entry_64.S 38.3 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13
/*
 *  linux/arch/x86_64/entry.S
 *
 *  Copyright (C) 1991, 1992  Linus Torvalds
 *  Copyright (C) 2000, 2001, 2002  Andi Kleen SuSE Labs
 *  Copyright (C) 2000  Pavel Machek <pavel@suse.cz>
 */

/*
 * entry.S contains the system-call and fault low-level handling routines.
 *
 * NOTE: This code handles signal-recognition, which happens every time
 * after an interrupt and after each system call.
14 15
 *
 * Normal syscalls and interrupts don't save a full stack frame, this is
L
Linus Torvalds 已提交
16
 * only done for syscall tracing, signals or fork/exec et.al.
17 18 19 20
 *
 * A note on terminology:
 * - top of stack: Architecture defined interrupt frame from SS to RIP
 * at the top of the kernel process stack.
L
Linus Torvalds 已提交
21
 * - partial stack frame: partially saved registers upto R11.
22
 * - full stack frame: Like partial stack frame, but all register saved.
23 24 25 26 27 28 29 30 31 32 33 34 35 36 37
 *
 * Some macro usage:
 * - CFI macros are used to generate dwarf2 unwind information for better
 * backtraces. They don't change any code.
 * - SAVE_ALL/RESTORE_ALL - Save/restore all registers
 * - SAVE_ARGS/RESTORE_ARGS - Save/restore registers that C functions modify.
 * There are unfortunately lots of special cases where some registers
 * not touched. The macro is a big mess that should be cleaned up.
 * - SAVE_REST/RESTORE_REST - Handle the registers not saved by SAVE_ARGS.
 * Gives a full stack frame.
 * - ENTRY/END Define functions in the symbol table.
 * - FIXUP_TOP_OF_STACK/RESTORE_TOP_OF_STACK - Fix up the hardware stack
 * frame that is otherwise undefined after a SYSCALL
 * - TRACE_IRQ_* - Trace hard interrupt state for lock debugging.
 * - errorentry/paranoidentry/zeroentry - Define exception entry points.
L
Linus Torvalds 已提交
38 39 40 41 42 43 44 45
 */

#include <linux/linkage.h>
#include <asm/segment.h>
#include <asm/cache.h>
#include <asm/errno.h>
#include <asm/dwarf2.h>
#include <asm/calling.h>
46
#include <asm/asm-offsets.h>
L
Linus Torvalds 已提交
47 48 49 50
#include <asm/msr.h>
#include <asm/unistd.h>
#include <asm/thread_info.h>
#include <asm/hw_irq.h>
51
#include <asm/page_types.h>
52
#include <asm/irqflags.h>
53
#include <asm/paravirt.h>
54
#include <asm/ftrace.h>
55
#include <asm/percpu.h>
L
Linus Torvalds 已提交
56

R
Roland McGrath 已提交
57 58 59 60 61 62
/* Avoid __ASSEMBLER__'ifying <linux/audit.h> just for this.  */
#include <linux/elf-em.h>
#define AUDIT_ARCH_X86_64	(EM_X86_64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
#define __AUDIT_ARCH_64BIT 0x80000000
#define __AUDIT_ARCH_LE	   0x40000000

L
Linus Torvalds 已提交
63
	.code64
64
#ifdef CONFIG_FUNCTION_TRACER
65 66 67 68 69 70
#ifdef CONFIG_DYNAMIC_FTRACE
ENTRY(mcount)
	retq
END(mcount)

ENTRY(ftrace_caller)
71 72
	cmpl $0, function_trace_stop
	jne  ftrace_stub
73

74
	MCOUNT_SAVE_FRAME
75 76 77

	movq 0x38(%rsp), %rdi
	movq 8(%rbp), %rsi
78
	subq $MCOUNT_INSN_SIZE, %rdi
79

80
GLOBAL(ftrace_call)
81 82
	call ftrace_stub

83
	MCOUNT_RESTORE_FRAME
84

85
#ifdef CONFIG_FUNCTION_GRAPH_TRACER
86
GLOBAL(ftrace_graph_call)
87 88
	jmp ftrace_stub
#endif
89

90
GLOBAL(ftrace_stub)
91 92 93 94
	retq
END(ftrace_caller)

#else /* ! CONFIG_DYNAMIC_FTRACE */
95
ENTRY(mcount)
96 97 98
	cmpl $0, function_trace_stop
	jne  ftrace_stub

99 100
	cmpq $ftrace_stub, ftrace_trace_function
	jnz trace
101 102 103 104

#ifdef CONFIG_FUNCTION_GRAPH_TRACER
	cmpq $ftrace_stub, ftrace_graph_return
	jnz ftrace_graph_caller
105 106 107

	cmpq $ftrace_graph_entry_stub, ftrace_graph_entry
	jnz ftrace_graph_caller
108 109
#endif

110
GLOBAL(ftrace_stub)
111 112 113
	retq

trace:
114
	MCOUNT_SAVE_FRAME
115 116 117

	movq 0x38(%rsp), %rdi
	movq 8(%rbp), %rsi
118
	subq $MCOUNT_INSN_SIZE, %rdi
119 120 121

	call   *ftrace_trace_function

122
	MCOUNT_RESTORE_FRAME
123 124 125

	jmp ftrace_stub
END(mcount)
126
#endif /* CONFIG_DYNAMIC_FTRACE */
127
#endif /* CONFIG_FUNCTION_TRACER */
128

129 130 131 132 133
#ifdef CONFIG_FUNCTION_GRAPH_TRACER
ENTRY(ftrace_graph_caller)
	cmpl $0, function_trace_stop
	jne ftrace_stub

134
	MCOUNT_SAVE_FRAME
135 136 137

	leaq 8(%rbp), %rdi
	movq 0x38(%rsp), %rsi
138
	movq (%rbp), %rdx
139
	subq $MCOUNT_INSN_SIZE, %rsi
140 141 142

	call	prepare_ftrace_return

143 144
	MCOUNT_RESTORE_FRAME

145 146 147
	retq
END(ftrace_graph_caller)

148
GLOBAL(return_to_handler)
149
	subq  $24, %rsp
150

151
	/* Save the return values */
152
	movq %rax, (%rsp)
153
	movq %rdx, 8(%rsp)
154
	movq %rbp, %rdi
155

156
	call ftrace_return_to_handler
157

158
	movq %rax, 16(%rsp)
159
	movq 8(%rsp), %rdx
160
	movq (%rsp), %rax
161
	addq $16, %rsp
162 163
	retq
#endif
164 165


166
#ifndef CONFIG_PREEMPT
L
Linus Torvalds 已提交
167
#define retint_kernel retint_restore_args
168
#endif
169

170
#ifdef CONFIG_PARAVIRT
171
ENTRY(native_usergs_sysret64)
172 173
	swapgs
	sysretq
174
ENDPROC(native_usergs_sysret64)
175 176
#endif /* CONFIG_PARAVIRT */

177 178 179 180 181 182 183 184 185 186

.macro TRACE_IRQS_IRETQ offset=ARGOFFSET
#ifdef CONFIG_TRACE_IRQFLAGS
	bt   $9,EFLAGS-\offset(%rsp)	/* interrupts off? */
	jnc  1f
	TRACE_IRQS_ON
1:
#endif
.endm

L
Linus Torvalds 已提交
187
/*
188 189
 * C code is not supposed to know about undefined top of stack. Every time
 * a C function with an pt_regs argument is called from the SYSCALL based
L
Linus Torvalds 已提交
190 191 192
 * fast path FIXUP_TOP_OF_STACK is needed.
 * RESTORE_TOP_OF_STACK syncs the syscall state after any possible ptregs
 * manipulation.
193 194 195
 */

	/* %rsp:at FRAMEEND */
196
	.macro FIXUP_TOP_OF_STACK tmp offset=0
197
	movq PER_CPU_VAR(old_rsp),\tmp
198 199 200 201 202 203
	movq \tmp,RSP+\offset(%rsp)
	movq $__USER_DS,SS+\offset(%rsp)
	movq $__USER_CS,CS+\offset(%rsp)
	movq $-1,RCX+\offset(%rsp)
	movq R11+\offset(%rsp),\tmp  /* get eflags */
	movq \tmp,EFLAGS+\offset(%rsp)
L
Linus Torvalds 已提交
204 205
	.endm

206 207
	.macro RESTORE_TOP_OF_STACK tmp offset=0
	movq RSP+\offset(%rsp),\tmp
208
	movq \tmp,PER_CPU_VAR(old_rsp)
209 210
	movq EFLAGS+\offset(%rsp),\tmp
	movq \tmp,R11+\offset(%rsp)
L
Linus Torvalds 已提交
211 212 213 214
	.endm

