traps_32.c 22.3 KB
Newer Older
L
Linus Torvalds 已提交
1 2
/*
 *  Copyright (C) 1991, 1992  Linus Torvalds
3
 *  Copyright (C) 2000, 2001, 2002 Andi Kleen, SuSE Labs
L
Linus Torvalds 已提交
4 5 6 7 8 9 10 11 12
 *
 *  Pentium III FXSR, SSE support
 *	Gareth Hughes <gareth@valinux.com>, May 2000
 */

/*
 * 'Traps.c' handles hardware traps and faults after we have saved some
 * state in 'asm.s'.
 */
I
Ingo Molnar 已提交
13 14 15 16 17 18 19 20
#include <linux/interrupt.h>
#include <linux/kallsyms.h>
#include <linux/spinlock.h>
#include <linux/highmem.h>
#include <linux/kprobes.h>
#include <linux/uaccess.h>
#include <linux/utsname.h>
#include <linux/kdebug.h>
L
Linus Torvalds 已提交
21
#include <linux/kernel.h>
I
Ingo Molnar 已提交
22 23
#include <linux/module.h>
#include <linux/ptrace.h>
L
Linus Torvalds 已提交
24
#include <linux/string.h>
I
Ingo Molnar 已提交
25 26
#include <linux/unwind.h>
#include <linux/delay.h>
L
Linus Torvalds 已提交
27
#include <linux/errno.h>
I
Ingo Molnar 已提交
28 29
#include <linux/kexec.h>
#include <linux/sched.h>
L
Linus Torvalds 已提交
30 31
#include <linux/timer.h>
#include <linux/init.h>
J
Jeremy Fitzhardinge 已提交
32
#include <linux/bug.h>
I
Ingo Molnar 已提交
33 34
#include <linux/nmi.h>
#include <linux/mm.h>
L
Linus Torvalds 已提交
35 36 37 38 39 40 41 42 43 44

#ifdef CONFIG_EISA
#include <linux/ioport.h>
#include <linux/eisa.h>
#endif

#ifdef CONFIG_MCA
#include <linux/mca.h>
#endif

D
Dave Jiang 已提交
45 46 47 48
#if defined(CONFIG_EDAC)
#include <linux/edac.h>
#endif

49
#include <asm/processor-flags.h>
I
Ingo Molnar 已提交
50 51
#include <asm/arch_hooks.h>
#include <asm/stacktrace.h>
L
Linus Torvalds 已提交
52 53
#include <asm/processor.h>
#include <asm/debugreg.h>
I
Ingo Molnar 已提交
54 55 56
#include <asm/atomic.h>
#include <asm/system.h>
#include <asm/unwind.h>
L
Linus Torvalds 已提交
57 58 59 60
#include <asm/desc.h>
#include <asm/i387.h>
#include <asm/nmi.h>
#include <asm/smp.h>
I
Ingo Molnar 已提交
61
#include <asm/io.h>
62
#include <asm/traps.h>
L
Linus Torvalds 已提交
63 64

#include "mach_traps.h"
65
#include "cpu/mcheck/mce.h"
L
Linus Torvalds 已提交
66

67 68 69
DECLARE_BITMAP(used_vectors, NR_VECTORS);
EXPORT_SYMBOL_GPL(used_vectors);

L
Linus Torvalds 已提交
70 71 72
asmlinkage int system_call(void);

/* Do we ignore FPU interrupts ? */
I
Ingo Molnar 已提交
73
char ignore_fpu_irq;
L
Linus Torvalds 已提交
74 75 76 77 78 79

/*
 * The IDT has to be page-aligned to simplify the Pentium
 * F0 0F bug workaround.. We have a special link segment
 * for this.
 */
80
gate_desc idt_table[256]
81
	__attribute__((__section__(".data.idt"))) = { { { { 0, 0 } } }, };
L
Linus Torvalds 已提交
82

83
static int ignore_nmis;
84

85 86 87 88 89 90
static inline void conditional_sti(struct pt_regs *regs)
{
	if (regs->flags & X86_EFLAGS_IF)
		local_irq_enable();
}

91 92 93 94 95 96 97 98 99 100 101 102 103 104
static inline void preempt_conditional_sti(struct pt_regs *regs)
{
	inc_preempt_count();
	if (regs->flags & X86_EFLAGS_IF)
		local_irq_enable();
}

static inline void preempt_conditional_cli(struct pt_regs *regs)
{
	if (regs->flags & X86_EFLAGS_IF)
		local_irq_disable();
	dec_preempt_count();
}

I
Ingo Molnar 已提交
105 106
static inline void
die_if_kernel(const char *str, struct pt_regs *regs, long err)
L
Linus Torvalds 已提交
107
{
108
	if (!user_mode_vm(regs))
L
Linus Torvalds 已提交
109 110 111
		die(str, regs, err);
}

