162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0-only
262306a36Sopenharmony_ci/*
362306a36Sopenharmony_ci * Copyright (C) 2023 Loongson Technology Corporation Limited
462306a36Sopenharmony_ci */
562306a36Sopenharmony_ci#define pr_fmt(fmt) "kasan: " fmt
662306a36Sopenharmony_ci#include <linux/kasan.h>
762306a36Sopenharmony_ci#include <linux/memblock.h>
862306a36Sopenharmony_ci#include <linux/sched/task.h>
962306a36Sopenharmony_ci
1062306a36Sopenharmony_ci#include <asm/tlbflush.h>
1162306a36Sopenharmony_ci#include <asm/pgalloc.h>
1262306a36Sopenharmony_ci#include <asm-generic/sections.h>
1362306a36Sopenharmony_ci
1462306a36Sopenharmony_cistatic pgd_t kasan_pg_dir[PTRS_PER_PGD] __initdata __aligned(PAGE_SIZE);
1562306a36Sopenharmony_ci
1662306a36Sopenharmony_ci#ifdef __PAGETABLE_PUD_FOLDED
1762306a36Sopenharmony_ci#define __p4d_none(early, p4d) (0)
1862306a36Sopenharmony_ci#else
1962306a36Sopenharmony_ci#define __p4d_none(early, p4d) (early ? (p4d_val(p4d) == 0) : \
2062306a36Sopenharmony_ci(__pa(p4d_val(p4d)) == (unsigned long)__pa(kasan_early_shadow_pud)))
2162306a36Sopenharmony_ci#endif
2262306a36Sopenharmony_ci
2362306a36Sopenharmony_ci#ifdef __PAGETABLE_PMD_FOLDED
2462306a36Sopenharmony_ci#define __pud_none(early, pud) (0)
2562306a36Sopenharmony_ci#else
2662306a36Sopenharmony_ci#define __pud_none(early, pud) (early ? (pud_val(pud) == 0) : \
2762306a36Sopenharmony_ci(__pa(pud_val(pud)) == (unsigned long)__pa(kasan_early_shadow_pmd)))
2862306a36Sopenharmony_ci#endif
2962306a36Sopenharmony_ci
3062306a36Sopenharmony_ci#define __pmd_none(early, pmd) (early ? (pmd_val(pmd) == 0) : \
3162306a36Sopenharmony_ci(__pa(pmd_val(pmd)) == (unsigned long)__pa(kasan_early_shadow_pte)))
3262306a36Sopenharmony_ci
3362306a36Sopenharmony_ci#define __pte_none(early, pte) (early ? pte_none(pte) : \
3462306a36Sopenharmony_ci((pte_val(pte) & _PFN_MASK) == (unsigned long)__pa(kasan_early_shadow_page)))
3562306a36Sopenharmony_ci
3662306a36Sopenharmony_cibool kasan_early_stage = true;
3762306a36Sopenharmony_ci
3862306a36Sopenharmony_civoid *kasan_mem_to_shadow(const void *addr)
3962306a36Sopenharmony_ci{
4062306a36Sopenharmony_ci	if (!kasan_arch_is_ready()) {
4162306a36Sopenharmony_ci		return (void *)(kasan_early_shadow_page);
4262306a36Sopenharmony_ci	} else {
4362306a36Sopenharmony_ci		unsigned long maddr = (unsigned long)addr;
4462306a36Sopenharmony_ci		unsigned long xrange = (maddr >> XRANGE_SHIFT) & 0xffff;