	.macro FAKE_STACK_FRAME child_rip
	/* push in order ss, rsp, eflags, cs, rip */
215
	xorl %eax, %eax
216
	pushq $__KERNEL_DS /* ss */
L
Linus Torvalds 已提交
217
	CFI_ADJUST_CFA_OFFSET	8
218
	/*CFI_REL_OFFSET	ss,0*/
L
Linus Torvalds 已提交
219 220
	pushq %rax /* rsp */
	CFI_ADJUST_CFA_OFFSET	8
221
	CFI_REL_OFFSET	rsp,0
222
	pushq $X86_EFLAGS_IF /* eflags - interrupts on */
L
Linus Torvalds 已提交
223
	CFI_ADJUST_CFA_OFFSET	8
224
	/*CFI_REL_OFFSET	rflags,0*/
L
Linus Torvalds 已提交
225 226
	pushq $__KERNEL_CS /* cs */
	CFI_ADJUST_CFA_OFFSET	8
227
	/*CFI_REL_OFFSET	cs,0*/
L
Linus Torvalds 已提交
228 229
	pushq \child_rip /* rip */
	CFI_ADJUST_CFA_OFFSET	8
230
	CFI_REL_OFFSET	rip,0
L
Linus Torvalds 已提交
231 232 233 234 235 236 237 238 239
	pushq	%rax /* orig rax */
	CFI_ADJUST_CFA_OFFSET	8
	.endm

	.macro UNFAKE_STACK_FRAME
	addq $8*6, %rsp
	CFI_ADJUST_CFA_OFFSET	-(6*8)
	.endm

240 241 242 243
/*
 * initial frame state for interrupts (and exceptions without error code)
 */
	.macro EMPTY_FRAME start=1 offset=0
244
	.if \start
245
	CFI_STARTPROC simple
246
	CFI_SIGNAL_FRAME
247
	CFI_DEF_CFA rsp,8+\offset
248
	.else
249
	CFI_DEF_CFA_OFFSET 8+\offset
250
	.endif
L
Linus Torvalds 已提交
251
	.endm
252 253

/*
254
 * initial frame state for interrupts (and exceptions without error code)
255
 */
256
	.macro INTR_FRAME start=1 offset=0
257 258 259 260 261 262
	EMPTY_FRAME \start, SS+8+\offset-RIP
	/*CFI_REL_OFFSET ss, SS+\offset-RIP*/
	CFI_REL_OFFSET rsp, RSP+\offset-RIP
	/*CFI_REL_OFFSET rflags, EFLAGS+\offset-RIP*/
	/*CFI_REL_OFFSET cs, CS+\offset-RIP*/
	CFI_REL_OFFSET rip, RIP+\offset-RIP
263 264 265 266 267 268
	.endm

/*
 * initial frame state for exceptions with error code (and interrupts
 * with vector already pushed)
 */
269
	.macro XCPT_FRAME start=1 offset=0
270
	INTR_FRAME \start, RIP+\offset-ORIG_RAX
271 272 273 274 275 276 277
	/*CFI_REL_OFFSET orig_rax, ORIG_RAX-ORIG_RAX*/
	.endm

/*
 * frame that enables calling into C.
 */
	.macro PARTIAL_FRAME start=1 offset=0
278 279 280 281 282 283 284 285 286 287
	XCPT_FRAME \start, ORIG_RAX+\offset-ARGOFFSET
	CFI_REL_OFFSET rdi, RDI+\offset-ARGOFFSET
	CFI_REL_OFFSET rsi, RSI+\offset-ARGOFFSET
	CFI_REL_OFFSET rdx, RDX+\offset-ARGOFFSET
	CFI_REL_OFFSET rcx, RCX+\offset-ARGOFFSET
	CFI_REL_OFFSET rax, RAX+\offset-ARGOFFSET
	CFI_REL_OFFSET r8, R8+\offset-ARGOFFSET
	CFI_REL_OFFSET r9, R9+\offset-ARGOFFSET
	CFI_REL_OFFSET r10, R10+\offset-ARGOFFSET
	CFI_REL_OFFSET r11, R11+\offset-ARGOFFSET
288 289 290 291 292 293
	.endm

/*
 * frame that enables passing a complete pt_regs to a C function.
 */
	.macro DEFAULT_FRAME start=1 offset=0
294
	PARTIAL_FRAME \start, R11+\offset-R15
295 296 297 298 299 300 301
	CFI_REL_OFFSET rbx, RBX+\offset
	CFI_REL_OFFSET rbp, RBP+\offset
	CFI_REL_OFFSET r12, R12+\offset
	CFI_REL_OFFSET r13, R13+\offset
	CFI_REL_OFFSET r14, R14+\offset
	CFI_REL_OFFSET r15, R15+\offset
	.endm
302 303 304 305 306

/* save partial stack frame */
ENTRY(save_args)
	XCPT_FRAME
	cld
I
Ingo Molnar 已提交
307 308 309 310 311 312 313 314 315 316
	movq_cfi rdi, RDI+16-ARGOFFSET
	movq_cfi rsi, RSI+16-ARGOFFSET
	movq_cfi rdx, RDX+16-ARGOFFSET
	movq_cfi rcx, RCX+16-ARGOFFSET
	movq_cfi rax, RAX+16-ARGOFFSET
	movq_cfi  r8,  R8+16-ARGOFFSET
	movq_cfi  r9,  R9+16-ARGOFFSET
	movq_cfi r10, R10+16-ARGOFFSET
	movq_cfi r11, R11+16-ARGOFFSET

317
	leaq -ARGOFFSET+16(%rsp),%rdi	/* arg1 for handler */
I
Ingo Molnar 已提交
318
	movq_cfi rbp, 8		/* push %rbp */
319 320 321 322 323
	leaq 8(%rsp), %rbp		/* mov %rsp, %ebp */
	testl $3, CS(%rdi)
	je 1f
	SWAPGS
	/*
324
	 * irq_count is used to check if a CPU is already on an interrupt stack
325 326 327 328
	 * or not. While this is essentially redundant with preempt_count it is
	 * a little cheaper to use a separate counter in the PDA (short of
	 * moving irq_enter into assembly, which would be too much work)
	 */
329
1:	incl PER_CPU_VAR(irq_count)
330
	jne 2f
I
Ingo Molnar 已提交
331
	popq_cfi %rax			/* move return address... */
332
	mov PER_CPU_VAR(irq_stack_ptr),%rsp
333
	EMPTY_FRAME 0
334
	pushq_cfi %rbp			/* backlink for unwinder */
I
Ingo Molnar 已提交
335
	pushq_cfi %rax			/* ... to the new stack */
336 337 338 339 340 341 342 343
	/*
	 * We entered an interrupt context - irqs are off:
	 */
2:	TRACE_IRQS_OFF
	ret
	CFI_ENDPROC
END(save_args)

344 345 346 347 348 349 350 351 352 353 354 355 356 357 358
ENTRY(save_rest)
	PARTIAL_FRAME 1 REST_SKIP+8
	movq 5*8+16(%rsp), %r11	/* save return address */
	movq_cfi rbx, RBX+16
	movq_cfi rbp, RBP+16
	movq_cfi r12, R12+16
	movq_cfi r13, R13+16
	movq_cfi r14, R14+16
	movq_cfi r15, R15+16
	movq %r11, 8(%rsp)	/* return address */
	FIXUP_TOP_OF_STACK %r11, 16
	ret
	CFI_ENDPROC
END(save_rest)

359
/* save complete stack frame */
360
	.pushsection .kprobes.text, "ax"
361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388
ENTRY(save_paranoid)
	XCPT_FRAME 1 RDI+8
	cld
	movq_cfi rdi, RDI+8
	movq_cfi rsi, RSI+8
	movq_cfi rdx, RDX+8
	movq_cfi rcx, RCX+8
	movq_cfi rax, RAX+8
	movq_cfi r8, R8+8
	movq_cfi r9, R9+8
	movq_cfi r10, R10+8
	movq_cfi r11, R11+8
	movq_cfi rbx, RBX+8
	movq_cfi rbp, RBP+8
	movq_cfi r12, R12+8
	movq_cfi r13, R13+8
	movq_cfi r14, R14+8
	movq_cfi r15, R15+8
	movl $1,%ebx
	movl $MSR_GS_BASE,%ecx
	rdmsr
	testl %edx,%edx
	js 1f	/* negative -> in kernel */
	SWAPGS
	xorl %ebx,%ebx
1:	ret
	CFI_ENDPROC
END(save_paranoid)
389
	.popsection
390

L
Linus Torvalds 已提交
391
/*
392 393 394
 * A newly forked process directly context switches into this address.
 *
 * rdi: prev task we switched from
395
 */
L
Linus Torvalds 已提交
396
ENTRY(ret_from_fork)
397
	DEFAULT_FRAME
398

399 400
	LOCK ; btr $TIF_FORK,TI_flags(%r8)

