Andrew Scull | b4b6d4a | 2019-01-02 15:54:55 +0000 | [diff] [blame] | 1 | /* |
| 2 | * Based on arch/arm/kernel/traps.c |
| 3 | * |
| 4 | * Copyright (C) 1995-2009 Russell King |
| 5 | * Copyright (C) 2012 ARM Ltd. |
| 6 | * |
| 7 | * This program is free software; you can redistribute it and/or modify |
| 8 | * it under the terms of the GNU General Public License version 2 as |
| 9 | * published by the Free Software Foundation. |
| 10 | * |
| 11 | * This program is distributed in the hope that it will be useful, |
| 12 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 13 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 14 | * GNU General Public License for more details. |
| 15 | * |
| 16 | * You should have received a copy of the GNU General Public License |
| 17 | * along with this program. If not, see <http://www.gnu.org/licenses/>. |
| 18 | */ |
| 19 | |
| 20 | #include <linux/bug.h> |
| 21 | #include <linux/signal.h> |
| 22 | #include <linux/personality.h> |
| 23 | #include <linux/kallsyms.h> |
| 24 | #include <linux/spinlock.h> |
| 25 | #include <linux/uaccess.h> |
| 26 | #include <linux/hardirq.h> |
| 27 | #include <linux/kdebug.h> |
| 28 | #include <linux/module.h> |
| 29 | #include <linux/kexec.h> |
| 30 | #include <linux/delay.h> |
| 31 | #include <linux/init.h> |
| 32 | #include <linux/sched/signal.h> |
| 33 | #include <linux/sched/debug.h> |
| 34 | #include <linux/sched/task_stack.h> |
| 35 | #include <linux/sizes.h> |
| 36 | #include <linux/syscalls.h> |
| 37 | #include <linux/mm_types.h> |
| 38 | |
| 39 | #include <asm/atomic.h> |
| 40 | #include <asm/bug.h> |
| 41 | #include <asm/cpufeature.h> |
| 42 | #include <asm/daifflags.h> |
| 43 | #include <asm/debug-monitors.h> |
| 44 | #include <asm/esr.h> |
| 45 | #include <asm/insn.h> |
| 46 | #include <asm/traps.h> |
| 47 | #include <asm/smp.h> |
| 48 | #include <asm/stack_pointer.h> |
| 49 | #include <asm/stacktrace.h> |
| 50 | #include <asm/exception.h> |
| 51 | #include <asm/system_misc.h> |
| 52 | #include <asm/sysreg.h> |
| 53 | |
| 54 | static const char *handler[]= { |
| 55 | "Synchronous Abort", |
| 56 | "IRQ", |
| 57 | "FIQ", |
| 58 | "Error" |
| 59 | }; |
| 60 | |
| 61 | int show_unhandled_signals = 0; |
| 62 | |
| 63 | static void dump_backtrace_entry(unsigned long where) |
| 64 | { |
| 65 | printk(" %pS\n", (void *)where); |
| 66 | } |
| 67 | |
| 68 | static void __dump_instr(const char *lvl, struct pt_regs *regs) |
| 69 | { |
| 70 | unsigned long addr = instruction_pointer(regs); |
| 71 | char str[sizeof("00000000 ") * 5 + 2 + 1], *p = str; |
| 72 | int i; |
| 73 | |
| 74 | for (i = -4; i < 1; i++) { |
| 75 | unsigned int val, bad; |
| 76 | |
| 77 | bad = get_user(val, &((u32 *)addr)[i]); |
| 78 | |
| 79 | if (!bad) |
| 80 | p += sprintf(p, i == 0 ? "(%08x) " : "%08x ", val); |
| 81 | else { |
| 82 | p += sprintf(p, "bad PC value"); |
| 83 | break; |
| 84 | } |
| 85 | } |
| 86 | printk("%sCode: %s\n", lvl, str); |
| 87 | } |
| 88 | |
| 89 | static void dump_instr(const char *lvl, struct pt_regs *regs) |
| 90 | { |
| 91 | if (!user_mode(regs)) { |
| 92 | mm_segment_t fs = get_fs(); |
| 93 | set_fs(KERNEL_DS); |
| 94 | __dump_instr(lvl, regs); |
| 95 | set_fs(fs); |
| 96 | } else { |
| 97 | __dump_instr(lvl, regs); |
| 98 | } |
| 99 | } |
| 100 | |
| 101 | void dump_backtrace(struct pt_regs *regs, struct task_struct *tsk) |
| 102 | { |
| 103 | struct stackframe frame; |
| 104 | int skip; |
