Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* |
| 2 | * linux/arch/x86_64/entry.S |
| 3 | * |
| 4 | * Copyright (C) 1991, 1992 Linus Torvalds |
| 5 | * Copyright (C) 2000, 2001, 2002 Andi Kleen SuSE Labs |
| 6 | * Copyright (C) 2000 Pavel Machek <pavel@suse.cz> |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 7 | * |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 8 | * entry.S contains the system-call and fault low-level handling routines. |
| 9 | * |
Andy Lutomirski | 8b4777a | 2011-06-05 13:50:18 -0400 | [diff] [blame] | 10 | * Some of this is documented in Documentation/x86/entry_64.txt |
| 11 | * |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 12 | * A note on terminology: |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 13 | * - iret frame: Architecture defined interrupt frame from SS to RIP |
| 14 | * at the top of the kernel process stack. |
Andi Kleen | 2e91a17 | 2006-09-26 10:52:29 +0200 | [diff] [blame] | 15 | * |
| 16 | * Some macro usage: |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 17 | * - ENTRY/END: Define functions in the symbol table. |
| 18 | * - TRACE_IRQ_*: Trace hardirq state for lock debugging. |
| 19 | * - idtentry: Define exception entry points. |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 20 | */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 21 | #include <linux/linkage.h> |
| 22 | #include <asm/segment.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 23 | #include <asm/cache.h> |
| 24 | #include <asm/errno.h> |
Ingo Molnar | d36f947 | 2015-06-03 18:29:26 +0200 | [diff] [blame] | 25 | #include "calling.h" |
Sam Ravnborg | e2d5df9 | 2005-09-09 21:28:48 +0200 | [diff] [blame] | 26 | #include <asm/asm-offsets.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 27 | #include <asm/msr.h> |
| 28 | #include <asm/unistd.h> |
| 29 | #include <asm/thread_info.h> |
| 30 | #include <asm/hw_irq.h> |
Jeremy Fitzhardinge | 0341c14 | 2009-02-13 11:14:01 -0800 | [diff] [blame] | 31 | #include <asm/page_types.h> |
Ingo Molnar | 2601e64 | 2006-07-03 00:24:45 -0700 | [diff] [blame] | 32 | #include <asm/irqflags.h> |
Glauber de Oliveira Costa | 72fe485 | 2008-01-30 13:32:08 +0100 | [diff] [blame] | 33 | #include <asm/paravirt.h> |
Tejun Heo | 9939dda | 2009-01-13 20:41:35 +0900 | [diff] [blame] | 34 | #include <asm/percpu.h> |
H. Peter Anvin | d7abc0f | 2012-04-20 12:19:50 -0700 | [diff] [blame] | 35 | #include <asm/asm.h> |
H. Peter Anvin | 63bcff2 | 2012-09-21 12:43:12 -0700 | [diff] [blame] | 36 | #include <asm/smap.h> |
H. Peter Anvin | 3891a04 | 2014-04-29 16:46:09 -0700 | [diff] [blame] | 37 | #include <asm/pgtable_types.h> |
Al Viro | 784d569 | 2016-01-11 11:04:34 -0500 | [diff] [blame] | 38 | #include <asm/export.h> |
Richard Fellner | 13be448 | 2017-05-04 14:26:50 +0200 | [diff] [blame] | 39 | #include <asm/kaiser.h> |
David Woodhouse | 8b1bacc | 2018-01-11 21:46:28 +0000 | [diff] [blame] | 40 | #include <asm/nospec-branch.h> |
Eric Paris | d7e7528 | 2012-01-03 14:23:06 -0500 | [diff] [blame] | 41 | #include <linux/err.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 42 | |
Roland McGrath | 86a1c34 | 2008-06-23 15:37:04 -0700 | [diff] [blame] | 43 | /* Avoid __ASSEMBLER__'ifying <linux/audit.h> just for this. */ |
| 44 | #include <linux/elf-em.h> |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 45 | #define AUDIT_ARCH_X86_64 (EM_X86_64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE) |
| 46 | #define __AUDIT_ARCH_64BIT 0x80000000 |
| 47 | #define __AUDIT_ARCH_LE 0x40000000 |
Roland McGrath | 86a1c34 | 2008-06-23 15:37:04 -0700 | [diff] [blame] | 48 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 49 | .code64 |
| 50 | .section .entry.text, "ax" |
Arnaldo Carvalho de Melo | 16444a8 | 2008-05-12 21:20:42 +0200 | [diff] [blame] | 51 | |
Glauber de Oliveira Costa | 72fe485 | 2008-01-30 13:32:08 +0100 | [diff] [blame] | 52 | #ifdef CONFIG_PARAVIRT |
Jeremy Fitzhardinge | 2be2998 | 2008-06-25 00:19:28 -0400 | [diff] [blame] | 53 | ENTRY(native_usergs_sysret64) |
Glauber de Oliveira Costa | 72fe485 | 2008-01-30 13:32:08 +0100 | [diff] [blame] | 54 | swapgs |
| 55 | sysretq |
Cyrill Gorcunov | b3baaa1 | 2009-02-23 22:57:00 +0300 | [diff] [blame] | 56 | ENDPROC(native_usergs_sysret64) |
Glauber de Oliveira Costa | 72fe485 | 2008-01-30 13:32:08 +0100 | [diff] [blame] | 57 | #endif /* CONFIG_PARAVIRT */ |
| 58 | |
Greg Kroah-Hartman | a11ca51 | 2017-12-04 12:59:57 +0100 | [diff] [blame] | 59 | .macro TRACE_IRQS_IRETQ |
Ingo Molnar | 2601e64 | 2006-07-03 00:24:45 -0700 | [diff] [blame] | 60 | #ifdef CONFIG_TRACE_IRQFLAGS |
Greg Kroah-Hartman | a11ca51 | 2017-12-04 12:59:57 +0100 | [diff] [blame] | 61 | bt $9, EFLAGS(%rsp) /* interrupts off? */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 62 | jnc 1f |
Ingo Molnar | 2601e64 | 2006-07-03 00:24:45 -0700 | [diff] [blame] | 63 | TRACE_IRQS_ON |
| 64 | 1: |
| 65 | #endif |
| 66 | .endm |
| 67 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 68 | /* |
Steven Rostedt | 5963e31 | 2012-05-30 11:54:53 -0400 | [diff] [blame] | 69 | * When dynamic function tracer is enabled it will add a breakpoint |
| 70 | * to all locations that it is about to modify, sync CPUs, update |
| 71 | * all the code, sync CPUs, then remove the breakpoints. In this time |
| 72 | * if lockdep is enabled, it might jump back into the debug handler |
| 73 | * outside the updating of the IST protection. (TRACE_IRQS_ON/OFF). |
| 74 | * |
| 75 | * We need to change the IDT table before calling TRACE_IRQS_ON/OFF to |
| 76 | * make sure the stack pointer does not get reset back to the top |
| 77 | * of the debug stack, and instead just reuses the current stack. |
| 78 | */ |
| 79 | #if defined(CONFIG_DYNAMIC_FTRACE) && defined(CONFIG_TRACE_IRQFLAGS) |
| 80 | |
| 81 | .macro TRACE_IRQS_OFF_DEBUG |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 82 | call debug_stack_set_zero |
Steven Rostedt | 5963e31 | 2012-05-30 11:54:53 -0400 | [diff] [blame] | 83 | TRACE_IRQS_OFF |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 84 | call debug_stack_reset |
Steven Rostedt | 5963e31 | 2012-05-30 11:54:53 -0400 | [diff] [blame] | 85 | .endm |
| 86 | |
| 87 | .macro TRACE_IRQS_ON_DEBUG |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 88 | call debug_stack_set_zero |
Steven Rostedt | 5963e31 | 2012-05-30 11:54:53 -0400 | [diff] [blame] | 89 | TRACE_IRQS_ON |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 90 | call debug_stack_reset |
Steven Rostedt | 5963e31 | 2012-05-30 11:54:53 -0400 | [diff] [blame] | 91 | .endm |
| 92 | |
Denys Vlasenko | f2db938 | 2015-02-26 14:40:30 -0800 | [diff] [blame] | 93 | .macro TRACE_IRQS_IRETQ_DEBUG |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 94 | bt $9, EFLAGS(%rsp) /* interrupts off? */ |
| 95 | jnc 1f |
Steven Rostedt | 5963e31 | 2012-05-30 11:54:53 -0400 | [diff] [blame] | 96 | TRACE_IRQS_ON_DEBUG |
| 97 | 1: |
| 98 | .endm |
| 99 | |
| 100 | #else |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 101 | # define TRACE_IRQS_OFF_DEBUG TRACE_IRQS_OFF |
| 102 | # define TRACE_IRQS_ON_DEBUG TRACE_IRQS_ON |
| 103 | # define TRACE_IRQS_IRETQ_DEBUG TRACE_IRQS_IRETQ |
Steven Rostedt | 5963e31 | 2012-05-30 11:54:53 -0400 | [diff] [blame] | 104 | #endif |
| 105 | |
| 106 | /* |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 107 | * 64-bit SYSCALL instruction entry. Up to 6 arguments in registers. |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 108 | * |
Andy Lutomirski | fda57b2 | 2016-03-09 19:00:35 -0800 | [diff] [blame] | 109 | * This is the only entry point used for 64-bit system calls. The |
| 110 | * hardware interface is reasonably well designed and the register to |
| 111 | * argument mapping Linux uses fits well with the registers that are |
| 112 | * available when SYSCALL is used. |
| 113 | * |
| 114 | * SYSCALL instructions can be found inlined in libc implementations as |
| 115 | * well as some other programs and libraries. There are also a handful |
| 116 | * of SYSCALL instructions in the vDSO used, for example, as a |
| 117 | * clock_gettimeofday fallback. |
| 118 | * |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 119 | * 64-bit SYSCALL saves rip to rcx, clears rflags.RF, then saves rflags to r11, |
Denys Vlasenko | b87cf63 | 2015-02-26 14:40:32 -0800 | [diff] [blame] | 120 | * then loads new ss, cs, and rip from previously programmed MSRs. |
| 121 | * rflags gets masked by a value from another MSR (so CLD and CLAC |
| 122 | * are not needed). SYSCALL does not save anything on the stack |
| 123 | * and does not change rsp. |
| 124 | * |
| 125 | * Registers on entry: |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 126 | * rax system call number |
Denys Vlasenko | b87cf63 | 2015-02-26 14:40:32 -0800 | [diff] [blame] | 127 | * rcx return address |
| 128 | * r11 saved rflags (note: r11 is callee-clobbered register in C ABI) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 129 | * rdi arg0 |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 130 | * rsi arg1 |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 131 | * rdx arg2 |
Denys Vlasenko | b87cf63 | 2015-02-26 14:40:32 -0800 | [diff] [blame] | 132 | * r10 arg3 (needs to be moved to rcx to conform to C ABI) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 133 | * r8 arg4 |
| 134 | * r9 arg5 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 135 | * (note: r12-r15, rbp, rbx are callee-preserved in C ABI) |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 136 | * |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 137 | * Only called from user space. |
| 138 | * |
Ingo Molnar | 7fcb3bc | 2015-03-17 14:42:59 +0100 | [diff] [blame] | 139 | * When user can change pt_regs->foo always force IRET. That is because |
Andi Kleen | 7bf36bb | 2006-04-07 19:50:00 +0200 | [diff] [blame] | 140 | * it deals with uncanonical addresses better. SYSRET has trouble |
| 141 | * with them due to bugs in both AMD and Intel CPUs. |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 142 | */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 143 | |
Ingo Molnar | b2502b4 | 2015-06-08 08:42:03 +0200 | [diff] [blame] | 144 | ENTRY(entry_SYSCALL_64) |
Denys Vlasenko | 9ed8e7d | 2015-03-19 18:17:47 +0100 | [diff] [blame] | 145 | /* |
| 146 | * Interrupts are off on entry. |
| 147 | * We do not frame this tiny irq-off block with TRACE_IRQS_OFF/ON, |
| 148 | * it is too small to ever cause noticeable irq latency. |
| 149 | */ |
Glauber de Oliveira Costa | 72fe485 | 2008-01-30 13:32:08 +0100 | [diff] [blame] | 150 | SWAPGS_UNSAFE_STACK |
Richard Fellner | 13be448 | 2017-05-04 14:26:50 +0200 | [diff] [blame] | 151 | SWITCH_KERNEL_CR3_NO_STACK |
Glauber de Oliveira Costa | 72fe485 | 2008-01-30 13:32:08 +0100 | [diff] [blame] | 152 | /* |
| 153 | * A hypervisor implementation might want to use a label |
| 154 | * after the swapgs, so that it can do the swapgs |
| 155 | * for the guest and jump here on syscall. |
| 156 | */ |
Ingo Molnar | b2502b4 | 2015-06-08 08:42:03 +0200 | [diff] [blame] | 157 | GLOBAL(entry_SYSCALL_64_after_swapgs) |
Glauber de Oliveira Costa | 72fe485 | 2008-01-30 13:32:08 +0100 | [diff] [blame] | 158 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 159 | movq %rsp, PER_CPU_VAR(rsp_scratch) |
| 160 | movq PER_CPU_VAR(cpu_current_top_of_stack), %rsp |
Denys Vlasenko | 9ed8e7d | 2015-03-19 18:17:47 +0100 | [diff] [blame] | 161 | |
Andy Lutomirski | 1e423bf | 2016-01-28 15:11:28 -0800 | [diff] [blame] | 162 | TRACE_IRQS_OFF |
| 163 | |
Denys Vlasenko | 9ed8e7d | 2015-03-19 18:17:47 +0100 | [diff] [blame] | 164 | /* Construct struct pt_regs on stack */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 165 | pushq $__USER_DS /* pt_regs->ss */ |
| 166 | pushq PER_CPU_VAR(rsp_scratch) /* pt_regs->sp */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 167 | pushq %r11 /* pt_regs->flags */ |
| 168 | pushq $__USER_CS /* pt_regs->cs */ |
| 169 | pushq %rcx /* pt_regs->ip */ |
| 170 | pushq %rax /* pt_regs->orig_ax */ |
| 171 | pushq %rdi /* pt_regs->di */ |
| 172 | pushq %rsi /* pt_regs->si */ |
| 173 | pushq %rdx /* pt_regs->dx */ |
| 174 | pushq %rcx /* pt_regs->cx */ |
| 175 | pushq $-ENOSYS /* pt_regs->ax */ |
| 176 | pushq %r8 /* pt_regs->r8 */ |
| 177 | pushq %r9 /* pt_regs->r9 */ |
| 178 | pushq %r10 /* pt_regs->r10 */ |
| 179 | pushq %r11 /* pt_regs->r11 */ |
| 180 | sub $(6*8), %rsp /* pt_regs->bp, bx, r12-15 not saved */ |
Denys Vlasenko | 9ed8e7d | 2015-03-19 18:17:47 +0100 | [diff] [blame] | 181 | |
Andy Lutomirski | 1e423bf | 2016-01-28 15:11:28 -0800 | [diff] [blame] | 182 | /* |
| 183 | * If we need to do entry work or if we guess we'll need to do |
| 184 | * exit work, go straight to the slow path. |
| 185 | */ |
Andy Lutomirski | 15f4eae | 2016-09-13 14:29:25 -0700 | [diff] [blame] | 186 | movq PER_CPU_VAR(current_task), %r11 |
| 187 | testl $_TIF_WORK_SYSCALL_ENTRY|_TIF_ALLWORK_MASK, TASK_TI_flags(%r11) |
Andy Lutomirski | 1e423bf | 2016-01-28 15:11:28 -0800 | [diff] [blame] | 188 | jnz entry_SYSCALL64_slow_path |
| 189 | |
Ingo Molnar | b2502b4 | 2015-06-08 08:42:03 +0200 | [diff] [blame] | 190 | entry_SYSCALL_64_fastpath: |
Andy Lutomirski | 1e423bf | 2016-01-28 15:11:28 -0800 | [diff] [blame] | 191 | /* |
| 192 | * Easy case: enable interrupts and issue the syscall. If the syscall |
| 193 | * needs pt_regs, we'll call a stub that disables interrupts again |
| 194 | * and jumps to the slow path. |
| 195 | */ |
| 196 | TRACE_IRQS_ON |
| 197 | ENABLE_INTERRUPTS(CLBR_NONE) |
H. Peter Anvin | fca460f | 2012-02-19 07:56:26 -0800 | [diff] [blame] | 198 | #if __SYSCALL_MASK == ~0 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 199 | cmpq $__NR_syscall_max, %rax |
