Linux Audio

Check our new training course

Loading...
v3.15
  1/*
  2 *  linux/arch/arm/kernel/traps.c
  3 *
  4 *  Copyright (C) 1995-2009 Russell King
  5 *  Fragments that appear the same as linux/arch/i386/kernel/traps.c (C) Linus Torvalds
  6 *
  7 * This program is free software; you can redistribute it and/or modify
  8 * it under the terms of the GNU General Public License version 2 as
  9 * published by the Free Software Foundation.
 10 *
 11 *  'traps.c' handles hardware exceptions after we have saved some state in
 12 *  'linux/arch/arm/lib/traps.S'.  Mostly a debugging aid, but will probably
 13 *  kill the offending process.
 14 */
 15#include <linux/signal.h>
 16#include <linux/personality.h>
 17#include <linux/kallsyms.h>
 18#include <linux/spinlock.h>
 19#include <linux/uaccess.h>
 20#include <linux/hardirq.h>
 21#include <linux/kdebug.h>
 22#include <linux/module.h>
 23#include <linux/kexec.h>
 24#include <linux/bug.h>
 25#include <linux/delay.h>
 26#include <linux/init.h>
 27#include <linux/sched.h>
 
 28
 29#include <linux/atomic.h>
 30#include <asm/cacheflush.h>
 31#include <asm/exception.h>
 32#include <asm/unistd.h>
 33#include <asm/traps.h>
 
 34#include <asm/unwind.h>
 35#include <asm/tls.h>
 36#include <asm/system_misc.h>
 37#include <asm/opcodes.h>
 38
 
