Loading...
1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * xsave/xrstor support.
4 *
5 * Author: Suresh Siddha <suresh.b.siddha@intel.com>
6 */
7#include <linux/bitops.h>
8#include <linux/compat.h>
9#include <linux/cpu.h>
10#include <linux/mman.h>
11#include <linux/nospec.h>
12#include <linux/pkeys.h>
13#include <linux/seq_file.h>
14#include <linux/proc_fs.h>
15#include <linux/vmalloc.h>
16
17#include <asm/fpu/api.h>
18#include <asm/fpu/regset.h>
19#include <asm/fpu/signal.h>
20#include <asm/fpu/xcr.h>
21
22#include <asm/tlbflush.h>
23#include <asm/prctl.h>
24#include <asm/elf.h>
25
26#include "context.h"
27#include "internal.h"
28#include "legacy.h"
29#include "xstate.h"
30
31#define for_each_extended_xfeature(bit, mask) \
32 (bit) = FIRST_EXTENDED_XFEATURE; \
33 for_each_set_bit_from(bit, (unsigned long *)&(mask), 8 * sizeof(mask))
34
35/*
36 * Although we spell it out in here, the Processor Trace
37 * xfeature is completely unused. We use other mechanisms
38 * to save/restore PT state in Linux.
39 */
40static const char *xfeature_names[] =
41{
42 "x87 floating point registers" ,
43 "SSE registers" ,
44 "AVX registers" ,
45 "MPX bounds registers" ,
46 "MPX CSR" ,
47 "AVX-512 opmask" ,
48 "AVX-512 Hi256" ,
49 "AVX-512 ZMM_Hi256" ,
50 "Processor Trace (unused)" ,
51 "Protection Keys User registers",
52 "PASID state",
53 "unknown xstate feature" ,
54 "unknown xstate feature" ,
55 "unknown xstate feature" ,
56 "unknown xstate feature" ,
57 "unknown xstate feature" ,
58 "unknown xstate feature" ,
59 "AMX Tile config" ,
60 "AMX Tile data" ,
61 "unknown xstate feature" ,
62};
63
64static unsigned short xsave_cpuid_features[] __initdata = {
65 [XFEATURE_FP] = X86_FEATURE_FPU,
66 [XFEATURE_SSE] = X86_FEATURE_XMM,
67 [XFEATURE_YMM] = X86_FEATURE_AVX,
68 [XFEATURE_BNDREGS] = X86_FEATURE_MPX,
69 [XFEATURE_BNDCSR] = X86_FEATURE_MPX,
70 [XFEATURE_OPMASK] = X86_FEATURE_AVX512F,
71 [XFEATURE_ZMM_Hi256] = X86_FEATURE_AVX512F,
72 [XFEATURE_Hi16_ZMM] = X86_FEATURE_AVX512F,
73 [XFEATURE_PT_UNIMPLEMENTED_SO_FAR] = X86_FEATURE_INTEL_PT,
74 [XFEATURE_PKRU] = X86_FEATURE_PKU,
75 [XFEATURE_PASID] = X86_FEATURE_ENQCMD,
76 [XFEATURE_XTILE_CFG] = X86_FEATURE_AMX_TILE,
77 [XFEATURE_XTILE_DATA] = X86_FEATURE_AMX_TILE,
78};
79
80static unsigned int xstate_offsets[XFEATURE_MAX] __ro_after_init =
81 { [ 0 ... XFEATURE_MAX - 1] = -1};
82static unsigned int xstate_sizes[XFEATURE_MAX] __ro_after_init =
83 { [ 0 ... XFEATURE_MAX - 1] = -1};
84static unsigned int xstate_flags[XFEATURE_MAX] __ro_after_init;
85
86#define XSTATE_FLAG_SUPERVISOR BIT(0)
87#define XSTATE_FLAG_ALIGNED64 BIT(1)
88
89/*
90 * Return whether the system supports a given xfeature.
91 *
92 * Also return the name of the (most advanced) feature that the caller requested:
93 */
94int cpu_has_xfeatures(u64 xfeatures_needed, const char **feature_name)
95{
96 u64 xfeatures_missing = xfeatures_needed & ~fpu_kernel_cfg.max_features;
97
98 if (unlikely(feature_name)) {
99 long xfeature_idx, max_idx;
100 u64 xfeatures_print;
101 /*
102 * So we use FLS here to be able to print the most advanced
103 * feature that was requested but is missing. So if a driver
104 * asks about "XFEATURE_MASK_SSE | XFEATURE_MASK_YMM" we'll print the
105 * missing AVX feature - this is the most informative message
106 * to users:
107 */
108 if (xfeatures_missing)
109 xfeatures_print = xfeatures_missing;
110 else
111 xfeatures_print = xfeatures_needed;
112
113 xfeature_idx = fls64(xfeatures_print)-1;
114 max_idx = ARRAY_SIZE(xfeature_names)-1;
115 xfeature_idx = min(xfeature_idx, max_idx);
116
117 *feature_name = xfeature_names[xfeature_idx];
118 }
119
120 if (xfeatures_missing)
121 return 0;
122
123 return 1;
124}
125EXPORT_SYMBOL_GPL(cpu_has_xfeatures);
126
127static bool xfeature_is_aligned64(int xfeature_nr)
128{
129 return xstate_flags[xfeature_nr] & XSTATE_FLAG_ALIGNED64;
130}
131
132static bool xfeature_is_supervisor(int xfeature_nr)
133{
134 return xstate_flags[xfeature_nr] & XSTATE_FLAG_SUPERVISOR;
135}
136
137static unsigned int xfeature_get_offset(u64 xcomp_bv, int xfeature)
138{
139 unsigned int offs, i;
140
141 /*
142 * Non-compacted format and legacy features use the cached fixed
143 * offsets.
144 */
145 if (!cpu_feature_enabled(X86_FEATURE_XCOMPACTED) ||
146 xfeature <= XFEATURE_SSE)
147 return xstate_offsets[xfeature];
148
149 /*
150 * Compacted format offsets depend on the actual content of the
151 * compacted xsave area which is determined by the xcomp_bv header
152 * field.
153 */
154 offs = FXSAVE_SIZE + XSAVE_HDR_SIZE;
155 for_each_extended_xfeature(i, xcomp_bv) {
156 if (xfeature_is_aligned64(i))
157 offs = ALIGN(offs, 64);
158 if (i == xfeature)
159 break;
160 offs += xstate_sizes[i];
161 }
162 return offs;
163}
164
165/*
166 * Enable the extended processor state save/restore feature.
167 * Called once per CPU onlining.
168 */
169void fpu__init_cpu_xstate(void)
170{
171 if (!boot_cpu_has(X86_FEATURE_XSAVE) || !fpu_kernel_cfg.max_features)
172 return;
173
174 cr4_set_bits(X86_CR4_OSXSAVE);
175
176 /*
177 * Must happen after CR4 setup and before xsetbv() to allow KVM
178 * lazy passthrough. Write independent of the dynamic state static
179 * key as that does not work on the boot CPU. This also ensures
180 * that any stale state is wiped out from XFD.
181 */
182 if (cpu_feature_enabled(X86_FEATURE_XFD))
183 wrmsrl(MSR_IA32_XFD, init_fpstate.xfd);
184
185 /*
186 * XCR_XFEATURE_ENABLED_MASK (aka. XCR0) sets user features
187 * managed by XSAVE{C, OPT, S} and XRSTOR{S}. Only XSAVE user
188 * states can be set here.
189 */
190 xsetbv(XCR_XFEATURE_ENABLED_MASK, fpu_user_cfg.max_features);
191
192 /*
193 * MSR_IA32_XSS sets supervisor states managed by XSAVES.
194 */
195 if (boot_cpu_has(X86_FEATURE_XSAVES)) {
196 wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor() |
197 xfeatures_mask_independent());
198 }
199}
200
201static bool xfeature_enabled(enum xfeature xfeature)
202{
203 return fpu_kernel_cfg.max_features & BIT_ULL(xfeature);
204}
205
206/*
207 * Record the offsets and sizes of various xstates contained
208 * in the XSAVE state memory layout.
209 */
210static void __init setup_xstate_cache(void)
211{
212 u32 eax, ebx, ecx, edx, i;
213 /* start at the beginning of the "extended state" */
214 unsigned int last_good_offset = offsetof(struct xregs_state,
215 extended_state_area);
216 /*
217 * The FP xstates and SSE xstates are legacy states. They are always
218 * in the fixed offsets in the xsave area in either compacted form
219 * or standard form.
220 */
221 xstate_offsets[XFEATURE_FP] = 0;
222 xstate_sizes[XFEATURE_FP] = offsetof(struct fxregs_state,
223 xmm_space);
224
225 xstate_offsets[XFEATURE_SSE] = xstate_sizes[XFEATURE_FP];
226 xstate_sizes[XFEATURE_SSE] = sizeof_field(struct fxregs_state,
227 xmm_space);
228
229 for_each_extended_xfeature(i, fpu_kernel_cfg.max_features) {
230 cpuid_count(XSTATE_CPUID, i, &eax, &ebx, &ecx, &edx);
231
232 xstate_sizes[i] = eax;
233 xstate_flags[i] = ecx;
234
235 /*
236 * If an xfeature is supervisor state, the offset in EBX is
237 * invalid, leave it to -1.
238 */
239 if (xfeature_is_supervisor(i))
240 continue;
241
242 xstate_offsets[i] = ebx;
243
244 /*
245 * In our xstate size checks, we assume that the highest-numbered
246 * xstate feature has the highest offset in the buffer. Ensure
247 * it does.
248 */
249 WARN_ONCE(last_good_offset > xstate_offsets[i],
250 "x86/fpu: misordered xstate at %d\n", last_good_offset);
251
252 last_good_offset = xstate_offsets[i];
253 }
254}
255
256static void __init print_xstate_feature(u64 xstate_mask)
257{
258 const char *feature_name;
259
260 if (cpu_has_xfeatures(xstate_mask, &feature_name))
261 pr_info("x86/fpu: Supporting XSAVE feature 0x%03Lx: '%s'\n", xstate_mask, feature_name);
262}
263
264/*
265 * Print out all the supported xstate features:
266 */
267static void __init print_xstate_features(void)
268{
269 print_xstate_feature(XFEATURE_MASK_FP);
270 print_xstate_feature(XFEATURE_MASK_SSE);
271 print_xstate_feature(XFEATURE_MASK_YMM);
272 print_xstate_feature(XFEATURE_MASK_BNDREGS);
273 print_xstate_feature(XFEATURE_MASK_BNDCSR);
274 print_xstate_feature(XFEATURE_MASK_OPMASK);
275 print_xstate_feature(XFEATURE_MASK_ZMM_Hi256);
276 print_xstate_feature(XFEATURE_MASK_Hi16_ZMM);
277 print_xstate_feature(XFEATURE_MASK_PKRU);
278 print_xstate_feature(XFEATURE_MASK_PASID);
279 print_xstate_feature(XFEATURE_MASK_XTILE_CFG);
280 print_xstate_feature(XFEATURE_MASK_XTILE_DATA);
281}
282
283/*
284 * This check is important because it is easy to get XSTATE_*
285 * confused with XSTATE_BIT_*.
286 */
287#define CHECK_XFEATURE(nr) do { \
288 WARN_ON(nr < FIRST_EXTENDED_XFEATURE); \
289 WARN_ON(nr >= XFEATURE_MAX); \
290} while (0)
291
292/*
293 * Print out xstate component offsets and sizes
294 */
295static void __init print_xstate_offset_size(void)
296{
297 int i;
298
299 for_each_extended_xfeature(i, fpu_kernel_cfg.max_features) {
300 pr_info("x86/fpu: xstate_offset[%d]: %4d, xstate_sizes[%d]: %4d\n",
301 i, xfeature_get_offset(fpu_kernel_cfg.max_features, i),
302 i, xstate_sizes[i]);
303 }
304}
305
306/*
307 * This function is called only during boot time when x86 caps are not set
308 * up and alternative can not be used yet.
309 */
310static __init void os_xrstor_booting(struct xregs_state *xstate)
311{
312 u64 mask = fpu_kernel_cfg.max_features & XFEATURE_MASK_FPSTATE;
313 u32 lmask = mask;
314 u32 hmask = mask >> 32;
315 int err;
316
317 if (cpu_feature_enabled(X86_FEATURE_XSAVES))
318 XSTATE_OP(XRSTORS, xstate, lmask, hmask, err);
319 else
320 XSTATE_OP(XRSTOR, xstate, lmask, hmask, err);
321
322 /*
323 * We should never fault when copying from a kernel buffer, and the FPU
324 * state we set at boot time should be valid.
325 */
326 WARN_ON_FPU(err);
327}
328
329/*
330 * All supported features have either init state all zeros or are
331 * handled in setup_init_fpu() individually. This is an explicit
332 * feature list and does not use XFEATURE_MASK*SUPPORTED to catch
333 * newly added supported features at build time and make people
334 * actually look at the init state for the new feature.
335 */
336#define XFEATURES_INIT_FPSTATE_HANDLED \
337 (XFEATURE_MASK_FP | \
338 XFEATURE_MASK_SSE | \
339 XFEATURE_MASK_YMM | \
340 XFEATURE_MASK_OPMASK | \
341 XFEATURE_MASK_ZMM_Hi256 | \
342 XFEATURE_MASK_Hi16_ZMM | \
343 XFEATURE_MASK_PKRU | \
344 XFEATURE_MASK_BNDREGS | \
345 XFEATURE_MASK_BNDCSR | \
346 XFEATURE_MASK_PASID | \
347 XFEATURE_MASK_XTILE)
348
349/*
350 * setup the xstate image representing the init state
351 */
352static void __init setup_init_fpu_buf(void)
353{
354 BUILD_BUG_ON((XFEATURE_MASK_USER_SUPPORTED |
355 XFEATURE_MASK_SUPERVISOR_SUPPORTED) !=
356 XFEATURES_INIT_FPSTATE_HANDLED);
357
358 if (!boot_cpu_has(X86_FEATURE_XSAVE))
359 return;
360
361 print_xstate_features();
362
363 xstate_init_xcomp_bv(&init_fpstate.regs.xsave, init_fpstate.xfeatures);
364
365 /*
366 * Init all the features state with header.xfeatures being 0x0
367 */
368 os_xrstor_booting(&init_fpstate.regs.xsave);
369
370 /*
371 * All components are now in init state. Read the state back so
372 * that init_fpstate contains all non-zero init state. This only
373 * works with XSAVE, but not with XSAVEOPT and XSAVEC/S because
374 * those use the init optimization which skips writing data for
375 * components in init state.
