xref: /openbmc/linux/arch/x86/kernel/cpu/microcode/intel.c (revision 5a244f48)
1 /*
2  * Intel CPU Microcode Update Driver for Linux
3  *
4  * Copyright (C) 2000-2006 Tigran Aivazian <aivazian.tigran@gmail.com>
5  *		 2006 Shaohua Li <shaohua.li@intel.com>
6  *
7  * Intel CPU microcode early update for Linux
8  *
9  * Copyright (C) 2012 Fenghua Yu <fenghua.yu@intel.com>
10  *		      H Peter Anvin" <hpa@zytor.com>
11  *
12  * This program is free software; you can redistribute it and/or
13  * modify it under the terms of the GNU General Public License
14  * as published by the Free Software Foundation; either version
15  * 2 of the License, or (at your option) any later version.
16  */
17 
18 /*
19  * This needs to be before all headers so that pr_debug in printk.h doesn't turn
20  * printk calls into no_printk().
21  *
22  *#define DEBUG
23  */
24 #define pr_fmt(fmt) "microcode: " fmt
25 
26 #include <linux/earlycpio.h>
27 #include <linux/firmware.h>
28 #include <linux/uaccess.h>
29 #include <linux/vmalloc.h>
30 #include <linux/initrd.h>
31 #include <linux/kernel.h>
32 #include <linux/slab.h>
33 #include <linux/cpu.h>
34 #include <linux/mm.h>
35 
36 #include <asm/microcode_intel.h>
37 #include <asm/processor.h>
38 #include <asm/tlbflush.h>
39 #include <asm/setup.h>
40 #include <asm/msr.h>
41 
42 static const char ucode_path[] = "kernel/x86/microcode/GenuineIntel.bin";
43 
44 /* Current microcode patch used in early patching on the APs. */
45 static struct microcode_intel *intel_ucode_patch;
46 
47 static inline bool cpu_signatures_match(unsigned int s1, unsigned int p1,
48 					unsigned int s2, unsigned int p2)
49 {
50 	if (s1 != s2)
51 		return false;
52 
53 	/* Processor flags are either both 0 ... */
54 	if (!p1 && !p2)
55 		return true;
56 
57 	/* ... or they intersect. */
58 	return p1 & p2;
59 }
60 
61 /*
62  * Returns 1 if update has been found, 0 otherwise.
63  */
64 static int find_matching_signature(void *mc, unsigned int csig, int cpf)
65 {
66 	struct microcode_header_intel *mc_hdr = mc;
67 	struct extended_sigtable *ext_hdr;
68 	struct extended_signature *ext_sig;
69 	int i;
70 
71 	if (cpu_signatures_match(csig, cpf, mc_hdr->sig, mc_hdr->pf))
72 		return 1;
73 
74 	/* Look for ext. headers: */
75 	if (get_totalsize(mc_hdr) <= get_datasize(mc_hdr) + MC_HEADER_SIZE)
76 		return 0;
77 
78 	ext_hdr = mc + get_datasize(mc_hdr) + MC_HEADER_SIZE;
79 	ext_sig = (void *)ext_hdr + EXT_HEADER_SIZE;
80 
81 	for (i = 0; i < ext_hdr->count; i++) {
82 		if (cpu_signatures_match(csig, cpf, ext_sig->sig, ext_sig->pf))
83 			return 1;
84 		ext_sig++;
85 	}
86 	return 0;
87 }
88 
89 /*
90  * Returns 1 if update has been found, 0 otherwise.
91  */
92 static int has_newer_microcode(void *mc, unsigned int csig, int cpf, int new_rev)
93 {
94 	struct microcode_header_intel *mc_hdr = mc;
95 
96 	if (mc_hdr->rev <= new_rev)
97 		return 0;
98 
99 	return find_matching_signature(mc, csig, cpf);
100 }
101 
102 /*
103  * Given CPU signature and a microcode patch, this function finds if the
104  * microcode patch has matching family and model with the CPU.
