188df125fSHeiko Carstens /* 288df125fSHeiko Carstens * Access kernel memory without faulting -- s390 specific implementation. 388df125fSHeiko Carstens * 488df125fSHeiko Carstens * Copyright IBM Corp. 2009 588df125fSHeiko Carstens * 688df125fSHeiko Carstens * Author(s): Heiko Carstens <heiko.carstens@de.ibm.com>, 788df125fSHeiko Carstens * 888df125fSHeiko Carstens */ 988df125fSHeiko Carstens 1088df125fSHeiko Carstens #include <linux/uaccess.h> 1188df125fSHeiko Carstens #include <linux/kernel.h> 1288df125fSHeiko Carstens #include <linux/types.h> 1388df125fSHeiko Carstens #include <linux/errno.h> 1488df125fSHeiko Carstens #include <asm/system.h> 1588df125fSHeiko Carstens 1688df125fSHeiko Carstens /* 1788df125fSHeiko Carstens * This function writes to kernel memory bypassing DAT and possible 1888df125fSHeiko Carstens * write protection. It copies one to four bytes from src to dst 1988df125fSHeiko Carstens * using the stura instruction. 2088df125fSHeiko Carstens * Returns the number of bytes copied or -EFAULT. 2188df125fSHeiko Carstens */ 2288df125fSHeiko Carstens static long probe_kernel_write_odd(void *dst, void *src, size_t size) 2388df125fSHeiko Carstens { 2488df125fSHeiko Carstens unsigned long count, aligned; 2588df125fSHeiko Carstens int offset, mask; 2688df125fSHeiko Carstens int rc = -EFAULT; 2788df125fSHeiko Carstens 2888df125fSHeiko Carstens aligned = (unsigned long) dst & ~3UL; 2988df125fSHeiko Carstens offset = (unsigned long) dst & 3; 3088df125fSHeiko Carstens count = min_t(unsigned long, 4 - offset, size); 3188df125fSHeiko Carstens mask = (0xf << (4 - count)) & 0xf; 3288df125fSHeiko Carstens mask >>= offset; 3388df125fSHeiko Carstens asm volatile( 3488df125fSHeiko Carstens " bras 1,0f\n" 3588df125fSHeiko Carstens " icm 0,0,0(%3)\n" 3688df125fSHeiko Carstens "0: l 0,0(%1)\n" 3788df125fSHeiko Carstens " lra %1,0(%1)\n" 3888df125fSHeiko Carstens "1: ex %2,0(1)\n" 3988df125fSHeiko Carstens "2: stura 0,%1\n" 4088df125fSHeiko Carstens " la %0,0\n" 4188df125fSHeiko Carstens "3:\n" 4288df125fSHeiko Carstens EX_TABLE(0b,3b) EX_TABLE(1b,3b) EX_TABLE(2b,3b) 4388df125fSHeiko Carstens : "+d" (rc), "+a" (aligned) 4488df125fSHeiko Carstens : "a" (mask), "a" (src) : "cc", "memory", "0", "1"); 4588df125fSHeiko Carstens return rc ? rc : count; 4688df125fSHeiko Carstens } 4788df125fSHeiko Carstens 4888df125fSHeiko Carstens long probe_kernel_write(void *dst, void *src, size_t size) 4988df125fSHeiko Carstens { 5088df125fSHeiko Carstens long copied = 0; 5188df125fSHeiko Carstens 5288df125fSHeiko Carstens while (size) { 5388df125fSHeiko Carstens copied = probe_kernel_write_odd(dst, src, size); 5488df125fSHeiko Carstens if (copied < 0) 5588df125fSHeiko Carstens break; 5688df125fSHeiko Carstens dst += copied; 5788df125fSHeiko Carstens src += copied; 5888df125fSHeiko Carstens size -= copied; 5988df125fSHeiko Carstens } 6088df125fSHeiko Carstens return copied < 0 ? -EFAULT : 0; 6188df125fSHeiko Carstens } 62*92fe3132SMichael Holzheu 63*92fe3132SMichael Holzheu int memcpy_real(void *dest, void *src, size_t count) 64*92fe3132SMichael Holzheu { 65*92fe3132SMichael Holzheu register unsigned long _dest asm("2") = (unsigned long) dest; 66*92fe3132SMichael Holzheu register unsigned long _len1 asm("3") = (unsigned long) count; 67*92fe3132SMichael Holzheu register unsigned long _src asm("4") = (unsigned long) src; 68*92fe3132SMichael Holzheu register unsigned long _len2 asm("5") = (unsigned long) count; 69*92fe3132SMichael Holzheu unsigned long flags; 70*92fe3132SMichael Holzheu int rc = -EFAULT; 71*92fe3132SMichael Holzheu 72*92fe3132SMichael Holzheu if (!count) 73*92fe3132SMichael Holzheu return 0; 74*92fe3132SMichael Holzheu flags = __raw_local_irq_stnsm(0xf8UL); 75*92fe3132SMichael Holzheu asm volatile ( 76*92fe3132SMichael Holzheu "0: mvcle %1,%2,0x0\n" 77*92fe3132SMichael Holzheu "1: jo 0b\n" 78*92fe3132SMichael Holzheu " lhi %0,0x0\n" 79*92fe3132SMichael Holzheu "2:\n" 80*92fe3132SMichael Holzheu EX_TABLE(1b,2b) 81*92fe3132SMichael Holzheu : "+d" (rc), "+d" (_dest), "+d" (_src), "+d" (_len1), 82*92fe3132SMichael Holzheu "+d" (_len2), "=m" (*((long *) dest)) 83*92fe3132SMichael Holzheu : "m" (*((long *) src)) 84*92fe3132SMichael Holzheu : "cc", "memory"); 85*92fe3132SMichael Holzheu __raw_local_irq_ssm(flags); 86*92fe3132SMichael Holzheu return rc; 87*92fe3132SMichael Holzheu } 88