2008-10-23 07:26:29 +02:00
|
|
|
#ifndef _ASM_X86_UACCESS_H
|
|
|
|
#define _ASM_X86_UACCESS_H
|
2008-06-13 19:39:25 +02:00
|
|
|
/*
|
|
|
|
* User space memory access functions
|
|
|
|
*/
|
|
|
|
#include <linux/errno.h>
|
|
|
|
#include <linux/compiler.h>
|
|
|
|
#include <linux/thread_info.h>
|
|
|
|
#include <linux/string.h>
|
|
|
|
#include <asm/asm.h>
|
|
|
|
#include <asm/page.h>
|
|
|
|
|
|
|
|
#define VERIFY_READ 0
|
|
|
|
#define VERIFY_WRITE 1
|
|
|
|
|
|
|
|
/*
|
|
|
|
* The fs value determines whether argument validity checking should be
|
|
|
|
* performed or not. If get_fs() == USER_DS, checking is performed, with
|
|
|
|
* get_fs() == KERNEL_DS, checking is bypassed.
|
|
|
|
*
|
|
|
|
* For historical reasons, these macros are grossly misnamed.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#define MAKE_MM_SEG(s) ((mm_segment_t) { (s) })
|
|
|
|
|
|
|
|
#define KERNEL_DS MAKE_MM_SEG(-1UL)
|
x86, 64-bit: Clean up user address masking
The discussion about using "access_ok()" in get_user_pages_fast() (see
commit 7f8189068726492950bf1a2dcfd9b51314560abf: "x86: don't use
'access_ok()' as a range check in get_user_pages_fast()" for details and
end result), made us notice that x86-64 was really being very sloppy
about virtual address checking.
So be way more careful and straightforward about masking x86-64 virtual
addresses:
- All the VIRTUAL_MASK* variants now cover half of the address
space, it's not like we can use the full mask on a signed
integer, and the larger mask just invites mistakes when
applying it to either half of the 48-bit address space.
- /proc/kcore's kc_offset_to_vaddr() becomes a lot more
obvious when it transforms a file offset into a
(kernel-half) virtual address.
- Unify/simplify the 32-bit and 64-bit USER_DS definition to
be based on TASK_SIZE_MAX.
This cleanup and more careful/obvious user virtual address checking also
uncovered a buglet in the x86-64 implementation of strnlen_user(): it
would do an "access_ok()" check on the whole potential area, even if the
string itself was much shorter, and thus return an error even for valid
strings. Our sloppy checking had hidden this.
So this fixes 'strnlen_user()' to do this properly, the same way we
already handled user strings in 'strncpy_from_user()'. Namely by just
checking the first byte, and then relying on fault handling for the
rest. That always works, since we impose a guard page that cannot be
mapped at the end of the user space address space (and even if we
didn't, we'd have the address space hole).
Acked-by: Ingo Molnar <mingo@elte.hu>
Cc: Peter Zijlstra <a.p.zijlstra@chello.nl>
Cc: Andrew Morton <akpm@linux-foundation.org>
Cc: Nick Piggin <npiggin@suse.de>
Cc: Hugh Dickins <hugh.dickins@tiscali.co.uk>
Cc: H. Peter Anvin <hpa@zytor.com>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Alan Cox <alan@lxorguk.ukuu.org.uk>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2009-06-21 00:40:00 +02:00
|
|
|
#define USER_DS MAKE_MM_SEG(TASK_SIZE_MAX)
|
2008-06-13 19:39:25 +02:00
|
|
|
|
|
|
|
#define get_ds() (KERNEL_DS)
|
|
|
|
#define get_fs() (current_thread_info()->addr_limit)
|
|
|
|
#define set_fs(x) (current_thread_info()->addr_limit = (x))
|
|
|
|
|
|
|
|
#define segment_eq(a, b) ((a).seg == (b).seg)
|
|
|
|
|
2008-06-25 16:08:51 +02:00
|
|
|
#define __addr_ok(addr) \
|
|
|
|
((unsigned long __force)(addr) < \
|
|
|
|
(current_thread_info()->addr_limit.seg))
|
|
|
|
|
2008-06-13 19:39:25 +02:00
|
|
|
/*
|
|
|
|
* Test whether a block of memory is a valid user space address.
|
|
|
|
* Returns 0 if the range is valid, nonzero otherwise.
|
|
|
|
*
|
|
|
|
* This is equivalent to the following test:
|
x86, 64-bit: Fix copy_[to/from]_user() checks for the userspace address limit
As reported in BZ #30352:
https://bugzilla.kernel.org/show_bug.cgi?id=30352
there's a kernel bug related to reading the last allowed page on x86_64.
The _copy_to_user() and _copy_from_user() functions use the following
check for address limit:
if (buf + size >= limit)
fail();
while it should be more permissive:
if (buf + size > limit)
fail();
That's because the size represents the number of bytes being
read/write from/to buf address AND including the buf address.
So the copy function will actually never touch the limit
address even if "buf + size == limit".
