cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

hashpagetable.c (13045B)


      1// SPDX-License-Identifier: GPL-2.0-only
      2/*
      3 * Copyright 2016, Rashmica Gupta, IBM Corp.
      4 *
      5 * This traverses the kernel virtual memory and dumps the pages that are in
      6 * the hash pagetable, along with their flags to
      7 * /sys/kernel/debug/kernel_hash_pagetable.
      8 *
      9 * If radix is enabled then there is no hash page table and so no debugfs file
     10 * is generated.
     11 */
     12#include <linux/debugfs.h>
     13#include <linux/fs.h>
     14#include <linux/io.h>
     15#include <linux/mm.h>
     16#include <linux/sched.h>
     17#include <linux/seq_file.h>
     18#include <linux/const.h>
     19#include <asm/page.h>
     20#include <asm/plpar_wrappers.h>
     21#include <linux/memblock.h>
     22#include <asm/firmware.h>
     23#include <asm/pgalloc.h>
     24
     25struct pg_state {
     26	struct seq_file *seq;
     27	const struct addr_marker *marker;
     28	unsigned long start_address;
     29	unsigned int level;
     30	u64 current_flags;
     31};
     32
     33struct addr_marker {
     34	unsigned long start_address;
     35	const char *name;
     36};
     37
     38static struct addr_marker address_markers[] = {
     39	{ 0,	"Start of kernel VM" },
     40	{ 0,	"vmalloc() Area" },
     41	{ 0,	"vmalloc() End" },
     42	{ 0,	"isa I/O start" },
     43	{ 0,	"isa I/O end" },
     44	{ 0,	"phb I/O start" },
     45	{ 0,	"phb I/O end" },
     46	{ 0,	"I/O remap start" },
     47	{ 0,	"I/O remap end" },
     48	{ 0,	"vmemmap start" },
     49	{ -1,	NULL },
     50};
     51
     52struct flag_info {
     53	u64		mask;
     54	u64		val;
     55	const char	*set;
     56	const char	*clear;
     57	bool		is_val;
     58	int		shift;
     59};
     60
     61static const struct flag_info v_flag_array[] = {
     62	{
     63		.mask   = SLB_VSID_B,
     64		.val    = SLB_VSID_B_256M,
     65		.set    = "ssize: 256M",
     66		.clear  = "ssize: 1T  ",
     67	}, {
     68		.mask	= HPTE_V_SECONDARY,
     69		.val	= HPTE_V_SECONDARY,
     70		.set	= "secondary",
     71		.clear	= "primary  ",
     72	}, {
     73		.mask	= HPTE_V_VALID,
     74		.val	= HPTE_V_VALID,
     75		.set	= "valid  ",
     76		.clear	= "invalid",
     77	}, {
     78		.mask	= HPTE_V_BOLTED,
     79		.val	= HPTE_V_BOLTED,
     80		.set	= "bolted",
     81		.clear	= "",
     82	}
     83};
     84
     85static const struct flag_info r_flag_array[] = {
     86	{
     87		.mask	= HPTE_R_PP0 | HPTE_R_PP,
     88		.val	= PP_RWXX,
     89		.set	= "prot:RW--",
     90	}, {
     91		.mask	= HPTE_R_PP0 | HPTE_R_PP,
     92		.val	= PP_RWRX,
     93		.set	= "prot:RWR-",
     94	}, {
     95		.mask	= HPTE_R_PP0 | HPTE_R_PP,
     96		.val	= PP_RWRW,
     97		.set	= "prot:RWRW",
     98	}, {
     99		.mask	= HPTE_R_PP0 | HPTE_R_PP,
    100		.val	= PP_RXRX,
    101		.set	= "prot:R-R-",
    102	}, {
    103		.mask	= HPTE_R_PP0 | HPTE_R_PP,
    104		.val	= PP_RXXX,
    105		.set	= "prot:R---",
    106	}, {