| 105 | |
| 106 | pr_debug("%s(regs = %p tsk = %p)\n", __func__, regs, tsk); |
| 107 | |
| 108 | if (!tsk) |
| 109 | tsk = current; |
| 110 | |
| 111 | if (!try_get_task_stack(tsk)) |
| 112 | return; |
| 113 | |
| 114 | if (tsk == current) { |
| 115 | frame.fp = (unsigned long)__builtin_frame_address(0); |
| 116 | frame.pc = (unsigned long)dump_backtrace; |
| 117 | } else { |
| 118 | /* |
| 119 | * task blocked in __switch_to |
| 120 | */ |
| 121 | frame.fp = thread_saved_fp(tsk); |
| 122 | frame.pc = thread_saved_pc(tsk); |
| 123 | } |
| 124 | #ifdef CONFIG_FUNCTION_GRAPH_TRACER |
| 125 | frame.graph = tsk->curr_ret_stack; |
| 126 | #endif |
| 127 | |
| 128 | skip = !!regs; |
| 129 | printk("Call trace:\n"); |
| 130 | do { |
| 131 | /* skip until specified stack frame */ |
| 132 | if (!skip) { |
| 133 | dump_backtrace_entry(frame.pc); |
| 134 | } else if (frame.fp == regs->regs[29]) { |
| 135 | skip = 0; |
| 136 | /* |
| 137 | * Mostly, this is the case where this function is |
| 138 | * called in panic/abort. As exception handler's |
| 139 | * stack frame does not contain the corresponding pc |
| 140 | * at which an exception has taken place, use regs->pc |
| 141 | * instead. |
| 142 | */ |
| 143 | dump_backtrace_entry(regs->pc); |
| 144 | } |
| 145 | } while (!unwind_frame(tsk, &frame)); |
| 146 | |
| 147 | put_task_stack(tsk); |
| 148 | } |
| 149 | |
| 150 | void show_stack(struct task_struct *tsk, unsigned long *sp) |
| 151 | { |
| 152 | dump_backtrace(NULL, tsk); |
| 153 | barrier(); |
| 154 | } |
| 155 | |
| 156 | #ifdef CONFIG_PREEMPT |
| 157 | #define S_PREEMPT " PREEMPT" |
| 158 | #else |
| 159 | #define S_PREEMPT "" |
| 160 | #endif |
| 161 | #define S_SMP " SMP" |
| 162 | |
| 163 | static int __die(const char *str, int err, struct pt_regs *regs) |
| 164 | { |
| 165 | struct task_struct *tsk = current; |
| 166 | static int die_counter; |
| 167 | int ret; |
| 168 | |
| 169 | pr_emerg("Internal error: %s: %x [#%d]" S_PREEMPT S_SMP "\n", |
| 170 | str, err, ++die_counter); |
| 171 | |
| 172 | /* trap and error numbers are mostly meaningless on ARM */ |
| 173 | ret = notify_die(DIE_OOPS, str, regs, err, 0, SIGSEGV); |
| 174 | if (ret == NOTIFY_STOP) |
| 175 | return ret; |
| 176 | |
| 177 | print_modules(); |
| 178 | __show_regs(regs); |
| 179 | pr_emerg("Process %.*s (pid: %d, stack limit = 0x%p)\n", |
| 180 | TASK_COMM_LEN, tsk->comm, task_pid_nr(tsk), |
| 181 | end_of_stack(tsk)); |
| 182 | |
| 183 | if (!user_mode(regs)) { |
| 184 | dump_backtrace(regs, tsk); |
| 185 | dump_instr(KERN_EMERG, regs); |
| 186 | } |
| 187 | |
| 188 | return ret; |
| 189 | } |
| 190 | |
| 191 | static DEFINE_RAW_SPINLOCK(die_lock); |
| 192 | |
| 193 | /* |
| 194 | * This function is protected against re-entrancy. |
| 195 | */ |
| 196 | void die(const char *str, struct pt_regs *regs, int err) |
| 197 | { |
| 198 | int ret; |
| 199 | unsigned long flags; |
| 200 | |
| 201 | raw_spin_lock_irqsave(&die_lock, flags); |
| 202 | |
| 203 | oops_enter(); |
| 204 | |
| 205 | console_verbose(); |
| 206 | bust_spinlocks(1); |
| 207 | ret = __die(str, err, regs); |
| 208 | |
| 209 | if (regs && kexec_should_crash(current)) |
| 210 | crash_kexec(regs); |
| 211 | |
| 212 | bust_spinlocks(0); |
| 213 | add_taint(TAINT_DIE, LOCKDEP_NOW_UNRELIABLE); |
| 214 | oops_exit(); |
| 215 | |
| 216 | if (in_interrupt()) |
| 217 | panic("Fatal exception in interrupt"); |
| 218 | if (panic_on_oops) |
