ptdump.c 8.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360
  1. // SPDX-License-Identifier: GPL-2.0-only
  2. /*
  3. * Copyright (c) 2014, The Linux Foundation. All rights reserved.
  4. * Debug helper to dump the current kernel pagetables of the system
  5. * so that we can see what the various memory ranges are set to.
  6. *
  7. * Derived from x86 and arm implementation:
  8. * (C) Copyright 2008 Intel Corporation
  9. *
  10. * Author: Arjan van de Ven <arjan@linux.intel.com>
  11. */
  12. #include <linux/debugfs.h>
  13. #include <linux/errno.h>
  14. #include <linux/fs.h>
  15. #include <linux/io.h>
  16. #include <linux/init.h>
  17. #include <linux/mm.h>
  18. #include <linux/ptdump.h>
  19. #include <linux/sched.h>
  20. #include <linux/seq_file.h>
  21. #include <asm/fixmap.h>
  22. #include <asm/kasan.h>
  23. #include <asm/memory.h>
  24. #include <asm/pgtable-hwdef.h>
  25. #include <asm/ptdump.h>
  26. #define pt_dump_seq_printf(m, fmt, args...) \
  27. ({ \
  28. if (m) \
  29. seq_printf(m, fmt, ##args); \
  30. })
  31. #define pt_dump_seq_puts(m, fmt) \
  32. ({ \
  33. if (m) \
  34. seq_printf(m, fmt); \
  35. })
  36. static const struct ptdump_prot_bits pte_bits[] = {
  37. {
  38. .mask = PTE_VALID,
  39. .val = PTE_VALID,
  40. .set = " ",
  41. .clear = "F",
  42. }, {
  43. .mask = PTE_USER,
  44. .val = PTE_USER,
  45. .set = "USR",
  46. .clear = " ",
  47. }, {
  48. .mask = PTE_RDONLY,
  49. .val = PTE_RDONLY,
  50. .set = "ro",
  51. .clear = "RW",
  52. }, {
  53. .mask = PTE_PXN,
  54. .val = PTE_PXN,
  55. .set = "NX",
  56. .clear = "x ",
  57. }, {
  58. .mask = PTE_SHARED,
  59. .val = PTE_SHARED,
  60. .set = "SHD",
  61. .clear = " ",
  62. }, {
  63. .mask = PTE_AF,
  64. .val = PTE_AF,
  65. .set = "AF",
  66. .clear = " ",
  67. }, {
  68. .mask = PTE_NG,
  69. .val = PTE_NG,
  70. .set = "NG",
  71. .clear = " ",
  72. }, {
  73. .mask = PTE_CONT,
  74. .val = PTE_CONT,
  75. .set = "CON",
  76. .clear = " ",
  77. }, {
  78. .mask = PTE_TABLE_BIT,
  79. .val = PTE_TABLE_BIT,
  80. .set = " ",
  81. .clear = "BLK",
  82. }, {
  83. .mask = PTE_UXN,
  84. .val = PTE_UXN,
  85. .set = "UXN",
  86. .clear = " ",
  87. }, {
  88. .mask = PTE_GP,
  89. .val = PTE_GP,
  90. .set = "GP",
  91. .clear = " ",
  92. }, {
  93. .mask = PTE_ATTRINDX_MASK,
  94. .val = PTE_ATTRINDX(MT_DEVICE_nGnRnE),
  95. .set = "DEVICE/nGnRnE",
  96. }, {
  97. .mask = PTE_ATTRINDX_MASK,
  98. .val = PTE_ATTRINDX(MT_DEVICE_nGnRE),
  99. .set = "DEVICE/nGnRE",
  100. }, {
  101. .mask = PTE_ATTRINDX_MASK,
  102. .val = PTE_ATTRINDX(MT_NORMAL_NC),
  103. .set = "MEM/NORMAL-NC",
  104. }, {
  105. .mask = PTE_ATTRINDX_MASK,
  106. .val = PTE_ATTRINDX(MT_NORMAL),
  107. .set = "MEM/NORMAL",
  108. }, {
  109. .mask = PTE_ATTRINDX_MASK,
  110. .val = PTE_ATTRINDX(MT_NORMAL_TAGGED),
  111. .set = "MEM/NORMAL-TAGGED",
  112. }
  113. };
  114. static struct ptdump_pg_level kernel_pg_levels[] __ro_after_init = {
  115. { /* pgd */
  116. .name = "PGD",
  117. .bits = pte_bits,
  118. .num = ARRAY_SIZE(pte_bits),
  119. }, { /* p4d */
  120. .name = "P4D",
  121. .bits = pte_bits,
  122. .num = ARRAY_SIZE(pte_bits),
  123. }, { /* pud */
  124. .name = "PUD",
  125. .bits = pte_bits,
  126. .num = ARRAY_SIZE(pte_bits),
  127. }, { /* pmd */
