xref: /OK3568_Linux_fs/kernel/arch/powerpc/lib/code-patching.c (revision 4882a59341e53eb6f0b4789bf948001014eff981)
1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0-or-later
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun  *  Copyright 2008 Michael Ellerman, IBM Corporation.
4*4882a593Smuzhiyun  */
5*4882a593Smuzhiyun 
6*4882a593Smuzhiyun #include <linux/kernel.h>
7*4882a593Smuzhiyun #include <linux/kprobes.h>
8*4882a593Smuzhiyun #include <linux/vmalloc.h>
9*4882a593Smuzhiyun #include <linux/init.h>
10*4882a593Smuzhiyun #include <linux/mm.h>
11*4882a593Smuzhiyun #include <linux/cpuhotplug.h>
12*4882a593Smuzhiyun #include <linux/slab.h>
13*4882a593Smuzhiyun #include <linux/uaccess.h>
14*4882a593Smuzhiyun 
15*4882a593Smuzhiyun #include <asm/tlbflush.h>
16*4882a593Smuzhiyun #include <asm/page.h>
17*4882a593Smuzhiyun #include <asm/code-patching.h>
18*4882a593Smuzhiyun #include <asm/setup.h>
19*4882a593Smuzhiyun #include <asm/inst.h>
20*4882a593Smuzhiyun 
__patch_instruction(struct ppc_inst * exec_addr,struct ppc_inst instr,struct ppc_inst * patch_addr)21*4882a593Smuzhiyun static int __patch_instruction(struct ppc_inst *exec_addr, struct ppc_inst instr,
22*4882a593Smuzhiyun 			       struct ppc_inst *patch_addr)
23*4882a593Smuzhiyun {
24*4882a593Smuzhiyun 	if (!ppc_inst_prefixed(instr))
25*4882a593Smuzhiyun 		__put_user_asm_goto(ppc_inst_val(instr), patch_addr, failed, "stw");
26*4882a593Smuzhiyun 	else
27*4882a593Smuzhiyun 		__put_user_asm_goto(ppc_inst_as_u64(instr), patch_addr, failed, "std");
28*4882a593Smuzhiyun 
29*4882a593Smuzhiyun 	asm ("dcbst 0, %0; sync; icbi 0,%1; sync; isync" :: "r" (patch_addr),
30*4882a593Smuzhiyun 							    "r" (exec_addr));
31*4882a593Smuzhiyun 
32*4882a593Smuzhiyun 	return 0;
33*4882a593Smuzhiyun 
34*4882a593Smuzhiyun failed:
35*4882a593Smuzhiyun 	return -EFAULT;
36*4882a593Smuzhiyun }
37*4882a593Smuzhiyun 
raw_patch_instruction(struct ppc_inst * addr,struct ppc_inst instr)38*4882a593Smuzhiyun int raw_patch_instruction(struct ppc_inst *addr, struct ppc_inst instr)
39*4882a593Smuzhiyun {
40*4882a593Smuzhiyun 	return __patch_instruction(addr, instr, addr);
41*4882a593Smuzhiyun }
42*4882a593Smuzhiyun 
43*4882a593Smuzhiyun #ifdef CONFIG_STRICT_KERNEL_RWX
44*4882a593Smuzhiyun static DEFINE_PER_CPU(struct vm_struct *, text_poke_area);
45*4882a593Smuzhiyun 
text_area_cpu_up(unsigned int cpu)46*4882a593Smuzhiyun static int text_area_cpu_up(unsigned int cpu)
47*4882a593Smuzhiyun {
48*4882a593Smuzhiyun 	struct vm_struct *area;
49*4882a593Smuzhiyun 
50*4882a593Smuzhiyun 	area = get_vm_area(PAGE_SIZE, VM_ALLOC);
51*4882a593Smuzhiyun 	if (!area) {
52*4882a593Smuzhiyun 		WARN_ONCE(1, "Failed to create text area for cpu %d\n",
53*4882a593Smuzhiyun 			cpu);
54*4882a593Smuzhiyun 		return -1;
55*4882a593Smuzhiyun 	}
56*4882a593Smuzhiyun 	this_cpu_write(text_poke_area, area);
57*4882a593Smuzhiyun 
58*4882a593Smuzhiyun 	return 0;
59*4882a593Smuzhiyun }
60*4882a593Smuzhiyun 
text_area_cpu_down(unsigned int cpu)61*4882a593Smuzhiyun static int text_area_cpu_down(unsigned int cpu)
62*4882a593Smuzhiyun {
63*4882a593Smuzhiyun 	free_vm_area(this_cpu_read(text_poke_area));
64*4882a593Smuzhiyun 	return 0;
65*4882a593Smuzhiyun }
66*4882a593Smuzhiyun 
67*4882a593Smuzhiyun /*
68*4882a593Smuzhiyun  * Run as a late init call. This allows all the boot time patching to be done
69*4882a593Smuzhiyun  * simply by patching the code, and then we're called here prior to
70*4882a593Smuzhiyun  * mark_rodata_ro(), which happens after all init calls are run. Although
71*4882a593Smuzhiyun  * BUG_ON() is rude, in this case it should only happen if ENOMEM, and we judge
72*4882a593Smuzhiyun  * it as being preferable to a kernel that will crash later when someone tries
73*4882a593Smuzhiyun  * to use patch_instruction().
74*4882a593Smuzhiyun  */
setup_text_poke_area(void)75*4882a593Smuzhiyun static int __init setup_text_poke_area(void)
76*4882a593Smuzhiyun {
77*4882a593Smuzhiyun 	BUG_ON(!cpuhp_setup_state(CPUHP_AP_ONLINE_DYN,
78*4882a593Smuzhiyun 		"powerpc/text_poke:online", text_area_cpu_up,
79*4882a593Smuzhiyun 		text_area_cpu_down));
80*4882a593Smuzhiyun 
81*4882a593Smuzhiyun 	return 0;
82*4882a593Smuzhiyun }
83*4882a593Smuzhiyun late_initcall(setup_text_poke_area);
84*4882a593Smuzhiyun 
85*4882a593Smuzhiyun /*
86*4882a593Smuzhiyun  * This can be called for kernel text or a module.
