1 // SPDX-License-Identifier: GPL-2.0-or-later
2
3 /*
4 * Copyright (C) 2004 Benjamin Herrenschmidt, IBM Corp.
5 * <benh@kernel.crashing.org>
6 */
7
8 #include <linux/errno.h>
9 #include <linux/sched.h>
10 #include <linux/kernel.h>
11 #include <linux/mm.h>
12 #include <linux/smp.h>
13 #include <linux/stddef.h>
14 #include <linux/unistd.h>
15 #include <linux/slab.h>
16 #include <linux/user.h>
17 #include <linux/elf.h>
18 #include <linux/security.h>
19 #include <linux/memblock.h>
20 #include <linux/syscalls.h>
21 #include <linux/time_namespace.h>
22 #include <vdso/datapage.h>
23
24 #include <asm/syscall.h>
25 #include <asm/processor.h>
26 #include <asm/mmu.h>
27 #include <asm/mmu_context.h>
28 #include <asm/machdep.h>
29 #include <asm/cputable.h>
30 #include <asm/sections.h>
31 #include <asm/firmware.h>
32 #include <asm/vdso.h>
33 #include <asm/vdso_datapage.h>
34 #include <asm/setup.h>
35
36 /* The alignment of the vDSO */
37 #define VDSO_ALIGNMENT (1 << 16)
38
39 extern char vdso32_start, vdso32_end;
40 extern char vdso64_start, vdso64_end;
41
42 /*
43 * The vdso data page (aka. systemcfg for old ppc64 fans) is here.
44 * Once the early boot kernel code no longer needs to muck around
45 * with it, it will become dynamically allocated
46 */
47 static union {
48 struct vdso_arch_data data;
49 u8 page[PAGE_SIZE];
50 } vdso_data_store __page_aligned_data;
51 struct vdso_arch_data *vdso_data = &vdso_data_store.data;
52
53 enum vvar_pages {
54 VVAR_DATA_PAGE_OFFSET,
55 VVAR_TIMENS_PAGE_OFFSET,
56 VVAR_NR_PAGES,
57 };
58
vdso_mremap(const struct vm_special_mapping * sm,struct vm_area_struct * new_vma,unsigned long text_size)59 static int vdso_mremap(const struct vm_special_mapping *sm, struct vm_area_struct *new_vma,
60 unsigned long text_size)
61 {
62 unsigned long new_size = new_vma->vm_end - new_vma->vm_start;
63
64 if (new_size != text_size)
65 return -EINVAL;
66
67 current->mm->context.vdso = (void __user *)new_vma->vm_start;
68
69 return 0;
70 }
71
vdso32_mremap(const struct vm_special_mapping * sm,struct vm_area_struct * new_vma)72 static int vdso32_mremap(const struct vm_special_mapping *sm, struct vm_area_struct *new_vma)
73 {
74 return vdso_mremap(sm, new_vma, &vdso32_end - &vdso32_start);
75 }
76
vdso64_mremap(const struct vm_special_mapping * sm,struct vm_area_struct * new_vma)77 static int vdso64_mremap(const struct vm_special_mapping *sm, struct vm_area_struct *new_vma)
78 {
79 return vdso_mremap(sm, new_vma, &vdso64_end - &vdso64_start);
80 }
81
82 static vm_fault_t vvar_fault(const struct vm_special_mapping *sm,
83 struct vm_area_struct *vma, struct vm_fault *vmf);
84
85 static struct vm_special_mapping vvar_spec __ro_after_init = {
86 .name = "[vvar]",
87 .fault = vvar_fault,
88 };
89
90 static struct vm_special_mapping vdso32_spec __ro_after_init = {
91 .name = "[vdso]",
92 .mremap = vdso32_mremap,
93 };
94
95 static struct vm_special_mapping vdso64_spec __ro_after_init = {
96 .name = "[vdso]",
97 .mremap = vdso64_mremap,
98 };
99
100 #ifdef CONFIG_TIME_NS
arch_get_vdso_data(void * vvar_page)101 struct vdso_data *arch_get_vdso_data(void *vvar_page)
102 {
103 return ((struct vdso_arch_data *)vvar_page)->data;
104 }
105
106 /*
107 * The vvar mapping contains data for a specific time namespace, so when a task
108 * changes namespace we must unmap its vvar data for the old namespace.
109 * Subsequent faults will map in data for the new namespace.