H. Peter Anvin | fca460f | 2012-02-19 07:56:26 -0800 | [diff] [blame] | 200 | #else |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 201 | andl $__SYSCALL_MASK, %eax |
| 202 | cmpl $__NR_syscall_max, %eax |
H. Peter Anvin | fca460f | 2012-02-19 07:56:26 -0800 | [diff] [blame] | 203 | #endif |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 204 | ja 1f /* return -ENOSYS (already in pt_regs->ax) */ |
| 205 | movq %r10, %rcx |
Andy Lutomirski | 302f5b2 | 2016-01-28 15:11:25 -0800 | [diff] [blame] | 206 | |
| 207 | /* |
| 208 | * This call instruction is handled specially in stub_ptregs_64. |
Andy Lutomirski | b776508 | 2016-01-31 09:33:26 -0800 | [diff] [blame] | 209 | * It might end up jumping to the slow path. If it jumps, RAX |
| 210 | * and all argument registers are clobbered. |
Andy Lutomirski | 302f5b2 | 2016-01-28 15:11:25 -0800 | [diff] [blame] | 211 | */ |
David Woodhouse | 8b1bacc | 2018-01-11 21:46:28 +0000 | [diff] [blame] | 212 | #ifdef CONFIG_RETPOLINE |
| 213 | movq sys_call_table(, %rax, 8), %rax |
| 214 | call __x86_indirect_thunk_rax |
| 215 | #else |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 216 | call *sys_call_table(, %rax, 8) |
David Woodhouse | 8b1bacc | 2018-01-11 21:46:28 +0000 | [diff] [blame] | 217 | #endif |
Andy Lutomirski | 302f5b2 | 2016-01-28 15:11:25 -0800 | [diff] [blame] | 218 | .Lentry_SYSCALL_64_after_fastpath_call: |
| 219 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 220 | movq %rax, RAX(%rsp) |
Denys Vlasenko | 146b2b0 | 2015-03-25 18:18:13 +0100 | [diff] [blame] | 221 | 1: |
Andy Lutomirski | 1e423bf | 2016-01-28 15:11:28 -0800 | [diff] [blame] | 222 | |
Denys Vlasenko | 4416c5a | 2015-03-31 19:00:03 +0200 | [diff] [blame] | 223 | /* |
Andy Lutomirski | 1e423bf | 2016-01-28 15:11:28 -0800 | [diff] [blame] | 224 | * If we get here, then we know that pt_regs is clean for SYSRET64. |
| 225 | * If we see that no exit work is required (which we are required |
| 226 | * to check with IRQs off), then we can go straight to SYSRET64. |
Denys Vlasenko | 4416c5a | 2015-03-31 19:00:03 +0200 | [diff] [blame] | 227 | */ |
Glauber de Oliveira Costa | 72fe485 | 2008-01-30 13:32:08 +0100 | [diff] [blame] | 228 | DISABLE_INTERRUPTS(CLBR_NONE) |
Andy Lutomirski | 1e423bf | 2016-01-28 15:11:28 -0800 | [diff] [blame] | 229 | TRACE_IRQS_OFF |
Andy Lutomirski | 15f4eae | 2016-09-13 14:29:25 -0700 | [diff] [blame] | 230 | movq PER_CPU_VAR(current_task), %r11 |
| 231 | testl $_TIF_ALLWORK_MASK, TASK_TI_flags(%r11) |
Andy Lutomirski | 1e423bf | 2016-01-28 15:11:28 -0800 | [diff] [blame] | 232 | jnz 1f |
Andy Lutomirski | b3494a4 | 2015-03-23 12:32:54 -0700 | [diff] [blame] | 233 | |
Andy Lutomirski | 1e423bf | 2016-01-28 15:11:28 -0800 | [diff] [blame] | 234 | LOCKDEP_SYS_EXIT |
| 235 | TRACE_IRQS_ON /* user mode is traced as IRQs on */ |
Andy Lutomirski | eb2a54c | 2016-01-31 09:33:27 -0800 | [diff] [blame] | 236 | movq RIP(%rsp), %rcx |
| 237 | movq EFLAGS(%rsp), %r11 |
| 238 | RESTORE_C_REGS_EXCEPT_RCX_R11 |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 239 | /* |
| 240 | * This opens a window where we have a user CR3, but are |
| 241 | * running in the kernel. This makes using the CS |
| 242 | * register useless for telling whether or not we need to |
| 243 | * switch CR3 in NMIs. Normal interrupts are OK because |
| 244 | * they are off here. |
| 245 | */ |
Richard Fellner | 13be448 | 2017-05-04 14:26:50 +0200 | [diff] [blame] | 246 | SWITCH_USER_CR3 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 247 | movq RSP(%rsp), %rsp |
Jeremy Fitzhardinge | 2be2998 | 2008-06-25 00:19:28 -0400 | [diff] [blame] | 248 | USERGS_SYSRET64 |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 249 | |
Andy Lutomirski | 1e423bf | 2016-01-28 15:11:28 -0800 | [diff] [blame] | 250 | 1: |
| 251 | /* |
| 252 | * The fast path looked good when we started, but something changed |
| 253 | * along the way and we need to switch to the slow path. Calling |
| 254 | * raise(3) will trigger this, for example. IRQs are off. |
| 255 | */ |
Andy Lutomirski | 29ea1b2 | 2015-07-03 12:44:28 -0700 | [diff] [blame] | 256 | TRACE_IRQS_ON |
| 257 | ENABLE_INTERRUPTS(CLBR_NONE) |
Denys Vlasenko | 76f5df4 | 2015-02-26 14:40:27 -0800 | [diff] [blame] | 258 | SAVE_EXTRA_REGS |
Andy Lutomirski | 29ea1b2 | 2015-07-03 12:44:28 -0700 | [diff] [blame] | 259 | movq %rsp, %rdi |
| 260 | call syscall_return_slowpath /* returns with IRQs disabled */ |
Andy Lutomirski | 1e423bf | 2016-01-28 15:11:28 -0800 | [diff] [blame] | 261 | jmp return_from_SYSCALL_64 |
| 262 | |
| 263 | entry_SYSCALL64_slow_path: |
| 264 | /* IRQs are off. */ |
| 265 | SAVE_EXTRA_REGS |
| 266 | movq %rsp, %rdi |
| 267 | call do_syscall_64 /* returns with IRQs disabled */ |
| 268 | |
| 269 | return_from_SYSCALL_64: |
Denys Vlasenko | 76f5df4 | 2015-02-26 14:40:27 -0800 | [diff] [blame] | 270 | RESTORE_EXTRA_REGS |
Andy Lutomirski | 29ea1b2 | 2015-07-03 12:44:28 -0700 | [diff] [blame] | 271 | TRACE_IRQS_IRETQ /* we're about to change IF */ |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 272 | |
| 273 | /* |
| 274 | * Try to use SYSRET instead of IRET if we're returning to |
| 275 | * a completely clean 64-bit userspace context. |
| 276 | */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 277 | movq RCX(%rsp), %rcx |
| 278 | movq RIP(%rsp), %r11 |
| 279 | cmpq %rcx, %r11 /* RCX == RIP */ |
| 280 | jne opportunistic_sysret_failed |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 281 | |
| 282 | /* |
| 283 | * On Intel CPUs, SYSRET with non-canonical RCX/RIP will #GP |
| 284 | * in kernel space. This essentially lets the user take over |
Denys Vlasenko | 17be0ae | 2015-04-21 18:27:29 +0200 | [diff] [blame] | 285 | * the kernel, since userspace controls RSP. |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 286 | * |
Denys Vlasenko | 17be0ae | 2015-04-21 18:27:29 +0200 | [diff] [blame] | 287 | * If width of "canonical tail" ever becomes variable, this will need |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 288 | * to be updated to remain correct on both old and new CPUs. |
| 289 | */ |
| 290 | .ifne __VIRTUAL_MASK_SHIFT - 47 |
| 291 | .error "virtual address width changed -- SYSRET checks need update" |
| 292 | .endif |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 293 | |
Denys Vlasenko | 17be0ae | 2015-04-21 18:27:29 +0200 | [diff] [blame] | 294 | /* Change top 16 bits to be the sign-extension of 47th bit */ |
| 295 | shl $(64 - (__VIRTUAL_MASK_SHIFT+1)), %rcx |
| 296 | sar $(64 - (__VIRTUAL_MASK_SHIFT+1)), %rcx |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 297 | |
Denys Vlasenko | 17be0ae | 2015-04-21 18:27:29 +0200 | [diff] [blame] | 298 | /* If this changed %rcx, it was not canonical */ |
| 299 | cmpq %rcx, %r11 |
| 300 | jne opportunistic_sysret_failed |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 301 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 302 | cmpq $__USER_CS, CS(%rsp) /* CS must match SYSRET */ |
| 303 | jne opportunistic_sysret_failed |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 304 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 305 | movq R11(%rsp), %r11 |
| 306 | cmpq %r11, EFLAGS(%rsp) /* R11 == RFLAGS */ |
| 307 | jne opportunistic_sysret_failed |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 308 | |
| 309 | /* |
Borislav Petkov | 3e03530 | 2016-08-03 19:14:29 +0200 | [diff] [blame] | 310 | * SYSCALL clears RF when it saves RFLAGS in R11 and SYSRET cannot |
| 311 | * restore RF properly. If the slowpath sets it for whatever reason, we |
| 312 | * need to restore it correctly. |
| 313 | * |
| 314 | * SYSRET can restore TF, but unlike IRET, restoring TF results in a |
| 315 | * trap from userspace immediately after SYSRET. This would cause an |
| 316 | * infinite loop whenever #DB happens with register state that satisfies |
| 317 | * the opportunistic SYSRET conditions. For example, single-stepping |
| 318 | * this user code: |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 319 | * |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 320 | * movq $stuck_here, %rcx |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 321 | * pushfq |
| 322 | * popq %r11 |
| 323 | * stuck_here: |
| 324 | * |
| 325 | * would never get past 'stuck_here'. |
| 326 | */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 327 | testq $(X86_EFLAGS_RF|X86_EFLAGS_TF), %r11 |
| 328 | jnz opportunistic_sysret_failed |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 329 | |
| 330 | /* nothing to check for RSP */ |
| 331 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 332 | cmpq $__USER_DS, SS(%rsp) /* SS must match SYSRET */ |
| 333 | jne opportunistic_sysret_failed |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 334 | |
| 335 | /* |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 336 | * We win! This label is here just for ease of understanding |
| 337 | * perf profiles. Nothing jumps here. |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 338 | */ |
| 339 | syscall_return_via_sysret: |
Denys Vlasenko | 17be0ae | 2015-04-21 18:27:29 +0200 | [diff] [blame] | 340 | /* rcx and r11 are already restored (see code above) */ |
| 341 | RESTORE_C_REGS_EXCEPT_RCX_R11 |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 342 | /* |
| 343 | * This opens a window where we have a user CR3, but are |
| 344 | * running in the kernel. This makes using the CS |
| 345 | * register useless for telling whether or not we need to |
| 346 | * switch CR3 in NMIs. Normal interrupts are OK because |
| 347 | * they are off here. |
| 348 | */ |
Richard Fellner | 13be448 | 2017-05-04 14:26:50 +0200 | [diff] [blame] | 349 | SWITCH_USER_CR3 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 350 | movq RSP(%rsp), %rsp |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 351 | USERGS_SYSRET64 |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 352 | |
| 353 | opportunistic_sysret_failed: |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 354 | /* |
| 355 | * This opens a window where we have a user CR3, but are |
| 356 | * running in the kernel. This makes using the CS |
| 357 | * register useless for telling whether or not we need to |
| 358 | * switch CR3 in NMIs. Normal interrupts are OK because |
| 359 | * they are off here. |
| 360 | */ |
Richard Fellner | 13be448 | 2017-05-04 14:26:50 +0200 | [diff] [blame] | 361 | SWITCH_USER_CR3 |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 362 | SWAPGS |
| 363 | jmp restore_c_regs_and_iret |
Ingo Molnar | b2502b4 | 2015-06-08 08:42:03 +0200 | [diff] [blame] | 364 | END(entry_SYSCALL_64) |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 365 | |
Andy Lutomirski | 302f5b2 | 2016-01-28 15:11:25 -0800 | [diff] [blame] | 366 | ENTRY(stub_ptregs_64) |
| 367 | /* |
| 368 | * Syscalls marked as needing ptregs land here. |
Andy Lutomirski | b776508 | 2016-01-31 09:33:26 -0800 | [diff] [blame] | 369 | * If we are on the fast path, we need to save the extra regs, |
| 370 | * which we achieve by trying again on the slow path. If we are on |
| 371 | * the slow path, the extra regs are already saved. |
Andy Lutomirski | 302f5b2 | 2016-01-28 15:11:25 -0800 | [diff] [blame] | 372 | * |
| 373 | * RAX stores a pointer to the C function implementing the syscall. |
Andy Lutomirski | b776508 | 2016-01-31 09:33:26 -0800 | [diff] [blame] | 374 | * IRQs are on. |
Andy Lutomirski | 302f5b2 | 2016-01-28 15:11:25 -0800 | [diff] [blame] | 375 | */ |
| 376 | cmpq $.Lentry_SYSCALL_64_after_fastpath_call, (%rsp) |
| 377 | jne 1f |
| 378 | |
Andy Lutomirski | b776508 | 2016-01-31 09:33:26 -0800 | [diff] [blame] | 379 | /* |
| 380 | * Called from fast path -- disable IRQs again, pop return address |
| 381 | * and jump to slow path |
| 382 | */ |
| 383 | DISABLE_INTERRUPTS(CLBR_NONE) |
| 384 | TRACE_IRQS_OFF |
Andy Lutomirski | 302f5b2 | 2016-01-28 15:11:25 -0800 | [diff] [blame] | 385 | popq %rax |
Andy Lutomirski | b776508 | 2016-01-31 09:33:26 -0800 | [diff] [blame] | 386 | jmp entry_SYSCALL64_slow_path |
Andy Lutomirski | 302f5b2 | 2016-01-28 15:11:25 -0800 | [diff] [blame] | 387 | |
| 388 | 1: |
David Woodhouse | 8b1bacc | 2018-01-11 21:46:28 +0000 | [diff] [blame] | 389 | JMP_NOSPEC %rax /* Called from C */ |
Andy Lutomirski | 302f5b2 | 2016-01-28 15:11:25 -0800 | [diff] [blame] | 390 | END(stub_ptregs_64) |
| 391 | |
| 392 | .macro ptregs_stub func |
| 393 | ENTRY(ptregs_\func) |
| 394 | leaq \func(%rip), %rax |
| 395 | jmp stub_ptregs_64 |
| 396 | END(ptregs_\func) |
| 397 | .endm |
| 398 | |
| 399 | /* Instantiate ptregs_stub for each ptregs-using syscall */ |
| 400 | #define __SYSCALL_64_QUAL_(sym) |
| 401 | #define __SYSCALL_64_QUAL_ptregs(sym) ptregs_stub sym |
| 402 | #define __SYSCALL_64(nr, sym, qual) __SYSCALL_64_QUAL_##qual(sym) |
| 403 | #include <asm/syscalls_64.h> |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 404 | |
Jan Beulich | 7effaa8 | 2005-09-12 18:49:24 +0200 | [diff] [blame] | 405 | /* |
Brian Gerst | 0100301 | 2016-08-13 12:38:19 -0400 | [diff] [blame] | 406 | * %rdi: prev task |
| 407 | * %rsi: next task |
| 408 | */ |
| 409 | ENTRY(__switch_to_asm) |
| 410 | /* |
| 411 | * Save callee-saved registers |
| 412 | * This must match the order in inactive_task_frame |
| 413 | */ |
| 414 | pushq %rbp |
| 415 | pushq %rbx |
| 416 | pushq %r12 |
| 417 | pushq %r13 |
| 418 | pushq %r14 |
| 419 | pushq %r15 |
| 420 | |
| 421 | /* switch stack */ |
| 422 | movq %rsp, TASK_threadsp(%rdi) |
| 423 | movq TASK_threadsp(%rsi), %rsp |
| 424 | |
| 425 | #ifdef CONFIG_CC_STACKPROTECTOR |
| 426 | movq TASK_stack_canary(%rsi), %rbx |
| 427 | movq %rbx, PER_CPU_VAR(irq_stack_union)+stack_canary_offset |
| 428 | #endif |
| 429 | |
David Woodhouse | abf67b1 | 2018-01-12 17:49:25 +0000 | [diff] [blame] | 430 | #ifdef CONFIG_RETPOLINE |