112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152
/*
 * Perform the lazy TSS's I/O bitmap copy. If the TSS has an
 * invalid offset set (the LAZY one) and the faulting thread has
 * a valid I/O bitmap pointer, we copy the I/O bitmap in the TSS,
 * we set the offset field correctly and return 1.
 */
static int lazy_iobitmap_copy(void)
{
	struct thread_struct *thread;
	struct tss_struct *tss;
	int cpu;

	cpu = get_cpu();
	tss = &per_cpu(init_tss, cpu);
	thread = &current->thread;

	if (tss->x86_tss.io_bitmap_base == INVALID_IO_BITMAP_OFFSET_LAZY &&
	    thread->io_bitmap_ptr) {
		memcpy(tss->io_bitmap, thread->io_bitmap_ptr,
		       thread->io_bitmap_max);
		/*
		 * If the previously set map was extending to higher ports
		 * than the current one, pad extra space with 0xff (no access).
		 */
		if (thread->io_bitmap_max < tss->io_bitmap_max) {
			memset((char *) tss->io_bitmap +
				thread->io_bitmap_max, 0xff,
				tss->io_bitmap_max - thread->io_bitmap_max);
		}
		tss->io_bitmap_max = thread->io_bitmap_max;
		tss->x86_tss.io_bitmap_base = IO_BITMAP_OFFSET;
		tss->io_bitmap_owner = thread;
		put_cpu();

		return 1;
	}
	put_cpu();

	return 0;
}

I
Ingo Molnar 已提交
153
static void __kprobes
154
do_trap(int trapnr, int signr, char *str, struct pt_regs *regs,
I
Ingo Molnar 已提交
155
	long error_code, siginfo_t *info)
L
Linus Torvalds 已提交
156
{
157 158
	struct task_struct *tsk = current;

159
	if (regs->flags & X86_VM_MASK) {
160 161 162 163 164
		/*
		 * traps 0, 1, 3, 4, and 5 should be forwarded to vm86.
		 * On nmi (interrupt 2), do_trap should not be called.
		 */
		if (trapnr < 6)
L
Linus Torvalds 已提交
165 166 167 168
			goto vm86_trap;
		goto trap_signal;
	}

169
	if (!user_mode(regs))
L
Linus Torvalds 已提交
170 171
		goto kernel_trap;

I
Ingo Molnar 已提交
172 173 174 175 176 177 178 179 180 181 182 183
trap_signal:
	/*
	 * We want error_code and trap_no set for userspace faults and
	 * kernelspace faults which result in die(), but not
	 * kernelspace faults which are fixed up.  die() gives the
	 * process no chance to handle the signal and notice the
	 * kernel fault information, so that won't result in polluting
	 * the information about previously queued, but not yet
	 * delivered, faults.  See also do_general_protection below.
	 */
	tsk->thread.error_code = error_code;
	tsk->thread.trap_no = trapnr;
184

I
Ingo Molnar 已提交
185 186 187 188 189
	if (info)
		force_sig_info(signr, info, tsk);
	else
		force_sig(signr, tsk);
	return;
L
Linus Torvalds 已提交
190

I
Ingo Molnar 已提交
191 192 193 194 195
kernel_trap:
	if (!fixup_exception(regs)) {
		tsk->thread.error_code = error_code;
		tsk->thread.trap_no = trapnr;
		die(str, regs, error_code);
L
Linus Torvalds 已提交
196
	}
I
Ingo Molnar 已提交
197
	return;
L
Linus Torvalds 已提交
198

I
Ingo Molnar 已提交
199 200 201 202 203
vm86_trap:
	if (handle_vm86_trap((struct kernel_vm86_regs *) regs,
						error_code, trapnr))
		goto trap_signal;
	return;
L
Linus Torvalds 已提交
204 205
}

I
Ingo Molnar 已提交
206
#define DO_ERROR(trapnr, signr, str, name)				\
207
dotraplinkage void do_##name(struct pt_regs *regs, long error_code)	\
I
Ingo Molnar 已提交
208 209
{									\
	if (notify_die(DIE_TRAP, str, regs, error_code, trapnr, signr)	\
210
							== NOTIFY_STOP)	\
I
Ingo Molnar 已提交
211
		return;							\
212
	conditional_sti(regs);						\
213
	do_trap(trapnr, signr, str, regs, error_code, NULL);		\
L
Linus Torvalds 已提交
214 215
}

216
#define DO_ERROR_INFO(trapnr, signr, str, name, sicode, siaddr)		\
217
dotraplinkage void do_##name(struct pt_regs *regs, long error_code)	\
I
Ingo Molnar 已提交
218 219 220 221 222 223 224
{									\
	siginfo_t info;							\
	info.si_signo = signr;						\
	info.si_errno = 0;						\
	info.si_code = sicode;						\
	info.si_addr = (void __user *)siaddr;				\
	if (notify_die(DIE_TRAP, str, regs, error_code, trapnr, signr)	\
225
							== NOTIFY_STOP)	\
I
Ingo Molnar 已提交
226
		return;							\
227
	conditional_sti(regs);						\
228
	do_trap(trapnr, signr, str, regs, error_code, &info);		\
L
Linus Torvalds 已提交
229 230
}

