alternative.c 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814
  1. #define pr_fmt(fmt) "SMP alternatives: " fmt
  2. #include <linux/module.h>
  3. #include <linux/sched.h>
  4. #include <linux/mutex.h>
  5. #include <linux/list.h>
  6. #include <linux/stringify.h>
  7. #include <linux/mm.h>
  8. #include <linux/vmalloc.h>
  9. #include <linux/memory.h>
  10. #include <linux/stop_machine.h>
  11. #include <linux/slab.h>
  12. #include <linux/kdebug.h>
  13. #include <asm/text-patching.h>
  14. #include <asm/alternative.h>
  15. #include <asm/sections.h>
  16. #include <asm/pgtable.h>
  17. #include <asm/mce.h>
  18. #include <asm/nmi.h>
  19. #include <asm/cacheflush.h>
  20. #include <asm/tlbflush.h>
  21. #include <asm/io.h>
  22. #include <asm/fixmap.h>
  23. int __read_mostly alternatives_patched;
  24. EXPORT_SYMBOL_GPL(alternatives_patched);
  25. #define MAX_PATCH_LEN (255-1)
  26. static int __initdata_or_module debug_alternative;
  27. static int __init debug_alt(char *str)
  28. {
  29. debug_alternative = 1;
  30. return 1;
  31. }
  32. __setup("debug-alternative", debug_alt);
  33. static int noreplace_smp;
  34. static int __init setup_noreplace_smp(char *str)
  35. {
  36. noreplace_smp = 1;
  37. return 1;
  38. }
  39. __setup("noreplace-smp", setup_noreplace_smp);
  40. #ifdef CONFIG_PARAVIRT
  41. static int __initdata_or_module noreplace_paravirt = 0;
  42. static int __init setup_noreplace_paravirt(char *str)
  43. {
  44. noreplace_paravirt = 1;
  45. return 1;
  46. }
  47. __setup("noreplace-paravirt", setup_noreplace_paravirt);
  48. #endif
  49. #define DPRINTK(fmt, args...) \
  50. do { \
  51. if (debug_alternative) \
  52. printk(KERN_DEBUG "%s: " fmt "\n", __func__, ##args); \
  53. } while (0)
  54. #define DUMP_BYTES(buf, len, fmt, args...) \
  55. do { \
  56. if (unlikely(debug_alternative)) { \
  57. int j; \
  58. \
  59. if (!(len)) \
  60. break; \
  61. \
  62. printk(KERN_DEBUG fmt, ##args); \
  63. for (j = 0; j < (len) - 1; j++) \
  64. printk(KERN_CONT "%02hhx ", buf[j]); \
  65. printk(KERN_CONT "%02hhx\n", buf[j]); \
  66. } \
  67. } while (0)
  68. /*
  69. * Each GENERIC_NOPX is of X bytes, and defined as an array of bytes
  70. * that correspond to that nop. Getting from one nop to the next, we
  71. * add to the array the offset that is equal to the sum of all sizes of
  72. * nops preceding the one we are after.
  73. *
  74. * Note: The GENERIC_NOP5_ATOMIC is at the end, as it breaks the
  75. * nice symmetry of sizes of the previous nops.
