Loading...
1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * Kexec bzImage loader
4 *
5 * Copyright (C) 2014 Red Hat Inc.
6 * Authors:
7 * Vivek Goyal <vgoyal@redhat.com>
8 */
9
10#define pr_fmt(fmt) "kexec-bzImage64: " fmt
11
12#include <linux/string.h>
13#include <linux/printk.h>
14#include <linux/errno.h>
15#include <linux/slab.h>
16#include <linux/kexec.h>
17#include <linux/kernel.h>
18#include <linux/mm.h>
19#include <linux/efi.h>
20#include <linux/verification.h>
21
22#include <asm/bootparam.h>
23#include <asm/setup.h>
24#include <asm/crash.h>
25#include <asm/efi.h>
26#include <asm/e820/api.h>
27#include <asm/kexec-bzimage64.h>
28
29#define MAX_ELFCOREHDR_STR_LEN 30 /* elfcorehdr=0x<64bit-value> */
30
31/*
32 * Defines lowest physical address for various segments. Not sure where
33 * exactly these limits came from. Current bzimage64 loader in kexec-tools
34 * uses these so I am retaining it. It can be changed over time as we gain
35 * more insight.
36 */
37#define MIN_PURGATORY_ADDR 0x3000
38#define MIN_BOOTPARAM_ADDR 0x3000
39#define MIN_KERNEL_LOAD_ADDR 0x100000
40#define MIN_INITRD_LOAD_ADDR 0x1000000
41
42/*
43 * This is a place holder for all boot loader specific data structure which
44 * gets allocated in one call but gets freed much later during cleanup
45 * time. Right now there is only one field but it can grow as need be.
46 */
47struct bzimage64_data {
48 /*
49 * Temporary buffer to hold bootparams buffer. This should be
50 * freed once the bootparam segment has been loaded.
51 */
52 void *bootparams_buf;
53};
54
55static int setup_initrd(struct boot_params *params,
56 unsigned long initrd_load_addr, unsigned long initrd_len)
57{
58 params->hdr.ramdisk_image = initrd_load_addr & 0xffffffffUL;
59 params->hdr.ramdisk_size = initrd_len & 0xffffffffUL;
60
61 params->ext_ramdisk_image = initrd_load_addr >> 32;
62 params->ext_ramdisk_size = initrd_len >> 32;
63
64 return 0;
65}
66
67static int setup_cmdline(struct kimage *image, struct boot_params *params,
68 unsigned long bootparams_load_addr,
69 unsigned long cmdline_offset, char *cmdline,
70 unsigned long cmdline_len)
71{
72 char *cmdline_ptr = ((char *)params) + cmdline_offset;
73 unsigned long cmdline_ptr_phys, len = 0;
74 uint32_t cmdline_low_32, cmdline_ext_32;
75
76 if (image->type == KEXEC_TYPE_CRASH) {
77 len = sprintf(cmdline_ptr,
78 "elfcorehdr=0x%lx ", image->arch.elf_load_addr);
79 }
80 memcpy(cmdline_ptr + len, cmdline, cmdline_len);
81 cmdline_len += len;
82
83 cmdline_ptr[cmdline_len - 1] = '\0';
84
85 pr_debug("Final command line is: %s\n", cmdline_ptr);
86 cmdline_ptr_phys = bootparams_load_addr + cmdline_offset;
87 cmdline_low_32 = cmdline_ptr_phys & 0xffffffffUL;
88 cmdline_ext_32 = cmdline_ptr_phys >> 32;
89
90 params->hdr.cmd_line_ptr = cmdline_low_32;
91 if (cmdline_ext_32)
92 params->ext_cmd_line_ptr = cmdline_ext_32;
93
94 return 0;
95}
96
97static int setup_e820_entries(struct boot_params *params)
98{
99 unsigned int nr_e820_entries;
100
101 nr_e820_entries = e820_table_kexec->nr_entries;
102
103 /* TODO: Pass entries more than E820_MAX_ENTRIES_ZEROPAGE in bootparams setup data */
104 if (nr_e820_entries > E820_MAX_ENTRIES_ZEROPAGE)
105 nr_e820_entries = E820_MAX_ENTRIES_ZEROPAGE;
106
107 params->e820_entries = nr_e820_entries;
108 memcpy(¶ms->e820_table, &e820_table_kexec->entries, nr_e820_entries*sizeof(struct e820_entry));
109
110 return 0;
111}
112
113#ifdef CONFIG_EFI
114static int setup_efi_info_memmap(struct boot_params *params,
115 unsigned long params_load_addr,
116 unsigned int efi_map_offset,
117 unsigned int efi_map_sz)
118{
119 void *efi_map = (void *)params + efi_map_offset;
120 unsigned long efi_map_phys_addr = params_load_addr + efi_map_offset;
121 struct efi_info *ei = ¶ms->efi_info;
122
123 if (!efi_map_sz)
124 return 0;
125
126 efi_runtime_map_copy(efi_map, efi_map_sz);
127
128 ei->efi_memmap = efi_map_phys_addr & 0xffffffff;
129 ei->efi_memmap_hi = efi_map_phys_addr >> 32;
130 ei->efi_memmap_size = efi_map_sz;
131
132 return 0;
133}
134
135static int
136prepare_add_efi_setup_data(struct boot_params *params,
137 unsigned long params_load_addr,
138 unsigned int efi_setup_data_offset)
139{
140 unsigned long setup_data_phys;
141 struct setup_data *sd = (void *)params + efi_setup_data_offset;
142 struct efi_setup_data *esd = (void *)sd + sizeof(struct setup_data);
143
144 esd->fw_vendor = efi.fw_vendor;
145 esd->runtime = efi.runtime;
146 esd->tables = efi.config_table;
147 esd->smbios = efi.smbios;
148
149 sd->type = SETUP_EFI;
150 sd->len = sizeof(struct efi_setup_data);
151
152 /* Add setup data */
153 setup_data_phys = params_load_addr + efi_setup_data_offset;
154 sd->next = params->hdr.setup_data;
155 params->hdr.setup_data = setup_data_phys;
156
157 return 0;
158}
159
160static int
161setup_efi_state(struct boot_params *params, unsigned long params_load_addr,
162 unsigned int efi_map_offset, unsigned int efi_map_sz,
163 unsigned int efi_setup_data_offset)
164{
165 struct efi_info *current_ei = &boot_params.efi_info;
166 struct efi_info *ei = ¶ms->efi_info;
167
168 if (!efi_enabled(EFI_RUNTIME_SERVICES))
169 return 0;
170
171 if (!current_ei->efi_memmap_size)
172 return 0;
173
174 /*
175 * If 1:1 mapping is not enabled, second kernel can not setup EFI
176 * and use EFI run time services. User space will have to pass
177 * acpi_rsdp=<addr> on kernel command line to make second kernel boot
178 * without efi.
