xref: /openbmc/linux/arch/m68k/mm/fault.c (revision 68acfdcb477abdbf875e33e4a950094c8de08f41)
11da177e4SLinus Torvalds /*
21da177e4SLinus Torvalds  *  linux/arch/m68k/mm/fault.c
31da177e4SLinus Torvalds  *
41da177e4SLinus Torvalds  *  Copyright (C) 1995  Hamish Macdonald
51da177e4SLinus Torvalds  */
61da177e4SLinus Torvalds 
71da177e4SLinus Torvalds #include <linux/mman.h>
81da177e4SLinus Torvalds #include <linux/mm.h>
91da177e4SLinus Torvalds #include <linux/kernel.h>
101da177e4SLinus Torvalds #include <linux/ptrace.h>
111da177e4SLinus Torvalds #include <linux/interrupt.h>
121da177e4SLinus Torvalds #include <linux/module.h>
1370ffdb93SDavid Hildenbrand #include <linux/uaccess.h>
141da177e4SLinus Torvalds 
151da177e4SLinus Torvalds #include <asm/setup.h>
161da177e4SLinus Torvalds #include <asm/traps.h>
171da177e4SLinus Torvalds #include <asm/pgalloc.h>
181da177e4SLinus Torvalds 
191da177e4SLinus Torvalds extern void die_if_kernel(char *, struct pt_regs *, long);
201da177e4SLinus Torvalds 
211da177e4SLinus Torvalds int send_fault_sig(struct pt_regs *regs)
221da177e4SLinus Torvalds {
231da177e4SLinus Torvalds 	siginfo_t siginfo = { 0, 0, 0, };
241da177e4SLinus Torvalds 
251da177e4SLinus Torvalds 	siginfo.si_signo = current->thread.signo;
261da177e4SLinus Torvalds 	siginfo.si_code = current->thread.code;
271da177e4SLinus Torvalds 	siginfo.si_addr = (void *)current->thread.faddr;
288e398f63SGeert Uytterhoeven 	pr_debug("send_fault_sig: %p,%d,%d\n", siginfo.si_addr,
298e398f63SGeert Uytterhoeven 		 siginfo.si_signo, siginfo.si_code);
301da177e4SLinus Torvalds 
311da177e4SLinus Torvalds 	if (user_mode(regs)) {
321da177e4SLinus Torvalds 		force_sig_info(siginfo.si_signo,
331da177e4SLinus Torvalds 			       &siginfo, current);
341da177e4SLinus Torvalds 	} else {
35*68acfdcbSAl Viro 		if (fixup_exception(regs))
361da177e4SLinus Torvalds 			return -1;
371da177e4SLinus Torvalds 
381da177e4SLinus Torvalds 		//if (siginfo.si_signo == SIGBUS)
391da177e4SLinus Torvalds 		//	force_sig_info(siginfo.si_signo,
401da177e4SLinus Torvalds 		//		       &siginfo, current);
411da177e4SLinus Torvalds 
421da177e4SLinus Torvalds 		/*
431da177e4SLinus Torvalds 		 * Oops. The kernel tried to access some bad page. We'll have to
441da177e4SLinus Torvalds 		 * terminate things with extreme prejudice.
451da177e4SLinus Torvalds 		 */
461da177e4SLinus Torvalds 		if ((unsigned long)siginfo.si_addr < PAGE_SIZE)
478e398f63SGeert Uytterhoeven 			pr_alert("Unable to handle kernel NULL pointer dereference");
481da177e4SLinus Torvalds 		else
498e398f63SGeert Uytterhoeven 			pr_alert("Unable to handle kernel access");
508e398f63SGeert Uytterhoeven 		pr_cont(" at virtual address %p\n", siginfo.si_addr);
511da177e4SLinus Torvalds 		die_if_kernel("Oops", regs, 0 /*error_code*/);
521da177e4SLinus Torvalds 		do_exit(SIGKILL);
531da177e4SLinus Torvalds 	}
541da177e4SLinus Torvalds 
551da177e4SLinus Torvalds 	return 1;
561da177e4SLinus Torvalds }
571da177e4SLinus Torvalds 
581da177e4SLinus Torvalds /*
591da177e4SLinus Torvalds  * This routine handles page faults.  It determines the problem, and
601da177e4SLinus Torvalds  * then passes it off to one of the appropriate routines.
