]>
Commit | Line | Data |
---|---|---|
d2912cb1 | 1 | // SPDX-License-Identifier: GPL-2.0-only |
1da177e4 LT |
2 | /* |
3 | * linux/arch/arm/mm/fault.c | |
4 | * | |
5 | * Copyright (C) 1995 Linus Torvalds | |
6 | * Modifications for ARM processor (c) 1995-2004 Russell King | |
1da177e4 | 7 | */ |
0ea9365a | 8 | #include <linux/extable.h> |
1da177e4 | 9 | #include <linux/signal.h> |
1da177e4 | 10 | #include <linux/mm.h> |
67306da6 | 11 | #include <linux/hardirq.h> |
1da177e4 | 12 | #include <linux/init.h> |
25ce1dd7 | 13 | #include <linux/kprobes.h> |
33fa9b13 | 14 | #include <linux/uaccess.h> |
252d4c27 | 15 | #include <linux/page-flags.h> |
3f07c014 | 16 | #include <linux/sched/signal.h> |
b17b0153 | 17 | #include <linux/sched/debug.h> |
65cec8e3 | 18 | #include <linux/highmem.h> |
7ada189f | 19 | #include <linux/perf_event.h> |
1da177e4 | 20 | |
9f97da78 DH |
21 | #include <asm/system_misc.h> |
22 | #include <asm/system_info.h> | |
1da177e4 | 23 | #include <asm/tlbflush.h> |
1da177e4 LT |
24 | |
25 | #include "fault.h" | |
26 | ||
09529f7a | 27 | #ifdef CONFIG_MMU |
25ce1dd7 | 28 | |
1da177e4 LT |
29 | /* |
30 | * This is useful to dump out the page tables associated with | |
31 | * 'addr' in mm 'mm'. | |
32 | */ | |
49b38c34 | 33 | void show_pte(const char *lvl, struct mm_struct *mm, unsigned long addr) |
1da177e4 LT |
34 | { |
35 | pgd_t *pgd; | |
36 | ||
37 | if (!mm) | |
38 | mm = &init_mm; | |
39 | ||
49b38c34 | 40 | printk("%spgd = %p\n", lvl, mm->pgd); |
1da177e4 | 41 | pgd = pgd_offset(mm, addr); |
49b38c34 | 42 | printk("%s[%08lx] *pgd=%08llx", lvl, addr, (long long)pgd_val(*pgd)); |
1da177e4 LT |
43 | |
44 | do { | |
84e6ffb2 | 45 | p4d_t *p4d; |
516295e5 | 46 | pud_t *pud; |
1da177e4 LT |
47 | pmd_t *pmd; |
48 | pte_t *pte; | |
49 | ||
84e6ffb2 MR |
50 | p4d = p4d_offset(pgd, addr); |
51 | if (p4d_none(*p4d)) | |
1da177e4 LT |
52 | break; |
53 | ||
84e6ffb2 | 54 | if (p4d_bad(*p4d)) { |
4ed89f22 | 55 | pr_cont("(bad)"); |
1da177e4 LT |
56 | break; |
57 | } | |
58 | ||
84e6ffb2 | 59 | pud = pud_offset(p4d, addr); |
516295e5 | 60 | if (PTRS_PER_PUD != 1) |
4ed89f22 | 61 | pr_cont(", *pud=%08llx", (long long)pud_val(*pud)); |
516295e5 RK |
62 | |
63 | if (pud_none(*pud)) | |
64 | break; | |
65 | ||
66 | if (pud_bad(*pud)) { | |
4ed89f22 | 67 | pr_cont("(bad)"); |
516295e5 RK |
68 | break; |
69 | } | |
70 | ||
71 | pmd = pmd_offset(pud, addr); | |
da46c79a | 72 | if (PTRS_PER_PMD != 1) |
4ed89f22 | 73 | pr_cont(", *pmd=%08llx", (long long)pmd_val(*pmd)); |
1da177e4 LT |
74 | |
75 | if (pmd_none(*pmd)) | |
76 | break; | |
77 | ||
78 | if (pmd_bad(*pmd)) { | |
4ed89f22 | 79 | pr_cont("(bad)"); |
1da177e4 LT |
80 | break; |
81 | } | |
82 | ||
1da177e4 | 83 | /* We must not map this if we have highmem enabled */ |