| 431 | /* |
| 432 | * When switching from a shallower to a deeper call stack |
| 433 | * the RSB may either underflow or use entries populated |
| 434 | * with userspace addresses. On CPUs where those concerns |
| 435 | * exist, overwrite the RSB with entries which capture |
| 436 | * speculative execution to prevent attack. |
| 437 | */ |
| 438 | FILL_RETURN_BUFFER %r12, RSB_CLEAR_LOOPS, X86_FEATURE_RSB_CTXSW |
| 439 | #endif |
| 440 | |
Brian Gerst | 0100301 | 2016-08-13 12:38:19 -0400 | [diff] [blame] | 441 | /* restore callee-saved registers */ |
| 442 | popq %r15 |
| 443 | popq %r14 |
| 444 | popq %r13 |
| 445 | popq %r12 |
| 446 | popq %rbx |
| 447 | popq %rbp |
| 448 | |
| 449 | jmp __switch_to |
| 450 | END(__switch_to_asm) |
| 451 | |
| 452 | /* |
Denys Vlasenko | 1eeb207 | 2015-02-26 14:40:33 -0800 | [diff] [blame] | 453 | * A newly forked process directly context switches into this address. |
| 454 | * |
Brian Gerst | 0100301 | 2016-08-13 12:38:19 -0400 | [diff] [blame] | 455 | * rax: prev task we switched from |
Brian Gerst | 616d248 | 2016-08-13 12:38:20 -0400 | [diff] [blame] | 456 | * rbx: kernel thread func (NULL for user thread) |
| 457 | * r12: kernel thread arg |
Denys Vlasenko | 1eeb207 | 2015-02-26 14:40:33 -0800 | [diff] [blame] | 458 | */ |
| 459 | ENTRY(ret_from_fork) |
Brian Gerst | 0100301 | 2016-08-13 12:38:19 -0400 | [diff] [blame] | 460 | movq %rax, %rdi |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 461 | call schedule_tail /* rdi: 'prev' task parameter */ |
Denys Vlasenko | 1eeb207 | 2015-02-26 14:40:33 -0800 | [diff] [blame] | 462 | |
Brian Gerst | 616d248 | 2016-08-13 12:38:20 -0400 | [diff] [blame] | 463 | testq %rbx, %rbx /* from kernel_thread? */ |
| 464 | jnz 1f /* kernel threads are uncommon */ |
Denys Vlasenko | 1eeb207 | 2015-02-26 14:40:33 -0800 | [diff] [blame] | 465 | |
Brian Gerst | 616d248 | 2016-08-13 12:38:20 -0400 | [diff] [blame] | 466 | 2: |
Andy Lutomirski | 24d978b | 2016-01-28 15:11:27 -0800 | [diff] [blame] | 467 | movq %rsp, %rdi |
| 468 | call syscall_return_slowpath /* returns with IRQs disabled */ |
| 469 | TRACE_IRQS_ON /* user mode is traced as IRQS on */ |
Richard Fellner | 13be448 | 2017-05-04 14:26:50 +0200 | [diff] [blame] | 470 | SWITCH_USER_CR3 |
Andy Lutomirski | 24d978b | 2016-01-28 15:11:27 -0800 | [diff] [blame] | 471 | SWAPGS |
| 472 | jmp restore_regs_and_iret |
Brian Gerst | 616d248 | 2016-08-13 12:38:20 -0400 | [diff] [blame] | 473 | |
| 474 | 1: |
| 475 | /* kernel thread */ |
| 476 | movq %r12, %rdi |
David Woodhouse | 8b1bacc | 2018-01-11 21:46:28 +0000 | [diff] [blame] | 477 | CALL_NOSPEC %rbx |
Brian Gerst | 616d248 | 2016-08-13 12:38:20 -0400 | [diff] [blame] | 478 | /* |
| 479 | * A kernel thread is allowed to return here after successfully |
| 480 | * calling do_execve(). Exit to userspace to complete the execve() |
| 481 | * syscall. |
| 482 | */ |
| 483 | movq $0, RAX(%rsp) |
| 484 | jmp 2b |
Denys Vlasenko | 1eeb207 | 2015-02-26 14:40:33 -0800 | [diff] [blame] | 485 | END(ret_from_fork) |
| 486 | |
| 487 | /* |
Denys Vlasenko | 3304c9c | 2015-04-03 21:49:13 +0200 | [diff] [blame] | 488 | * Build the entry stubs with some assembler magic. |
| 489 | * We pack 1 stub into every 8-byte block. |
H. Peter Anvin | 939b787 | 2008-11-11 13:51:52 -0800 | [diff] [blame] | 490 | */ |
Denys Vlasenko | 3304c9c | 2015-04-03 21:49:13 +0200 | [diff] [blame] | 491 | .align 8 |
H. Peter Anvin | 939b787 | 2008-11-11 13:51:52 -0800 | [diff] [blame] | 492 | ENTRY(irq_entries_start) |
Denys Vlasenko | 3304c9c | 2015-04-03 21:49:13 +0200 | [diff] [blame] | 493 | vector=FIRST_EXTERNAL_VECTOR |
| 494 | .rept (FIRST_SYSTEM_VECTOR - FIRST_EXTERNAL_VECTOR) |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 495 | pushq $(~vector+0x80) /* Note: always in signed byte range */ |
Denys Vlasenko | 3304c9c | 2015-04-03 21:49:13 +0200 | [diff] [blame] | 496 | vector=vector+1 |
| 497 | jmp common_interrupt |
Denys Vlasenko | 3304c9c | 2015-04-03 21:49:13 +0200 | [diff] [blame] | 498 | .align 8 |
| 499 | .endr |
H. Peter Anvin | 939b787 | 2008-11-11 13:51:52 -0800 | [diff] [blame] | 500 | END(irq_entries_start) |
| 501 | |
Alexander van Heukelum | d99015b | 2008-11-19 01:18:11 +0100 | [diff] [blame] | 502 | /* |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 503 | * Interrupt entry/exit. |
| 504 | * |
| 505 | * Interrupt entry points save only callee clobbered registers in fast path. |
Alexander van Heukelum | d99015b | 2008-11-19 01:18:11 +0100 | [diff] [blame] | 506 | * |
| 507 | * Entry runs with interrupts off. |
| 508 | */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 509 | |
Alexander van Heukelum | 722024d | 2008-11-13 13:50:20 +0100 | [diff] [blame] | 510 | /* 0(%rsp): ~(interrupt number) */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 511 | .macro interrupt func |
Denys Vlasenko | f6f6468 | 2015-01-08 17:25:15 +0100 | [diff] [blame] | 512 | cld |
Andy Lutomirski | ff46759 | 2015-07-03 12:44:29 -0700 | [diff] [blame] | 513 | ALLOC_PT_GPREGS_ON_STACK |
| 514 | SAVE_C_REGS |
| 515 | SAVE_EXTRA_REGS |
Denys Vlasenko | f6f6468 | 2015-01-08 17:25:15 +0100 | [diff] [blame] | 516 | |
Andy Lutomirski | ff46759 | 2015-07-03 12:44:29 -0700 | [diff] [blame] | 517 | testb $3, CS(%rsp) |
Denys Vlasenko | dde74f2 | 2015-04-27 15:21:51 +0200 | [diff] [blame] | 518 | jz 1f |
Andy Lutomirski | 02bc776 | 2015-07-03 12:44:31 -0700 | [diff] [blame] | 519 | |
| 520 | /* |
| 521 | * IRQ from user mode. Switch to kernel gsbase and inform context |
| 522 | * tracking that we're in kernel mode. |
| 523 | */ |
Denys Vlasenko | f6f6468 | 2015-01-08 17:25:15 +0100 | [diff] [blame] | 524 | SWAPGS |
Richard Fellner | 13be448 | 2017-05-04 14:26:50 +0200 | [diff] [blame] | 525 | SWITCH_KERNEL_CR3 |
Andy Lutomirski | f107505 | 2015-11-12 12:59:00 -0800 | [diff] [blame] | 526 | |
| 527 | /* |
| 528 | * We need to tell lockdep that IRQs are off. We can't do this until |
| 529 | * we fix gsbase, and we should do it before enter_from_user_mode |
| 530 | * (which can take locks). Since TRACE_IRQS_OFF idempotent, |
| 531 | * the simplest way to handle it is to just call it twice if |
| 532 | * we enter from user mode. There's no reason to optimize this since |
| 533 | * TRACE_IRQS_OFF is a no-op if lockdep is off. |
| 534 | */ |
| 535 | TRACE_IRQS_OFF |
| 536 | |
Andy Lutomirski | 478dc89 | 2015-11-12 12:59:04 -0800 | [diff] [blame] | 537 | CALL_enter_from_user_mode |
Andy Lutomirski | 02bc776 | 2015-07-03 12:44:31 -0700 | [diff] [blame] | 538 | |
Denys Vlasenko | 76f5df4 | 2015-02-26 14:40:27 -0800 | [diff] [blame] | 539 | 1: |
Denys Vlasenko | f6f6468 | 2015-01-08 17:25:15 +0100 | [diff] [blame] | 540 | /* |
Denys Vlasenko | e90e147 | 2015-02-26 14:40:28 -0800 | [diff] [blame] | 541 | * Save previous stack pointer, optionally switch to interrupt stack. |
Denys Vlasenko | f6f6468 | 2015-01-08 17:25:15 +0100 | [diff] [blame] | 542 | * irq_count is used to check if a CPU is already on an interrupt stack |
| 543 | * or not. While this is essentially redundant with preempt_count it is |
| 544 | * a little cheaper to use a separate counter in the PDA (short of |
| 545 | * moving irq_enter into assembly, which would be too much work) |
| 546 | */ |
Andy Lutomirski | a586f98 | 2015-07-03 12:44:30 -0700 | [diff] [blame] | 547 | movq %rsp, %rdi |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 548 | incl PER_CPU_VAR(irq_count) |
| 549 | cmovzq PER_CPU_VAR(irq_stack_ptr), %rsp |
Andy Lutomirski | a586f98 | 2015-07-03 12:44:30 -0700 | [diff] [blame] | 550 | pushq %rdi |
Denys Vlasenko | f6f6468 | 2015-01-08 17:25:15 +0100 | [diff] [blame] | 551 | /* We entered an interrupt context - irqs are off: */ |
| 552 | TRACE_IRQS_OFF |
| 553 | |
Andy Lutomirski | a586f98 | 2015-07-03 12:44:30 -0700 | [diff] [blame] | 554 | call \func /* rdi points to pt_regs */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 555 | .endm |
| 556 | |
Alexander van Heukelum | 722024d | 2008-11-13 13:50:20 +0100 | [diff] [blame] | 557 | /* |
| 558 | * The interrupt stubs push (~vector+0x80) onto the stack and |
| 559 | * then jump to common_interrupt. |
| 560 | */ |
H. Peter Anvin | 939b787 | 2008-11-11 13:51:52 -0800 | [diff] [blame] | 561 | .p2align CONFIG_X86_L1_CACHE_SHIFT |
| 562 | common_interrupt: |
Jan Beulich | ee4eb87 | 2012-11-02 11:18:39 +0000 | [diff] [blame] | 563 | ASM_CLAC |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 564 | addq $-0x80, (%rsp) /* Adjust vector to [-256, -1] range */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 565 | interrupt do_IRQ |
Denys Vlasenko | 34061f1 | 2015-03-23 14:03:59 +0100 | [diff] [blame] | 566 | /* 0(%rsp): old RSP */ |
Jan Beulich | 7effaa8 | 2005-09-12 18:49:24 +0200 | [diff] [blame] | 567 | ret_from_intr: |
Glauber de Oliveira Costa | 72fe485 | 2008-01-30 13:32:08 +0100 | [diff] [blame] | 568 | DISABLE_INTERRUPTS(CLBR_NONE) |
Ingo Molnar | 2601e64 | 2006-07-03 00:24:45 -0700 | [diff] [blame] | 569 | TRACE_IRQS_OFF |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 570 | decl PER_CPU_VAR(irq_count) |
Frederic Weisbecker | 625dbc3 | 2011-01-06 15:22:47 +0100 | [diff] [blame] | 571 | |
Frederic Weisbecker | a2bbe75 | 2011-07-02 16:52:45 +0200 | [diff] [blame] | 572 | /* Restore saved previous stack */ |
Andy Lutomirski | ff46759 | 2015-07-03 12:44:29 -0700 | [diff] [blame] | 573 | popq %rsp |
Frederic Weisbecker | 625dbc3 | 2011-01-06 15:22:47 +0100 | [diff] [blame] | 574 | |
Denys Vlasenko | 03335e9 | 2015-04-27 15:21:52 +0200 | [diff] [blame] | 575 | testb $3, CS(%rsp) |
Denys Vlasenko | dde74f2 | 2015-04-27 15:21:51 +0200 | [diff] [blame] | 576 | jz retint_kernel |
Andy Lutomirski | 02bc776 | 2015-07-03 12:44:31 -0700 | [diff] [blame] | 577 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 578 | /* Interrupt came from user space */ |
Andy Lutomirski | 02bc776 | 2015-07-03 12:44:31 -0700 | [diff] [blame] | 579 | GLOBAL(retint_user) |
| 580 | mov %rsp,%rdi |
| 581 | call prepare_exit_to_usermode |
Ingo Molnar | 2601e64 | 2006-07-03 00:24:45 -0700 | [diff] [blame] | 582 | TRACE_IRQS_IRETQ |
Richard Fellner | 13be448 | 2017-05-04 14:26:50 +0200 | [diff] [blame] | 583 | SWITCH_USER_CR3 |
Glauber de Oliveira Costa | 72fe485 | 2008-01-30 13:32:08 +0100 | [diff] [blame] | 584 | SWAPGS |
Andy Lutomirski | ff46759 | 2015-07-03 12:44:29 -0700 | [diff] [blame] | 585 | jmp restore_regs_and_iret |
Ingo Molnar | 2601e64 | 2006-07-03 00:24:45 -0700 | [diff] [blame] | 586 | |
Denys Vlasenko | 627276c | 2015-03-30 20:09:31 +0200 | [diff] [blame] | 587 | /* Returning to kernel space */ |
Denys Vlasenko | 6ba71b7 | 2015-03-31 19:00:05 +0200 | [diff] [blame] | 588 | retint_kernel: |
Denys Vlasenko | 627276c | 2015-03-30 20:09:31 +0200 | [diff] [blame] | 589 | #ifdef CONFIG_PREEMPT |
| 590 | /* Interrupts are off */ |
| 591 | /* Check if we need preemption */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 592 | bt $9, EFLAGS(%rsp) /* were interrupts off? */ |
Denys Vlasenko | 6ba71b7 | 2015-03-31 19:00:05 +0200 | [diff] [blame] | 593 | jnc 1f |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 594 | 0: cmpl $0, PER_CPU_VAR(__preempt_count) |
Denys Vlasenko | 36acef2 | 2015-03-31 19:00:07 +0200 | [diff] [blame] | 595 | jnz 1f |
Denys Vlasenko | 627276c | 2015-03-30 20:09:31 +0200 | [diff] [blame] | 596 | call preempt_schedule_irq |
Denys Vlasenko | 36acef2 | 2015-03-31 19:00:07 +0200 | [diff] [blame] | 597 | jmp 0b |
Denys Vlasenko | 6ba71b7 | 2015-03-31 19:00:05 +0200 | [diff] [blame] | 598 | 1: |
Denys Vlasenko | 627276c | 2015-03-30 20:09:31 +0200 | [diff] [blame] | 599 | #endif |
Ingo Molnar | 2601e64 | 2006-07-03 00:24:45 -0700 | [diff] [blame] | 600 | /* |
| 601 | * The iretq could re-enable interrupts: |
| 602 | */ |
| 603 | TRACE_IRQS_IRETQ |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 604 | |
| 605 | /* |
| 606 | * At this label, code paths which return to kernel and to user, |
| 607 | * which come from interrupts/exception and from syscalls, merge. |
| 608 | */ |
Andy Lutomirski | ee08c6b | 2015-10-05 17:48:09 -0700 | [diff] [blame] | 609 | GLOBAL(restore_regs_and_iret) |
Andy Lutomirski | ff46759 | 2015-07-03 12:44:29 -0700 | [diff] [blame] | 610 | RESTORE_EXTRA_REGS |
Denys Vlasenko | fffbb5d | 2015-04-02 18:46:59 +0200 | [diff] [blame] | 611 | restore_c_regs_and_iret: |
Denys Vlasenko | 76f5df4 | 2015-02-26 14:40:27 -0800 | [diff] [blame] | 612 | RESTORE_C_REGS |
| 613 | REMOVE_PT_GPREGS_FROM_STACK 8 |
Andy Lutomirski | 7209a75 | 2014-07-23 08:34:11 -0700 | [diff] [blame] | 614 | INTERRUPT_RETURN |
| 615 | |
| 616 | ENTRY(native_iret) |
H. Peter Anvin | 3891a04 | 2014-04-29 16:46:09 -0700 | [diff] [blame] | 617 | /* |
| 618 | * Are we returning to a stack segment from the LDT? Note: in |
| 619 | * 64-bit mode SS:RSP on the exception stack is always valid. |
| 620 | */ |
H. Peter Anvin | 34273f4 | 2014-05-04 10:36:22 -0700 | [diff] [blame] | 621 | #ifdef CONFIG_X86_ESPFIX64 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 622 | testb $4, (SS-RIP)(%rsp) |
| 623 | jnz native_irq_return_ldt |
H. Peter Anvin | 34273f4 | 2014-05-04 10:36:22 -0700 | [diff] [blame] | 624 | #endif |
H. Peter Anvin | 3891a04 | 2014-04-29 16:46:09 -0700 | [diff] [blame] | 625 | |
Andy Lutomirski | af726f2 | 2014-11-22 18:00:31 -0800 | [diff] [blame] | 626 | .global native_irq_return_iret |
Andy Lutomirski | 7209a75 | 2014-07-23 08:34:11 -0700 | [diff] [blame] | 627 | native_irq_return_iret: |
Andy Lutomirski | b645af2 | 2014-11-22 18:00:33 -0800 | [diff] [blame] | 628 | /* |
| 629 | * This may fault. Non-paranoid faults on return to userspace are |
| 630 | * handled by fixup_bad_iret. These include #SS, #GP, and #NP. |