87*4882a593Smuzhiyun  */
map_patch_area(void * addr,unsigned long text_poke_addr)88*4882a593Smuzhiyun static int map_patch_area(void *addr, unsigned long text_poke_addr)
89*4882a593Smuzhiyun {
90*4882a593Smuzhiyun 	unsigned long pfn;
91*4882a593Smuzhiyun 	int err;
92*4882a593Smuzhiyun 
93*4882a593Smuzhiyun 	if (is_vmalloc_or_module_addr(addr))
94*4882a593Smuzhiyun 		pfn = vmalloc_to_pfn(addr);
95*4882a593Smuzhiyun 	else
96*4882a593Smuzhiyun 		pfn = __pa_symbol(addr) >> PAGE_SHIFT;
97*4882a593Smuzhiyun 
98*4882a593Smuzhiyun 	err = map_kernel_page(text_poke_addr, (pfn << PAGE_SHIFT), PAGE_KERNEL);
99*4882a593Smuzhiyun 
100*4882a593Smuzhiyun 	pr_devel("Mapped addr %lx with pfn %lx:%d\n", text_poke_addr, pfn, err);
101*4882a593Smuzhiyun 	if (err)
102*4882a593Smuzhiyun 		return -1;
103*4882a593Smuzhiyun 
104*4882a593Smuzhiyun 	return 0;
105*4882a593Smuzhiyun }
106*4882a593Smuzhiyun 
unmap_patch_area(unsigned long addr)107*4882a593Smuzhiyun static inline int unmap_patch_area(unsigned long addr)
108*4882a593Smuzhiyun {
109*4882a593Smuzhiyun 	pte_t *ptep;
110*4882a593Smuzhiyun 	pmd_t *pmdp;
111*4882a593Smuzhiyun 	pud_t *pudp;
112*4882a593Smuzhiyun 	p4d_t *p4dp;
113*4882a593Smuzhiyun 	pgd_t *pgdp;
114*4882a593Smuzhiyun 
115*4882a593Smuzhiyun 	pgdp = pgd_offset_k(addr);
116*4882a593Smuzhiyun 	if (unlikely(!pgdp))
117*4882a593Smuzhiyun 		return -EINVAL;
118*4882a593Smuzhiyun 
119*4882a593Smuzhiyun 	p4dp = p4d_offset(pgdp, addr);
120*4882a593Smuzhiyun 	if (unlikely(!p4dp))
121*4882a593Smuzhiyun 		return -EINVAL;
122*4882a593Smuzhiyun 
123*4882a593Smuzhiyun 	pudp = pud_offset(p4dp, addr);
124*4882a593Smuzhiyun 	if (unlikely(!pudp))
125*4882a593Smuzhiyun 		return -EINVAL;
126*4882a593Smuzhiyun 
127*4882a593Smuzhiyun 	pmdp = pmd_offset(pudp, addr);
128*4882a593Smuzhiyun 	if (unlikely(!pmdp))
129*4882a593Smuzhiyun 		return -EINVAL;
130*4882a593Smuzhiyun 
131*4882a593Smuzhiyun 	ptep = pte_offset_kernel(pmdp, addr);
132*4882a593Smuzhiyun 	if (unlikely(!ptep))
133*4882a593Smuzhiyun 		return -EINVAL;
134*4882a593Smuzhiyun 
135*4882a593Smuzhiyun 	pr_devel("clearing mm %p, pte %p, addr %lx\n", &init_mm, ptep, addr);
136*4882a593Smuzhiyun 
137*4882a593Smuzhiyun 	/*
138*4882a593Smuzhiyun 	 * In hash, pte_clear flushes the tlb, in radix, we have to
139*4882a593Smuzhiyun 	 */
140*4882a593Smuzhiyun 	pte_clear(&init_mm, addr, ptep);
141*4882a593Smuzhiyun 	flush_tlb_kernel_range(addr, addr + PAGE_SIZE);
142*4882a593Smuzhiyun 
143*4882a593Smuzhiyun 	return 0;
144*4882a593Smuzhiyun }
145*4882a593Smuzhiyun 
do_patch_instruction(struct ppc_inst * addr,struct ppc_inst instr)146*4882a593Smuzhiyun static int do_patch_instruction(struct ppc_inst *addr, struct ppc_inst instr)
147*4882a593Smuzhiyun {
148*4882a593Smuzhiyun 	int err;
149*4882a593Smuzhiyun 	struct ppc_inst *patch_addr = NULL;
150*4882a593Smuzhiyun 	unsigned long flags;
151*4882a593Smuzhiyun 	unsigned long text_poke_addr;
152*4882a593Smuzhiyun 	unsigned long kaddr = (unsigned long)addr;
153*4882a593Smuzhiyun 
154*4882a593Smuzhiyun 	/*
155*4882a593Smuzhiyun 	 * During early early boot patch_instruction is called
156*4882a593Smuzhiyun 	 * when text_poke_area is not ready, but we still need
157*4882a593Smuzhiyun 	 * to allow patching. We just do the plain old patching
158*4882a593Smuzhiyun 	 */
159*4882a593Smuzhiyun 	if (!this_cpu_read(text_poke_area))
160*4882a593Smuzhiyun 		return raw_patch_instruction(addr, instr);
161*4882a593Smuzhiyun 
162*4882a593Smuzhiyun 	local_irq_save(flags);
163*4882a593Smuzhiyun 
164*4882a593Smuzhiyun 	text_poke_addr = (unsigned long)__this_cpu_read(text_poke_area)->addr;
165*4882a593Smuzhiyun 	if (map_patch_area(addr, text_poke_addr)) {
166*4882a593Smuzhiyun 		err = -1;
167*4882a593Smuzhiyun 		goto out;
168*4882a593Smuzhiyun 	}
169*4882a593Smuzhiyun 
170*4882a593Smuzhiyun 	patch_addr = (struct ppc_inst *)(text_poke_addr + (kaddr & ~PAGE_MASK));
171*4882a593Smuzhiyun 
172*4882a593Smuzhiyun 	__patch_instruction(addr, instr, patch_addr);
173*4882a593Smuzhiyun 
174*4882a593Smuzhiyun 	err = unmap_patch_area(text_poke_addr);
175*4882a593Smuzhiyun 	if (err)
176*4882a593Smuzhiyun 		pr_warn("failed to unmap %lx\n", text_poke_addr);
177*4882a593Smuzhiyun 
178*4882a593Smuzhiyun out:
179*4882a593Smuzhiyun 	local_irq_restore(flags);
180*4882a593Smuzhiyun 
181*4882a593Smuzhiyun 	return err;
182*4882a593Smuzhiyun }
183*4882a593Smuzhiyun #else /* !CONFIG_STRICT_KERNEL_RWX */
184*4882a593Smuzhiyun 
do_patch_instruction(struct ppc_inst * addr,struct ppc_inst instr)185*4882a593Smuzhiyun static int do_patch_instruction(struct ppc_inst *addr, struct ppc_inst instr)
186*4882a593Smuzhiyun {
187*4882a593Smuzhiyun 	return raw_patch_instruction(addr, instr);
188*4882a593Smuzhiyun }
189*4882a593Smuzhiyun 
190*4882a593Smuzhiyun #endif /* CONFIG_STRICT_KERNEL_RWX */
191*4882a593Smuzhiyun 
patch_instruction(struct ppc_inst * addr,struct ppc_inst instr)192*4882a593Smuzhiyun int patch_instruction(struct ppc_inst *addr, struct ppc_inst instr)
