Linux Audio

Check our new training course

Loading...
v6.2
   1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 * xsave/xrstor support.
   4 *
   5 * Author: Suresh Siddha <suresh.b.siddha@intel.com>
   6 */
   7#include <linux/bitops.h>
   8#include <linux/compat.h>
   9#include <linux/cpu.h>
  10#include <linux/mman.h>
  11#include <linux/nospec.h>
  12#include <linux/pkeys.h>
  13#include <linux/seq_file.h>
  14#include <linux/proc_fs.h>
  15#include <linux/vmalloc.h>
  16
  17#include <asm/fpu/api.h>
  18#include <asm/fpu/regset.h>
  19#include <asm/fpu/signal.h>
  20#include <asm/fpu/xcr.h>
 
  21
  22#include <asm/tlbflush.h>
  23#include <asm/prctl.h>
  24#include <asm/elf.h>
  25
  26#include "context.h"
  27#include "internal.h"
  28#include "legacy.h"
  29#include "xstate.h"
  30
  31#define for_each_extended_xfeature(bit, mask)				\
  32	(bit) = FIRST_EXTENDED_XFEATURE;				\
  33	for_each_set_bit_from(bit, (unsigned long *)&(mask), 8 * sizeof(mask))
  34
  35/*
  36 * Although we spell it out in here, the Processor Trace
  37 * xfeature is completely unused.  We use other mechanisms
  38 * to save/restore PT state in Linux.
  39 */
  40static const char *xfeature_names[] =
  41{
  42	"x87 floating point registers"	,
  43	"SSE registers"			,
  44	"AVX registers"			,
  45	"MPX bounds registers"		,
  46	"MPX CSR"			,
  47	"AVX-512 opmask"		,
  48	"AVX-512 Hi256"			,
  49	"AVX-512 ZMM_Hi256"		,
  50	"Processor Trace (unused)"	,
  51	"Protection Keys User registers",
  52	"PASID state",
  53	"unknown xstate feature"	,
  54	"unknown xstate feature"	,
  55	"unknown xstate feature"	,
  56	"unknown xstate feature"	,
  57	"unknown xstate feature"	,
  58	"unknown xstate feature"	,
  59	"AMX Tile config"		,
  60	"AMX Tile data"			,
  61	"unknown xstate feature"	,
  62};
  63
  64static unsigned short xsave_cpuid_features[] __initdata = {
  65	[XFEATURE_FP]				= X86_FEATURE_FPU,
  66	[XFEATURE_SSE]				= X86_FEATURE_XMM,
  67	[XFEATURE_YMM]				= X86_FEATURE_AVX,
  68	[XFEATURE_BNDREGS]			= X86_FEATURE_MPX,
  69	[XFEATURE_BNDCSR]			= X86_FEATURE_MPX,
  70	[XFEATURE_OPMASK]			= X86_FEATURE_AVX512F,
  71	[XFEATURE_ZMM_Hi256]			= X86_FEATURE_AVX512F,
  72	[XFEATURE_Hi16_ZMM]			= X86_FEATURE_AVX512F,
  73	[XFEATURE_PT_UNIMPLEMENTED_SO_FAR]	= X86_FEATURE_INTEL_PT,
  74	[XFEATURE_PKRU]				= X86_FEATURE_PKU,
  75	[XFEATURE_PASID]			= X86_FEATURE_ENQCMD,
  76	[XFEATURE_XTILE_CFG]			= X86_FEATURE_AMX_TILE,
  77	[XFEATURE_XTILE_DATA]			= X86_FEATURE_AMX_TILE,
  78};
  79
  80static unsigned int xstate_offsets[XFEATURE_MAX] __ro_after_init =
  81	{ [ 0 ... XFEATURE_MAX - 1] = -1};
  82static unsigned int xstate_sizes[XFEATURE_MAX] __ro_after_init =
  83	{ [ 0 ... XFEATURE_MAX - 1] = -1};
  84static unsigned int xstate_flags[XFEATURE_MAX] __ro_after_init;
 
 
 
 
 
  85
  86#define XSTATE_FLAG_SUPERVISOR	BIT(0)
  87#define XSTATE_FLAG_ALIGNED64	BIT(1)
 
 
 
 
  88
  89/*
  90 * Return whether the system supports a given xfeature.
  91 *
  92 * Also return the name of the (most advanced) feature that the caller requested:
  93 */
  94int cpu_has_xfeatures(u64 xfeatures_needed, const char **feature_name)
  95{
  96	u64 xfeatures_missing = xfeatures_needed & ~fpu_kernel_cfg.max_features;
  97
  98	if (unlikely(feature_name)) {
  99		long xfeature_idx, max_idx;
 100		u64 xfeatures_print;
 101		/*
 102		 * So we use FLS here to be able to print the most advanced
 103		 * feature that was requested but is missing. So if a driver
 104		 * asks about "XFEATURE_MASK_SSE | XFEATURE_MASK_YMM" we'll print the
 105		 * missing AVX feature - this is the most informative message
 106		 * to users:
 107		 */
 108		if (xfeatures_missing)
 109			xfeatures_print = xfeatures_missing;
 110		else
 111			xfeatures_print = xfeatures_needed;
 112
 113		xfeature_idx = fls64(xfeatures_print)-1;
 114		max_idx = ARRAY_SIZE(xfeature_names)-1;
 115		xfeature_idx = min(xfeature_idx, max_idx);
 116
 117		*feature_name = xfeature_names[xfeature_idx];
 118	}
 119
 120	if (xfeatures_missing)
 121		return 0;
 122
 123	return 1;
 124}
 125EXPORT_SYMBOL_GPL(cpu_has_xfeatures);
 126
 127static bool xfeature_is_aligned64(int xfeature_nr)
 128{
 129	return xstate_flags[xfeature_nr] & XSTATE_FLAG_ALIGNED64;
 130}
 131
 132static bool xfeature_is_supervisor(int xfeature_nr)
 133{
 134	return xstate_flags[xfeature_nr] & XSTATE_FLAG_SUPERVISOR;
 
 
 
 
 
 
 
 
 135}
 136
 137static unsigned int xfeature_get_offset(u64 xcomp_bv, int xfeature)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 138{
 139	unsigned int offs, i;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 140
 141	/*
 142	 * Non-compacted format and legacy features use the cached fixed
 143	 * offsets.
 144	 */
 145	if (!cpu_feature_enabled(X86_FEATURE_XCOMPACTED) ||
 146	    xfeature <= XFEATURE_SSE)
 147		return xstate_offsets[xfeature];
 148
 149	/*
 150	 * Compacted format offsets depend on the actual content of the
 151	 * compacted xsave area which is determined by the xcomp_bv header
 152	 * field.
 153	 */
 154	offs = FXSAVE_SIZE + XSAVE_HDR_SIZE;
 155	for_each_extended_xfeature(i, xcomp_bv) {
 156		if (xfeature_is_aligned64(i))
 157			offs = ALIGN(offs, 64);
 158		if (i == xfeature)
 159			break;
 160		offs += xstate_sizes[i];
 
 
 
 
 
 161	}
 162	return offs;
 163}
 164
 165/*
 166 * Enable the extended processor state save/restore feature.
 167 * Called once per CPU onlining.
 168 */
 169void fpu__init_cpu_xstate(void)
 170{
 171	if (!boot_cpu_has(X86_FEATURE_XSAVE) || !fpu_kernel_cfg.max_features)
 172		return;
 173
 174	cr4_set_bits(X86_CR4_OSXSAVE);
 175
 
 
 176	/*
 177	 * Must happen after CR4 setup and before xsetbv() to allow KVM
 178	 * lazy passthrough.  Write independent of the dynamic state static
 179	 * key as that does not work on the boot CPU. This also ensures
 180	 * that any stale state is wiped out from XFD.
 181	 */
 182	if (cpu_feature_enabled(X86_FEATURE_XFD))
 183		wrmsrl(MSR_IA32_XFD, init_fpstate.xfd);
 
 
 
 
 
 184
 185	/*
 186	 * XCR_XFEATURE_ENABLED_MASK (aka. XCR0) sets user features
 187	 * managed by XSAVE{C, OPT, S} and XRSTOR{S}.  Only XSAVE user
 188	 * states can be set here.
 189	 */
 190	xsetbv(XCR_XFEATURE_ENABLED_MASK, fpu_user_cfg.max_features);
 191
 192	/*
 193	 * MSR_IA32_XSS sets supervisor states managed by XSAVES.
 194	 */
 195	if (boot_cpu_has(X86_FEATURE_XSAVES)) {
 196		wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor() |
 197				     xfeatures_mask_independent());
 198	}
 199}
 200
 201static bool xfeature_enabled(enum xfeature xfeature)
 202{
 203	return fpu_kernel_cfg.max_features & BIT_ULL(xfeature);
 204}
 205
 206/*
 207 * Record the offsets and sizes of various xstates contained
 208 * in the XSAVE state memory layout.
 209 */
 210static void __init setup_xstate_cache(void)
 211{
 212	u32 eax, ebx, ecx, edx, i;
 213	/* start at the beginning of the "extended state" */
 214	unsigned int last_good_offset = offsetof(struct xregs_state,
 215						 extended_state_area);
 216	/*
 217	 * The FP xstates and SSE xstates are legacy states. They are always
 218	 * in the fixed offsets in the xsave area in either compacted form
 219	 * or standard form.
 220	 */
 221	xstate_offsets[XFEATURE_FP]	= 0;
 222	xstate_sizes[XFEATURE_FP]	= offsetof(struct fxregs_state,
 223						   xmm_space);
 224
 225	xstate_offsets[XFEATURE_SSE]	= xstate_sizes[XFEATURE_FP];
 226	xstate_sizes[XFEATURE_SSE]	= sizeof_field(struct fxregs_state,
 227						       xmm_space);
 228
 229	for_each_extended_xfeature(i, fpu_kernel_cfg.max_features) {
 
 
 
 230		cpuid_count(XSTATE_CPUID, i, &eax, &ebx, &ecx, &edx);
 231
 232		xstate_sizes[i] = eax;
 233		xstate_flags[i] = ecx;
 234
 235		/*
 236		 * If an xfeature is supervisor state, the offset in EBX is
 237		 * invalid, leave it to -1.
 238		 */
 239		if (xfeature_is_supervisor(i))
 240			continue;
 241
 242		xstate_offsets[i] = ebx;
 243
 244		/*
 245		 * In our xstate size checks, we assume that the highest-numbered
 246		 * xstate feature has the highest offset in the buffer.  Ensure
 247		 * it does.
 248		 */
 249		WARN_ONCE(last_good_offset > xstate_offsets[i],
 250			  "x86/fpu: misordered xstate at %d\n", last_good_offset);
 251
 252		last_good_offset = xstate_offsets[i];
 253	}
 254}
 255
 256static void __init print_xstate_feature(u64 xstate_mask)
 257{
 258	const char *feature_name;
 259
 260	if (cpu_has_xfeatures(xstate_mask, &feature_name))
 261		pr_info("x86/fpu: Supporting XSAVE feature 0x%03Lx: '%s'\n", xstate_mask, feature_name);
 262}
 263
 264/*
 265 * Print out all the supported xstate features:
 266 */
 267static void __init print_xstate_features(void)
 268{
 269	print_xstate_feature(XFEATURE_MASK_FP);
 270	print_xstate_feature(XFEATURE_MASK_SSE);
 271	print_xstate_feature(XFEATURE_MASK_YMM);
 272	print_xstate_feature(XFEATURE_MASK_BNDREGS);
 273	print_xstate_feature(XFEATURE_MASK_BNDCSR);
 274	print_xstate_feature(XFEATURE_MASK_OPMASK);
 275	print_xstate_feature(XFEATURE_MASK_ZMM_Hi256);
 276	print_xstate_feature(XFEATURE_MASK_Hi16_ZMM);
 277	print_xstate_feature(XFEATURE_MASK_PKRU);
 278	print_xstate_feature(XFEATURE_MASK_PASID);
 279	print_xstate_feature(XFEATURE_MASK_XTILE_CFG);
 280	print_xstate_feature(XFEATURE_MASK_XTILE_DATA);
 281}
 282
 283/*
 284 * This check is important because it is easy to get XSTATE_*
 285 * confused with XSTATE_BIT_*.
 286 */
 287#define CHECK_XFEATURE(nr) do {		\
 288	WARN_ON(nr < FIRST_EXTENDED_XFEATURE);	\
 289	WARN_ON(nr >= XFEATURE_MAX);	\
 290} while (0)
 291
 292/*
 293 * Print out xstate component offsets and sizes
 
 294 */
 295static void __init print_xstate_offset_size(void)
 296{
 297	int i;
 298
 299	for_each_extended_xfeature(i, fpu_kernel_cfg.max_features) {
 300		pr_info("x86/fpu: xstate_offset[%d]: %4d, xstate_sizes[%d]: %4d\n",
 301			i, xfeature_get_offset(fpu_kernel_cfg.max_features, i),
 302			i, xstate_sizes[i]);
 
 
 303	}
 
 
 
 
 
 
 
 
 304}
 305
 306/*
 307 * This function is called only during boot time when x86 caps are not set
 308 * up and alternative can not be used yet.
 
 309 */
 310static __init void os_xrstor_booting(struct xregs_state *xstate)
 311{
 312	u64 mask = fpu_kernel_cfg.max_features & XFEATURE_MASK_FPSTATE;
 313	u32 lmask = mask;
 314	u32 hmask = mask >> 32;
 315	int err;
 316
 317	if (cpu_feature_enabled(X86_FEATURE_XSAVES))
 318		XSTATE_OP(XRSTORS, xstate, lmask, hmask, err);
 319	else
 320		XSTATE_OP(XRSTOR, xstate, lmask, hmask, err);
 321
 322	/*
 323	 * We should never fault when copying from a kernel buffer, and the FPU
 324	 * state we set at boot time should be valid.
 
