1675a0813SHarvey Harrison /* 2675a0813SHarvey Harrison * Flexible mmap layout support 3675a0813SHarvey Harrison * 4675a0813SHarvey Harrison * Based on code by Ingo Molnar and Andi Kleen, copyrighted 5675a0813SHarvey Harrison * as follows: 6675a0813SHarvey Harrison * 78f47e163SIngo Molnar * Copyright 2003-2009 Red Hat Inc. 8675a0813SHarvey Harrison * All Rights Reserved. 9675a0813SHarvey Harrison * Copyright 2005 Andi Kleen, SUSE Labs. 10675a0813SHarvey Harrison * Copyright 2007 Jiri Kosina, SUSE Labs. 11675a0813SHarvey Harrison * 12675a0813SHarvey Harrison * This program is free software; you can redistribute it and/or modify 13675a0813SHarvey Harrison * it under the terms of the GNU General Public License as published by 14675a0813SHarvey Harrison * the Free Software Foundation; either version 2 of the License, or 15675a0813SHarvey Harrison * (at your option) any later version. 16675a0813SHarvey Harrison * 17675a0813SHarvey Harrison * This program is distributed in the hope that it will be useful, 18675a0813SHarvey Harrison * but WITHOUT ANY WARRANTY; without even the implied warranty of 19675a0813SHarvey Harrison * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 20675a0813SHarvey Harrison * GNU General Public License for more details. 21675a0813SHarvey Harrison * 22675a0813SHarvey Harrison * You should have received a copy of the GNU General Public License 23675a0813SHarvey Harrison * along with this program; if not, write to the Free Software 24675a0813SHarvey Harrison * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 25675a0813SHarvey Harrison */ 26675a0813SHarvey Harrison 27675a0813SHarvey Harrison #include <linux/personality.h> 28675a0813SHarvey Harrison #include <linux/mm.h> 29675a0813SHarvey Harrison #include <linux/random.h> 30675a0813SHarvey Harrison #include <linux/limits.h> 31675a0813SHarvey Harrison #include <linux/sched.h> 3280938332SMichal Hocko #include <asm/elf.h> 3380938332SMichal Hocko 34*9387f774SBorislav Petkov struct __read_mostly va_alignment va_align = { 35*9387f774SBorislav Petkov .flags = -1, 36*9387f774SBorislav Petkov }; 37*9387f774SBorislav Petkov 3880938332SMichal Hocko static unsigned int stack_maxrandom_size(void) 3980938332SMichal Hocko { 4080938332SMichal Hocko unsigned int max = 0; 4180938332SMichal Hocko if ((current->flags & PF_RANDOMIZE) && 4280938332SMichal Hocko !(current->personality & ADDR_NO_RANDOMIZE)) { 4380938332SMichal Hocko max = ((-1U) & STACK_RND_MASK) << PAGE_SHIFT; 4480938332SMichal Hocko } 4580938332SMichal Hocko 4680938332SMichal Hocko return max; 4780938332SMichal Hocko } 4880938332SMichal Hocko 49675a0813SHarvey Harrison /* 50675a0813SHarvey Harrison * Top of mmap area (just below the process stack). 51675a0813SHarvey Harrison * 5280938332SMichal Hocko * Leave an at least ~128 MB hole with possible stack randomization. 