110 *
111 * For more details see timens_setup_vdso_data().
112 */
vdso_join_timens(struct task_struct * task,struct time_namespace * ns)113 int vdso_join_timens(struct task_struct *task, struct time_namespace *ns)
114 {
115 struct mm_struct *mm = task->mm;
116 struct vm_area_struct *vma;
117
118 mmap_read_lock(mm);
119
120 for (vma = mm->mmap; vma; vma = vma->vm_next) {
121 unsigned long size = vma->vm_end - vma->vm_start;
122
123 if (vma_is_special_mapping(vma, &vvar_spec))
124 zap_page_range(vma, vma->vm_start, size);
125 }
126
127 mmap_read_unlock(mm);
128 return 0;
129 }
130
find_timens_vvar_page(struct vm_area_struct * vma)131 static struct page *find_timens_vvar_page(struct vm_area_struct *vma)
132 {
133 if (likely(vma->vm_mm == current->mm))
134 return current->nsproxy->time_ns->vvar_page;
135
136 /*
137 * VM_PFNMAP | VM_IO protect .fault() handler from being called
138 * through interfaces like /proc/$pid/mem or
139 * process_vm_{readv,writev}() as long as there's no .access()
140 * in special_mapping_vmops.
141 * For more details check_vma_flags() and __access_remote_vm()
142 */
143 WARN(1, "vvar_page accessed remotely");
144
145 return NULL;
146 }
147 #else
find_timens_vvar_page(struct vm_area_struct * vma)148 static struct page *find_timens_vvar_page(struct vm_area_struct *vma)
149 {
150 return NULL;
151 }
152 #endif
153
vvar_fault(const struct vm_special_mapping * sm,struct vm_area_struct * vma,struct vm_fault * vmf)154 static vm_fault_t vvar_fault(const struct vm_special_mapping *sm,
155 struct vm_area_struct *vma, struct vm_fault *vmf)
156 {
157 struct page *timens_page = find_timens_vvar_page(vma);
158 unsigned long pfn;
159
160 switch (vmf->pgoff) {
161 case VVAR_DATA_PAGE_OFFSET:
162 if (timens_page)
163 pfn = page_to_pfn(timens_page);
164 else
165 pfn = virt_to_pfn(vdso_data);
166 break;
167 #ifdef CONFIG_TIME_NS
168 case VVAR_TIMENS_PAGE_OFFSET:
169 /*
170 * If a task belongs to a time namespace then a namespace
171 * specific VVAR is mapped with the VVAR_DATA_PAGE_OFFSET and
172 * the real VVAR page is mapped with the VVAR_TIMENS_PAGE_OFFSET
173 * offset.
174 * See also the comment near timens_setup_vdso_data().
175 */
176 if (!timens_page)
177 return VM_FAULT_SIGBUS;
178 pfn = virt_to_pfn(vdso_data);
179 break;
180 #endif /* CONFIG_TIME_NS */
181 default:
182 return VM_FAULT_SIGBUS;
183 }
184
185 return vmf_insert_pfn(vma, vmf->address, pfn);
186 }
187
188 /*
189 * This is called from binfmt_elf, we create the special vma for the
190 * vDSO and insert it into the mm struct tree
191 */
__arch_setup_additional_pages(struct linux_binprm * bprm,int uses_interp)192 static int __arch_setup_additional_pages(struct linux_binprm *bprm, int uses_interp)
193 {
194 unsigned long vdso_size, vdso_base, mappings_size;
195 struct vm_special_mapping *vdso_spec;
196 unsigned long vvar_size = VVAR_NR_PAGES * PAGE_SIZE;
197 struct mm_struct *mm = current->mm;
198 struct vm_area_struct *vma;
199
200 if (is_32bit_task()) {
201 vdso_spec = &vdso32_spec;
202 vdso_size = &vdso32_end - &vdso32_start;
203 vdso_base = VDSO32_MBASE;
204 } else {
205 vdso_spec = &vdso64_spec;
206 vdso_size = &vdso64_end - &vdso64_start;
207 /*
208 * On 64bit we don't have a preferred map address. This
209 * allows get_unmapped_area to find an area near other mmaps
210 * and most likely share a SLB entry.
211 */
212 vdso_base = 0;
213 }
214
215 mappings_size = vdso_size + vvar_size;
216 mappings_size += (VDSO_ALIGNMENT - 1) & PAGE_MASK;
217
218 /*
219 * pick a base address for the vDSO in process space. We try to put it
220 * at vdso_base which is the "natural" base for it, but we might fail
221 * and end up putting it elsewhere.