 325	 */
 326	WARN_ON_FPU(err);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 327}
 328
 329/*
 330 * All supported features have either init state all zeros or are
 331 * handled in setup_init_fpu() individually. This is an explicit
 332 * feature list and does not use XFEATURE_MASK*SUPPORTED to catch
 333 * newly added supported features at build time and make people
 334 * actually look at the init state for the new feature.
 335 */
 336#define XFEATURES_INIT_FPSTATE_HANDLED		\
 337	(XFEATURE_MASK_FP |			\
 338	 XFEATURE_MASK_SSE |			\
 339	 XFEATURE_MASK_YMM |			\
 340	 XFEATURE_MASK_OPMASK |			\
 341	 XFEATURE_MASK_ZMM_Hi256 |		\
 342	 XFEATURE_MASK_Hi16_ZMM	 |		\
 343	 XFEATURE_MASK_PKRU |			\
 344	 XFEATURE_MASK_BNDREGS |		\
 345	 XFEATURE_MASK_BNDCSR |			\
 346	 XFEATURE_MASK_PASID |			\
 347	 XFEATURE_MASK_XTILE)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 348
 349/*
 350 * setup the xstate image representing the init state
 351 */
 352static void __init setup_init_fpu_buf(void)
 353{
 354	BUILD_BUG_ON((XFEATURE_MASK_USER_SUPPORTED |
 355		      XFEATURE_MASK_SUPERVISOR_SUPPORTED) !=
 356		     XFEATURES_INIT_FPSTATE_HANDLED);
 
 357
 358	if (!boot_cpu_has(X86_FEATURE_XSAVE))
 359		return;
 360
 
 361	print_xstate_features();
 362
 363	xstate_init_xcomp_bv(&init_fpstate.regs.xsave, init_fpstate.xfeatures);
 
 
 364
 365	/*
 366	 * Init all the features state with header.xfeatures being 0x0
 367	 */
 368	os_xrstor_booting(&init_fpstate.regs.xsave);
 369
 370	/*
 371	 * All components are now in init state. Read the state back so
 372	 * that init_fpstate contains all non-zero init state. This only
 373	 * works with XSAVE, but not with XSAVEOPT and XSAVEC/S because
 374	 * those use the init optimization which skips writing data for
 375	 * components in init state.
 376	 *
 377	 * XSAVE could be used, but that would require to reshuffle the
 378	 * data when XSAVEC/S is available because XSAVEC/S uses xstate
 379	 * compaction. But doing so is a pointless exercise because most
 380	 * components have an all zeros init state except for the legacy
 381	 * ones (FP and SSE). Those can be saved with FXSAVE into the
 382	 * legacy area. Adding new features requires to ensure that init
 383	 * state is all zeroes or if not to add the necessary handling
 384	 * here.
 385	 */
 386	fxsave(&init_fpstate.regs.fxsave);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 387}
 388
 389int xfeature_size(int xfeature_nr)
 390{
 391	u32 eax, ebx, ecx, edx;
 392
 393	CHECK_XFEATURE(xfeature_nr);
 394	cpuid_count(XSTATE_CPUID, xfeature_nr, &eax, &ebx, &ecx, &edx);
 395	return eax;
 396}
 397
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 398/* Validate an xstate header supplied by userspace (ptrace or sigreturn) */
 399static int validate_user_xstate_header(const struct xstate_header *hdr,
 400				       struct fpstate *fpstate)
 401{
 402	/* No unknown or supervisor features may be set */
 403	if (hdr->xfeatures & ~fpstate->user_xfeatures)
 404		return -EINVAL;
 405
 406	/* Userspace must use the uncompacted format */
 407	if (hdr->xcomp_bv)
 408		return -EINVAL;
 409
 410	/*
 411	 * If 'reserved' is shrunken to add a new field, make sure to validate
 412	 * that new field here!
 413	 */
 414	BUILD_BUG_ON(sizeof(hdr->reserved) != 48);
 415
 416	/* No reserved bits may be set */
 417	if (memchr_inv(hdr->reserved, 0, sizeof(hdr->reserved)))
 418		return -EINVAL;
 419
 420	return 0;
 421}
 422
 423static void __init __xstate_dump_leaves(void)
 424{
 425	int i;
 426	u32 eax, ebx, ecx, edx;
 427	static int should_dump = 1;
 428
 429	if (!should_dump)
 430		return;
 431	should_dump = 0;
 432	/*
 433	 * Dump out a few leaves past the ones that we support
 434	 * just in case there are some goodies up there
 435	 */
 436	for (i = 0; i < XFEATURE_MAX + 10; i++) {
 437		cpuid_count(XSTATE_CPUID, i, &eax, &ebx, &ecx, &edx);
 438		pr_warn("CPUID[%02x, %02x]: eax=%08x ebx=%08x ecx=%08x edx=%08x\n",
 439			XSTATE_CPUID, i, eax, ebx, ecx, edx);
 440	}
 441}
 442
 443#define XSTATE_WARN_ON(x, fmt, ...) do {					\
 444	if (WARN_ONCE(x, "XSAVE consistency problem: " fmt, ##__VA_ARGS__)) {	\
 445		__xstate_dump_leaves();						\
 446	}									\
 447} while (0)
 448
 449#define XCHECK_SZ(sz, nr, nr_macro, __struct) do {			\
 450	if ((nr == nr_macro) &&						\
 451	    WARN_ONCE(sz != sizeof(__struct),				\
 452		"%s: struct is %zu bytes, cpu state %d bytes\n",	\
 453		__stringify(nr_macro), sizeof(__struct), sz)) {		\
 454		__xstate_dump_leaves();					\
 455	}								\
 456} while (0)
 457
 458/**
 459 * check_xtile_data_against_struct - Check tile data state size.
 460 *
 461 * Calculate the state size by multiplying the single tile size which is
 462 * recorded in a C struct, and the number of tiles that the CPU informs.
 463 * Compare the provided size with the calculation.
 464 *
 465 * @size:	The tile data state size
 466 *
 467 * Returns:	0 on success, -EINVAL on mismatch.
 468 */
 469static int __init check_xtile_data_against_struct(int size)
 470{
 471	u32 max_palid, palid, state_size;
 472	u32 eax, ebx, ecx, edx;
 473	u16 max_tile;
 474
 475	/*
 476	 * Check the maximum palette id:
 477	 *   eax: the highest numbered palette subleaf.
 478	 */
 479	cpuid_count(TILE_CPUID, 0, &max_palid, &ebx, &ecx, &edx);
 480
 481	/*
 482	 * Cross-check each tile size and find the maximum number of
 483	 * supported tiles.
 484	 */
 485	for (palid = 1, max_tile = 0; palid <= max_palid; palid++) {
 486		u16 tile_size, max;
 487
 488		/*
 489		 * Check the tile size info:
 490		 *   eax[31:16]:  bytes per title
 491		 *   ebx[31:16]:  the max names (or max number of tiles)
 492		 */
 493		cpuid_count(TILE_CPUID, palid, &eax, &ebx, &edx, &edx);
 494		tile_size = eax >> 16;
 495		max = ebx >> 16;
 496
 497		if (tile_size != sizeof(struct xtile_data)) {
 498			pr_err("%s: struct is %zu bytes, cpu xtile %d bytes\n",
 499			       __stringify(XFEATURE_XTILE_DATA),
 500			       sizeof(struct xtile_data), tile_size);
 501			__xstate_dump_leaves();
 502			return -EINVAL;
 503		}
 504
 505		if (max > max_tile)
 506			max_tile = max;
 507	}
 508
 509	state_size = sizeof(struct xtile_data) * max_tile;
 510	if (size != state_size) {
 511		pr_err("%s: calculated size is %u bytes, cpu state %d bytes\n",
 512		       __stringify(XFEATURE_XTILE_DATA), state_size, size);
 513		__xstate_dump_leaves();
 514		return -EINVAL;
 515	}
 516	return 0;
 517}
 518
 519/*
 520 * We have a C struct for each 'xstate'.  We need to ensure
 521 * that our software representation matches what the CPU
 522 * tells us about the state's size.
 523 */
 524static bool __init check_xstate_against_struct(int nr)
 525{
 526	/*
 527	 * Ask the CPU for the size of the state.
 528	 */
 529	int sz = xfeature_size(nr);
 530	/*
 531	 * Match each CPU state with the corresponding software
 532	 * structure.
 533	 */
 534	XCHECK_SZ(sz, nr, XFEATURE_YMM,       struct ymmh_struct);
 535	XCHECK_SZ(sz, nr, XFEATURE_BNDREGS,   struct mpx_bndreg_state);
 536	XCHECK_SZ(sz, nr, XFEATURE_BNDCSR,    struct mpx_bndcsr_state);
 537	XCHECK_SZ(sz, nr, XFEATURE_OPMASK,    struct avx_512_opmask_state);
 538	XCHECK_SZ(sz, nr, XFEATURE_ZMM_Hi256, struct avx_512_zmm_uppers_state);
 539	XCHECK_SZ(sz, nr, XFEATURE_Hi16_ZMM,  struct avx_512_hi16_state);
 540	XCHECK_SZ(sz, nr, XFEATURE_PKRU,      struct pkru_state);
 541	XCHECK_SZ(sz, nr, XFEATURE_PASID,     struct ia32_pasid_state);
 542	XCHECK_SZ(sz, nr, XFEATURE_XTILE_CFG, struct xtile_cfg);
 543
 544	/* The tile data size varies between implementations. */
 545	if (nr == XFEATURE_XTILE_DATA)
 546		check_xtile_data_against_struct(sz);
 547
 548	/*
 549	 * Make *SURE* to add any feature numbers in below if
 550	 * there are "holes" in the xsave state component
 551	 * numbers.
 552	 */
 553	if ((nr < XFEATURE_YMM) ||
 554	    (nr >= XFEATURE_MAX) ||
 555	    (nr == XFEATURE_PT_UNIMPLEMENTED_SO_FAR) ||
 556	    ((nr >= XFEATURE_RSRVD_COMP_11) && (nr <= XFEATURE_RSRVD_COMP_16))) {
 557		XSTATE_WARN_ON(1, "No structure for xstate: %d\n", nr);
 558		return false;
 559	}
 560	return true;
 561}
 562
 563static unsigned int xstate_calculate_size(u64 xfeatures, bool compacted)
 564{
 565	unsigned int topmost = fls64(xfeatures) -  1;
 566	unsigned int offset = xstate_offsets[topmost];
 567
 568	if (topmost <= XFEATURE_SSE)
 569		return sizeof(struct xregs_state);
 570
 571	if (compacted)
 572		offset = xfeature_get_offset(xfeatures, topmost);
 573	return offset + xstate_sizes[topmost];
 574}
 575
 576/*
 577 * This essentially double-checks what the cpu told us about
 578 * how large the XSAVE buffer needs to be.  We are recalculating
 579 * it to be safe.
 580 *
 581 * Independent XSAVE features allocate their own buffers and are not
 582 * covered by these checks. Only the size of the buffer for task->fpu
 583 * is checked here.
 584 */
 585static bool __init paranoid_xstate_size_valid(unsigned int kernel_size)
 586{
 587	bool compacted = cpu_feature_enabled(X86_FEATURE_XCOMPACTED);
 588	bool xsaves = cpu_feature_enabled(X86_FEATURE_XSAVES);
 589	unsigned int size = FXSAVE_SIZE + XSAVE_HDR_SIZE;
 590	int i;
 591
 592	for_each_extended_xfeature(i, fpu_kernel_cfg.max_features) {
 593		if (!check_xstate_against_struct(i))
 594			return false;
 
 
 595		/*
 596		 * Supervisor state components can be managed only by
 597		 * XSAVES.
 598		 */
 599		if (!xsaves && xfeature_is_supervisor(i)) {
 600			XSTATE_WARN_ON(1, "Got supervisor feature %d, but XSAVES not advertised\n", i);
 601			return false;
 602		}
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 603	}
 604	size = xstate_calculate_size(fpu_kernel_cfg.max_features, compacted);
 605	XSTATE_WARN_ON(size != kernel_size,
 606		       "size %u != kernel_size %u\n", size, kernel_size);
 607	return size == kernel_size;
 608}
 609
 
 610/*
 611 * Get total size of enabled xstates in XCR0 | IA32_XSS.
 612 *
 613 * Note the SDM's wording here.  "sub-function 0" only enumerates
 614 * the size of the *user* states.  If we use it to size a buffer
 615 * that we use 'XSAVES' on, we could potentially overflow the
 616 * buffer because 'XSAVES' saves system states too.
 617 *
 618 * This also takes compaction into account. So this works for
 619 * XSAVEC as well.
 620 */
 621static unsigned int __init get_compacted_size(void)
 622{
 623	unsigned int eax, ebx, ecx, edx;
 624	/*
 625	 * - CPUID function 0DH, sub-function 1:
 626	 *    EBX enumerates the size (in bytes) required by
 627	 *    the XSAVES instruction for an XSAVE area
 628	 *    containing all the state components
 629	 *    corresponding to bits currently set in
 630	 *    XCR0 | IA32_XSS.
 631	 *
 632	 * When XSAVES is not available but XSAVEC is (virt), then there
 633	 * are no supervisor states, but XSAVEC still uses compacted
 634	 * format.
 635	 */
 636	cpuid_count(XSTATE_CPUID, 1, &eax, &ebx, &ecx, &edx);
 637	return ebx;
 638}
 639
 640/*
 641 * Get the total size of the enabled xstates without the independent supervisor
 642 * features.
 643 */
 644static unsigned int __init get_xsave_compacted_size(void)
 645{
 646	u64 mask = xfeatures_mask_independent();
 647	unsigned int size;
 648
 649	if (!mask)
 650		return get_compacted_size();
 651
 652	/* Disable independent features. */
 653	wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor());
 654
 655	/*
 656	 * Ask the hardware what size is required of the buffer.
 657	 * This is the size required for the task->fpu buffer.
 658	 */
 659	size = get_compacted_size();
 660
 661	/* Re-enable independent features so XSAVES will work on them again. */
 662	wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor() | mask);
 663
 664	return size;
 665}
 666
 667static unsigned int __init get_xsave_size_user(void)
 668{
 669	unsigned int eax, ebx, ecx, edx;
 670	/*
 671	 * - CPUID function 0DH, sub-function 0:
 672	 *    EBX enumerates the size (in bytes) required by
 673	 *    the XSAVE instruction for an XSAVE area
 674	 *    containing all the *user* state components
 675	 *    corresponding to bits currently set in XCR0.
 676	 */
 677	cpuid_count(XSTATE_CPUID, 0, &eax, &ebx, &ecx, &edx);
 678	return ebx;
 679}
 680
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 681static int __init init_xstate_size(void)
 682{
 683	/* Recompute the context size for enabled features: */
 684	unsigned int user_size, kernel_size, kernel_default_size;
 685	bool compacted = cpu_feature_enabled(X86_FEATURE_XCOMPACTED);
 686
 687	/* Uncompacted user space size */
 688	user_size = get_xsave_size_user();
 689
 690	/*
 691	 * XSAVES kernel size includes supervisor states and uses compacted
 692	 * format. XSAVEC uses compacted format, but does not save
 693	 * supervisor states.
 694	 *
 695	 * XSAVE[OPT] do not support supervisor states so kernel and user
 696	 * size is identical.
 697	 */
 698	if (compacted)
 699		kernel_size = get_xsave_compacted_size();
 700	else
 701		kernel_size = user_size;
 702
 703	kernel_default_size =
 704		xstate_calculate_size(fpu_kernel_cfg.default_features, compacted);
 705
 706	if (!paranoid_xstate_size_valid(kernel_size))
 
 707		return -EINVAL;
 708
 709	fpu_kernel_cfg.max_size = kernel_size;
 710	fpu_user_cfg.max_size = user_size;
 711
 712	fpu_kernel_cfg.default_size = kernel_default_size;
 713	fpu_user_cfg.default_size =
 714		xstate_calculate_size(fpu_user_cfg.default_features, false);
 715
 
 
 
 
 716	return 0;
 717}
 718
 719/*
 720 * We enabled the XSAVE hardware, but something went wrong and
 721 * we can not use it.  Disable it.
 722 */
 723static void __init fpu__init_disable_system_xstate(unsigned int legacy_size)
 724{
 725	fpu_kernel_cfg.max_features = 0;
 726	cr4_clear_bits(X86_CR4_OSXSAVE);
 727	setup_clear_cpu_cap(X86_FEATURE_XSAVE);
 728
 729	/* Restore the legacy size.*/
 730	fpu_kernel_cfg.max_size = legacy_size;
 731	fpu_kernel_cfg.default_size = legacy_size;
 732	fpu_user_cfg.max_size = legacy_size;
 733	fpu_user_cfg.default_size = legacy_size;
 734
 735	/*
 736	 * Prevent enabling the static branch which enables writes to the
 737	 * XFD MSR.
 738	 */
 739	init_fpstate.xfd = 0;
 740
 741	fpstate_reset(&current->thread.fpu);
 742}
 743
 744/*
 745 * Enable and initialize the xsave feature.
 746 * Called once per system bootup.
 747 */
 748void __init fpu__init_system_xstate(unsigned int legacy_size)
 749{
 750	unsigned int eax, ebx, ecx, edx;
 751	u64 xfeatures;
 752	int err;
 753	int i;
 754
 
 
 
