kaslr_64.c 4.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153
  1. // SPDX-License-Identifier: GPL-2.0
  2. /*
  3. * This code is used on x86_64 to create page table identity mappings on
  4. * demand by building up a new set of page tables (or appending to the
  5. * existing ones), and then switching over to them when ready.
  6. *
  7. * Copyright (C) 2015-2016 Yinghai Lu
  8. * Copyright (C) 2016 Kees Cook
  9. */
  10. /*
  11. * Since we're dealing with identity mappings, physical and virtual
  12. * addresses are the same, so override these defines which are ultimately
  13. * used by the headers in misc.h.
  14. */
  15. #define __pa(x) ((unsigned long)(x))
  16. #define __va(x) ((void *)((unsigned long)(x)))
  17. /* No PAGE_TABLE_ISOLATION support needed either: */
  18. #undef CONFIG_PAGE_TABLE_ISOLATION
  19. #include "misc.h"
  20. /* These actually do the work of building the kernel identity maps. */
  21. #include <asm/init.h>
  22. #include <asm/pgtable.h>
  23. /* Use the static base for this part of the boot process */
  24. #undef __PAGE_OFFSET
  25. #define __PAGE_OFFSET __PAGE_OFFSET_BASE
  26. #include "../../mm/ident_map.c"
  27. /* Used to track our page table allocation area. */
  28. struct alloc_pgt_data {
  29. unsigned char *pgt_buf;
  30. unsigned long pgt_buf_size;
  31. unsigned long pgt_buf_offset;
  32. };
  33. /*
  34. * Allocates space for a page table entry, using struct alloc_pgt_data
  35. * above. Besides the local callers, this is used as the allocation
  36. * callback in mapping_info below.
  37. */
  38. static void *alloc_pgt_page(void *context)
  39. {
  40. struct alloc_pgt_data *pages = (struct alloc_pgt_data *)context;
  41. unsigned char *entry;
  42. /* Validate there is space available for a new page. */
  43. if (pages->pgt_buf_offset >= pages->pgt_buf_size) {
  44. debug_putstr("out of pgt_buf in " __FILE__ "!?\n");
  45. debug_putaddr(pages->pgt_buf_offset);
  46. debug_putaddr(pages->pgt_buf_size);
  47. return NULL;
  48. }
  49. entry = pages->pgt_buf + pages->pgt_buf_offset;
  50. pages->pgt_buf_offset += PAGE_SIZE;
  51. return entry;
  52. }
  53. /* Used to track our allocated page tables. */
  54. static struct alloc_pgt_data pgt_data;
  55. /* The top level page table entry pointer. */
  56. static unsigned long top_level_pgt;
  57. phys_addr_t physical_mask = (1ULL << __PHYSICAL_MASK_SHIFT) - 1;
  58. /*
  59. * Mapping information structure passed to kernel_ident_mapping_init().
  60. * Due to relocation, pointers must be assigned at run time not build time.
  61. */
  62. static struct x86_mapping_info mapping_info;
  63. /* Locates and clears a region for a new top level page table. */
  64. void initialize_identity_maps(void)
  65. {
  66. /* If running as an SEV guest, the encryption mask is required. */
  67. set_sev_encryption_mask();
  68. /* Exclude the encryption mask from __PHYSICAL_MASK */
  69. physical_mask &= ~sme_me_mask;
  70. /* Init mapping_info with run-time function/buffer pointers. */
  71. mapping_info.alloc_pgt_page = alloc_pgt_page;
  72. mapping_info.context = &pgt_data;
  73. mapping_info.page_flag = __PAGE_KERNEL_LARGE_EXEC | sme_me_mask;
  74. mapping_info.kernpg_flag = _KERNPG_TABLE;
  75. /*
  76. * It should be impossible for this not to already be true,
  77. * but since calling this a second time would rewind the other
  78. * counters, let's just make sure this is reset too.
  79. */
  80. pgt_data.pgt_buf_offset = 0;
  81. /*
  82. * If we came here via startup_32(), cr3 will be _pgtable already
  83. * and we must append to the existing area instead of entirely
  84. * overwriting it.
  85. *
  86. * With 5-level paging, we use '_pgtable' to allocate the p4d page table,
  87. * the top-level page table is allocated separately.
  88. *
  89. * p4d_offset(top_level_pgt, 0) would cover both the 4- and 5-level
  90. * cases. On 4-level paging it's equal to 'top_level_pgt'.
  91. */
  92. top_level_pgt = read_cr3_pa();
  93. if (p4d_offset((pgd_t *)top_level_pgt, 0) == (p4d_t *)_pgtable) {
  94. debug_putstr("booted via startup_32()\n");
  95. pgt_data.pgt_buf = _pgtable + BOOT_INIT_PGT_SIZE;
  96. pgt_data.pgt_buf_size = BOOT_PGT_SIZE - BOOT_INIT_PGT_SIZE;
  97. memset(pgt_data.pgt_buf, 0, pgt_data.pgt_buf_size);
  98. } else {
  99. debug_putstr("booted via startup_64()\n");
  100. pgt_data.pgt_buf = _pgtable;
  101. pgt_data.pgt_buf_size = BOOT_PGT_SIZE;
  102. memset(pgt_data.pgt_buf, 0, pgt_data.pgt_buf_size);
  103. top_level_pgt = (unsigned long)alloc_pgt_page(&pgt_data);
  104. }
  105. }
  106. /*
  107. * Adds the specified range to what will become the new identity mappings.
  108. * Once all ranges have been added, the new mapping is activated by calling
  109. * finalize_identity_maps() below.
  110. */
  111. void add_identity_map(unsigned long start, unsigned long size)
  112. {
  113. unsigned long end = start + size;
  114. /* Align boundary to 2M. */
  115. start = round_down(start, PMD_SIZE);
  116. end = round_up(end, PMD_SIZE);
  117. if (start >= end)
  118. return;
  119. /* Build the mapping. */
  120. kernel_ident_mapping_init(&mapping_info, (pgd_t *)top_level_pgt,
  121. start, end);
  122. }
  123. /*
  124. * This switches the page tables to the new level4 that has been built
  125. * via calls to add_identity_map() above. If booted via startup_32(),
  126. * this is effectively a no-op.
  127. */
  128. void finalize_identity_maps(void)
  129. {
  130. write_cr3(top_level_pgt);
  131. }