105  *
106  * %true - if there's a match
107  * %false - otherwise
108  */
109 static bool microcode_matches(struct microcode_header_intel *mc_header,
110 			      unsigned long sig)
111 {
112 	unsigned long total_size = get_totalsize(mc_header);
113 	unsigned long data_size = get_datasize(mc_header);
114 	struct extended_sigtable *ext_header;
115 	unsigned int fam_ucode, model_ucode;
116 	struct extended_signature *ext_sig;
117 	unsigned int fam, model;
118 	int ext_sigcount, i;
119 
120 	fam   = x86_family(sig);
121 	model = x86_model(sig);
122 
123 	fam_ucode   = x86_family(mc_header->sig);
124 	model_ucode = x86_model(mc_header->sig);
125 
126 	if (fam == fam_ucode && model == model_ucode)
127 		return true;
128 
129 	/* Look for ext. headers: */
130 	if (total_size <= data_size + MC_HEADER_SIZE)
131 		return false;
132 
133 	ext_header   = (void *) mc_header + data_size + MC_HEADER_SIZE;
134 	ext_sig      = (void *)ext_header + EXT_HEADER_SIZE;
135 	ext_sigcount = ext_header->count;
136 
137 	for (i = 0; i < ext_sigcount; i++) {
138 		fam_ucode   = x86_family(ext_sig->sig);
139 		model_ucode = x86_model(ext_sig->sig);
140 
141 		if (fam == fam_ucode && model == model_ucode)
142 			return true;
143 
144 		ext_sig++;
145 	}
146 	return false;
147 }
148 
149 static struct ucode_patch *memdup_patch(void *data, unsigned int size)
150 {
151 	struct ucode_patch *p;
152 
153 	p = kzalloc(sizeof(struct ucode_patch), GFP_KERNEL);
154 	if (!p)
155 		return NULL;
156 
157 	p->data = kmemdup(data, size, GFP_KERNEL);
158 	if (!p->data) {
159 		kfree(p);
160 		return NULL;
161 	}
162 
163 	return p;
164 }
165 
166 static void save_microcode_patch(void *data, unsigned int size)
167 {
168 	struct microcode_header_intel *mc_hdr, *mc_saved_hdr;
169 	struct ucode_patch *iter, *tmp, *p = NULL;
170 	bool prev_found = false;
171 	unsigned int sig, pf;
172 
173 	mc_hdr = (struct microcode_header_intel *)data;
174 
175 	list_for_each_entry_safe(iter, tmp, &microcode_cache, plist) {
176 		mc_saved_hdr = (struct microcode_header_intel *)iter->data;
177 		sig	     = mc_saved_hdr->sig;
178 		pf	     = mc_saved_hdr->pf;
179 
180 		if (find_matching_signature(data, sig, pf)) {
181 			prev_found = true;
182 
183 			if (mc_hdr->rev <= mc_saved_hdr->rev)
184 				continue;
185 
186 			p = memdup_patch(data, size);
187 			if (!p)
188 				pr_err("Error allocating buffer %p\n", data);
189 			else
190 				list_replace(&iter->plist, &p->plist);
191 		}
192 	}
193 
194 	/*
195 	 * There weren't any previous patches found in the list cache; save the
196 	 * newly found.
197 	 */
198 	if (!prev_found) {
199 		p = memdup_patch(data, size);
200 		if (!p)
201 			pr_err("Error allocating buffer for %p\n", data);
202 		else
203 			list_add_tail(&p->plist, &microcode_cache);
204 	}
205 
206 	if (!p)
207 		return;
208 
209 	/*
210 	 * Save for early loading. On 32-bit, that needs to be a physical
211 	 * address as the APs are running from physical addresses, before
212 	 * paging has been enabled.
