1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  *
4  *  Copyright (C) 2017 Zihao Yu
5  */
6 
7 #include <linux/elf.h>
8 #include <linux/err.h>
9 #include <linux/errno.h>
10 #include <linux/moduleloader.h>
11 #include <linux/vmalloc.h>
12 #include <linux/sizes.h>
13 #include <linux/pgtable.h>
14 #include <asm/alternative.h>
15 #include <asm/sections.h>
16 
17 /*
18  * The auipc+jalr instruction pair can reach any PC-relative offset
19  * in the range [-2^31 - 2^11, 2^31 - 2^11)
20  */
riscv_insn_valid_32bit_offset(ptrdiff_t val)21 static bool riscv_insn_valid_32bit_offset(ptrdiff_t val)
22 {
23 #ifdef CONFIG_32BIT
24 	return true;
25 #else
26 	return (-(1L << 31) - (1L << 11)) <= val && val < ((1L << 31) - (1L << 11));
27 #endif
28 }
29 
apply_r_riscv_32_rela(struct module * me,u32 * location,Elf_Addr v)30 static int apply_r_riscv_32_rela(struct module *me, u32 *location, Elf_Addr v)
31 {
32 	if (v != (u32)v) {
33 		pr_err("%s: value %016llx out of range for 32-bit field\n",
34 		       me->name, (long long)v);
35 		return -EINVAL;
36 	}
37 	*location = v;
38 	return 0;
39 }
40 
apply_r_riscv_64_rela(struct module * me,u32 * location,Elf_Addr v)41 static int apply_r_riscv_64_rela(struct module *me, u32 *location, Elf_Addr v)
42 {
43 	*(u64 *)location = v;
44 	return 0;
45 }
46 
apply_r_riscv_branch_rela(struct module * me,u32 * location,Elf_Addr v)47 static int apply_r_riscv_branch_rela(struct module *me, u32 *location,
48 				     Elf_Addr v)
49 {
50 	ptrdiff_t offset = (void *)v - (void *)location;
51 	u32 imm12 = (offset & 0x1000) << (31 - 12);
52 	u32 imm11 = (offset & 0x800) >> (11 - 7);
53 	u32 imm10_5 = (offset & 0x7e0) << (30 - 10);
54 	u32 imm4_1 = (offset & 0x1e) << (11 - 4);
55 
56 	*location = (*location & 0x1fff07f) | imm12 | imm11 | imm10_5 | imm4_1;
57 	return 0;
58 }
59 
apply_r_riscv_jal_rela(struct module * me,u32 * location,Elf_Addr v)60 static int apply_r_riscv_jal_rela(struct module *me, u32 *location,
61 				  Elf_Addr v)
62 {
63 	ptrdiff_t offset = (void *)v - (void *)location;
64 	u32 imm20 = (offset & 0x100000) << (31 - 20);
65 	u32 imm19_12 = (offset & 0xff000);
66 	u32 imm11 = (offset & 0x800) << (20 - 11);
67 	u32 imm10_1 = (offset & 0x7fe) << (30 - 10);
68 
69 	*location = (*location & 0xfff) | imm20 | imm19_12 | imm11 | imm10_1;
70 	return 0;
71 }
72 
apply_r_riscv_rvc_branch_rela(struct module * me,u32 * location,Elf_Addr v)73 static int apply_r_riscv_rvc_branch_rela(struct module *me, u32 *location,
74 					 Elf_Addr v)
75 {
76 	ptrdiff_t offset = (void *)v - (void *)location;
77 	u16 imm8 = (offset & 0x100) << (12 - 8);
78 	u16 imm7_6 = (offset & 0xc0) >> (6 - 5);
79 	u16 imm5 = (offset & 0x20) >> (5 - 2);
80 	u16 imm4_3 = (offset & 0x18) << (12 - 5);
81 	u16 imm2_1 = (offset & 0x6) << (12 - 10);
82 
83 	*(u16 *)location = (*(u16 *)location & 0xe383) |
84 		    imm8 | imm7_6 | imm5 | imm4_3 | imm2_1;
85 	return 0;
86 }
87 
apply_r_riscv_rvc_jump_rela(struct module * me,u32 * location,Elf_Addr v)88 static int apply_r_riscv_rvc_jump_rela(struct module *me, u32 *location,
89 				       Elf_Addr v)
90 {
91 	ptrdiff_t offset = (void *)v - (void *)location;
92 	u16 imm11 = (offset & 0x800) << (12 - 11);