179 */
180 if (efi_enabled(EFI_OLD_MEMMAP))
181 return 0;
182
183 params->secure_boot = boot_params.secure_boot;
184 ei->efi_loader_signature = current_ei->efi_loader_signature;
185 ei->efi_systab = current_ei->efi_systab;
186 ei->efi_systab_hi = current_ei->efi_systab_hi;
187
188 ei->efi_memdesc_version = current_ei->efi_memdesc_version;
189 ei->efi_memdesc_size = efi_get_runtime_map_desc_size();
190
191 setup_efi_info_memmap(params, params_load_addr, efi_map_offset,
192 efi_map_sz);
193 prepare_add_efi_setup_data(params, params_load_addr,
194 efi_setup_data_offset);
195 return 0;
196}
197#endif /* CONFIG_EFI */
198
199static int
200setup_boot_parameters(struct kimage *image, struct boot_params *params,
201 unsigned long params_load_addr,
202 unsigned int efi_map_offset, unsigned int efi_map_sz,
203 unsigned int efi_setup_data_offset)
204{
205 unsigned int nr_e820_entries;
206 unsigned long long mem_k, start, end;
207 int i, ret = 0;
208
209 /* Get subarch from existing bootparams */
210 params->hdr.hardware_subarch = boot_params.hdr.hardware_subarch;
211
212 /* Copying screen_info will do? */
213 memcpy(¶ms->screen_info, &boot_params.screen_info,
214 sizeof(struct screen_info));
215
216 /* Fill in memsize later */
217 params->screen_info.ext_mem_k = 0;
218 params->alt_mem_k = 0;
219
220 /* Always fill in RSDP: it is either 0 or a valid value */
221 params->acpi_rsdp_addr = boot_params.acpi_rsdp_addr;
222
223 /* Default APM info */
224 memset(¶ms->apm_bios_info, 0, sizeof(params->apm_bios_info));
225
226 /* Default drive info */
227 memset(¶ms->hd0_info, 0, sizeof(params->hd0_info));
228 memset(¶ms->hd1_info, 0, sizeof(params->hd1_info));
229
230 if (image->type == KEXEC_TYPE_CRASH) {
231 ret = crash_setup_memmap_entries(image, params);
232 if (ret)
233 return ret;
234 } else
235 setup_e820_entries(params);
236
237 nr_e820_entries = params->e820_entries;
238
239 for (i = 0; i < nr_e820_entries; i++) {
240 if (params->e820_table[i].type != E820_TYPE_RAM)
241 continue;
242 start = params->e820_table[i].addr;
243 end = params->e820_table[i].addr + params->e820_table[i].size - 1;
244
245 if ((start <= 0x100000) && end > 0x100000) {
246 mem_k = (end >> 10) - (0x100000 >> 10);
247 params->screen_info.ext_mem_k = mem_k;
248 params->alt_mem_k = mem_k;
249 if (mem_k > 0xfc00)
250 params->screen_info.ext_mem_k = 0xfc00; /* 64M*/
251 if (mem_k > 0xffffffff)
252 params->alt_mem_k = 0xffffffff;
253 }
254 }
255
256#ifdef CONFIG_EFI
257 /* Setup EFI state */
258 setup_efi_state(params, params_load_addr, efi_map_offset, efi_map_sz,
259 efi_setup_data_offset);
260#endif
261 /* Setup EDD info */
262 memcpy(params->eddbuf, boot_params.eddbuf,
263 EDDMAXNR * sizeof(struct edd_info));
264 params->eddbuf_entries = boot_params.eddbuf_entries;
265
266 memcpy(params->edd_mbr_sig_buffer, boot_params.edd_mbr_sig_buffer,
267 EDD_MBR_SIG_MAX * sizeof(unsigned int));
268
269 return ret;
270}
271
272static int bzImage64_probe(const char *buf, unsigned long len)
273{
274 int ret = -ENOEXEC;
275 struct setup_header *header;
276
277 /* kernel should be at least two sectors long */
278 if (len < 2 * 512) {
279 pr_err("File is too short to be a bzImage\n");
280 return ret;
281 }
282
283 header = (struct setup_header *)(buf + offsetof(struct boot_params, hdr));
284 if (memcmp((char *)&header->header, "HdrS", 4) != 0) {
285 pr_err("Not a bzImage\n");
286 return ret;
