pat.c 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562
  1. /*
  2. * Handle caching attributes in page tables (PAT)
  3. *
  4. * Authors: Venkatesh Pallipadi <venkatesh.pallipadi@intel.com>
  5. * Suresh B Siddha <suresh.b.siddha@intel.com>
  6. *
  7. * Loosely based on earlier PAT patchset from Eric Biederman and Andi Kleen.
  8. */
  9. #include <linux/mm.h>
  10. #include <linux/kernel.h>
  11. #include <linux/gfp.h>
  12. #include <linux/fs.h>
  13. #include <linux/bootmem.h>
  14. #include <asm/msr.h>
  15. #include <asm/tlbflush.h>
  16. #include <asm/processor.h>
  17. #include <asm/page.h>
  18. #include <asm/pgtable.h>
  19. #include <asm/pat.h>
  20. #include <asm/e820.h>
  21. #include <asm/cacheflush.h>
  22. #include <asm/fcntl.h>
  23. #include <asm/mtrr.h>
  24. #include <asm/io.h>
  25. #ifdef CONFIG_X86_PAT
  26. int __read_mostly pat_enabled = 1;
  27. void __cpuinit pat_disable(char *reason)
  28. {
  29. pat_enabled = 0;
  30. printk(KERN_INFO "%s\n", reason);
  31. }
  32. static int __init nopat(char *str)
  33. {
  34. pat_disable("PAT support disabled.");
  35. return 0;
  36. }
  37. early_param("nopat", nopat);
  38. #endif
  39. static int debug_enable;
  40. static int __init pat_debug_setup(char *str)
  41. {
  42. debug_enable = 1;
  43. return 0;
  44. }
  45. __setup("debugpat", pat_debug_setup);
  46. #define dprintk(fmt, arg...) \
  47. do { if (debug_enable) printk(KERN_INFO fmt, ##arg); } while (0)
  48. static u64 __read_mostly boot_pat_state;
  49. enum {
  50. PAT_UC = 0, /* uncached */
  51. PAT_WC = 1, /* Write combining */
  52. PAT_WT = 4, /* Write Through */
  53. PAT_WP = 5, /* Write Protected */
  54. PAT_WB = 6, /* Write Back (default) */
  55. PAT_UC_MINUS = 7, /* UC, but can be overriden by MTRR */
  56. };
  57. #define PAT(x, y) ((u64)PAT_ ## y << ((x)*8))
  58. void pat_init(void)
  59. {
  60. u64 pat;
  61. if (!pat_enabled)
  62. return;
  63. /* Paranoia check. */
  64. if (!cpu_has_pat && boot_pat_state) {
  65. /*
  66. * If this happens we are on a secondary CPU, but
  67. * switched to PAT on the boot CPU. We have no way to
  68. * undo PAT.
  69. */
  70. printk(KERN_ERR "PAT enabled, "
  71. "but not supported by secondary CPU\n");
  72. BUG();
  73. }
  74. /* Set PWT to Write-Combining. All other bits stay the same */
  75. /*
  76. * PTE encoding used in Linux:
  77. * PAT
  78. * |PCD
  79. * ||PWT
  80. * |||
  81. * 000 WB _PAGE_CACHE_WB
  82. * 001 WC _PAGE_CACHE_WC
  83. * 010 UC- _PAGE_CACHE_UC_MINUS
  84. * 011 UC _PAGE_CACHE_UC
  85. * PAT bit unused
  86. */
  87. pat = PAT(0, WB) | PAT(1, WC) | PAT(2, UC_MINUS) | PAT(3, UC) |
  88. PAT(4, WB) | PAT(5, WC) | PAT(6, UC_MINUS) | PAT(7, UC);
  89. /* Boot CPU check */
  90. if (!boot_pat_state)
  91. rdmsrl(MSR_IA32_CR_PAT, boot_pat_state);
  92. wrmsrl(MSR_IA32_CR_PAT, pat);
  93. printk(KERN_INFO "x86 PAT enabled: cpu %d, old 0x%Lx, new 0x%Lx\n",
  94. smp_processor_id(), boot_pat_state, pat);
  95. }
  96. #undef PAT
  97. static char *cattr_name(unsigned long flags)
  98. {
  99. switch (flags & _PAGE_CACHE_MASK) {
  100. case _PAGE_CACHE_UC: return "uncached";
  101. case _PAGE_CACHE_UC_MINUS: return "uncached-minus";
  102. case _PAGE_CACHE_WB: return "write-back";
  103. case _PAGE_CACHE_WC: return "write-combining";
  104. default: return "broken";
  105. }
  106. }
  107. /*
  108. * The global memtype list keeps track of memory type for specific
  109. * physical memory areas. Conflicting memory types in different
  110. * mappings can cause CPU cache corruption. To avoid this we keep track.
