2005-04-16 22:20:36 +00:00
|
|
|
/*
|
|
|
|
* This file is subject to the terms and conditions of the GNU General Public
|
|
|
|
* License. See the file "COPYING" in the main directory of this archive
|
|
|
|
* for more details.
|
|
|
|
*
|
|
|
|
* Copyright (C) 1994, 95, 96, 99, 2001 Ralf Baechle
|
|
|
|
* Copyright (C) 1994, 1995, 1996 Paul M. Antoine.
|
|
|
|
* Copyright (C) 1999 Silicon Graphics, Inc.
|
2007-10-23 11:43:25 +00:00
|
|
|
* Copyright (C) 2007 Maciej W. Rozycki
|
2005-04-16 22:20:36 +00:00
|
|
|
*/
|
|
|
|
#ifndef _ASM_STACKFRAME_H
|
|
|
|
#define _ASM_STACKFRAME_H
|
|
|
|
|
|
|
|
#include <linux/threads.h>
|
|
|
|
|
|
|
|
#include <asm/asm.h>
|
2006-04-05 08:45:45 +00:00
|
|
|
#include <asm/asmmacro.h>
|
2005-04-16 22:20:36 +00:00
|
|
|
#include <asm/mipsregs.h>
|
2005-09-09 20:32:31 +00:00
|
|
|
#include <asm/asm-offsets.h>
|
2013-08-11 11:40:16 +00:00
|
|
|
#include <asm/thread_info.h>
|
2005-04-16 22:20:36 +00:00
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
/* Make the addition of cfi info a little easier. */
|
|
|
|
.macro cfi_rel_offset reg offset=0 docfi=0
|
|
|
|
.if \docfi
|
|
|
|
.cfi_rel_offset \reg, \offset
|
|
|
|
.endif
|
|
|
|
.endm
|
|
|
|
|
|
|
|
.macro cfi_st reg offset=0 docfi=0
|
|
|
|
LONG_S \reg, \offset(sp)
|
|
|
|
cfi_rel_offset \reg, \offset, \docfi
|
|
|
|
.endm
|
|
|
|
|
|
|
|
.macro cfi_restore reg offset=0 docfi=0
|
|
|
|
.if \docfi
|
|
|
|
.cfi_restore \reg
|
|
|
|
.endif
|
|
|
|
.endm
|
|
|
|
|
|
|
|
.macro cfi_ld reg offset=0 docfi=0
|
|
|
|
LONG_L \reg, \offset(sp)
|
|
|
|
cfi_restore \reg \offset \docfi
|
|
|
|
.endm
|
|
|
|
|
2014-05-23 14:29:44 +00:00
|
|
|
#if defined(CONFIG_CPU_R3000) || defined(CONFIG_CPU_TX39XX)
|
2007-05-21 12:47:22 +00:00
|
|
|
#define STATMASK 0x3f
|
|
|
|
#else
|
|
|
|
#define STATMASK 0x1f
|
|
|
|
#endif
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro SAVE_AT docfi=0
|
2005-04-16 22:20:36 +00:00
|
|
|
.set push
|
|
|
|
.set noat
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_st $1, PT_R1, \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
.set pop
|
|
|
|
.endm
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro SAVE_TEMP docfi=0
|
2007-02-02 16:41:47 +00:00
|
|
|
#ifdef CONFIG_CPU_HAS_SMARTMIPS
|
|
|
|
mflhxu v1
|
|
|
|
LONG_S v1, PT_LO(sp)
|
|
|
|
mflhxu v1
|
|
|
|
LONG_S v1, PT_HI(sp)
|
|
|
|
mflhxu v1
|
|
|
|
LONG_S v1, PT_ACX(sp)
|
2014-10-27 11:37:47 +00:00
|
|
|
#elif !defined(CONFIG_CPU_MIPSR6)
|
2005-04-16 22:20:36 +00:00
|
|
|
mfhi v1
|
2007-02-02 16:41:47 +00:00
|
|
|
#endif
|
2005-09-03 22:56:16 +00:00
|
|
|
#ifdef CONFIG_32BIT
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_st $8, PT_R8, \docfi
|
|
|
|
cfi_st $9, PT_R9, \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
#endif
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_st $10, PT_R10, \docfi
|
|
|
|
cfi_st $11, PT_R11, \docfi
|
|
|
|
cfi_st $12, PT_R12, \docfi
|
2014-10-27 11:37:47 +00:00
|
|
|
#if !defined(CONFIG_CPU_HAS_SMARTMIPS) && !defined(CONFIG_CPU_MIPSR6)
|
2009-06-26 16:01:43 +00:00
|
|
|
LONG_S v1, PT_HI(sp)
|
|
|
|
mflo v1
|
|
|
|
#endif
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_st $13, PT_R13, \docfi