 755	if (!boot_cpu_has(X86_FEATURE_FPU)) {
 756		pr_info("x86/fpu: No FPU detected\n");
 757		return;
 758	}
 759
 760	if (!boot_cpu_has(X86_FEATURE_XSAVE)) {
 761		pr_info("x86/fpu: x87 FPU will use %s\n",
 762			boot_cpu_has(X86_FEATURE_FXSR) ? "FXSAVE" : "FSAVE");
 763		return;
 764	}
 765
 766	if (boot_cpu_data.cpuid_level < XSTATE_CPUID) {
 767		WARN_ON_FPU(1);
 768		return;
 769	}
 770
 771	/*
 772	 * Find user xstates supported by the processor.
 773	 */
 774	cpuid_count(XSTATE_CPUID, 0, &eax, &ebx, &ecx, &edx);
 775	fpu_kernel_cfg.max_features = eax + ((u64)edx << 32);
 776
 777	/*
 778	 * Find supervisor xstates supported by the processor.
 779	 */
 780	cpuid_count(XSTATE_CPUID, 1, &eax, &ebx, &ecx, &edx);
 781	fpu_kernel_cfg.max_features |= ecx + ((u64)edx << 32);
 782
 783	if ((fpu_kernel_cfg.max_features & XFEATURE_MASK_FPSSE) != XFEATURE_MASK_FPSSE) {
 784		/*
 785		 * This indicates that something really unexpected happened
 786		 * with the enumeration.  Disable XSAVE and try to continue
 787		 * booting without it.  This is too early to BUG().
 788		 */
 789		pr_err("x86/fpu: FP/SSE not present amongst the CPU's xstate features: 0x%llx.\n",
 790		       fpu_kernel_cfg.max_features);
 791		goto out_disable;
 792	}
 793
 794	/*
 795	 * Clear XSAVE features that are disabled in the normal CPUID.
 796	 */
 797	for (i = 0; i < ARRAY_SIZE(xsave_cpuid_features); i++) {
 798		unsigned short cid = xsave_cpuid_features[i];
 799
 800		/* Careful: X86_FEATURE_FPU is 0! */
 801		if ((i != XFEATURE_FP && !cid) || !boot_cpu_has(cid))
 802			fpu_kernel_cfg.max_features &= ~BIT_ULL(i);
 803	}
 804
 805	if (!cpu_feature_enabled(X86_FEATURE_XFD))
 806		fpu_kernel_cfg.max_features &= ~XFEATURE_MASK_USER_DYNAMIC;
 807
 808	if (!cpu_feature_enabled(X86_FEATURE_XSAVES))
 809		fpu_kernel_cfg.max_features &= XFEATURE_MASK_USER_SUPPORTED;
 810	else
 811		fpu_kernel_cfg.max_features &= XFEATURE_MASK_USER_SUPPORTED |
 812					XFEATURE_MASK_SUPERVISOR_SUPPORTED;
 813
 814	fpu_user_cfg.max_features = fpu_kernel_cfg.max_features;
 815	fpu_user_cfg.max_features &= XFEATURE_MASK_USER_SUPPORTED;
 816
 817	/* Clean out dynamic features from default */
 818	fpu_kernel_cfg.default_features = fpu_kernel_cfg.max_features;
 819	fpu_kernel_cfg.default_features &= ~XFEATURE_MASK_USER_DYNAMIC;
 820
 821	fpu_user_cfg.default_features = fpu_user_cfg.max_features;
 822	fpu_user_cfg.default_features &= ~XFEATURE_MASK_USER_DYNAMIC;
 823
 824	/* Store it for paranoia check at the end */
 825	xfeatures = fpu_kernel_cfg.max_features;
 826
 827	/*
 828	 * Initialize the default XFD state in initfp_state and enable the
 829	 * dynamic sizing mechanism if dynamic states are available.  The
 830	 * static key cannot be enabled here because this runs before
 831	 * jump_label_init(). This is delayed to an initcall.
 832	 */
 833	init_fpstate.xfd = fpu_user_cfg.max_features & XFEATURE_MASK_USER_DYNAMIC;
 834
 835	/* Set up compaction feature bit */
 836	if (cpu_feature_enabled(X86_FEATURE_XSAVEC) ||
 837	    cpu_feature_enabled(X86_FEATURE_XSAVES))
 838		setup_force_cpu_cap(X86_FEATURE_XCOMPACTED);
 839
 840	/* Enable xstate instructions to be able to continue with initialization: */
 841	fpu__init_cpu_xstate();
 842
 843	/* Cache size, offset and flags for initialization */
 844	setup_xstate_cache();
 845
 846	err = init_xstate_size();
 847	if (err)
 848		goto out_disable;
 849
 850	/* Reset the state for the current task */
 851	fpstate_reset(&current->thread.fpu);
 852
 853	/*
 854	 * Update info used for ptrace frames; use standard-format size and no
 855	 * supervisor xstates:
 856	 */
 857	update_regset_xstate_info(fpu_user_cfg.max_size,
 858				  fpu_user_cfg.max_features);
 859
 860	/*
 861	 * init_fpstate excludes dynamic states as they are large but init
 862	 * state is zero.
 863	 */
 864	init_fpstate.size		= fpu_kernel_cfg.default_size;
 865	init_fpstate.xfeatures		= fpu_kernel_cfg.default_features;
 866
 867	if (init_fpstate.size > sizeof(init_fpstate.regs)) {
 868		pr_warn("x86/fpu: init_fpstate buffer too small (%zu < %d), disabling XSAVE\n",
 869			sizeof(init_fpstate.regs), init_fpstate.size);
 870		goto out_disable;
 871	}
 872
 
 873	setup_init_fpu_buf();
 874
 875	/*
 876	 * Paranoia check whether something in the setup modified the
 877	 * xfeatures mask.
 878	 */
 879	if (xfeatures != fpu_kernel_cfg.max_features) {
 880		pr_err("x86/fpu: xfeatures modified from 0x%016llx to 0x%016llx during init, disabling XSAVE\n",
 881		       xfeatures, fpu_kernel_cfg.max_features);
 882		goto out_disable;
 883	}
 884
 885	print_xstate_offset_size();
 
 886	pr_info("x86/fpu: Enabled xstate features 0x%llx, context size is %d bytes, using '%s' format.\n",
 887		fpu_kernel_cfg.max_features,
 888		fpu_kernel_cfg.max_size,
 889		boot_cpu_has(X86_FEATURE_XCOMPACTED) ? "compacted" : "standard");
 890	return;
 891
 892out_disable:
 893	/* something went wrong, try to boot without any XSAVE support */
 894	fpu__init_disable_system_xstate(legacy_size);
 895}
 896
 897/*
 898 * Restore minimal FPU state after suspend:
 899 */
 900void fpu__resume_cpu(void)
 901{
 902	/*
 903	 * Restore XCR0 on xsave capable CPUs:
 904	 */
 905	if (cpu_feature_enabled(X86_FEATURE_XSAVE))
 906		xsetbv(XCR_XFEATURE_ENABLED_MASK, fpu_user_cfg.max_features);
 907
 908	/*
 909	 * Restore IA32_XSS. The same CPUID bit enumerates support
 910	 * of XSAVES and MSR_IA32_XSS.
 911	 */
 912	if (cpu_feature_enabled(X86_FEATURE_XSAVES)) {
 913		wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor()  |
 914				     xfeatures_mask_independent());
 915	}
 916
 917	if (fpu_state_size_dynamic())
 918		wrmsrl(MSR_IA32_XFD, current->thread.fpu.fpstate->xfd);
 919}
 920
 921/*
 922 * Given an xstate feature nr, calculate where in the xsave
 923 * buffer the state is.  Callers should ensure that the buffer
 924 * is valid.
 925 */
 926static void *__raw_xsave_addr(struct xregs_state *xsave, int xfeature_nr)
 927{
 928	u64 xcomp_bv = xsave->header.xcomp_bv;
 929
 930	if (WARN_ON_ONCE(!xfeature_enabled(xfeature_nr)))
 931		return NULL;
 932
 933	if (cpu_feature_enabled(X86_FEATURE_XCOMPACTED)) {
 934		if (WARN_ON_ONCE(!(xcomp_bv & BIT_ULL(xfeature_nr))))
 935			return NULL;
 936	}
 937
 938	return (void *)xsave + xfeature_get_offset(xcomp_bv, xfeature_nr);
 939}
 940
 941/*
 942 * Given the xsave area and a state inside, this function returns the
 943 * address of the state.
 944 *
 945 * This is the API that is called to get xstate address in either
 946 * standard format or compacted format of xsave area.
 947 *
 948 * Note that if there is no data for the field in the xsave buffer
 949 * this will return NULL.
 950 *
 951 * Inputs:
 952 *	xstate: the thread's storage area for all FPU data
 953 *	xfeature_nr: state which is defined in xsave.h (e.g. XFEATURE_FP,
 954 *	XFEATURE_SSE, etc...)
 955 * Output:
 956 *	address of the state in the xsave area, or NULL if the
 957 *	field is not present in the xsave buffer.
 958 */
 959void *get_xsave_addr(struct xregs_state *xsave, int xfeature_nr)
 960{
 961	/*
 962	 * Do we even *have* xsave state?
 963	 */
 964	if (!boot_cpu_has(X86_FEATURE_XSAVE))
 965		return NULL;
 966
 967	/*
 968	 * We should not ever be requesting features that we
 969	 * have not enabled.
 970	 */
 971	if (WARN_ON_ONCE(!xfeature_enabled(xfeature_nr)))
 972		return NULL;
 973
 974	/*
 975	 * This assumes the last 'xsave*' instruction to
 976	 * have requested that 'xfeature_nr' be saved.
 977	 * If it did not, we might be seeing and old value
 978	 * of the field in the buffer.
 979	 *
 980	 * This can happen because the last 'xsave' did not
 981	 * request that this feature be saved (unlikely)
 982	 * or because the "init optimization" caused it
 983	 * to not be saved.
 984	 */
 985	if (!(xsave->header.xfeatures & BIT_ULL(xfeature_nr)))
 986		return NULL;
 987
 988	return __raw_xsave_addr(xsave, xfeature_nr);
 989}
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 990
 991#ifdef CONFIG_ARCH_HAS_PKEYS
 992
 993/*
 994 * This will go out and modify PKRU register to set the access
 995 * rights for @pkey to @init_val.
 996 */
 997int arch_set_user_pkey_access(struct task_struct *tsk, int pkey,
 998			      unsigned long init_val)
 999{
1000	u32 old_pkru, new_pkru_bits = 0;
1001	int pkey_shift;
 
1002
1003	/*
1004	 * This check implies XSAVE support.  OSPKE only gets
1005	 * set if we enable XSAVE and we enable PKU in XCR0.
1006	 */
1007	if (!cpu_feature_enabled(X86_FEATURE_OSPKE))
1008		return -EINVAL;
1009
1010	/*
1011	 * This code should only be called with valid 'pkey'
1012	 * values originating from in-kernel users.  Complain
1013	 * if a bad value is observed.
1014	 */
1015	if (WARN_ON_ONCE(pkey >= arch_max_pkey()))
1016		return -EINVAL;
1017
1018	/* Set the bits we need in PKRU:  */
1019	if (init_val & PKEY_DISABLE_ACCESS)
1020		new_pkru_bits |= PKRU_AD_BIT;
1021	if (init_val & PKEY_DISABLE_WRITE)
1022		new_pkru_bits |= PKRU_WD_BIT;
1023
1024	/* Shift the bits in to the correct place in PKRU for pkey: */
1025	pkey_shift = pkey * PKRU_BITS_PER_PKEY;
1026	new_pkru_bits <<= pkey_shift;
1027
1028	/* Get old PKRU and mask off any old bits in place: */
1029	old_pkru = read_pkru();
1030	old_pkru &= ~((PKRU_AD_BIT|PKRU_WD_BIT) << pkey_shift);
1031
1032	/* Write old part along with new part: */
1033	write_pkru(old_pkru | new_pkru_bits);
1034
1035	return 0;
1036}
1037#endif /* ! CONFIG_ARCH_HAS_PKEYS */
1038
1039static void copy_feature(bool from_xstate, struct membuf *to, void *xstate,
1040			 void *init_xstate, unsigned int size)
 
 
 
 
 
1041{
1042	membuf_write(to, from_xstate ? xstate : init_xstate, size);
 
 
 
 
 
 
1043}
1044
1045/**
1046 * __copy_xstate_to_uabi_buf - Copy kernel saved xstate to a UABI buffer
1047 * @to:		membuf descriptor
1048 * @fpstate:	The fpstate buffer from which to copy
1049 * @pkru_val:	The PKRU value to store in the PKRU component
1050 * @copy_mode:	The requested copy mode
1051 *
1052 * Converts from kernel XSAVE or XSAVES compacted format to UABI conforming
1053 * format, i.e. from the kernel internal hardware dependent storage format
1054 * to the requested @mode. UABI XSTATE is always uncompacted!
 
 
 
 
 
 
 
 
 
1055 *
1056 * It supports partial copy but @to.pos always starts from zero.
 
1057 */
1058void __copy_xstate_to_uabi_buf(struct membuf to, struct fpstate *fpstate,
1059			       u32 pkru_val, enum xstate_copy_mode copy_mode)
1060{
1061	const unsigned int off_mxcsr = offsetof(struct fxregs_state, mxcsr);
1062	struct xregs_state *xinit = &init_fpstate.regs.xsave;
1063	struct xregs_state *xsave = &fpstate->regs.xsave;
1064	struct xstate_header header;
1065	unsigned int zerofrom;
1066	u64 mask;
 
1067	int i;
1068
1069	memset(&header, 0, sizeof(header));
1070	header.xfeatures = xsave->header.xfeatures;
1071
1072	/* Mask out the feature bits depending on copy mode */
1073	switch (copy_mode) {
1074	case XSTATE_COPY_FP:
1075		header.xfeatures &= XFEATURE_MASK_FP;
1076		break;
1077
1078	case XSTATE_COPY_FX:
1079		header.xfeatures &= XFEATURE_MASK_FP | XFEATURE_MASK_SSE;
1080		break;
1081
1082	case XSTATE_COPY_XSAVE:
1083		header.xfeatures &= fpstate->user_xfeatures;
1084		break;
1085	}
1086
1087	/* Copy FP state up to MXCSR */
1088	copy_feature(header.xfeatures & XFEATURE_MASK_FP, &to, &xsave->i387,
1089		     &xinit->i387, off_mxcsr);
1090
1091	/* Copy MXCSR when SSE or YMM are set in the feature mask */
1092	copy_feature(header.xfeatures & (XFEATURE_MASK_SSE | XFEATURE_MASK_YMM),
1093		     &to, &xsave->i387.mxcsr, &xinit->i387.mxcsr,
1094		     MXCSR_AND_FLAGS_SIZE);
1095
1096	/* Copy the remaining FP state */
1097	copy_feature(header.xfeatures & XFEATURE_MASK_FP,
1098		     &to, &xsave->i387.st_space, &xinit->i387.st_space,
1099		     sizeof(xsave->i387.st_space));
1100
1101	/* Copy the SSE state - shared with YMM, but independently managed */
1102	copy_feature(header.xfeatures & XFEATURE_MASK_SSE,
1103		     &to, &xsave->i387.xmm_space, &xinit->i387.xmm_space,
1104		     sizeof(xsave->i387.xmm_space));
1105
1106	if (copy_mode != XSTATE_COPY_XSAVE)
1107		goto out;
1108
1109	/* Zero the padding area */
1110	membuf_zero(&to, sizeof(xsave->i387.padding));
1111
1112	/* Copy xsave->i387.sw_reserved */
1113	membuf_write(&to, xstate_fx_sw_bytes, sizeof(xsave->i387.sw_reserved));
1114
1115	/* Copy the user space relevant state of @xsave->header */
1116	membuf_write(&to, &header, sizeof(header));
1117
1118	zerofrom = offsetof(struct xregs_state, extended_state_area);
1119
1120	/*
1121	 * The ptrace buffer is in non-compacted XSAVE format.  In
1122	 * non-compacted format disabled features still occupy state space,
1123	 * but there is no state to copy from in the compacted
1124	 * init_fpstate. The gap tracking will zero these states.
1125	 */
1126	mask = fpstate->user_xfeatures;
 