401
	push kernel_eflags(%rip)
402
	CFI_ADJUST_CFA_OFFSET 8
403
	popf					# reset kernel eflags
404
	CFI_ADJUST_CFA_OFFSET -8
405 406 407

	call schedule_tail			# rdi: 'prev' task parameter

L
Linus Torvalds 已提交
408
	GET_THREAD_INFO(%rcx)
409

L
Linus Torvalds 已提交
410
	RESTORE_REST
411 412

	testl $3, CS-ARGOFFSET(%rsp)		# from kernel_thread?
L
Linus Torvalds 已提交
413
	je   int_ret_from_sys_call
414 415

	testl $_TIF_IA32, TI_flags(%rcx)	# 32-bit compat task needs IRET
L
Linus Torvalds 已提交
416
	jnz  int_ret_from_sys_call
417

418
	RESTORE_TOP_OF_STACK %rdi, -ARGOFFSET
419 420
	jmp ret_from_sys_call			# go to the SYSRET fastpath

L
Linus Torvalds 已提交
421
	CFI_ENDPROC
422
END(ret_from_fork)
L
Linus Torvalds 已提交
423 424 425 426 427 428 429

/*
 * System call entry. Upto 6 arguments in registers are supported.
 *
 * SYSCALL does not save anything on the stack and does not change the
 * stack pointer.
 */
430

L
Linus Torvalds 已提交
431
/*
432
 * Register setup:
L
Linus Torvalds 已提交
433 434
 * rax  system call number
 * rdi  arg0
435
 * rcx  return address for syscall/sysret, C arg3
L
Linus Torvalds 已提交
436
 * rsi  arg1
437
 * rdx  arg2
L
Linus Torvalds 已提交
438 439 440 441
 * r10  arg3 	(--> moved to rcx for C)
 * r8   arg4
 * r9   arg5
 * r11  eflags for syscall/sysret, temporary for C
442 443
 * r12-r15,rbp,rbx saved by C code, not touched.
 *
L
Linus Torvalds 已提交
444 445 446 447 448
 * Interrupts are off on entry.
 * Only called from user space.
 *
 * XXX	if we had a free scratch register we could save the RSP into the stack frame
 *      and report it properly in ps. Unfortunately we haven't.
449 450 451 452
 *
 * When user can change the frames always force IRET. That is because
 * it deals with uncanonical addresses better. SYSRET has trouble
 * with them due to bugs in both AMD and Intel CPUs.
453
 */
L
Linus Torvalds 已提交
454 455

ENTRY(system_call)
456
	CFI_STARTPROC	simple
457
	CFI_SIGNAL_FRAME
458
	CFI_DEF_CFA	rsp,KERNEL_STACK_OFFSET
459 460
	CFI_REGISTER	rip,rcx
	/*CFI_REGISTER	rflags,r11*/
461 462 463 464 465 466 467 468
	SWAPGS_UNSAFE_STACK
	/*
	 * A hypervisor implementation might want to use a label
	 * after the swapgs, so that it can do the swapgs
	 * for the guest and jump here on syscall.
	 */
ENTRY(system_call_after_swapgs)

469
	movq	%rsp,PER_CPU_VAR(old_rsp)
470
	movq	PER_CPU_VAR(kernel_stack),%rsp
471 472 473 474
	/*
	 * No need to follow this irqs off/on section - it's straight
	 * and short:
	 */
475
	ENABLE_INTERRUPTS(CLBR_NONE)
L
Linus Torvalds 已提交
476
	SAVE_ARGS 8,1
477
	movq  %rax,ORIG_RAX-ARGOFFSET(%rsp)
478 479
	movq  %rcx,RIP-ARGOFFSET(%rsp)
	CFI_REL_OFFSET rip,RIP-ARGOFFSET
L
Linus Torvalds 已提交
480
	GET_THREAD_INFO(%rcx)
481
	testl $_TIF_WORK_SYSCALL_ENTRY,TI_flags(%rcx)
L
Linus Torvalds 已提交
482
	jnz tracesys
R
Roland McGrath 已提交
483
system_call_fastpath:
L
Linus Torvalds 已提交
484 485 486 487 488 489 490
	cmpq $__NR_syscall_max,%rax
	ja badsys
	movq %r10,%rcx
	call *sys_call_table(,%rax,8)  # XXX:	 rip relative
	movq %rax,RAX-ARGOFFSET(%rsp)
/*
 * Syscall return path ending with SYSRET (fast path)
491 492
 * Has incomplete stack frame and undefined top of stack.
 */
L
Linus Torvalds 已提交
493
ret_from_sys_call:
494
	movl $_TIF_ALLWORK_MASK,%edi
L
Linus Torvalds 已提交
495
	/* edi:	flagmask */
496
sysret_check:
497
	LOCKDEP_SYS_EXIT
L
Linus Torvalds 已提交
498
	GET_THREAD_INFO(%rcx)
499
	DISABLE_INTERRUPTS(CLBR_NONE)
500
	TRACE_IRQS_OFF
G
Glauber Costa 已提交
501
	movl TI_flags(%rcx),%edx
L
Linus Torvalds 已提交
502
	andl %edi,%edx
503
	jnz  sysret_careful
504
	CFI_REMEMBER_STATE
505 506 507 508
	/*
	 * sysretq will re-enable interrupts:
	 */
	TRACE_IRQS_ON
L
Linus Torvalds 已提交
509
	movq RIP-ARGOFFSET(%rsp),%rcx
510
	CFI_REGISTER	rip,rcx
L
Linus Torvalds 已提交
511
	RESTORE_ARGS 0,-ARG_SKIP,1
512
	/*CFI_REGISTER	rflags,r11*/
513
	movq	PER_CPU_VAR(old_rsp), %rsp
514
	USERGS_SYSRET64
L
Linus Torvalds 已提交
515

516
	CFI_RESTORE_STATE
L
Linus Torvalds 已提交
517
	/* Handle reschedules */
518
	/* edx:	work, edi: workmask */
L
Linus Torvalds 已提交
519 520 521
sysret_careful:
	bt $TIF_NEED_RESCHED,%edx
	jnc sysret_signal
522
	TRACE_IRQS_ON
523
	ENABLE_INTERRUPTS(CLBR_NONE)
L
Linus Torvalds 已提交
524
	pushq %rdi
525
	CFI_ADJUST_CFA_OFFSET 8
L
Linus Torvalds 已提交
526 527
	call schedule
	popq  %rdi
528
	CFI_ADJUST_CFA_OFFSET -8
L
Linus Torvalds 已提交
529 530
	jmp sysret_check

531
	/* Handle a signal */
L
Linus Torvalds 已提交
532
sysret_signal:
533
	TRACE_IRQS_ON
534
	ENABLE_INTERRUPTS(CLBR_NONE)
R
Roland McGrath 已提交
535 536 537 538
#ifdef CONFIG_AUDITSYSCALL
	bt $TIF_SYSCALL_AUDIT,%edx
	jc sysret_audit
#endif
539 540 541 542 543 544 545
	/*
	 * We have a signal, or exit tracing or single-step.
	 * These all wind up with the iret return path anyway,
	 * so just join that path right now.
	 */
	FIXUP_TOP_OF_STACK %r11, -ARGOFFSET
	jmp int_check_syscall_exit_work
546

547 548 549 550
badsys:
	movq $-ENOSYS,RAX-ARGOFFSET(%rsp)
	jmp ret_from_sys_call

R
Roland McGrath 已提交
551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583
#ifdef CONFIG_AUDITSYSCALL
	/*
	 * Fast path for syscall audit without full syscall trace.
	 * We just call audit_syscall_entry() directly, and then
	 * jump back to the normal fast path.
	 */
auditsys:
	movq %r10,%r9			/* 6th arg: 4th syscall arg */
	movq %rdx,%r8			/* 5th arg: 3rd syscall arg */
	movq %rsi,%rcx			/* 4th arg: 2nd syscall arg */
	movq %rdi,%rdx			/* 3rd arg: 1st syscall arg */
	movq %rax,%rsi			/* 2nd arg: syscall number */
	movl $AUDIT_ARCH_X86_64,%edi	/* 1st arg: audit arch */
	call audit_syscall_entry
	LOAD_ARGS 0		/* reload call-clobbered registers */
	jmp system_call_fastpath

	/*
	 * Return fast path for syscall audit.  Call audit_syscall_exit()
	 * directly and then jump back to the fast path with TIF_SYSCALL_AUDIT
	 * masked off.
	 */
sysret_audit:
	movq %rax,%rsi		/* second arg, syscall return value */
	cmpq $0,%rax		/* is it < 0? */
	setl %al		/* 1 if so, 0 if not */
	movzbl %al,%edi		/* zero-extend that into %edi */
	inc %edi /* first arg, 0->1(AUDITSC_SUCCESS), 1->2(AUDITSC_FAILURE) */
	call audit_syscall_exit
	movl $(_TIF_ALLWORK_MASK & ~_TIF_SYSCALL_AUDIT),%edi
	jmp sysret_check
#endif	/* CONFIG_AUDITSYSCALL */