 39static const char *handler[]= {
 40	"prefetch abort",
 41	"data abort",
 42	"address exception",
 43	"interrupt",
 44	"undefined instruction",
 45};
 46
 47void *vectors_page;
 48
 49#ifdef CONFIG_DEBUG_USER
 50unsigned int user_debug;
 51
 52static int __init user_debug_setup(char *str)
 53{
 54	get_option(&str, &user_debug);
 55	return 1;
 56}
 57__setup("user_debug=", user_debug_setup);
 58#endif
 59
 60static void dump_mem(const char *, const char *, unsigned long, unsigned long);
 61
 62void dump_backtrace_entry(unsigned long where, unsigned long from, unsigned long frame)
 63{
 64#ifdef CONFIG_KALLSYMS
 65	printk("[<%08lx>] (%ps) from [<%08lx>] (%pS)\n", where, (void *)where, from, (void *)from);
 66#else
 67	printk("Function entered at [<%08lx>] from [<%08lx>]\n", where, from);
 68#endif
 69
 70	if (in_exception_text(where))
 71		dump_mem("", "Exception stack", frame + 4, frame + 4 + sizeof(struct pt_regs));
 72}
 73
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 74#ifndef CONFIG_ARM_UNWIND
 75/*
 76 * Stack pointers should always be within the kernels view of
 77 * physical memory.  If it is not there, then we can't dump
 78 * out any information relating to the stack.
 79 */
 80static int verify_stack(unsigned long sp)
 81{
 82	if (sp < PAGE_OFFSET ||
 83	    (sp > (unsigned long)high_memory && high_memory != NULL))
 84		return -EFAULT;
 85
 86	return 0;
 87}
 88#endif
 89
 90/*
 91 * Dump out the contents of some memory nicely...
 92 */
 93static void dump_mem(const char *lvl, const char *str, unsigned long bottom,
 94		     unsigned long top)
 95{
 96	unsigned long first;
 97	mm_segment_t fs;
 98	int i;
 99
100	/*
101	 * We need to switch to kernel mode so that we can use __get_user
102	 * to safely read from kernel space.  Note that we now dump the
103	 * code first, just in case the backtrace kills us.
104	 */
105	fs = get_fs();
106	set_fs(KERNEL_DS);
107
108	printk("%s%s(0x%08lx to 0x%08lx)\n", lvl, str, bottom, top);
109
110	for (first = bottom & ~31; first < top; first += 32) {
111		unsigned long p;
112		char str[sizeof(" 12345678") * 8 + 1];
113
114		memset(str, ' ', sizeof(str));
115		str[sizeof(str) - 1] = '\0';
116
117		for (p = first, i = 0; i < 8 && p < top; i++, p += 4) {
118			if (p >= bottom && p < top) {
119				unsigned long val;
120				if (__get_user(val, (unsigned long *)p) == 0)
121					sprintf(str + i * 9, " %08lx", val);
122				else
123					sprintf(str + i * 9, " ????????");
124			}
125		}
126		printk("%s%04lx:%s\n", lvl, first & 0xffff, str);
127	}
128
129	set_fs(fs);
130}
131
132static void dump_instr(const char *lvl, struct pt_regs *regs)
133{
134	unsigned long addr = instruction_pointer(regs);
135	const int thumb = thumb_mode(regs);
136	const int width = thumb ? 4 : 8;
137	mm_segment_t fs;
138	char str[sizeof("00000000 ") * 5 + 2 + 1], *p = str;
139	int i;
140
141	/*
142	 * We need to switch to kernel mode so that we can use __get_user
143	 * to safely read from kernel space.  Note that we now dump the
144	 * code first, just in case the backtrace kills us.
145	 */
146	fs = get_fs();
147	set_fs(KERNEL_DS);
148
149	for (i = -4; i < 1 + !!thumb; i++) {
150		unsigned int val, bad;
151
152		if (thumb)
153			bad = __get_user(val, &((u16 *)addr)[i]);
154		else
155			bad = __get_user(val, &((u32 *)addr)[i]);
156
157		if (!bad)
158			p += sprintf(p, i == 0 ? "(%0*x) " : "%0*x ",
159					width, val);
160		else {
161			p += sprintf(p, "bad PC value");
162			break;
163		}
164	}
165	printk("%sCode: %s\n", lvl, str);
166
167	set_fs(fs);
168}
169
170#ifdef CONFIG_ARM_UNWIND
171static inline void dump_backtrace(struct pt_regs *regs, struct task_struct *tsk)
172{
173	unwind_backtrace(regs, tsk);
174}
175#else
176static void dump_backtrace(struct pt_regs *regs, struct task_struct *tsk)
177{
178	unsigned int fp, mode;
179	int ok = 1;
180
181	printk("Backtrace: ");
182
183	if (!tsk)
184		tsk = current;
185
186	if (regs) {
187		fp = regs->ARM_fp;
188		mode = processor_mode(regs);
189	} else if (tsk != current) {
190		fp = thread_saved_fp(tsk);
191		mode = 0x10;
192	} else {
193		asm("mov %0, fp" : "=r" (fp) : : "cc");
194		mode = 0x10;
195	}
196
197	if (!fp) {
198		printk("no frame pointer");
199		ok = 0;
200	} else if (verify_stack(fp)) {
201		printk("invalid frame pointer 0x%08x", fp);
202		ok = 0;
203	} else if (fp < (unsigned long)end_of_stack(tsk))
204		printk("frame pointer underflow");
205	printk("\n");
206
207	if (ok)
208		c_backtrace(fp, mode);
209}
210#endif
211
212void show_stack(struct task_struct *tsk, unsigned long *sp)
213{
214	dump_backtrace(NULL, tsk);
215	barrier();
216}
217
218#ifdef CONFIG_PREEMPT
219#define S_PREEMPT " PREEMPT"
220#else
221#define S_PREEMPT ""
222#endif
223#ifdef CONFIG_SMP
224#define S_SMP " SMP"
225#else
226#define S_SMP ""
227#endif
228#ifdef CONFIG_THUMB2_KERNEL
229#define S_ISA " THUMB2"
230#else
231#define S_ISA " ARM"
232#endif
233
234static int __die(const char *str, int err, struct pt_regs *regs)
235{
236	struct task_struct *tsk = current;
237	static int die_counter;
238	int ret;
239
240	printk(KERN_EMERG "Internal error: %s: %x [#%d]" S_PREEMPT S_SMP
241	       S_ISA "\n", str, err, ++die_counter);
242
243	/* trap and error numbers are mostly meaningless on ARM */
244	ret = notify_die(DIE_OOPS, str, regs, err, tsk->thread.trap_no, SIGSEGV);
245	if (ret == NOTIFY_STOP)
246		return 1;
247
248	print_modules();
249	__show_regs(regs);
250	printk(KERN_EMERG "Process %.*s (pid: %d, stack limit = 0x%p)\n",
251		TASK_COMM_LEN, tsk->comm, task_pid_nr(tsk), end_of_stack(tsk));
252
253	if (!user_mode(regs) || in_interrupt()) {
254		dump_mem(KERN_EMERG, "Stack: ", regs->ARM_sp,
255			 THREAD_SIZE + (unsigned long)task_stack_page(tsk));
256		dump_backtrace(regs, tsk);
257		dump_instr(KERN_EMERG, regs);
258	}
259
260	return 0;
261}
262
263static arch_spinlock_t die_lock = __ARCH_SPIN_LOCK_UNLOCKED;
264static int die_owner = -1;
265static unsigned int die_nest_count;
266
267static unsigned long oops_begin(void)
268{
269	int cpu;
270	unsigned long flags;
271
272	oops_enter();
273
274	/* racy, but better than risking deadlock. */
275	raw_local_irq_save(flags);
276	cpu = smp_processor_id();
277	if (!arch_spin_trylock(&die_lock)) {
278		if (cpu == die_owner)
279			/* nested oops. should stop eventually */;
280		else
281			arch_spin_lock(&die_lock);
282	}
283	die_nest_count++;
284	die_owner = cpu;
285	console_verbose();
286	bust_spinlocks(1);
287	return flags;
288}
289
290static void oops_end(unsigned long flags, struct pt_regs *regs, int signr)
291{
292	if (regs && kexec_should_crash(current))
293		crash_kexec(regs);
294
295	bust_spinlocks(0);
296	die_owner = -1;
297	add_taint(TAINT_DIE, LOCKDEP_NOW_UNRELIABLE);
298	die_nest_count--;
299	if (!die_nest_count)
300		/* Nest count reaches zero, release the lock. */
301		arch_spin_unlock(&die_lock);
302	raw_local_irq_restore(flags);
303	oops_exit();
304
305	if (in_interrupt())
306		panic("Fatal exception in interrupt");
307	if (panic_on_oops)
308		panic("Fatal exception");
309	if (signr)
310		do_exit(signr);
311}
312
313/*
314 * This function is protected against re-entrancy.
315 */
316void die(const char *str, struct pt_regs *regs, int err)
317{
318	enum bug_trap_type bug_type = BUG_TRAP_TYPE_NONE;
319	unsigned long flags = oops_begin();
320	int sig = SIGSEGV;
321
322	if (!user_mode(regs))
323		bug_type = report_bug(regs->ARM_pc, regs);
324	if (bug_type != BUG_TRAP_TYPE_NONE)
325		str = "Oops - BUG";
326
327	if (__die(str, err, regs))
328		sig = 0;
329
330	oops_end(flags, regs, sig);
331}
332
333void arm_notify_die(const char *str, struct pt_regs *regs,
334		struct siginfo *info, unsigned long err, unsigned long trap)
335{
336	if (user_mode(regs)) {
337		current->thread.error_code = err;
338		current->thread.trap_no = trap;
339
340		force_sig_info(info->si_signo, info, current);
341	} else {
342		die(str, regs, err);
343	}
344}
345
346#ifdef CONFIG_GENERIC_BUG
347
348int is_valid_bugaddr(unsigned long pc)
349{
350#ifdef CONFIG_THUMB2_KERNEL
351	u16 bkpt;
352	u16 insn = __opcode_to_mem_thumb16(BUG_INSTR_VALUE);
353#else
354	u32 bkpt;
355	u32 insn = __opcode_to_mem_arm(BUG_INSTR_VALUE);
356#endif
357
358	if (probe_kernel_address((unsigned *)pc, bkpt))
359		return 0;
360
361	return bkpt == insn;
362}
363
364#endif
365
366static LIST_HEAD(undef_hook);
367static DEFINE_RAW_SPINLOCK(undef_lock);
368
369void register_undef_hook(struct undef_hook *hook)
370{
371	unsigned long flags;
372
373	raw_spin_lock_irqsave(&undef_lock, flags);
374	list_add(&hook->node, &undef_hook);
375	raw_spin_unlock_irqrestore(&undef_lock, flags);
376}
377
378void unregister_undef_hook(struct undef_hook *hook)
379{
380	unsigned long flags;
381
382	raw_spin_lock_irqsave(&undef_lock, flags);
383	list_del(&hook->node);
384	raw_spin_unlock_irqrestore(&undef_lock, flags);
385}
386
387static int call_undef_hook(struct pt_regs *regs, unsigned int instr)
388{
389	struct undef_hook *hook;
390	unsigned long flags;
391	int (*fn)(struct pt_regs *regs, unsigned int instr) = NULL;
392
393	raw_spin_lock_irqsave(&undef_lock, flags);
394	list_for_each_entry(hook, &undef_hook, node)
395		if ((instr & hook->instr_mask) == hook->instr_val &&
396		    (regs->ARM_cpsr & hook->cpsr_mask) == hook->cpsr_val)
397			fn = hook->fn;
398	raw_spin_unlock_irqrestore(&undef_lock, flags);
399
400	return fn ? fn(regs, instr) : 1;
401}
402
403asmlinkage void __exception do_undefinstr(struct pt_regs *regs)
404{
405	unsigned int instr;
406	siginfo_t info;
407	void __user *pc;
408
409	pc = (void __user *)instruction_pointer(regs);
410
411	if (processor_mode(regs) == SVC_MODE) {
412#ifdef CONFIG_THUMB2_KERNEL
413		if (thumb_mode(regs)) {
414			instr = __mem_to_opcode_thumb16(((u16 *)pc)[0]);
415			if (is_wide_instruction(instr)) {
416				u16 inst2;
417				inst2 = __mem_to_opcode_thumb16(((u16 *)pc)[1]);
418				instr = __opcode_thumb32_compose(instr, inst2);
419			}
420		} else
421#endif
422			instr = __mem_to_opcode_arm(*(u32 *) pc);
423	} else if (thumb_mode(regs)) {
424		if (get_user(instr, (u16 __user *)pc))
425			goto die_sig;
426		instr = __mem_to_opcode_thumb16(instr);
427		if (is_wide_instruction(instr)) {
428			unsigned int instr2;
429			if (get_user(instr2, (u16 __user *)pc+1))
430				goto die_sig;
431			instr2 = __mem_to_opcode_thumb16(instr2);
432			instr = __opcode_thumb32_compose(instr, instr2);
433		}
434	} else {
435		if (get_user(instr, (u32 __user *)pc))
436			goto die_sig;
437		instr = __mem_to_opcode_arm(instr);
438	}
439
440	if (call_undef_hook(regs, instr) == 0)
441		return;
442
443die_sig:
444#ifdef CONFIG_DEBUG_USER
445	if (user_debug & UDBG_UNDEFINED) {
446		printk(KERN_INFO "%s (%d): undefined instruction: pc=%p\n",
447			current->comm, task_pid_nr(current), pc);
448		__show_regs(regs);
449		dump_instr(KERN_INFO, regs);
450	}
451#endif
452
453	info.si_signo = SIGILL;
454	info.si_errno = 0;
455	info.si_code  = ILL_ILLOPC;
456	info.si_addr  = pc;
457
458	arm_notify_die("Oops - undefined instruction", regs, &info, 0, 6);
459}
460
461asmlinkage void do_unexp_fiq (struct pt_regs *regs)
 
