entry_64.S 37 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552
  1. /*
  2. * linux/arch/x86_64/entry.S
  3. *
  4. * Copyright (C) 1991, 1992 Linus Torvalds
  5. * Copyright (C) 2000, 2001, 2002 Andi Kleen SuSE Labs
  6. * Copyright (C) 2000 Pavel Machek <pavel@suse.cz>
  7. */
  8. /*
  9. * entry.S contains the system-call and fault low-level handling routines.
  10. *
  11. * Some of this is documented in Documentation/x86/entry_64.txt
  12. *
  13. * NOTE: This code handles signal-recognition, which happens every time
  14. * after an interrupt and after each system call.
  15. *
  16. * Normal syscalls and interrupts don't save a full stack frame, this is
  17. * only done for syscall tracing, signals or fork/exec et.al.
  18. *
  19. * A note on terminology:
  20. * - top of stack: Architecture defined interrupt frame from SS to RIP
  21. * at the top of the kernel process stack.
  22. * - partial stack frame: partially saved registers up to R11.
  23. * - full stack frame: Like partial stack frame, but all register saved.
  24. *
  25. * Some macro usage:
  26. * - CFI macros are used to generate dwarf2 unwind information for better
  27. * backtraces. They don't change any code.
  28. * - SAVE_ALL/RESTORE_ALL - Save/restore all registers
  29. * - SAVE_ARGS/RESTORE_ARGS - Save/restore registers that C functions modify.
  30. * There are unfortunately lots of special cases where some registers
  31. * not touched. The macro is a big mess that should be cleaned up.
  32. * - SAVE_REST/RESTORE_REST - Handle the registers not saved by SAVE_ARGS.
  33. * Gives a full stack frame.
  34. * - ENTRY/END Define functions in the symbol table.
  35. * - FIXUP_TOP_OF_STACK/RESTORE_TOP_OF_STACK - Fix up the hardware stack
  36. * frame that is otherwise undefined after a SYSCALL
  37. * - TRACE_IRQ_* - Trace hard interrupt state for lock debugging.
  38. * - errorentry/paranoidentry/zeroentry - Define exception entry points.
  39. */
  40. #include <linux/linkage.h>
  41. #include <asm/segment.h>
  42. #include <asm/cache.h>
  43. #include <asm/errno.h>
  44. #include <asm/dwarf2.h>
  45. #include <asm/calling.h>
  46. #include <asm/asm-offsets.h>
  47. #include <asm/msr.h>
  48. #include <asm/unistd.h>
  49. #include <asm/thread_info.h>
  50. #include <asm/hw_irq.h>
  51. #include <asm/page_types.h>
  52. #include <asm/irqflags.h>
  53. #include <asm/paravirt.h>
  54. #include <asm/ftrace.h>
  55. #include <asm/percpu.h>
  56. /* Avoid __ASSEMBLER__'ifying <linux/audit.h> just for this. */
  57. #include <linux/elf-em.h>
  58. #define AUDIT_ARCH_X86_64 (EM_X86_64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
  59. #define __AUDIT_ARCH_64BIT 0x80000000
  60. #define __AUDIT_ARCH_LE 0x40000000
  61. .code64
  62. .section .entry.text, "ax"
  63. #ifdef CONFIG_FUNCTION_TRACER
  64. #ifdef CONFIG_DYNAMIC_FTRACE
  65. ENTRY(mcount)
  66. retq
  67. END(mcount)
  68. ENTRY(ftrace_caller)
  69. cmpl $0, function_trace_stop
  70. jne ftrace_stub
  71. MCOUNT_SAVE_FRAME
  72. movq 0x38(%rsp), %rdi
  73. movq 8(%rbp), %rsi
  74. subq $MCOUNT_INSN_SIZE, %rdi
  75. GLOBAL(ftrace_call)
  76. call ftrace_stub
  77. MCOUNT_RESTORE_FRAME
  78. #ifdef CONFIG_FUNCTION_GRAPH_TRACER
  79. GLOBAL(ftrace_graph_call)
  80. jmp ftrace_stub
  81. #endif
  82. GLOBAL(ftrace_stub)
  83. retq
  84. END(ftrace_caller)
  85. #else /* ! CONFIG_DYNAMIC_FTRACE */
  86. ENTRY(mcount)
  87. cmpl $0, function_trace_stop
  88. jne ftrace_stub
  89. cmpq $ftrace_stub, ftrace_trace_function
  90. jnz trace
  91. #ifdef CONFIG_FUNCTION_GRAPH_TRACER
  92. cmpq $ftrace_stub, ftrace_graph_return
  93. jnz ftrace_graph_caller
  94. cmpq $ftrace_graph_entry_stub, ftrace_graph_entry
  95. jnz ftrace_graph_caller
  96. #endif
  97. GLOBAL(ftrace_stub)
  98. retq
  99. trace:
  100. MCOUNT_SAVE_FRAME
  101. movq 0x38(%rsp), %rdi
  102. movq 8(%rbp), %rsi
  103. subq $MCOUNT_INSN_SIZE, %rdi
  104. call *ftrace_trace_function
  105. MCOUNT_RESTORE_FRAME
  106. jmp ftrace_stub
  107. END(mcount)
  108. #endif /* CONFIG_DYNAMIC_FTRACE */
  109. #endif /* CONFIG_FUNCTION_TRACER */
  110. #ifdef CONFIG_FUNCTION_GRAPH_TRACER
  111. ENTRY(ftrace_graph_caller)
  112. cmpl $0, function_trace_stop
  113. jne ftrace_stub
  114. MCOUNT_SAVE_FRAME
  115. leaq 8(%rbp), %rdi
  116. movq 0x38(%rsp), %rsi
  117. movq (%rbp), %rdx
  118. subq $MCOUNT_INSN_SIZE, %rsi
  119. call prepare_ftrace_return
  120. MCOUNT_RESTORE_FRAME
  121. retq
  122. END(ftrace_graph_caller)
  123. GLOBAL(return_to_handler)
  124. subq $24, %rsp
  125. /* Save the return values */
  126. movq %rax, (%rsp)
  127. movq %rdx, 8(%rsp)
  128. movq %rbp, %rdi
  129. call ftrace_return_to_handler
  130. movq %rax, %rdi
  131. movq 8(%rsp), %rdx
  132. movq (%rsp), %rax
  133. addq $24, %rsp
  134. jmp *%rdi
  135. #endif
  136. #ifndef CONFIG_PREEMPT
  137. #define retint_kernel retint_restore_args
  138. #endif
  139. #ifdef CONFIG_PARAVIRT
  140. ENTRY(native_usergs_sysret64)
  141. swapgs
  142. sysretq
  143. ENDPROC(native_usergs_sysret64)
  144. #endif /* CONFIG_PARAVIRT */
  145. .macro TRACE_IRQS_IRETQ offset=ARGOFFSET
  146. #ifdef CONFIG_TRACE_IRQFLAGS
  147. bt $9,EFLAGS-\offset(%rsp) /* interrupts off? */
  148. jnc 1f
  149. TRACE_IRQS_ON
  150. 1:
  151. #endif
  152. .endm
  153. /*
  154. * C code is not supposed to know about undefined top of stack. Every time
  155. * a C function with an pt_regs argument is called from the SYSCALL based
  156. * fast path FIXUP_TOP_OF_STACK is needed.
  157. * RESTORE_TOP_OF_STACK syncs the syscall state after any possible ptregs
  158. * manipulation.
