123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311 |
- /* SPDX-License-Identifier: GPL-2.0 */
- #ifndef __ASM_ALTERNATIVE_MACROS_H
- #define __ASM_ALTERNATIVE_MACROS_H
- #include <linux/const.h>
- #include <vdso/bits.h>
- #include <asm/cpucaps.h>
- #include <asm/insn-def.h>
- /*
- * Binutils 2.27.0 can't handle a 'UL' suffix on constants, so for the assembly
- * macros below we must use we must use `(1 << ARM64_CB_SHIFT)`.
- */
- #define ARM64_CB_SHIFT 15
- #define ARM64_CB_BIT BIT(ARM64_CB_SHIFT)
- #if ARM64_NCAPS >= ARM64_CB_BIT
- #error "cpucaps have overflown ARM64_CB_BIT"
- #endif
- #ifndef BUILD_FIPS140_KO
- #ifndef __ASSEMBLY__
- #include <linux/stringify.h>
- #define ALTINSTR_ENTRY(feature) \
- " .word 661b - .\n" /* label */ \
- " .word 663f - .\n" /* new instruction */ \
- " .hword " __stringify(feature) "\n" /* feature bit */ \
- " .byte 662b-661b\n" /* source len */ \
- " .byte 664f-663f\n" /* replacement len */
- #define ALTINSTR_ENTRY_CB(feature, cb) \
- " .word 661b - .\n" /* label */ \
- " .word " __stringify(cb) "- .\n" /* callback */ \
- " .hword " __stringify(feature) "\n" /* feature bit */ \
- " .byte 662b-661b\n" /* source len */ \
- " .byte 664f-663f\n" /* replacement len */
- /*
- * alternative assembly primitive:
- *
- * If any of these .org directive fail, it means that insn1 and insn2
- * don't have the same length. This used to be written as
- *
- * .if ((664b-663b) != (662b-661b))
- * .error "Alternatives instruction length mismatch"
- * .endif
- *
- * but most assemblers die if insn1 or insn2 have a .inst. This should
- * be fixed in a binutils release posterior to 2.25.51.0.2 (anything
- * containing commit 4e4d08cf7399b606 or c1baaddf8861).
- *
- * Alternatives with callbacks do not generate replacement instructions.
- */
- #define __ALTERNATIVE_CFG(oldinstr, newinstr, feature, cfg_enabled) \
- ".if "__stringify(cfg_enabled)" == 1\n" \
- "661:\n\t" \
- oldinstr "\n" \
- "662:\n" \
- ".pushsection .altinstructions,\"a\"\n" \
- ALTINSTR_ENTRY(feature) \
- ".popsection\n" \
- ".subsection 1\n" \
- "663:\n\t" \
- newinstr "\n" \
- "664:\n\t" \
- ".org . - (664b-663b) + (662b-661b)\n\t" \
- ".org . - (662b-661b) + (664b-663b)\n\t" \
- ".previous\n" \
- ".endif\n"
- #define __ALTERNATIVE_CFG_CB(oldinstr, feature, cfg_enabled, cb) \
- ".if "__stringify(cfg_enabled)" == 1\n" \
- "661:\n\t" \
- oldinstr "\n" \
- "662:\n" \
- ".pushsection .altinstructions,\"a\"\n" \
- ALTINSTR_ENTRY_CB(feature, cb) \
- ".popsection\n" \
- "663:\n\t" \
- "664:\n\t" \
- ".endif\n"
- #define _ALTERNATIVE_CFG(oldinstr, newinstr, feature, cfg, ...) \
- __ALTERNATIVE_CFG(oldinstr, newinstr, feature, IS_ENABLED(cfg))
- #define ALTERNATIVE_CB(oldinstr, feature, cb) \
- __ALTERNATIVE_CFG_CB(oldinstr, (1 << ARM64_CB_SHIFT) | (feature), 1, cb)
- #else
- #include <asm/assembler.h>
- .macro altinstruction_entry orig_offset alt_offset feature orig_len alt_len
- .word \orig_offset - .
- .word \alt_offset - .
- .hword (\feature)
- .byte \orig_len
- .byte \alt_len
- .endm
- .macro alternative_insn insn1, insn2, cap, enable = 1
- .if \enable
- 661: \insn1
- 662: .pushsection .altinstructions, "a"
- altinstruction_entry 661b, 663f, \cap, 662b-661b, 664f-663f
- .popsection
- .subsection 1
- 663: \insn2
- 664: .org . - (664b-663b) + (662b-661b)
- .org . - (662b-661b) + (664b-663b)
- .previous
- .endif
- .endm
- /*
- * Alternative sequences
- *
- * The code for the case where the capability is not present will be
- * assembled and linked as normal. There are no restrictions on this
- * code.
- *
- * The code for the case where the capability is present will be
- * assembled into a special section to be used for dynamic patching.
- * Code for that case must:
- *
- * 1. Be exactly the same length (in bytes) as the default code
- * sequence.
- *
- * 2. Not contain a branch target that is used outside of the
- * alternative sequence it is defined in (branches into an
- * alternative sequence are not fixed up).
- */
- /*
- * Begin an alternative code sequence.