  76. */
  77. #if defined(GENERIC_NOP1) && !defined(CONFIG_X86_64)
  78. static const unsigned char intelnops[] =
  79. {
  80. GENERIC_NOP1,
  81. GENERIC_NOP2,
  82. GENERIC_NOP3,
  83. GENERIC_NOP4,
  84. GENERIC_NOP5,
  85. GENERIC_NOP6,
  86. GENERIC_NOP7,
  87. GENERIC_NOP8,
  88. GENERIC_NOP5_ATOMIC
  89. };
  90. static const unsigned char * const intel_nops[ASM_NOP_MAX+2] =
  91. {
  92. NULL,
  93. intelnops,
  94. intelnops + 1,
  95. intelnops + 1 + 2,
  96. intelnops + 1 + 2 + 3,
  97. intelnops + 1 + 2 + 3 + 4,
  98. intelnops + 1 + 2 + 3 + 4 + 5,
  99. intelnops + 1 + 2 + 3 + 4 + 5 + 6,
  100. intelnops + 1 + 2 + 3 + 4 + 5 + 6 + 7,
  101. intelnops + 1 + 2 + 3 + 4 + 5 + 6 + 7 + 8,
  102. };
  103. #endif
  104. #ifdef K8_NOP1
  105. static const unsigned char k8nops[] =
  106. {
  107. K8_NOP1,
  108. K8_NOP2,
  109. K8_NOP3,
  110. K8_NOP4,
  111. K8_NOP5,
  112. K8_NOP6,
  113. K8_NOP7,
  114. K8_NOP8,
  115. K8_NOP5_ATOMIC
  116. };
  117. static const unsigned char * const k8_nops[ASM_NOP_MAX+2] =
  118. {
  119. NULL,
  120. k8nops,
  121. k8nops + 1,
  122. k8nops + 1 + 2,
  123. k8nops + 1 + 2 + 3,
  124. k8nops + 1 + 2 + 3 + 4,
  125. k8nops + 1 + 2 + 3 + 4 + 5,
  126. k8nops + 1 + 2 + 3 + 4 + 5 + 6,
  127. k8nops + 1 + 2 + 3 + 4 + 5 + 6 + 7,
  128. k8nops + 1 + 2 + 3 + 4 + 5 + 6 + 7 + 8,
  129. };
  130. #endif
  131. #if defined(K7_NOP1) && !defined(CONFIG_X86_64)
  132. static const unsigned char k7nops[] =
  133. {
  134. K7_NOP1,
  135. K7_NOP2,
  136. K7_NOP3,
  137. K7_NOP4,
  138. K7_NOP5,
  139. K7_NOP6,
  140. K7_NOP7,
  141. K7_NOP8,
  142. K7_NOP5_ATOMIC
  143. };
  144. static const unsigned char * const k7_nops[ASM_NOP_MAX+2] =
  145. {
  146. NULL,
  147. k7nops,
  148. k7nops + 1,
  149. k7nops + 1 + 2,
  150. k7nops + 1 + 2 + 3,
  151. k7nops + 1 + 2 + 3 + 4,
  152. k7nops + 1 + 2 + 3 + 4 + 5,
  153. k7nops + 1 + 2 + 3 + 4 + 5 + 6,
  154. k7nops + 1 + 2 + 3 + 4 + 5 + 6 + 7,
  155. k7nops + 1 + 2 + 3 + 4 + 5 + 6 + 7 + 8,
  156. };
  157. #endif
  158. #ifdef P6_NOP1
  159. static const unsigned char p6nops[] =
  160. {
  161. P6_NOP1,
  162. P6_NOP2,
  163. P6_NOP3,
  164. P6_NOP4,
  165. P6_NOP5,
  166. P6_NOP6,
  167. P6_NOP7,
  168. P6_NOP8,
  169. P6_NOP5_ATOMIC
  170. };
  171. static const unsigned char * const p6_nops[ASM_NOP_MAX+2] =
  172. {
  173. NULL,
  174. p6nops,
  175. p6nops + 1,
  176. p6nops + 1 + 2,
  177. p6nops + 1 + 2 + 3,
  178. p6nops + 1 + 2 + 3 + 4,
  179. p6nops + 1 + 2 + 3 + 4 + 5,
  180. p6nops + 1 + 2 + 3 + 4 + 5 + 6,
  181. p6nops + 1 + 2 + 3 + 4 + 5 + 6 + 7,
  182. p6nops + 1 + 2 + 3 + 4 + 5 + 6 + 7 + 8,
  183. };
  184. #endif
  185. /* Initialize these to a safe default */
  186. #ifdef CONFIG_X86_64
  187. const unsigned char * const *ideal_nops = p6_nops;
  188. #else
  189. const unsigned char * const *ideal_nops = intel_nops;
  190. #endif
  191. void __init arch_init_ideal_nops(void)
  192. {
  193. switch (boot_cpu_data.x86_vendor) {
  194. case X86_VENDOR_INTEL:
  195. /*
  196. * Due to a decoder implementation quirk, some
  197. * specific Intel CPUs actually perform better with
  198. * the "k8_nops" than with the SDM-recommended NOPs.