4562306a36Sopenharmony_ci		unsigned long offset = 0;
4662306a36Sopenharmony_ci
4762306a36Sopenharmony_ci		if (maddr >= FIXADDR_START)
4862306a36Sopenharmony_ci			return (void *)(kasan_early_shadow_page);
4962306a36Sopenharmony_ci
5062306a36Sopenharmony_ci		maddr &= XRANGE_SHADOW_MASK;
5162306a36Sopenharmony_ci		switch (xrange) {
5262306a36Sopenharmony_ci		case XKPRANGE_CC_SEG:
5362306a36Sopenharmony_ci			offset = XKPRANGE_CC_SHADOW_OFFSET;
5462306a36Sopenharmony_ci			break;
5562306a36Sopenharmony_ci		case XKPRANGE_UC_SEG:
5662306a36Sopenharmony_ci			offset = XKPRANGE_UC_SHADOW_OFFSET;
5762306a36Sopenharmony_ci			break;
5862306a36Sopenharmony_ci		case XKVRANGE_VC_SEG:
5962306a36Sopenharmony_ci			offset = XKVRANGE_VC_SHADOW_OFFSET;
6062306a36Sopenharmony_ci			break;
6162306a36Sopenharmony_ci		default:
6262306a36Sopenharmony_ci			WARN_ON(1);
6362306a36Sopenharmony_ci			return NULL;
6462306a36Sopenharmony_ci		}
6562306a36Sopenharmony_ci
6662306a36Sopenharmony_ci		return (void *)((maddr >> KASAN_SHADOW_SCALE_SHIFT) + offset);
6762306a36Sopenharmony_ci	}
6862306a36Sopenharmony_ci}
6962306a36Sopenharmony_ci
7062306a36Sopenharmony_ciconst void *kasan_shadow_to_mem(const void *shadow_addr)
7162306a36Sopenharmony_ci{
7262306a36Sopenharmony_ci	unsigned long addr = (unsigned long)shadow_addr;
7362306a36Sopenharmony_ci
7462306a36Sopenharmony_ci	if (unlikely(addr > KASAN_SHADOW_END) ||
7562306a36Sopenharmony_ci		unlikely(addr < KASAN_SHADOW_START)) {
7662306a36Sopenharmony_ci		WARN_ON(1);
7762306a36Sopenharmony_ci		return NULL;
7862306a36Sopenharmony_ci	}
7962306a36Sopenharmony_ci
8062306a36Sopenharmony_ci	if (addr >= XKVRANGE_VC_SHADOW_OFFSET)
8162306a36Sopenharmony_ci		return (void *)(((addr - XKVRANGE_VC_SHADOW_OFFSET) << KASAN_SHADOW_SCALE_SHIFT) + XKVRANGE_VC_START);
8262306a36Sopenharmony_ci	else if (addr >= XKPRANGE_UC_SHADOW_OFFSET)
8362306a36Sopenharmony_ci		return (void *)(((addr - XKPRANGE_UC_SHADOW_OFFSET) << KASAN_SHADOW_SCALE_SHIFT) + XKPRANGE_UC_START);
8462306a36Sopenharmony_ci	else if (addr >= XKPRANGE_CC_SHADOW_OFFSET)
8562306a36Sopenharmony_ci		return (void *)(((addr - XKPRANGE_CC_SHADOW_OFFSET) << KASAN_SHADOW_SCALE_SHIFT) + XKPRANGE_CC_START);
8662306a36Sopenharmony_ci	else {
8762306a36Sopenharmony_ci		WARN_ON(1);
8862306a36Sopenharmony_ci		return NULL;
8962306a36Sopenharmony_ci	}
9062306a36Sopenharmony_ci}
9162306a36Sopenharmony_ci
9262306a36Sopenharmony_ci/*
9362306a36Sopenharmony_ci * Alloc memory for shadow memory page table.