    107		.mask	= HPTE_R_KEY_HI | HPTE_R_KEY_LO,
    108		.val	= HPTE_R_KEY_HI | HPTE_R_KEY_LO,
    109		.set	= "key",
    110		.clear	= "",
    111		.is_val = true,
    112	}, {
    113		.mask	= HPTE_R_R,
    114		.val	= HPTE_R_R,
    115		.set	= "ref",
    116		.clear	= "   ",
    117	}, {
    118		.mask	= HPTE_R_C,
    119		.val	= HPTE_R_C,
    120		.set	= "changed",
    121		.clear	= "       ",
    122	}, {
    123		.mask	= HPTE_R_N,
    124		.val	= HPTE_R_N,
    125		.set	= "no execute",
    126	}, {
    127		.mask	= HPTE_R_WIMG,
    128		.val	= HPTE_R_W,
    129		.set	= "writethru",
    130	}, {
    131		.mask	= HPTE_R_WIMG,
    132		.val	= HPTE_R_I,
    133		.set	= "no cache",
    134	}, {
    135		.mask	= HPTE_R_WIMG,
    136		.val	= HPTE_R_G,
    137		.set	= "guarded",
    138	}
    139};
    140
    141static int calculate_pagesize(struct pg_state *st, int ps, char s[])
    142{
    143	static const char units[] = "BKMGTPE";
    144	const char *unit = units;
    145
    146	while (ps > 9 && unit[1]) {
    147		ps -= 10;
    148		unit++;
    149	}
    150	seq_printf(st->seq, "  %s_ps: %i%c\t", s, 1<<ps, *unit);
    151	return ps;
    152}
    153
    154static void dump_flag_info(struct pg_state *st, const struct flag_info
    155		*flag, u64 pte, int num)
    156{
    157	unsigned int i;
    158
    159	for (i = 0; i < num; i++, flag++) {
    160		const char *s = NULL;
    161		u64 val;
    162
    163		/* flag not defined so don't check it */
    164		if (flag->mask == 0)
    165			continue;
    166		/* Some 'flags' are actually values */
    167		if (flag->is_val) {
    168			val = pte & flag->val;
    169			if (flag->shift)
    170				val = val >> flag->shift;
    171			seq_printf(st->seq, "  %s:%llx", flag->set, val);
    172		} else {
    173			if ((pte & flag->mask) == flag->val)
    174				s = flag->set;
    175			else
    176				s = flag->clear;
    177			if (s)
    178				seq_printf(st->seq, "  %s", s);
    179		}
    180	}
    181}
    182
    183static void dump_hpte_info(struct pg_state *st, unsigned long ea, u64 v, u64 r,
    184		unsigned long rpn, int bps, int aps, unsigned long lp)
    185{
    186	int aps_index;
    187
    188	while (ea >= st->marker[1].start_address) {
    189		st->marker++;
    190		seq_printf(st->seq, "---[ %s ]---\n", st->marker->name);
    191	}
    192	seq_printf(st->seq, "0x%lx:\t", ea);
    193	seq_printf(st->seq, "AVPN:%llx\t", HPTE_V_AVPN_VAL(v));
    194	dump_flag_info(st, v_flag_array, v, ARRAY_SIZE(v_flag_array));
    195	seq_printf(st->seq, "  rpn: %lx\t", rpn);
    196	dump_flag_info(st, r_flag_array, r, ARRAY_SIZE(r_flag_array));
    197
    198	calculate_pagesize(st, bps, "base");
    199	aps_index = calculate_pagesize(st, aps, "actual");
    200	if (aps_index != 2)
    201		seq_printf(st->seq, "LP enc: %lx", lp);
    202	seq_putc(st->seq, '\n');
    203}
    204
    205
    206static int native_find(unsigned long ea, int psize, bool primary, u64 *v, u64
    207		*r)
    208{
    209	struct hash_pte *hptep;
    210	unsigned long hash, vsid, vpn, hpte_group, want_v, hpte_v;