231 232 233 234
DO_ERROR_INFO(0, SIGFPE, "divide error", divide_error, FPE_INTDIV, regs->ip)
DO_ERROR(4, SIGSEGV, "overflow", overflow)
DO_ERROR(5, SIGSEGV, "bounds", bounds)
DO_ERROR_INFO(6, SIGILL, "invalid opcode", invalid_op, ILL_ILLOPN, regs->ip)
235
DO_ERROR(9, SIGFPE, "coprocessor segment overrun", coprocessor_segment_overrun)
236
DO_ERROR(10, SIGSEGV, "invalid TSS", invalid_TSS)
237
DO_ERROR(11, SIGBUS, "segment not present", segment_not_present)
238
DO_ERROR(12, SIGBUS, "stack segment", stack_segment)
239
DO_ERROR_INFO(17, SIGBUS, "alignment check", alignment_check, BUS_ADRALN, 0)
L
Linus Torvalds 已提交
240

241
dotraplinkage void __kprobes
242
do_general_protection(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
243
{
244
	struct task_struct *tsk;
I
Ingo Molnar 已提交
245

246 247
	conditional_sti(regs);

248 249
	if (lazy_iobitmap_copy()) {
		/* restart the faulting instruction */
L
Linus Torvalds 已提交
250 251 252
		return;
	}

253
	if (regs->flags & X86_VM_MASK)
L
Linus Torvalds 已提交
254 255
		goto gp_in_vm86;

256
	tsk = current;
257
	if (!user_mode(regs))
L
Linus Torvalds 已提交
258 259
		goto gp_in_kernel;

260 261
	tsk->thread.error_code = error_code;
	tsk->thread.trap_no = 13;
I
Ingo Molnar 已提交
262

263 264
	if (show_unhandled_signals && unhandled_signal(tsk, SIGSEGV) &&
			printk_ratelimit()) {
265
		printk(KERN_INFO
266 267 268
			"%s[%d] general protection ip:%lx sp:%lx error:%lx",
			tsk->comm, task_pid_nr(tsk),
			regs->ip, regs->sp, error_code);
269 270 271
		print_vma_addr(" in ", regs->ip);
		printk("\n");
	}
272

273
	force_sig(SIGSEGV, tsk);
L
Linus Torvalds 已提交
274 275 276 277 278 279 280 281
	return;

gp_in_vm86:
	local_irq_enable();
	handle_vm86_fault((struct kernel_vm86_regs *) regs, error_code);
	return;

gp_in_kernel:
282 283 284 285 286 287
	if (fixup_exception(regs))
		return;

	tsk->thread.error_code = error_code;
	tsk->thread.trap_no = 13;
	if (notify_die(DIE_GPF, "general protection fault", regs,
L
Linus Torvalds 已提交
288
				error_code, 13, SIGSEGV) == NOTIFY_STOP)
289 290
		return;
	die("general protection fault", regs, error_code);
L
Linus Torvalds 已提交
291 292
}

293
static notrace __kprobes void
I
Ingo Molnar 已提交
294
mem_parity_error(unsigned char reason, struct pt_regs *regs)
L
Linus Torvalds 已提交
295
{
I
Ingo Molnar 已提交
296 297 298 299 300 301
	printk(KERN_EMERG
		"Uhhuh. NMI received for unknown reason %02x on CPU %d.\n",
			reason, smp_processor_id());

	printk(KERN_EMERG
		"You have some hardware problem, likely on the PCI bus.\n");
D
Dave Jiang 已提交
302 303

#if defined(CONFIG_EDAC)
I
Ingo Molnar 已提交
304
	if (edac_handler_set()) {
D
Dave Jiang 已提交
305 306 307 308 309
		edac_atomic_assert_error();
		return;
	}
#endif

310
	if (panic_on_unrecovered_nmi)
I
Ingo Molnar 已提交
311
		panic("NMI: Not continuing");
L
Linus Torvalds 已提交
312

313
	printk(KERN_EMERG "Dazed and confused, but trying to continue\n");
L
Linus Torvalds 已提交
314 315 316 317 318

	/* Clear and disable the memory parity error line. */
	clear_mem_error(reason);
}

319
static notrace __kprobes void
I
Ingo Molnar 已提交
320
io_check_error(unsigned char reason, struct pt_regs *regs)
L
Linus Torvalds 已提交
321 322 323
{
	unsigned long i;

324
	printk(KERN_EMERG "NMI: IOCK error (debug interrupt?)\n");
L
Linus Torvalds 已提交
325 326 327 328 329
	show_registers(regs);

	/* Re-enable the IOCK line, wait for a few seconds */
	reason = (reason & 0xf) | 8;
	outb(reason, 0x61);
I
Ingo Molnar 已提交
330

L
Linus Torvalds 已提交
331
	i = 2000;
I
Ingo Molnar 已提交
332 333 334
	while (--i)
		udelay(1000);