9462306a36Sopenharmony_ci */
9562306a36Sopenharmony_cistatic phys_addr_t __init kasan_alloc_zeroed_page(int node)
9662306a36Sopenharmony_ci{
9762306a36Sopenharmony_ci	void *p = memblock_alloc_try_nid(PAGE_SIZE, PAGE_SIZE,
9862306a36Sopenharmony_ci					__pa(MAX_DMA_ADDRESS), MEMBLOCK_ALLOC_ACCESSIBLE, node);
9962306a36Sopenharmony_ci	if (!p)
10062306a36Sopenharmony_ci		panic("%s: Failed to allocate %lu bytes align=0x%lx nid=%d from=%llx\n",
10162306a36Sopenharmony_ci			__func__, PAGE_SIZE, PAGE_SIZE, node, __pa(MAX_DMA_ADDRESS));
10262306a36Sopenharmony_ci
10362306a36Sopenharmony_ci	return __pa(p);
10462306a36Sopenharmony_ci}
10562306a36Sopenharmony_ci
10662306a36Sopenharmony_cistatic pte_t *__init kasan_pte_offset(pmd_t *pmdp, unsigned long addr, int node, bool early)
10762306a36Sopenharmony_ci{
10862306a36Sopenharmony_ci	if (__pmd_none(early, READ_ONCE(*pmdp))) {
10962306a36Sopenharmony_ci		phys_addr_t pte_phys = early ?
11062306a36Sopenharmony_ci				__pa_symbol(kasan_early_shadow_pte) : kasan_alloc_zeroed_page(node);
11162306a36Sopenharmony_ci		if (!early)
11262306a36Sopenharmony_ci			memcpy(__va(pte_phys), kasan_early_shadow_pte, sizeof(kasan_early_shadow_pte));
11362306a36Sopenharmony_ci		pmd_populate_kernel(NULL, pmdp, (pte_t *)__va(pte_phys));
11462306a36Sopenharmony_ci	}
11562306a36Sopenharmony_ci
11662306a36Sopenharmony_ci	return pte_offset_kernel(pmdp, addr);
11762306a36Sopenharmony_ci}
11862306a36Sopenharmony_ci
11962306a36Sopenharmony_cistatic pmd_t *__init kasan_pmd_offset(pud_t *pudp, unsigned long addr, int node, bool early)
12062306a36Sopenharmony_ci{
12162306a36Sopenharmony_ci	if (__pud_none(early, READ_ONCE(*pudp))) {
12262306a36Sopenharmony_ci		phys_addr_t pmd_phys = early ?
12362306a36Sopenharmony_ci				__pa_symbol(kasan_early_shadow_pmd) : kasan_alloc_zeroed_page(node);
12462306a36Sopenharmony_ci		if (!early)
12562306a36Sopenharmony_ci			memcpy(__va(pmd_phys), kasan_early_shadow_pmd, sizeof(kasan_early_shadow_pmd));
12662306a36Sopenharmony_ci		pud_populate(&init_mm, pudp, (pmd_t *)__va(pmd_phys));
12762306a36Sopenharmony_ci	}
12862306a36Sopenharmony_ci
12962306a36Sopenharmony_ci	return pmd_offset(pudp, addr);
13062306a36Sopenharmony_ci}
13162306a36Sopenharmony_ci
13262306a36Sopenharmony_cistatic pud_t *__init kasan_pud_offset(p4d_t *p4dp, unsigned long addr, int node, bool early)
13362306a36Sopenharmony_ci{
13462306a36Sopenharmony_ci	if (__p4d_none(early, READ_ONCE(*p4dp))) {
13562306a36Sopenharmony_ci		phys_addr_t pud_phys = early ?
13662306a36Sopenharmony_ci			__pa_symbol(kasan_early_shadow_pud) : kasan_alloc_zeroed_page(node);
13762306a36Sopenharmony_ci		if (!early)
13862306a36Sopenharmony_ci			memcpy(__va(pud_phys), kasan_early_shadow_pud, sizeof(kasan_early_shadow_pud));
13962306a36Sopenharmony_ci		p4d_populate(&init_mm, p4dp, (pud_t *)__va(pud_phys));
14062306a36Sopenharmony_ci	}
14162306a36Sopenharmony_ci
14262306a36Sopenharmony_ci	return pud_offset(p4dp, addr);
14362306a36Sopenharmony_ci}
14462306a36Sopenharmony_ci
14562306a36Sopenharmony_cistatic void __init kasan_pte_populate(pmd_t *pmdp, unsigned long addr,
14662306a36Sopenharmony_ci				      unsigned long end, int node, bool early)
14762306a36Sopenharmony_ci{
14862306a36Sopenharmony_ci	unsigned long next;
14962306a36Sopenharmony_ci	pte_t *ptep = kasan_pte_offset(pmdp, addr, node, early);
15062306a36Sopenharmony_ci
15162306a36Sopenharmony_ci	do {
15262306a36Sopenharmony_ci		phys_addr_t page_phys = early ?