287 }
288
289 if (header->boot_flag != 0xAA55) {
290 pr_err("No x86 boot sector present\n");
291 return ret;
292 }
293
294 if (header->version < 0x020C) {
295 pr_err("Must be at least protocol version 2.12\n");
296 return ret;
297 }
298
299 if (!(header->loadflags & LOADED_HIGH)) {
300 pr_err("zImage not a bzImage\n");
301 return ret;
302 }
303
304 if (!(header->xloadflags & XLF_KERNEL_64)) {
305 pr_err("Not a bzImage64. XLF_KERNEL_64 is not set.\n");
306 return ret;
307 }
308
309 if (!(header->xloadflags & XLF_CAN_BE_LOADED_ABOVE_4G)) {
310 pr_err("XLF_CAN_BE_LOADED_ABOVE_4G is not set.\n");
311 return ret;
312 }
313
314 /*
315 * Can't handle 32bit EFI as it does not allow loading kernel
316 * above 4G. This should be handled by 32bit bzImage loader
317 */
318 if (efi_enabled(EFI_RUNTIME_SERVICES) && !efi_enabled(EFI_64BIT)) {
319 pr_debug("EFI is 32 bit. Can't load kernel above 4G.\n");
320 return ret;
321 }
322
323 if (!(header->xloadflags & XLF_5LEVEL) && pgtable_l5_enabled()) {
324 pr_err("bzImage cannot handle 5-level paging mode.\n");
325 return ret;
326 }
327
328 /* I've got a bzImage */
329 pr_debug("It's a relocatable bzImage64\n");
330 ret = 0;
331
332 return ret;
333}
334
335static void *bzImage64_load(struct kimage *image, char *kernel,
336 unsigned long kernel_len, char *initrd,
337 unsigned long initrd_len, char *cmdline,
338 unsigned long cmdline_len)
339{
340
341 struct setup_header *header;
342 int setup_sects, kern16_size, ret = 0;
343 unsigned long setup_header_size, params_cmdline_sz;
344 struct boot_params *params;
345 unsigned long bootparam_load_addr, kernel_load_addr, initrd_load_addr;
346 struct bzimage64_data *ldata;
347 struct kexec_entry64_regs regs64;
348 void *stack;
349 unsigned int setup_hdr_offset = offsetof(struct boot_params, hdr);
350 unsigned int efi_map_offset, efi_map_sz, efi_setup_data_offset;
351 struct kexec_buf kbuf = { .image = image, .buf_max = ULONG_MAX,
352 .top_down = true };
353 struct kexec_buf pbuf = { .image = image, .buf_min = MIN_PURGATORY_ADDR,
354 .buf_max = ULONG_MAX, .top_down = true };
355
356 header = (struct setup_header *)(kernel + setup_hdr_offset);
357 setup_sects = header->setup_sects;
358 if (setup_sects == 0)
359 setup_sects = 4;
360
361 kern16_size = (setup_sects + 1) * 512;
362 if (kernel_len < kern16_size) {
363 pr_err("bzImage truncated\n");
364 return ERR_PTR(-ENOEXEC);
365 }
366
367 if (cmdline_len > header->cmdline_size) {
368 pr_err("Kernel command line too long\n");
369 return ERR_PTR(-EINVAL);
370 }
371
372 /*
373 * In case of crash dump, we will append elfcorehdr=<addr> to
374 * command line. Make sure it does not overflow
375 */
376 if (cmdline_len + MAX_ELFCOREHDR_STR_LEN > header->cmdline_size) {
377 pr_debug("Appending elfcorehdr=<addr> to command line exceeds maximum allowed length\n");
378 return ERR_PTR(-EINVAL);
379 }
380
381 /* Allocate and load backup region */
382 if (image->type == KEXEC_TYPE_CRASH) {
383 ret = crash_load_segments(image);
384 if (ret)
385 return ERR_PTR(ret);
386 }
387
388 /*
389 * Load purgatory. For 64bit entry point, purgatory code can be
390 * anywhere.
391 */
392 ret = kexec_load_purgatory(image, &pbuf);
393 if (ret) {
394 pr_err("Loading purgatory failed\n");
395 return ERR_PTR(ret);
396 }
397
398 pr_debug("Loaded purgatory at 0x%lx\n", pbuf.mem);
399
400
401 /*
402 * Load Bootparams and cmdline and space for efi stuff.