  159. */
  160. /* %rsp:at FRAMEEND */
  161. .macro FIXUP_TOP_OF_STACK tmp offset=0
  162. movq PER_CPU_VAR(old_rsp),\tmp
  163. movq \tmp,RSP+\offset(%rsp)
  164. movq $__USER_DS,SS+\offset(%rsp)
  165. movq $__USER_CS,CS+\offset(%rsp)
  166. movq $-1,RCX+\offset(%rsp)
  167. movq R11+\offset(%rsp),\tmp /* get eflags */
  168. movq \tmp,EFLAGS+\offset(%rsp)
  169. .endm
  170. .macro RESTORE_TOP_OF_STACK tmp offset=0
  171. movq RSP+\offset(%rsp),\tmp
  172. movq \tmp,PER_CPU_VAR(old_rsp)
  173. movq EFLAGS+\offset(%rsp),\tmp
  174. movq \tmp,R11+\offset(%rsp)
  175. .endm
  176. .macro FAKE_STACK_FRAME child_rip
  177. /* push in order ss, rsp, eflags, cs, rip */
  178. xorl %eax, %eax
  179. pushq_cfi $__KERNEL_DS /* ss */
  180. /*CFI_REL_OFFSET ss,0*/
  181. pushq_cfi %rax /* rsp */
  182. CFI_REL_OFFSET rsp,0
  183. pushq_cfi $X86_EFLAGS_IF /* eflags - interrupts on */
  184. /*CFI_REL_OFFSET rflags,0*/
  185. pushq_cfi $__KERNEL_CS /* cs */
  186. /*CFI_REL_OFFSET cs,0*/
  187. pushq_cfi \child_rip /* rip */
  188. CFI_REL_OFFSET rip,0
  189. pushq_cfi %rax /* orig rax */
  190. .endm
  191. .macro UNFAKE_STACK_FRAME
  192. addq $8*6, %rsp
  193. CFI_ADJUST_CFA_OFFSET -(6*8)
  194. .endm
  195. /*
  196. * initial frame state for interrupts (and exceptions without error code)
  197. */
  198. .macro EMPTY_FRAME start=1 offset=0
  199. .if \start
  200. CFI_STARTPROC simple
  201. CFI_SIGNAL_FRAME
  202. CFI_DEF_CFA rsp,8+\offset
  203. .else
  204. CFI_DEF_CFA_OFFSET 8+\offset
  205. .endif
  206. .endm
  207. /*
  208. * initial frame state for interrupts (and exceptions without error code)
  209. */
  210. .macro INTR_FRAME start=1 offset=0
  211. EMPTY_FRAME \start, SS+8+\offset-RIP
  212. /*CFI_REL_OFFSET ss, SS+\offset-RIP*/
  213. CFI_REL_OFFSET rsp, RSP+\offset-RIP
  214. /*CFI_REL_OFFSET rflags, EFLAGS+\offset-RIP*/
  215. /*CFI_REL_OFFSET cs, CS+\offset-RIP*/
  216. CFI_REL_OFFSET rip, RIP+\offset-RIP
  217. .endm
  218. /*
  219. * initial frame state for exceptions with error code (and interrupts
  220. * with vector already pushed)
  221. */
  222. .macro XCPT_FRAME start=1 offset=0
  223. INTR_FRAME \start, RIP+\offset-ORIG_RAX
  224. /*CFI_REL_OFFSET orig_rax, ORIG_RAX-ORIG_RAX*/
  225. .endm
  226. /*
  227. * frame that enables calling into C.
  228. */
  229. .macro PARTIAL_FRAME start=1 offset=0
  230. XCPT_FRAME \start, ORIG_RAX+\offset-ARGOFFSET
  231. CFI_REL_OFFSET rdi, RDI+\offset-ARGOFFSET
  232. CFI_REL_OFFSET rsi, RSI+\offset-ARGOFFSET
  233. CFI_REL_OFFSET rdx, RDX+\offset-ARGOFFSET
  234. CFI_REL_OFFSET rcx, RCX+\offset-ARGOFFSET
  235. CFI_REL_OFFSET rax, RAX+\offset-ARGOFFSET
  236. CFI_REL_OFFSET r8, R8+\offset-ARGOFFSET
  237. CFI_REL_OFFSET r9, R9+\offset-ARGOFFSET
  238. CFI_REL_OFFSET r10, R10+\offset-ARGOFFSET
  239. CFI_REL_OFFSET r11, R11+\offset-ARGOFFSET
  240. .endm
  241. /*
  242. * frame that enables passing a complete pt_regs to a C function.
  243. */
  244. .macro DEFAULT_FRAME start=1 offset=0
  245. PARTIAL_FRAME \start, R11+\offset-R15
  246. CFI_REL_OFFSET rbx, RBX+\offset
  247. CFI_REL_OFFSET rbp, RBP+\offset
  248. CFI_REL_OFFSET r12, R12+\offset
  249. CFI_REL_OFFSET r13, R13+\offset
  250. CFI_REL_OFFSET r14, R14+\offset
  251. CFI_REL_OFFSET r15, R15+\offset
  252. .endm
  253. /* save partial stack frame */
  254. .pushsection .kprobes.text, "ax"
  255. ENTRY(save_args)
  256. XCPT_FRAME
  257. cld
  258. /*
  259. * start from rbp in pt_regs and jump over
  260. * return address.
  261. */
  262. movq_cfi rdi, RDI+8-RBP
  263. movq_cfi rsi, RSI+8-RBP
  264. movq_cfi rdx, RDX+8-RBP
  265. movq_cfi rcx, RCX+8-RBP
  266. movq_cfi rax, RAX+8-RBP
  267. movq_cfi r8, R8+8-RBP
  268. movq_cfi r9, R9+8-RBP
  269. movq_cfi r10, R10+8-RBP
  270. movq_cfi r11, R11+8-RBP
  271. leaq -RBP+8(%rsp),%rdi /* arg1 for handler */
  272. movq_cfi rbp, 8 /* push %rbp */
  273. leaq 8(%rsp), %rbp /* mov %rsp, %ebp */
  274. testl $3, CS(%rdi)
  275. je 1f
  276. SWAPGS
  277. /*
  278. * irq_count is used to check if a CPU is already on an interrupt stack
  279. * or not. While this is essentially redundant with preempt_count it is
  280. * a little cheaper to use a separate counter in the PDA (short of
  281. * moving irq_enter into assembly, which would be too much work)
  282. */
  283. 1: incl PER_CPU_VAR(irq_count)
  284. jne 2f
  285. popq_cfi %rax /* move return address... */
  286. mov PER_CPU_VAR(irq_stack_ptr),%rsp
  287. EMPTY_FRAME 0
  288. pushq_cfi %rbp /* backlink for unwinder */
  289. pushq_cfi %rax /* ... to the new stack */
  290. /*
  291. * We entered an interrupt context - irqs are off:
  292. */
  293. 2: TRACE_IRQS_OFF
  294. ret
  295. CFI_ENDPROC
  296. END(save_args)
  297. .popsection
  298. ENTRY(save_rest)
  299. PARTIAL_FRAME 1 REST_SKIP+8
  300. movq 5*8+16(%rsp), %r11 /* save return address */
  301. movq_cfi rbx, RBX+16
  302. movq_cfi rbp, RBP+16
  303. movq_cfi r12, R12+16
  304. movq_cfi r13, R13+16
  305. movq_cfi r14, R14+16
  306. movq_cfi r15, R15+16
  307. movq %r11, 8(%rsp) /* return address */
  308. FIXUP_TOP_OF_STACK %r11, 16
  309. ret
  310. CFI_ENDPROC
  311. END(save_rest)
  312. /* save complete stack frame */
  313. .pushsection .kprobes.text, "ax"
  314. ENTRY(save_paranoid)
  315. XCPT_FRAME 1 RDI+8
  316. cld
  317. movq_cfi rdi, RDI+8
  318. movq_cfi rsi, RSI+8
  319. movq_cfi rdx, RDX+8
  320. movq_cfi rcx, RCX+8
  321. movq_cfi rax, RAX+8
  322. movq_cfi r8, R8+8
  323. movq_cfi r9, R9+8
  324. movq_cfi r10, R10+8
  325. movq_cfi r11, R11+8
  326. movq_cfi rbx, RBX+8
  327. movq_cfi rbp, RBP+8
  328. movq_cfi r12, R12+8
  329. movq_cfi r13, R13+8
  330. movq_cfi r14, R14+8
  331. movq_cfi r15, R15+8
  332. movl $1,%ebx
  333. movl $MSR_GS_BASE,%ecx
  334. rdmsr
  335. testl %edx,%edx
  336. js 1f /* negative -> in kernel */
  337. SWAPGS
  338. xorl %ebx,%ebx
  339. 1: ret
  340. CFI_ENDPROC
  341. END(save_paranoid)
  342. .popsection
  343. /*
  344. * A newly forked process directly context switches into this address.
