entry_32.S 29.2 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
/*
 *
 *  Copyright (C) 1991, 1992  Linus Torvalds
 */

/*
 * entry.S contains the system-call and fault low-level handling routines.
 * This also contains the timer-interrupt handler, as well as all interrupts
 * and faults that can result in a task-switch.
 *
 * NOTE: This code handles signal-recognition, which happens every time
 * after a timer-interrupt and after each system call.
 *
 * I changed all the .align's to 4 (16 byte alignment), as that's faster
 * on a 486.
 *
17
 * Stack layout in 'syscall_exit':
L
Linus Torvalds 已提交
18 19 20 21 22 23 24 25 26 27 28 29 30 31
 * 	ptrace needs to have all regs on the stack.
 *	if the order here is changed, it needs to be
 *	updated in fork.c:copy_process, signal.c:do_signal,
 *	ptrace.c and ptrace.h
 *
 *	 0(%esp) - %ebx
 *	 4(%esp) - %ecx
 *	 8(%esp) - %edx
 *       C(%esp) - %esi
 *	10(%esp) - %edi
 *	14(%esp) - %ebp
 *	18(%esp) - %eax
 *	1C(%esp) - %ds
 *	20(%esp) - %es
32
 *	24(%esp) - %fs
33 34 35 36 37 38
 *	28(%esp) - orig_eax
 *	2C(%esp) - %eip
 *	30(%esp) - %cs
 *	34(%esp) - %eflags
 *	38(%esp) - %oldesp
 *	3C(%esp) - %oldss
L
Linus Torvalds 已提交
39 40 41 42 43 44
 *
 * "current" is in register %ebx during any slow entries.
 */

#include <linux/linkage.h>
#include <asm/thread_info.h>
45
#include <asm/irqflags.h>
L
Linus Torvalds 已提交
46 47 48 49 50
#include <asm/errno.h>
#include <asm/segment.h>
#include <asm/smp.h>
#include <asm/page.h>
#include <asm/desc.h>
S
Stas Sergeev 已提交
51
#include <asm/percpu.h>
52
#include <asm/dwarf2.h>
53
#include <asm/processor-flags.h>
54
#include <asm/ftrace.h>
55
#include <asm/irq_vectors.h>
L
Linus Torvalds 已提交
56

R
Roland McGrath 已提交
57 58 59 60 61 62 63 64 65 66
/* Avoid __ASSEMBLER__'ifying <linux/audit.h> just for this.  */
#include <linux/elf-em.h>
#define AUDIT_ARCH_I386		(EM_386|__AUDIT_ARCH_LE)
#define __AUDIT_ARCH_LE	   0x40000000

#ifndef CONFIG_AUDITSYSCALL
#define sysenter_audit	syscall_trace_entry
#define sysexit_audit	syscall_exit_work
#endif

67 68 69 70 71
/*
 * We use macros for low-level operations which need to be overridden
 * for paravirtualization.  The following will never clobber any registers:
 *   INTERRUPT_RETURN (aka. "iret")
 *   GET_CR0_INTO_EAX (aka. "movl %cr0, %eax")
72
 *   ENABLE_INTERRUPTS_SYSEXIT (aka "sti; sysexit").
73 74 75 76 77 78 79
 *
 * For DISABLE_INTERRUPTS/ENABLE_INTERRUPTS (aka "cli"/"sti"), you must
 * specify what registers can be overwritten (CLBR_NONE, CLBR_EAX/EDX/ECX/ANY).
 * Allowing a register to be clobbered can shrink the paravirt replacement
 * enough to patch inline, increasing performance.
 */

L
Linus Torvalds 已提交
80 81 82
#define nr_syscalls ((syscall_table_size)/4)

#ifdef CONFIG_PREEMPT
83
#define preempt_stop(clobbers)	DISABLE_INTERRUPTS(clobbers); TRACE_IRQS_OFF
L
Linus Torvalds 已提交
84
#else
85
#define preempt_stop(clobbers)
L
Linus Torvalds 已提交
86 87 88
#define resume_kernel		restore_nocheck
#endif

89 90
.macro TRACE_IRQS_IRET
#ifdef CONFIG_TRACE_IRQFLAGS
91
	testl $X86_EFLAGS_IF,PT_EFLAGS(%esp)     # interrupts off?
92 93 94 95 96 97
	jz 1f
	TRACE_IRQS_ON
1:
#endif
.endm

98 99 100 101 102 103
#ifdef CONFIG_VM86
#define resume_userspace_sig	check_userspace
#else
#define resume_userspace_sig	resume_userspace
#endif