 
1127
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1128	/*
1129	 * Dynamic features are not present in init_fpstate. When they are
1130	 * in an all zeros init state, remove those from 'mask' to zero
1131	 * those features in the user buffer instead of retrieving them
1132	 * from init_fpstate.
1133	 */
1134	if (fpu_state_size_dynamic())
1135		mask &= (header.xfeatures | xinit->header.xcomp_bv);
1136
1137	for_each_extended_xfeature(i, mask) {
1138		/*
1139		 * If there was a feature or alignment gap, zero the space
1140		 * in the destination buffer.
1141		 */
1142		if (zerofrom < xstate_offsets[i])
1143			membuf_zero(&to, xstate_offsets[i] - zerofrom);
1144
1145		if (i == XFEATURE_PKRU) {
1146			struct pkru_state pkru = {0};
1147			/*
1148			 * PKRU is not necessarily up to date in the
1149			 * XSAVE buffer. Use the provided value.
1150			 */
1151			pkru.pkru = pkru_val;
1152			membuf_write(&to, &pkru, sizeof(pkru));
1153		} else {
1154			copy_feature(header.xfeatures & BIT_ULL(i), &to,
1155				     __raw_xsave_addr(xsave, i),
1156				     __raw_xsave_addr(xinit, i),
1157				     xstate_sizes[i]);
1158		}
1159		/*
1160		 * Keep track of the last copied state in the non-compacted
1161		 * target buffer for gap zeroing.
1162		 */
1163		zerofrom = xstate_offsets[i] + xstate_sizes[i];
1164	}
1165
1166out:
1167	if (to.left)
1168		membuf_zero(&to, to.left);
1169}
1170
1171/**
1172 * copy_xstate_to_uabi_buf - Copy kernel saved xstate to a UABI buffer
1173 * @to:		membuf descriptor
1174 * @tsk:	The task from which to copy the saved xstate
1175 * @copy_mode:	The requested copy mode
1176 *
1177 * Converts from kernel XSAVE or XSAVES compacted format to UABI conforming
1178 * format, i.e. from the kernel internal hardware dependent storage format
1179 * to the requested @mode. UABI XSTATE is always uncompacted!
1180 *
1181 * It supports partial copy but @to.pos always starts from zero.
1182 */
1183void copy_xstate_to_uabi_buf(struct membuf to, struct task_struct *tsk,
1184			     enum xstate_copy_mode copy_mode)
1185{
1186	__copy_xstate_to_uabi_buf(to, tsk->thread.fpu.fpstate,
1187				  tsk->thread.pkru, copy_mode);
1188}
1189
1190static int copy_from_buffer(void *dst, unsigned int offset, unsigned int size,
1191			    const void *kbuf, const void __user *ubuf)
1192{
1193	if (kbuf) {
1194		memcpy(dst, kbuf + offset, size);
1195	} else {
1196		if (copy_from_user(dst, ubuf + offset, size))
1197			return -EFAULT;
1198	}
1199	return 0;
1200}
1201
1202
1203/**
1204 * copy_uabi_to_xstate - Copy a UABI format buffer to the kernel xstate
1205 * @fpstate:	The fpstate buffer to copy to
1206 * @kbuf:	The UABI format buffer, if it comes from the kernel
1207 * @ubuf:	The UABI format buffer, if it comes from userspace
1208 * @pkru:	The location to write the PKRU value to
1209 *
1210 * Converts from the UABI format into the kernel internal hardware
1211 * dependent format.
1212 *
1213 * This function ultimately has three different callers with distinct PKRU
1214 * behavior.
1215 * 1.	When called from sigreturn the PKRU register will be restored from
1216 *	@fpstate via an XRSTOR. Correctly copying the UABI format buffer to
1217 *	@fpstate is sufficient to cover this case, but the caller will also
1218 *	pass a pointer to the thread_struct's pkru field in @pkru and updating
1219 *	it is harmless.
1220 * 2.	When called from ptrace the PKRU register will be restored from the
1221 *	thread_struct's pkru field. A pointer to that is passed in @pkru.
1222 *	The kernel will restore it manually, so the XRSTOR behavior that resets
1223 *	the PKRU register to the hardware init value (0) if the corresponding
1224 *	xfeatures bit is not set is emulated here.
1225 * 3.	When called from KVM the PKRU register will be restored from the vcpu's
1226 *	pkru field. A pointer to that is passed in @pkru. KVM hasn't used
1227 *	XRSTOR and hasn't had the PKRU resetting behavior described above. To
1228 *	preserve that KVM behavior, it passes NULL for @pkru if the xfeatures
1229 *	bit is not set.
1230 */
1231static int copy_uabi_to_xstate(struct fpstate *fpstate, const void *kbuf,
1232			       const void __user *ubuf, u32 *pkru)
1233{
1234	struct xregs_state *xsave = &fpstate->regs.xsave;
1235	unsigned int offset, size;
1236	struct xstate_header hdr;
1237	u64 mask;
1238	int i;
 
1239
1240	offset = offsetof(struct xregs_state, header);
1241	if (copy_from_buffer(&hdr, offset, sizeof(hdr), kbuf, ubuf))
1242		return -EFAULT;
1243
1244	if (validate_user_xstate_header(&hdr, fpstate))
1245		return -EINVAL;
1246
1247	/* Validate MXCSR when any of the related features is in use */
1248	mask = XFEATURE_MASK_FP | XFEATURE_MASK_SSE | XFEATURE_MASK_YMM;
1249	if (hdr.xfeatures & mask) {
1250		u32 mxcsr[2];
1251
1252		offset = offsetof(struct fxregs_state, mxcsr);
1253		if (copy_from_buffer(mxcsr, offset, sizeof(mxcsr), kbuf, ubuf))
1254			return -EFAULT;
1255
1256		/* Reserved bits in MXCSR must be zero. */
1257		if (mxcsr[0] & ~mxcsr_feature_mask)
1258			return -EINVAL;
1259
1260		/* SSE and YMM require MXCSR even when FP is not in use. */
1261		if (!(hdr.xfeatures & XFEATURE_MASK_FP)) {
1262			xsave->i387.mxcsr = mxcsr[0];
1263			xsave->i387.mxcsr_mask = mxcsr[1];
1264		}
1265	}
1266
1267	for (i = 0; i < XFEATURE_MAX; i++) {
1268		mask = BIT_ULL(i);
1269
1270		if (hdr.xfeatures & mask) {
1271			void *dst = __raw_xsave_addr(xsave, i);
1272
1273			offset = xstate_offsets[i];
1274			size = xstate_sizes[i];
1275
1276			if (copy_from_buffer(dst, offset, size, kbuf, ubuf))
1277				return -EFAULT;
1278		}
1279	}
1280
1281	if (hdr.xfeatures & XFEATURE_MASK_PKRU) {
1282		struct pkru_state *xpkru;
1283
1284		xpkru = __raw_xsave_addr(xsave, XFEATURE_PKRU);
1285		*pkru = xpkru->pkru;
1286	} else {
1287		/*
1288		 * KVM may pass NULL here to indicate that it does not need
1289		 * PKRU updated.
1290		 */
1291		if (pkru)
1292			*pkru = 0;
1293	}
1294
1295	/*
1296	 * The state that came in from userspace was user-state only.
1297	 * Mask all the user states out of 'xfeatures':
1298	 */
1299	xsave->header.xfeatures &= XFEATURE_MASK_SUPERVISOR_ALL;
1300
1301	/*
1302	 * Add back in the features that came in from userspace:
1303	 */
1304	xsave->header.xfeatures |= hdr.xfeatures;
1305
1306	return 0;
1307}
1308
1309/*
1310 * Convert from a ptrace standard-format kernel buffer to kernel XSAVE[S]
1311 * format and copy to the target thread. Used by ptrace and KVM.
 
 
1312 */
1313int copy_uabi_from_kernel_to_xstate(struct fpstate *fpstate, const void *kbuf, u32 *pkru)
1314{
1315	return copy_uabi_to_xstate(fpstate, kbuf, NULL, pkru);
1316}
1317
1318/*
1319 * Convert from a sigreturn standard-format user-space buffer to kernel
1320 * XSAVE[S] format and copy to the target thread. This is called from the
1321 * sigreturn() and rt_sigreturn() system calls.
1322 */
1323int copy_sigframe_from_user_to_xstate(struct task_struct *tsk,
1324				      const void __user *ubuf)
1325{
1326	return copy_uabi_to_xstate(tsk->thread.fpu.fpstate, NULL, ubuf, &tsk->thread.pkru);
1327}
1328
1329static bool validate_independent_components(u64 mask)
1330{
1331	u64 xchk;
1332
1333	if (WARN_ON_FPU(!cpu_feature_enabled(X86_FEATURE_XSAVES)))
1334		return false;
1335
1336	xchk = ~xfeatures_mask_independent();
1337
1338	if (WARN_ON_ONCE(!mask || mask & xchk))
1339		return false;
1340
1341	return true;
1342}
1343
1344/**
1345 * xsaves - Save selected components to a kernel xstate buffer
1346 * @xstate:	Pointer to the buffer
1347 * @mask:	Feature mask to select the components to save
1348 *
1349 * The @xstate buffer must be 64 byte aligned and correctly initialized as
1350 * XSAVES does not write the full xstate header. Before first use the
1351 * buffer should be zeroed otherwise a consecutive XRSTORS from that buffer
1352 * can #GP.
1353 *
1354 * The feature mask must be a subset of the independent features.
1355 */
1356void xsaves(struct xregs_state *xstate, u64 mask)
1357{
1358	int err;
1359
1360	if (!validate_independent_components(mask))
1361		return;
1362
1363	XSTATE_OP(XSAVES, xstate, (u32)mask, (u32)(mask >> 32), err);
1364	WARN_ON_ONCE(err);
1365}
1366
1367/**
1368 * xrstors - Restore selected components from a kernel xstate buffer
1369 * @xstate:	Pointer to the buffer
1370 * @mask:	Feature mask to select the components to restore
1371 *
1372 * The @xstate buffer must be 64 byte aligned and correctly initialized
1373 * otherwise XRSTORS from that buffer can #GP.
1374 *
1375 * Proper usage is to restore the state which was saved with
1376 * xsaves() into @xstate.
1377 *
1378 * The feature mask must be a subset of the independent features.
1379 */
1380void xrstors(struct xregs_state *xstate, u64 mask)
1381{
1382	int err;
1383
1384	if (!validate_independent_components(mask))
1385		return;
1386
1387	XSTATE_OP(XRSTORS, xstate, (u32)mask, (u32)(mask >> 32), err);
1388	WARN_ON_ONCE(err);
1389}
1390
1391#if IS_ENABLED(CONFIG_KVM)
1392void fpstate_clear_xstate_component(struct fpstate *fps, unsigned int xfeature)
1393{
1394	void *addr = get_xsave_addr(&fps->regs.xsave, xfeature);
1395
1396	if (addr)
1397		memset(addr, 0, xstate_sizes[xfeature]);
1398}
1399EXPORT_SYMBOL_GPL(fpstate_clear_xstate_component);
1400#endif
1401
1402#ifdef CONFIG_X86_64
 
1403
1404#ifdef CONFIG_X86_DEBUG_FPU
1405/*
1406 * Ensure that a subsequent XSAVE* or XRSTOR* instruction with RFBM=@mask
1407 * can safely operate on the @fpstate buffer.
1408 */
1409static bool xstate_op_valid(struct fpstate *fpstate, u64 mask, bool rstor)
1410{
1411	u64 xfd = __this_cpu_read(xfd_state);
1412
1413	if (fpstate->xfd == xfd)
1414		return true;
1415
1416	 /*
1417	  * The XFD MSR does not match fpstate->xfd. That's invalid when
1418	  * the passed in fpstate is current's fpstate.
1419	  */
1420	if (fpstate->xfd == current->thread.fpu.fpstate->xfd)
1421		return false;
1422
1423	/*
1424	 * XRSTOR(S) from init_fpstate are always correct as it will just
1425	 * bring all components into init state and not read from the
1426	 * buffer. XSAVE(S) raises #PF after init.
1427	 */
1428	if (fpstate == &init_fpstate)
1429		return rstor;
1430
1431	/*
1432	 * XSAVE(S): clone(), fpu_swap_kvm_fpu()
1433	 * XRSTORS(S): fpu_swap_kvm_fpu()
1434	 */
1435
1436	/*
1437	 * No XSAVE/XRSTOR instructions (except XSAVE itself) touch
1438	 * the buffer area for XFD-disabled state components.
1439	 */
1440	mask &= ~xfd;
 
1441
1442	/*
1443	 * Remove features which are valid in fpstate. They
1444	 * have space allocated in fpstate.
1445	 */
1446	mask &= ~fpstate->xfeatures;
1447
1448	/*
1449	 * Any remaining state components in 'mask' might be written
1450	 * by XSAVE/XRSTOR. Fail validation it found.
1451	 */
1452	return !mask;
1453}
1454
1455void xfd_validate_state(struct fpstate *fpstate, u64 mask, bool rstor)
1456{
1457	WARN_ON_ONCE(!xstate_op_valid(fpstate, mask, rstor));
1458}
1459#endif /* CONFIG_X86_DEBUG_FPU */
1460
1461static int __init xfd_update_static_branch(void)
1462{
1463	/*
1464	 * If init_fpstate.xfd has bits set then dynamic features are
1465	 * available and the dynamic sizing must be enabled.
1466	 */
1467	if (init_fpstate.xfd)
1468		static_branch_enable(&__fpu_state_size_dynamic);
1469	return 0;
1470}
1471arch_initcall(xfd_update_static_branch)
1472
1473void fpstate_free(struct fpu *fpu)
1474{
1475	if (fpu->fpstate && fpu->fpstate != &fpu->__fpstate)
1476		vfree(fpu->fpstate);
1477}
1478
1479/**
1480 * fpstate_realloc - Reallocate struct fpstate for the requested new features
1481 *
1482 * @xfeatures:	A bitmap of xstate features which extend the enabled features
1483 *		of that task
1484 * @ksize:	The required size for the kernel buffer
1485 * @usize:	The required size for user space buffers
1486 * @guest_fpu:	Pointer to a guest FPU container. NULL for host allocations
1487 *
1488 * Note vs. vmalloc(): If the task with a vzalloc()-allocated buffer
1489 * terminates quickly, vfree()-induced IPIs may be a concern, but tasks
1490 * with large states are likely to live longer.
1491 *
1492 * Returns: 0 on success, -ENOMEM on allocation error.
1493 */
1494static int fpstate_realloc(u64 xfeatures, unsigned int ksize,
1495			   unsigned int usize, struct fpu_guest *guest_fpu)
1496{
1497	struct fpu *fpu = &current->thread.fpu;
1498	struct fpstate *curfps, *newfps = NULL;
1499	unsigned int fpsize;
1500	bool in_use;
1501
1502	fpsize = ksize + ALIGN(offsetof(struct fpstate, regs), 64);
 
1503
1504	newfps = vzalloc(fpsize);
1505	if (!newfps)
1506		return -ENOMEM;
1507	newfps->size = ksize;
1508	newfps->user_size = usize;
1509	newfps->is_valloc = true;
1510
1511	/*
1512	 * When a guest FPU is supplied, use @guest_fpu->fpstate
1513	 * as reference independent whether it is in use or not.
1514	 */
1515	curfps = guest_fpu ? guest_fpu->fpstate : fpu->fpstate;
1516
1517	/* Determine whether @curfps is the active fpstate */
1518	in_use = fpu->fpstate == curfps;
 
