xref: /OK3568_Linux_fs/kernel/arch/alpha/mm/fault.c (revision 4882a59341e53eb6f0b4789bf948001014eff981)
1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun  *  linux/arch/alpha/mm/fault.c
4*4882a593Smuzhiyun  *
5*4882a593Smuzhiyun  *  Copyright (C) 1995  Linus Torvalds
6*4882a593Smuzhiyun  */
7*4882a593Smuzhiyun 
8*4882a593Smuzhiyun #include <linux/sched/signal.h>
9*4882a593Smuzhiyun #include <linux/kernel.h>
10*4882a593Smuzhiyun #include <linux/mm.h>
11*4882a593Smuzhiyun #include <asm/io.h>
12*4882a593Smuzhiyun 
13*4882a593Smuzhiyun #define __EXTERN_INLINE inline
14*4882a593Smuzhiyun #include <asm/mmu_context.h>
15*4882a593Smuzhiyun #include <asm/tlbflush.h>
16*4882a593Smuzhiyun #undef  __EXTERN_INLINE
17*4882a593Smuzhiyun 
18*4882a593Smuzhiyun #include <linux/signal.h>
19*4882a593Smuzhiyun #include <linux/errno.h>
20*4882a593Smuzhiyun #include <linux/string.h>
21*4882a593Smuzhiyun #include <linux/types.h>
22*4882a593Smuzhiyun #include <linux/ptrace.h>
23*4882a593Smuzhiyun #include <linux/mman.h>
24*4882a593Smuzhiyun #include <linux/smp.h>
25*4882a593Smuzhiyun #include <linux/interrupt.h>
26*4882a593Smuzhiyun #include <linux/extable.h>
27*4882a593Smuzhiyun #include <linux/uaccess.h>
28*4882a593Smuzhiyun #include <linux/perf_event.h>
29*4882a593Smuzhiyun 
30*4882a593Smuzhiyun extern void die_if_kernel(char *,struct pt_regs *,long, unsigned long *);
31*4882a593Smuzhiyun 
32*4882a593Smuzhiyun 
33*4882a593Smuzhiyun /*
34*4882a593Smuzhiyun  * Force a new ASN for a task.
35*4882a593Smuzhiyun  */
36*4882a593Smuzhiyun 
37*4882a593Smuzhiyun #ifndef CONFIG_SMP
38*4882a593Smuzhiyun unsigned long last_asn = ASN_FIRST_VERSION;
39*4882a593Smuzhiyun #endif
40*4882a593Smuzhiyun 
41*4882a593Smuzhiyun void
__load_new_mm_context(struct mm_struct * next_mm)42*4882a593Smuzhiyun __load_new_mm_context(struct mm_struct *next_mm)
43*4882a593Smuzhiyun {
44*4882a593Smuzhiyun 	unsigned long mmc;
45*4882a593Smuzhiyun 	struct pcb_struct *pcb;
46*4882a593Smuzhiyun 
47*4882a593Smuzhiyun 	mmc = __get_new_mm_context(next_mm, smp_processor_id());
48*4882a593Smuzhiyun 	next_mm->context[smp_processor_id()] = mmc;
49*4882a593Smuzhiyun 
50*4882a593Smuzhiyun 	pcb = &current_thread_info()->pcb;
51*4882a593Smuzhiyun 	pcb->asn = mmc & HARDWARE_ASN_MASK;
52*4882a593Smuzhiyun 	pcb->ptbr = ((unsigned long) next_mm->pgd - IDENT_ADDR) >> PAGE_SHIFT;
53*4882a593Smuzhiyun 
54*4882a593Smuzhiyun 	__reload_thread(pcb);
55*4882a593Smuzhiyun }
56*4882a593Smuzhiyun 
57*4882a593Smuzhiyun 
58*4882a593Smuzhiyun /*
59*4882a593Smuzhiyun  * This routine handles page faults.  It determines the address,
60*4882a593Smuzhiyun  * and the problem, and then passes it off to handle_mm_fault().