611da177e4SLinus Torvalds  *
621da177e4SLinus Torvalds  * error_code:
631da177e4SLinus Torvalds  *	bit 0 == 0 means no page found, 1 means protection fault
641da177e4SLinus Torvalds  *	bit 1 == 0 means read, 1 means write
651da177e4SLinus Torvalds  *
661da177e4SLinus Torvalds  * If this routine detects a bad access, it returns 1, otherwise it
671da177e4SLinus Torvalds  * returns 0.
681da177e4SLinus Torvalds  */
691da177e4SLinus Torvalds int do_page_fault(struct pt_regs *regs, unsigned long address,
701da177e4SLinus Torvalds 			      unsigned long error_code)
711da177e4SLinus Torvalds {
721da177e4SLinus Torvalds 	struct mm_struct *mm = current->mm;
731da177e4SLinus Torvalds 	struct vm_area_struct * vma;
74b637a6b1SKautuk Consul 	int fault;
75b637a6b1SKautuk Consul 	unsigned int flags = FAULT_FLAG_ALLOW_RETRY | FAULT_FLAG_KILLABLE;
761da177e4SLinus Torvalds 
778e398f63SGeert Uytterhoeven 	pr_debug("do page fault:\nregs->sr=%#x, regs->pc=%#lx, address=%#lx, %ld, %p\n",
784e25c0e9SGeert Uytterhoeven 		regs->sr, regs->pc, address, error_code, mm ? mm->pgd : NULL);
791da177e4SLinus Torvalds 
801da177e4SLinus Torvalds 	/*
811da177e4SLinus Torvalds 	 * If we're in an interrupt or have no user
821da177e4SLinus Torvalds 	 * context, we must not take the fault..
831da177e4SLinus Torvalds 	 */
8470ffdb93SDavid Hildenbrand 	if (faulthandler_disabled() || !mm)
851da177e4SLinus Torvalds 		goto no_context;
861da177e4SLinus Torvalds 
87759496baSJohannes Weiner 	if (user_mode(regs))
88759496baSJohannes Weiner 		flags |= FAULT_FLAG_USER;
89b637a6b1SKautuk Consul retry:
901da177e4SLinus Torvalds 	down_read(&mm->mmap_sem);
911da177e4SLinus Torvalds 
921da177e4SLinus Torvalds 	vma = find_vma(mm, address);
931da177e4SLinus Torvalds 	if (!vma)
941da177e4SLinus Torvalds 		goto map_err;
951da177e4SLinus Torvalds 	if (vma->vm_flags & VM_IO)
961da177e4SLinus Torvalds 		goto acc_err;
971da177e4SLinus Torvalds 	if (vma->vm_start <= address)
981da177e4SLinus Torvalds 		goto good_area;
991da177e4SLinus Torvalds 	if (!(vma->vm_flags & VM_GROWSDOWN))
1001da177e4SLinus Torvalds 		goto map_err;
1011da177e4SLinus Torvalds 	if (user_mode(regs)) {
1021da177e4SLinus Torvalds 		/* Accessing the stack below usp is always a bug.  The
1031da177e4SLinus Torvalds 		   "+ 256" is there due to some instructions doing
1041da177e4SLinus Torvalds 		   pre-decrement on the stack and that doesn't show up
1051da177e4SLinus Torvalds 		   until later.  */
1061da177e4SLinus Torvalds 		if (address + 256 < rdusp())
1071da177e4SLinus Torvalds 			goto map_err;
1081da177e4SLinus Torvalds 	}
1091da177e4SLinus Torvalds 	if (expand_stack(vma, address))
1101da177e4SLinus Torvalds 		goto map_err;
1111da177e4SLinus Torvalds 
1121da177e4SLinus Torvalds /*
1131da177e4SLinus Torvalds  * Ok, we have a good vm_area for this memory access, so
1141da177e4SLinus Torvalds  * we can handle it..
