit_accumulation },
562 	[R_RISCV_SUB8]		= { .reloc_handler = apply_r_riscv_sub8_rela,
563 				    .accumulate_handler = apply_8_bit_accumulation },
564 	[R_RISCV_SUB16]		= { .reloc_handler = apply_r_riscv_sub16_rela,
565 				    .accumulate_handler = apply_16_bit_accumulation },
566 	[R_RISCV_SUB32]		= { .reloc_handler = apply_r_riscv_sub32_rela,
567 				    .accumulate_handler = apply_32_bit_accumulation },
568 	[R_RISCV_SUB64]		= { .reloc_handler = apply_r_riscv_sub64_rela,
569 				    .accumulate_handler = apply_64_bit_accumulation },
570 	/* 41-42 reserved for future standard use */
571 	[R_RISCV_ALIGN]		= { .reloc_handler = apply_r_riscv_align_rela },
572 	[R_RISCV_RVC_BRANCH]	= { .reloc_handler = apply_r_riscv_rvc_branch_rela },
573 	[R_RISCV_RVC_JUMP]	= { .reloc_handler = apply_r_riscv_rvc_jump_rela },
574 	/* 46-50 reserved for future standard use */
575 	[R_RISCV_RELAX]		= { .reloc_handler = apply_r_riscv_relax_rela },
576 	[R_RISCV_SUB6]		= { .reloc_handler = apply_r_riscv_sub6_rela,
577 				    .accumulate_handler = apply_6_bit_accumulation },
578 	[R_RISCV_SET6]		= { .reloc_handler = apply_r_riscv_set6_rela,
579 				    .accumulate_handler = apply_6_bit_accumulation },
580 	[R_RISCV_SET8]		= { .reloc_handler = apply_r_riscv_set8_rela,
581 				    .accumulate_handler = apply_8_bit_accumulation },
582 	[R_RISCV_SET16]		= { .reloc_handler = apply_r_riscv_set16_rela,
583 				    .accumulate_handler = apply_16_bit_accumulation },
584 	[R_RISCV_SET32]		= { .reloc_handler = apply_r_riscv_set32_rela,
585 				    .accumulate_handler = apply_32_bit_accumulation },
586 	[R_RISCV_32_PCREL]	= { .reloc_handler = apply_r_riscv_32_pcrel_rela },
587 	[R_RISCV_IRELATIVE]	= { .reloc_handler = dynamic_linking_not_supported },
588 	[R_RISCV_PLT32]		= { .reloc_handler = apply_r_riscv_plt32_rela },
589 	[R_RISCV_SET_ULEB128]	= { .reloc_handler = apply_r_riscv_set_uleb128,
590 				    .accumulate_handler = apply_uleb128_accumulation },
591 	[R_RISCV_SUB_ULEB128]	= { .reloc_handler = apply_r_riscv_sub_uleb128,
592 				    .accumulate_handler = apply_uleb128_accumulation },
593 	/* 62-191 reserved for future standard use */
594 	/* 192-255 nonstandard ABI extensions  */
595 };
596 
597 static void
process_accumulated_relocations(struct module * me,struct hlist_head ** relocation_hashtable,struct list_head * used_buckets_list)598 process_accumulated_relocations(struct module *me,
599 				struct hlist_head **relocation_hashtable,
600 				struct list_head *used_buckets_list)
601 {
602 	/*
603 	 * Only ADD/SUB/SET/ULEB128 should end up here.
604 	 *
605 	 * Each bucket may have more than one relocation location. All
606 	 * relocations for a location are stored in a list in a bucket.
607 	 *
608 	 * Relocations are applied to a temp variable before being stored to the
609 	 * provided location to check for overflow. This also allows ULEB128 to
610 	 * properly decide how many entries are needed before storing to
611 	 * location. The final value is stored into location using the handler
612 	 * for the last relocation to an address.
