mmu.c 3.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158
  1. /*
  2. * Copyright (C) 2002 Jeff Dike (jdike@karaya.com)
  3. * Licensed under the GPL
  4. */
  5. #include "linux/sched.h"
  6. #include "linux/list.h"
  7. #include "linux/spinlock.h"
  8. #include "linux/slab.h"
  9. #include "linux/errno.h"
  10. #include "linux/mm.h"
  11. #include "asm/current.h"
  12. #include "asm/segment.h"
  13. #include "asm/mmu.h"
  14. #include "asm/pgalloc.h"
  15. #include "asm/pgtable.h"
  16. #include "asm/ldt.h"
  17. #include "os.h"
  18. #include "skas.h"
  19. extern int __syscall_stub_start;
  20. static int init_stub_pte(struct mm_struct *mm, unsigned long proc,
  21. unsigned long kernel)
  22. {
  23. pgd_t *pgd;
  24. pud_t *pud;
  25. pmd_t *pmd;
  26. pte_t *pte;
  27. pgd = pgd_offset(mm, proc);
  28. pud = pud_alloc(mm, pgd, proc);
  29. if (!pud)
  30. goto out;
  31. pmd = pmd_alloc(mm, pud, proc);
  32. if (!pmd)
  33. goto out_pmd;
  34. pte = pte_alloc_map(mm, pmd, proc);
  35. if (!pte)
  36. goto out_pte;
  37. /* There's an interaction between the skas0 stub pages, stack
  38. * randomization, and the BUG at the end of exit_mmap. exit_mmap
  39. * checks that the number of page tables freed is the same as had
  40. * been allocated. If the stack is on the last page table page,
  41. * then the stack pte page will be freed, and if not, it won't. To
  42. * avoid having to know where the stack is, or if the process mapped
  43. * something at the top of its address space for some other reason,
  44. * we set TASK_SIZE to end at the start of the last page table.
  45. * This keeps exit_mmap off the last page, but introduces a leak
  46. * of that page. So, we hang onto it here and free it in
  47. * destroy_context_skas.
  48. */
  49. mm->context.skas.last_page_table = pmd_page_vaddr(*pmd);
  50. #ifdef CONFIG_3_LEVEL_PGTABLES
  51. mm->context.skas.last_pmd = (unsigned long) __va(pud_val(*pud));
  52. #endif
  53. *pte = mk_pte(virt_to_page(kernel), __pgprot(_PAGE_PRESENT));
  54. *pte = pte_mkread(*pte);
  55. return(0);
  56. out_pmd:
  57. pud_free(pud);
  58. out_pte:
  59. pmd_free(pmd);
  60. out:
  61. return(-ENOMEM);
  62. }
  63. int init_new_context_skas(struct task_struct *task, struct mm_struct *mm)
  64. {
  65. struct mmu_context_skas *from_mm = NULL;
  66. struct mmu_context_skas *to_mm = &mm->context.skas;
  67. unsigned long stack = 0;
  68. int ret = -ENOMEM;
  69. if(skas_needs_stub){
  70. stack = get_zeroed_page(GFP_KERNEL);
  71. if(stack == 0)
  72. goto out;
  73. /* This zeros the entry that pgd_alloc didn't, needed since
  74. * we are about to reinitialize it, and want mm.nr_ptes to
  75. * be accurate.
  76. */
  77. mm->pgd[USER_PTRS_PER_PGD] = __pgd(0);
  78. ret = init_stub_pte(mm, CONFIG_STUB_CODE,
  79. (unsigned long) &__syscall_stub_start);
  80. if(ret)
  81. goto out_free;
  82. ret = init_stub_pte(mm, CONFIG_STUB_DATA, stack);
  83. if(ret)
  84. goto out_free;
  85. mm->nr_ptes--;
  86. }
  87. to_mm->id.stack = stack;
  88. if(current->mm != NULL && current->mm != &init_mm)
  89. from_mm = &current->mm->context.skas;
  90. if(proc_mm){
  91. ret = new_mm(stack);
  92. if(ret < 0){
  93. printk("init_new_context_skas - new_mm failed, "
  94. "errno = %d\n", ret);
  95. goto out_free;
  96. }
  97. to_mm->id.u.mm_fd = ret;
  98. }
  99. else {
  100. if(from_mm)
  101. to_mm->id.u.pid = copy_context_skas0(stack,
  102. from_mm->id.u.pid);
  103. else to_mm->id.u.pid = start_userspace(stack);
  104. }
  105. ret = init_new_ldt(to_mm, from_mm);
  106. if(ret < 0){
  107. printk("init_new_context_skas - init_ldt"
  108. " failed, errno = %d\n", ret);
  109. goto out_free;
  110. }
  111. return 0;
  112. out_free:
  113. if(to_mm->id.stack != 0)
  114. free_page(to_mm->id.stack);
  115. out:
  116. return ret;
  117. }
  118. void destroy_context_skas(struct mm_struct *mm)
  119. {
  120. struct mmu_context_skas *mmu = &mm->context.skas;
  121. if(proc_mm)
  122. os_close_file(mmu->id.u.mm_fd);
  123. else
  124. os_kill_ptraced_process(mmu->id.u.pid, 1);
  125. if(!proc_mm || !ptrace_faultinfo){
  126. free_page(mmu->id.stack);
  127. pte_lock_deinit(virt_to_page(mmu->last_page_table));
  128. pte_free_kernel((pte_t *) mmu->last_page_table);
  129. dec_zone_page_state(virt_to_page(mmu->last_page_table), NR_PAGETABLE);
  130. #ifdef CONFIG_3_LEVEL_PGTABLES
  131. pmd_free((pmd_t *) mmu->last_pmd);
  132. #endif
  133. }
  134. }