1151da177e4SLinus Torvalds  */
1161da177e4SLinus Torvalds good_area:
1178e398f63SGeert Uytterhoeven 	pr_debug("do_page_fault: good_area\n");
1181da177e4SLinus Torvalds 	switch (error_code & 3) {
1191da177e4SLinus Torvalds 		default:	/* 3: write, present */
1201da177e4SLinus Torvalds 			/* fall through */
1211da177e4SLinus Torvalds 		case 2:		/* write, not present */
1221da177e4SLinus Torvalds 			if (!(vma->vm_flags & VM_WRITE))
1231da177e4SLinus Torvalds 				goto acc_err;
124b637a6b1SKautuk Consul 			flags |= FAULT_FLAG_WRITE;
1251da177e4SLinus Torvalds 			break;
1261da177e4SLinus Torvalds 		case 1:		/* read, present */
1271da177e4SLinus Torvalds 			goto acc_err;
1281da177e4SLinus Torvalds 		case 0:		/* read, not present */
129df67b3daSJason Baron 			if (!(vma->vm_flags & (VM_READ | VM_EXEC | VM_WRITE)))
1301da177e4SLinus Torvalds 				goto acc_err;
1311da177e4SLinus Torvalds 	}
1321da177e4SLinus Torvalds 
1331da177e4SLinus Torvalds 	/*
1341da177e4SLinus Torvalds 	 * If for any reason at all we couldn't handle the fault,
1351da177e4SLinus Torvalds 	 * make sure we exit gracefully rather than endlessly redo
1361da177e4SLinus Torvalds 	 * the fault.
1371da177e4SLinus Torvalds 	 */
1381da177e4SLinus Torvalds 
139dcddffd4SKirill A. Shutemov 	fault = handle_mm_fault(vma, address, flags);
1408e398f63SGeert Uytterhoeven 	pr_debug("handle_mm_fault returns %d\n", fault);
141b637a6b1SKautuk Consul 
142b637a6b1SKautuk Consul 	if ((fault & VM_FAULT_RETRY) && fatal_signal_pending(current))
143b637a6b1SKautuk Consul 		return 0;
144b637a6b1SKautuk Consul 
14583c54070SNick Piggin 	if (unlikely(fault & VM_FAULT_ERROR)) {
14683c54070SNick Piggin 		if (fault & VM_FAULT_OOM)
1471da177e4SLinus Torvalds 			goto out_of_memory;
14833692f27SLinus Torvalds 		else if (fault & VM_FAULT_SIGSEGV)
14933692f27SLinus Torvalds 			goto map_err;
15083c54070SNick Piggin 		else if (fault & VM_FAULT_SIGBUS)
15183c54070SNick Piggin 			goto bus_err;
15283c54070SNick Piggin 		BUG();
1531da177e4SLinus Torvalds 	}
154b637a6b1SKautuk Consul 
155b637a6b1SKautuk Consul 	/*
156b637a6b1SKautuk Consul 	 * Major/minor page fault accounting is only done on the
157b637a6b1SKautuk Consul 	 * initial attempt. If we go through a retry, it is extremely
158b637a6b1SKautuk Consul 	 * likely that the page will be found in page cache at that point.