|
|
|
|
cfi_st $14, PT_R14, \docfi
|
|
|
|
cfi_st $15, PT_R15, \docfi
|
|
|
|
cfi_st $24, PT_R24, \docfi
|
2014-10-27 11:37:47 +00:00
|
|
|
#if !defined(CONFIG_CPU_HAS_SMARTMIPS) && !defined(CONFIG_CPU_MIPSR6)
|
2009-06-26 16:01:43 +00:00
|
|
|
LONG_S v1, PT_LO(sp)
|
2013-06-21 21:14:53 +00:00
|
|
|
#endif
|
|
|
|
#ifdef CONFIG_CPU_CAVIUM_OCTEON
|
|
|
|
/*
|
|
|
|
* The Octeon multiplier state is affected by general
|
|
|
|
* multiply instructions. It must be saved before and
|
|
|
|
* kernel code might corrupt it
|
|
|
|
*/
|
|
|
|
jal octeon_mult_save
|
2009-06-26 16:01:43 +00:00
|
|
|
#endif
|
2005-04-16 22:20:36 +00:00
|
|
|
.endm
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro SAVE_STATIC docfi=0
|
|
|
|
cfi_st $16, PT_R16, \docfi
|
|
|
|
cfi_st $17, PT_R17, \docfi
|
|
|
|
cfi_st $18, PT_R18, \docfi
|
|
|
|
cfi_st $19, PT_R19, \docfi
|
|
|
|
cfi_st $20, PT_R20, \docfi
|
|
|
|
cfi_st $21, PT_R21, \docfi
|
|
|
|
cfi_st $22, PT_R22, \docfi
|
|
|
|
cfi_st $23, PT_R23, \docfi
|
|
|
|
cfi_st $30, PT_R30, \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
.endm
|
|
|
|
|
2017-08-10 18:27:38 +00:00
|
|
|
/*
|
|
|
|
* get_saved_sp returns the SP for the current CPU by looking in the
|
|
|
|
* kernelsp array for it. If tosp is set, it stores the current sp in
|
|
|
|
* k0 and loads the new value in sp. If not, it clobbers k0 and
|
|
|
|
* stores the new value in k1, leaving sp unaffected.
|
|
|
|
*/
|
2005-04-16 22:20:36 +00:00
|
|
|
#ifdef CONFIG_SMP
|
2017-08-10 18:27:38 +00:00
|
|
|
|
|
|
|
/* SMP variation */
|
|
|
|
.macro get_saved_sp docfi=0 tosp=0
|
2013-08-11 11:40:16 +00:00
|
|
|
ASM_CPUID_MFC0 k0, ASM_SMP_CPUID_REG
|
2007-02-15 13:21:36 +00:00
|
|
|
#if defined(CONFIG_32BIT) || defined(KBUILD_64BIT_SYM32)
|
|
|
|
lui k1, %hi(kernelsp)
|
|
|
|
#else
|
2006-10-10 13:46:52 +00:00
|
|
|
lui k1, %highest(kernelsp)
|
|
|
|
daddiu k1, %higher(kernelsp)
|
|
|
|
dsll k1, 16
|
|
|
|
daddiu k1, %hi(kernelsp)
|
|
|
|
dsll k1, 16
|
|
|
|
#endif
|
2013-08-11 11:40:16 +00:00
|
|
|
LONG_SRL k0, SMP_CPUID_PTRSHIFT
|
2006-10-10 13:46:52 +00:00
|
|
|
LONG_ADDU k1, k0
|
2017-08-10 18:27:38 +00:00
|
|
|
.if \tosp
|
|
|
|
move k0, sp
|
|
|
|
.if \docfi
|
|
|
|
.cfi_register sp, k0
|
|
|
|
.endif
|
|
|
|
LONG_L sp, %lo(kernelsp)(k1)
|
|
|
|
.else
|
2005-02-13 00:32:43 +00:00
|
|
|
LONG_L k1, %lo(kernelsp)(k1)
|
2017-08-10 18:27:38 +00:00
|
|
|
.endif
|
2005-04-16 22:20:36 +00:00
|
|
|
.endm
|
|
|
|
|
|
|
|
.macro set_saved_sp stackp temp temp2
|
2013-08-11 11:40:16 +00:00
|
|
|
ASM_CPUID_MFC0 \temp, ASM_SMP_CPUID_REG
|
|
|
|
LONG_SRL \temp, SMP_CPUID_PTRSHIFT
|
2005-07-08 08:03:48 +00:00
|
|
|
LONG_S \stackp, kernelsp(\temp)
|
2005-04-16 22:20:36 +00:00
|
|
|
.endm
|
2013-08-11 11:40:16 +00:00
|
|
|
#else /* !CONFIG_SMP */
|
2017-08-10 18:27:38 +00:00
|
|
|
/* Uniprocessor variation */
|
|
|
|
.macro get_saved_sp docfi=0 tosp=0
|
2010-04-10 12:07:01 +00:00
|
|
|
#ifdef CONFIG_CPU_JUMP_WORKAROUNDS
|
2010-03-13 04:34:15 +00:00
|
|
|
/*
|
|
|
|
* Clear BTB (branch target buffer), forbid RAS (return address
|
|
|
|
* stack) to workaround the Out-of-order Issue in Loongson2F
|
|
|
|
* via its diagnostic register.