  345. *
  346. * rdi: prev task we switched from
  347. */
  348. ENTRY(ret_from_fork)
  349. DEFAULT_FRAME
  350. LOCK ; btr $TIF_FORK,TI_flags(%r8)
  351. pushq_cfi kernel_eflags(%rip)
  352. popfq_cfi # reset kernel eflags
  353. call schedule_tail # rdi: 'prev' task parameter
  354. GET_THREAD_INFO(%rcx)
  355. RESTORE_REST
  356. testl $3, CS-ARGOFFSET(%rsp) # from kernel_thread?
  357. je int_ret_from_sys_call
  358. testl $_TIF_IA32, TI_flags(%rcx) # 32-bit compat task needs IRET
  359. jnz int_ret_from_sys_call
  360. RESTORE_TOP_OF_STACK %rdi, -ARGOFFSET
  361. jmp ret_from_sys_call # go to the SYSRET fastpath
  362. CFI_ENDPROC
  363. END(ret_from_fork)
  364. /*
  365. * System call entry. Up to 6 arguments in registers are supported.
  366. *
  367. * SYSCALL does not save anything on the stack and does not change the
  368. * stack pointer.
  369. */
  370. /*
  371. * Register setup:
  372. * rax system call number
  373. * rdi arg0
  374. * rcx return address for syscall/sysret, C arg3
  375. * rsi arg1
  376. * rdx arg2
  377. * r10 arg3 (--> moved to rcx for C)
  378. * r8 arg4
  379. * r9 arg5
  380. * r11 eflags for syscall/sysret, temporary for C
  381. * r12-r15,rbp,rbx saved by C code, not touched.
  382. *
  383. * Interrupts are off on entry.
  384. * Only called from user space.
  385. *
  386. * XXX if we had a free scratch register we could save the RSP into the stack frame
  387. * and report it properly in ps. Unfortunately we haven't.
  388. *
  389. * When user can change the frames always force IRET. That is because
  390. * it deals with uncanonical addresses better. SYSRET has trouble
  391. * with them due to bugs in both AMD and Intel CPUs.
  392. */
  393. ENTRY(system_call)
  394. CFI_STARTPROC simple
  395. CFI_SIGNAL_FRAME
  396. CFI_DEF_CFA rsp,KERNEL_STACK_OFFSET
  397. CFI_REGISTER rip,rcx
  398. /*CFI_REGISTER rflags,r11*/
  399. SWAPGS_UNSAFE_STACK
  400. /*
  401. * A hypervisor implementation might want to use a label
  402. * after the swapgs, so that it can do the swapgs
  403. * for the guest and jump here on syscall.
  404. */
  405. ENTRY(system_call_after_swapgs)
  406. movq %rsp,PER_CPU_VAR(old_rsp)
  407. movq PER_CPU_VAR(kernel_stack),%rsp
  408. /*
  409. * No need to follow this irqs off/on section - it's straight
  410. * and short:
  411. */
  412. ENABLE_INTERRUPTS(CLBR_NONE)
  413. SAVE_ARGS 8,1
  414. movq %rax,ORIG_RAX-ARGOFFSET(%rsp)
  415. movq %rcx,RIP-ARGOFFSET(%rsp)
  416. CFI_REL_OFFSET rip,RIP-ARGOFFSET
  417. GET_THREAD_INFO(%rcx)
  418. testl $_TIF_WORK_SYSCALL_ENTRY,TI_flags(%rcx)
  419. jnz tracesys
  420. system_call_fastpath:
  421. cmpq $__NR_syscall_max,%rax
  422. ja badsys
  423. movq %r10,%rcx
  424. call *sys_call_table(,%rax,8) # XXX: rip relative
  425. movq %rax,RAX-ARGOFFSET(%rsp)
  426. /*
  427. * Syscall return path ending with SYSRET (fast path)
  428. * Has incomplete stack frame and undefined top of stack.
  429. */
  430. ret_from_sys_call:
  431. movl $_TIF_ALLWORK_MASK,%edi
  432. /* edi: flagmask */
  433. sysret_check:
  434. LOCKDEP_SYS_EXIT
  435. GET_THREAD_INFO(%rcx)
  436. DISABLE_INTERRUPTS(CLBR_NONE)
  437. TRACE_IRQS_OFF
  438. movl TI_flags(%rcx),%edx
  439. andl %edi,%edx
  440. jnz sysret_careful
  441. CFI_REMEMBER_STATE
  442. /*
  443. * sysretq will re-enable interrupts:
  444. */
  445. TRACE_IRQS_ON
  446. movq RIP-ARGOFFSET(%rsp),%rcx
  447. CFI_REGISTER rip,rcx
  448. RESTORE_ARGS 0,-ARG_SKIP,1
  449. /*CFI_REGISTER rflags,r11*/
  450. movq PER_CPU_VAR(old_rsp), %rsp
  451. USERGS_SYSRET64
  452. CFI_RESTORE_STATE
  453. /* Handle reschedules */
  454. /* edx: work, edi: workmask */
  455. sysret_careful:
  456. bt $TIF_NEED_RESCHED,%edx
  457. jnc sysret_signal
  458. TRACE_IRQS_ON
  459. ENABLE_INTERRUPTS(CLBR_NONE)
  460. pushq_cfi %rdi
  461. call schedule
  462. popq_cfi %rdi
  463. jmp sysret_check
  464. /* Handle a signal */
  465. sysret_signal:
  466. TRACE_IRQS_ON
  467. ENABLE_INTERRUPTS(CLBR_NONE)
  468. #ifdef CONFIG_AUDITSYSCALL
  469. bt $TIF_SYSCALL_AUDIT,%edx
  470. jc sysret_audit
  471. #endif
  472. /*
  473. * We have a signal, or exit tracing or single-step.
  474. * These all wind up with the iret return path anyway,
  475. * so just join that path right now.
  476. */
  477. FIXUP_TOP_OF_STACK %r11, -ARGOFFSET
  478. jmp int_check_syscall_exit_work
  479. badsys:
  480. movq $-ENOSYS,RAX-ARGOFFSET(%rsp)
  481. jmp ret_from_sys_call
  482. #ifdef CONFIG_AUDITSYSCALL
  483. /*
  484. * Fast path for syscall audit without full syscall trace.
  485. * We just call audit_syscall_entry() directly, and then
  486. * jump back to the normal fast path.
  487. */
  488. auditsys:
  489. movq %r10,%r9 /* 6th arg: 4th syscall arg */
  490. movq %rdx,%r8 /* 5th arg: 3rd syscall arg */
  491. movq %rsi,%rcx /* 4th arg: 2nd syscall arg */
  492. movq %rdi,%rdx /* 3rd arg: 1st syscall arg */
  493. movq %rax,%rsi /* 2nd arg: syscall number */
  494. movl $AUDIT_ARCH_X86_64,%edi /* 1st arg: audit arch */
  495. call audit_syscall_entry
  496. LOAD_ARGS 0 /* reload call-clobbered registers */
  497. jmp system_call_fastpath
  498. /*
  499. * Return fast path for syscall audit. Call audit_syscall_exit()
  500. * directly and then jump back to the fast path with TIF_SYSCALL_AUDIT
  501. * masked off.
  502. */
  503. sysret_audit:
  504. movq RAX-ARGOFFSET(%rsp),%rsi /* second arg, syscall return value */
  505. cmpq $0,%rsi /* is it < 0? */
  506. setl %al /* 1 if so, 0 if not */
  507. movzbl %al,%edi /* zero-extend that into %edi */
  508. inc %edi /* first arg, 0->1(AUDITSC_SUCCESS), 1->2(AUDITSC_FAILURE) */
  509. call audit_syscall_exit
  510. movl $(_TIF_ALLWORK_MASK & ~_TIF_SYSCALL_AUDIT),%edi
  511. jmp sysret_check
  512. #endif /* CONFIG_AUDITSYSCALL */
  513. /* Do syscall tracing */
  514. tracesys:
  515. #ifdef CONFIG_AUDITSYSCALL
  516. testl $(_TIF_WORK_SYSCALL_ENTRY & ~_TIF_SYSCALL_AUDIT),TI_flags(%rcx)
  517. jz auditsys
  518. #endif
  519. SAVE_REST
  520. movq $-ENOSYS,RAX(%rsp) /* ptrace can change this for a bad syscall */
  521. FIXUP_TOP_OF_STACK %rdi
  522. movq %rsp,%rdi
  523. call syscall_trace_enter
  524. /*
  525. * Reload arg registers from stack in case ptrace changed them.