222 * Add enough to the size so that the result can be aligned.
223 */
224 vdso_base = get_unmapped_area(NULL, vdso_base, mappings_size, 0, 0);
225 if (IS_ERR_VALUE(vdso_base))
226 return vdso_base;
227
228 /* Add required alignment. */
229 vdso_base = ALIGN(vdso_base, VDSO_ALIGNMENT);
230
231 /*
232 * Put vDSO base into mm struct. We need to do this before calling
233 * install_special_mapping or the perf counter mmap tracking code
234 * will fail to recognise it as a vDSO.
235 */
236 mm->context.vdso = (void __user *)vdso_base + vvar_size;
237
238 vma = _install_special_mapping(mm, vdso_base, vvar_size,
239 VM_READ | VM_MAYREAD | VM_IO |
240 VM_DONTDUMP | VM_PFNMAP, &vvar_spec);
241 if (IS_ERR(vma))
242 return PTR_ERR(vma);
243
244 /*
245 * our vma flags don't have VM_WRITE so by default, the process isn't
246 * allowed to write those pages.
247 * gdb can break that with ptrace interface, and thus trigger COW on
248 * those pages but it's then your responsibility to never do that on
249 * the "data" page of the vDSO or you'll stop getting kernel updates
250 * and your nice userland gettimeofday will be totally dead.
251 * It's fine to use that for setting breakpoints in the vDSO code
252 * pages though.
253 */
254 vma = _install_special_mapping(mm, vdso_base + vvar_size, vdso_size,
255 VM_READ | VM_EXEC | VM_MAYREAD |
256 VM_MAYWRITE | VM_MAYEXEC, vdso_spec);
257 if (IS_ERR(vma))
258 do_munmap(mm, vdso_base, vvar_size, NULL);
259
260 return PTR_ERR_OR_ZERO(vma);
261 }
262
arch_setup_additional_pages(struct linux_binprm * bprm,int uses_interp)263 int arch_setup_additional_pages(struct linux_binprm *bprm, int uses_interp)
264 {
265 struct mm_struct *mm = current->mm;
266 int rc;
267
268 mm->context.vdso = NULL;
269
270 if (mmap_write_lock_killable(mm))
271 return -EINTR;
272
273 rc = __arch_setup_additional_pages(bprm, uses_interp);
274 if (rc)
275 mm->context.vdso = NULL;
276
277 mmap_write_unlock(mm);
278 return rc;
279 }
280
281 #define VDSO_DO_FIXUPS(type, value, bits, sec) do { \
282 void *__start = (void *)VDSO##bits##_SYMBOL(&vdso##bits##_start, sec##_start); \
283 void *__end = (void *)VDSO##bits##_SYMBOL(&vdso##bits##_start, sec##_end); \
284 \
285 do_##type##_fixups((value), __start, __end); \
286 } while (0)
287
vdso_fixup_features(void)288 static void __init vdso_fixup_features(void)
289 {
290 #ifdef CONFIG_PPC64
291 VDSO_DO_FIXUPS(feature, cur_cpu_spec->cpu_features, 64, ftr_fixup);
292 VDSO_DO_FIXUPS(feature, cur_cpu_spec->mmu_features, 64, mmu_ftr_fixup);
293 VDSO_DO_FIXUPS(feature, powerpc_firmware_features, 64, fw_ftr_fixup);
294 VDSO_DO_FIXUPS(lwsync, cur_cpu_spec->cpu_features, 64, lwsync_fixup);
295 #endif /* CONFIG_PPC64 */
296
297 #ifdef CONFIG_VDSO32
298 VDSO_DO_FIXUPS(feature, cur_cpu_spec->cpu_features, 32, ftr_fixup);
299 VDSO_DO_FIXUPS(feature, cur_cpu_spec->mmu_features, 32, mmu_ftr_fixup);
300 #ifdef CONFIG_PPC64
301 VDSO_DO_FIXUPS(feature, powerpc_firmware_features, 32, fw_ftr_fixup);
302 #endif /* CONFIG_PPC64 */
303 VDSO_DO_FIXUPS(lwsync, cur_cpu_spec->cpu_features, 32, lwsync_fixup);
304 #endif
305 }
306
307 /*
308 * Called from setup_arch to initialize the bitmap of available
309 * syscalls in the systemcfg page
310 */
vdso_setup_syscall_map(void)311 static void __init vdso_setup_syscall_map(void)
312 {
313 unsigned int i;
314
315 for (i = 0; i < NR_syscalls; i++) {
316 if (sys_call_table[i] != (unsigned long)&sys_ni_syscall)
317 vdso_data->syscall_map[i >> 5] |= 0x80000000UL >> (i & 0x1f);
318 if (IS_ENABLED(CONFIG_COMPAT) &&
319 compat_sys_call_table[i] != (unsigned long)&sys_ni_syscall)
320 vdso_data->compat_syscall_map[i >> 5] |= 0x80000000UL >> (i & 0x1f);
321 }
322 }
323
324 #ifdef CONFIG_PPC64
vdso_getcpu_init(void)325 int vdso_getcpu_init(void)
326 {
327 unsigned long cpu, node, val;
328
329 /*
330 * SPRG_VDSO contains the CPU in the bottom 16 bits and the NUMA node
331 * in the next 16 bits. The VDSO uses this to implement getcpu().