93 	u16 imm10 = (offset & 0x400) >> (10 - 8);
94 	u16 imm9_8 = (offset & 0x300) << (12 - 11);
95 	u16 imm7 = (offset & 0x80) >> (7 - 6);
96 	u16 imm6 = (offset & 0x40) << (12 - 11);
97 	u16 imm5 = (offset & 0x20) >> (5 - 2);
98 	u16 imm4 = (offset & 0x10) << (12 - 5);
99 	u16 imm3_1 = (offset & 0xe) << (12 - 10);
100 
101 	*(u16 *)location = (*(u16 *)location & 0xe003) |
102 		    imm11 | imm10 | imm9_8 | imm7 | imm6 | imm5 | imm4 | imm3_1;
103 	return 0;
104 }
105 
apply_r_riscv_pcrel_hi20_rela(struct module * me,u32 * location,Elf_Addr v)106 static int apply_r_riscv_pcrel_hi20_rela(struct module *me, u32 *location,
107 					 Elf_Addr v)
108 {
109 	ptrdiff_t offset = (void *)v - (void *)location;
110 	s32 hi20;
111 
112 	if (!riscv_insn_valid_32bit_offset(offset)) {
113 		pr_err(
114 		  "%s: target %016llx can not be addressed by the 32-bit offset from PC = %p\n",
115 		  me->name, (long long)v, location);
116 		return -EINVAL;
117 	}
118 
119 	hi20 = (offset + 0x800) & 0xfffff000;
120 	*location = (*location & 0xfff) | hi20;
121 	return 0;
122 }
123 
apply_r_riscv_pcrel_lo12_i_rela(struct module * me,u32 * location,Elf_Addr v)124 static int apply_r_riscv_pcrel_lo12_i_rela(struct module *me, u32 *location,
125 					   Elf_Addr v)
126 {
127 	/*
128 	 * v is the lo12 value to fill. It is calculated before calling this
129 	 * handler.
130 	 */
131 	*location = (*location & 0xfffff) | ((v & 0xfff) << 20);
132 	return 0;
133 }
134 
apply_r_riscv_pcrel_lo12_s_rela(struct module * me,u32 * location,Elf_Addr v)135 static int apply_r_riscv_pcrel_lo12_s_rela(struct module *me, u32 *location,
136 					   Elf_Addr v)
137 {
138 	/*
139 	 * v is the lo12 value to fill. It is calculated before calling this
140 	 * handler.
141 	 */
142 	u32 imm11_5 = (v & 0xfe0) << (31 - 11);
143 	u32 imm4_0 = (v & 0x1f) << (11 - 4);
144 
145 	*location = (*location & 0x1fff07f) | imm11_5 | imm4_0;
146 	return 0;
147 }
148 
apply_r_riscv_hi20_rela(struct module * me,u32 * location,Elf_Addr v)149 static int apply_r_riscv_hi20_rela(struct module *me, u32 *location,
150 				   Elf_Addr v)
151 {
152 	s32 hi20;
153 
154 	if (IS_ENABLED(CONFIG_CMODEL_MEDLOW)) {
155 		pr_err(
156 		  "%s: target %016llx can not be addressed by the 32-bit offset from PC = %p\n",
157 		  me->name, (long long)v, location);
158 		return -EINVAL;
159 	}
160 
161 	hi20 = ((s32)v + 0x800) & 0xfffff000;
162 	*location = (*location & 0xfff) | hi20;
163 	return 0;
164 }
165 
apply_r_riscv_lo12_i_rela(struct module * me,u32 * location,Elf_Addr v)166 static int apply_r_riscv_lo12_i_rela(struct module *me, u32 *location,
167 				     Elf_Addr v)
168 {
169 	/* Skip medlow checking because of filtering by HI20 already */
170 	s32 hi20 = ((s32)v + 0x800) & 0xfffff000;
171 	s32 lo12 = ((s32)v - hi20);
172 	*location = (*location & 0xfffff) | ((lo12 & 0xfff) << 20);
173 	return 0;
174 }
175 
apply_r_riscv_lo12_s_rela(struct module * me,u32 * location,Elf_Addr v)176 static int apply_r_riscv_lo12_s_rela(struct module *me, u32 *location,
177 				     Elf_Addr v)
178 {
179 	/* Skip medlow checking because of filtering by HI20 already */
180 	s32 hi20 = ((s32)v + 0x800) & 0xfffff000;
181 	s32 lo12 = ((s32)v - hi20);