| 631 | * Double-faults due to espfix64 are handled in do_double_fault. |
| 632 | * Other faults here are fatal. |
| 633 | */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 634 | iretq |
Ingo Molnar | 3701d863 | 2008-02-09 23:24:08 +0100 | [diff] [blame] | 635 | |
H. Peter Anvin | 34273f4 | 2014-05-04 10:36:22 -0700 | [diff] [blame] | 636 | #ifdef CONFIG_X86_ESPFIX64 |
Andy Lutomirski | 7209a75 | 2014-07-23 08:34:11 -0700 | [diff] [blame] | 637 | native_irq_return_ldt: |
Andy Lutomirski | 85063fa | 2016-09-12 15:05:51 -0700 | [diff] [blame] | 638 | /* |
| 639 | * We are running with user GSBASE. All GPRs contain their user |
| 640 | * values. We have a percpu ESPFIX stack that is eight slots |
| 641 | * long (see ESPFIX_STACK_SIZE). espfix_waddr points to the bottom |
| 642 | * of the ESPFIX stack. |
| 643 | * |
| 644 | * We clobber RAX and RDI in this code. We stash RDI on the |
| 645 | * normal stack and RAX on the ESPFIX stack. |
| 646 | * |
| 647 | * The ESPFIX stack layout we set up looks like this: |
| 648 | * |
| 649 | * --- top of ESPFIX stack --- |
| 650 | * SS |
| 651 | * RSP |
| 652 | * RFLAGS |
| 653 | * CS |
| 654 | * RIP <-- RSP points here when we're done |
| 655 | * RAX <-- espfix_waddr points here |
| 656 | * --- bottom of ESPFIX stack --- |
| 657 | */ |
| 658 | |
| 659 | pushq %rdi /* Stash user RDI */ |
H. Peter Anvin | 3891a04 | 2014-04-29 16:46:09 -0700 | [diff] [blame] | 660 | SWAPGS |
Richard Fellner | 13be448 | 2017-05-04 14:26:50 +0200 | [diff] [blame] | 661 | SWITCH_KERNEL_CR3 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 662 | movq PER_CPU_VAR(espfix_waddr), %rdi |
Andy Lutomirski | 85063fa | 2016-09-12 15:05:51 -0700 | [diff] [blame] | 663 | movq %rax, (0*8)(%rdi) /* user RAX */ |
| 664 | movq (1*8)(%rsp), %rax /* user RIP */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 665 | movq %rax, (1*8)(%rdi) |
Andy Lutomirski | 85063fa | 2016-09-12 15:05:51 -0700 | [diff] [blame] | 666 | movq (2*8)(%rsp), %rax /* user CS */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 667 | movq %rax, (2*8)(%rdi) |
Andy Lutomirski | 85063fa | 2016-09-12 15:05:51 -0700 | [diff] [blame] | 668 | movq (3*8)(%rsp), %rax /* user RFLAGS */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 669 | movq %rax, (3*8)(%rdi) |
Andy Lutomirski | 85063fa | 2016-09-12 15:05:51 -0700 | [diff] [blame] | 670 | movq (5*8)(%rsp), %rax /* user SS */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 671 | movq %rax, (5*8)(%rdi) |
Andy Lutomirski | 85063fa | 2016-09-12 15:05:51 -0700 | [diff] [blame] | 672 | movq (4*8)(%rsp), %rax /* user RSP */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 673 | movq %rax, (4*8)(%rdi) |
Andy Lutomirski | 85063fa | 2016-09-12 15:05:51 -0700 | [diff] [blame] | 674 | /* Now RAX == RSP. */ |
| 675 | |
| 676 | andl $0xffff0000, %eax /* RAX = (RSP & 0xffff0000) */ |
| 677 | popq %rdi /* Restore user RDI */ |
| 678 | |
| 679 | /* |
| 680 | * espfix_stack[31:16] == 0. The page tables are set up such that |
| 681 | * (espfix_stack | (X & 0xffff0000)) points to a read-only alias of |
| 682 | * espfix_waddr for any X. That is, there are 65536 RO aliases of |
| 683 | * the same page. Set up RSP so that RSP[31:16] contains the |
| 684 | * respective 16 bits of the /userspace/ RSP and RSP nonetheless |
| 685 | * still points to an RO alias of the ESPFIX stack. |
| 686 | */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 687 | orq PER_CPU_VAR(espfix_stack), %rax |
Richard Fellner | 13be448 | 2017-05-04 14:26:50 +0200 | [diff] [blame] | 688 | SWITCH_USER_CR3 |
H. Peter Anvin | 3891a04 | 2014-04-29 16:46:09 -0700 | [diff] [blame] | 689 | SWAPGS |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 690 | movq %rax, %rsp |
Andy Lutomirski | 85063fa | 2016-09-12 15:05:51 -0700 | [diff] [blame] | 691 | |
| 692 | /* |
| 693 | * At this point, we cannot write to the stack any more, but we can |
| 694 | * still read. |
| 695 | */ |
| 696 | popq %rax /* Restore user RAX */ |
| 697 | |
| 698 | /* |
| 699 | * RSP now points to an ordinary IRET frame, except that the page |
| 700 | * is read-only and RSP[31:16] are preloaded with the userspace |
| 701 | * values. We can now IRET back to userspace. |
| 702 | */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 703 | jmp native_irq_return_iret |
H. Peter Anvin | 34273f4 | 2014-05-04 10:36:22 -0700 | [diff] [blame] | 704 | #endif |
Jan Beulich | 4b787e0 | 2006-06-26 13:56:55 +0200 | [diff] [blame] | 705 | END(common_interrupt) |
H. Peter Anvin | 3891a04 | 2014-04-29 16:46:09 -0700 | [diff] [blame] | 706 | |
Masami Hiramatsu | 8222d71 | 2009-08-27 13:23:25 -0400 | [diff] [blame] | 707 | /* |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 708 | * APIC interrupts. |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 709 | */ |
Seiji Aguchi | cf910e8 | 2013-06-20 11:46:53 -0400 | [diff] [blame] | 710 | .macro apicinterrupt3 num sym do_sym |
Alexander van Heukelum | 322648d | 2008-11-23 10:08:28 +0100 | [diff] [blame] | 711 | ENTRY(\sym) |
Jan Beulich | ee4eb87 | 2012-11-02 11:18:39 +0000 | [diff] [blame] | 712 | ASM_CLAC |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 713 | pushq $~(\num) |
Jan Beulich | 39e9543 | 2011-11-29 11:03:46 +0000 | [diff] [blame] | 714 | .Lcommon_\sym: |
Alexander van Heukelum | 322648d | 2008-11-23 10:08:28 +0100 | [diff] [blame] | 715 | interrupt \do_sym |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 716 | jmp ret_from_intr |
Alexander van Heukelum | 322648d | 2008-11-23 10:08:28 +0100 | [diff] [blame] | 717 | END(\sym) |
| 718 | .endm |
Jacob Shin | 89b831e | 2005-11-05 17:25:53 +0100 | [diff] [blame] | 719 | |
Seiji Aguchi | cf910e8 | 2013-06-20 11:46:53 -0400 | [diff] [blame] | 720 | #ifdef CONFIG_TRACING |
| 721 | #define trace(sym) trace_##sym |
| 722 | #define smp_trace(sym) smp_trace_##sym |
| 723 | |
| 724 | .macro trace_apicinterrupt num sym |
| 725 | apicinterrupt3 \num trace(\sym) smp_trace(\sym) |
| 726 | .endm |
| 727 | #else |
| 728 | .macro trace_apicinterrupt num sym do_sym |
| 729 | .endm |
| 730 | #endif |
| 731 | |
Alexander Potapenko | 469f002 | 2016-07-15 11:42:43 +0200 | [diff] [blame] | 732 | /* Make sure APIC interrupt handlers end up in the irqentry section: */ |
| 733 | #if defined(CONFIG_FUNCTION_GRAPH_TRACER) || defined(CONFIG_KASAN) |
| 734 | # define PUSH_SECTION_IRQENTRY .pushsection .irqentry.text, "ax" |
| 735 | # define POP_SECTION_IRQENTRY .popsection |
| 736 | #else |
| 737 | # define PUSH_SECTION_IRQENTRY |
| 738 | # define POP_SECTION_IRQENTRY |
| 739 | #endif |
| 740 | |
Seiji Aguchi | cf910e8 | 2013-06-20 11:46:53 -0400 | [diff] [blame] | 741 | .macro apicinterrupt num sym do_sym |
Alexander Potapenko | 469f002 | 2016-07-15 11:42:43 +0200 | [diff] [blame] | 742 | PUSH_SECTION_IRQENTRY |
Seiji Aguchi | cf910e8 | 2013-06-20 11:46:53 -0400 | [diff] [blame] | 743 | apicinterrupt3 \num \sym \do_sym |
| 744 | trace_apicinterrupt \num \sym |
Alexander Potapenko | 469f002 | 2016-07-15 11:42:43 +0200 | [diff] [blame] | 745 | POP_SECTION_IRQENTRY |
Seiji Aguchi | cf910e8 | 2013-06-20 11:46:53 -0400 | [diff] [blame] | 746 | .endm |
| 747 | |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 748 | #ifdef CONFIG_SMP |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 749 | apicinterrupt3 IRQ_MOVE_CLEANUP_VECTOR irq_move_cleanup_interrupt smp_irq_move_cleanup_interrupt |
| 750 | apicinterrupt3 REBOOT_VECTOR reboot_interrupt smp_reboot_interrupt |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 751 | #endif |
| 752 | |
Nick Piggin | 03b4863 | 2009-01-20 04:36:04 +0100 | [diff] [blame] | 753 | #ifdef CONFIG_X86_UV |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 754 | apicinterrupt3 UV_BAU_MESSAGE uv_bau_message_intr1 uv_bau_message_interrupt |
Nick Piggin | 03b4863 | 2009-01-20 04:36:04 +0100 | [diff] [blame] | 755 | #endif |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 756 | |
| 757 | apicinterrupt LOCAL_TIMER_VECTOR apic_timer_interrupt smp_apic_timer_interrupt |
| 758 | apicinterrupt X86_PLATFORM_IPI_VECTOR x86_platform_ipi smp_x86_platform_ipi |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 759 | |
Yang Zhang | d78f266 | 2013-04-11 19:25:11 +0800 | [diff] [blame] | 760 | #ifdef CONFIG_HAVE_KVM |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 761 | apicinterrupt3 POSTED_INTR_VECTOR kvm_posted_intr_ipi smp_kvm_posted_intr_ipi |
| 762 | apicinterrupt3 POSTED_INTR_WAKEUP_VECTOR kvm_posted_intr_wakeup_ipi smp_kvm_posted_intr_wakeup_ipi |
Yang Zhang | d78f266 | 2013-04-11 19:25:11 +0800 | [diff] [blame] | 763 | #endif |
| 764 | |
Seiji Aguchi | 33e5ff6 | 2013-06-22 07:33:30 -0400 | [diff] [blame] | 765 | #ifdef CONFIG_X86_MCE_THRESHOLD |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 766 | apicinterrupt THRESHOLD_APIC_VECTOR threshold_interrupt smp_threshold_interrupt |
Seiji Aguchi | 33e5ff6 | 2013-06-22 07:33:30 -0400 | [diff] [blame] | 767 | #endif |
| 768 | |
Aravind Gopalakrishnan | 24fd78a | 2015-05-06 06:58:56 -0500 | [diff] [blame] | 769 | #ifdef CONFIG_X86_MCE_AMD |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 770 | apicinterrupt DEFERRED_ERROR_VECTOR deferred_error_interrupt smp_deferred_error_interrupt |
Aravind Gopalakrishnan | 24fd78a | 2015-05-06 06:58:56 -0500 | [diff] [blame] | 771 | #endif |
| 772 | |
Seiji Aguchi | 33e5ff6 | 2013-06-22 07:33:30 -0400 | [diff] [blame] | 773 | #ifdef CONFIG_X86_THERMAL_VECTOR |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 774 | apicinterrupt THERMAL_APIC_VECTOR thermal_interrupt smp_thermal_interrupt |
Seiji Aguchi | 33e5ff6 | 2013-06-22 07:33:30 -0400 | [diff] [blame] | 775 | #endif |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 776 | |
Alexander van Heukelum | 322648d | 2008-11-23 10:08:28 +0100 | [diff] [blame] | 777 | #ifdef CONFIG_SMP |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 778 | apicinterrupt CALL_FUNCTION_SINGLE_VECTOR call_function_single_interrupt smp_call_function_single_interrupt |
| 779 | apicinterrupt CALL_FUNCTION_VECTOR call_function_interrupt smp_call_function_interrupt |
| 780 | apicinterrupt RESCHEDULE_VECTOR reschedule_interrupt smp_reschedule_interrupt |
Alexander van Heukelum | 322648d | 2008-11-23 10:08:28 +0100 | [diff] [blame] | 781 | #endif |
| 782 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 783 | apicinterrupt ERROR_APIC_VECTOR error_interrupt smp_error_interrupt |
| 784 | apicinterrupt SPURIOUS_APIC_VECTOR spurious_interrupt smp_spurious_interrupt |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 785 | |
Peter Zijlstra | e360adb | 2010-10-14 14:01:34 +0800 | [diff] [blame] | 786 | #ifdef CONFIG_IRQ_WORK |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 787 | apicinterrupt IRQ_WORK_VECTOR irq_work_interrupt smp_irq_work_interrupt |
Ingo Molnar | 241771e | 2008-12-03 10:39:53 +0100 | [diff] [blame] | 788 | #endif |
| 789 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 790 | /* |
| 791 | * Exception entry points. |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 792 | */ |
Andy Lutomirski | 9b47668 | 2015-03-05 19:19:07 -0800 | [diff] [blame] | 793 | #define CPU_TSS_IST(x) PER_CPU_VAR(cpu_tss) + (TSS_ist + ((x) - 1) * 8) |
Andy Lutomirski | 577ed45 | 2014-05-21 15:07:09 -0700 | [diff] [blame] | 794 | |
| 795 | .macro idtentry sym do_sym has_error_code:req paranoid=0 shift_ist=-1 |
Alexander van Heukelum | 322648d | 2008-11-23 10:08:28 +0100 | [diff] [blame] | 796 | ENTRY(\sym) |
Andy Lutomirski | 577ed45 | 2014-05-21 15:07:09 -0700 | [diff] [blame] | 797 | /* Sanity check */ |
| 798 | .if \shift_ist != -1 && \paranoid == 0 |
| 799 | .error "using shift_ist requires paranoid=1" |
| 800 | .endif |
| 801 | |
Jan Beulich | ee4eb87 | 2012-11-02 11:18:39 +0000 | [diff] [blame] | 802 | ASM_CLAC |
Alexander van Heukelum | b8b1d08 | 2008-11-21 16:44:28 +0100 | [diff] [blame] | 803 | PARAVIRT_ADJUST_EXCEPTION_FRAME |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 804 | |
| 805 | .ifeq \has_error_code |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 806 | pushq $-1 /* ORIG_RAX: no syscall to restart */ |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 807 | .endif |
| 808 | |
Denys Vlasenko | 76f5df4 | 2015-02-26 14:40:27 -0800 | [diff] [blame] | 809 | ALLOC_PT_GPREGS_ON_STACK |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 810 | |
| 811 | .if \paranoid |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 812 | .if \paranoid == 1 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 813 | testb $3, CS(%rsp) /* If coming from userspace, switch stacks */ |
| 814 | jnz 1f |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 815 | .endif |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 816 | call paranoid_entry |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 817 | .else |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 818 | call error_entry |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 819 | .endif |
Denys Vlasenko | ebfc453 | 2015-02-26 14:40:34 -0800 | [diff] [blame] | 820 | /* returned flag: ebx=0: need swapgs on exit, ebx=1: don't need it */ |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 821 | |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 822 | .if \paranoid |
Andy Lutomirski | 577ed45 | 2014-05-21 15:07:09 -0700 | [diff] [blame] | 823 | .if \shift_ist != -1 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 824 | TRACE_IRQS_OFF_DEBUG /* reload IDT in case of recursion */ |
Andy Lutomirski | 577ed45 | 2014-05-21 15:07:09 -0700 | [diff] [blame] | 825 | .else |
Alexander van Heukelum | b8b1d08 | 2008-11-21 16:44:28 +0100 | [diff] [blame] | 826 | TRACE_IRQS_OFF |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 827 | .endif |
