1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * linux/arch/alpha/mm/fault.c
4*4882a593Smuzhiyun *
5*4882a593Smuzhiyun * Copyright (C) 1995 Linus Torvalds
6*4882a593Smuzhiyun */
7*4882a593Smuzhiyun
8*4882a593Smuzhiyun #include <linux/sched/signal.h>
9*4882a593Smuzhiyun #include <linux/kernel.h>
10*4882a593Smuzhiyun #include <linux/mm.h>
11*4882a593Smuzhiyun #include <asm/io.h>
12*4882a593Smuzhiyun
13*4882a593Smuzhiyun #define __EXTERN_INLINE inline
14*4882a593Smuzhiyun #include <asm/mmu_context.h>
15*4882a593Smuzhiyun #include <asm/tlbflush.h>
16*4882a593Smuzhiyun #undef __EXTERN_INLINE
17*4882a593Smuzhiyun
18*4882a593Smuzhiyun #include <linux/signal.h>
19*4882a593Smuzhiyun #include <linux/errno.h>
20*4882a593Smuzhiyun #include <linux/string.h>
21*4882a593Smuzhiyun #include <linux/types.h>
22*4882a593Smuzhiyun #include <linux/ptrace.h>
23*4882a593Smuzhiyun #include <linux/mman.h>
24*4882a593Smuzhiyun #include <linux/smp.h>
25*4882a593Smuzhiyun #include <linux/interrupt.h>
26*4882a593Smuzhiyun #include <linux/extable.h>
27*4882a593Smuzhiyun #include <linux/uaccess.h>
28*4882a593Smuzhiyun #include <linux/perf_event.h>
29*4882a593Smuzhiyun
30*4882a593Smuzhiyun extern void die_if_kernel(char *,struct pt_regs *,long, unsigned long *);
31*4882a593Smuzhiyun
32*4882a593Smuzhiyun
33*4882a593Smuzhiyun /*
34*4882a593Smuzhiyun * Force a new ASN for a task.
35*4882a593Smuzhiyun */
36*4882a593Smuzhiyun
37*4882a593Smuzhiyun #ifndef CONFIG_SMP
38*4882a593Smuzhiyun unsigned long last_asn = ASN_FIRST_VERSION;
39*4882a593Smuzhiyun #endif
40*4882a593Smuzhiyun
41*4882a593Smuzhiyun void
__load_new_mm_context(struct mm_struct * next_mm)42*4882a593Smuzhiyun __load_new_mm_context(struct mm_struct *next_mm)
43*4882a593Smuzhiyun {
44*4882a593Smuzhiyun unsigned long mmc;
45*4882a593Smuzhiyun struct pcb_struct *pcb;
46*4882a593Smuzhiyun
47*4882a593Smuzhiyun mmc = __get_new_mm_context(next_mm, smp_processor_id());
48*4882a593Smuzhiyun next_mm->context[smp_processor_id()] = mmc;
49*4882a593Smuzhiyun
50*4882a593Smuzhiyun pcb = ¤t_thread_info()->pcb;
51*4882a593Smuzhiyun pcb->asn = mmc & HARDWARE_ASN_MASK;
52*4882a593Smuzhiyun pcb->ptbr = ((unsigned long) next_mm->pgd - IDENT_ADDR) >> PAGE_SHIFT;
53*4882a593Smuzhiyun
54*4882a593Smuzhiyun __reload_thread(pcb);
55*4882a593Smuzhiyun }
56*4882a593Smuzhiyun
57*4882a593Smuzhiyun
58*4882a593Smuzhiyun /*
59*4882a593Smuzhiyun * This routine handles page faults. It determines the address,
60*4882a593Smuzhiyun * and the problem, and then passes it off to handle_mm_fault().