  526. * We don't reload %rax because syscall_trace_enter() returned
  527. * the value it wants us to use in the table lookup.
  528. */
  529. LOAD_ARGS ARGOFFSET, 1
  530. RESTORE_REST
  531. cmpq $__NR_syscall_max,%rax
  532. ja int_ret_from_sys_call /* RAX(%rsp) set to -ENOSYS above */
  533. movq %r10,%rcx /* fixup for C */
  534. call *sys_call_table(,%rax,8)
  535. movq %rax,RAX-ARGOFFSET(%rsp)
  536. /* Use IRET because user could have changed frame */
  537. /*
  538. * Syscall return path ending with IRET.
  539. * Has correct top of stack, but partial stack frame.
  540. */
  541. GLOBAL(int_ret_from_sys_call)
  542. DISABLE_INTERRUPTS(CLBR_NONE)
  543. TRACE_IRQS_OFF
  544. testl $3,CS-ARGOFFSET(%rsp)
  545. je retint_restore_args
  546. movl $_TIF_ALLWORK_MASK,%edi
  547. /* edi: mask to check */
  548. GLOBAL(int_with_check)
  549. LOCKDEP_SYS_EXIT_IRQ
  550. GET_THREAD_INFO(%rcx)
  551. movl TI_flags(%rcx),%edx
  552. andl %edi,%edx
  553. jnz int_careful
  554. andl $~TS_COMPAT,TI_status(%rcx)
  555. jmp retint_swapgs
  556. /* Either reschedule or signal or syscall exit tracking needed. */
  557. /* First do a reschedule test. */
  558. /* edx: work, edi: workmask */
  559. int_careful:
  560. bt $TIF_NEED_RESCHED,%edx
  561. jnc int_very_careful
  562. TRACE_IRQS_ON
  563. ENABLE_INTERRUPTS(CLBR_NONE)
  564. pushq_cfi %rdi
  565. call schedule
  566. popq_cfi %rdi
  567. DISABLE_INTERRUPTS(CLBR_NONE)
  568. TRACE_IRQS_OFF
  569. jmp int_with_check
  570. /* handle signals and tracing -- both require a full stack frame */
  571. int_very_careful:
  572. TRACE_IRQS_ON
  573. ENABLE_INTERRUPTS(CLBR_NONE)
  574. int_check_syscall_exit_work:
  575. SAVE_REST
  576. /* Check for syscall exit trace */
  577. testl $_TIF_WORK_SYSCALL_EXIT,%edx
  578. jz int_signal
  579. pushq_cfi %rdi
  580. leaq 8(%rsp),%rdi # &ptregs -> arg1
  581. call syscall_trace_leave
  582. popq_cfi %rdi
  583. andl $~(_TIF_WORK_SYSCALL_EXIT|_TIF_SYSCALL_EMU),%edi
  584. jmp int_restore_rest
  585. int_signal:
  586. testl $_TIF_DO_NOTIFY_MASK,%edx
  587. jz 1f
  588. movq %rsp,%rdi # &ptregs -> arg1
  589. xorl %esi,%esi # oldset -> arg2
  590. call do_notify_resume
  591. 1: movl $_TIF_WORK_MASK,%edi
  592. int_restore_rest:
  593. RESTORE_REST
  594. DISABLE_INTERRUPTS(CLBR_NONE)
  595. TRACE_IRQS_OFF
  596. jmp int_with_check
  597. CFI_ENDPROC
  598. END(system_call)
  599. /*
  600. * Certain special system calls that need to save a complete full stack frame.
  601. */
  602. .macro PTREGSCALL label,func,arg
  603. ENTRY(\label)
  604. PARTIAL_FRAME 1 8 /* offset 8: return address */
  605. subq $REST_SKIP, %rsp
  606. CFI_ADJUST_CFA_OFFSET REST_SKIP
  607. call save_rest
  608. DEFAULT_FRAME 0 8 /* offset 8: return address */
  609. leaq 8(%rsp), \arg /* pt_regs pointer */
  610. call \func
  611. jmp ptregscall_common
  612. CFI_ENDPROC
  613. END(\label)
  614. .endm
  615. PTREGSCALL stub_clone, sys_clone, %r8
  616. PTREGSCALL stub_fork, sys_fork, %rdi
  617. PTREGSCALL stub_vfork, sys_vfork, %rdi
  618. PTREGSCALL stub_sigaltstack, sys_sigaltstack, %rdx
  619. PTREGSCALL stub_iopl, sys_iopl, %rsi
  620. ENTRY(ptregscall_common)
  621. DEFAULT_FRAME 1 8 /* offset 8: return address */
  622. RESTORE_TOP_OF_STACK %r11, 8
  623. movq_cfi_restore R15+8, r15
  624. movq_cfi_restore R14+8, r14
  625. movq_cfi_restore R13+8, r13
  626. movq_cfi_restore R12+8, r12
  627. movq_cfi_restore RBP+8, rbp
  628. movq_cfi_restore RBX+8, rbx
  629. ret $REST_SKIP /* pop extended registers */
  630. CFI_ENDPROC
  631. END(ptregscall_common)
  632. ENTRY(stub_execve)
  633. CFI_STARTPROC
  634. addq $8, %rsp
  635. PARTIAL_FRAME 0
  636. SAVE_REST
  637. FIXUP_TOP_OF_STACK %r11
  638. movq %rsp, %rcx
  639. call sys_execve
  640. RESTORE_TOP_OF_STACK %r11
  641. movq %rax,RAX(%rsp)
  642. RESTORE_REST
  643. jmp int_ret_from_sys_call
  644. CFI_ENDPROC
  645. END(stub_execve)
  646. /*
  647. * sigreturn is special because it needs to restore all registers on return.
  648. * This cannot be done with SYSRET, so use the IRET return path instead.
  649. */
  650. ENTRY(stub_rt_sigreturn)
  651. CFI_STARTPROC
  652. addq $8, %rsp
  653. PARTIAL_FRAME 0
  654. SAVE_REST
  655. movq %rsp,%rdi
  656. FIXUP_TOP_OF_STACK %r11
  657. call sys_rt_sigreturn
  658. movq %rax,RAX(%rsp) # fixme, this could be done at the higher layer
  659. RESTORE_REST
  660. jmp int_ret_from_sys_call
  661. CFI_ENDPROC
  662. END(stub_rt_sigreturn)
  663. /*
  664. * Build the entry stubs and pointer table with some assembler magic.
  665. * We pack 7 stubs into a single 32-byte chunk, which will fit in a
  666. * single cache line on all modern x86 implementations.
  667. */
  668. .section .init.rodata,"a"
  669. ENTRY(interrupt)
  670. .section .entry.text
  671. .p2align 5
  672. .p2align CONFIG_X86_L1_CACHE_SHIFT
  673. ENTRY(irq_entries_start)
  674. INTR_FRAME
  675. vector=FIRST_EXTERNAL_VECTOR
  676. .rept (NR_VECTORS-FIRST_EXTERNAL_VECTOR+6)/7
  677. .balign 32
  678. .rept 7
  679. .if vector < NR_VECTORS
  680. .if vector <> FIRST_EXTERNAL_VECTOR
  681. CFI_ADJUST_CFA_OFFSET -8
  682. .endif
  683. 1: pushq_cfi $(~vector+0x80) /* Note: always in signed byte range */
  684. .if ((vector-FIRST_EXTERNAL_VECTOR)%7) <> 6
  685. jmp 2f
  686. .endif
  687. .previous
  688. .quad 1b
  689. .section .entry.text
  690. vector=vector+1
  691. .endif
  692. .endr
  693. 2: jmp common_interrupt
  694. .endr
  695. CFI_ENDPROC
  696. END(irq_entries_start)
  697. .previous
  698. END(interrupt)
  699. .previous
  700. /*
  701. * Interrupt entry/exit.
