License cleanup: add SPDX GPL-2.0 license identifier to files with no license
Many source files in the tree are missing licensing information, which
makes it harder for compliance tools to determine the correct license.
By default all files without license information are under the default
license of the kernel, which is GPL version 2.
Update the files which contain no license information with the 'GPL-2.0'
SPDX license identifier. The SPDX identifier is a legally binding
shorthand, which can be used instead of the full boiler plate text.
This patch is based on work done by Thomas Gleixner and Kate Stewart and
Philippe Ombredanne.
How this work was done:
Patches were generated and checked against linux-4.14-rc6 for a subset of
the use cases:
- file had no licensing information it it.
- file was a */uapi/* one with no licensing information in it,
- file was a */uapi/* one with existing licensing information,
Further patches will be generated in subsequent months to fix up cases
where non-standard license headers were used, and references to license
had to be inferred by heuristics based on keywords.
The analysis to determine which SPDX License Identifier to be applied to
a file was done in a spreadsheet of side by side results from of the
output of two independent scanners (ScanCode & Windriver) producing SPDX
tag:value files created by Philippe Ombredanne. Philippe prepared the
base worksheet, and did an initial spot review of a few 1000 files.
The 4.13 kernel was the starting point of the analysis with 60,537 files
assessed. Kate Stewart did a file by file comparison of the scanner
results in the spreadsheet to determine which SPDX license identifier(s)
to be applied to the file. She confirmed any determination that was not
immediately clear with lawyers working with the Linux Foundation.
Criteria used to select files for SPDX license identifier tagging was:
- Files considered eligible had to be source code files.
- Make and config files were included as candidates if they contained >5
lines of source
- File already had some variant of a license header in it (even if <5
lines).
All documentation files were explicitly excluded.
The following heuristics were used to determine which SPDX license
identifiers to apply.
- when both scanners couldn't find any license traces, file was
considered to have no license information in it, and the top level
COPYING file license applied.
For non */uapi/* files that summary was:
SPDX license identifier # files
---------------------------------------------------|-------
GPL-2.0 11139
and resulted in the first patch in this series.
If that file was a */uapi/* path one, it was "GPL-2.0 WITH
Linux-syscall-note" otherwise it was "GPL-2.0". Results of that was:
SPDX license identifier # files
---------------------------------------------------|-------
GPL-2.0 WITH Linux-syscall-note 930
and resulted in the second patch in this series.
- if a file had some form of licensing information in it, and was one
of the */uapi/* ones, it was denoted with the Linux-syscall-note if
any GPL family license was found in the file or had no licensing in
it (per prior point). Results summary:
SPDX license identifier # files
---------------------------------------------------|------
GPL-2.0 WITH Linux-syscall-note 270
GPL-2.0+ WITH Linux-syscall-note 169
((GPL-2.0 WITH Linux-syscall-note) OR BSD-2-Clause) 21
((GPL-2.0 WITH Linux-syscall-note) OR BSD-3-Clause) 17
LGPL-2.1+ WITH Linux-syscall-note 15
GPL-1.0+ WITH Linux-syscall-note 14
((GPL-2.0+ WITH Linux-syscall-note) OR BSD-3-Clause) 5
LGPL-2.0+ WITH Linux-syscall-note 4
LGPL-2.1 WITH Linux-syscall-note 3
((GPL-2.0 WITH Linux-syscall-note) OR MIT) 3
((GPL-2.0 WITH Linux-syscall-note) AND MIT) 1
and that resulted in the third patch in this series.
- when the two scanners agreed on the detected license(s), that became
the concluded license(s).
- when there was disagreement between the two scanners (one detected a
license but the other didn't, or they both detected different
licenses) a manual inspection of the file occurred.
- In most cases a manual inspection of the information in the file
resulted in a clear resolution of the license that should apply (and
which scanner probably needed to revisit its heuristics).
- When it was not immediately clear, the license identifier was
confirmed with lawyers working with the Linux Foundation.
- If there was any question as to the appropriate license identifier,
the file was flagged for further research and to be revisited later
in time.
In total, over 70 hours of logged manual review was done on the
spreadsheet to determine the SPDX license identifiers to apply to the
source files by Kate, Philippe, Thomas and, in some cases, confirmation
by lawyers working with the Linux Foundation.
Kate also obtained a third independent scan of the 4.13 code base from
FOSSology, and compared selected files where the other two scanners
disagreed against that SPDX file, to see if there was new insights. The
Windriver scanner is based on an older version of FOSSology in part, so
they are related.