    211	int i, ssize = mmu_kernel_ssize;
    212	unsigned long shift = mmu_psize_defs[psize].shift;
    213
    214	/* calculate hash */
    215	vsid = get_kernel_vsid(ea, ssize);
    216	vpn  = hpt_vpn(ea, vsid, ssize);
    217	hash = hpt_hash(vpn, shift, ssize);
    218	want_v = hpte_encode_avpn(vpn, psize, ssize);
    219
    220	/* to check in the secondary hash table, we invert the hash */
    221	if (!primary)
    222		hash = ~hash;
    223	hpte_group = (hash & htab_hash_mask) * HPTES_PER_GROUP;
    224	for (i = 0; i < HPTES_PER_GROUP; i++) {
    225		hptep = htab_address + hpte_group;
    226		hpte_v = be64_to_cpu(hptep->v);
    227
    228		if (HPTE_V_COMPARE(hpte_v, want_v) && (hpte_v & HPTE_V_VALID)) {
    229			/* HPTE matches */
    230			*v = be64_to_cpu(hptep->v);
    231			*r = be64_to_cpu(hptep->r);
    232			return 0;
    233		}
    234		++hpte_group;
    235	}
    236	return -1;
    237}
    238
    239static int pseries_find(unsigned long ea, int psize, bool primary, u64 *v, u64 *r)
    240{
    241	struct {
    242		unsigned long v;
    243		unsigned long r;
    244	} ptes[4];
    245	unsigned long vsid, vpn, hash, hpte_group, want_v;
    246	int i, j, ssize = mmu_kernel_ssize;
    247	long lpar_rc = 0;
    248	unsigned long shift = mmu_psize_defs[psize].shift;
    249
    250	/* calculate hash */
    251	vsid = get_kernel_vsid(ea, ssize);
    252	vpn  = hpt_vpn(ea, vsid, ssize);
    253	hash = hpt_hash(vpn, shift, ssize);
    254	want_v = hpte_encode_avpn(vpn, psize, ssize);
    255
    256	/* to check in the secondary hash table, we invert the hash */
    257	if (!primary)
    258		hash = ~hash;
    259	hpte_group = (hash & htab_hash_mask) * HPTES_PER_GROUP;
    260	/* see if we can find an entry in the hpte with this hash */
    261	for (i = 0; i < HPTES_PER_GROUP; i += 4, hpte_group += 4) {
    262		lpar_rc = plpar_pte_read_4(0, hpte_group, (void *)ptes);
    263
    264		if (lpar_rc)
    265			continue;
    266		for (j = 0; j < 4; j++) {
    267			if (HPTE_V_COMPARE(ptes[j].v, want_v) &&
    268					(ptes[j].v & HPTE_V_VALID)) {
    269				/* HPTE matches */
    270				*v = ptes[j].v;
    271				*r = ptes[j].r;
    272				return 0;
    273			}
    274		}
    275	}
    276	return -1;
    277}
    278
    279static void decode_r(int bps, unsigned long r, unsigned long *rpn, int *aps,
    280		unsigned long *lp_bits)
    281{
    282	struct mmu_psize_def entry;
    283	unsigned long arpn, mask, lp;
    284	int penc = -2, idx = 0, shift;
    285
    286	/*.
    287	 * The LP field has 8 bits. Depending on the actual page size, some of
    288	 * these bits are concatenated with the APRN to get the RPN. The rest
    289	 * of the bits in the LP field is the LP value and is an encoding for
    290	 * the base page size and the actual page size.
    291	 *
    292	 *  -	find the mmu entry for our base page size
    293	 *  -	go through all page encodings and use the associated mask to
    294	 *	find an encoding that matches our encoding in the LP field.