53675a0813SHarvey Harrison */ 5480938332SMichal Hocko #define MIN_GAP (128*1024*1024UL + stack_maxrandom_size()) 55675a0813SHarvey Harrison #define MAX_GAP (TASK_SIZE/6*5) 56675a0813SHarvey Harrison 57675a0813SHarvey Harrison static int mmap_is_legacy(void) 58675a0813SHarvey Harrison { 59675a0813SHarvey Harrison if (current->personality & ADDR_COMPAT_LAYOUT) 60675a0813SHarvey Harrison return 1; 61675a0813SHarvey Harrison 622854e72bSJiri Slaby if (rlimit(RLIMIT_STACK) == RLIM_INFINITY) 63675a0813SHarvey Harrison return 1; 64675a0813SHarvey Harrison 65675a0813SHarvey Harrison return sysctl_legacy_va_layout; 66675a0813SHarvey Harrison } 67675a0813SHarvey Harrison 68675a0813SHarvey Harrison static unsigned long mmap_rnd(void) 69675a0813SHarvey Harrison { 70675a0813SHarvey Harrison unsigned long rnd = 0; 71675a0813SHarvey Harrison 72675a0813SHarvey Harrison /* 73675a0813SHarvey Harrison * 8 bits of randomness in 32bit mmaps, 20 address space bits 74675a0813SHarvey Harrison * 28 bits of randomness in 64bit mmaps, 40 address space bits 75675a0813SHarvey Harrison */ 76675a0813SHarvey Harrison if (current->flags & PF_RANDOMIZE) { 77675a0813SHarvey Harrison if (mmap_is_ia32()) 78675a0813SHarvey Harrison rnd = (long)get_random_int() % (1<<8); 79675a0813SHarvey Harrison else 80675a0813SHarvey Harrison rnd = (long)(get_random_int() % (1<<28)); 81675a0813SHarvey Harrison } 82675a0813SHarvey Harrison return rnd << PAGE_SHIFT; 83675a0813SHarvey Harrison } 84675a0813SHarvey Harrison 85675a0813SHarvey Harrison static unsigned long mmap_base(void) 86675a0813SHarvey Harrison { 872854e72bSJiri Slaby unsigned long gap = rlimit(RLIMIT_STACK); 88675a0813SHarvey Harrison 89675a0813SHarvey Harrison if (gap < MIN_GAP) 90675a0813SHarvey Harrison gap = MIN_GAP; 91675a0813SHarvey Harrison else if (gap > MAX_GAP) 92675a0813SHarvey Harrison gap = MAX_GAP; 93675a0813SHarvey Harrison 94675a0813SHarvey Harrison return PAGE_ALIGN(TASK_SIZE - gap - mmap_rnd()); 95675a0813SHarvey Harrison } 96675a0813SHarvey Harrison 97675a0813SHarvey Harrison /* 98675a0813SHarvey Harrison * Bottom-up (legacy) layout on X86_32 did not support randomization, X86_64 99675a0813SHarvey Harrison * does, but not when emulating X86_32 100675a0813SHarvey Harrison */ 101675a0813SHarvey Harrison static unsigned long mmap_legacy_base(void) 102675a0813SHarvey Harrison { 103675a0813SHarvey Harrison if (mmap_is_ia32()) 104675a0813SHarvey Harrison return TASK_UNMAPPED_BASE; 105675a0813SHarvey Harrison else 106675a0813SHarvey Harrison return TASK_UNMAPPED_BASE + mmap_rnd(); 107675a0813SHarvey Harrison } 108675a0813SHarvey Harrison 109675a0813SHarvey Harrison /* 110675a0813SHarvey Harrison * This function, called very early during the creation of a new 111675a0813SHarvey Harrison * process VM image, sets up which VM layout function to use: 112675a0813SHarvey Harrison */ 113675a0813SHarvey Harrison void arch_pick_mmap_layout(struct mm_struct *mm) 114675a0813SHarvey Harrison { 115675a0813SHarvey Harrison if (mmap_is_legacy()) { 116675a0813SHarvey Harrison mm->mmap_base = mmap_legacy_base(); 117675a0813SHarvey Harrison mm->get_unmapped_area = arch_get_unmapped_area; 118675a0813SHarvey Harrison mm->unmap_area = arch_unmap_area; 119675a0813SHarvey Harrison } else { 120675a0813SHarvey Harrison mm->mmap_base = mmap_base(); 121675a0813SHarvey Harrison mm->get_unmapped_area = arch_get_unmapped_area_topdown; 122675a0813SHarvey Harrison mm->unmap_area = arch_unmap_area_topdown; 123675a0813SHarvey Harrison } 124675a0813SHarvey Harrison } 125