403 *
404 * Allocate memory together for multiple data structures so
405 * that they all can go in single area/segment and we don't
406 * have to create separate segment for each. Keeps things
407 * little bit simple
408 */
409 efi_map_sz = efi_get_runtime_map_size();
410 params_cmdline_sz = sizeof(struct boot_params) + cmdline_len +
411 MAX_ELFCOREHDR_STR_LEN;
412 params_cmdline_sz = ALIGN(params_cmdline_sz, 16);
413 kbuf.bufsz = params_cmdline_sz + ALIGN(efi_map_sz, 16) +
414 sizeof(struct setup_data) +
415 sizeof(struct efi_setup_data);
416
417 params = kzalloc(kbuf.bufsz, GFP_KERNEL);
418 if (!params)
419 return ERR_PTR(-ENOMEM);
420 efi_map_offset = params_cmdline_sz;
421 efi_setup_data_offset = efi_map_offset + ALIGN(efi_map_sz, 16);
422
423 /* Copy setup header onto bootparams. Documentation/x86/boot.rst */
424 setup_header_size = 0x0202 + kernel[0x0201] - setup_hdr_offset;
425
426 /* Is there a limit on setup header size? */
427 memcpy(¶ms->hdr, (kernel + setup_hdr_offset), setup_header_size);
428
429 kbuf.buffer = params;
430 kbuf.memsz = kbuf.bufsz;
431 kbuf.buf_align = 16;
432 kbuf.buf_min = MIN_BOOTPARAM_ADDR;
433 ret = kexec_add_buffer(&kbuf);
434 if (ret)
435 goto out_free_params;
436 bootparam_load_addr = kbuf.mem;
437 pr_debug("Loaded boot_param, command line and misc at 0x%lx bufsz=0x%lx memsz=0x%lx\n",
438 bootparam_load_addr, kbuf.bufsz, kbuf.bufsz);
439
440 /* Load kernel */
441 kbuf.buffer = kernel + kern16_size;
442 kbuf.bufsz = kernel_len - kern16_size;
443 kbuf.memsz = PAGE_ALIGN(header->init_size);
444 kbuf.buf_align = header->kernel_alignment;
445 kbuf.buf_min = MIN_KERNEL_LOAD_ADDR;
446 kbuf.mem = KEXEC_BUF_MEM_UNKNOWN;
447 ret = kexec_add_buffer(&kbuf);
448 if (ret)
449 goto out_free_params;
450 kernel_load_addr = kbuf.mem;
451
452 pr_debug("Loaded 64bit kernel at 0x%lx bufsz=0x%lx memsz=0x%lx\n",
453 kernel_load_addr, kbuf.bufsz, kbuf.memsz);
454
455 /* Load initrd high */
456 if (initrd) {
457 kbuf.buffer = initrd;
458 kbuf.bufsz = kbuf.memsz = initrd_len;
459 kbuf.buf_align = PAGE_SIZE;
460 kbuf.buf_min = MIN_INITRD_LOAD_ADDR;
461 kbuf.mem = KEXEC_BUF_MEM_UNKNOWN;
462 ret = kexec_add_buffer(&kbuf);
463 if (ret)
464 goto out_free_params;
465 initrd_load_addr = kbuf.mem;
466
467 pr_debug("Loaded initrd at 0x%lx bufsz=0x%lx memsz=0x%lx\n",
468 initrd_load_addr, initrd_len, initrd_len);
469
470 setup_initrd(params, initrd_load_addr, initrd_len);
471 }
472
473 setup_cmdline(image, params, bootparam_load_addr,
474 sizeof(struct boot_params), cmdline, cmdline_len);
475
476 /* bootloader info. Do we need a separate ID for kexec kernel loader? */
477 params->hdr.type_of_loader = 0x0D << 4;
478 params->hdr.loadflags = 0;
479
480 /* Setup purgatory regs for entry */
481 ret = kexec_purgatory_get_set_symbol(image, "entry64_regs", ®s64,
482 sizeof(regs64), 1);
483 if (ret)
484 goto out_free_params;
485
486 regs64.rbx = 0; /* Bootstrap Processor */
487 regs64.rsi = bootparam_load_addr;
488 regs64.rip = kernel_load_addr + 0x200;
489 stack = kexec_purgatory_get_symbol_addr(image, "stack_end");
490 if (IS_ERR(stack)) {
491 pr_err("Could not find address of symbol stack_end\n");
492 ret = -EINVAL;
493 goto out_free_params;
494 }
495
496 regs64.rsp = (unsigned long)stack;
497 ret = kexec_purgatory_get_set_symbol(image, "entry64_regs", ®s64,
498 sizeof(regs64), 0);
499 if (ret)
500 goto out_free_params;
501
502 ret = setup_boot_parameters(image, params, bootparam_load_addr,
503 efi_map_offset, efi_map_sz,
504 efi_setup_data_offset);
505 if (ret)
506 goto out_free_params;
507
508 /* Allocate loader specific data */
509 ldata = kzalloc(sizeof(struct bzimage64_data), GFP_KERNEL);
510 if (!ldata) {
511 ret = -ENOMEM;
512 goto out_free_params;
513 }
514
515 /*
516 * Store pointer to params so that it could be freed after loading
517 * params segment has been loaded and contents have been copied
518 * somewhere else.
519 */
520 ldata->bootparams_buf = params;
521 return ldata;
522
523out_free_params:
524 kfree(params);
525 return ERR_PTR(ret);
526}
527
528/* This cleanup function is called after various segments have been loaded */
529static int bzImage64_cleanup(void *loader_data)
530{
531 struct bzimage64_data *ldata = loader_data;
532
533 if (!ldata)
534 return 0;
535
536 kfree(ldata->bootparams_buf);
537 ldata->bootparams_buf = NULL;
538
539 return 0;
540}
541
542#ifdef CONFIG_KEXEC_BZIMAGE_VERIFY_SIG
543static int bzImage64_verify_sig(const char *kernel, unsigned long kernel_len)
544{
545 int ret;
546
547 ret = verify_pefile_signature(kernel, kernel_len,
548 VERIFY_USE_SECONDARY_KEYRING,
549 VERIFYING_KEXEC_PE_SIGNATURE);
550 if (ret == -ENOKEY && IS_ENABLED(CONFIG_INTEGRITY_PLATFORM_KEYRING)) {
551 ret = verify_pefile_signature(kernel, kernel_len,
552 VERIFY_USE_PLATFORM_KEYRING,
553 VERIFYING_KEXEC_PE_SIGNATURE);
554 }
555 return ret;
556}
557#endif
558
559const struct kexec_file_ops kexec_bzImage64_ops = {
560 .probe = bzImage64_probe,
561 .load = bzImage64_load,
562 .cleanup = bzImage64_cleanup,
563#ifdef CONFIG_KEXEC_BZIMAGE_VERIFY_SIG
564 .verify_sig = bzImage64_verify_sig,
565#endif
566};
1/*
2 * Kexec bzImage loader
3 *
4 * Copyright (C) 2014 Red Hat Inc.