  199. */
  200. if (boot_cpu_data.x86 == 6 &&
  201. boot_cpu_data.x86_model >= 0x0f &&
  202. boot_cpu_data.x86_model != 0x1c &&
  203. boot_cpu_data.x86_model != 0x26 &&
  204. boot_cpu_data.x86_model != 0x27 &&
  205. boot_cpu_data.x86_model < 0x30) {
  206. ideal_nops = k8_nops;
  207. } else if (boot_cpu_has(X86_FEATURE_NOPL)) {
  208. ideal_nops = p6_nops;
  209. } else {
  210. #ifdef CONFIG_X86_64
  211. ideal_nops = k8_nops;
  212. #else
  213. ideal_nops = intel_nops;
  214. #endif
  215. }
  216. break;
  217. case X86_VENDOR_AMD:
  218. if (boot_cpu_data.x86 > 0xf) {
  219. ideal_nops = p6_nops;
  220. return;
  221. }
  222. /* fall through */
  223. default:
  224. #ifdef CONFIG_X86_64
  225. ideal_nops = k8_nops;
  226. #else
  227. if (boot_cpu_has(X86_FEATURE_K8))
  228. ideal_nops = k8_nops;
  229. else if (boot_cpu_has(X86_FEATURE_K7))
  230. ideal_nops = k7_nops;
  231. else
  232. ideal_nops = intel_nops;
  233. #endif
  234. }
  235. }
  236. /* Use this to add nops to a buffer, then text_poke the whole buffer. */
  237. static void __init_or_module add_nops(void *insns, unsigned int len)
  238. {
  239. while (len > 0) {
  240. unsigned int noplen = len;
  241. if (noplen > ASM_NOP_MAX)
  242. noplen = ASM_NOP_MAX;
  243. memcpy(insns, ideal_nops[noplen], noplen);
  244. insns += noplen;
  245. len -= noplen;
  246. }
  247. }
  248. extern struct alt_instr __alt_instructions[], __alt_instructions_end[];
  249. extern s32 __smp_locks[], __smp_locks_end[];
  250. void *text_poke_early(void *addr, const void *opcode, size_t len);
  251. /*
  252. * Are we looking at a near JMP with a 1 or 4-byte displacement.
  253. */
  254. static inline bool is_jmp(const u8 opcode)
  255. {
  256. return opcode == 0xeb || opcode == 0xe9;
  257. }
  258. static void __init_or_module
  259. recompute_jump(struct alt_instr *a, u8 *orig_insn, u8 *repl_insn, u8 *insnbuf)
  260. {
  261. u8 *next_rip, *tgt_rip;
  262. s32 n_dspl, o_dspl;
  263. int repl_len;
  264. if (a->replacementlen != 5)
  265. return;
  266. o_dspl = *(s32 *)(insnbuf + 1);
  267. /* next_rip of the replacement JMP */
  268. next_rip = repl_insn + a->replacementlen;
  269. /* target rip of the replacement JMP */
  270. tgt_rip = next_rip + o_dspl;
  271. n_dspl = tgt_rip - orig_insn;
  272. DPRINTK("target RIP: %p, new_displ: 0x%x", tgt_rip, n_dspl);
  273. if (tgt_rip - orig_insn >= 0) {
  274. if (n_dspl - 2 <= 127)
  275. goto two_byte_jmp;
  276. else
  277. goto five_byte_jmp;
  278. /* negative offset */
  279. } else {
  280. if (((n_dspl - 2) & 0xff) == (n_dspl - 2))
  281. goto two_byte_jmp;
  282. else
  283. goto five_byte_jmp;
  284. }
  285. two_byte_jmp:
  286. n_dspl -= 2;
  287. insnbuf[0] = 0xeb;
  288. insnbuf[1] = (s8)n_dspl;
  289. add_nops(insnbuf + 2, 3);
  290. repl_len = 2;
  291. goto done;
  292. five_byte_jmp:
  293. n_dspl -= 5;
  294. insnbuf[0] = 0xe9;
  295. *(s32 *)&insnbuf[1] = n_dspl;
  296. repl_len = 5;
  297. done:
  298. DPRINTK("final displ: 0x%08x, JMP 0x%lx",
  299. n_dspl, (unsigned long)orig_insn + n_dspl + repl_len);
  300. }
  301. static void __init_or_module optimize_nops(struct alt_instr *a, u8 *instr)
  302. {
  303. unsigned long flags;
  304. if (instr[0] != 0x90)
  305. return;
  306. local_irq_save(flags);
  307. add_nops(instr + (a->instrlen - a->padlen), a->padlen);
  308. sync_core();
  309. local_irq_restore(flags);
  310. DUMP_BYTES(instr, a->instrlen, "%p: [%d:%d) optimized NOPs: ",
  311. instr, a->instrlen - a->padlen, a->padlen);
  312. }
  313. /*
  314. * Replace instructions with better alternatives for this CPU type. This runs
  315. * before SMP is initialized to avoid SMP problems with self modifying code.