252d4c27 NP |
84 | if (PageHighMem(pfn_to_page(pmd_val(*pmd) >> PAGE_SHIFT))) |
85 | break; | |
86 | ||
1da177e4 | 87 | pte = pte_offset_map(pmd, addr); |
4ed89f22 | 88 | pr_cont(", *pte=%08llx", (long long)pte_val(*pte)); |
f7b8156d | 89 | #ifndef CONFIG_ARM_LPAE |
4ed89f22 | 90 | pr_cont(", *ppte=%08llx", |
29a38193 | 91 | (long long)pte_val(pte[PTE_HWTABLE_PTRS])); |
f7b8156d | 92 | #endif |
1da177e4 | 93 | pte_unmap(pte); |
1da177e4 LT |
94 | } while(0); |
95 | ||
4ed89f22 | 96 | pr_cont("\n"); |
1da177e4 | 97 | } |
09529f7a | 98 | #else /* CONFIG_MMU */ |
49b38c34 | 99 | void show_pte(const char *lvl, struct mm_struct *mm, unsigned long addr) |
09529f7a CM |
100 | { } |
101 | #endif /* CONFIG_MMU */ | |
1da177e4 LT |
102 | |
103 | /* | |
104 | * Oops. The kernel tried to access some page that wasn't present. | |
105 | */ | |
106 | static void | |
107 | __do_kernel_fault(struct mm_struct *mm, unsigned long addr, unsigned int fsr, | |
108 | struct pt_regs *regs) | |
109 | { | |
110 | /* | |
111 | * Are we prepared to handle this kernel fault? | |
112 | */ | |
113 | if (fixup_exception(regs)) | |
114 | return; | |
115 | ||
116 | /* | |
117 | * No handler, we'll have to terminate things with extreme prejudice. | |
118 | */ | |
119 | bust_spinlocks(1); | |
bafeb7a0 | 120 | pr_alert("8<--- cut here ---\n"); |
4ed89f22 RK |
121 | pr_alert("Unable to handle kernel %s at virtual address %08lx\n", |
122 | (addr < PAGE_SIZE) ? "NULL pointer dereference" : | |
123 | "paging request", addr); | |
1da177e4 | 124 | |
49b38c34 | 125 | show_pte(KERN_ALERT, mm, addr); |
1da177e4 LT |
126 | die("Oops", regs, fsr); |
127 | bust_spinlocks(0); | |
128 | do_exit(SIGKILL); | |
129 | } | |
130 | ||
131 | /* | |
132 | * Something tried to access memory that isn't in our memory map.. | |
133 | * User mode accesses just cause a SIGSEGV | |
134 | */ | |
135 | static void | |
fd65cc84 EB |
136 | __do_user_fault(unsigned long addr, unsigned int fsr, unsigned int sig, |
137 | int code, struct pt_regs *regs) | |
1da177e4 | 138 | { |
fd65cc84 EB |
139 | struct task_struct *tsk = current; |
140 | ||
f5fe12b1 RK |
141 | if (addr > TASK_SIZE) |
142 | harden_branch_predictor(); | |
143 | ||
1da177e4 | 144 | #ifdef CONFIG_DEBUG_USER |
f5274c2d JM |
145 | if (((user_debug & UDBG_SEGV) && (sig == SIGSEGV)) || |
146 | ((user_debug & UDBG_BUS) && (sig == SIGBUS))) { | |
bafeb7a0 | 147 | pr_err("8<--- cut here ---\n"); |
49b38c34 | 148 | pr_err("%s: unhandled page fault (%d) at 0x%08lx, code 0x%03x\n", |
2d137c24 | 149 | tsk->comm, sig, addr, fsr); |
49b38c34 | 150 | show_pte(KERN_ERR, tsk->mm, addr); |
1da177e4 LT |
151 | show_regs(regs); |
152 | } | |
153 | #endif | |
e2b85f70 FF |
154 | #ifndef CONFIG_KUSER_HELPERS |
155 | if ((sig == SIGSEGV) && ((addr & PAGE_MASK) == 0xffff0000)) | |