L
Linus Torvalds 已提交
584
	/* Do syscall tracing */
585
tracesys:
R
Roland McGrath 已提交
586 587 588 589
#ifdef CONFIG_AUDITSYSCALL
	testl $(_TIF_WORK_SYSCALL_ENTRY & ~_TIF_SYSCALL_AUDIT),TI_flags(%rcx)
	jz auditsys
#endif
L
Linus Torvalds 已提交
590
	SAVE_REST
R
Roland McGrath 已提交
591
	movq $-ENOSYS,RAX(%rsp) /* ptrace can change this for a bad syscall */
L
Linus Torvalds 已提交
592 593 594
	FIXUP_TOP_OF_STACK %rdi
	movq %rsp,%rdi
	call syscall_trace_enter
595 596 597 598 599 600
	/*
	 * Reload arg registers from stack in case ptrace changed them.
	 * We don't reload %rax because syscall_trace_enter() returned
	 * the value it wants us to use in the table lookup.
	 */
	LOAD_ARGS ARGOFFSET, 1
L
Linus Torvalds 已提交
601 602
	RESTORE_REST
	cmpq $__NR_syscall_max,%rax
R
Roland McGrath 已提交
603
	ja   int_ret_from_sys_call	/* RAX(%rsp) set to -ENOSYS above */
L
Linus Torvalds 已提交
604 605
	movq %r10,%rcx	/* fixup for C */
	call *sys_call_table(,%rax,8)
R
Roland McGrath 已提交
606
	movq %rax,RAX-ARGOFFSET(%rsp)
607
	/* Use IRET because user could have changed frame */
608 609

/*
L
Linus Torvalds 已提交
610 611
 * Syscall return path ending with IRET.
 * Has correct top of stack, but partial stack frame.
612
 */
613
GLOBAL(int_ret_from_sys_call)
614
	DISABLE_INTERRUPTS(CLBR_NONE)
615
	TRACE_IRQS_OFF
L
Linus Torvalds 已提交
616 617 618 619
	testl $3,CS-ARGOFFSET(%rsp)
	je retint_restore_args
	movl $_TIF_ALLWORK_MASK,%edi
	/* edi:	mask to check */
620
GLOBAL(int_with_check)
621
	LOCKDEP_SYS_EXIT_IRQ
L
Linus Torvalds 已提交
622
	GET_THREAD_INFO(%rcx)
G
Glauber Costa 已提交
623
	movl TI_flags(%rcx),%edx
L
Linus Torvalds 已提交
624 625
	andl %edi,%edx
	jnz   int_careful
G
Glauber Costa 已提交
626
	andl    $~TS_COMPAT,TI_status(%rcx)
L
Linus Torvalds 已提交
627 628 629 630 631 632 633 634
	jmp   retint_swapgs

	/* Either reschedule or signal or syscall exit tracking needed. */
	/* First do a reschedule test. */
	/* edx:	work, edi: workmask */
int_careful:
	bt $TIF_NEED_RESCHED,%edx
	jnc  int_very_careful
635
	TRACE_IRQS_ON
636
	ENABLE_INTERRUPTS(CLBR_NONE)
L
Linus Torvalds 已提交
637
	pushq %rdi
638
	CFI_ADJUST_CFA_OFFSET 8
L
Linus Torvalds 已提交
639 640
	call schedule
	popq %rdi
641
	CFI_ADJUST_CFA_OFFSET -8
642
	DISABLE_INTERRUPTS(CLBR_NONE)
643
	TRACE_IRQS_OFF
L
Linus Torvalds 已提交
644 645 646 647
	jmp int_with_check

	/* handle signals and tracing -- both require a full stack frame */
int_very_careful:
648
	TRACE_IRQS_ON
649
	ENABLE_INTERRUPTS(CLBR_NONE)
650
int_check_syscall_exit_work:
L
Linus Torvalds 已提交
651
	SAVE_REST
652
	/* Check for syscall exit trace */
653
	testl $_TIF_WORK_SYSCALL_EXIT,%edx
L
Linus Torvalds 已提交
654 655
	jz int_signal
	pushq %rdi
656
	CFI_ADJUST_CFA_OFFSET 8
657
	leaq 8(%rsp),%rdi	# &ptregs -> arg1
L
Linus Torvalds 已提交
658 659
	call syscall_trace_leave
	popq %rdi
660
	CFI_ADJUST_CFA_OFFSET -8
661
	andl $~(_TIF_WORK_SYSCALL_EXIT|_TIF_SYSCALL_EMU),%edi
L
Linus Torvalds 已提交
662
	jmp int_restore_rest
663

L
Linus Torvalds 已提交
664
int_signal:
P
Peter Zijlstra 已提交
665
	testl $_TIF_DO_NOTIFY_MASK,%edx
L
Linus Torvalds 已提交
666 667 668 669
	jz 1f
	movq %rsp,%rdi		# &ptregs -> arg1
	xorl %esi,%esi		# oldset -> arg2
	call do_notify_resume
R
Roland McGrath 已提交
670
1:	movl $_TIF_WORK_MASK,%edi
L
Linus Torvalds 已提交
671 672
int_restore_rest:
	RESTORE_REST
673
	DISABLE_INTERRUPTS(CLBR_NONE)
674
	TRACE_IRQS_OFF
L
Linus Torvalds 已提交
675 676
	jmp int_with_check
	CFI_ENDPROC
677
END(system_call)
678 679

/*
L
Linus Torvalds 已提交
680
 * Certain special system calls that need to save a complete full stack frame.
681
 */
L
Linus Torvalds 已提交
682
	.macro PTREGSCALL label,func,arg
683 684 685 686 687 688 689 690 691 692
ENTRY(\label)
	PARTIAL_FRAME 1 8		/* offset 8: return address */
	subq $REST_SKIP, %rsp
	CFI_ADJUST_CFA_OFFSET REST_SKIP
	call save_rest
	DEFAULT_FRAME 0 8		/* offset 8: return address */
	leaq 8(%rsp), \arg	/* pt_regs pointer */
	call \func
	jmp ptregscall_common
	CFI_ENDPROC
693
END(\label)
L
Linus Torvalds 已提交
694 695 696 697 698 699 700 701 702
	.endm

	PTREGSCALL stub_clone, sys_clone, %r8
	PTREGSCALL stub_fork, sys_fork, %rdi
	PTREGSCALL stub_vfork, sys_vfork, %rdi
	PTREGSCALL stub_sigaltstack, sys_sigaltstack, %rdx
	PTREGSCALL stub_iopl, sys_iopl, %rsi

ENTRY(ptregscall_common)
703 704 705 706 707 708 709 710 711
	DEFAULT_FRAME 1 8	/* offset 8: return address */
	RESTORE_TOP_OF_STACK %r11, 8
	movq_cfi_restore R15+8, r15
	movq_cfi_restore R14+8, r14
	movq_cfi_restore R13+8, r13
	movq_cfi_restore R12+8, r12
	movq_cfi_restore RBP+8, rbp
	movq_cfi_restore RBX+8, rbx
	ret $REST_SKIP		/* pop extended registers */
L
Linus Torvalds 已提交
712
	CFI_ENDPROC
713
END(ptregscall_common)
714

L
Linus Torvalds 已提交
715 716 717
ENTRY(stub_execve)
	CFI_STARTPROC
	popq %r11
718 719
	CFI_ADJUST_CFA_OFFSET -8
	CFI_REGISTER rip, r11
L
Linus Torvalds 已提交
720 721
	SAVE_REST
	FIXUP_TOP_OF_STACK %r11
722
	movq %rsp, %rcx
L
Linus Torvalds 已提交
723 724 725 726 727 728
	call sys_execve
	RESTORE_TOP_OF_STACK %r11
	movq %rax,RAX(%rsp)
	RESTORE_REST
	jmp int_ret_from_sys_call
	CFI_ENDPROC
729
END(stub_execve)
730

L
Linus Torvalds 已提交
731 732 733
/*
 * sigreturn is special because it needs to restore all registers on return.
 * This cannot be done with SYSRET, so use the IRET return path instead.
734
 */
L
Linus Torvalds 已提交
735 736
ENTRY(stub_rt_sigreturn)
	CFI_STARTPROC
737 738
	addq $8, %rsp
	CFI_ADJUST_CFA_OFFSET	-8
L
Linus Torvalds 已提交
739 740 741 742 743 744 745 746
	SAVE_REST
	movq %rsp,%rdi
	FIXUP_TOP_OF_STACK %r11
	call sys_rt_sigreturn
	movq %rax,RAX(%rsp) # fixme, this could be done at the higher layer
	RESTORE_REST
	jmp int_ret_from_sys_call
	CFI_ENDPROC
747
END(stub_rt_sigreturn)
L
Linus Torvalds 已提交
748