  316. * This implies that asymmetric systems where APs have less capabilities than
  317. * the boot processor are not handled. Tough. Make sure you disable such
  318. * features by hand.
  319. */
  320. void __init_or_module apply_alternatives(struct alt_instr *start,
  321. struct alt_instr *end)
  322. {
  323. struct alt_instr *a;
  324. u8 *instr, *replacement;
  325. u8 insnbuf[MAX_PATCH_LEN];
  326. DPRINTK("alt table %p -> %p", start, end);
  327. /*
  328. * The scan order should be from start to end. A later scanned
  329. * alternative code can overwrite previously scanned alternative code.
  330. * Some kernel functions (e.g. memcpy, memset, etc) use this order to
  331. * patch code.
  332. *
  333. * So be careful if you want to change the scan order to any other
  334. * order.
  335. */
  336. for (a = start; a < end; a++) {
  337. int insnbuf_sz = 0;
  338. instr = (u8 *)&a->instr_offset + a->instr_offset;
  339. replacement = (u8 *)&a->repl_offset + a->repl_offset;
  340. BUG_ON(a->instrlen > sizeof(insnbuf));
  341. BUG_ON(a->cpuid >= (NCAPINTS + NBUGINTS) * 32);
  342. if (!boot_cpu_has(a->cpuid)) {
  343. if (a->padlen > 1)
  344. optimize_nops(a, instr);
  345. continue;
  346. }
  347. DPRINTK("feat: %d*32+%d, old: (%p, len: %d), repl: (%p, len: %d), pad: %d",
  348. a->cpuid >> 5,
  349. a->cpuid & 0x1f,
  350. instr, a->instrlen,
  351. replacement, a->replacementlen, a->padlen);
  352. DUMP_BYTES(instr, a->instrlen, "%p: old_insn: ", instr);
  353. DUMP_BYTES(replacement, a->replacementlen, "%p: rpl_insn: ", replacement);
  354. memcpy(insnbuf, replacement, a->replacementlen);
  355. insnbuf_sz = a->replacementlen;
  356. /* 0xe8 is a relative jump; fix the offset. */
  357. if (*insnbuf == 0xe8 && a->replacementlen == 5) {
  358. *(s32 *)(insnbuf + 1) += replacement - instr;
  359. DPRINTK("Fix CALL offset: 0x%x, CALL 0x%lx",
  360. *(s32 *)(insnbuf + 1),
  361. (unsigned long)instr + *(s32 *)(insnbuf + 1) + 5);
  362. }
  363. if (a->replacementlen && is_jmp(replacement[0]))
  364. recompute_jump(a, instr, replacement, insnbuf);
  365. if (a->instrlen > a->replacementlen) {
  366. add_nops(insnbuf + a->replacementlen,
  367. a->instrlen - a->replacementlen);
  368. insnbuf_sz += a->instrlen - a->replacementlen;
  369. }
  370. DUMP_BYTES(insnbuf, insnbuf_sz, "%p: final_insn: ", instr);
  371. text_poke_early(instr, insnbuf, insnbuf_sz);
  372. }
  373. }
  374. #ifdef CONFIG_SMP
  375. static void alternatives_smp_lock(const s32 *start, const s32 *end,
  376. u8 *text, u8 *text_end)
  377. {
  378. const s32 *poff;
  379. mutex_lock(&text_mutex);
  380. for (poff = start; poff < end; poff++) {
  381. u8 *ptr = (u8 *)poff + *poff;
  382. if (!*poff || ptr < text || ptr >= text_end)
  383. continue;
  384. /* turn DS segment override prefix into lock prefix */
  385. if (*ptr == 0x3e)
  386. text_poke(ptr, ((unsigned char []){0xf0}), 1);
  387. }
  388. mutex_unlock(&text_mutex);
  389. }
  390. static void alternatives_smp_unlock(const s32 *start, const s32 *end,
  391. u8 *text, u8 *text_end)
  392. {
  393. const s32 *poff;
  394. mutex_lock(&text_mutex);
  395. for (poff = start; poff < end; poff++) {
  396. u8 *ptr = (u8 *)poff + *poff;
  397. if (!*poff || ptr < text || ptr >= text_end)
  398. continue;
  399. /* turn lock prefix into DS segment override prefix */
  400. if (*ptr == 0xf0)
  401. text_poke(ptr, ((unsigned char []){0x3E}), 1);
  402. }
  403. mutex_unlock(&text_mutex);
  404. }
  405. struct smp_alt_module {
