From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.6 required=3.0 tests=DKIM_INVALID,DKIM_SIGNED, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PATCH,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id C310AC2BA17 for ; Mon, 6 Apr 2020 15:24:23 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 85ADD21473 for ; Mon, 6 Apr 2020 15:24:23 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=infradead.org header.i=@infradead.org header.b="Cozjwd6F" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728887AbgDFPYW (ORCPT ); Mon, 6 Apr 2020 11:24:22 -0400 Received: from bombadil.infradead.org ([198.137.202.133]:44378 "EHLO bombadil.infradead.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1728736AbgDFPYV (ORCPT ); Mon, 6 Apr 2020 11:24:21 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=bombadil.20170209; h=In-Reply-To:Content-Type:MIME-Version :References:Message-ID:Subject:Cc:To:From:Date:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=k+uN+3/6+RBKxO7k/z3Ph/1QpXh2lLykbBu1TqvrrBA=; b=Cozjwd6FbNfkss4ulm7ZGJxUlw 65BaLtRNwWM4kbyV7n4TuuWni83u8L/KqEyYaH0vMoG3WDn75nemvejwloq9BqY/FxIpWmDP1s5V+ uxPslQmSgbkwmN9FI2KmZ0PFi8y0SUcfxNP7C5gf25uRXPsFTThK+0hVYGDS/4+HFywXUaHTGl4E/ zBEskFQ8kV9Oe+31YaJyOGver/vVIk2V3WYjqRkbTsZX1jYjKXfFqHymGlpC5f9nN5Ynb6hHP+CiM jsbUNX11tuBAumTjE7ihDdKj8nwDRThvCJUYVe2gtGV6uetcw7vLg5/MOmujEaprwzMr4xCtwAD1r Xfp65nxw==; Received: from hch by bombadil.infradead.org with local (Exim 4.92.3 #3 (Red Hat Linux)) id 1jLTbf-0001Ib-Ua; Mon, 06 Apr 2020 15:24:11 +0000 Date: Mon, 6 Apr 2020 08:24:11 -0700 From: Christoph Hellwig To: Peter Zijlstra Cc: Christoph Hellwig , Sean Christopherson , Thomas Gleixner , Ingo Molnar , Borislav Petkov , x86@kernel.org, "H. Peter Anvin" , linux-kernel@vger.kernel.org, "Kenneth R. Crudup" , Jessica Yu , Rasmus Villemoes , Paolo Bonzini , Fenghua Yu , Xiaoyao Li , Nadav Amit , Thomas Hellstrom , Tony Luck , Steven Rostedt , Greg Kroah-Hartman , Jann Horn , Kees Cook , David Laight , Doug Covelli Subject: Re: [RFC PATCH] x86/split_lock: Disable SLD if an unaware (out-of-tree) module enables VMX Message-ID: <20200406152411.GA25652@infradead.org> References: <20200403163007.6463-1-sean.j.christopherson@intel.com> <20200406125010.GA29306@infradead.org> <20200406140403.GL20730@hirez.programming.kicks-ass.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20200406140403.GL20730@hirez.programming.kicks-ass.net> X-SRS-Rewrite: SMTP reverse-path rewritten from by bombadil.infradead.org. See http://www.infradead.org/rpr.html Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Apr 06, 2020 at 04:04:03PM +0200, Peter Zijlstra wrote: > On Mon, Apr 06, 2020 at 05:50:10AM -0700, Christoph Hellwig wrote: > > On Fri, Apr 03, 2020 at 09:30:07AM -0700, Sean Christopherson wrote: > > > Hook into native CR4 writes to disable split-lock detection if CR4.VMXE > > > is toggled on by an SDL-unaware entity, e.g. an out-of-tree hypervisor > > > module. Most/all VMX-based hypervisors blindly reflect #AC exceptions > > > into the guest, or don't intercept #AC in the first place. With SLD > > > enabled, this results in unexpected #AC faults in the guest, leading to > > > crashes in the guest and other