749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765
/*
 * Build the entry stubs and pointer table with some assembler magic.
 * We pack 7 stubs into a single 32-byte chunk, which will fit in a
 * single cache line on all modern x86 implementations.
 */
	.section .init.rodata,"a"
ENTRY(interrupt)
	.text
	.p2align 5
	.p2align CONFIG_X86_L1_CACHE_SHIFT
ENTRY(irq_entries_start)
	INTR_FRAME
vector=FIRST_EXTERNAL_VECTOR
.rept (NR_VECTORS-FIRST_EXTERNAL_VECTOR+6)/7
	.balign 32
  .rept	7
    .if vector < NR_VECTORS
766
      .if vector <> FIRST_EXTERNAL_VECTOR
767 768 769 770
	CFI_ADJUST_CFA_OFFSET -8
      .endif
1:	pushq $(~vector+0x80)	/* Note: always in signed byte range */
	CFI_ADJUST_CFA_OFFSET 8
771
      .if ((vector-FIRST_EXTERNAL_VECTOR)%7) <> 6
772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788
	jmp 2f
      .endif
      .previous
	.quad 1b
      .text
vector=vector+1
    .endif
  .endr
2:	jmp common_interrupt
.endr
	CFI_ENDPROC
END(irq_entries_start)

.previous
END(interrupt)
.previous

789
/*
L
Linus Torvalds 已提交
790 791 792
 * Interrupt entry/exit.
 *
 * Interrupt entry points save only callee clobbered registers in fast path.
793 794 795
 *
 * Entry runs with interrupts off.
 */
L
Linus Torvalds 已提交
796

797
/* 0(%rsp): ~(interrupt number) */
L
Linus Torvalds 已提交
798
	.macro interrupt func
799 800 801
	subq $10*8, %rsp
	CFI_ADJUST_CFA_OFFSET 10*8
	call save_args
802
	PARTIAL_FRAME 0
L
Linus Torvalds 已提交
803 804 805
	call \func
	.endm

806 807 808 809
	/*
	 * The interrupt stubs push (~vector+0x80) onto the stack and
	 * then jump to common_interrupt.
	 */
810 811
	.p2align CONFIG_X86_L1_CACHE_SHIFT
common_interrupt:
812
	XCPT_FRAME
813
	addq $-0x80,(%rsp)		/* Adjust vector to [-256,-1] range */
L
Linus Torvalds 已提交
814
	interrupt do_IRQ
815
	/* 0(%rsp): old_rsp-ARGOFFSET */
816
ret_from_intr:
817
	DISABLE_INTERRUPTS(CLBR_NONE)
818
	TRACE_IRQS_OFF
819
	decl PER_CPU_VAR(irq_count)
820
	leaveq
821
	CFI_DEF_CFA_REGISTER	rsp
822
	CFI_ADJUST_CFA_OFFSET	-8
823
exit_intr:
L
Linus Torvalds 已提交
824 825 826
	GET_THREAD_INFO(%rcx)
	testl $3,CS-ARGOFFSET(%rsp)
	je retint_kernel
827

L
Linus Torvalds 已提交
828 829 830 831
	/* Interrupt came from user space */
	/*
	 * Has a correct top of stack, but a partial stack frame
	 * %rcx: thread info. Interrupts off.
832
	 */
L
Linus Torvalds 已提交
833 834
retint_with_reschedule:
	movl $_TIF_WORK_MASK,%edi
835
retint_check:
836
	LOCKDEP_SYS_EXIT_IRQ
G
Glauber Costa 已提交
837
	movl TI_flags(%rcx),%edx
L
Linus Torvalds 已提交
838
	andl %edi,%edx
839
	CFI_REMEMBER_STATE
L
Linus Torvalds 已提交
840
	jnz  retint_careful
841 842

retint_swapgs:		/* return to user-space */
843 844 845
	/*
	 * The iretq could re-enable interrupts:
	 */
846
	DISABLE_INTERRUPTS(CLBR_ANY)
847
	TRACE_IRQS_IRETQ
848
	SWAPGS
849 850
	jmp restore_args

851
retint_restore_args:	/* return to kernel space */
852
	DISABLE_INTERRUPTS(CLBR_ANY)
853 854 855 856 857
	/*
	 * The iretq could re-enable interrupts:
	 */
	TRACE_IRQS_IRETQ
restore_args:
I
Ingo Molnar 已提交
858 859
	RESTORE_ARGS 0,8,0

A
Adrian Bunk 已提交
860
irq_return:
861
	INTERRUPT_RETURN
I
Ingo Molnar 已提交
862 863 864 865 866 867

	.section __ex_table, "a"
	.quad irq_return, bad_iret
	.previous

#ifdef CONFIG_PARAVIRT
868
ENTRY(native_iret)
L
Linus Torvalds 已提交
869 870 871
	iretq

	.section __ex_table,"a"
872
	.quad native_iret, bad_iret
L
Linus Torvalds 已提交
873
	.previous
I
Ingo Molnar 已提交
874 875
#endif

L
Linus Torvalds 已提交
876 877
	.section .fixup,"ax"
bad_iret:
878 879 880 881 882 883 884 885 886 887 888 889 890 891 892
	/*
	 * The iret traps when the %cs or %ss being restored is bogus.
	 * We've lost the original trap vector and error code.
	 * #GPF is the most likely one to get for an invalid selector.
	 * So pretend we completed the iret and took the #GPF in user mode.
	 *
	 * We are now running with the kernel GS after exception recovery.
	 * But error_entry expects us to have user GS to match the user %cs,
	 * so swap back.
	 */
	pushq $0

	SWAPGS
	jmp general_protection

893 894
	.previous

895
	/* edi: workmask, edx: work */
L
Linus Torvalds 已提交
896
retint_careful:
897
	CFI_RESTORE_STATE
L
Linus Torvalds 已提交
898 899
	bt    $TIF_NEED_RESCHED,%edx
	jnc   retint_signal
900
	TRACE_IRQS_ON
901
	ENABLE_INTERRUPTS(CLBR_NONE)
L
Linus Torvalds 已提交
902
	pushq %rdi
903
	CFI_ADJUST_CFA_OFFSET	8
L
Linus Torvalds 已提交
904
	call  schedule
905
	popq %rdi
906
	CFI_ADJUST_CFA_OFFSET	-8
L
Linus Torvalds 已提交
907
	GET_THREAD_INFO(%rcx)
908
	DISABLE_INTERRUPTS(CLBR_NONE)
909
	TRACE_IRQS_OFF
L
Linus Torvalds 已提交
910
	jmp retint_check
911

L
Linus Torvalds 已提交
912
retint_signal:
P
Peter Zijlstra 已提交
913
	testl $_TIF_DO_NOTIFY_MASK,%edx
914
	jz    retint_swapgs
915
	TRACE_IRQS_ON
916
	ENABLE_INTERRUPTS(CLBR_NONE)
L
Linus Torvalds 已提交
917
	SAVE_REST
918
	movq $-1,ORIG_RAX(%rsp)
919
	xorl %esi,%esi		# oldset
L
Linus Torvalds 已提交
920 921 922
	movq %rsp,%rdi		# &pt_regs
	call do_notify_resume
	RESTORE_REST
923
	DISABLE_INTERRUPTS(CLBR_NONE)
924
	TRACE_IRQS_OFF
925
	GET_THREAD_INFO(%rcx)
R
Roland McGrath 已提交
926
	jmp retint_with_reschedule
L
Linus Torvalds 已提交
927 928 929 930

#ifdef CONFIG_PREEMPT
	/* Returning to kernel space. Check if we need preemption */
	/* rcx:	 threadinfo. interrupts off. */
931
ENTRY(retint_kernel)
G
Glauber Costa 已提交
932
	cmpl $0,TI_preempt_count(%rcx)
L
Linus Torvalds 已提交
933
	jnz  retint_restore_args
G
Glauber Costa 已提交
934
	bt  $TIF_NEED_RESCHED,TI_flags(%rcx)
L
Linus Torvalds 已提交
935 936 937 938 939
	jnc  retint_restore_args
	bt   $9,EFLAGS-ARGOFFSET(%rsp)	/* interrupts off? */
	jnc  retint_restore_args
	call preempt_schedule_irq
	jmp exit_intr
940
#endif
941

L
Linus Torvalds 已提交
942
	CFI_ENDPROC
943
END(common_interrupt)
944

L
Linus Torvalds 已提交
945 946
/*
 * APIC interrupts.
947
 */
948 949
.macro apicinterrupt num sym do_sym
ENTRY(\sym)
950
	INTR_FRAME
951
	pushq $~(\num)
952
	CFI_ADJUST_CFA_OFFSET 8
953
	interrupt \do_sym
L
Linus Torvalds 已提交
954 955
	jmp ret_from_intr
	CFI_ENDPROC
956 957
END(\sym)
.endm
L
Linus Torvalds 已提交
958

959 960 961
#ifdef CONFIG_SMP
apicinterrupt IRQ_MOVE_CLEANUP_VECTOR \
	irq_move_cleanup_interrupt smp_irq_move_cleanup_interrupt
962 963
apicinterrupt REBOOT_VECTOR \
	reboot_interrupt smp_reboot_interrupt
964
#endif
L
Linus Torvalds 已提交
965

