Loading...
1// SPDX-License-Identifier: GPL-2.0-only
2#include <linux/export.h>
3#include <linux/kprobes.h>
4#include <linux/sched.h>
5#include <linux/sched/debug.h>
6#include <linux/stacktrace.h>
7
8#include <asm/sections.h>
9#include <asm/stacktrace.h>
10#include <asm/traps.h>
11
12#include "reboot.h"
13
14#if defined(CONFIG_FRAME_POINTER) && !defined(CONFIG_ARM_UNWIND)
15/*
16 * Unwind the current stack frame and store the new register values in the
17 * structure passed as argument. Unwinding is equivalent to a function return,
18 * hence the new PC value rather than LR should be used for backtrace.
19 *
20 * With framepointer enabled, a simple function prologue looks like this:
21 * mov ip, sp
22 * stmdb sp!, {fp, ip, lr, pc}
23 * sub fp, ip, #4
24 *
25 * A simple function epilogue looks like this:
26 * ldm sp, {fp, sp, pc}
27 *
28 * When compiled with clang, pc and sp are not pushed. A simple function
29 * prologue looks like this when built with clang:
30 *
31 * stmdb {..., fp, lr}
32 * add fp, sp, #x
33 * sub sp, sp, #y
34 *
35 * A simple function epilogue looks like this when built with clang:
36 *
37 * sub sp, fp, #x
38 * ldm {..., fp, pc}
39 *
40 *
41 * Note that with framepointer enabled, even the leaf functions have the same
42 * prologue and epilogue, therefore we can ignore the LR value in this case.
43 */
44
45extern unsigned long call_with_stack_end;
46
47static int frame_pointer_check(struct stackframe *frame)
48{
49 unsigned long high, low;
50 unsigned long fp = frame->fp;
51 unsigned long pc = frame->pc;
52
53 /*
54 * call_with_stack() is the only place we allow SP to jump from one
55 * stack to another, with FP and SP pointing to different stacks,
56 * skipping the FP boundary check at this point.
57 */
58 if (pc >= (unsigned long)&call_with_stack &&
59 pc < (unsigned long)&call_with_stack_end)
60 return 0;
61
62 /* only go to a higher address on the stack */
63 low = frame->sp;
64 high = ALIGN(low, THREAD_SIZE);
65
66 /* check current frame pointer is within bounds */
67#ifdef CONFIG_CC_IS_CLANG
68 if (fp < low + 4 || fp > high - 4)
69 return -EINVAL;
70#else
71 if (fp < low + 12 || fp > high - 4)
72 return -EINVAL;
73#endif
74
75 return 0;
76}
77
78int notrace unwind_frame(struct stackframe *frame)
79{
80 unsigned long fp = frame->fp;
81
82 if (frame_pointer_check(frame))
83 return -EINVAL;
84
85 /*
86 * When we unwind through an exception stack, include the saved PC
87 * value into the stack trace.
88 */
89 if (frame->ex_frame) {
90 struct pt_regs *regs = (struct pt_regs *)frame->sp;
91
92 /*
93 * We check that 'regs + sizeof(struct pt_regs)' (that is,
94 * ®s[1]) does not exceed the bottom of the stack to avoid
95 * accessing data outside the task's stack. This may happen
96 * when frame->ex_frame is a false positive.