1519
1520	if (guest_fpu) {
1521		newfps->is_guest = true;
1522		newfps->is_confidential = curfps->is_confidential;
1523		newfps->in_use = curfps->in_use;
1524		guest_fpu->xfeatures |= xfeatures;
1525		guest_fpu->uabi_size = usize;
1526	}
1527
1528	fpregs_lock();
1529	/*
1530	 * If @curfps is in use, ensure that the current state is in the
1531	 * registers before swapping fpstate as that might invalidate it
1532	 * due to layout changes.
1533	 */
1534	if (in_use && test_thread_flag(TIF_NEED_FPU_LOAD))
1535		fpregs_restore_userregs();
1536
1537	newfps->xfeatures = curfps->xfeatures | xfeatures;
1538
1539	if (!guest_fpu)
1540		newfps->user_xfeatures = curfps->user_xfeatures | xfeatures;
1541
1542	newfps->xfd = curfps->xfd & ~xfeatures;
1543
1544	/* Do the final updates within the locked region */
1545	xstate_init_xcomp_bv(&newfps->regs.xsave, newfps->xfeatures);
1546
1547	if (guest_fpu) {
1548		guest_fpu->fpstate = newfps;
1549		/* If curfps is active, update the FPU fpstate pointer */
1550		if (in_use)
1551			fpu->fpstate = newfps;
1552	} else {
1553		fpu->fpstate = newfps;
1554	}
1555
1556	if (in_use)
1557		xfd_update_state(fpu->fpstate);
1558	fpregs_unlock();
1559
1560	/* Only free valloc'ed state */
1561	if (curfps && curfps->is_valloc)
1562		vfree(curfps);
1563
1564	return 0;
1565}
1566
1567static int validate_sigaltstack(unsigned int usize)
1568{
1569	struct task_struct *thread, *leader = current->group_leader;
1570	unsigned long framesize = get_sigframe_size();
1571
1572	lockdep_assert_held(&current->sighand->siglock);
1573
1574	/* get_sigframe_size() is based on fpu_user_cfg.max_size */
1575	framesize -= fpu_user_cfg.max_size;
1576	framesize += usize;
1577	for_each_thread(leader, thread) {
1578		if (thread->sas_ss_size && thread->sas_ss_size < framesize)
1579			return -ENOSPC;
1580	}
1581	return 0;
1582}
1583
1584static int __xstate_request_perm(u64 permitted, u64 requested, bool guest)
1585{
1586	/*
1587	 * This deliberately does not exclude !XSAVES as we still might
1588	 * decide to optionally context switch XCR0 or talk the silicon
1589	 * vendors into extending XFD for the pre AMX states, especially
1590	 * AVX512.
1591	 */
1592	bool compacted = cpu_feature_enabled(X86_FEATURE_XCOMPACTED);
1593	struct fpu *fpu = &current->group_leader->thread.fpu;
1594	struct fpu_state_perm *perm;
1595	unsigned int ksize, usize;
1596	u64 mask;
1597	int ret = 0;
1598
1599	/* Check whether fully enabled */
1600	if ((permitted & requested) == requested)
1601		return 0;
1602
1603	/* Calculate the resulting kernel state size */
1604	mask = permitted | requested;
1605	/* Take supervisor states into account on the host */
1606	if (!guest)
1607		mask |= xfeatures_mask_supervisor();
1608	ksize = xstate_calculate_size(mask, compacted);
1609
1610	/* Calculate the resulting user state size */
1611	mask &= XFEATURE_MASK_USER_SUPPORTED;
1612	usize = xstate_calculate_size(mask, false);
1613
1614	if (!guest) {
1615		ret = validate_sigaltstack(usize);
1616		if (ret)
1617			return ret;
1618	}
1619
1620	perm = guest ? &fpu->guest_perm : &fpu->perm;
1621	/* Pairs with the READ_ONCE() in xstate_get_group_perm() */
1622	WRITE_ONCE(perm->__state_perm, mask);
1623	/* Protected by sighand lock */
1624	perm->__state_size = ksize;
1625	perm->__user_state_size = usize;
1626	return ret;
1627}
1628
1629/*
1630 * Permissions array to map facilities with more than one component
 
 
 
 
 
 
 
 
 
 
 
 
1631 */
1632static const u64 xstate_prctl_req[XFEATURE_MAX] = {
1633	[XFEATURE_XTILE_DATA] = XFEATURE_MASK_XTILE_DATA,
1634};
1635
1636static int xstate_request_perm(unsigned long idx, bool guest)
1637{
1638	u64 permitted, requested;
1639	int ret;
1640
1641	if (idx >= XFEATURE_MAX)
1642		return -EINVAL;
1643
1644	/*
1645	 * Look up the facility mask which can require more than
1646	 * one xstate component.
1647	 */
1648	idx = array_index_nospec(idx, ARRAY_SIZE(xstate_prctl_req));
1649	requested = xstate_prctl_req[idx];
1650	if (!requested)
1651		return -EOPNOTSUPP;
1652
1653	if ((fpu_user_cfg.max_features & requested) != requested)
1654		return -EOPNOTSUPP;
1655
1656	/* Lockless quick check */
1657	permitted = xstate_get_group_perm(guest);
1658	if ((permitted & requested) == requested)
1659		return 0;
1660
1661	/* Protect against concurrent modifications */
1662	spin_lock_irq(&current->sighand->siglock);
1663	permitted = xstate_get_group_perm(guest);
1664
1665	/* First vCPU allocation locks the permissions. */
1666	if (guest && (permitted & FPU_GUEST_PERM_LOCKED))
1667		ret = -EBUSY;
1668	else
1669		ret = __xstate_request_perm(permitted, requested, guest);
1670	spin_unlock_irq(&current->sighand->siglock);
1671	return ret;
1672}
1673
1674int __xfd_enable_feature(u64 xfd_err, struct fpu_guest *guest_fpu)
1675{
1676	u64 xfd_event = xfd_err & XFEATURE_MASK_USER_DYNAMIC;
1677	struct fpu_state_perm *perm;
1678	unsigned int ksize, usize;
1679	struct fpu *fpu;
1680
1681	if (!xfd_event) {
1682		if (!guest_fpu)
1683			pr_err_once("XFD: Invalid xfd error: %016llx\n", xfd_err);
1684		return 0;
1685	}
1686
1687	/* Protect against concurrent modifications */
1688	spin_lock_irq(&current->sighand->siglock);
1689
1690	/* If not permitted let it die */
1691	if ((xstate_get_group_perm(!!guest_fpu) & xfd_event) != xfd_event) {
1692		spin_unlock_irq(&current->sighand->siglock);
1693		return -EPERM;
1694	}
1695
1696	fpu = &current->group_leader->thread.fpu;
1697	perm = guest_fpu ? &fpu->guest_perm : &fpu->perm;
1698	ksize = perm->__state_size;
1699	usize = perm->__user_state_size;
1700
1701	/*
1702	 * The feature is permitted. State size is sufficient.  Dropping
1703	 * the lock is safe here even if more features are added from
1704	 * another task, the retrieved buffer sizes are valid for the
1705	 * currently requested feature(s).
1706	 */
1707	spin_unlock_irq(&current->sighand->siglock);
1708
1709	/*
1710	 * Try to allocate a new fpstate. If that fails there is no way
1711	 * out.
1712	 */
1713	if (fpstate_realloc(xfd_event, ksize, usize, guest_fpu))
1714		return -EFAULT;
1715	return 0;
1716}
1717
1718int xfd_enable_feature(u64 xfd_err)
1719{
1720	return __xfd_enable_feature(xfd_err, NULL);
1721}
1722
1723#else /* CONFIG_X86_64 */
1724static inline int xstate_request_perm(unsigned long idx, bool guest)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1725{
1726	return -EPERM;
1727}
1728#endif  /* !CONFIG_X86_64 */
1729
1730u64 xstate_get_guest_group_perm(void)
1731{
1732	return xstate_get_group_perm(true);
1733}
1734EXPORT_SYMBOL_GPL(xstate_get_guest_group_perm);
1735
1736/**
1737 * fpu_xstate_prctl - xstate permission operations
1738 * @tsk:	Redundant pointer to current
1739 * @option:	A subfunction of arch_prctl()
1740 * @arg2:	option argument
1741 * Return:	0 if successful; otherwise, an error code
1742 *
1743 * Option arguments:
1744 *
1745 * ARCH_GET_XCOMP_SUPP: Pointer to user space u64 to store the info
1746 * ARCH_GET_XCOMP_PERM: Pointer to user space u64 to store the info
1747 * ARCH_REQ_XCOMP_PERM: Facility number requested
1748 *
1749 * For facilities which require more than one XSTATE component, the request
1750 * must be the highest state component number related to that facility,
1751 * e.g. for AMX which requires XFEATURE_XTILE_CFG(17) and
1752 * XFEATURE_XTILE_DATA(18) this would be XFEATURE_XTILE_DATA(18).
1753 */
1754long fpu_xstate_prctl(int option, unsigned long arg2)
1755{
1756	u64 __user *uptr = (u64 __user *)arg2;
1757	u64 permitted, supported;
1758	unsigned long idx = arg2;
1759	bool guest = false;
1760
1761	switch (option) {
1762	case ARCH_GET_XCOMP_SUPP:
1763		supported = fpu_user_cfg.max_features |	fpu_user_cfg.legacy_features;
1764		return put_user(supported, uptr);
1765
1766	case ARCH_GET_XCOMP_PERM:
1767		/*
1768		 * Lockless snapshot as it can also change right after the
1769		 * dropping the lock.
1770		 */
1771		permitted = xstate_get_host_group_perm();
1772		permitted &= XFEATURE_MASK_USER_SUPPORTED;
1773		return put_user(permitted, uptr);
1774
1775	case ARCH_GET_XCOMP_GUEST_PERM:
1776		permitted = xstate_get_guest_group_perm();
1777		permitted &= XFEATURE_MASK_USER_SUPPORTED;
1778		return put_user(permitted, uptr);
1779
1780	case ARCH_REQ_XCOMP_GUEST_PERM:
1781		guest = true;
1782		fallthrough;
1783
1784	case ARCH_REQ_XCOMP_PERM:
1785		if (!IS_ENABLED(CONFIG_X86_64))
1786			return -EOPNOTSUPP;
1787
1788		return xstate_request_perm(idx, guest);
1789
1790	default:
1791		return -EINVAL;
1792	}
1793}
1794
1795#ifdef CONFIG_PROC_PID_ARCH_STATUS
1796/*
1797 * Report the amount of time elapsed in millisecond since last AVX512
1798 * use in the task.
1799 */
1800static void avx512_status(struct seq_file *m, struct task_struct *task)
1801{
1802	unsigned long timestamp = READ_ONCE(task->thread.fpu.avx512_timestamp);
1803	long delta;
1804
1805	if (!timestamp) {
1806		/*
1807		 * Report -1 if no AVX512 usage
1808		 */
1809		delta = -1;
1810	} else {
1811		delta = (long)(jiffies - timestamp);
1812		/*
1813		 * Cap to LONG_MAX if time difference > LONG_MAX
1814		 */
1815		if (delta < 0)
1816			delta = LONG_MAX;
1817		delta = jiffies_to_msecs(delta);
1818	}
1819
1820	seq_put_decimal_ll(m, "AVX512_elapsed_ms:\t", delta);
1821	seq_putc(m, '\n');
1822}
1823
1824/*
1825 * Report architecture specific information
1826 */
1827int proc_pid_arch_status(struct seq_file *m, struct pid_namespace *ns,
1828			struct pid *pid, struct task_struct *task)
1829{
1830	/*
1831	 * Report AVX512 state if the processor and build option supported.
1832	 */
1833	if (cpu_feature_enabled(X86_FEATURE_AVX512F))
1834		avx512_status(m, task);
1835
1836	return 0;
1837}
1838#endif /* CONFIG_PROC_PID_ARCH_STATUS */
v5.9
   1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 * xsave/xrstor support.
   4 *
   5 * Author: Suresh Siddha <suresh.b.siddha@intel.com>
   6 */
 
   7#include <linux/compat.h>
   8#include <linux/cpu.h>
   9#include <linux/mman.h>
 
  10#include <linux/pkeys.h>
  11#include <linux/seq_file.h>
  12#include <linux/proc_fs.h>
 
  13
  14#include <asm/fpu/api.h>
  15#include <asm/fpu/internal.h>
  16#include <asm/fpu/signal.h>
  17#include <asm/fpu/regset.h>
  18#include <asm/fpu/xstate.h>
  19
  20#include <asm/tlbflush.h>
  21#include <asm/cpufeature.h>
 
 
 
 
 
 
 
 
 
 
  22
  23/*
  24 * Although we spell it out in here, the Processor Trace
  25 * xfeature is completely unused.  We use other mechanisms
  26 * to save/restore PT state in Linux.
  27 */
  28static const char *xfeature_names[] =
  29{
  30	"x87 floating point registers"	,
  31	"SSE registers"			,
  32	"AVX registers"			,
  33	"MPX bounds registers"		,
  34	"MPX CSR"			,
  35	"AVX-512 opmask"		,
  36	"AVX-512 Hi256"			,
  37	"AVX-512 ZMM_Hi256"		,
  38	"Processor Trace (unused)"	,
  39	"Protection Keys User registers",
 
 
 
 
 
 
 
 
 
  40	"unknown xstate feature"	,
  41};
  42
  43static short xsave_cpuid_features[] __initdata = {
  44	X86_FEATURE_FPU,
  45	X86_FEATURE_XMM,
  46	X86_FEATURE_AVX,
  47	X86_FEATURE_MPX,
  48	X86_FEATURE_MPX,
  49	X86_FEATURE_AVX512F,
  50	X86_FEATURE_AVX512F,
  51	X86_FEATURE_AVX512F,
  52	X86_FEATURE_INTEL_PT,
  53	X86_FEATURE_PKU,
 
 
 
  54};
  55
  56/*
  57 * This represents the full set of bits that should ever be set in a kernel
  58 * XSAVE buffer, both supervisor and user xstates.
  59 */
  60u64 xfeatures_mask_all __read_mostly;
  61
  62static unsigned int xstate_offsets[XFEATURE_MAX] = { [ 0 ... XFEATURE_MAX - 1] = -1};
  63static unsigned int xstate_sizes[XFEATURE_MAX]   = { [ 0 ... XFEATURE_MAX - 1] = -1};
  64static unsigned int xstate_comp_offsets[XFEATURE_MAX] = { [ 0 ... XFEATURE_MAX - 1] = -1};
  65static unsigned int xstate_supervisor_only_offsets[XFEATURE_MAX] = { [ 0 ... XFEATURE_MAX - 1] = -1};
  66
  67/*
  68 * The XSAVE area of kernel can be in standard or compacted format;
  69 * it is always in standard format for user mode. This is the user
  70 * mode standard format size used for signal and ptrace frames.
  71 */
  72unsigned int fpu_user_xstate_size;
  73
  74/*
  75 * Return whether the system supports a given xfeature.
  76 *
  77 * Also return the name of the (most advanced) feature that the caller requested:
  78 */
  79int cpu_has_xfeatures(u64 xfeatures_needed, const char **feature_name)
  80{
  81	u64 xfeatures_missing = xfeatures_needed & ~xfeatures_mask_all;
  82
  83	if (unlikely(feature_name)) {
  84		long xfeature_idx, max_idx;
  85		u64 xfeatures_print;
  86		/*
  87		 * So we use FLS here to be able to print the most advanced
  88		 * feature that was requested but is missing. So if a driver
  89		 * asks about "XFEATURE_MASK_SSE | XFEATURE_MASK_YMM" we'll print the
  90		 * missing AVX feature - this is the most informative message
  91		 * to users:
  92		 */
  93		if (xfeatures_missing)
  94			xfeatures_print = xfeatures_missing;
  95		else
  96			xfeatures_print = xfeatures_needed;
  97
  98		xfeature_idx = fls64(xfeatures_print)-1;
  99		max_idx = ARRAY_SIZE(xfeature_names)-1;
 100		xfeature_idx = min(xfeature_idx, max_idx);
 101
 102		*feature_name = xfeature_names[xfeature_idx];
 103	}
 104
 105	if (xfeatures_missing)
 106		return 0;
 107
 108	return 1;
 109}
 110EXPORT_SYMBOL_GPL(cpu_has_xfeatures);
 111
 
 
 
 
 
 112static bool xfeature_is_supervisor(int xfeature_nr)
 113{
 114	/*
 115	 * Extended State Enumeration Sub-leaves (EAX = 0DH, ECX = n, n > 1)
 116	 * returns ECX[0] set to (1) for a supervisor state, and cleared (0)
 117	 * for a user state.
 118	 */
 119	u32 eax, ebx, ecx, edx;
 120
 121	cpuid_count(XSTATE_CPUID, xfeature_nr, &eax, &ebx, &ecx, &edx);
 122	return ecx & 1;
 123}
 124
 125/*
 126 * When executing XSAVEOPT (or other optimized XSAVE instructions), if
 127 * a processor implementation detects that an FPU state component is still
 128 * (or is again) in its initialized state, it may clear the corresponding
 129 * bit in the header.xfeatures field, and can skip the writeout of registers
 130 * to the corresponding memory layout.
 131 *
 132 * This means that when the bit is zero, the state component might still contain
 133 * some previous - non-initialized register state.
 134 *
 135 * Before writing xstate information to user-space we sanitize those components,
 136 * to always ensure that the memory layout of a feature will be in the init state
 137 * if the corresponding header bit is zero. This is to ensure that user-space doesn't
 138 * see some stale state in the memory layout during signal handling, debugging etc.
 139 */
 140void fpstate_sanitize_xstate(struct fpu *fpu)
 141{
 142	struct fxregs_state *fx = &fpu->state.fxsave;
 143	int feature_bit;
 144	u64 xfeatures;
 145
 146	if (!use_xsaveopt())
 147		return;
 148
 149	xfeatures = fpu->state.xsave.header.xfeatures;
 150
 151	/*
 152	 * None of the feature bits are in init state. So nothing else
 153	 * to do for us, as the memory layout is up to date.
 154	 */
 155	if ((xfeatures & xfeatures_mask_all) == xfeatures_mask_all)
 156		return;
 157
 158	/*
 159	 * FP is in init state
 160	 */
 161	if (!(xfeatures & XFEATURE_MASK_FP)) {
 162		fx->cwd = 0x37f;
 163		fx->swd = 0;
 164		fx->twd = 0;
 165		fx->fop = 0;
 166		fx->rip = 0;
 167		fx->rdp = 0;
 168		memset(&fx->st_space[0], 0, 128);
 169	}
 170
 171	/*
 172	 * SSE is in init state
 173	 */
 174	if (!(xfeatures & XFEATURE_MASK_SSE))
 175		memset(&fx->xmm_space[0], 0, 256);
 176
 177	/*
 178	 * First two features are FPU and SSE, which above we handled
 179	 * in a special way already:
 180	 */
 181	feature_bit = 0x2;
 182	xfeatures = (xfeatures_mask_user() & ~xfeatures) >> 2;
 
 183
 184	/*
 185	 * Update all the remaining memory layouts according to their
 186	 * standard xstate layout, if their header bit is in the init
 187	 * state:
 188	 */
 189	while (xfeatures) {
 190		if (xfeatures & 0x1) {
 191			int offset = xstate_comp_offsets[feature_bit];
 192			int size = xstate_sizes[feature_bit];
 193
 194			memcpy((void *)fx + offset,
 195			       (void *)&init_fpstate.xsave + offset,
 196			       size);
 197		}
 198
 199		xfeatures >>= 1;
 200		feature_bit++;
 201	}
 
 202}
 203
 204/*
 205 * Enable the extended processor state save/restore feature.
 206 * Called once per CPU onlining.
 207 */
 208void fpu__init_cpu_xstate(void)
 209{
 210	u64 unsup_bits;
 
 
 
 211
 212	if (!boot_cpu_has(X86_FEATURE_XSAVE) || !xfeatures_mask_all)
 213		return;
 214	/*
 215	 * Unsupported supervisor xstates should not be found in
 216	 * the xfeatures mask.
 