Andy Lutomirski | 577ed45 | 2014-05-21 15:07:09 -0700 | [diff] [blame] | 828 | .endif |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 829 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 830 | movq %rsp, %rdi /* pt_regs pointer */ |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 831 | |
| 832 | .if \has_error_code |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 833 | movq ORIG_RAX(%rsp), %rsi /* get error code */ |
| 834 | movq $-1, ORIG_RAX(%rsp) /* no syscall to restart */ |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 835 | .else |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 836 | xorl %esi, %esi /* no error code */ |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 837 | .endif |
| 838 | |
Andy Lutomirski | 577ed45 | 2014-05-21 15:07:09 -0700 | [diff] [blame] | 839 | .if \shift_ist != -1 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 840 | subq $EXCEPTION_STKSZ, CPU_TSS_IST(\shift_ist) |
Andy Lutomirski | 577ed45 | 2014-05-21 15:07:09 -0700 | [diff] [blame] | 841 | .endif |
| 842 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 843 | call \do_sym |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 844 | |
Andy Lutomirski | 577ed45 | 2014-05-21 15:07:09 -0700 | [diff] [blame] | 845 | .if \shift_ist != -1 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 846 | addq $EXCEPTION_STKSZ, CPU_TSS_IST(\shift_ist) |
Andy Lutomirski | 577ed45 | 2014-05-21 15:07:09 -0700 | [diff] [blame] | 847 | .endif |
| 848 | |
Denys Vlasenko | ebfc453 | 2015-02-26 14:40:34 -0800 | [diff] [blame] | 849 | /* these procedures expect "no swapgs" flag in ebx */ |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 850 | .if \paranoid |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 851 | jmp paranoid_exit |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 852 | .else |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 853 | jmp error_exit |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 854 | .endif |
| 855 | |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 856 | .if \paranoid == 1 |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 857 | /* |
| 858 | * Paranoid entry from userspace. Switch stacks and treat it |
| 859 | * as a normal entry. This means that paranoid handlers |
| 860 | * run in real process context if user_mode(regs). |
| 861 | */ |
| 862 | 1: |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 863 | call error_entry |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 864 | |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 865 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 866 | movq %rsp, %rdi /* pt_regs pointer */ |
| 867 | call sync_regs |
| 868 | movq %rax, %rsp /* switch stack */ |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 869 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 870 | movq %rsp, %rdi /* pt_regs pointer */ |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 871 | |
| 872 | .if \has_error_code |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 873 | movq ORIG_RAX(%rsp), %rsi /* get error code */ |
| 874 | movq $-1, ORIG_RAX(%rsp) /* no syscall to restart */ |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 875 | .else |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 876 | xorl %esi, %esi /* no error code */ |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 877 | .endif |
| 878 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 879 | call \do_sym |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 880 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 881 | jmp error_exit /* %ebx: no swapgs flag */ |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 882 | .endif |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 883 | END(\sym) |
Alexander van Heukelum | 322648d | 2008-11-23 10:08:28 +0100 | [diff] [blame] | 884 | .endm |
Alexander van Heukelum | b8b1d08 | 2008-11-21 16:44:28 +0100 | [diff] [blame] | 885 | |
Seiji Aguchi | 25c74b1 | 2013-10-30 16:37:00 -0400 | [diff] [blame] | 886 | #ifdef CONFIG_TRACING |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 887 | .macro trace_idtentry sym do_sym has_error_code:req |
| 888 | idtentry trace(\sym) trace(\do_sym) has_error_code=\has_error_code |
| 889 | idtentry \sym \do_sym has_error_code=\has_error_code |
Seiji Aguchi | 25c74b1 | 2013-10-30 16:37:00 -0400 | [diff] [blame] | 890 | .endm |
| 891 | #else |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 892 | .macro trace_idtentry sym do_sym has_error_code:req |
| 893 | idtentry \sym \do_sym has_error_code=\has_error_code |
Seiji Aguchi | 25c74b1 | 2013-10-30 16:37:00 -0400 | [diff] [blame] | 894 | .endm |
| 895 | #endif |
| 896 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 897 | idtentry divide_error do_divide_error has_error_code=0 |
| 898 | idtentry overflow do_overflow has_error_code=0 |
| 899 | idtentry bounds do_bounds has_error_code=0 |
| 900 | idtentry invalid_op do_invalid_op has_error_code=0 |
| 901 | idtentry device_not_available do_device_not_available has_error_code=0 |
| 902 | idtentry double_fault do_double_fault has_error_code=1 paranoid=2 |
| 903 | idtentry coprocessor_segment_overrun do_coprocessor_segment_overrun has_error_code=0 |
| 904 | idtentry invalid_TSS do_invalid_TSS has_error_code=1 |
| 905 | idtentry segment_not_present do_segment_not_present has_error_code=1 |
| 906 | idtentry spurious_interrupt_bug do_spurious_interrupt_bug has_error_code=0 |
| 907 | idtentry coprocessor_error do_coprocessor_error has_error_code=0 |
| 908 | idtentry alignment_check do_alignment_check has_error_code=1 |
| 909 | idtentry simd_coprocessor_error do_simd_coprocessor_error has_error_code=0 |
Andy Lutomirski | 5cec93c | 2011-06-05 13:50:24 -0400 | [diff] [blame] | 910 | |
Ingo Molnar | 2601e64 | 2006-07-03 00:24:45 -0700 | [diff] [blame] | 911 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 912 | /* |
| 913 | * Reload gs selector with exception handling |
| 914 | * edi: new selector |
| 915 | */ |
Jeremy Fitzhardinge | 9f9d489 | 2008-06-25 00:19:32 -0400 | [diff] [blame] | 916 | ENTRY(native_load_gs_index) |
Ingo Molnar | 131484c | 2015-05-28 12:21:47 +0200 | [diff] [blame] | 917 | pushfq |
Jeremy Fitzhardinge | b8aa287 | 2009-01-28 14:35:03 -0800 | [diff] [blame] | 918 | DISABLE_INTERRUPTS(CLBR_ANY & ~CLBR_RDI) |
Cyrill Gorcunov | 9f1e87e | 2008-11-27 21:10:08 +0300 | [diff] [blame] | 919 | SWAPGS |
Borislav Petkov | 42c748bb | 2016-04-07 17:31:50 -0700 | [diff] [blame] | 920 | .Lgs_change: |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 921 | movl %edi, %gs |
Borislav Petkov | 96e5d28 | 2016-04-07 17:31:49 -0700 | [diff] [blame] | 922 | 2: ALTERNATIVE "", "mfence", X86_BUG_SWAPGS_FENCE |
Glauber de Oliveira Costa | 72fe485 | 2008-01-30 13:32:08 +0100 | [diff] [blame] | 923 | SWAPGS |
Ingo Molnar | 131484c | 2015-05-28 12:21:47 +0200 | [diff] [blame] | 924 | popfq |
Cyrill Gorcunov | 9f1e87e | 2008-11-27 21:10:08 +0300 | [diff] [blame] | 925 | ret |
Alexander van Heukelum | 6efdcfa | 2008-11-23 10:15:32 +0100 | [diff] [blame] | 926 | END(native_load_gs_index) |
Al Viro | 784d569 | 2016-01-11 11:04:34 -0500 | [diff] [blame] | 927 | EXPORT_SYMBOL(native_load_gs_index) |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 928 | |
Borislav Petkov | 42c748bb | 2016-04-07 17:31:50 -0700 | [diff] [blame] | 929 | _ASM_EXTABLE(.Lgs_change, bad_gs) |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 930 | .section .fixup, "ax" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 931 | /* running with kernelgs */ |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 932 | bad_gs: |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 933 | SWAPGS /* switch back to user gs */ |
Andy Lutomirski | b038c84 | 2016-04-26 12:23:27 -0700 | [diff] [blame] | 934 | .macro ZAP_GS |
| 935 | /* This can't be a string because the preprocessor needs to see it. */ |
| 936 | movl $__USER_DS, %eax |
| 937 | movl %eax, %gs |
| 938 | .endm |
| 939 | ALTERNATIVE "", "ZAP_GS", X86_BUG_NULL_SEG |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 940 | xorl %eax, %eax |
| 941 | movl %eax, %gs |
| 942 | jmp 2b |
Cyrill Gorcunov | 9f1e87e | 2008-11-27 21:10:08 +0300 | [diff] [blame] | 943 | .previous |
Alexander van Heukelum | 0bd7b79 | 2008-11-16 15:29:00 +0100 | [diff] [blame] | 944 | |
Andi Kleen | 2699500 | 2006-08-02 22:37:28 +0200 | [diff] [blame] | 945 | /* Call softirq on interrupt stack. Interrupts are off. */ |
Frederic Weisbecker | 7d65f4a | 2013-09-05 15:49:45 +0200 | [diff] [blame] | 946 | ENTRY(do_softirq_own_stack) |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 947 | pushq %rbp |
| 948 | mov %rsp, %rbp |
| 949 | incl PER_CPU_VAR(irq_count) |
| 950 | cmove PER_CPU_VAR(irq_stack_ptr), %rsp |
| 951 | push %rbp /* frame pointer backlink */ |
| 952 | call __do_softirq |
Andi Kleen | 2699500 | 2006-08-02 22:37:28 +0200 | [diff] [blame] | 953 | leaveq |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 954 | decl PER_CPU_VAR(irq_count) |
Andi Kleen | ed6b676 | 2005-07-28 21:15:49 -0700 | [diff] [blame] | 955 | ret |
Frederic Weisbecker | 7d65f4a | 2013-09-05 15:49:45 +0200 | [diff] [blame] | 956 | END(do_softirq_own_stack) |
Andi Kleen | 75154f4 | 2007-06-23 02:29:25 +0200 | [diff] [blame] | 957 | |
Jeremy Fitzhardinge | 3d75e1b | 2008-07-08 15:06:49 -0700 | [diff] [blame] | 958 | #ifdef CONFIG_XEN |
Andy Lutomirski | cb5dd2c | 2014-05-21 15:07:08 -0700 | [diff] [blame] | 959 | idtentry xen_hypervisor_callback xen_do_hypervisor_callback has_error_code=0 |
Jeremy Fitzhardinge | 3d75e1b | 2008-07-08 15:06:49 -0700 | [diff] [blame] | 960 | |
| 961 | /* |
Cyrill Gorcunov | 9f1e87e | 2008-11-27 21:10:08 +0300 | [diff] [blame] | 962 | * A note on the "critical region" in our callback handler. |
| 963 | * We want to avoid stacking callback handlers due to events occurring |
| 964 | * during handling of the last event. To do this, we keep events disabled |
| 965 | * until we've done all processing. HOWEVER, we must enable events before |
| 966 | * popping the stack frame (can't be done atomically) and so it would still |
| 967 | * be possible to get enough handler activations to overflow the stack. |
| 968 | * Although unlikely, bugs of that kind are hard to track down, so we'd |
| 969 | * like to avoid the possibility. |
| 970 | * So, on entry to the handler we detect whether we interrupted an |
| 971 | * existing activation in its critical region -- if so, we pop the current |
| 972 | * activation and restart the handler using the previous one. |
| 973 | */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 974 | ENTRY(xen_do_hypervisor_callback) /* do_hypervisor_callback(struct *pt_regs) */ |
| 975 | |
Cyrill Gorcunov | 9f1e87e | 2008-11-27 21:10:08 +0300 | [diff] [blame] | 976 | /* |
| 977 | * Since we don't modify %rdi, evtchn_do_upall(struct *pt_regs) will |
| 978 | * see the correct pointer to the pt_regs |
| 979 | */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 980 | movq %rdi, %rsp /* we don't return, adjust the stack frame */ |
| 981 | 11: incl PER_CPU_VAR(irq_count) |
| 982 | movq %rsp, %rbp |
| 983 | cmovzq PER_CPU_VAR(irq_stack_ptr), %rsp |
| 984 | pushq %rbp /* frame pointer backlink */ |
| 985 | call xen_evtchn_do_upcall |
| 986 | popq %rsp |
| 987 | decl PER_CPU_VAR(irq_count) |
David Vrabel | fdfd811 | 2015-02-19 15:23:17 +0000 | [diff] [blame] | 988 | #ifndef CONFIG_PREEMPT |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 989 | call xen_maybe_preempt_hcall |
David Vrabel | fdfd811 | 2015-02-19 15:23:17 +0000 | [diff] [blame] | 990 | #endif |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 991 | jmp error_exit |
Alexander van Heukelum | 371c394 | 2011-03-11 21:59:38 +0100 | [diff] [blame] | 992 | END(xen_do_hypervisor_callback) |
Jeremy Fitzhardinge | 3d75e1b | 2008-07-08 15:06:49 -0700 | [diff] [blame] | 993 | |
| 994 | /* |
Cyrill Gorcunov | 9f1e87e | 2008-11-27 21:10:08 +0300 | [diff] [blame] | 995 | * Hypervisor uses this for application faults while it executes. |
| 996 | * We get here for two reasons: |
| 997 | * 1. Fault while reloading DS, ES, FS or GS |
| 998 | * 2. Fault while executing IRET |
| 999 | * Category 1 we do not need to fix up as Xen has already reloaded all segment |
| 1000 | * registers that could be reloaded and zeroed the others. |
| 1001 | * Category 2 we fix up by killing the current process. We cannot use the |
| 1002 | * normal Linux return path in this case because if we use the IRET hypercall |
| 1003 | * to pop the stack frame we end up in an infinite loop of failsafe callbacks. |
| 1004 | * We distinguish between categories by comparing each saved segment register |
| 1005 | * with its current contents: any discrepancy means we in category 1. |
| 1006 | */ |
Jeremy Fitzhardinge | 3d75e1b | 2008-07-08 15:06:49 -0700 | [diff] [blame] | 1007 | ENTRY(xen_failsafe_callback) |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1008 | movl %ds, %ecx |
| 1009 | cmpw %cx, 0x10(%rsp) |
| 1010 | jne 1f |
| 1011 | movl %es, %ecx |
| 1012 | cmpw %cx, 0x18(%rsp) |
| 1013 | jne 1f |
| 1014 | movl %fs, %ecx |
| 1015 | cmpw %cx, 0x20(%rsp) |
| 1016 | jne 1f |
| 1017 | movl %gs, %ecx |
| 1018 | cmpw %cx, 0x28(%rsp) |
| 1019 | jne 1f |
Jeremy Fitzhardinge | 3d75e1b | 2008-07-08 15:06:49 -0700 | [diff] [blame] | 1020 | /* All segments match their saved values => Category 2 (Bad IRET). */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1021 | movq (%rsp), %rcx |
| 1022 | movq 8(%rsp), %r11 |
| 1023 | addq $0x30, %rsp |
| 1024 | pushq $0 /* RIP */ |
| 1025 | pushq %r11 |
| 1026 | pushq %rcx |
| 1027 | jmp general_protection |
Jeremy Fitzhardinge | 3d75e1b | 2008-07-08 15:06:49 -0700 | [diff] [blame] | 1028 | 1: /* Segment mismatch => Category 1 (Bad segment). Retry the IRET. */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1029 | movq (%rsp), %rcx |