61*4882a593Smuzhiyun *
62*4882a593Smuzhiyun * mmcsr:
63*4882a593Smuzhiyun * 0 = translation not valid
64*4882a593Smuzhiyun * 1 = access violation
65*4882a593Smuzhiyun * 2 = fault-on-read
66*4882a593Smuzhiyun * 3 = fault-on-execute
67*4882a593Smuzhiyun * 4 = fault-on-write
68*4882a593Smuzhiyun *
69*4882a593Smuzhiyun * cause:
70*4882a593Smuzhiyun * -1 = instruction fetch
71*4882a593Smuzhiyun * 0 = load
72*4882a593Smuzhiyun * 1 = store
73*4882a593Smuzhiyun *
74*4882a593Smuzhiyun * Registers $9 through $15 are saved in a block just prior to `regs' and
75*4882a593Smuzhiyun * are saved and restored around the call to allow exception code to
76*4882a593Smuzhiyun * modify them.
77*4882a593Smuzhiyun */
78*4882a593Smuzhiyun
79*4882a593Smuzhiyun /* Macro for exception fixup code to access integer registers. */
80*4882a593Smuzhiyun #define dpf_reg(r) \
81*4882a593Smuzhiyun (((unsigned long *)regs)[(r) <= 8 ? (r) : (r) <= 15 ? (r)-16 : \
82*4882a593Smuzhiyun (r) <= 18 ? (r)+10 : (r)-10])
83*4882a593Smuzhiyun
84*4882a593Smuzhiyun asmlinkage void
do_page_fault(unsigned long address,unsigned long mmcsr,long cause,struct pt_regs * regs)85*4882a593Smuzhiyun do_page_fault(unsigned long address, unsigned long mmcsr,
86*4882a593Smuzhiyun long cause, struct pt_regs *regs)
87*4882a593Smuzhiyun {
88*4882a593Smuzhiyun struct vm_area_struct * vma;
89*4882a593Smuzhiyun struct mm_struct *mm = current->mm;
90*4882a593Smuzhiyun const struct exception_table_entry *fixup;
91*4882a593Smuzhiyun int si_code = SEGV_MAPERR;
92*4882a593Smuzhiyun vm_fault_t fault;
93*4882a593Smuzhiyun unsigned int flags = FAULT_FLAG_DEFAULT;
94*4882a593Smuzhiyun
95*4882a593Smuzhiyun /* As of EV6, a load into $31/$f31 is a prefetch, and never faults
96*4882a593Smuzhiyun (or is suppressed by the PALcode). Support that for older CPUs
97*4882a593Smuzhiyun by ignoring such an instruction. */
98*4882a593Smuzhiyun if (cause == 0) {
99*4882a593Smuzhiyun unsigned int insn;
100*4882a593Smuzhiyun __get_user(insn, (unsigned int __user *)regs->pc);
101*4882a593Smuzhiyun if ((insn >> 21 & 0x1f) == 0x1f &&
102*4882a593Smuzhiyun /* ldq ldl ldt lds ldg ldf ldwu ldbu */
103*4882a593Smuzhiyun (1ul << (insn >> 26) & 0x30f00001400ul)) {
104*4882a593Smuzhiyun regs->pc += 4;
105*4882a593Smuzhiyun return;
106*4882a593Smuzhiyun }
107*4882a593Smuzhiyun }
108*4882a593Smuzhiyun
109*4882a593Smuzhiyun /* If we're in an interrupt context, or have no user context,
110*4882a593Smuzhiyun we must not take the fault. */
111*4882a593Smuzhiyun if (!mm || faulthandler_disabled())
112*4882a593Smuzhiyun goto no_context;
113*4882a593Smuzhiyun
114*4882a593Smuzhiyun #ifdef CONFIG_ALPHA_LARGE_VMALLOC
115*4882a593Smuzhiyun if (address >= TASK_SIZE)
116*4882a593Smuzhiyun goto vmalloc_fault;
117*4882a593Smuzhiyun #endif
118*4882a593Smuzhiyun if (user_mode(regs))
119*4882a593Smuzhiyun flags |= FAULT_FLAG_USER;
