dump_pagetables.c 11.5 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14
/*
 * Debug helper to dump the current kernel pagetables of the system
 * so that we can see what the various memory ranges are set to.
 *
 * (C) Copyright 2008 Intel Corporation
 *
 * Author: Arjan van de Ven <arjan@linux.intel.com>
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation; version 2
 * of the License.
 */

15 16
#include <linux/debugfs.h>
#include <linux/mm.h>
17
#include <linux/init.h>
18 19 20 21 22 23 24 25 26 27 28 29 30 31
#include <linux/seq_file.h>

#include <asm/pgtable.h>

/*
 * The dumper groups pagetable entries of the same type into one, and for
 * that it needs to keep some state when walking, and flush this state
 * when a "break" in the continuity is found.
 */
struct pg_state {
	int level;
	pgprot_t current_prot;
	unsigned long start_address;
	unsigned long current_address;
32
	const struct addr_marker *marker;
33
	unsigned long lines;
34
	bool to_dmesg;
S
Stephen Smalley 已提交
35 36
	bool check_wx;
	unsigned long wx_pages;
37 38
};

39 40 41
struct addr_marker {
	unsigned long start_address;
	const char *name;
42
	unsigned long max_lines;
43 44
};

45 46 47 48 49 50 51 52
/* indices for address_markers; keep sync'd w/ address_markers below */
enum address_markers_idx {
	USER_SPACE_NR = 0,
#ifdef CONFIG_X86_64
	KERNEL_SPACE_NR,
	LOW_KERNEL_NR,
	VMALLOC_START_NR,
	VMEMMAP_START_NR,
53
# ifdef CONFIG_X86_ESPFIX64
54
	ESPFIX_START_NR,
55
# endif
56 57 58 59 60 61 62 63 64 65 66 67 68 69
	HIGH_KERNEL_NR,
	MODULES_VADDR_NR,
	MODULES_END_NR,
#else
	KERNEL_SPACE_NR,
	VMALLOC_START_NR,
	VMALLOC_END_NR,
# ifdef CONFIG_HIGHMEM
	PKMAP_BASE_NR,
# endif
	FIXADDR_START_NR,
#endif
};

70 71 72 73 74
/* Address space markers hints */
static struct addr_marker address_markers[] = {
	{ 0, "User Space" },
#ifdef CONFIG_X86_64
	{ 0x8000000000000000UL, "Kernel Space" },
75 76 77
	{ 0/* PAGE_OFFSET */,   "Low Kernel Mapping" },
	{ 0/* VMALLOC_START */, "vmalloc() Area" },
	{ 0/* VMEMMAP_START */, "Vmemmap" },
78
# ifdef CONFIG_X86_ESPFIX64
79
	{ ESPFIX_BASE_ADDR,	"ESPfix Area", 16 },
80 81 82
# endif
# ifdef CONFIG_EFI
	{ EFI_VA_END,		"EFI Runtime Services" },
83
# endif
84
	{ __START_KERNEL_map,   "High Kernel Mapping" },
85 86
	{ MODULES_VADDR,        "Modules" },
	{ MODULES_END,          "End Modules" },
87 88 89 90 91
#else
	{ PAGE_OFFSET,          "Kernel Mapping" },
	{ 0/* VMALLOC_START */, "vmalloc() Area" },
	{ 0/*VMALLOC_END*/,     "vmalloc() End" },
# ifdef CONFIG_HIGHMEM
L
Linus Torvalds 已提交
92
	{ 0/*PKMAP_BASE*/,      "Persistent kmap() Area" },
93 94 95 96 97
# endif
	{ 0/*FIXADDR_START*/,   "Fixmap Area" },
#endif
	{ -1, NULL }		/* End of list */
};
98

99 100 101 102 103
/* Multipliers for offsets within the PTEs */
#define PTE_LEVEL_MULT (PAGE_SIZE)
#define PMD_LEVEL_MULT (PTRS_PER_PTE * PTE_LEVEL_MULT)
#define PUD_LEVEL_MULT (PTRS_PER_PMD * PMD_LEVEL_MULT)
#define PGD_LEVEL_MULT (PTRS_PER_PUD * PUD_LEVEL_MULT)
104

105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122
#define pt_dump_seq_printf(m, to_dmesg, fmt, args...)		\
({								\
	if (to_dmesg)					\
		printk(KERN_INFO fmt, ##args);			\
	else							\
		if (m)						\
			seq_printf(m, fmt, ##args);		\
})