 
 
 
 
 
 
 
 
 
 
 
462{
463	printk("Hmm.  Unexpected FIQ received, but trying to continue\n");
464	printk("You may have a hardware problem...\n");
 
 
 
 
 
 
 
465}
466
467/*
468 * bad_mode handles the impossible case in the vectors.  If you see one of
469 * these, then it's extremely serious, and could mean you have buggy hardware.
470 * It never returns, and never tries to sync.  We hope that we can at least
471 * dump out some state information...
472 */
473asmlinkage void bad_mode(struct pt_regs *regs, int reason)
474{
475	console_verbose();
476
477	printk(KERN_CRIT "Bad mode in %s handler detected\n", handler[reason]);
478
479	die("Oops - bad mode", regs, 0);
480	local_irq_disable();
481	panic("bad mode");
482}
483
484static int bad_syscall(int n, struct pt_regs *regs)
485{
486	struct thread_info *thread = current_thread_info();
487	siginfo_t info;
488
489	if ((current->personality & PER_MASK) != PER_LINUX &&
490	    thread->exec_domain->handler) {
491		thread->exec_domain->handler(n, regs);
492		return regs->ARM_r0;
493	}
494
495#ifdef CONFIG_DEBUG_USER
496	if (user_debug & UDBG_SYSCALL) {
497		printk(KERN_ERR "[%d] %s: obsolete system call %08x.\n",
498			task_pid_nr(current), current->comm, n);
499		dump_instr(KERN_ERR, regs);
500	}
501#endif
502
503	info.si_signo = SIGILL;
504	info.si_errno = 0;
505	info.si_code  = ILL_ILLTRP;
506	info.si_addr  = (void __user *)instruction_pointer(regs) -
507			 (thumb_mode(regs) ? 2 : 4);
508
509	arm_notify_die("Oops - bad syscall", regs, &info, n, 0);
510
511	return regs->ARM_r0;
512}
513
514static long do_cache_op_restart(struct restart_block *);
515
516static inline int
517__do_cache_op(unsigned long start, unsigned long end)
518{
519	int ret;
520
521	do {
522		unsigned long chunk = min(PAGE_SIZE, end - start);
523
524		if (signal_pending(current)) {
525			struct thread_info *ti = current_thread_info();
526
527			ti->restart_block = (struct restart_block) {
528				.fn	= do_cache_op_restart,
529			};
530
531			ti->arm_restart_block = (struct arm_restart_block) {
532				{
533					.cache = {
534						.start	= start,
535						.end	= end,
536					},
537				},
538			};
539
540			return -ERESTART_RESTARTBLOCK;
541		}
542
543		ret = flush_cache_user_range(start, start + chunk);
544		if (ret)
545			return ret;
546
547		cond_resched();
548		start += chunk;
549	} while (start < end);
550
551	return 0;
552}
553
554static long do_cache_op_restart(struct restart_block *unused)
555{
556	struct arm_restart_block *restart_block;
557
558	restart_block = &current_thread_info()->arm_restart_block;
559	return __do_cache_op(restart_block->cache.start,
560			     restart_block->cache.end);
561}
562
563static inline int
564do_cache_op(unsigned long start, unsigned long end, int flags)
565{
566	if (end < start || flags)
567		return -EINVAL;
568
569	if (!access_ok(VERIFY_READ, start, end - start))
570		return -EFAULT;
571
572	return __do_cache_op(start, end);
573}
574
575/*
576 * Handle all unrecognised system calls.
577 *  0x9f0000 - 0x9fffff are some more esoteric system calls
578 */
579#define NR(x) ((__ARM_NR_##x) - __ARM_NR_BASE)
580asmlinkage int arm_syscall(int no, struct pt_regs *regs)
581{
582	struct thread_info *thread = current_thread_info();
583	siginfo_t info;
584
585	if ((no >> 16) != (__ARM_NR_BASE>> 16))
586		return bad_syscall(no, regs);
587
588	switch (no & 0xffff) {
589	case 0: /* branch through 0 */
590		info.si_signo = SIGSEGV;
591		info.si_errno = 0;
592		info.si_code  = SEGV_MAPERR;
593		info.si_addr  = NULL;
594
595		arm_notify_die("branch through zero", regs, &info, 0, 0);
596		return 0;
597
598	case NR(breakpoint): /* SWI BREAK_POINT */
599		regs->ARM_pc -= thumb_mode(regs) ? 2 : 4;
600		ptrace_break(current, regs);
601		return regs->ARM_r0;
602
603	/*
604	 * Flush a region from virtual address 'r0' to virtual address 'r1'
605	 * _exclusive_.  There is no alignment requirement on either address;
606	 * user space does not need to know the hardware cache layout.
607	 *
608	 * r2 contains flags.  It should ALWAYS be passed as ZERO until it
609	 * is defined to be something else.  For now we ignore it, but may
610	 * the fires of hell burn in your belly if you break this rule. ;)
611	 *
612	 * (at a later date, we may want to allow this call to not flush
613	 * various aspects of the cache.  Passing '0' will guarantee that
614	 * everything necessary gets flushed to maintain consistency in
615	 * the specified region).
616	 */
617	case NR(cacheflush):
618		return do_cache_op(regs->ARM_r0, regs->ARM_r1, regs->ARM_r2);
619
620	case NR(usr26):
621		if (!(elf_hwcap & HWCAP_26BIT))
622			break;
623		regs->ARM_cpsr &= ~MODE32_BIT;
624		return regs->ARM_r0;
625
626	case NR(usr32):
627		if (!(elf_hwcap & HWCAP_26BIT))
628			break;
629		regs->ARM_cpsr |= MODE32_BIT;
630		return regs->ARM_r0;
631
632	case NR(set_tls):
633		thread->tp_value[0] = regs->ARM_r0;
634		if (tls_emu)
635			return 0;
636		if (has_tls_reg) {
637			asm ("mcr p15, 0, %0, c13, c0, 3"
638				: : "r" (regs->ARM_r0));
639		} else {
640			/*
641			 * User space must never try to access this directly.
642			 * Expect your app to break eventually if you do so.
643			 * The user helper at 0xffff0fe0 must be used instead.
644			 * (see entry-armv.S for details)
645			 */
646			*((unsigned int *)0xffff0ff0) = regs->ARM_r0;
647		}
648		return 0;
649
650#ifdef CONFIG_NEEDS_SYSCALL_FOR_CMPXCHG
651	/*
652	 * Atomically store r1 in *r2 if *r2 is equal to r0 for user space.
653	 * Return zero in r0 if *MEM was changed or non-zero if no exchange
654	 * happened.  Also set the user C flag accordingly.
655	 * If access permissions have to be fixed up then non-zero is
656	 * returned and the operation has to be re-attempted.
657	 *
658	 * *NOTE*: This is a ghost syscall private to the kernel.  Only the
659	 * __kuser_cmpxchg code in entry-armv.S should be aware of its
660	 * existence.  Don't ever use this from user code.
661	 */
662	case NR(cmpxchg):
663	for (;;) {
664		extern void do_DataAbort(unsigned long addr, unsigned int fsr,
665					 struct pt_regs *regs);
666		unsigned long val;
667		unsigned long addr = regs->ARM_r2;
668		struct mm_struct *mm = current->mm;
669		pgd_t *pgd; pmd_t *pmd; pte_t *pte;
670		spinlock_t *ptl;
671
672		regs->ARM_cpsr &= ~PSR_C_BIT;
673		down_read(&mm->mmap_sem);
674		pgd = pgd_offset(mm, addr);
675		if (!pgd_present(*pgd))
676			goto bad_access;
677		pmd = pmd_offset(pgd, addr);
678		if (!pmd_present(*pmd))
679			goto bad_access;
680		pte = pte_offset_map_lock(mm, pmd, addr, &ptl);
681		if (!pte_present(*pte) || !pte_write(*pte) || !pte_dirty(*pte)) {
682			pte_unmap_unlock(pte, ptl);
683			goto bad_access;
684		}
685		val = *(unsigned long *)addr;
686		val -= regs->ARM_r0;
687		if (val == 0) {
688			*(unsigned long *)addr = regs->ARM_r1;