376 *
377 * XSAVE could be used, but that would require to reshuffle the
378 * data when XSAVEC/S is available because XSAVEC/S uses xstate
379 * compaction. But doing so is a pointless exercise because most
380 * components have an all zeros init state except for the legacy
381 * ones (FP and SSE). Those can be saved with FXSAVE into the
382 * legacy area. Adding new features requires to ensure that init
383 * state is all zeroes or if not to add the necessary handling
384 * here.
385 */
386 fxsave(&init_fpstate.regs.fxsave);
387}
388
389int xfeature_size(int xfeature_nr)
390{
391 u32 eax, ebx, ecx, edx;
392
393 CHECK_XFEATURE(xfeature_nr);
394 cpuid_count(XSTATE_CPUID, xfeature_nr, &eax, &ebx, &ecx, &edx);
395 return eax;
396}
397
398/* Validate an xstate header supplied by userspace (ptrace or sigreturn) */
399static int validate_user_xstate_header(const struct xstate_header *hdr,
400 struct fpstate *fpstate)
401{
402 /* No unknown or supervisor features may be set */
403 if (hdr->xfeatures & ~fpstate->user_xfeatures)
404 return -EINVAL;
405
406 /* Userspace must use the uncompacted format */
407 if (hdr->xcomp_bv)
408 return -EINVAL;
409
410 /*
411 * If 'reserved' is shrunken to add a new field, make sure to validate
412 * that new field here!
413 */
414 BUILD_BUG_ON(sizeof(hdr->reserved) != 48);
415
416 /* No reserved bits may be set */
417 if (memchr_inv(hdr->reserved, 0, sizeof(hdr->reserved)))
418 return -EINVAL;
419
420 return 0;
421}
422
423static void __init __xstate_dump_leaves(void)
424{
425 int i;
426 u32 eax, ebx, ecx, edx;
427 static int should_dump = 1;
428
429 if (!should_dump)
430 return;
431 should_dump = 0;
432 /*
433 * Dump out a few leaves past the ones that we support
434 * just in case there are some goodies up there
435 */
436 for (i = 0; i < XFEATURE_MAX + 10; i++) {
437 cpuid_count(XSTATE_CPUID, i, &eax, &ebx, &ecx, &edx);
438 pr_warn("CPUID[%02x, %02x]: eax=%08x ebx=%08x ecx=%08x edx=%08x\n",
439 XSTATE_CPUID, i, eax, ebx, ecx, edx);
440 }
441}
442
443#define XSTATE_WARN_ON(x, fmt, ...) do { \
444 if (WARN_ONCE(x, "XSAVE consistency problem: " fmt, ##__VA_ARGS__)) { \
445 __xstate_dump_leaves(); \
446 } \
447} while (0)
448
449#define XCHECK_SZ(sz, nr, nr_macro, __struct) do { \
450 if ((nr == nr_macro) && \
451 WARN_ONCE(sz != sizeof(__struct), \
452 "%s: struct is %zu bytes, cpu state %d bytes\n", \
453 __stringify(nr_macro), sizeof(__struct), sz)) { \
454 __xstate_dump_leaves(); \
455 } \
456} while (0)
457
458/**
459 * check_xtile_data_against_struct - Check tile data state size.
460 *
461 * Calculate the state size by multiplying the single tile size which is
462 * recorded in a C struct, and the number of tiles that the CPU informs.
463 * Compare the provided size with the calculation.
464 *
465 * @size: The tile data state size
466 *
467 * Returns: 0 on success, -EINVAL on mismatch.
468 */
469static int __init check_xtile_data_against_struct(int size)
470{
471 u32 max_palid, palid, state_size;
472 u32 eax, ebx, ecx, edx;
473 u16 max_tile;
474
475 /*
476 * Check the maximum palette id:
477 * eax: the highest numbered palette subleaf.
478 */
479 cpuid_count(TILE_CPUID, 0, &max_palid, &ebx, &ecx, &edx);
480
481 /*
482 * Cross-check each tile size and find the maximum number of
483 * supported tiles.
484 */
485 for (palid = 1, max_tile = 0; palid <= max_palid; palid++) {
486 u16 tile_size, max;
487
488 /*
489 * Check the tile size info:
490 * eax[31:16]: bytes per title
491 * ebx[31:16]: the max names (or max number of tiles)
492 */
493 cpuid_count(TILE_CPUID, palid, &eax, &ebx, &edx, &edx);
494 tile_size = eax >> 16;
495 max = ebx >> 16;
496
497 if (tile_size != sizeof(struct xtile_data)) {
498 pr_err("%s: struct is %zu bytes, cpu xtile %d bytes\n",
499 __stringify(XFEATURE_XTILE_DATA),
500 sizeof(struct xtile_data), tile_size);
501 __xstate_dump_leaves();
502 return -EINVAL;
503 }
504
505 if (max > max_tile)
506 max_tile = max;
507 }
508
509 state_size = sizeof(struct xtile_data) * max_tile;
510 if (size != state_size) {
511 pr_err("%s: calculated size is %u bytes, cpu state %d bytes\n",
512 __stringify(XFEATURE_XTILE_DATA), state_size, size);
513 __xstate_dump_leaves();
514 return -EINVAL;
515 }
516 return 0;
517}
518
519/*
520 * We have a C struct for each 'xstate'. We need to ensure
521 * that our software representation matches what the CPU
522 * tells us about the state's size.
523 */
524static bool __init check_xstate_against_struct(int nr)
525{
526 /*
527 * Ask the CPU for the size of the state.
528 */
529 int sz = xfeature_size(nr);
530 /*
531 * Match each CPU state with the corresponding software
532 * structure.
533 */
534 XCHECK_SZ(sz, nr, XFEATURE_YMM, struct ymmh_struct);
535 XCHECK_SZ(sz, nr, XFEATURE_BNDREGS, struct mpx_bndreg_state);
536 XCHECK_SZ(sz, nr, XFEATURE_BNDCSR, struct mpx_bndcsr_state);
537 XCHECK_SZ(sz, nr, XFEATURE_OPMASK, struct avx_512_opmask_state);
538 XCHECK_SZ(sz, nr, XFEATURE_ZMM_Hi256, struct avx_512_zmm_uppers_state);
539 XCHECK_SZ(sz, nr, XFEATURE_Hi16_ZMM, struct avx_512_hi16_state);
540 XCHECK_SZ(sz, nr, XFEATURE_PKRU, struct pkru_state);
541 XCHECK_SZ(sz, nr, XFEATURE_PASID, struct ia32_pasid_state);
542 XCHECK_SZ(sz, nr, XFEATURE_XTILE_CFG, struct xtile_cfg);
543
544 /* The tile data size varies between implementations. */
545 if (nr == XFEATURE_XTILE_DATA)
546 check_xtile_data_against_struct(sz);
547
548 /*
549 * Make *SURE* to add any feature numbers in below if
550 * there are "holes" in the xsave state component
551 * numbers.
552 */
553 if ((nr < XFEATURE_YMM) ||
554 (nr >= XFEATURE_MAX) ||
555 (nr == XFEATURE_PT_UNIMPLEMENTED_SO_FAR) ||
556 ((nr >= XFEATURE_RSRVD_COMP_11) && (nr <= XFEATURE_RSRVD_COMP_16))) {
557 XSTATE_WARN_ON(1, "No structure for xstate: %d\n", nr);
558 return false;
559 }
560 return true;
561}
562
563static unsigned int xstate_calculate_size(u64 xfeatures, bool compacted)
564{
565 unsigned int topmost = fls64(xfeatures) - 1;
566 unsigned int offset = xstate_offsets[topmost];
567
568 if (topmost <= XFEATURE_SSE)
569 return sizeof(struct xregs_state);
570
571 if (compacted)
572 offset = xfeature_get_offset(xfeatures, topmost);
573 return offset + xstate_sizes[topmost];
574}
575
576/*
577 * This essentially double-checks what the cpu told us about
578 * how large the XSAVE buffer needs to be. We are recalculating
579 * it to be safe.
580 *
581 * Independent XSAVE features allocate their own buffers and are not
582 * covered by these checks. Only the size of the buffer for task->fpu
583 * is checked here.
584 */
585static bool __init paranoid_xstate_size_valid(unsigned int kernel_size)
586{
587 bool compacted = cpu_feature_enabled(X86_FEATURE_XCOMPACTED);
588 bool xsaves = cpu_feature_enabled(X86_FEATURE_XSAVES);
589 unsigned int size = FXSAVE_SIZE + XSAVE_HDR_SIZE;
590 int i;
591
592 for_each_extended_xfeature(i, fpu_kernel_cfg.max_features) {
593 if (!check_xstate_against_struct(i))
594 return false;
595 /*
596 * Supervisor state components can be managed only by
597 * XSAVES.
598 */
599 if (!xsaves && xfeature_is_supervisor(i)) {
600 XSTATE_WARN_ON(1, "Got supervisor feature %d, but XSAVES not advertised\n", i);
601 return false;
602 }
603 }
604 size = xstate_calculate_size(fpu_kernel_cfg.max_features, compacted);
605 XSTATE_WARN_ON(size != kernel_size,
606 "size %u != kernel_size %u\n", size, kernel_size);
607 return size == kernel_size;
608}
609
610/*
611 * Get total size of enabled xstates in XCR0 | IA32_XSS.
612 *
613 * Note the SDM's wording here. "sub-function 0" only enumerates
614 * the size of the *user* states. If we use it to size a buffer
615 * that we use 'XSAVES' on, we could potentially overflow the
616 * buffer because 'XSAVES' saves system states too.
617 *
618 * This also takes compaction into account. So this works for
619 * XSAVEC as well.
620 */
621static unsigned int __init get_compacted_size(void)
622{
623 unsigned int eax, ebx, ecx, edx;
624 /*
625 * - CPUID function 0DH, sub-function 1:
626 * EBX enumerates the size (in bytes) required by
627 * the XSAVES instruction for an XSAVE area
628 * containing all the state components
629 * corresponding to bits currently set in
630 * XCR0 | IA32_XSS.
631 *
632 * When XSAVES is not available but XSAVEC is (virt), then there
633 * are no supervisor states, but XSAVEC still uses compacted
634 * format.
635 */
636 cpuid_count(XSTATE_CPUID, 1, &eax, &ebx, &ecx, &edx);
637 return ebx;
638}
639
640/*
641 * Get the total size of the enabled xstates without the independent supervisor
642 * features.
643 */
644static unsigned int __init get_xsave_compacted_size(void)
645{
646 u64 mask = xfeatures_mask_independent();
647 unsigned int size;
648
649 if (!mask)
650 return get_compacted_size();
651
652 /* Disable independent features. */
653 wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor());
654
655 /*
656 * Ask the hardware what size is required of the buffer.
657 * This is the size required for the task->fpu buffer.
658 */
659 size = get_compacted_size();
660
661 /* Re-enable independent features so XSAVES will work on them again. */
662 wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor() | mask);
663
664 return size;
665}
666
667static unsigned int __init get_xsave_size_user(void)
668{
669 unsigned int eax, ebx, ecx, edx;
670 /*
671 * - CPUID function 0DH, sub-function 0:
672 * EBX enumerates the size (in bytes) required by
673 * the XSAVE instruction for an XSAVE area
674 * containing all the *user* state components
675 * corresponding to bits currently set in XCR0.
676 */
677 cpuid_count(XSTATE_CPUID, 0, &eax, &ebx, &ecx, &edx);
678 return ebx;
679}
680
681static int __init init_xstate_size(void)
682{
683 /* Recompute the context size for enabled features: */
684 unsigned int user_size, kernel_size, kernel_default_size;
685 bool compacted = cpu_feature_enabled(X86_FEATURE_XCOMPACTED);
686
687 /* Uncompacted user space size */
688 user_size = get_xsave_size_user();
689
690 /*
691 * XSAVES kernel size includes supervisor states and uses compacted
692 * format. XSAVEC uses compacted format, but does not save
693 * supervisor states.
694 *
695 * XSAVE[OPT] do not support supervisor states so kernel and user
696 * size is identical.
697 */
698 if (compacted)
699 kernel_size = get_xsave_compacted_size();
700 else
701 kernel_size = user_size;
702
703 kernel_default_size =
704 xstate_calculate_size(fpu_kernel_cfg.default_features, compacted);
705
706 if (!paranoid_xstate_size_valid(kernel_size))
707 return -EINVAL;
708
709 fpu_kernel_cfg.max_size = kernel_size;
710 fpu_user_cfg.max_size = user_size;
711
712 fpu_kernel_cfg.default_size = kernel_default_size;
713 fpu_user_cfg.default_size =
714 xstate_calculate_size(fpu_user_cfg.default_features, false);
715
716 return 0;
717}
718
719/*
720 * We enabled the XSAVE hardware, but something went wrong and
721 * we can not use it. Disable it.
722 */
723static void __init fpu__init_disable_system_xstate(unsigned int legacy_size)
724{
725 fpu_kernel_cfg.max_features = 0;
726 cr4_clear_bits(X86_CR4_OSXSAVE);
727 setup_clear_cpu_cap(X86_FEATURE_XSAVE);
728
729 /* Restore the legacy size.*/
730 fpu_kernel_cfg.max_size = legacy_size;
731 fpu_kernel_cfg.default_size = legacy_size;
732 fpu_user_cfg.max_size = legacy_size;
733 fpu_user_cfg.default_size = legacy_size;
734
735 /*
736 * Prevent enabling the static branch which enables writes to the
737 * XFD MSR.
738 */
739 init_fpstate.xfd = 0;
740
741 fpstate_reset(¤t->thread.fpu);
742}
743
744/*
745 * Enable and initialize the xsave feature.
746 * Called once per system bootup.
747 */
748void __init fpu__init_system_xstate(unsigned int legacy_size)
749{
750 unsigned int eax, ebx, ecx, edx;
751 u64 xfeatures;
752 int err;
753 int i;
754
755 if (!boot_cpu_has(X86_FEATURE_FPU)) {
756 pr_info("x86/fpu: No FPU detected\n");
757 return;
758 }
759
760 if (!boot_cpu_has(X86_FEATURE_XSAVE)) {
761 pr_info("x86/fpu: x87 FPU will use %s\n",
762 boot_cpu_has(X86_FEATURE_FXSR) ? "FXSAVE" : "FSAVE");
763 return;
764 }
765
766 if (boot_cpu_data.cpuid_level < XSTATE_CPUID) {
767 WARN_ON_FPU(1);
768 return;
769 }
770
771 /*
772 * Find user xstates supported by the processor.