Following program fails to use the last page as buffer
due to the wrong limit check:
#include <sys/mman.h>
#include <sys/socket.h>
#include <assert.h>
#define PAGE_SIZE (4096)
#define LAST_PAGE ((void*)(0x7fffffffe000))
int main()
{
int fds[2], err;
void * ptr = mmap(LAST_PAGE, PAGE_SIZE, PROT_READ | PROT_WRITE,
MAP_ANONYMOUS | MAP_PRIVATE | MAP_FIXED, -1, 0);
assert(ptr == LAST_PAGE);
err = socketpair(AF_LOCAL, SOCK_STREAM, 0, fds);
assert(err == 0);
err = send(fds[0], ptr, PAGE_SIZE, 0);
perror("send");
assert(err == PAGE_SIZE);
err = recv(fds[1], ptr, PAGE_SIZE, MSG_WAITALL);
perror("recv");
assert(err == PAGE_SIZE);
return 0;
}
The other place checking the addr limit is the access_ok() function,
which is working properly. There's just a misleading comment
for the __range_not_ok() macro - which this patch fixes as well.
The last page of the user-space address range is a guard page and
Brian Gerst observed that the guard page itself due to an erratum on K8 cpus
(#121 Sequential Execution Across Non-Canonical Boundary Causes Processor
Hang).
However, the test code is using the last valid page before the guard page.
The bug is that the last byte before the guard page can't be read
because of the off-by-one error. The guard page is left in place.
This bug would normally not show up because the last page is
part of the process stack and never accessed via syscalls.
Signed-off-by: Jiri Olsa <jolsa@redhat.com>
Acked-by: Brian Gerst <brgerst@gmail.com>
Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
Cc: <stable@kernel.org>
Link: http://lkml.kernel.org/r/1305210630-7136-1-git-send-email-jolsa@redhat.com
Signed-off-by: Ingo Molnar <mingo@elte.hu>
2011-05-12 16:30:30 +02:00
|
|
|
* (u33)addr + (u33)size > (u33)current->addr_limit.seg (u65 for x86_64)
|
2008-06-13 19:39:25 +02:00
|
|
|
*
|
|
|
|
* This needs 33-bit (65-bit for x86_64) arithmetic. We have a carry...
|
|
|
|
*/
|
|
|
|
|
|
|
|
#define __range_not_ok(addr, size) \
|
|
|
|
({ \
|
|
|
|
unsigned long flag, roksum; \
|
|
|
|
__chk_user_ptr(addr); \
|
|
|
|
asm("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0" \
|
|
|
|
: "=&r" (flag), "=r" (roksum) \
|
|
|
|
: "1" (addr), "g" ((long)(size)), \
|
|
|
|
"rm" (current_thread_info()->addr_limit.seg)); \
|
|
|
|
flag; \
|
|
|
|
})
|
|
|
|
|
|
|
|
/**
|
|
|
|
* access_ok: - Checks if a user space pointer is valid
|
|
|
|
* @type: Type of access: %VERIFY_READ or %VERIFY_WRITE. Note that
|
|
|
|
* %VERIFY_WRITE is a superset of %VERIFY_READ - if it is safe
|
|
|
|
* to write to a block, it is always safe to read from it.
|
|
|
|
* @addr: User space pointer to start of block to check
|
|
|
|
* @size: Size of block to check
|
|
|
|
*
|
|
|
|
* Context: User context only. This function may sleep.
|
|
|
|
*
|
|
|
|
* Checks if a pointer to a block of memory in user space is valid.
|
|
|
|
*
|
|
|
|
* Returns true (nonzero) if the memory block may be valid, false (zero)
|
|
|
|
* if it is definitely invalid.
|
|
|
|
*
|
|
|
|
* Note that, depending on architecture, this function probably just
|
|
|
|
* checks that the pointer is in the user space range - after calling
|
|
|
|
* this function, memory access functions may still return -EFAULT.
|
|
|
|
*/
|
|
|
|
#define access_ok(type, addr, size) (likely(__range_not_ok(addr, size) == 0))
|
|
|
|
|
|
|
|
/*
|
|
|
|
* The exception table consists of pairs of addresses: the first is the
|
|
|
|
* address of an instruction that is allowed to fault, and the second is
|
|
|
|
* the address at which the program should continue. No registers are
|
|
|
|
* modified, so it is entirely up to the continuation code to figure out
|
|
|
|
* what to do.
|
|
|
|
*
|
|
|
|
* All the routines below use bits of fixup code that are out of line
|
|
|
|
* with the main instruction path. This means when everything is well,
|
|
|
|
* we don't even have to jump over them. Further, they do not intrude
|
|
|
|
* on our cache or tlb entries.
|
|
|
|
*/
|
|
|
|
|
|
|
|
struct exception_table_entry {
|
|
|
|
unsigned long insn, fixup;
|
|
|
|
};
|
|
|
|
|
|
|
|
extern int fixup_exception(struct pt_regs *regs);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* These are the main single-value transfer routines. They automatically
|
|
|
|
* use the right size if we just have the right pointer type.
|
|
|
|
*
|
|
|
|
* This gets kind of ugly. We want to return _two_ values in "get_user()"
|
|
|
|
* and yet we don't want to do any pointers, because that is too much
|
|
|
|
* of a performance impact. Thus we have a few rather ugly macros here,
|
|
|
|
* and hide all the ugliness from the user.