613 	 *
614 	 * Three layers of indexing:
615 	 *	- Each of the buckets in use
616 	 *	- Groups of relocations in each bucket by location address
617 	 *	- Each relocation entry for a location address
618 	 */
619 	struct used_bucket *bucket_iter;
620 	struct used_bucket *bucket_iter_tmp;
621 	struct relocation_head *rel_head_iter;
622 	struct hlist_node *rel_head_iter_tmp;
623 	struct relocation_entry *rel_entry_iter;
624 	struct relocation_entry *rel_entry_iter_tmp;
625 	int curr_type;
626 	void *location;
627 	long buffer;
628 
629 	list_for_each_entry_safe(bucket_iter, bucket_iter_tmp,
630 				 used_buckets_list, head) {
631 		hlist_for_each_entry_safe(rel_head_iter, rel_head_iter_tmp,
632 					  bucket_iter->bucket, node) {
633 			buffer = 0;
634 			location = rel_head_iter->location;
635 			list_for_each_entry_safe(rel_entry_iter,
636 						 rel_entry_iter_tmp,
637 						 rel_head_iter->rel_entry,
638 						 head) {
639 				curr_type = rel_entry_iter->type;
640 				reloc_handlers[curr_type].reloc_handler(
641 					me, &buffer, rel_entry_iter->value);
642 				kfree(rel_entry_iter);
643 			}
644 			reloc_handlers[curr_type].accumulate_handler(
645 				me, location, buffer);
646 			kfree(rel_head_iter);
647 		}
648 		kfree(bucket_iter);
649 	}
650 
651 	kfree(*relocation_hashtable);
652 }
653 
add_relocation_to_accumulate(struct module * me,int type,void * location,unsigned int hashtable_bits,Elf_Addr v,struct hlist_head * relocation_hashtable,struct list_head * used_buckets_list)654 static int add_relocation_to_accumulate(struct module *me, int type,
655 					void *location,
656 					unsigned int hashtable_bits, Elf_Addr v,
657 					struct hlist_head *relocation_hashtable,
658 					struct list_head *used_buckets_list)
659 {
660 	struct relocation_entry *entry;
661 	struct relocation_head *rel_head;
662 	struct hlist_head *current_head;
663 	struct used_bucket *bucket;
664 	unsigned long hash;
665 
666 	entry = kmalloc(sizeof(*entry), GFP_KERNEL);
667 
668 	if (!entry)
669 		return -ENOMEM;
670 
671 	INIT_LIST_HEAD(&entry->head);
672 	entry->type = type;
673 	entry->value = v;
674 
675 	hash = hash_min((uintptr_t)location, hashtable_bits);
676 
677 	current_head = &relocation_hashtable[hash];
678 
679 	/*
680 	 * Search for the relocation_head for the relocations that happen at the
681 	 * provided location
682 	 */
683 	bool found = false;
684 	struct relocation_head *rel_head_iter;
685 
686 	hlist_for_each_entry(rel_head_iter, current_head, node) {
687 		if (rel_head_iter->location == location) {
688 			found = true;
689 			rel_head = rel_head_iter;
690 			break;
691 		}
692 	}
693 
694 	/*
695 	 * If there has not yet been any relocations at the provided location,
696 	 * create a relocation_head for that location and populate it with this
697 	 * relocation_entry.