773 */
774 cpuid_count(XSTATE_CPUID, 0, &eax, &ebx, &ecx, &edx);
775 fpu_kernel_cfg.max_features = eax + ((u64)edx << 32);
776
777 /*
778 * Find supervisor xstates supported by the processor.
779 */
780 cpuid_count(XSTATE_CPUID, 1, &eax, &ebx, &ecx, &edx);
781 fpu_kernel_cfg.max_features |= ecx + ((u64)edx << 32);
782
783 if ((fpu_kernel_cfg.max_features & XFEATURE_MASK_FPSSE) != XFEATURE_MASK_FPSSE) {
784 /*
785 * This indicates that something really unexpected happened
786 * with the enumeration. Disable XSAVE and try to continue
787 * booting without it. This is too early to BUG().
788 */
789 pr_err("x86/fpu: FP/SSE not present amongst the CPU's xstate features: 0x%llx.\n",
790 fpu_kernel_cfg.max_features);
791 goto out_disable;
792 }
793
794 /*
795 * Clear XSAVE features that are disabled in the normal CPUID.
796 */
797 for (i = 0; i < ARRAY_SIZE(xsave_cpuid_features); i++) {
798 unsigned short cid = xsave_cpuid_features[i];
799
800 /* Careful: X86_FEATURE_FPU is 0! */
801 if ((i != XFEATURE_FP && !cid) || !boot_cpu_has(cid))
802 fpu_kernel_cfg.max_features &= ~BIT_ULL(i);
803 }
804
805 if (!cpu_feature_enabled(X86_FEATURE_XFD))
806 fpu_kernel_cfg.max_features &= ~XFEATURE_MASK_USER_DYNAMIC;
807
808 if (!cpu_feature_enabled(X86_FEATURE_XSAVES))
809 fpu_kernel_cfg.max_features &= XFEATURE_MASK_USER_SUPPORTED;
810 else
811 fpu_kernel_cfg.max_features &= XFEATURE_MASK_USER_SUPPORTED |
812 XFEATURE_MASK_SUPERVISOR_SUPPORTED;
813
814 fpu_user_cfg.max_features = fpu_kernel_cfg.max_features;
815 fpu_user_cfg.max_features &= XFEATURE_MASK_USER_SUPPORTED;
816
817 /* Clean out dynamic features from default */
818 fpu_kernel_cfg.default_features = fpu_kernel_cfg.max_features;
819 fpu_kernel_cfg.default_features &= ~XFEATURE_MASK_USER_DYNAMIC;
820
821 fpu_user_cfg.default_features = fpu_user_cfg.max_features;
822 fpu_user_cfg.default_features &= ~XFEATURE_MASK_USER_DYNAMIC;
823
824 /* Store it for paranoia check at the end */
825 xfeatures = fpu_kernel_cfg.max_features;
826
827 /*
828 * Initialize the default XFD state in initfp_state and enable the
829 * dynamic sizing mechanism if dynamic states are available. The
830 * static key cannot be enabled here because this runs before
831 * jump_label_init(). This is delayed to an initcall.
832 */
833 init_fpstate.xfd = fpu_user_cfg.max_features & XFEATURE_MASK_USER_DYNAMIC;
834
835 /* Set up compaction feature bit */
836 if (cpu_feature_enabled(X86_FEATURE_XSAVEC) ||
837 cpu_feature_enabled(X86_FEATURE_XSAVES))
838 setup_force_cpu_cap(X86_FEATURE_XCOMPACTED);
839
840 /* Enable xstate instructions to be able to continue with initialization: */
841 fpu__init_cpu_xstate();
842
843 /* Cache size, offset and flags for initialization */
844 setup_xstate_cache();
845
846 err = init_xstate_size();
847 if (err)
848 goto out_disable;
849
850 /* Reset the state for the current task */
851 fpstate_reset(¤t->thread.fpu);
852
853 /*
854 * Update info used for ptrace frames; use standard-format size and no
855 * supervisor xstates:
856 */
857 update_regset_xstate_info(fpu_user_cfg.max_size,
858 fpu_user_cfg.max_features);
859
860 /*
861 * init_fpstate excludes dynamic states as they are large but init
862 * state is zero.
863 */
864 init_fpstate.size = fpu_kernel_cfg.default_size;
865 init_fpstate.xfeatures = fpu_kernel_cfg.default_features;
866
867 if (init_fpstate.size > sizeof(init_fpstate.regs)) {
868 pr_warn("x86/fpu: init_fpstate buffer too small (%zu < %d), disabling XSAVE\n",
869 sizeof(init_fpstate.regs), init_fpstate.size);
870 goto out_disable;
871 }
872
873 setup_init_fpu_buf();
874
875 /*
876 * Paranoia check whether something in the setup modified the
877 * xfeatures mask.
878 */
879 if (xfeatures != fpu_kernel_cfg.max_features) {
880 pr_err("x86/fpu: xfeatures modified from 0x%016llx to 0x%016llx during init, disabling XSAVE\n",
881 xfeatures, fpu_kernel_cfg.max_features);
882 goto out_disable;
883 }
884
885 print_xstate_offset_size();
886 pr_info("x86/fpu: Enabled xstate features 0x%llx, context size is %d bytes, using '%s' format.\n",
887 fpu_kernel_cfg.max_features,
888 fpu_kernel_cfg.max_size,
889 boot_cpu_has(X86_FEATURE_XCOMPACTED) ? "compacted" : "standard");
890 return;
891
892out_disable:
893 /* something went wrong, try to boot without any XSAVE support */
894 fpu__init_disable_system_xstate(legacy_size);
895}
896
897/*
898 * Restore minimal FPU state after suspend:
899 */
900void fpu__resume_cpu(void)
901{
902 /*
903 * Restore XCR0 on xsave capable CPUs:
904 */
905 if (cpu_feature_enabled(X86_FEATURE_XSAVE))
906 xsetbv(XCR_XFEATURE_ENABLED_MASK, fpu_user_cfg.max_features);
907
908 /*
909 * Restore IA32_XSS. The same CPUID bit enumerates support
910 * of XSAVES and MSR_IA32_XSS.
911 */
912 if (cpu_feature_enabled(X86_FEATURE_XSAVES)) {
913 wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor() |
914 xfeatures_mask_independent());
915 }
916
917 if (fpu_state_size_dynamic())
918 wrmsrl(MSR_IA32_XFD, current->thread.fpu.fpstate->xfd);
919}
920
921/*
922 * Given an xstate feature nr, calculate where in the xsave
923 * buffer the state is. Callers should ensure that the buffer
924 * is valid.
925 */
926static void *__raw_xsave_addr(struct xregs_state *xsave, int xfeature_nr)
927{
928 u64 xcomp_bv = xsave->header.xcomp_bv;
929
930 if (WARN_ON_ONCE(!xfeature_enabled(xfeature_nr)))
931 return NULL;
932
933 if (cpu_feature_enabled(X86_FEATURE_XCOMPACTED)) {
934 if (WARN_ON_ONCE(!(xcomp_bv & BIT_ULL(xfeature_nr))))
935 return NULL;
936 }
937
938 return (void *)xsave + xfeature_get_offset(xcomp_bv, xfeature_nr);
939}
940
941/*
942 * Given the xsave area and a state inside, this function returns the
943 * address of the state.
944 *
945 * This is the API that is called to get xstate address in either
946 * standard format or compacted format of xsave area.
947 *
948 * Note that if there is no data for the field in the xsave buffer
949 * this will return NULL.
950 *
951 * Inputs:
952 * xstate: the thread's storage area for all FPU data
953 * xfeature_nr: state which is defined in xsave.h (e.g. XFEATURE_FP,
954 * XFEATURE_SSE, etc...)
955 * Output:
956 * address of the state in the xsave area, or NULL if the
957 * field is not present in the xsave buffer.
958 */
959void *get_xsave_addr(struct xregs_state *xsave, int xfeature_nr)
960{
961 /*
962 * Do we even *have* xsave state?
963 */
964 if (!boot_cpu_has(X86_FEATURE_XSAVE))
965 return NULL;
966
967 /*
968 * We should not ever be requesting features that we
969 * have not enabled.
970 */
971 if (WARN_ON_ONCE(!xfeature_enabled(xfeature_nr)))
972 return NULL;
973
974 /*
975 * This assumes the last 'xsave*' instruction to
976 * have requested that 'xfeature_nr' be saved.
977 * If it did not, we might be seeing and old value
978 * of the field in the buffer.
979 *
980 * This can happen because the last 'xsave' did not
981 * request that this feature be saved (unlikely)
982 * or because the "init optimization" caused it
983 * to not be saved.
984 */
985 if (!(xsave->header.xfeatures & BIT_ULL(xfeature_nr)))
986 return NULL;
987
988 return __raw_xsave_addr(xsave, xfeature_nr);
989}
990
991#ifdef CONFIG_ARCH_HAS_PKEYS
992
993/*
994 * This will go out and modify PKRU register to set the access
995 * rights for @pkey to @init_val.
996 */
997int arch_set_user_pkey_access(struct task_struct *tsk, int pkey,
998 unsigned long init_val)
999{
1000 u32 old_pkru, new_pkru_bits = 0;
1001 int pkey_shift;
1002
1003 /*
1004 * This check implies XSAVE support. OSPKE only gets
1005 * set if we enable XSAVE and we enable PKU in XCR0.
1006 */
1007 if (!cpu_feature_enabled(X86_FEATURE_OSPKE))
1008 return -EINVAL;
1009
1010 /*
1011 * This code should only be called with valid 'pkey'
1012 * values originating from in-kernel users. Complain
1013 * if a bad value is observed.
1014 */
1015 if (WARN_ON_ONCE(pkey >= arch_max_pkey()))
1016 return -EINVAL;
1017
1018 /* Set the bits we need in PKRU: */
1019 if (init_val & PKEY_DISABLE_ACCESS)
1020 new_pkru_bits |= PKRU_AD_BIT;
1021 if (init_val & PKEY_DISABLE_WRITE)
1022 new_pkru_bits |= PKRU_WD_BIT;
1023
1024 /* Shift the bits in to the correct place in PKRU for pkey: */
1025 pkey_shift = pkey * PKRU_BITS_PER_PKEY;
1026 new_pkru_bits <<= pkey_shift;
1027
1028 /* Get old PKRU and mask off any old bits in place: */
1029 old_pkru = read_pkru();
1030 old_pkru &= ~((PKRU_AD_BIT|PKRU_WD_BIT) << pkey_shift);
1031
1032 /* Write old part along with new part: */
1033 write_pkru(old_pkru | new_pkru_bits);
1034
1035 return 0;
1036}
1037#endif /* ! CONFIG_ARCH_HAS_PKEYS */
1038
1039static void copy_feature(bool from_xstate, struct membuf *to, void *xstate,
1040 void *init_xstate, unsigned int size)
1041{
1042 membuf_write(to, from_xstate ? xstate : init_xstate, size);
1043}
1044
1045/**
1046 * __copy_xstate_to_uabi_buf - Copy kernel saved xstate to a UABI buffer
1047 * @to: membuf descriptor
1048 * @fpstate: The fpstate buffer from which to copy
1049 * @pkru_val: The PKRU value to store in the PKRU component
1050 * @copy_mode: The requested copy mode
1051 *
1052 * Converts from kernel XSAVE or XSAVES compacted format to UABI conforming
1053 * format, i.e. from the kernel internal hardware dependent storage format
1054 * to the requested @mode. UABI XSTATE is always uncompacted!
1055 *
1056 * It supports partial copy but @to.pos always starts from zero.
1057 */
1058void __copy_xstate_to_uabi_buf(struct membuf to, struct fpstate *fpstate,
1059 u32 pkru_val, enum xstate_copy_mode copy_mode)
1060{
1061 const unsigned int off_mxcsr = offsetof(struct fxregs_state, mxcsr);
1062 struct xregs_state *xinit = &init_fpstate.regs.xsave;
1063 struct xregs_state *xsave = &fpstate->regs.xsave;
1064 struct xstate_header header;
1065 unsigned int zerofrom;
1066 u64 mask;
1067 int i;
1068
1069 memset(&header, 0, sizeof(header));
1070 header.xfeatures = xsave->header.xfeatures;
1071
1072 /* Mask out the feature bits depending on copy mode */
1073 switch (copy_mode) {
1074 case XSTATE_COPY_FP:
1075 header.xfeatures &= XFEATURE_MASK_FP;
1076 break;
1077
1078 case XSTATE_COPY_FX:
1079 header.xfeatures &= XFEATURE_MASK_FP | XFEATURE_MASK_SSE;
1080 break;
1081
1082 case XSTATE_COPY_XSAVE:
1083 header.xfeatures &= fpstate->user_xfeatures;
1084 break;
1085 }
1086
1087 /* Copy FP state up to MXCSR */
1088 copy_feature(header.xfeatures & XFEATURE_MASK_FP, &to, &xsave->i387,
1089 &xinit->i387, off_mxcsr);
1090
1091 /* Copy MXCSR when SSE or YMM are set in the feature mask */
1092 copy_feature(header.xfeatures & (XFEATURE_MASK_SSE | XFEATURE_MASK_YMM),
1093 &to, &xsave->i387.mxcsr, &xinit->i387.mxcsr,
1094 MXCSR_AND_FLAGS_SIZE);
1095
1096 /* Copy the remaining FP state */
1097 copy_feature(header.xfeatures & XFEATURE_MASK_FP,
1098 &to, &xsave->i387.st_space, &xinit->i387.st_space,
1099 sizeof(xsave->i387.st_space));
1100
1101 /* Copy the SSE state - shared with YMM, but independently managed */
1102 copy_feature(header.xfeatures & XFEATURE_MASK_SSE,
1103 &to, &xsave->i387.xmm_space, &xinit->i387.xmm_space,
1104 sizeof(xsave->i387.xmm_space));
1105
1106 if (copy_mode != XSTATE_COPY_XSAVE)
1107 goto out;
1108
1109 /* Zero the padding area */
1110 membuf_zero(&to, sizeof(xsave->i387.padding));
1111
1112 /* Copy xsave->i387.sw_reserved */
1113 membuf_write(&to, xstate_fx_sw_bytes, sizeof(xsave->i387.sw_reserved));
1114
1115 /* Copy the user space relevant state of @xsave->header */
1116 membuf_write(&to, &header, sizeof(header));
1117
1118 zerofrom = offsetof(struct xregs_state, extended_state_area);
1119
1120 /*
1121 * The ptrace buffer is in non-compacted XSAVE format. In
1122 * non-compacted format disabled features still occupy state space,
1123 * but there is no state to copy from in the compacted
1124 * init_fpstate. The gap tracking will zero these states.