193*4882a593Smuzhiyun {
194*4882a593Smuzhiyun 	/* Make sure we aren't patching a freed init section */
195*4882a593Smuzhiyun 	if (init_mem_is_free && init_section_contains(addr, 4)) {
196*4882a593Smuzhiyun 		pr_debug("Skipping init section patching addr: 0x%px\n", addr);
197*4882a593Smuzhiyun 		return 0;
198*4882a593Smuzhiyun 	}
199*4882a593Smuzhiyun 	return do_patch_instruction(addr, instr);
200*4882a593Smuzhiyun }
201*4882a593Smuzhiyun NOKPROBE_SYMBOL(patch_instruction);
202*4882a593Smuzhiyun 
patch_branch(struct ppc_inst * addr,unsigned long target,int flags)203*4882a593Smuzhiyun int patch_branch(struct ppc_inst *addr, unsigned long target, int flags)
204*4882a593Smuzhiyun {
205*4882a593Smuzhiyun 	struct ppc_inst instr;
206*4882a593Smuzhiyun 
207*4882a593Smuzhiyun 	create_branch(&instr, addr, target, flags);
208*4882a593Smuzhiyun 	return patch_instruction(addr, instr);
209*4882a593Smuzhiyun }
210*4882a593Smuzhiyun 
is_offset_in_branch_range(long offset)211*4882a593Smuzhiyun bool is_offset_in_branch_range(long offset)
212*4882a593Smuzhiyun {
213*4882a593Smuzhiyun 	/*
214*4882a593Smuzhiyun 	 * Powerpc branch instruction is :
215*4882a593Smuzhiyun 	 *
216*4882a593Smuzhiyun 	 *  0         6                 30   31
217*4882a593Smuzhiyun 	 *  +---------+----------------+---+---+
218*4882a593Smuzhiyun 	 *  | opcode  |     LI         |AA |LK |
219*4882a593Smuzhiyun 	 *  +---------+----------------+---+---+
220*4882a593Smuzhiyun 	 *  Where AA = 0 and LK = 0
221*4882a593Smuzhiyun 	 *
222*4882a593Smuzhiyun 	 * LI is a signed 24 bits integer. The real branch offset is computed
223*4882a593Smuzhiyun 	 * by: imm32 = SignExtend(LI:'0b00', 32);
224*4882a593Smuzhiyun 	 *
225*4882a593Smuzhiyun 	 * So the maximum forward branch should be:
226*4882a593Smuzhiyun 	 *   (0x007fffff << 2) = 0x01fffffc =  0x1fffffc
227*4882a593Smuzhiyun 	 * The maximum backward branch should be:
228*4882a593Smuzhiyun 	 *   (0xff800000 << 2) = 0xfe000000 = -0x2000000
229*4882a593Smuzhiyun 	 */
230*4882a593Smuzhiyun 	return (offset >= -0x2000000 && offset <= 0x1fffffc && !(offset & 0x3));
231*4882a593Smuzhiyun }
232*4882a593Smuzhiyun 
is_offset_in_cond_branch_range(long offset)233*4882a593Smuzhiyun bool is_offset_in_cond_branch_range(long offset)
234*4882a593Smuzhiyun {
235*4882a593Smuzhiyun 	return offset >= -0x8000 && offset <= 0x7fff && !(offset & 0x3);
236*4882a593Smuzhiyun }
237*4882a593Smuzhiyun 
238*4882a593Smuzhiyun /*
239*4882a593Smuzhiyun  * Helper to check if a given instruction is a conditional branch
240*4882a593Smuzhiyun  * Derived from the conditional checks in analyse_instr()
241*4882a593Smuzhiyun  */
is_conditional_branch(struct ppc_inst instr)242*4882a593Smuzhiyun bool is_conditional_branch(struct ppc_inst instr)
243*4882a593Smuzhiyun {
244*4882a593Smuzhiyun 	unsigned int opcode = ppc_inst_primary_opcode(instr);
245*4882a593Smuzhiyun 
246*4882a593Smuzhiyun 	if (opcode == 16)       /* bc, bca, bcl, bcla */
247*4882a593Smuzhiyun 		return true;
248*4882a593Smuzhiyun 	if (opcode == 19) {
249*4882a593Smuzhiyun 		switch ((ppc_inst_val(instr) >> 1) & 0x3ff) {
250*4882a593Smuzhiyun 		case 16:        /* bclr, bclrl */
251*4882a593Smuzhiyun 		case 528:       /* bcctr, bcctrl */
252*4882a593Smuzhiyun 		case 560:       /* bctar, bctarl */
253*4882a593Smuzhiyun 			return true;
254*4882a593Smuzhiyun 		}
255*4882a593Smuzhiyun 	}
256*4882a593Smuzhiyun 	return false;
257*4882a593Smuzhiyun }
258*4882a593Smuzhiyun NOKPROBE_SYMBOL(is_conditional_branch);
259*4882a593Smuzhiyun 
create_branch(struct ppc_inst * instr,const struct ppc_inst * addr,unsigned long target,int flags)260*4882a593Smuzhiyun int create_branch(struct ppc_inst *instr,
261*4882a593Smuzhiyun 		  const struct ppc_inst *addr,
262*4882a593Smuzhiyun 		  unsigned long target, int flags)
263*4882a593Smuzhiyun {
264*4882a593Smuzhiyun 	long offset;
265*4882a593Smuzhiyun 
266*4882a593Smuzhiyun 	*instr = ppc_inst(0);
267*4882a593Smuzhiyun 	offset = target;
268*4882a593Smuzhiyun 	if (! (flags & BRANCH_ABSOLUTE))
269*4882a593Smuzhiyun 		offset = offset - (unsigned long)addr;
270*4882a593Smuzhiyun 
271*4882a593Smuzhiyun 	/* Check we can represent the target in the instruction format */
272*4882a593Smuzhiyun 	if (!is_offset_in_branch_range(offset))
273*4882a593Smuzhiyun 		return 1;
274*4882a593Smuzhiyun 
275*4882a593Smuzhiyun 	/* Mask out the flags and target, so they don't step on each other. */
276*4882a593Smuzhiyun 	*instr = ppc_inst(0x48000000 | (flags & 0x3) | (offset & 0x03FFFFFC));
277*4882a593Smuzhiyun 
278*4882a593Smuzhiyun 	return 0;
279*4882a593Smuzhiyun }
280*4882a593Smuzhiyun 
create_cond_branch(struct ppc_inst * instr,const struct ppc_inst * addr,unsigned long target,int flags)281*4882a593Smuzhiyun int create_cond_branch(struct ppc_inst *instr, const struct ppc_inst *addr,
282*4882a593Smuzhiyun 		       unsigned long target, int flags)
283*4882a593Smuzhiyun {