 
 217	 */
 218	unsup_bits = xfeatures_mask_all & XFEATURE_MASK_SUPERVISOR_UNSUPPORTED;
 219	WARN_ONCE(unsup_bits, "x86/fpu: Found unsupported supervisor xstates: 0x%llx\n",
 220		  unsup_bits);
 221
 222	xfeatures_mask_all &= ~XFEATURE_MASK_SUPERVISOR_UNSUPPORTED;
 223
 224	cr4_set_bits(X86_CR4_OSXSAVE);
 225
 226	/*
 227	 * XCR_XFEATURE_ENABLED_MASK (aka. XCR0) sets user features
 228	 * managed by XSAVE{C, OPT, S} and XRSTOR{S}.  Only XSAVE user
 229	 * states can be set here.
 230	 */
 231	xsetbv(XCR_XFEATURE_ENABLED_MASK, xfeatures_mask_user());
 232
 233	/*
 234	 * MSR_IA32_XSS sets supervisor states managed by XSAVES.
 235	 */
 236	if (boot_cpu_has(X86_FEATURE_XSAVES)) {
 237		wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor() |
 238				     xfeatures_mask_dynamic());
 239	}
 240}
 241
 242static bool xfeature_enabled(enum xfeature xfeature)
 243{
 244	return xfeatures_mask_all & BIT_ULL(xfeature);
 245}
 246
 247/*
 248 * Record the offsets and sizes of various xstates contained
 249 * in the XSAVE state memory layout.
 250 */
 251static void __init setup_xstate_features(void)
 252{
 253	u32 eax, ebx, ecx, edx, i;
 254	/* start at the beginnning of the "extended state" */
 255	unsigned int last_good_offset = offsetof(struct xregs_state,
 256						 extended_state_area);
 257	/*
 258	 * The FP xstates and SSE xstates are legacy states. They are always
 259	 * in the fixed offsets in the xsave area in either compacted form
 260	 * or standard form.
 261	 */
 262	xstate_offsets[XFEATURE_FP]	= 0;
 263	xstate_sizes[XFEATURE_FP]	= offsetof(struct fxregs_state,
 264						   xmm_space);
 265
 266	xstate_offsets[XFEATURE_SSE]	= xstate_sizes[XFEATURE_FP];
 267	xstate_sizes[XFEATURE_SSE]	= sizeof_field(struct fxregs_state,
 268						       xmm_space);
 269
 270	for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
 271		if (!xfeature_enabled(i))
 272			continue;
 273
 274		cpuid_count(XSTATE_CPUID, i, &eax, &ebx, &ecx, &edx);
 275
 276		xstate_sizes[i] = eax;
 
 277
 278		/*
 279		 * If an xfeature is supervisor state, the offset in EBX is
 280		 * invalid, leave it to -1.
 281		 */
 282		if (xfeature_is_supervisor(i))
 283			continue;
 284
 285		xstate_offsets[i] = ebx;
 286
 287		/*
 288		 * In our xstate size checks, we assume that the highest-numbered
 289		 * xstate feature has the highest offset in the buffer.  Ensure
 290		 * it does.
 291		 */
 292		WARN_ONCE(last_good_offset > xstate_offsets[i],
 293			  "x86/fpu: misordered xstate at %d\n", last_good_offset);
 294
 295		last_good_offset = xstate_offsets[i];
 296	}
 297}
 298
 299static void __init print_xstate_feature(u64 xstate_mask)
 300{
 301	const char *feature_name;
 302
 303	if (cpu_has_xfeatures(xstate_mask, &feature_name))
 304		pr_info("x86/fpu: Supporting XSAVE feature 0x%03Lx: '%s'\n", xstate_mask, feature_name);
 305}
 306
 307/*
 308 * Print out all the supported xstate features:
 309 */
 310static void __init print_xstate_features(void)
 311{
 312	print_xstate_feature(XFEATURE_MASK_FP);
 313	print_xstate_feature(XFEATURE_MASK_SSE);
 314	print_xstate_feature(XFEATURE_MASK_YMM);
 315	print_xstate_feature(XFEATURE_MASK_BNDREGS);
 316	print_xstate_feature(XFEATURE_MASK_BNDCSR);
 317	print_xstate_feature(XFEATURE_MASK_OPMASK);
 318	print_xstate_feature(XFEATURE_MASK_ZMM_Hi256);
 319	print_xstate_feature(XFEATURE_MASK_Hi16_ZMM);
 320	print_xstate_feature(XFEATURE_MASK_PKRU);
 
 
 
 321}
 322
 323/*
 324 * This check is important because it is easy to get XSTATE_*
 325 * confused with XSTATE_BIT_*.
 326 */
 327#define CHECK_XFEATURE(nr) do {		\
 328	WARN_ON(nr < FIRST_EXTENDED_XFEATURE);	\
 329	WARN_ON(nr >= XFEATURE_MAX);	\
 330} while (0)
 331
 332/*
 333 * We could cache this like xstate_size[], but we only use
 334 * it here, so it would be a waste of space.
 335 */
 336static int xfeature_is_aligned(int xfeature_nr)
 337{
 338	u32 eax, ebx, ecx, edx;
 339
 340	CHECK_XFEATURE(xfeature_nr);
 341
 342	if (!xfeature_enabled(xfeature_nr)) {
 343		WARN_ONCE(1, "Checking alignment of disabled xfeature %d\n",
 344			  xfeature_nr);
 345		return 0;
 346	}
 347
 348	cpuid_count(XSTATE_CPUID, xfeature_nr, &eax, &ebx, &ecx, &edx);
 349	/*
 350	 * The value returned by ECX[1] indicates the alignment
 351	 * of state component 'i' when the compacted format
 352	 * of the extended region of an XSAVE area is used:
 353	 */
 354	return !!(ecx & 2);
 355}
 356
 357/*
 358 * This function sets up offsets and sizes of all extended states in
 359 * xsave area. This supports both standard format and compacted format
 360 * of the xsave area.
 361 */
 362static void __init setup_xstate_comp_offsets(void)
 363{
 364	unsigned int next_offset;
 365	int i;
 
 
 
 
 
 
 
 366
 367	/*
 368	 * The FP xstates and SSE xstates are legacy states. They are always
 369	 * in the fixed offsets in the xsave area in either compacted form
 370	 * or standard form.
 371	 */
 372	xstate_comp_offsets[XFEATURE_FP] = 0;
 373	xstate_comp_offsets[XFEATURE_SSE] = offsetof(struct fxregs_state,
 374						     xmm_space);
 375
 376	if (!boot_cpu_has(X86_FEATURE_XSAVES)) {
 377		for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
 378			if (xfeature_enabled(i))
 379				xstate_comp_offsets[i] = xstate_offsets[i];
 380		}
 381		return;
 382	}
 383
 384	next_offset = FXSAVE_SIZE + XSAVE_HDR_SIZE;
 385
 386	for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
 387		if (!xfeature_enabled(i))
 388			continue;
 389
 390		if (xfeature_is_aligned(i))
 391			next_offset = ALIGN(next_offset, 64);
 392
 393		xstate_comp_offsets[i] = next_offset;
 394		next_offset += xstate_sizes[i];
 395	}
 396}
 397
 398/*
 399 * Setup offsets of a supervisor-state-only XSAVES buffer:
 400 *
 401 * The offsets stored in xstate_comp_offsets[] only work for one specific
 402 * value of the Requested Feature BitMap (RFBM).  In cases where a different
 403 * RFBM value is used, a different set of offsets is required.  This set of
 404 * offsets is for when RFBM=xfeatures_mask_supervisor().
 405 */
 406static void __init setup_supervisor_only_offsets(void)
 407{
 408	unsigned int next_offset;
 409	int i;
 410
 411	next_offset = FXSAVE_SIZE + XSAVE_HDR_SIZE;
 412
 413	for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
 414		if (!xfeature_enabled(i) || !xfeature_is_supervisor(i))
 415			continue;
 416
 417		if (xfeature_is_aligned(i))
 418			next_offset = ALIGN(next_offset, 64);
 419
 420		xstate_supervisor_only_offsets[i] = next_offset;
 421		next_offset += xstate_sizes[i];
 422	}
 423}
 424
 425/*
 426 * Print out xstate component offsets and sizes
 427 */
 428static void __init print_xstate_offset_size(void)
 429{
 430	int i;
 431
 432	for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
 433		if (!xfeature_enabled(i))
 434			continue;
 435		pr_info("x86/fpu: xstate_offset[%d]: %4d, xstate_sizes[%d]: %4d\n",
 436			 i, xstate_comp_offsets[i], i, xstate_sizes[i]);
 437	}
 438}
 439
 440/*
 441 * setup the xstate image representing the init state
 442 */
 443static void __init setup_init_fpu_buf(void)
 444{
 445	static int on_boot_cpu __initdata = 1;
 446
 447	WARN_ON_FPU(!on_boot_cpu);
 448	on_boot_cpu = 0;
 449
 450	if (!boot_cpu_has(X86_FEATURE_XSAVE))
 451		return;
 452
 453	setup_xstate_features();
 454	print_xstate_features();
 455
 456	if (boot_cpu_has(X86_FEATURE_XSAVES))
 457		init_fpstate.xsave.header.xcomp_bv = XCOMP_BV_COMPACTED_FORMAT |
 458						     xfeatures_mask_all;
 459
 460	/*
 461	 * Init all the features state with header.xfeatures being 0x0
 462	 */
 463	copy_kernel_to_xregs_booting(&init_fpstate.xsave);
 464
 465	/*
 466	 * Dump the init state again. This is to identify the init state
 467	 * of any feature which is not represented by all zero's.
 
 
 
 
 
 
 
 
 
 
 
 
 468	 */
 469	copy_xregs_to_kernel_booting(&init_fpstate.xsave);
 470}
 471
 472static int xfeature_uncompacted_offset(int xfeature_nr)
 473{
 474	u32 eax, ebx, ecx, edx;
 475
 476	/*
 477	 * Only XSAVES supports supervisor states and it uses compacted
 478	 * format. Checking a supervisor state's uncompacted offset is
 479	 * an error.
 480	 */
 481	if (XFEATURE_MASK_SUPERVISOR_ALL & BIT_ULL(xfeature_nr)) {
 482		WARN_ONCE(1, "No fixed offset for xstate %d\n", xfeature_nr);
 483		return -1;
 484	}
 485
 486	CHECK_XFEATURE(xfeature_nr);
 487	cpuid_count(XSTATE_CPUID, xfeature_nr, &eax, &ebx, &ecx, &edx);
 488	return ebx;
 489}
 490
 491int xfeature_size(int xfeature_nr)
 492{
 493	u32 eax, ebx, ecx, edx;
 494
 495	CHECK_XFEATURE(xfeature_nr);
 496	cpuid_count(XSTATE_CPUID, xfeature_nr, &eax, &ebx, &ecx, &edx);
 497	return eax;
 498}
 499
 500/*
 501 * 'XSAVES' implies two different things:
 502 * 1. saving of supervisor/system state
 503 * 2. using the compacted format
 504 *
 505 * Use this function when dealing with the compacted format so
 506 * that it is obvious which aspect of 'XSAVES' is being handled
 507 * by the calling code.
 508 */
 509int using_compacted_format(void)
 510{
 511	return boot_cpu_has(X86_FEATURE_XSAVES);
 512}
 513
 514/* Validate an xstate header supplied by userspace (ptrace or sigreturn) */
 515int validate_user_xstate_header(const struct xstate_header *hdr)
 
 516{
 517	/* No unknown or supervisor features may be set */
 518	if (hdr->xfeatures & ~xfeatures_mask_user())
 519		return -EINVAL;
 520
 521	/* Userspace must use the uncompacted format */
 522	if (hdr->xcomp_bv)
 523		return -EINVAL;
 524
 525	/*
 526	 * If 'reserved' is shrunken to add a new field, make sure to validate
 527	 * that new field here!
 528	 */
 529	BUILD_BUG_ON(sizeof(hdr->reserved) != 48);
 530
 531	/* No reserved bits may be set */
 532	if (memchr_inv(hdr->reserved, 0, sizeof(hdr->reserved)))
 533		return -EINVAL;
 534
 535	return 0;
 536}
 537
 538static void __xstate_dump_leaves(void)
 539{
 540	int i;
 541	u32 eax, ebx, ecx, edx;
 542	static int should_dump = 1;
 543
 544	if (!should_dump)
 545		return;
 546	should_dump = 0;
 547	/*
 548	 * Dump out a few leaves past the ones that we support
 549	 * just in case there are some goodies up there
 550	 */
 551	for (i = 0; i < XFEATURE_MAX + 10; i++) {
 552		cpuid_count(XSTATE_CPUID, i, &eax, &ebx, &ecx, &edx);
 553		pr_warn("CPUID[%02x, %02x]: eax=%08x ebx=%08x ecx=%08x edx=%08x\n",
 554			XSTATE_CPUID, i, eax, ebx, ecx, edx);
 555	}
 556}
 557
 558#define XSTATE_WARN_ON(x) do {							\
 559	if (WARN_ONCE(x, "XSAVE consistency problem, dumping leaves")) {	\
 560		__xstate_dump_leaves();						\
 561	}									\
 562} while (0)
 563
 564#define XCHECK_SZ(sz, nr, nr_macro, __struct) do {			\
 565	if ((nr == nr_macro) &&						\
 566	    WARN_ONCE(sz != sizeof(__struct),				\
 567		"%s: struct is %zu bytes, cpu state %d bytes\n",	\
 568		__stringify(nr_macro), sizeof(__struct), sz)) {		\
 569		__xstate_dump_leaves();					\
 570	}								\
 571} while (0)
 572
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 573/*
 574 * We have a C struct for each 'xstate'.  We need to ensure
 575 * that our software representation matches what the CPU
 576 * tells us about the state's size.
 577 */
 578static void check_xstate_against_struct(int nr)
 579{
 580	/*
 581	 * Ask the CPU for the size of the state.
 582	 */
 583	int sz = xfeature_size(nr);
 584	/*
 585	 * Match each CPU state with the corresponding software
 586	 * structure.
 587	 */
 588	XCHECK_SZ(sz, nr, XFEATURE_YMM,       struct ymmh_struct);
 589	XCHECK_SZ(sz, nr, XFEATURE_BNDREGS,   struct mpx_bndreg_state);
 590	XCHECK_SZ(sz, nr, XFEATURE_BNDCSR,    struct mpx_bndcsr_state);
 591	XCHECK_SZ(sz, nr, XFEATURE_OPMASK,    struct avx_512_opmask_state);
 592	XCHECK_SZ(sz, nr, XFEATURE_ZMM_Hi256, struct avx_512_zmm_uppers_state);
 593	XCHECK_SZ(sz, nr, XFEATURE_Hi16_ZMM,  struct avx_512_hi16_state);
 594	XCHECK_SZ(sz, nr, XFEATURE_PKRU,      struct pkru_state);
 