  702. *
  703. * Interrupt entry points save only callee clobbered registers in fast path.
  704. *
  705. * Entry runs with interrupts off.
  706. */
  707. /* 0(%rsp): ~(interrupt number) */
  708. .macro interrupt func
  709. /* reserve pt_regs for scratch regs and rbp */
  710. subq $ORIG_RAX-RBP, %rsp
  711. CFI_ADJUST_CFA_OFFSET ORIG_RAX-RBP
  712. call save_args
  713. PARTIAL_FRAME 0
  714. call \func
  715. .endm
  716. /*
  717. * Interrupt entry/exit should be protected against kprobes
  718. */
  719. .pushsection .kprobes.text, "ax"
  720. /*
  721. * The interrupt stubs push (~vector+0x80) onto the stack and
  722. * then jump to common_interrupt.
  723. */
  724. .p2align CONFIG_X86_L1_CACHE_SHIFT
  725. common_interrupt:
  726. XCPT_FRAME
  727. addq $-0x80,(%rsp) /* Adjust vector to [-256,-1] range */
  728. interrupt do_IRQ
  729. /* 0(%rsp): old_rsp-ARGOFFSET */
  730. ret_from_intr:
  731. DISABLE_INTERRUPTS(CLBR_NONE)
  732. TRACE_IRQS_OFF
  733. decl PER_CPU_VAR(irq_count)
  734. leaveq
  735. CFI_RESTORE rbp
  736. CFI_DEF_CFA_REGISTER rsp
  737. CFI_ADJUST_CFA_OFFSET -8
  738. /* we did not save rbx, restore only from ARGOFFSET */
  739. addq $8, %rsp
  740. CFI_ADJUST_CFA_OFFSET -8
  741. exit_intr:
  742. GET_THREAD_INFO(%rcx)
  743. testl $3,CS-ARGOFFSET(%rsp)
  744. je retint_kernel
  745. /* Interrupt came from user space */
  746. /*
  747. * Has a correct top of stack, but a partial stack frame
  748. * %rcx: thread info. Interrupts off.
  749. */
  750. retint_with_reschedule:
  751. movl $_TIF_WORK_MASK,%edi
  752. retint_check:
  753. LOCKDEP_SYS_EXIT_IRQ
  754. movl TI_flags(%rcx),%edx
  755. andl %edi,%edx
  756. CFI_REMEMBER_STATE
  757. jnz retint_careful
  758. retint_swapgs: /* return to user-space */
  759. /*
  760. * The iretq could re-enable interrupts:
  761. */
  762. DISABLE_INTERRUPTS(CLBR_ANY)
  763. TRACE_IRQS_IRETQ
  764. SWAPGS
  765. jmp restore_args
  766. retint_restore_args: /* return to kernel space */
  767. DISABLE_INTERRUPTS(CLBR_ANY)
  768. /*
  769. * The iretq could re-enable interrupts:
  770. */
  771. TRACE_IRQS_IRETQ
  772. restore_args:
  773. RESTORE_ARGS 0,8,0
  774. irq_return:
  775. INTERRUPT_RETURN
  776. .section __ex_table, "a"
  777. .quad irq_return, bad_iret
  778. .previous
  779. #ifdef CONFIG_PARAVIRT
  780. ENTRY(native_iret)
  781. iretq
  782. .section __ex_table,"a"
  783. .quad native_iret, bad_iret
  784. .previous
  785. #endif
  786. .section .fixup,"ax"
  787. bad_iret:
  788. /*
  789. * The iret traps when the %cs or %ss being restored is bogus.
  790. * We've lost the original trap vector and error code.
  791. * #GPF is the most likely one to get for an invalid selector.
  792. * So pretend we completed the iret and took the #GPF in user mode.
  793. *
  794. * We are now running with the kernel GS after exception recovery.
  795. * But error_entry expects us to have user GS to match the user %cs,
  796. * so swap back.
  797. */
  798. pushq $0
  799. SWAPGS
  800. jmp general_protection
  801. .previous
  802. /* edi: workmask, edx: work */
  803. retint_careful:
  804. CFI_RESTORE_STATE
  805. bt $TIF_NEED_RESCHED,%edx
  806. jnc retint_signal
  807. TRACE_IRQS_ON
  808. ENABLE_INTERRUPTS(CLBR_NONE)
  809. pushq_cfi %rdi
  810. call schedule
  811. popq_cfi %rdi
  812. GET_THREAD_INFO(%rcx)
  813. DISABLE_INTERRUPTS(CLBR_NONE)
  814. TRACE_IRQS_OFF
  815. jmp retint_check
  816. retint_signal:
  817. testl $_TIF_DO_NOTIFY_MASK,%edx
  818. jz retint_swapgs
  819. TRACE_IRQS_ON
  820. ENABLE_INTERRUPTS(CLBR_NONE)
  821. SAVE_REST
  822. movq $-1,ORIG_RAX(%rsp)
  823. xorl %esi,%esi # oldset
  824. movq %rsp,%rdi # &pt_regs
  825. call do_notify_resume
  826. RESTORE_REST
  827. DISABLE_INTERRUPTS(CLBR_NONE)
  828. TRACE_IRQS_OFF
  829. GET_THREAD_INFO(%rcx)
  830. jmp retint_with_reschedule
  831. #ifdef CONFIG_PREEMPT
  832. /* Returning to kernel space. Check if we need preemption */
  833. /* rcx: threadinfo. interrupts off. */
  834. ENTRY(retint_kernel)
  835. cmpl $0,TI_preempt_count(%rcx)
  836. jnz retint_restore_args
  837. bt $TIF_NEED_RESCHED,TI_flags(%rcx)
  838. jnc retint_restore_args
  839. bt $9,EFLAGS-ARGOFFSET(%rsp) /* interrupts off? */
  840. jnc retint_restore_args
  841. call preempt_schedule_irq
  842. jmp exit_intr
  843. #endif
  844. CFI_ENDPROC
  845. END(common_interrupt)
  846. /*
  847. * End of kprobes section
  848. */
  849. .popsection
  850. /*
  851. * APIC interrupts.
  852. */
  853. .macro apicinterrupt num sym do_sym
  854. ENTRY(\sym)
  855. INTR_FRAME
  856. pushq_cfi $~(\num)
  857. interrupt \do_sym
  858. jmp ret_from_intr
  859. CFI_ENDPROC
  860. END(\sym)
  861. .endm
  862. #ifdef CONFIG_SMP
  863. apicinterrupt IRQ_MOVE_CLEANUP_VECTOR \
  864. irq_move_cleanup_interrupt smp_irq_move_cleanup_interrupt
  865. apicinterrupt REBOOT_VECTOR \
  866. reboot_interrupt smp_reboot_interrupt
  867. #endif
  868. #ifdef CONFIG_X86_UV
  869. apicinterrupt UV_BAU_MESSAGE \
  870. uv_bau_message_intr1 uv_bau_message_interrupt
  871. #endif
  872. apicinterrupt LOCAL_TIMER_VECTOR \
  873. apic_timer_interrupt smp_apic_timer_interrupt
  874. apicinterrupt X86_PLATFORM_IPI_VECTOR \
  875. x86_platform_ipi smp_x86_platform_ipi
  876. #ifdef CONFIG_SMP
  877. .irp idx,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15, \
  878. 16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31
  879. .if NUM_INVALIDATE_TLB_VECTORS > \idx
  880. apicinterrupt (INVALIDATE_TLB_VECTOR_START)+\idx \
  881. invalidate_interrupt\idx smp_invalidate_interrupt
  882. .endif
  883. .endr
  884. #endif
  885. apicinterrupt THRESHOLD_APIC_VECTOR \
  886. threshold_interrupt smp_threshold_interrupt
  887. apicinterrupt THERMAL_APIC_VECTOR \
  888. thermal_interrupt smp_thermal_interrupt
  889. #ifdef CONFIG_X86_MCE
  890. apicinterrupt MCE_SELF_VECTOR \
  891. mce_self_interrupt smp_mce_self_interrupt
  892. #endif
  893. #ifdef CONFIG_SMP
  894. apicinterrupt CALL_FUNCTION_SINGLE_VECTOR \
  895. call_function_single_interrupt smp_call_function_single_interrupt
  896. apicinterrupt CALL_FUNCTION_VECTOR \
  897. call_function_interrupt smp_call_function_interrupt
  898. apicinterrupt RESCHEDULE_VECTOR \
  899. reschedule_interrupt smp_reschedule_interrupt
  900. #endif
  901. apicinterrupt ERROR_APIC_VECTOR \
  902. error_interrupt smp_error_interrupt
  903. apicinterrupt SPURIOUS_APIC_VECTOR \
  904. spurious_interrupt smp_spurious_interrupt
  905. #ifdef CONFIG_IRQ_WORK
  906. apicinterrupt IRQ_WORK_VECTOR \
  907. irq_work_interrupt smp_irq_work_interrupt
  908. #endif
  909. /*
  910. * Exception entry points.