213 	 */
214 	if (IS_ENABLED(CONFIG_X86_32))
215 		intel_ucode_patch = (struct microcode_intel *)__pa_nodebug(p->data);
216 	else
217 		intel_ucode_patch = p->data;
218 }
219 
220 static int microcode_sanity_check(void *mc, int print_err)
221 {
222 	unsigned long total_size, data_size, ext_table_size;
223 	struct microcode_header_intel *mc_header = mc;
224 	struct extended_sigtable *ext_header = NULL;
225 	u32 sum, orig_sum, ext_sigcount = 0, i;
226 	struct extended_signature *ext_sig;
227 
228 	total_size = get_totalsize(mc_header);
229 	data_size = get_datasize(mc_header);
230 
231 	if (data_size + MC_HEADER_SIZE > total_size) {
232 		if (print_err)
233 			pr_err("Error: bad microcode data file size.\n");
234 		return -EINVAL;
235 	}
236 
237 	if (mc_header->ldrver != 1 || mc_header->hdrver != 1) {
238 		if (print_err)
239 			pr_err("Error: invalid/unknown microcode update format.\n");
240 		return -EINVAL;
241 	}
242 
243 	ext_table_size = total_size - (MC_HEADER_SIZE + data_size);
244 	if (ext_table_size) {
245 		u32 ext_table_sum = 0;
246 		u32 *ext_tablep;
247 
248 		if ((ext_table_size < EXT_HEADER_SIZE)
249 		 || ((ext_table_size - EXT_HEADER_SIZE) % EXT_SIGNATURE_SIZE)) {
250 			if (print_err)
251 				pr_err("Error: truncated extended signature table.\n");
252 			return -EINVAL;
253 		}
254 
255 		ext_header = mc + MC_HEADER_SIZE + data_size;
256 		if (ext_table_size != exttable_size(ext_header)) {
257 			if (print_err)
258 				pr_err("Error: extended signature table size mismatch.\n");
259 			return -EFAULT;
260 		}
261 
262 		ext_sigcount = ext_header->count;
263 
264 		/*
265 		 * Check extended table checksum: the sum of all dwords that
266 		 * comprise a valid table must be 0.
267 		 */
268 		ext_tablep = (u32 *)ext_header;
269 
270 		i = ext_table_size / sizeof(u32);
271 		while (i--)
272 			ext_table_sum += ext_tablep[i];
273 
274 		if (ext_table_sum) {
275 			if (print_err)
276 				pr_warn("Bad extended signature table checksum, aborting.\n");
277 			return -EINVAL;
278 		}
279 	}
280 
281 	/*
282 	 * Calculate the checksum of update data and header. The checksum of
283 	 * valid update data and header including the extended signature table
284 	 * must be 0.
285 	 */
286 	orig_sum = 0;
287 	i = (MC_HEADER_SIZE + data_size) / sizeof(u32);
288 	while (i--)
289 		orig_sum += ((u32 *)mc)[i];
290 
291 	if (orig_sum) {
292 		if (print_err)
293 			pr_err("Bad microcode data checksum, aborting.\n");
294 		return -EINVAL;
295 	}
296 
297 	if (!ext_table_size)
298 		return 0;
299 
300 	/*
301 	 * Check extended signature checksum: 0 => valid.
302 	 */
303 	for (i = 0; i < ext_sigcount; i++) {
304 		ext_sig = (void *)ext_header + EXT_HEADER_SIZE +
305 			  EXT_SIGNATURE_SIZE * i;
306 
307 		sum = (mc_header->sig + mc_header->pf + mc_header->cksum) -
308 		      (ext_sig->sig + ext_sig->pf + ext_sig->cksum);
309 		if (sum) {
310 			if (print_err)
311 				pr_err("Bad extended signature checksum, aborting.\n");
312 			return -EINVAL;
313 		}
314 	}
315 	return 0;
316 }
317 
318 /*
319  * Get microcode matching with BSP's model. Only CPUs with the same model as
320  * BSP can stay in the platform.
