1
2
3
4
5
6
7
8#include <linux/mman.h>
9#include <linux/mm.h>
10#include <linux/kernel.h>
11#include <linux/ptrace.h>
12#include <linux/interrupt.h>
13#include <linux/module.h>
14#include <linux/uaccess.h>
15
16#include <asm/setup.h>
17#include <asm/traps.h>
18#include <asm/pgalloc.h>
19
20extern void die_if_kernel(char *, struct pt_regs *, long);
21
22int send_fault_sig(struct pt_regs *regs)
23{
24 int signo, si_code;
25 void __user *addr;
26
27 signo = current->thread.signo;
28 si_code = current->thread.code;
29 addr = (void __user *)current->thread.faddr;
30 pr_debug("send_fault_sig: %p,%d,%d\n", addr, signo, si_code);
31
32 if (user_mode(regs)) {
33 force_sig_fault(signo, si_code, addr, current);
34 } else {
35 if (fixup_exception(regs))
36 return -1;
37
38
39
40
41
42
43
44
45 if ((unsigned long)addr < PAGE_SIZE)
46 pr_alert("Unable to handle kernel NULL pointer dereference");
47 else
48 pr_alert("Unable to handle kernel access");
49 pr_cont(" at virtual address %p\n", addr);
50 die_if_kernel("Oops", regs, 0 );
51 do_exit(SIGKILL);
52 }
53
54 return 1;
55}
56
57
58
59
60
61
62
63
64
65
66
67
68int do_page_fault(struct pt_regs *regs, unsigned long address,
69 unsigned long error_code)
70{
71 struct mm_struct *mm = current->mm;
72 struct vm_area_struct * vma;
73 vm_fault_t fault;
74 unsigned int flags = FAULT_FLAG_ALLOW_RETRY | FAULT_FLAG_KILLABLE;
75
76 pr_debug("do page fault:\nregs->sr=%#x, regs->pc=%#lx, address=%#lx, %ld, %p\n",
77 regs->sr, regs->pc, address, error_code, mm ? mm->pgd : NULL);
78
79
80
81
82
83 if (faulthandler_disabled() || !mm)
84 goto no_context;
85
86 if (user_mode(regs))
87 flags |= FAULT_FLAG_USER;
88retry:
89 down_read(&mm->mmap_sem);
90
91 vma = find_vma(mm, address);
92 if (!vma)
93 goto map_err;
94 if (vma->vm_flags & VM_IO)
95 goto acc_err;
96 if (vma->vm_start <= address)
97 goto good_area;
98 if (!(vma->vm_flags & VM_GROWSDOWN))
99 goto map_err;
100 if (user_mode(regs)) {
101
102
103
104
105 if (address + 256 < rdusp())
106 goto map_err;
107 }
108 if (expand_stack(vma, address))
109 goto map_err;
110
111
112
113
114
115good_area:
116 pr_debug("do_page_fault: good_area\n");
117 switch (error_code & 3) {
118 default:
119
120 case 2:
121 if (!(vma->vm_flags & VM_WRITE))
122 goto acc_err;
123 flags |= FAULT_FLAG_WRITE;
124 break;
125 case 1:
126 goto acc_err;
127 case 0:
128 if (!(vma->vm_flags & (VM_READ | VM_EXEC | VM_WRITE)))
129 goto acc_err;
130 }
131
132
133
134
135
136
137
138 fault = handle_mm_fault(vma, address, flags);
139 pr_debug("handle_mm_fault returns %x\n", fault);
140
141 if ((fault & VM_FAULT_RETRY) && fatal_signal_pending(current))
142 return 0;
143
144 if (unlikely(fault & VM_FAULT_ERROR)) {
145 if (fault & VM_FAULT_OOM)
146 goto out_of_memory;
147 else if (fault & VM_FAULT_SIGSEGV)
148 goto map_err;
149 else if (fault & VM_FAULT_SIGBUS)
150 goto bus_err;
151 BUG();
152 }
153
154
155
156
157
158
159 if (flags & FAULT_FLAG_ALLOW_RETRY) {
160 if (fault & VM_FAULT_MAJOR)
161 current->maj_flt++;
162 else
163 current->min_flt++;
164 if (fault & VM_FAULT_RETRY) {
165
166
167 flags &= ~FAULT_FLAG_ALLOW_RETRY;
168 flags |= FAULT_FLAG_TRIED;
169
170
171
172
173
174
175
176 goto retry;
177 }
178 }
179
180 up_read(&mm->mmap_sem);
181 return 0;
182
183
184
185
186
187out_of_memory:
188 up_read(&mm->mmap_sem);
189 if (!user_mode(regs))
190 goto no_context;
191 pagefault_out_of_memory();
192 return 0;
193
194no_context:
195 current->thread.signo = SIGBUS;
196 current->thread.faddr = address;
197 return send_fault_sig(regs);
198
199bus_err:
200 current->thread.signo = SIGBUS;
201 current->thread.code = BUS_ADRERR;
202 current->thread.faddr = address;
203 goto send_sig;
204
205map_err:
206 current->thread.signo = SIGSEGV;
207 current->thread.code = SEGV_MAPERR;
208 current->thread.faddr = address;
209 goto send_sig;
210
211acc_err:
212 current->thread.signo = SIGSEGV;
213 current->thread.code = SEGV_ACCERR;
214 current->thread.faddr = address;
215
216send_sig:
217 up_read(&mm->mmap_sem);
218 return send_fault_sig(regs);
219}
220