xref: /OK3568_Linux_fs/kernel/drivers/firmware/efi/memattr.c (revision 4882a59341e53eb6f0b4789bf948001014eff981)
1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun  * Copyright (C) 2016 Linaro Ltd. <ard.biesheuvel@linaro.org>
4*4882a593Smuzhiyun  */
5*4882a593Smuzhiyun 
6*4882a593Smuzhiyun #define pr_fmt(fmt)	"efi: memattr: " fmt
7*4882a593Smuzhiyun 
8*4882a593Smuzhiyun #include <linux/efi.h>
9*4882a593Smuzhiyun #include <linux/init.h>
10*4882a593Smuzhiyun #include <linux/io.h>
11*4882a593Smuzhiyun #include <linux/memblock.h>
12*4882a593Smuzhiyun 
13*4882a593Smuzhiyun #include <asm/early_ioremap.h>
14*4882a593Smuzhiyun 
15*4882a593Smuzhiyun static int __initdata tbl_size;
16*4882a593Smuzhiyun unsigned long __ro_after_init efi_mem_attr_table = EFI_INVALID_TABLE_ADDR;
17*4882a593Smuzhiyun 
18*4882a593Smuzhiyun /*
19*4882a593Smuzhiyun  * Reserve the memory associated with the Memory Attributes configuration
20*4882a593Smuzhiyun  * table, if it exists.
21*4882a593Smuzhiyun  */
efi_memattr_init(void)22*4882a593Smuzhiyun int __init efi_memattr_init(void)
23*4882a593Smuzhiyun {
24*4882a593Smuzhiyun 	efi_memory_attributes_table_t *tbl;
25*4882a593Smuzhiyun 
26*4882a593Smuzhiyun 	if (efi_mem_attr_table == EFI_INVALID_TABLE_ADDR)
27*4882a593Smuzhiyun 		return 0;
28*4882a593Smuzhiyun 
29*4882a593Smuzhiyun 	tbl = early_memremap(efi_mem_attr_table, sizeof(*tbl));
30*4882a593Smuzhiyun 	if (!tbl) {
31*4882a593Smuzhiyun 		pr_err("Failed to map EFI Memory Attributes table @ 0x%lx\n",
32*4882a593Smuzhiyun 		       efi_mem_attr_table);
33*4882a593Smuzhiyun 		return -ENOMEM;
34*4882a593Smuzhiyun 	}
35*4882a593Smuzhiyun 
36*4882a593Smuzhiyun 	if (tbl->version > 1) {
37*4882a593Smuzhiyun 		pr_warn("Unexpected EFI Memory Attributes table version %d\n",
38*4882a593Smuzhiyun 			tbl->version);
39*4882a593Smuzhiyun 		goto unmap;
40*4882a593Smuzhiyun 	}
41*4882a593Smuzhiyun 
42*4882a593Smuzhiyun 	tbl_size = sizeof(*tbl) + tbl->num_entries * tbl->desc_size;
43*4882a593Smuzhiyun 	memblock_reserve(efi_mem_attr_table, tbl_size);
44*4882a593Smuzhiyun 	set_bit(EFI_MEM_ATTR, &efi.flags);
45*4882a593Smuzhiyun 
46*4882a593Smuzhiyun unmap:
47*4882a593Smuzhiyun 	early_memunmap(tbl, sizeof(*tbl));
48*4882a593Smuzhiyun 	return 0;
49*4882a593Smuzhiyun }
50*4882a593Smuzhiyun 
51*4882a593Smuzhiyun /*
52*4882a593Smuzhiyun  * Returns a copy @out of the UEFI memory descriptor @in if it is covered
53*4882a593Smuzhiyun  * entirely by a UEFI memory map entry with matching attributes. The virtual
54*4882a593Smuzhiyun  * address of @out is set according to the matching entry that was found.