Thomas did random spot checks in about 500 files from the spreadsheets
for the uapi headers and agreed with SPDX license identifier in the
files he inspected. For the non-uapi files Thomas did random spot checks
in about 15000 files.
In initial set of patches against 4.14-rc6, 3 files were found to have
copy/paste license identifier errors, and have been fixed to reflect the
correct identifier.
Additionally Philippe spent 10 hours this week doing a detailed manual
inspection and review of the 12,461 patched files from the initial patch
version early this week with:
- a full scancode scan run, collecting the matched texts, detected
license ids and scores
- reviewing anything where there was a license detected (about 500+
files) to ensure that the applied SPDX license was correct
- reviewing anything where there was no detection but the patch license
was not GPL-2.0 WITH Linux-syscall-note to ensure that the applied
SPDX license was correct
This produced a worksheet with 20 files needing minor correction. This
worksheet was then exported into 3 different .csv files for the
different types of files to be modified.
These .csv files were then reviewed by Greg. Thomas wrote a script to
parse the csv files and add the proper SPDX tag to the file, in the
format that the file expected. This script was further refined by Greg
based on the output to detect more types of files automatically and to
distinguish between header and source .c files (which need different
comment types.) Finally Greg ran the script using the .csv files to
generate the patches.
Reviewed-by: Kate Stewart <kstewart@linuxfoundation.org>
Reviewed-by: Philippe Ombredanne <pombredanne@nexb.com>
Reviewed-by: Thomas Gleixner <tglx@linutronix.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-11-01 22:07:57 +08:00
|
|
|
/* SPDX-License-Identifier: GPL-2.0 */
|
2010-08-03 07:21:22 +08:00
|
|
|
#ifndef BOOT_COMPRESSED_MISC_H
|
|
|
|
|
#define BOOT_COMPRESSED_MISC_H
|
|
|
|
|
|
|
|
|
|
/*
|
2012-11-24 02:19:07 +08:00
|
|
|
* Special hack: we have to be careful, because no indirections are allowed here,
|
|
|
|
|
* and paravirt_ops is a kind of one. As it will only run in baremetal anyway,
|
|
|
|
|
* we just keep it from happening. (This list needs to be extended when new
|
|
|
|
|
* paravirt and debugging variants are added.)
|
2010-08-03 07:21:22 +08:00
|
|
|
*/
|
|
|
|
|
#undef CONFIG_PARAVIRT
|
2018-08-28 15:40:21 +08:00
|
|
|
#undef CONFIG_PARAVIRT_XXL
|
2012-11-24 02:19:07 +08:00
|
|
|
#undef CONFIG_PARAVIRT_SPINLOCKS
|
2015-02-14 06:39:56 +08:00
|
|
|
#undef CONFIG_KASAN
|
2020-12-23 04:02:03 +08:00
|
|
|
#undef CONFIG_KASAN_GENERIC
|
2010-08-03 07:21:22 +08:00
|
|
|
|
2021-06-19 01:57:38 +08:00
|
|
|
#define __NO_FORTIFY
|
|
|
|
|
|
2018-05-18 18:35:23 +08:00
|
|
|
/* cpu_feature_enabled() cannot be used this early */
|
|
|
|
|
#define USE_EARLY_PGTABLE_L5
|
x86/mm: Optimize boot-time paging mode switching cost
By this point we have functioning boot-time switching between 4- and
5-level paging mode. But naive approach comes with cost.
Numbers below are for kernel build, allmodconfig, 5 times.
