• M
    efi/runtime-wrappers: Detect firmware IRQ flag corruption · 1d04ba17
    Mark Rutland 提交于
    The UEFI spec allows runtime services to be called with interrupts
    masked or unmasked, and if a runtime service function needs to mask
    interrupts, it must restore the mask to its original state before
    returning (i.e. from the PoV of the OS, this does not change across a
    call). Firmware should never unmask exceptions, as these may then be
    taken by the OS unexpectedly.
    
    Unfortunately, some firmware has been seen to unmask IRQs (and
    potentially other maskable exceptions) across runtime services calls,
    leaving IRQ flags corrupted after returning from a runtime services
    function call. This may be detected by the IRQ tracing code, but often
    goes unnoticed, leaving a potentially disastrous bug hidden.
    
    This patch detects when the IRQ flags are corrupted by an EFI runtime
    services call, logging the call and specific corruption to the console.
    While restoring the expected value of the flags is insufficient to avoid
    problems, we do so to avoid redundant warnings from elsewhere (e.g. IRQ
    tracing).
    
    The set of bits in flags which we want to check is architecture-specific
    (e.g. we want to check FIQ on arm64, but not the zero flag on x86), so
    each arch must provide ARCH_EFI_IRQ_FLAGS_MASK to describe those. In the
    absence of this mask, the check is a no-op, and we redundantly save the
    flags twice, but that will be short-lived as subsequent patches
    will implement this and remove the scaffolding.
    Signed-off-by: NMark Rutland <mark.rutland@arm.com>
    Signed-off-by: NMatt Fleming <matt@codeblueprint.co.uk>
    Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
    Cc: Borislav Petkov <bp@alien8.de>
    Cc: Catalin Marinas <catalin.marinas@arm.com>
    Cc: Leif Lindholm <leif.lindholm@linaro.org>
    Cc: Peter Zijlstra <peterz@infradead.org>
    Cc: Robin Murphy <robin.murphy@arm.com>
    Cc: Russell King <linux@arm.linux.org.uk>
    Cc: Thomas Gleixner <tglx@linutronix.de>
    Cc: Will Deacon <will.deacon@arm.com>
    Cc: linux-efi@vger.kernel.org
    Link: http://lkml.kernel.org/r/1461614832-17633-37-git-send-email-matt@codeblueprint.co.ukSigned-off-by: NIngo Molnar <mingo@kernel.org>
    1d04ba17
runtime-wrappers.c 9.8 KB