689			regs->ARM_cpsr |= PSR_C_BIT;
690		}
691		pte_unmap_unlock(pte, ptl);
692		up_read(&mm->mmap_sem);
693		return val;
694
695		bad_access:
696		up_read(&mm->mmap_sem);
697		/* simulate a write access fault */
698		do_DataAbort(addr, 15 + (1 << 11), regs);
699	}
700#endif
701
702	default:
703		/* Calls 9f00xx..9f07ff are defined to return -ENOSYS
704		   if not implemented, rather than raising SIGILL.  This
705		   way the calling program can gracefully determine whether
706		   a feature is supported.  */
707		if ((no & 0xffff) <= 0x7ff)
708			return -ENOSYS;
709		break;
710	}
711#ifdef CONFIG_DEBUG_USER
712	/*
713	 * experience shows that these seem to indicate that
714	 * something catastrophic has happened
715	 */
716	if (user_debug & UDBG_SYSCALL) {
717		printk("[%d] %s: arm syscall %d\n",
718		       task_pid_nr(current), current->comm, no);
719		dump_instr("", regs);
720		if (user_mode(regs)) {
721			__show_regs(regs);
722			c_backtrace(regs->ARM_fp, processor_mode(regs));
723		}
724	}
725#endif
726	info.si_signo = SIGILL;
727	info.si_errno = 0;
728	info.si_code  = ILL_ILLTRP;
729	info.si_addr  = (void __user *)instruction_pointer(regs) -
730			 (thumb_mode(regs) ? 2 : 4);
731
732	arm_notify_die("Oops - bad syscall(2)", regs, &info, no, 0);
733	return 0;
734}
735
736#ifdef CONFIG_TLS_REG_EMUL
737
738/*
739 * We might be running on an ARMv6+ processor which should have the TLS
740 * register but for some reason we can't use it, or maybe an SMP system
741 * using a pre-ARMv6 processor (there are apparently a few prototypes like
742 * that in existence) and therefore access to that register must be
743 * emulated.
744 */
745
746static int get_tp_trap(struct pt_regs *regs, unsigned int instr)
747{
748	int reg = (instr >> 12) & 15;
749	if (reg == 15)
750		return 1;
751	regs->uregs[reg] = current_thread_info()->tp_value[0];
752	regs->ARM_pc += 4;
753	return 0;
754}
755
756static struct undef_hook arm_mrc_hook = {
757	.instr_mask	= 0x0fff0fff,
758	.instr_val	= 0x0e1d0f70,
759	.cpsr_mask	= PSR_T_BIT,
760	.cpsr_val	= 0,
761	.fn		= get_tp_trap,
762};
763
764static int __init arm_mrc_hook_init(void)
765{
766	register_undef_hook(&arm_mrc_hook);
767	return 0;
768}
769
770late_initcall(arm_mrc_hook_init);
771
772#endif
773
774void __bad_xchg(volatile void *ptr, int size)
775{
776	printk("xchg: bad data size: pc 0x%p, ptr 0x%p, size %d\n",
777		__builtin_return_address(0), ptr, size);
778	BUG();
779}
780EXPORT_SYMBOL(__bad_xchg);
781
782/*
783 * A data abort trap was taken, but we did not handle the instruction.
784 * Try to abort the user program, or panic if it was the kernel.
785 */
786asmlinkage void
787baddataabort(int code, unsigned long instr, struct pt_regs *regs)
788{
789	unsigned long addr = instruction_pointer(regs);
790	siginfo_t info;
791
792#ifdef CONFIG_DEBUG_USER
793	if (user_debug & UDBG_BADABORT) {
794		printk(KERN_ERR "[%d] %s: bad data abort: code %d instr 0x%08lx\n",
795			task_pid_nr(current), current->comm, code, instr);
796		dump_instr(KERN_ERR, regs);
797		show_pte(current->mm, addr);
798	}
799#endif
800
801	info.si_signo = SIGILL;
802	info.si_errno = 0;
803	info.si_code  = ILL_ILLOPC;
804	info.si_addr  = (void __user *)addr;
805
806	arm_notify_die("unknown data abort code", regs, &info, instr, 0);
807}
808
809void __readwrite_bug(const char *fn)
810{
811	printk("%s called, but not implemented\n", fn);
812	BUG();
813}
814EXPORT_SYMBOL(__readwrite_bug);
815
816void __pte_error(const char *file, int line, pte_t pte)
817{
818	printk("%s:%d: bad pte %08llx.\n", file, line, (long long)pte_val(pte));
819}
820
821void __pmd_error(const char *file, int line, pmd_t pmd)
822{
823	printk("%s:%d: bad pmd %08llx.\n", file, line, (long long)pmd_val(pmd));
824}
825
826void __pgd_error(const char *file, int line, pgd_t pgd)
827{
828	printk("%s:%d: bad pgd %08llx.\n", file, line, (long long)pgd_val(pgd));
829}
830
831asmlinkage void __div0(void)
832{
833	printk("Division by zero in kernel.\n");
834	dump_stack();
835}
836EXPORT_SYMBOL(__div0);
837
838void abort(void)
839{
840	BUG();
841
842	/* if that doesn't kill us, halt */
843	panic("Oops failed to kill thread");
844}
845EXPORT_SYMBOL(abort);
846
847void __init trap_init(void)
848{
849	return;
850}
851
852#ifdef CONFIG_KUSER_HELPERS
853static void __init kuser_init(void *vectors)
854{
855	extern char __kuser_helper_start[], __kuser_helper_end[];
856	int kuser_sz = __kuser_helper_end - __kuser_helper_start;
857
858	memcpy(vectors + 0x1000 - kuser_sz, __kuser_helper_start, kuser_sz);
859
860	/*
861	 * vectors + 0xfe0 = __kuser_get_tls
862	 * vectors + 0xfe8 = hardware TLS instruction at 0xffff0fe8
863	 */
864	if (tls_emu || has_tls_reg)
865		memcpy(vectors + 0xfe0, vectors + 0xfe8, 4);
866}
867#else
868static inline void __init kuser_init(void *vectors)
869{
870}
871#endif
872
873void __init early_trap_init(void *vectors_base)
874{
875#ifndef CONFIG_CPU_V7M
876	unsigned long vectors = (unsigned long)vectors_base;
877	extern char __stubs_start[], __stubs_end[];
878	extern char __vectors_start[], __vectors_end[];
879	unsigned i;
880
881	vectors_page = vectors_base;
882
883	/*
884	 * Poison the vectors page with an undefined instruction.  This
885	 * instruction is chosen to be undefined for both ARM and Thumb
886	 * ISAs.  The Thumb version is an undefined instruction with a
887	 * branch back to the undefined instruction.
888	 */
889	for (i = 0; i < PAGE_SIZE / sizeof(u32); i++)
890		((u32 *)vectors_base)[i] = 0xe7fddef1;
891
892	/*
893	 * Copy the vectors, stubs and kuser helpers (in entry-armv.S)
894	 * into the vector page, mapped at 0xffff0000, and ensure these
895	 * are visible to the instruction stream.
896	 */
897	memcpy((void *)vectors, __vectors_start, __vectors_end - __vectors_start);
898	memcpy((void *)vectors + 0x1000, __stubs_start, __stubs_end - __stubs_start);
899
900	kuser_init(vectors_base);
901
902	flush_icache_range(vectors, vectors + PAGE_SIZE * 2);
903	modify_domain(DOMAIN_USER, DOMAIN_CLIENT);
904#else /* ifndef CONFIG_CPU_V7M */
905	/*
906	 * on V7-M there is no need to copy the vector table to a dedicated
907	 * memory area. The address is configurable and so a table in the kernel
908	 * image can be used.
909	 */
910#endif
911}
v4.10.11
  1/*
  2 *  linux/arch/arm/kernel/traps.c
  3 *
  4 *  Copyright (C) 1995-2009 Russell King
  5 *  Fragments that appear the same as linux/arch/i386/kernel/traps.c (C) Linus Torvalds
  6 *
  7 * This program is free software; you can redistribute it and/or modify
  8 * it under the terms of the GNU General Public License version 2 as
  9 * published by the Free Software Foundation.
 10 *
 11 *  'traps.c' handles hardware exceptions after we have saved some state in
 12 *  'linux/arch/arm/lib/traps.S'.  Mostly a debugging aid, but will probably
