863 lines · 21.7 KB · C
RawDownload
// SPDX-License-Identifier: GPL-2.0/* *  linux/arch/parisc/traps.c * *  Copyright (C) 1991, 1992  Linus Torvalds *  Copyright (C) 1999, 2000  Philipp Rumpf <prumpf@tux.org> */ /* * 'Traps.c' handles hardware traps and faults after we have saved some * state in 'asm.s'. */ #include <linux/sched.h>#include <linux/sched/debug.h>#include <linux/kernel.h>#include <linux/string.h>#include <linux/errno.h>#include <linux/ptrace.h>#include <linux/timer.h>#include <linux/delay.h>#include <linux/mm.h>#include <linux/module.h>#include <linux/smp.h>#include <linux/spinlock.h>#include <linux/init.h>#include <linux/interrupt.h>#include <linux/console.h>#include <linux/bug.h>#include <linux/ratelimit.h>#include <linux/uaccess.h>#include <linux/kdebug.h>#include <linux/kfence.h>#include <linux/perf_event.h> #include <asm/assembly.h>#include <asm/io.h>#include <asm/irq.h>#include <asm/traps.h>#include <linux/unaligned.h>#include <linux/atomic.h>#include <asm/smp.h>#include <asm/pdc.h>#include <asm/pdc_chassis.h>#include <asm/unwind.h>#include <asm/tlbflush.h>#include <asm/cacheflush.h>#include <linux/kgdb.h>#include <linux/kprobes.h> #include "unaligned.h" #if defined(CONFIG_LIGHTWEIGHT_SPINLOCK_CHECK)#include <asm/spinlock.h>#endif #include "../math-emu/math-emu.h"	/* for handle_fpe() */ static void parisc_show_stack(struct task_struct *task,	struct pt_regs *regs, const char *loglvl); static int printbinary(char *buf, unsigned long x, int nbits){	unsigned long mask = 1UL << (nbits - 1);	while (mask != 0) {		*buf++ = (mask & x ? '1' : '0');		mask >>= 1;	}	*buf = '\0'; 	return nbits;} #ifdef CONFIG_64BIT#define RFMT "%016lx"#else#define RFMT "%08lx"#endif#define FFMT "%016llx"	/* fpregs are 64-bit always */ #define PRINTREGS(lvl,r,f,fmt,x)	\	printk("%s%s%02d-%02d  " fmt " " fmt " " fmt " " fmt "\n",	\		lvl, f, (x), (x+3), (r)[(x)+0], (r)[(x)+1],		\		(r)[(x)+2], (r)[(x)+3]) static void print_gr(const char *level, struct pt_regs *regs){	int i;	char buf[64]; 	printk("%s\n", level);	printk("%s     YZrvWESTHLNXBCVMcbcbcbcbOGFRQPDI\n", level);	printbinary(buf, regs->gr[0], 32);	printk("%sPSW: %s %s\n", level, buf, print_tainted()); 	for (i = 0; i < 32; i += 4)		PRINTREGS(level, regs->gr, "r", RFMT, i);} static void print_fr(const char *level, struct pt_regs *regs){	int i;	char buf[64];	struct { u32 sw[2]; } s; 	/* FR are 64bit everywhere. Need to use asm to get the content	 * of fpsr/fper1, and we assume that we won't have a FP Identify	 * in our way, otherwise we're screwed.	 * The fldd is used to restore the T-bit if there was one, as the	 * store clears it anyway.	 * PA2.0 book says "thou shall not use fstw on FPSR/FPERs" - T-Bone */	asm volatile ("fstd %%fr0,0(%1)	\n\t"		      "fldd 0(%1),%%fr0	\n\t"		      : "=m" (s) : "r" (&s) : "r0"); 	printk("%s\n", level);	printk("%s      VZOUICununcqcqcqcqcqcrmunTDVZOUI\n", level);	printbinary(buf, s.sw[0], 32);	printk("%sFPSR: %s\n", level, buf);	printk("%sFPER1: %08x\n", level, s.sw[1]); 	/* here we'll print fr0 again, tho it'll be meaningless */	for (i = 0; i < 32; i += 4)		