1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * Copyright 2018, Breno Leitao, Gustavo Romero, IBM Corp.
4*4882a593Smuzhiyun *
5*4882a593Smuzhiyun * This test raises a SIGUSR1 signal, and toggle the MSR[TS]
6*4882a593Smuzhiyun * fields at the signal handler. With MSR[TS] being set, the kernel will
7*4882a593Smuzhiyun * force a recheckpoint, which may cause a segfault when returning to
8*4882a593Smuzhiyun * user space. Since the test needs to re-run, the segfault needs to be
9*4882a593Smuzhiyun * caught and handled.
10*4882a593Smuzhiyun *
11*4882a593Smuzhiyun * In order to continue the test even after a segfault, the context is
12*4882a593Smuzhiyun * saved prior to the signal being raised, and it is restored when there is
13*4882a593Smuzhiyun * a segmentation fault. This happens for COUNT_MAX times.
14*4882a593Smuzhiyun *
15*4882a593Smuzhiyun * This test never fails (as returning EXIT_FAILURE). It either succeeds,
16*4882a593Smuzhiyun * or crash the kernel (on a buggy kernel).
17*4882a593Smuzhiyun */
18*4882a593Smuzhiyun
19*4882a593Smuzhiyun #define _GNU_SOURCE
20*4882a593Smuzhiyun #include <stdio.h>
21*4882a593Smuzhiyun #include <stdlib.h>
22*4882a593Smuzhiyun #include <signal.h>
23*4882a593Smuzhiyun #include <string.h>
24*4882a593Smuzhiyun #include <ucontext.h>
25*4882a593Smuzhiyun #include <unistd.h>
26*4882a593Smuzhiyun #include <sys/mman.h>
27*4882a593Smuzhiyun
28*4882a593Smuzhiyun #include "tm.h"
29*4882a593Smuzhiyun #include "utils.h"
30*4882a593Smuzhiyun #include "reg.h"
31*4882a593Smuzhiyun
32*4882a593Smuzhiyun #define COUNT_MAX 5000 /* Number of interactions */
33*4882a593Smuzhiyun
34*4882a593Smuzhiyun /*
35*4882a593Smuzhiyun * This test only runs on 64 bits system. Unsetting MSR_TS_S to avoid
36*4882a593Smuzhiyun * compilation issue on 32 bits system. There is no side effect, since the
37*4882a593Smuzhiyun * whole test will be skipped if it is not running on 64 bits system.
38*4882a593Smuzhiyun */
39*4882a593Smuzhiyun #ifndef __powerpc64__
40*4882a593Smuzhiyun #undef MSR_TS_S
41*4882a593Smuzhiyun #define MSR_TS_S 0
42*4882a593Smuzhiyun #endif
43*4882a593Smuzhiyun
44*4882a593Smuzhiyun /* Setting contexts because the test will crash and we want to recover */
45*4882a593Smuzhiyun ucontext_t init_context;
46*4882a593Smuzhiyun
47*4882a593Smuzhiyun /* count is changed in the signal handler, so it must be volatile */
48*4882a593Smuzhiyun static volatile int count;
49*4882a593Smuzhiyun
usr_signal_handler(int signo,siginfo_t * si,void * uc)50*4882a593Smuzhiyun void usr_signal_handler(int signo, siginfo_t *si, void *uc)
51*4882a593Smuzhiyun {
52*4882a593Smuzhiyun ucontext_t *ucp = uc;
53*4882a593Smuzhiyun int ret;
54*4882a593Smuzhiyun
55*4882a593Smuzhiyun /*
56*4882a593Smuzhiyun * Allocating memory in a signal handler, and never freeing it on
57*4882a593Smuzhiyun * purpose, forcing the heap increase, so, the memory leak is what
58*4882a593Smuzhiyun * we want here.