55*4882a593Smuzhiyun  */
entry_is_valid(const efi_memory_desc_t * in,efi_memory_desc_t * out)56*4882a593Smuzhiyun static bool entry_is_valid(const efi_memory_desc_t *in, efi_memory_desc_t *out)
57*4882a593Smuzhiyun {
58*4882a593Smuzhiyun 	u64 in_paddr = in->phys_addr;
59*4882a593Smuzhiyun 	u64 in_size = in->num_pages << EFI_PAGE_SHIFT;
60*4882a593Smuzhiyun 	efi_memory_desc_t *md;
61*4882a593Smuzhiyun 
62*4882a593Smuzhiyun 	*out = *in;
63*4882a593Smuzhiyun 
64*4882a593Smuzhiyun 	if (in->type != EFI_RUNTIME_SERVICES_CODE &&
65*4882a593Smuzhiyun 	    in->type != EFI_RUNTIME_SERVICES_DATA) {
66*4882a593Smuzhiyun 		pr_warn("Entry type should be RuntimeServiceCode/Data\n");
67*4882a593Smuzhiyun 		return false;
68*4882a593Smuzhiyun 	}
69*4882a593Smuzhiyun 
70*4882a593Smuzhiyun 	if (PAGE_SIZE > EFI_PAGE_SIZE &&
71*4882a593Smuzhiyun 	    (!PAGE_ALIGNED(in->phys_addr) ||
72*4882a593Smuzhiyun 	     !PAGE_ALIGNED(in->num_pages << EFI_PAGE_SHIFT))) {
73*4882a593Smuzhiyun 		/*
74*4882a593Smuzhiyun 		 * Since arm64 may execute with page sizes of up to 64 KB, the
75*4882a593Smuzhiyun 		 * UEFI spec mandates that RuntimeServices memory regions must
76*4882a593Smuzhiyun 		 * be 64 KB aligned. We need to validate this here since we will
77*4882a593Smuzhiyun 		 * not be able to tighten permissions on such regions without
78*4882a593Smuzhiyun 		 * affecting adjacent regions.
79*4882a593Smuzhiyun 		 */
80*4882a593Smuzhiyun 		pr_warn("Entry address region misaligned\n");
81*4882a593Smuzhiyun 		return false;
82*4882a593Smuzhiyun 	}
83*4882a593Smuzhiyun 
84*4882a593Smuzhiyun 	for_each_efi_memory_desc(md) {
85*4882a593Smuzhiyun 		u64 md_paddr = md->phys_addr;
86*4882a593Smuzhiyun 		u64 md_size = md->num_pages << EFI_PAGE_SHIFT;
87*4882a593Smuzhiyun 
88*4882a593Smuzhiyun 		if (!(md->attribute & EFI_MEMORY_RUNTIME))
89*4882a593Smuzhiyun 			continue;
90*4882a593Smuzhiyun 		if (md->virt_addr == 0 && md->phys_addr != 0) {
91*4882a593Smuzhiyun 			/* no virtual mapping has been installed by the stub */
92*4882a593Smuzhiyun 			break;
93*4882a593Smuzhiyun 		}
94*4882a593Smuzhiyun 
95*4882a593Smuzhiyun 		if (md_paddr > in_paddr || (in_paddr - md_paddr) >= md_size)
96*4882a593Smuzhiyun 			continue;
97*4882a593Smuzhiyun 
98*4882a593Smuzhiyun 		/*
99*4882a593Smuzhiyun 		 * This entry covers the start of @in, check whether
100*4882a593Smuzhiyun 		 * it covers the end as well.
101*4882a593Smuzhiyun 		 */
102*4882a593Smuzhiyun 		if (md_paddr + md_size < in_paddr + in_size) {
103*4882a593Smuzhiyun 			pr_warn("Entry covers multiple EFI memory map regions\n");
104*4882a593Smuzhiyun 			return false;
105*4882a593Smuzhiyun 		}
106*4882a593Smuzhiyun 
107*4882a593Smuzhiyun 		if (md->type != in->type) {
108*4882a593Smuzhiyun 			pr_warn("Entry type deviates from EFI memory map region type\n");
109*4882a593Smuzhiyun 			return false;
110*4882a593Smuzhiyun 		}
111*4882a593Smuzhiyun 
112*4882a593Smuzhiyun 		out->virt_addr = in_paddr + (md->virt_addr - md_paddr);
113*4882a593Smuzhiyun 
114*4882a593Smuzhiyun 		return true;
115*4882a593Smuzhiyun 	}
116*4882a593Smuzhiyun 
117*4882a593Smuzhiyun 	pr_warn("No matching entry found in the EFI memory map\n");
118*4882a593Smuzhiyun 	return false;
119*4882a593Smuzhiyun }
120*4882a593Smuzhiyun 
121*4882a593Smuzhiyun /*
122*4882a593Smuzhiyun  * To be called after the EFI page tables have been populated. If a memory
123*4882a593Smuzhiyun  * attributes table is available, its contents will be used to update the
124*4882a593Smuzhiyun  * mappings with tightened permissions as described by the table.