|
|
|
|
*/
|
|
|
|
move k0, ra
|
|
|
|
jal 1f
|
|
|
|
nop
|
|
|
|
1: jal 1f
|
|
|
|
nop
|
|
|
|
1: jal 1f
|
|
|
|
nop
|
|
|
|
1: jal 1f
|
|
|
|
nop
|
|
|
|
1: move ra, k0
|
|
|
|
li k0, 3
|
|
|
|
mtc0 k0, $22
|
2013-03-25 17:15:55 +00:00
|
|
|
#endif /* CONFIG_CPU_JUMP_WORKAROUNDS */
|
2007-02-15 13:21:36 +00:00
|
|
|
#if defined(CONFIG_32BIT) || defined(KBUILD_64BIT_SYM32)
|
|
|
|
lui k1, %hi(kernelsp)
|
|
|
|
#else
|
2005-07-08 08:03:48 +00:00
|
|
|
lui k1, %highest(kernelsp)
|
|
|
|
daddiu k1, %higher(kernelsp)
|
|
|
|
dsll k1, k1, 16
|
|
|
|
daddiu k1, %hi(kernelsp)
|
|
|
|
dsll k1, k1, 16
|
|
|
|
#endif
|
2017-08-10 18:27:38 +00:00
|
|
|
.if \tosp
|
|
|
|
move k0, sp
|
|
|
|
.if \docfi
|
|
|
|
.cfi_register sp, k0
|
|
|
|
.endif
|
|
|
|
LONG_L sp, %lo(kernelsp)(k1)
|
|
|
|
.else
|
2005-04-16 22:20:36 +00:00
|
|
|
LONG_L k1, %lo(kernelsp)(k1)
|
2017-08-10 18:27:38 +00:00
|
|
|
.endif
|
2005-04-16 22:20:36 +00:00
|
|
|
.endm
|
|
|
|
|
|
|
|
.macro set_saved_sp stackp temp temp2
|
|
|
|
LONG_S \stackp, kernelsp
|
|
|
|
.endm
|
|
|
|
#endif
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro SAVE_SOME docfi=0
|
2005-04-16 22:20:36 +00:00
|
|
|
.set push
|
|
|
|
.set noat
|
|
|
|
.set reorder
|
|
|
|
mfc0 k0, CP0_STATUS
|
|
|
|
sll k0, 3 /* extract cu0 bit */
|
|
|
|
.set noreorder
|
|
|
|
bltz k0, 8f
|
MIPS: Fix exception entry when CONFIG_EVA enabled
Commit 9fef68686317b ("MIPS: Make SAVE_SOME more standard") made several
changes to the order in which registers are saved in the SAVE_SOME
macro, used by exception handlers to save the processor state. In
particular, it removed the
move k1, sp
in the delay slot of the branch testing if the processor is already in
kernel mode. This is replaced later in the macro by a
move k0, sp
When CONFIG_EVA is disabled, this instruction actually appears in the
delay slot of the branch. However, when CONFIG_EVA is enabled, instead
the RPS workaround of
MFC0 k0, CP0_ENTRYHI
appears in the delay slot. This results in k0 not containing the stack
pointer, but some unrelated value, which is then saved to the kernel
stack. On exit from the exception, this bogus value is restored to the
stack pointer, resulting in an OOPS.
Fix this by moving the save of SP in k0 explicitly in the delay slot of
the branch, outside of the CONFIG_EVA section, restoring the expected
instruction ordering when CONFIG_EVA is active.
Fixes: 9fef68686317b ("MIPS: Make SAVE_SOME more standard")
Signed-off-by: Matt Redfearn <matt.redfearn@mips.com>
Reported-by: Vladimir Kondratiev <vladimir.kondratiev@intel.com>
Reviewed-by: Corey Minyard <cminyard@mvista.com>
Reviewed-by: James Hogan <jhogan@kernel.org>
Patchwork: https://patchwork.linux-mips.org/patch/17471/
Signed-off-by: James Hogan <jhogan@kernel.org>
2017-10-11 08:59:20 +00:00
|
|
|
move k0, sp
|
|
|
|
.if \docfi
|
|
|
|
.cfi_register sp, k0
|
|
|
|
.endif
|
2015-07-31 15:29:38 +00:00
|
|
|
#ifdef CONFIG_EVA
|
|
|
|
/*
|
|
|
|
* Flush interAptiv's Return Prediction Stack (RPS) by writing
|
|
|
|
* EntryHi. Toggling Config7.RPS is slower and less portable.
|
|
|
|
*
|
|
|
|
* The RPS isn't automatically flushed when exceptions are
|
|
|
|
* taken, which can result in kernel mode speculative accesses
|
|
|
|
* to user addresses if the RPS mispredicts. That's harmless
|
|
|
|
* when user and kernel share the same address space, but with
|
|
|
|
* EVA the same user segments may be unmapped to kernel mode,
|
|
|
|
* even containing sensitive MMIO regions or invalid memory.
|
|
|
|
*
|
|
|
|
* This can happen when the kernel sets the return address to
|
|
|
|
* ret_from_* and jr's to the exception handler, which looks
|
|
|
|
* more like a tail call than a function call. If nested calls
|
|
|
|
* don't evict the last user address in the RPS, it will
|
|
|
|
* mispredict the return and fetch from a user controlled
|
|
|
|
* address into the icache.