L
Linus Torvalds 已提交
335 336 337 338
	reason &= ~8;
	outb(reason, 0x61);
}

339
static notrace __kprobes void
I
Ingo Molnar 已提交
340
unknown_nmi_error(unsigned char reason, struct pt_regs *regs)
L
Linus Torvalds 已提交
341
{
J
Jason Wessel 已提交
342 343
	if (notify_die(DIE_NMIUNKNOWN, "nmi", regs, reason, 2, SIGINT) == NOTIFY_STOP)
		return;
L
Linus Torvalds 已提交
344
#ifdef CONFIG_MCA
I
Ingo Molnar 已提交
345 346 347 348 349
	/*
	 * Might actually be able to figure out what the guilty party
	 * is:
	 */
	if (MCA_bus) {
L
Linus Torvalds 已提交
350 351 352 353
		mca_handle_nmi();
		return;
	}
#endif
I
Ingo Molnar 已提交
354 355 356 357
	printk(KERN_EMERG
		"Uhhuh. NMI received for unknown reason %02x on CPU %d.\n",
			reason, smp_processor_id());

358
	printk(KERN_EMERG "Do you have a strange power saving mode enabled?\n");
359
	if (panic_on_unrecovered_nmi)
I
Ingo Molnar 已提交
360
		panic("NMI: Not continuing");
361

362
	printk(KERN_EMERG "Dazed and confused, but trying to continue\n");
L
Linus Torvalds 已提交
363 364 365 366
}

static DEFINE_SPINLOCK(nmi_print_lock);

367
void notrace __kprobes die_nmi(char *str, struct pt_regs *regs, int do_panic)
L
Linus Torvalds 已提交
368
{
369
	if (notify_die(DIE_NMIWATCHDOG, str, regs, 0, 2, SIGINT) == NOTIFY_STOP)
370 371
		return;

L
Linus Torvalds 已提交
372 373 374
	spin_lock(&nmi_print_lock);
	/*
	* We are in trouble anyway, lets at least try
I
Ingo Molnar 已提交
375
	* to get a message out:
L
Linus Torvalds 已提交
376 377
	*/
	bust_spinlocks(1);
378
	printk(KERN_EMERG "%s", str);
379 380
	printk(" on CPU%d, ip %08lx, registers:\n",
		smp_processor_id(), regs->ip);
L
Linus Torvalds 已提交
381
	show_registers(regs);
382 383
	if (do_panic)
		panic("Non maskable interrupt");
L
Linus Torvalds 已提交
384 385 386
	console_silent();
	spin_unlock(&nmi_print_lock);
	bust_spinlocks(0);
387

I
Ingo Molnar 已提交
388 389 390 391
	/*
	 * If we are in kernel we are probably nested up pretty bad
	 * and might aswell get out now while we still can:
	 */
392
	if (!user_mode_vm(regs)) {
393 394 395 396
		current->thread.trap_no = 2;
		crash_kexec(regs);
	}

L
Linus Torvalds 已提交
397 398 399
	do_exit(SIGSEGV);
}

400
static notrace __kprobes void default_do_nmi(struct pt_regs *regs)
L
Linus Torvalds 已提交
401 402
{
	unsigned char reason = 0;
403 404 405
	int cpu;

	cpu = smp_processor_id();
L
Linus Torvalds 已提交
406

407 408
	/* Only the BSP gets external NMIs from the system. */
	if (!cpu)
L
Linus Torvalds 已提交
409
		reason = get_nmi_reason();
I
Ingo Molnar 已提交
410

L
Linus Torvalds 已提交
411
	if (!(reason & 0xc0)) {
412
		if (notify_die(DIE_NMI_IPI, "nmi_ipi", regs, reason, 2, SIGINT)
413
								== NOTIFY_STOP)
L
Linus Torvalds 已提交
414 415 416 417 418 419
			return;
#ifdef CONFIG_X86_LOCAL_APIC
		/*
		 * Ok, so this is none of the documented NMI sources,
		 * so it must be the NMI watchdog.
		 */
420
		if (nmi_watchdog_tick(regs, reason))
L
Linus Torvalds 已提交
421
			return;
422
		if (!do_nmi_callback(regs, cpu))
423
			unknown_nmi_error(reason, regs);
I
Ingo Molnar 已提交
424 425 426
#else
		unknown_nmi_error(reason, regs);
#endif
427

L
Linus Torvalds 已提交
428 429
		return;
	}
430
	if (notify_die(DIE_NMI, "nmi", regs, reason, 2, SIGINT) == NOTIFY_STOP)
L
Linus Torvalds 已提交
431
		return;
432 433

	/* AK: following checks seem to be broken on modern chipsets. FIXME */
L
Linus Torvalds 已提交
434 435 436 437 438 439
	if (reason & 0x80)
		mem_parity_error(reason, regs);
	if (reason & 0x40)
		io_check_error(reason, regs);
	/*
	 * Reassert NMI in case it became active meanwhile
I
Ingo Molnar 已提交
440
	 * as it's edge-triggered:
L
Linus Torvalds 已提交
441 442 443 444
	 */
	reassert_nmi();
}