15362306a36Sopenharmony_ci					__pa_symbol(kasan_early_shadow_page)
15462306a36Sopenharmony_ci					      : kasan_alloc_zeroed_page(node);
15562306a36Sopenharmony_ci		next = addr + PAGE_SIZE;
15662306a36Sopenharmony_ci		set_pte(ptep, pfn_pte(__phys_to_pfn(page_phys), PAGE_KERNEL));
15762306a36Sopenharmony_ci	} while (ptep++, addr = next, addr != end && __pte_none(early, READ_ONCE(*ptep)));
15862306a36Sopenharmony_ci}
15962306a36Sopenharmony_ci
16062306a36Sopenharmony_cistatic void __init kasan_pmd_populate(pud_t *pudp, unsigned long addr,
16162306a36Sopenharmony_ci				      unsigned long end, int node, bool early)
16262306a36Sopenharmony_ci{
16362306a36Sopenharmony_ci	unsigned long next;
16462306a36Sopenharmony_ci	pmd_t *pmdp = kasan_pmd_offset(pudp, addr, node, early);
16562306a36Sopenharmony_ci
16662306a36Sopenharmony_ci	do {
16762306a36Sopenharmony_ci		next = pmd_addr_end(addr, end);
16862306a36Sopenharmony_ci		kasan_pte_populate(pmdp, addr, next, node, early);
16962306a36Sopenharmony_ci	} while (pmdp++, addr = next, addr != end && __pmd_none(early, READ_ONCE(*pmdp)));
17062306a36Sopenharmony_ci}
17162306a36Sopenharmony_ci
17262306a36Sopenharmony_cistatic void __init kasan_pud_populate(p4d_t *p4dp, unsigned long addr,
17362306a36Sopenharmony_ci					    unsigned long end, int node, bool early)
17462306a36Sopenharmony_ci{
17562306a36Sopenharmony_ci	unsigned long next;
17662306a36Sopenharmony_ci	pud_t *pudp = kasan_pud_offset(p4dp, addr, node, early);
17762306a36Sopenharmony_ci
17862306a36Sopenharmony_ci	do {
17962306a36Sopenharmony_ci		next = pud_addr_end(addr, end);
18062306a36Sopenharmony_ci		kasan_pmd_populate(pudp, addr, next, node, early);
18162306a36Sopenharmony_ci	} while (pudp++, addr = next, addr != end);
18262306a36Sopenharmony_ci}
18362306a36Sopenharmony_ci
18462306a36Sopenharmony_cistatic void __init kasan_p4d_populate(pgd_t *pgdp, unsigned long addr,
18562306a36Sopenharmony_ci					    unsigned long end, int node, bool early)
18662306a36Sopenharmony_ci{
18762306a36Sopenharmony_ci	unsigned long next;
18862306a36Sopenharmony_ci	p4d_t *p4dp = p4d_offset(pgdp, addr);
18962306a36Sopenharmony_ci
19062306a36Sopenharmony_ci	do {
19162306a36Sopenharmony_ci		next = p4d_addr_end(addr, end);
19262306a36Sopenharmony_ci		kasan_pud_populate(p4dp, addr, next, node, early);
19362306a36Sopenharmony_ci	} while (p4dp++, addr = next, addr != end);
19462306a36Sopenharmony_ci}
19562306a36Sopenharmony_ci
19662306a36Sopenharmony_cistatic void __init kasan_pgd_populate(unsigned long addr, unsigned long end,
19762306a36Sopenharmony_ci				      int node, bool early)
19862306a36Sopenharmony_ci{
19962306a36Sopenharmony_ci	unsigned long next;
20062306a36Sopenharmony_ci	pgd_t *pgdp;
20162306a36Sopenharmony_ci
