pf_in.c 9.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516
  1. // SPDX-License-Identifier: GPL-2.0-or-later
  2. /*
  3. * Fault Injection Test harness (FI)
  4. * Copyright (C) Intel Crop.
  5. */
  6. /* Id: pf_in.c,v 1.1.1.1 2002/11/12 05:56:32 brlock Exp
  7. * Copyright by Intel Crop., 2002
  8. * Louis Zhuang ([email protected])
  9. *
  10. * Bjorn Steinbrink ([email protected]), 2007
  11. */
  12. #include <linux/ptrace.h> /* struct pt_regs */
  13. #include "pf_in.h"
  14. #ifdef __i386__
  15. /* IA32 Manual 3, 2-1 */
  16. static unsigned char prefix_codes[] = {
  17. 0xF0, 0xF2, 0xF3, 0x2E, 0x36, 0x3E, 0x26, 0x64,
  18. 0x65, 0x66, 0x67
  19. };
  20. /* IA32 Manual 3, 3-432*/
  21. static unsigned int reg_rop[] = {
  22. 0x8A, 0x8B, 0xB60F, 0xB70F, 0xBE0F, 0xBF0F
  23. };
  24. static unsigned int reg_wop[] = { 0x88, 0x89, 0xAA, 0xAB };
  25. static unsigned int imm_wop[] = { 0xC6, 0xC7 };
  26. /* IA32 Manual 3, 3-432*/
  27. static unsigned int rw8[] = { 0x88, 0x8A, 0xC6, 0xAA };
  28. static unsigned int rw32[] = {
  29. 0x89, 0x8B, 0xC7, 0xB60F, 0xB70F, 0xBE0F, 0xBF0F, 0xAB
  30. };
  31. static unsigned int mw8[] = { 0x88, 0x8A, 0xC6, 0xB60F, 0xBE0F, 0xAA };
  32. static unsigned int mw16[] = { 0xB70F, 0xBF0F };
  33. static unsigned int mw32[] = { 0x89, 0x8B, 0xC7, 0xAB };
  34. static unsigned int mw64[] = {};
  35. #else /* not __i386__ */
  36. static unsigned char prefix_codes[] = {
  37. 0x66, 0x67, 0x2E, 0x3E, 0x26, 0x64, 0x65, 0x36,
  38. 0xF0, 0xF3, 0xF2,
  39. /* REX Prefixes */
  40. 0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47,
  41. 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f
  42. };
  43. /* AMD64 Manual 3, Appendix A*/
  44. static unsigned int reg_rop[] = {
  45. 0x8A, 0x8B, 0xB60F, 0xB70F, 0xBE0F, 0xBF0F
  46. };
  47. static unsigned int reg_wop[] = { 0x88, 0x89, 0xAA, 0xAB };
  48. static unsigned int imm_wop[] = { 0xC6, 0xC7 };
  49. static unsigned int rw8[] = { 0xC6, 0x88, 0x8A, 0xAA };
  50. static unsigned int rw32[] = {
  51. 0xC7, 0x89, 0x8B, 0xB60F, 0xB70F, 0xBE0F, 0xBF0F, 0xAB
  52. };
  53. /* 8 bit only */
  54. static unsigned int mw8[] = { 0xC6, 0x88, 0x8A, 0xB60F, 0xBE0F, 0xAA };
  55. /* 16 bit only */
  56. static unsigned int mw16[] = { 0xB70F, 0xBF0F };
  57. /* 16 or 32 bit */
  58. static unsigned int mw32[] = { 0xC7 };
  59. /* 16, 32 or 64 bit */
  60. static unsigned int mw64[] = { 0x89, 0x8B, 0xAB };
  61. #endif /* not __i386__ */
  62. struct prefix_bits {
  63. unsigned shorted:1;
  64. unsigned enlarged:1;
  65. unsigned rexr:1;
  66. unsigned rex:1;
  67. };
  68. static int skip_prefix(unsigned char *addr, struct prefix_bits *prf)
  69. {
  70. int i;
  71. unsigned char *p = addr;
  72. prf->shorted = 0;
  73. prf->enlarged = 0;
  74. prf->rexr = 0;
  75. prf->rex = 0;
  76. restart:
  77. for (i = 0; i < ARRAY_SIZE(prefix_codes); i++) {