445 446
dotraplinkage notrace __kprobes void
do_nmi(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
447 448 449 450 451 452
{
	int cpu;

	nmi_enter();

	cpu = smp_processor_id();
Z
Zwane Mwaikambo 已提交
453

L
Linus Torvalds 已提交
454 455
	++nmi_count(cpu);

456 457
	if (!ignore_nmis)
		default_do_nmi(regs);
L
Linus Torvalds 已提交
458 459 460 461

	nmi_exit();
}

462 463 464 465 466 467 468 469 470 471 472 473
void stop_nmi(void)
{
	acpi_nmi_disable();
	ignore_nmis++;
}

void restart_nmi(void)
{
	ignore_nmis--;
	acpi_nmi_enable();
}

474
dotraplinkage void __kprobes do_int3(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
475
{
476
#ifdef CONFIG_KPROBES
L
Linus Torvalds 已提交
477 478
	if (notify_die(DIE_INT3, "int3", regs, error_code, 3, SIGTRAP)
			== NOTIFY_STOP)
479
		return;
480
	conditional_sti(regs);
481 482 483 484 485
#else
	if (notify_die(DIE_TRAP, "int3", regs, error_code, 3, SIGTRAP)
			== NOTIFY_STOP)
		return;
#endif
I
Ingo Molnar 已提交
486

487
	do_trap(3, SIGTRAP, "int3", regs, error_code, NULL);
L
Linus Torvalds 已提交
488 489 490 491 492 493 494 495 496 497 498 499
}

/*
 * Our handling of the processor debug registers is non-trivial.
 * We do not clear them on entry and exit from the kernel. Therefore
 * it is possible to get a watchpoint trap here from inside the kernel.
 * However, the code in ./ptrace.c has ensured that the user can
 * only set watchpoints on userspace addresses. Therefore the in-kernel
 * watchpoint trap can only occur in code which is reading/writing
 * from user space. Such code must not hold kernel locks (since it
 * can equally take a page fault), therefore it is safe to call
 * force_sig_info even though that claims and releases locks.
I
Ingo Molnar 已提交
500
 *
L
Linus Torvalds 已提交
501 502 503 504 505 506 507 508 509 510 511
 * Code in ./signal.c ensures that the debug control register
 * is restored before we deliver any signal, and therefore that
 * user code runs with the correct debug control register even though
 * we clear it here.
 *
 * Being careful here means that we don't have to be as careful in a
 * lot of more complicated places (task switching can be a bit lazy
 * about restoring all the debug state, and ptrace doesn't have to
 * find every occurrence of the TF bit that could be saved away even
 * by user code)
 */
512
dotraplinkage void __kprobes do_debug(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
513 514
{
	struct task_struct *tsk = current;
515
	unsigned long condition;
516
	int si_code;
L
Linus Torvalds 已提交
517

518
	get_debugreg(condition, 6);
L
Linus Torvalds 已提交
519

520 521 522 523 524 525
	/*
	 * The processor cleared BTF, so don't mark that we need it set.
	 */
	clear_tsk_thread_flag(tsk, TIF_DEBUGCTLMSR);
	tsk->thread.debugctlmsr = 0;

L
Linus Torvalds 已提交
526
	if (notify_die(DIE_DEBUG, "debug", regs, condition, error_code,
527
						SIGTRAP) == NOTIFY_STOP)
L
Linus Torvalds 已提交
528
		return;
529

L
Linus Torvalds 已提交
530
	/* It's safe to allow irq's after DR6 has been saved */
531
	preempt_conditional_sti(regs);
L
Linus Torvalds 已提交
532 533 534

	/* Mask out spurious debug traps due to lazy DR7 setting */
	if (condition & (DR_TRAP0|DR_TRAP1|DR_TRAP2|DR_TRAP3)) {
535
		if (!tsk->thread.debugreg7)
L
Linus Torvalds 已提交
536 537 538
			goto clear_dr7;
	}

539
	if (regs->flags & X86_VM_MASK)
L
Linus Torvalds 已提交
540 541 542
		goto debug_vm86;

	/* Save debug status register where ptrace can see it */
543
	tsk->thread.debugreg6 = condition;
L
Linus Torvalds 已提交
544 545 546 547 548 549

	/*
	 * Single-stepping through TF: make sure we ignore any events in
	 * kernel space (but re-enable TF when returning to user mode).
	 */
	if (condition & DR_STEP) {
550
		if (!user_mode(regs))
L
Linus Torvalds 已提交
551 552 553
			goto clear_TF_reenable;
	}

554
	si_code = get_si_code(condition);
L
Linus Torvalds 已提交
555
	/* Ok, finally something we can handle */
556
	send_sigtrap(tsk, regs, error_code, si_code);
L
Linus Torvalds 已提交
557

