1
2
3
4
5
6
7
8
9
10
11
12
13
14
15#include <linux/signal.h>
16#include <linux/personality.h>
17#include <linux/kallsyms.h>
18#include <linux/spinlock.h>
19#include <linux/uaccess.h>
20#include <linux/hardirq.h>
21#include <linux/kdebug.h>
22#include <linux/module.h>
23#include <linux/kexec.h>
24#include <linux/bug.h>
25#include <linux/delay.h>
26#include <linux/init.h>
27#include <linux/sched.h>
28
29#include <linux/atomic.h>
30#include <asm/cacheflush.h>
31#include <asm/exception.h>
32#include <asm/unistd.h>
33#include <asm/traps.h>
34#include <asm/unwind.h>
35#include <asm/tls.h>
36#include <asm/system_misc.h>
37
38#include "signal.h"
39
40static const char *handler[]= { "prefetch abort", "data abort", "address exception", "interrupt" };
41
42void *vectors_page;
43
44#ifdef CONFIG_DEBUG_USER
45unsigned int user_debug;
46
47static int __init user_debug_setup(char *str)
48{
49 get_option(&str, &user_debug);
50 return 1;
51}
52__setup("user_debug=", user_debug_setup);
53#endif
54
55static void dump_mem(const char *, const char *, unsigned long, unsigned long);
56
57void dump_backtrace_entry(unsigned long where, unsigned long from, unsigned long frame)
58{
59#ifdef CONFIG_KALLSYMS
60 printk("[<%08lx>] (%pS) from [<%08lx>] (%pS)\n", where, (void *)where, from, (void *)from);
61#else
62 printk("Function entered at [<%08lx>] from [<%08lx>]\n", where, from);
63#endif
64
65 if (in_exception_text(where))
66 dump_mem("", "Exception stack", frame + 4, frame + 4 + sizeof(struct pt_regs));
67}
68
69#ifndef CONFIG_ARM_UNWIND
70
71
72
73
74
75static int verify_stack(unsigned long sp)
76{
77 if (sp < PAGE_OFFSET ||
78 (sp > (unsigned long)high_memory && high_memory != NULL))
79 return -EFAULT;
80
81 return 0;
82}
83#endif
84
85
86
87
88static void dump_mem(const char *lvl, const char *str, unsigned long bottom,
89 unsigned long top)
90{
91 unsigned long first;
92 mm_segment_t fs;
93 int i;
94
95
96
97
98
99
100 fs = get_fs();
101 set_fs(KERNEL_DS);
102
103 printk("%s%s(0x%08lx to 0x%08lx)\n", lvl, str, bottom, top);
104
105 for (first = bottom & ~31; first < top; first += 32) {
106 unsigned long p;
107 char str[sizeof(" 12345678") * 8 + 1];
108
109 memset(str, ' ', sizeof(str));
110 str[sizeof(str) - 1] = '\0';
111
112 for (p = first, i = 0; i < 8 && p < top; i++, p += 4) {
113 if (p >= bottom && p < top) {
114 unsigned long val;
115 if (__get_user(val, (unsigned long *)p) == 0)
116 sprintf(str + i * 9, " %08lx", val);
117 else
118 sprintf(str + i * 9, " ????????");
119 }
120 }
121 printk("%s%04lx:%s\n", lvl, first & 0xffff, str);
122 }
123
124 set_fs(fs);
125}
126
127static void dump_instr(const char *lvl, struct pt_regs *regs)
128{
129 unsigned long addr = instruction_pointer(regs);
130 const int thumb = thumb_mode(regs);
131 const int width = thumb ? 4 : 8;
132 mm_segment_t fs;
133 char str[sizeof("00000000 ") * 5 + 2 + 1], *p = str;
134 int i;
135
136
137
138
139
140
141 fs = get_fs();
142 set_fs(KERNEL_DS);
143
144 for (i = -4; i < 1 + !!thumb; i++) {
145 unsigned int val, bad;
146
147 if (thumb)
148 bad = __get_user(val, &((u16 *)addr)[i]);
149 else
150 bad = __get_user(val, &((u32 *)addr)[i]);