|
|
|
|
*
|
|
|
|
* The "__xxx" versions of the user access functions are versions that
|
|
|
|
* do not verify the address space, that must have been done previously
|
|
|
|
* with a separate "access_ok()" call (this is used when we do multiple
|
|
|
|
* accesses to the same area of user memory).
|
|
|
|
*/
|
|
|
|
|
|
|
|
extern int __get_user_1(void);
|
|
|
|
extern int __get_user_2(void);
|
|
|
|
extern int __get_user_4(void);
|
|
|
|
extern int __get_user_8(void);
|
|
|
|
extern int __get_user_bad(void);
|
|
|
|
|
|
|
|
#define __get_user_x(size, ret, x, ptr) \
|
|
|
|
asm volatile("call __get_user_" #size \
|
2009-01-20 01:34:26 +01:00
|
|
|
: "=a" (ret), "=d" (x) \
|
2008-06-13 19:39:25 +02:00
|
|
|
: "0" (ptr)) \
|
|
|
|
|
2008-06-25 16:05:11 +02:00
|
|
|
/* Careful: we have to cast the result to the type of the pointer
|
|
|
|
* for sign reasons */
|
|
|
|
|
|
|
|
/**
|
|
|
|
* get_user: - Get a simple variable from user space.
|
|
|
|
* @x: Variable to store result.
|
|
|
|
* @ptr: Source address, in user space.
|
|
|
|
*
|
|
|
|
* Context: User context only. This function may sleep.
|
|
|
|
*
|
|
|
|
* This macro copies a single simple variable from user space to kernel
|
|
|
|
* space. It supports simple types like char and int, but not larger
|
|
|
|
* data types like structures or arrays.
|
|
|
|
*
|
|
|
|
* @ptr must have pointer-to-simple-variable type, and the result of
|
|
|
|
* dereferencing @ptr must be assignable to @x without a cast.
|
|
|
|
*
|
|
|
|
* Returns zero on success, or -EFAULT on error.
|
|
|
|
* On error, the variable @x is set to zero.
|
|
|
|
*/
|
|
|
|
#ifdef CONFIG_X86_32
|
|
|
|
#define __get_user_8(__ret_gu, __val_gu, ptr) \
|
|
|
|
__get_user_x(X, __ret_gu, __val_gu, ptr)
|
|
|
|
#else
|
|
|
|
#define __get_user_8(__ret_gu, __val_gu, ptr) \
|
|
|
|
__get_user_x(8, __ret_gu, __val_gu, ptr)
|
|
|
|
#endif
|
|
|
|
|
|
|
|
#define get_user(x, ptr) \
|
|
|
|
({ \
|
|
|
|
int __ret_gu; \
|
|
|
|
unsigned long __val_gu; \
|
|
|
|
__chk_user_ptr(ptr); \
|
2008-09-10 13:37:17 +02:00
|
|
|
might_fault(); \
|
2008-06-25 16:05:11 +02:00
|
|
|
switch (sizeof(*(ptr))) { \
|
|
|
|
case 1: \
|
|
|
|
__get_user_x(1, __ret_gu, __val_gu, ptr); \
|
|
|
|
break; \
|
|
|
|
case 2: \
|
|
|
|
__get_user_x(2, __ret_gu, __val_gu, ptr); \
|
|
|
|
break; \
|
|
|
|
case 4: \
|
|
|
|
__get_user_x(4, __ret_gu, __val_gu, ptr); \
|
|
|
|
break; \
|
|
|
|
case 8: \
|
|
|
|
__get_user_8(__ret_gu, __val_gu, ptr); \
|
|
|
|
break; \
|
|
|
|
default: \
|
|
|
|
__get_user_x(X, __ret_gu, __val_gu, ptr); \
|
|
|
|
break; \
|
|
|
|
} \
|
|
|
|
(x) = (__typeof__(*(ptr)))__val_gu; \
|
|
|
|
__ret_gu; \
|
|
|
|
})
|
|
|
|
|
2008-06-25 18:17:43 +02:00
|
|
|
#define __put_user_x(size, x, ptr, __ret_pu) \
|
|
|
|
asm volatile("call __put_user_" #size : "=a" (__ret_pu) \
|
2009-01-20 01:34:26 +01:00
|
|
|