156 | printk_ratelimited(KERN_DEBUG | |
157 | "%s: CONFIG_KUSER_HELPERS disabled at 0x%08lx\n", | |
158 | tsk->comm, addr); | |
159 | #endif | |
1da177e4 LT |
160 | |
161 | tsk->thread.address = addr; | |
162 | tsk->thread.error_code = fsr; | |
163 | tsk->thread.trap_no = 14; | |
2e1661d2 | 164 | force_sig_fault(sig, code, (void __user *)addr); |
1da177e4 LT |
165 | } |
166 | ||
e5beac37 | 167 | void do_bad_area(unsigned long addr, unsigned int fsr, struct pt_regs *regs) |
1da177e4 | 168 | { |
e5beac37 RK |
169 | struct task_struct *tsk = current; |
170 | struct mm_struct *mm = tsk->active_mm; | |
171 | ||
1da177e4 LT |
172 | /* |
173 | * If we are in kernel mode at this point, we | |
174 | * have no context to handle this fault with. | |
175 | */ | |
176 | if (user_mode(regs)) | |
fd65cc84 | 177 | __do_user_fault(addr, fsr, SIGSEGV, SEGV_MAPERR, regs); |
1da177e4 LT |
178 | else |
179 | __do_kernel_fault(mm, addr, fsr, regs); | |
180 | } | |
181 | ||
09529f7a | 182 | #ifdef CONFIG_MMU |
5c72fc5c NP |
183 | #define VM_FAULT_BADMAP 0x010000 |
184 | #define VM_FAULT_BADACCESS 0x020000 | |
1da177e4 | 185 | |
d374bf14 RK |
186 | /* |
187 | * Check that the permissions on the VMA allow for the fault which occurred. | |
188 | * If we encountered a write fault, we must have write permission, otherwise | |
189 | * we allow any permission. | |
190 | */ | |
191 | static inline bool access_error(unsigned int fsr, struct vm_area_struct *vma) | |
192 | { | |
6cb4d9a2 | 193 | unsigned int mask = VM_ACCESS_FLAGS; |
d374bf14 | 194 | |
83402036 | 195 | if ((fsr & FSR_WRITE) && !(fsr & FSR_CM)) |
d374bf14 | 196 | mask = VM_WRITE; |
df297bf6 RK |
197 | if (fsr & FSR_LNX_PF) |
198 | mask = VM_EXEC; | |
d374bf14 RK |
199 | |
200 | return vma->vm_flags & mask ? false : true; | |
201 | } | |
202 | ||
50a7ca3c | 203 | static vm_fault_t __kprobes |
1da177e4 | 204 | __do_page_fault(struct mm_struct *mm, unsigned long addr, unsigned int fsr, |
79fea6c6 PX |
205 | unsigned int flags, struct task_struct *tsk, |
206 | struct pt_regs *regs) | |
1da177e4 LT |
207 | { |
208 | struct vm_area_struct *vma; | |
50a7ca3c | 209 | vm_fault_t fault; |
1da177e4 LT |
210 | |
211 | vma = find_vma(mm, addr); | |
212 | fault = VM_FAULT_BADMAP; | |
d374bf14 | 213 | if (unlikely(!vma)) |
1da177e4 | 214 | goto out; |
d374bf14 | 215 | if (unlikely(vma->vm_start > addr)) |
1da177e4 LT |
216 | goto check_stack; |
217 | ||
218 | /* | |
219 | * Ok, we have a good vm_area for this | |
220 | * memory access, so we can handle it. | |
221 | */ | |
222 | good_area: | |
d374bf14 RK |
223 | if (access_error(fsr, vma)) { |
224 | fault = VM_FAULT_BADACCESS; | |
1da177e4 | 225 | goto out; |
d374bf14 | 226 | } |
1da177e4 | 227 | |