  406. /* what is this ??? */
  407. struct module *mod;
  408. char *name;
  409. /* ptrs to lock prefixes */
  410. const s32 *locks;
  411. const s32 *locks_end;
  412. /* .text segment, needed to avoid patching init code ;) */
  413. u8 *text;
  414. u8 *text_end;
  415. struct list_head next;
  416. };
  417. static LIST_HEAD(smp_alt_modules);
  418. static DEFINE_MUTEX(smp_alt);
  419. static bool uniproc_patched = false; /* protected by smp_alt */
  420. void __init_or_module alternatives_smp_module_add(struct module *mod,
  421. char *name,
  422. void *locks, void *locks_end,
  423. void *text, void *text_end)
  424. {
  425. struct smp_alt_module *smp;
  426. mutex_lock(&smp_alt);
  427. if (!uniproc_patched)
  428. goto unlock;
  429. if (num_possible_cpus() == 1)
  430. /* Don't bother remembering, we'll never have to undo it. */
  431. goto smp_unlock;
  432. smp = kzalloc(sizeof(*smp), GFP_KERNEL);
  433. if (NULL == smp)
  434. /* we'll run the (safe but slow) SMP code then ... */
  435. goto unlock;
  436. smp->mod = mod;
  437. smp->name = name;
  438. smp->locks = locks;
  439. smp->locks_end = locks_end;
  440. smp->text = text;
  441. smp->text_end = text_end;
  442. DPRINTK("locks %p -> %p, text %p -> %p, name %s\n",
  443. smp->locks, smp->locks_end,
  444. smp->text, smp->text_end, smp->name);
  445. list_add_tail(&smp->next, &smp_alt_modules);
  446. smp_unlock:
  447. alternatives_smp_unlock(locks, locks_end, text, text_end);
  448. unlock:
  449. mutex_unlock(&smp_alt);
  450. }
  451. void __init_or_module alternatives_smp_module_del(struct module *mod)
  452. {
  453. struct smp_alt_module *item;
  454. mutex_lock(&smp_alt);
  455. list_for_each_entry(item, &smp_alt_modules, next) {
  456. if (mod != item->mod)
  457. continue;
  458. list_del(&item->next);
  459. kfree(item);
  460. break;
  461. }
  462. mutex_unlock(&smp_alt);
  463. }
  464. void alternatives_enable_smp(void)
  465. {
  466. struct smp_alt_module *mod;
  467. /* Why bother if there are no other CPUs? */
  468. BUG_ON(num_possible_cpus() == 1);
  469. mutex_lock(&smp_alt);
  470. if (uniproc_patched) {
  471. pr_info("switching to SMP code\n");
  472. BUG_ON(num_online_cpus() != 1);
  473. clear_cpu_cap(&boot_cpu_data, X86_FEATURE_UP);
  474. clear_cpu_cap(&cpu_data(0), X86_FEATURE_UP);
  475. list_for_each_entry(mod, &smp_alt_modules, next)
  476. alternatives_smp_lock(mod->locks, mod->locks_end,
  477. mod->text, mod->text_end);
  478. uniproc_patched = false;
  479. }
  480. mutex_unlock(&smp_alt);
  481. }
  482. /* Return 1 if the address range is reserved for smp-alternatives */
  483. int alternatives_text_reserved(void *start, void *end)
  484. {
  485. struct smp_alt_module *mod;
  486. const s32 *poff;
  487. u8 *text_start = start;
  488. u8 *text_end = end;
  489. list_for_each_entry(mod, &smp_alt_modules, next) {
  490. if (mod->text > text_end || mod->text_end < text_start)
  491. continue;
  492. for (poff = mod->locks; poff < mod->locks_end; poff++) {
  493. const u8 *ptr = (const u8 *)poff + *poff;
  494. if (text_start <= ptr && text_end > ptr)
  495. return 1;
  496. }
  497. }
  498. return 0;
  499. }
  500. #endif /* CONFIG_SMP */
  501. #ifdef CONFIG_PARAVIRT
  502. void __init_or_module apply_paravirt(struct paravirt_patch_site *start,
  503. struct paravirt_patch_site *end)
  504. {
  505. struct paravirt_patch_site *p;
  506. char insnbuf[MAX_PATCH_LEN];
  507. if (noreplace_paravirt)
  508. return;
  509. for (p = start; p < end; p++) {
  510. unsigned int used;
