Loading...
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 | /* SPDX-License-Identifier: GPL-2.0 */ #ifndef _ASM_POWERPC_BOOK3S_32_KUP_H #define _ASM_POWERPC_BOOK3S_32_KUP_H #include <asm/book3s/32/mmu-hash.h> #ifdef __ASSEMBLY__ .macro kuep_update_sr gpr1, gpr2 /* NEVER use r0 as gpr2 due to addis */ 101: mtsrin \gpr1, \gpr2 addi \gpr1, \gpr1, 0x111 /* next VSID */ rlwinm \gpr1, \gpr1, 0, 0xf0ffffff /* clear VSID overflow */ addis \gpr2, \gpr2, 0x1000 /* address of next segment */ bdnz 101b isync .endm .macro kuep_lock gpr1, gpr2 #ifdef CONFIG_PPC_KUEP li \gpr1, NUM_USER_SEGMENTS li \gpr2, 0 mtctr \gpr1 mfsrin \gpr1, \gpr2 oris \gpr1, \gpr1, SR_NX@h /* set Nx */ kuep_update_sr \gpr1, \gpr2 #endif .endm .macro kuep_unlock gpr1, gpr2 #ifdef CONFIG_PPC_KUEP li \gpr1, NUM_USER_SEGMENTS li \gpr2, 0 mtctr \gpr1 mfsrin \gpr1, \gpr2 rlwinm \gpr1, \gpr1, 0, ~SR_NX /* Clear Nx */ kuep_update_sr \gpr1, \gpr2 #endif .endm #ifdef CONFIG_PPC_KUAP .macro kuap_update_sr gpr1, gpr2, gpr3 /* NEVER use r0 as gpr2 due to addis */ 101: mtsrin \gpr1, \gpr2 addi \gpr1, \gpr1, 0x111 /* next VSID */ rlwinm \gpr1, \gpr1, 0, 0xf0ffffff /* clear VSID overflow */ addis \gpr2, \gpr2, 0x1000 /* address of next segment */ cmplw \gpr2, \gpr3 blt- 101b isync .endm .macro kuap_save_and_lock sp, thread, gpr1, gpr2, gpr3 lwz \gpr2, KUAP(\thread) rlwinm. \gpr3, \gpr2, 28, 0xf0000000 stw \gpr2, STACK_REGS_KUAP(\sp) beq+ 102f li \gpr1, 0 stw \gpr1, KUAP(\thread) mfsrin \gpr1, \gpr2 oris \gpr1, \gpr1, SR_KS@h /* set Ks */ kuap_update_sr \gpr1, \gpr2, \gpr3 102: .endm .macro kuap_restore sp, current, gpr1, gpr2, gpr3 lwz \gpr2, STACK_REGS_KUAP(\sp) rlwinm. \gpr3, \gpr2, 28, 0xf0000000 stw \gpr2, THREAD + KUAP(\current) beq+ 102f mfsrin \gpr1, \gpr2 rlwinm \gpr1, \gpr1, 0, ~SR_KS /* Clear Ks */ kuap_update_sr \gpr1, \gpr2, \gpr3 102: .endm .macro kuap_check current, gpr #ifdef CONFIG_PPC_KUAP_DEBUG lwz \gpr2, KUAP(thread) 999: twnei \gpr, 0 EMIT_BUG_ENTRY 999b, __FILE__, __LINE__, (BUGFLAG_WARNING | BUGFLAG_ONCE) #endif .endm #endif /* CONFIG_PPC_KUAP */ #else /* !__ASSEMBLY__ */ #ifdef CONFIG_PPC_KUAP #include <linux/sched.h> static inline void kuap_update_sr(u32 sr, u32 addr, u32 end) { addr &= 0xf0000000; /* align addr to start of segment */ barrier(); /* make sure thread.kuap is updated before playing with SRs */ while (addr < end) { mtsrin(sr, addr); sr += 0x111; /* next VSID */ sr &= 0xf0ffffff; /* clear VSID overflow */ addr += 0x10000000; /* address of next segment */ } isync(); /* Context sync required after mtsrin() */ } static __always_inline void allow_user_access(void __user *to, const void __user *from, u32 size, unsigned long dir) { u32 addr, end; BUILD_BUG_ON(!__builtin_constant_p(dir)); BUILD_BUG_ON(dir == KUAP_CURRENT); if (!(dir & KUAP_WRITE)) return; addr = (__force u32)to; if (unlikely(addr >= TASK_SIZE || !size)) return; end = min(addr + size, TASK_SIZE); current->thread.kuap = (addr & 0xf0000000) | ((((end - 1) >> 28) + 1) & 0xf); kuap_update_sr(mfsrin(addr) & ~SR_KS, addr, end); /* Clear Ks */ } static __always_inline void prevent_user_access(void __user *to, const void __user *from, u32 size, unsigned long dir) { u32 addr, end; BUILD_BUG_ON(!__builtin_constant_p(dir)); if (dir == KUAP_CURRENT) { u32 kuap = current->thread.kuap; if (unlikely(!kuap)) return; addr = kuap & 0xf0000000; end = kuap << 28; } else if (dir & KUAP_WRITE) { addr = (__force u32)to; end = min(addr + size, TASK_SIZE); if (unlikely(addr >= TASK_SIZE || !size)) return; } else { return; } current->thread.kuap = 0; kuap_update_sr(mfsrin(addr) | SR_KS, addr, end); /* set Ks */ } static inline unsigned long prevent_user_access_return(void) { unsigned long flags = current->thread.kuap; unsigned long addr = flags & 0xf0000000; unsigned long end = flags << 28; void __user *to = (__force void __user *)addr; if (flags) prevent_user_access(to, to, end - addr, KUAP_READ_WRITE); return flags; } static inline void restore_user_access(unsigned long flags) { unsigned long addr = flags & 0xf0000000; unsigned long end = flags << 28; void __user *to = (__force void __user *)addr; if (flags) allow_user_access(to, to, end - addr, KUAP_READ_WRITE); } static inline bool bad_kuap_fault(struct pt_regs *regs, unsigned long address, bool is_write) { unsigned long begin = regs->kuap & 0xf0000000; unsigned long end = regs->kuap << 28; if (!is_write) return false; return WARN(address < begin || address >= end, "Bug: write fault blocked by segment registers !"); } #endif /* CONFIG_PPC_KUAP */ #endif /* __ASSEMBLY__ */ #endif /* _ASM_POWERPC_BOOK3S_32_KUP_H */ |