1125 */
1126 mask = fpstate->user_xfeatures;
1127
1128 /*
1129 * Dynamic features are not present in init_fpstate. When they are
1130 * in an all zeros init state, remove those from 'mask' to zero
1131 * those features in the user buffer instead of retrieving them
1132 * from init_fpstate.
1133 */
1134 if (fpu_state_size_dynamic())
1135 mask &= (header.xfeatures | xinit->header.xcomp_bv);
1136
1137 for_each_extended_xfeature(i, mask) {
1138 /*
1139 * If there was a feature or alignment gap, zero the space
1140 * in the destination buffer.
1141 */
1142 if (zerofrom < xstate_offsets[i])
1143 membuf_zero(&to, xstate_offsets[i] - zerofrom);
1144
1145 if (i == XFEATURE_PKRU) {
1146 struct pkru_state pkru = {0};
1147 /*
1148 * PKRU is not necessarily up to date in the
1149 * XSAVE buffer. Use the provided value.
1150 */
1151 pkru.pkru = pkru_val;
1152 membuf_write(&to, &pkru, sizeof(pkru));
1153 } else {
1154 copy_feature(header.xfeatures & BIT_ULL(i), &to,
1155 __raw_xsave_addr(xsave, i),
1156 __raw_xsave_addr(xinit, i),
1157 xstate_sizes[i]);
1158 }
1159 /*
1160 * Keep track of the last copied state in the non-compacted
1161 * target buffer for gap zeroing.
1162 */
1163 zerofrom = xstate_offsets[i] + xstate_sizes[i];
1164 }
1165
1166out:
1167 if (to.left)
1168 membuf_zero(&to, to.left);
1169}
1170
1171/**
1172 * copy_xstate_to_uabi_buf - Copy kernel saved xstate to a UABI buffer
1173 * @to: membuf descriptor
1174 * @tsk: The task from which to copy the saved xstate
1175 * @copy_mode: The requested copy mode
1176 *
1177 * Converts from kernel XSAVE or XSAVES compacted format to UABI conforming
1178 * format, i.e. from the kernel internal hardware dependent storage format
1179 * to the requested @mode. UABI XSTATE is always uncompacted!
1180 *
1181 * It supports partial copy but @to.pos always starts from zero.
1182 */
1183void copy_xstate_to_uabi_buf(struct membuf to, struct task_struct *tsk,
1184 enum xstate_copy_mode copy_mode)
1185{
1186 __copy_xstate_to_uabi_buf(to, tsk->thread.fpu.fpstate,
1187 tsk->thread.pkru, copy_mode);
1188}
1189
1190static int copy_from_buffer(void *dst, unsigned int offset, unsigned int size,
1191 const void *kbuf, const void __user *ubuf)
1192{
1193 if (kbuf) {
1194 memcpy(dst, kbuf + offset, size);
1195 } else {
1196 if (copy_from_user(dst, ubuf + offset, size))
1197 return -EFAULT;
1198 }
1199 return 0;
1200}
1201
1202
1203/**
1204 * copy_uabi_to_xstate - Copy a UABI format buffer to the kernel xstate
1205 * @fpstate: The fpstate buffer to copy to
1206 * @kbuf: The UABI format buffer, if it comes from the kernel
1207 * @ubuf: The UABI format buffer, if it comes from userspace
1208 * @pkru: The location to write the PKRU value to
1209 *
1210 * Converts from the UABI format into the kernel internal hardware
1211 * dependent format.
1212 *
1213 * This function ultimately has three different callers with distinct PKRU
1214 * behavior.
1215 * 1. When called from sigreturn the PKRU register will be restored from
1216 * @fpstate via an XRSTOR. Correctly copying the UABI format buffer to
1217 * @fpstate is sufficient to cover this case, but the caller will also
1218 * pass a pointer to the thread_struct's pkru field in @pkru and updating
1219 * it is harmless.
1220 * 2. When called from ptrace the PKRU register will be restored from the
1221 * thread_struct's pkru field. A pointer to that is passed in @pkru.
1222 * The kernel will restore it manually, so the XRSTOR behavior that resets
1223 * the PKRU register to the hardware init value (0) if the corresponding
1224 * xfeatures bit is not set is emulated here.
1225 * 3. When called from KVM the PKRU register will be restored from the vcpu's
1226 * pkru field. A pointer to that is passed in @pkru. KVM hasn't used
1227 * XRSTOR and hasn't had the PKRU resetting behavior described above. To
1228 * preserve that KVM behavior, it passes NULL for @pkru if the xfeatures
1229 * bit is not set.
1230 */
1231static int copy_uabi_to_xstate(struct fpstate *fpstate, const void *kbuf,
1232 const void __user *ubuf, u32 *pkru)
1233{
1234 struct xregs_state *xsave = &fpstate->regs.xsave;
1235 unsigned int offset, size;
1236 struct xstate_header hdr;
1237 u64 mask;
1238 int i;
1239
1240 offset = offsetof(struct xregs_state, header);
1241 if (copy_from_buffer(&hdr, offset, sizeof(hdr), kbuf, ubuf))
1242 return -EFAULT;
1243
1244 if (validate_user_xstate_header(&hdr, fpstate))
1245 return -EINVAL;
1246
1247 /* Validate MXCSR when any of the related features is in use */
1248 mask = XFEATURE_MASK_FP | XFEATURE_MASK_SSE | XFEATURE_MASK_YMM;
1249 if (hdr.xfeatures & mask) {
1250 u32 mxcsr[2];
1251
1252 offset = offsetof(struct fxregs_state, mxcsr);
1253 if (copy_from_buffer(mxcsr, offset, sizeof(mxcsr), kbuf, ubuf))
1254 return -EFAULT;
1255
1256 /* Reserved bits in MXCSR must be zero. */
1257 if (mxcsr[0] & ~mxcsr_feature_mask)
1258 return -EINVAL;
1259
1260 /* SSE and YMM require MXCSR even when FP is not in use. */
1261 if (!(hdr.xfeatures & XFEATURE_MASK_FP)) {
1262 xsave->i387.mxcsr = mxcsr[0];
1263 xsave->i387.mxcsr_mask = mxcsr[1];
1264 }
1265 }
1266
1267 for (i = 0; i < XFEATURE_MAX; i++) {
1268 mask = BIT_ULL(i);
1269
1270 if (hdr.xfeatures & mask) {
1271 void *dst = __raw_xsave_addr(xsave, i);
1272
1273 offset = xstate_offsets[i];
1274 size = xstate_sizes[i];
1275
1276 if (copy_from_buffer(dst, offset, size, kbuf, ubuf))
1277 return -EFAULT;
1278 }
1279 }
1280
1281 if (hdr.xfeatures & XFEATURE_MASK_PKRU) {
1282 struct pkru_state *xpkru;
1283
1284 xpkru = __raw_xsave_addr(xsave, XFEATURE_PKRU);
1285 *pkru = xpkru->pkru;
1286 } else {
1287 /*
1288 * KVM may pass NULL here to indicate that it does not need
1289 * PKRU updated.
1290 */
1291 if (pkru)
1292 *pkru = 0;
1293 }
1294
1295 /*
1296 * The state that came in from userspace was user-state only.
1297 * Mask all the user states out of 'xfeatures':
1298 */
1299 xsave->header.xfeatures &= XFEATURE_MASK_SUPERVISOR_ALL;
1300
1301 /*
1302 * Add back in the features that came in from userspace:
1303 */
1304 xsave->header.xfeatures |= hdr.xfeatures;
1305
1306 return 0;
1307}
1308
1309/*
1310 * Convert from a ptrace standard-format kernel buffer to kernel XSAVE[S]
1311 * format and copy to the target thread. Used by ptrace and KVM.
1312 */
1313int copy_uabi_from_kernel_to_xstate(struct fpstate *fpstate, const void *kbuf, u32 *pkru)
1314{
1315 return copy_uabi_to_xstate(fpstate, kbuf, NULL, pkru);
1316}
1317
1318/*
1319 * Convert from a sigreturn standard-format user-space buffer to kernel
1320 * XSAVE[S] format and copy to the target thread. This is called from the
1321 * sigreturn() and rt_sigreturn() system calls.
1322 */
1323int copy_sigframe_from_user_to_xstate(struct task_struct *tsk,
1324 const void __user *ubuf)
1325{
1326 return copy_uabi_to_xstate(tsk->thread.fpu.fpstate, NULL, ubuf, &tsk->thread.pkru);
1327}
1328
1329static bool validate_independent_components(u64 mask)
1330{
1331 u64 xchk;
1332
1333 if (WARN_ON_FPU(!cpu_feature_enabled(X86_FEATURE_XSAVES)))
1334 return false;
1335
1336 xchk = ~xfeatures_mask_independent();
1337
1338 if (WARN_ON_ONCE(!mask || mask & xchk))
1339 return false;
1340
1341 return true;
1342}
1343
1344/**
1345 * xsaves - Save selected components to a kernel xstate buffer
1346 * @xstate: Pointer to the buffer
1347 * @mask: Feature mask to select the components to save
1348 *
1349 * The @xstate buffer must be 64 byte aligned and correctly initialized as
1350 * XSAVES does not write the full xstate header. Before first use the
1351 * buffer should be zeroed otherwise a consecutive XRSTORS from that buffer
1352 * can #GP.
1353 *
1354 * The feature mask must be a subset of the independent features.
1355 */
1356void xsaves(struct xregs_state *xstate, u64 mask)
1357{
1358 int err;
1359
1360 if (!validate_independent_components(mask))
1361 return;
1362
1363 XSTATE_OP(XSAVES, xstate, (u32)mask, (u32)(mask >> 32), err);
1364 WARN_ON_ONCE(err);
1365}
1366
1367/**
1368 * xrstors - Restore selected components from a kernel xstate buffer
1369 * @xstate: Pointer to the buffer
1370 * @mask: Feature mask to select the components to restore
1371 *
1372 * The @xstate buffer must be 64 byte aligned and correctly initialized
1373 * otherwise XRSTORS from that buffer can #GP.
1374 *
1375 * Proper usage is to restore the state which was saved with
1376 * xsaves() into @xstate.
1377 *
1378 * The feature mask must be a subset of the independent features.
1379 */
1380void xrstors(struct xregs_state *xstate, u64 mask)
1381{
1382 int err;
1383
1384 if (!validate_independent_components(mask))
1385 return;
1386
1387 XSTATE_OP(XRSTORS, xstate, (u32)mask, (u32)(mask >> 32), err);
1388 WARN_ON_ONCE(err);
1389}
1390
1391#if IS_ENABLED(CONFIG_KVM)
1392void fpstate_clear_xstate_component(struct fpstate *fps, unsigned int xfeature)
1393{
1394 void *addr = get_xsave_addr(&fps->regs.xsave, xfeature);
1395
1396 if (addr)
1397 memset(addr, 0, xstate_sizes[xfeature]);
1398}
1399EXPORT_SYMBOL_GPL(fpstate_clear_xstate_component);
1400#endif
1401
1402#ifdef CONFIG_X86_64
1403
1404#ifdef CONFIG_X86_DEBUG_FPU
1405/*
1406 * Ensure that a subsequent XSAVE* or XRSTOR* instruction with RFBM=@mask
1407 * can safely operate on the @fpstate buffer.
1408 */
1409static bool xstate_op_valid(struct fpstate *fpstate, u64 mask, bool rstor)
1410{
1411 u64 xfd = __this_cpu_read(xfd_state);
1412
1413 if (fpstate->xfd == xfd)
1414 return true;
1415
1416 /*
1417 * The XFD MSR does not match fpstate->xfd. That's invalid when
1418 * the passed in fpstate is current's fpstate.
1419 */
1420 if (fpstate->xfd == current->thread.fpu.fpstate->xfd)
1421 return false;
1422
1423 /*
1424 * XRSTOR(S) from init_fpstate are always correct as it will just
1425 * bring all components into init state and not read from the
1426 * buffer. XSAVE(S) raises #PF after init.
1427 */
1428 if (fpstate == &init_fpstate)
1429 return rstor;
1430
1431 /*
1432 * XSAVE(S): clone(), fpu_swap_kvm_fpu()
1433 * XRSTORS(S): fpu_swap_kvm_fpu()
1434 */
1435
1436 /*
1437 * No XSAVE/XRSTOR instructions (except XSAVE itself) touch
1438 * the buffer area for XFD-disabled state components.
1439 */
1440 mask &= ~xfd;
1441
1442 /*
1443 * Remove features which are valid in fpstate. They
1444 * have space allocated in fpstate.
1445 */
1446 mask &= ~fpstate->xfeatures;
1447
1448 /*
1449 * Any remaining state components in 'mask' might be written
1450 * by XSAVE/XRSTOR. Fail validation it found.
1451 */
1452 return !mask;
1453}
1454
1455void xfd_validate_state(struct fpstate *fpstate, u64 mask, bool rstor)
1456{
1457 WARN_ON_ONCE(!xstate_op_valid(fpstate, mask, rstor));
1458}
1459#endif /* CONFIG_X86_DEBUG_FPU */
1460
1461static int __init xfd_update_static_branch(void)
1462{
1463 /*
1464 * If init_fpstate.xfd has bits set then dynamic features are
1465 * available and the dynamic sizing must be enabled.
1466 */
1467 if (init_fpstate.xfd)
1468 static_branch_enable(&__fpu_state_size_dynamic);
1469 return 0;
1470}
1471arch_initcall(xfd_update_static_branch)
1472
1473void fpstate_free(struct fpu *fpu)
1474{
1475 if (fpu->fpstate && fpu->fpstate != &fpu->__fpstate)
1476 vfree(fpu->fpstate);
1477}
1478
1479/**
1480 * fpstate_realloc - Reallocate struct fpstate for the requested new features
1481 *
1482 * @xfeatures: A bitmap of xstate features which extend the enabled features
1483 * of that task
1484 * @ksize: The required size for the kernel buffer
1485 * @usize: The required size for user space buffers
1486 * @guest_fpu: Pointer to a guest FPU container. NULL for host allocations
1487 *
1488 * Note vs. vmalloc(): If the task with a vzalloc()-allocated buffer
1489 * terminates quickly, vfree()-induced IPIs may be a concern, but tasks
1490 * with large states are likely to live longer.
1491 *
1492 * Returns: 0 on success, -ENOMEM on allocation error.