  111. *
  112. * The list is sorted based on starting address and can contain multiple
  113. * entries for each address (this allows reference counting for overlapping
  114. * areas). All the aliases have the same cache attributes of course.
  115. * Zero attributes are represented as holes.
  116. *
  117. * Currently the data structure is a list because the number of mappings
  118. * are expected to be relatively small. If this should be a problem
  119. * it could be changed to a rbtree or similar.
  120. *
  121. * memtype_lock protects the whole list.
  122. */
  123. struct memtype {
  124. u64 start;
  125. u64 end;
  126. unsigned long type;
  127. struct list_head nd;
  128. };
  129. static LIST_HEAD(memtype_list);
  130. static DEFINE_SPINLOCK(memtype_lock); /* protects memtype list */
  131. /*
  132. * Does intersection of PAT memory type and MTRR memory type and returns
  133. * the resulting memory type as PAT understands it.
  134. * (Type in pat and mtrr will not have same value)
  135. * The intersection is based on "Effective Memory Type" tables in IA-32
  136. * SDM vol 3a
  137. */
  138. static unsigned long pat_x_mtrr_type(u64 start, u64 end, unsigned long req_type)
  139. {
  140. /*
  141. * Look for MTRR hint to get the effective type in case where PAT
  142. * request is for WB.
  143. */
  144. if (req_type == _PAGE_CACHE_WB) {
  145. u8 mtrr_type;
  146. mtrr_type = mtrr_type_lookup(start, end);
  147. if (mtrr_type == MTRR_TYPE_UNCACHABLE)
  148. return _PAGE_CACHE_UC;
  149. if (mtrr_type == MTRR_TYPE_WRCOMB)
  150. return _PAGE_CACHE_WC;
  151. }
  152. return req_type;
  153. }
  154. /*
  155. * req_type typically has one of the:
  156. * - _PAGE_CACHE_WB
  157. * - _PAGE_CACHE_WC
  158. * - _PAGE_CACHE_UC_MINUS
  159. * - _PAGE_CACHE_UC
  160. *
  161. * req_type will have a special case value '-1', when requester want to inherit
  162. * the memory type from mtrr (if WB), existing PAT, defaulting to UC_MINUS.
  163. *
  164. * If new_type is NULL, function will return an error if it cannot reserve the
  165. * region with req_type. If new_type is non-NULL, function will return
  166. * available type in new_type in case of no error. In case of any error
  167. * it will return a negative return value.
  168. */
  169. int reserve_memtype(u64 start, u64 end, unsigned long req_type,
  170. unsigned long *new_type)
  171. {
  172. struct memtype *new, *entry;
  173. unsigned long actual_type;
  174. int err = 0;
  175. BUG_ON(start >= end); /* end is exclusive */
  176. if (!pat_enabled) {
  177. /* This is identical to page table setting without PAT */
  178. if (new_type) {
  179. if (req_type == -1)
  180. *new_type = _PAGE_CACHE_WB;
  181. else
  182. *new_type = req_type & _PAGE_CACHE_MASK;
  183. }
  184. return 0;
  185. }
  186. /* Low ISA region is always mapped WB in page table. No need to track */
  187. if (is_ISA_range(start, end - 1)) {
  188. if (new_type)
  189. *new_type = _PAGE_CACHE_WB;
  190. return 0;
  191. }
  192. if (req_type == -1) {
  193. /*
  194. * Call mtrr_lookup to get the type hint. This is an
  195. * optimization for /dev/mem mmap'ers into WB memory (BIOS
  196. * tools and ACPI tools). Use WB request for WB memory and use
  197. * UC_MINUS otherwise.