  128. .name = "PMD",
  129. .bits = pte_bits,
  130. .num = ARRAY_SIZE(pte_bits),
  131. }, { /* pte */
  132. .name = "PTE",
  133. .bits = pte_bits,
  134. .num = ARRAY_SIZE(pte_bits),
  135. },
  136. };
  137. static void dump_prot(struct ptdump_pg_state *st, const struct ptdump_prot_bits *bits,
  138. size_t num)
  139. {
  140. unsigned i;
  141. for (i = 0; i < num; i++, bits++) {
  142. const char *s;
  143. if ((st->current_prot & bits->mask) == bits->val)
  144. s = bits->set;
  145. else
  146. s = bits->clear;
  147. if (s)
  148. pt_dump_seq_printf(st->seq, " %s", s);
  149. }
  150. }
  151. static void note_prot_uxn(struct ptdump_pg_state *st, unsigned long addr)
  152. {
  153. if (!st->check_wx)
  154. return;
  155. if ((st->current_prot & PTE_UXN) == PTE_UXN)
  156. return;
  157. WARN_ONCE(1, "arm64/mm: Found non-UXN mapping at address %p/%pS\n",
  158. (void *)st->start_address, (void *)st->start_address);
  159. st->uxn_pages += (addr - st->start_address) / PAGE_SIZE;
  160. }
  161. static void note_prot_wx(struct ptdump_pg_state *st, unsigned long addr)
  162. {
  163. if (!st->check_wx)
  164. return;
  165. if ((st->current_prot & PTE_RDONLY) == PTE_RDONLY)
  166. return;
  167. if ((st->current_prot & PTE_PXN) == PTE_PXN)
  168. return;
  169. WARN_ONCE(1, "arm64/mm: Found insecure W+X mapping at address %p/%pS\n",
  170. (void *)st->start_address, (void *)st->start_address);
  171. st->wx_pages += (addr - st->start_address) / PAGE_SIZE;
  172. }
  173. void note_page(struct ptdump_state *pt_st, unsigned long addr, int level,
  174. u64 val)
  175. {
  176. struct ptdump_pg_state *st = container_of(pt_st, struct ptdump_pg_state, ptdump);
  177. struct ptdump_pg_level *pg_level = st->pg_level;
  178. static const char units[] = "KMGTPE";
  179. u64 prot = 0;
  180. /* check if the current level has been folded dynamically */
  181. if (st->mm && ((level == 1 && mm_p4d_folded(st->mm)) ||
  182. (level == 2 && mm_pud_folded(st->mm))))
  183. level = 0;
  184. if (level >= 0)
  185. prot = val & pg_level[level].mask;
  186. if (st->level == -1) {
  187. st->level = level;
  188. st->current_prot = prot;
  189. st->start_address = addr;
  190. pt_dump_seq_printf(st->seq, "---[ %s ]---\n", st->marker->name);
  191. } else if (prot != st->current_prot || level != st->level ||
  192. addr >= st->marker[1].start_address) {
  193. const char *unit = units;
  194. unsigned long delta;
  195. if (st->current_prot) {
  196. note_prot_uxn(st, addr);
  197. note_prot_wx(st, addr);
  198. }
  199. pt_dump_seq_printf(st->seq, "0x%016lx-0x%016lx ",
  200. st->start_address, addr);
  201. delta = (addr - st->start_address) >> 10;
  202. while (!(delta & 1023) && unit[1]) {
  203. delta >>= 10;
  204. unit++;
  205. }
  206. pt_dump_seq_printf(st->seq, "%9lu%c %s", delta, *unit,
  207. pg_level[st->level].name);
  208. if (st->current_prot && pg_level[st->level].bits)
  209. dump_prot(st, pg_level[st->level].bits,
  210. pg_level[st->level].num);
  211. pt_dump_seq_puts(st->seq, "\n");
  212. if (addr >= st->marker[1].start_address) {
  213. st->marker++;
  214. pt_dump_seq_printf(st->seq, "---[ %s ]---\n", st->marker->name);
  215. }
  216. st->start_address = addr;
  217. st->current_prot = prot;
  218. st->level = level;
  219. }