61*4882a593Smuzhiyun  *
62*4882a593Smuzhiyun  * mmcsr:
63*4882a593Smuzhiyun  *	0 = translation not valid
64*4882a593Smuzhiyun  *	1 = access violation
65*4882a593Smuzhiyun  *	2 = fault-on-read
66*4882a593Smuzhiyun  *	3 = fault-on-execute
67*4882a593Smuzhiyun  *	4 = fault-on-write
68*4882a593Smuzhiyun  *
69*4882a593Smuzhiyun  * cause:
70*4882a593Smuzhiyun  *	-1 = instruction fetch
71*4882a593Smuzhiyun  *	0 = load
72*4882a593Smuzhiyun  *	1 = store
73*4882a593Smuzhiyun  *
74*4882a593Smuzhiyun  * Registers $9 through $15 are saved in a block just prior to `regs' and
75*4882a593Smuzhiyun  * are saved and restored around the call to allow exception code to
76*4882a593Smuzhiyun  * modify them.
77*4882a593Smuzhiyun  */
78*4882a593Smuzhiyun 
79*4882a593Smuzhiyun /* Macro for exception fixup code to access integer registers.  */
80*4882a593Smuzhiyun #define dpf_reg(r)							\
81*4882a593Smuzhiyun 	(((unsigned long *)regs)[(r) <= 8 ? (r) : (r) <= 15 ? (r)-16 :	\
82*4882a593Smuzhiyun 				 (r) <= 18 ? (r)+10 : (r)-10])
83*4882a593Smuzhiyun 
84*4882a593Smuzhiyun asmlinkage void
do_page_fault(unsigned long address,unsigned long mmcsr,long cause,struct pt_regs * regs)85*4882a593Smuzhiyun do_page_fault(unsigned long address, unsigned long mmcsr,
86*4882a593Smuzhiyun 	      long cause, struct pt_regs *regs)
87*4882a593Smuzhiyun {
88*4882a593Smuzhiyun 	struct vm_area_struct * vma;
89*4882a593Smuzhiyun 	struct mm_struct *mm = current->mm;
90*4882a593Smuzhiyun 	const struct exception_table_entry *fixup;
91*4882a593Smuzhiyun 	int si_code = SEGV_MAPERR;
92*4882a593Smuzhiyun 	vm_fault_t fault;
93*4882a593Smuzhiyun 	unsigned int flags = FAULT_FLAG_DEFAULT;
94*4882a593Smuzhiyun 
95*4882a593Smuzhiyun 	/* As of EV6, a load into $31/$f31 is a prefetch, and never faults
96*4882a593Smuzhiyun 	   (or is suppressed by the PALcode).  Support that for older CPUs
97*4882a593Smuzhiyun 	   by ignoring such an instruction.  */
98*4882a593Smuzhiyun 	if (cause == 0) {
99*4882a593Smuzhiyun 		unsigned int insn;
100*4882a593Smuzhiyun 		__get_user(insn, (unsigned int __user *)regs->pc);
101*4882a593Smuzhiyun 		if ((insn >> 21 & 0x1f) == 0x1f &&
102*4882a593Smuzhiyun 		    /* ldq ldl ldt lds ldg ldf ldwu ldbu */
103*4882a593Smuzhiyun 		    (1ul << (insn >> 26) & 0x30f00001400ul)) {
104*4882a593Smuzhiyun 			regs->pc += 4;
105*4882a593Smuzhiyun 			return;
106*4882a593Smuzhiyun 		}
107*4882a593Smuzhiyun 	}
108*4882a593Smuzhiyun 
109*4882a593Smuzhiyun 	/* If we're in an interrupt context, or have no user context,
110*4882a593Smuzhiyun 	   we must not take the fault.  */
111*4882a593Smuzhiyun 	if (!mm || faulthandler_disabled())
112*4882a593Smuzhiyun 		goto no_context;
113*4882a593Smuzhiyun 
114*4882a593Smuzhiyun #ifdef CONFIG_ALPHA_LARGE_VMALLOC
115*4882a593Smuzhiyun 	if (address >= TASK_SIZE)
116*4882a593Smuzhiyun 		goto vmalloc_fault;
117*4882a593Smuzhiyun #endif
118*4882a593Smuzhiyun 	if (user_mode(regs))
119*4882a593Smuzhiyun 		flags |= FAULT_FLAG_USER;