20262306a36Sopenharmony_ci	pgdp = pgd_offset_k(addr);
20362306a36Sopenharmony_ci
20462306a36Sopenharmony_ci	do {
20562306a36Sopenharmony_ci		next = pgd_addr_end(addr, end);
20662306a36Sopenharmony_ci		kasan_p4d_populate(pgdp, addr, next, node, early);
20762306a36Sopenharmony_ci	} while (pgdp++, addr = next, addr != end);
20862306a36Sopenharmony_ci
20962306a36Sopenharmony_ci}
21062306a36Sopenharmony_ci
21162306a36Sopenharmony_ci/* Set up full kasan mappings, ensuring that the mapped pages are zeroed */
21262306a36Sopenharmony_cistatic void __init kasan_map_populate(unsigned long start, unsigned long end,
21362306a36Sopenharmony_ci				      int node)
21462306a36Sopenharmony_ci{
21562306a36Sopenharmony_ci	kasan_pgd_populate(start & PAGE_MASK, PAGE_ALIGN(end), node, false);
21662306a36Sopenharmony_ci}
21762306a36Sopenharmony_ci
21862306a36Sopenharmony_ciasmlinkage void __init kasan_early_init(void)
21962306a36Sopenharmony_ci{
22062306a36Sopenharmony_ci	BUILD_BUG_ON(!IS_ALIGNED(KASAN_SHADOW_START, PGDIR_SIZE));
22162306a36Sopenharmony_ci	BUILD_BUG_ON(!IS_ALIGNED(KASAN_SHADOW_END, PGDIR_SIZE));
22262306a36Sopenharmony_ci}
22362306a36Sopenharmony_ci
22462306a36Sopenharmony_cistatic inline void kasan_set_pgd(pgd_t *pgdp, pgd_t pgdval)
22562306a36Sopenharmony_ci{
22662306a36Sopenharmony_ci	WRITE_ONCE(*pgdp, pgdval);
22762306a36Sopenharmony_ci}
22862306a36Sopenharmony_ci
22962306a36Sopenharmony_cistatic void __init clear_pgds(unsigned long start, unsigned long end)
23062306a36Sopenharmony_ci{
23162306a36Sopenharmony_ci	/*
23262306a36Sopenharmony_ci	 * Remove references to kasan page tables from
23362306a36Sopenharmony_ci	 * swapper_pg_dir. pgd_clear() can't be used
23462306a36Sopenharmony_ci	 * here because it's nop on 2,3-level pagetable setups
23562306a36Sopenharmony_ci	 */
23662306a36Sopenharmony_ci	for (; start < end; start += PGDIR_SIZE)
23762306a36Sopenharmony_ci		kasan_set_pgd((pgd_t *)pgd_offset_k(start), __pgd(0));
23862306a36Sopenharmony_ci}
23962306a36Sopenharmony_ci
24062306a36Sopenharmony_civoid __init kasan_init(void)
24162306a36Sopenharmony_ci{
24262306a36Sopenharmony_ci	u64 i;
24362306a36Sopenharmony_ci	phys_addr_t pa_start, pa_end;
24462306a36Sopenharmony_ci
24562306a36Sopenharmony_ci	/*
24662306a36Sopenharmony_ci	 * PGD was populated as invalid_pmd_table or invalid_pud_table
24762306a36Sopenharmony_ci	 * in pagetable_init() which depends on how many levels of page
24862306a36Sopenharmony_ci	 * table you are using, but we had to clean the gpd of kasan
24962306a36Sopenharmony_ci	 * shadow memory, as the pgd value is none-zero.
25062306a36Sopenharmony_ci	 * The assertion pgd_none is going to be false and the formal populate
25162306a36Sopenharmony_ci	 * afterwards is not going to create any new pgd at all.