321  */
322 static struct microcode_intel *
323 scan_microcode(void *data, size_t size, struct ucode_cpu_info *uci, bool save)
324 {
325 	struct microcode_header_intel *mc_header;
326 	struct microcode_intel *patch = NULL;
327 	unsigned int mc_size;
328 
329 	while (size) {
330 		if (size < sizeof(struct microcode_header_intel))
331 			break;
332 
333 		mc_header = (struct microcode_header_intel *)data;
334 
335 		mc_size = get_totalsize(mc_header);
336 		if (!mc_size ||
337 		    mc_size > size ||
338 		    microcode_sanity_check(data, 0) < 0)
339 			break;
340 
341 		size -= mc_size;
342 
343 		if (!microcode_matches(mc_header, uci->cpu_sig.sig)) {
344 			data += mc_size;
345 			continue;
346 		}
347 
348 		if (save) {
349 			save_microcode_patch(data, mc_size);
350 			goto next;
351 		}
352 
353 
354 		if (!patch) {
355 			if (!has_newer_microcode(data,
356 						 uci->cpu_sig.sig,
357 						 uci->cpu_sig.pf,
358 						 uci->cpu_sig.rev))
359 				goto next;
360 
361 		} else {
362 			struct microcode_header_intel *phdr = &patch->hdr;
363 
364 			if (!has_newer_microcode(data,
365 						 phdr->sig,
366 						 phdr->pf,
367 						 phdr->rev))
368 				goto next;
369 		}
370 
371 		/* We have a newer patch, save it. */
372 		patch = data;
373 
374 next:
375 		data += mc_size;
376 	}
377 
378 	if (size)
379 		return NULL;
380 
381 	return patch;
382 }
383 
384 static int collect_cpu_info_early(struct ucode_cpu_info *uci)
385 {
386 	unsigned int val[2];
387 	unsigned int family, model;
388 	struct cpu_signature csig = { 0 };
389 	unsigned int eax, ebx, ecx, edx;
390 
391 	memset(uci, 0, sizeof(*uci));
392 
393 	eax = 0x00000001;
394 	ecx = 0;
395 	native_cpuid(&eax, &ebx, &ecx, &edx);
396 	csig.sig = eax;
397 
398 	family = x86_family(eax);
399 	model  = x86_model(eax);
400 
401 	if ((model >= 5) || (family > 6)) {
402 		/* get processor flags from MSR 0x17 */
403 		native_rdmsr(MSR_IA32_PLATFORM_ID, val[0], val[1]);
404 		csig.pf = 1 << ((val[1] >> 18) & 7);
405 	}
406 
407 	csig.rev = intel_get_microcode_revision();
408 
409 	uci->cpu_sig = csig;
410 	uci->valid = 1;
411 
412 	return 0;
413 }
414 
415 static void show_saved_mc(void)
416 {
417 #ifdef DEBUG
418 	int i = 0, j;
419 	unsigned int sig, pf, rev, total_size, data_size, date;
420 	struct ucode_cpu_info uci;
421 	struct ucode_patch *p;
422 
423 	if (list_empty(&microcode_cache)) {
424 		pr_debug("no microcode data saved.\n");
425 		return;
426 	}
427 
428 	collect_cpu_info_early(&uci);
429 
430 	sig	= uci.cpu_sig.sig;
431 	pf	= uci.cpu_sig.pf;
432 	rev	= uci.cpu_sig.rev;
433 	pr_debug("CPU: sig=0x%x, pf=0x%x, rev=0x%x\n", sig, pf, rev);
434 
435 	list_for_each_entry(p, &microcode_cache, plist) {
436 		struct microcode_header_intel *mc_saved_header;
437 		struct extended_sigtable *ext_header;
438 		struct extended_signature *ext_sig;
439 		int ext_sigcount;
440 
441 		mc_saved_header = (struct microcode_header_intel *)p->data;
442 
443 		sig	= mc_saved_header->sig;
444 		pf	= mc_saved_header->pf;
445 		rev	= mc_saved_header->rev;
446 		date	= mc_saved_header->date;
447 
448 		total_size	= get_totalsize(mc_saved_header);
449 		data_size	= get_datasize(mc_saved_header);
450 
451 		pr_debug("mc_saved[%d]: sig=0x%x, pf=0x%x, rev=0x%x, total size=0x%x, date = %04x-%02x-%02x\n",
452 			 i++, sig, pf, rev, total_size,
453 			 date & 0xffff,
454 			 date >> 24,
455 			 (date >> 16) & 0xff);
456 
457 		/* Look for ext. headers: */
458 		if (total_size <= data_size + MC_HEADER_SIZE)
459 			continue;
460 
461 		ext_header = (void *)mc_saved_header + data_size + MC_HEADER_SIZE;
462 		ext_sigcount = ext_header->count;
463 		ext_sig = (void *)ext_header + EXT_HEADER_SIZE;
464 
465 		for (j = 0; j < ext_sigcount; j++) {
466 			sig = ext_sig->sig;
467 			pf = ext_sig->pf;
468 
469 			pr_debug("\tExtended[%d]: sig=0x%x, pf=0x%x\n",
470 				 j, sig, pf);
471 
472 			ext_sig++;
473 		}
474 	}
475 #endif
476 }
477 
478 /*
479  * Save this microcode patch. It will be loaded early when a CPU is
480  * hot-added or resumes.