  198. */
  199. u8 mtrr_type = mtrr_type_lookup(start, end);
  200. if (mtrr_type == MTRR_TYPE_WRBACK)
  201. actual_type = _PAGE_CACHE_WB;
  202. else
  203. actual_type = _PAGE_CACHE_UC_MINUS;
  204. } else
  205. actual_type = pat_x_mtrr_type(start, end,
  206. req_type & _PAGE_CACHE_MASK);
  207. new = kmalloc(sizeof(struct memtype), GFP_KERNEL);
  208. if (!new)
  209. return -ENOMEM;
  210. new->start = start;
  211. new->end = end;
  212. new->type = actual_type;
  213. if (new_type)
  214. *new_type = actual_type;
  215. spin_lock(&memtype_lock);
  216. /* Search for existing mapping that overlaps the current range */
  217. list_for_each_entry(entry, &memtype_list, nd) {
  218. struct memtype *saved_ptr;
  219. if (entry->start >= end) {
  220. dprintk("New Entry\n");
  221. list_add(&new->nd, entry->nd.prev);
  222. new = NULL;
  223. break;
  224. }
  225. if (start <= entry->start && end >= entry->start) {
  226. if (actual_type != entry->type && new_type) {
  227. actual_type = entry->type;
  228. *new_type = actual_type;
  229. new->type = actual_type;
  230. }
  231. if (actual_type != entry->type) {
  232. printk(
  233. KERN_INFO "%s:%d conflicting memory types %Lx-%Lx %s<->%s\n",
  234. current->comm, current->pid,
  235. start, end,
  236. cattr_name(actual_type),
  237. cattr_name(entry->type));
  238. err = -EBUSY;
  239. break;
  240. }
  241. saved_ptr = entry;
  242. /*
  243. * Check to see whether the request overlaps more
  244. * than one entry in the list
  245. */
  246. list_for_each_entry_continue(entry, &memtype_list, nd) {
  247. if (end <= entry->start) {
  248. break;
  249. }
  250. if (actual_type != entry->type) {
  251. printk(
  252. KERN_INFO "%s:%d conflicting memory types %Lx-%Lx %s<->%s\n",
  253. current->comm, current->pid,
  254. start, end,
  255. cattr_name(actual_type),
  256. cattr_name(entry->type));
  257. err = -EBUSY;
  258. break;
  259. }
  260. }
  261. if (err) {
  262. break;
  263. }
  264. dprintk("Overlap at 0x%Lx-0x%Lx\n",
  265. saved_ptr->start, saved_ptr->end);
  266. /* No conflict. Go ahead and add this new entry */
  267. list_add(&new->nd, saved_ptr->nd.prev);
  268. new = NULL;
  269. break;
  270. }
  271. if (start < entry->end) {
  272. if (actual_type != entry->type && new_type) {
  273. actual_type = entry->type;
  274. *new_type = actual_type;
  275. new->type = actual_type;
  276. }
  277. if (actual_type != entry->type) {
  278. printk(
  279. KERN_INFO "%s:%d conflicting memory types %Lx-%Lx %s<->%s\n",
  280. current->comm, current->pid,
  281. start, end,
  282. cattr_name(actual_type),
  283. cattr_name(entry->type));
  284. err = -EBUSY;
  285. break;
  286. }
  287. saved_ptr = entry;
  288. /*
  289. * Check to see whether the request overlaps more