I
Ingo Molnar 已提交
558 559
	/*
	 * Disable additional traps. They'll be re-enabled when
L
Linus Torvalds 已提交
560 561 562
	 * the signal is delivered.
	 */
clear_dr7:
563
	set_debugreg(0, 7);
564
	preempt_conditional_cli(regs);
L
Linus Torvalds 已提交
565 566 567 568
	return;

debug_vm86:
	handle_vm86_trap((struct kernel_vm86_regs *) regs, error_code, 1);
569
	preempt_conditional_cli(regs);
L
Linus Torvalds 已提交
570 571 572 573
	return;

clear_TF_reenable:
	set_tsk_thread_flag(tsk, TIF_SINGLESTEP);
574
	regs->flags &= ~X86_EFLAGS_TF;
575
	preempt_conditional_cli(regs);
L
Linus Torvalds 已提交
576 577 578 579 580 581 582 583
	return;
}

/*
 * Note that we play around with the 'TS' bit in an attempt to get
 * the correct behaviour even in the presence of the asynchronous
 * IRQ13 behaviour
 */
584
void math_error(void __user *ip)
L
Linus Torvalds 已提交
585
{
I
Ingo Molnar 已提交
586
	struct task_struct *task;
L
Linus Torvalds 已提交
587
	siginfo_t info;
588
	unsigned short cwd, swd;
L
Linus Torvalds 已提交
589 590 591 592 593 594 595 596 597 598 599

	/*
	 * Save the info for the exception handler and clear the error.
	 */
	task = current;
	save_init_fpu(task);
	task->thread.trap_no = 16;
	task->thread.error_code = 0;
	info.si_signo = SIGFPE;
	info.si_errno = 0;
	info.si_code = __SI_FAULT;
600
	info.si_addr = ip;
L
Linus Torvalds 已提交
601 602 603 604 605 606
	/*
	 * (~cwd & swd) will mask out exceptions that are not set to unmasked
	 * status.  0x3f is the exception bits in these regs, 0x200 is the
	 * C1 reg you need in case of a stack fault, 0x040 is the stack
	 * fault bit.  We should only be taking one exception at a time,
	 * so if this combination doesn't produce any single exception,
607
	 * then we have a bad program that isn't synchronizing its FPU usage
L
Linus Torvalds 已提交
608 609 610 611 612
	 * and it will suffer the consequences since we won't be able to
	 * fully reproduce the context of the exception
	 */
	cwd = get_fpu_cwd(task);
	swd = get_fpu_swd(task);
613
	switch (swd & ~cwd & 0x3f) {
I
Ingo Molnar 已提交
614 615
	case 0x000: /* No unmasked exception */
		return;
616
	default: /* Multiple exceptions */
I
Ingo Molnar 已提交
617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638
		break;
	case 0x001: /* Invalid Op */
		/*
		 * swd & 0x240 == 0x040: Stack Underflow
		 * swd & 0x240 == 0x240: Stack Overflow
		 * User must clear the SF bit (0x40) if set
		 */
		info.si_code = FPE_FLTINV;
		break;
	case 0x002: /* Denormalize */
	case 0x010: /* Underflow */
		info.si_code = FPE_FLTUND;
		break;
	case 0x004: /* Zero Divide */
		info.si_code = FPE_FLTDIV;
		break;
	case 0x008: /* Overflow */
		info.si_code = FPE_FLTOVF;
		break;
	case 0x020: /* Precision */
		info.si_code = FPE_FLTRES;
		break;
L
Linus Torvalds 已提交
639 640 641 642
	}
	force_sig_info(SIGFPE, &info, task);
}

643
dotraplinkage void do_coprocessor_error(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
644
{
645
	conditional_sti(regs);
L
Linus Torvalds 已提交
646
	ignore_fpu_irq = 1;
647
	math_error((void __user *)regs->ip);
L
Linus Torvalds 已提交
648 649
}

650
static void simd_math_error(void __user *ip)
L
Linus Torvalds 已提交
651
{
I
Ingo Molnar 已提交
652 653
	struct task_struct *task;
	siginfo_t info;
654
	unsigned short mxcsr;
L
Linus Torvalds 已提交
655 656 657 658 659 660 661 662 663 664 665

	/*
	 * Save the info for the exception handler and clear the error.
	 */
	task = current;
	save_init_fpu(task);
	task->thread.trap_no = 19;
	task->thread.error_code = 0;
	info.si_signo = SIGFPE;
	info.si_errno = 0;
	info.si_code = __SI_FAULT;
666
	info.si_addr = ip;
L
Linus Torvalds 已提交
667 668 669 670 671 672 673 674
	/*
	 * The SIMD FPU exceptions are handled a little differently, as there
	 * is only a single status/control register.  Thus, to determine which
	 * unmasked exception was caught we must mask the exception mask bits
	 * at 0x1f80, and then use these to mask the exception bits at 0x3f.
	 */
	mxcsr = get_fpu_mxcsr(task);
	switch (~((mxcsr & 0x1f80) >> 7) & (mxcsr & 0x3f)) {
I
Ingo Molnar 已提交
675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693
	case 0x000:
	default:
		break;
	case 0x001: /* Invalid Op */
		info.si_code = FPE_FLTINV;
		break;
	case 0x002: /* Denormalize */
	case 0x010: /* Underflow */
		info.si_code = FPE_FLTUND;
		break;
	case 0x004: /* Zero Divide */
		info.si_code = FPE_FLTDIV;
		break;
	case 0x008: /* Overflow */
		info.si_code = FPE_FLTOVF;
		break;
	case 0x020: /* Precision */
		info.si_code = FPE_FLTRES;
		break;
L
Linus Torvalds 已提交
694 695 696 697
	}
	force_sig_info(SIGFPE, &info, task);
}