    295	 */
    296	arpn = (r & HPTE_R_RPN) >> HPTE_R_RPN_SHIFT;
    297	lp = arpn & 0xff;
    298
    299	entry = mmu_psize_defs[bps];
    300	while (idx < MMU_PAGE_COUNT) {
    301		penc = entry.penc[idx];
    302		if ((penc != -1) && (mmu_psize_defs[idx].shift)) {
    303			shift = mmu_psize_defs[idx].shift -  HPTE_R_RPN_SHIFT;
    304			mask = (0x1 << (shift)) - 1;
    305			if ((lp & mask) == penc) {
    306				*aps = mmu_psize_to_shift(idx);
    307				*lp_bits = lp & mask;
    308				*rpn = arpn >> shift;
    309				return;
    310			}
    311		}
    312		idx++;
    313	}
    314}
    315
    316static int base_hpte_find(unsigned long ea, int psize, bool primary, u64 *v,
    317			  u64 *r)
    318{
    319	if (IS_ENABLED(CONFIG_PPC_PSERIES) && firmware_has_feature(FW_FEATURE_LPAR))
    320		return pseries_find(ea, psize, primary, v, r);
    321
    322	return native_find(ea, psize, primary, v, r);
    323}
    324
    325static unsigned long hpte_find(struct pg_state *st, unsigned long ea, int psize)
    326{
    327	unsigned long slot;
    328	u64 v  = 0, r = 0;
    329	unsigned long rpn, lp_bits;
    330	int base_psize = 0, actual_psize = 0;
    331
    332	if (ea < PAGE_OFFSET)
    333		return -1;
    334
    335	/* Look in primary table */
    336	slot = base_hpte_find(ea, psize, true, &v, &r);
    337
    338	/* Look in secondary table */
    339	if (slot == -1)
    340		slot = base_hpte_find(ea, psize, false, &v, &r);
    341
    342	/* No entry found */
    343	if (slot == -1)
    344		return -1;
    345
    346	/*
    347	 * We found an entry in the hash page table:
    348	 *  - check that this has the same base page
    349	 *  - find the actual page size
    350	 *  - find the RPN
    351	 */
    352	base_psize = mmu_psize_to_shift(psize);
    353
    354	if ((v & HPTE_V_LARGE) == HPTE_V_LARGE) {
    355		decode_r(psize, r, &rpn, &actual_psize, &lp_bits);
    356	} else {
    357		/* 4K actual page size */
    358		actual_psize = 12;
    359		rpn = (r & HPTE_R_RPN) >> HPTE_R_RPN_SHIFT;
    360		/* In this case there are no LP bits */
    361		lp_bits = -1;
    362	}
    363	/*
    364	 * We didn't find a matching encoding, so the PTE we found isn't for
    365	 * this address.
    366	 */
    367	if (actual_psize == -1)
    368		return -1;
    369
    370	dump_hpte_info(st, ea, v, r, rpn, base_psize, actual_psize, lp_bits);
    371	return 0;
    372}
    373
    374static void walk_pte(struct pg_state *st, pmd_t *pmd, unsigned long start)
    375{
    376	pte_t *pte = pte_offset_kernel(pmd, 0);
    377	unsigned long addr, pteval, psize;
    378	int i, status;
    379
    380	for (i = 0; i < PTRS_PER_PTE; i++, pte++) {
    381		addr = start + i * PAGE_SIZE;
    382		pteval = pte_val(*pte);
    383
    384		if (addr < VMALLOC_END)
    385			psize = mmu_vmalloc_psize;
    386		else
    387			psize = mmu_io_psize;
    388
    389		/* check for secret 4K mappings */
    390		if (IS_ENABLED(CONFIG_PPC_64K_PAGES) &&
    391		    ((pteval & H_PAGE_COMBO) == H_PAGE_COMBO ||
    392		     (pteval & H_PAGE_4K_PFN) == H_PAGE_4K_PFN))
    393			psize = mmu_io_psize;
    394
    395		/* check for hashpte */
    396		status = hpte_find(st, addr, psize);
    397
    398		if (((pteval & H_PAGE_HASHPTE) != H_PAGE_HASHPTE)
    399				&& (status != -1)) {
    400		/* found a hpte that is not in the linux page tables */
    401			seq_printf(st->seq, "page probably bolted before linux"
    402				" pagetables were set: addr:%lx, pteval:%lx\n",
    403				addr, pteval);
    404		}
    405	}
    406}
    407
    408static void walk_pmd(struct pg_state *st, pud_t *pud, unsigned long start)
    409{
    410	pmd_t *pmd = pmd_offset(pud, 0);
    411	unsigned long addr;
    412	unsigned int i;
    413
    414	for (i = 0; i < PTRS_PER_PMD; i++, pmd++) {
    415		addr = start + i * PMD_SIZE;
    416		if (!pmd_none(*pmd))
    417			/* pmd exists */
    418			walk_pte(st, pmd, addr);
    419	}
    420}
    421
    422static void walk_pud(struct pg_state *st, p4d_t *p4d, unsigned long start)
    423{
    424	pud_t *pud = pud_offset(p4d, 0);
    425	unsigned long addr;
    426	unsigned int i;
    427
    428	for (i = 0; i < PTRS_PER_PUD; i++, pud++) {
    429		addr = start + i * PUD_SIZE;
    430		if (!pud_none(*pud))
    431			/* pud exists */
    432			walk_pmd(st, pud, addr);
    433	}
    434}
    435
    436static void walk_p4d(struct pg_state *st, pgd_t *pgd, unsigned long start)
    437{
    438	p4d_t *p4d = p4d_offset(pgd, 0);
    439	unsigned long addr;
    440	unsigned int i;
    441
    442	for (i = 0; i < PTRS_PER_P4D; i++, p4d++) {
    443		addr = start + i * P4D_SIZE;
    444		if (!p4d_none(*p4d))
    445			/* p4d exists */
    446			walk_pud(st, p4d, addr);
    447	}
    448}
    449
    450static void walk_pagetables(struct pg_state *st)
    451{
    452	pgd_t *pgd = pgd_offset_k(0UL);
    453	unsigned int i;
    454	unsigned long addr;
    455
    456	/*
    457	 * Traverse the linux pagetable structure and dump pages that are in
    458	 * the hash pagetable.