CONFIG_X86_5LEVEL=n:
Performance counter stats for 'sh -c make -j100 -B -k >/dev/null' (5 runs):
17308719.892691 task-clock:u (msec) # 26.772 CPUs utilized ( +- 0.11% )
0 context-switches:u # 0.000 K/sec
0 cpu-migrations:u # 0.000 K/sec
331,993,164 page-faults:u # 0.019 M/sec ( +- 0.01% )
43,614,978,867,455 cycles:u # 2.520 GHz ( +- 0.01% )
39,371,534,575,126 stalled-cycles-frontend:u # 90.27% frontend cycles idle ( +- 0.09% )
28,363,350,152,428 instructions:u # 0.65 insn per cycle
# 1.39 stalled cycles per insn ( +- 0.00% )
6,316,784,066,413 branches:u # 364.948 M/sec ( +- 0.00% )
250,808,144,781 branch-misses:u # 3.97% of all branches ( +- 0.01% )
646.531974142 seconds time elapsed ( +- 1.15% )
CONFIG_X86_5LEVEL=y:
Performance counter stats for 'sh -c make -j100 -B -k >/dev/null' (5 runs):
17411536.780625 task-clock:u (msec) # 26.426 CPUs utilized ( +- 0.10% )
0 context-switches:u # 0.000 K/sec
0 cpu-migrations:u # 0.000 K/sec
331,868,663 page-faults:u # 0.019 M/sec ( +- 0.01% )
43,865,909,056,301 cycles:u # 2.519 GHz ( +- 0.01% )
39,740,130,365,581 stalled-cycles-frontend:u # 90.59% frontend cycles idle ( +- 0.05% )
28,363,358,997,959 instructions:u # 0.65 insn per cycle
# 1.40 stalled cycles per insn ( +- 0.00% )
6,316,784,937,460 branches:u # 362.793 M/sec ( +- 0.00% )
251,531,919,485 branch-misses:u # 3.98% of all branches ( +- 0.00% )
658.886307752 seconds time elapsed ( +- 0.92% )
The patch tries to fix the performance regression by using
cpu_feature_enabled(X86_FEATURE_LA57) instead of pgtable_l5_enabled in
all hot code paths. These will statically patch the target code for
additional performance.
CONFIG_X86_5LEVEL=y + the patch:
Performance counter stats for 'sh -c make -j100 -B -k >/dev/null' (5 runs):
17381990.268506 task-clock:u (msec) # 26.907 CPUs utilized ( +- 0.19% )
0 context-switches:u # 0.000 K/sec
0 cpu-migrations:u # 0.000 K/sec
331,862,625 page-faults:u # 0.019 M/sec ( +- 0.01% )
43,697,726,320,051 cycles:u # 2.514 GHz ( +- 0.03% )
39,480,408,690,401 stalled-cycles-frontend:u # 90.35% frontend cycles idle ( +- 0.05% )
28,363,394,221,388 instructions:u # 0.65 insn per cycle
# 1.39 stalled cycles per insn ( +- 0.00% )
6,316,794,985,573 branches:u # 363.410 M/sec ( +- 0.00% )
251,013,232,547 branch-misses:u # 3.97% of all branches ( +- 0.01% )
645.991174661 seconds time elapsed ( +- 1.19% )
Unfortunately, this approach doesn't help with text size:
vmlinux.before .text size: 8190319
vmlinux.after .text size: 8200623
The .text section is increased by about 4k. Not sure if we can do anything
about this.
Signed-off-by: Kirill A. Shuemov <kirill.shutemov@linux.intel.com>
Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Andy Lutomirski <luto@kernel.org>
Cc: Arjan van de Ven <arjan@linux.intel.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Borislav Petkov <bp@suse.de>
Cc: Dan Williams <dan.j.williams@intel.com>
Cc: Dave Hansen <dave.hansen@linux.intel.com>
Cc: David Woodhouse <dwmw2@infradead.org>
Cc: Josh Poimboeuf <jpoimboe@redhat.com>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: linux-mm@kvack.org
Link: http://lkml.kernel.org/r/20180216114948.68868-4-kirill.shutemov@linux.intel.com
Signed-off-by: Ingo Molnar <mingo@kernel.org>
2018-02-16 19:49:48 +08:00
|
|
|
|
2010-08-03 07:21:22 +08:00
|
|
|
#include <linux/linkage.h>
|
|
|
|
|
#include <linux/screen_info.h>
|
|
|
|
|
#include <linux/elf.h>
|
|
|
|
|
#include <asm/page.h>
|
|
|
|
|
#include <asm/boot.h>
|
|
|
|
|
#include <asm/bootparam.h>
|
2020-09-07 21:15:14 +08:00
|
|
|
#include <asm/desc_defs.h>
|
2010-08-03 07:21:22 +08:00
|
|
|
|
2022-04-06 07:29:21 +08:00
|
|
|
#include "tdx.h"
|
|
|
|
|
|
2019-01-23 19:08:45 +08:00
|
|
|
#define BOOT_CTYPE_H