#define pt_dump_cont_printf(m, to_dmesg, fmt, args...)		\
({								\
	if (to_dmesg)					\
		printk(KERN_CONT fmt, ##args);			\
	else							\
		if (m)						\
			seq_printf(m, fmt, ##args);		\
})

123 124 125
/*
 * Print a readable form of a pgprot_t to the seq_file
 */
126
static void printk_prot(struct seq_file *m, pgprot_t prot, int level, bool dmsg)
127
{
128 129 130 131 132 133
	pgprotval_t pr = pgprot_val(prot);
	static const char * const level_name[] =
		{ "cr3", "pgd", "pud", "pmd", "pte" };

	if (!pgprot_val(prot)) {
		/* Not present */
134
		pt_dump_cont_printf(m, dmsg, "                              ");
135 136
	} else {
		if (pr & _PAGE_USER)
137
			pt_dump_cont_printf(m, dmsg, "USR ");
138
		else
139
			pt_dump_cont_printf(m, dmsg, "    ");
140
		if (pr & _PAGE_RW)
141
			pt_dump_cont_printf(m, dmsg, "RW ");
142
		else
143
			pt_dump_cont_printf(m, dmsg, "ro ");
144
		if (pr & _PAGE_PWT)
145
			pt_dump_cont_printf(m, dmsg, "PWT ");
146
		else
147
			pt_dump_cont_printf(m, dmsg, "    ");
148
		if (pr & _PAGE_PCD)
149
			pt_dump_cont_printf(m, dmsg, "PCD ");
150
		else
151
			pt_dump_cont_printf(m, dmsg, "    ");
152

153 154 155 156 157 158 159
		/* Bit 7 has a different meaning on level 3 vs 4 */
		if (level <= 3 && pr & _PAGE_PSE)
			pt_dump_cont_printf(m, dmsg, "PSE ");
		else
			pt_dump_cont_printf(m, dmsg, "    ");
		if ((level == 4 && pr & _PAGE_PAT) ||
		    ((level == 3 || level == 2) && pr & _PAGE_PAT_LARGE))
160
			pt_dump_cont_printf(m, dmsg, "PAT ");
161 162
		else
			pt_dump_cont_printf(m, dmsg, "    ");
163
		if (pr & _PAGE_GLOBAL)
164
			pt_dump_cont_printf(m, dmsg, "GLB ");
165
		else
166
			pt_dump_cont_printf(m, dmsg, "    ");
167
		if (pr & _PAGE_NX)
168
			pt_dump_cont_printf(m, dmsg, "NX ");
169
		else
170
			pt_dump_cont_printf(m, dmsg, "x  ");
171
	}
172
	pt_dump_cont_printf(m, dmsg, "%s\n", level_name[level]);
173 174 175
}

/*
176
 * On 64 bits, sign-extend the 48 bit address to 64 bit
177
 */
178
static unsigned long normalize_addr(unsigned long u)
179
{
180 181 182
#ifdef CONFIG_X86_64
	return (signed long)(u << 16) >> 16;
#else
183
	return u;
184
#endif
185 186 187 188 189 190 191 192
}

/*
 * This function gets called on a break in a continuous series
 * of PTE entries; the next one is different so we need to
 * print what we collected so far.
 */
static void note_page(struct seq_file *m, struct pg_state *st,
193
		      pgprot_t new_prot, int level)
194
{
195
	pgprotval_t prot, cur;
196
	static const char units[] = "BKMGTPE";
197 198 199

	/*
	 * If we have a "break" in the series, we need to flush the state that
200 201
	 * we have now. "break" is either changing perms, levels or
	 * address space marker.
202
	 */
203 204
	prot = pgprot_val(new_prot);
	cur = pgprot_val(st->current_prot);
205

206 207 208 209 210
	if (!st->level) {
		/* First entry */
		st->current_prot = new_prot;
		st->level = level;
		st->marker = address_markers;
211
		st->lines = 0;
212 213
		pt_dump_seq_printf(m, st->to_dmesg, "---[ %s ]---\n",
				   st->marker->name);
214 215 216
	} else if (prot != cur || level != st->level ||
		   st->current_address >= st->marker[1].start_address) {
		const char *unit = units;
217
		unsigned long delta;
218
		int width = sizeof(unsigned long) * 2;
S
Stephen Smalley 已提交
219 220 221 222 223 224 225 226 227 228
		pgprotval_t pr = pgprot_val(st->current_prot);

		if (st->check_wx && (pr & _PAGE_RW) && !(pr & _PAGE_NX)) {
			WARN_ONCE(1,
				  "x86/mm: Found insecure W+X mapping at address %p/%pS\n",
				  (void *)st->start_address,
				  (void *)st->start_address);
			st->wx_pages += (st->current_address -
					 st->start_address) / PAGE_SIZE;
		}
229 230 231 232