| 1030 | movq 8(%rsp), %r11 |
| 1031 | addq $0x30, %rsp |
| 1032 | pushq $-1 /* orig_ax = -1 => not a system call */ |
Denys Vlasenko | 76f5df4 | 2015-02-26 14:40:27 -0800 | [diff] [blame] | 1033 | ALLOC_PT_GPREGS_ON_STACK |
| 1034 | SAVE_C_REGS |
| 1035 | SAVE_EXTRA_REGS |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1036 | jmp error_exit |
Jeremy Fitzhardinge | 3d75e1b | 2008-07-08 15:06:49 -0700 | [diff] [blame] | 1037 | END(xen_failsafe_callback) |
| 1038 | |
Seiji Aguchi | cf910e8 | 2013-06-20 11:46:53 -0400 | [diff] [blame] | 1039 | apicinterrupt3 HYPERVISOR_CALLBACK_VECTOR \ |
Sheng Yang | 38e20b0 | 2010-05-14 12:40:51 +0100 | [diff] [blame] | 1040 | xen_hvm_callback_vector xen_evtchn_do_upcall |
| 1041 | |
Jeremy Fitzhardinge | 3d75e1b | 2008-07-08 15:06:49 -0700 | [diff] [blame] | 1042 | #endif /* CONFIG_XEN */ |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1043 | |
K. Y. Srinivasan | bc2b033 | 2013-02-03 17:22:39 -0800 | [diff] [blame] | 1044 | #if IS_ENABLED(CONFIG_HYPERV) |
Seiji Aguchi | cf910e8 | 2013-06-20 11:46:53 -0400 | [diff] [blame] | 1045 | apicinterrupt3 HYPERVISOR_CALLBACK_VECTOR \ |
K. Y. Srinivasan | bc2b033 | 2013-02-03 17:22:39 -0800 | [diff] [blame] | 1046 | hyperv_callback_vector hyperv_vector_handler |
| 1047 | #endif /* CONFIG_HYPERV */ |
| 1048 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1049 | idtentry debug do_debug has_error_code=0 paranoid=1 shift_ist=DEBUG_STACK |
| 1050 | idtentry int3 do_int3 has_error_code=0 paranoid=1 shift_ist=DEBUG_STACK |
| 1051 | idtentry stack_segment do_stack_segment has_error_code=1 |
| 1052 | |
Jeremy Fitzhardinge | 6cac5a9 | 2009-03-29 19:56:29 -0700 | [diff] [blame] | 1053 | #ifdef CONFIG_XEN |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1054 | idtentry xen_debug do_debug has_error_code=0 |
| 1055 | idtentry xen_int3 do_int3 has_error_code=0 |
| 1056 | idtentry xen_stack_segment do_stack_segment has_error_code=1 |
Jeremy Fitzhardinge | 6cac5a9 | 2009-03-29 19:56:29 -0700 | [diff] [blame] | 1057 | #endif |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1058 | |
| 1059 | idtentry general_protection do_general_protection has_error_code=1 |
| 1060 | trace_idtentry page_fault do_page_fault has_error_code=1 |
| 1061 | |
Gleb Natapov | 631bc48 | 2010-10-14 11:22:52 +0200 | [diff] [blame] | 1062 | #ifdef CONFIG_KVM_GUEST |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1063 | idtentry async_page_fault do_async_page_fault has_error_code=1 |
Gleb Natapov | 631bc48 | 2010-10-14 11:22:52 +0200 | [diff] [blame] | 1064 | #endif |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1065 | |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1066 | #ifdef CONFIG_X86_MCE |
Thomas Gleixner | c5aa687 | 2018-01-18 16:28:26 +0100 | [diff] [blame] | 1067 | idtentry machine_check do_mce has_error_code=0 paranoid=1 |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1068 | #endif |
| 1069 | |
Denys Vlasenko | ebfc453 | 2015-02-26 14:40:34 -0800 | [diff] [blame] | 1070 | /* |
| 1071 | * Save all registers in pt_regs, and switch gs if needed. |
| 1072 | * Use slow, but surefire "are we in kernel?" check. |
Hugh Dickins | 05ddad1 | 2017-09-26 18:43:07 -0700 | [diff] [blame] | 1073 | * |
| 1074 | * Return: ebx=0: needs swapgs but not SWITCH_USER_CR3 in paranoid_exit |
| 1075 | * ebx=1: needs neither swapgs nor SWITCH_USER_CR3 in paranoid_exit |
| 1076 | * ebx=2: needs both swapgs and SWITCH_USER_CR3 in paranoid_exit |
| 1077 | * ebx=3: needs SWITCH_USER_CR3 but not swapgs in paranoid_exit |
Denys Vlasenko | ebfc453 | 2015-02-26 14:40:34 -0800 | [diff] [blame] | 1078 | */ |
| 1079 | ENTRY(paranoid_entry) |
Denys Vlasenko | 1eeb207 | 2015-02-26 14:40:33 -0800 | [diff] [blame] | 1080 | cld |
| 1081 | SAVE_C_REGS 8 |
| 1082 | SAVE_EXTRA_REGS 8 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1083 | movl $1, %ebx |
| 1084 | movl $MSR_GS_BASE, %ecx |
Denys Vlasenko | 1eeb207 | 2015-02-26 14:40:33 -0800 | [diff] [blame] | 1085 | rdmsr |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1086 | testl %edx, %edx |
| 1087 | js 1f /* negative -> in kernel */ |
Denys Vlasenko | 1eeb207 | 2015-02-26 14:40:33 -0800 | [diff] [blame] | 1088 | SWAPGS |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1089 | xorl %ebx, %ebx |
Hugh Dickins | 05ddad1 | 2017-09-26 18:43:07 -0700 | [diff] [blame] | 1090 | 1: |
Kees Cook | e71fac0 | 2018-01-03 10:17:35 -0800 | [diff] [blame] | 1091 | #ifdef CONFIG_PAGE_TABLE_ISOLATION |
Hugh Dickins | 05ddad1 | 2017-09-26 18:43:07 -0700 | [diff] [blame] | 1092 | /* |
| 1093 | * We might have come in between a swapgs and a SWITCH_KERNEL_CR3 |
| 1094 | * on entry, or between a SWITCH_USER_CR3 and a swapgs on exit. |
| 1095 | * Do a conditional SWITCH_KERNEL_CR3: this could safely be done |
| 1096 | * unconditionally, but we need to find out whether the reverse |
| 1097 | * should be done on return (conveyed to paranoid_exit in %ebx). |
| 1098 | */ |
Hugh Dickins | 23e0943 | 2017-09-24 16:59:49 -0700 | [diff] [blame] | 1099 | ALTERNATIVE "jmp 2f", "movq %cr3, %rax", X86_FEATURE_KAISER |
Hugh Dickins | 05ddad1 | 2017-09-26 18:43:07 -0700 | [diff] [blame] | 1100 | testl $KAISER_SHADOW_PGD_OFFSET, %eax |
| 1101 | jz 2f |
| 1102 | orl $2, %ebx |
| 1103 | andq $(~(X86_CR3_PCID_ASID_MASK | KAISER_SHADOW_PGD_OFFSET)), %rax |
Hugh Dickins | 169b369 | 2017-10-03 20:49:04 -0700 | [diff] [blame] | 1104 | /* If PCID enabled, set X86_CR3_PCID_NOFLUSH_BIT */ |
| 1105 | ALTERNATIVE "", "bts $63, %rax", X86_FEATURE_PCID |
Hugh Dickins | 05ddad1 | 2017-09-26 18:43:07 -0700 | [diff] [blame] | 1106 | movq %rax, %cr3 |
| 1107 | 2: |
| 1108 | #endif |
| 1109 | ret |
Denys Vlasenko | ebfc453 | 2015-02-26 14:40:34 -0800 | [diff] [blame] | 1110 | END(paranoid_entry) |
Denys Vlasenko | 1eeb207 | 2015-02-26 14:40:33 -0800 | [diff] [blame] | 1111 | |
Denys Vlasenko | ebfc453 | 2015-02-26 14:40:34 -0800 | [diff] [blame] | 1112 | /* |
| 1113 | * "Paranoid" exit path from exception stack. This is invoked |
| 1114 | * only on return from non-NMI IST interrupts that came |
| 1115 | * from kernel space. |
| 1116 | * |
| 1117 | * We may be returning to very strange contexts (e.g. very early |
| 1118 | * in syscall entry), so checking for preemption here would |
| 1119 | * be complicated. Fortunately, we there's no good reason |
| 1120 | * to try to handle preemption here. |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1121 | * |
Hugh Dickins | 05ddad1 | 2017-09-26 18:43:07 -0700 | [diff] [blame] | 1122 | * On entry: ebx=0: needs swapgs but not SWITCH_USER_CR3 |
| 1123 | * ebx=1: needs neither swapgs nor SWITCH_USER_CR3 |
| 1124 | * ebx=2: needs both swapgs and SWITCH_USER_CR3 |
| 1125 | * ebx=3: needs SWITCH_USER_CR3 but not swapgs |
Denys Vlasenko | ebfc453 | 2015-02-26 14:40:34 -0800 | [diff] [blame] | 1126 | */ |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1127 | ENTRY(paranoid_exit) |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1128 | DISABLE_INTERRUPTS(CLBR_NONE) |
Steven Rostedt | 5963e31 | 2012-05-30 11:54:53 -0400 | [diff] [blame] | 1129 | TRACE_IRQS_OFF_DEBUG |
Denys Vlasenko | f2db938 | 2015-02-26 14:40:30 -0800 | [diff] [blame] | 1130 | TRACE_IRQS_IRETQ_DEBUG |
Kees Cook | e71fac0 | 2018-01-03 10:17:35 -0800 | [diff] [blame] | 1131 | #ifdef CONFIG_PAGE_TABLE_ISOLATION |
Hugh Dickins | 23e0943 | 2017-09-24 16:59:49 -0700 | [diff] [blame] | 1132 | /* No ALTERNATIVE for X86_FEATURE_KAISER: paranoid_entry sets %ebx */ |
Hugh Dickins | 05ddad1 | 2017-09-26 18:43:07 -0700 | [diff] [blame] | 1133 | testl $2, %ebx /* SWITCH_USER_CR3 needed? */ |
| 1134 | jz paranoid_exit_no_switch |
| 1135 | SWITCH_USER_CR3 |
| 1136 | paranoid_exit_no_switch: |
| 1137 | #endif |
| 1138 | testl $1, %ebx /* swapgs needed? */ |
| 1139 | jnz paranoid_exit_no_swapgs |
| 1140 | SWAPGS_UNSAFE_STACK |
| 1141 | paranoid_exit_no_swapgs: |
Denys Vlasenko | 76f5df4 | 2015-02-26 14:40:27 -0800 | [diff] [blame] | 1142 | RESTORE_EXTRA_REGS |
| 1143 | RESTORE_C_REGS |
| 1144 | REMOVE_PT_GPREGS_FROM_STACK 8 |
Andy Lutomirski | 48e08d0 | 2014-11-11 12:49:41 -0800 | [diff] [blame] | 1145 | INTERRUPT_RETURN |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1146 | END(paranoid_exit) |
| 1147 | |
| 1148 | /* |
Denys Vlasenko | ebfc453 | 2015-02-26 14:40:34 -0800 | [diff] [blame] | 1149 | * Save all registers in pt_regs, and switch gs if needed. |
Andy Lutomirski | 539f511 | 2015-06-09 12:36:01 -0700 | [diff] [blame] | 1150 | * Return: EBX=0: came from user mode; EBX=1: otherwise |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1151 | */ |
| 1152 | ENTRY(error_entry) |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1153 | cld |
Denys Vlasenko | 76f5df4 | 2015-02-26 14:40:27 -0800 | [diff] [blame] | 1154 | SAVE_C_REGS 8 |
| 1155 | SAVE_EXTRA_REGS 8 |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1156 | /* |
| 1157 | * error_entry() always returns with a kernel gsbase and |
| 1158 | * CR3. We must also have a kernel CR3/gsbase before |
| 1159 | * calling TRACE_IRQS_*. Just unconditionally switch to |
| 1160 | * the kernel CR3 here. |
| 1161 | */ |
| 1162 | SWITCH_KERNEL_CR3 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1163 | xorl %ebx, %ebx |
Denys Vlasenko | 03335e9 | 2015-04-27 15:21:52 +0200 | [diff] [blame] | 1164 | testb $3, CS+8(%rsp) |
Andy Lutomirski | cb6f64e | 2015-07-03 12:44:27 -0700 | [diff] [blame] | 1165 | jz .Lerror_kernelspace |
Andy Lutomirski | 539f511 | 2015-06-09 12:36:01 -0700 | [diff] [blame] | 1166 | |
Andy Lutomirski | cb6f64e | 2015-07-03 12:44:27 -0700 | [diff] [blame] | 1167 | /* |
| 1168 | * We entered from user mode or we're pretending to have entered |
| 1169 | * from user mode due to an IRET fault. |
| 1170 | */ |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1171 | SWAPGS |
Andy Lutomirski | 539f511 | 2015-06-09 12:36:01 -0700 | [diff] [blame] | 1172 | |
Andy Lutomirski | cb6f64e | 2015-07-03 12:44:27 -0700 | [diff] [blame] | 1173 | .Lerror_entry_from_usermode_after_swapgs: |
Andy Lutomirski | f107505 | 2015-11-12 12:59:00 -0800 | [diff] [blame] | 1174 | /* |
| 1175 | * We need to tell lockdep that IRQs are off. We can't do this until |
| 1176 | * we fix gsbase, and we should do it before enter_from_user_mode |
| 1177 | * (which can take locks). |
| 1178 | */ |
| 1179 | TRACE_IRQS_OFF |
Andy Lutomirski | 478dc89 | 2015-11-12 12:59:04 -0800 | [diff] [blame] | 1180 | CALL_enter_from_user_mode |
Andy Lutomirski | f107505 | 2015-11-12 12:59:00 -0800 | [diff] [blame] | 1181 | ret |
Andy Lutomirski | 02bc776 | 2015-07-03 12:44:31 -0700 | [diff] [blame] | 1182 | |
Andy Lutomirski | cb6f64e | 2015-07-03 12:44:27 -0700 | [diff] [blame] | 1183 | .Lerror_entry_done: |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1184 | TRACE_IRQS_OFF |
| 1185 | ret |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1186 | |
Denys Vlasenko | ebfc453 | 2015-02-26 14:40:34 -0800 | [diff] [blame] | 1187 | /* |
| 1188 | * There are two places in the kernel that can potentially fault with |
| 1189 | * usergs. Handle them here. B stepping K8s sometimes report a |
| 1190 | * truncated RIP for IRET exceptions returning to compat mode. Check |
| 1191 | * for these here too. |
| 1192 | */ |
Andy Lutomirski | cb6f64e | 2015-07-03 12:44:27 -0700 | [diff] [blame] | 1193 | .Lerror_kernelspace: |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1194 | incl %ebx |
| 1195 | leaq native_irq_return_iret(%rip), %rcx |
| 1196 | cmpq %rcx, RIP+8(%rsp) |
Andy Lutomirski | cb6f64e | 2015-07-03 12:44:27 -0700 | [diff] [blame] | 1197 | je .Lerror_bad_iret |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1198 | movl %ecx, %eax /* zero extend */ |
| 1199 | cmpq %rax, RIP+8(%rsp) |
Andy Lutomirski | cb6f64e | 2015-07-03 12:44:27 -0700 | [diff] [blame] | 1200 | je .Lbstep_iret |
Borislav Petkov | 42c748bb | 2016-04-07 17:31:50 -0700 | [diff] [blame] | 1201 | cmpq $.Lgs_change, RIP+8(%rsp) |
Andy Lutomirski | cb6f64e | 2015-07-03 12:44:27 -0700 | [diff] [blame] | 1202 | jne .Lerror_entry_done |
Andy Lutomirski | 539f511 | 2015-06-09 12:36:01 -0700 | [diff] [blame] | 1203 | |
| 1204 | /* |
Borislav Petkov | 42c748bb | 2016-04-07 17:31:50 -0700 | [diff] [blame] | 1205 | * hack: .Lgs_change can fail with user gsbase. If this happens, fix up |
Andy Lutomirski | 539f511 | 2015-06-09 12:36:01 -0700 | [diff] [blame] | 1206 | * gsbase and proceed. We'll fix up the exception and land in |
Borislav Petkov | 42c748bb | 2016-04-07 17:31:50 -0700 | [diff] [blame] | 1207 | * .Lgs_change's error handler with kernel gsbase. |
Andy Lutomirski | 539f511 | 2015-06-09 12:36:01 -0700 | [diff] [blame] | 1208 | */ |
Wanpeng Li | 2fa5f04 | 2016-09-30 09:01:06 +0800 | [diff] [blame] | 1209 | SWAPGS |
| 1210 | jmp .Lerror_entry_done |
Brian Gerst | ae24ffe | 2009-10-12 10:18:23 -0400 | [diff] [blame] | 1211 | |
Andy Lutomirski | cb6f64e | 2015-07-03 12:44:27 -0700 | [diff] [blame] | 1212 | .Lbstep_iret: |
Brian Gerst | ae24ffe | 2009-10-12 10:18:23 -0400 | [diff] [blame] | 1213 | /* Fix truncated RIP */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1214 | movq %rcx, RIP+8(%rsp) |
Andy Lutomirski | b645af2 | 2014-11-22 18:00:33 -0800 | [diff] [blame] | 1215 | /* fall through */ |
| 1216 | |
Andy Lutomirski | cb6f64e | 2015-07-03 12:44:27 -0700 | [diff] [blame] | 1217 | .Lerror_bad_iret: |
Andy Lutomirski | 539f511 | 2015-06-09 12:36:01 -0700 | [diff] [blame] | 1218 | /* |
| 1219 | * We came from an IRET to user mode, so we have user gsbase. |
| 1220 | * Switch to kernel gsbase: |
| 1221 | */ |
Andy Lutomirski | b645af2 | 2014-11-22 18:00:33 -0800 | [diff] [blame] | 1222 | SWAPGS |
Andy Lutomirski | 539f511 | 2015-06-09 12:36:01 -0700 | [diff] [blame] | 1223 | |
| 1224 | /* |