284*4882a593Smuzhiyun 	long offset;
285*4882a593Smuzhiyun 
286*4882a593Smuzhiyun 	offset = target;
287*4882a593Smuzhiyun 	if (! (flags & BRANCH_ABSOLUTE))
288*4882a593Smuzhiyun 		offset = offset - (unsigned long)addr;
289*4882a593Smuzhiyun 
290*4882a593Smuzhiyun 	/* Check we can represent the target in the instruction format */
291*4882a593Smuzhiyun 	if (!is_offset_in_cond_branch_range(offset))
292*4882a593Smuzhiyun 		return 1;
293*4882a593Smuzhiyun 
294*4882a593Smuzhiyun 	/* Mask out the flags and target, so they don't step on each other. */
295*4882a593Smuzhiyun 	*instr = ppc_inst(0x40000000 | (flags & 0x3FF0003) | (offset & 0xFFFC));
296*4882a593Smuzhiyun 
297*4882a593Smuzhiyun 	return 0;
298*4882a593Smuzhiyun }
299*4882a593Smuzhiyun 
branch_opcode(struct ppc_inst instr)300*4882a593Smuzhiyun static unsigned int branch_opcode(struct ppc_inst instr)
301*4882a593Smuzhiyun {
302*4882a593Smuzhiyun 	return ppc_inst_primary_opcode(instr) & 0x3F;
303*4882a593Smuzhiyun }
304*4882a593Smuzhiyun 
instr_is_branch_iform(struct ppc_inst instr)305*4882a593Smuzhiyun static int instr_is_branch_iform(struct ppc_inst instr)
306*4882a593Smuzhiyun {
307*4882a593Smuzhiyun 	return branch_opcode(instr) == 18;
308*4882a593Smuzhiyun }
309*4882a593Smuzhiyun 
instr_is_branch_bform(struct ppc_inst instr)310*4882a593Smuzhiyun static int instr_is_branch_bform(struct ppc_inst instr)
311*4882a593Smuzhiyun {
312*4882a593Smuzhiyun 	return branch_opcode(instr) == 16;
313*4882a593Smuzhiyun }
314*4882a593Smuzhiyun 
instr_is_relative_branch(struct ppc_inst instr)315*4882a593Smuzhiyun int instr_is_relative_branch(struct ppc_inst instr)
316*4882a593Smuzhiyun {
317*4882a593Smuzhiyun 	if (ppc_inst_val(instr) & BRANCH_ABSOLUTE)
318*4882a593Smuzhiyun 		return 0;
319*4882a593Smuzhiyun 
320*4882a593Smuzhiyun 	return instr_is_branch_iform(instr) || instr_is_branch_bform(instr);
321*4882a593Smuzhiyun }
322*4882a593Smuzhiyun 
instr_is_relative_link_branch(struct ppc_inst instr)323*4882a593Smuzhiyun int instr_is_relative_link_branch(struct ppc_inst instr)
324*4882a593Smuzhiyun {
325*4882a593Smuzhiyun 	return instr_is_relative_branch(instr) && (ppc_inst_val(instr) & BRANCH_SET_LINK);
326*4882a593Smuzhiyun }
327*4882a593Smuzhiyun 
branch_iform_target(const struct ppc_inst * instr)328*4882a593Smuzhiyun static unsigned long branch_iform_target(const struct ppc_inst *instr)
329*4882a593Smuzhiyun {
330*4882a593Smuzhiyun 	signed long imm;
331*4882a593Smuzhiyun 
332*4882a593Smuzhiyun 	imm = ppc_inst_val(*instr) & 0x3FFFFFC;
333*4882a593Smuzhiyun 
334*4882a593Smuzhiyun 	/* If the top bit of the immediate value is set this is negative */
335*4882a593Smuzhiyun 	if (imm & 0x2000000)
336*4882a593Smuzhiyun 		imm -= 0x4000000;
337*4882a593Smuzhiyun 
338*4882a593Smuzhiyun 	if ((ppc_inst_val(*instr) & BRANCH_ABSOLUTE) == 0)
339*4882a593Smuzhiyun 		imm += (unsigned long)instr;
340*4882a593Smuzhiyun 
341*4882a593Smuzhiyun 	return (unsigned long)imm;
342*4882a593Smuzhiyun }
343*4882a593Smuzhiyun 
branch_bform_target(const struct ppc_inst * instr)344*4882a593Smuzhiyun static unsigned long branch_bform_target(const struct ppc_inst *instr)
345*4882a593Smuzhiyun {
346*4882a593Smuzhiyun 	signed long imm;
347*4882a593Smuzhiyun 
348*4882a593Smuzhiyun 	imm = ppc_inst_val(*instr) & 0xFFFC;
349*4882a593Smuzhiyun 
350*4882a593Smuzhiyun 	/* If the top bit of the immediate value is set this is negative */
351*4882a593Smuzhiyun 	if (imm & 0x8000)
352*4882a593Smuzhiyun 		imm -= 0x10000;
353*4882a593Smuzhiyun 
354*4882a593Smuzhiyun 	if ((ppc_inst_val(*instr) & BRANCH_ABSOLUTE) == 0)
355*4882a593Smuzhiyun 		imm += (unsigned long)instr;
356*4882a593Smuzhiyun 
357*4882a593Smuzhiyun 	return (unsigned long)imm;
358*4882a593Smuzhiyun }
359*4882a593Smuzhiyun 
branch_target(const struct ppc_inst * instr)360*4882a593Smuzhiyun unsigned long branch_target(const struct ppc_inst *instr)
361*4882a593Smuzhiyun {
362*4882a593Smuzhiyun 	if (instr_is_branch_iform(ppc_inst_read(instr)))
363*4882a593Smuzhiyun 		return branch_iform_target(instr);
364*4882a593Smuzhiyun 	else if (instr_is_branch_bform(ppc_inst_read(instr)))
365*4882a593Smuzhiyun 		return branch_bform_target(instr);
366*4882a593Smuzhiyun 
367*4882a593Smuzhiyun 	return 0;
368*4882a593Smuzhiyun }
369*4882a593Smuzhiyun 
instr_is_branch_to_addr(const struct ppc_inst * instr,unsigned long addr)370*4882a593Smuzhiyun int instr_is_branch_to_addr(const struct ppc_inst *instr, unsigned long addr)
371*4882a593Smuzhiyun {
372*4882a593Smuzhiyun 	if (instr_is_branch_iform(ppc_inst_read(instr)) ||
373*4882a593Smuzhiyun 	    instr_is_branch_bform(ppc_inst_read(instr)))
374*4882a593Smuzhiyun 		return branch_target(instr) == addr;
375*4882a593Smuzhiyun 
376*4882a593Smuzhiyun 	return 0;
377*4882a593Smuzhiyun }
378*4882a593Smuzhiyun 
translate_branch(struct ppc_inst * instr,const struct ppc_inst * dest,const struct ppc_inst * src)379*4882a593Smuzhiyun int translate_branch(struct ppc_inst *instr, const struct ppc_inst *dest,