182 	u32 imm11_5 = (lo12 & 0xfe0) << (31 - 11);
183 	u32 imm4_0 = (lo12 & 0x1f) << (11 - 4);
184 	*location = (*location & 0x1fff07f) | imm11_5 | imm4_0;
185 	return 0;
186 }
187 
apply_r_riscv_got_hi20_rela(struct module * me,u32 * location,Elf_Addr v)188 static int apply_r_riscv_got_hi20_rela(struct module *me, u32 *location,
189 				       Elf_Addr v)
190 {
191 	ptrdiff_t offset = (void *)v - (void *)location;
192 	s32 hi20;
193 
194 	/* Always emit the got entry */
195 	if (IS_ENABLED(CONFIG_MODULE_SECTIONS)) {
196 		offset = module_emit_got_entry(me, v);
197 		offset = (void *)offset - (void *)location;
198 	} else {
199 		pr_err(
200 		  "%s: can not generate the GOT entry for symbol = %016llx from PC = %p\n",
201 		  me->name, (long long)v, location);
202 		return -EINVAL;
203 	}
204 
205 	hi20 = (offset + 0x800) & 0xfffff000;
206 	*location = (*location & 0xfff) | hi20;
207 	return 0;
208 }
209 
apply_r_riscv_call_plt_rela(struct module * me,u32 * location,Elf_Addr v)210 static int apply_r_riscv_call_plt_rela(struct module *me, u32 *location,
211 				       Elf_Addr v)
212 {
213 	ptrdiff_t offset = (void *)v - (void *)location;
214 	u32 hi20, lo12;
215 
216 	if (!riscv_insn_valid_32bit_offset(offset)) {
217 		/* Only emit the plt entry if offset over 32-bit range */
218 		if (IS_ENABLED(CONFIG_MODULE_SECTIONS)) {
219 			offset = module_emit_plt_entry(me, v);
220 			offset = (void *)offset - (void *)location;
221 		} else {
222 			pr_err(
223 			  "%s: target %016llx can not be addressed by the 32-bit offset from PC = %p\n",
224 			  me->name, (long long)v, location);
225 			return -EINVAL;
226 		}
227 	}
228 
229 	hi20 = (offset + 0x800) & 0xfffff000;
230 	lo12 = (offset - hi20) & 0xfff;
231 	*location = (*location & 0xfff) | hi20;
232 	*(location + 1) = (*(location + 1) & 0xfffff) | (lo12 << 20);
233 	return 0;
234 }
235 
apply_r_riscv_call_rela(struct module * me,u32 * location,Elf_Addr v)236 static int apply_r_riscv_call_rela(struct module *me, u32 *location,
237 				   Elf_Addr v)
238 {
239 	ptrdiff_t offset = (void *)v - (void *)location;
240 	u32 hi20, lo12;
241 
242 	if (!riscv_insn_valid_32bit_offset(offset)) {
243 		pr_err(
244 		  "%s: target %016llx can not be addressed by the 32-bit offset from PC = %p\n",
245 		  me->name, (long long)v, location);
246 		return -EINVAL;
247 	}
248 
249 	hi20 = (offset + 0x800) & 0xfffff000;
250 	lo12 = (offset - hi20) & 0xfff;
251 	*location = (*location & 0xfff) | hi20;
252 	*(location + 1) = (*(location + 1) & 0xfffff) | (lo12 << 20);
253 	return 0;
254 }
255 
apply_r_riscv_relax_rela(struct module * me,u32 * location,Elf_Addr v)256 static int apply_r_riscv_relax_rela(struct module *me, u32 *location,
257 				    Elf_Addr v)
258 {
259 	return 0;
260 }
261 
apply_r_riscv_align_rela(struct module * me,u32 * location,Elf_Addr v)262 static int apply_r_riscv_align_rela(struct module *me, u32 *location,
263 				    Elf_Addr v)
264 {
265 	pr_err(
266 	  "%s: The unexpected relocation type 'R_RISCV_ALIGN' from PC = %p\n",
267 	  me->name, location);
268 	return -EINVAL;
269 }
270 
apply_r_riscv_add32_rela(struct module * me,u32 * location,Elf_Addr v)271 static int apply_r_riscv_add32_rela(struct module *me, u32 *location,