481  */
482 static void save_mc_for_early(u8 *mc, unsigned int size)
483 {
484 #ifdef CONFIG_HOTPLUG_CPU
485 	/* Synchronization during CPU hotplug. */
486 	static DEFINE_MUTEX(x86_cpu_microcode_mutex);
487 
488 	mutex_lock(&x86_cpu_microcode_mutex);
489 
490 	save_microcode_patch(mc, size);
491 	show_saved_mc();
492 
493 	mutex_unlock(&x86_cpu_microcode_mutex);
494 #endif
495 }
496 
497 static bool load_builtin_intel_microcode(struct cpio_data *cp)
498 {
499 	unsigned int eax = 1, ebx, ecx = 0, edx;
500 	char name[30];
501 
502 	if (IS_ENABLED(CONFIG_X86_32))
503 		return false;
504 
505 	native_cpuid(&eax, &ebx, &ecx, &edx);
506 
507 	sprintf(name, "intel-ucode/%02x-%02x-%02x",
508 		      x86_family(eax), x86_model(eax), x86_stepping(eax));
509 
510 	return get_builtin_firmware(cp, name);
511 }
512 
513 /*
514  * Print ucode update info.
515  */
516 static void
517 print_ucode_info(struct ucode_cpu_info *uci, unsigned int date)
518 {
519 	pr_info_once("microcode updated early to revision 0x%x, date = %04x-%02x-%02x\n",
520 		     uci->cpu_sig.rev,
521 		     date & 0xffff,
522 		     date >> 24,
523 		     (date >> 16) & 0xff);
524 }
525 
526 #ifdef CONFIG_X86_32
527 
528 static int delay_ucode_info;
529 static int current_mc_date;
530 
531 /*
532  * Print early updated ucode info after printk works. This is delayed info dump.
533  */
534 void show_ucode_info_early(void)
535 {
536 	struct ucode_cpu_info uci;
537 
538 	if (delay_ucode_info) {
539 		collect_cpu_info_early(&uci);
540 		print_ucode_info(&uci, current_mc_date);
541 		delay_ucode_info = 0;
542 	}
543 }
544 
545 /*
546  * At this point, we can not call printk() yet. Delay printing microcode info in
547  * show_ucode_info_early() until printk() works.
548  */
549 static void print_ucode(struct ucode_cpu_info *uci)
550 {
551 	struct microcode_intel *mc;
552 	int *delay_ucode_info_p;
553 	int *current_mc_date_p;
554 
555 	mc = uci->mc;
556 	if (!mc)
557 		return;
558 
559 	delay_ucode_info_p = (int *)__pa_nodebug(&delay_ucode_info);
560 	current_mc_date_p = (int *)__pa_nodebug(&current_mc_date);
561 
562 	*delay_ucode_info_p = 1;
563 	*current_mc_date_p = mc->hdr.date;
564 }
565 #else
566 
567 /*
568  * Flush global tlb. We only do this in x86_64 where paging has been enabled
569  * already and PGE should be enabled as well.
