pat.c 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601
  1. /*
  2. * Handle caching attributes in page tables (PAT)
  3. *
  4. * Authors: Venkatesh Pallipadi <venkatesh.pallipadi@intel.com>
  5. * Suresh B Siddha <suresh.b.siddha@intel.com>
  6. *
  7. * Loosely based on earlier PAT patchset from Eric Biederman and Andi Kleen.
  8. */
  9. #include <linux/mm.h>
  10. #include <linux/kernel.h>
  11. #include <linux/gfp.h>
  12. #include <linux/fs.h>
  13. #include <linux/bootmem.h>
  14. #include <linux/debugfs.h>
  15. #include <linux/seq_file.h>
  16. #include <asm/msr.h>
  17. #include <asm/tlbflush.h>
  18. #include <asm/processor.h>
  19. #include <asm/page.h>
  20. #include <asm/pgtable.h>
  21. #include <asm/pat.h>
  22. #include <asm/e820.h>
  23. #include <asm/cacheflush.h>
  24. #include <asm/fcntl.h>
  25. #include <asm/mtrr.h>
  26. #include <asm/io.h>
  27. #ifdef CONFIG_X86_PAT
  28. int __read_mostly pat_enabled = 1;
  29. void __cpuinit pat_disable(char *reason)
  30. {
  31. pat_enabled = 0;
  32. printk(KERN_INFO "%s\n", reason);
  33. }
  34. static int __init nopat(char *str)
  35. {
  36. pat_disable("PAT support disabled.");
  37. return 0;
  38. }
  39. early_param("nopat", nopat);
  40. #endif
  41. static int debug_enable;
  42. static int __init pat_debug_setup(char *str)
  43. {
  44. debug_enable = 1;
  45. return 0;
  46. }
  47. __setup("debugpat", pat_debug_setup);
  48. #define dprintk(fmt, arg...) \
  49. do { if (debug_enable) printk(KERN_INFO fmt, ##arg); } while (0)
  50. static u64 __read_mostly boot_pat_state;
  51. enum {
  52. PAT_UC = 0, /* uncached */
  53. PAT_WC = 1, /* Write combining */
  54. PAT_WT = 4, /* Write Through */
  55. PAT_WP = 5, /* Write Protected */
  56. PAT_WB = 6, /* Write Back (default) */
  57. PAT_UC_MINUS = 7, /* UC, but can be overriden by MTRR */
  58. };
  59. #define PAT(x, y) ((u64)PAT_ ## y << ((x)*8))
  60. void pat_init(void)
  61. {
  62. u64 pat;
  63. if (!pat_enabled)
  64. return;
  65. /* Paranoia check. */
  66. if (!cpu_has_pat && boot_pat_state) {
  67. /*
  68. * If this happens we are on a secondary CPU, but
  69. * switched to PAT on the boot CPU. We have no way to
  70. * undo PAT.
  71. */
  72. printk(KERN_ERR "PAT enabled, "
  73. "but not supported by secondary CPU\n");
  74. BUG();
  75. }
  76. /* Set PWT to Write-Combining. All other bits stay the same */
  77. /*
  78. * PTE encoding used in Linux:
  79. * PAT
  80. * |PCD
  81. * ||PWT
  82. * |||
  83. * 000 WB _PAGE_CACHE_WB
  84. * 001 WC _PAGE_CACHE_WC
  85. * 010 UC- _PAGE_CACHE_UC_MINUS
  86. * 011 UC _PAGE_CACHE_UC
  87. * PAT bit unused
  88. */
  89. pat = PAT(0, WB) | PAT(1, WC) | PAT(2, UC_MINUS) | PAT(3, UC) |
  90. PAT(4, WB) | PAT(5, WC) | PAT(6, UC_MINUS) | PAT(7, UC);
  91. /* Boot CPU check */
  92. if (!boot_pat_state)
  93. rdmsrl(MSR_IA32_CR_PAT, boot_pat_state);
  94. wrmsrl(MSR_IA32_CR_PAT, pat);
  95. printk(KERN_INFO "x86 PAT enabled: cpu %d, old 0x%Lx, new 0x%Lx\n",
  96. smp_processor_id(), boot_pat_state, pat);
  97. }
  98. #undef PAT
  99. static char *cattr_name(unsigned long flags)
  100. {
  101. switch (flags & _PAGE_CACHE_MASK) {
  102. case _PAGE_CACHE_UC: return "uncached";
  103. case _PAGE_CACHE_UC_MINUS: return "uncached-minus";
  104. case _PAGE_CACHE_WB: return "write-back";
  105. case _PAGE_CACHE_WC: return "write-combining";
  106. default: return "broken";
  107. }
  108. }
  109. /*
  110. * The global memtype list keeps track of memory type for specific
  111. * physical memory areas. Conflicting memory types in different
  112. * mappings can cause CPU cache corruption. To avoid this we keep track.