698 699
dotraplinkage void
do_simd_coprocessor_error(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
700
{
701 702
	conditional_sti(regs);

L
Linus Torvalds 已提交
703 704 705
	if (cpu_has_xmm) {
		/* Handle SIMD FPU exceptions on PIII+ processors. */
		ignore_fpu_irq = 1;
706
		simd_math_error((void __user *)regs->ip);
I
Ingo Molnar 已提交
707 708 709 710 711 712
		return;
	}
	/*
	 * Handle strange cache flush from user space exception
	 * in all other cases.  This is undocumented behaviour.
	 */
713
	if (regs->flags & X86_VM_MASK) {
I
Ingo Molnar 已提交
714 715
		handle_vm86_fault((struct kernel_vm86_regs *)regs, error_code);
		return;
L
Linus Torvalds 已提交
716
	}
I
Ingo Molnar 已提交
717 718 719 720
	current->thread.trap_no = 19;
	current->thread.error_code = error_code;
	die_if_kernel("cache flush denied", regs, error_code);
	force_sig(SIGSEGV, current);
L
Linus Torvalds 已提交
721 722
}

723 724
dotraplinkage void
do_spurious_interrupt_bug(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
725
{
726
	conditional_sti(regs);
L
Linus Torvalds 已提交
727 728
#if 0
	/* No need to warn about this any longer. */
I
Ingo Molnar 已提交
729
	printk(KERN_INFO "Ignoring P6 Local APIC Spurious Interrupt Bug...\n");
L
Linus Torvalds 已提交
730 731 732
#endif
}

I
Ingo Molnar 已提交
733
unsigned long patch_espfix_desc(unsigned long uesp, unsigned long kesp)
L
Linus Torvalds 已提交
734
{
G
Glauber Costa 已提交
735
	struct desc_struct *gdt = get_cpu_gdt_table(smp_processor_id());
S
Stas Sergeev 已提交
736 737 738 739
	unsigned long base = (kesp - uesp) & -THREAD_SIZE;
	unsigned long new_kesp = kesp - base;
	unsigned long lim_pages = (new_kesp | (THREAD_SIZE - 1)) >> PAGE_SHIFT;
	__u64 desc = *(__u64 *)&gdt[GDT_ENTRY_ESPFIX_SS];
I
Ingo Molnar 已提交
740

S
Stas Sergeev 已提交
741
	/* Set up base for espfix segment */
I
Ingo Molnar 已提交
742 743
	desc &= 0x00f0ff0000000000ULL;
	desc |=	((((__u64)base) << 16) & 0x000000ffffff0000ULL) |
S
Stas Sergeev 已提交
744 745 746 747
		((((__u64)base) << 32) & 0xff00000000000000ULL) |
		((((__u64)lim_pages) << 32) & 0x000f000000000000ULL) |
		(lim_pages & 0xffff);
	*(__u64 *)&gdt[GDT_ENTRY_ESPFIX_SS] = desc;
I
Ingo Molnar 已提交
748

S
Stas Sergeev 已提交
749
	return new_kesp;
L
Linus Torvalds 已提交
750 751 752
}

/*
I
Ingo Molnar 已提交
753
 * 'math_state_restore()' saves the current math information in the
L
Linus Torvalds 已提交
754 755 756 757 758 759 760 761
 * old math state array, and gets the new ones from the current task
 *
 * Careful.. There are problems with IBM-designed IRQ13 behaviour.
 * Don't touch unless you *really* know how it works.
 *
 * Must be called with kernel preemption disabled (in this case,
 * local interrupts are disabled at the call-site in entry.S).
 */
762
asmlinkage void math_state_restore(void)
L
Linus Torvalds 已提交
763 764 765 766
{
	struct thread_info *thread = current_thread_info();
	struct task_struct *tsk = thread->task;

767 768 769 770 771 772 773 774 775 776 777 778 779 780 781
	if (!tsk_used_math(tsk)) {
		local_irq_enable();
		/*
		 * does a slab alloc which can sleep
		 */
		if (init_fpu(tsk)) {
			/*
			 * ran out of memory!
			 */
			do_group_exit(SIGKILL);
			return;
		}
		local_irq_disable();
	}

I
Ingo Molnar 已提交
782
	clts();				/* Allow maths ops (or we recurse) */
L
Linus Torvalds 已提交
783 784
	restore_fpu(tsk);
	thread->status |= TS_USEDFPU;	/* So we fnsave on switch_to() */
785
	tsk->fpu_counter++;
L
Linus Torvalds 已提交
786
}
787
EXPORT_SYMBOL_GPL(math_state_restore);
L
Linus Torvalds 已提交
788 789 790 791 792