5 * Authors:
6 * Vivek Goyal <vgoyal@redhat.com>
7 *
8 * This source code is licensed under the GNU General Public License,
9 * Version 2. See the file COPYING for more details.
10 */
11
12#define pr_fmt(fmt) "kexec-bzImage64: " fmt
13
14#include <linux/string.h>
15#include <linux/printk.h>
16#include <linux/errno.h>
17#include <linux/slab.h>
18#include <linux/kexec.h>
19#include <linux/kernel.h>
20#include <linux/mm.h>
21#include <linux/efi.h>
22#include <linux/verify_pefile.h>
23#include <keys/system_keyring.h>
24
25#include <asm/bootparam.h>
26#include <asm/setup.h>
27#include <asm/crash.h>
28#include <asm/efi.h>
29#include <asm/kexec-bzimage64.h>
30
31#define MAX_ELFCOREHDR_STR_LEN 30 /* elfcorehdr=0x<64bit-value> */
32
33/*
34 * Defines lowest physical address for various segments. Not sure where
35 * exactly these limits came from. Current bzimage64 loader in kexec-tools
36 * uses these so I am retaining it. It can be changed over time as we gain
37 * more insight.
38 */
39#define MIN_PURGATORY_ADDR 0x3000
40#define MIN_BOOTPARAM_ADDR 0x3000
41#define MIN_KERNEL_LOAD_ADDR 0x100000
42#define MIN_INITRD_LOAD_ADDR 0x1000000
43
44/*
45 * This is a place holder for all boot loader specific data structure which
46 * gets allocated in one call but gets freed much later during cleanup
47 * time. Right now there is only one field but it can grow as need be.
48 */
49struct bzimage64_data {
50 /*
51 * Temporary buffer to hold bootparams buffer. This should be
52 * freed once the bootparam segment has been loaded.
53 */
54 void *bootparams_buf;
55};
56
57static int setup_initrd(struct boot_params *params,
58 unsigned long initrd_load_addr, unsigned long initrd_len)
59{
60 params->hdr.ramdisk_image = initrd_load_addr & 0xffffffffUL;
61 params->hdr.ramdisk_size = initrd_len & 0xffffffffUL;
62
63 params->ext_ramdisk_image = initrd_load_addr >> 32;
64 params->ext_ramdisk_size = initrd_len >> 32;
65
66 return 0;
67}
68
69static int setup_cmdline(struct kimage *image, struct boot_params *params,
70 unsigned long bootparams_load_addr,
71 unsigned long cmdline_offset, char *cmdline,
72 unsigned long cmdline_len)
73{
74 char *cmdline_ptr = ((char *)params) + cmdline_offset;
75 unsigned long cmdline_ptr_phys, len = 0;
76 uint32_t cmdline_low_32, cmdline_ext_32;
77
78 if (image->type == KEXEC_TYPE_CRASH) {
79 len = sprintf(cmdline_ptr,
80 "elfcorehdr=0x%lx ", image->arch.elf_load_addr);
81 }
82 memcpy(cmdline_ptr + len, cmdline, cmdline_len);
83 cmdline_len += len;
84
85 cmdline_ptr[cmdline_len - 1] = '\0';
86
87 pr_debug("Final command line is: %s\n", cmdline_ptr);
88 cmdline_ptr_phys = bootparams_load_addr + cmdline_offset;
89 cmdline_low_32 = cmdline_ptr_phys & 0xffffffffUL;
90 cmdline_ext_32 = cmdline_ptr_phys >> 32;
91
92 params->hdr.cmd_line_ptr = cmdline_low_32;
93 if (cmdline_ext_32)
94 params->ext_cmd_line_ptr = cmdline_ext_32;
95
96 return 0;
97}
98
99static int setup_e820_entries(struct boot_params *params)
100{
101 unsigned int nr_e820_entries;
102
103 nr_e820_entries = e820_saved.nr_map;
104
105 /* TODO: Pass entries more than E820MAX in bootparams setup data */
106 if (nr_e820_entries > E820MAX)
107 nr_e820_entries = E820MAX;
108
109 params->e820_entries = nr_e820_entries;
110 memcpy(¶ms->e820_map, &e820_saved.map,
111 nr_e820_entries * sizeof(struct e820entry));
112
113 return 0;
114}
115
116#ifdef CONFIG_EFI
117static int setup_efi_info_memmap(struct boot_params *params,
118 unsigned long params_load_addr,
119 unsigned int efi_map_offset,
120 unsigned int efi_map_sz)
121{
122 void *efi_map = (void *)params + efi_map_offset;
123 unsigned long efi_map_phys_addr = params_load_addr + efi_map_offset;
124 struct efi_info *ei = ¶ms->efi_info;
125
126 if (!efi_map_sz)
127 return 0;
128
129 efi_runtime_map_copy(efi_map, efi_map_sz);
130
131 ei->efi_memmap = efi_map_phys_addr & 0xffffffff;
132 ei->efi_memmap_hi = efi_map_phys_addr >> 32;