97 */
98 if ((unsigned long)®s[1] > ALIGN(frame->sp, THREAD_SIZE))
99 return -EINVAL;
100
101 frame->pc = regs->ARM_pc;
102 frame->ex_frame = false;
103 return 0;
104 }
105
106 /* restore the registers from the stack frame */
107#ifdef CONFIG_CC_IS_CLANG
108 frame->sp = frame->fp;
109 frame->fp = READ_ONCE_NOCHECK(*(unsigned long *)(fp));
110 frame->pc = READ_ONCE_NOCHECK(*(unsigned long *)(fp + 4));
111#else
112 frame->fp = READ_ONCE_NOCHECK(*(unsigned long *)(fp - 12));
113 frame->sp = READ_ONCE_NOCHECK(*(unsigned long *)(fp - 8));
114 frame->pc = READ_ONCE_NOCHECK(*(unsigned long *)(fp - 4));
115#endif
116#ifdef CONFIG_KRETPROBES
117 if (is_kretprobe_trampoline(frame->pc))
118 frame->pc = kretprobe_find_ret_addr(frame->tsk,
119 (void *)frame->fp, &frame->kr_cur);
120#endif
121
122 if (in_entry_text(frame->pc))
123 frame->ex_frame = true;
124
125 return 0;
126}
127#endif
128
129void notrace walk_stackframe(struct stackframe *frame,
130 bool (*fn)(void *, unsigned long), void *data)
131{
132 while (1) {
133 int ret;
134
135 if (!fn(data, frame->pc))
136 break;
137 ret = unwind_frame(frame);
138 if (ret < 0)
139 break;
140 }
141}
142EXPORT_SYMBOL(walk_stackframe);
143
144#ifdef CONFIG_STACKTRACE
145static void start_stack_trace(struct stackframe *frame, struct task_struct *task,
146 unsigned long fp, unsigned long sp,
147 unsigned long lr, unsigned long pc)
148{
149 frame->fp = fp;
150 frame->sp = sp;
151 frame->lr = lr;
152 frame->pc = pc;
153#ifdef CONFIG_KRETPROBES
154 frame->kr_cur = NULL;
155 frame->tsk = task;
156#endif
157#ifdef CONFIG_UNWINDER_FRAME_POINTER
158 frame->ex_frame = in_entry_text(frame->pc);
159#endif
160}
161
162void arch_stack_walk(stack_trace_consume_fn consume_entry, void *cookie,
163 struct task_struct *task, struct pt_regs *regs)
164{
165 struct stackframe frame;
166
167 if (regs) {
168 start_stack_trace(&frame, NULL, regs->ARM_fp, regs->ARM_sp,
169 regs->ARM_lr, regs->ARM_pc);
170 } else if (task != current) {
171#ifdef CONFIG_SMP
172 /*
173 * What guarantees do we have here that 'tsk' is not
174 * running on another CPU? For now, ignore it as we
175 * can't guarantee we won't explode.
176 */
177 return;
178#else
179 start_stack_trace(&frame, task, thread_saved_fp(task),
180 thread_saved_sp(task), 0,
181 thread_saved_pc(task));
182#endif
183 } else {
184here:
185 start_stack_trace(&frame, task,
186 (unsigned long)__builtin_frame_address(0),
187 current_stack_pointer,
188 (unsigned long)__builtin_return_address(0),
189 (unsigned long)&&here);
190 /* skip this function */
191 if (unwind_frame(&frame))
192 return;
193 }
194
195 walk_stackframe(&frame, consume_entry, cookie);
196}
197#endif
1#include <linux/export.h>
2#include <linux/sched.h>
3#include <linux/sched/debug.h>
4#include <linux/stacktrace.h>
5
6#include <asm/sections.h>
7#include <asm/stacktrace.h>
8#include <asm/traps.h>
9
10#if defined(CONFIG_FRAME_POINTER) && !defined(CONFIG_ARM_UNWIND)
11/*
12 * Unwind the current stack frame and store the new register values in the
13 * structure passed as argument. Unwinding is equivalent to a function return,
14 * hence the new PC value rather than LR should be used for backtrace.
15 *
16 * With framepointer enabled, a simple function prologue looks like this:
17 * mov ip, sp
18 * stmdb sp!, {fp, ip, lr, pc}
19 * sub fp, ip, #4
20 *
21 * A simple function epilogue looks like this:
22 * ldm sp, {fp, sp, pc}
23 *
24 * Note that with framepointer enabled, even the leaf functions have the same
25 * prologue and epilogue, therefore we can ignore the LR value in this case.