  113. *
  114. * The list is sorted based on starting address and can contain multiple
  115. * entries for each address (this allows reference counting for overlapping
  116. * areas). All the aliases have the same cache attributes of course.
  117. * Zero attributes are represented as holes.
  118. *
  119. * Currently the data structure is a list because the number of mappings
  120. * are expected to be relatively small. If this should be a problem
  121. * it could be changed to a rbtree or similar.
  122. *
  123. * memtype_lock protects the whole list.
  124. */
  125. struct memtype {
  126. u64 start;
  127. u64 end;
  128. unsigned long type;
  129. struct list_head nd;
  130. };
  131. static LIST_HEAD(memtype_list);
  132. static DEFINE_SPINLOCK(memtype_lock); /* protects memtype list */
  133. /*
  134. * Does intersection of PAT memory type and MTRR memory type and returns
  135. * the resulting memory type as PAT understands it.
  136. * (Type in pat and mtrr will not have same value)
  137. * The intersection is based on "Effective Memory Type" tables in IA-32
  138. * SDM vol 3a
  139. */
  140. static unsigned long pat_x_mtrr_type(u64 start, u64 end, unsigned long req_type)
  141. {
  142. /*
  143. * Look for MTRR hint to get the effective type in case where PAT
  144. * request is for WB.
  145. */
  146. if (req_type == _PAGE_CACHE_WB) {
  147. u8 mtrr_type;
  148. mtrr_type = mtrr_type_lookup(start, end);
  149. if (mtrr_type == MTRR_TYPE_UNCACHABLE)
  150. return _PAGE_CACHE_UC;
  151. if (mtrr_type == MTRR_TYPE_WRCOMB)
  152. return _PAGE_CACHE_WC;
  153. }
  154. return req_type;
  155. }
  156. static int chk_conflict(struct memtype *new, struct memtype *entry,
  157. unsigned long *type)
  158. {
  159. if (new->type != entry->type) {
  160. if (type) {
  161. new->type = entry->type;
  162. *type = entry->type;
  163. } else
  164. goto conflict;
  165. }
  166. /* check overlaps with more than one entry in the list */
  167. list_for_each_entry_continue(entry, &memtype_list, nd) {
  168. if (new->end <= entry->start)
  169. break;
  170. else if (new->type != entry->type)
  171. goto conflict;
  172. }
  173. return 0;
  174. conflict:
  175. printk(KERN_INFO "%s:%d conflicting memory types "
  176. "%Lx-%Lx %s<->%s\n", current->comm, current->pid, new->start,
  177. new->end, cattr_name(new->type), cattr_name(entry->type));
  178. return -EBUSY;
  179. }
  180. static struct memtype *cached_entry;
  181. static u64 cached_start;
  182. /*
  183. * req_type typically has one of the:
  184. * - _PAGE_CACHE_WB
  185. * - _PAGE_CACHE_WC
  186. * - _PAGE_CACHE_UC_MINUS
  187. * - _PAGE_CACHE_UC
  188. *
  189. * req_type will have a special case value '-1', when requester want to inherit
  190. * the memory type from mtrr (if WB), existing PAT, defaulting to UC_MINUS.
  191. *
  192. * If new_type is NULL, function will return an error if it cannot reserve the
  193. * region with req_type. If new_type is non-NULL, function will return
  194. * available type in new_type in case of no error. In case of any error
  195. * it will return a negative return value.