PRINTREGS(level, regs->fr, "fr", FFMT, i);} void show_regs(struct pt_regs *regs){	int i, user;	const char *level;	unsigned long cr30, cr31; 	user = user_mode(regs);	level = user ? KERN_DEBUG : KERN_CRIT; 	show_regs_print_info(level); 	print_gr(level, regs); 	for (i = 0; i < 8; i += 4)		PRINTREGS(level, regs->sr, "sr", RFMT, i); 	if (user)		print_fr(level, regs); 	cr30 = mfctl(30);	cr31 = mfctl(31);	printk("%s\n", level);	printk("%sIASQ: " RFMT " " RFMT " IAOQ: " RFMT " " RFMT "\n",	       level, regs->iasq[0], regs->iasq[1], regs->iaoq[0], regs->iaoq[1]);	printk("%s IIR: %08lx    ISR: " RFMT "  IOR: " RFMT "\n",	       level, regs->iir, regs->isr, regs->ior);	printk("%s CPU: %8d   CR30: " RFMT " CR31: " RFMT "\n",	       level, task_cpu(current), cr30, cr31);	printk("%s ORIG_R28: " RFMT "\n", level, regs->orig_r28); 	if (user) {		printk("%s IAOQ[0]: " RFMT "\n", level, regs->iaoq[0]);		printk("%s IAOQ[1]: " RFMT "\n", level, regs->iaoq[1]);		printk("%s RP(r2): " RFMT "\n", level, regs->gr[2]);	} else {		printk("%s IAOQ[0]: %pS\n", level, (void *) regs->iaoq[0]);		printk("%s IAOQ[1]: %pS\n", level, (void *) regs->iaoq[1]);		printk("%s RP(r2): %pS\n", level, (void *) regs->gr[2]); 		parisc_show_stack(current, regs, KERN_DEFAULT);	}} static DEFINE_RATELIMIT_STATE(_hppa_rs,	DEFAULT_RATELIMIT_INTERVAL, DEFAULT_RATELIMIT_BURST); #define parisc_printk_ratelimited(critical, regs, fmt, ...)	{	      \	if ((critical || show_unhandled_signals) && __ratelimit(&_hppa_rs)) { \		printk(fmt, ##__VA_ARGS__);				      \		show_regs(regs);					      \	}								      \}  static void do_show_stack(struct unwind_frame_info *info, const char *loglvl){	int i = 1; 	printk("%sBacktrace:\n", loglvl);	while (i <= MAX_UNWIND_ENTRIES) {		if (unwind_once(info) < 0 || info->ip == 0)			break; 		if (__kernel_text_address(info->ip)) {			printk("%s [<" RFMT ">] %pS\n",				loglvl, info->ip, (void *) info->ip);			i++;		}	}	printk("%s\n", loglvl);} static void parisc_show_stack(struct task_struct *task,	struct pt_regs *regs, const char *loglvl){	struct unwind_frame_info info; 	unwind_frame_init_task(&info, task, regs); 	do_show_stack(&info, loglvl);} void show_stack(struct task_struct *t, unsigned long *sp, const char *loglvl){	parisc_show_stack(t, NULL, loglvl);} int is_valid_bugaddr(unsigned long iaoq){	return 1;} void die_if_kernel(char *str, struct pt_regs *regs, long err){	if (user_mode(regs)) {		if (err == 0)			return; /* STFU */ 		parisc_printk_ratelimited(1, regs,			KERN_CRIT "%s (pid %d): %s (code %ld) at " RFMT "\n",			current->comm, task_pid_nr(current), str, err, regs->iaoq[0]); 		return;	} 	bust_spinlocks(1); 	oops_enter(); 	/* Amuse the user in a SPARC fashion */	if (err) printk(KERN_CRIT			"      _______________________________ \n"			"     < Your System ate a SPARC! Gah! >\n"			"      ------------------------------- \n"			"             \\   ^__^\n"			"                 (__)\\       )\\/\\\n"			"                  U  ||----w |\n"			"                     ||     ||\n");		/* unlock the pdc lock if necessary */	pdc_emergency_unlock(); 	if (err)		printk(KERN_CRIT "%s (pid %d): %s (code %ld)\n",			current->comm, task_pid_nr(current), str, err); 	/* Wot's wrong wif bein' racy? */	if (current->thread.flags & PARISC_KERNEL_DEATH) {		printk(KERN_CRIT "%s() recursion detected.