332 */
333 cpu = get_cpu();
334 WARN_ON_ONCE(cpu > 0xffff);
335
336 node = cpu_to_node(cpu);
337 WARN_ON_ONCE(node > 0xffff);
338
339 val = (cpu & 0xffff) | ((node & 0xffff) << 16);
340 mtspr(SPRN_SPRG_VDSO_WRITE, val);
341 get_paca()->sprg_vdso = val;
342
343 put_cpu();
344
345 return 0;
346 }
347 /* We need to call this before SMP init */
348 early_initcall(vdso_getcpu_init);
349 #endif
350
vdso_setup_pages(void * start,void * end)351 static struct page ** __init vdso_setup_pages(void *start, void *end)
352 {
353 int i;
354 struct page **pagelist;
355 int pages = (end - start) >> PAGE_SHIFT;
356
357 pagelist = kcalloc(pages + 1, sizeof(struct page *), GFP_KERNEL);
358 if (!pagelist)
359 panic("%s: Cannot allocate page list for VDSO", __func__);
360
361 for (i = 0; i < pages; i++)
362 pagelist[i] = virt_to_page(start + i * PAGE_SIZE);
363
364 return pagelist;
365 }
366
vdso_init(void)367 static int __init vdso_init(void)
368 {
369 #ifdef CONFIG_PPC64
370 /*
371 * Fill up the "systemcfg" stuff for backward compatibility
372 */
373 strcpy((char *)vdso_data->eye_catcher, "SYSTEMCFG:PPC64");
374 vdso_data->version.major = SYSTEMCFG_MAJOR;
375 vdso_data->version.minor = SYSTEMCFG_MINOR;
376 vdso_data->processor = mfspr(SPRN_PVR);
377 /*
378 * Fake the old platform number for pSeries and add
379 * in LPAR bit if necessary
380 */
381 vdso_data->platform = 0x100;
382 if (firmware_has_feature(FW_FEATURE_LPAR))
383 vdso_data->platform |= 1;
384 vdso_data->physicalMemorySize = memblock_phys_mem_size();
385 vdso_data->dcache_size = ppc64_caches.l1d.size;
386 vdso_data->dcache_line_size = ppc64_caches.l1d.line_size;
387 vdso_data->icache_size = ppc64_caches.l1i.size;
388 vdso_data->icache_line_size = ppc64_caches.l1i.line_size;
389 vdso_data->dcache_block_size = ppc64_caches.l1d.block_size;
390 vdso_data->icache_block_size = ppc64_caches.l1i.block_size;
391 vdso_data->dcache_log_block_size = ppc64_caches.l1d.log_block_size;
392 vdso_data->icache_log_block_size = ppc64_caches.l1i.log_block_size;
393 #endif /* CONFIG_PPC64 */
394
395 vdso_setup_syscall_map();
396
397 vdso_fixup_features();
398
399 if (IS_ENABLED(CONFIG_VDSO32))
400 vdso32_spec.pages = vdso_setup_pages(&vdso32_start, &vdso32_end);
401
402 if (IS_ENABLED(CONFIG_PPC64))
403 vdso64_spec.pages = vdso_setup_pages(&vdso64_start, &vdso64_end);
404
405 smp_wmb();
406
407 return 0;
408 }
409 arch_initcall(vdso_init);
410