151
152 if (!bad)
153 p += sprintf(p, i == 0 ? "(%0*x) " : "%0*x ",
154 width, val);
155 else {
156 p += sprintf(p, "bad PC value");
157 break;
158 }
159 }
160 printk("%sCode: %s\n", lvl, str);
161
162 set_fs(fs);
163}
164
165#ifdef CONFIG_ARM_UNWIND
166static inline void dump_backtrace(struct pt_regs *regs, struct task_struct *tsk)
167{
168 unwind_backtrace(regs, tsk);
169}
170#else
171static void dump_backtrace(struct pt_regs *regs, struct task_struct *tsk)
172{
173 unsigned int fp, mode;
174 int ok = 1;
175
176 printk("Backtrace: ");
177
178 if (!tsk)
179 tsk = current;
180
181 if (regs) {
182 fp = regs->ARM_fp;
183 mode = processor_mode(regs);
184 } else if (tsk != current) {
185 fp = thread_saved_fp(tsk);
186 mode = 0x10;
187 } else {
188 asm("mov %0, fp" : "=r" (fp) : : "cc");
189 mode = 0x10;
190 }
191
192 if (!fp) {
193 printk("no frame pointer");
194 ok = 0;
195 } else if (verify_stack(fp)) {
196 printk("invalid frame pointer 0x%08x", fp);
197 ok = 0;
198 } else if (fp < (unsigned long)end_of_stack(tsk))
199 printk("frame pointer underflow");
200 printk("\n");
201
202 if (ok)
203 c_backtrace(fp, mode);
204}
205#endif
206
207void dump_stack(void)
208{
209 dump_backtrace(NULL, NULL);
210}
211
212EXPORT_SYMBOL(dump_stack);
213
214void show_stack(struct task_struct *tsk, unsigned long *sp)
215{
216 dump_backtrace(NULL, tsk);
217 barrier();
218}
219
220#ifdef CONFIG_PREEMPT
221#define S_PREEMPT " PREEMPT"
222#else
223#define S_PREEMPT ""
224#endif
225#ifdef CONFIG_SMP
226#define S_SMP " SMP"
227#else
228#define S_SMP ""
229#endif
230#ifdef CONFIG_THUMB2_KERNEL
231#define S_ISA " THUMB2"
232#else
233#define S_ISA " ARM"
234#endif
235
236static int __die(const char *str, int err, struct pt_regs *regs)
237{
238 struct task_struct *tsk = current;
239 static int die_counter;
240 int ret;
241
242 printk(KERN_EMERG "Internal error: %s: %x [#%d]" S_PREEMPT S_SMP
243 S_ISA "\n", str, err, ++die_counter);
244
245
246 ret = notify_die(DIE_OOPS, str, regs, err, tsk->thread.trap_no, SIGSEGV);
247 if (ret == NOTIFY_STOP)
248 return 1;
249
250 print_modules();
251 __show_regs(regs);
252 printk(KERN_EMERG "Process %.*s (pid: %d, stack limit = 0x%p)\n",
253 TASK_COMM_LEN, tsk->comm, task_pid_nr(tsk), end_of_stack(tsk));
254
255 if (!user_mode(regs) || in_interrupt()) {
256 dump_mem(KERN_EMERG, "Stack: ", regs->ARM_sp,
257 THREAD_SIZE + (unsigned long)task_stack_page(tsk));
258 dump_backtrace(regs, tsk);
259 dump_instr(KERN_EMERG, regs);
260 }
261
262 return 0;
263}
264
265static arch_spinlock_t die_lock = __ARCH_SPIN_LOCK_UNLOCKED;
266static int die_owner = -1;
267static unsigned int die_nest_count;
268
269static unsigned long oops_begin(void)
270{
271 int cpu;
272 unsigned long flags;
273
274 oops_enter();
275
276
277 raw_local_irq_save(flags);
278 cpu = smp_processor_id();
279 if (!arch_spin_trylock(&die_lock)) {
280 if (cpu == die_owner)
281 ;
282 else
283 arch_spin_lock(&die_lock);
284 }
285 die_nest_count++;
286 die_owner = cpu;
287 console_verbose();
288 bust_spinlocks(1);
289 return flags;
290}
291
292static void oops_end(unsigned long flags, struct pt_regs *regs, int signr)
293{