|
|
|
|
*
|
|
|
|
* More recent EVA-capable cores with MAAR to restrict
|
|
|
|
* speculative accesses aren't affected.
|
|
|
|
*/
|
|
|
|
MFC0 k0, CP0_ENTRYHI
|
|
|
|
MTC0 k0, CP0_ENTRYHI
|
|
|
|
#endif
|
2005-04-16 22:20:36 +00:00
|
|
|
.set reorder
|
|
|
|
/* Called from user mode, new stack. */
|
2017-08-10 18:27:39 +00:00
|
|
|
get_saved_sp docfi=\docfi tosp=1
|
2017-08-10 18:27:38 +00:00
|
|
|
8:
|
|
|
|
#ifdef CONFIG_CPU_DADDI_WORKAROUNDS
|
|
|
|
.set at=k1
|
|
|
|
#endif
|
|
|
|
PTR_SUBU sp, PT_SIZE
|
|
|
|
#ifdef CONFIG_CPU_DADDI_WORKAROUNDS
|
2007-10-23 11:43:25 +00:00
|
|
|
.set noat
|
|
|
|
#endif
|
2017-08-10 18:27:39 +00:00
|
|
|
.if \docfi
|
|
|
|
.cfi_def_cfa sp,0
|
|
|
|
.endif
|
|
|
|
cfi_st k0, PT_R29, \docfi
|
|
|
|
cfi_rel_offset sp, PT_R29, \docfi
|
|
|
|
cfi_st v1, PT_R3, \docfi
|
2006-04-05 08:45:45 +00:00
|
|
|
/*
|
|
|
|
* You might think that you don't need to save $0,
|
|
|
|
* but the FPU emulator and gdb remote debug stub
|
|
|
|
* need it to operate correctly
|
|
|
|
*/
|
2005-04-16 22:20:36 +00:00
|
|
|
LONG_S $0, PT_R0(sp)
|
|
|
|
mfc0 v1, CP0_STATUS
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_st v0, PT_R2, \docfi
|
2013-03-25 17:15:55 +00:00
|
|
|
LONG_S v1, PT_STATUS(sp)
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_st $4, PT_R4, \docfi
|
2009-06-26 16:01:43 +00:00
|
|
|
mfc0 v1, CP0_CAUSE
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_st $5, PT_R5, \docfi
|
2009-06-26 16:01:43 +00:00
|
|
|
LONG_S v1, PT_CAUSE(sp)
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_st $6, PT_R6, \docfi
|
|
|
|
cfi_st ra, PT_R31, \docfi
|
2017-08-10 18:27:38 +00:00
|
|
|
MFC0 ra, CP0_EPC
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_st $7, PT_R7, \docfi
|
2005-09-03 22:56:16 +00:00
|
|
|
#ifdef CONFIG_64BIT
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_st $8, PT_R8, \docfi
|
|
|
|
cfi_st $9, PT_R9, \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
#endif
|
2017-08-10 18:27:38 +00:00
|
|
|
LONG_S ra, PT_EPC(sp)
|
2017-08-10 18:27:39 +00:00
|
|
|
.if \docfi
|
|
|
|
.cfi_rel_offset ra, PT_EPC
|
|
|
|
.endif
|
|
|
|
cfi_st $25, PT_R25, \docfi
|
|
|
|
cfi_st $28, PT_R28, \docfi
|
2016-12-19 14:20:58 +00:00
|
|
|
|
|
|
|
/* Set thread_info if we're coming from user mode */
|
|
|
|
mfc0 k0, CP0_STATUS
|
|
|
|
sll k0, 3 /* extract cu0 bit */
|
|
|
|
bltz k0, 9f
|
|
|
|
|
2005-04-16 22:20:36 +00:00
|
|
|
ori $28, sp, _THREAD_MASK
|
|
|
|
xori $28, _THREAD_MASK
|
2008-12-11 23:33:33 +00:00
|
|
|
#ifdef CONFIG_CPU_CAVIUM_OCTEON
|
2013-06-21 21:14:53 +00:00
|
|
|
.set mips64
|
|
|
|
pref 0, 0($28) /* Prefetch the current pointer */
|
2008-12-11 23:33:33 +00:00
|
|
|
#endif
|
2016-12-19 14:20:58 +00:00
|
|
|
9:
|
2005-04-16 22:20:36 +00:00
|
|
|
.set pop
|
|
|
|
.endm
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro SAVE_ALL docfi=0
|
|
|
|
SAVE_SOME \docfi
|
|
|
|
SAVE_AT \docfi
|
|
|
|
SAVE_TEMP \docfi
|
|
|
|
SAVE_STATIC \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
.endm
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro RESTORE_AT docfi=0
|
2005-04-16 22:20:36 +00:00
|
|
|
.set push
|
|
|
|
.set noat
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_ld $1, PT_R1, \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
.set pop
|
|
|
|
.endm
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro RESTORE_TEMP docfi=0
|
2013-06-21 21:14:53 +00:00
|
|
|
#ifdef CONFIG_CPU_CAVIUM_OCTEON
|
|
|
|
/* Restore the Octeon multiplier state */
|
|
|
|
jal octeon_mult_restore
|
|
|
|
#endif
|
2007-02-02 16:41:47 +00:00
|
|
|
#ifdef CONFIG_CPU_HAS_SMARTMIPS
|
|
|
|
LONG_L $24, PT_ACX(sp)
|
|
|
|
mtlhx $24
|
|
|
|
LONG_L $24, PT_HI(sp)
|
|
|
|
mtlhx $24
|
2005-04-16 22:20:36 +00:00
|
|
|
LONG_L $24, PT_LO(sp)
|
2007-02-02 16:41:47 +00:00
|
|
|
mtlhx $24
|
2014-10-27 11:37:47 +00:00
|
|
|
#elif !defined(CONFIG_CPU_MIPSR6)