  196. */
  197. int reserve_memtype(u64 start, u64 end, unsigned long req_type,
  198. unsigned long *new_type)
  199. {
  200. struct memtype *new, *entry;
  201. unsigned long actual_type;
  202. struct list_head *where;
  203. int err = 0;
  204. BUG_ON(start >= end); /* end is exclusive */
  205. if (!pat_enabled) {
  206. /* This is identical to page table setting without PAT */
  207. if (new_type) {
  208. if (req_type == -1)
  209. *new_type = _PAGE_CACHE_WB;
  210. else
  211. *new_type = req_type & _PAGE_CACHE_MASK;
  212. }
  213. return 0;
  214. }
  215. /* Low ISA region is always mapped WB in page table. No need to track */
  216. if (is_ISA_range(start, end - 1)) {
  217. if (new_type)
  218. *new_type = _PAGE_CACHE_WB;
  219. return 0;
  220. }
  221. if (req_type == -1) {
  222. /*
  223. * Call mtrr_lookup to get the type hint. This is an
  224. * optimization for /dev/mem mmap'ers into WB memory (BIOS
  225. * tools and ACPI tools). Use WB request for WB memory and use
  226. * UC_MINUS otherwise.
  227. */
  228. u8 mtrr_type = mtrr_type_lookup(start, end);
  229. if (mtrr_type == MTRR_TYPE_WRBACK)
  230. actual_type = _PAGE_CACHE_WB;
  231. else
  232. actual_type = _PAGE_CACHE_UC_MINUS;
  233. } else
  234. actual_type = pat_x_mtrr_type(start, end,
  235. req_type & _PAGE_CACHE_MASK);
  236. new = kmalloc(sizeof(struct memtype), GFP_KERNEL);
  237. if (!new)
  238. return -ENOMEM;
  239. new->start = start;
  240. new->end = end;
  241. new->type = actual_type;
  242. if (new_type)
  243. *new_type = actual_type;
  244. spin_lock(&memtype_lock);
  245. if (cached_entry && start >= cached_start)
  246. entry = cached_entry;
  247. else
  248. entry = list_entry(&memtype_list, struct memtype, nd);
  249. /* Search for existing mapping that overlaps the current range */
  250. where = NULL;
  251. list_for_each_entry_continue(entry, &memtype_list, nd) {
  252. if (end <= entry->start) {
  253. where = entry->nd.prev;
  254. cached_entry = list_entry(where, struct memtype, nd);
  255. break;
  256. } else if (start <= entry->start) { /* end > entry->start */
  257. err = chk_conflict(new, entry, new_type);
  258. if (!err) {
  259. dprintk("Overlap at 0x%Lx-0x%Lx\n",
  260. entry->start, entry->end);
  261. where = entry->nd.prev;
  262. cached_entry = list_entry(where,
  263. struct memtype, nd);
  264. }
  265. break;
  266. } else if (start < entry->end) { /* start > entry->start */
  267. err = chk_conflict(new, entry, new_type);
  268. if (!err) {
  269. dprintk("Overlap at 0x%Lx-0x%Lx\n",
  270. entry->start, entry->end);
  271. cached_entry = list_entry(entry->nd.prev,
  272. struct memtype, nd);
  273. /*
  274. * Move to right position in the linked
  275. * list to add this new entry
  276. */
  277. list_for_each_entry_continue(entry,
  278. &memtype_list, nd) {
  279. if (start <= entry->start) {
  280. where = entry->nd.prev;
  281. break;
  282. }
  283. }
  284. }
  285. break;
  286. }
  287. }
  288. if (err) {
  289. printk(KERN_INFO "reserve_memtype failed 0x%Lx-0x%Lx, "
  290. "track %s, req %s\n",
  291. start, end, cattr_name(new->type), cattr_name(req_type));
  292. kfree(new);
  293. spin_unlock(&memtype_lock);
  294. return err;
  295. }
  296. cached_start = start;
  297. if (where)
  298. list_add(&new->nd, where);