159b637a6b1SKautuk Consul 	 */
160b637a6b1SKautuk Consul 	if (flags & FAULT_FLAG_ALLOW_RETRY) {
16183c54070SNick Piggin 		if (fault & VM_FAULT_MAJOR)
16283c54070SNick Piggin 			current->maj_flt++;
16383c54070SNick Piggin 		else
16483c54070SNick Piggin 			current->min_flt++;
165b637a6b1SKautuk Consul 		if (fault & VM_FAULT_RETRY) {
166b637a6b1SKautuk Consul 			/* Clear FAULT_FLAG_ALLOW_RETRY to avoid any risk
167b637a6b1SKautuk Consul 			 * of starvation. */
168b637a6b1SKautuk Consul 			flags &= ~FAULT_FLAG_ALLOW_RETRY;
16945cac65bSShaohua Li 			flags |= FAULT_FLAG_TRIED;
170b637a6b1SKautuk Consul 
171b637a6b1SKautuk Consul 			/*
172b637a6b1SKautuk Consul 			 * No need to up_read(&mm->mmap_sem) as we would
173b637a6b1SKautuk Consul 			 * have already released it in __lock_page_or_retry
174b637a6b1SKautuk Consul 			 * in mm/filemap.c.
175b637a6b1SKautuk Consul 			 */
176b637a6b1SKautuk Consul 
177b637a6b1SKautuk Consul 			goto retry;
178b637a6b1SKautuk Consul 		}
179b637a6b1SKautuk Consul 	}
1801da177e4SLinus Torvalds 
1811da177e4SLinus Torvalds 	up_read(&mm->mmap_sem);
1821da177e4SLinus Torvalds 	return 0;
1831da177e4SLinus Torvalds 
1841da177e4SLinus Torvalds /*
1851da177e4SLinus Torvalds  * We ran out of memory, or some other thing happened to us that made
1861da177e4SLinus Torvalds  * us unable to handle the page fault gracefully.
1871da177e4SLinus Torvalds  */
1881da177e4SLinus Torvalds out_of_memory:
1891da177e4SLinus Torvalds 	up_read(&mm->mmap_sem);
190adbf6e69SNick Piggin 	if (!user_mode(regs))
191adbf6e69SNick Piggin 		goto no_context;
192adbf6e69SNick Piggin 	pagefault_out_of_memory();
193adbf6e69SNick Piggin 	return 0;
1941da177e4SLinus Torvalds 
1951da177e4SLinus Torvalds no_context:
1961da177e4SLinus Torvalds 	current->thread.signo = SIGBUS;
1971da177e4SLinus Torvalds 	current->thread.faddr = address;
1981da177e4SLinus Torvalds 	return send_fault_sig(regs);
1991da177e4SLinus Torvalds 
2001da177e4SLinus Torvalds bus_err:
2011da177e4SLinus Torvalds 	current->thread.signo = SIGBUS;
2021da177e4SLinus Torvalds 	current->thread.code = BUS_ADRERR;
2031da177e4SLinus Torvalds 	current->thread.faddr = address;
2041da177e4SLinus Torvalds 	goto send_sig;
2051da177e4SLinus Torvalds 
2061da177e4SLinus Torvalds map_err:
2071da177e4SLinus Torvalds 	current->thread.signo = SIGSEGV;
2081da177e4SLinus Torvalds 	current->thread.code = SEGV_MAPERR;
2091da177e4SLinus Torvalds 	current->thread.faddr = address;
2101da177e4SLinus Torvalds 	goto send_sig;
2111da177e4SLinus Torvalds 
2121da177e4SLinus Torvalds acc_err:
2131da177e4SLinus Torvalds 	current->thread.signo = SIGSEGV;
2141da177e4SLinus Torvalds 	current->thread.code = SEGV_ACCERR;
2151da177e4SLinus Torvalds 	current->thread.faddr = address;
2161da177e4SLinus Torvalds 
2171da177e4SLinus Torvalds send_sig:
2181da177e4SLinus Torvalds 	up_read(&mm->mmap_sem);
2191da177e4SLinus Torvalds 	return send_fault_sig(regs);
2201da177e4SLinus Torvalds }
221