N
Nick Piggin 已提交
966
#ifdef CONFIG_X86_UV
967
apicinterrupt UV_BAU_MESSAGE \
968
	uv_bau_message_intr1 uv_bau_message_interrupt
N
Nick Piggin 已提交
969
#endif
970 971
apicinterrupt LOCAL_TIMER_VECTOR \
	apic_timer_interrupt smp_apic_timer_interrupt
972 973
apicinterrupt GENERIC_INTERRUPT_VECTOR \
	generic_interrupt smp_generic_interrupt
974

975
#ifdef CONFIG_SMP
976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991
apicinterrupt INVALIDATE_TLB_VECTOR_START+0 \
	invalidate_interrupt0 smp_invalidate_interrupt
apicinterrupt INVALIDATE_TLB_VECTOR_START+1 \
	invalidate_interrupt1 smp_invalidate_interrupt
apicinterrupt INVALIDATE_TLB_VECTOR_START+2 \
	invalidate_interrupt2 smp_invalidate_interrupt
apicinterrupt INVALIDATE_TLB_VECTOR_START+3 \
	invalidate_interrupt3 smp_invalidate_interrupt
apicinterrupt INVALIDATE_TLB_VECTOR_START+4 \
	invalidate_interrupt4 smp_invalidate_interrupt
apicinterrupt INVALIDATE_TLB_VECTOR_START+5 \
	invalidate_interrupt5 smp_invalidate_interrupt
apicinterrupt INVALIDATE_TLB_VECTOR_START+6 \
	invalidate_interrupt6 smp_invalidate_interrupt
apicinterrupt INVALIDATE_TLB_VECTOR_START+7 \
	invalidate_interrupt7 smp_invalidate_interrupt
L
Linus Torvalds 已提交
992 993
#endif

994
apicinterrupt THRESHOLD_APIC_VECTOR \
995
	threshold_interrupt smp_threshold_interrupt
996 997
apicinterrupt THERMAL_APIC_VECTOR \
	thermal_interrupt smp_thermal_interrupt
998

999 1000 1001 1002 1003
#ifdef CONFIG_X86_MCE
apicinterrupt MCE_SELF_VECTOR \
	mce_self_interrupt smp_mce_self_interrupt
#endif

1004 1005 1006 1007 1008 1009 1010 1011
#ifdef CONFIG_SMP
apicinterrupt CALL_FUNCTION_SINGLE_VECTOR \
	call_function_single_interrupt smp_call_function_single_interrupt
apicinterrupt CALL_FUNCTION_VECTOR \
	call_function_interrupt smp_call_function_interrupt
apicinterrupt RESCHEDULE_VECTOR \
	reschedule_interrupt smp_reschedule_interrupt
#endif
L
Linus Torvalds 已提交
1012

1013 1014 1015 1016
apicinterrupt ERROR_APIC_VECTOR \
	error_interrupt smp_error_interrupt
apicinterrupt SPURIOUS_APIC_VECTOR \
	spurious_interrupt smp_spurious_interrupt
1017

1018
#ifdef CONFIG_PERF_EVENTS
1019 1020
apicinterrupt LOCAL_PENDING_VECTOR \
	perf_pending_interrupt smp_perf_pending_interrupt
I
Ingo Molnar 已提交
1021 1022
#endif

L
Linus Torvalds 已提交
1023 1024
/*
 * Exception entry points.
1025
 */
1026 1027
.macro zeroentry sym do_sym
ENTRY(\sym)
1028
	INTR_FRAME
1029
	PARAVIRT_ADJUST_EXCEPTION_FRAME
I
Ingo Molnar 已提交
1030
	pushq_cfi $-1		/* ORIG_RAX: no syscall to restart */
1031 1032 1033
	subq $15*8,%rsp
	CFI_ADJUST_CFA_OFFSET 15*8
	call error_entry
1034
	DEFAULT_FRAME 0
1035 1036
	movq %rsp,%rdi		/* pt_regs pointer */
	xorl %esi,%esi		/* no error code */
1037
	call \do_sym
1038
	jmp error_exit		/* %ebx: no swapgs flag */
1039
	CFI_ENDPROC
1040 1041
END(\sym)
.endm
L
Linus Torvalds 已提交
1042

1043
.macro paranoidzeroentry sym do_sym
1044
ENTRY(\sym)
1045 1046 1047 1048 1049 1050 1051 1052 1053
	INTR_FRAME
	PARAVIRT_ADJUST_EXCEPTION_FRAME
	pushq $-1		/* ORIG_RAX: no syscall to restart */
	CFI_ADJUST_CFA_OFFSET 8
	subq $15*8, %rsp
	call save_paranoid
	TRACE_IRQS_OFF
	movq %rsp,%rdi		/* pt_regs pointer */
	xorl %esi,%esi		/* no error code */
1054
	call \do_sym
1055 1056
	jmp paranoid_exit	/* %ebx: no swapgs flag */
	CFI_ENDPROC
1057
END(\sym)
1058
.endm
1059

1060
.macro paranoidzeroentry_ist sym do_sym ist
1061
ENTRY(\sym)
1062
	INTR_FRAME
1063 1064 1065 1066 1067 1068 1069 1070
	PARAVIRT_ADJUST_EXCEPTION_FRAME
	pushq $-1		/* ORIG_RAX: no syscall to restart */
	CFI_ADJUST_CFA_OFFSET 8
	subq $15*8, %rsp
	call save_paranoid
	TRACE_IRQS_OFF
	movq %rsp,%rdi		/* pt_regs pointer */
	xorl %esi,%esi		/* no error code */
1071 1072
	PER_CPU(init_tss, %rbp)
	subq $EXCEPTION_STKSZ, TSS_ist + (\ist - 1) * 8(%rbp)
1073
	call \do_sym
1074
	addq $EXCEPTION_STKSZ, TSS_ist + (\ist - 1) * 8(%rbp)
1075 1076
	jmp paranoid_exit	/* %ebx: no swapgs flag */
	CFI_ENDPROC
1077
END(\sym)
1078
.endm
1079

1080
.macro errorentry sym do_sym
1081
ENTRY(\sym)
1082
	XCPT_FRAME
1083
	PARAVIRT_ADJUST_EXCEPTION_FRAME
1084 1085 1086
	subq $15*8,%rsp
	CFI_ADJUST_CFA_OFFSET 15*8
	call error_entry
1087
	DEFAULT_FRAME 0
1088 1089 1090
	movq %rsp,%rdi			/* pt_regs pointer */
	movq ORIG_RAX(%rsp),%rsi	/* get error code */
	movq $-1,ORIG_RAX(%rsp)		/* no syscall to restart */
1091
	call \do_sym
1092
	jmp error_exit			/* %ebx: no swapgs flag */
1093
	CFI_ENDPROC
1094 1095
END(\sym)
.endm
L
Linus Torvalds 已提交
1096 1097

	/* error code is on the stack already */
1098
.macro paranoiderrorentry sym do_sym
1099
ENTRY(\sym)
1100 1101 1102
	XCPT_FRAME
	PARAVIRT_ADJUST_EXCEPTION_FRAME
	subq $15*8,%rsp
1103 1104 1105
	CFI_ADJUST_CFA_OFFSET 15*8
	call save_paranoid
	DEFAULT_FRAME 0
1106
	TRACE_IRQS_OFF
1107 1108 1109
	movq %rsp,%rdi			/* pt_regs pointer */
	movq ORIG_RAX(%rsp),%rsi	/* get error code */
	movq $-1,ORIG_RAX(%rsp)		/* no syscall to restart */
1110
	call \do_sym
1111 1112
	jmp paranoid_exit		/* %ebx: no swapgs flag */
	CFI_ENDPROC
1113 1114 1115 1116 1117 1118 1119 1120
END(\sym)
.endm

zeroentry divide_error do_divide_error
zeroentry overflow do_overflow
zeroentry bounds do_bounds
zeroentry invalid_op do_invalid_op
zeroentry device_not_available do_device_not_available
1121
paranoiderrorentry double_fault do_double_fault
1122 1123 1124 1125 1126 1127 1128
zeroentry coprocessor_segment_overrun do_coprocessor_segment_overrun
errorentry invalid_TSS do_invalid_TSS
errorentry segment_not_present do_segment_not_present
zeroentry spurious_interrupt_bug do_spurious_interrupt_bug
zeroentry coprocessor_error do_coprocessor_error
errorentry alignment_check do_alignment_check
zeroentry simd_coprocessor_error do_simd_coprocessor_error
1129

1130 1131
	/* Reload gs selector with exception handling */
	/* edi:  new selector */
1132
ENTRY(native_load_gs_index)
1133
	CFI_STARTPROC
L
Linus Torvalds 已提交
1134
	pushf
1135
	CFI_ADJUST_CFA_OFFSET 8
1136
	DISABLE_INTERRUPTS(CLBR_ANY & ~CLBR_RDI)
1137
	SWAPGS
1138
gs_change:
1139
	movl %edi,%gs
L
Linus Torvalds 已提交
1140
2:	mfence		/* workaround */
1141
	SWAPGS
1142
	popf
1143
	CFI_ADJUST_CFA_OFFSET -8
1144
	ret
1145
	CFI_ENDPROC
1146
END(native_load_gs_index)
1147