  290. * than one entry in the list
  291. */
  292. list_for_each_entry_continue(entry, &memtype_list, nd) {
  293. if (end <= entry->start) {
  294. break;
  295. }
  296. if (actual_type != entry->type) {
  297. printk(
  298. KERN_INFO "%s:%d conflicting memory types %Lx-%Lx %s<->%s\n",
  299. current->comm, current->pid,
  300. start, end,
  301. cattr_name(actual_type),
  302. cattr_name(entry->type));
  303. err = -EBUSY;
  304. break;
  305. }
  306. }
  307. if (err) {
  308. break;
  309. }
  310. dprintk("Overlap at 0x%Lx-0x%Lx\n",
  311. saved_ptr->start, saved_ptr->end);
  312. /* No conflict. Go ahead and add this new entry */
  313. list_add(&new->nd, &saved_ptr->nd);
  314. new = NULL;
  315. break;
  316. }
  317. }
  318. if (err) {
  319. printk(KERN_INFO
  320. "reserve_memtype failed 0x%Lx-0x%Lx, track %s, req %s\n",
  321. start, end, cattr_name(new->type),
  322. cattr_name(req_type));
  323. kfree(new);
  324. spin_unlock(&memtype_lock);
  325. return err;
  326. }
  327. if (new) {
  328. /* No conflict. Not yet added to the list. Add to the tail */
  329. list_add_tail(&new->nd, &memtype_list);
  330. dprintk("New Entry\n");
  331. }
  332. if (new_type) {
  333. dprintk(
  334. "reserve_memtype added 0x%Lx-0x%Lx, track %s, req %s, ret %s\n",
  335. start, end, cattr_name(actual_type),
  336. cattr_name(req_type), cattr_name(*new_type));
  337. } else {
  338. dprintk(
  339. "reserve_memtype added 0x%Lx-0x%Lx, track %s, req %s\n",
  340. start, end, cattr_name(actual_type),
  341. cattr_name(req_type));
  342. }
  343. spin_unlock(&memtype_lock);
  344. return err;
  345. }
  346. int free_memtype(u64 start, u64 end)
  347. {
  348. struct memtype *entry;
  349. int err = -EINVAL;
  350. if (!pat_enabled)
  351. return 0;
  352. /* Low ISA region is always mapped WB. No need to track */
  353. if (is_ISA_range(start, end - 1))
  354. return 0;
  355. spin_lock(&memtype_lock);
  356. list_for_each_entry(entry, &memtype_list, nd) {
  357. if (entry->start == start && entry->end == end) {
  358. list_del(&entry->nd);
  359. kfree(entry);
  360. err = 0;
  361. break;
  362. }
  363. }
  364. spin_unlock(&memtype_lock);
  365. if (err) {
  366. printk(KERN_INFO "%s:%d freeing invalid memtype %Lx-%Lx\n",
  367. current->comm, current->pid, start, end);
  368. }
  369. dprintk("free_memtype request 0x%Lx-0x%Lx\n", start, end);
  370. return err;
  371. }
  372. /*
  373. * /dev/mem mmap interface. The memtype used for mapping varies:
  374. * - Use UC for mappings with O_SYNC flag
  375. * - Without O_SYNC flag, if there is any conflict in reserve_memtype,
  376. * inherit the memtype from existing mapping.
  377. * - Else use UC_MINUS memtype (for backward compatibility with existing
  378. * X drivers.