| 219 | panic("Fatal exception"); |
| 220 | |
| 221 | raw_spin_unlock_irqrestore(&die_lock, flags); |
| 222 | |
| 223 | if (ret != NOTIFY_STOP) |
| 224 | do_exit(SIGSEGV); |
| 225 | } |
| 226 | |
| 227 | static bool show_unhandled_signals_ratelimited(void) |
| 228 | { |
| 229 | static DEFINE_RATELIMIT_STATE(rs, DEFAULT_RATELIMIT_INTERVAL, |
| 230 | DEFAULT_RATELIMIT_BURST); |
| 231 | return show_unhandled_signals && __ratelimit(&rs); |
| 232 | } |
| 233 | |
| 234 | void arm64_force_sig_info(struct siginfo *info, const char *str, |
| 235 | struct task_struct *tsk) |
| 236 | { |
| 237 | unsigned int esr = tsk->thread.fault_code; |
| 238 | struct pt_regs *regs = task_pt_regs(tsk); |
| 239 | |
| 240 | if (!unhandled_signal(tsk, info->si_signo)) |
| 241 | goto send_sig; |
| 242 | |
| 243 | if (!show_unhandled_signals_ratelimited()) |
| 244 | goto send_sig; |
| 245 | |
| 246 | pr_info("%s[%d]: unhandled exception: ", tsk->comm, task_pid_nr(tsk)); |
| 247 | if (esr) |
| 248 | pr_cont("%s, ESR 0x%08x, ", esr_get_class_string(esr), esr); |
| 249 | |
| 250 | pr_cont("%s", str); |
| 251 | print_vma_addr(KERN_CONT " in ", regs->pc); |
| 252 | pr_cont("\n"); |
| 253 | __show_regs(regs); |
| 254 | |
| 255 | send_sig: |
| 256 | force_sig_info(info->si_signo, info, tsk); |
| 257 | } |
| 258 | |
| 259 | void arm64_notify_die(const char *str, struct pt_regs *regs, |
| 260 | struct siginfo *info, int err) |
| 261 | { |
| 262 | if (user_mode(regs)) { |
| 263 | WARN_ON(regs != current_pt_regs()); |
| 264 | current->thread.fault_address = 0; |
| 265 | current->thread.fault_code = err; |
| 266 | arm64_force_sig_info(info, str, current); |
| 267 | } else { |
| 268 | die(str, regs, err); |
| 269 | } |
| 270 | } |
| 271 | |
| 272 | void arm64_skip_faulting_instruction(struct pt_regs *regs, unsigned long size) |
| 273 | { |
| 274 | regs->pc += size; |
| 275 | |
| 276 | /* |
| 277 | * If we were single stepping, we want to get the step exception after |
| 278 | * we return from the trap. |
| 279 | */ |
| 280 | if (user_mode(regs)) |
| 281 | user_fastforward_single_step(current); |
| 282 | } |
| 283 | |
| 284 | static LIST_HEAD(undef_hook); |
| 285 | static DEFINE_RAW_SPINLOCK(undef_lock); |
| 286 | |
| 287 | void register_undef_hook(struct undef_hook *hook) |
| 288 | { |
| 289 | unsigned long flags; |
| 290 | |
| 291 | raw_spin_lock_irqsave(&undef_lock, flags); |
| 292 | list_add(&hook->node, &undef_hook); |
| 293 | raw_spin_unlock_irqrestore(&undef_lock, flags); |
| 294 | } |
| 295 | |
| 296 | void unregister_undef_hook(struct undef_hook *hook) |
| 297 | { |
| 298 | unsigned long flags; |
| 299 | |
| 300 | raw_spin_lock_irqsave(&undef_lock, flags); |
| 301 | list_del(&hook->node); |
| 302 | raw_spin_unlock_irqrestore(&undef_lock, flags); |
| 303 | } |
| 304 | |
| 305 | static int call_undef_hook(struct pt_regs *regs) |
| 306 | { |
| 307 | struct undef_hook *hook; |
| 308 | unsigned long flags; |
| 309 | u32 instr; |
| 310 | int (*fn)(struct pt_regs *regs, u32 instr) = NULL; |
| 311 | void __user *pc = (void __user *)instruction_pointer(regs); |
| 312 | |
| 313 | if (!user_mode(regs)) { |
| 314 | __le32 instr_le; |
| 315 | if (probe_kernel_address((__force __le32 *)pc, instr_le)) |
| 316 | goto exit; |
| 317 | instr = le32_to_cpu(instr_le); |
| 318 | } else if (compat_thumb_mode(regs)) { |
| 319 | /* 16-bit Thumb instruction */ |
| 320 | __le16 instr_le; |
| 321 | if (get_user(instr_le, (__le16 __user *)pc)) |
