xref: /openbmc/linux/arch/m68k/mm/fault.c (revision b24413180f5600bcb3bb70fbed5cf186b60864bd)
1*b2441318SGreg Kroah-Hartman // SPDX-License-Identifier: GPL-2.0
21da177e4SLinus Torvalds /*
31da177e4SLinus Torvalds  *  linux/arch/m68k/mm/fault.c
41da177e4SLinus Torvalds  *
51da177e4SLinus Torvalds  *  Copyright (C) 1995  Hamish Macdonald
61da177e4SLinus Torvalds  */
71da177e4SLinus Torvalds 
81da177e4SLinus Torvalds #include <linux/mman.h>
91da177e4SLinus Torvalds #include <linux/mm.h>
101da177e4SLinus Torvalds #include <linux/kernel.h>
111da177e4SLinus Torvalds #include <linux/ptrace.h>
121da177e4SLinus Torvalds #include <linux/interrupt.h>
131da177e4SLinus Torvalds #include <linux/module.h>
1470ffdb93SDavid Hildenbrand #include <linux/uaccess.h>
151da177e4SLinus Torvalds 
161da177e4SLinus Torvalds #include <asm/setup.h>
171da177e4SLinus Torvalds #include <asm/traps.h>
181da177e4SLinus Torvalds #include <asm/pgalloc.h>
191da177e4SLinus Torvalds 
201da177e4SLinus Torvalds extern void die_if_kernel(char *, struct pt_regs *, long);
211da177e4SLinus Torvalds 
221da177e4SLinus Torvalds int send_fault_sig(struct pt_regs *regs)
231da177e4SLinus Torvalds {
241da177e4SLinus Torvalds 	siginfo_t siginfo = { 0, 0, 0, };
251da177e4SLinus Torvalds 
261da177e4SLinus Torvalds 	siginfo.si_signo = current->thread.signo;
271da177e4SLinus Torvalds 	siginfo.si_code = current->thread.code;
281da177e4SLinus Torvalds 	siginfo.si_addr = (void *)current->thread.faddr;
298e398f63SGeert Uytterhoeven 	pr_debug("send_fault_sig: %p,%d,%d\n", siginfo.si_addr,
308e398f63SGeert Uytterhoeven 		 siginfo.si_signo, siginfo.si_code);
311da177e4SLinus Torvalds 
321da177e4SLinus Torvalds 	if (user_mode(regs)) {
331da177e4SLinus Torvalds 		force_sig_info(siginfo.si_signo,
341da177e4SLinus Torvalds 			       &siginfo, current);
351da177e4SLinus Torvalds 	} else {
3668acfdcbSAl Viro 		if (fixup_exception(regs))
371da177e4SLinus Torvalds 			return -1;
381da177e4SLinus Torvalds 
391da177e4SLinus Torvalds 		//if (siginfo.si_signo == SIGBUS)
401da177e4SLinus Torvalds 		//	force_sig_info(siginfo.si_signo,
411da177e4SLinus Torvalds 		//		       &siginfo, current);
421da177e4SLinus Torvalds 
431da177e4SLinus Torvalds 		/*
441da177e4SLinus Torvalds 		 * Oops. The kernel tried to access some bad page. We'll have to
451da177e4SLinus Torvalds 		 * terminate things with extreme prejudice.
461da177e4SLinus Torvalds 		 */
471da177e4SLinus Torvalds 		if ((unsigned long)siginfo.si_addr < PAGE_SIZE)
488e398f63SGeert Uytterhoeven 			pr_alert("Unable to handle kernel NULL pointer dereference");
491da177e4SLinus Torvalds 		else
508e398f63SGeert Uytterhoeven 			pr_alert("Unable to handle kernel access");
518e398f63SGeert Uytterhoeven 		pr_cont(" at virtual address %p\n", siginfo.si_addr);
521da177e4SLinus Torvalds 		die_if_kernel("Oops", regs, 0 /*error_code*/);
531da177e4SLinus Torvalds 		do_exit(SIGKILL);
541da177e4SLinus Torvalds 	}
551da177e4SLinus Torvalds 
561da177e4SLinus Torvalds 	return 1;
571da177e4SLinus Torvalds }
581da177e4SLinus Torvalds 
591da177e4SLinus Torvalds /*
601da177e4SLinus Torvalds  * This routine handles page faults.  It determines the problem, and
611da177e4SLinus Torvalds  * then passes it off to one of the appropriate routines.