: "0" ((typeof(*(ptr)))(x)), "c" (ptr) : "ebx")
|
2008-06-25 18:17:43 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
2008-06-25 16:48:29 +02:00
|
|
|
#ifdef CONFIG_X86_32
|
2009-01-31 03:16:46 +01:00
|
|
|
#define __put_user_asm_u64(x, addr, err, errret) \
|
2008-06-25 16:48:29 +02:00
|
|
|
asm volatile("1: movl %%eax,0(%2)\n" \
|
|
|
|
"2: movl %%edx,4(%2)\n" \
|
|
|
|
"3:\n" \
|
|
|
|
".section .fixup,\"ax\"\n" \
|
|
|
|
"4: movl %3,%0\n" \
|
|
|
|
" jmp 3b\n" \
|
|
|
|
".previous\n" \
|
|
|
|
_ASM_EXTABLE(1b, 4b) \
|
|
|
|
_ASM_EXTABLE(2b, 4b) \
|
|
|
|
: "=r" (err) \
|
2009-01-31 03:16:46 +01:00
|
|
|
: "A" (x), "r" (addr), "i" (errret), "0" (err))
|
2008-06-25 18:17:43 +02:00
|
|
|
|
2009-01-24 00:49:41 +01:00
|
|
|
#define __put_user_asm_ex_u64(x, addr) \
|
|
|
|
asm volatile("1: movl %%eax,0(%1)\n" \
|
|
|
|
"2: movl %%edx,4(%1)\n" \
|
|
|
|
"3:\n" \
|
|
|
|
_ASM_EXTABLE(1b, 2b - 1b) \
|
|
|
|
_ASM_EXTABLE(2b, 3b - 2b) \
|
|
|
|
: : "A" (x), "r" (addr))
|
|
|
|
|
2008-06-25 18:17:43 +02:00
|
|
|
#define __put_user_x8(x, ptr, __ret_pu) \
|
|
|
|
asm volatile("call __put_user_8" : "=a" (__ret_pu) \
|
|
|
|
: "A" ((typeof(*(ptr)))(x)), "c" (ptr) : "ebx")
|
2008-06-25 16:48:29 +02:00
|
|
|
#else
|
2009-01-31 03:16:46 +01:00
|
|
|
#define __put_user_asm_u64(x, ptr, retval, errret) \
|
2009-07-21 08:27:39 +02:00
|
|
|
__put_user_asm(x, ptr, retval, "q", "", "er", errret)
|
2009-01-24 00:49:41 +01:00
|
|
|
#define __put_user_asm_ex_u64(x, addr) \
|
2009-07-21 08:27:39 +02:00
|
|
|
__put_user_asm_ex(x, addr, "q", "", "er")
|
2008-06-25 18:17:43 +02:00
|
|
|
#define __put_user_x8(x, ptr, __ret_pu) __put_user_x(8, x, ptr, __ret_pu)
|
2008-06-25 16:48:29 +02:00
|
|
|
#endif
|
|
|
|
|
2008-06-25 18:17:43 +02:00
|
|
|
extern void __put_user_bad(void);
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Strange magic calling convention: pointer in %ecx,
|
|
|
|
* value in %eax(:%edx), return value in %eax. clobbers %rbx
|
|
|
|
*/
|
|
|
|
extern void __put_user_1(void);
|
|
|
|
extern void __put_user_2(void);
|
|
|
|
extern void __put_user_4(void);
|
|
|
|
extern void __put_user_8(void);
|
|
|
|
|
2008-06-25 16:48:29 +02:00
|
|
|
#ifdef CONFIG_X86_WP_WORKS_OK
|
|
|
|
|
2008-06-25 18:17:43 +02:00
|
|
|
/**
|
|
|
|
* put_user: - Write a simple value into user space.
|
|
|
|
* @x: Value to copy to user space.
|
|
|
|
* @ptr: Destination address, in user space.
|
|
|
|
*
|
|
|
|
* Context: User context only. This function may sleep.
|
|
|
|
*
|
|
|
|
* This macro copies a single simple value from kernel space to user
|
|
|
|
* space. It supports simple types like char and int, but not larger
|
|
|
|
* data types like structures or arrays.
|
|
|
|
*
|
|
|
|
* @ptr must have pointer-to-simple-variable type, and @x must be assignable
|
|
|
|
* to the result of dereferencing @ptr.
|
|
|
|
*
|
|
|
|
* Returns zero on success, or -EFAULT on error.