79fea6c6 | 228 | return handle_mm_fault(vma, addr & PAGE_MASK, flags, regs); |
1da177e4 | 229 | |
1da177e4 | 230 | check_stack: |
9b61a4d1 RK |
231 | /* Don't allow expansion below FIRST_USER_ADDRESS */ |
232 | if (vma->vm_flags & VM_GROWSDOWN && | |
233 | addr >= FIRST_USER_ADDRESS && !expand_stack(vma, addr)) | |
1da177e4 LT |
234 | goto good_area; |
235 | out: | |
236 | return fault; | |
237 | } | |
238 | ||
785d3cd2 | 239 | static int __kprobes |
1da177e4 LT |
240 | do_page_fault(unsigned long addr, unsigned int fsr, struct pt_regs *regs) |
241 | { | |
242 | struct task_struct *tsk; | |
243 | struct mm_struct *mm; | |
50a7ca3c SJ |
244 | int sig, code; |
245 | vm_fault_t fault; | |
dde16072 | 246 | unsigned int flags = FAULT_FLAG_DEFAULT; |
1da177e4 | 247 | |
b98cca44 | 248 | if (kprobe_page_fault(regs, fsr)) |
25ce1dd7 NP |
249 | return 0; |
250 | ||
1da177e4 LT |
251 | tsk = current; |
252 | mm = tsk->mm; | |
253 | ||
02fe2845 RK |
254 | /* Enable interrupts if they were enabled in the parent context. */ |
255 | if (interrupts_enabled(regs)) | |
256 | local_irq_enable(); | |
257 | ||
1da177e4 LT |
258 | /* |
259 | * If we're in an interrupt or have no user | |
260 | * context, we must not take the fault.. | |
261 | */ | |
70ffdb93 | 262 | if (faulthandler_disabled() || !mm) |
1da177e4 LT |
263 | goto no_context; |
264 | ||
759496ba JW |
265 | if (user_mode(regs)) |
266 | flags |= FAULT_FLAG_USER; | |
83402036 | 267 | if ((fsr & FSR_WRITE) && !(fsr & FSR_CM)) |
759496ba JW |
268 | flags |= FAULT_FLAG_WRITE; |
269 | ||
79fea6c6 PX |
270 | perf_sw_event(PERF_COUNT_SW_PAGE_FAULTS, 1, regs, addr); |
271 | ||
840ff6a4 RK |
272 | /* |
273 | * As per x86, we may deadlock here. However, since the kernel only | |
274 | * validly references user space from well defined areas of the code, | |
275 | * we can bug out early if this is from code which shouldn't. | |
276 | */ | |
d8ed45c5 | 277 | if (!mmap_read_trylock(mm)) { |
840ff6a4 RK |
278 | if (!user_mode(regs) && !search_exception_tables(regs->ARM_pc)) |
279 | goto no_context; | |
8878a539 | 280 | retry: |
d8ed45c5 | 281 | mmap_read_lock(mm); |
bf456992 RK |
282 | } else { |
283 | /* | |
284 | * The above down_read_trylock() might have succeeded in | |
285 | * which case, we'll have missed the might_sleep() from | |
286 | * down_read() | |
287 | */ | |
288 | might_sleep(); | |
1d212712 ID |
289 | #ifdef CONFIG_DEBUG_VM |
290 | if (!user_mode(regs) && | |
291 | !search_exception_tables(regs->ARM_pc)) | |
292 | goto no_context; | |
293 | #endif | |
840ff6a4 RK |
294 | } |
295 | ||
79fea6c6 | 296 | fault = __do_page_fault(mm, addr, fsr, flags, tsk, regs); |
8878a539 KC |
297 | |
298 | /* If we need to retry but a fatal signal is pending, handle the | |
c1e8d7c6 | 299 | * signal first. We do not need to release the mmap_lock because |