120*4882a593Smuzhiyun 	perf_sw_event(PERF_COUNT_SW_PAGE_FAULTS, 1, regs, address);
121*4882a593Smuzhiyun retry:
122*4882a593Smuzhiyun 	mmap_read_lock(mm);
123*4882a593Smuzhiyun 	vma = find_vma(mm, address);
124*4882a593Smuzhiyun 	if (!vma)
125*4882a593Smuzhiyun 		goto bad_area;
126*4882a593Smuzhiyun 	if (vma->vm_start <= address)
127*4882a593Smuzhiyun 		goto good_area;
128*4882a593Smuzhiyun 	if (!(vma->vm_flags & VM_GROWSDOWN))
129*4882a593Smuzhiyun 		goto bad_area;
130*4882a593Smuzhiyun 	if (expand_stack(vma, address))
131*4882a593Smuzhiyun 		goto bad_area;
132*4882a593Smuzhiyun 
133*4882a593Smuzhiyun 	/* Ok, we have a good vm_area for this memory access, so
134*4882a593Smuzhiyun 	   we can handle it.  */
135*4882a593Smuzhiyun  good_area:
136*4882a593Smuzhiyun 	si_code = SEGV_ACCERR;
137*4882a593Smuzhiyun 	if (cause < 0) {
138*4882a593Smuzhiyun 		if (!(vma->vm_flags & VM_EXEC))
139*4882a593Smuzhiyun 			goto bad_area;
140*4882a593Smuzhiyun 	} else if (!cause) {
141*4882a593Smuzhiyun 		/* Allow reads even for write-only mappings */
142*4882a593Smuzhiyun 		if (!(vma->vm_flags & (VM_READ | VM_WRITE)))
143*4882a593Smuzhiyun 			goto bad_area;
144*4882a593Smuzhiyun 	} else {
145*4882a593Smuzhiyun 		if (!(vma->vm_flags & VM_WRITE))
146*4882a593Smuzhiyun 			goto bad_area;
147*4882a593Smuzhiyun 		flags |= FAULT_FLAG_WRITE;
148*4882a593Smuzhiyun 	}
149*4882a593Smuzhiyun 
150*4882a593Smuzhiyun 	/* If for any reason at all we couldn't handle the fault,
151*4882a593Smuzhiyun 	   make sure we exit gracefully rather than endlessly redo
152*4882a593Smuzhiyun 	   the fault.  */
153*4882a593Smuzhiyun 	fault = handle_mm_fault(vma, address, flags, regs);
154*4882a593Smuzhiyun 
155*4882a593Smuzhiyun 	if (fault_signal_pending(fault, regs))
156*4882a593Smuzhiyun 		return;
157*4882a593Smuzhiyun 
158*4882a593Smuzhiyun 	if (unlikely(fault & VM_FAULT_ERROR)) {
159*4882a593Smuzhiyun 		if (fault & VM_FAULT_OOM)
160*4882a593Smuzhiyun 			goto out_of_memory;
161*4882a593Smuzhiyun 		else if (fault & VM_FAULT_SIGSEGV)
162*4882a593Smuzhiyun 			goto bad_area;
163*4882a593Smuzhiyun 		else if (fault & VM_FAULT_SIGBUS)
164*4882a593Smuzhiyun 			goto do_sigbus;
165*4882a593Smuzhiyun 		BUG();
166*4882a593Smuzhiyun 	}
167*4882a593Smuzhiyun 
168*4882a593Smuzhiyun 	if (flags & FAULT_FLAG_ALLOW_RETRY) {
169*4882a593Smuzhiyun 		if (fault & VM_FAULT_RETRY) {
170*4882a593Smuzhiyun 			flags |= FAULT_FLAG_TRIED;
171*4882a593Smuzhiyun 
172*4882a593Smuzhiyun 			 /* No need to mmap_read_unlock(mm) as we would
173*4882a593Smuzhiyun 			 * have already released it in __lock_page_or_retry
174*4882a593Smuzhiyun 			 * in mm/filemap.c.
175*4882a593Smuzhiyun 			 */
176*4882a593Smuzhiyun 
177*4882a593Smuzhiyun 			goto retry;
178*4882a593Smuzhiyun 		}
179*4882a593Smuzhiyun 	}
180*4882a593Smuzhiyun 
181*4882a593Smuzhiyun 	mmap_read_unlock(mm);
182*4882a593Smuzhiyun 
183*4882a593Smuzhiyun 	return;
184*4882a593Smuzhiyun 
185*4882a593Smuzhiyun 	/* Something tried to access memory that isn't in our memory map.