1493 */
1494static int fpstate_realloc(u64 xfeatures, unsigned int ksize,
1495 unsigned int usize, struct fpu_guest *guest_fpu)
1496{
1497 struct fpu *fpu = ¤t->thread.fpu;
1498 struct fpstate *curfps, *newfps = NULL;
1499 unsigned int fpsize;
1500 bool in_use;
1501
1502 fpsize = ksize + ALIGN(offsetof(struct fpstate, regs), 64);
1503
1504 newfps = vzalloc(fpsize);
1505 if (!newfps)
1506 return -ENOMEM;
1507 newfps->size = ksize;
1508 newfps->user_size = usize;
1509 newfps->is_valloc = true;
1510
1511 /*
1512 * When a guest FPU is supplied, use @guest_fpu->fpstate
1513 * as reference independent whether it is in use or not.
1514 */
1515 curfps = guest_fpu ? guest_fpu->fpstate : fpu->fpstate;
1516
1517 /* Determine whether @curfps is the active fpstate */
1518 in_use = fpu->fpstate == curfps;
1519
1520 if (guest_fpu) {
1521 newfps->is_guest = true;
1522 newfps->is_confidential = curfps->is_confidential;
1523 newfps->in_use = curfps->in_use;
1524 guest_fpu->xfeatures |= xfeatures;
1525 guest_fpu->uabi_size = usize;
1526 }
1527
1528 fpregs_lock();
1529 /*
1530 * If @curfps is in use, ensure that the current state is in the
1531 * registers before swapping fpstate as that might invalidate it
1532 * due to layout changes.
1533 */
1534 if (in_use && test_thread_flag(TIF_NEED_FPU_LOAD))
1535 fpregs_restore_userregs();
1536
1537 newfps->xfeatures = curfps->xfeatures | xfeatures;
1538
1539 if (!guest_fpu)
1540 newfps->user_xfeatures = curfps->user_xfeatures | xfeatures;
1541
1542 newfps->xfd = curfps->xfd & ~xfeatures;
1543
1544 /* Do the final updates within the locked region */
1545 xstate_init_xcomp_bv(&newfps->regs.xsave, newfps->xfeatures);
1546
1547 if (guest_fpu) {
1548 guest_fpu->fpstate = newfps;
1549 /* If curfps is active, update the FPU fpstate pointer */
1550 if (in_use)
1551 fpu->fpstate = newfps;
1552 } else {
1553 fpu->fpstate = newfps;
1554 }
1555
1556 if (in_use)
1557 xfd_update_state(fpu->fpstate);
1558 fpregs_unlock();
1559
1560 /* Only free valloc'ed state */
1561 if (curfps && curfps->is_valloc)
1562 vfree(curfps);
1563
1564 return 0;
1565}
1566
1567static int validate_sigaltstack(unsigned int usize)
1568{
1569 struct task_struct *thread, *leader = current->group_leader;
1570 unsigned long framesize = get_sigframe_size();
1571
1572 lockdep_assert_held(¤t->sighand->siglock);
1573
1574 /* get_sigframe_size() is based on fpu_user_cfg.max_size */
1575 framesize -= fpu_user_cfg.max_size;
1576 framesize += usize;
1577 for_each_thread(leader, thread) {
1578 if (thread->sas_ss_size && thread->sas_ss_size < framesize)
1579 return -ENOSPC;
1580 }
1581 return 0;
1582}
1583
1584static int __xstate_request_perm(u64 permitted, u64 requested, bool guest)
1585{
1586 /*
1587 * This deliberately does not exclude !XSAVES as we still might
1588 * decide to optionally context switch XCR0 or talk the silicon
1589 * vendors into extending XFD for the pre AMX states, especially
1590 * AVX512.
1591 */
1592 bool compacted = cpu_feature_enabled(X86_FEATURE_XCOMPACTED);
1593 struct fpu *fpu = ¤t->group_leader->thread.fpu;
1594 struct fpu_state_perm *perm;
1595 unsigned int ksize, usize;
1596 u64 mask;
1597 int ret = 0;
1598
1599 /* Check whether fully enabled */
1600 if ((permitted & requested) == requested)
1601 return 0;
1602
1603 /* Calculate the resulting kernel state size */
1604 mask = permitted | requested;
1605 /* Take supervisor states into account on the host */
1606 if (!guest)
1607 mask |= xfeatures_mask_supervisor();
1608 ksize = xstate_calculate_size(mask, compacted);
1609
1610 /* Calculate the resulting user state size */
1611 mask &= XFEATURE_MASK_USER_SUPPORTED;
1612 usize = xstate_calculate_size(mask, false);
1613
1614 if (!guest) {
1615 ret = validate_sigaltstack(usize);
1616 if (ret)
1617 return ret;
1618 }
1619
1620 perm = guest ? &fpu->guest_perm : &fpu->perm;
1621 /* Pairs with the READ_ONCE() in xstate_get_group_perm() */
1622 WRITE_ONCE(perm->__state_perm, mask);
1623 /* Protected by sighand lock */
1624 perm->__state_size = ksize;
1625 perm->__user_state_size = usize;
1626 return ret;
1627}
1628
1629/*
1630 * Permissions array to map facilities with more than one component
1631 */
1632static const u64 xstate_prctl_req[XFEATURE_MAX] = {
1633 [XFEATURE_XTILE_DATA] = XFEATURE_MASK_XTILE_DATA,
1634};
1635
1636static int xstate_request_perm(unsigned long idx, bool guest)
1637{
1638 u64 permitted, requested;
1639 int ret;
1640
1641 if (idx >= XFEATURE_MAX)
1642 return -EINVAL;
1643
1644 /*
1645 * Look up the facility mask which can require more than
1646 * one xstate component.
1647 */
1648 idx = array_index_nospec(idx, ARRAY_SIZE(xstate_prctl_req));
1649 requested = xstate_prctl_req[idx];
1650 if (!requested)
1651 return -EOPNOTSUPP;
1652
1653 if ((fpu_user_cfg.max_features & requested) != requested)
1654 return -EOPNOTSUPP;
1655
1656 /* Lockless quick check */
1657 permitted = xstate_get_group_perm(guest);
1658 if ((permitted & requested) == requested)
1659 return 0;
1660
1661 /* Protect against concurrent modifications */
1662 spin_lock_irq(¤t->sighand->siglock);
1663 permitted = xstate_get_group_perm(guest);
1664
1665 /* First vCPU allocation locks the permissions. */
1666 if (guest && (permitted & FPU_GUEST_PERM_LOCKED))
1667 ret = -EBUSY;
1668 else
1669 ret = __xstate_request_perm(permitted, requested, guest);
1670 spin_unlock_irq(¤t->sighand->siglock);
1671 return ret;
1672}
1673
1674int __xfd_enable_feature(u64 xfd_err, struct fpu_guest *guest_fpu)
1675{
1676 u64 xfd_event = xfd_err & XFEATURE_MASK_USER_DYNAMIC;
1677 struct fpu_state_perm *perm;
1678 unsigned int ksize, usize;
1679 struct fpu *fpu;
1680
1681 if (!xfd_event) {
1682 if (!guest_fpu)
1683 pr_err_once("XFD: Invalid xfd error: %016llx\n", xfd_err);
1684 return 0;
1685 }
1686
1687 /* Protect against concurrent modifications */
1688 spin_lock_irq(¤t->sighand->siglock);
1689
1690 /* If not permitted let it die */
1691 if ((xstate_get_group_perm(!!guest_fpu) & xfd_event) != xfd_event) {
1692 spin_unlock_irq(¤t->sighand->siglock);
1693 return -EPERM;
1694 }
1695
1696 fpu = ¤t->group_leader->thread.fpu;
1697 perm = guest_fpu ? &fpu->guest_perm : &fpu->perm;
1698 ksize = perm->__state_size;
1699 usize = perm->__user_state_size;
1700
1701 /*
1702 * The feature is permitted. State size is sufficient. Dropping
1703 * the lock is safe here even if more features are added from
1704 * another task, the retrieved buffer sizes are valid for the
1705 * currently requested feature(s).
1706 */
1707 spin_unlock_irq(¤t->sighand->siglock);
1708
1709 /*
1710 * Try to allocate a new fpstate. If that fails there is no way
1711 * out.
1712 */
1713 if (fpstate_realloc(xfd_event, ksize, usize, guest_fpu))
1714 return -EFAULT;
1715 return 0;
1716}
1717
1718int xfd_enable_feature(u64 xfd_err)
1719{
1720 return __xfd_enable_feature(xfd_err, NULL);
1721}
1722
1723#else /* CONFIG_X86_64 */
1724static inline int xstate_request_perm(unsigned long idx, bool guest)
1725{
1726 return -EPERM;
1727}
1728#endif /* !CONFIG_X86_64 */
1729
1730u64 xstate_get_guest_group_perm(void)
1731{
1732 return xstate_get_group_perm(true);
1733}
1734EXPORT_SYMBOL_GPL(xstate_get_guest_group_perm);
1735
1736/**
1737 * fpu_xstate_prctl - xstate permission operations
1738 * @tsk: Redundant pointer to current
1739 * @option: A subfunction of arch_prctl()
1740 * @arg2: option argument
1741 * Return: 0 if successful; otherwise, an error code
1742 *
1743 * Option arguments:
1744 *
1745 * ARCH_GET_XCOMP_SUPP: Pointer to user space u64 to store the info
1746 * ARCH_GET_XCOMP_PERM: Pointer to user space u64 to store the info
1747 * ARCH_REQ_XCOMP_PERM: Facility number requested
1748 *
1749 * For facilities which require more than one XSTATE component, the request
1750 * must be the highest state component number related to that facility,
1751 * e.g. for AMX which requires XFEATURE_XTILE_CFG(17) and
1752 * XFEATURE_XTILE_DATA(18) this would be XFEATURE_XTILE_DATA(18).
1753 */
1754long fpu_xstate_prctl(int option, unsigned long arg2)
1755{
1756 u64 __user *uptr = (u64 __user *)arg2;
1757 u64 permitted, supported;
1758 unsigned long idx = arg2;
1759 bool guest = false;
1760
1761 switch (option) {
1762 case ARCH_GET_XCOMP_SUPP:
1763 supported = fpu_user_cfg.max_features | fpu_user_cfg.legacy_features;
1764 return put_user(supported, uptr);
1765
1766 case ARCH_GET_XCOMP_PERM:
1767 /*
1768 * Lockless snapshot as it can also change right after the
1769 * dropping the lock.
1770 */
1771 permitted = xstate_get_host_group_perm();
1772 permitted &= XFEATURE_MASK_USER_SUPPORTED;
1773 return put_user(permitted, uptr);
1774
1775 case ARCH_GET_XCOMP_GUEST_PERM:
1776 permitted = xstate_get_guest_group_perm();
1777 permitted &= XFEATURE_MASK_USER_SUPPORTED;
1778 return put_user(permitted, uptr);
1779
1780 case ARCH_REQ_XCOMP_GUEST_PERM:
1781 guest = true;
1782 fallthrough;
1783
1784 case ARCH_REQ_XCOMP_PERM:
1785 if (!IS_ENABLED(CONFIG_X86_64))
1786 return -EOPNOTSUPP;
1787
1788 return xstate_request_perm(idx, guest);
1789
1790 default:
1791 return -EINVAL;
1792 }
1793}
1794
1795#ifdef CONFIG_PROC_PID_ARCH_STATUS
1796/*
1797 * Report the amount of time elapsed in millisecond since last AVX512
1798 * use in the task.
1799 */
1800static void avx512_status(struct seq_file *m, struct task_struct *task)
1801{
1802 unsigned long timestamp = READ_ONCE(task->thread.fpu.avx512_timestamp);
1803 long delta;
1804
1805 if (!timestamp) {
1806 /*
1807 * Report -1 if no AVX512 usage
1808 */
1809 delta = -1;
1810 } else {
1811 delta = (long)(jiffies - timestamp);
1812 /*
1813 * Cap to LONG_MAX if time difference > LONG_MAX
1814 */
1815 if (delta < 0)
1816 delta = LONG_MAX;
1817 delta = jiffies_to_msecs(delta);
1818 }
1819
1820 seq_put_decimal_ll(m, "AVX512_elapsed_ms:\t", delta);
1821 seq_putc(m, '\n');
1822}
1823
1824/*
1825 * Report architecture specific information
1826 */
1827int proc_pid_arch_status(struct seq_file *m, struct pid_namespace *ns,
1828 struct pid *pid, struct task_struct *task)
1829{
1830 /*
1831 * Report AVX512 state if the processor and build option supported.
1832 */
1833 if (cpu_feature_enabled(X86_FEATURE_AVX512F))
1834 avx512_status(m, task);
1835
1836 return 0;
1837}
1838#endif /* CONFIG_PROC_PID_ARCH_STATUS */
1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * xsave/xrstor support.
4 *
5 * Author: Suresh Siddha <suresh.b.siddha@intel.com>
6 */
7#include <linux/compat.h>
8#include <linux/cpu.h>
9#include <linux/mman.h>
10#include <linux/pkeys.h>
11#include <linux/seq_file.h>
12#include <linux/proc_fs.h>
13
14#include <asm/fpu/api.h>
15#include <asm/fpu/internal.h>
16#include <asm/fpu/signal.h>
17#include <asm/fpu/regset.h>
18#include <asm/fpu/xstate.h>
19
20#include <asm/tlbflush.h>
21#include <asm/cpufeature.h>
22
23/*
24 * Although we spell it out in here, the Processor Trace
25 * xfeature is completely unused. We use other mechanisms
26 * to save/restore PT state in Linux.
27 */
28static const char *xfeature_names[] =
29{
30 "x87 floating point registers" ,
31 "SSE registers" ,
32 "AVX registers" ,
33 "MPX bounds registers" ,
34 "MPX CSR" ,
35 "AVX-512 opmask" ,
36 "AVX-512 Hi256" ,
37 "AVX-512 ZMM_Hi256" ,
38 "Processor Trace (unused)" ,
39 "Protection Keys User registers",
40 "unknown xstate feature" ,
41};
42
43static short xsave_cpuid_features[] __initdata = {
44 X86_FEATURE_FPU,
45 X86_FEATURE_XMM,
46 X86_FEATURE_AVX,
47 X86_FEATURE_MPX,
48 X86_FEATURE_MPX,
49 X86_FEATURE_AVX512F,
50 X86_FEATURE_AVX512F,
51 X86_FEATURE_AVX512F,
52 X86_FEATURE_INTEL_PT,
53 X86_FEATURE_PKU,
54};
55
56/*
57 * Mask of xstate features supported by the CPU and the kernel:
58 */
59u64 xfeatures_mask __read_mostly;
60
61static unsigned int xstate_offsets[XFEATURE_MAX] = { [ 0 ... XFEATURE_MAX - 1] = -1};
62static unsigned int xstate_sizes[XFEATURE_MAX] = { [ 0 ... XFEATURE_MAX - 1] = -1};
63static unsigned int xstate_comp_offsets[sizeof(xfeatures_mask)*8];
64
65/*
66 * The XSAVE area of kernel can be in standard or compacted format;
67 * it is always in standard format for user mode. This is the user
68 * mode standard format size used for signal and ptrace frames.