1148 1149 1150 1151 1152
	.section __ex_table,"a"
	.align 8
	.quad gs_change,bad_gs
	.previous
	.section .fixup,"ax"
L
Linus Torvalds 已提交
1153
	/* running with kernelgs */
1154
bad_gs:
1155
	SWAPGS			/* switch back to user gs */
L
Linus Torvalds 已提交
1156
	xorl %eax,%eax
1157 1158 1159
	movl %eax,%gs
	jmp  2b
	.previous
1160

L
Linus Torvalds 已提交
1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182
/*
 * Create a kernel thread.
 *
 * C extern interface:
 *	extern long kernel_thread(int (*fn)(void *), void * arg, unsigned long flags)
 *
 * asm input arguments:
 *	rdi: fn, rsi: arg, rdx: flags
 */
ENTRY(kernel_thread)
	CFI_STARTPROC
	FAKE_STACK_FRAME $child_rip
	SAVE_ALL

	# rdi: flags, rsi: usp, rdx: will be &pt_regs
	movq %rdx,%rdi
	orq  kernel_thread_flags(%rip),%rdi
	movq $-1, %rsi
	movq %rsp, %rdx

	xorl %r8d,%r8d
	xorl %r9d,%r9d
1183

L
Linus Torvalds 已提交
1184 1185 1186 1187 1188 1189 1190 1191 1192 1193
	# clone now
	call do_fork
	movq %rax,RAX(%rsp)
	xorl %edi,%edi

	/*
	 * It isn't worth to check for reschedule here,
	 * so internally to the x86_64 port you can rely on kernel_thread()
	 * not to reschedule the child before returning, this avoids the need
	 * of hacks for example to fork off the per-CPU idle tasks.
1194
	 * [Hopefully no generic code relies on the reschedule -AK]
L
Linus Torvalds 已提交
1195 1196 1197 1198 1199
	 */
	RESTORE_ALL
	UNFAKE_STACK_FRAME
	ret
	CFI_ENDPROC
1200
END(kernel_thread)
1201

1202
ENTRY(child_rip)
1203 1204
	pushq $0		# fake return address
	CFI_STARTPROC
L
Linus Torvalds 已提交
1205 1206 1207 1208 1209 1210 1211 1212
	/*
	 * Here we are in the child and the registers are set as they were
	 * at kernel_thread() invocation in the parent.
	 */
	movq %rdi, %rax
	movq %rsi, %rdi
	call *%rax
	# exit
1213
	mov %eax, %edi
L
Linus Torvalds 已提交
1214
	call do_exit
1215
	ud2			# padding for call trace
1216
	CFI_ENDPROC
1217
END(child_rip)
L
Linus Torvalds 已提交
1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228

/*
 * execve(). This function needs to use IRET, not SYSRET, to set up all state properly.
 *
 * C extern interface:
 *	 extern long execve(char *name, char **argv, char **envp)
 *
 * asm input arguments:
 *	rdi: name, rsi: argv, rdx: envp
 *
 * We want to fallback into:
1229
 *	extern long sys_execve(char *name, char **argv,char **envp, struct pt_regs *regs)
L
Linus Torvalds 已提交
1230 1231
 *
 * do_sys_execve asm fallback arguments:
1232
 *	rdi: name, rsi: argv, rdx: envp, rcx: fake frame on the stack
L
Linus Torvalds 已提交
1233
 */
1234
ENTRY(kernel_execve)
L
Linus Torvalds 已提交
1235 1236
	CFI_STARTPROC
	FAKE_STACK_FRAME $0
1237
	SAVE_ALL
1238
	movq %rsp,%rcx
L
Linus Torvalds 已提交
1239
	call sys_execve
1240
	movq %rax, RAX(%rsp)
L
Linus Torvalds 已提交
1241 1242 1243 1244 1245 1246 1247
	RESTORE_REST
	testq %rax,%rax
	je int_ret_from_sys_call
	RESTORE_ARGS
	UNFAKE_STACK_FRAME
	ret
	CFI_ENDPROC
1248
END(kernel_execve)
L
Linus Torvalds 已提交
1249

1250
/* Call softirq on interrupt stack. Interrupts are off. */
1251
ENTRY(call_softirq)
1252
	CFI_STARTPROC
1253 1254 1255 1256 1257
	push %rbp
	CFI_ADJUST_CFA_OFFSET	8
	CFI_REL_OFFSET rbp,0
	mov  %rsp,%rbp
	CFI_DEF_CFA_REGISTER rbp
1258
	incl PER_CPU_VAR(irq_count)
1259
	cmove PER_CPU_VAR(irq_stack_ptr),%rsp
1260
	push  %rbp			# backlink for old unwinder
1261
	call __do_softirq
1262
	leaveq
1263
	CFI_DEF_CFA_REGISTER	rsp
1264
	CFI_ADJUST_CFA_OFFSET   -8
1265
	decl PER_CPU_VAR(irq_count)
1266
	ret
1267
	CFI_ENDPROC
1268
END(call_softirq)
1269

1270
#ifdef CONFIG_XEN
1271
zeroentry xen_hypervisor_callback xen_do_hypervisor_callback
1272 1273

/*
1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285
 * A note on the "critical region" in our callback handler.
 * We want to avoid stacking callback handlers due to events occurring
 * during handling of the last event. To do this, we keep events disabled
 * until we've done all processing. HOWEVER, we must enable events before
 * popping the stack frame (can't be done atomically) and so it would still
 * be possible to get enough handler activations to overflow the stack.
 * Although unlikely, bugs of that kind are hard to track down, so we'd
 * like to avoid the possibility.
 * So, on entry to the handler we detect whether we interrupted an
 * existing activation in its critical region -- if so, we pop the current
 * activation and restart the handler using the previous one.
 */
1286 1287
ENTRY(xen_do_hypervisor_callback)   # do_hypervisor_callback(struct *pt_regs)
	CFI_STARTPROC
1288 1289 1290 1291
/*
 * Since we don't modify %rdi, evtchn_do_upall(struct *pt_regs) will
 * see the correct pointer to the pt_regs
 */
1292 1293
	movq %rdi, %rsp            # we don't return, adjust the stack frame
	CFI_ENDPROC
1294
	DEFAULT_FRAME
1295
11:	incl PER_CPU_VAR(irq_count)
1296 1297
	movq %rsp,%rbp
	CFI_DEF_CFA_REGISTER rbp
1298
	cmovzq PER_CPU_VAR(irq_stack_ptr),%rsp
1299 1300 1301 1302
	pushq %rbp			# backlink for old unwinder
	call xen_evtchn_do_upcall
	popq %rsp
	CFI_DEF_CFA_REGISTER rsp
1303
	decl PER_CPU_VAR(irq_count)
1304 1305 1306 1307 1308
	jmp  error_exit
	CFI_ENDPROC
END(do_hypervisor_callback)

/*
1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320
 * Hypervisor uses this for application faults while it executes.
 * We get here for two reasons:
 *  1. Fault while reloading DS, ES, FS or GS
 *  2. Fault while executing IRET
 * Category 1 we do not need to fix up as Xen has already reloaded all segment
 * registers that could be reloaded and zeroed the others.
 * Category 2 we fix up by killing the current process. We cannot use the
 * normal Linux return path in this case because if we use the IRET hypercall
 * to pop the stack frame we end up in an infinite loop of failsafe callbacks.
 * We distinguish between categories by comparing each saved segment register
 * with its current contents: any discrepancy means we in category 1.
 */
1321
ENTRY(xen_failsafe_callback)
1322 1323 1324 1325 1326 1327 1328
	INTR_FRAME 1 (6*8)
	/*CFI_REL_OFFSET gs,GS*/
	/*CFI_REL_OFFSET fs,FS*/
	/*CFI_REL_OFFSET es,ES*/
	/*CFI_REL_OFFSET ds,DS*/
	CFI_REL_OFFSET r11,8
	CFI_REL_OFFSET rcx,0
1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348
	movw %ds,%cx
	cmpw %cx,0x10(%rsp)
	CFI_REMEMBER_STATE
	jne 1f
	movw %es,%cx
	cmpw %cx,0x18(%rsp)
	jne 1f
	movw %fs,%cx
	cmpw %cx,0x20(%rsp)
	jne 1f
	movw %gs,%cx
	cmpw %cx,0x28(%rsp)
	jne 1f
	/* All segments match their saved values => Category 2 (Bad IRET). */
	movq (%rsp),%rcx
	CFI_RESTORE rcx
	movq 8(%rsp),%r11
	CFI_RESTORE r11
	addq $0x30,%rsp
	CFI_ADJUST_CFA_OFFSET -0x30
I
Ingo Molnar 已提交
1349 1350 1351
	pushq_cfi $0	/* RIP */
	pushq_cfi %r11
	pushq_cfi %rcx
1352
	jmp general_protection
1353 1354 1355 1356 1357 1358 1359 1360
	CFI_RESTORE_STATE
1:	/* Segment mismatch => Category 1 (Bad segment). Retry the IRET. */
	movq (%rsp),%rcx
	CFI_RESTORE rcx
	movq 8(%rsp),%r11
	CFI_RESTORE r11
	addq $0x30,%rsp
	CFI_ADJUST_CFA_OFFSET -0x30
I
Ingo Molnar 已提交
1361
	pushq_cfi $0
1362 1363 1364 1365 1366 1367
	SAVE_ALL
	jmp error_exit
	CFI_ENDPROC
END(xen_failsafe_callback)