  379. */
  380. pgprot_t phys_mem_access_prot(struct file *file, unsigned long pfn,
  381. unsigned long size, pgprot_t vma_prot)
  382. {
  383. return vma_prot;
  384. }
  385. #ifdef CONFIG_NONPROMISC_DEVMEM
  386. /* This check is done in drivers/char/mem.c in case of NONPROMISC_DEVMEM*/
  387. static inline int range_is_allowed(unsigned long pfn, unsigned long size)
  388. {
  389. return 1;
  390. }
  391. #else
  392. static inline int range_is_allowed(unsigned long pfn, unsigned long size)
  393. {
  394. u64 from = ((u64)pfn) << PAGE_SHIFT;
  395. u64 to = from + size;
  396. u64 cursor = from;
  397. while (cursor < to) {
  398. if (!devmem_is_allowed(pfn)) {
  399. printk(KERN_INFO
  400. "Program %s tried to access /dev/mem between %Lx->%Lx.\n",
  401. current->comm, from, to);
  402. return 0;
  403. }
  404. cursor += PAGE_SIZE;
  405. pfn++;
  406. }
  407. return 1;
  408. }
  409. #endif /* CONFIG_NONPROMISC_DEVMEM */
  410. int phys_mem_access_prot_allowed(struct file *file, unsigned long pfn,
  411. unsigned long size, pgprot_t *vma_prot)
  412. {
  413. u64 offset = ((u64) pfn) << PAGE_SHIFT;
  414. unsigned long flags = _PAGE_CACHE_UC_MINUS;
  415. int retval;
  416. if (!range_is_allowed(pfn, size))
  417. return 0;
  418. if (file->f_flags & O_SYNC) {
  419. flags = _PAGE_CACHE_UC;
  420. }
  421. #ifdef CONFIG_X86_32
  422. /*
  423. * On the PPro and successors, the MTRRs are used to set
  424. * memory types for physical addresses outside main memory,
  425. * so blindly setting UC or PWT on those pages is wrong.
  426. * For Pentiums and earlier, the surround logic should disable
  427. * caching for the high addresses through the KEN pin, but
  428. * we maintain the tradition of paranoia in this code.
  429. */
  430. if (!pat_enabled &&
  431. !(boot_cpu_has(X86_FEATURE_MTRR) ||
  432. boot_cpu_has(X86_FEATURE_K6_MTRR) ||
  433. boot_cpu_has(X86_FEATURE_CYRIX_ARR) ||
  434. boot_cpu_has(X86_FEATURE_CENTAUR_MCR)) &&
  435. (pfn << PAGE_SHIFT) >= __pa(high_memory)) {
  436. flags = _PAGE_CACHE_UC;
  437. }
  438. #endif
  439. /*
  440. * With O_SYNC, we can only take UC mapping. Fail if we cannot.
  441. * Without O_SYNC, we want to get
  442. * - WB for WB-able memory and no other conflicting mappings
  443. * - UC_MINUS for non-WB-able memory with no other conflicting mappings
  444. * - Inherit from confliting mappings otherwise
  445. */
  446. if (flags != _PAGE_CACHE_UC_MINUS) {
  447. retval = reserve_memtype(offset, offset + size, flags, NULL);
  448. } else {
  449. retval = reserve_memtype(offset, offset + size, -1, &flags);
  450. }
  451. if (retval < 0)
  452. return 0;
  453. if (pfn <= max_pfn_mapped &&
  454. ioremap_change_attr((unsigned long)__va(offset), size, flags) < 0) {
  455. free_memtype(offset, offset + size);
  456. printk(KERN_INFO
  457. "%s:%d /dev/mem ioremap_change_attr failed %s for %Lx-%Lx\n",
  458. current->comm, current->pid,
  459. cattr_name(flags),
  460. offset, (unsigned long long)(offset + size));
  461. return 0;
  462. }
  463. *vma_prot = __pgprot((pgprot_val(*vma_prot) & ~_PAGE_CACHE_MASK) |
  464. flags);
  465. return 1;
  466. }
  467. void map_devmem(unsigned long pfn, unsigned long size, pgprot_t vma_prot)
  468. {
  469. u64 addr = (u64)pfn << PAGE_SHIFT;
  470. unsigned long flags;
  471. unsigned long want_flags = (pgprot_val(vma_prot) & _PAGE_CACHE_MASK);
  472. reserve_memtype(addr, addr + size, want_flags, &flags);
  473. if (flags != want_flags) {
  474. printk(KERN_INFO
  475. "%s:%d /dev/mem expected mapping type %s for %Lx-%Lx, got %s\n",
  476. current->comm, current->pid,
  477. cattr_name(want_flags),
  478. addr, (unsigned long long)(addr + size),
  479. cattr_name(flags));
  480. }
  481. }
  482. void unmap_devmem(unsigned long pfn, unsigned long size, pgprot_t vma_prot)
  483. {
  484. u64 addr = (u64)pfn << PAGE_SHIFT;
  485. free_memtype(addr, addr + size);
  486. }