| 322 | goto exit; |
| 323 | instr = le16_to_cpu(instr_le); |
| 324 | if (aarch32_insn_is_wide(instr)) { |
| 325 | u32 instr2; |
| 326 | |
| 327 | if (get_user(instr_le, (__le16 __user *)(pc + 2))) |
| 328 | goto exit; |
| 329 | instr2 = le16_to_cpu(instr_le); |
| 330 | instr = (instr << 16) | instr2; |
| 331 | } |
| 332 | } else { |
| 333 | /* 32-bit ARM instruction */ |
| 334 | __le32 instr_le; |
| 335 | if (get_user(instr_le, (__le32 __user *)pc)) |
| 336 | goto exit; |
| 337 | instr = le32_to_cpu(instr_le); |
| 338 | } |
| 339 | |
| 340 | raw_spin_lock_irqsave(&undef_lock, flags); |
| 341 | list_for_each_entry(hook, &undef_hook, node) |
| 342 | if ((instr & hook->instr_mask) == hook->instr_val && |
| 343 | (regs->pstate & hook->pstate_mask) == hook->pstate_val) |
| 344 | fn = hook->fn; |
| 345 | |
| 346 | raw_spin_unlock_irqrestore(&undef_lock, flags); |
| 347 | exit: |
| 348 | return fn ? fn(regs, instr) : 1; |
| 349 | } |
| 350 | |
| 351 | void force_signal_inject(int signal, int code, unsigned long address) |
| 352 | { |
| 353 | siginfo_t info; |
| 354 | const char *desc; |
| 355 | struct pt_regs *regs = current_pt_regs(); |
| 356 | |
| 357 | clear_siginfo(&info); |
| 358 | |
| 359 | switch (signal) { |
| 360 | case SIGILL: |
| 361 | desc = "undefined instruction"; |
| 362 | break; |
| 363 | case SIGSEGV: |
| 364 | desc = "illegal memory access"; |
| 365 | break; |
| 366 | default: |
| 367 | desc = "unknown or unrecoverable error"; |
| 368 | break; |
| 369 | } |
| 370 | |
| 371 | /* Force signals we don't understand to SIGKILL */ |
| 372 | if (WARN_ON(signal != SIGKILL && |
| 373 | siginfo_layout(signal, code) != SIL_FAULT)) { |
| 374 | signal = SIGKILL; |
| 375 | } |
| 376 | |
| 377 | info.si_signo = signal; |
| 378 | info.si_errno = 0; |
| 379 | info.si_code = code; |
| 380 | info.si_addr = (void __user *)address; |
| 381 | |
| 382 | arm64_notify_die(desc, regs, &info, 0); |
| 383 | } |
| 384 | |
| 385 | /* |
| 386 | * Set up process info to signal segmentation fault - called on access error. |
| 387 | */ |
| 388 | void arm64_notify_segfault(unsigned long addr) |
| 389 | { |
| 390 | int code; |
| 391 | |
| 392 | down_read(¤t->mm->mmap_sem); |
| 393 | if (find_vma(current->mm, addr) == NULL) |
| 394 | code = SEGV_MAPERR; |
| 395 | else |
| 396 | code = SEGV_ACCERR; |
| 397 | up_read(¤t->mm->mmap_sem); |
| 398 | |
| 399 | force_signal_inject(SIGSEGV, code, addr); |
| 400 | } |
| 401 | |
| 402 | asmlinkage void __exception do_undefinstr(struct pt_regs *regs) |
| 403 | { |
| 404 | /* check for AArch32 breakpoint instructions */ |
| 405 | if (!aarch32_break_handler(regs)) |
| 406 | return; |
| 407 | |
| 408 | if (call_undef_hook(regs) == 0) |
| 409 | return; |
| 410 | |
| 411 | force_signal_inject(SIGILL, ILL_ILLOPC, regs->pc); |
| 412 | BUG_ON(!user_mode(regs)); |
| 413 | } |
| 414 | |
| 415 | void cpu_enable_cache_maint_trap(const struct arm64_cpu_capabilities *__unused) |
| 416 | { |
| 417 | sysreg_clear_set(sctlr_el1, SCTLR_EL1_UCI, 0); |
| 418 | } |
| 419 | |
| 420 | #define __user_cache_maint(insn, address, res) \ |
| 421 | if (address >= user_addr_max()) { \ |
| 422 | res = -EFAULT; \ |
| 423 | } else { \ |
| 424 | uaccess_ttbr0_enable(); \ |
| 425 | asm volatile ( \ |
| 426 | "1: " insn ", %1\n" \ |
| 427 | " mov %w0, #0\n" \ |
| 428 | "2:\n" \ |
| 429 | " .pushsection .fixup,\"ax\"\n" \ |
| 430 | " .align 2\n" \ |
| 431 | "3: mov %w0, %w2\n" \ |
| 432 | " b 2b\n" \ |