|
2007-02-02 16:41:47 +00:00
|
|
|
LONG_L $24, PT_LO(sp)
|
|
|
|
mtlo $24
|
|
|
|
LONG_L $24, PT_HI(sp)
|
|
|
|
mthi $24
|
|
|
|
#endif
|
2005-09-03 22:56:16 +00:00
|
|
|
#ifdef CONFIG_32BIT
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_ld $8, PT_R8, \docfi
|
|
|
|
cfi_ld $9, PT_R9, \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
#endif
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_ld $10, PT_R10, \docfi
|
|
|
|
cfi_ld $11, PT_R11, \docfi
|
|
|
|
cfi_ld $12, PT_R12, \docfi
|
|
|
|
cfi_ld $13, PT_R13, \docfi
|
|
|
|
cfi_ld $14, PT_R14, \docfi
|
|
|
|
cfi_ld $15, PT_R15, \docfi
|
|
|
|
cfi_ld $24, PT_R24, \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
.endm
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro RESTORE_STATIC docfi=0
|
|
|
|
cfi_ld $16, PT_R16, \docfi
|
|
|
|
cfi_ld $17, PT_R17, \docfi
|
|
|
|
cfi_ld $18, PT_R18, \docfi
|
|
|
|
cfi_ld $19, PT_R19, \docfi
|
|
|
|
cfi_ld $20, PT_R20, \docfi
|
|
|
|
cfi_ld $21, PT_R21, \docfi
|
|
|
|
cfi_ld $22, PT_R22, \docfi
|
|
|
|
cfi_ld $23, PT_R23, \docfi
|
|
|
|
cfi_ld $30, PT_R30, \docfi
|
|
|
|
.endm
|
|
|
|
|
|
|
|
.macro RESTORE_SP docfi=0
|
|
|
|
cfi_ld sp, PT_R29, \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
.endm
|
|
|
|
|
|
|
|
#if defined(CONFIG_CPU_R3000) || defined(CONFIG_CPU_TX39XX)
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro RESTORE_SOME docfi=0
|
2005-04-16 22:20:36 +00:00
|
|
|
.set push
|
|
|
|
.set reorder
|
|
|
|
.set noat
|
|
|
|
mfc0 a0, CP0_STATUS
|
MIPS: Fix FPU disable with preemption
The FPU should not be left enabled after a task context switch. This
isn't usually a problem as the FPU enable bit is updated before
returning to userland, however it can potentially mask kernel bugs, and
in fact KVM assumes it won't happen and won't clear the FPU enable bit
before returning to the guest, which allows the guest to use stale FPU
context.
Interrupts and exceptions save and restore most bits of the CP0 Status
register which contains the FPU enable bit (CU1). When the kernel needs
to enable or disable the FPU (for example due to attempted FPU use by
userland, or the scheduler being invoked) both the actual Status
register and the saved value in the userland context are updated.
However this doesn't work correctly with full kernel preemption enabled,
since the FPU enable bit can be cleared from within an interrupt when
the scheduler is invoked, and only the userland context is updated, not
the interrupt context.
For example:
1) Enter kernel with FPU already enabled, TIF_USEDFPU=1, Status.CU1=1
saved.
2) Take a timer interrupt while in kernel mode, Status.CU1=1 saved.
3) Timer interrupt invokes scheduler to preempt the task, which clears
TIF_USEDFPU, disables the FPU in Status register (Status.CU1=0), and
the value stored in user context from step (1), but not the interrupt
context from step (2).
4) When the process is scheduled back in again Status.CU1=0.
5) The interrupt context from step (2) is restored, which sets
Status.CU1=1. So from user context point of view, preemption has
re-enabled FPU!
6) If the scheduler is invoked again (via preemption or voluntarily)
before returning to userland, TIF_USEDFPU=0 so the FPU is not
disabled before the task context switch.
7) The next task resumes from the context switch with FPU enabled!
The restoring of the Status register on return from interrupt/exception
is already selective about which bits to restore, leaving the interrupt
mask bits alone so enabling/disabling of CPU interrupt lines can
persist. Extend this to also leave both the CU1 bit (FPU enable) and the
FR bit (which specifies the FPU mode and gets changed with CU1). This
prevents a stale Status value being restored in step (5) above and
persisting through subsequent context switches.
Also switch to the use of definitions from asm/mipsregs.h while we're at
it.