 13 *  kill the offending process.
 14 */
 15#include <linux/signal.h>
 16#include <linux/personality.h>
 17#include <linux/kallsyms.h>
 18#include <linux/spinlock.h>
 19#include <linux/uaccess.h>
 20#include <linux/hardirq.h>
 21#include <linux/kdebug.h>
 22#include <linux/module.h>
 23#include <linux/kexec.h>
 24#include <linux/bug.h>
 25#include <linux/delay.h>
 26#include <linux/init.h>
 27#include <linux/sched.h>
 28#include <linux/irq.h>
 29
 30#include <linux/atomic.h>
 31#include <asm/cacheflush.h>
 32#include <asm/exception.h>
 33#include <asm/unistd.h>
 34#include <asm/traps.h>
 35#include <asm/ptrace.h>
 36#include <asm/unwind.h>
 37#include <asm/tls.h>
 38#include <asm/system_misc.h>
 39#include <asm/opcodes.h>
 40
 41
 42static const char *handler[]= {
 43	"prefetch abort",
 44	"data abort",
 45	"address exception",
 46	"interrupt",
 47	"undefined instruction",
 48};
 49
 50void *vectors_page;
 51
 52#ifdef CONFIG_DEBUG_USER
 53unsigned int user_debug;
 54
 55static int __init user_debug_setup(char *str)
 56{
 57	get_option(&str, &user_debug);
 58	return 1;
 59}
 60__setup("user_debug=", user_debug_setup);
 61#endif
 62
 63static void dump_mem(const char *, const char *, unsigned long, unsigned long);
 64
 65void dump_backtrace_entry(unsigned long where, unsigned long from, unsigned long frame)
 66{
 67#ifdef CONFIG_KALLSYMS
 68	printk("[<%08lx>] (%ps) from [<%08lx>] (%pS)\n", where, (void *)where, from, (void *)from);
 69#else
 70	printk("Function entered at [<%08lx>] from [<%08lx>]\n", where, from);
 71#endif
 72
 73	if (in_exception_text(where))
 74		dump_mem("", "Exception stack", frame + 4, frame + 4 + sizeof(struct pt_regs));
 75}
 76
 77void dump_backtrace_stm(u32 *stack, u32 instruction)
 78{
 79	char str[80], *p;
 80	unsigned int x;
 81	int reg;
 82
 83	for (reg = 10, x = 0, p = str; reg >= 0; reg--) {
 84		if (instruction & BIT(reg)) {
 85			p += sprintf(p, " r%d:%08x", reg, *stack--);
 86			if (++x == 6) {
 87				x = 0;
 88				p = str;
 89				printk("%s\n", str);
 90			}
 91		}
 92	}
 93	if (p != str)
 94		printk("%s\n", str);
 95}
 96
 97#ifndef CONFIG_ARM_UNWIND
 98/*
 99 * Stack pointers should always be within the kernels view of
100 * physical memory.  If it is not there, then we can't dump
101 * out any information relating to the stack.
102 */
103static int verify_stack(unsigned long sp)
104{
105	if (sp < PAGE_OFFSET ||
106	    (sp > (unsigned long)high_memory && high_memory != NULL))
107		return -EFAULT;
108
109	return 0;
110}
111#endif
112
113/*
114 * Dump out the contents of some memory nicely...
115 */
116static void dump_mem(const char *lvl, const char *str, unsigned long bottom,
117		     unsigned long top)
118{
119	unsigned long first;
120	mm_segment_t fs;
121	int i;
122
123	/*
124	 * We need to switch to kernel mode so that we can use __get_user
125	 * to safely read from kernel space.  Note that we now dump the
126	 * code first, just in case the backtrace kills us.
127	 */
128	fs = get_fs();
129	set_fs(KERNEL_DS);
130
131	printk("%s%s(0x%08lx to 0x%08lx)\n", lvl, str, bottom, top);
132
133	for (first = bottom & ~31; first < top; first += 32) {
134		unsigned long p;
135		char str[sizeof(" 12345678") * 8 + 1];
136
137		memset(str, ' ', sizeof(str));
138		str[sizeof(str) - 1] = '\0';
139
140		for (p = first, i = 0; i < 8 && p < top; i++, p += 4) {
141			if (p >= bottom && p < top) {
142				unsigned long val;
143				if (__get_user(val, (unsigned long *)p) == 0)
144					sprintf(str + i * 9, " %08lx", val);
145				else
146					sprintf(str + i * 9, " ????????");
147			}
148		}
149		printk("%s%04lx:%s\n", lvl, first & 0xffff, str);
150	}
151
152	set_fs(fs);
153}
154
155static void dump_instr(const char *lvl, struct pt_regs *regs)
156{
157	unsigned long addr = instruction_pointer(regs);
158	const int thumb = thumb_mode(regs);
159	const int width = thumb ? 4 : 8;
160	mm_segment_t fs;
161	char str[sizeof("00000000 ") * 5 + 2 + 1], *p = str;
162	int i;
163
164	/*
165	 * We need to switch to kernel mode so that we can use __get_user
166	 * to safely read from kernel space.  Note that we now dump the
167	 * code first, just in case the backtrace kills us.
168	 */
169	fs = get_fs();
170	set_fs(KERNEL_DS);
171
172	for (i = -4; i < 1 + !!thumb; i++) {
173		unsigned int val, bad;
174
175		if (thumb)
176			bad = __get_user(val, &((u16 *)addr)[i]);
177		else
178			bad = __get_user(val, &((u32 *)addr)[i]);
179
180		if (!bad)
181			p += sprintf(p, i == 0 ? "(%0*x) " : "%0*x ",
182					width, val);
183		else {
184			p += sprintf(p, "bad PC value");
185			break;
186		}
187	}
188	printk("%sCode: %s\n", lvl, str);
189
190	set_fs(fs);
191}
192
193#ifdef CONFIG_ARM_UNWIND
194static inline void dump_backtrace(struct pt_regs *regs, struct task_struct *tsk)
195{
196	unwind_backtrace(regs, tsk);
197}
198#else
199static void dump_backtrace(struct pt_regs *regs, struct task_struct *tsk)
200{
201	unsigned int fp, mode;
202	int ok = 1;
203
204	printk("Backtrace: ");
205
206	if (!tsk)
207		tsk = current;
208
209	if (regs) {
210		fp = frame_pointer(regs);
211		mode = processor_mode(regs);
212	} else if (tsk != current) {
213		fp = thread_saved_fp(tsk);
214		mode = 0x10;
215	} else {
216		asm("mov %0, fp" : "=r" (fp) : : "cc");
217		mode = 0x10;
218	}
219
220	if (!fp) {
221		pr_cont("no frame pointer");
222		ok = 0;
223	} else if (verify_stack(fp)) {
224		pr_cont("invalid frame pointer 0x%08x", fp);
225		ok = 0;
226	} else if (fp < (unsigned long)end_of_stack(tsk))
227		pr_cont("frame pointer underflow");
228	pr_cont("\n");
229
230	if (ok)
231		c_backtrace(fp, mode);
232}
233#endif
234
235void show_stack(struct task_struct *tsk, unsigned long *sp)
236{
237	dump_backtrace(NULL, tsk);
238	barrier();
239}
240
241#ifdef CONFIG_PREEMPT
242#define S_PREEMPT " PREEMPT"
243#else
244#define S_PREEMPT ""
245#endif
246#ifdef CONFIG_SMP
247#define S_SMP " SMP"
248#else
249#define S_SMP ""
250#endif
251#ifdef CONFIG_THUMB2_KERNEL
252#define S_ISA " THUMB2"
253#else
254#define S_ISA " ARM"
255#endif
256
257static int __die(const char *str, int err, struct pt_regs *regs)
258{
259	struct task_struct *tsk = current;
260	static int die_counter;
261	int ret;
262
263	pr_emerg("Internal error: %s: %x [#%d]" S_PREEMPT S_SMP S_ISA "\n",
264	         str, err, ++die_counter);
265
266	/* trap and error numbers are mostly meaningless on ARM */
267	ret = notify_die(DIE_OOPS, str, regs, err, tsk->thread.trap_no, SIGSEGV);
268	if (ret == NOTIFY_STOP)
269		return 1;
270
271	print_modules();
272	__show_regs(regs);
273	pr_emerg("Process %.*s (pid: %d, stack limit = 0x%p)\n",
274		 TASK_COMM_LEN, tsk->comm, task_pid_nr(tsk), end_of_stack(tsk));
275
276	if (!user_mode(regs) || in_interrupt()) {
277		dump_mem(KERN_EMERG, "Stack: ", regs->ARM_sp,