272 				    Elf_Addr v)
273 {
274 	*(u32 *)location += (u32)v;
275 	return 0;
276 }
277 
apply_r_riscv_add64_rela(struct module * me,u32 * location,Elf_Addr v)278 static int apply_r_riscv_add64_rela(struct module *me, u32 *location,
279 				    Elf_Addr v)
280 {
281 	*(u64 *)location += (u64)v;
282 	return 0;
283 }
284 
apply_r_riscv_sub32_rela(struct module * me,u32 * location,Elf_Addr v)285 static int apply_r_riscv_sub32_rela(struct module *me, u32 *location,
286 				    Elf_Addr v)
287 {
288 	*(u32 *)location -= (u32)v;
289 	return 0;
290 }
291 
apply_r_riscv_sub64_rela(struct module * me,u32 * location,Elf_Addr v)292 static int apply_r_riscv_sub64_rela(struct module *me, u32 *location,
293 				    Elf_Addr v)
294 {
295 	*(u64 *)location -= (u64)v;
296 	return 0;
297 }
298 
299 static int (*reloc_handlers_rela[]) (struct module *me, u32 *location,
300 				Elf_Addr v) = {
301 	[R_RISCV_32]			= apply_r_riscv_32_rela,
302 	[R_RISCV_64]			= apply_r_riscv_64_rela,
303 	[R_RISCV_BRANCH]		= apply_r_riscv_branch_rela,
304 	[R_RISCV_JAL]			= apply_r_riscv_jal_rela,
305 	[R_RISCV_RVC_BRANCH]		= apply_r_riscv_rvc_branch_rela,
306 	[R_RISCV_RVC_JUMP]		= apply_r_riscv_rvc_jump_rela,
307 	[R_RISCV_PCREL_HI20]		= apply_r_riscv_pcrel_hi20_rela,
308 	[R_RISCV_PCREL_LO12_I]		= apply_r_riscv_pcrel_lo12_i_rela,
309 	[R_RISCV_PCREL_LO12_S]		= apply_r_riscv_pcrel_lo12_s_rela,
310 	[R_RISCV_HI20]			= apply_r_riscv_hi20_rela,
311 	[R_RISCV_LO12_I]		= apply_r_riscv_lo12_i_rela,
312 	[R_RISCV_LO12_S]		= apply_r_riscv_lo12_s_rela,
313 	[R_RISCV_GOT_HI20]		= apply_r_riscv_got_hi20_rela,
314 	[R_RISCV_CALL_PLT]		= apply_r_riscv_call_plt_rela,
315 	[R_RISCV_CALL]			= apply_r_riscv_call_rela,
316 	[R_RISCV_RELAX]			= apply_r_riscv_relax_rela,
317 	[R_RISCV_ALIGN]			= apply_r_riscv_align_rela,
318 	[R_RISCV_ADD32]			= apply_r_riscv_add32_rela,
319 	[R_RISCV_ADD64]			= apply_r_riscv_add64_rela,
320 	[R_RISCV_SUB32]			= apply_r_riscv_sub32_rela,
321 	[R_RISCV_SUB64]			= apply_r_riscv_sub64_rela,
322 };
323 
apply_relocate_add(Elf_Shdr * sechdrs,const char * strtab,unsigned int symindex,unsigned int relsec,struct module * me)324 int apply_relocate_add(Elf_Shdr *sechdrs, const char *strtab,
325 		       unsigned int symindex, unsigned int relsec,
326 		       struct module *me)
327 {
328 	Elf_Rela *rel = (void *) sechdrs[relsec].sh_addr;
329 	int (*handler)(struct module *me, u32 *location, Elf_Addr v);
330 	Elf_Sym *sym;
331 	u32 *location;
332 	unsigned int i, type;
333 	Elf_Addr v;
334 	int res;
335 
336 	pr_debug("Applying relocate section %u to %u\n", relsec,
337 	       sechdrs[relsec].sh_info);
338 
339 	for (i = 0; i < sechdrs[relsec].sh_size / sizeof(*rel); i++) {
340 		/* This is where to make the change */
341 		location = (void *)sechdrs[sechdrs[relsec].sh_info].sh_addr
342 			+ rel[i].r_offset;
343 		/* This is the symbol it is referring to */
344 		sym = (Elf_Sym *)sechdrs[symindex].sh_addr
345 			+ ELF_RISCV_R_SYM(rel[i].r_info);
346 		if (IS_ERR_VALUE(sym->st_value)) {
347 			/* Ignore unresolved weak symbol */
348 			if (ELF_ST_BIND(sym->st_info) == STB_WEAK)
349 				continue;
350 			pr_warn("%s: Unknown symbol %s\n",