Since this change also affects the restoration of Status register on the
path back to userland, it increases the sensitivity of the kernel to the
problem of the FPU being left enabled, allowing it to propagate to
userland, therefore a warning is also added to lose_fpu_inatomic() to
point out any future reoccurances before they do any damage.
Signed-off-by: James Hogan <james.hogan@imgtec.com>
Reviewed-by: Paul Burton <paul.burton@imgtec.com>
Cc: linux-mips@linux-mips.org
Patchwork: https://patchwork.linux-mips.org/patch/12303/
Signed-off-by: Ralf Baechle <ralf@linux-mips.org>
2016-02-01 13:50:37 +00:00
|
|
|
li v1, ST0_CU1 | ST0_IM
|
2007-05-21 12:47:22 +00:00
|
|
|
ori a0, STATMASK
|
|
|
|
xori a0, STATMASK
|
|
|
|
mtc0 a0, CP0_STATUS
|
2005-04-16 22:20:36 +00:00
|
|
|
and a0, v1
|
|
|
|
LONG_L v0, PT_STATUS(sp)
|
|
|
|
nor v1, $0, v1
|
|
|
|
and v0, v1
|
|
|
|
or v0, a0
|
|
|
|
mtc0 v0, CP0_STATUS
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_ld $31, PT_R31, \docfi
|
|
|
|
cfi_ld $28, PT_R28, \docfi
|
|
|
|
cfi_ld $25, PT_R25, \docfi
|
|
|
|
cfi_ld $7, PT_R7, \docfi
|
|
|
|
cfi_ld $6, PT_R6, \docfi
|
|
|
|
cfi_ld $5, PT_R5, \docfi
|
|
|
|
cfi_ld $4, PT_R4, \docfi
|
|
|
|
cfi_ld $3, PT_R3, \docfi
|
|
|
|
cfi_ld $2, PT_R2, \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
.set pop
|
|
|
|
.endm
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro RESTORE_SP_AND_RET docfi=0
|
2005-04-16 22:20:36 +00:00
|
|
|
.set push
|
|
|
|
.set noreorder
|
|
|
|
LONG_L k0, PT_EPC(sp)
|
2017-08-10 18:27:39 +00:00
|
|
|
RESTORE_SP \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
jr k0
|
|
|
|
rfe
|
|
|
|
.set pop
|
|
|
|
.endm
|
|
|
|
|
|
|
|
#else
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro RESTORE_SOME docfi=0
|
2005-04-16 22:20:36 +00:00
|
|
|
.set push
|
|
|
|
.set reorder
|
|
|
|
.set noat
|
|
|
|
mfc0 a0, CP0_STATUS
|
2006-04-05 08:45:45 +00:00
|
|
|
ori a0, STATMASK
|
|
|
|
xori a0, STATMASK
|
2005-04-16 22:20:36 +00:00
|
|
|
mtc0 a0, CP0_STATUS
|
MIPS: Fix FPU disable with preemption
The FPU should not be left enabled after a task context switch. This
isn't usually a problem as the FPU enable bit is updated before
returning to userland, however it can potentially mask kernel bugs, and
in fact KVM assumes it won't happen and won't clear the FPU enable bit
before returning to the guest, which allows the guest to use stale FPU
context.
Interrupts and exceptions save and restore most bits of the CP0 Status
register which contains the FPU enable bit (CU1). When the kernel needs
to enable or disable the FPU (for example due to attempted FPU use by
userland, or the scheduler being invoked) both the actual Status
register and the saved value in the userland context are updated.
However this doesn't work correctly with full kernel preemption enabled,
since the FPU enable bit can be cleared from within an interrupt when
the scheduler is invoked, and only the userland context is updated, not
the interrupt context.
For example:
1) Enter kernel with FPU already enabled, TIF_USEDFPU=1, Status.CU1=1
saved.
2) Take a timer interrupt while in kernel mode, Status.CU1=1 saved.
3) Timer interrupt invokes scheduler to preempt the task, which clears
TIF_USEDFPU, disables the FPU in Status register (Status.CU1=0), and
the value stored in user context from step (1), but not the interrupt
context from step (2).
4) When the process is scheduled back in again Status.CU1=0.
5) The interrupt context from step (2) is restored, which sets
Status.CU1=1. So from user context point of view, preemption has
re-enabled FPU!
6) If the scheduler is invoked again (via preemption or voluntarily)
before returning to userland, TIF_USEDFPU=0 so the FPU is not
disabled before the task context switch.
7) The next task resumes from the context switch with FPU enabled!
The restoring of the Status register on return from interrupt/exception
is already selective about which bits to restore, leaving the interrupt
mask bits alone so enabling/disabling of CPU interrupt lines can
persist. Extend this to also leave both the CU1 bit (FPU enable) and the
FR bit (which specifies the FPU mode and gets changed with CU1). This
prevents a stale Status value being restored in step (5) above and
persisting through subsequent context switches.
Also switch to the use of definitions from asm/mipsregs.h while we're at
it.