621da177e4SLinus Torvalds  *
631da177e4SLinus Torvalds  * error_code:
641da177e4SLinus Torvalds  *	bit 0 == 0 means no page found, 1 means protection fault
651da177e4SLinus Torvalds  *	bit 1 == 0 means read, 1 means write
661da177e4SLinus Torvalds  *
671da177e4SLinus Torvalds  * If this routine detects a bad access, it returns 1, otherwise it
681da177e4SLinus Torvalds  * returns 0.
691da177e4SLinus Torvalds  */
701da177e4SLinus Torvalds int do_page_fault(struct pt_regs *regs, unsigned long address,
711da177e4SLinus Torvalds 			      unsigned long error_code)
721da177e4SLinus Torvalds {
731da177e4SLinus Torvalds 	struct mm_struct *mm = current->mm;
741da177e4SLinus Torvalds 	struct vm_area_struct * vma;
75b637a6b1SKautuk Consul 	int fault;
76b637a6b1SKautuk Consul 	unsigned int flags = FAULT_FLAG_ALLOW_RETRY | FAULT_FLAG_KILLABLE;
771da177e4SLinus Torvalds 
788e398f63SGeert Uytterhoeven 	pr_debug("do page fault:\nregs->sr=%#x, regs->pc=%#lx, address=%#lx, %ld, %p\n",
794e25c0e9SGeert Uytterhoeven 		regs->sr, regs->pc, address, error_code, mm ? mm->pgd : NULL);
801da177e4SLinus Torvalds 
811da177e4SLinus Torvalds 	/*
821da177e4SLinus Torvalds 	 * If we're in an interrupt or have no user
831da177e4SLinus Torvalds 	 * context, we must not take the fault..
841da177e4SLinus Torvalds 	 */
8570ffdb93SDavid Hildenbrand 	if (faulthandler_disabled() || !mm)
861da177e4SLinus Torvalds 		goto no_context;
871da177e4SLinus Torvalds 
88759496baSJohannes Weiner 	if (user_mode(regs))
89759496baSJohannes Weiner 		flags |= FAULT_FLAG_USER;
90b637a6b1SKautuk Consul retry:
911da177e4SLinus Torvalds 	down_read(&mm->mmap_sem);
921da177e4SLinus Torvalds 
931da177e4SLinus Torvalds 	vma = find_vma(mm, address);
941da177e4SLinus Torvalds 	if (!vma)
951da177e4SLinus Torvalds 		goto map_err;
961da177e4SLinus Torvalds 	if (vma->vm_flags & VM_IO)
971da177e4SLinus Torvalds 		goto acc_err;
981da177e4SLinus Torvalds 	if (vma->vm_start <= address)
991da177e4SLinus Torvalds 		goto good_area;
1001da177e4SLinus Torvalds 	if (!(vma->vm_flags & VM_GROWSDOWN))
1011da177e4SLinus Torvalds 		goto map_err;
1021da177e4SLinus Torvalds 	if (user_mode(regs)) {
1031da177e4SLinus Torvalds 		/* Accessing the stack below usp is always a bug.  The
1041da177e4SLinus Torvalds 		   "+ 256" is there due to some instructions doing
1051da177e4SLinus Torvalds 		   pre-decrement on the stack and that doesn't show up
1061da177e4SLinus Torvalds 		   until later.  */
1071da177e4SLinus Torvalds 		if (address + 256 < rdusp())
1081da177e4SLinus Torvalds 			goto map_err;
1091da177e4SLinus Torvalds 	}
1101da177e4SLinus Torvalds 	if (expand_stack(vma, address))
1111da177e4SLinus Torvalds 		goto map_err;
1121da177e4SLinus Torvalds 
1131da177e4SLinus Torvalds /*
1141da177e4SLinus Torvalds  * Ok, we have a good vm_area for this memory access, so
1151da177e4SLinus Torvalds  * we can handle it..