351 				me->name, strtab + sym->st_name);
352 			return -ENOENT;
353 		}
354 
355 		type = ELF_RISCV_R_TYPE(rel[i].r_info);
356 
357 		if (type < ARRAY_SIZE(reloc_handlers_rela))
358 			handler = reloc_handlers_rela[type];
359 		else
360 			handler = NULL;
361 
362 		if (!handler) {
363 			pr_err("%s: Unknown relocation type %u\n",
364 			       me->name, type);
365 			return -EINVAL;
366 		}
367 
368 		v = sym->st_value + rel[i].r_addend;
369 
370 		if (type == R_RISCV_PCREL_LO12_I || type == R_RISCV_PCREL_LO12_S) {
371 			unsigned int j;
372 
373 			for (j = 0; j < sechdrs[relsec].sh_size / sizeof(*rel); j++) {
374 				unsigned long hi20_loc =
375 					sechdrs[sechdrs[relsec].sh_info].sh_addr
376 					+ rel[j].r_offset;
377 				u32 hi20_type = ELF_RISCV_R_TYPE(rel[j].r_info);
378 
379 				/* Find the corresponding HI20 relocation entry */
380 				if (hi20_loc == sym->st_value
381 				    && (hi20_type == R_RISCV_PCREL_HI20
382 					|| hi20_type == R_RISCV_GOT_HI20)) {
383 					s32 hi20, lo12;
384 					Elf_Sym *hi20_sym =
385 						(Elf_Sym *)sechdrs[symindex].sh_addr
386 						+ ELF_RISCV_R_SYM(rel[j].r_info);
387 					unsigned long hi20_sym_val =
388 						hi20_sym->st_value
389 						+ rel[j].r_addend;
390 
391 					/* Calculate lo12 */
392 					size_t offset = hi20_sym_val - hi20_loc;
393 					if (IS_ENABLED(CONFIG_MODULE_SECTIONS)
394 					    && hi20_type == R_RISCV_GOT_HI20) {
395 						offset = module_emit_got_entry(
396 							 me, hi20_sym_val);
397 						offset = offset - hi20_loc;
398 					}
399 					hi20 = (offset + 0x800) & 0xfffff000;
400 					lo12 = offset - hi20;
401 					v = lo12;
402 
403 					break;
404 				}
405 			}
406 			if (j == sechdrs[relsec].sh_size / sizeof(*rel)) {
407 				pr_err(
408 				  "%s: Can not find HI20 relocation information\n",
409 				  me->name);
410 				return -EINVAL;
411 			}
412 		}
413 
414 		res = handler(me, location, v);
415 		if (res)
416 			return res;
417 	}
418 
419 	return 0;
420 }
421 
422 #if defined(CONFIG_MMU) && defined(CONFIG_64BIT)
module_alloc(unsigned long size)423 void *module_alloc(unsigned long size)
424 {
425 	return __vmalloc_node_range(size, 1, MODULES_VADDR,
426 				    MODULES_END, GFP_KERNEL,
427 				    PAGE_KERNEL, 0, NUMA_NO_NODE,
428 				    __builtin_return_address(0));
429 }
430 #endif
431 
find_section(const Elf_Ehdr * hdr,const Elf_Shdr * sechdrs,const char * name)432 static const Elf_Shdr *find_section(const Elf_Ehdr *hdr,
433 				    const Elf_Shdr *sechdrs,
434 				    const char *name)
435 {
436 	const Elf_Shdr *s, *se;
437 	const char *secstrs = (void *)hdr + sechdrs[hdr->e_shstrndx].sh_offset;
438 
439 	for (s = sechdrs, se = sechdrs + hdr->e_shnum; s < se; s++) {
440 		if (strcmp(name, secstrs + s->sh_name) == 0)
441 			return s;
442 	}
443 
444 	return NULL;
445 }
446 
module_finalize(const Elf_Ehdr * hdr,const Elf_Shdr * sechdrs,struct module * me)447 int module_finalize(const Elf_Ehdr *hdr,
448 		    const Elf_Shdr *sechdrs,
449 		    struct module *me)
450 {
451 	const Elf_Shdr *s;
452 
453 	s = find_section(hdr, sechdrs, ".alternative");
454 	if (s)
455 		apply_module_alternatives((void *)s->sh_addr, s->sh_size);
456 
457 	return 0;
458 }
459