25262306a36Sopenharmony_ci	 */
25362306a36Sopenharmony_ci	memcpy(kasan_pg_dir, swapper_pg_dir, sizeof(kasan_pg_dir));
25462306a36Sopenharmony_ci	csr_write64(__pa_symbol(kasan_pg_dir), LOONGARCH_CSR_PGDH);
25562306a36Sopenharmony_ci	local_flush_tlb_all();
25662306a36Sopenharmony_ci
25762306a36Sopenharmony_ci	clear_pgds(KASAN_SHADOW_START, KASAN_SHADOW_END);
25862306a36Sopenharmony_ci
25962306a36Sopenharmony_ci	/* Maps everything to a single page of zeroes */
26062306a36Sopenharmony_ci	kasan_pgd_populate(KASAN_SHADOW_START, KASAN_SHADOW_END, NUMA_NO_NODE, true);
26162306a36Sopenharmony_ci
26262306a36Sopenharmony_ci	kasan_populate_early_shadow(kasan_mem_to_shadow((void *)VMALLOC_START),
26362306a36Sopenharmony_ci					kasan_mem_to_shadow((void *)KFENCE_AREA_END));
26462306a36Sopenharmony_ci
26562306a36Sopenharmony_ci	kasan_early_stage = false;
26662306a36Sopenharmony_ci
26762306a36Sopenharmony_ci	/* Populate the linear mapping */
26862306a36Sopenharmony_ci	for_each_mem_range(i, &pa_start, &pa_end) {
26962306a36Sopenharmony_ci		void *start = (void *)phys_to_virt(pa_start);
27062306a36Sopenharmony_ci		void *end   = (void *)phys_to_virt(pa_end);
27162306a36Sopenharmony_ci
27262306a36Sopenharmony_ci		if (start >= end)
27362306a36Sopenharmony_ci			break;
27462306a36Sopenharmony_ci
27562306a36Sopenharmony_ci		kasan_map_populate((unsigned long)kasan_mem_to_shadow(start),
27662306a36Sopenharmony_ci			(unsigned long)kasan_mem_to_shadow(end), NUMA_NO_NODE);
27762306a36Sopenharmony_ci	}
27862306a36Sopenharmony_ci
27962306a36Sopenharmony_ci	/* Populate modules mapping */
28062306a36Sopenharmony_ci	kasan_map_populate((unsigned long)kasan_mem_to_shadow((void *)MODULES_VADDR),
28162306a36Sopenharmony_ci		(unsigned long)kasan_mem_to_shadow((void *)MODULES_END), NUMA_NO_NODE);
28262306a36Sopenharmony_ci	/*
28362306a36Sopenharmony_ci	 * KAsan may reuse the contents of kasan_early_shadow_pte directly, so we
28462306a36Sopenharmony_ci	 * should make sure that it maps the zero page read-only.
28562306a36Sopenharmony_ci	 */
28662306a36Sopenharmony_ci	for (i = 0; i < PTRS_PER_PTE; i++)
28762306a36Sopenharmony_ci		set_pte(&kasan_early_shadow_pte[i],
28862306a36Sopenharmony_ci			pfn_pte(__phys_to_pfn(__pa_symbol(kasan_early_shadow_page)), PAGE_KERNEL_RO));
28962306a36Sopenharmony_ci
29062306a36Sopenharmony_ci	memset(kasan_early_shadow_page, 0, PAGE_SIZE);
29162306a36Sopenharmony_ci	csr_write64(__pa_symbol(swapper_pg_dir), LOONGARCH_CSR_PGDH);
29262306a36Sopenharmony_ci	local_flush_tlb_all();
29362306a36Sopenharmony_ci
29462306a36Sopenharmony_ci	/* At this point kasan is fully initialized. Enable error messages */
29562306a36Sopenharmony_ci	init_task.kasan_depth = 0;
29662306a36Sopenharmony_ci	pr_info("KernelAddressSanitizer initialized.\n");
29762306a36Sopenharmony_ci}
298