380*4882a593Smuzhiyun 		     const struct ppc_inst *src)
381*4882a593Smuzhiyun {
382*4882a593Smuzhiyun 	unsigned long target;
383*4882a593Smuzhiyun 	target = branch_target(src);
384*4882a593Smuzhiyun 
385*4882a593Smuzhiyun 	if (instr_is_branch_iform(ppc_inst_read(src)))
386*4882a593Smuzhiyun 		return create_branch(instr, dest, target,
387*4882a593Smuzhiyun 				     ppc_inst_val(ppc_inst_read(src)));
388*4882a593Smuzhiyun 	else if (instr_is_branch_bform(ppc_inst_read(src)))
389*4882a593Smuzhiyun 		return create_cond_branch(instr, dest, target,
390*4882a593Smuzhiyun 					  ppc_inst_val(ppc_inst_read(src)));
391*4882a593Smuzhiyun 
392*4882a593Smuzhiyun 	return 1;
393*4882a593Smuzhiyun }
394*4882a593Smuzhiyun 
395*4882a593Smuzhiyun #ifdef CONFIG_PPC_BOOK3E_64
__patch_exception(int exc,unsigned long addr)396*4882a593Smuzhiyun void __patch_exception(int exc, unsigned long addr)
397*4882a593Smuzhiyun {
398*4882a593Smuzhiyun 	extern unsigned int interrupt_base_book3e;
399*4882a593Smuzhiyun 	unsigned int *ibase = &interrupt_base_book3e;
400*4882a593Smuzhiyun 
401*4882a593Smuzhiyun 	/* Our exceptions vectors start with a NOP and -then- a branch
402*4882a593Smuzhiyun 	 * to deal with single stepping from userspace which stops on
403*4882a593Smuzhiyun 	 * the second instruction. Thus we need to patch the second
404*4882a593Smuzhiyun 	 * instruction of the exception, not the first one
405*4882a593Smuzhiyun 	 */
406*4882a593Smuzhiyun 
407*4882a593Smuzhiyun 	patch_branch((struct ppc_inst *)(ibase + (exc / 4) + 1), addr, 0);
408*4882a593Smuzhiyun }
409*4882a593Smuzhiyun #endif
410*4882a593Smuzhiyun 
411*4882a593Smuzhiyun #ifdef CONFIG_CODE_PATCHING_SELFTEST
412*4882a593Smuzhiyun 
test_trampoline(void)413*4882a593Smuzhiyun static void __init test_trampoline(void)
414*4882a593Smuzhiyun {
415*4882a593Smuzhiyun 	asm ("nop;\n");
416*4882a593Smuzhiyun }
417*4882a593Smuzhiyun 
418*4882a593Smuzhiyun #define check(x)	\
419*4882a593Smuzhiyun 	if (!(x)) printk("code-patching: test failed at line %d\n", __LINE__);
420*4882a593Smuzhiyun 
test_branch_iform(void)421*4882a593Smuzhiyun static void __init test_branch_iform(void)
422*4882a593Smuzhiyun {
423*4882a593Smuzhiyun 	int err;
424*4882a593Smuzhiyun 	struct ppc_inst instr;
425*4882a593Smuzhiyun 	unsigned long addr;
426*4882a593Smuzhiyun 
427*4882a593Smuzhiyun 	addr = (unsigned long)&instr;
428*4882a593Smuzhiyun 
429*4882a593Smuzhiyun 	/* The simplest case, branch to self, no flags */
430*4882a593Smuzhiyun 	check(instr_is_branch_iform(ppc_inst(0x48000000)));
431*4882a593Smuzhiyun 	/* All bits of target set, and flags */
432*4882a593Smuzhiyun 	check(instr_is_branch_iform(ppc_inst(0x4bffffff)));
433*4882a593Smuzhiyun 	/* High bit of opcode set, which is wrong */
434*4882a593Smuzhiyun 	check(!instr_is_branch_iform(ppc_inst(0xcbffffff)));
435*4882a593Smuzhiyun 	/* Middle bits of opcode set, which is wrong */
436*4882a593Smuzhiyun 	check(!instr_is_branch_iform(ppc_inst(0x7bffffff)));
437*4882a593Smuzhiyun 
438*4882a593Smuzhiyun 	/* Simplest case, branch to self with link */
439*4882a593Smuzhiyun 	check(instr_is_branch_iform(ppc_inst(0x48000001)));
440*4882a593Smuzhiyun 	/* All bits of targets set */
441*4882a593Smuzhiyun 	check(instr_is_branch_iform(ppc_inst(0x4bfffffd)));
442*4882a593Smuzhiyun 	/* Some bits of targets set */
443*4882a593Smuzhiyun 	check(instr_is_branch_iform(ppc_inst(0x4bff00fd)));
444*4882a593Smuzhiyun 	/* Must be a valid branch to start with */
445*4882a593Smuzhiyun 	check(!instr_is_branch_iform(ppc_inst(0x7bfffffd)));
446*4882a593Smuzhiyun 
447*4882a593Smuzhiyun 	/* Absolute branch to 0x100 */
448*4882a593Smuzhiyun 	instr = ppc_inst(0x48000103);
449*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, 0x100));
450*4882a593Smuzhiyun 	/* Absolute branch to 0x420fc */
451*4882a593Smuzhiyun 	instr = ppc_inst(0x480420ff);
452*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, 0x420fc));
453*4882a593Smuzhiyun 	/* Maximum positive relative branch, + 20MB - 4B */
454*4882a593Smuzhiyun 	instr = ppc_inst(0x49fffffc);
455*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr + 0x1FFFFFC));
456*4882a593Smuzhiyun 	/* Smallest negative relative branch, - 4B */
457*4882a593Smuzhiyun 	instr = ppc_inst(0x4bfffffc);
458*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr - 4));
459*4882a593Smuzhiyun 	/* Largest negative relative branch, - 32 MB */
460*4882a593Smuzhiyun 	instr = ppc_inst(0x4a000000);
461*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr - 0x2000000));
462*4882a593Smuzhiyun 
463*4882a593Smuzhiyun 	/* Branch to self, with link */
464*4882a593Smuzhiyun 	err = create_branch(&instr, &instr, addr, BRANCH_SET_LINK);
465*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr));
466*4882a593Smuzhiyun 
467*4882a593Smuzhiyun 	/* Branch to self - 0x100, with link */
468*4882a593Smuzhiyun 	err = create_branch(&instr, &instr, addr - 0x100, BRANCH_SET_LINK);