  299. else
  300. list_add_tail(&new->nd, &memtype_list);
  301. spin_unlock(&memtype_lock);
  302. dprintk("reserve_memtype added 0x%Lx-0x%Lx, track %s, req %s, ret %s\n",
  303. start, end, cattr_name(new->type), cattr_name(req_type),
  304. new_type ? cattr_name(*new_type) : "-");
  305. return err;
  306. }
  307. int free_memtype(u64 start, u64 end)
  308. {
  309. struct memtype *entry;
  310. int err = -EINVAL;
  311. if (!pat_enabled)
  312. return 0;
  313. /* Low ISA region is always mapped WB. No need to track */
  314. if (is_ISA_range(start, end - 1))
  315. return 0;
  316. spin_lock(&memtype_lock);
  317. list_for_each_entry(entry, &memtype_list, nd) {
  318. if (entry->start == start && entry->end == end) {
  319. if (cached_entry == entry || cached_start == start)
  320. cached_entry = NULL;
  321. list_del(&entry->nd);
  322. kfree(entry);
  323. err = 0;
  324. break;
  325. }
  326. }
  327. spin_unlock(&memtype_lock);
  328. if (err) {
  329. printk(KERN_INFO "%s:%d freeing invalid memtype %Lx-%Lx\n",
  330. current->comm, current->pid, start, end);
  331. }
  332. dprintk("free_memtype request 0x%Lx-0x%Lx\n", start, end);
  333. return err;
  334. }
  335. pgprot_t phys_mem_access_prot(struct file *file, unsigned long pfn,
  336. unsigned long size, pgprot_t vma_prot)
  337. {
  338. return vma_prot;
  339. }
  340. #ifdef CONFIG_STRICT_DEVMEM
  341. /* This check is done in drivers/char/mem.c in case of STRICT_DEVMEM*/
  342. static inline int range_is_allowed(unsigned long pfn, unsigned long size)
  343. {
  344. return 1;
  345. }
  346. #else
  347. static inline int range_is_allowed(unsigned long pfn, unsigned long size)
  348. {
  349. u64 from = ((u64)pfn) << PAGE_SHIFT;
  350. u64 to = from + size;
  351. u64 cursor = from;
  352. while (cursor < to) {
  353. if (!devmem_is_allowed(pfn)) {
  354. printk(KERN_INFO
  355. "Program %s tried to access /dev/mem between %Lx->%Lx.\n",
  356. current->comm, from, to);
  357. return 0;
  358. }
  359. cursor += PAGE_SIZE;
  360. pfn++;
  361. }
  362. return 1;
  363. }
  364. #endif /* CONFIG_STRICT_DEVMEM */
  365. int phys_mem_access_prot_allowed(struct file *file, unsigned long pfn,
  366. unsigned long size, pgprot_t *vma_prot)
  367. {
  368. u64 offset = ((u64) pfn) << PAGE_SHIFT;
  369. unsigned long flags = -1;
  370. int retval;
  371. if (!range_is_allowed(pfn, size))
  372. return 0;
  373. if (file->f_flags & O_SYNC) {
  374. flags = _PAGE_CACHE_UC_MINUS;
  375. }
  376. #ifdef CONFIG_X86_32
  377. /*
  378. * On the PPro and successors, the MTRRs are used to set
  379. * memory types for physical addresses outside main memory,
  380. * so blindly setting UC or PWT on those pages is wrong.
  381. * For Pentiums and earlier, the surround logic should disable
  382. * caching for the high addresses through the KEN pin, but
  383. * we maintain the tradition of paranoia in this code.
  384. */
  385. if (!pat_enabled &&
  386. !(boot_cpu_has(X86_FEATURE_MTRR) ||
  387. boot_cpu_has(X86_FEATURE_K6_MTRR) ||
  388. boot_cpu_has(X86_FEATURE_CYRIX_ARR) ||
  389. boot_cpu_has(X86_FEATURE_CENTAUR_MCR)) &&
  390. (pfn << PAGE_SHIFT) >= __pa(high_memory)) {
  391. flags = _PAGE_CACHE_UC;
  392. }
  393. #endif
  394. /*
  395. * With O_SYNC, we can only take UC_MINUS mapping. Fail if we cannot.