570  */
571 static inline void flush_tlb_early(void)
572 {
573 	__native_flush_tlb_global_irq_disabled();
574 }
575 
576 static inline void print_ucode(struct ucode_cpu_info *uci)
577 {
578 	struct microcode_intel *mc;
579 
580 	mc = uci->mc;
581 	if (!mc)
582 		return;
583 
584 	print_ucode_info(uci, mc->hdr.date);
585 }
586 #endif
587 
588 static int apply_microcode_early(struct ucode_cpu_info *uci, bool early)
589 {
590 	struct microcode_intel *mc;
591 	u32 rev;
592 
593 	mc = uci->mc;
594 	if (!mc)
595 		return 0;
596 
597 	/* write microcode via MSR 0x79 */
598 	native_wrmsrl(MSR_IA32_UCODE_WRITE, (unsigned long)mc->bits);
599 
600 	rev = intel_get_microcode_revision();
601 	if (rev != mc->hdr.rev)
602 		return -1;
603 
604 #ifdef CONFIG_X86_64
605 	/* Flush global tlb. This is precaution. */
606 	flush_tlb_early();
607 #endif
608 	uci->cpu_sig.rev = rev;
609 
610 	if (early)
611 		print_ucode(uci);
612 	else
613 		print_ucode_info(uci, mc->hdr.date);
614 
615 	return 0;
616 }
617 
618 int __init save_microcode_in_initrd_intel(void)
619 {
620 	struct ucode_cpu_info uci;
621 	struct cpio_data cp;
622 
623 	/*
624 	 * initrd is going away, clear patch ptr. We will scan the microcode one
625 	 * last time before jettisoning and save a patch, if found. Then we will
626 	 * update that pointer too, with a stable patch address to use when
627 	 * resuming the cores.
628 	 */
629 	intel_ucode_patch = NULL;
630 
631 	if (!load_builtin_intel_microcode(&cp))
632 		cp = find_microcode_in_initrd(ucode_path, false);
633 
634 	if (!(cp.data && cp.size))
635 		return 0;
636 
637 	collect_cpu_info_early(&uci);
638 
639 	scan_microcode(cp.data, cp.size, &uci, true);
640 
641 	show_saved_mc();
642 
643 	return 0;
644 }
645 
646 /*
647  * @res_patch, output: a pointer to the patch we found.
648  */
649 static struct microcode_intel *__load_ucode_intel(struct ucode_cpu_info *uci)
650 {
651 	static const char *path;
652 	struct cpio_data cp;
653 	bool use_pa;
654 
655 	if (IS_ENABLED(CONFIG_X86_32)) {
656 		path	  = (const char *)__pa_nodebug(ucode_path);
657 		use_pa	  = true;
658 	} else {
659 		path	  = ucode_path;
660 		use_pa	  = false;
661 	}
662 
663 	/* try built-in microcode first */
664 	if (!load_builtin_intel_microcode(&cp))
665 		cp = find_microcode_in_initrd(path, use_pa);
666 
667 	if (!(cp.data && cp.size))
668 		return NULL;
669 
670 	collect_cpu_info_early(uci);
671 
672 	return scan_microcode(cp.data, cp.size, uci, false);
673 }
674 
675 void __init load_ucode_intel_bsp(void)
676 {
677 	struct microcode_intel *patch;
678 	struct ucode_cpu_info uci;
679 
680 	patch = __load_ucode_intel(&uci);
681 	if (!patch)
682 		return;
683 
684 	uci.mc = patch;
685 
686 	apply_microcode_early(&uci, true);
687 }
688 
689 void load_ucode_intel_ap(void)
690 {
691 	struct microcode_intel *patch, **iup;
692 	struct ucode_cpu_info uci;
693 
694 	if (IS_ENABLED(CONFIG_X86_32))
695 		iup = (struct microcode_intel **) __pa_nodebug(&intel_ucode_patch);
696 	else
697 		iup = &intel_ucode_patch;
698 
699 reget:
700 	if (!*iup) {
701 		patch = __load_ucode_intel(&uci);
702 		if (!patch)
703 			return;
704 
705 		*iup = patch;
706 	}
707 
708 	uci.mc = *iup;
709 
710 	if (apply_microcode_early(&uci, true)) {
711 		/* Mixed-silicon system? Try to refetch the proper patch: */
712 		*iup = NULL;
713 
714 		goto reget;
715 	}
716 }
717 