| 433 | " .popsection\n" \ |
| 434 | _ASM_EXTABLE(1b, 3b) \ |
| 435 | : "=r" (res) \ |
| 436 | : "r" (address), "i" (-EFAULT)); \ |
| 437 | uaccess_ttbr0_disable(); \ |
| 438 | } |
| 439 | |
| 440 | static void user_cache_maint_handler(unsigned int esr, struct pt_regs *regs) |
| 441 | { |
| 442 | unsigned long address; |
| 443 | int rt = (esr & ESR_ELx_SYS64_ISS_RT_MASK) >> ESR_ELx_SYS64_ISS_RT_SHIFT; |
| 444 | int crm = (esr & ESR_ELx_SYS64_ISS_CRM_MASK) >> ESR_ELx_SYS64_ISS_CRM_SHIFT; |
| 445 | int ret = 0; |
| 446 | |
| 447 | address = untagged_addr(pt_regs_read_reg(regs, rt)); |
| 448 | |
| 449 | switch (crm) { |
| 450 | case ESR_ELx_SYS64_ISS_CRM_DC_CVAU: /* DC CVAU, gets promoted */ |
| 451 | __user_cache_maint("dc civac", address, ret); |
| 452 | break; |
| 453 | case ESR_ELx_SYS64_ISS_CRM_DC_CVAC: /* DC CVAC, gets promoted */ |
| 454 | __user_cache_maint("dc civac", address, ret); |
| 455 | break; |
| 456 | case ESR_ELx_SYS64_ISS_CRM_DC_CVAP: /* DC CVAP */ |
| 457 | __user_cache_maint("sys 3, c7, c12, 1", address, ret); |
| 458 | break; |
| 459 | case ESR_ELx_SYS64_ISS_CRM_DC_CIVAC: /* DC CIVAC */ |
| 460 | __user_cache_maint("dc civac", address, ret); |
| 461 | break; |
| 462 | case ESR_ELx_SYS64_ISS_CRM_IC_IVAU: /* IC IVAU */ |
| 463 | __user_cache_maint("ic ivau", address, ret); |
| 464 | break; |
| 465 | default: |
| 466 | force_signal_inject(SIGILL, ILL_ILLOPC, regs->pc); |
| 467 | return; |
| 468 | } |
| 469 | |
| 470 | if (ret) |
| 471 | arm64_notify_segfault(address); |
| 472 | else |
| 473 | arm64_skip_faulting_instruction(regs, AARCH64_INSN_SIZE); |
| 474 | } |
| 475 | |
| 476 | static void ctr_read_handler(unsigned int esr, struct pt_regs *regs) |
| 477 | { |
| 478 | int rt = (esr & ESR_ELx_SYS64_ISS_RT_MASK) >> ESR_ELx_SYS64_ISS_RT_SHIFT; |
| 479 | unsigned long val = arm64_ftr_reg_user_value(&arm64_ftr_reg_ctrel0); |
| 480 | |
| 481 | pt_regs_write_reg(regs, rt, val); |
| 482 | |
| 483 | arm64_skip_faulting_instruction(regs, AARCH64_INSN_SIZE); |
| 484 | } |
| 485 | |
| 486 | static void cntvct_read_handler(unsigned int esr, struct pt_regs *regs) |
| 487 | { |
| 488 | int rt = (esr & ESR_ELx_SYS64_ISS_RT_MASK) >> ESR_ELx_SYS64_ISS_RT_SHIFT; |
| 489 | |
| 490 | pt_regs_write_reg(regs, rt, arch_counter_get_cntvct()); |
| 491 | arm64_skip_faulting_instruction(regs, AARCH64_INSN_SIZE); |
| 492 | } |
| 493 | |
| 494 | static void cntfrq_read_handler(unsigned int esr, struct pt_regs *regs) |
| 495 | { |
| 496 | int rt = (esr & ESR_ELx_SYS64_ISS_RT_MASK) >> ESR_ELx_SYS64_ISS_RT_SHIFT; |
| 497 | |
| 498 | pt_regs_write_reg(regs, rt, arch_timer_get_rate()); |
| 499 | arm64_skip_faulting_instruction(regs, AARCH64_INSN_SIZE); |
| 500 | } |
| 501 | |
| 502 | struct sys64_hook { |
| 503 | unsigned int esr_mask; |
| 504 | unsigned int esr_val; |
| 505 | void (*handler)(unsigned int esr, struct pt_regs *regs); |
| 506 | }; |
| 507 | |
| 508 | static struct sys64_hook sys64_hooks[] = { |
| 509 | { |
| 510 | .esr_mask = ESR_ELx_SYS64_ISS_EL0_CACHE_OP_MASK, |
| 511 | .esr_val = ESR_ELx_SYS64_ISS_EL0_CACHE_OP_VAL, |
| 512 | .handler = user_cache_maint_handler, |
| 513 | }, |
| 514 | { |
| 515 | /* Trap read access to CTR_EL0 */ |
| 516 | .esr_mask = ESR_ELx_SYS64_ISS_SYS_OP_MASK, |
| 517 | .esr_val = ESR_ELx_SYS64_ISS_SYS_CTR_READ, |
| 518 | .handler = ctr_read_handler, |
| 519 | }, |
| 520 | { |
| 521 | /* Trap read access to CNTVCT_EL0 */ |