    459	 */
    460	for (i = 0; i < PTRS_PER_PGD; i++, pgd++) {
    461		addr = KERN_VIRT_START + i * PGDIR_SIZE;
    462		if (!pgd_none(*pgd))
    463			/* pgd exists */
    464			walk_p4d(st, pgd, addr);
    465	}
    466}
    467
    468
    469static void walk_linearmapping(struct pg_state *st)
    470{
    471	unsigned long addr;
    472
    473	/*
    474	 * Traverse the linear mapping section of virtual memory and dump pages
    475	 * that are in the hash pagetable.
    476	 */
    477	unsigned long psize = 1 << mmu_psize_defs[mmu_linear_psize].shift;
    478
    479	for (addr = PAGE_OFFSET; addr < PAGE_OFFSET +
    480			memblock_end_of_DRAM(); addr += psize)
    481		hpte_find(st, addr, mmu_linear_psize);
    482}
    483
    484static void walk_vmemmap(struct pg_state *st)
    485{
    486	struct vmemmap_backing *ptr = vmemmap_list;
    487
    488	if (!IS_ENABLED(CONFIG_SPARSEMEM_VMEMMAP))
    489		return;
    490	/*
    491	 * Traverse the vmemmaped memory and dump pages that are in the hash
    492	 * pagetable.
    493	 */
    494	while (ptr->list) {
    495		hpte_find(st, ptr->virt_addr, mmu_vmemmap_psize);
    496		ptr = ptr->list;
    497	}
    498	seq_puts(st->seq, "---[ vmemmap end ]---\n");
    499}
    500
    501static void populate_markers(void)
    502{
    503	address_markers[0].start_address = PAGE_OFFSET;
    504	address_markers[1].start_address = VMALLOC_START;
    505	address_markers[2].start_address = VMALLOC_END;
    506	address_markers[3].start_address = ISA_IO_BASE;
    507	address_markers[4].start_address = ISA_IO_END;
    508	address_markers[5].start_address = PHB_IO_BASE;
    509	address_markers[6].start_address = PHB_IO_END;
    510	address_markers[7].start_address = IOREMAP_BASE;
    511	address_markers[8].start_address = IOREMAP_END;
    512	address_markers[9].start_address =  H_VMEMMAP_START;
    513}
    514
    515static int ptdump_show(struct seq_file *m, void *v)
    516{
    517	struct pg_state st = {
    518		.seq = m,
    519		.start_address = PAGE_OFFSET,
    520		.marker = address_markers,
    521	};
    522	/*
    523	 * Traverse the 0xc, 0xd and 0xf areas of the kernel virtual memory and
    524	 * dump pages that are in the hash pagetable.
    525	 */
    526	walk_linearmapping(&st);
    527	walk_pagetables(&st);
    528	walk_vmemmap(&st);
    529	return 0;
    530}
    531
    532DEFINE_SHOW_ATTRIBUTE(ptdump);
    533
    534static int ptdump_init(void)
    535{
    536	if (!radix_enabled()) {
    537		populate_markers();
    538		debugfs_create_file("kernel_hash_pagetable", 0400, NULL, NULL,
    539				    &ptdump_fops);
    540	}
    541	return 0;
    542}
    543device_initcall(ptdump_init);