718 static struct microcode_intel *find_patch(struct ucode_cpu_info *uci)
719 {
720 	struct microcode_header_intel *phdr;
721 	struct ucode_patch *iter, *tmp;
722 
723 	list_for_each_entry_safe(iter, tmp, &microcode_cache, plist) {
724 
725 		phdr = (struct microcode_header_intel *)iter->data;
726 
727 		if (phdr->rev <= uci->cpu_sig.rev)
728 			continue;
729 
730 		if (!find_matching_signature(phdr,
731 					     uci->cpu_sig.sig,
732 					     uci->cpu_sig.pf))
733 			continue;
734 
735 		return iter->data;
736 	}
737 	return NULL;
738 }
739 
740 void reload_ucode_intel(void)
741 {
742 	struct microcode_intel *p;
743 	struct ucode_cpu_info uci;
744 
745 	collect_cpu_info_early(&uci);
746 
747 	p = find_patch(&uci);
748 	if (!p)
749 		return;
750 
751 	uci.mc = p;
752 
753 	apply_microcode_early(&uci, false);
754 }
755 
756 static int collect_cpu_info(int cpu_num, struct cpu_signature *csig)
757 {
758 	static struct cpu_signature prev;
759 	struct cpuinfo_x86 *c = &cpu_data(cpu_num);
760 	unsigned int val[2];
761 
762 	memset(csig, 0, sizeof(*csig));
763 
764 	csig->sig = cpuid_eax(0x00000001);
765 
766 	if ((c->x86_model >= 5) || (c->x86 > 6)) {
767 		/* get processor flags from MSR 0x17 */
768 		rdmsr(MSR_IA32_PLATFORM_ID, val[0], val[1]);
769 		csig->pf = 1 << ((val[1] >> 18) & 7);
770 	}
771 
772 	csig->rev = c->microcode;
773 
774 	/* No extra locking on prev, races are harmless. */
775 	if (csig->sig != prev.sig || csig->pf != prev.pf || csig->rev != prev.rev) {
776 		pr_info("sig=0x%x, pf=0x%x, revision=0x%x\n",
777 			csig->sig, csig->pf, csig->rev);
778 		prev = *csig;
779 	}
780 
781 	return 0;
782 }
783 
784 static int apply_microcode_intel(int cpu)
785 {
786 	struct microcode_intel *mc;
787 	struct ucode_cpu_info *uci;
788 	struct cpuinfo_x86 *c;
789 	static int prev_rev;
790 	u32 rev;
791 
792 	/* We should bind the task to the CPU */
793 	if (WARN_ON(raw_smp_processor_id() != cpu))
794 		return -1;
795 
796 	uci = ucode_cpu_info + cpu;
797 	mc = uci->mc;
798 	if (!mc) {
799 		/* Look for a newer patch in our cache: */
800 		mc = find_patch(uci);
801 		if (!mc)
802 			return 0;
803 	}
804 
805 	/* write microcode via MSR 0x79 */
806 	wrmsrl(MSR_IA32_UCODE_WRITE, (unsigned long)mc->bits);
807 
808 	rev = intel_get_microcode_revision();
809 
810 	if (rev != mc->hdr.rev) {
811 		pr_err("CPU%d update to revision 0x%x failed\n",
812 		       cpu, mc->hdr.rev);
813 		return -1;
814 	}
815 
816 	if (rev != prev_rev) {
817 		pr_info("updated to revision 0x%x, date = %04x-%02x-%02x\n",
818 			rev,
819 			mc->hdr.date & 0xffff,
820 			mc->hdr.date >> 24,
821 			(mc->hdr.date >> 16) & 0xff);
822 		prev_rev = rev;
823 	}
824 
825 	c = &cpu_data(cpu);
826 
827 	uci->cpu_sig.rev = rev;
828 	c->microcode = rev;
829 
830 	return 0;
831 }
832 
833 static enum ucode_state generic_load_microcode(int cpu, void *data, size_t size,
834 				int (*get_ucode_data)(void *, const void *, size_t))
835 {
836 	struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
837 	u8 *ucode_ptr = data, *new_mc = NULL, *mc = NULL;
838 	int new_rev = uci->cpu_sig.rev;
839 	unsigned int leftover = size;
840 	unsigned int curr_mc_size = 0, new_mc_size = 0;
841 	unsigned int csig, cpf;
842 
843 	while (leftover) {
844 		struct microcode_header_intel mc_header;
845 		unsigned int mc_size;
846 
847 		if (leftover < sizeof(mc_header)) {
848 			pr_err("error! Truncated header in microcode data file\n");