| 1225 | * Pretend that the exception came from user mode: set up pt_regs |
| 1226 | * as if we faulted immediately after IRET and clear EBX so that |
| 1227 | * error_exit knows that we will be returning to user mode. |
| 1228 | */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1229 | mov %rsp, %rdi |
| 1230 | call fixup_bad_iret |
| 1231 | mov %rax, %rsp |
Andy Lutomirski | 539f511 | 2015-06-09 12:36:01 -0700 | [diff] [blame] | 1232 | decl %ebx |
Andy Lutomirski | cb6f64e | 2015-07-03 12:44:27 -0700 | [diff] [blame] | 1233 | jmp .Lerror_entry_from_usermode_after_swapgs |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1234 | END(error_entry) |
| 1235 | |
| 1236 | |
Andy Lutomirski | 539f511 | 2015-06-09 12:36:01 -0700 | [diff] [blame] | 1237 | /* |
Nicolas Iooss | 75ca5b2 | 2016-07-29 13:39:51 +0200 | [diff] [blame] | 1238 | * On entry, EBX is a "return to kernel mode" flag: |
Andy Lutomirski | 539f511 | 2015-06-09 12:36:01 -0700 | [diff] [blame] | 1239 | * 1: already in kernel mode, don't need SWAPGS |
| 1240 | * 0: user gsbase is loaded, we need SWAPGS and standard preparation for return to usermode |
| 1241 | */ |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1242 | ENTRY(error_exit) |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1243 | movl %ebx, %eax |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1244 | DISABLE_INTERRUPTS(CLBR_NONE) |
| 1245 | TRACE_IRQS_OFF |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1246 | testl %eax, %eax |
| 1247 | jnz retint_kernel |
| 1248 | jmp retint_user |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1249 | END(error_exit) |
| 1250 | |
Denys Vlasenko | 0784b36 | 2015-04-01 16:50:57 +0200 | [diff] [blame] | 1251 | /* Runs on exception stack */ |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1252 | ENTRY(nmi) |
Andy Lutomirski | fc57a7c | 2015-09-20 16:32:04 -0700 | [diff] [blame] | 1253 | /* |
| 1254 | * Fix up the exception frame if we're on Xen. |
| 1255 | * PARAVIRT_ADJUST_EXCEPTION_FRAME is guaranteed to push at most |
| 1256 | * one value to the stack on native, so it may clobber the rdx |
| 1257 | * scratch slot, but it won't clobber any of the important |
| 1258 | * slots past it. |
| 1259 | * |
| 1260 | * Xen is a different story, because the Xen frame itself overlaps |
| 1261 | * the "NMI executing" variable. |
| 1262 | */ |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1263 | PARAVIRT_ADJUST_EXCEPTION_FRAME |
Andy Lutomirski | fc57a7c | 2015-09-20 16:32:04 -0700 | [diff] [blame] | 1264 | |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1265 | /* |
| 1266 | * We allow breakpoints in NMIs. If a breakpoint occurs, then |
| 1267 | * the iretq it performs will take us out of NMI context. |
| 1268 | * This means that we can have nested NMIs where the next |
| 1269 | * NMI is using the top of the stack of the previous NMI. We |
| 1270 | * can't let it execute because the nested NMI will corrupt the |
| 1271 | * stack of the previous NMI. NMI handlers are not re-entrant |
| 1272 | * anyway. |
| 1273 | * |
| 1274 | * To handle this case we do the following: |
| 1275 | * Check the a special location on the stack that contains |
| 1276 | * a variable that is set when NMIs are executing. |
| 1277 | * The interrupted task's stack is also checked to see if it |
| 1278 | * is an NMI stack. |
| 1279 | * If the variable is not set and the stack is not the NMI |
| 1280 | * stack then: |
| 1281 | * o Set the special variable on the stack |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1282 | * o Copy the interrupt frame into an "outermost" location on the |
| 1283 | * stack |
| 1284 | * o Copy the interrupt frame into an "iret" location on the stack |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1285 | * o Continue processing the NMI |
| 1286 | * If the variable is set or the previous stack is the NMI stack: |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1287 | * o Modify the "iret" location to jump to the repeat_nmi |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1288 | * o return back to the first NMI |
| 1289 | * |
| 1290 | * Now on exit of the first NMI, we first clear the stack variable |
| 1291 | * The NMI stack will tell any nested NMIs at that point that it is |
| 1292 | * nested. Then we pop the stack normally with iret, and if there was |
| 1293 | * a nested NMI that updated the copy interrupt stack frame, a |
| 1294 | * jump will be made to the repeat_nmi code that will handle the second |
| 1295 | * NMI. |
Andy Lutomirski | 9b6e6a8 | 2015-07-15 10:29:35 -0700 | [diff] [blame] | 1296 | * |
| 1297 | * However, espfix prevents us from directly returning to userspace |
| 1298 | * with a single IRET instruction. Similarly, IRET to user mode |
| 1299 | * can fault. We therefore handle NMIs from user space like |
| 1300 | * other IST entries. |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1301 | */ |
| 1302 | |
Andy Lutomirski | 10d5bf2 | 2017-08-07 19:43:13 -0700 | [diff] [blame] | 1303 | ASM_CLAC |
| 1304 | |
Denys Vlasenko | 146b2b0 | 2015-03-25 18:18:13 +0100 | [diff] [blame] | 1305 | /* Use %rdx as our temp variable throughout */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1306 | pushq %rdx |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1307 | |
Andy Lutomirski | 9b6e6a8 | 2015-07-15 10:29:35 -0700 | [diff] [blame] | 1308 | testb $3, CS-RIP+8(%rsp) |
| 1309 | jz .Lnmi_from_kernel |
Steven Rostedt | 45d5a16 | 2012-02-19 16:43:37 -0500 | [diff] [blame] | 1310 | |
| 1311 | /* |
Andy Lutomirski | 9b6e6a8 | 2015-07-15 10:29:35 -0700 | [diff] [blame] | 1312 | * NMI from user mode. We need to run on the thread stack, but we |
| 1313 | * can't go through the normal entry paths: NMIs are masked, and |
| 1314 | * we don't want to enable interrupts, because then we'll end |
| 1315 | * up in an awkward situation in which IRQs are on but NMIs |
| 1316 | * are off. |
Andy Lutomirski | 83c133c | 2015-09-20 16:32:05 -0700 | [diff] [blame] | 1317 | * |
| 1318 | * We also must not push anything to the stack before switching |
| 1319 | * stacks lest we corrupt the "NMI executing" variable. |
Andy Lutomirski | 9b6e6a8 | 2015-07-15 10:29:35 -0700 | [diff] [blame] | 1320 | */ |
| 1321 | |
Andy Lutomirski | 83c133c | 2015-09-20 16:32:05 -0700 | [diff] [blame] | 1322 | SWAPGS_UNSAFE_STACK |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1323 | /* |
| 1324 | * percpu variables are mapped with user CR3, so no need |
| 1325 | * to switch CR3 here. |
| 1326 | */ |
Andy Lutomirski | 9b6e6a8 | 2015-07-15 10:29:35 -0700 | [diff] [blame] | 1327 | cld |
| 1328 | movq %rsp, %rdx |
| 1329 | movq PER_CPU_VAR(cpu_current_top_of_stack), %rsp |
| 1330 | pushq 5*8(%rdx) /* pt_regs->ss */ |
| 1331 | pushq 4*8(%rdx) /* pt_regs->rsp */ |
| 1332 | pushq 3*8(%rdx) /* pt_regs->flags */ |
| 1333 | pushq 2*8(%rdx) /* pt_regs->cs */ |
| 1334 | pushq 1*8(%rdx) /* pt_regs->rip */ |
| 1335 | pushq $-1 /* pt_regs->orig_ax */ |
| 1336 | pushq %rdi /* pt_regs->di */ |
| 1337 | pushq %rsi /* pt_regs->si */ |
| 1338 | pushq (%rdx) /* pt_regs->dx */ |
| 1339 | pushq %rcx /* pt_regs->cx */ |
| 1340 | pushq %rax /* pt_regs->ax */ |
| 1341 | pushq %r8 /* pt_regs->r8 */ |
| 1342 | pushq %r9 /* pt_regs->r9 */ |
| 1343 | pushq %r10 /* pt_regs->r10 */ |
| 1344 | pushq %r11 /* pt_regs->r11 */ |
| 1345 | pushq %rbx /* pt_regs->rbx */ |
| 1346 | pushq %rbp /* pt_regs->rbp */ |
| 1347 | pushq %r12 /* pt_regs->r12 */ |
| 1348 | pushq %r13 /* pt_regs->r13 */ |
| 1349 | pushq %r14 /* pt_regs->r14 */ |
| 1350 | pushq %r15 /* pt_regs->r15 */ |
| 1351 | |
| 1352 | /* |
| 1353 | * At this point we no longer need to worry about stack damage |
| 1354 | * due to nesting -- we're on the normal thread stack and we're |
| 1355 | * done with the NMI stack. |
| 1356 | */ |
| 1357 | |
| 1358 | movq %rsp, %rdi |
| 1359 | movq $-1, %rsi |
Kees Cook | e71fac0 | 2018-01-03 10:17:35 -0800 | [diff] [blame] | 1360 | #ifdef CONFIG_PAGE_TABLE_ISOLATION |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1361 | /* Unconditionally use kernel CR3 for do_nmi() */ |
| 1362 | /* %rax is saved above, so OK to clobber here */ |
Hugh Dickins | 23e0943 | 2017-09-24 16:59:49 -0700 | [diff] [blame] | 1363 | ALTERNATIVE "jmp 2f", "movq %cr3, %rax", X86_FEATURE_KAISER |
Hugh Dickins | d0142ce | 2017-08-27 16:24:27 -0700 | [diff] [blame] | 1364 | /* If PCID enabled, NOFLUSH now and NOFLUSH on return */ |
Hugh Dickins | 169b369 | 2017-10-03 20:49:04 -0700 | [diff] [blame] | 1365 | ALTERNATIVE "", "bts $63, %rax", X86_FEATURE_PCID |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1366 | pushq %rax |
Hugh Dickins | 2684b12 | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1367 | /* mask off "user" bit of pgd address and 12 PCID bits: */ |
| 1368 | andq $(~(X86_CR3_PCID_ASID_MASK | KAISER_SHADOW_PGD_OFFSET)), %rax |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1369 | movq %rax, %cr3 |
Hugh Dickins | 23e0943 | 2017-09-24 16:59:49 -0700 | [diff] [blame] | 1370 | 2: |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1371 | #endif |
Andy Lutomirski | 9b6e6a8 | 2015-07-15 10:29:35 -0700 | [diff] [blame] | 1372 | call do_nmi |
Hugh Dickins | 1937794 | 2017-09-21 20:39:56 -0700 | [diff] [blame] | 1373 | |
Kees Cook | e71fac0 | 2018-01-03 10:17:35 -0800 | [diff] [blame] | 1374 | #ifdef CONFIG_PAGE_TABLE_ISOLATION |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1375 | /* |
| 1376 | * Unconditionally restore CR3. I know we return to |
| 1377 | * kernel code that needs user CR3, but do we ever return |
| 1378 | * to "user mode" where we need the kernel CR3? |
| 1379 | */ |
Hugh Dickins | 23e0943 | 2017-09-24 16:59:49 -0700 | [diff] [blame] | 1380 | ALTERNATIVE "", "popq %rax; movq %rax, %cr3", X86_FEATURE_KAISER |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1381 | #endif |
Andy Lutomirski | 9b6e6a8 | 2015-07-15 10:29:35 -0700 | [diff] [blame] | 1382 | |
| 1383 | /* |
| 1384 | * Return back to user mode. We must *not* do the normal exit |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1385 | * work, because we don't want to enable interrupts. Do not |
| 1386 | * switch to user CR3: we might be going back to kernel code |
| 1387 | * that had a user CR3 set. |
Andy Lutomirski | 9b6e6a8 | 2015-07-15 10:29:35 -0700 | [diff] [blame] | 1388 | */ |
| 1389 | SWAPGS |
| 1390 | jmp restore_c_regs_and_iret |
| 1391 | |
| 1392 | .Lnmi_from_kernel: |
| 1393 | /* |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1394 | * Here's what our stack frame will look like: |
| 1395 | * +---------------------------------------------------------+ |
| 1396 | * | original SS | |
| 1397 | * | original Return RSP | |
| 1398 | * | original RFLAGS | |
| 1399 | * | original CS | |
| 1400 | * | original RIP | |
| 1401 | * +---------------------------------------------------------+ |
| 1402 | * | temp storage for rdx | |
| 1403 | * +---------------------------------------------------------+ |
| 1404 | * | "NMI executing" variable | |
| 1405 | * +---------------------------------------------------------+ |
| 1406 | * | iret SS } Copied from "outermost" frame | |
| 1407 | * | iret Return RSP } on each loop iteration; overwritten | |
| 1408 | * | iret RFLAGS } by a nested NMI to force another | |
| 1409 | * | iret CS } iteration if needed. | |
| 1410 | * | iret RIP } | |
| 1411 | * +---------------------------------------------------------+ |
| 1412 | * | outermost SS } initialized in first_nmi; | |
| 1413 | * | outermost Return RSP } will not be changed before | |
| 1414 | * | outermost RFLAGS } NMI processing is done. | |
| 1415 | * | outermost CS } Copied to "iret" frame on each | |
| 1416 | * | outermost RIP } iteration. | |
| 1417 | * +---------------------------------------------------------+ |
| 1418 | * | pt_regs | |
| 1419 | * +---------------------------------------------------------+ |
| 1420 | * |
| 1421 | * The "original" frame is used by hardware. Before re-enabling |
| 1422 | * NMIs, we need to be done with it, and we need to leave enough |
| 1423 | * space for the asm code here. |
| 1424 | * |
| 1425 | * We return by executing IRET while RSP points to the "iret" frame. |
| 1426 | * That will either return for real or it will loop back into NMI |
| 1427 | * processing. |
| 1428 | * |
| 1429 | * The "outermost" frame is copied to the "iret" frame on each |
| 1430 | * iteration of the loop, so each iteration starts with the "iret" |
| 1431 | * frame pointing to the final return target. |
| 1432 | */ |
| 1433 | |
| 1434 | /* |
| 1435 | * Determine whether we're a nested NMI. |
| 1436 | * |
Andy Lutomirski | a27507c | 2015-07-15 10:29:37 -0700 | [diff] [blame] | 1437 | * If we interrupted kernel code between repeat_nmi and |
| 1438 | * end_repeat_nmi, then we are a nested NMI. We must not |
| 1439 | * modify the "iret" frame because it's being written by |
| 1440 | * the outer NMI. That's okay; the outer NMI handler is |
| 1441 | * about to about to call do_nmi anyway, so we can just |
| 1442 | * resume the outer NMI. |
| 1443 | */ |
| 1444 | |
| 1445 | movq $repeat_nmi, %rdx |
| 1446 | cmpq 8(%rsp), %rdx |
| 1447 | ja 1f |
| 1448 | movq $end_repeat_nmi, %rdx |
| 1449 | cmpq 8(%rsp), %rdx |
| 1450 | ja nested_nmi_out |
| 1451 | 1: |
| 1452 | |
| 1453 | /* |
| 1454 | * Now check "NMI executing". If it's set, then we're nested. |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1455 | * This will not detect if we interrupted an outer NMI just |
| 1456 | * before IRET. |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1457 | */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1458 | cmpl $1, -8(%rsp) |
| 1459 | je nested_nmi |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1460 | |