undesirable behavior. > > > > Out of tree modules do not matter, so we should not add code just to > > work around broken third party code. If you really feel strongly just > > make sure something they rely on for their hacks stops being exported > > and they are properly broken. > > Something like so then? > > I couldn't find any in-tree users for unmap_kernel_range*(), zsmalloc.c can be built modular. Not that I think it should.. > and this > removes __get_vm_area() and with the ability to custom ranges. It also > removes map_vm_area() and replaces it with map_vm_area_nx() which kills > adding executable maps. The pbh/electra change looks sensible. ipu3 as said really should use vmap, with that map_vm_area can also become unexported. In fact with a vmap variant that allos passing the type of memory for /proc/vmallocinfo we can just kill off map_vm_area enrirely and fold it into the two remaining callers. I'll prepare proper series for the vmalloc area cleanups if you don't mind. > > --- > diff --git a/arch/powerpc/include/asm/pasemi_dma.h b/arch/powerpc/include/asm/pasemi_dma.h > index 712a0b32120f..305c54d56244 100644 > --- a/arch/powerpc/include/asm/pasemi_dma.h > +++ b/arch/powerpc/include/asm/pasemi_dma.h > @@ -523,4 +523,6 @@ extern void pasemi_dma_free_fun(int fun); > /* Initialize the library, must be called before any other functions */ > extern int pasemi_dma_init(void); > > +extern struct vm_struct *get_phb_area(unsigned long size, unsigned long flags); > + > #endif /* ASM_PASEMI_DMA_H */ > diff --git a/arch/powerpc/platforms/pasemi/dma_lib.c b/arch/powerpc/platforms/pasemi/dma_lib.c > index 270fa3c0d372..0aae02df061d 100644 > --- a/arch/powerpc/platforms/pasemi/dma_lib.c > +++ b/arch/powerpc/platforms/pasemi/dma_lib.c > @@ -617,3 +617,10 @@ int pasemi_dma_init(void) > return err; > } > EXPORT_SYMBOL(pasemi_dma_init); > + > +struct vm_struct *get_phb_area(unsigned long size, unsigned long flags) > +{ > + return __get_vm_area_node(size, 1, flags, PHB_IO_BASE, PHB_IO_END, NUMA_NO_NODE, > + GFP_KERNEL, __builtin_return_address(0)); > +} > +EXPORT_SYMBOL_GPL(get_phb_area); > diff --git a/arch/x86/include/asm/pgtable_types.h b/arch/x86/include/asm/pgtable_types.h > index 65c2ecd730c5..0bd5ea46f1d2 100644 > --- a/arch/x86/include/asm/pgtable_types.h > +++ b/arch/x86/include/asm/pgtable_types.h > @@ -274,6 +274,11 @@ typedef struct pgprot { pgprotval_t pgprot; } pgprot_t; > > typedef struct { pgdval_t pgd; } pgd_t; > > +static inline pgprot_t pgprot_nx(pgprot_t prot) > +{ > + return __pgprot(pgprot_val(prot) | _PAGE_NX); > +} > + > #ifdef CONFIG_X86_PAE > > /* > diff --git a/drivers/pcmcia/electra_cf.c b/drivers/pcmcia/electra_cf.c > index f2741c04289d..42eb242b29f1 100644 > --- a/drivers/pcmcia/electra_cf.c > +++ b/drivers/pcmcia/electra_cf.c > @@ -22,6 +22,8 @@ > #include > #include > > +#include > + > #include > > static const char driver_name[] = "electra-cf"; > @@ -204,7 +206,7 @@ static int electra_cf_probe(struct platform_device *ofdev) > cf->mem_base = ioremap(cf->mem_phys, cf->mem_size); > cf->io_size = PAGE_ALIGN(resource_size(&io)); > > - area = __get_vm_area(cf->io_size, 0, PHB_IO_BASE, PHB_IO_END); > + area = get_phb_area(cf->io_size, 0); > if (area == NULL) { > status = -ENOMEM; > goto fail1; > diff --git a/drivers/staging/media/ipu3/ipu3-dmamap.c b/drivers/staging/media/ipu3/ipu3-dmamap.c > index 7431322379f6..fc3fe85c340c 100644 > --- a/drivers/staging/media/ipu3/ipu3-dmamap.c > +++ b/drivers/staging/media/ipu3/ipu3-dmamap.c > @@ -124,13 +124,13 @@ void *imgu_dmamap_alloc(struct imgu_device *imgu, struct imgu_css_map *map, > } > > /* Now grab a virtual region */ > - map->vma = __get_vm_area(size, VM_USERMAP, VMALLOC_START, VMALLOC_END); > + map->vma = get_vm_area(size, VM_USERMAP); > if (!map->vma) > goto out_unmap; > > map->vma->pages = pages; > /* And map it in KVA */ > - if (map_vm_area(map->vma, PAGE_KERNEL, pages)) > + if (map_vm_area_nx(map->vma, PAGE_KERNEL, pages)) > goto out_vunmap; > > map->size = size; > diff --git a/include/asm-generic/pgtable.h b/include/asm-generic/pgtable.h > index e2e2bef07dd2..ee66c1f8b141 100644 > --- a/include/asm-generic/pgtable.h > +++ b/include/asm-generic/pgtable.h > @@ -490,6 +490,10 @@ static inline int arch_unmap_one(struct mm_struct *mm, > #define flush_tlb_fix_spurious_fault(vma, address) flush_tlb_page(vma, address) > #endif > > +#ifndef pgprot_nx > +#define pgprot_nx(prot) (prot) > +#endif > + > #ifndef pgprot_noncached > #define pgprot_noncached(prot) (prot) > #endif > diff --git a/mm/vmalloc.c b/mm/vmalloc.c > index 6b8eeb0ecee5..a1c5faa6042e 100644 > --- a/mm/vmalloc.c > +++ b/mm/vmalloc.c > @@ -2029,7 +2029,6 @@ void unmap_kernel_range_noflush(unsigned long addr, unsigned long size) > { > vunmap_page_range(addr, addr + size); > } > -EXPORT_SYMBOL_GPL(unmap_kernel_range_noflush); > > /** > * unmap_kernel_range - unmap kernel VM area and flush cache and TLB > @@ -2047,7 +2046,6 @@ void unmap_kernel_range(unsigned long addr, unsigned long size) > vunmap_page_range(addr, end); > flush_tlb_kernel_range(addr, end); > } > -EXPORT_SYMBOL_GPL(unmap_kernel_range); > > int map_vm_area(struct vm_struct *area, pgprot_t prot, struct page **pages) > { > @@ -2059,7 +2057,12 @@ int map_vm_area(struct vm_struct *area, pgprot_t prot, struct page **pages) > > return err > 0 ? 0 : err; > } > -EXPORT_SYMBOL_GPL(map_vm_area); > + > +int map_vm_area_nx(struct vm_struct *area, pgprot prot, struct page **pages) > +{ > + return map_vm_area(area, pgprot_nx(prot), pages); > +} > +EXPORT_SYMBOL_GPL(map_vm_area_nx); > > static inline void setup_vmalloc_vm_locked(struct vm_struct *vm, > struct vmap_area *va, unsigned long flags, const void *caller) > @@ -2133,7 +2136,6 @@ struct vm_struct *__get_vm_area(unsigned long size, unsigned long flags, > return __get_vm_area_node(size, 1, flags, start, end, NUMA_NO_NODE, > GFP_KERNEL, __builtin_return_address(0)); > } > -EXPORT_SYMBOL_GPL(__get_vm_area); > > struct vm_struct *__get_vm_area_caller(unsigned long size, unsigned long flags, > unsigned long start, unsigned long end, > @@ -2160,6 +2162,7 @@ struct vm_struct *get_vm_area(unsigned long size, unsigned long flags) > NUMA_NO_NODE, GFP_KERNEL, > __builtin_return_address(0)); > } > +EXPORT_SYMBOL_GPL(get_vm_area); > > struct vm_struct *get_vm_area_caller(unsigned long size, unsigned long flags, > const void *caller) ---end quoted text---