120*4882a593Smuzhiyun perf_sw_event(PERF_COUNT_SW_PAGE_FAULTS, 1, regs, address);
121*4882a593Smuzhiyun retry:
122*4882a593Smuzhiyun mmap_read_lock(mm);
123*4882a593Smuzhiyun vma = find_vma(mm, address);
124*4882a593Smuzhiyun if (!vma)
125*4882a593Smuzhiyun goto bad_area;
126*4882a593Smuzhiyun if (vma->vm_start <= address)
127*4882a593Smuzhiyun goto good_area;
128*4882a593Smuzhiyun if (!(vma->vm_flags & VM_GROWSDOWN))
129*4882a593Smuzhiyun goto bad_area;
130*4882a593Smuzhiyun if (expand_stack(vma, address))
131*4882a593Smuzhiyun goto bad_area;
132*4882a593Smuzhiyun
133*4882a593Smuzhiyun /* Ok, we have a good vm_area for this memory access, so
134*4882a593Smuzhiyun we can handle it. */
135*4882a593Smuzhiyun good_area:
136*4882a593Smuzhiyun si_code = SEGV_ACCERR;
137*4882a593Smuzhiyun if (cause < 0) {
138*4882a593Smuzhiyun if (!(vma->vm_flags & VM_EXEC))
139*4882a593Smuzhiyun goto bad_area;
140*4882a593Smuzhiyun } else if (!cause) {
141*4882a593Smuzhiyun /* Allow reads even for write-only mappings */
142*4882a593Smuzhiyun if (!(vma->vm_flags & (VM_READ | VM_WRITE)))
143*4882a593Smuzhiyun goto bad_area;
144*4882a593Smuzhiyun } else {
145*4882a593Smuzhiyun if (!(vma->vm_flags & VM_WRITE))
146*4882a593Smuzhiyun goto bad_area;
147*4882a593Smuzhiyun flags |= FAULT_FLAG_WRITE;
148*4882a593Smuzhiyun }
149*4882a593Smuzhiyun
150*4882a593Smuzhiyun /* If for any reason at all we couldn't handle the fault,
151*4882a593Smuzhiyun make sure we exit gracefully rather than endlessly redo
152*4882a593Smuzhiyun the fault. */
153*4882a593Smuzhiyun fault = handle_mm_fault(vma, address, flags, regs);
154*4882a593Smuzhiyun
155*4882a593Smuzhiyun if (fault_signal_pending(fault, regs))
156*4882a593Smuzhiyun return;
157*4882a593Smuzhiyun
158*4882a593Smuzhiyun if (unlikely(fault & VM_FAULT_ERROR)) {
159*4882a593Smuzhiyun if (fault & VM_FAULT_OOM)
160*4882a593Smuzhiyun goto out_of_memory;
161*4882a593Smuzhiyun else if (fault & VM_FAULT_SIGSEGV)
162*4882a593Smuzhiyun goto bad_area;
163*4882a593Smuzhiyun else if (fault & VM_FAULT_SIGBUS)
164*4882a593Smuzhiyun goto do_sigbus;
165*4882a593Smuzhiyun BUG();
166*4882a593Smuzhiyun }
167*4882a593Smuzhiyun
168*4882a593Smuzhiyun if (flags & FAULT_FLAG_ALLOW_RETRY) {
169*4882a593Smuzhiyun if (fault & VM_FAULT_RETRY) {
170*4882a593Smuzhiyun flags |= FAULT_FLAG_TRIED;
171*4882a593Smuzhiyun
172*4882a593Smuzhiyun /* No need to mmap_read_unlock(mm) as we would
173*4882a593Smuzhiyun * have already released it in __lock_page_or_retry
174*4882a593Smuzhiyun * in mm/filemap.c.
175*4882a593Smuzhiyun */
176*4882a593Smuzhiyun
177*4882a593Smuzhiyun goto retry;
178*4882a593Smuzhiyun }
179*4882a593Smuzhiyun }
180*4882a593Smuzhiyun
181*4882a593Smuzhiyun mmap_read_unlock(mm);
182*4882a593Smuzhiyun
183*4882a593Smuzhiyun return;
184*4882a593Smuzhiyun
185*4882a593Smuzhiyun /* Something tried to access memory that isn't in our memory map.