 
 
 
 
 
 595
 596	/*
 597	 * Make *SURE* to add any feature numbers in below if
 598	 * there are "holes" in the xsave state component
 599	 * numbers.
 600	 */
 601	if ((nr < XFEATURE_YMM) ||
 602	    (nr >= XFEATURE_MAX) ||
 603	    (nr == XFEATURE_PT_UNIMPLEMENTED_SO_FAR) ||
 604	    ((nr >= XFEATURE_RSRVD_COMP_10) && (nr <= XFEATURE_LBR))) {
 605		WARN_ONCE(1, "no structure for xstate: %d\n", nr);
 606		XSTATE_WARN_ON(1);
 607	}
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 608}
 609
 610/*
 611 * This essentially double-checks what the cpu told us about
 612 * how large the XSAVE buffer needs to be.  We are recalculating
 613 * it to be safe.
 614 *
 615 * Dynamic XSAVE features allocate their own buffers and are not
 616 * covered by these checks. Only the size of the buffer for task->fpu
 617 * is checked here.
 618 */
 619static void do_extra_xstate_size_checks(void)
 620{
 621	int paranoid_xstate_size = FXSAVE_SIZE + XSAVE_HDR_SIZE;
 
 
 622	int i;
 623
 624	for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
 625		if (!xfeature_enabled(i))
 626			continue;
 627
 628		check_xstate_against_struct(i);
 629		/*
 630		 * Supervisor state components can be managed only by
 631		 * XSAVES, which is compacted-format only.
 632		 */
 633		if (!using_compacted_format())
 634			XSTATE_WARN_ON(xfeature_is_supervisor(i));
 635
 636		/* Align from the end of the previous feature */
 637		if (xfeature_is_aligned(i))
 638			paranoid_xstate_size = ALIGN(paranoid_xstate_size, 64);
 639		/*
 640		 * The offset of a given state in the non-compacted
 641		 * format is given to us in a CPUID leaf.  We check
 642		 * them for being ordered (increasing offsets) in
 643		 * setup_xstate_features().
 644		 */
 645		if (!using_compacted_format())
 646			paranoid_xstate_size = xfeature_uncompacted_offset(i);
 647		/*
 648		 * The compacted-format offset always depends on where
 649		 * the previous state ended.
 650		 */
 651		paranoid_xstate_size += xfeature_size(i);
 652	}
 653	XSTATE_WARN_ON(paranoid_xstate_size != fpu_kernel_xstate_size);
 
 
 
 654}
 655
 656
 657/*
 658 * Get total size of enabled xstates in XCR0 | IA32_XSS.
 659 *
 660 * Note the SDM's wording here.  "sub-function 0" only enumerates
 661 * the size of the *user* states.  If we use it to size a buffer
 662 * that we use 'XSAVES' on, we could potentially overflow the
 663 * buffer because 'XSAVES' saves system states too.
 
 
 
 664 */
 665static unsigned int __init get_xsaves_size(void)
 666{
 667	unsigned int eax, ebx, ecx, edx;
 668	/*
 669	 * - CPUID function 0DH, sub-function 1:
 670	 *    EBX enumerates the size (in bytes) required by
 671	 *    the XSAVES instruction for an XSAVE area
 672	 *    containing all the state components
 673	 *    corresponding to bits currently set in
 674	 *    XCR0 | IA32_XSS.
 
 
 
 
 675	 */
 676	cpuid_count(XSTATE_CPUID, 1, &eax, &ebx, &ecx, &edx);
 677	return ebx;
 678}
 679
 680/*
 681 * Get the total size of the enabled xstates without the dynamic supervisor
 682 * features.
 683 */
 684static unsigned int __init get_xsaves_size_no_dynamic(void)
 685{
 686	u64 mask = xfeatures_mask_dynamic();
 687	unsigned int size;
 688
 689	if (!mask)
 690		return get_xsaves_size();
 691
 692	/* Disable dynamic features. */
 693	wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor());
 694
 695	/*
 696	 * Ask the hardware what size is required of the buffer.
 697	 * This is the size required for the task->fpu buffer.
 698	 */
 699	size = get_xsaves_size();
 700
 701	/* Re-enable dynamic features so XSAVES will work on them again. */
 702	wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor() | mask);
 703
 704	return size;
 705}
 706
 707static unsigned int __init get_xsave_size(void)
 708{
 709	unsigned int eax, ebx, ecx, edx;
 710	/*
 711	 * - CPUID function 0DH, sub-function 0:
 712	 *    EBX enumerates the size (in bytes) required by
 713	 *    the XSAVE instruction for an XSAVE area
 714	 *    containing all the *user* state components
 715	 *    corresponding to bits currently set in XCR0.
 716	 */
 717	cpuid_count(XSTATE_CPUID, 0, &eax, &ebx, &ecx, &edx);
 718	return ebx;
 719}
 720
 721/*
 722 * Will the runtime-enumerated 'xstate_size' fit in the init
 723 * task's statically-allocated buffer?
 724 */
 725static bool is_supported_xstate_size(unsigned int test_xstate_size)
 726{
 727	if (test_xstate_size <= sizeof(union fpregs_state))
 728		return true;
 729
 730	pr_warn("x86/fpu: xstate buffer too small (%zu < %d), disabling xsave\n",
 731			sizeof(union fpregs_state), test_xstate_size);
 732	return false;
 733}
 734
 735static int __init init_xstate_size(void)
 736{
 737	/* Recompute the context size for enabled features: */
 738	unsigned int possible_xstate_size;
 739	unsigned int xsave_size;
 740
 741	xsave_size = get_xsave_size();
 
 742
 743	if (boot_cpu_has(X86_FEATURE_XSAVES))
 744		possible_xstate_size = get_xsaves_size_no_dynamic();
 
 
 
 
 
 
 
 
 745	else
 746		possible_xstate_size = xsave_size;
 
 
 
 747
 748	/* Ensure we have the space to store all enabled: */
 749	if (!is_supported_xstate_size(possible_xstate_size))
 750		return -EINVAL;
 751
 752	/*
 753	 * The size is OK, we are definitely going to use xsave,
 754	 * make it known to the world that we need more space.
 755	 */
 756	fpu_kernel_xstate_size = possible_xstate_size;
 757	do_extra_xstate_size_checks();
 758
 759	/*
 760	 * User space is always in standard format.
 761	 */
 762	fpu_user_xstate_size = xsave_size;
 763	return 0;
 764}
 765
 766/*
 767 * We enabled the XSAVE hardware, but something went wrong and
 768 * we can not use it.  Disable it.
 769 */
 770static void fpu__init_disable_system_xstate(void)
 771{
 772	xfeatures_mask_all = 0;
 773	cr4_clear_bits(X86_CR4_OSXSAVE);
 774	setup_clear_cpu_cap(X86_FEATURE_XSAVE);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 775}
 776
 777/*
 778 * Enable and initialize the xsave feature.
 779 * Called once per system bootup.
 780 */
 781void __init fpu__init_system_xstate(void)
 782{
 783	unsigned int eax, ebx, ecx, edx;
 784	static int on_boot_cpu __initdata = 1;
 785	int err;
 786	int i;
 787
 788	WARN_ON_FPU(!on_boot_cpu);
 789	on_boot_cpu = 0;
 790
 791	if (!boot_cpu_has(X86_FEATURE_FPU)) {
 792		pr_info("x86/fpu: No FPU detected\n");
 793		return;
 794	}
 795
 796	if (!boot_cpu_has(X86_FEATURE_XSAVE)) {
 797		pr_info("x86/fpu: x87 FPU will use %s\n",
 798			boot_cpu_has(X86_FEATURE_FXSR) ? "FXSAVE" : "FSAVE");
 799		return;
 800	}
 801
 802	if (boot_cpu_data.cpuid_level < XSTATE_CPUID) {
 803		WARN_ON_FPU(1);
 804		return;
 805	}
 806
 807	/*
 808	 * Find user xstates supported by the processor.
 809	 */
 810	cpuid_count(XSTATE_CPUID, 0, &eax, &ebx, &ecx, &edx);
 811	xfeatures_mask_all = eax + ((u64)edx << 32);
 812
 813	/*
 814	 * Find supervisor xstates supported by the processor.
 815	 */
 816	cpuid_count(XSTATE_CPUID, 1, &eax, &ebx, &ecx, &edx);
 817	xfeatures_mask_all |= ecx + ((u64)edx << 32);
 818
 819	if ((xfeatures_mask_user() & XFEATURE_MASK_FPSSE) != XFEATURE_MASK_FPSSE) {
 820		/*
 821		 * This indicates that something really unexpected happened
 822		 * with the enumeration.  Disable XSAVE and try to continue
 823		 * booting without it.  This is too early to BUG().
 824		 */
 825		pr_err("x86/fpu: FP/SSE not present amongst the CPU's xstate features: 0x%llx.\n",
 826		       xfeatures_mask_all);
 827		goto out_disable;
 828	}
 829
 830	/*
 831	 * Clear XSAVE features that are disabled in the normal CPUID.
 832	 */
 833	for (i = 0; i < ARRAY_SIZE(xsave_cpuid_features); i++) {
 834		if (!boot_cpu_has(xsave_cpuid_features[i]))
 835			xfeatures_mask_all &= ~BIT_ULL(i);
 
 
 
 836	}
 837
 838	xfeatures_mask_all &= fpu__get_supported_xfeatures_mask();
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 839
 840	/* Enable xstate instructions to be able to continue with initialization: */
 841	fpu__init_cpu_xstate();
 
 
 
 
 842	err = init_xstate_size();
 843	if (err)
 844		goto out_disable;
 845
 
 
 
 846	/*
 847	 * Update info used for ptrace frames; use standard-format size and no
 848	 * supervisor xstates:
 849	 */
 850	update_regset_xstate_info(fpu_user_xstate_size, xfeatures_mask_user());
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 851
 852	fpu__init_prepare_fx_sw_frame();
 853	setup_init_fpu_buf();
 854	setup_xstate_comp_offsets();
 855	setup_supervisor_only_offsets();
 
 
 
 
 
 
 
 
 
 856	print_xstate_offset_size();
 857
 858	pr_info("x86/fpu: Enabled xstate features 0x%llx, context size is %d bytes, using '%s' format.\n",
 859		xfeatures_mask_all,
 860		fpu_kernel_xstate_size,
 861		boot_cpu_has(X86_FEATURE_XSAVES) ? "compacted" : "standard");
 862	return;
 863
 864out_disable:
 865	/* something went wrong, try to boot without any XSAVE support */
 866	fpu__init_disable_system_xstate();
 867}
 868
 869/*
 870 * Restore minimal FPU state after suspend:
 871 */
 872void fpu__resume_cpu(void)
 873{
 874	/*
 875	 * Restore XCR0 on xsave capable CPUs:
 876	 */
 877	if (boot_cpu_has(X86_FEATURE_XSAVE))
 878		xsetbv(XCR_XFEATURE_ENABLED_MASK, xfeatures_mask_user());
 879
 880	/*
 881	 * Restore IA32_XSS. The same CPUID bit enumerates support
 882	 * of XSAVES and MSR_IA32_XSS.
 883	 */
 884	if (boot_cpu_has(X86_FEATURE_XSAVES)) {
 885		wrmsrl(MSR_IA32_XSS, xfeatures_mask_supervisor()  |
 886				     xfeatures_mask_dynamic());
 887	}
 
 
 
 888}
 889
 890/*
 891 * Given an xstate feature nr, calculate where in the xsave
 892 * buffer the state is.  Callers should ensure that the buffer
 893 * is valid.
 894 */
 895static void *__raw_xsave_addr(struct xregs_state *xsave, int xfeature_nr)
 896{
 897	if (!xfeature_enabled(xfeature_nr)) {
 898		WARN_ON_FPU(1);
 
 899		return NULL;
 
 
 
 
 900	}
 901
 902	return (void *)xsave + xstate_comp_offsets[xfeature_nr];
 903}
 
 904/*
 905 * Given the xsave area and a state inside, this function returns the
 906 * address of the state.
 907 *
 908 * This is the API that is called to get xstate address in either
 909 * standard format or compacted format of xsave area.
 910 *
 911 * Note that if there is no data for the field in the xsave buffer
 912 * this will return NULL.
 913 *
 914 * Inputs:
 915 *	xstate: the thread's storage area for all FPU data
 916 *	xfeature_nr: state which is defined in xsave.h (e.g. XFEATURE_FP,
 917 *	XFEATURE_SSE, etc...)
 918 * Output:
 919 *	address of the state in the xsave area, or NULL if the
 920 *	field is not present in the xsave buffer.
 921 */
 922void *get_xsave_addr(struct xregs_state *xsave, int xfeature_nr)
 923{
 924	/*
 925	 * Do we even *have* xsave state?
 926	 */
 927	if (!boot_cpu_has(X86_FEATURE_XSAVE))
 928		return NULL;
 929
 930	/*
 931	 * We should not ever be requesting features that we
 932	 * have not enabled.
 933	 */
 934	WARN_ONCE(!(xfeatures_mask_all & BIT_ULL(xfeature_nr)),
 935		  "get of unsupported state");
 
 936	/*
 937	 * This assumes the last 'xsave*' instruction to
 938	 * have requested that 'xfeature_nr' be saved.
 939	 * If it did not, we might be seeing and old value
 940	 * of the field in the buffer.
 941	 *
 942	 * This can happen because the last 'xsave' did not
 943	 * request that this feature be saved (unlikely)
 944	 * or because the "init optimization" caused it
 945	 * to not be saved.
 946	 */
 947	if (!(xsave->header.xfeatures & BIT_ULL(xfeature_nr)))
 948		return NULL;
 949
 950	return __raw_xsave_addr(xsave, xfeature_nr);
 951}
 952EXPORT_SYMBOL_GPL(get_xsave_addr);
 953
 954/*
 955 * This wraps up the common operations that need to occur when retrieving
 956 * data from xsave state.  It first ensures that the current task was
 957 * using the FPU and retrieves the data in to a buffer.  It then calculates
 958 * the offset of the requested field in the buffer.
 959 *
 960 * This function is safe to call whether the FPU is in use or not.
 961 *
 962 * Note that this only works on the current task.
 963 *
 964 * Inputs:
 965 *	@xfeature_nr: state which is defined in xsave.h (e.g. XFEATURE_FP,
 966 *	XFEATURE_SSE, etc...)
 967 * Output:
 968 *	address of the state in the xsave area or NULL if the state
 969 *	is not present or is in its 'init state'.
 970 */
 971const void *get_xsave_field_ptr(int xfeature_nr)
 972{
 973	struct fpu *fpu = &current->thread.fpu;
 974
 975	/*
 976	 * fpu__save() takes the CPU's xstate registers
 977	 * and saves them off to the 'fpu memory buffer.
 978	 */
 979	fpu__save(fpu);
 980
 981	return get_xsave_addr(&fpu->state.xsave, xfeature_nr);
 982}
 983
 984#ifdef CONFIG_ARCH_HAS_PKEYS
 985
 986/*
 987 * This will go out and modify PKRU register to set the access
 988 * rights for @pkey to @init_val.
 989 */
 990int arch_set_user_pkey_access(struct task_struct *tsk, int pkey,
 991		unsigned long init_val)
 992{
 993	u32 old_pkru;
 994	int pkey_shift = (pkey * PKRU_BITS_PER_PKEY);
 995	u32 new_pkru_bits = 0;
 996
 997	/*
 998	 * This check implies XSAVE support.  OSPKE only gets
 999	 * set if we enable XSAVE and we enable PKU in XCR0.
1000	 */
1001	if (!boot_cpu_has(X86_FEATURE_OSPKE))
1002		return -EINVAL;
1003
1004	/*
1005	 * This code should only be called with valid 'pkey'
1006	 * values originating from in-kernel users.  Complain
1007	 * if a bad value is observed.
1008	 */
1009	WARN_ON_ONCE(pkey >= arch_max_pkey());
 