1161da177e4SLinus Torvalds  */
1171da177e4SLinus Torvalds good_area:
1188e398f63SGeert Uytterhoeven 	pr_debug("do_page_fault: good_area\n");
1191da177e4SLinus Torvalds 	switch (error_code & 3) {
1201da177e4SLinus Torvalds 		default:	/* 3: write, present */
1211da177e4SLinus Torvalds 			/* fall through */
1221da177e4SLinus Torvalds 		case 2:		/* write, not present */
1231da177e4SLinus Torvalds 			if (!(vma->vm_flags & VM_WRITE))
1241da177e4SLinus Torvalds 				goto acc_err;
125b637a6b1SKautuk Consul 			flags |= FAULT_FLAG_WRITE;
1261da177e4SLinus Torvalds 			break;
1271da177e4SLinus Torvalds 		case 1:		/* read, present */
1281da177e4SLinus Torvalds 			goto acc_err;
1291da177e4SLinus Torvalds 		case 0:		/* read, not present */
130df67b3daSJason Baron 			if (!(vma->vm_flags & (VM_READ | VM_EXEC | VM_WRITE)))
1311da177e4SLinus Torvalds 				goto acc_err;
1321da177e4SLinus Torvalds 	}
1331da177e4SLinus Torvalds 
1341da177e4SLinus Torvalds 	/*
1351da177e4SLinus Torvalds 	 * If for any reason at all we couldn't handle the fault,
1361da177e4SLinus Torvalds 	 * make sure we exit gracefully rather than endlessly redo
1371da177e4SLinus Torvalds 	 * the fault.
1381da177e4SLinus Torvalds 	 */
1391da177e4SLinus Torvalds 
140dcddffd4SKirill A. Shutemov 	fault = handle_mm_fault(vma, address, flags);
1418e398f63SGeert Uytterhoeven 	pr_debug("handle_mm_fault returns %d\n", fault);
142b637a6b1SKautuk Consul 
143b637a6b1SKautuk Consul 	if ((fault & VM_FAULT_RETRY) && fatal_signal_pending(current))
144b637a6b1SKautuk Consul 		return 0;
145b637a6b1SKautuk Consul 
14683c54070SNick Piggin 	if (unlikely(fault & VM_FAULT_ERROR)) {
14783c54070SNick Piggin 		if (fault & VM_FAULT_OOM)
1481da177e4SLinus Torvalds 			goto out_of_memory;
14933692f27SLinus Torvalds 		else if (fault & VM_FAULT_SIGSEGV)
15033692f27SLinus Torvalds 			goto map_err;
15183c54070SNick Piggin 		else if (fault & VM_FAULT_SIGBUS)
15283c54070SNick Piggin 			goto bus_err;
15383c54070SNick Piggin 		BUG();
1541da177e4SLinus Torvalds 	}
155b637a6b1SKautuk Consul 
156b637a6b1SKautuk Consul 	/*
157b637a6b1SKautuk Consul 	 * Major/minor page fault accounting is only done on the
158b637a6b1SKautuk Consul 	 * initial attempt. If we go through a retry, it is extremely
159b637a6b1SKautuk Consul 	 * likely that the page will be found in page cache at that point.