| 522 | .esr_mask = ESR_ELx_SYS64_ISS_SYS_OP_MASK, |
| 523 | .esr_val = ESR_ELx_SYS64_ISS_SYS_CNTVCT, |
| 524 | .handler = cntvct_read_handler, |
| 525 | }, |
| 526 | { |
| 527 | /* Trap read access to CNTFRQ_EL0 */ |
| 528 | .esr_mask = ESR_ELx_SYS64_ISS_SYS_OP_MASK, |
| 529 | .esr_val = ESR_ELx_SYS64_ISS_SYS_CNTFRQ, |
| 530 | .handler = cntfrq_read_handler, |
| 531 | }, |
| 532 | {}, |
| 533 | }; |
| 534 | |
| 535 | asmlinkage void __exception do_sysinstr(unsigned int esr, struct pt_regs *regs) |
| 536 | { |
| 537 | struct sys64_hook *hook; |
| 538 | |
| 539 | for (hook = sys64_hooks; hook->handler; hook++) |
| 540 | if ((hook->esr_mask & esr) == hook->esr_val) { |
| 541 | hook->handler(esr, regs); |
| 542 | return; |
| 543 | } |
| 544 | |
| 545 | /* |
| 546 | * New SYS instructions may previously have been undefined at EL0. Fall |
| 547 | * back to our usual undefined instruction handler so that we handle |
| 548 | * these consistently. |
| 549 | */ |
| 550 | do_undefinstr(regs); |
| 551 | } |
| 552 | |
| 553 | static const char *esr_class_str[] = { |
| 554 | [0 ... ESR_ELx_EC_MAX] = "UNRECOGNIZED EC", |
| 555 | [ESR_ELx_EC_UNKNOWN] = "Unknown/Uncategorized", |
| 556 | [ESR_ELx_EC_WFx] = "WFI/WFE", |
| 557 | [ESR_ELx_EC_CP15_32] = "CP15 MCR/MRC", |
| 558 | [ESR_ELx_EC_CP15_64] = "CP15 MCRR/MRRC", |
| 559 | [ESR_ELx_EC_CP14_MR] = "CP14 MCR/MRC", |
| 560 | [ESR_ELx_EC_CP14_LS] = "CP14 LDC/STC", |
| 561 | [ESR_ELx_EC_FP_ASIMD] = "ASIMD", |
| 562 | [ESR_ELx_EC_CP10_ID] = "CP10 MRC/VMRS", |
| 563 | [ESR_ELx_EC_CP14_64] = "CP14 MCRR/MRRC", |
| 564 | [ESR_ELx_EC_ILL] = "PSTATE.IL", |
| 565 | [ESR_ELx_EC_SVC32] = "SVC (AArch32)", |
| 566 | [ESR_ELx_EC_HVC32] = "HVC (AArch32)", |
| 567 | [ESR_ELx_EC_SMC32] = "SMC (AArch32)", |
| 568 | [ESR_ELx_EC_SVC64] = "SVC (AArch64)", |
| 569 | [ESR_ELx_EC_HVC64] = "HVC (AArch64)", |
| 570 | [ESR_ELx_EC_SMC64] = "SMC (AArch64)", |
| 571 | [ESR_ELx_EC_SYS64] = "MSR/MRS (AArch64)", |
| 572 | [ESR_ELx_EC_SVE] = "SVE", |
| 573 | [ESR_ELx_EC_IMP_DEF] = "EL3 IMP DEF", |
| 574 | [ESR_ELx_EC_IABT_LOW] = "IABT (lower EL)", |
| 575 | [ESR_ELx_EC_IABT_CUR] = "IABT (current EL)", |
| 576 | [ESR_ELx_EC_PC_ALIGN] = "PC Alignment", |
| 577 | [ESR_ELx_EC_DABT_LOW] = "DABT (lower EL)", |
| 578 | [ESR_ELx_EC_DABT_CUR] = "DABT (current EL)", |
| 579 | [ESR_ELx_EC_SP_ALIGN] = "SP Alignment", |
| 580 | [ESR_ELx_EC_FP_EXC32] = "FP (AArch32)", |
| 581 | [ESR_ELx_EC_FP_EXC64] = "FP (AArch64)", |
| 582 | [ESR_ELx_EC_SERROR] = "SError", |
| 583 | [ESR_ELx_EC_BREAKPT_LOW] = "Breakpoint (lower EL)", |
| 584 | [ESR_ELx_EC_BREAKPT_CUR] = "Breakpoint (current EL)", |
| 585 | [ESR_ELx_EC_SOFTSTP_LOW] = "Software Step (lower EL)", |
| 586 | [ESR_ELx_EC_SOFTSTP_CUR] = "Software Step (current EL)", |
| 587 | [ESR_ELx_EC_WATCHPT_LOW] = "Watchpoint (lower EL)", |
| 588 | [ESR_ELx_EC_WATCHPT_CUR] = "Watchpoint (current EL)", |
| 589 | [ESR_ELx_EC_BKPT32] = "BKPT (AArch32)", |
| 590 | [ESR_ELx_EC_VECTOR32] = "Vector catch (AArch32)", |
| 591 | [ESR_ELx_EC_BRK64] = "BRK (AArch64)", |
| 592 | }; |
| 593 | |
| 594 | const char *esr_get_class_string(u32 esr) |
| 595 | { |
| 596 | return esr_class_str[ESR_ELx_EC(esr)]; |
| 597 | } |
| 598 | |
| 599 | /* |
| 600 | * bad_mode handles the impossible case in the exception vector. This is always |
| 601 | * fatal. |
| 602 | */ |
| 603 | asmlinkage void bad_mode(struct pt_regs *regs, int reason, unsigned int esr) |
| 604 | { |
| 605 | console_verbose(); |
| 606 | |