698 	 */
699 	if (!found) {
700 		rel_head = kmalloc(sizeof(*rel_head), GFP_KERNEL);
701 
702 		if (!rel_head) {
703 			kfree(entry);
704 			return -ENOMEM;
705 		}
706 
707 		rel_head->rel_entry =
708 			kmalloc(sizeof(struct list_head), GFP_KERNEL);
709 
710 		if (!rel_head->rel_entry) {
711 			kfree(entry);
712 			kfree(rel_head);
713 			return -ENOMEM;
714 		}
715 
716 		INIT_LIST_HEAD(rel_head->rel_entry);
717 		rel_head->location = location;
718 		INIT_HLIST_NODE(&rel_head->node);
719 		if (!current_head->first) {
720 			bucket =
721 				kmalloc(sizeof(struct used_bucket), GFP_KERNEL);
722 
723 			if (!bucket) {
724 				kfree(entry);
725 				kfree(rel_head->rel_entry);
726 				kfree(rel_head);
727 				return -ENOMEM;
728 			}
729 
730 			INIT_LIST_HEAD(&bucket->head);
731 			bucket->bucket = current_head;
732 			list_add(&bucket->head, used_buckets_list);
733 		}
734 		hlist_add_head(&rel_head->node, current_head);
735 	}
736 
737 	/* Add relocation to head of discovered rel_head */
738 	list_add_tail(&entry->head, rel_head->rel_entry);
739 
740 	return 0;
741 }
742 
743 static unsigned int
initialize_relocation_hashtable(unsigned int num_relocations,struct hlist_head ** relocation_hashtable)744 initialize_relocation_hashtable(unsigned int num_relocations,
745 				struct hlist_head **relocation_hashtable)
746 {
747 	/* Can safely assume that bits is not greater than sizeof(long) */
748 	unsigned long hashtable_size = roundup_pow_of_two(num_relocations);
749 	/*
750 	 * When hashtable_size == 1, hashtable_bits == 0.
751 	 * This is valid because the hashing algorithm returns 0 in this case.
752 	 */
753 	unsigned int hashtable_bits = ilog2(hashtable_size);
754 
755 	/*
756 	 * Double size of hashtable if num_relocations * 1.25 is greater than
757 	 * hashtable_size.
758 	 */
759 	int should_double_size = ((num_relocations + (num_relocations >> 2)) > (hashtable_size));
760 
761 	hashtable_bits += should_double_size;
762 
763 	hashtable_size <<= should_double_size;
764 
765 	*relocation_hashtable = kmalloc_array(hashtable_size,
766 					      sizeof(**relocation_hashtable),
767 					      GFP_KERNEL);
768 	if (!*relocation_hashtable)
769 		return 0;
770 
771 	__hash_init(*relocation_hashtable, hashtable_size);
772 
773 	return hashtable_bits;
774 }
775 
apply_relocate_add(Elf_Shdr * sechdrs,const char * strtab,unsigned int symindex,unsigned int relsec,struct module * me)776 int apply_relocate_add(Elf_Shdr *sechdrs, const char *strtab,
777 		       unsigned int symindex, unsigned int relsec,
778 		       struct module *me)
779 {
780 	Elf_Rela *rel = (void *) sechdrs[relsec].sh_addr;
781 	int (*handler)(struct module *me, void *location, Elf_Addr v);
782 	Elf_Sym *sym;
783 	void *location;
784 	unsigned int i, type;
785 	unsigned int j_idx = 0;
786 	Elf_Addr v;
787 	int res;
788 	unsigned int num_relocations = sechdrs[relsec].sh_size / sizeof(*rel);
789 	struct hlist_head *relocation_hashtable;
790 	unsigned int hashtable_bits;
791 	LIST_HEAD(used_buckets_list);
792 
793 	hashtable_bits = initialize_relocation_hashtable(num_relocations,
794 							 &relocation_hashtable);
795 
796 	if (!relocation_hashtable)
797 		return -ENOMEM;
798 
799 	pr_debug("Applying relocate section %u to %u\n", relsec,
800 	       sechdrs[relsec].sh_info);
801 
802 	for (i = 0; i < num_relocations; i++) {