469*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr - 0x100));
470*4882a593Smuzhiyun 
471*4882a593Smuzhiyun 	/* Branch to self + 0x100, no link */
472*4882a593Smuzhiyun 	err = create_branch(&instr, &instr, addr + 0x100, 0);
473*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr + 0x100));
474*4882a593Smuzhiyun 
475*4882a593Smuzhiyun 	/* Maximum relative negative offset, - 32 MB */
476*4882a593Smuzhiyun 	err = create_branch(&instr, &instr, addr - 0x2000000, BRANCH_SET_LINK);
477*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr - 0x2000000));
478*4882a593Smuzhiyun 
479*4882a593Smuzhiyun 	/* Out of range relative negative offset, - 32 MB + 4*/
480*4882a593Smuzhiyun 	err = create_branch(&instr, &instr, addr - 0x2000004, BRANCH_SET_LINK);
481*4882a593Smuzhiyun 	check(err);
482*4882a593Smuzhiyun 
483*4882a593Smuzhiyun 	/* Out of range relative positive offset, + 32 MB */
484*4882a593Smuzhiyun 	err = create_branch(&instr, &instr, addr + 0x2000000, BRANCH_SET_LINK);
485*4882a593Smuzhiyun 	check(err);
486*4882a593Smuzhiyun 
487*4882a593Smuzhiyun 	/* Unaligned target */
488*4882a593Smuzhiyun 	err = create_branch(&instr, &instr, addr + 3, BRANCH_SET_LINK);
489*4882a593Smuzhiyun 	check(err);
490*4882a593Smuzhiyun 
491*4882a593Smuzhiyun 	/* Check flags are masked correctly */
492*4882a593Smuzhiyun 	err = create_branch(&instr, &instr, addr, 0xFFFFFFFC);
493*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr));
494*4882a593Smuzhiyun 	check(ppc_inst_equal(instr, ppc_inst(0x48000000)));
495*4882a593Smuzhiyun }
496*4882a593Smuzhiyun 
test_create_function_call(void)497*4882a593Smuzhiyun static void __init test_create_function_call(void)
498*4882a593Smuzhiyun {
499*4882a593Smuzhiyun 	struct ppc_inst *iptr;
500*4882a593Smuzhiyun 	unsigned long dest;
501*4882a593Smuzhiyun 	struct ppc_inst instr;
502*4882a593Smuzhiyun 
503*4882a593Smuzhiyun 	/* Check we can create a function call */
504*4882a593Smuzhiyun 	iptr = (struct ppc_inst *)ppc_function_entry(test_trampoline);
505*4882a593Smuzhiyun 	dest = ppc_function_entry(test_create_function_call);
506*4882a593Smuzhiyun 	create_branch(&instr, iptr, dest, BRANCH_SET_LINK);
507*4882a593Smuzhiyun 	patch_instruction(iptr, instr);
508*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(iptr, dest));
509*4882a593Smuzhiyun }
510*4882a593Smuzhiyun 
test_branch_bform(void)511*4882a593Smuzhiyun static void __init test_branch_bform(void)
512*4882a593Smuzhiyun {
513*4882a593Smuzhiyun 	int err;
514*4882a593Smuzhiyun 	unsigned long addr;
515*4882a593Smuzhiyun 	struct ppc_inst *iptr, instr;
516*4882a593Smuzhiyun 	unsigned int flags;
517*4882a593Smuzhiyun 
518*4882a593Smuzhiyun 	iptr = &instr;
519*4882a593Smuzhiyun 	addr = (unsigned long)iptr;
520*4882a593Smuzhiyun 
521*4882a593Smuzhiyun 	/* The simplest case, branch to self, no flags */
522*4882a593Smuzhiyun 	check(instr_is_branch_bform(ppc_inst(0x40000000)));
523*4882a593Smuzhiyun 	/* All bits of target set, and flags */
524*4882a593Smuzhiyun 	check(instr_is_branch_bform(ppc_inst(0x43ffffff)));
525*4882a593Smuzhiyun 	/* High bit of opcode set, which is wrong */
526*4882a593Smuzhiyun 	check(!instr_is_branch_bform(ppc_inst(0xc3ffffff)));
527*4882a593Smuzhiyun 	/* Middle bits of opcode set, which is wrong */
528*4882a593Smuzhiyun 	check(!instr_is_branch_bform(ppc_inst(0x7bffffff)));
529*4882a593Smuzhiyun 
530*4882a593Smuzhiyun 	/* Absolute conditional branch to 0x100 */
531*4882a593Smuzhiyun 	instr = ppc_inst(0x43ff0103);
532*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, 0x100));
533*4882a593Smuzhiyun 	/* Absolute conditional branch to 0x20fc */
534*4882a593Smuzhiyun 	instr = ppc_inst(0x43ff20ff);
535*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, 0x20fc));
536*4882a593Smuzhiyun 	/* Maximum positive relative conditional branch, + 32 KB - 4B */
537*4882a593Smuzhiyun 	instr = ppc_inst(0x43ff7ffc);
538*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr + 0x7FFC));
539*4882a593Smuzhiyun 	/* Smallest negative relative conditional branch, - 4B */
540*4882a593Smuzhiyun 	instr = ppc_inst(0x43fffffc);
541*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr - 4));
542*4882a593Smuzhiyun 	/* Largest negative relative conditional branch, - 32 KB */
543*4882a593Smuzhiyun 	instr = ppc_inst(0x43ff8000);
544*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr - 0x8000));
545*4882a593Smuzhiyun 
546*4882a593Smuzhiyun 	/* All condition code bits set & link */
547*4882a593Smuzhiyun 	flags = 0x3ff000 | BRANCH_SET_LINK;
548*4882a593Smuzhiyun 
549*4882a593Smuzhiyun 	/* Branch to self */
550*4882a593Smuzhiyun 	err = create_cond_branch(&instr, iptr, addr, flags);
551*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr));
552*4882a593Smuzhiyun 
553*4882a593Smuzhiyun 	/* Branch to self - 0x100 */
554*4882a593Smuzhiyun 	err = create_cond_branch(&instr, iptr, addr - 0x100, flags);
555*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr - 0x100));
556*4882a593Smuzhiyun 