  78. if (*p == prefix_codes[i]) {
  79. if (*p == 0x66)
  80. prf->shorted = 1;
  81. #ifdef __amd64__
  82. if ((*p & 0xf8) == 0x48)
  83. prf->enlarged = 1;
  84. if ((*p & 0xf4) == 0x44)
  85. prf->rexr = 1;
  86. if ((*p & 0xf0) == 0x40)
  87. prf->rex = 1;
  88. #endif
  89. p++;
  90. goto restart;
  91. }
  92. }
  93. return (p - addr);
  94. }
  95. static int get_opcode(unsigned char *addr, unsigned int *opcode)
  96. {
  97. int len;
  98. if (*addr == 0x0F) {
  99. /* 0x0F is extension instruction */
  100. *opcode = *(unsigned short *)addr;
  101. len = 2;
  102. } else {
  103. *opcode = *addr;
  104. len = 1;
  105. }
  106. return len;
  107. }
  108. #define CHECK_OP_TYPE(opcode, array, type) \
  109. for (i = 0; i < ARRAY_SIZE(array); i++) { \
  110. if (array[i] == opcode) { \
  111. rv = type; \
  112. goto exit; \
  113. } \
  114. }
  115. enum reason_type get_ins_type(unsigned long ins_addr)
  116. {
  117. unsigned int opcode;
  118. unsigned char *p;
  119. struct prefix_bits prf;
  120. int i;
  121. enum reason_type rv = OTHERS;
  122. p = (unsigned char *)ins_addr;
  123. p += skip_prefix(p, &prf);
  124. p += get_opcode(p, &opcode);
  125. CHECK_OP_TYPE(opcode, reg_rop, REG_READ);
  126. CHECK_OP_TYPE(opcode, reg_wop, REG_WRITE);
  127. CHECK_OP_TYPE(opcode, imm_wop, IMM_WRITE);
  128. exit:
  129. return rv;
  130. }
  131. #undef CHECK_OP_TYPE
  132. static unsigned int get_ins_reg_width(unsigned long ins_addr)
  133. {
  134. unsigned int opcode;
  135. unsigned char *p;
  136. struct prefix_bits prf;
  137. int i;
  138. p = (unsigned char *)ins_addr;
  139. p += skip_prefix(p, &prf);
  140. p += get_opcode(p, &opcode);
  141. for (i = 0; i < ARRAY_SIZE(rw8); i++)
  142. if (rw8[i] == opcode)
  143. return 1;
  144. for (i = 0; i < ARRAY_SIZE(rw32); i++)
  145. if (rw32[i] == opcode)
  146. return prf.shorted ? 2 : (prf.enlarged ? 8 : 4);
  147. printk(KERN_ERR "mmiotrace: Unknown opcode 0x%02x\n", opcode);
  148. return 0;
  149. }
  150. unsigned int get_ins_mem_width(unsigned long ins_addr)
  151. {
  152. unsigned int opcode;
  153. unsigned char *p;
  154. struct prefix_bits prf;
  155. int i;
  156. p = (unsigned char *)ins_addr;
  157. p += skip_prefix(p, &prf);
  158. p += get_opcode(p, &opcode);
  159. for (i = 0; i < ARRAY_SIZE(mw8); i++)
  160. if (mw8[i] == opcode)
  161. return 1;
  162. for (i = 0; i < ARRAY_SIZE(mw16); i++)
  163. if (mw16[i] == opcode)
  164. return 2;
  165. for (i = 0; i < ARRAY_SIZE(mw32); i++)
  166. if (mw32[i] == opcode)
  167. return prf.shorted ? 2 : 4;
  168. for (i = 0; i < ARRAY_SIZE(mw64); i++)
  169. if (mw64[i] == opcode)
  170. return prf.shorted ? 2 : (prf.enlarged ? 8 : 4);
  171. printk(KERN_ERR "mmiotrace: Unknown opcode 0x%02x\n", opcode);
  172. return 0;
  173. }
  174. /*
  175. * Define register ident in mod/rm byte.
  176. * Note: these are NOT the same as in ptrace-abi.h.