Since this change also affects the restoration of Status register on the
path back to userland, it increases the sensitivity of the kernel to the
problem of the FPU being left enabled, allowing it to propagate to
userland, therefore a warning is also added to lose_fpu_inatomic() to
point out any future reoccurances before they do any damage.
Signed-off-by: James Hogan <james.hogan@imgtec.com>
Reviewed-by: Paul Burton <paul.burton@imgtec.com>
Cc: linux-mips@linux-mips.org
Patchwork: https://patchwork.linux-mips.org/patch/12303/
Signed-off-by: Ralf Baechle <ralf@linux-mips.org>
2016-02-01 13:50:37 +00:00
|
|
|
li v1, ST0_CU1 | ST0_FR | ST0_IM
|
2005-04-16 22:20:36 +00:00
|
|
|
and a0, v1
|
|
|
|
LONG_L v0, PT_STATUS(sp)
|
|
|
|
nor v1, $0, v1
|
|
|
|
and v0, v1
|
|
|
|
or v0, a0
|
|
|
|
mtc0 v0, CP0_STATUS
|
|
|
|
LONG_L v1, PT_EPC(sp)
|
|
|
|
MTC0 v1, CP0_EPC
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_ld $31, PT_R31, \docfi
|
|
|
|
cfi_ld $28, PT_R28, \docfi
|
|
|
|
cfi_ld $25, PT_R25, \docfi
|
2005-09-03 22:56:16 +00:00
|
|
|
#ifdef CONFIG_64BIT
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_ld $8, PT_R8, \docfi
|
|
|
|
cfi_ld $9, PT_R9, \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
#endif
|
2017-08-10 18:27:39 +00:00
|
|
|
cfi_ld $7, PT_R7, \docfi
|
|
|
|
cfi_ld $6, PT_R6, \docfi
|
|
|
|
cfi_ld $5, PT_R5, \docfi
|
|
|
|
cfi_ld $4, PT_R4, \docfi
|
|
|
|
cfi_ld $3, PT_R3, \docfi
|
|
|
|
cfi_ld $2, PT_R2, \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
.set pop
|
|
|
|
.endm
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro RESTORE_SP_AND_RET docfi=0
|
|
|
|
RESTORE_SP \docfi
|
mips: Add MIPS Release 5 support
There are five MIPS32/64 architecture releases currently available:
from 1 to 6 except fourth one, which was intentionally skipped.
Three of them can be called as major: 1st, 2nd and 6th, that not only
have some system level alterations, but also introduced significant
core/ISA level updates. The rest of the MIPS architecture releases are
minor.
Even though they don't have as much ISA/system/core level changes
as the major ones with respect to the previous releases, they still
provide a set of updates (I'd say they were intended to be the
intermediate releases before a major one) that might be useful for the
kernel and user-level code, when activated by the kernel or compiler.
In particular the following features were introduced or ended up being
available at/after MIPS32/64 Release 5 architecture:
+ the last release of the misaligned memory access instructions,
+ virtualisation - VZ ASE - is optional component of the arch,
+ SIMD - MSA ASE - is optional component of the arch,
+ DSP ASE is optional component of the arch,
+ CP0.Status.FR=1 for CP1.FIR.F64=1 (pure 64-bit FPU general registers)
must be available if FPU is implemented,
+ CP1.FIR.Has2008 support is required so CP1.FCSR.{ABS2008,NAN2008} bits
are available.
+ UFR/UNFR aliases to access CP0.Status.FR from user-space by means of
ctc1/cfc1 instructions (enabled by CP0.Config5.UFR),
+ CP0.COnfig5.LLB=1 and eretnc instruction are implemented to without
accidentally clearing LL-bit when returning from an interrupt,
exception, or error trap,
+ XPA feature together with extended versions of CPx registers is
introduced, which needs to have mfhc0/mthc0 instructions available.
So due to these changes GNU GCC provides an extended instructions set
support for MIPS32/64 Release 5 by default like eretnc/mfhc0/mthc0. Even
though the architecture alteration isn't that big, it still worth to be
taken into account by the kernel software. Finally we can't deny that
some optimization/limitations might be found in future and implemented
on some level in kernel or compiler. In this case having even
intermediate MIPS architecture releases support would be more than
useful.
So the most of the changes provided by this commit can be split into
either compile- or runtime configs related. The compile-time related
changes are caused by adding the new CONFIG_CPU_MIPS32_R5/CONFIG_CPU_MIPSR5
configs and concern the code activating MIPSR2 or MIPSR6 already
implemented features (like eretnc/LLbit, mthc0/mfhc0). In addition
CPU_HAS_MSA can be now freely enabled for MIPS32/64 release 5 based
platforms as this is done for CPU_MIPS32_R6 CPUs. The runtime changes
concerns the features which are handled with respect to the MIPS ISA
revision detected at run-time by means of CP0.Config.{AT,AR} bits. Alas
these fields can be used to detect either r1 or r2 or r6 releases.
But since we know which CPUs in fact support the R5 arch, we can manually
set MIPS_CPU_ISA_M32R5/MIPS_CPU_ISA_M64R5 bit of c->isa_level and then
use cpu_has_mips32r5/cpu_has_mips64r5 where it's appropriate.