1010
1011	/* Set the bits we need in PKRU:  */
1012	if (init_val & PKEY_DISABLE_ACCESS)
1013		new_pkru_bits |= PKRU_AD_BIT;
1014	if (init_val & PKEY_DISABLE_WRITE)
1015		new_pkru_bits |= PKRU_WD_BIT;
1016
1017	/* Shift the bits in to the correct place in PKRU for pkey: */
 
1018	new_pkru_bits <<= pkey_shift;
1019
1020	/* Get old PKRU and mask off any old bits in place: */
1021	old_pkru = read_pkru();
1022	old_pkru &= ~((PKRU_AD_BIT|PKRU_WD_BIT) << pkey_shift);
1023
1024	/* Write old part along with new part: */
1025	write_pkru(old_pkru | new_pkru_bits);
1026
1027	return 0;
1028}
1029#endif /* ! CONFIG_ARCH_HAS_PKEYS */
1030
1031/*
1032 * Weird legacy quirk: SSE and YMM states store information in the
1033 * MXCSR and MXCSR_FLAGS fields of the FP area. That means if the FP
1034 * area is marked as unused in the xfeatures header, we need to copy
1035 * MXCSR and MXCSR_FLAGS if either SSE or YMM are in use.
1036 */
1037static inline bool xfeatures_mxcsr_quirk(u64 xfeatures)
1038{
1039	if (!(xfeatures & (XFEATURE_MASK_SSE|XFEATURE_MASK_YMM)))
1040		return false;
1041
1042	if (xfeatures & XFEATURE_MASK_FP)
1043		return false;
1044
1045	return true;
1046}
1047
1048static void fill_gap(struct membuf *to, unsigned *last, unsigned offset)
1049{
1050	if (*last >= offset)
1051		return;
1052	membuf_write(to, (void *)&init_fpstate.xsave + *last, offset - *last);
1053	*last = offset;
1054}
1055
1056static void copy_part(struct membuf *to, unsigned *last, unsigned offset,
1057		      unsigned size, void *from)
1058{
1059	fill_gap(to, last, offset);
1060	membuf_write(to, from, size);
1061	*last = offset + size;
1062}
1063
1064/*
1065 * Convert from kernel XSAVES compacted format to standard format and copy
1066 * to a kernel-space ptrace buffer.
1067 *
1068 * It supports partial copy but pos always starts from zero. This is called
1069 * from xstateregs_get() and there we check the CPU has XSAVES.
1070 */
1071void copy_xstate_to_kernel(struct membuf to, struct xregs_state *xsave)
 
1072{
 
 
 
1073	struct xstate_header header;
1074	const unsigned off_mxcsr = offsetof(struct fxregs_state, mxcsr);
1075	unsigned size = to.left;
1076	unsigned last = 0;
1077	int i;
1078
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1079	/*
1080	 * The destination is a ptrace buffer; we put in only user xstates:
 
 
 
1081	 */
1082	memset(&header, 0, sizeof(header));
1083	header.xfeatures = xsave->header.xfeatures;
1084	header.xfeatures &= xfeatures_mask_user();
1085
1086	if (header.xfeatures & XFEATURE_MASK_FP)
1087		copy_part(&to, &last, 0, off_mxcsr, &xsave->i387);
1088	if (header.xfeatures & (XFEATURE_MASK_SSE | XFEATURE_MASK_YMM))
1089		copy_part(&to, &last, off_mxcsr,
1090			  MXCSR_AND_FLAGS_SIZE, &xsave->i387.mxcsr);
1091	if (header.xfeatures & XFEATURE_MASK_FP)
1092		copy_part(&to, &last, offsetof(struct fxregs_state, st_space),
1093			  128, &xsave->i387.st_space);
1094	if (header.xfeatures & XFEATURE_MASK_SSE)
1095		copy_part(&to, &last, xstate_offsets[XFEATURE_SSE],
1096			  256, &xsave->i387.xmm_space);
1097	/*
1098	 * Fill xsave->i387.sw_reserved value for ptrace frame:
1099	 */
1100	copy_part(&to, &last, offsetof(struct fxregs_state, sw_reserved),
1101		  48, xstate_fx_sw_bytes);
1102	/*
1103	 * Copy xregs_state->header:
 
 
 
1104	 */
1105	copy_part(&to, &last, offsetof(struct xregs_state, header),
1106		  sizeof(header), &header);
1107
1108	for (i = FIRST_EXTENDED_XFEATURE; i < XFEATURE_MAX; i++) {
1109		/*
1110		 * Copy only in-use xstates:
 
1111		 */
1112		if ((header.xfeatures >> i) & 1) {
1113			void *src = __raw_xsave_addr(xsave, i);
1114
1115			copy_part(&to, &last, xstate_offsets[i],
1116				  xstate_sizes[i], src);
 
 
 
 
 
 
 
 
 
 
 
1117		}
 
 
 
 
 
 
 
 
 
 
 
1118
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1119	}
1120	fill_gap(&to, &last, size);
1121}
1122
1123/*
1124 * Convert from a ptrace standard-format kernel buffer to kernel XSAVES format
1125 * and copy to the target thread. This is called from xstateregs_set().
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1126 */
1127int copy_kernel_to_xstate(struct xregs_state *xsave, const void *kbuf)
 
1128{
 
1129	unsigned int offset, size;
 
 
1130	int i;
1131	struct xstate_header hdr;
1132
1133	offset = offsetof(struct xregs_state, header);
1134	size = sizeof(hdr);
 
 
 
 
1135
1136	memcpy(&hdr, kbuf + offset, size);
 
 
 
 
 
 
 
1137
1138	if (validate_user_xstate_header(&hdr))
1139		return -EINVAL;
 
 
 
 
 
 
 
 
1140
1141	for (i = 0; i < XFEATURE_MAX; i++) {
1142		u64 mask = ((u64)1 << i);
1143
1144		if (hdr.xfeatures & mask) {
1145			void *dst = __raw_xsave_addr(xsave, i);
1146
1147			offset = xstate_offsets[i];
1148			size = xstate_sizes[i];
1149
1150			memcpy(dst, kbuf + offset, size);
 
1151		}
1152	}
1153
1154	if (xfeatures_mxcsr_quirk(hdr.xfeatures)) {
1155		offset = offsetof(struct fxregs_state, mxcsr);
1156		size = MXCSR_AND_FLAGS_SIZE;
1157		memcpy(&xsave->i387.mxcsr, kbuf + offset, size);
 
 
 
 
 
 
 
 
1158	}
1159
1160	/*
1161	 * The state that came in from userspace was user-state only.
1162	 * Mask all the user states out of 'xfeatures':
1163	 */
1164	xsave->header.xfeatures &= XFEATURE_MASK_SUPERVISOR_ALL;
1165
1166	/*
1167	 * Add back in the features that came in from userspace:
1168	 */
1169	xsave->header.xfeatures |= hdr.xfeatures;
1170
1171	return 0;
1172}
1173
1174/*
1175 * Convert from a ptrace or sigreturn standard-format user-space buffer to
1176 * kernel XSAVES format and copy to the target thread. This is called from
1177 * xstateregs_set(), as well as potentially from the sigreturn() and
1178 * rt_sigreturn() system calls.
1179 */
1180int copy_user_to_xstate(struct xregs_state *xsave, const void __user *ubuf)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1181{
1182	unsigned int offset, size;
1183	int i;
1184	struct xstate_header hdr;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1185
1186	offset = offsetof(struct xregs_state, header);
1187	size = sizeof(hdr);
 
 
 
1188
1189	if (__copy_from_user(&hdr, ubuf + offset, size))
1190		return -EFAULT;
1191
1192	if (validate_user_xstate_header(&hdr))
1193		return -EINVAL;
 
 
 
 
 
 
1194
1195	for (i = 0; i < XFEATURE_MAX; i++) {
1196		u64 mask = ((u64)1 << i);
1197
1198		if (hdr.xfeatures & mask) {
1199			void *dst = __raw_xsave_addr(xsave, i);
 
 
 
 
1200
1201			offset = xstate_offsets[i];
1202			size = xstate_sizes[i];
 
 
 
 
 
1203
1204			if (__copy_from_user(dst, ubuf + offset, size))
1205				return -EFAULT;
1206		}
1207	}
1208
1209	if (xfeatures_mxcsr_quirk(hdr.xfeatures)) {
1210		offset = offsetof(struct fxregs_state, mxcsr);
1211		size = MXCSR_AND_FLAGS_SIZE;
1212		if (__copy_from_user(&xsave->i387.mxcsr, ubuf + offset, size))
1213			return -EFAULT;
1214	}
1215
1216	/*
1217	 * The state that came in from userspace was user-state only.
1218	 * Mask all the user states out of 'xfeatures':
1219	 */
1220	xsave->header.xfeatures &= XFEATURE_MASK_SUPERVISOR_ALL;
1221
1222	/*
1223	 * Add back in the features that came in from userspace:
 
1224	 */
1225	xsave->header.xfeatures |= hdr.xfeatures;
 
 
 
 
 
 
 
1226
 
 
 
 
 
 
 
 
1227	return 0;
1228}
 
1229
1230/*
1231 * Save only supervisor states to the kernel buffer.  This blows away all
1232 * old states, and is intended to be used only in __fpu__restore_sig(), where
1233 * user states are restored from the user buffer.
1234 */
1235void copy_supervisor_to_kernel(struct xregs_state *xstate)
1236{
1237	struct xstate_header *header;
1238	u64 max_bit, min_bit;
1239	u32 lmask, hmask;
1240	int err, i;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1241
1242	if (WARN_ON(!boot_cpu_has(X86_FEATURE_XSAVES)))
1243		return;
1244
1245	if (!xfeatures_mask_supervisor())
1246		return;
 
 
 
 
1247
1248	max_bit = __fls(xfeatures_mask_supervisor());
1249	min_bit = __ffs(xfeatures_mask_supervisor());
 
 
 
1250
1251	lmask = xfeatures_mask_supervisor();
1252	hmask = xfeatures_mask_supervisor() >> 32;
1253	XSTATE_OP(XSAVES, xstate, lmask, hmask, err);
1254
1255	/* We should never fault when copying to a kernel buffer: */
1256	if (WARN_ON_FPU(err))
1257		return;
 
 
 
 
1258
 
1259	/*
1260	 * At this point, the buffer has only supervisor states and must be
1261	 * converted back to normal kernel format.
 
1262	 */
1263	header = &xstate->header;
1264	header->xcomp_bv |= xfeatures_mask_all;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1265
 
 
1266	/*
1267	 * This only moves states up in the buffer.  Start with
1268	 * the last state and move backwards so that states are
1269	 * not overwritten until after they are moved.  Note:
1270	 * memmove() allows overlapping src/dst buffers.
1271	 */
1272	for (i = max_bit; i >= min_bit; i--) {
1273		u8 *xbuf = (u8 *)xstate;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1274
1275		if (!((header->xfeatures >> i) & 1))
1276			continue;
 
1277
1278		/* Move xfeature 'i' into its normal location */
1279		memmove(xbuf + xstate_comp_offsets[i],
1280			xbuf + xstate_supervisor_only_offsets[i],
1281			xstate_sizes[i]);
1282	}
 
 
 
 
 
 
 
 
1283}
1284
1285/**
1286 * copy_dynamic_supervisor_to_kernel() - Save dynamic supervisor states to
1287 *                                       an xsave area
1288 * @xstate: A pointer to an xsave area
1289 * @mask: Represent the dynamic supervisor features saved into the xsave area
1290 *
1291 * Only the dynamic supervisor states sets in the mask are saved into the xsave
1292 * area (See the comment in XFEATURE_MASK_DYNAMIC for the details of dynamic
1293 * supervisor feature). Besides the dynamic supervisor states, the legacy
1294 * region and XSAVE header are also saved into the xsave area. The supervisor
1295 * features in the XFEATURE_MASK_SUPERVISOR_SUPPORTED and
1296 * XFEATURE_MASK_SUPERVISOR_UNSUPPORTED are not saved.
1297 *
1298 * The xsave area must be 64-bytes aligned.
1299 */
1300void copy_dynamic_supervisor_to_kernel(struct xregs_state *xstate, u64 mask)
 
 
 
 
1301{
1302	u64 dynamic_mask = xfeatures_mask_dynamic() & mask;
1303	u32 lmask, hmask;
1304	int err;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1305
1306	if (WARN_ON_FPU(!boot_cpu_has(X86_FEATURE_XSAVES)))
1307		return;
 
 
 
1308
1309	if (WARN_ON_FPU(!dynamic_mask))
1310		return;
 
 
1311
1312	lmask = dynamic_mask;
1313	hmask = dynamic_mask >> 32;
 
 
 
 
 
1314
1315	XSTATE_OP(XSAVES, xstate, lmask, hmask, err);
 
 
 
 
 
 
 
1316
1317	/* Should never fault when copying to a kernel buffer */
1318	WARN_ON_FPU(err);
 
1319}
1320
1321/**
1322 * copy_kernel_to_dynamic_supervisor() - Restore dynamic supervisor states from
1323 *                                       an xsave area
1324 * @xstate: A pointer to an xsave area
1325 * @mask: Represent the dynamic supervisor features restored from the xsave area
1326 *
1327 * Only the dynamic supervisor states sets in the mask are restored from the
1328 * xsave area (See the comment in XFEATURE_MASK_DYNAMIC for the details of
1329 * dynamic supervisor feature). Besides the dynamic supervisor states, the
1330 * legacy region and XSAVE header are also restored from the xsave area. The
1331 * supervisor features in the XFEATURE_MASK_SUPERVISOR_SUPPORTED and
1332 * XFEATURE_MASK_SUPERVISOR_UNSUPPORTED are not restored.
1333 *
1334 * The xsave area must be 64-bytes aligned.
1335 */
1336void copy_kernel_to_dynamic_supervisor(struct xregs_state *xstate, u64 mask)
1337{
1338	u64 dynamic_mask = xfeatures_mask_dynamic() & mask;
1339	u32 lmask, hmask;
1340	int err;
1341
1342	if (WARN_ON_FPU(!boot_cpu_has(X86_FEATURE_XSAVES)))
1343		return;
 
 
 
1344
1345	if (WARN_ON_FPU(!dynamic_mask))
1346		return;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1347
1348	lmask = dynamic_mask;
1349	hmask = dynamic_mask >> 32;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1350
1351	XSTATE_OP(XRSTORS, xstate, lmask, hmask, err);
1352
1353	/* Should never fault when copying from a kernel buffer */
1354	WARN_ON_FPU(err);
 
1355}
1356
1357#ifdef CONFIG_PROC_PID_ARCH_STATUS
1358/*
1359 * Report the amount of time elapsed in millisecond since last AVX512
1360 * use in the task.
1361 */
1362static void avx512_status(struct seq_file *m, struct task_struct *task)
1363{
1364	unsigned long timestamp = READ_ONCE(task->thread.fpu.avx512_timestamp);
1365	long delta;
1366
1367	if (!timestamp) {
1368		/*
1369		 * Report -1 if no AVX512 usage
1370		 */
1371		delta = -1;
1372	} else {
1373		delta = (long)(jiffies - timestamp);
1374		/*
1375		 * Cap to LONG_MAX if time difference > LONG_MAX
1376		 */
1377		if (delta < 0)
1378			delta = LONG_MAX;
1379		delta = jiffies_to_msecs(delta);
1380	}
1381
1382	seq_put_decimal_ll(m, "AVX512_elapsed_ms:\t", delta);
1383	seq_putc(m, '\n');
1384}
1385
1386/*
1387 * Report architecture specific information
1388 */
1389int proc_pid_arch_status(struct seq_file *m, struct pid_namespace *ns,
1390			struct pid *pid, struct task_struct *task)
1391{
1392	/*
1393	 * Report AVX512 state if the processor and build option supported.
1394	 */
1395	if (cpu_feature_enabled(X86_FEATURE_AVX512F))
1396		avx512_status(m, task);
1397
1398	return 0;
1399}
1400#endif /* CONFIG_PROC_PID_ARCH_STATUS */