133 ei->efi_memmap_size = efi_map_sz;
134
135 return 0;
136}
137
138static int
139prepare_add_efi_setup_data(struct boot_params *params,
140 unsigned long params_load_addr,
141 unsigned int efi_setup_data_offset)
142{
143 unsigned long setup_data_phys;
144 struct setup_data *sd = (void *)params + efi_setup_data_offset;
145 struct efi_setup_data *esd = (void *)sd + sizeof(struct setup_data);
146
147 esd->fw_vendor = efi.fw_vendor;
148 esd->runtime = efi.runtime;
149 esd->tables = efi.config_table;
150 esd->smbios = efi.smbios;
151
152 sd->type = SETUP_EFI;
153 sd->len = sizeof(struct efi_setup_data);
154
155 /* Add setup data */
156 setup_data_phys = params_load_addr + efi_setup_data_offset;
157 sd->next = params->hdr.setup_data;
158 params->hdr.setup_data = setup_data_phys;
159
160 return 0;
161}
162
163static int
164setup_efi_state(struct boot_params *params, unsigned long params_load_addr,
165 unsigned int efi_map_offset, unsigned int efi_map_sz,
166 unsigned int efi_setup_data_offset)
167{
168 struct efi_info *current_ei = &boot_params.efi_info;
169 struct efi_info *ei = ¶ms->efi_info;
170
171 if (!current_ei->efi_memmap_size)
172 return 0;
173
174 /*
175 * If 1:1 mapping is not enabled, second kernel can not setup EFI
176 * and use EFI run time services. User space will have to pass
177 * acpi_rsdp=<addr> on kernel command line to make second kernel boot
178 * without efi.
179 */
180 if (efi_enabled(EFI_OLD_MEMMAP))
181 return 0;
182
183 ei->efi_loader_signature = current_ei->efi_loader_signature;
184 ei->efi_systab = current_ei->efi_systab;
185 ei->efi_systab_hi = current_ei->efi_systab_hi;
186
187 ei->efi_memdesc_version = current_ei->efi_memdesc_version;
188 ei->efi_memdesc_size = efi_get_runtime_map_desc_size();
189
190 setup_efi_info_memmap(params, params_load_addr, efi_map_offset,
191 efi_map_sz);
192 prepare_add_efi_setup_data(params, params_load_addr,
193 efi_setup_data_offset);
194 return 0;
195}
196#endif /* CONFIG_EFI */
197
198static int
199setup_boot_parameters(struct kimage *image, struct boot_params *params,
200 unsigned long params_load_addr,
201 unsigned int efi_map_offset, unsigned int efi_map_sz,
202 unsigned int efi_setup_data_offset)
203{
204 unsigned int nr_e820_entries;
205 unsigned long long mem_k, start, end;
206 int i, ret = 0;
207
208 /* Get subarch from existing bootparams */
209 params->hdr.hardware_subarch = boot_params.hdr.hardware_subarch;
210
211 /* Copying screen_info will do? */
212 memcpy(¶ms->screen_info, &boot_params.screen_info,
213 sizeof(struct screen_info));
214
215 /* Fill in memsize later */
216 params->screen_info.ext_mem_k = 0;
217 params->alt_mem_k = 0;
218
219 /* Default APM info */
220 memset(¶ms->apm_bios_info, 0, sizeof(params->apm_bios_info));
221
222 /* Default drive info */
223 memset(¶ms->hd0_info, 0, sizeof(params->hd0_info));
224 memset(¶ms->hd1_info, 0, sizeof(params->hd1_info));
225
226 if (image->type == KEXEC_TYPE_CRASH) {
227 ret = crash_setup_memmap_entries(image, params);
228 if (ret)
229 return ret;
230 } else
231 setup_e820_entries(params);
232
233 nr_e820_entries = params->e820_entries;
234
235 for (i = 0; i < nr_e820_entries; i++) {
236 if (params->e820_map[i].type != E820_RAM)
237 continue;
238 start = params->e820_map[i].addr;
239 end = params->e820_map[i].addr + params->e820_map[i].size - 1;
240
241 if ((start <= 0x100000) && end > 0x100000) {
242 mem_k = (end >> 10) - (0x100000 >> 10);
243 params->screen_info.ext_mem_k = mem_k;
244 params->alt_mem_k = mem_k;
245 if (mem_k > 0xfc00)
246 params->screen_info.ext_mem_k = 0xfc00; /* 64M*/
247 if (mem_k > 0xffffffff)
248 params->alt_mem_k = 0xffffffff;
249 }
250 }
251
252#ifdef CONFIG_EFI
253 /* Setup EFI state */
254 setup_efi_state(params, params_load_addr, efi_map_offset, efi_map_sz,
255 efi_setup_data_offset);
256#endif
257
258 /* Setup EDD info */
259 memcpy(params->eddbuf, boot_params.eddbuf,
260 EDDMAXNR * sizeof(struct edd_info));