|
|
|
|
*/
|
|
|
|
#define put_user(x, ptr) \
|
|
|
|
({ \
|
|
|
|
int __ret_pu; \
|
|
|
|
__typeof__(*(ptr)) __pu_val; \
|
|
|
|
__chk_user_ptr(ptr); \
|
2008-09-10 13:37:17 +02:00
|
|
|
might_fault(); \
|
2008-06-25 18:17:43 +02:00
|
|
|
__pu_val = x; \
|
|
|
|
switch (sizeof(*(ptr))) { \
|
|
|
|
case 1: \
|
|
|
|
__put_user_x(1, __pu_val, ptr, __ret_pu); \
|
|
|
|
break; \
|
|
|
|
case 2: \
|
|
|
|
__put_user_x(2, __pu_val, ptr, __ret_pu); \
|
|
|
|
break; \
|
|
|
|
case 4: \
|
|
|
|
__put_user_x(4, __pu_val, ptr, __ret_pu); \
|
|
|
|
break; \
|
|
|
|
case 8: \
|
|
|
|
__put_user_x8(__pu_val, ptr, __ret_pu); \
|
|
|
|
break; \
|
|
|
|
default: \
|
|
|
|
__put_user_x(X, __pu_val, ptr, __ret_pu); \
|
|
|
|
break; \
|
|
|
|
} \
|
|
|
|
__ret_pu; \
|
|
|
|
})
|
|
|
|
|
2008-06-25 16:48:29 +02:00
|
|
|
#define __put_user_size(x, ptr, size, retval, errret) \
|
|
|
|
do { \
|
|
|
|
retval = 0; \
|
|
|
|
__chk_user_ptr(ptr); \
|
|
|
|
switch (size) { \
|
|
|
|
case 1: \
|
|
|
|
__put_user_asm(x, ptr, retval, "b", "b", "iq", errret); \
|
|
|
|
break; \
|
|
|
|
case 2: \
|
|
|
|
__put_user_asm(x, ptr, retval, "w", "w", "ir", errret); \
|
|
|
|
break; \
|
|
|
|
case 4: \
|
2009-01-20 01:34:26 +01:00
|
|
|
__put_user_asm(x, ptr, retval, "l", "k", "ir", errret); \
|
2008-06-25 16:48:29 +02:00
|
|
|
break; \
|
|
|
|
case 8: \
|
2009-01-31 03:16:46 +01:00
|
|
|
__put_user_asm_u64((__typeof__(*ptr))(x), ptr, retval, \
|
|
|
|
errret); \
|
2008-06-25 16:48:29 +02:00
|
|
|
break; \
|
|
|
|
default: \
|
|
|
|
__put_user_bad(); \
|
|
|
|
} \
|
|
|
|
} while (0)
|
|
|
|
|
2009-01-24 00:49:41 +01:00
|
|
|
#define __put_user_size_ex(x, ptr, size) \
|
|
|
|
do { \
|
|
|
|
__chk_user_ptr(ptr); \
|
|
|
|
switch (size) { \
|
|
|
|
case 1: \
|
|
|
|
__put_user_asm_ex(x, ptr, "b", "b", "iq"); \
|
|
|
|
break; \
|
|
|
|
case 2: \
|
|
|
|
__put_user_asm_ex(x, ptr, "w", "w", "ir"); \
|
|
|
|
break; \
|
|
|
|
case 4: \
|
|
|
|
__put_user_asm_ex(x, ptr, "l", "k", "ir"); \
|
|
|
|
break; \
|
|
|
|
case 8: \
|
|
|
|
__put_user_asm_ex_u64((__typeof__(*ptr))(x), ptr); \
|
|
|
|
break; \
|
|
|
|
default: \
|
|
|
|
__put_user_bad(); \
|
|
|
|
} \
|
|
|
|
} while (0)
|
|
|
|
|
2008-06-25 16:48:29 +02:00
|
|
|
#else
|
|
|
|
|
|
|
|
#define __put_user_size(x, ptr, size, retval, errret) \
|
|
|
|
do { \
|
|
|
|
__typeof__(*(ptr))__pus_tmp = x; \
|
|
|
|
retval = 0; \
|
|
|
|
\
|
|
|
|
if (unlikely(__copy_to_user_ll(ptr, &__pus_tmp, size) != 0)) \
|
|
|
|
retval = errret; \
|
|
|
|
} while (0)
|
|
|
|
|
2008-06-25 18:17:43 +02:00
|
|
|
#define put_user(x, ptr) \
|
|
|
|
({ \
|
|
|
|
int __ret_pu; \
|
|
|
|
__typeof__(*(ptr))__pus_tmp = x; \
|
|
|
|
__ret_pu = 0; \
|
|
|
|
if (unlikely(__copy_to_user_ll(ptr, &__pus_tmp, \
|
|
|
|
sizeof(*(ptr))) != 0)) \
|
|
|
|
__ret_pu = -EFAULT; \
|
|
|
|
__ret_pu; \
|
|
|
|
})
|
2008-06-25 16:48:29 +02:00
|
|
|
#endif
|
|
|
|
|
2008-06-25 17:48:47 +02:00
|
|
|
#ifdef CONFIG_X86_32
|
|
|
|
#define __get_user_asm_u64(x, ptr, retval, errret) (x) = __get_user_bad()
|
2009-01-24 00:49:41 +01:00
|
|
|
#define __get_user_asm_ex_u64(x, ptr) (x) = __get_user_bad()
|
2008-06-25 17:48:47 +02:00
|
|
|
#else
|
|
|
|
#define __get_user_asm_u64(x, ptr, retval, errret) \