  511. BUG_ON(p->len > MAX_PATCH_LEN);
  512. /* prep the buffer with the original instructions */
  513. memcpy(insnbuf, p->instr, p->len);
  514. used = pv_init_ops.patch(p->instrtype, p->clobbers, insnbuf,
  515. (unsigned long)p->instr, p->len);
  516. BUG_ON(used > p->len);
  517. /* Pad the rest with nops */
  518. add_nops(insnbuf + used, p->len - used);
  519. text_poke_early(p->instr, insnbuf, p->len);
  520. }
  521. }
  522. extern struct paravirt_patch_site __start_parainstructions[],
  523. __stop_parainstructions[];
  524. #endif /* CONFIG_PARAVIRT */
  525. void __init alternative_instructions(void)
  526. {
  527. /* The patching is not fully atomic, so try to avoid local interruptions
  528. that might execute the to be patched code.
  529. Other CPUs are not running. */
  530. stop_nmi();
  531. /*
  532. * Don't stop machine check exceptions while patching.
  533. * MCEs only happen when something got corrupted and in this
  534. * case we must do something about the corruption.
  535. * Ignoring it is worse than a unlikely patching race.
  536. * Also machine checks tend to be broadcast and if one CPU
  537. * goes into machine check the others follow quickly, so we don't
  538. * expect a machine check to cause undue problems during to code
  539. * patching.
  540. */
  541. apply_alternatives(__alt_instructions, __alt_instructions_end);
  542. #ifdef CONFIG_SMP
  543. /* Patch to UP if other cpus not imminent. */
  544. if (!noreplace_smp && (num_present_cpus() == 1 || setup_max_cpus <= 1)) {
  545. uniproc_patched = true;
  546. alternatives_smp_module_add(NULL, "core kernel",
  547. __smp_locks, __smp_locks_end,
  548. _text, _etext);
  549. }
  550. if (!uniproc_patched || num_possible_cpus() == 1)
  551. free_init_pages("SMP alternatives",
  552. (unsigned long)__smp_locks,
  553. (unsigned long)__smp_locks_end);
  554. #endif
  555. apply_paravirt(__parainstructions, __parainstructions_end);
  556. restart_nmi();
  557. alternatives_patched = 1;
  558. }
  559. /**
  560. * text_poke_early - Update instructions on a live kernel at boot time
  561. * @addr: address to modify
  562. * @opcode: source of the copy
  563. * @len: length to copy
  564. *
  565. * When you use this code to patch more than one byte of an instruction
  566. * you need to make sure that other CPUs cannot execute this code in parallel.
  567. * Also no thread must be currently preempted in the middle of these
  568. * instructions. And on the local CPU you need to be protected again NMI or MCE
  569. * handlers seeing an inconsistent instruction while you patch.
  570. */
  571. void *__init_or_module text_poke_early(void *addr, const void *opcode,
  572. size_t len)
  573. {
  574. unsigned long flags;
  575. local_irq_save(flags);
  576. memcpy(addr, opcode, len);
  577. sync_core();
  578. local_irq_restore(flags);
  579. /* Could also do a CLFLUSH here to speed up CPU recovery; but
  580. that causes hangs on some VIA CPUs. */
  581. return addr;
  582. }
  583. /**
  584. * text_poke - Update instructions on a live kernel
  585. * @addr: address to modify
  586. * @opcode: source of the copy
  587. * @len: length to copy
  588. *
  589. * Only atomic text poke/set should be allowed when not doing early patching.
  590. * It means the size must be writable atomically and the address must be aligned
  591. * in a way that permits an atomic write. It also makes sure we fit on a single
  592. * page.
  593. *
  594. * Note: Must be called under text_mutex.