294 if (regs && kexec_should_crash(current))
295 crash_kexec(regs);
296
297 bust_spinlocks(0);
298 die_owner = -1;
299 add_taint(TAINT_DIE);
300 die_nest_count--;
301 if (!die_nest_count)
302
303 arch_spin_unlock(&die_lock);
304 raw_local_irq_restore(flags);
305 oops_exit();
306
307 if (in_interrupt())
308 panic("Fatal exception in interrupt");
309 if (panic_on_oops)
310 panic("Fatal exception");
311 if (signr)
312 do_exit(signr);
313}
314
315
316
317
318void die(const char *str, struct pt_regs *regs, int err)
319{
320 enum bug_trap_type bug_type = BUG_TRAP_TYPE_NONE;
321 unsigned long flags = oops_begin();
322 int sig = SIGSEGV;
323
324 if (!user_mode(regs))
325 bug_type = report_bug(regs->ARM_pc, regs);
326 if (bug_type != BUG_TRAP_TYPE_NONE)
327 str = "Oops - BUG";
328
329 if (__die(str, err, regs))
330 sig = 0;
331
332 oops_end(flags, regs, sig);
333}
334
335void arm_notify_die(const char *str, struct pt_regs *regs,
336 struct siginfo *info, unsigned long err, unsigned long trap)
337{
338 if (user_mode(regs)) {
339 current->thread.error_code = err;
340 current->thread.trap_no = trap;
341
342 force_sig_info(info->si_signo, info, current);
343 } else {
344 die(str, regs, err);
345 }
346}
347
348#ifdef CONFIG_GENERIC_BUG
349
350int is_valid_bugaddr(unsigned long pc)
351{
352#ifdef CONFIG_THUMB2_KERNEL
353 unsigned short bkpt;
354#else
355 unsigned long bkpt;
356#endif
357
358 if (probe_kernel_address((unsigned *)pc, bkpt))
359 return 0;
360
361 return bkpt == BUG_INSTR_VALUE;
362}
363
364#endif
365
366static LIST_HEAD(undef_hook);
367static DEFINE_RAW_SPINLOCK(undef_lock);
368
369void register_undef_hook(struct undef_hook *hook)
370{
371 unsigned long flags;
372
373 raw_spin_lock_irqsave(&undef_lock, flags);
374 list_add(&hook->node, &undef_hook);
375 raw_spin_unlock_irqrestore(&undef_lock, flags);
376}
377
378void unregister_undef_hook(struct undef_hook *hook)
379{
380 unsigned long flags;
381
382 raw_spin_lock_irqsave(&undef_lock, flags);
383 list_del(&hook->node);
384 raw_spin_unlock_irqrestore(&undef_lock, flags);
385}
386
387static int call_undef_hook(struct pt_regs *regs, unsigned int instr)
388{
389 struct undef_hook *hook;
390 unsigned long flags;
391 int (*fn)(struct pt_regs *regs, unsigned int instr) = NULL;
392
393 raw_spin_lock_irqsave(&undef_lock, flags);
394 list_for_each_entry(hook, &undef_hook, node)
395 if ((instr & hook->instr_mask) == hook->instr_val &&
396 (regs->ARM_cpsr & hook->cpsr_mask) == hook->cpsr_val)
397 fn = hook->fn;
398 raw_spin_unlock_irqrestore(&undef_lock, flags);
399
400 return fn ? fn(regs, instr) : 1;
401}
402
403asmlinkage void __exception do_undefinstr(struct pt_regs *regs)
404{
405 unsigned int instr;
406 siginfo_t info;
407 void __user *pc;
408
409 pc = (void __user *)instruction_pointer(regs);
410
411 if (processor_mode(regs) == SVC_MODE) {
412#ifdef CONFIG_THUMB2_KERNEL
413 if (thumb_mode(regs)) {
414 instr = ((u16 *)pc)[0];
415 if (is_wide_instruction(instr)) {
416 instr <<= 16;
417 instr |= ((u16 *)pc)[1];
418 }
419 } else
420#endif
421 instr = *(u32 *) pc;
422 } else if (thumb_mode(regs)) {
423 if (get_user(instr, (u16 __user *)pc))