Since XPA/EVA provide too complex alterationss and to have them used with
MIPS32 Release 2 charged kernels (for compatibility with current platform
configs) they are left to be setup as a separate kernel configs.
Co-developed-by: Alexey Malahov <Alexey.Malahov@baikalelectronics.ru>
Signed-off-by: Alexey Malahov <Alexey.Malahov@baikalelectronics.ru>
Signed-off-by: Serge Semin <Sergey.Semin@baikalelectronics.ru>
Cc: Thomas Bogendoerfer <tsbogend@alpha.franken.de>
Cc: Paul Burton <paulburton@kernel.org>
Cc: Ralf Baechle <ralf@linux-mips.org>
Cc: Arnd Bergmann <arnd@arndb.de>
Cc: Rob Herring <robh+dt@kernel.org>
Cc: devicetree@vger.kernel.org
Signed-off-by: Thomas Bogendoerfer <tsbogend@alpha.franken.de>
2020-05-21 14:07:14 +00:00
|
|
|
#if defined(CONFIG_CPU_MIPSR5) || defined(CONFIG_CPU_MIPSR6)
|
2016-10-17 14:34:35 +00:00
|
|
|
eretnc
|
|
|
|
#else
|
2018-11-08 20:14:38 +00:00
|
|
|
.set push
|
2014-03-30 11:20:10 +00:00
|
|
|
.set arch=r4000
|
2005-04-16 22:20:36 +00:00
|
|
|
eret
|
2018-11-08 20:14:38 +00:00
|
|
|
.set pop
|
2016-10-17 14:34:35 +00:00
|
|
|
#endif
|
2005-04-16 22:20:36 +00:00
|
|
|
.endm
|
|
|
|
|
|
|
|
#endif
|
|
|
|
|
2017-08-10 18:27:39 +00:00
|
|
|
.macro RESTORE_ALL docfi=0
|
|
|
|
RESTORE_TEMP \docfi
|
|
|
|
RESTORE_STATIC \docfi
|
|
|
|
RESTORE_AT \docfi
|
|
|
|
RESTORE_SOME \docfi
|
|
|
|
RESTORE_SP \docfi
|
2005-04-16 22:20:36 +00:00
|
|
|
.endm
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Move to kernel mode and disable interrupts.
|
|
|
|
* Set cp0 enable bit as sign that we're running on the kernel stack
|
|
|
|
*/
|
|
|
|
.macro CLI
|
|
|
|
mfc0 t0, CP0_STATUS
|
2020-09-21 09:12:27 +00:00
|
|
|
li t1, ST0_KERNEL_CUMASK | STATMASK
|
2005-04-16 22:20:36 +00:00
|
|
|
or t0, t1
|
2007-05-21 12:47:22 +00:00
|
|
|
xori t0, STATMASK
|
2005-04-16 22:20:36 +00:00
|
|
|
mtc0 t0, CP0_STATUS
|
|
|
|
irq_disable_hazard
|
|
|
|
.endm
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Move to kernel mode and enable interrupts.
|
|
|
|
* Set cp0 enable bit as sign that we're running on the kernel stack
|
|
|
|
*/
|
|
|
|
.macro STI
|
|
|
|
mfc0 t0, CP0_STATUS
|
2020-09-21 09:12:27 +00:00
|
|
|
li t1, ST0_KERNEL_CUMASK | STATMASK
|
2005-04-16 22:20:36 +00:00
|
|
|
or t0, t1
|
2007-05-21 12:47:22 +00:00
|
|
|
xori t0, STATMASK & ~1
|
2005-04-16 22:20:36 +00:00
|
|
|
mtc0 t0, CP0_STATUS
|
|
|
|
irq_enable_hazard
|
|
|
|
.endm
|
|
|
|
|
|
|
|
/*
|
2007-05-21 12:47:22 +00:00
|
|
|
* Just move to kernel mode and leave interrupts as they are. Note
|
|
|
|
* for the R3000 this means copying the previous enable from IEp.
|
2005-04-16 22:20:36 +00:00
|
|
|
* Set cp0 enable bit as sign that we're running on the kernel stack
|
|
|
|
*/
|
|
|
|
.macro KMODE
|
|
|
|
mfc0 t0, CP0_STATUS
|
2020-09-21 09:12:27 +00:00
|
|
|
li t1, ST0_KERNEL_CUMASK | (STATMASK & ~1)
|
2007-05-21 12:47:22 +00:00
|
|
|
#if defined(CONFIG_CPU_R3000) || defined(CONFIG_CPU_TX39XX)
|
|
|
|
andi t2, t0, ST0_IEP
|
|
|
|
srl t2, 2
|
|
|
|
or t0, t2
|
|
|
|
#endif
|
2005-04-16 22:20:36 +00:00
|
|
|
or t0, t1
|
2007-05-21 12:47:22 +00:00
|
|
|
xori t0, STATMASK & ~1
|
2005-04-16 22:20:36 +00:00
|
|
|
mtc0 t0, CP0_STATUS
|
|
|
|
irq_disable_hazard
|
|
|
|
.endm
|
|
|
|
|
|
|
|
#endif /* _ASM_STACKFRAME_H */
|