261 params->eddbuf_entries = boot_params.eddbuf_entries;
262
263 memcpy(params->edd_mbr_sig_buffer, boot_params.edd_mbr_sig_buffer,
264 EDD_MBR_SIG_MAX * sizeof(unsigned int));
265
266 return ret;
267}
268
269static int bzImage64_probe(const char *buf, unsigned long len)
270{
271 int ret = -ENOEXEC;
272 struct setup_header *header;
273
274 /* kernel should be at least two sectors long */
275 if (len < 2 * 512) {
276 pr_err("File is too short to be a bzImage\n");
277 return ret;
278 }
279
280 header = (struct setup_header *)(buf + offsetof(struct boot_params, hdr));
281 if (memcmp((char *)&header->header, "HdrS", 4) != 0) {
282 pr_err("Not a bzImage\n");
283 return ret;
284 }
285
286 if (header->boot_flag != 0xAA55) {
287 pr_err("No x86 boot sector present\n");
288 return ret;
289 }
290
291 if (header->version < 0x020C) {
292 pr_err("Must be at least protocol version 2.12\n");
293 return ret;
294 }
295
296 if (!(header->loadflags & LOADED_HIGH)) {
297 pr_err("zImage not a bzImage\n");
298 return ret;
299 }
300
301 if (!(header->xloadflags & XLF_KERNEL_64)) {
302 pr_err("Not a bzImage64. XLF_KERNEL_64 is not set.\n");
303 return ret;
304 }
305
306 if (!(header->xloadflags & XLF_CAN_BE_LOADED_ABOVE_4G)) {
307 pr_err("XLF_CAN_BE_LOADED_ABOVE_4G is not set.\n");
308 return ret;
309 }
310
311 /*
312 * Can't handle 32bit EFI as it does not allow loading kernel
313 * above 4G. This should be handled by 32bit bzImage loader
314 */
315 if (efi_enabled(EFI_RUNTIME_SERVICES) && !efi_enabled(EFI_64BIT)) {
316 pr_debug("EFI is 32 bit. Can't load kernel above 4G.\n");
317 return ret;
318 }
319
320 /* I've got a bzImage */
321 pr_debug("It's a relocatable bzImage64\n");
322 ret = 0;
323
324 return ret;
325}
326
327static void *bzImage64_load(struct kimage *image, char *kernel,
328 unsigned long kernel_len, char *initrd,
329 unsigned long initrd_len, char *cmdline,
330 unsigned long cmdline_len)
331{
332
333 struct setup_header *header;
334 int setup_sects, kern16_size, ret = 0;
335 unsigned long setup_header_size, params_cmdline_sz, params_misc_sz;
336 struct boot_params *params;
337 unsigned long bootparam_load_addr, kernel_load_addr, initrd_load_addr;
338 unsigned long purgatory_load_addr;
339 unsigned long kernel_bufsz, kernel_memsz, kernel_align;
340 char *kernel_buf;
341 struct bzimage64_data *ldata;
342 struct kexec_entry64_regs regs64;
343 void *stack;
344 unsigned int setup_hdr_offset = offsetof(struct boot_params, hdr);
345 unsigned int efi_map_offset, efi_map_sz, efi_setup_data_offset;
346
347 header = (struct setup_header *)(kernel + setup_hdr_offset);
348 setup_sects = header->setup_sects;
349 if (setup_sects == 0)
350 setup_sects = 4;
351
352 kern16_size = (setup_sects + 1) * 512;
353 if (kernel_len < kern16_size) {
354 pr_err("bzImage truncated\n");
355 return ERR_PTR(-ENOEXEC);
356 }
357
358 if (cmdline_len > header->cmdline_size) {
359 pr_err("Kernel command line too long\n");
360 return ERR_PTR(-EINVAL);
361 }
362
363 /*
364 * In case of crash dump, we will append elfcorehdr=<addr> to
365 * command line. Make sure it does not overflow
366 */
367 if (cmdline_len + MAX_ELFCOREHDR_STR_LEN > header->cmdline_size) {
368 pr_debug("Appending elfcorehdr=<addr> to command line exceeds maximum allowed length\n");
369 return ERR_PTR(-EINVAL);
370 }
371
372 /* Allocate and load backup region */
373 if (image->type == KEXEC_TYPE_CRASH) {
374 ret = crash_load_segments(image);
375 if (ret)
376 return ERR_PTR(ret);
377 }
378
379 /*
380 * Load purgatory. For 64bit entry point, purgatory code can be
381 * anywhere.
382 */
383 ret = kexec_load_purgatory(image, MIN_PURGATORY_ADDR, ULONG_MAX, 1,
384 &purgatory_load_addr);
385 if (ret) {
386 pr_err("Loading purgatory failed\n");
387 return ERR_PTR(ret);
388 }
389
390 pr_debug("Loaded purgatory at 0x%lx\n", purgatory_load_addr);
391
392
393 /*
394 * Load Bootparams and cmdline and space for efi stuff.