|
|
|
|
|
#include <linux/acpi.h>
|
|
|
|
|
|
2010-08-03 07:21:22 +08:00
|
|
|
#define BOOT_BOOT_H
|
2010-08-03 12:03:46 +08:00
|
|
|
#include "../ctype.h"
|
2022-04-06 07:29:24 +08:00
|
|
|
#include "../io.h"
|
2010-08-03 07:21:22 +08:00
|
|
|
|
2022-02-03 03:24:30 +08:00
|
|
|
#include "efi.h"
|
|
|
|
|
|
2013-10-11 08:18:16 +08:00
|
|
|
#ifdef CONFIG_X86_64
|
|
|
|
|
#define memptr long
|
|
|
|
|
#else
|
|
|
|
|
#define memptr unsigned
|
|
|
|
|
#endif
|
|
|
|
|
|
2020-09-07 21:15:16 +08:00
|
|
|
/* boot/compressed/vmlinux start and end markers */
|
|
|
|
|
extern char _head[], _end[];
|
|
|
|
|
|
2010-08-03 07:21:22 +08:00
|
|
|
/* misc.c */
|
2013-10-11 08:18:16 +08:00
|
|
|
extern memptr free_mem_ptr;
|
|
|
|
|
extern memptr free_mem_end_ptr;
|
x86/boot/compressed: Avoid duplicate malloc() implementations
The early malloc() and free() implementation in include/linux/decompress/mm.h
(which is also included by the static decompressors) is static. This is
fine when the only thing interested in using malloc() is the decompression
code, but the x86 early boot environment may use malloc() in a couple places,
leading to a potential collision when the static copies of the available
memory region ("malloc_ptr") gets reset to the global "free_mem_ptr" value.
As it happened, the existing usage pattern was accidentally safe because each
user did 1 malloc() and 1 free() before returning and were not nested:
extract_kernel() (misc.c)
choose_random_location() (kaslr.c)
mem_avoid_init()
handle_mem_options()
malloc()
...
free()
...
parse_elf() (misc.c)
malloc()
...
free()
Once the future FGKASLR series is added, however, it will insert
additional malloc() calls local to fgkaslr.c in the middle of
parse_elf()'s malloc()/free() pair:
parse_elf() (misc.c)
malloc()
if (...) {
layout_randomized_image(output, &ehdr, phdrs);
malloc() <- boom
...
else
layout_image(output, &ehdr, phdrs);
free()
To avoid collisions, there must be a single implementation of malloc().
Adjust include/linux/decompress/mm.h so that visibility can be
controlled, provide prototypes in misc.h, and implement the functions in
misc.c. This also results in a small size savings:
$ size vmlinux.before vmlinux.after
text data bss dec hex filename
8842314 468 178320 9021102 89a6ae vmlinux.before
8842240 468 178320 9021028 89a664 vmlinux.after
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Link: https://lore.kernel.org/r/20211013175742.1197608-4-keescook@chromium.org
2021-10-14 01:57:41 +08:00
|
|
|
void *malloc(int size);
|
|
|
|
|
void free(void *where);
|
2016-04-19 00:42:12 +08:00
|
|
|
extern struct boot_params *boot_params;
|
2012-07-20 09:04:39 +08:00
|
|
|
void __putstr(const char *s);
|
2015-07-07 07:06:20 +08:00
|
|
|
void __puthex(unsigned long value);
|
2012-07-20 09:04:39 +08:00
|
|
|
#define error_putstr(__x) __putstr(__x)
|
2015-07-07 07:06:20 +08:00
|
|
|
#define error_puthex(__x) __puthex(__x)
|
2012-07-20 09:04:39 +08:00
|
|
|
|
|
|
|
|
#ifdef CONFIG_X86_VERBOSE_BOOTUP
|
|
|
|
|
|
|
|
|
|
#define debug_putstr(__x) __putstr(__x)
|
2015-07-07 07:06:20 +08:00
|
|
|
#define debug_puthex(__x) __puthex(__x)
|
|
|
|
|
#define debug_putaddr(__x) { \
|
|
|
|
|
debug_putstr(#__x ": 0x"); \
|
|
|
|
|
debug_puthex((unsigned long)(__x)); \
|
|
|
|
|
debug_putstr("\n"); \
|
|
|
|
|
}
|
2012-07-20 09:04:39 +08:00
|
|
|
|
|
|
|
|
#else
|
|
|
|
|
|
|
|
|
|
static inline void debug_putstr(const char *s)
|
|
|
|
|
{ }
|
2020-03-19 17:13:07 +08:00
|
|
|
static inline void debug_puthex(unsigned long value)
|
2015-07-07 07:06:20 +08:00
|
|
|
{ }
|
|
|
|
|
#define debug_putaddr(x) /* */
|
2012-07-20 09:04:39 +08:00
|
|
|
|
|
|
|
|
#endif
|
2010-08-03 07:21:22 +08:00
|
|
|
|
|
|
|
|