186*4882a593Smuzhiyun Fix it, but check if it's kernel or user first. */
187*4882a593Smuzhiyun bad_area:
188*4882a593Smuzhiyun mmap_read_unlock(mm);
189*4882a593Smuzhiyun
190*4882a593Smuzhiyun if (user_mode(regs))
191*4882a593Smuzhiyun goto do_sigsegv;
192*4882a593Smuzhiyun
193*4882a593Smuzhiyun no_context:
194*4882a593Smuzhiyun /* Are we prepared to handle this fault as an exception? */
195*4882a593Smuzhiyun if ((fixup = search_exception_tables(regs->pc)) != 0) {
196*4882a593Smuzhiyun unsigned long newpc;
197*4882a593Smuzhiyun newpc = fixup_exception(dpf_reg, fixup, regs->pc);
198*4882a593Smuzhiyun regs->pc = newpc;
199*4882a593Smuzhiyun return;
200*4882a593Smuzhiyun }
201*4882a593Smuzhiyun
202*4882a593Smuzhiyun /* Oops. The kernel tried to access some bad page. We'll have to
203*4882a593Smuzhiyun terminate things with extreme prejudice. */
204*4882a593Smuzhiyun printk(KERN_ALERT "Unable to handle kernel paging request at "
205*4882a593Smuzhiyun "virtual address %016lx\n", address);
206*4882a593Smuzhiyun die_if_kernel("Oops", regs, cause, (unsigned long*)regs - 16);
207*4882a593Smuzhiyun do_exit(SIGKILL);
208*4882a593Smuzhiyun
209*4882a593Smuzhiyun /* We ran out of memory, or some other thing happened to us that
210*4882a593Smuzhiyun made us unable to handle the page fault gracefully. */
211*4882a593Smuzhiyun out_of_memory:
212*4882a593Smuzhiyun mmap_read_unlock(mm);
213*4882a593Smuzhiyun if (!user_mode(regs))
214*4882a593Smuzhiyun goto no_context;
215*4882a593Smuzhiyun pagefault_out_of_memory();
216*4882a593Smuzhiyun return;
217*4882a593Smuzhiyun
218*4882a593Smuzhiyun do_sigbus:
219*4882a593Smuzhiyun mmap_read_unlock(mm);
220*4882a593Smuzhiyun /* Send a sigbus, regardless of whether we were in kernel
221*4882a593Smuzhiyun or user mode. */
222*4882a593Smuzhiyun force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *) address, 0);
223*4882a593Smuzhiyun if (!user_mode(regs))
224*4882a593Smuzhiyun goto no_context;
225*4882a593Smuzhiyun return;
226*4882a593Smuzhiyun
227*4882a593Smuzhiyun do_sigsegv:
228*4882a593Smuzhiyun force_sig_fault(SIGSEGV, si_code, (void __user *) address, 0);
229*4882a593Smuzhiyun return;
230*4882a593Smuzhiyun
231*4882a593Smuzhiyun #ifdef CONFIG_ALPHA_LARGE_VMALLOC
232*4882a593Smuzhiyun vmalloc_fault:
233*4882a593Smuzhiyun if (user_mode(regs))
234*4882a593Smuzhiyun goto do_sigsegv;
235*4882a593Smuzhiyun else {
236*4882a593Smuzhiyun /* Synchronize this task's top level page-table
237*4882a593Smuzhiyun with the "reference" page table from init. */
238*4882a593Smuzhiyun long index = pgd_index(address);
239*4882a593Smuzhiyun pgd_t *pgd, *pgd_k;
240*4882a593Smuzhiyun
241*4882a593Smuzhiyun pgd = current->active_mm->pgd + index;
242*4882a593Smuzhiyun pgd_k = swapper_pg_dir + index;
243*4882a593Smuzhiyun if (!pgd_present(*pgd) && pgd_present(*pgd_k)) {
244*4882a593Smuzhiyun pgd_val(*pgd) = pgd_val(*pgd_k);
245*4882a593Smuzhiyun return;
246*4882a593Smuzhiyun }
247*4882a593Smuzhiyun goto no_context;
248*4882a593Smuzhiyun }
249*4882a593Smuzhiyun #endif
250*4882a593Smuzhiyun }
251