\n", __func__);		local_irq_enable();		while (1);	}	current->thread.flags |= PARISC_KERNEL_DEATH; 	show_regs(regs);	dump_stack();	add_taint(TAINT_DIE, LOCKDEP_NOW_UNRELIABLE); 	if (in_interrupt())		panic("Fatal exception in interrupt"); 	if (panic_on_oops)		panic("Fatal exception"); 	oops_exit();	make_task_dead(SIGSEGV);} /* gdb uses break 4,8 */#define GDB_BREAK_INSN 0x10004static void handle_gdb_break(struct pt_regs *regs, int wot){	force_sig_fault(SIGTRAP, wot,			(void __user *) (regs->iaoq[0] & ~3));} static void handle_break(struct pt_regs *regs){	unsigned iir = regs->iir; 	if (unlikely(iir == PARISC_BUG_BREAK_INSN && !user_mode(regs))) {		/* check if a BUG() or WARN() trapped here.  */		enum bug_trap_type tt;		tt = report_bug(regs->iaoq[0] & ~3, regs);		if (tt == BUG_TRAP_TYPE_WARN) {			regs->iaoq[0] += 4;			regs->iaoq[1] += 4;			return; /* return to next instruction when WARN_ON().  */		}		die_if_kernel("Unknown kernel breakpoint", regs,			(tt == BUG_TRAP_TYPE_NONE) ? 9 : 0);	} #ifdef CONFIG_KPROBES	if (unlikely(iir == PARISC_KPROBES_BREAK_INSN && !user_mode(regs))) {		parisc_kprobe_break_handler(regs);		return;	}	if (unlikely(iir == PARISC_KPROBES_BREAK_INSN2 && !user_mode(regs))) {		parisc_kprobe_ss_handler(regs);		return;	}#endif #ifdef CONFIG_KGDB	if (unlikely((iir == PARISC_KGDB_COMPILED_BREAK_INSN ||		iir == PARISC_KGDB_BREAK_INSN)) && !user_mode(regs)) {		kgdb_handle_exception(9, SIGTRAP, 0, regs);		return;	}#endif #ifdef CONFIG_LIGHTWEIGHT_SPINLOCK_CHECK        if ((iir == SPINLOCK_BREAK_INSN) && !user_mode(regs)) {		die_if_kernel("Spinlock was trashed", regs, 1);	}#endif 	if (unlikely(iir != GDB_BREAK_INSN))		parisc_printk_ratelimited(0, regs,			KERN_DEBUG "break %d,%d: pid=%d command='%s'\n",			iir & 31, (iir>>13) & ((1<<13)-1),			task_pid_nr(current), current->comm); 	/* send standard GDB signal */	handle_gdb_break(regs, TRAP_BRKPT);} static void default_trap(int code, struct pt_regs *regs){	printk(KERN_ERR "Trap %d on CPU %d\n", code, smp_processor_id());	show_regs(regs);} static void transfer_pim_to_trap_frame(struct pt_regs *regs){    register int i;    extern unsigned int hpmc_pim_data[];    struct pdc_hpmc_pim_11 *pim_narrow;    struct pdc_hpmc_pim_20 *pim_wide;     if (boot_cpu_data.cpu_type >= pcxu) { 	pim_wide = (struct pdc_hpmc_pim_20 *)hpmc_pim_data; 	/*	 * Note: The following code will probably generate a	 * bunch of truncation error warnings from the compiler.	 * Could be handled with an ifdef, but perhaps there	 * is a better way.	 */ 	regs->gr[0] = pim_wide->cr[22]; 	for (i = 1; i < 32; i++)	    regs->gr[i] = pim_wide->gr[i]; 	for (i = 0; i < 32; i++)	    regs->fr[i] = pim_wide->fr[i]; 	for (i = 0; i < 8; i++)	    regs->sr[i] = pim_wide->sr[i]; 	regs->iasq[0] = pim_wide->cr[17];	regs->iasq[1] = pim_wide->iasq_back;	regs->iaoq[0] = pim_wide->cr[18];	regs->iaoq[1] = pim_wide->iaoq_back; 	regs->sar  = pim_wide->cr[11];	regs->iir  = pim_wide->cr[19];	regs->isr  = pim_wide->cr[20];	regs->ior  = pim_wide->cr[21];    }    else {	pim_narrow = (struct pdc_hpmc_pim_11 *)hpmc_pim_data; 	regs->gr[0] = pim_narrow->cr[22]; 	for (i = 1; i < 32; i++)	    regs->gr[i] = pim_narrow->gr[i]; 	for (i = 0; i < 32; i++)	    regs->fr[i] = pim_narrow->fr[i]; 	for (i = 0; i < 8; i++)	    regs->sr[i] = pim_narrow->sr[i]; 	regs->iasq[0] = pim_narrow->cr[17];	regs->iasq[1] = pim_narrow->iasq_back;	regs->iaoq[0] = pim_narrow->cr[18];	regs->iaoq[1] = pim_narrow->iaoq_back; 	regs->sar  = pim_narrow->cr[11];	regs->iir  = pim_narrow->cr[19];	regs->isr  = pim_narrow->cr[20];	regs->ior  = pim_narrow->cr[21];    }     /*     * The following fields only have meaning if we came through     * another path. So just zero them here.     */     regs->ksp = 0;    regs->kpc = 0;    regs->orig_r28 = 0;}  /* * This routine is called as a last resort when everything else * has gone clearly wrong. We get called for faults in kernel space, * and HPMC's. */void parisc_terminate(char *msg, struct pt_regs *regs, int code, unsigned long offset){	static DEFINE_SPINLOCK(terminate_lock); 	(void)notify_die(DIE_OOPS, msg, regs, 0, code, SIGTRAP);	bust_spinlocks(1); 	set_eiem(0);	local_irq_disable();	spin_lock(&terminate_lock); 	/* unlock the pdc lock if necessary */	pdc_emergency_unlock(); 	/* Not all paths will gutter the processor... */	switch(code){ 	case 1:		transfer_pim_to_trap_frame(regs);		break; 	default:		break; 	}	    	{		/* show_stack(NULL, (unsigned long *)regs->gr[30]); */		struct unwind_frame_info info;		unwind_frame_init(&info, current, regs);		do_show_stack(&info, KERN_CRIT);	} 	printk("\n");	pr_crit("%s: Code=%d (%s) at addr " RFMT "\n",		msg, code, trap_name(code), offset);	show_regs(regs); 	spin_unlock(&terminate_lock); 	/* put soft power button back under hardware control;	 * if the user had pressed it once at any time, the 	 * system will shut down immediately right here. */	pdc_soft_power_button(0);		/* Call kernel panic() so reboot timeouts work properly 	 * FIXME: This function should be on the list of	 * panic notifiers, and we should call panic	 * directly from the location that we wish. 	 * e.g. We should not call panic from	 * parisc_terminate, but rather the other way around.	 * This hack works, prints the panic message twice,	 * and it enables reboot timers!	 */	panic(msg);} void notrace handle_interruption(int code, struct pt_regs *regs){	unsigned long fault_address = 0;	unsigned long fault_space = 0;	int si_code; 	if (!irqs_disabled_flags(regs->gr[0]))	    local_irq_enable(); 	/* Security check:	 * If the priority level is still user, and the	 * faulting space is not equal to the active space	 * then the user is attempting something in a space	 * that does not belong to them. Kill the process.	 *	 * This is normally the situation when the user	 * attempts to jump into the kernel space at the	 * wrong offset, be it at the gateway page or a	 * random location.	 *	 * We cannot normally signal the process because it	 * could *be* on the gateway page, and processes	 * executing on the gateway page can't have signals

Lines 1–500 of 863.