  396. *
  397. * Without O_SYNC, we want to get
  398. * - WB for WB-able memory and no other conflicting mappings
  399. * - UC_MINUS for non-WB-able memory with no other conflicting mappings
  400. * - Inherit from confliting mappings otherwise
  401. */
  402. if (flags != -1) {
  403. retval = reserve_memtype(offset, offset + size, flags, NULL);
  404. } else {
  405. retval = reserve_memtype(offset, offset + size, -1, &flags);
  406. }
  407. if (retval < 0)
  408. return 0;
  409. if (((pfn < max_low_pfn_mapped) ||
  410. (pfn >= (1UL<<(32 - PAGE_SHIFT)) && pfn < max_pfn_mapped)) &&
  411. ioremap_change_attr((unsigned long)__va(offset), size, flags) < 0) {
  412. free_memtype(offset, offset + size);
  413. printk(KERN_INFO
  414. "%s:%d /dev/mem ioremap_change_attr failed %s for %Lx-%Lx\n",
  415. current->comm, current->pid,
  416. cattr_name(flags),
  417. offset, (unsigned long long)(offset + size));
  418. return 0;
  419. }
  420. *vma_prot = __pgprot((pgprot_val(*vma_prot) & ~_PAGE_CACHE_MASK) |
  421. flags);
  422. return 1;
  423. }
  424. void map_devmem(unsigned long pfn, unsigned long size, pgprot_t vma_prot)
  425. {
  426. u64 addr = (u64)pfn << PAGE_SHIFT;
  427. unsigned long flags;
  428. unsigned long want_flags = (pgprot_val(vma_prot) & _PAGE_CACHE_MASK);
  429. reserve_memtype(addr, addr + size, want_flags, &flags);
  430. if (flags != want_flags) {
  431. printk(KERN_INFO
  432. "%s:%d /dev/mem expected mapping type %s for %Lx-%Lx, got %s\n",
  433. current->comm, current->pid,
  434. cattr_name(want_flags),
  435. addr, (unsigned long long)(addr + size),
  436. cattr_name(flags));
  437. }
  438. }
  439. void unmap_devmem(unsigned long pfn, unsigned long size, pgprot_t vma_prot)
  440. {
  441. u64 addr = (u64)pfn << PAGE_SHIFT;
  442. free_memtype(addr, addr + size);
  443. }
  444. #if defined(CONFIG_DEBUG_FS)
  445. /* get Nth element of the linked list */
  446. static struct memtype *memtype_get_idx(loff_t pos)
  447. {
  448. struct memtype *list_node, *print_entry;
  449. int i = 1;
  450. print_entry = kmalloc(sizeof(struct memtype), GFP_KERNEL);
  451. if (!print_entry)
  452. return NULL;
  453. spin_lock(&memtype_lock);
  454. list_for_each_entry(list_node, &memtype_list, nd) {
  455. if (pos == i) {
  456. *print_entry = *list_node;
  457. spin_unlock(&memtype_lock);
  458. return print_entry;
  459. }
  460. ++i;
  461. }
  462. spin_unlock(&memtype_lock);
  463. kfree(print_entry);
  464. return NULL;
  465. }
  466. static void *memtype_seq_start(struct seq_file *seq, loff_t *pos)
  467. {
  468. if (*pos == 0) {
  469. ++*pos;
  470. seq_printf(seq, "PAT memtype list:\n");
  471. }
  472. return memtype_get_idx(*pos);
  473. }
  474. static void *memtype_seq_next(struct seq_file *seq, void *v, loff_t *pos)
  475. {
  476. ++*pos;
  477. return memtype_get_idx(*pos);
  478. }
  479. static void memtype_seq_stop(struct seq_file *seq, void *v)
  480. {
  481. }
  482. static int memtype_seq_show(struct seq_file *seq, void *v)
  483. {
  484. struct memtype *print_entry = (struct memtype *)v;
  485. seq_printf(seq, "%s @ 0x%Lx-0x%Lx\n", cattr_name(print_entry->type),
  486. print_entry->start, print_entry->end);
  487. kfree(print_entry);
  488. return 0;
  489. }
  490. static struct seq_operations memtype_seq_ops = {
  491. .start = memtype_seq_start,
  492. .next = memtype_seq_next,
  493. .stop = memtype_seq_stop,
  494. .show = memtype_seq_show,
  495. };
  496. static int memtype_seq_open(struct inode *inode, struct file *file)
  497. {
  498. return seq_open(file, &memtype_seq_ops);
  499. }
  500. static const struct file_operations memtype_fops = {
  501. .open = memtype_seq_open,
  502. .read = seq_read,
  503. .llseek = seq_lseek,
  504. .release = seq_release,
  505. };
  506. static int __init pat_memtype_list_init(void)
  507. {
  508. debugfs_create_file("pat_memtype_list", S_IRUSR, arch_debugfs_dir,
  509. NULL, &memtype_fops);
  510. return 0;
  511. }
  512. late_initcall(pat_memtype_list_init);
  513. #endif /* CONFIG_DEBUG_FS */