#endif /* CONFIG_XEN */
1368 1369 1370 1371 1372 1373 1374 1375 1376

/*
 * Some functions should be protected against kprobes
 */
	.pushsection .kprobes.text, "ax"

paranoidzeroentry_ist debug do_debug DEBUG_STACK
paranoidzeroentry_ist int3 do_int3 DEBUG_STACK
paranoiderrorentry stack_segment do_stack_segment
1377 1378 1379 1380 1381
#ifdef CONFIG_XEN
zeroentry xen_debug do_debug
zeroentry xen_int3 do_int3
errorentry xen_stack_segment do_stack_segment
#endif
1382 1383 1384
errorentry general_protection do_general_protection
errorentry page_fault do_page_fault
#ifdef CONFIG_X86_MCE
1385
paranoidzeroentry machine_check *machine_check_vector(%rip)
1386 1387 1388
#endif

	/*
1389 1390
	 * "Paranoid" exit path from exception stack.
	 * Paranoid because this is used by NMIs and cannot take
1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412
	 * any kernel state for granted.
	 * We don't do kernel preemption checks here, because only
	 * NMI should be common and it does not enable IRQs and
	 * cannot get reschedule ticks.
	 *
	 * "trace" is 0 for the NMI handler only, because irq-tracing
	 * is fundamentally NMI-unsafe. (we cannot change the soft and
	 * hard flags at once, atomically)
	 */

	/* ebx:	no swapgs flag */
ENTRY(paranoid_exit)
	INTR_FRAME
	DISABLE_INTERRUPTS(CLBR_NONE)
	TRACE_IRQS_OFF
	testl %ebx,%ebx				/* swapgs needed? */
	jnz paranoid_restore
	testl $3,CS(%rsp)
	jnz   paranoid_userspace
paranoid_swapgs:
	TRACE_IRQS_IRETQ 0
	SWAPGS_UNSAFE_STACK
1413 1414
	RESTORE_ALL 8
	jmp irq_return
1415
paranoid_restore:
1416
	TRACE_IRQS_IRETQ 0
1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497
	RESTORE_ALL 8
	jmp irq_return
paranoid_userspace:
	GET_THREAD_INFO(%rcx)
	movl TI_flags(%rcx),%ebx
	andl $_TIF_WORK_MASK,%ebx
	jz paranoid_swapgs
	movq %rsp,%rdi			/* &pt_regs */
	call sync_regs
	movq %rax,%rsp			/* switch stack for scheduling */
	testl $_TIF_NEED_RESCHED,%ebx
	jnz paranoid_schedule
	movl %ebx,%edx			/* arg3: thread flags */
	TRACE_IRQS_ON
	ENABLE_INTERRUPTS(CLBR_NONE)
	xorl %esi,%esi 			/* arg2: oldset */
	movq %rsp,%rdi 			/* arg1: &pt_regs */
	call do_notify_resume
	DISABLE_INTERRUPTS(CLBR_NONE)
	TRACE_IRQS_OFF
	jmp paranoid_userspace
paranoid_schedule:
	TRACE_IRQS_ON
	ENABLE_INTERRUPTS(CLBR_ANY)
	call schedule
	DISABLE_INTERRUPTS(CLBR_ANY)
	TRACE_IRQS_OFF
	jmp paranoid_userspace
	CFI_ENDPROC
END(paranoid_exit)

/*
 * Exception entry point. This expects an error code/orig_rax on the stack.
 * returns in "no swapgs flag" in %ebx.
 */
ENTRY(error_entry)
	XCPT_FRAME
	CFI_ADJUST_CFA_OFFSET 15*8
	/* oldrax contains error code */
	cld
	movq_cfi rdi, RDI+8
	movq_cfi rsi, RSI+8
	movq_cfi rdx, RDX+8
	movq_cfi rcx, RCX+8
	movq_cfi rax, RAX+8
	movq_cfi  r8,  R8+8
	movq_cfi  r9,  R9+8
	movq_cfi r10, R10+8
	movq_cfi r11, R11+8
	movq_cfi rbx, RBX+8
	movq_cfi rbp, RBP+8
	movq_cfi r12, R12+8
	movq_cfi r13, R13+8
	movq_cfi r14, R14+8
	movq_cfi r15, R15+8
	xorl %ebx,%ebx
	testl $3,CS+8(%rsp)
	je error_kernelspace
error_swapgs:
	SWAPGS
error_sti:
	TRACE_IRQS_OFF
	ret
	CFI_ENDPROC

/*
 * There are two places in the kernel that can potentially fault with
 * usergs. Handle them here. The exception handlers after iret run with
 * kernel gs again, so don't set the user space flag. B stepping K8s
 * sometimes report an truncated RIP for IRET exceptions returning to
 * compat mode. Check for these here too.
 */
error_kernelspace:
	incl %ebx
	leaq irq_return(%rip),%rcx
	cmpq %rcx,RIP+8(%rsp)
	je error_swapgs
	movl %ecx,%ecx	/* zero extend */
	cmpq %rcx,RIP+8(%rsp)
	je error_swapgs
	cmpq $gs_change,RIP+8(%rsp)
1498
	je error_swapgs
1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573
	jmp error_sti
END(error_entry)


/* ebx:	no swapgs flag (1: don't need swapgs, 0: need it) */
ENTRY(error_exit)
	DEFAULT_FRAME
	movl %ebx,%eax
	RESTORE_REST
	DISABLE_INTERRUPTS(CLBR_NONE)
	TRACE_IRQS_OFF
	GET_THREAD_INFO(%rcx)
	testl %eax,%eax
	jne retint_kernel
	LOCKDEP_SYS_EXIT_IRQ
	movl TI_flags(%rcx),%edx
	movl $_TIF_WORK_MASK,%edi
	andl %edi,%edx
	jnz retint_careful
	jmp retint_swapgs
	CFI_ENDPROC
END(error_exit)


	/* runs on exception stack */
ENTRY(nmi)
	INTR_FRAME
	PARAVIRT_ADJUST_EXCEPTION_FRAME
	pushq_cfi $-1
	subq $15*8, %rsp
	CFI_ADJUST_CFA_OFFSET 15*8
	call save_paranoid
	DEFAULT_FRAME 0
	/* paranoidentry do_nmi, 0; without TRACE_IRQS_OFF */
	movq %rsp,%rdi
	movq $-1,%rsi
	call do_nmi
#ifdef CONFIG_TRACE_IRQFLAGS
	/* paranoidexit; without TRACE_IRQS_OFF */
	/* ebx:	no swapgs flag */
	DISABLE_INTERRUPTS(CLBR_NONE)
	testl %ebx,%ebx				/* swapgs needed? */
	jnz nmi_restore
	testl $3,CS(%rsp)
	jnz nmi_userspace
nmi_swapgs:
	SWAPGS_UNSAFE_STACK
nmi_restore:
	RESTORE_ALL 8
	jmp irq_return
nmi_userspace:
	GET_THREAD_INFO(%rcx)
	movl TI_flags(%rcx),%ebx
	andl $_TIF_WORK_MASK,%ebx
	jz nmi_swapgs
	movq %rsp,%rdi			/* &pt_regs */
	call sync_regs
	movq %rax,%rsp			/* switch stack for scheduling */
	testl $_TIF_NEED_RESCHED,%ebx
	jnz nmi_schedule
	movl %ebx,%edx			/* arg3: thread flags */
	ENABLE_INTERRUPTS(CLBR_NONE)
	xorl %esi,%esi 			/* arg2: oldset */
	movq %rsp,%rdi 			/* arg1: &pt_regs */
	call do_notify_resume
	DISABLE_INTERRUPTS(CLBR_NONE)
	jmp nmi_userspace
nmi_schedule:
	ENABLE_INTERRUPTS(CLBR_ANY)
	call schedule
	DISABLE_INTERRUPTS(CLBR_ANY)
	jmp nmi_userspace
	CFI_ENDPROC
#else
	jmp paranoid_exit
1574
	CFI_ENDPROC
1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588
#endif
END(nmi)

ENTRY(ignore_sysret)
	CFI_STARTPROC
	mov $-ENOSYS,%eax
	sysret
	CFI_ENDPROC
END(ignore_sysret)

/*
 * End of kprobes section
 */
	.popsection