125*4882a593Smuzhiyun  * This requires the UEFI memory map to have already been populated with
126*4882a593Smuzhiyun  * virtual addresses.
127*4882a593Smuzhiyun  */
efi_memattr_apply_permissions(struct mm_struct * mm,efi_memattr_perm_setter fn)128*4882a593Smuzhiyun int __init efi_memattr_apply_permissions(struct mm_struct *mm,
129*4882a593Smuzhiyun 					 efi_memattr_perm_setter fn)
130*4882a593Smuzhiyun {
131*4882a593Smuzhiyun 	efi_memory_attributes_table_t *tbl;
132*4882a593Smuzhiyun 	int i, ret;
133*4882a593Smuzhiyun 
134*4882a593Smuzhiyun 	if (tbl_size <= sizeof(*tbl))
135*4882a593Smuzhiyun 		return 0;
136*4882a593Smuzhiyun 
137*4882a593Smuzhiyun 	/*
138*4882a593Smuzhiyun 	 * We need the EFI memory map to be setup so we can use it to
139*4882a593Smuzhiyun 	 * lookup the virtual addresses of all entries in the  of EFI
140*4882a593Smuzhiyun 	 * Memory Attributes table. If it isn't available, this
141*4882a593Smuzhiyun 	 * function should not be called.
142*4882a593Smuzhiyun 	 */
143*4882a593Smuzhiyun 	if (WARN_ON(!efi_enabled(EFI_MEMMAP)))
144*4882a593Smuzhiyun 		return 0;
145*4882a593Smuzhiyun 
146*4882a593Smuzhiyun 	tbl = memremap(efi_mem_attr_table, tbl_size, MEMREMAP_WB);
147*4882a593Smuzhiyun 	if (!tbl) {
148*4882a593Smuzhiyun 		pr_err("Failed to map EFI Memory Attributes table @ 0x%lx\n",
149*4882a593Smuzhiyun 		       efi_mem_attr_table);
150*4882a593Smuzhiyun 		return -ENOMEM;
151*4882a593Smuzhiyun 	}
152*4882a593Smuzhiyun 
153*4882a593Smuzhiyun 	if (efi_enabled(EFI_DBG))
154*4882a593Smuzhiyun 		pr_info("Processing EFI Memory Attributes table:\n");
155*4882a593Smuzhiyun 
156*4882a593Smuzhiyun 	for (i = ret = 0; ret == 0 && i < tbl->num_entries; i++) {
157*4882a593Smuzhiyun 		efi_memory_desc_t md;
158*4882a593Smuzhiyun 		unsigned long size;
159*4882a593Smuzhiyun 		bool valid;
160*4882a593Smuzhiyun 		char buf[64];
161*4882a593Smuzhiyun 
162*4882a593Smuzhiyun 		valid = entry_is_valid((void *)tbl->entry + i * tbl->desc_size,
163*4882a593Smuzhiyun 				       &md);
164*4882a593Smuzhiyun 		size = md.num_pages << EFI_PAGE_SHIFT;
165*4882a593Smuzhiyun 		if (efi_enabled(EFI_DBG) || !valid)
166*4882a593Smuzhiyun 			pr_info("%s 0x%012llx-0x%012llx %s\n",
167*4882a593Smuzhiyun 				valid ? "" : "!", md.phys_addr,
168*4882a593Smuzhiyun 				md.phys_addr + size - 1,
169*4882a593Smuzhiyun 				efi_md_typeattr_format(buf, sizeof(buf), &md));
170*4882a593Smuzhiyun 
171*4882a593Smuzhiyun 		if (valid) {
172*4882a593Smuzhiyun 			ret = fn(mm, &md);
173*4882a593Smuzhiyun 			if (ret)
174*4882a593Smuzhiyun 				pr_err("Error updating mappings, skipping subsequent md's\n");
175*4882a593Smuzhiyun 		}
176*4882a593Smuzhiyun 	}
177*4882a593Smuzhiyun 	memunmap(tbl);
178*4882a593Smuzhiyun 	return ret;
179*4882a593Smuzhiyun }
180