- */
- .macro alternative_if_not cap
- .set .Lasm_alt_mode, 0
- .pushsection .altinstructions, "a"
- altinstruction_entry 661f, 663f, \cap, 662f-661f, 664f-663f
- .popsection
- 661:
- .endm
- .macro alternative_if cap
- .set .Lasm_alt_mode, 1
- .pushsection .altinstructions, "a"
- altinstruction_entry 663f, 661f, \cap, 664f-663f, 662f-661f
- .popsection
- .subsection 1
- .align 2 /* So GAS knows label 661 is suitably aligned */
- 661:
- .endm
- .macro alternative_cb cap, cb
- .set .Lasm_alt_mode, 0
- .pushsection .altinstructions, "a"
- altinstruction_entry 661f, \cb, (1 << ARM64_CB_SHIFT) | \cap, 662f-661f, 0
- .popsection
- 661:
- .endm
- /*
- * Provide the other half of the alternative code sequence.
- */
- .macro alternative_else
- 662:
- .if .Lasm_alt_mode==0
- .subsection 1
- .else
- .previous
- .endif
- 663:
- .endm
- /*
- * Complete an alternative code sequence.
- */
- .macro alternative_endif
- 664:
- .org . - (664b-663b) + (662b-661b)
- .org . - (662b-661b) + (664b-663b)
- .if .Lasm_alt_mode==0
- .previous
- .endif
- .endm
- /*
- * Callback-based alternative epilogue
- */
- .macro alternative_cb_end
- 662:
- .endm
- /*
- * Provides a trivial alternative or default sequence consisting solely
- * of NOPs. The number of NOPs is chosen automatically to match the
- * previous case.
- */
- .macro alternative_else_nop_endif
- alternative_else
- nops (662b-661b) / AARCH64_INSN_SIZE
- alternative_endif
- .endm
- #define _ALTERNATIVE_CFG(insn1, insn2, cap, cfg, ...) \
- alternative_insn insn1, insn2, cap, IS_ENABLED(cfg)
- #endif /* __ASSEMBLY__ */
- /*
- * Usage: asm(ALTERNATIVE(oldinstr, newinstr, feature));
- *
- * Usage: asm(ALTERNATIVE(oldinstr, newinstr, feature, CONFIG_FOO));
- * N.B. If CONFIG_FOO is specified, but not selected, the whole block
- * will be omitted, including oldinstr.
- */
- #define ALTERNATIVE(oldinstr, newinstr, ...) \
- _ALTERNATIVE_CFG(oldinstr, newinstr, __VA_ARGS__, 1)
- #ifndef __ASSEMBLY__
- #include <linux/types.h>
- static __always_inline bool
- alternative_has_feature_likely(unsigned long feature)
- {
- compiletime_assert(feature < ARM64_NCAPS,
- "feature must be < ARM64_NCAPS");
- asm_volatile_goto(
- ALTERNATIVE_CB("b %l[l_no]", %[feature], alt_cb_patch_nops)
- :
- : [feature] "i" (feature)
- :
- : l_no);
- return true;
- l_no:
- return false;
- }
- static __always_inline bool
- alternative_has_feature_unlikely(unsigned long feature)
- {
- compiletime_assert(feature < ARM64_NCAPS,
- "feature must be < ARM64_NCAPS");
- asm_volatile_goto(
- ALTERNATIVE("nop", "b %l[l_yes]", %[feature])
- :
- : [feature] "i" (feature)
- :
- : l_yes);
- return false;
- l_yes:
- return true;
- }
- #endif /* __ASSEMBLY__ */
- #else
- /*
- * The FIPS140 module does not support alternatives patching, as this
- * invalidates the HMAC digest of the .text section. However, some alternatives
- * are known to be irrelevant so we can tolerate them in the FIPS140 module, as
- * they will never be applied in the first place in the use cases that the
- * FIPS140 module targets (Android running on a production phone). Any other
- * uses of alternatives should be avoided, as it is not safe in the general
- * case to simply use the default sequence in one place (the fips module) and
- * the alternative sequence everywhere else.
- *
- * Below is an allowlist of features that we can ignore, by simply taking the
- * safe default instruction sequence. Note that this implies that the FIPS140
- * module is not compatible with VHE, or with pseudo-NMI support.
- */
- #define __ALT_ARM64_HAS_LDAPR 0,
- #define __ALT_ARM64_HAS_VIRT_HOST_EXTN 0,
- #define __ALT_ARM64_HAS_IRQ_PRIO_MASKING 0,
- #define ALTERNATIVE(oldinstr, newinstr, feature, ...) \
- _ALTERNATIVE(oldinstr, __ALT_ ## feature, #feature)
- #define _ALTERNATIVE(oldinstr, feature, feature_str) \
- __take_second_arg(feature oldinstr, \
- ".err Feature " feature_str " not supported in fips140 module")
- #ifndef __ASSEMBLY__
- #include <linux/types.h>
- static __always_inline bool
- alternative_has_feature_likely(unsigned long feature)
- {
- return feature == ARM64_HAS_LDAPR ||
- feature == ARM64_HAS_VIRT_HOST_EXTN ||
- feature == ARM64_HAS_IRQ_PRIO_MASKING;
- }
- #define alternative_has_feature_unlikely alternative_has_feature_likely
- #endif /* !__ASSEMBLY__ */
- #endif /* BUILD_FIPS140_KO */
- #endif /* __ASM_ALTERNATIVE_MACROS_H */
|