  177. */
  178. enum {
  179. arg_AL = 0,
  180. arg_CL = 1,
  181. arg_DL = 2,
  182. arg_BL = 3,
  183. arg_AH = 4,
  184. arg_CH = 5,
  185. arg_DH = 6,
  186. arg_BH = 7,
  187. arg_AX = 0,
  188. arg_CX = 1,
  189. arg_DX = 2,
  190. arg_BX = 3,
  191. arg_SP = 4,
  192. arg_BP = 5,
  193. arg_SI = 6,
  194. arg_DI = 7,
  195. #ifdef __amd64__
  196. arg_R8 = 8,
  197. arg_R9 = 9,
  198. arg_R10 = 10,
  199. arg_R11 = 11,
  200. arg_R12 = 12,
  201. arg_R13 = 13,
  202. arg_R14 = 14,
  203. arg_R15 = 15
  204. #endif
  205. };
  206. static unsigned char *get_reg_w8(int no, int rex, struct pt_regs *regs)
  207. {
  208. unsigned char *rv = NULL;
  209. switch (no) {
  210. case arg_AL:
  211. rv = (unsigned char *)&regs->ax;
  212. break;
  213. case arg_BL:
  214. rv = (unsigned char *)&regs->bx;
  215. break;
  216. case arg_CL:
  217. rv = (unsigned char *)&regs->cx;
  218. break;
  219. case arg_DL:
  220. rv = (unsigned char *)&regs->dx;
  221. break;
  222. #ifdef __amd64__
  223. case arg_R8:
  224. rv = (unsigned char *)&regs->r8;
  225. break;
  226. case arg_R9:
  227. rv = (unsigned char *)&regs->r9;
  228. break;
  229. case arg_R10:
  230. rv = (unsigned char *)&regs->r10;
  231. break;
  232. case arg_R11:
  233. rv = (unsigned char *)&regs->r11;
  234. break;
  235. case arg_R12:
  236. rv = (unsigned char *)&regs->r12;
  237. break;
  238. case arg_R13:
  239. rv = (unsigned char *)&regs->r13;
  240. break;
  241. case arg_R14:
  242. rv = (unsigned char *)&regs->r14;
  243. break;
  244. case arg_R15:
  245. rv = (unsigned char *)&regs->r15;
  246. break;
  247. #endif
  248. default:
  249. break;
  250. }
  251. if (rv)
  252. return rv;
  253. if (rex) {
  254. /*
  255. * If REX prefix exists, access low bytes of SI etc.
  256. * instead of AH etc.
  257. */
  258. switch (no) {
  259. case arg_SI:
  260. rv = (unsigned char *)&regs->si;
  261. break;
  262. case arg_DI:
  263. rv = (unsigned char *)&regs->di;
  264. break;
  265. case arg_BP:
  266. rv = (unsigned char *)&regs->bp;
  267. break;
  268. case arg_SP:
  269. rv = (unsigned char *)&regs->sp;
  270. break;
  271. default:
  272. break;
  273. }
  274. } else {
  275. switch (no) {
  276. case arg_AH:
  277. rv = 1 + (unsigned char *)&regs->ax;
  278. break;
  279. case arg_BH:
  280. rv = 1 + (unsigned char *)&regs->bx;
  281. break;
  282. case arg_CH:
  283. rv = 1 + (unsigned char *)&regs->cx;
  284. break;
  285. case arg_DH:
  286. rv = 1 + (unsigned char *)&regs->dx;
  287. break;
  288. default:
  289. break;
  290. }
  291. }
  292. if (!rv)
  293. printk(KERN_ERR "mmiotrace: Error reg no# %d\n", no);
  294. return rv;
  295. }
  296. static unsigned long *get_reg_w32(int no, struct pt_regs *regs)
  297. {
  298. unsigned long *rv = NULL;
  299. switch (no) {
  300. case arg_AX:
  301. rv = &regs->ax;
  302. break;
  303. case arg_BX:
  304. rv = &regs->bx;
  305. break;
  306. case arg_CX:
  307. rv = &regs->cx;
  308. break;
  309. case arg_DX:
  310. rv = &regs->dx;
  311. break;
  312. case arg_SP:
  313. rv = &regs->sp;
  314. break;
  315. case arg_BP:
  316. rv = &regs->bp;
  317. break;
  318. case arg_SI:
  319. rv = &regs->si;
  320. break;
  321. case arg_DI:
  322. rv = &regs->di;
  323. break;
  324. #ifdef __amd64__
  325. case arg_R8:
  326. rv = &regs->r8;
  327. break;
  328. case arg_R9:
  329. rv = &regs->r9;