8878a539 KC |
300 | * it would already be released in __lock_page_or_retry in |
301 | * mm/filemap.c. */ | |
4ef87322 | 302 | if (fault_signal_pending(fault, regs)) { |
746a272e MR |
303 | if (!user_mode(regs)) |
304 | goto no_context; | |
8878a539 | 305 | return 0; |
746a272e | 306 | } |
8878a539 | 307 | |
dff2aa7a | 308 | if (!(fault & VM_FAULT_ERROR) && flags & FAULT_FLAG_ALLOW_RETRY) { |
8878a539 | 309 | if (fault & VM_FAULT_RETRY) { |
45cac65b | 310 | flags |= FAULT_FLAG_TRIED; |
8878a539 KC |
311 | goto retry; |
312 | } | |
313 | } | |
314 | ||
d8ed45c5 | 315 | mmap_read_unlock(mm); |
7ada189f | 316 | |
1da177e4 | 317 | /* |
0e8fb931 | 318 | * Handle the "normal" case first - VM_FAULT_MAJOR |
1da177e4 | 319 | */ |
5c72fc5c | 320 | if (likely(!(fault & (VM_FAULT_ERROR | VM_FAULT_BADMAP | VM_FAULT_BADACCESS)))) |
1da177e4 LT |
321 | return 0; |
322 | ||
87134102 JW |
323 | /* |
324 | * If we are in kernel mode at this point, we | |
325 | * have no context to handle this fault with. | |
326 | */ | |
327 | if (!user_mode(regs)) | |
328 | goto no_context; | |
329 | ||
b42c6344 RK |
330 | if (fault & VM_FAULT_OOM) { |
331 | /* | |
332 | * We ran out of memory, call the OOM killer, and return to | |
333 | * userspace (which will retry the fault, or kill us if we | |
334 | * got oom-killed) | |
335 | */ | |
336 | pagefault_out_of_memory(); | |
337 | return 0; | |
338 | } | |
339 | ||
83c54070 | 340 | if (fault & VM_FAULT_SIGBUS) { |
2d137c24 | 341 | /* |
342 | * We had some memory, but were unable to | |
343 | * successfully fix up this page fault. | |
344 | */ | |
345 | sig = SIGBUS; | |
346 | code = BUS_ADRERR; | |
83c54070 | 347 | } else { |
2d137c24 | 348 | /* |
349 | * Something tried to access memory that | |
350 | * isn't in our memory map.. | |
351 | */ | |
352 | sig = SIGSEGV; | |
353 | code = fault == VM_FAULT_BADACCESS ? | |
354 | SEGV_ACCERR : SEGV_MAPERR; | |
1da177e4 | 355 | } |
1da177e4 | 356 | |
fd65cc84 | 357 | __do_user_fault(addr, fsr, sig, code, regs); |
2d137c24 | 358 | return 0; |
1da177e4 LT |
359 | |
360 | no_context: | |
361 | __do_kernel_fault(mm, addr, fsr, regs); | |
362 | return 0; | |
363 | } | |
09529f7a CM |
364 | #else /* CONFIG_MMU */ |
365 | static int | |
366 | do_page_fault(unsigned long addr, unsigned int fsr, struct pt_regs *regs) | |
367 | { | |
368 | return 0; | |
369 | } | |
370 | #endif /* CONFIG_MMU */ | |
1da177e4 LT |
371 | |
372 | /* | |
373 | * First Level Translation Fault Handler | |
374 | * | |
375 | * We enter here because the first level page table doesn't contain | |
376 | * a valid entry for the address. | |
377 | * | |
378 | * If the address is in kernel space (>= TASK_SIZE), then we are | |
379 | * probably faulting in the vmalloc() area. | |