		/*
		 * Now print the actual finished series
		 */
233 234 235 236 237 238
		if (!st->marker->max_lines ||
		    st->lines < st->marker->max_lines) {
			pt_dump_seq_printf(m, st->to_dmesg,
					   "0x%0*lx-0x%0*lx   ",
					   width, st->start_address,
					   width, st->current_address);
239

240 241 242 243 244 245 246 247 248
			delta = st->current_address - st->start_address;
			while (!(delta & 1023) && unit[1]) {
				delta >>= 10;
				unit++;
			}
			pt_dump_cont_printf(m, st->to_dmesg, "%9lu%c ",
					    delta, *unit);
			printk_prot(m, st->current_prot, st->level,
				    st->to_dmesg);
249
		}
250
		st->lines++;
251 252 253 254 255 256 257

		/*
		 * We print markers for special areas of address space,
		 * such as the start of vmalloc space etc.
		 * This helps in the interpretation.
		 */
		if (st->current_address >= st->marker[1].start_address) {
258 259 260 261 262 263 264 265 266
			if (st->marker->max_lines &&
			    st->lines > st->marker->max_lines) {
				unsigned long nskip =
					st->lines - st->marker->max_lines;
				pt_dump_seq_printf(m, st->to_dmesg,
						   "... %lu entr%s skipped ... \n",
						   nskip,
						   nskip == 1 ? "y" : "ies");
			}
267
			st->marker++;
268
			st->lines = 0;
269 270
			pt_dump_seq_printf(m, st->to_dmesg, "---[ %s ]---\n",
					   st->marker->name);
271
		}
272

273 274 275
		st->start_address = st->current_address;
		st->current_prot = new_prot;
		st->level = level;
276
	}
277 278
}

279
static void walk_pte_level(struct seq_file *m, struct pg_state *st, pmd_t addr,
280 281 282 283
							unsigned long P)
{
	int i;
	pte_t *start;
284
	pgprotval_t prot;
285 286 287

	start = (pte_t *) pmd_page_vaddr(addr);
	for (i = 0; i < PTRS_PER_PTE; i++) {
288
		prot = pte_flags(*start);
289
		st->current_address = normalize_addr(P + i * PTE_LEVEL_MULT);
290
		note_page(m, st, __pgprot(prot), 4);
291 292 293 294
		start++;
	}
}

295
#if PTRS_PER_PMD > 1
296

297
static void walk_pmd_level(struct seq_file *m, struct pg_state *st, pud_t addr,
298 299 300 301
							unsigned long P)
{
	int i;
	pmd_t *start;
302
	pgprotval_t prot;
303 304 305

	start = (pmd_t *) pud_page_vaddr(addr);
	for (i = 0; i < PTRS_PER_PMD; i++) {
306
		st->current_address = normalize_addr(P + i * PMD_LEVEL_MULT);
307
		if (!pmd_none(*start)) {
308 309
			if (pmd_large(*start) || !pmd_present(*start)) {
				prot = pmd_flags(*start);
310
				note_page(m, st, __pgprot(prot), 3);
311
			} else {
312 313
				walk_pte_level(m, st, *start,
					       P + i * PMD_LEVEL_MULT);
314
			}
315 316 317 318 319 320
		} else
			note_page(m, st, __pgprot(0), 3);
		start++;
	}
}

321 322 323 324 325
#else
#define walk_pmd_level(m,s,a,p) walk_pte_level(m,s,__pmd(pud_val(a)),p)
#define pud_large(a) pmd_large(__pmd(pud_val(a)))
#define pud_none(a)  pmd_none(__pmd(pud_val(a)))
#endif
326

327 328 329
#if PTRS_PER_PUD > 1

static void walk_pud_level(struct seq_file *m, struct pg_state *st, pgd_t addr,
330 331 332 333
							unsigned long P)
{
	int i;
	pud_t *start;
334
	pgprotval_t prot;
335 336 337 338

	start = (pud_t *) pgd_page_vaddr(addr);

	for (i = 0; i < PTRS_PER_PUD; i++) {
339
		st->current_address = normalize_addr(P + i * PUD_LEVEL_MULT);
340
		if (!pud_none(*start)) {
341 342
			if (pud_large(*start) || !pud_present(*start)) {
				prot = pud_flags(*start);
343
				note_page(m, st, __pgprot(prot), 2);
344
			} else {
345 346
				walk_pmd_level(m, st, *start,
					       P + i * PUD_LEVEL_MULT);
347
			}
348 349 350 351 352 353 354
		} else
			note_page(m, st, __pgprot(0), 2);

		start++;
	}
}

355 356 357 358 359 360
#else
#define walk_pud_level(m,s,a,p) walk_pmd_level(m,s,__pud(pgd_val(a)),p)
#define pgd_large(a) pud_large(__pud(pgd_val(a)))
#define pgd_none(a)  pud_none(__pud(pgd_val(a)))
#endif