|
|
|
|
__get_user_asm(x, ptr, retval, "q", "", "=r", errret)
|
2009-01-24 00:49:41 +01:00
|
|
|
#define __get_user_asm_ex_u64(x, ptr) \
|
|
|
|
__get_user_asm_ex(x, ptr, "q", "", "=r")
|
2008-06-25 17:48:47 +02:00
|
|
|
#endif
|
|
|
|
|
|
|
|
#define __get_user_size(x, ptr, size, retval, errret) \
|
|
|
|
do { \
|
|
|
|
retval = 0; \
|
|
|
|
__chk_user_ptr(ptr); \
|
|
|
|
switch (size) { \
|
|
|
|
case 1: \
|
|
|
|
__get_user_asm(x, ptr, retval, "b", "b", "=q", errret); \
|
|
|
|
break; \
|
|
|
|
case 2: \
|
|
|
|
__get_user_asm(x, ptr, retval, "w", "w", "=r", errret); \
|
|
|
|
break; \
|
|
|
|
case 4: \
|
|
|
|
__get_user_asm(x, ptr, retval, "l", "k", "=r", errret); \
|
|
|
|
break; \
|
|
|
|
case 8: \
|
|
|
|
__get_user_asm_u64(x, ptr, retval, errret); \
|
|
|
|
break; \
|
|
|
|
default: \
|
|
|
|
(x) = __get_user_bad(); \
|
|
|
|
} \
|
|
|
|
} while (0)
|
|
|
|
|
|
|
|
#define __get_user_asm(x, addr, err, itype, rtype, ltype, errret) \
|
|
|
|
asm volatile("1: mov"itype" %2,%"rtype"1\n" \
|
|
|
|
"2:\n" \
|
|
|
|
".section .fixup,\"ax\"\n" \
|
|
|
|
"3: mov %3,%0\n" \
|
|
|
|
" xor"itype" %"rtype"1,%"rtype"1\n" \
|
|
|
|
" jmp 2b\n" \
|
|
|
|
".previous\n" \
|
|
|
|
_ASM_EXTABLE(1b, 3b) \
|
|
|
|
: "=r" (err), ltype(x) \
|
|
|
|
: "m" (__m(addr)), "i" (errret), "0" (err))
|
|
|
|
|
2009-01-24 00:49:41 +01:00
|
|
|
#define __get_user_size_ex(x, ptr, size) \
|
|
|
|
do { \
|
|
|
|
__chk_user_ptr(ptr); \
|
|
|
|
switch (size) { \
|
|
|
|
case 1: \
|
|
|
|
__get_user_asm_ex(x, ptr, "b", "b", "=q"); \
|
|
|
|
break; \
|
|
|
|
case 2: \
|
|
|
|
__get_user_asm_ex(x, ptr, "w", "w", "=r"); \
|
|
|
|
break; \
|
|
|
|
case 4: \
|
|
|
|
__get_user_asm_ex(x, ptr, "l", "k", "=r"); \
|
|
|
|
break; \
|
|
|
|
case 8: \
|
|
|
|
__get_user_asm_ex_u64(x, ptr); \
|
|
|
|
break; \
|
|
|
|
default: \
|
|
|
|
(x) = __get_user_bad(); \
|
|
|
|
} \
|
|
|
|
} while (0)
|
|
|
|
|
|
|
|
#define __get_user_asm_ex(x, addr, itype, rtype, ltype) \
|
|
|
|
asm volatile("1: mov"itype" %1,%"rtype"0\n" \
|
|
|
|
"2:\n" \
|
|
|
|
_ASM_EXTABLE(1b, 2b - 1b) \
|
|
|
|
: ltype(x) : "m" (__m(addr)))
|
|
|
|
|
2008-06-25 16:48:29 +02:00
|
|
|
#define __put_user_nocheck(x, ptr, size) \
|
|
|
|
({ \
|
2008-12-09 04:18:38 +01:00
|
|
|
int __pu_err; \
|
2008-06-25 16:48:29 +02:00
|
|
|
__put_user_size((x), (ptr), (size), __pu_err, -EFAULT); \
|
|
|
|
__pu_err; \
|
|
|
|
})
|
|
|
|
|
2008-06-25 17:48:47 +02:00
|
|
|
#define __get_user_nocheck(x, ptr, size) \
|
|
|
|
({ \
|
2008-12-09 04:18:38 +01:00
|
|
|
int __gu_err; \
|
2008-06-25 17:48:47 +02:00
|
|
|
unsigned long __gu_val; \
|
|
|
|
__get_user_size(__gu_val, (ptr), (size), __gu_err, -EFAULT); \
|
|
|
|
(x) = (__force __typeof__(*(ptr)))__gu_val; \
|
|
|
|
__gu_err; \
|
|
|
|
})
|
2008-06-25 16:48:29 +02:00
|
|
|
|
|
|
|
/* FIXME: this hack is definitely wrong -AK */
|
|
|
|
struct __large_struct { unsigned long buf[100]; };
|
|
|
|
#define __m(x) (*(struct __large_struct __user *)(x))
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Tell gcc we read from memory instead of writing: this is because
|
|
|
|
* we do not write to any memory gcc knows about, so there are no
|
|
|
|
* aliasing issues.