69 */
70unsigned int fpu_user_xstate_size;
71
72/*
73 * Return whether the system supports a given xfeature.
74 *
75 * Also return the name of the (most advanced) feature that the caller requested:
76 */
77int cpu_has_xfeatures(u64 xfeatures_needed, const char **feature_name)
78{
79 u64 xfeatures_missing = xfeatures_needed & ~xfeatures_mask;
80
81 if (unlikely(feature_name)) {
82 long xfeature_idx, max_idx;
83 u64 xfeatures_print;
84 /*
85 * So we use FLS here to be able to print the most advanced
86 * feature that was requested but is missing. So if a driver
87 * asks about "XFEATURE_MASK_SSE | XFEATURE_MASK_YMM" we'll print the
88 * missing AVX feature - this is the most informative message
89 * to users:
90 */
91 if (xfeatures_missing)
92 xfeatures_print = xfeatures_missing;
93 else
94 xfeatures_print = xfeatures_needed;
95
96 xfeature_idx = fls64(xfeatures_print)-1;
97 max_idx = ARRAY_SIZE(xfeature_names)-1;
98 xfeature_idx = min(xfeature_idx, max_idx);
99
100 *feature_name = xfeature_names[xfeature_idx];
101 }
102
103 if (xfeatures_missing)
104 return 0;
105
106 return 1;
107}
108EXPORT_SYMBOL_GPL(cpu_has_xfeatures);
109
110static int xfeature_is_supervisor(int xfeature_nr)
111{
112 /*
113 * We currently do not support supervisor states, but if
114 * we did, we could find out like this.
115 *
116 * SDM says: If state component 'i' is a user state component,
117 * ECX[0] return 0; if state component i is a supervisor
118 * state component, ECX[0] returns 1.
119 */
120 u32 eax, ebx, ecx, edx;
121
122 cpuid_count(XSTATE_CPUID, xfeature_nr, &eax, &ebx, &ecx, &edx);
123 return !!(ecx & 1);
124}
125
126static int xfeature_is_user(int xfeature_nr)
127{
128 return !xfeature_is_supervisor(xfeature_nr);
129}
130
131/*
132 * When executing XSAVEOPT (or other optimized XSAVE instructions), if
133 * a processor implementation detects that an FPU state component is still
134 * (or is again) in its initialized state, it may clear the corresponding
135 * bit in the header.xfeatures field, and can skip the writeout of registers
136 * to the corresponding memory layout.
137 *
138 * This means that when the bit is zero, the state component might still contain
139 * some previous - non-initialized register state.
140 *
141 * Before writing xstate information to user-space we sanitize those components,
142 * to always ensure that the memory layout of a feature will be in the init state
143 * if the corresponding header bit is zero. This is to ensure that user-space doesn't
144 * see some stale state in the memory layout during signal handling, debugging etc.
145 */
146void fpstate_sanitize_xstate(struct fpu *fpu)
147{
148 struct fxregs_state *fx = &fpu->state.fxsave;
149 int feature_bit;
150 u64 xfeatures;
151
152 if (!use_xsaveopt())
153 return;
154
155 xfeatures = fpu->state.xsave.header.xfeatures;
156
157 /*
158 * None of the feature bits are in init state. So nothing else
159 * to do for us, as the memory layout is up to date.
160 */
161 if ((xfeatures & xfeatures_mask) == xfeatures_mask)
162 return;
163
164 /*
165 * FP is in init state
166 */
167 if (!(xfeatures & XFEATURE_MASK_FP)) {
168 fx->cwd = 0x37f;
169 fx->swd = 0;
170 fx->twd = 0;
171 fx->fop = 0;
172 fx->rip = 0;
173 fx->rdp = 0;
174 memset(&fx->st_space[0], 0, 128);
175 }
176
177 /*
178 * SSE is in init state
179 */
180 if (!(xfeatures & XFEATURE_MASK_SSE))
181 memset(&fx->xmm_space[0], 0, 256);
182
183 /*
184 * First two features are FPU and SSE, which above we handled
185 * in a special way already:
186 */
187 feature_bit = 0x2;
188 xfeatures = (xfeatures_mask & ~xfeatures) >> 2;
189
190 /*
191 * Update all the remaining memory layouts according to their
192 * standard xstate layout, if their header bit is in the init
193 * state:
194 */
195 while (xfeatures) {
196 if (xfeatures & 0x1) {
197 int offset = xstate_comp_offsets[feature_bit];
198 int size = xstate_sizes[feature_bit];
199
200 memcpy((void *)fx + offset,
201 (void *)&init_fpstate.xsave + offset,
202 size);
203 }
204
205 xfeatures >>= 1;
206 feature_bit++;
207 }
208}
209
210/*
211 * Enable the extended processor state save/restore feature.
212 * Called once per CPU onlining.
213 */
214void fpu__init_cpu_xstate(void)
215{
216 if (!boot_cpu_has(X86_FEATURE_XSAVE) || !xfeatures_mask)
217 return;
218 /*
219 * Make it clear that XSAVES supervisor states are not yet
220 * implemented should anyone expect it to work by changing
221 * bits in XFEATURE_MASK_* macros and XCR0.
222 */
223 WARN_ONCE((xfeatures_mask & XFEATURE_MASK_SUPERVISOR),
224 "x86/fpu: XSAVES supervisor states are not yet implemented.\n");
225
226 xfeatures_mask &= ~XFEATURE_MASK_SUPERVISOR;
227
228 cr4_set_bits(X86_CR4_OSXSAVE);
229 xsetbv(XCR_XFEATURE_ENABLED_MASK, xfeatures_mask);
230}
231
232/*
233 * Note that in the future we will likely need a pair of
234 * functions here: one for user xstates and the other for
235 * system xstates. For now, they are the same.
236 */
237static int xfeature_enabled(enum xfeature xfeature)
238{
239 return !!(xfeatures_mask & (1UL << xfeature));
240}
241
242/*
243 * Record the offsets and sizes of various xstates contained
244 * in the XSAVE state memory layout.
245 */
246static void __init setup_xstate_features(void)
247{
248 u32 eax, ebx, ecx, edx, i;
249 /* start at the beginnning of the "extended state" */
250 unsigned int last_good_offset = offsetof(struct xregs_state,
251 extended_state_area);
252 /*
253 * The FP xstates and SSE xstates are legacy states. They are always
254 * in the fixed offsets in the xsave area in either compacted form
255 * or standard form.
256 */
257 xstate_offsets[0] = 0;
258 xstate_sizes[0] = offsetof(struct fxregs_state, xmm_space);
259 xstate_offsets[1] = xstate_sizes[0];
260 xstate_sizes[1] = FIELD_SIZEOF(struct fxregs_state, xmm_space);
261
262 for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
263 if (!xfeature_enabled(i))
264 continue;
265
266 cpuid_count(XSTATE_CPUID, i, &eax, &ebx, &ecx, &edx);
267
268 /*
269 * If an xfeature is supervisor state, the offset
270 * in EBX is invalid. We leave it to -1.
271 */
272 if (xfeature_is_user(i))
273 xstate_offsets[i] = ebx;
274
275 xstate_sizes[i] = eax;
276 /*
277 * In our xstate size checks, we assume that the
278 * highest-numbered xstate feature has the
279 * highest offset in the buffer. Ensure it does.
280 */
281 WARN_ONCE(last_good_offset > xstate_offsets[i],
282 "x86/fpu: misordered xstate at %d\n", last_good_offset);
283 last_good_offset = xstate_offsets[i];
284 }
285}
286
287static void __init print_xstate_feature(u64 xstate_mask)
288{
289 const char *feature_name;
290
291 if (cpu_has_xfeatures(xstate_mask, &feature_name))
292 pr_info("x86/fpu: Supporting XSAVE feature 0x%03Lx: '%s'\n", xstate_mask, feature_name);
293}
294
295/*
296 * Print out all the supported xstate features:
297 */
298static void __init print_xstate_features(void)
299{
300 print_xstate_feature(XFEATURE_MASK_FP);
301 print_xstate_feature(XFEATURE_MASK_SSE);
302 print_xstate_feature(XFEATURE_MASK_YMM);
303 print_xstate_feature(XFEATURE_MASK_BNDREGS);
304 print_xstate_feature(XFEATURE_MASK_BNDCSR);
305 print_xstate_feature(XFEATURE_MASK_OPMASK);
306 print_xstate_feature(XFEATURE_MASK_ZMM_Hi256);
307 print_xstate_feature(XFEATURE_MASK_Hi16_ZMM);
308 print_xstate_feature(XFEATURE_MASK_PKRU);
309}
310
311/*
312 * This check is important because it is easy to get XSTATE_*
313 * confused with XSTATE_BIT_*.
314 */
315#define CHECK_XFEATURE(nr) do { \
316 WARN_ON(nr < FIRST_EXTENDED_XFEATURE); \
317 WARN_ON(nr >= XFEATURE_MAX); \
318} while (0)
319
320/*
321 * We could cache this like xstate_size[], but we only use
322 * it here, so it would be a waste of space.
323 */
324static int xfeature_is_aligned(int xfeature_nr)
325{
326 u32 eax, ebx, ecx, edx;
327
328 CHECK_XFEATURE(xfeature_nr);
329 cpuid_count(XSTATE_CPUID, xfeature_nr, &eax, &ebx, &ecx, &edx);
330 /*
331 * The value returned by ECX[1] indicates the alignment
332 * of state component 'i' when the compacted format
333 * of the extended region of an XSAVE area is used:
334 */
335 return !!(ecx & 2);
336}
337
338/*
339 * This function sets up offsets and sizes of all extended states in
340 * xsave area. This supports both standard format and compacted format
341 * of the xsave aread.
342 */
343static void __init setup_xstate_comp(void)
344{
345 unsigned int xstate_comp_sizes[sizeof(xfeatures_mask)*8];
346 int i;
347
348 /*
349 * The FP xstates and SSE xstates are legacy states. They are always
350 * in the fixed offsets in the xsave area in either compacted form
351 * or standard form.
352 */
353 xstate_comp_offsets[0] = 0;
354 xstate_comp_offsets[1] = offsetof(struct fxregs_state, xmm_space);
355
356 if (!boot_cpu_has(X86_FEATURE_XSAVES)) {
357 for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
358 if (xfeature_enabled(i)) {
359 xstate_comp_offsets[i] = xstate_offsets[i];
360 xstate_comp_sizes[i] = xstate_sizes[i];
361 }
362 }
363 return;
364 }
365
366 xstate_comp_offsets[FIRST_EXTENDED_XFEATURE] =
367 FXSAVE_SIZE + XSAVE_HDR_SIZE;
368
369 for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
370 if (xfeature_enabled(i))
371 xstate_comp_sizes[i] = xstate_sizes[i];
372 else
373 xstate_comp_sizes[i] = 0;
374
375 if (i > FIRST_EXTENDED_XFEATURE) {
376 xstate_comp_offsets[i] = xstate_comp_offsets[i-1]
377 + xstate_comp_sizes[i-1];
378
379 if (xfeature_is_aligned(i))
380 xstate_comp_offsets[i] =
381 ALIGN(xstate_comp_offsets[i], 64);
382 }
383 }
384}
385
386/*
387 * Print out xstate component offsets and sizes
388 */
389static void __init print_xstate_offset_size(void)
390{
391 int i;
392
393 for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
394 if (!xfeature_enabled(i))
395 continue;
396 pr_info("x86/fpu: xstate_offset[%d]: %4d, xstate_sizes[%d]: %4d\n",
397 i, xstate_comp_offsets[i], i, xstate_sizes[i]);
398 }
399}
400
401/*
402 * setup the xstate image representing the init state
403 */
404static void __init setup_init_fpu_buf(void)
405{
406 static int on_boot_cpu __initdata = 1;
407
408 WARN_ON_FPU(!on_boot_cpu);
409 on_boot_cpu = 0;
410
411 if (!boot_cpu_has(X86_FEATURE_XSAVE))
412 return;
413
414 setup_xstate_features();
415 print_xstate_features();
416
417 if (boot_cpu_has(X86_FEATURE_XSAVES))
418 init_fpstate.xsave.header.xcomp_bv = (u64)1 << 63 | xfeatures_mask;
419
420 /*
421 * Init all the features state with header.xfeatures being 0x0
422 */
423 copy_kernel_to_xregs_booting(&init_fpstate.xsave);
424
425 /*
426 * Dump the init state again. This is to identify the init state
427 * of any feature which is not represented by all zero's.
428 */
429 copy_xregs_to_kernel_booting(&init_fpstate.xsave);
430}
431
432static int xfeature_uncompacted_offset(int xfeature_nr)
433{
434 u32 eax, ebx, ecx, edx;
435
436 /*
437 * Only XSAVES supports supervisor states and it uses compacted
438 * format. Checking a supervisor state's uncompacted offset is
439 * an error.
440 */
441 if (XFEATURE_MASK_SUPERVISOR & BIT_ULL(xfeature_nr)) {
442 WARN_ONCE(1, "No fixed offset for xstate %d\n", xfeature_nr);
443 return -1;
444 }
445
446 CHECK_XFEATURE(xfeature_nr);
447 cpuid_count(XSTATE_CPUID, xfeature_nr, &eax, &ebx, &ecx, &edx);
448 return ebx;
449}
450
451static int xfeature_size(int xfeature_nr)
452{
453 u32 eax, ebx, ecx, edx;
454
455 CHECK_XFEATURE(xfeature_nr);
456 cpuid_count(XSTATE_CPUID, xfeature_nr, &eax, &ebx, &ecx, &edx);
457 return eax;
458}
459
460/*
461 * 'XSAVES' implies two different things:
462 * 1. saving of supervisor/system state
463 * 2. using the compacted format
464 *
465 * Use this function when dealing with the compacted format so
466 * that it is obvious which aspect of 'XSAVES' is being handled
467 * by the calling code.