| 1461 | /* |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1462 | * Now test if the previous stack was an NMI stack. This covers |
| 1463 | * the case where we interrupt an outer NMI after it clears |
Andy Lutomirski | 810bc07 | 2015-07-15 10:29:38 -0700 | [diff] [blame] | 1464 | * "NMI executing" but before IRET. We need to be careful, though: |
| 1465 | * there is one case in which RSP could point to the NMI stack |
| 1466 | * despite there being no NMI active: naughty userspace controls |
| 1467 | * RSP at the very beginning of the SYSCALL targets. We can |
| 1468 | * pull a fast one on naughty userspace, though: we program |
| 1469 | * SYSCALL to mask DF, so userspace cannot cause DF to be set |
| 1470 | * if it controls the kernel's RSP. We set DF before we clear |
| 1471 | * "NMI executing". |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1472 | */ |
Denys Vlasenko | 0784b36 | 2015-04-01 16:50:57 +0200 | [diff] [blame] | 1473 | lea 6*8(%rsp), %rdx |
| 1474 | /* Compare the NMI stack (rdx) with the stack we came from (4*8(%rsp)) */ |
| 1475 | cmpq %rdx, 4*8(%rsp) |
| 1476 | /* If the stack pointer is above the NMI stack, this is a normal NMI */ |
| 1477 | ja first_nmi |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1478 | |
Denys Vlasenko | 0784b36 | 2015-04-01 16:50:57 +0200 | [diff] [blame] | 1479 | subq $EXCEPTION_STKSZ, %rdx |
| 1480 | cmpq %rdx, 4*8(%rsp) |
| 1481 | /* If it is below the NMI stack, it is a normal NMI */ |
| 1482 | jb first_nmi |
Andy Lutomirski | 810bc07 | 2015-07-15 10:29:38 -0700 | [diff] [blame] | 1483 | |
| 1484 | /* Ah, it is within the NMI stack. */ |
| 1485 | |
| 1486 | testb $(X86_EFLAGS_DF >> 8), (3*8 + 1)(%rsp) |
| 1487 | jz first_nmi /* RSP was user controlled. */ |
| 1488 | |
| 1489 | /* This is a nested NMI. */ |
Denys Vlasenko | 0784b36 | 2015-04-01 16:50:57 +0200 | [diff] [blame] | 1490 | |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1491 | nested_nmi: |
| 1492 | /* |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1493 | * Modify the "iret" frame to point to repeat_nmi, forcing another |
| 1494 | * iteration of NMI handling. |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1495 | */ |
Andy Lutomirski | 23a781e | 2015-07-15 10:29:39 -0700 | [diff] [blame] | 1496 | subq $8, %rsp |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1497 | leaq -10*8(%rsp), %rdx |
| 1498 | pushq $__KERNEL_DS |
| 1499 | pushq %rdx |
Ingo Molnar | 131484c | 2015-05-28 12:21:47 +0200 | [diff] [blame] | 1500 | pushfq |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1501 | pushq $__KERNEL_CS |
| 1502 | pushq $repeat_nmi |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1503 | |
| 1504 | /* Put stack back */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1505 | addq $(6*8), %rsp |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1506 | |
| 1507 | nested_nmi_out: |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1508 | popq %rdx |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1509 | |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1510 | /* We are returning to kernel mode, so this cannot result in a fault. */ |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1511 | INTERRUPT_RETURN |
| 1512 | |
| 1513 | first_nmi: |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1514 | /* Restore rdx. */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1515 | movq (%rsp), %rdx |
Jan Beulich | 6261091 | 2012-02-24 14:54:37 +0000 | [diff] [blame] | 1516 | |
Andy Lutomirski | 36f1a77 | 2015-07-15 10:29:40 -0700 | [diff] [blame] | 1517 | /* Make room for "NMI executing". */ |
| 1518 | pushq $0 |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1519 | |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1520 | /* Leave room for the "iret" frame */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1521 | subq $(5*8), %rsp |
Salman Qazi | 28696f4 | 2012-10-01 17:29:25 -0700 | [diff] [blame] | 1522 | |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1523 | /* Copy the "original" frame to the "outermost" frame */ |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1524 | .rept 5 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1525 | pushq 11*8(%rsp) |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1526 | .endr |
Jan Beulich | 6261091 | 2012-02-24 14:54:37 +0000 | [diff] [blame] | 1527 | |
Steven Rostedt | 79fb4ad | 2012-02-24 15:55:13 -0500 | [diff] [blame] | 1528 | /* Everything up to here is safe from nested NMIs */ |
| 1529 | |
Andy Lutomirski | a97439a | 2015-07-15 10:29:41 -0700 | [diff] [blame] | 1530 | #ifdef CONFIG_DEBUG_ENTRY |
| 1531 | /* |
| 1532 | * For ease of testing, unmask NMIs right away. Disabled by |
| 1533 | * default because IRET is very expensive. |
| 1534 | */ |
| 1535 | pushq $0 /* SS */ |
| 1536 | pushq %rsp /* RSP (minus 8 because of the previous push) */ |
| 1537 | addq $8, (%rsp) /* Fix up RSP */ |
| 1538 | pushfq /* RFLAGS */ |
| 1539 | pushq $__KERNEL_CS /* CS */ |
| 1540 | pushq $1f /* RIP */ |
| 1541 | INTERRUPT_RETURN /* continues at repeat_nmi below */ |
| 1542 | 1: |
| 1543 | #endif |
| 1544 | |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1545 | repeat_nmi: |
Jan Beulich | 6261091 | 2012-02-24 14:54:37 +0000 | [diff] [blame] | 1546 | /* |
| 1547 | * If there was a nested NMI, the first NMI's iret will return |
| 1548 | * here. But NMIs are still enabled and we can take another |
| 1549 | * nested NMI. The nested NMI checks the interrupted RIP to see |
| 1550 | * if it is between repeat_nmi and end_repeat_nmi, and if so |
| 1551 | * it will just return, as we are about to repeat an NMI anyway. |
| 1552 | * This makes it safe to copy to the stack frame that a nested |
| 1553 | * NMI will update. |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1554 | * |
| 1555 | * RSP is pointing to "outermost RIP". gsbase is unknown, but, if |
| 1556 | * we're repeating an NMI, gsbase has the same value that it had on |
| 1557 | * the first iteration. paranoid_entry will load the kernel |
Andy Lutomirski | 36f1a77 | 2015-07-15 10:29:40 -0700 | [diff] [blame] | 1558 | * gsbase if needed before we call do_nmi. "NMI executing" |
| 1559 | * is zero. |
Jan Beulich | 6261091 | 2012-02-24 14:54:37 +0000 | [diff] [blame] | 1560 | */ |
Andy Lutomirski | 36f1a77 | 2015-07-15 10:29:40 -0700 | [diff] [blame] | 1561 | movq $1, 10*8(%rsp) /* Set "NMI executing". */ |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1562 | |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1563 | /* |
| 1564 | * Copy the "outermost" frame to the "iret" frame. NMIs that nest |
| 1565 | * here must not modify the "iret" frame while we're writing to |
| 1566 | * it or it will end up containing garbage. |
| 1567 | */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1568 | addq $(10*8), %rsp |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1569 | .rept 5 |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1570 | pushq -6*8(%rsp) |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1571 | .endr |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1572 | subq $(5*8), %rsp |
Jan Beulich | 6261091 | 2012-02-24 14:54:37 +0000 | [diff] [blame] | 1573 | end_repeat_nmi: |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1574 | |
| 1575 | /* |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1576 | * Everything below this point can be preempted by a nested NMI. |
| 1577 | * If this happens, then the inner NMI will change the "iret" |
| 1578 | * frame to point back to repeat_nmi. |
Steven Rostedt | 3f3c8b8 | 2011-12-08 12:36:23 -0500 | [diff] [blame] | 1579 | */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1580 | pushq $-1 /* ORIG_RAX: no syscall to restart */ |
Denys Vlasenko | 76f5df4 | 2015-02-26 14:40:27 -0800 | [diff] [blame] | 1581 | ALLOC_PT_GPREGS_ON_STACK |
| 1582 | |
Steven Rostedt | 1fd466e | 2011-12-08 12:32:27 -0500 | [diff] [blame] | 1583 | /* |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1584 | * Use the same approach as paranoid_entry to handle SWAPGS, but |
| 1585 | * without CR3 handling since we do that differently in NMIs. No |
| 1586 | * need to use paranoid_exit as we should not be calling schedule |
| 1587 | * in NMI context. Even with normal interrupts enabled. An NMI |
| 1588 | * should not be setting NEED_RESCHED or anything that normal |
| 1589 | * interrupts and exceptions might do. |
Steven Rostedt | 1fd466e | 2011-12-08 12:32:27 -0500 | [diff] [blame] | 1590 | */ |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1591 | cld |
| 1592 | SAVE_C_REGS |
| 1593 | SAVE_EXTRA_REGS |
| 1594 | movl $1, %ebx |
| 1595 | movl $MSR_GS_BASE, %ecx |
| 1596 | rdmsr |
| 1597 | testl %edx, %edx |
| 1598 | js 1f /* negative -> in kernel */ |
| 1599 | SWAPGS |
| 1600 | xorl %ebx, %ebx |
| 1601 | 1: |
Hugh Dickins | 1937794 | 2017-09-21 20:39:56 -0700 | [diff] [blame] | 1602 | movq %rsp, %rdi |
| 1603 | movq $-1, %rsi |
Kees Cook | e71fac0 | 2018-01-03 10:17:35 -0800 | [diff] [blame] | 1604 | #ifdef CONFIG_PAGE_TABLE_ISOLATION |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1605 | /* Unconditionally use kernel CR3 for do_nmi() */ |
| 1606 | /* %rax is saved above, so OK to clobber here */ |
Hugh Dickins | 23e0943 | 2017-09-24 16:59:49 -0700 | [diff] [blame] | 1607 | ALTERNATIVE "jmp 2f", "movq %cr3, %rax", X86_FEATURE_KAISER |
Hugh Dickins | d0142ce | 2017-08-27 16:24:27 -0700 | [diff] [blame] | 1608 | /* If PCID enabled, NOFLUSH now and NOFLUSH on return */ |
Hugh Dickins | 169b369 | 2017-10-03 20:49:04 -0700 | [diff] [blame] | 1609 | ALTERNATIVE "", "bts $63, %rax", X86_FEATURE_PCID |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1610 | pushq %rax |
Hugh Dickins | 2684b12 | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1611 | /* mask off "user" bit of pgd address and 12 PCID bits: */ |
| 1612 | andq $(~(X86_CR3_PCID_ASID_MASK | KAISER_SHADOW_PGD_OFFSET)), %rax |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1613 | movq %rax, %cr3 |
Hugh Dickins | 23e0943 | 2017-09-24 16:59:49 -0700 | [diff] [blame] | 1614 | 2: |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1615 | #endif |
Steven Rostedt | 7fbb98c | 2012-06-07 10:21:21 -0400 | [diff] [blame] | 1616 | |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1617 | /* paranoidentry do_nmi, 0; without TRACE_IRQS_OFF */ |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1618 | call do_nmi |
Hugh Dickins | 1937794 | 2017-09-21 20:39:56 -0700 | [diff] [blame] | 1619 | |
Kees Cook | e71fac0 | 2018-01-03 10:17:35 -0800 | [diff] [blame] | 1620 | #ifdef CONFIG_PAGE_TABLE_ISOLATION |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1621 | /* |
| 1622 | * Unconditionally restore CR3. We might be returning to |
| 1623 | * kernel code that needs user CR3, like just just before |
| 1624 | * a sysret. |
| 1625 | */ |
Hugh Dickins | 23e0943 | 2017-09-24 16:59:49 -0700 | [diff] [blame] | 1626 | ALTERNATIVE "", "popq %rax; movq %rax, %cr3", X86_FEATURE_KAISER |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1627 | #endif |
Steven Rostedt | 7fbb98c | 2012-06-07 10:21:21 -0400 | [diff] [blame] | 1628 | |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1629 | testl %ebx, %ebx /* swapgs needed? */ |
| 1630 | jnz nmi_restore |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1631 | nmi_swapgs: |
Dave Hansen | 8f0baad | 2017-08-30 16:23:00 -0700 | [diff] [blame] | 1632 | /* We fixed up CR3 above, so no need to switch it here */ |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1633 | SWAPGS_UNSAFE_STACK |
| 1634 | nmi_restore: |
Denys Vlasenko | 76f5df4 | 2015-02-26 14:40:27 -0800 | [diff] [blame] | 1635 | RESTORE_EXTRA_REGS |
| 1636 | RESTORE_C_REGS |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1637 | |
| 1638 | /* Point RSP at the "iret" frame. */ |
Denys Vlasenko | 76f5df4 | 2015-02-26 14:40:27 -0800 | [diff] [blame] | 1639 | REMOVE_PT_GPREGS_FROM_STACK 6*8 |
Salman Qazi | 28696f4 | 2012-10-01 17:29:25 -0700 | [diff] [blame] | 1640 | |
Andy Lutomirski | 810bc07 | 2015-07-15 10:29:38 -0700 | [diff] [blame] | 1641 | /* |
| 1642 | * Clear "NMI executing". Set DF first so that we can easily |
| 1643 | * distinguish the remaining code between here and IRET from |
| 1644 | * the SYSCALL entry and exit paths. On a native kernel, we |
| 1645 | * could just inspect RIP, but, on paravirt kernels, |
| 1646 | * INTERRUPT_RETURN can translate into a jump into a |
| 1647 | * hypercall page. |
| 1648 | */ |
| 1649 | std |
| 1650 | movq $0, 5*8(%rsp) /* clear "NMI executing" */ |
Andy Lutomirski | 0b22930 | 2015-07-15 10:29:36 -0700 | [diff] [blame] | 1651 | |
| 1652 | /* |
| 1653 | * INTERRUPT_RETURN reads the "iret" frame and exits the NMI |
| 1654 | * stack in a single instruction. We are returning to kernel |
| 1655 | * mode, so this cannot result in a fault. |
| 1656 | */ |
Andy Lutomirski | 5ca6f70 | 2015-06-04 13:24:29 -0700 | [diff] [blame] | 1657 | INTERRUPT_RETURN |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1658 | END(nmi) |
| 1659 | |
| 1660 | ENTRY(ignore_sysret) |
Ingo Molnar | 4d73213 | 2015-06-08 20:43:07 +0200 | [diff] [blame] | 1661 | mov $-ENOSYS, %eax |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1662 | sysret |
Alexander van Heukelum | ddeb8f2 | 2008-11-24 13:24:28 +0100 | [diff] [blame] | 1663 | END(ignore_sysret) |
Andy Lutomirski | 2deb4be | 2016-07-14 13:22:55 -0700 | [diff] [blame] | 1664 | |
| 1665 | ENTRY(rewind_stack_do_exit) |
| 1666 | /* Prevent any naive code from trying to unwind to our caller. */ |
| 1667 | xorl %ebp, %ebp |
| 1668 | |
| 1669 | movq PER_CPU_VAR(cpu_current_top_of_stack), %rax |
| 1670 | leaq -TOP_OF_KERNEL_STACK_PADDING-PTREGS_SIZE(%rax), %rsp |
| 1671 | |
| 1672 | call do_exit |
| 1673 | 1: jmp 1b |
| 1674 | END(rewind_stack_do_exit) |