|
|
|
|
*/
|
|
|
|
#define __put_user_asm(x, addr, err, itype, rtype, ltype, errret) \
|
|
|
|
asm volatile("1: mov"itype" %"rtype"1,%2\n" \
|
|
|
|
"2:\n" \
|
|
|
|
".section .fixup,\"ax\"\n" \
|
|
|
|
"3: mov %3,%0\n" \
|
|
|
|
" jmp 2b\n" \
|
|
|
|
".previous\n" \
|
|
|
|
_ASM_EXTABLE(1b, 3b) \
|
|
|
|
: "=r"(err) \
|
|
|
|
: ltype(x), "m" (__m(addr)), "i" (errret), "0" (err))
|
2009-01-24 00:49:41 +01:00
|
|
|
|
|
|
|
#define __put_user_asm_ex(x, addr, itype, rtype, ltype) \
|
|
|
|
asm volatile("1: mov"itype" %"rtype"0,%1\n" \
|
|
|
|
"2:\n" \
|
|
|
|
_ASM_EXTABLE(1b, 2b - 1b) \
|
|
|
|
: : ltype(x), "m" (__m(addr)))
|
|
|
|
|
|
|
|
/*
|
|
|
|
* uaccess_try and catch
|
|
|
|
*/
|
|
|
|
#define uaccess_try do { \
|
|
|
|
int prev_err = current_thread_info()->uaccess_err; \
|
|
|
|
current_thread_info()->uaccess_err = 0; \
|
|
|
|
barrier();
|
|
|
|
|
|
|
|
#define uaccess_catch(err) \
|
2011-11-08 01:33:40 +01:00
|
|
|
(err) |= (current_thread_info()->uaccess_err ? -EFAULT : 0); \
|
2009-01-24 00:49:41 +01:00
|
|
|
current_thread_info()->uaccess_err = prev_err; \
|
|
|
|
} while (0)
|
|
|
|
|
2008-06-25 19:43:30 +02:00
|
|
|
/**
|
|
|
|
* __get_user: - Get a simple variable from user space, with less checking.
|
|
|
|
* @x: Variable to store result.
|
|
|
|
* @ptr: Source address, in user space.
|
|
|
|
*
|
|
|
|
* Context: User context only. This function may sleep.
|
|
|
|
*
|
|
|
|
* This macro copies a single simple variable from user space to kernel
|
|
|
|
* space. It supports simple types like char and int, but not larger
|
|
|
|
* data types like structures or arrays.
|
|
|
|
*
|
|
|
|
* @ptr must have pointer-to-simple-variable type, and the result of
|
|
|
|
* dereferencing @ptr must be assignable to @x without a cast.
|
|
|
|
*
|
|
|
|
* Caller must check the pointer with access_ok() before calling this
|
|
|
|
* function.
|
|
|
|
*
|
|
|
|
* Returns zero on success, or -EFAULT on error.
|
|
|
|
* On error, the variable @x is set to zero.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#define __get_user(x, ptr) \
|
|
|
|
__get_user_nocheck((x), (ptr), sizeof(*(ptr)))
|
2009-01-24 00:49:41 +01:00
|
|
|
|
2008-06-25 19:43:30 +02:00
|
|
|
/**
|
|
|
|
* __put_user: - Write a simple value into user space, with less checking.
|
|
|
|
* @x: Value to copy to user space.
|
|
|
|
* @ptr: Destination address, in user space.
|
|
|
|
*
|
|
|
|
* Context: User context only. This function may sleep.
|
|
|
|
*
|
|
|
|
* This macro copies a single simple value from kernel space to user
|
|
|
|
* space. It supports simple types like char and int, but not larger
|
|
|
|
* data types like structures or arrays.
|
|
|
|
*
|
|
|
|
* @ptr must have pointer-to-simple-variable type, and @x must be assignable
|
|
|
|
* to the result of dereferencing @ptr.
|
|
|
|
*
|
|
|
|
* Caller must check the pointer with access_ok() before calling this
|
|
|
|
* function.
|
|
|
|
*
|
|
|
|
* Returns zero on success, or -EFAULT on error.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#define __put_user(x, ptr) \
|
|
|
|
__put_user_nocheck((__typeof__(*(ptr)))(x), (ptr), sizeof(*(ptr)))
|
2008-06-25 16:48:29 +02:00
|
|
|
|
2008-06-25 19:43:30 +02:00
|
|
|
#define __get_user_unaligned __get_user
|
|
|
|
#define __put_user_unaligned __put_user
|
2008-06-25 16:05:11 +02:00
|
|
|
|
2009-01-24 00:49:41 +01:00
|
|
|
/*
|
|
|
|
* {get|put}_user_try and catch
|
|
|
|
*
|
|
|
|
* get_user_try {
|
|
|
|
* get_user_ex(...);
|
|
|
|
* } get_user_catch(err)
|
|
|
|
*/
|
|
|
|
#define get_user_try uaccess_try
|
|
|
|
#define get_user_catch(err) uaccess_catch(err)
|
|
|
|
|
|
|
|
#define get_user_ex(x, ptr) do { \
|
|
|
|
unsigned long __gue_val; \
|
|
|
|
__get_user_size_ex((__gue_val), (ptr), (sizeof(*(ptr)))); \
|
|
|
|
(x) = (__force __typeof__(*(ptr)))__gue_val; \
|
|
|
|
} while (0)
|
|
|
|
|
2009-01-29 20:49:18 +01:00
|
|
|
#ifdef CONFIG_X86_WP_WORKS_OK
|
|
|
|
|
|
|
|
#define put_user_try uaccess_try
|
|
|
|
#define put_user_catch(err) uaccess_catch(err)
|
|
|
|
|
2009-01-24 00:49:41 +01:00
|
|
|
#define put_user_ex(x, ptr) \
|
|
|
|
__put_user_size_ex((__typeof__(*(ptr)))(x), (ptr), sizeof(*(ptr)))
|
|
|
|
|
2009-01-29 20:49:18 +01:00
|
|
|
#else /* !CONFIG_X86_WP_WORKS_OK */
|
|
|