380 | * | |
381 | * If the init_task's first level page tables contains the relevant | |
382 | * entry, we copy the it to this task. If not, we send the process | |
383 | * a signal, fixup the exception, or oops the kernel. | |
384 | * | |
385 | * NOTE! We MUST NOT take any locks for this case. We may be in an | |
386 | * interrupt or a critical region, and should only copy the information | |
387 | * from the master page table, nothing more. | |
388 | */ | |
09529f7a | 389 | #ifdef CONFIG_MMU |
785d3cd2 | 390 | static int __kprobes |
1da177e4 LT |
391 | do_translation_fault(unsigned long addr, unsigned int fsr, |
392 | struct pt_regs *regs) | |
393 | { | |
1da177e4 LT |
394 | unsigned int index; |
395 | pgd_t *pgd, *pgd_k; | |
84e6ffb2 | 396 | p4d_t *p4d, *p4d_k; |
516295e5 | 397 | pud_t *pud, *pud_k; |
1da177e4 LT |
398 | pmd_t *pmd, *pmd_k; |
399 | ||
400 | if (addr < TASK_SIZE) | |
401 | return do_page_fault(addr, fsr, regs); | |
402 | ||
5e27fb78 A |
403 | if (user_mode(regs)) |
404 | goto bad_area; | |
405 | ||
1da177e4 LT |
406 | index = pgd_index(addr); |
407 | ||
1da177e4 LT |
408 | pgd = cpu_get_pgd() + index; |
409 | pgd_k = init_mm.pgd + index; | |
410 | ||
84e6ffb2 MR |
411 | p4d = p4d_offset(pgd, addr); |
412 | p4d_k = p4d_offset(pgd_k, addr); | |
413 | ||
414 | if (p4d_none(*p4d_k)) | |
1da177e4 | 415 | goto bad_area; |
84e6ffb2 MR |
416 | if (!p4d_present(*p4d)) |
417 | set_p4d(p4d, *p4d_k); | |
1da177e4 | 418 | |
84e6ffb2 MR |
419 | pud = pud_offset(p4d, addr); |
420 | pud_k = pud_offset(p4d_k, addr); | |
516295e5 RK |
421 | |
422 | if (pud_none(*pud_k)) | |
423 | goto bad_area; | |
424 | if (!pud_present(*pud)) | |
425 | set_pud(pud, *pud_k); | |
426 | ||
427 | pmd = pmd_offset(pud, addr); | |
428 | pmd_k = pmd_offset(pud_k, addr); | |
1da177e4 | 429 | |
f7b8156d CM |
430 | #ifdef CONFIG_ARM_LPAE |
431 | /* | |
432 | * Only one hardware entry per PMD with LPAE. | |
433 | */ | |
434 | index = 0; | |
435 | #else | |
33a9c41b KS |
436 | /* |
437 | * On ARM one Linux PGD entry contains two hardware entries (see page | |
438 | * tables layout in pgtable.h). We normally guarantee that we always | |
439 | * fill both L1 entries. But create_mapping() doesn't follow the rule. | |
440 | * It can create inidividual L1 entries, so here we have to call | |
441 | * pmd_none() check for the entry really corresponded to address, not | |
442 | * for the first of pair. | |
443 | */ | |
444 | index = (addr >> SECTION_SHIFT) & 1; | |
f7b8156d | 445 | #endif |
33a9c41b | 446 | if (pmd_none(pmd_k[index])) |
1da177e4 LT |
447 | goto bad_area; |
448 | ||
449 | copy_pmd(pmd, pmd_k); | |
450 | return 0; | |
451 | ||
452 | bad_area: | |
e5beac37 | 453 | do_bad_area(addr, fsr, regs); |
1da177e4 LT |
454 | return 0; |
455 | } | |