849 			break;
850 		}
851 
852 		if (get_ucode_data(&mc_header, ucode_ptr, sizeof(mc_header)))
853 			break;
854 
855 		mc_size = get_totalsize(&mc_header);
856 		if (!mc_size || mc_size > leftover) {
857 			pr_err("error! Bad data in microcode data file\n");
858 			break;
859 		}
860 
861 		/* For performance reasons, reuse mc area when possible */
862 		if (!mc || mc_size > curr_mc_size) {
863 			vfree(mc);
864 			mc = vmalloc(mc_size);
865 			if (!mc)
866 				break;
867 			curr_mc_size = mc_size;
868 		}
869 
870 		if (get_ucode_data(mc, ucode_ptr, mc_size) ||
871 		    microcode_sanity_check(mc, 1) < 0) {
872 			break;
873 		}
874 
875 		csig = uci->cpu_sig.sig;
876 		cpf = uci->cpu_sig.pf;
877 		if (has_newer_microcode(mc, csig, cpf, new_rev)) {
878 			vfree(new_mc);
879 			new_rev = mc_header.rev;
880 			new_mc  = mc;
881 			new_mc_size = mc_size;
882 			mc = NULL;	/* trigger new vmalloc */
883 		}
884 
885 		ucode_ptr += mc_size;
886 		leftover  -= mc_size;
887 	}
888 
889 	vfree(mc);
890 
891 	if (leftover) {
892 		vfree(new_mc);
893 		return UCODE_ERROR;
894 	}
895 
896 	if (!new_mc)
897 		return UCODE_NFOUND;
898 
899 	vfree(uci->mc);
900 	uci->mc = (struct microcode_intel *)new_mc;
901 
902 	/*
903 	 * If early loading microcode is supported, save this mc into
904 	 * permanent memory. So it will be loaded early when a CPU is hot added
905 	 * or resumes.
906 	 */
907 	save_mc_for_early(new_mc, new_mc_size);
908 
909 	pr_debug("CPU%d found a matching microcode update with version 0x%x (current=0x%x)\n",
910 		 cpu, new_rev, uci->cpu_sig.rev);
911 
912 	return UCODE_OK;
913 }
914 
915 static int get_ucode_fw(void *to, const void *from, size_t n)
916 {
917 	memcpy(to, from, n);
918 	return 0;
919 }
920 
921 static enum ucode_state request_microcode_fw(int cpu, struct device *device,
922 					     bool refresh_fw)
923 {
924 	char name[30];
925 	struct cpuinfo_x86 *c = &cpu_data(cpu);
926 	const struct firmware *firmware;
927 	enum ucode_state ret;
928 
929 	sprintf(name, "intel-ucode/%02x-%02x-%02x",
930 		c->x86, c->x86_model, c->x86_mask);
931 
932 	if (request_firmware_direct(&firmware, name, device)) {
933 		pr_debug("data file %s load failed\n", name);
934 		return UCODE_NFOUND;
935 	}
936 
937 	ret = generic_load_microcode(cpu, (void *)firmware->data,
938 				     firmware->size, &get_ucode_fw);
939 
940 	release_firmware(firmware);
941 
942 	return ret;
943 }
944 
945 static int get_ucode_user(void *to, const void *from, size_t n)
946 {
947 	return copy_from_user(to, from, n);
948 }
949 
950 static enum ucode_state
951 request_microcode_user(int cpu, const void __user *buf, size_t size)
952 {
953 	return generic_load_microcode(cpu, (void *)buf, size, &get_ucode_user);
954 }
955 
956 static struct microcode_ops microcode_intel_ops = {
957 	.request_microcode_user		  = request_microcode_user,
958 	.request_microcode_fw             = request_microcode_fw,
959 	.collect_cpu_info                 = collect_cpu_info,
960 	.apply_microcode                  = apply_microcode_intel,
961 };
962 
963 struct microcode_ops * __init init_intel_microcode(void)
964 {
965 	struct cpuinfo_x86 *c = &boot_cpu_data;
966 
967 	if (c->x86_vendor != X86_VENDOR_INTEL || c->x86 < 6 ||
968 	    cpu_has(c, X86_FEATURE_IA64)) {
969 		pr_err("Intel CPU family 0x%x not supported\n", c->x86);
970 		return NULL;
971 	}
972 
973 	return &microcode_intel_ops;
974 }
975