160b637a6b1SKautuk Consul 	 */
161b637a6b1SKautuk Consul 	if (flags & FAULT_FLAG_ALLOW_RETRY) {
16283c54070SNick Piggin 		if (fault & VM_FAULT_MAJOR)
16383c54070SNick Piggin 			current->maj_flt++;
16483c54070SNick Piggin 		else
16583c54070SNick Piggin 			current->min_flt++;
166b637a6b1SKautuk Consul 		if (fault & VM_FAULT_RETRY) {
167b637a6b1SKautuk Consul 			/* Clear FAULT_FLAG_ALLOW_RETRY to avoid any risk
168b637a6b1SKautuk Consul 			 * of starvation. */
169b637a6b1SKautuk Consul 			flags &= ~FAULT_FLAG_ALLOW_RETRY;
17045cac65bSShaohua Li 			flags |= FAULT_FLAG_TRIED;
171b637a6b1SKautuk Consul 
172b637a6b1SKautuk Consul 			/*
173b637a6b1SKautuk Consul 			 * No need to up_read(&mm->mmap_sem) as we would
174b637a6b1SKautuk Consul 			 * have already released it in __lock_page_or_retry
175b637a6b1SKautuk Consul 			 * in mm/filemap.c.
176b637a6b1SKautuk Consul 			 */
177b637a6b1SKautuk Consul 
178b637a6b1SKautuk Consul 			goto retry;
179b637a6b1SKautuk Consul 		}
180b637a6b1SKautuk Consul 	}
1811da177e4SLinus Torvalds 
1821da177e4SLinus Torvalds 	up_read(&mm->mmap_sem);
1831da177e4SLinus Torvalds 	return 0;
1841da177e4SLinus Torvalds 
1851da177e4SLinus Torvalds /*
1861da177e4SLinus Torvalds  * We ran out of memory, or some other thing happened to us that made
1871da177e4SLinus Torvalds  * us unable to handle the page fault gracefully.
1881da177e4SLinus Torvalds  */
1891da177e4SLinus Torvalds out_of_memory:
1901da177e4SLinus Torvalds 	up_read(&mm->mmap_sem);
191adbf6e69SNick Piggin 	if (!user_mode(regs))
192adbf6e69SNick Piggin 		goto no_context;
193adbf6e69SNick Piggin 	pagefault_out_of_memory();
194adbf6e69SNick Piggin 	return 0;
1951da177e4SLinus Torvalds 
1961da177e4SLinus Torvalds no_context:
1971da177e4SLinus Torvalds 	current->thread.signo = SIGBUS;
1981da177e4SLinus Torvalds 	current->thread.faddr = address;
1991da177e4SLinus Torvalds 	return send_fault_sig(regs);
2001da177e4SLinus Torvalds 
2011da177e4SLinus Torvalds bus_err:
2021da177e4SLinus Torvalds 	current->thread.signo = SIGBUS;
2031da177e4SLinus Torvalds 	current->thread.code = BUS_ADRERR;
2041da177e4SLinus Torvalds 	current->thread.faddr = address;
2051da177e4SLinus Torvalds 	goto send_sig;
2061da177e4SLinus Torvalds 
2071da177e4SLinus Torvalds map_err:
2081da177e4SLinus Torvalds 	current->thread.signo = SIGSEGV;
2091da177e4SLinus Torvalds 	current->thread.code = SEGV_MAPERR;
2101da177e4SLinus Torvalds 	current->thread.faddr = address;
2111da177e4SLinus Torvalds 	goto send_sig;
2121da177e4SLinus Torvalds 
2131da177e4SLinus Torvalds acc_err:
2141da177e4SLinus Torvalds 	current->thread.signo = SIGSEGV;
2151da177e4SLinus Torvalds 	current->thread.code = SEGV_ACCERR;
2161da177e4SLinus Torvalds 	current->thread.faddr = address;
2171da177e4SLinus Torvalds 
2181da177e4SLinus Torvalds send_sig:
2191da177e4SLinus Torvalds 	up_read(&mm->mmap_sem);
2201da177e4SLinus Torvalds 	return send_fault_sig(regs);
2211da177e4SLinus Torvalds }
222