09529f7a CM |
456 | #else /* CONFIG_MMU */ |
457 | static int | |
458 | do_translation_fault(unsigned long addr, unsigned int fsr, | |
459 | struct pt_regs *regs) | |
460 | { | |
461 | return 0; | |
462 | } | |
463 | #endif /* CONFIG_MMU */ | |
1da177e4 LT |
464 | |
465 | /* | |
466 | * Some section permission faults need to be handled gracefully. | |
467 | * They can happen due to a __{get,put}_user during an oops. | |
468 | */ | |
809e660f | 469 | #ifndef CONFIG_ARM_LPAE |
1da177e4 LT |
470 | static int |
471 | do_sect_fault(unsigned long addr, unsigned int fsr, struct pt_regs *regs) | |
472 | { | |
e5beac37 | 473 | do_bad_area(addr, fsr, regs); |
1da177e4 LT |
474 | return 0; |
475 | } | |
809e660f | 476 | #endif /* CONFIG_ARM_LPAE */ |
1da177e4 LT |
477 | |
478 | /* | |
479 | * This abort handler always returns "fault". | |
480 | */ | |
481 | static int | |
482 | do_bad(unsigned long addr, unsigned int fsr, struct pt_regs *regs) | |
483 | { | |
484 | return 1; | |
485 | } | |
486 | ||
136848d4 | 487 | struct fsr_info { |
1da177e4 LT |
488 | int (*fn)(unsigned long addr, unsigned int fsr, struct pt_regs *regs); |
489 | int sig; | |
cfb0810e | 490 | int code; |
1da177e4 | 491 | const char *name; |
1da177e4 LT |
492 | }; |
493 | ||
136848d4 | 494 | /* FSR definition */ |
f7b8156d CM |
495 | #ifdef CONFIG_ARM_LPAE |
496 | #include "fsr-3level.c" | |
497 | #else | |
136848d4 | 498 | #include "fsr-2level.c" |
f7b8156d | 499 | #endif |
136848d4 | 500 | |
1da177e4 LT |
501 | void __init |
502 | hook_fault_code(int nr, int (*fn)(unsigned long, unsigned int, struct pt_regs *), | |
6338a6aa | 503 | int sig, int code, const char *name) |
1da177e4 | 504 | { |
6338a6aa KS |
505 | if (nr < 0 || nr >= ARRAY_SIZE(fsr_info)) |
506 | BUG(); | |
507 | ||
508 | fsr_info[nr].fn = fn; | |
509 | fsr_info[nr].sig = sig; | |
510 | fsr_info[nr].code = code; | |
511 | fsr_info[nr].name = name; | |
1da177e4 LT |
512 | } |
513 | ||
514 | /* | |
515 | * Dispatch a data abort to the relevant handler. | |
516 | */ | |
c6089061 | 517 | asmlinkage void |
1da177e4 LT |
518 | do_DataAbort(unsigned long addr, unsigned int fsr, struct pt_regs *regs) |
519 | { | |
c88d6aa7 | 520 | const struct fsr_info *inf = fsr_info + fsr_fs(fsr); |
1da177e4 | 521 | |
df297bf6 | 522 | if (!inf->fn(addr, fsr & ~FSR_LNX_PF, regs)) |
1da177e4 LT |
523 | return; |
524 | ||
bafeb7a0 | 525 | pr_alert("8<--- cut here ---\n"); |
4ed89f22 | 526 | pr_alert("Unhandled fault: %s (0x%03x) at 0x%08lx\n", |
1da177e4 | 527 | inf->name, fsr, addr); |
49b38c34 | 528 | show_pte(KERN_ALERT, current->mm, addr); |
cfb0810e | 529 | |
05e792e3 EB |
530 | arm_notify_die("", regs, inf->sig, inf->code, (void __user *)addr, |
531 | fsr, 0); | |
1da177e4 LT |
532 | } |
533 | ||
3a4b5dca WD |