468 */
469int using_compacted_format(void)
470{
471 return boot_cpu_has(X86_FEATURE_XSAVES);
472}
473
474/* Validate an xstate header supplied by userspace (ptrace or sigreturn) */
475int validate_xstate_header(const struct xstate_header *hdr)
476{
477 /* No unknown or supervisor features may be set */
478 if (hdr->xfeatures & (~xfeatures_mask | XFEATURE_MASK_SUPERVISOR))
479 return -EINVAL;
480
481 /* Userspace must use the uncompacted format */
482 if (hdr->xcomp_bv)
483 return -EINVAL;
484
485 /*
486 * If 'reserved' is shrunken to add a new field, make sure to validate
487 * that new field here!
488 */
489 BUILD_BUG_ON(sizeof(hdr->reserved) != 48);
490
491 /* No reserved bits may be set */
492 if (memchr_inv(hdr->reserved, 0, sizeof(hdr->reserved)))
493 return -EINVAL;
494
495 return 0;
496}
497
498static void __xstate_dump_leaves(void)
499{
500 int i;
501 u32 eax, ebx, ecx, edx;
502 static int should_dump = 1;
503
504 if (!should_dump)
505 return;
506 should_dump = 0;
507 /*
508 * Dump out a few leaves past the ones that we support
509 * just in case there are some goodies up there
510 */
511 for (i = 0; i < XFEATURE_MAX + 10; i++) {
512 cpuid_count(XSTATE_CPUID, i, &eax, &ebx, &ecx, &edx);
513 pr_warn("CPUID[%02x, %02x]: eax=%08x ebx=%08x ecx=%08x edx=%08x\n",
514 XSTATE_CPUID, i, eax, ebx, ecx, edx);
515 }
516}
517
518#define XSTATE_WARN_ON(x) do { \
519 if (WARN_ONCE(x, "XSAVE consistency problem, dumping leaves")) { \
520 __xstate_dump_leaves(); \
521 } \
522} while (0)
523
524#define XCHECK_SZ(sz, nr, nr_macro, __struct) do { \
525 if ((nr == nr_macro) && \
526 WARN_ONCE(sz != sizeof(__struct), \
527 "%s: struct is %zu bytes, cpu state %d bytes\n", \
528 __stringify(nr_macro), sizeof(__struct), sz)) { \
529 __xstate_dump_leaves(); \
530 } \
531} while (0)
532
533/*
534 * We have a C struct for each 'xstate'. We need to ensure
535 * that our software representation matches what the CPU
536 * tells us about the state's size.
537 */
538static void check_xstate_against_struct(int nr)
539{
540 /*
541 * Ask the CPU for the size of the state.
542 */
543 int sz = xfeature_size(nr);
544 /*
545 * Match each CPU state with the corresponding software
546 * structure.
547 */
548 XCHECK_SZ(sz, nr, XFEATURE_YMM, struct ymmh_struct);
549 XCHECK_SZ(sz, nr, XFEATURE_BNDREGS, struct mpx_bndreg_state);
550 XCHECK_SZ(sz, nr, XFEATURE_BNDCSR, struct mpx_bndcsr_state);
551 XCHECK_SZ(sz, nr, XFEATURE_OPMASK, struct avx_512_opmask_state);
552 XCHECK_SZ(sz, nr, XFEATURE_ZMM_Hi256, struct avx_512_zmm_uppers_state);
553 XCHECK_SZ(sz, nr, XFEATURE_Hi16_ZMM, struct avx_512_hi16_state);
554 XCHECK_SZ(sz, nr, XFEATURE_PKRU, struct pkru_state);
555
556 /*
557 * Make *SURE* to add any feature numbers in below if
558 * there are "holes" in the xsave state component
559 * numbers.
560 */
561 if ((nr < XFEATURE_YMM) ||
562 (nr >= XFEATURE_MAX) ||
563 (nr == XFEATURE_PT_UNIMPLEMENTED_SO_FAR)) {
564 WARN_ONCE(1, "no structure for xstate: %d\n", nr);
565 XSTATE_WARN_ON(1);
566 }
567}
568
569/*
570 * This essentially double-checks what the cpu told us about
571 * how large the XSAVE buffer needs to be. We are recalculating
572 * it to be safe.
573 */
574static void do_extra_xstate_size_checks(void)
575{
576 int paranoid_xstate_size = FXSAVE_SIZE + XSAVE_HDR_SIZE;
577 int i;
578
579 for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
580 if (!xfeature_enabled(i))
581 continue;
582
583 check_xstate_against_struct(i);
584 /*
585 * Supervisor state components can be managed only by
586 * XSAVES, which is compacted-format only.
587 */
588 if (!using_compacted_format())
589 XSTATE_WARN_ON(xfeature_is_supervisor(i));
590
591 /* Align from the end of the previous feature */
592 if (xfeature_is_aligned(i))
593 paranoid_xstate_size = ALIGN(paranoid_xstate_size, 64);
594 /*
595 * The offset of a given state in the non-compacted
596 * format is given to us in a CPUID leaf. We check
597 * them for being ordered (increasing offsets) in
598 * setup_xstate_features().
599 */
600 if (!using_compacted_format())
601 paranoid_xstate_size = xfeature_uncompacted_offset(i);
602 /*
603 * The compacted-format offset always depends on where
604 * the previous state ended.
605 */
606 paranoid_xstate_size += xfeature_size(i);
607 }
608 XSTATE_WARN_ON(paranoid_xstate_size != fpu_kernel_xstate_size);
609}
610
611
612/*
613 * Get total size of enabled xstates in XCR0/xfeatures_mask.
614 *
615 * Note the SDM's wording here. "sub-function 0" only enumerates
616 * the size of the *user* states. If we use it to size a buffer
617 * that we use 'XSAVES' on, we could potentially overflow the
618 * buffer because 'XSAVES' saves system states too.
619 *
620 * Note that we do not currently set any bits on IA32_XSS so
621 * 'XCR0 | IA32_XSS == XCR0' for now.
622 */
623static unsigned int __init get_xsaves_size(void)
624{
625 unsigned int eax, ebx, ecx, edx;
626 /*
627 * - CPUID function 0DH, sub-function 1:
628 * EBX enumerates the size (in bytes) required by
629 * the XSAVES instruction for an XSAVE area
630 * containing all the state components
631 * corresponding to bits currently set in
632 * XCR0 | IA32_XSS.
633 */
634 cpuid_count(XSTATE_CPUID, 1, &eax, &ebx, &ecx, &edx);
635 return ebx;
636}
637
638static unsigned int __init get_xsave_size(void)
639{
640 unsigned int eax, ebx, ecx, edx;
641 /*
642 * - CPUID function 0DH, sub-function 0:
643 * EBX enumerates the size (in bytes) required by
644 * the XSAVE instruction for an XSAVE area
645 * containing all the *user* state components
646 * corresponding to bits currently set in XCR0.
647 */
648 cpuid_count(XSTATE_CPUID, 0, &eax, &ebx, &ecx, &edx);
649 return ebx;
650}
651
652/*
653 * Will the runtime-enumerated 'xstate_size' fit in the init
654 * task's statically-allocated buffer?
655 */
656static bool is_supported_xstate_size(unsigned int test_xstate_size)
657{
658 if (test_xstate_size <= sizeof(union fpregs_state))
659 return true;
660
661 pr_warn("x86/fpu: xstate buffer too small (%zu < %d), disabling xsave\n",
662 sizeof(union fpregs_state), test_xstate_size);
663 return false;
664}
665
666static int __init init_xstate_size(void)
667{
668 /* Recompute the context size for enabled features: */
669 unsigned int possible_xstate_size;
670 unsigned int xsave_size;
671
672 xsave_size = get_xsave_size();
673
674 if (boot_cpu_has(X86_FEATURE_XSAVES))
675 possible_xstate_size = get_xsaves_size();
676 else
677 possible_xstate_size = xsave_size;
678
679 /* Ensure we have the space to store all enabled: */
680 if (!is_supported_xstate_size(possible_xstate_size))
681 return -EINVAL;
682
683 /*
684 * The size is OK, we are definitely going to use xsave,
685 * make it known to the world that we need more space.
686 */
687 fpu_kernel_xstate_size = possible_xstate_size;
688 do_extra_xstate_size_checks();
689
690 /*
691 * User space is always in standard format.
692 */
693 fpu_user_xstate_size = xsave_size;
694 return 0;
695}
696
697/*
698 * We enabled the XSAVE hardware, but something went wrong and
699 * we can not use it. Disable it.
700 */
701static void fpu__init_disable_system_xstate(void)
702{
703 xfeatures_mask = 0;
704 cr4_clear_bits(X86_CR4_OSXSAVE);
705 setup_clear_cpu_cap(X86_FEATURE_XSAVE);
706}
707
708/*
709 * Enable and initialize the xsave feature.
710 * Called once per system bootup.
711 */
712void __init fpu__init_system_xstate(void)
713{
714 unsigned int eax, ebx, ecx, edx;
715 static int on_boot_cpu __initdata = 1;
716 int err;
717 int i;
718
719 WARN_ON_FPU(!on_boot_cpu);
720 on_boot_cpu = 0;
721
722 if (!boot_cpu_has(X86_FEATURE_FPU)) {
723 pr_info("x86/fpu: No FPU detected\n");
724 return;
725 }
726
727 if (!boot_cpu_has(X86_FEATURE_XSAVE)) {
728 pr_info("x86/fpu: x87 FPU will use %s\n",
729 boot_cpu_has(X86_FEATURE_FXSR) ? "FXSAVE" : "FSAVE");
730 return;
731 }
732
733 if (boot_cpu_data.cpuid_level < XSTATE_CPUID) {
734 WARN_ON_FPU(1);
735 return;
736 }
737
738 cpuid_count(XSTATE_CPUID, 0, &eax, &ebx, &ecx, &edx);
739 xfeatures_mask = eax + ((u64)edx << 32);
740
741 if ((xfeatures_mask & XFEATURE_MASK_FPSSE) != XFEATURE_MASK_FPSSE) {
742 /*
743 * This indicates that something really unexpected happened
744 * with the enumeration. Disable XSAVE and try to continue
745 * booting without it. This is too early to BUG().
746 */
747 pr_err("x86/fpu: FP/SSE not present amongst the CPU's xstate features: 0x%llx.\n", xfeatures_mask);
748 goto out_disable;
749 }
750
751 /*
752 * Clear XSAVE features that are disabled in the normal CPUID.
753 */
754 for (i = 0; i < ARRAY_SIZE(xsave_cpuid_features); i++) {
755 if (!boot_cpu_has(xsave_cpuid_features[i]))
756 xfeatures_mask &= ~BIT(i);
757 }
758
759 xfeatures_mask &= fpu__get_supported_xfeatures_mask();
760
761 /* Enable xstate instructions to be able to continue with initialization: */
762 fpu__init_cpu_xstate();
763 err = init_xstate_size();
764 if (err)
765 goto out_disable;
766
767 /*
768 * Update info used for ptrace frames; use standard-format size and no
769 * supervisor xstates:
770 */
771 update_regset_xstate_info(fpu_user_xstate_size, xfeatures_mask & ~XFEATURE_MASK_SUPERVISOR);
772
773 fpu__init_prepare_fx_sw_frame();
774 setup_init_fpu_buf();
775 setup_xstate_comp();
776 print_xstate_offset_size();
777
778 pr_info("x86/fpu: Enabled xstate features 0x%llx, context size is %d bytes, using '%s' format.\n",
779 xfeatures_mask,
780 fpu_kernel_xstate_size,
781 boot_cpu_has(X86_FEATURE_XSAVES) ? "compacted" : "standard");
782 return;
783
784out_disable:
785 /* something went wrong, try to boot without any XSAVE support */
786 fpu__init_disable_system_xstate();
787}
788
789/*
790 * Restore minimal FPU state after suspend:
791 */
792void fpu__resume_cpu(void)
793{
794 /*
795 * Restore XCR0 on xsave capable CPUs:
796 */
797 if (boot_cpu_has(X86_FEATURE_XSAVE))
798 xsetbv(XCR_XFEATURE_ENABLED_MASK, xfeatures_mask);
799}
800
801/*
802 * Given an xstate feature nr, calculate where in the xsave
803 * buffer the state is. Callers should ensure that the buffer
804 * is valid.
805 */
806static void *__raw_xsave_addr(struct xregs_state *xsave, int xfeature_nr)
807{
808 if (!xfeature_enabled(xfeature_nr)) {
809 WARN_ON_FPU(1);
810 return NULL;
811 }
812
813 return (void *)xsave + xstate_comp_offsets[xfeature_nr];
814}
815/*
816 * Given the xsave area and a state inside, this function returns the
817 * address of the state.
818 *
819 * This is the API that is called to get xstate address in either
820 * standard format or compacted format of xsave area.
821 *
822 * Note that if there is no data for the field in the xsave buffer
823 * this will return NULL.
824 *
825 * Inputs:
826 * xstate: the thread's storage area for all FPU data
827 * xfeature_nr: state which is defined in xsave.h (e.g. XFEATURE_FP,
828 * XFEATURE_SSE, etc...)
829 * Output:
830 * address of the state in the xsave area, or NULL if the
831 * field is not present in the xsave buffer.
832 */
833void *get_xsave_addr(struct xregs_state *xsave, int xfeature_nr)
834{
835 /*
836 * Do we even *have* xsave state?
837 */
838 if (!boot_cpu_has(X86_FEATURE_XSAVE))
839 return NULL;
840
841 /*
842 * We should not ever be requesting features that we
843 * have not enabled. Remember that pcntxt_mask is
844 * what we write to the XCR0 register.
845 */
846 WARN_ONCE(!(xfeatures_mask & BIT_ULL(xfeature_nr)),
847 "get of unsupported state");
848 /*
849 * This assumes the last 'xsave*' instruction to
850 * have requested that 'xfeature_nr' be saved.
851 * If it did not, we might be seeing and old value
852 * of the field in the buffer.
853 *
854 * This can happen because the last 'xsave' did not
855 * request that this feature be saved (unlikely)
856 * or because the "init optimization" caused it
857 * to not be saved.
858 */
859 if (!(xsave->header.xfeatures & BIT_ULL(xfeature_nr)))
860 return NULL;
861
862 return __raw_xsave_addr(xsave, xfeature_nr);
863}
864EXPORT_SYMBOL_GPL(get_xsave_addr);
865
866/*
867 * This wraps up the common operations that need to occur when retrieving
868 * data from xsave state. It first ensures that the current task was
869 * using the FPU and retrieves the data in to a buffer. It then calculates
870 * the offset of the requested field in the buffer.