  911. */
  912. .macro zeroentry sym do_sym
  913. ENTRY(\sym)
  914. INTR_FRAME
  915. PARAVIRT_ADJUST_EXCEPTION_FRAME
  916. pushq_cfi $-1 /* ORIG_RAX: no syscall to restart */
  917. subq $ORIG_RAX-R15, %rsp
  918. CFI_ADJUST_CFA_OFFSET ORIG_RAX-R15
  919. call error_entry
  920. DEFAULT_FRAME 0
  921. movq %rsp,%rdi /* pt_regs pointer */
  922. xorl %esi,%esi /* no error code */
  923. call \do_sym
  924. jmp error_exit /* %ebx: no swapgs flag */
  925. CFI_ENDPROC
  926. END(\sym)
  927. .endm
  928. .macro paranoidzeroentry sym do_sym
  929. ENTRY(\sym)
  930. INTR_FRAME
  931. PARAVIRT_ADJUST_EXCEPTION_FRAME
  932. pushq_cfi $-1 /* ORIG_RAX: no syscall to restart */
  933. subq $ORIG_RAX-R15, %rsp
  934. CFI_ADJUST_CFA_OFFSET ORIG_RAX-R15
  935. call save_paranoid
  936. TRACE_IRQS_OFF
  937. movq %rsp,%rdi /* pt_regs pointer */
  938. xorl %esi,%esi /* no error code */
  939. call \do_sym
  940. jmp paranoid_exit /* %ebx: no swapgs flag */
  941. CFI_ENDPROC
  942. END(\sym)
  943. .endm
  944. #define INIT_TSS_IST(x) PER_CPU_VAR(init_tss) + (TSS_ist + ((x) - 1) * 8)
  945. .macro paranoidzeroentry_ist sym do_sym ist
  946. ENTRY(\sym)
  947. INTR_FRAME
  948. PARAVIRT_ADJUST_EXCEPTION_FRAME
  949. pushq_cfi $-1 /* ORIG_RAX: no syscall to restart */
  950. subq $ORIG_RAX-R15, %rsp
  951. CFI_ADJUST_CFA_OFFSET ORIG_RAX-R15
  952. call save_paranoid
  953. TRACE_IRQS_OFF
  954. movq %rsp,%rdi /* pt_regs pointer */
  955. xorl %esi,%esi /* no error code */
  956. subq $EXCEPTION_STKSZ, INIT_TSS_IST(\ist)
  957. call \do_sym
  958. addq $EXCEPTION_STKSZ, INIT_TSS_IST(\ist)
  959. jmp paranoid_exit /* %ebx: no swapgs flag */
  960. CFI_ENDPROC
  961. END(\sym)
  962. .endm
  963. .macro errorentry sym do_sym
  964. ENTRY(\sym)
  965. XCPT_FRAME
  966. PARAVIRT_ADJUST_EXCEPTION_FRAME
  967. subq $ORIG_RAX-R15, %rsp
  968. CFI_ADJUST_CFA_OFFSET ORIG_RAX-R15
  969. call error_entry
  970. DEFAULT_FRAME 0
  971. movq %rsp,%rdi /* pt_regs pointer */
  972. movq ORIG_RAX(%rsp),%rsi /* get error code */
  973. movq $-1,ORIG_RAX(%rsp) /* no syscall to restart */
  974. call \do_sym
  975. jmp error_exit /* %ebx: no swapgs flag */
  976. CFI_ENDPROC
  977. END(\sym)
  978. .endm
  979. /* error code is on the stack already */
  980. .macro paranoiderrorentry sym do_sym
  981. ENTRY(\sym)
  982. XCPT_FRAME
  983. PARAVIRT_ADJUST_EXCEPTION_FRAME
  984. subq $ORIG_RAX-R15, %rsp
  985. CFI_ADJUST_CFA_OFFSET ORIG_RAX-R15
  986. call save_paranoid
  987. DEFAULT_FRAME 0
  988. TRACE_IRQS_OFF
  989. movq %rsp,%rdi /* pt_regs pointer */
  990. movq ORIG_RAX(%rsp),%rsi /* get error code */
  991. movq $-1,ORIG_RAX(%rsp) /* no syscall to restart */
  992. call \do_sym
  993. jmp paranoid_exit /* %ebx: no swapgs flag */
  994. CFI_ENDPROC
  995. END(\sym)
  996. .endm
  997. zeroentry divide_error do_divide_error
  998. zeroentry overflow do_overflow
  999. zeroentry bounds do_bounds
  1000. zeroentry invalid_op do_invalid_op
  1001. zeroentry device_not_available do_device_not_available
  1002. paranoiderrorentry double_fault do_double_fault
  1003. zeroentry coprocessor_segment_overrun do_coprocessor_segment_overrun
  1004. errorentry invalid_TSS do_invalid_TSS
  1005. errorentry segment_not_present do_segment_not_present
  1006. zeroentry spurious_interrupt_bug do_spurious_interrupt_bug
  1007. zeroentry coprocessor_error do_coprocessor_error
  1008. errorentry alignment_check do_alignment_check
  1009. zeroentry simd_coprocessor_error do_simd_coprocessor_error
  1010. /* Reload gs selector with exception handling */
  1011. /* edi: new selector */
  1012. ENTRY(native_load_gs_index)
  1013. CFI_STARTPROC
  1014. pushfq_cfi
  1015. DISABLE_INTERRUPTS(CLBR_ANY & ~CLBR_RDI)
  1016. SWAPGS
  1017. gs_change:
  1018. movl %edi,%gs
  1019. 2: mfence /* workaround */
  1020. SWAPGS
  1021. popfq_cfi
  1022. ret
  1023. CFI_ENDPROC
  1024. END(native_load_gs_index)
  1025. .section __ex_table,"a"
  1026. .align 8
  1027. .quad gs_change,bad_gs
  1028. .previous
  1029. .section .fixup,"ax"
  1030. /* running with kernelgs */
  1031. bad_gs:
  1032. SWAPGS /* switch back to user gs */
  1033. xorl %eax,%eax
  1034. movl %eax,%gs
  1035. jmp 2b
  1036. .previous
  1037. ENTRY(kernel_thread_helper)
  1038. pushq $0 # fake return address
  1039. CFI_STARTPROC
  1040. /*
  1041. * Here we are in the child and the registers are set as they were
  1042. * at kernel_thread() invocation in the parent.
  1043. */
  1044. call *%rsi
  1045. # exit
  1046. mov %eax, %edi
  1047. call do_exit
  1048. ud2 # padding for call trace
  1049. CFI_ENDPROC
  1050. END(kernel_thread_helper)
  1051. /*
  1052. * execve(). This function needs to use IRET, not SYSRET, to set up all state properly.