534 | void __init |
535 | hook_ifault_code(int nr, int (*fn)(unsigned long, unsigned int, struct pt_regs *), | |
536 | int sig, int code, const char *name) | |
537 | { | |
538 | if (nr < 0 || nr >= ARRAY_SIZE(ifsr_info)) | |
539 | BUG(); | |
540 | ||
541 | ifsr_info[nr].fn = fn; | |
542 | ifsr_info[nr].sig = sig; | |
543 | ifsr_info[nr].code = code; | |
544 | ifsr_info[nr].name = name; | |
545 | } | |
546 | ||
c6089061 | 547 | asmlinkage void |
4fb28474 | 548 | do_PrefetchAbort(unsigned long addr, unsigned int ifsr, struct pt_regs *regs) |
1da177e4 | 549 | { |
d25ef8b8 | 550 | const struct fsr_info *inf = ifsr_info + fsr_fs(ifsr); |
d25ef8b8 KS |
551 | |
552 | if (!inf->fn(addr, ifsr | FSR_LNX_PF, regs)) | |
553 | return; | |
554 | ||
4ed89f22 | 555 | pr_alert("Unhandled prefetch abort: %s (0x%03x) at 0x%08lx\n", |
d25ef8b8 KS |
556 | inf->name, ifsr, addr); |
557 | ||
05e792e3 EB |
558 | arm_notify_die("", regs, inf->sig, inf->code, (void __user *)addr, |
559 | ifsr, 0); | |
1da177e4 LT |
560 | } |
561 | ||
9254970c LS |
562 | /* |
563 | * Abort handler to be used only during first unmasking of asynchronous aborts | |
564 | * on the boot CPU. This makes sure that the machine will not die if the | |
565 | * firmware/bootloader left an imprecise abort pending for us to trip over. | |
566 | */ | |
567 | static int __init early_abort_handler(unsigned long addr, unsigned int fsr, | |
568 | struct pt_regs *regs) | |
569 | { | |
570 | pr_warn("Hit pending asynchronous external abort (FSR=0x%08x) during " | |
571 | "first unmask, this is most likely caused by a " | |
572 | "firmware/bootloader bug.\n", fsr); | |
573 | ||
574 | return 0; | |
575 | } | |
576 | ||
577 | void __init early_abt_enable(void) | |
578 | { | |
97a98ae5 | 579 | fsr_info[FSR_FS_AEA].fn = early_abort_handler; |
9254970c | 580 | local_abt_enable(); |
97a98ae5 | 581 | fsr_info[FSR_FS_AEA].fn = do_bad; |
9254970c LS |
582 | } |
583 | ||
f7b8156d | 584 | #ifndef CONFIG_ARM_LPAE |
993bf4ec KS |
585 | static int __init exceptions_init(void) |
586 | { | |
587 | if (cpu_architecture() >= CPU_ARCH_ARMv6) { | |
588 | hook_fault_code(4, do_translation_fault, SIGSEGV, SEGV_MAPERR, | |
589 | "I-cache maintenance fault"); | |
590 | } | |
591 | ||
b8ab5397 KS |
592 | if (cpu_architecture() >= CPU_ARCH_ARMv7) { |
593 | /* | |
594 | * TODO: Access flag faults introduced in ARMv6K. | |
595 | * Runtime check for 'K' extension is needed | |
596 | */ | |
597 | hook_fault_code(3, do_bad, SIGSEGV, SEGV_MAPERR, | |
598 | "section access flag fault"); | |
599 | hook_fault_code(6, do_bad, SIGSEGV, SEGV_MAPERR, | |
600 | "section access flag fault"); | |
601 | } | |
602 | ||
993bf4ec KS |
603 | return 0; |
604 | } | |
605 | ||
606 | arch_initcall(exceptions_init); | |
f7b8156d | 607 | #endif |