/* cmdline.c */
|
|
|
|
|
int cmdline_find_option(const char *option, char *buffer, int bufsize);
|
|
|
|
|
int cmdline_find_option_bool(const char *option);
|
|
|
|
|
|
2019-01-23 19:08:49 +08:00
|
|
|
struct mem_vector {
|
2020-07-29 06:57:20 +08:00
|
|
|
u64 start;
|
|
|
|
|
u64 size;
|
2019-01-23 19:08:49 +08:00
|
|
|
};
|
2010-08-03 07:21:22 +08:00
|
|
|
|
2021-04-23 03:04:42 +08:00
|
|
|
#ifdef CONFIG_RANDOMIZE_BASE
|
2016-04-19 00:42:10 +08:00
|
|
|
/* kaslr.c */
|
2016-05-26 06:45:32 +08:00
|
|
|
void choose_random_location(unsigned long input,
|
|
|
|
|
unsigned long input_size,
|
|
|
|
|
unsigned long *output,
|
|
|
|
|
unsigned long output_size,
|
|
|
|
|
unsigned long *virt_addr);
|
2012-07-20 09:04:41 +08:00
|
|
|
#else
|
2016-05-26 06:45:32 +08:00
|
|
|
static inline void choose_random_location(unsigned long input,
|
|
|
|
|
unsigned long input_size,
|
|
|
|
|
unsigned long *output,
|
|
|
|
|
unsigned long output_size,
|
|
|
|
|
unsigned long *virt_addr)
|
2013-10-11 08:18:14 +08:00
|
|
|
{
|
|
|
|
|
}
|
|
|
|
|
#endif
|
2012-07-20 09:04:41 +08:00
|
|
|
|
2020-09-07 21:16:13 +08:00
|
|
|
/* cpuflags.c */
|
|
|
|
|
bool has_cpuflag(int flag);
|
|
|
|
|
|
x86/KASLR: Build identity mappings on demand
Currently KASLR only supports relocation in a small physical range (from
16M to 1G), due to using the initial kernel page table identity mapping.
To support ranges above this, we need to have an identity mapping for the
desired memory range before we can decompress (and later run) the kernel.
32-bit kernels already have the needed identity mapping. This patch adds
identity mappings for the needed memory ranges on 64-bit kernels. This
happens in two possible boot paths:
If loaded via startup_32(), we need to set up the needed identity map.
If loaded from a 64-bit bootloader, the bootloader will have already
set up an identity mapping, and we'll start via the compressed kernel's
startup_64(). In this case, the bootloader's page tables need to be
avoided while selecting the new uncompressed kernel location. If not,
the decompressor could overwrite them during decompression.
To accomplish this, we could walk the pagetable and find every page
that is used, and add them to mem_avoid, but this needs extra code and
will require increasing the size of the mem_avoid array.
Instead, we can create a new set of page tables for our own identity
mapping instead. The pages for the new page table will come from the
_pagetable section of the compressed kernel, which means they are
already contained by in mem_avoid array. To do this, we reuse the code
from the uncompressed kernel's identity mapping routines.
The _pgtable will be shared by both the 32-bit and 64-bit paths to reduce
init_size, as now the compressed kernel's _rodata to _end will contribute
to init_size.
To handle the possible mappings, we need to increase the existing page
table buffer size:
When booting via startup_64(), we need to cover the old VO, params,
cmdline and uncompressed kernel. In an extreme case we could have them
all beyond the 512G boundary, which needs (2+2)*4 pages with 2M mappings.
And we'll need 2 for first 2M for VGA RAM. One more is needed for level4.
This gets us to 19 pages total.
When booting via startup_32(), KASLR could move the uncompressed kernel
above 4G, so we need to create extra identity mappings, which should only
need (2+2) pages at most when it is beyond the 512G boundary. So 19
pages is sufficient for this case as well.
The resulting BOOT_*PGT_SIZE defines use the "_SIZE" suffix on their
names to maintain logical consistency with the existing BOOT_HEAP_SIZE
and BOOT_STACK_SIZE defines.
This patch is based on earlier patches from Yinghai Lu and Baoquan He.
Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: Andrew Morton <akpm@linux-foundation.org>
Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Andy Lutomirski <luto@kernel.org>
Cc: Baoquan He <bhe@redhat.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Borislav Petkov <bp@suse.de>
Cc: Brian Gerst <brgerst@gmail.com>
Cc: Dave Young <dyoung@redhat.com>
Cc: Denys Vlasenko <dvlasenk@redhat.com>
Cc: H. Peter Anvin <hpa@zytor.com>
Cc: Jiri Kosina <jkosina@suse.cz>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Vivek Goyal <vgoyal@redhat.com>
Cc: Yinghai Lu <yinghai@kernel.org>
Cc: kernel-hardening@lists.openwall.com
Cc: lasse.collin@tukaani.org
Link: http://lkml.kernel.org/r/1462572095-11754-4-git-send-email-keescook@chromium.org
Signed-off-by: Ingo Molnar <mingo@kernel.org>
2016-05-07 06:01:35 +08:00
|
|
|
#ifdef CONFIG_X86_64
|
2020-09-07 21:15:23 +08:00
|
|
|
extern int set_page_decrypted(unsigned long address);
|
|
|
|
|
extern int set_page_encrypted(unsigned long address);
|
2020-09-07 21:15:25 +08:00
|
|
|
extern int set_page_non_present(unsigned long address);
|
x86/KASLR: Build identity mappings on demand
Currently KASLR only supports relocation in a small physical range (from
16M to 1G), due to using the initial kernel page table identity mapping.
To support ranges above this, we need to have an identity mapping for the
desired memory range before we can decompress (and later run) the kernel.
32-bit kernels already have the needed identity mapping. This patch adds
identity mappings for the needed memory ranges on 64-bit kernels. This
happens in two possible boot paths:
If loaded via startup_32(), we need to set up the needed identity map.
If loaded from a 64-bit bootloader, the bootloader will have already
set up an identity mapping, and we'll start via the compressed kernel's
startup_64(). In this case, the bootloader's page tables need to be
avoided while selecting the new uncompressed kernel location. If not,
the decompressor could overwrite them during decompression.
To accomplish this, we could walk the pagetable and find every page
that is used, and add them to mem_avoid, but this needs extra code and
will require increasing the size of the mem_avoid array.
Instead, we can create a new set of page tables for our own identity
mapping instead. The pages for the new page table will come from the
_pagetable section of the compressed kernel, which means they are
already contained by in mem_avoid array. To do this, we reuse the code
from the uncompressed kernel's identity mapping routines.
The _pgtable will be shared by both the 32-bit and 64-bit paths to reduce
init_size, as now the compressed kernel's _rodata to _end will contribute
to init_size.
To handle the possible mappings, we need to increase the existing page
table buffer size:
When booting via startup_64(), we need to cover the old VO, params,
cmdline and uncompressed kernel. In an extreme case we could have them
all beyond the 512G boundary, which needs (2+2)*4 pages with 2M mappings.
And we'll need 2 for first 2M for VGA RAM. One more is needed for level4.
This gets us to 19 pages total.
When booting via startup_32(), KASLR could move the uncompressed kernel
above 4G, so we need to create extra identity mappings, which should only
need (2+2) pages at most when it is beyond the 512G boundary. So 19
pages is sufficient for this case as well.
The resulting BOOT_*PGT_SIZE defines use the "_SIZE" suffix on their
names to maintain logical consistency with the existing BOOT_HEAP_SIZE
and BOOT_STACK_SIZE defines.
This patch is based on earlier patches from Yinghai Lu and Baoquan He.
Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: Andrew Morton <akpm@linux-foundation.org>
Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Andy Lutomirski <luto@kernel.org>
Cc: Baoquan He <bhe@redhat.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: Borislav Petkov <bp@suse.de>
Cc: Brian Gerst <brgerst@gmail.com>
Cc: Dave Young <dyoung@redhat.com>
Cc: Denys Vlasenko <dvlasenk@redhat.com>
Cc: H. Peter Anvin <hpa@zytor.com>
Cc: Jiri Kosina <jkosina@suse.cz>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Thomas Gleixner <tglx@linutronix.de>
Cc: Vivek Goyal <vgoyal@redhat.com>
Cc: Yinghai Lu <yinghai@kernel.org>
Cc: kernel-hardening@lists.openwall.com
Cc: lasse.collin@tukaani.org
Link: http://lkml.kernel.org/r/1462572095-11754-4-git-send-email-keescook@chromium.org
Signed-off-by: Ingo Molnar <mingo@kernel.org>
2016-05-07 06:01:35 +08:00
|
|
|
extern unsigned char _pgtable[];
|
|
|
|
|
#endif
|
|
|
|
|
|
2013-10-11 08:18:14 +08:00
|
|
|
#ifdef CONFIG_EARLY_PRINTK
|
2012-07-20 09:04:42 +08:00
|
|
|
/* early_serial_console.c */
|
2013-10-11 08:18:14 +08:00
|
|
|
extern int early_serial_base;
|
|
|
|
|
void console_init(void);
|
|
|
|
|
#else
|
2012-07-20 09:04:41 +08:00
|
|
|
static const int early_serial_base;
|
|
|
|
|
static inline void console_init(void)
|
|
|
|
|
{ }
|
|
|
|
|
#endif
|
|
|
|
|
|
2020-09-07 21:15:24 +08:00
|
|
|
#ifdef CONFIG_AMD_MEM_ENCRYPT
|
2022-02-10 02:10:01 +08:00
|
|
|
void sev_enable(struct boot_params *bp);
|
2020-09-07 21:15:24 +08:00
|
|
|
void sev_es_shutdown_ghcb(void);
|
2020-09-07 21:15:25 +08:00
|
|
|
extern bool sev_es_check_ghcb_fault(unsigned long address);
|
2022-02-10 02:10:09 +08:00
|
|
|
void snp_set_page_private(unsigned long paddr);
|
|
|
|
|
void snp_set_page_shared(unsigned long paddr);
|
2022-02-25 00:56:17 +08:00
|
|
|
void sev_prep_identity_maps(unsigned long top_level_pgt);
|
2020-09-07 21:15:24 +08:00
|
|
|
#else
|
2022-08-24 00:07:34 +08:00
|
|
|
static inline void sev_enable(struct boot_params *bp)
|
|
|
|
|
{
|
|
|
|
|
/*
|
|
|
|
|
* bp->cc_blob_address should only be set by boot/compressed kernel.
|
|
|
|
|
* Initialize it to 0 unconditionally (thus here in this stub too) to
|
|
|
|
|
* ensure that uninitialized values from buggy bootloaders aren't
|
|
|
|
|
* propagated.
|
|
|
|
|
*/
|
|
|
|
|
if (bp)
|
|
|
|
|
bp->cc_blob_address = 0;
|
|
|
|
|
}
|
2020-09-07 21:15:24 +08:00
|
|
|
static inline void sev_es_shutdown_ghcb(void) { }
|
2020-09-07 21:15:25 +08:00
|
|
|
static inline bool sev_es_check_ghcb_fault(unsigned long address)
|
|
|
|
|
{
|
|
|
|
|
return false;
|
|
|
|
|
}
|
2022-02-10 02:10:09 +08:00
|
|
|
static inline void snp_set_page_private(unsigned long paddr) { }
|
|
|
|
|
static inline void snp_set_page_shared(unsigned long paddr) { }
|
2022-02-25 00:56:17 +08:00
|
|
|
static inline void sev_prep_identity_maps(unsigned long top_level_pgt) { }
|
2020-09-07 21:15:24 +08:00
|
|
|
#endif
|
|
|
|
|
|
2019-01-23 19:08:48 +08:00
|
|
|
/* acpi.c */
|
|
|
|
|
#ifdef CONFIG_ACPI
|
|
|
|
|
acpi_physical_address get_rsdp_addr(void);
|
|
|
|
|
#else
|
|
|
|
|
static inline acpi_physical_address get_rsdp_addr(void) { return 0; }
|
|
|
|
|
#endif
|
2019-01-23 19:08:49 +08:00
|
|
|
|
2019-02-05 21:04:01 +08:00
|
|
|
