From patchwork Tue Apr 4 10:27:14 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Li, Xin3" X-Patchwork-Id: 79004 Return-Path: Delivered-To: ouuuleilei@gmail.com Received: by 2002:a59:b0ea:0:b0:3b6:4342:cba0 with SMTP id b10csp2941121vqo; Tue, 4 Apr 2023 04:14:16 -0700 (PDT) X-Google-Smtp-Source: AKy350Yr5uYMoB2vSYp7US5dteqQZY6fHy0aUs5RmRDQsw0yiEOz7OqRa5/Mljp6clVnCoeqStxm X-Received: by 2002:a17:90b:1e03:b0:234:d3a:2a38 with SMTP id pg3-20020a17090b1e0300b002340d3a2a38mr2293326pjb.43.1680606856023; Tue, 04 Apr 2023 04:14:16 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1680606856; cv=none; d=google.com; s=arc-20160816; b=I7TzsBF9SoYgPnVtVczpqz6oNON8uJpsFPTZGRGytgRLytH+72Yl0wtbk+rTyHZJIC Nlzge9avQNGnRuECzfov4DaKGTSLLninWNo7clg+N1uAYumIaBqkMUkIq5GrveKcgI11 Ttod5a/ONxpudsLH4OAW4Zy4i5pOjw6bW7nHparO6RxSiqyWJqASXlf33aqnHhlJ5grK kGKorUsNtl4Us56bulLSL5VafpjO7Amw9QKB2/oQ3MQrEzkwbMWu12c05E5b93xcIgfT jMwoacl9rkEGyNF5pz7JA6kqzxCmp8QOGX9dsUTAH2yolAbuNfPmYFtGZDl8SPd6OpDD YHHQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=W7XedNztJ0mTK2b/JAIVrms4PBeui63Rn/5g9sSZqqs=; b=fjuPuKzntcXZcxh1CQrBGW9fR5wCDdmvozZ/hth8i9wOH9QHgWUY1bqDpdADgJ/GJD OUt+v3j0Adl7m9KHfuwwUJJGilRkImyL1gwqMl72ArMf3dr/LAIga5DZTi2IY1zAYoCn IdM6+FIY64kwi6aWSFDoheA8DmCv7+XBEKKgX7U/V7qznhWOVgHHBhE4JvMvvD0Z4MA6 uzjHx/uzoqx8HQT85jKCG2u0lWYXw8hY4tJjRlSfKnKvSumd/phv0jJ7uBhaUKTyTvIy ZUnhg3Jqs5JxONaUZkDK0ZXRkcVxUJdaAAh/zQN0v/iUfG0u3U7zyMHrAvd99mLGUt6B cP0w== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=F2koYtLc; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id a6-20020a631a06000000b0050c0549c4dbsi10160802pga.702.2023.04.04.04.14.01; Tue, 04 Apr 2023 04:14:15 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=F2koYtLc; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S235007AbjDDK4t (ORCPT + 99 others); Tue, 4 Apr 2023 06:56:49 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:39406 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S234976AbjDDK4Y (ORCPT ); Tue, 4 Apr 2023 06:56:24 -0400 Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 450CD4C23; Tue, 4 Apr 2023 03:54:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1680605662; x=1712141662; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=YkOYUeaNmXvaQHTm0febRcu8lP7lpU11uM/4zVeP9Zg=; b=F2koYtLcmj6pdNPwVoVYOA/Yzn0hnduoSt1J+EdHbxICoKyVgZjap+ME bP2soDjpaggiEZ5+37lELSwR+3X2XDtwYnDm5yIJ6BZHSIEHsqpwfnqhv PtfhamEq8Zldr9ZyKk/t5qksDn+8RAw7IVG6KBV0LHBKC15/muZEPI6Pt Lwue+5Nh1SlR70TnxzixaghjEOQiTJgXHUCxFYBqv27k9wXO7FCATCDWo gT2aBuo3GNyHEOpTlr576vYVfzSDiR408JdIWHA4xYiPnJ1shLnr/0Dj/ IkA7FBl+K+GAWD2vAHyXZaw6MQZQOmgcdPR4YYAt00BkZ3TLu2jkUVAzj Q==; X-IronPort-AV: E=McAfee;i="6600,9927,10669"; a="330734242" X-IronPort-AV: E=Sophos;i="5.98,317,1673942400"; d="scan'208";a="330734242" Received: from fmsmga003.fm.intel.com ([10.253.24.29]) by orsmga101.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 04 Apr 2023 03:53:06 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=McAfee;i="6600,9927,10669"; a="775597871" X-IronPort-AV: E=Sophos;i="5.98,317,1673942400"; d="scan'208";a="775597871" Received: from unknown (HELO fred..) ([172.25.112.68]) by FMSMGA003.fm.intel.com with ESMTP; 04 Apr 2023 03:53:06 -0700 From: Xin Li To: linux-kernel@vger.kernel.org, x86@kernel.org, kvm@vger.kernel.org Cc: tglx@linutronix.de, mingo@redhat.com, bp@alien8.de, dave.hansen@linux.intel.com, hpa@zytor.com, peterz@infradead.org, andrew.cooper3@citrix.com, seanjc@google.com, pbonzini@redhat.com, ravi.v.shankar@intel.com, jiangshanlai@gmail.com, shan.kang@intel.com Subject: [PATCH v7 31/33] x86/fred: BUG() when ERETU with %rsp not equal to that when the ring 3 event was just delivered Date: Tue, 4 Apr 2023 03:27:14 -0700 Message-Id: <20230404102716.1795-32-xin3.li@intel.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20230404102716.1795-1-xin3.li@intel.com> References: <20230404102716.1795-1-xin3.li@intel.com> MIME-Version: 1.0 X-Spam-Status: No, score=-2.5 required=5.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_MED, RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_NONE autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= X-GMAIL-THRID: =?utf-8?q?1762244014592083210?= X-GMAIL-MSGID: =?utf-8?q?1762244014592083210?= A FRED stack frame generated by a ring 3 event should never be messed up, and the first thing we must make sure is that at the time an ERETU instruction is executed, %rsp must have the same address as that when the user level event was just delivered. However we don't want to bother the normal code path of ERETU because it's on the hotest code path, a good choice is to do this check when ERETU faults. Suggested-by: H. Peter Anvin (Intel) Tested-by: Shan Kang Signed-off-by: Xin Li --- arch/x86/mm/extable.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/arch/x86/mm/extable.c b/arch/x86/mm/extable.c index 9d82193adf3c..be297d4b137b 100644 --- a/arch/x86/mm/extable.c +++ b/arch/x86/mm/extable.c @@ -204,6 +204,14 @@ static bool ex_handler_eretu(const struct exception_table_entry *fixup, unsigned short ss = uregs->ss; unsigned short cs = uregs->cs; + /* + * A FRED stack frame generated by a ring 3 event should never be + * messed up, and the first thing we must make sure is that at the + * time an ERETU instruction is executed, %rsp must have the same + * address as that when the user level event was just delivered. + */ + BUG_ON(uregs != current->thread_info.user_pt_regs); + /* * Move the NMI bit from the invalid stack frame, which caused ERETU * to fault, to the fault handler's stack frame, thus to unblock NMI