  1053. *
  1054. * C extern interface:
  1055. * extern long execve(const char *name, char **argv, char **envp)
  1056. *
  1057. * asm input arguments:
  1058. * rdi: name, rsi: argv, rdx: envp
  1059. *
  1060. * We want to fallback into:
  1061. * extern long sys_execve(const char *name, char **argv,char **envp, struct pt_regs *regs)
  1062. *
  1063. * do_sys_execve asm fallback arguments:
  1064. * rdi: name, rsi: argv, rdx: envp, rcx: fake frame on the stack
  1065. */
  1066. ENTRY(kernel_execve)
  1067. CFI_STARTPROC
  1068. FAKE_STACK_FRAME $0
  1069. SAVE_ALL
  1070. movq %rsp,%rcx
  1071. call sys_execve
  1072. movq %rax, RAX(%rsp)
  1073. RESTORE_REST
  1074. testq %rax,%rax
  1075. je int_ret_from_sys_call
  1076. RESTORE_ARGS
  1077. UNFAKE_STACK_FRAME
  1078. ret
  1079. CFI_ENDPROC
  1080. END(kernel_execve)
  1081. /* Call softirq on interrupt stack. Interrupts are off. */
  1082. ENTRY(call_softirq)
  1083. CFI_STARTPROC
  1084. pushq_cfi %rbp
  1085. CFI_REL_OFFSET rbp,0
  1086. mov %rsp,%rbp
  1087. CFI_DEF_CFA_REGISTER rbp
  1088. incl PER_CPU_VAR(irq_count)
  1089. cmove PER_CPU_VAR(irq_stack_ptr),%rsp
  1090. push %rbp # backlink for old unwinder
  1091. call __do_softirq
  1092. leaveq
  1093. CFI_RESTORE rbp
  1094. CFI_DEF_CFA_REGISTER rsp
  1095. CFI_ADJUST_CFA_OFFSET -8
  1096. decl PER_CPU_VAR(irq_count)
  1097. ret
  1098. CFI_ENDPROC
  1099. END(call_softirq)
  1100. #ifdef CONFIG_XEN
  1101. zeroentry xen_hypervisor_callback xen_do_hypervisor_callback
  1102. /*
  1103. * A note on the "critical region" in our callback handler.
  1104. * We want to avoid stacking callback handlers due to events occurring
  1105. * during handling of the last event. To do this, we keep events disabled
  1106. * until we've done all processing. HOWEVER, we must enable events before
  1107. * popping the stack frame (can't be done atomically) and so it would still
  1108. * be possible to get enough handler activations to overflow the stack.
  1109. * Although unlikely, bugs of that kind are hard to track down, so we'd
  1110. * like to avoid the possibility.
  1111. * So, on entry to the handler we detect whether we interrupted an
  1112. * existing activation in its critical region -- if so, we pop the current
  1113. * activation and restart the handler using the previous one.
  1114. */
  1115. ENTRY(xen_do_hypervisor_callback) # do_hypervisor_callback(struct *pt_regs)
  1116. CFI_STARTPROC
  1117. /*
  1118. * Since we don't modify %rdi, evtchn_do_upall(struct *pt_regs) will
  1119. * see the correct pointer to the pt_regs
  1120. */
  1121. movq %rdi, %rsp # we don't return, adjust the stack frame
  1122. CFI_ENDPROC
  1123. DEFAULT_FRAME
  1124. 11: incl PER_CPU_VAR(irq_count)
  1125. movq %rsp,%rbp
  1126. CFI_DEF_CFA_REGISTER rbp
  1127. cmovzq PER_CPU_VAR(irq_stack_ptr),%rsp
  1128. pushq %rbp # backlink for old unwinder
  1129. call xen_evtchn_do_upcall
  1130. popq %rsp
  1131. CFI_DEF_CFA_REGISTER rsp
  1132. decl PER_CPU_VAR(irq_count)
  1133. jmp error_exit
  1134. CFI_ENDPROC
  1135. END(xen_do_hypervisor_callback)
  1136. /*
  1137. * Hypervisor uses this for application faults while it executes.
  1138. * We get here for two reasons:
  1139. * 1. Fault while reloading DS, ES, FS or GS
  1140. * 2. Fault while executing IRET
  1141. * Category 1 we do not need to fix up as Xen has already reloaded all segment
  1142. * registers that could be reloaded and zeroed the others.
  1143. * Category 2 we fix up by killing the current process. We cannot use the
  1144. * normal Linux return path in this case because if we use the IRET hypercall
  1145. * to pop the stack frame we end up in an infinite loop of failsafe callbacks.
  1146. * We distinguish between categories by comparing each saved segment register
  1147. * with its current contents: any discrepancy means we in category 1.
  1148. */
  1149. ENTRY(xen_failsafe_callback)
  1150. INTR_FRAME 1 (6*8)
  1151. /*CFI_REL_OFFSET gs,GS*/
  1152. /*CFI_REL_OFFSET fs,FS*/
  1153. /*CFI_REL_OFFSET es,ES*/
  1154. /*CFI_REL_OFFSET ds,DS*/
  1155. CFI_REL_OFFSET r11,8
  1156. CFI_REL_OFFSET rcx,0
  1157. movw %ds,%cx
  1158. cmpw %cx,0x10(%rsp)
  1159. CFI_REMEMBER_STATE
  1160. jne 1f
  1161. movw %es,%cx
  1162. cmpw %cx,0x18(%rsp)
  1163. jne 1f
  1164. movw %fs,%cx
  1165. cmpw %cx,0x20(%rsp)
  1166. jne 1f
  1167. movw %gs,%cx
  1168. cmpw %cx,0x28(%rsp)
  1169. jne 1f
  1170. /* All segments match their saved values => Category 2 (Bad IRET). */
  1171. movq (%rsp),%rcx
  1172. CFI_RESTORE rcx
  1173. movq 8(%rsp),%r11
  1174. CFI_RESTORE r11
  1175. addq $0x30,%rsp
  1176. CFI_ADJUST_CFA_OFFSET -0x30
  1177. pushq_cfi $0 /* RIP */
  1178. pushq_cfi %r11
  1179. pushq_cfi %rcx
  1180. jmp general_protection
  1181. CFI_RESTORE_STATE
  1182. 1: /* Segment mismatch => Category 1 (Bad segment). Retry the IRET. */
  1183. movq (%rsp),%rcx
  1184. CFI_RESTORE rcx
  1185. movq 8(%rsp),%r11
  1186. CFI_RESTORE r11
  1187. addq $0x30,%rsp
  1188. CFI_ADJUST_CFA_OFFSET -0x30
  1189. pushq_cfi $0
  1190. SAVE_ALL
  1191. jmp error_exit
  1192. CFI_ENDPROC
  1193. END(xen_failsafe_callback)
  1194. apicinterrupt XEN_HVM_EVTCHN_CALLBACK \
  1195. xen_hvm_callback_vector xen_evtchn_do_upcall
  1196. #endif /* CONFIG_XEN */
  1197. /*
  1198. * Some functions should be protected against kprobes
  1199. */
  1200. .pushsection .kprobes.text, "ax"
  1201. paranoidzeroentry_ist debug do_debug DEBUG_STACK
  1202. paranoidzeroentry_ist int3 do_int3 DEBUG_STACK
  1203. paranoiderrorentry stack_segment do_stack_segment
  1204. #ifdef CONFIG_XEN
  1205. zeroentry xen_debug do_debug
  1206. zeroentry xen_int3 do_int3
  1207. errorentry xen_stack_segment do_stack_segment
  1208. #endif
  1209. errorentry general_protection do_general_protection
  1210. errorentry page_fault do_page_fault
  1211. #ifdef CONFIG_KVM_GUEST
  1212. errorentry async_page_fault do_async_page_fault
  1213. #endif
  1214. #ifdef CONFIG_X86_MCE
  1215. paranoidzeroentry machine_check *machine_check_vector(%rip)
  1216. #endif
  1217. /*
  1218. * "Paranoid" exit path from exception stack.
  1219. * Paranoid because this is used by NMIs and cannot take
  1220. * any kernel state for granted.
  1221. * We don't do kernel preemption checks here, because only
  1222. * NMI should be common and it does not enable IRQs and
  1223. * cannot get reschedule ticks.