278			 THREAD_SIZE + (unsigned long)task_stack_page(tsk));
279		dump_backtrace(regs, tsk);
280		dump_instr(KERN_EMERG, regs);
281	}
282
283	return 0;
284}
285
286static arch_spinlock_t die_lock = __ARCH_SPIN_LOCK_UNLOCKED;
287static int die_owner = -1;
288static unsigned int die_nest_count;
289
290static unsigned long oops_begin(void)
291{
292	int cpu;
293	unsigned long flags;
294
295	oops_enter();
296
297	/* racy, but better than risking deadlock. */
298	raw_local_irq_save(flags);
299	cpu = smp_processor_id();
300	if (!arch_spin_trylock(&die_lock)) {
301		if (cpu == die_owner)
302			/* nested oops. should stop eventually */;
303		else
304			arch_spin_lock(&die_lock);
305	}
306	die_nest_count++;
307	die_owner = cpu;
308	console_verbose();
309	bust_spinlocks(1);
310	return flags;
311}
312
313static void oops_end(unsigned long flags, struct pt_regs *regs, int signr)
314{
315	if (regs && kexec_should_crash(current))
316		crash_kexec(regs);
317
318	bust_spinlocks(0);
319	die_owner = -1;
320	add_taint(TAINT_DIE, LOCKDEP_NOW_UNRELIABLE);
321	die_nest_count--;
322	if (!die_nest_count)
323		/* Nest count reaches zero, release the lock. */
324		arch_spin_unlock(&die_lock);
325	raw_local_irq_restore(flags);
326	oops_exit();
327
328	if (in_interrupt())
329		panic("Fatal exception in interrupt");
330	if (panic_on_oops)
331		panic("Fatal exception");
332	if (signr)
333		do_exit(signr);
334}
335
336/*
337 * This function is protected against re-entrancy.
338 */
339void die(const char *str, struct pt_regs *regs, int err)
340{
341	enum bug_trap_type bug_type = BUG_TRAP_TYPE_NONE;
342	unsigned long flags = oops_begin();
343	int sig = SIGSEGV;
344
345	if (!user_mode(regs))
346		bug_type = report_bug(regs->ARM_pc, regs);
347	if (bug_type != BUG_TRAP_TYPE_NONE)
348		str = "Oops - BUG";
349
350	if (__die(str, err, regs))
351		sig = 0;
352
353	oops_end(flags, regs, sig);
354}
355
356void arm_notify_die(const char *str, struct pt_regs *regs,
357		struct siginfo *info, unsigned long err, unsigned long trap)
358{
359	if (user_mode(regs)) {
360		current->thread.error_code = err;
361		current->thread.trap_no = trap;
362
363		force_sig_info(info->si_signo, info, current);
364	} else {
365		die(str, regs, err);
366	}
367}
368
369#ifdef CONFIG_GENERIC_BUG
370
371int is_valid_bugaddr(unsigned long pc)
372{
373#ifdef CONFIG_THUMB2_KERNEL
374	u16 bkpt;
375	u16 insn = __opcode_to_mem_thumb16(BUG_INSTR_VALUE);
376#else
377	u32 bkpt;
378	u32 insn = __opcode_to_mem_arm(BUG_INSTR_VALUE);
379#endif
380
381	if (probe_kernel_address((unsigned *)pc, bkpt))
382		return 0;
383
384	return bkpt == insn;
385}
386
387#endif
388
389static LIST_HEAD(undef_hook);
390static DEFINE_RAW_SPINLOCK(undef_lock);
391
392void register_undef_hook(struct undef_hook *hook)
393{
394	unsigned long flags;
395
396	raw_spin_lock_irqsave(&undef_lock, flags);
397	list_add(&hook->node, &undef_hook);
398	raw_spin_unlock_irqrestore(&undef_lock, flags);
399}
400
401void unregister_undef_hook(struct undef_hook *hook)
402{
403	unsigned long flags;
404
405	raw_spin_lock_irqsave(&undef_lock, flags);
406	list_del(&hook->node);
407	raw_spin_unlock_irqrestore(&undef_lock, flags);
408}
409
410static int call_undef_hook(struct pt_regs *regs, unsigned int instr)
411{
412	struct undef_hook *hook;
413	unsigned long flags;
414	int (*fn)(struct pt_regs *regs, unsigned int instr) = NULL;
415
416	raw_spin_lock_irqsave(&undef_lock, flags);
417	list_for_each_entry(hook, &undef_hook, node)
418		if ((instr & hook->instr_mask) == hook->instr_val &&
419		    (regs->ARM_cpsr & hook->cpsr_mask) == hook->cpsr_val)
420			fn = hook->fn;
421	raw_spin_unlock_irqrestore(&undef_lock, flags);
422
423	return fn ? fn(regs, instr) : 1;
424}
425
426asmlinkage void __exception do_undefinstr(struct pt_regs *regs)
427{
428	unsigned int instr;
429	siginfo_t info;
430	void __user *pc;
431
432	pc = (void __user *)instruction_pointer(regs);
433
434	if (processor_mode(regs) == SVC_MODE) {
435#ifdef CONFIG_THUMB2_KERNEL
436		if (thumb_mode(regs)) {
437			instr = __mem_to_opcode_thumb16(((u16 *)pc)[0]);
438			if (is_wide_instruction(instr)) {
439				u16 inst2;
440				inst2 = __mem_to_opcode_thumb16(((u16 *)pc)[1]);
441				instr = __opcode_thumb32_compose(instr, inst2);
442			}
443		} else
444#endif
445			instr = __mem_to_opcode_arm(*(u32 *) pc);
446	} else if (thumb_mode(regs)) {
447		if (get_user(instr, (u16 __user *)pc))
448			goto die_sig;
449		instr = __mem_to_opcode_thumb16(instr);
450		if (is_wide_instruction(instr)) {
451			unsigned int instr2;
452			if (get_user(instr2, (u16 __user *)pc+1))
453				goto die_sig;
454			instr2 = __mem_to_opcode_thumb16(instr2);
455			instr = __opcode_thumb32_compose(instr, instr2);
456		}
457	} else {
458		if (get_user(instr, (u32 __user *)pc))
459			goto die_sig;
460		instr = __mem_to_opcode_arm(instr);
461	}
462
463	if (call_undef_hook(regs, instr) == 0)
464		return;
465
466die_sig:
467#ifdef CONFIG_DEBUG_USER
468	if (user_debug & UDBG_UNDEFINED) {
469		pr_info("%s (%d): undefined instruction: pc=%p\n",
470			current->comm, task_pid_nr(current), pc);
471		__show_regs(regs);
472		dump_instr(KERN_INFO, regs);
473	}
474#endif
475
476	info.si_signo = SIGILL;
477	info.si_errno = 0;
478	info.si_code  = ILL_ILLOPC;
479	info.si_addr  = pc;
480
481	arm_notify_die("Oops - undefined instruction", regs, &info, 0, 6);
482}
483
484/*
485 * Handle FIQ similarly to NMI on x86 systems.
486 *
487 * The runtime environment for NMIs is extremely restrictive
488 * (NMIs can pre-empt critical sections meaning almost all locking is
489 * forbidden) meaning this default FIQ handling must only be used in
490 * circumstances where non-maskability improves robustness, such as
491 * watchdog or debug logic.
492 *
493 * This handler is not appropriate for general purpose use in drivers
494 * platform code and can be overrideen using set_fiq_handler.
495 */
496asmlinkage void __exception_irq_entry handle_fiq_as_nmi(struct pt_regs *regs)
497{
498	struct pt_regs *old_regs = set_irq_regs(regs);
499
500	nmi_enter();
501
502	/* nop. FIQ handlers for special arch/arm features can be added here. */
503
504	nmi_exit();
505
506	set_irq_regs(old_regs);
507}
508
509/*
510 * bad_mode handles the impossible case in the vectors.  If you see one of
511 * these, then it's extremely serious, and could mean you have buggy hardware.
512 * It never returns, and never tries to sync.  We hope that we can at least
513 * dump out some state information...
514 */
515asmlinkage void bad_mode(struct pt_regs *regs, int reason)
516{
517	console_verbose();
518
519	pr_crit("Bad mode in %s handler detected\n", handler[reason]);
520
521	die("Oops - bad mode", regs, 0);
522	local_irq_disable();
523	panic("bad mode");
524}
525
526static int bad_syscall(int n, struct pt_regs *regs)
527{
 