871 *
872 * This function is safe to call whether the FPU is in use or not.
873 *
874 * Note that this only works on the current task.
875 *
876 * Inputs:
877 * @xfeature_nr: state which is defined in xsave.h (e.g. XFEATURE_FP,
878 * XFEATURE_SSE, etc...)
879 * Output:
880 * address of the state in the xsave area or NULL if the state
881 * is not present or is in its 'init state'.
882 */
883const void *get_xsave_field_ptr(int xfeature_nr)
884{
885 struct fpu *fpu = ¤t->thread.fpu;
886
887 /*
888 * fpu__save() takes the CPU's xstate registers
889 * and saves them off to the 'fpu memory buffer.
890 */
891 fpu__save(fpu);
892
893 return get_xsave_addr(&fpu->state.xsave, xfeature_nr);
894}
895
896#ifdef CONFIG_ARCH_HAS_PKEYS
897
898#define NR_VALID_PKRU_BITS (CONFIG_NR_PROTECTION_KEYS * 2)
899#define PKRU_VALID_MASK (NR_VALID_PKRU_BITS - 1)
900/*
901 * This will go out and modify PKRU register to set the access
902 * rights for @pkey to @init_val.
903 */
904int arch_set_user_pkey_access(struct task_struct *tsk, int pkey,
905 unsigned long init_val)
906{
907 u32 old_pkru;
908 int pkey_shift = (pkey * PKRU_BITS_PER_PKEY);
909 u32 new_pkru_bits = 0;
910
911 /*
912 * This check implies XSAVE support. OSPKE only gets
913 * set if we enable XSAVE and we enable PKU in XCR0.
914 */
915 if (!boot_cpu_has(X86_FEATURE_OSPKE))
916 return -EINVAL;
917
918 /* Set the bits we need in PKRU: */
919 if (init_val & PKEY_DISABLE_ACCESS)
920 new_pkru_bits |= PKRU_AD_BIT;
921 if (init_val & PKEY_DISABLE_WRITE)
922 new_pkru_bits |= PKRU_WD_BIT;
923
924 /* Shift the bits in to the correct place in PKRU for pkey: */
925 new_pkru_bits <<= pkey_shift;
926
927 /* Get old PKRU and mask off any old bits in place: */
928 old_pkru = read_pkru();
929 old_pkru &= ~((PKRU_AD_BIT|PKRU_WD_BIT) << pkey_shift);
930
931 /* Write old part along with new part: */
932 write_pkru(old_pkru | new_pkru_bits);
933
934 return 0;
935}
936#endif /* ! CONFIG_ARCH_HAS_PKEYS */
937
938/*
939 * Weird legacy quirk: SSE and YMM states store information in the
940 * MXCSR and MXCSR_FLAGS fields of the FP area. That means if the FP
941 * area is marked as unused in the xfeatures header, we need to copy
942 * MXCSR and MXCSR_FLAGS if either SSE or YMM are in use.
943 */
944static inline bool xfeatures_mxcsr_quirk(u64 xfeatures)
945{
946 if (!(xfeatures & (XFEATURE_MASK_SSE|XFEATURE_MASK_YMM)))
947 return false;
948
949 if (xfeatures & XFEATURE_MASK_FP)
950 return false;
951
952 return true;
953}
954
955/*
956 * This is similar to user_regset_copyout(), but will not add offset to
957 * the source data pointer or increment pos, count, kbuf, and ubuf.
958 */
959static inline void
960__copy_xstate_to_kernel(void *kbuf, const void *data,
961 unsigned int offset, unsigned int size, unsigned int size_total)
962{
963 if (offset < size_total) {
964 unsigned int copy = min(size, size_total - offset);
965
966 memcpy(kbuf + offset, data, copy);
967 }
968}
969
970/*
971 * Convert from kernel XSAVES compacted format to standard format and copy
972 * to a kernel-space ptrace buffer.
973 *
974 * It supports partial copy but pos always starts from zero. This is called
975 * from xstateregs_get() and there we check the CPU has XSAVES.
976 */
977int copy_xstate_to_kernel(void *kbuf, struct xregs_state *xsave, unsigned int offset_start, unsigned int size_total)
978{
979 unsigned int offset, size;
980 struct xstate_header header;
981 int i;
982
983 /*
984 * Currently copy_regset_to_user() starts from pos 0:
985 */
986 if (unlikely(offset_start != 0))
987 return -EFAULT;
988
989 /*
990 * The destination is a ptrace buffer; we put in only user xstates:
991 */
992 memset(&header, 0, sizeof(header));
993 header.xfeatures = xsave->header.xfeatures;
994 header.xfeatures &= ~XFEATURE_MASK_SUPERVISOR;
995
996 /*
997 * Copy xregs_state->header:
998 */
999 offset = offsetof(struct xregs_state, header);
1000 size = sizeof(header);
1001
1002 __copy_xstate_to_kernel(kbuf, &header, offset, size, size_total);
1003
1004 for (i = 0; i < XFEATURE_MAX; i++) {
1005 /*
1006 * Copy only in-use xstates:
1007 */
1008 if ((header.xfeatures >> i) & 1) {
1009 void *src = __raw_xsave_addr(xsave, i);
1010
1011 offset = xstate_offsets[i];
1012 size = xstate_sizes[i];
1013
1014 /* The next component has to fit fully into the output buffer: */
1015 if (offset + size > size_total)
1016 break;
1017
1018 __copy_xstate_to_kernel(kbuf, src, offset, size, size_total);
1019 }
1020
1021 }
1022
1023 if (xfeatures_mxcsr_quirk(header.xfeatures)) {
1024 offset = offsetof(struct fxregs_state, mxcsr);
1025 size = MXCSR_AND_FLAGS_SIZE;
1026 __copy_xstate_to_kernel(kbuf, &xsave->i387.mxcsr, offset, size, size_total);
1027 }
1028
1029 /*
1030 * Fill xsave->i387.sw_reserved value for ptrace frame:
1031 */
1032 offset = offsetof(struct fxregs_state, sw_reserved);
1033 size = sizeof(xstate_fx_sw_bytes);
1034
1035 __copy_xstate_to_kernel(kbuf, xstate_fx_sw_bytes, offset, size, size_total);
1036
1037 return 0;
1038}
1039
1040static inline int
1041__copy_xstate_to_user(void __user *ubuf, const void *data, unsigned int offset, unsigned int size, unsigned int size_total)
1042{
1043 if (!size)
1044 return 0;
1045
1046 if (offset < size_total) {
1047 unsigned int copy = min(size, size_total - offset);
1048
1049 if (__copy_to_user(ubuf + offset, data, copy))
1050 return -EFAULT;
1051 }
1052 return 0;
1053}
1054
1055/*
1056 * Convert from kernel XSAVES compacted format to standard format and copy
1057 * to a user-space buffer. It supports partial copy but pos always starts from
1058 * zero. This is called from xstateregs_get() and there we check the CPU
1059 * has XSAVES.
1060 */
1061int copy_xstate_to_user(void __user *ubuf, struct xregs_state *xsave, unsigned int offset_start, unsigned int size_total)
1062{
1063 unsigned int offset, size;
1064 int ret, i;
1065 struct xstate_header header;
1066
1067 /*
1068 * Currently copy_regset_to_user() starts from pos 0:
1069 */
1070 if (unlikely(offset_start != 0))
1071 return -EFAULT;
1072
1073 /*
1074 * The destination is a ptrace buffer; we put in only user xstates:
1075 */
1076 memset(&header, 0, sizeof(header));
1077 header.xfeatures = xsave->header.xfeatures;
1078 header.xfeatures &= ~XFEATURE_MASK_SUPERVISOR;
1079
1080 /*
1081 * Copy xregs_state->header:
1082 */
1083 offset = offsetof(struct xregs_state, header);
1084 size = sizeof(header);
1085
1086 ret = __copy_xstate_to_user(ubuf, &header, offset, size, size_total);
1087 if (ret)
1088 return ret;
1089
1090 for (i = 0; i < XFEATURE_MAX; i++) {
1091 /*
1092 * Copy only in-use xstates:
1093 */
1094 if ((header.xfeatures >> i) & 1) {
1095 void *src = __raw_xsave_addr(xsave, i);
1096
1097 offset = xstate_offsets[i];
1098 size = xstate_sizes[i];
1099
1100 /* The next component has to fit fully into the output buffer: */
1101 if (offset + size > size_total)
1102 break;
1103
1104 ret = __copy_xstate_to_user(ubuf, src, offset, size, size_total);
1105 if (ret)
1106 return ret;
1107 }
1108
1109 }
1110
1111 if (xfeatures_mxcsr_quirk(header.xfeatures)) {
1112 offset = offsetof(struct fxregs_state, mxcsr);
1113 size = MXCSR_AND_FLAGS_SIZE;
1114 __copy_xstate_to_user(ubuf, &xsave->i387.mxcsr, offset, size, size_total);
1115 }
1116
1117 /*
1118 * Fill xsave->i387.sw_reserved value for ptrace frame:
1119 */
1120 offset = offsetof(struct fxregs_state, sw_reserved);
1121 size = sizeof(xstate_fx_sw_bytes);
1122
1123 ret = __copy_xstate_to_user(ubuf, xstate_fx_sw_bytes, offset, size, size_total);
1124 if (ret)
1125 return ret;
1126
1127 return 0;
1128}
1129
1130/*
1131 * Convert from a ptrace standard-format kernel buffer to kernel XSAVES format
1132 * and copy to the target thread. This is called from xstateregs_set().
1133 */
1134int copy_kernel_to_xstate(struct xregs_state *xsave, const void *kbuf)
1135{
1136 unsigned int offset, size;
1137 int i;
1138 struct xstate_header hdr;
1139
1140 offset = offsetof(struct xregs_state, header);
1141 size = sizeof(hdr);
1142
1143 memcpy(&hdr, kbuf + offset, size);
1144
1145 if (validate_xstate_header(&hdr))
1146 return -EINVAL;
1147
1148 for (i = 0; i < XFEATURE_MAX; i++) {
1149 u64 mask = ((u64)1 << i);
1150
1151 if (hdr.xfeatures & mask) {
1152 void *dst = __raw_xsave_addr(xsave, i);
1153
1154 offset = xstate_offsets[i];
1155 size = xstate_sizes[i];
1156
1157 memcpy(dst, kbuf + offset, size);
1158 }
1159 }
1160
1161 if (xfeatures_mxcsr_quirk(hdr.xfeatures)) {
1162 offset = offsetof(struct fxregs_state, mxcsr);
1163 size = MXCSR_AND_FLAGS_SIZE;
1164 memcpy(&xsave->i387.mxcsr, kbuf + offset, size);
1165 }
1166
1167 /*
1168 * The state that came in from userspace was user-state only.
1169 * Mask all the user states out of 'xfeatures':
1170 */
1171 xsave->header.xfeatures &= XFEATURE_MASK_SUPERVISOR;
1172
1173 /*
1174 * Add back in the features that came in from userspace:
1175 */
1176 xsave->header.xfeatures |= hdr.xfeatures;
1177
1178 return 0;
1179}
1180
1181/*
1182 * Convert from a ptrace or sigreturn standard-format user-space buffer to
1183 * kernel XSAVES format and copy to the target thread. This is called from
1184 * xstateregs_set(), as well as potentially from the sigreturn() and
1185 * rt_sigreturn() system calls.
1186 */
1187int copy_user_to_xstate(struct xregs_state *xsave, const void __user *ubuf)
1188{
1189 unsigned int offset, size;
1190 int i;
1191 struct xstate_header hdr;
1192
1193 offset = offsetof(struct xregs_state, header);
1194 size = sizeof(hdr);
1195
1196 if (__copy_from_user(&hdr, ubuf + offset, size))
1197 return -EFAULT;
1198
1199 if (validate_xstate_header(&hdr))
1200 return -EINVAL;
1201
1202 for (i = 0; i < XFEATURE_MAX; i++) {
1203 u64 mask = ((u64)1 << i);
1204
1205 if (hdr.xfeatures & mask) {
1206 void *dst = __raw_xsave_addr(xsave, i);
1207
1208 offset = xstate_offsets[i];
1209 size = xstate_sizes[i];
1210
1211 if (__copy_from_user(dst, ubuf + offset, size))
1212 return -EFAULT;
1213 }
1214 }
1215
1216 if (xfeatures_mxcsr_quirk(hdr.xfeatures)) {
1217 offset = offsetof(struct fxregs_state, mxcsr);
1218 size = MXCSR_AND_FLAGS_SIZE;
1219 if (__copy_from_user(&xsave->i387.mxcsr, ubuf + offset, size))
1220 return -EFAULT;
1221 }
1222
1223 /*
1224 * The state that came in from userspace was user-state only.
1225 * Mask all the user states out of 'xfeatures':
1226 */
1227 xsave->header.xfeatures &= XFEATURE_MASK_SUPERVISOR;
1228
1229 /*
1230 * Add back in the features that came in from userspace:
1231 */
1232 xsave->header.xfeatures |= hdr.xfeatures;
1233
1234 return 0;
1235}
1236
1237#ifdef CONFIG_PROC_PID_ARCH_STATUS
1238/*
1239 * Report the amount of time elapsed in millisecond since last AVX512
1240 * use in the task.
1241 */
1242static void avx512_status(struct seq_file *m, struct task_struct *task)
1243{
1244 unsigned long timestamp = READ_ONCE(task->thread.fpu.avx512_timestamp);
1245 long delta;
1246
1247 if (!timestamp) {
1248 /*
1249 * Report -1 if no AVX512 usage
1250 */
1251 delta = -1;
1252 } else {
1253 delta = (long)(jiffies - timestamp);
1254 /*
1255 * Cap to LONG_MAX if time difference > LONG_MAX
1256 */
1257 if (delta < 0)
1258 delta = LONG_MAX;
1259 delta = jiffies_to_msecs(delta);
1260 }
1261
1262 seq_put_decimal_ll(m, "AVX512_elapsed_ms:\t", delta);
1263 seq_putc(m, '\n');
1264}
1265
1266/*
1267 * Report architecture specific information
1268 */
1269int proc_pid_arch_status(struct seq_file *m, struct pid_namespace *ns,
1270 struct pid *pid, struct task_struct *task)
1271{
1272 /*
1273 * Report AVX512 state if the processor and build option supported.
1274 */
1275 if (cpu_feature_enabled(X86_FEATURE_AVX512F))
1276 avx512_status(m, task);
1277
1278 return 0;
1279}
1280#endif /* CONFIG_PROC_PID_ARCH_STATUS */