557*4882a593Smuzhiyun 	/* Branch to self + 0x100 */
558*4882a593Smuzhiyun 	err = create_cond_branch(&instr, iptr, addr + 0x100, flags);
559*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr + 0x100));
560*4882a593Smuzhiyun 
561*4882a593Smuzhiyun 	/* Maximum relative negative offset, - 32 KB */
562*4882a593Smuzhiyun 	err = create_cond_branch(&instr, iptr, addr - 0x8000, flags);
563*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr - 0x8000));
564*4882a593Smuzhiyun 
565*4882a593Smuzhiyun 	/* Out of range relative negative offset, - 32 KB + 4*/
566*4882a593Smuzhiyun 	err = create_cond_branch(&instr, iptr, addr - 0x8004, flags);
567*4882a593Smuzhiyun 	check(err);
568*4882a593Smuzhiyun 
569*4882a593Smuzhiyun 	/* Out of range relative positive offset, + 32 KB */
570*4882a593Smuzhiyun 	err = create_cond_branch(&instr, iptr, addr + 0x8000, flags);
571*4882a593Smuzhiyun 	check(err);
572*4882a593Smuzhiyun 
573*4882a593Smuzhiyun 	/* Unaligned target */
574*4882a593Smuzhiyun 	err = create_cond_branch(&instr, iptr, addr + 3, flags);
575*4882a593Smuzhiyun 	check(err);
576*4882a593Smuzhiyun 
577*4882a593Smuzhiyun 	/* Check flags are masked correctly */
578*4882a593Smuzhiyun 	err = create_cond_branch(&instr, iptr, addr, 0xFFFFFFFC);
579*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(&instr, addr));
580*4882a593Smuzhiyun 	check(ppc_inst_equal(instr, ppc_inst(0x43FF0000)));
581*4882a593Smuzhiyun }
582*4882a593Smuzhiyun 
test_translate_branch(void)583*4882a593Smuzhiyun static void __init test_translate_branch(void)
584*4882a593Smuzhiyun {
585*4882a593Smuzhiyun 	unsigned long addr;
586*4882a593Smuzhiyun 	void *p, *q;
587*4882a593Smuzhiyun 	struct ppc_inst instr;
588*4882a593Smuzhiyun 	void *buf;
589*4882a593Smuzhiyun 
590*4882a593Smuzhiyun 	buf = vmalloc(PAGE_ALIGN(0x2000000 + 1));
591*4882a593Smuzhiyun 	check(buf);
592*4882a593Smuzhiyun 	if (!buf)
593*4882a593Smuzhiyun 		return;
594*4882a593Smuzhiyun 
595*4882a593Smuzhiyun 	/* Simple case, branch to self moved a little */
596*4882a593Smuzhiyun 	p = buf;
597*4882a593Smuzhiyun 	addr = (unsigned long)p;
598*4882a593Smuzhiyun 	patch_branch(p, addr, 0);
599*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(p, addr));
600*4882a593Smuzhiyun 	q = p + 4;
601*4882a593Smuzhiyun 	translate_branch(&instr, q, p);
602*4882a593Smuzhiyun 	patch_instruction(q, instr);
603*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(q, addr));
604*4882a593Smuzhiyun 
605*4882a593Smuzhiyun 	/* Maximum negative case, move b . to addr + 32 MB */
606*4882a593Smuzhiyun 	p = buf;
607*4882a593Smuzhiyun 	addr = (unsigned long)p;
608*4882a593Smuzhiyun 	patch_branch(p, addr, 0);
609*4882a593Smuzhiyun 	q = buf + 0x2000000;
610*4882a593Smuzhiyun 	translate_branch(&instr, q, p);
611*4882a593Smuzhiyun 	patch_instruction(q, instr);
612*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(p, addr));
613*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(q, addr));
614*4882a593Smuzhiyun 	check(ppc_inst_equal(ppc_inst_read(q), ppc_inst(0x4a000000)));
615*4882a593Smuzhiyun 
616*4882a593Smuzhiyun 	/* Maximum positive case, move x to x - 32 MB + 4 */
617*4882a593Smuzhiyun 	p = buf + 0x2000000;
618*4882a593Smuzhiyun 	addr = (unsigned long)p;
619*4882a593Smuzhiyun 	patch_branch(p, addr, 0);
620*4882a593Smuzhiyun 	q = buf + 4;
621*4882a593Smuzhiyun 	translate_branch(&instr, q, p);
622*4882a593Smuzhiyun 	patch_instruction(q, instr);
623*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(p, addr));
624*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(q, addr));
625*4882a593Smuzhiyun 	check(ppc_inst_equal(ppc_inst_read(q), ppc_inst(0x49fffffc)));
626*4882a593Smuzhiyun 
627*4882a593Smuzhiyun 	/* Jump to x + 16 MB moved to x + 20 MB */
628*4882a593Smuzhiyun 	p = buf;
629*4882a593Smuzhiyun 	addr = 0x1000000 + (unsigned long)buf;
630*4882a593Smuzhiyun 	patch_branch(p, addr, BRANCH_SET_LINK);
631*4882a593Smuzhiyun 	q = buf + 0x1400000;
632*4882a593Smuzhiyun 	translate_branch(&instr, q, p);
633*4882a593Smuzhiyun 	patch_instruction(q, instr);
634*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(p, addr));
635*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(q, addr));
636*4882a593Smuzhiyun 
637*4882a593Smuzhiyun 	/* Jump to x + 16 MB moved to x - 16 MB + 4 */
638*4882a593Smuzhiyun 	p = buf + 0x1000000;
639*4882a593Smuzhiyun 	addr = 0x2000000 + (unsigned long)buf;
640*4882a593Smuzhiyun 	patch_branch(p, addr, 0);
641*4882a593Smuzhiyun 	q = buf + 4;
642*4882a593Smuzhiyun 	translate_branch(&instr, q, p);
643*4882a593Smuzhiyun 	patch_instruction(q, instr);
644*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(p, addr));
645*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(q, addr));
646*4882a593Smuzhiyun 
647*4882a593Smuzhiyun 
648*4882a593Smuzhiyun 	/* Conditional branch tests */
649*4882a593Smuzhiyun 
650*4882a593Smuzhiyun 	/* Simple case, branch to self moved a little */
651*4882a593Smuzhiyun 	p = buf;