528	siginfo_t info;
529
530	if ((current->personality & PER_MASK) != PER_LINUX) {
531		send_sig(SIGSEGV, current, 1);
 
532		return regs->ARM_r0;
533	}
534
535#ifdef CONFIG_DEBUG_USER
536	if (user_debug & UDBG_SYSCALL) {
537		pr_err("[%d] %s: obsolete system call %08x.\n",
538			task_pid_nr(current), current->comm, n);
539		dump_instr(KERN_ERR, regs);
540	}
541#endif
542
543	info.si_signo = SIGILL;
544	info.si_errno = 0;
545	info.si_code  = ILL_ILLTRP;
546	info.si_addr  = (void __user *)instruction_pointer(regs) -
547			 (thumb_mode(regs) ? 2 : 4);
548
549	arm_notify_die("Oops - bad syscall", regs, &info, n, 0);
550
551	return regs->ARM_r0;
552}
553
 
 
554static inline int
555__do_cache_op(unsigned long start, unsigned long end)
556{
557	int ret;
558
559	do {
560		unsigned long chunk = min(PAGE_SIZE, end - start);
561
562		if (fatal_signal_pending(current))
563			return 0;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
564
565		ret = flush_cache_user_range(start, start + chunk);
566		if (ret)
567			return ret;
568
569		cond_resched();
570		start += chunk;
571	} while (start < end);
572
573	return 0;
574}
575
 
 
 
 
 
 
 
 
 
576static inline int
577do_cache_op(unsigned long start, unsigned long end, int flags)
578{
579	if (end < start || flags)
580		return -EINVAL;
581
582	if (!access_ok(VERIFY_READ, start, end - start))
583		return -EFAULT;
584
585	return __do_cache_op(start, end);
586}
587
588/*
589 * Handle all unrecognised system calls.
590 *  0x9f0000 - 0x9fffff are some more esoteric system calls
591 */
592#define NR(x) ((__ARM_NR_##x) - __ARM_NR_BASE)
593asmlinkage int arm_syscall(int no, struct pt_regs *regs)
594{
 