186*4882a593Smuzhiyun 	   Fix it, but check if it's kernel or user first.  */
187*4882a593Smuzhiyun  bad_area:
188*4882a593Smuzhiyun 	mmap_read_unlock(mm);
189*4882a593Smuzhiyun 
190*4882a593Smuzhiyun 	if (user_mode(regs))
191*4882a593Smuzhiyun 		goto do_sigsegv;
192*4882a593Smuzhiyun 
193*4882a593Smuzhiyun  no_context:
194*4882a593Smuzhiyun 	/* Are we prepared to handle this fault as an exception?  */
195*4882a593Smuzhiyun 	if ((fixup = search_exception_tables(regs->pc)) != 0) {
196*4882a593Smuzhiyun 		unsigned long newpc;
197*4882a593Smuzhiyun 		newpc = fixup_exception(dpf_reg, fixup, regs->pc);
198*4882a593Smuzhiyun 		regs->pc = newpc;
199*4882a593Smuzhiyun 		return;
200*4882a593Smuzhiyun 	}
201*4882a593Smuzhiyun 
202*4882a593Smuzhiyun 	/* Oops. The kernel tried to access some bad page. We'll have to
203*4882a593Smuzhiyun 	   terminate things with extreme prejudice.  */
204*4882a593Smuzhiyun 	printk(KERN_ALERT "Unable to handle kernel paging request at "
205*4882a593Smuzhiyun 	       "virtual address %016lx\n", address);
206*4882a593Smuzhiyun 	die_if_kernel("Oops", regs, cause, (unsigned long*)regs - 16);
207*4882a593Smuzhiyun 	do_exit(SIGKILL);
208*4882a593Smuzhiyun 
209*4882a593Smuzhiyun 	/* We ran out of memory, or some other thing happened to us that
210*4882a593Smuzhiyun 	   made us unable to handle the page fault gracefully.  */
211*4882a593Smuzhiyun  out_of_memory:
212*4882a593Smuzhiyun 	mmap_read_unlock(mm);
213*4882a593Smuzhiyun 	if (!user_mode(regs))
214*4882a593Smuzhiyun 		goto no_context;
215*4882a593Smuzhiyun 	pagefault_out_of_memory();
216*4882a593Smuzhiyun 	return;
217*4882a593Smuzhiyun 
218*4882a593Smuzhiyun  do_sigbus:
219*4882a593Smuzhiyun 	mmap_read_unlock(mm);
220*4882a593Smuzhiyun 	/* Send a sigbus, regardless of whether we were in kernel
221*4882a593Smuzhiyun 	   or user mode.  */
222*4882a593Smuzhiyun 	force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *) address, 0);
223*4882a593Smuzhiyun 	if (!user_mode(regs))
224*4882a593Smuzhiyun 		goto no_context;
225*4882a593Smuzhiyun 	return;
226*4882a593Smuzhiyun 
227*4882a593Smuzhiyun  do_sigsegv:
228*4882a593Smuzhiyun 	force_sig_fault(SIGSEGV, si_code, (void __user *) address, 0);
229*4882a593Smuzhiyun 	return;
230*4882a593Smuzhiyun 
231*4882a593Smuzhiyun #ifdef CONFIG_ALPHA_LARGE_VMALLOC
232*4882a593Smuzhiyun  vmalloc_fault:
233*4882a593Smuzhiyun 	if (user_mode(regs))
234*4882a593Smuzhiyun 		goto do_sigsegv;
235*4882a593Smuzhiyun 	else {
236*4882a593Smuzhiyun 		/* Synchronize this task's top level page-table
237*4882a593Smuzhiyun 		   with the "reference" page table from init.  */
238*4882a593Smuzhiyun 		long index = pgd_index(address);
239*4882a593Smuzhiyun 		pgd_t *pgd, *pgd_k;
240*4882a593Smuzhiyun 
241*4882a593Smuzhiyun 		pgd = current->active_mm->pgd + index;
242*4882a593Smuzhiyun 		pgd_k = swapper_pg_dir + index;
243*4882a593Smuzhiyun 		if (!pgd_present(*pgd) && pgd_present(*pgd_k)) {
244*4882a593Smuzhiyun 			pgd_val(*pgd) = pgd_val(*pgd_k);
245*4882a593Smuzhiyun 			return;
246*4882a593Smuzhiyun 		}
247*4882a593Smuzhiyun 		goto no_context;
248*4882a593Smuzhiyun 	}
249*4882a593Smuzhiyun #endif
250*4882a593Smuzhiyun }
251