652*4882a593Smuzhiyun 	addr = (unsigned long)p;
653*4882a593Smuzhiyun 	create_cond_branch(&instr, p, addr, 0);
654*4882a593Smuzhiyun 	patch_instruction(p, instr);
655*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(p, addr));
656*4882a593Smuzhiyun 	q = buf + 4;
657*4882a593Smuzhiyun 	translate_branch(&instr, q, p);
658*4882a593Smuzhiyun 	patch_instruction(q, instr);
659*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(q, addr));
660*4882a593Smuzhiyun 
661*4882a593Smuzhiyun 	/* Maximum negative case, move b . to addr + 32 KB */
662*4882a593Smuzhiyun 	p = buf;
663*4882a593Smuzhiyun 	addr = (unsigned long)p;
664*4882a593Smuzhiyun 	create_cond_branch(&instr, p, addr, 0xFFFFFFFC);
665*4882a593Smuzhiyun 	patch_instruction(p, instr);
666*4882a593Smuzhiyun 	q = buf + 0x8000;
667*4882a593Smuzhiyun 	translate_branch(&instr, q, p);
668*4882a593Smuzhiyun 	patch_instruction(q, instr);
669*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(p, addr));
670*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(q, addr));
671*4882a593Smuzhiyun 	check(ppc_inst_equal(ppc_inst_read(q), ppc_inst(0x43ff8000)));
672*4882a593Smuzhiyun 
673*4882a593Smuzhiyun 	/* Maximum positive case, move x to x - 32 KB + 4 */
674*4882a593Smuzhiyun 	p = buf + 0x8000;
675*4882a593Smuzhiyun 	addr = (unsigned long)p;
676*4882a593Smuzhiyun 	create_cond_branch(&instr, p, addr, 0xFFFFFFFC);
677*4882a593Smuzhiyun 	patch_instruction(p, instr);
678*4882a593Smuzhiyun 	q = buf + 4;
679*4882a593Smuzhiyun 	translate_branch(&instr, q, p);
680*4882a593Smuzhiyun 	patch_instruction(q, instr);
681*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(p, addr));
682*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(q, addr));
683*4882a593Smuzhiyun 	check(ppc_inst_equal(ppc_inst_read(q), ppc_inst(0x43ff7ffc)));
684*4882a593Smuzhiyun 
685*4882a593Smuzhiyun 	/* Jump to x + 12 KB moved to x + 20 KB */
686*4882a593Smuzhiyun 	p = buf;
687*4882a593Smuzhiyun 	addr = 0x3000 + (unsigned long)buf;
688*4882a593Smuzhiyun 	create_cond_branch(&instr, p, addr, BRANCH_SET_LINK);
689*4882a593Smuzhiyun 	patch_instruction(p, instr);
690*4882a593Smuzhiyun 	q = buf + 0x5000;
691*4882a593Smuzhiyun 	translate_branch(&instr, q, p);
692*4882a593Smuzhiyun 	patch_instruction(q, instr);
693*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(p, addr));
694*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(q, addr));
695*4882a593Smuzhiyun 
696*4882a593Smuzhiyun 	/* Jump to x + 8 KB moved to x - 8 KB + 4 */
697*4882a593Smuzhiyun 	p = buf + 0x2000;
698*4882a593Smuzhiyun 	addr = 0x4000 + (unsigned long)buf;
699*4882a593Smuzhiyun 	create_cond_branch(&instr, p, addr, 0);
700*4882a593Smuzhiyun 	patch_instruction(p, instr);
701*4882a593Smuzhiyun 	q = buf + 4;
702*4882a593Smuzhiyun 	translate_branch(&instr, q, p);
703*4882a593Smuzhiyun 	patch_instruction(q, instr);
704*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(p, addr));
705*4882a593Smuzhiyun 	check(instr_is_branch_to_addr(q, addr));
706*4882a593Smuzhiyun 
707*4882a593Smuzhiyun 	/* Free the buffer we were using */
708*4882a593Smuzhiyun 	vfree(buf);
709*4882a593Smuzhiyun }
710*4882a593Smuzhiyun 
711*4882a593Smuzhiyun #ifdef CONFIG_PPC64
test_prefixed_patching(void)712*4882a593Smuzhiyun static void __init test_prefixed_patching(void)
713*4882a593Smuzhiyun {
714*4882a593Smuzhiyun 	extern unsigned int code_patching_test1[];
715*4882a593Smuzhiyun 	extern unsigned int code_patching_test1_expected[];
716*4882a593Smuzhiyun 	extern unsigned int end_code_patching_test1[];
717*4882a593Smuzhiyun 
718*4882a593Smuzhiyun 	__patch_instruction((struct ppc_inst *)code_patching_test1,
719*4882a593Smuzhiyun 			    ppc_inst_prefix(OP_PREFIX << 26, 0x00000000),
720*4882a593Smuzhiyun 			    (struct ppc_inst *)code_patching_test1);
721*4882a593Smuzhiyun 
722*4882a593Smuzhiyun 	check(!memcmp(code_patching_test1,
723*4882a593Smuzhiyun 		      code_patching_test1_expected,
724*4882a593Smuzhiyun 		      sizeof(unsigned int) *
725*4882a593Smuzhiyun 		      (end_code_patching_test1 - code_patching_test1)));
726*4882a593Smuzhiyun }
727*4882a593Smuzhiyun #else
test_prefixed_patching(void)728*4882a593Smuzhiyun static inline void test_prefixed_patching(void) {}
729*4882a593Smuzhiyun #endif
730*4882a593Smuzhiyun 
test_code_patching(void)731*4882a593Smuzhiyun static int __init test_code_patching(void)
732*4882a593Smuzhiyun {
733*4882a593Smuzhiyun 	printk(KERN_DEBUG "Running code patching self-tests ...\n");
734*4882a593Smuzhiyun 
735*4882a593Smuzhiyun 	test_branch_iform();
736*4882a593Smuzhiyun 	test_branch_bform();
737*4882a593Smuzhiyun 	test_create_function_call();
738*4882a593Smuzhiyun 	test_translate_branch();
739*4882a593Smuzhiyun 	test_prefixed_patching();
740*4882a593Smuzhiyun 
741*4882a593Smuzhiyun 	return 0;
742*4882a593Smuzhiyun }
743*4882a593Smuzhiyun late_initcall(test_code_patching);
744*4882a593Smuzhiyun 
745*4882a593Smuzhiyun #endif /* CONFIG_CODE_PATCHING_SELFTEST */
746