803 		/* This is where to make the change */
804 		location = (void *)sechdrs[sechdrs[relsec].sh_info].sh_addr
805 			+ rel[i].r_offset;
806 		/* This is the symbol it is referring to */
807 		sym = (Elf_Sym *)sechdrs[symindex].sh_addr
808 			+ ELF_RISCV_R_SYM(rel[i].r_info);
809 		if (IS_ERR_VALUE(sym->st_value)) {
810 			/* Ignore unresolved weak symbol */
811 			if (ELF_ST_BIND(sym->st_info) == STB_WEAK)
812 				continue;
813 			pr_warn("%s: Unknown symbol %s\n",
814 				me->name, strtab + sym->st_name);
815 			return -ENOENT;
816 		}
817 
818 		type = ELF_RISCV_R_TYPE(rel[i].r_info);
819 
820 		if (type < ARRAY_SIZE(reloc_handlers))
821 			handler = reloc_handlers[type].reloc_handler;
822 		else
823 			handler = NULL;
824 
825 		if (!handler) {
826 			pr_err("%s: Unknown relocation type %u\n",
827 			       me->name, type);
828 			return -EINVAL;
829 		}
830 
831 		v = sym->st_value + rel[i].r_addend;
832 
833 		if (type == R_RISCV_PCREL_LO12_I || type == R_RISCV_PCREL_LO12_S) {
834 			unsigned int j = j_idx;
835 			bool found = false;
836 
837 			do {
838 				unsigned long hi20_loc =
839 					sechdrs[sechdrs[relsec].sh_info].sh_addr
840 					+ rel[j].r_offset;
841 				u32 hi20_type = ELF_RISCV_R_TYPE(rel[j].r_info);
842 
843 				/* Find the corresponding HI20 relocation entry */
844 				if (hi20_loc == sym->st_value
845 				    && (hi20_type == R_RISCV_PCREL_HI20
846 					|| hi20_type == R_RISCV_GOT_HI20)) {
847 					s32 hi20, lo12;
848 					Elf_Sym *hi20_sym =
849 						(Elf_Sym *)sechdrs[symindex].sh_addr
850 						+ ELF_RISCV_R_SYM(rel[j].r_info);
851 					unsigned long hi20_sym_val =
852 						hi20_sym->st_value
853 						+ rel[j].r_addend;
854 
855 					/* Calculate lo12 */
856 					size_t offset = hi20_sym_val - hi20_loc;
857 					if (IS_ENABLED(CONFIG_MODULE_SECTIONS)
858 					    && hi20_type == R_RISCV_GOT_HI20) {
859 						offset = module_emit_got_entry(
860 							 me, hi20_sym_val);
861 						offset = offset - hi20_loc;
862 					}
863 					hi20 = (offset + 0x800) & 0xfffff000;
864 					lo12 = offset - hi20;
865 					v = lo12;
866 					found = true;
867 
868 					break;
869 				}
870 
871 				j++;
872 				if (j > sechdrs[relsec].sh_size / sizeof(*rel))
873 					j = 0;
874 
875 			} while (j_idx != j);
876 
877 			if (!found) {
878 				pr_err(
879 				  "%s: Can not find HI20 relocation information\n",
880 				  me->name);
881 				return -EINVAL;
882 			}
883 
884 			/* Record the previous j-loop end index */
885 			j_idx = j;
886 		}
887 
888 		if (reloc_handlers[type].accumulate_handler)
889 			res = add_relocation_to_accumulate(me, type, location,
890 							   hashtable_bits, v,
891 							   relocation_hashtable,
892 							   &used_buckets_list);
893 		else
894 			res = handler(me, location, v);
895 		if (res)
896 			return res;
897 	}
898 
899 	process_accumulated_relocations(me, &relocation_hashtable,
900 					&used_buckets_list);
901 
902 	return 0;
903 }
904 
module_finalize(const Elf_Ehdr * hdr,const Elf_Shdr * sechdrs,struct module * me)905 int module_finalize(const Elf_Ehdr *hdr,
906 		    const Elf_Shdr *sechdrs,
907 		    struct module *me)
908 {
909 	const Elf_Shdr *s;
910 
911 	s = find_section(hdr, sechdrs, ".alternative");
912 	if (s)
913 		apply_module_alternatives((void *)s->sh_addr, s->sh_size);
914 
915 	return 0;
916 }
917