| 607 | pr_crit("Bad mode in %s handler detected on CPU%d, code 0x%08x -- %s\n", |
| 608 | handler[reason], smp_processor_id(), esr, |
| 609 | esr_get_class_string(esr)); |
| 610 | |
| 611 | die("Oops - bad mode", regs, 0); |
| 612 | local_daif_mask(); |
| 613 | panic("bad mode"); |
| 614 | } |
| 615 | |
| 616 | /* |
| 617 | * bad_el0_sync handles unexpected, but potentially recoverable synchronous |
| 618 | * exceptions taken from EL0. Unlike bad_mode, this returns. |
| 619 | */ |
| 620 | asmlinkage void bad_el0_sync(struct pt_regs *regs, int reason, unsigned int esr) |
| 621 | { |
| 622 | siginfo_t info; |
| 623 | void __user *pc = (void __user *)instruction_pointer(regs); |
| 624 | |
| 625 | clear_siginfo(&info); |
| 626 | info.si_signo = SIGILL; |
| 627 | info.si_errno = 0; |
| 628 | info.si_code = ILL_ILLOPC; |
| 629 | info.si_addr = pc; |
| 630 | |
| 631 | current->thread.fault_address = 0; |
| 632 | current->thread.fault_code = esr; |
| 633 | |
| 634 | arm64_force_sig_info(&info, "Bad EL0 synchronous exception", current); |
| 635 | } |
| 636 | |
| 637 | #ifdef CONFIG_VMAP_STACK |
| 638 | |
| 639 | DEFINE_PER_CPU(unsigned long [OVERFLOW_STACK_SIZE/sizeof(long)], overflow_stack) |
| 640 | __aligned(16); |
| 641 | |
| 642 | asmlinkage void handle_bad_stack(struct pt_regs *regs) |
| 643 | { |
| 644 | unsigned long tsk_stk = (unsigned long)current->stack; |
| 645 | unsigned long irq_stk = (unsigned long)this_cpu_read(irq_stack_ptr); |
| 646 | unsigned long ovf_stk = (unsigned long)this_cpu_ptr(overflow_stack); |
| 647 | unsigned int esr = read_sysreg(esr_el1); |
| 648 | unsigned long far = read_sysreg(far_el1); |
| 649 | |
| 650 | console_verbose(); |
| 651 | pr_emerg("Insufficient stack space to handle exception!"); |
| 652 | |
| 653 | pr_emerg("ESR: 0x%08x -- %s\n", esr, esr_get_class_string(esr)); |
| 654 | pr_emerg("FAR: 0x%016lx\n", far); |
| 655 | |
| 656 | pr_emerg("Task stack: [0x%016lx..0x%016lx]\n", |
| 657 | tsk_stk, tsk_stk + THREAD_SIZE); |
| 658 | pr_emerg("IRQ stack: [0x%016lx..0x%016lx]\n", |
| 659 | irq_stk, irq_stk + THREAD_SIZE); |
| 660 | pr_emerg("Overflow stack: [0x%016lx..0x%016lx]\n", |
| 661 | ovf_stk, ovf_stk + OVERFLOW_STACK_SIZE); |
| 662 | |
| 663 | __show_regs(regs); |
| 664 | |
| 665 | /* |
| 666 | * We use nmi_panic to limit the potential for recusive overflows, and |
| 667 | * to get a better stack trace. |
| 668 | */ |
| 669 | nmi_panic(NULL, "kernel stack overflow"); |
| 670 | cpu_park_loop(); |
| 671 | } |
| 672 | #endif |
| 673 | |
| 674 | void __noreturn arm64_serror_panic(struct pt_regs *regs, u32 esr) |
| 675 | { |
| 676 | console_verbose(); |
| 677 | |
| 678 | pr_crit("SError Interrupt on CPU%d, code 0x%08x -- %s\n", |
| 679 | smp_processor_id(), esr, esr_get_class_string(esr)); |
| 680 | if (regs) |
| 681 | __show_regs(regs); |
| 682 | |
| 683 | nmi_panic(regs, "Asynchronous SError Interrupt"); |
| 684 | |
| 685 | cpu_park_loop(); |
| 686 | unreachable(); |
| 687 | } |
| 688 | |
| 689 | bool arm64_is_fatal_ras_serror(struct pt_regs *regs, unsigned int esr) |
| 690 | { |
| 691 | u32 aet = arm64_ras_serror_get_severity(esr); |
| 692 | |
| 693 | switch (aet) { |
| 694 | case ESR_ELx_AET_CE: /* corrected error */ |
| 695 | case ESR_ELx_AET_UEO: /* restartable, not yet consumed */ |
| 696 | /* |
| 697 | * The CPU can make progress. We may take UEO again as |
| 698 | * a more severe error. |
| 699 | */ |
| 700 | return false; |