  595. */
  596. void *text_poke(void *addr, const void *opcode, size_t len)
  597. {
  598. unsigned long flags;
  599. char *vaddr;
  600. struct page *pages[2];
  601. int i;
  602. if (!core_kernel_text((unsigned long)addr)) {
  603. pages[0] = vmalloc_to_page(addr);
  604. pages[1] = vmalloc_to_page(addr + PAGE_SIZE);
  605. } else {
  606. pages[0] = virt_to_page(addr);
  607. WARN_ON(!PageReserved(pages[0]));
  608. pages[1] = virt_to_page(addr + PAGE_SIZE);
  609. }
  610. BUG_ON(!pages[0]);
  611. local_irq_save(flags);
  612. set_fixmap(FIX_TEXT_POKE0, page_to_phys(pages[0]));
  613. if (pages[1])
  614. set_fixmap(FIX_TEXT_POKE1, page_to_phys(pages[1]));
  615. vaddr = (char *)fix_to_virt(FIX_TEXT_POKE0);
  616. memcpy(&vaddr[(unsigned long)addr & ~PAGE_MASK], opcode, len);
  617. clear_fixmap(FIX_TEXT_POKE0);
  618. if (pages[1])
  619. clear_fixmap(FIX_TEXT_POKE1);
  620. local_flush_tlb();
  621. sync_core();
  622. /* Could also do a CLFLUSH here to speed up CPU recovery; but
  623. that causes hangs on some VIA CPUs. */
  624. for (i = 0; i < len; i++)
  625. BUG_ON(((char *)addr)[i] != ((char *)opcode)[i]);
  626. local_irq_restore(flags);
  627. return addr;
  628. }
  629. static void do_sync_core(void *info)
  630. {
  631. sync_core();
  632. }
  633. static bool bp_patching_in_progress;
  634. static void *bp_int3_handler, *bp_int3_addr;
  635. int poke_int3_handler(struct pt_regs *regs)
  636. {
  637. /* bp_patching_in_progress */
  638. smp_rmb();
  639. if (likely(!bp_patching_in_progress))
  640. return 0;
  641. if (user_mode(regs) || regs->ip != (unsigned long)bp_int3_addr)
  642. return 0;
  643. /* set up the specified breakpoint handler */
  644. regs->ip = (unsigned long) bp_int3_handler;
  645. return 1;
  646. }
  647. /**
  648. * text_poke_bp() -- update instructions on live kernel on SMP
  649. * @addr: address to patch
  650. * @opcode: opcode of new instruction
  651. * @len: length to copy
  652. * @handler: address to jump to when the temporary breakpoint is hit
  653. *
  654. * Modify multi-byte instruction by using int3 breakpoint on SMP.
  655. * We completely avoid stop_machine() here, and achieve the
  656. * synchronization using int3 breakpoint.
  657. *
  658. * The way it is done:
  659. * - add a int3 trap to the address that will be patched
  660. * - sync cores
  661. * - update all but the first byte of the patched range
  662. * - sync cores
  663. * - replace the first byte (int3) by the first byte of
  664. * replacing opcode
  665. * - sync cores
  666. *
  667. * Note: must be called under text_mutex.
  668. */
  669. void *text_poke_bp(void *addr, const void *opcode, size_t len, void *handler)
  670. {
  671. unsigned char int3 = 0xcc;
  672. bp_int3_handler = handler;
  673. bp_int3_addr = (u8 *)addr + sizeof(int3);
  674. bp_patching_in_progress = true;
  675. /*
  676. * Corresponding read barrier in int3 notifier for
  677. * making sure the in_progress flags is correctly ordered wrt.
  678. * patching
  679. */
  680. smp_wmb();
  681. text_poke(addr, &int3, sizeof(int3));
  682. on_each_cpu(do_sync_core, NULL, 1);
  683. if (len - sizeof(int3) > 0) {
  684. /* patch all but the first byte */
  685. text_poke((char *)addr + sizeof(int3),
  686. (const char *) opcode + sizeof(int3),
  687. len - sizeof(int3));
  688. /*
  689. * According to Intel, this core syncing is very likely
  690. * not necessary and we'd be safe even without it. But
  691. * better safe than sorry (plus there's not only Intel).
  692. */
  693. on_each_cpu(do_sync_core, NULL, 1);
  694. }
  695. /* patch the first byte */
  696. text_poke(addr, opcode, sizeof(int3));
  697. on_each_cpu(do_sync_core, NULL, 1);
  698. bp_patching_in_progress = false;
  699. smp_wmb();
  700. return addr;
  701. }