|
|
|
|
|
#define put_user_try do { \
|
|
|
|
int __uaccess_err = 0;
|
|
|
|
|
|
|
|
#define put_user_catch(err) \
|
|
|
|
(err) |= __uaccess_err; \
|
|
|
|
} while (0)
|
|
|
|
|
|
|
|
#define put_user_ex(x, ptr) do { \
|
|
|
|
__uaccess_err |= __put_user(x, ptr); \
|
|
|
|
} while (0)
|
|
|
|
|
|
|
|
#endif /* CONFIG_X86_WP_WORKS_OK */
|
|
|
|
|
2011-06-07 11:49:55 +02:00
|
|
|
extern unsigned long
|
|
|
|
copy_from_user_nmi(void *to, const void __user *from, unsigned long n);
|
|
|
|
|
2008-06-25 19:53:41 +02:00
|
|
|
/*
|
|
|
|
* movsl can be slow when source and dest are not both 8-byte aligned
|
|
|
|
*/
|
|
|
|
#ifdef CONFIG_X86_INTEL_USERCOPY
|
|
|
|
extern struct movsl_mask {
|
|
|
|
int mask;
|
|
|
|
} ____cacheline_aligned_in_smp movsl_mask;
|
|
|
|
#endif
|
|
|
|
|
2008-06-25 19:56:53 +02:00
|
|
|
#define ARCH_HAS_NOCACHE_UACCESS 1
|
|
|
|
|
2007-10-11 11:20:03 +02:00
|
|
|
#ifdef CONFIG_X86_32
|
|
|
|
# include "uaccess_32.h"
|
|
|
|
#else
|
|
|
|
# include "uaccess_64.h"
|
|
|
|
#endif
|
2008-06-13 19:39:25 +02:00
|
|
|
|
2008-10-23 07:26:29 +02:00
|
|
|
#endif /* _ASM_X86_UACCESS_H */
|
x86: lockless get_user_pages_fast()
Implement get_user_pages_fast without locking in the fastpath on x86.
Do an optimistic lockless pagetable walk, without taking mmap_sem or any
page table locks or even mmap_sem. Page table existence is guaranteed by
turning interrupts off (combined with the fact that we're always looking
up the current mm, means we can do the lockless page table walk within the
constraints of the TLB shootdown design). Basically we can do this
lockless pagetable walk in a similar manner to the way the CPU's pagetable
walker does not have to take any locks to find present ptes.
This patch (combined with the subsequent ones to convert direct IO to use
it) was found to give about 10% performance improvement on a 2 socket 8
core Intel Xeon system running an OLTP workload on DB2 v9.5
"To test the effects of the patch, an OLTP workload was run on an IBM
x3850 M2 server with 2 processors (quad-core Intel Xeon processors at
2.93 GHz) using IBM DB2 v9.5 running Linux 2.6.24rc7 kernel. Comparing
runs with and without the patch resulted in an overall performance
benefit of ~9.8%. Correspondingly, oprofiles showed that samples from
__up_read and __down_read routines that is seen during thread contention
for system resources was reduced from 2.8% down to .05%. Monitoring the
/proc/vmstat output from the patched run showed that the counter for
fast_gup contained a very high number while the fast_gup_slow value was
zero."
(fast_gup is the old name for get_user_pages_fast, fast_gup_slow is a
counter we had for the number of times the slowpath was invoked).
The main reason for the improvement is that DB2 has multiple threads each
issuing direct-IO. Direct-IO uses get_user_pages, and thus the threads
contend the mmap_sem cacheline, and can also contend on page table locks.
I would anticipate larger performance gains on larger systems, however I
think DB2 uses an adaptive mix of threads and processes, so it could be
that thread contention remains pretty constant as machine size increases.
In which case, we stuck with "only" a 10% gain.
The downside of using get_user_pages_fast is that if there is not a pte
with the correct permissions for the access, we end up falling back to
get_user_pages and so the get_user_pages_fast is a bit of extra work.
However this should not be the common case in most performance critical
code.
[akpm@linux-foundation.org: coding-style fixes]
[akpm@linux-foundation.org: build fix]
[akpm@linux-foundation.org: Kconfig fix]
[akpm@linux-foundation.org: Makefile fix/cleanup]
[akpm@linux-foundation.org: warning fix]
Signed-off-by: Nick Piggin <npiggin@suse.de>
Cc: Dave Kleikamp <shaggy@austin.ibm.com>
Cc: Andy Whitcroft <apw@shadowen.org>
Cc: Ingo Molnar <mingo@elte.hu>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Andi Kleen <andi@firstfloor.org>
Cc: Dave Kleikamp <shaggy@austin.ibm.com>
Cc: Badari Pulavarty <pbadari@us.ibm.com>
Cc: Zach Brown <zach.brown@oracle.com>
Cc: Jens Axboe <jens.axboe@oracle.com>
Reviewed-by: Peter Zijlstra <a.p.zijlstra@chello.nl>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-07-26 04:45:24 +02:00
|
|
|
|