595	siginfo_t info;
596
597	if ((no >> 16) != (__ARM_NR_BASE>> 16))
598		return bad_syscall(no, regs);
599
600	switch (no & 0xffff) {
601	case 0: /* branch through 0 */
602		info.si_signo = SIGSEGV;
603		info.si_errno = 0;
604		info.si_code  = SEGV_MAPERR;
605		info.si_addr  = NULL;
606
607		arm_notify_die("branch through zero", regs, &info, 0, 0);
608		return 0;
609
610	case NR(breakpoint): /* SWI BREAK_POINT */
611		regs->ARM_pc -= thumb_mode(regs) ? 2 : 4;
612		ptrace_break(current, regs);
613		return regs->ARM_r0;
614
615	/*
616	 * Flush a region from virtual address 'r0' to virtual address 'r1'
617	 * _exclusive_.  There is no alignment requirement on either address;
618	 * user space does not need to know the hardware cache layout.
619	 *
620	 * r2 contains flags.  It should ALWAYS be passed as ZERO until it
621	 * is defined to be something else.  For now we ignore it, but may
622	 * the fires of hell burn in your belly if you break this rule. ;)
623	 *
624	 * (at a later date, we may want to allow this call to not flush
625	 * various aspects of the cache.  Passing '0' will guarantee that
626	 * everything necessary gets flushed to maintain consistency in
627	 * the specified region).
628	 */
629	case NR(cacheflush):
630		return do_cache_op(regs->ARM_r0, regs->ARM_r1, regs->ARM_r2);
631
632	case NR(usr26):
633		if (!(elf_hwcap & HWCAP_26BIT))
634			break;
635		regs->ARM_cpsr &= ~MODE32_BIT;
636		return regs->ARM_r0;
637
638	case NR(usr32):
639		if (!(elf_hwcap & HWCAP_26BIT))
640			break;
641		regs->ARM_cpsr |= MODE32_BIT;
642		return regs->ARM_r0;
643
644	case NR(set_tls):
645		set_tls(regs->ARM_r0);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
646		return 0;
647
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
648	default:
649		/* Calls 9f00xx..9f07ff are defined to return -ENOSYS
650		   if not implemented, rather than raising SIGILL.  This
651		   way the calling program can gracefully determine whether
652		   a feature is supported.  */
653		if ((no & 0xffff) <= 0x7ff)
654			return -ENOSYS;
655		break;
656	}
657#ifdef CONFIG_DEBUG_USER
658	/*
659	 * experience shows that these seem to indicate that
660	 * something catastrophic has happened
661	 */
662	if (user_debug & UDBG_SYSCALL) {
663		pr_err("[%d] %s: arm syscall %d\n",
664		       task_pid_nr(current), current->comm, no);
665		dump_instr("", regs);
666		if (user_mode(regs)) {
667			__show_regs(regs);
668			c_backtrace(frame_pointer(regs), processor_mode(regs));
669		}
670	}
671#endif
672	info.si_signo = SIGILL;
673	info.si_errno = 0;
674	info.si_code  = ILL_ILLTRP;
675	info.si_addr  = (void __user *)instruction_pointer(regs) -
676			 (thumb_mode(regs) ? 2 : 4);
677
678	arm_notify_die("Oops - bad syscall(2)", regs, &info, no, 0);
679	return 0;
680}
681
682#ifdef CONFIG_TLS_REG_EMUL
683
684/*
685 * We might be running on an ARMv6+ processor which should have the TLS
686 * register but for some reason we can't use it, or maybe an SMP system
687 * using a pre-ARMv6 processor (there are apparently a few prototypes like
688 * that in existence) and therefore access to that register must be
689 * emulated.
690 */
691
692static int get_tp_trap(struct pt_regs *regs, unsigned int instr)
693{
694	int reg = (instr >> 12) & 15;
695	if (reg == 15)
696		return 1;
697	regs->uregs[reg] = current_thread_info()->tp_value[0];
698	regs->ARM_pc += 4;
699	return 0;
700}
701
702static struct undef_hook arm_mrc_hook = {
703	.instr_mask	= 0x0fff0fff,
704	.instr_val	= 0x0e1d0f70,
705	.cpsr_mask	= PSR_T_BIT,
706	.cpsr_val	= 0,
707	.fn		= get_tp_trap,
708};
709
710static int __init arm_mrc_hook_init(void)
711{
712	register_undef_hook(&arm_mrc_hook);
713	return 0;
714}
715
716late_initcall(arm_mrc_hook_init);
717
718#endif
719
 
 
 
 
 
 
 
 
720/*
721 * A data abort trap was taken, but we did not handle the instruction.
722 * Try to abort the user program, or panic if it was the kernel.
723 */
724asmlinkage void
725baddataabort(int code, unsigned long instr, struct pt_regs *regs)
726{
727	unsigned long addr = instruction_pointer(regs);
728	siginfo_t info;
729
730#ifdef CONFIG_DEBUG_USER
731	if (user_debug & UDBG_BADABORT) {
732		pr_err("[%d] %s: bad data abort: code %d instr 0x%08lx\n",
733		       task_pid_nr(current), current->comm, code, instr);
734		dump_instr(KERN_ERR, regs);
735		show_pte(current->mm, addr);
736	}
737#endif
738
739	info.si_signo = SIGILL;
740	info.si_errno = 0;
741	info.si_code  = ILL_ILLOPC;
742	info.si_addr  = (void __user *)addr;
743
744	arm_notify_die("unknown data abort code", regs, &info, instr, 0);
745}
746
747void __readwrite_bug(const char *fn)
748{
749	pr_err("%s called, but not implemented\n", fn);
750	BUG();
751}
752EXPORT_SYMBOL(__readwrite_bug);
753
754void __pte_error(const char *file, int line, pte_t pte)
755{
756	pr_err("%s:%d: bad pte %08llx.\n", file, line, (long long)pte_val(pte));
757}
758
759void __pmd_error(const char *file, int line, pmd_t pmd)
760{
761	pr_err("%s:%d: bad pmd %08llx.\n", file, line, (long long)pmd_val(pmd));
762}
763
764void __pgd_error(const char *file, int line, pgd_t pgd)
765{
766	pr_err("%s:%d: bad pgd %08llx.\n", file, line, (long long)pgd_val(pgd));
767}
768
769asmlinkage void __div0(void)
770{
771	pr_err("Division by zero in kernel.\n");
772	dump_stack();
773}
774EXPORT_SYMBOL(__div0);
775
776void abort(void)
777{
778	BUG();
779
780	/* if that doesn't kill us, halt */
781	panic("Oops failed to kill thread");
782}
783EXPORT_SYMBOL(abort);
784
785void __init trap_init(void)
786{
787	return;
788}
789
790#ifdef CONFIG_KUSER_HELPERS
791static void __init kuser_init(void *vectors)
792{
793	extern char __kuser_helper_start[], __kuser_helper_end[];
794	int kuser_sz = __kuser_helper_end - __kuser_helper_start;
795
796	memcpy(vectors + 0x1000 - kuser_sz, __kuser_helper_start, kuser_sz);
797
798	/*
799	 * vectors + 0xfe0 = __kuser_get_tls
800	 * vectors + 0xfe8 = hardware TLS instruction at 0xffff0fe8
801	 */
802	if (tls_emu || has_tls_reg)
803		memcpy(vectors + 0xfe0, vectors + 0xfe8, 4);
804}
805#else
806static inline void __init kuser_init(void *vectors)
807{
808}
809#endif
810
811void __init early_trap_init(void *vectors_base)
812{
813#ifndef CONFIG_CPU_V7M
814	unsigned long vectors = (unsigned long)vectors_base;
815	extern char __stubs_start[], __stubs_end[];
816	extern char __vectors_start[], __vectors_end[];
817	unsigned i;
818
819	vectors_page = vectors_base;
820
821	/*
822	 * Poison the vectors page with an undefined instruction.  This
823	 * instruction is chosen to be undefined for both ARM and Thumb
824	 * ISAs.  The Thumb version is an undefined instruction with a
825	 * branch back to the undefined instruction.
826	 */
827	for (i = 0; i < PAGE_SIZE / sizeof(u32); i++)
828		((u32 *)vectors_base)[i] = 0xe7fddef1;
829
830	/*
831	 * Copy the vectors, stubs and kuser helpers (in entry-armv.S)
832	 * into the vector page, mapped at 0xffff0000, and ensure these
833	 * are visible to the instruction stream.
834	 */
835	memcpy((void *)vectors, __vectors_start, __vectors_end - __vectors_start);
836	memcpy((void *)vectors + 0x1000, __stubs_start, __stubs_end - __stubs_start);
837
838	kuser_init(vectors_base);
839
840	flush_icache_range(vectors, vectors + PAGE_SIZE * 2);
 
841#else /* ifndef CONFIG_CPU_V7M */
842	/*
843	 * on V7-M there is no need to copy the vector table to a dedicated
844	 * memory area. The address is configurable and so a table in the kernel
845	 * image can be used.
846	 */
847#endif
848}