26 */
27int notrace unwind_frame(struct stackframe *frame)
28{
29 unsigned long high, low;
30 unsigned long fp = frame->fp;
31
32 /* only go to a higher address on the stack */
33 low = frame->sp;
34 high = ALIGN(low, THREAD_SIZE);
35
36 /* check current frame pointer is within bounds */
37 if (fp < low + 12 || fp > high - 4)
38 return -EINVAL;
39
40 /* restore the registers from the stack frame */
41 frame->fp = *(unsigned long *)(fp - 12);
42 frame->sp = *(unsigned long *)(fp - 8);
43 frame->pc = *(unsigned long *)(fp - 4);
44
45 return 0;
46}
47#endif
48
49void notrace walk_stackframe(struct stackframe *frame,
50 int (*fn)(struct stackframe *, void *), void *data)
51{
52 while (1) {
53 int ret;
54
55 if (fn(frame, data))
56 break;
57 ret = unwind_frame(frame);
58 if (ret < 0)
59 break;
60 }
61}
62EXPORT_SYMBOL(walk_stackframe);
63
64#ifdef CONFIG_STACKTRACE
65struct stack_trace_data {
66 struct stack_trace *trace;
67 unsigned int no_sched_functions;
68 unsigned int skip;
69};
70
71static int save_trace(struct stackframe *frame, void *d)
72{
73 struct stack_trace_data *data = d;
74 struct stack_trace *trace = data->trace;
75 struct pt_regs *regs;
76 unsigned long addr = frame->pc;
77
78 if (data->no_sched_functions && in_sched_functions(addr))
79 return 0;
80 if (data->skip) {
81 data->skip--;
82 return 0;
83 }
84
85 trace->entries[trace->nr_entries++] = addr;
86
87 if (trace->nr_entries >= trace->max_entries)
88 return 1;
89
90 if (!in_entry_text(frame->pc))
91 return 0;
92
93 regs = (struct pt_regs *)frame->sp;
94
95 trace->entries[trace->nr_entries++] = regs->ARM_pc;
96
97 return trace->nr_entries >= trace->max_entries;
98}
99
100/* This must be noinline to so that our skip calculation works correctly */
101static noinline void __save_stack_trace(struct task_struct *tsk,
102 struct stack_trace *trace, unsigned int nosched)
103{
104 struct stack_trace_data data;
105 struct stackframe frame;
106
107 data.trace = trace;
108 data.skip = trace->skip;
109 data.no_sched_functions = nosched;
110
111 if (tsk != current) {
112#ifdef CONFIG_SMP
113 /*
114 * What guarantees do we have here that 'tsk' is not
115 * running on another CPU? For now, ignore it as we
116 * can't guarantee we won't explode.
117 */
118 if (trace->nr_entries < trace->max_entries)
119 trace->entries[trace->nr_entries++] = ULONG_MAX;
120 return;
121#else
122 frame.fp = thread_saved_fp(tsk);
123 frame.sp = thread_saved_sp(tsk);
124 frame.lr = 0; /* recovered from the stack */
125 frame.pc = thread_saved_pc(tsk);
126#endif
127 } else {
128 /* We don't want this function nor the caller */
129 data.skip += 2;
130 frame.fp = (unsigned long)__builtin_frame_address(0);
131 frame.sp = current_stack_pointer;
132 frame.lr = (unsigned long)__builtin_return_address(0);
133 frame.pc = (unsigned long)__save_stack_trace;
134 }
135
136 walk_stackframe(&frame, save_trace, &data);
137 if (trace->nr_entries < trace->max_entries)
138 trace->entries[trace->nr_entries++] = ULONG_MAX;
139}
140
141void save_stack_trace_regs(struct pt_regs *regs, struct stack_trace *trace)
142{
143 struct stack_trace_data data;
144 struct stackframe frame;
145
146 data.trace = trace;
147 data.skip = trace->skip;
148 data.no_sched_functions = 0;
149
150 frame.fp = regs->ARM_fp;
151 frame.sp = regs->ARM_sp;
152 frame.lr = regs->ARM_lr;
153 frame.pc = regs->ARM_pc;
154
155 walk_stackframe(&frame, save_trace, &data);
156 if (trace->nr_entries < trace->max_entries)
157 trace->entries[trace->nr_entries++] = ULONG_MAX;
158}
159
160void save_stack_trace_tsk(struct task_struct *tsk, struct stack_trace *trace)
161{
162 __save_stack_trace(tsk, trace, 1);
163}
164EXPORT_SYMBOL(save_stack_trace_tsk);
165
166void save_stack_trace(struct stack_trace *trace)
167{
168 __save_stack_trace(current, trace, 0);
169}
170EXPORT_SYMBOL_GPL(save_stack_trace);
171#endif