361 362
static inline bool is_hypervisor_range(int idx)
{
363
#ifdef CONFIG_X86_64
364 365 366 367
	/*
	 * ffff800000000000 - ffff87ffffffffff is reserved for
	 * the hypervisor.
	 */
368 369
	return	(idx >= pgd_index(__PAGE_OFFSET) - 16) &&
		(idx <  pgd_index(__PAGE_OFFSET));
370
#else
371
	return false;
372
#endif
373
}
374

S
Stephen Smalley 已提交
375 376
static void ptdump_walk_pgd_level_core(struct seq_file *m, pgd_t *pgd,
				       bool checkwx)
377
{
378
#ifdef CONFIG_X86_64
379
	pgd_t *start = (pgd_t *) &init_level4_pgt;
380 381 382
#else
	pgd_t *start = swapper_pg_dir;
#endif
383
	pgprotval_t prot;
384
	int i;
385
	struct pg_state st = {};
386

387 388 389 390
	if (pgd) {
		start = pgd;
		st.to_dmesg = true;
	}
391

S
Stephen Smalley 已提交
392 393 394 395
	st.check_wx = checkwx;
	if (checkwx)
		st.wx_pages = 0;

396
	for (i = 0; i < PTRS_PER_PGD; i++) {
397
		st.current_address = normalize_addr(i * PGD_LEVEL_MULT);
398
		if (!pgd_none(*start) && !is_hypervisor_range(i)) {
399 400
			if (pgd_large(*start) || !pgd_present(*start)) {
				prot = pgd_flags(*start);
401
				note_page(m, &st, __pgprot(prot), 1);
402
			} else {
403 404
				walk_pud_level(m, &st, *start,
					       i * PGD_LEVEL_MULT);
405
			}
406
		} else
407
			note_page(m, &st, __pgprot(0), 1);
408

409 410
		start++;
	}
411 412 413 414

	/* Flush out the last page */
	st.current_address = normalize_addr(PTRS_PER_PGD*PGD_LEVEL_MULT);
	note_page(m, &st, __pgprot(0), 0);
S
Stephen Smalley 已提交
415 416 417 418 419 420 421 422 423 424 425 426
	if (!checkwx)
		return;
	if (st.wx_pages)
		pr_info("x86/mm: Checked W+X mappings: FAILED, %lu W+X pages found.\n",
			st.wx_pages);
	else
		pr_info("x86/mm: Checked W+X mappings: passed, no W+X pages found.\n");
}

void ptdump_walk_pgd_level(struct seq_file *m, pgd_t *pgd)
{
	ptdump_walk_pgd_level_core(m, pgd, false);
427
}
428
EXPORT_SYMBOL_GPL(ptdump_walk_pgd_level);
429

S
Stephen Smalley 已提交
430 431 432 433 434
void ptdump_walk_pgd_level_checkwx(void)
{
	ptdump_walk_pgd_level_core(NULL, NULL, true);
}

435
static int __init pt_dump_init(void)
436
{
437 438 439 440 441 442 443 444 445
	/*
	 * Various markers are not compile-time constants, so assign them
	 * here.
	 */
#ifdef CONFIG_X86_64
	address_markers[LOW_KERNEL_NR].start_address = PAGE_OFFSET;
	address_markers[VMALLOC_START_NR].start_address = VMALLOC_START;
	address_markers[VMEMMAP_START_NR].start_address = VMEMMAP_START;
#endif
446
#ifdef CONFIG_X86_32
447 448
	address_markers[VMALLOC_START_NR].start_address = VMALLOC_START;
	address_markers[VMALLOC_END_NR].start_address = VMALLOC_END;
449
# ifdef CONFIG_HIGHMEM
450
	address_markers[PKMAP_BASE_NR].start_address = PKMAP_BASE;
451
# endif
452
	address_markers[FIXADDR_START_NR].start_address = FIXADDR_START;
453 454
#endif

455 456 457
	return 0;
}
__initcall(pt_dump_init);