424 goto die_sig;
425 if (is_wide_instruction(instr)) {
426 unsigned int instr2;
427 if (get_user(instr2, (u16 __user *)pc+1))
428 goto die_sig;
429 instr <<= 16;
430 instr |= instr2;
431 }
432 } else if (get_user(instr, (u32 __user *)pc)) {
433 goto die_sig;
434 }
435
436 if (call_undef_hook(regs, instr) == 0)
437 return;
438
439die_sig:
440#ifdef CONFIG_DEBUG_USER
441 if (user_debug & UDBG_UNDEFINED) {
442 printk(KERN_INFO "%s (%d): undefined instruction: pc=%p\n",
443 current->comm, task_pid_nr(current), pc);
444 dump_instr(KERN_INFO, regs);
445 }
446#endif
447
448 info.si_signo = SIGILL;
449 info.si_errno = 0;
450 info.si_code = ILL_ILLOPC;
451 info.si_addr = pc;
452
453 arm_notify_die("Oops - undefined instruction", regs, &info, 0, 6);
454}
455
456asmlinkage void do_unexp_fiq (struct pt_regs *regs)
457{
458 printk("Hmm. Unexpected FIQ received, but trying to continue\n");
459 printk("You may have a hardware problem...\n");
460}
461
462
463
464
465
466
467
468asmlinkage void bad_mode(struct pt_regs *regs, int reason)
469{
470 console_verbose();
471
472 printk(KERN_CRIT "Bad mode in %s handler detected\n", handler[reason]);
473
474 die("Oops - bad mode", regs, 0);
475 local_irq_disable();
476 panic("bad mode");
477}
478
479static int bad_syscall(int n, struct pt_regs *regs)
480{
481 struct thread_info *thread = current_thread_info();
482 siginfo_t info;
483
484 if ((current->personality & PER_MASK) != PER_LINUX &&
485 thread->exec_domain->handler) {
486 thread->exec_domain->handler(n, regs);
487 return regs->ARM_r0;
488 }
489
490#ifdef CONFIG_DEBUG_USER
491 if (user_debug & UDBG_SYSCALL) {
492 printk(KERN_ERR "[%d] %s: obsolete system call %08x.\n",
493 task_pid_nr(current), current->comm, n);
494 dump_instr(KERN_ERR, regs);
495 }
496#endif
497
498 info.si_signo = SIGILL;
499 info.si_errno = 0;
500 info.si_code = ILL_ILLTRP;
501 info.si_addr = (void __user *)instruction_pointer(regs) -
502 (thumb_mode(regs) ? 2 : 4);
503
504 arm_notify_die("Oops - bad syscall", regs, &info, n, 0);
505
506 return regs->ARM_r0;
507}
508
509static inline int
510do_cache_op(unsigned long start, unsigned long end, int flags)
511{
512 struct mm_struct *mm = current->active_mm;
513 struct vm_area_struct *vma;
514
515 if (end < start || flags)
516 return -EINVAL;
517
518 down_read(&mm->mmap_sem);
519 vma = find_vma(mm, start);
520 if (vma && vma->vm_start < end) {
521 if (start < vma->vm_start)
522 start = vma->vm_start;
523 if (end > vma->vm_end)
524 end = vma->vm_end;
525
526 up_read(&mm->mmap_sem);
527 return flush_cache_user_range(start, end);
528 }
529 up_read(&mm->mmap_sem);
530 return -EINVAL;
531}
532
533
534
535
536
537#define NR(x) ((__ARM_NR_##x) - __ARM_NR_BASE)
538asmlinkage int arm_syscall(int no, struct pt_regs *regs)
539{
540 struct thread_info *thread = current_thread_info();
541 siginfo_t info;
542
543 if ((no >> 16) != (__ARM_NR_BASE>> 16))
544 return bad_syscall(no, regs);
545
546 switch (no & 0xffff) {
547 case 0:
548 info.si_signo = SIGSEGV;
549 info.si_errno = 0;
550 info.si_code = SEGV_MAPERR;
551 info.si_addr = NULL;
552
553 arm_notify_die("branch through zero", regs, &info, 0, 0);