  220. if (addr >= st->marker[1].start_address) {
  221. st->marker++;
  222. pt_dump_seq_printf(st->seq, "---[ %s ]---\n", st->marker->name);
  223. }
  224. }
  225. void ptdump_walk(struct seq_file *s, struct ptdump_info *info)
  226. {
  227. unsigned long end = ~0UL;
  228. struct ptdump_pg_state st;
  229. if (info->base_addr < TASK_SIZE_64)
  230. end = TASK_SIZE_64;
  231. st = (struct ptdump_pg_state){
  232. .seq = s,
  233. .marker = info->markers,
  234. .mm = info->mm,
  235. .pg_level = &kernel_pg_levels[0],
  236. .level = -1,
  237. .ptdump = {
  238. .note_page = note_page,
  239. .range = (struct ptdump_range[]){
  240. {info->base_addr, end},
  241. {0, 0}
  242. }
  243. }
  244. };
  245. ptdump_walk_pgd(&st.ptdump, info->mm, NULL);
  246. }
  247. static void __init ptdump_initialize(void)
  248. {
  249. unsigned i, j;
  250. for (i = 0; i < ARRAY_SIZE(kernel_pg_levels); i++)
  251. if (kernel_pg_levels[i].bits)
  252. for (j = 0; j < kernel_pg_levels[i].num; j++)
  253. kernel_pg_levels[i].mask |= kernel_pg_levels[i].bits[j].mask;
  254. }
  255. static struct ptdump_info kernel_ptdump_info __ro_after_init = {
  256. .mm = &init_mm,
  257. };
  258. bool ptdump_check_wx(void)
  259. {
  260. struct ptdump_pg_state st = {
  261. .seq = NULL,
  262. .marker = (struct addr_marker[]) {
  263. { 0, NULL},
  264. { -1, NULL},
  265. },
  266. .pg_level = &kernel_pg_levels[0],
  267. .level = -1,
  268. .check_wx = true,
  269. .ptdump = {
  270. .note_page = note_page,
  271. .range = (struct ptdump_range[]) {
  272. {_PAGE_OFFSET(vabits_actual), ~0UL},
  273. {0, 0}
  274. }
  275. }
  276. };
  277. ptdump_walk_pgd(&st.ptdump, &init_mm, NULL);
  278. if (st.wx_pages || st.uxn_pages) {
  279. pr_warn("Checked W+X mappings: FAILED, %lu W+X pages found, %lu non-UXN pages found\n",
  280. st.wx_pages, st.uxn_pages);
  281. return false;
  282. } else {
  283. pr_info("Checked W+X mappings: passed, no W+X pages found\n");
  284. return true;
  285. }
  286. }
  287. static int __init ptdump_init(void)
  288. {
  289. u64 page_offset = _PAGE_OFFSET(vabits_actual);
  290. u64 vmemmap_start = (u64)virt_to_page((void *)page_offset);
  291. struct addr_marker m[] = {
  292. { PAGE_OFFSET, "Linear Mapping start" },
  293. { PAGE_END, "Linear Mapping end" },
  294. #if defined(CONFIG_KASAN_GENERIC) || defined(CONFIG_KASAN_SW_TAGS)
  295. { KASAN_SHADOW_START, "Kasan shadow start" },
  296. { KASAN_SHADOW_END, "Kasan shadow end" },
  297. #endif
  298. { MODULES_VADDR, "Modules start" },
  299. { MODULES_END, "Modules end" },
  300. { VMALLOC_START, "vmalloc() area" },
  301. { VMALLOC_END, "vmalloc() end" },
  302. { vmemmap_start, "vmemmap start" },
  303. { VMEMMAP_END, "vmemmap end" },
  304. { PCI_IO_START, "PCI I/O start" },
  305. { PCI_IO_END, "PCI I/O end" },
  306. { FIXADDR_TOT_START, "Fixmap start" },
  307. { FIXADDR_TOP, "Fixmap end" },
  308. { -1, NULL },
  309. };
  310. static struct addr_marker address_markers[ARRAY_SIZE(m)] __ro_after_init;
  311. kernel_ptdump_info.markers = memcpy(address_markers, m, sizeof(m));
  312. kernel_ptdump_info.base_addr = page_offset;
  313. ptdump_initialize();
  314. ptdump_debugfs_register(&kernel_ptdump_info, "kernel_page_tables");
  315. return 0;
  316. }
  317. device_initcall(ptdump_init);