  1224. *
  1225. * "trace" is 0 for the NMI handler only, because irq-tracing
  1226. * is fundamentally NMI-unsafe. (we cannot change the soft and
  1227. * hard flags at once, atomically)
  1228. */
  1229. /* ebx: no swapgs flag */
  1230. ENTRY(paranoid_exit)
  1231. DEFAULT_FRAME
  1232. DISABLE_INTERRUPTS(CLBR_NONE)
  1233. TRACE_IRQS_OFF
  1234. testl %ebx,%ebx /* swapgs needed? */
  1235. jnz paranoid_restore
  1236. testl $3,CS(%rsp)
  1237. jnz paranoid_userspace
  1238. paranoid_swapgs:
  1239. TRACE_IRQS_IRETQ 0
  1240. SWAPGS_UNSAFE_STACK
  1241. RESTORE_ALL 8
  1242. jmp irq_return
  1243. paranoid_restore:
  1244. TRACE_IRQS_IRETQ 0
  1245. RESTORE_ALL 8
  1246. jmp irq_return
  1247. paranoid_userspace:
  1248. GET_THREAD_INFO(%rcx)
  1249. movl TI_flags(%rcx),%ebx
  1250. andl $_TIF_WORK_MASK,%ebx
  1251. jz paranoid_swapgs
  1252. movq %rsp,%rdi /* &pt_regs */
  1253. call sync_regs
  1254. movq %rax,%rsp /* switch stack for scheduling */
  1255. testl $_TIF_NEED_RESCHED,%ebx
  1256. jnz paranoid_schedule
  1257. movl %ebx,%edx /* arg3: thread flags */
  1258. TRACE_IRQS_ON
  1259. ENABLE_INTERRUPTS(CLBR_NONE)
  1260. xorl %esi,%esi /* arg2: oldset */
  1261. movq %rsp,%rdi /* arg1: &pt_regs */
  1262. call do_notify_resume
  1263. DISABLE_INTERRUPTS(CLBR_NONE)
  1264. TRACE_IRQS_OFF
  1265. jmp paranoid_userspace
  1266. paranoid_schedule:
  1267. TRACE_IRQS_ON
  1268. ENABLE_INTERRUPTS(CLBR_ANY)
  1269. call schedule
  1270. DISABLE_INTERRUPTS(CLBR_ANY)
  1271. TRACE_IRQS_OFF
  1272. jmp paranoid_userspace
  1273. CFI_ENDPROC
  1274. END(paranoid_exit)
  1275. /*
  1276. * Exception entry point. This expects an error code/orig_rax on the stack.
  1277. * returns in "no swapgs flag" in %ebx.
  1278. */
  1279. ENTRY(error_entry)
  1280. XCPT_FRAME
  1281. CFI_ADJUST_CFA_OFFSET 15*8
  1282. /* oldrax contains error code */
  1283. cld
  1284. movq_cfi rdi, RDI+8
  1285. movq_cfi rsi, RSI+8
  1286. movq_cfi rdx, RDX+8
  1287. movq_cfi rcx, RCX+8
  1288. movq_cfi rax, RAX+8
  1289. movq_cfi r8, R8+8
  1290. movq_cfi r9, R9+8
  1291. movq_cfi r10, R10+8
  1292. movq_cfi r11, R11+8
  1293. movq_cfi rbx, RBX+8
  1294. movq_cfi rbp, RBP+8
  1295. movq_cfi r12, R12+8
  1296. movq_cfi r13, R13+8
  1297. movq_cfi r14, R14+8
  1298. movq_cfi r15, R15+8
  1299. xorl %ebx,%ebx
  1300. testl $3,CS+8(%rsp)
  1301. je error_kernelspace
  1302. error_swapgs:
  1303. SWAPGS
  1304. error_sti:
  1305. TRACE_IRQS_OFF
  1306. ret
  1307. /*
  1308. * There are two places in the kernel that can potentially fault with
  1309. * usergs. Handle them here. The exception handlers after iret run with
  1310. * kernel gs again, so don't set the user space flag. B stepping K8s
  1311. * sometimes report an truncated RIP for IRET exceptions returning to
  1312. * compat mode. Check for these here too.
  1313. */
  1314. error_kernelspace:
  1315. incl %ebx
  1316. leaq irq_return(%rip),%rcx
  1317. cmpq %rcx,RIP+8(%rsp)
  1318. je error_swapgs
  1319. movl %ecx,%eax /* zero extend */
  1320. cmpq %rax,RIP+8(%rsp)
  1321. je bstep_iret
  1322. cmpq $gs_change,RIP+8(%rsp)
  1323. je error_swapgs
  1324. jmp error_sti
  1325. bstep_iret:
  1326. /* Fix truncated RIP */
  1327. movq %rcx,RIP+8(%rsp)
  1328. jmp error_swapgs
  1329. CFI_ENDPROC
  1330. END(error_entry)
  1331. /* ebx: no swapgs flag (1: don't need swapgs, 0: need it) */
  1332. ENTRY(error_exit)
  1333. DEFAULT_FRAME
  1334. movl %ebx,%eax
  1335. RESTORE_REST
  1336. DISABLE_INTERRUPTS(CLBR_NONE)
  1337. TRACE_IRQS_OFF
  1338. GET_THREAD_INFO(%rcx)
  1339. testl %eax,%eax
  1340. jne retint_kernel
  1341. LOCKDEP_SYS_EXIT_IRQ
  1342. movl TI_flags(%rcx),%edx
  1343. movl $_TIF_WORK_MASK,%edi
  1344. andl %edi,%edx
  1345. jnz retint_careful
  1346. jmp retint_swapgs
  1347. CFI_ENDPROC
  1348. END(error_exit)
  1349. /* runs on exception stack */
  1350. ENTRY(nmi)
  1351. INTR_FRAME
  1352. PARAVIRT_ADJUST_EXCEPTION_FRAME
  1353. pushq_cfi $-1
  1354. subq $ORIG_RAX-R15, %rsp
  1355. CFI_ADJUST_CFA_OFFSET ORIG_RAX-R15
  1356. call save_paranoid
  1357. DEFAULT_FRAME 0
  1358. /* paranoidentry do_nmi, 0; without TRACE_IRQS_OFF */
  1359. movq %rsp,%rdi
  1360. movq $-1,%rsi
  1361. call do_nmi
  1362. #ifdef CONFIG_TRACE_IRQFLAGS
  1363. /* paranoidexit; without TRACE_IRQS_OFF */
  1364. /* ebx: no swapgs flag */
  1365. DISABLE_INTERRUPTS(CLBR_NONE)
  1366. testl %ebx,%ebx /* swapgs needed? */
  1367. jnz nmi_restore
  1368. testl $3,CS(%rsp)
  1369. jnz nmi_userspace
  1370. nmi_swapgs:
  1371. SWAPGS_UNSAFE_STACK
  1372. nmi_restore:
  1373. RESTORE_ALL 8
  1374. jmp irq_return
  1375. nmi_userspace:
  1376. GET_THREAD_INFO(%rcx)
  1377. movl TI_flags(%rcx),%ebx
  1378. andl $_TIF_WORK_MASK,%ebx
  1379. jz nmi_swapgs
  1380. movq %rsp,%rdi /* &pt_regs */
  1381. call sync_regs
  1382. movq %rax,%rsp /* switch stack for scheduling */
  1383. testl $_TIF_NEED_RESCHED,%ebx
  1384. jnz nmi_schedule
  1385. movl %ebx,%edx /* arg3: thread flags */
  1386. ENABLE_INTERRUPTS(CLBR_NONE)
  1387. xorl %esi,%esi /* arg2: oldset */
  1388. movq %rsp,%rdi /* arg1: &pt_regs */
  1389. call do_notify_resume
  1390. DISABLE_INTERRUPTS(CLBR_NONE)
  1391. jmp nmi_userspace
  1392. nmi_schedule:
  1393. ENABLE_INTERRUPTS(CLBR_ANY)
  1394. call schedule
  1395. DISABLE_INTERRUPTS(CLBR_ANY)
  1396. jmp nmi_userspace
  1397. CFI_ENDPROC
  1398. #else
  1399. jmp paranoid_exit
  1400. CFI_ENDPROC
  1401. #endif
  1402. END(nmi)
  1403. ENTRY(ignore_sysret)
  1404. CFI_STARTPROC
  1405. mov $-ENOSYS,%eax
  1406. sysret
  1407. CFI_ENDPROC
  1408. END(ignore_sysret)
  1409. /*
  1410. * End of kprobes section
  1411. */
  1412. .popsection