554 return 0;
555
556 case NR(breakpoint):
557 regs->ARM_pc -= thumb_mode(regs) ? 2 : 4;
558 ptrace_break(current, regs);
559 return regs->ARM_r0;
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575 case NR(cacheflush):
576 return do_cache_op(regs->ARM_r0, regs->ARM_r1, regs->ARM_r2);
577
578 case NR(usr26):
579 if (!(elf_hwcap & HWCAP_26BIT))
580 break;
581 regs->ARM_cpsr &= ~MODE32_BIT;
582 return regs->ARM_r0;
583
584 case NR(usr32):
585 if (!(elf_hwcap & HWCAP_26BIT))
586 break;
587 regs->ARM_cpsr |= MODE32_BIT;
588 return regs->ARM_r0;
589
590 case NR(set_tls):
591 thread->tp_value = regs->ARM_r0;
592 if (tls_emu)
593 return 0;
594 if (has_tls_reg) {
595 asm ("mcr p15, 0, %0, c13, c0, 3"
596 : : "r" (regs->ARM_r0));
597 } else {
598
599
600
601
602
603
604 *((unsigned int *)0xffff0ff0) = regs->ARM_r0;
605 }
606 return 0;
607
608#ifdef CONFIG_NEEDS_SYSCALL_FOR_CMPXCHG
609
610
611
612
613
614
615
616
617
618
619
620 case NR(cmpxchg):
621 for (;;) {
622 extern void do_DataAbort(unsigned long addr, unsigned int fsr,
623 struct pt_regs *regs);
624 unsigned long val;
625 unsigned long addr = regs->ARM_r2;
626 struct mm_struct *mm = current->mm;
627 pgd_t *pgd; pmd_t *pmd; pte_t *pte;
628 spinlock_t *ptl;
629
630 regs->ARM_cpsr &= ~PSR_C_BIT;
631 down_read(&mm->mmap_sem);
632 pgd = pgd_offset(mm, addr);
633 if (!pgd_present(*pgd))
634 goto bad_access;
635 pmd = pmd_offset(pgd, addr);
636 if (!pmd_present(*pmd))
637 goto bad_access;
638 pte = pte_offset_map_lock(mm, pmd, addr, &ptl);
639 if (!pte_present(*pte) || !pte_write(*pte) || !pte_dirty(*pte)) {
640 pte_unmap_unlock(pte, ptl);
641 goto bad_access;
642 }
643 val = *(unsigned long *)addr;
644 val -= regs->ARM_r0;
645 if (val == 0) {
646 *(unsigned long *)addr = regs->ARM_r1;
647 regs->ARM_cpsr |= PSR_C_BIT;
648 }
649 pte_unmap_unlock(pte, ptl);
650 up_read(&mm->mmap_sem);
651 return val;
652
653 bad_access:
654 up_read(&mm->mmap_sem);
655
656 do_DataAbort(addr, 15 + (1 << 11), regs);
657 }
658#endif
659
660 default:
661
662
663
664
665 if ((no & 0xffff) <= 0x7ff)
666 return -ENOSYS;
667 break;
668 }
669#ifdef CONFIG_DEBUG_USER
670
671
672
673
674 if (user_debug & UDBG_SYSCALL) {
675 printk("[%d] %s: arm syscall %d\n",
676 task_pid_nr(current), current->comm, no);
677 dump_instr("", regs);
678 if (user_mode(regs)) {
679 __show_regs(regs);
680 c_backtrace(regs->ARM_fp, processor_mode(regs));
681 }
682 }
683#endif
684 info.si_signo = SIGILL;
685 info.si_errno = 0;
686 info.si_code = ILL_ILLTRP;
687 info.si_addr = (void __user *)instruction_pointer(regs) -
688 (thumb_mode(regs) ? 2 : 4);
689
690 arm_notify_die("Oops - bad syscall(2)", regs, &info, no, 0);
691 return 0;
692}
693
694#ifdef CONFIG_TLS_REG_EMUL
695
696
697
698
699
700
701
702
703
704static int get_tp_trap(struct pt_regs *regs, unsigned int instr)
705{
706 int reg = (instr >> 12) & 15;
707 if (reg == 15)
708 return 1;
709 regs->uregs[reg] = current_thread_info()->tp_value;
710 regs->ARM_pc += 4;
711 return 0;
712}
713
714static struct undef_hook arm_mrc_hook = {
715 .instr_mask = 0x0fff0fff,
716 .instr_val = 0x0e1d0f70,
717 .cpsr_mask = PSR_T_BIT,
718 .cpsr_val = 0,