59*4882a593Smuzhiyun */
60*4882a593Smuzhiyun ucp->uc_link = mmap(NULL, sizeof(ucontext_t),
61*4882a593Smuzhiyun PROT_READ | PROT_WRITE,
62*4882a593Smuzhiyun MAP_PRIVATE | MAP_ANONYMOUS, 0, 0);
63*4882a593Smuzhiyun if (ucp->uc_link == (void *)-1) {
64*4882a593Smuzhiyun perror("Mmap failed");
65*4882a593Smuzhiyun exit(-1);
66*4882a593Smuzhiyun }
67*4882a593Smuzhiyun
68*4882a593Smuzhiyun /* Forcing the page to be allocated in a page fault */
69*4882a593Smuzhiyun ret = madvise(ucp->uc_link, sizeof(ucontext_t), MADV_DONTNEED);
70*4882a593Smuzhiyun if (ret) {
71*4882a593Smuzhiyun perror("madvise failed");
72*4882a593Smuzhiyun exit(-1);
73*4882a593Smuzhiyun }
74*4882a593Smuzhiyun
75*4882a593Smuzhiyun memcpy(&ucp->uc_link->uc_mcontext, &ucp->uc_mcontext,
76*4882a593Smuzhiyun sizeof(ucp->uc_mcontext));
77*4882a593Smuzhiyun
78*4882a593Smuzhiyun /* Forcing to enable MSR[TM] */
79*4882a593Smuzhiyun UCONTEXT_MSR(ucp) |= MSR_TS_S;
80*4882a593Smuzhiyun
81*4882a593Smuzhiyun /*
82*4882a593Smuzhiyun * A fork inside a signal handler seems to be more efficient than a
83*4882a593Smuzhiyun * fork() prior to the signal being raised.
84*4882a593Smuzhiyun */
85*4882a593Smuzhiyun if (fork() == 0) {
86*4882a593Smuzhiyun /*
87*4882a593Smuzhiyun * Both child and parent will return, but, child returns
88*4882a593Smuzhiyun * with count set so it will exit in the next segfault.
89*4882a593Smuzhiyun * Parent will continue to loop.
90*4882a593Smuzhiyun */
91*4882a593Smuzhiyun count = COUNT_MAX;
92*4882a593Smuzhiyun }
93*4882a593Smuzhiyun
94*4882a593Smuzhiyun /*
95*4882a593Smuzhiyun * If the change above does not hit the bug, it will cause a
96*4882a593Smuzhiyun * segmentation fault, since the ck structures are NULL.
97*4882a593Smuzhiyun */
98*4882a593Smuzhiyun }
99*4882a593Smuzhiyun
seg_signal_handler(int signo,siginfo_t * si,void * uc)100*4882a593Smuzhiyun void seg_signal_handler(int signo, siginfo_t *si, void *uc)
101*4882a593Smuzhiyun {
102*4882a593Smuzhiyun count++;
103*4882a593Smuzhiyun
104*4882a593Smuzhiyun /* Reexecute the test */
105*4882a593Smuzhiyun setcontext(&init_context);
106*4882a593Smuzhiyun }
107*4882a593Smuzhiyun
tm_trap_test(void)108*4882a593Smuzhiyun void tm_trap_test(void)
109*4882a593Smuzhiyun {
110*4882a593Smuzhiyun struct sigaction usr_sa, seg_sa;
111*4882a593Smuzhiyun stack_t ss;
112*4882a593Smuzhiyun
113*4882a593Smuzhiyun usr_sa.sa_flags = SA_SIGINFO | SA_ONSTACK;
114*4882a593Smuzhiyun usr_sa.sa_sigaction = usr_signal_handler;
115*4882a593Smuzhiyun
116*4882a593Smuzhiyun seg_sa.sa_flags = SA_SIGINFO;
117*4882a593Smuzhiyun seg_sa.sa_sigaction = seg_signal_handler;
118*4882a593Smuzhiyun
119*4882a593Smuzhiyun /*