395 *
396 * Allocate memory together for multiple data structures so
397 * that they all can go in single area/segment and we don't
398 * have to create separate segment for each. Keeps things
399 * little bit simple
400 */
401 efi_map_sz = efi_get_runtime_map_size();
402 efi_map_sz = ALIGN(efi_map_sz, 16);
403 params_cmdline_sz = sizeof(struct boot_params) + cmdline_len +
404 MAX_ELFCOREHDR_STR_LEN;
405 params_cmdline_sz = ALIGN(params_cmdline_sz, 16);
406 params_misc_sz = params_cmdline_sz + efi_map_sz +
407 sizeof(struct setup_data) +
408 sizeof(struct efi_setup_data);
409
410 params = kzalloc(params_misc_sz, GFP_KERNEL);
411 if (!params)
412 return ERR_PTR(-ENOMEM);
413 efi_map_offset = params_cmdline_sz;
414 efi_setup_data_offset = efi_map_offset + efi_map_sz;
415
416 /* Copy setup header onto bootparams. Documentation/x86/boot.txt */
417 setup_header_size = 0x0202 + kernel[0x0201] - setup_hdr_offset;
418
419 /* Is there a limit on setup header size? */
420 memcpy(¶ms->hdr, (kernel + setup_hdr_offset), setup_header_size);
421
422 ret = kexec_add_buffer(image, (char *)params, params_misc_sz,
423 params_misc_sz, 16, MIN_BOOTPARAM_ADDR,
424 ULONG_MAX, 1, &bootparam_load_addr);
425 if (ret)
426 goto out_free_params;
427 pr_debug("Loaded boot_param, command line and misc at 0x%lx bufsz=0x%lx memsz=0x%lx\n",
428 bootparam_load_addr, params_misc_sz, params_misc_sz);
429
430 /* Load kernel */
431 kernel_buf = kernel + kern16_size;
432 kernel_bufsz = kernel_len - kern16_size;
433 kernel_memsz = PAGE_ALIGN(header->init_size);
434 kernel_align = header->kernel_alignment;
435
436 ret = kexec_add_buffer(image, kernel_buf,
437 kernel_bufsz, kernel_memsz, kernel_align,
438 MIN_KERNEL_LOAD_ADDR, ULONG_MAX, 1,
439 &kernel_load_addr);
440 if (ret)
441 goto out_free_params;
442
443 pr_debug("Loaded 64bit kernel at 0x%lx bufsz=0x%lx memsz=0x%lx\n",
444 kernel_load_addr, kernel_memsz, kernel_memsz);
445
446 /* Load initrd high */
447 if (initrd) {
448 ret = kexec_add_buffer(image, initrd, initrd_len, initrd_len,
449 PAGE_SIZE, MIN_INITRD_LOAD_ADDR,
450 ULONG_MAX, 1, &initrd_load_addr);
451 if (ret)
452 goto out_free_params;
453
454 pr_debug("Loaded initrd at 0x%lx bufsz=0x%lx memsz=0x%lx\n",
455 initrd_load_addr, initrd_len, initrd_len);
456
457 setup_initrd(params, initrd_load_addr, initrd_len);
458 }
459
460 setup_cmdline(image, params, bootparam_load_addr,
461 sizeof(struct boot_params), cmdline, cmdline_len);
462
463 /* bootloader info. Do we need a separate ID for kexec kernel loader? */
464 params->hdr.type_of_loader = 0x0D << 4;
465 params->hdr.loadflags = 0;
466
467 /* Setup purgatory regs for entry */
468 ret = kexec_purgatory_get_set_symbol(image, "entry64_regs", ®s64,
469 sizeof(regs64), 1);
470 if (ret)
471 goto out_free_params;
472
473 regs64.rbx = 0; /* Bootstrap Processor */
474 regs64.rsi = bootparam_load_addr;
475 regs64.rip = kernel_load_addr + 0x200;
476 stack = kexec_purgatory_get_symbol_addr(image, "stack_end");
477 if (IS_ERR(stack)) {
478 pr_err("Could not find address of symbol stack_end\n");
479 ret = -EINVAL;
480 goto out_free_params;
481 }
482
483 regs64.rsp = (unsigned long)stack;
484 ret = kexec_purgatory_get_set_symbol(image, "entry64_regs", ®s64,
485 sizeof(regs64), 0);
486 if (ret)
487 goto out_free_params;
488
489 ret = setup_boot_parameters(image, params, bootparam_load_addr,
490 efi_map_offset, efi_map_sz,
491 efi_setup_data_offset);
492 if (ret)
493 goto out_free_params;
494
495 /* Allocate loader specific data */
496 ldata = kzalloc(sizeof(struct bzimage64_data), GFP_KERNEL);
497 if (!ldata) {
498 ret = -ENOMEM;
499 goto out_free_params;
500 }
501
502 /*
503 * Store pointer to params so that it could be freed after loading
504 * params segment has been loaded and contents have been copied
505 * somewhere else.
506 */
507 ldata->bootparams_buf = params;
508 return ldata;
509
510out_free_params:
511 kfree(params);
512 return ERR_PTR(ret);
513}
514
515/* This cleanup function is called after various segments have been loaded */
516static int bzImage64_cleanup(void *loader_data)
517{
518 struct bzimage64_data *ldata = loader_data;
519
520 if (!ldata)
521 return 0;
522
523 kfree(ldata->bootparams_buf);
524 ldata->bootparams_buf = NULL;
525
526 return 0;
527}
528
529#ifdef CONFIG_KEXEC_BZIMAGE_VERIFY_SIG
530static int bzImage64_verify_sig(const char *kernel, unsigned long kernel_len)
531{
532 bool trusted;
533 int ret;
534
535 ret = verify_pefile_signature(kernel, kernel_len,
536 system_trusted_keyring,
537 VERIFYING_KEXEC_PE_SIGNATURE,
538 &trusted);
539 if (ret < 0)
540 return ret;
541 if (!trusted)
542 return -EKEYREJECTED;
543 return 0;
544}
545#endif
546
547struct kexec_file_ops kexec_bzImage64_ops = {
548 .probe = bzImage64_probe,
549 .load = bzImage64_load,
550 .cleanup = bzImage64_cleanup,
551#ifdef CONFIG_KEXEC_BZIMAGE_VERIFY_SIG
552 .verify_sig = bzImage64_verify_sig,
553#endif
554};