719 .fn = get_tp_trap,
720};
721
722static int __init arm_mrc_hook_init(void)
723{
724 register_undef_hook(&arm_mrc_hook);
725 return 0;
726}
727
728late_initcall(arm_mrc_hook_init);
729
730#endif
731
732void __bad_xchg(volatile void *ptr, int size)
733{
734 printk("xchg: bad data size: pc 0x%p, ptr 0x%p, size %d\n",
735 __builtin_return_address(0), ptr, size);
736 BUG();
737}
738EXPORT_SYMBOL(__bad_xchg);
739
740
741
742
743
744asmlinkage void
745baddataabort(int code, unsigned long instr, struct pt_regs *regs)
746{
747 unsigned long addr = instruction_pointer(regs);
748 siginfo_t info;
749
750#ifdef CONFIG_DEBUG_USER
751 if (user_debug & UDBG_BADABORT) {
752 printk(KERN_ERR "[%d] %s: bad data abort: code %d instr 0x%08lx\n",
753 task_pid_nr(current), current->comm, code, instr);
754 dump_instr(KERN_ERR, regs);
755 show_pte(current->mm, addr);
756 }
757#endif
758
759 info.si_signo = SIGILL;
760 info.si_errno = 0;
761 info.si_code = ILL_ILLOPC;
762 info.si_addr = (void __user *)addr;
763
764 arm_notify_die("unknown data abort code", regs, &info, instr, 0);
765}
766
767void __readwrite_bug(const char *fn)
768{
769 printk("%s called, but not implemented\n", fn);
770 BUG();
771}
772EXPORT_SYMBOL(__readwrite_bug);
773
774void __pte_error(const char *file, int line, pte_t pte)
775{
776 printk("%s:%d: bad pte %08llx.\n", file, line, (long long)pte_val(pte));
777}
778
779void __pmd_error(const char *file, int line, pmd_t pmd)
780{
781 printk("%s:%d: bad pmd %08llx.\n", file, line, (long long)pmd_val(pmd));
782}
783
784void __pgd_error(const char *file, int line, pgd_t pgd)
785{
786 printk("%s:%d: bad pgd %08llx.\n", file, line, (long long)pgd_val(pgd));
787}
788
789asmlinkage void __div0(void)
790{
791 printk("Division by zero in kernel.\n");
792 dump_stack();
793}
794EXPORT_SYMBOL(__div0);
795
796void abort(void)
797{
798 BUG();
799
800
801 panic("Oops failed to kill thread");
802}
803EXPORT_SYMBOL(abort);
804
805void __init trap_init(void)
806{
807 return;
808}
809
810static void __init kuser_get_tls_init(unsigned long vectors)
811{
812
813
814
815
816 if (tls_emu || has_tls_reg)
817 memcpy((void *)vectors + 0xfe0, (void *)vectors + 0xfe8, 4);
818}
819
820void __init early_trap_init(void *vectors_base)
821{
822 unsigned long vectors = (unsigned long)vectors_base;
823 extern char __stubs_start[], __stubs_end[];
824 extern char __vectors_start[], __vectors_end[];
825 extern char __kuser_helper_start[], __kuser_helper_end[];
826 int kuser_sz = __kuser_helper_end - __kuser_helper_start;
827
828 vectors_page = vectors_base;
829
830
831
832
833
834
835 memcpy((void *)vectors, __vectors_start, __vectors_end - __vectors_start);
836 memcpy((void *)vectors + 0x200, __stubs_start, __stubs_end - __stubs_start);
837 memcpy((void *)vectors + 0x1000 - kuser_sz, __kuser_helper_start, kuser_sz);
838
839
840
841
842 kuser_get_tls_init(vectors);
843
844
845
846
847
848 memcpy((void *)(vectors + KERN_SIGRETURN_CODE - CONFIG_VECTORS_BASE),
849 sigreturn_codes, sizeof(sigreturn_codes));
850
851 flush_icache_range(vectors, vectors + PAGE_SIZE);
852 modify_domain(DOMAIN_USER, DOMAIN_CLIENT);
853}
854