120*4882a593Smuzhiyun * Set initial context. Will get back here from
121*4882a593Smuzhiyun * seg_signal_handler()
122*4882a593Smuzhiyun */
123*4882a593Smuzhiyun getcontext(&init_context);
124*4882a593Smuzhiyun
125*4882a593Smuzhiyun while (count < COUNT_MAX) {
126*4882a593Smuzhiyun /* Allocated an alternative signal stack area */
127*4882a593Smuzhiyun ss.ss_sp = mmap(NULL, SIGSTKSZ, PROT_READ | PROT_WRITE,
128*4882a593Smuzhiyun MAP_PRIVATE | MAP_ANONYMOUS, 0, 0);
129*4882a593Smuzhiyun ss.ss_size = SIGSTKSZ;
130*4882a593Smuzhiyun ss.ss_flags = 0;
131*4882a593Smuzhiyun
132*4882a593Smuzhiyun if (ss.ss_sp == (void *)-1) {
133*4882a593Smuzhiyun perror("mmap error\n");
134*4882a593Smuzhiyun exit(-1);
135*4882a593Smuzhiyun }
136*4882a593Smuzhiyun
137*4882a593Smuzhiyun /* Force the allocation through a page fault */
138*4882a593Smuzhiyun if (madvise(ss.ss_sp, SIGSTKSZ, MADV_DONTNEED)) {
139*4882a593Smuzhiyun perror("madvise\n");
140*4882a593Smuzhiyun exit(-1);
141*4882a593Smuzhiyun }
142*4882a593Smuzhiyun
143*4882a593Smuzhiyun /*
144*4882a593Smuzhiyun * Setting an alternative stack to generate a page fault when
145*4882a593Smuzhiyun * the signal is raised.
146*4882a593Smuzhiyun */
147*4882a593Smuzhiyun if (sigaltstack(&ss, NULL)) {
148*4882a593Smuzhiyun perror("sigaltstack\n");
149*4882a593Smuzhiyun exit(-1);
150*4882a593Smuzhiyun }
151*4882a593Smuzhiyun
152*4882a593Smuzhiyun /* The signal handler will enable MSR_TS */
153*4882a593Smuzhiyun sigaction(SIGUSR1, &usr_sa, NULL);
154*4882a593Smuzhiyun /* If it does not crash, it might segfault, avoid it to retest */
155*4882a593Smuzhiyun sigaction(SIGSEGV, &seg_sa, NULL);
156*4882a593Smuzhiyun
157*4882a593Smuzhiyun raise(SIGUSR1);
158*4882a593Smuzhiyun count++;
159*4882a593Smuzhiyun }
160*4882a593Smuzhiyun }
161*4882a593Smuzhiyun
tm_signal_context_force_tm(void)162*4882a593Smuzhiyun int tm_signal_context_force_tm(void)
163*4882a593Smuzhiyun {
164*4882a593Smuzhiyun SKIP_IF(!have_htm());
165*4882a593Smuzhiyun /*
166*4882a593Smuzhiyun * Skipping if not running on 64 bits system, since I think it is
167*4882a593Smuzhiyun * not possible to set mcontext's [MSR] with TS, due to it being 32
168*4882a593Smuzhiyun * bits.
169*4882a593Smuzhiyun */
170*4882a593Smuzhiyun SKIP_IF(!is_ppc64le());
171*4882a593Smuzhiyun
172*4882a593Smuzhiyun tm_trap_test();
173*4882a593Smuzhiyun
174*4882a593Smuzhiyun return EXIT_SUCCESS;
175*4882a593Smuzhiyun }
176*4882a593Smuzhiyun
main(int argc,char ** argv)177*4882a593Smuzhiyun int main(int argc, char **argv)
178*4882a593Smuzhiyun {
179*4882a593Smuzhiyun test_harness(tm_signal_context_force_tm, "tm_signal_context_force_tm");
180*4882a593Smuzhiyun }
181