#if defined(CONFIG_RANDOMIZE_BASE) && defined(CONFIG_MEMORY_HOTREMOVE) && defined(CONFIG_ACPI)
|
2019-01-23 19:08:50 +08:00
|
|
|
extern struct mem_vector immovable_mem[MAX_NUMNODES*2];
|
2019-01-23 19:08:49 +08:00
|
|
|
int count_immovable_mem_regions(void);
|
|
|
|
|
#else
|
|
|
|
|
static inline int count_immovable_mem_regions(void) { return 0; }
|
|
|
|
|
#endif
|
2019-03-04 13:55:46 +08:00
|
|
|
|
2020-09-07 21:15:15 +08:00
|
|
|
/* ident_map_64.c */
|
|
|
|
|
#ifdef CONFIG_X86_5LEVEL
|
|
|
|
|
extern unsigned int __pgtable_l5_enabled, pgdir_shift, ptrs_per_p4d;
|
|
|
|
|
#endif
|
2022-02-25 00:56:16 +08:00
|
|
|
extern void kernel_add_identity_map(unsigned long start, unsigned long end);
|
2020-09-07 21:15:15 +08:00
|
|
|
|
|
|
|
|
/* Used by PAGE_KERN* macros: */
|
|
|
|
|
extern pteval_t __default_kernel_pte_mask;
|
|
|
|
|
|
2020-09-07 21:15:14 +08:00
|
|
|
/* idt_64.c */
|
|
|
|
|
extern gate_desc boot_idt[BOOT_IDT_ENTRIES];
|
|
|
|
|
extern struct desc_ptr boot_idt_desc;
|
|
|
|
|
|
2021-03-10 16:43:19 +08:00
|
|
|
#ifdef CONFIG_X86_64
|
|
|
|
|
void cleanup_exception_handling(void);
|
|
|
|
|
#else
|
|
|
|
|
static inline void cleanup_exception_handling(void) { }
|
|
|
|
|
#endif
|
|
|
|
|
|
2020-09-07 21:15:16 +08:00
|
|
|
/* IDT Entry Points */
|
|
|
|
|
void boot_page_fault(void);
|
2020-09-07 21:15:20 +08:00
|
|
|
void boot_stage1_vc(void);
|
2020-09-07 21:15:24 +08:00
|
|
|
void boot_stage2_vc(void);
|
2020-09-07 21:15:16 +08:00
|
|
|
|
2020-10-29 00:46:57 +08:00
|
|
|
unsigned long sev_verify_cbit(unsigned long cr3);
|
|
|
|
|
|
2022-02-10 02:10:18 +08:00
|
|
|
enum efi_type {
|
|
|
|
|
EFI_TYPE_64,
|
|
|
|
|
EFI_TYPE_32,
|
|
|
|
|
EFI_TYPE_NONE,
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
#ifdef CONFIG_EFI
|
|
|
|
|
/* helpers for early EFI config table access */
|
|
|
|
|
enum efi_type efi_get_type(struct boot_params *bp);
|
2022-02-25 00:56:05 +08:00
|
|
|
unsigned long efi_get_system_table(struct boot_params *bp);
|
2022-02-25 00:56:06 +08:00
|
|
|
int efi_get_conf_table(struct boot_params *bp, unsigned long *cfg_tbl_pa,
|
|
|
|
|
unsigned int *cfg_tbl_len);
|
2022-02-25 00:56:07 +08:00
|
|
|
unsigned long efi_find_vendor_table(struct boot_params *bp,
|
|
|
|
|
unsigned long cfg_tbl_pa,
|
|
|
|
|
unsigned int cfg_tbl_len,
|
|
|
|
|
efi_guid_t guid);
|
2022-02-10 02:10:18 +08:00
|
|
|
#else
|
|
|
|
|
static inline enum efi_type efi_get_type(struct boot_params *bp)
|
|
|
|
|
{
|
|
|
|
|
return EFI_TYPE_NONE;
|
|
|
|
|
}
|
2022-02-25 00:56:05 +08:00
|
|
|
|
|
|
|
|
static inline unsigned long efi_get_system_table(struct boot_params *bp)
|
|
|
|
|
{
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
2022-02-25 00:56:06 +08:00
|
|
|
|
|
|
|
|
static inline int efi_get_conf_table(struct boot_params *bp,
|
|
|
|
|
unsigned long *cfg_tbl_pa,
|
|
|
|
|
unsigned int *cfg_tbl_len)
|
|
|
|
|
{
|
|
|
|
|
return -ENOENT;
|
|
|
|
|
}
|
2022-02-25 00:56:07 +08:00
|
|
|
|
|
|
|
|
static inline unsigned long efi_find_vendor_table(struct boot_params *bp,
|
|
|
|
|
unsigned long cfg_tbl_pa,
|
|
|
|
|
unsigned int cfg_tbl_len,
|
|
|
|
|
efi_guid_t guid)
|
|
|
|
|
{
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
2022-02-10 02:10:18 +08:00
|
|
|
#endif /* CONFIG_EFI */
|
|
|
|
|
|
2019-03-04 13:55:46 +08:00
|
|
|
#endif /* BOOT_COMPRESSED_MISC_H */
|