#ifndef CONFIG_MATH_EMULATION

asmlinkage void math_emulate(long arg)
{
I
Ingo Molnar 已提交
793 794 795 796
	printk(KERN_EMERG
		"math-emulation not enabled and no coprocessor found.\n");
	printk(KERN_EMERG "killing %s.\n", current->comm);
	force_sig(SIGFPE, current);
L
Linus Torvalds 已提交
797 798 799 800 801
	schedule();
}

#endif /* CONFIG_MATH_EMULATION */

802 803
dotraplinkage void __kprobes
do_device_not_available(struct pt_regs *regs, long error)
804 805 806 807 808 809 810 811 812 813
{
	if (read_cr0() & X86_CR0_EM) {
		conditional_sti(regs);
		math_emulate(0);
	} else {
		math_state_restore(); /* interrupts still off */
		conditional_sti(regs);
	}
}

814
#ifdef CONFIG_X86_MCE
815
dotraplinkage void __kprobes do_machine_check(struct pt_regs *regs, long error)
816 817 818 819 820 821
{
	conditional_sti(regs);
	machine_check_vector(regs, error);
}
#endif

822
dotraplinkage void do_iret_error(struct pt_regs *regs, long error_code)
823 824 825 826 827 828 829 830 831 832 833
{
	siginfo_t info;
	local_irq_enable();

	info.si_signo = SIGILL;
	info.si_errno = 0;
	info.si_code = ILL_BADSTK;
	info.si_addr = 0;
	if (notify_die(DIE_TRAP, "iret exception",
			regs, error_code, 32, SIGILL) == NOTIFY_STOP)
		return;
834
	do_trap(32, SIGILL, "iret exception", regs, error_code, &info);
835 836
}

L
Linus Torvalds 已提交
837 838
void __init trap_init(void)
{
839 840
	int i;

L
Linus Torvalds 已提交
841
#ifdef CONFIG_EISA
I
Ingo Molnar 已提交
842
	void __iomem *p = early_ioremap(0x0FFFD9, 4);
I
Ingo Molnar 已提交
843 844

	if (readl(p) == 'E' + ('I'<<8) + ('S'<<16) + ('A'<<24))
L
Linus Torvalds 已提交
845
		EISA_bus = 1;
I
Ingo Molnar 已提交
846
	early_iounmap(p, 4);
L
Linus Torvalds 已提交
847 848
#endif

849
	set_intr_gate(0, &divide_error);
850 851 852
	set_intr_gate(1, &debug);
	set_intr_gate(2, &nmi);
	set_system_intr_gate(3, &int3); /* int3 can be called from all */
853
	set_system_intr_gate(4, &overflow); /* int4 can be called from all */
854
	set_intr_gate(5, &bounds);
855
	set_intr_gate(6, &invalid_op);
856
	set_intr_gate(7, &device_not_available);
857
	set_task_gate(8, GDT_ENTRY_DOUBLEFAULT_TSS);
858
	set_intr_gate(9, &coprocessor_segment_overrun);
859
	set_intr_gate(10, &invalid_TSS);
860
	set_intr_gate(11, &segment_not_present);
861
	set_intr_gate(12, &stack_segment);
862
	set_intr_gate(13, &general_protection);
I
Ingo Molnar 已提交
863
	set_intr_gate(14, &page_fault);
864
	set_intr_gate(15, &spurious_interrupt_bug);
865
	set_intr_gate(16, &coprocessor_error);
866
	set_intr_gate(17, &alignment_check);
L
Linus Torvalds 已提交
867
#ifdef CONFIG_X86_MCE
868
	set_intr_gate(18, &machine_check);
L
Linus Torvalds 已提交
869
#endif
870
	set_intr_gate(19, &simd_coprocessor_error);
L
Linus Torvalds 已提交
871

872 873 874 875 876 877
	if (cpu_has_fxsr) {
		printk(KERN_INFO "Enabling fast FPU save and restore... ");
		set_in_cr4(X86_CR4_OSFXSR);
		printk("done.\n");
	}
	if (cpu_has_xmm) {
I
Ingo Molnar 已提交
878 879
		printk(KERN_INFO
			"Enabling unmasked SIMD FPU exception support... ");
880 881 882 883
		set_in_cr4(X86_CR4_OSXMMEXCPT);
		printk("done.\n");
	}

I
Ingo Molnar 已提交
884
	set_system_gate(SYSCALL_VECTOR, &system_call);
L
Linus Torvalds 已提交
885

I
Ingo Molnar 已提交
886
	/* Reserve all the builtin and the syscall vector: */
887 888
	for (i = 0; i < FIRST_EXTERNAL_VECTOR; i++)
		set_bit(i, used_vectors);
I
Ingo Molnar 已提交
889

890 891
	set_bit(SYSCALL_VECTOR, used_vectors);

L
Linus Torvalds 已提交
892
	/*
I
Ingo Molnar 已提交
893
	 * Should be a barrier for any external CPU state:
L
Linus Torvalds 已提交
894 895 896 897 898
	 */
	cpu_init();

	trap_init_hook();
}