  330. break;
  331. case arg_R10:
  332. rv = &regs->r10;
  333. break;
  334. case arg_R11:
  335. rv = &regs->r11;
  336. break;
  337. case arg_R12:
  338. rv = &regs->r12;
  339. break;
  340. case arg_R13:
  341. rv = &regs->r13;
  342. break;
  343. case arg_R14:
  344. rv = &regs->r14;
  345. break;
  346. case arg_R15:
  347. rv = &regs->r15;
  348. break;
  349. #endif
  350. default:
  351. printk(KERN_ERR "mmiotrace: Error reg no# %d\n", no);
  352. }
  353. return rv;
  354. }
  355. unsigned long get_ins_reg_val(unsigned long ins_addr, struct pt_regs *regs)
  356. {
  357. unsigned int opcode;
  358. int reg;
  359. unsigned char *p;
  360. struct prefix_bits prf;
  361. int i;
  362. p = (unsigned char *)ins_addr;
  363. p += skip_prefix(p, &prf);
  364. p += get_opcode(p, &opcode);
  365. for (i = 0; i < ARRAY_SIZE(reg_rop); i++)
  366. if (reg_rop[i] == opcode)
  367. goto do_work;
  368. for (i = 0; i < ARRAY_SIZE(reg_wop); i++)
  369. if (reg_wop[i] == opcode)
  370. goto do_work;
  371. printk(KERN_ERR "mmiotrace: Not a register instruction, opcode "
  372. "0x%02x\n", opcode);
  373. goto err;
  374. do_work:
  375. /* for STOS, source register is fixed */
  376. if (opcode == 0xAA || opcode == 0xAB) {
  377. reg = arg_AX;
  378. } else {
  379. unsigned char mod_rm = *p;
  380. reg = ((mod_rm >> 3) & 0x7) | (prf.rexr << 3);
  381. }
  382. switch (get_ins_reg_width(ins_addr)) {
  383. case 1:
  384. return *get_reg_w8(reg, prf.rex, regs);
  385. case 2:
  386. return *(unsigned short *)get_reg_w32(reg, regs);
  387. case 4:
  388. return *(unsigned int *)get_reg_w32(reg, regs);
  389. #ifdef __amd64__
  390. case 8:
  391. return *(unsigned long *)get_reg_w32(reg, regs);
  392. #endif
  393. default:
  394. printk(KERN_ERR "mmiotrace: Error width# %d\n", reg);
  395. }
  396. err:
  397. return 0;
  398. }
  399. unsigned long get_ins_imm_val(unsigned long ins_addr)
  400. {
  401. unsigned int opcode;
  402. unsigned char mod_rm;
  403. unsigned char mod;
  404. unsigned char *p;
  405. struct prefix_bits prf;
  406. int i;
  407. p = (unsigned char *)ins_addr;
  408. p += skip_prefix(p, &prf);
  409. p += get_opcode(p, &opcode);
  410. for (i = 0; i < ARRAY_SIZE(imm_wop); i++)
  411. if (imm_wop[i] == opcode)
  412. goto do_work;
  413. printk(KERN_ERR "mmiotrace: Not an immediate instruction, opcode "
  414. "0x%02x\n", opcode);
  415. goto err;
  416. do_work:
  417. mod_rm = *p;
  418. mod = mod_rm >> 6;
  419. p++;
  420. switch (mod) {
  421. case 0:
  422. /* if r/m is 5 we have a 32 disp (IA32 Manual 3, Table 2-2) */
  423. /* AMD64: XXX Check for address size prefix? */
  424. if ((mod_rm & 0x7) == 0x5)
  425. p += 4;
  426. break;
  427. case 1:
  428. p += 1;
  429. break;
  430. case 2:
  431. p += 4;
  432. break;
  433. case 3:
  434. default:
  435. printk(KERN_ERR "mmiotrace: not a memory access instruction "
  436. "at 0x%lx, rm_mod=0x%02x\n",
  437. ins_addr, mod_rm);
  438. }
  439. switch (get_ins_reg_width(ins_addr)) {
  440. case 1:
  441. return *(unsigned char *)p;
  442. case 2:
  443. return *(unsigned short *)p;
  444. case 4:
  445. return *(unsigned int *)p;
  446. #ifdef __amd64__
  447. case 8:
  448. return *(unsigned long *)p;
  449. #endif
  450. default:
  451. printk(KERN_ERR "mmiotrace: Error: width.\n");
  452. }
  453. err:
  454. return 0;
  455. }