| 701 | |
| 702 | case ESR_ELx_AET_UEU: /* Uncorrected Unrecoverable */ |
| 703 | case ESR_ELx_AET_UER: /* Uncorrected Recoverable */ |
| 704 | /* |
| 705 | * The CPU can't make progress. The exception may have |
| 706 | * been imprecise. |
| 707 | */ |
| 708 | return true; |
| 709 | |
| 710 | case ESR_ELx_AET_UC: /* Uncontainable or Uncategorized error */ |
| 711 | default: |
| 712 | /* Error has been silently propagated */ |
| 713 | arm64_serror_panic(regs, esr); |
| 714 | } |
| 715 | } |
| 716 | |
| 717 | asmlinkage void do_serror(struct pt_regs *regs, unsigned int esr) |
| 718 | { |
| 719 | nmi_enter(); |
| 720 | |
| 721 | /* non-RAS errors are not containable */ |
| 722 | if (!arm64_is_ras_serror(esr) || arm64_is_fatal_ras_serror(regs, esr)) |
| 723 | arm64_serror_panic(regs, esr); |
| 724 | |
| 725 | nmi_exit(); |
| 726 | } |
| 727 | |
| 728 | void __pte_error(const char *file, int line, unsigned long val) |
| 729 | { |
| 730 | pr_err("%s:%d: bad pte %016lx.\n", file, line, val); |
| 731 | } |
| 732 | |
| 733 | void __pmd_error(const char *file, int line, unsigned long val) |
| 734 | { |
| 735 | pr_err("%s:%d: bad pmd %016lx.\n", file, line, val); |
| 736 | } |
| 737 | |
| 738 | void __pud_error(const char *file, int line, unsigned long val) |
| 739 | { |
| 740 | pr_err("%s:%d: bad pud %016lx.\n", file, line, val); |
| 741 | } |
| 742 | |
| 743 | void __pgd_error(const char *file, int line, unsigned long val) |
| 744 | { |
| 745 | pr_err("%s:%d: bad pgd %016lx.\n", file, line, val); |
| 746 | } |
| 747 | |
| 748 | /* GENERIC_BUG traps */ |
| 749 | |
| 750 | int is_valid_bugaddr(unsigned long addr) |
| 751 | { |
| 752 | /* |
| 753 | * bug_handler() only called for BRK #BUG_BRK_IMM. |
| 754 | * So the answer is trivial -- any spurious instances with no |
| 755 | * bug table entry will be rejected by report_bug() and passed |
| 756 | * back to the debug-monitors code and handled as a fatal |
| 757 | * unexpected debug exception. |
| 758 | */ |
| 759 | return 1; |
| 760 | } |
| 761 | |
| 762 | static int bug_handler(struct pt_regs *regs, unsigned int esr) |
| 763 | { |
| 764 | if (user_mode(regs)) |
| 765 | return DBG_HOOK_ERROR; |
| 766 | |
| 767 | switch (report_bug(regs->pc, regs)) { |
| 768 | case BUG_TRAP_TYPE_BUG: |
| 769 | die("Oops - BUG", regs, 0); |
| 770 | break; |
| 771 | |
| 772 | case BUG_TRAP_TYPE_WARN: |
| 773 | break; |
| 774 | |
| 775 | default: |
| 776 | /* unknown/unrecognised bug trap type */ |
| 777 | return DBG_HOOK_ERROR; |
| 778 | } |
| 779 | |
| 780 | /* If thread survives, skip over the BUG instruction and continue: */ |
| 781 | arm64_skip_faulting_instruction(regs, AARCH64_INSN_SIZE); |
| 782 | return DBG_HOOK_HANDLED; |
| 783 | } |
| 784 | |
| 785 | static struct break_hook bug_break_hook = { |
| 786 | .esr_val = 0xf2000000 | BUG_BRK_IMM, |
| 787 | .esr_mask = 0xffffffff, |
| 788 | .fn = bug_handler, |
| 789 | }; |
| 790 | |
| 791 | /* |
| 792 | * Initial handler for AArch64 BRK exceptions |
| 793 | * This handler only used until debug_traps_init(). |
| 794 | */ |
| 795 | int __init early_brk64(unsigned long addr, unsigned int esr, |
| 796 | struct pt_regs *regs) |
| 797 | { |
| 798 | return bug_handler(regs, esr) != DBG_HOOK_HANDLED; |
| 799 | } |
| 800 | |
| 801 | /* This registration must happen early, before debug_traps_init(). */ |
| 802 | void __init trap_init(void) |
| 803 | { |
| 804 | register_break_hook(&bug_break_hook); |
| 805 | } |