L
Linus Torvalds 已提交
104 105
#define SAVE_ALL \
	cld; \
106
	pushl %fs; \
107
	CFI_ADJUST_CFA_OFFSET 4;\
108
	/*CFI_REL_OFFSET fs, 0;*/\
L
Linus Torvalds 已提交
109
	pushl %es; \
110 111
	CFI_ADJUST_CFA_OFFSET 4;\
	/*CFI_REL_OFFSET es, 0;*/\
L
Linus Torvalds 已提交
112
	pushl %ds; \
113 114
	CFI_ADJUST_CFA_OFFSET 4;\
	/*CFI_REL_OFFSET ds, 0;*/\
L
Linus Torvalds 已提交
115
	pushl %eax; \
116 117
	CFI_ADJUST_CFA_OFFSET 4;\
	CFI_REL_OFFSET eax, 0;\
L
Linus Torvalds 已提交
118
	pushl %ebp; \
119 120
	CFI_ADJUST_CFA_OFFSET 4;\
	CFI_REL_OFFSET ebp, 0;\
L
Linus Torvalds 已提交
121
	pushl %edi; \
122 123
	CFI_ADJUST_CFA_OFFSET 4;\
	CFI_REL_OFFSET edi, 0;\
L
Linus Torvalds 已提交
124
	pushl %esi; \
125 126
	CFI_ADJUST_CFA_OFFSET 4;\
	CFI_REL_OFFSET esi, 0;\
L
Linus Torvalds 已提交
127
	pushl %edx; \
128 129
	CFI_ADJUST_CFA_OFFSET 4;\
	CFI_REL_OFFSET edx, 0;\
L
Linus Torvalds 已提交
130
	pushl %ecx; \
131 132
	CFI_ADJUST_CFA_OFFSET 4;\
	CFI_REL_OFFSET ecx, 0;\
L
Linus Torvalds 已提交
133
	pushl %ebx; \
134 135
	CFI_ADJUST_CFA_OFFSET 4;\
	CFI_REL_OFFSET ebx, 0;\
L
Linus Torvalds 已提交
136 137
	movl $(__USER_DS), %edx; \
	movl %edx, %ds; \
138
	movl %edx, %es; \
139
	movl $(__KERNEL_PERCPU), %edx; \
140
	movl %edx, %fs
L
Linus Torvalds 已提交
141 142 143

#define RESTORE_INT_REGS \
	popl %ebx;	\
144 145
	CFI_ADJUST_CFA_OFFSET -4;\
	CFI_RESTORE ebx;\
L
Linus Torvalds 已提交
146
	popl %ecx;	\
147 148
	CFI_ADJUST_CFA_OFFSET -4;\
	CFI_RESTORE ecx;\
L
Linus Torvalds 已提交
149
	popl %edx;	\
150 151
	CFI_ADJUST_CFA_OFFSET -4;\
	CFI_RESTORE edx;\
L
Linus Torvalds 已提交
152
	popl %esi;	\
153 154
	CFI_ADJUST_CFA_OFFSET -4;\
	CFI_RESTORE esi;\
L
Linus Torvalds 已提交
155
	popl %edi;	\
156 157
	CFI_ADJUST_CFA_OFFSET -4;\
	CFI_RESTORE edi;\
L
Linus Torvalds 已提交
158
	popl %ebp;	\
159 160 161 162 163
	CFI_ADJUST_CFA_OFFSET -4;\
	CFI_RESTORE ebp;\
	popl %eax;	\
	CFI_ADJUST_CFA_OFFSET -4;\
	CFI_RESTORE eax
L
Linus Torvalds 已提交
164 165 166 167

#define RESTORE_REGS	\
	RESTORE_INT_REGS; \
1:	popl %ds;	\
168 169
	CFI_ADJUST_CFA_OFFSET -4;\
	/*CFI_RESTORE ds;*/\
L
Linus Torvalds 已提交
170
2:	popl %es;	\
171 172
	CFI_ADJUST_CFA_OFFSET -4;\
	/*CFI_RESTORE es;*/\
173
3:	popl %fs;	\
174
	CFI_ADJUST_CFA_OFFSET -4;\
175
	/*CFI_RESTORE fs;*/\
176
.pushsection .fixup,"ax";	\
L
Linus Torvalds 已提交
177
4:	movl $0,(%esp);	\
178 179
	jmp 1b;		\
5:	movl $0,(%esp);	\
L
Linus Torvalds 已提交
180
	jmp 2b;		\
181 182
6:	movl $0,(%esp);	\
	jmp 3b;		\
L
Linus Torvalds 已提交
183 184
.section __ex_table,"a";\
	.align 4;	\
185 186 187 188
	.long 1b,4b;	\
	.long 2b,5b;	\
	.long 3b,6b;	\
.popsection
L
Linus Torvalds 已提交
189

190 191
#define RING0_INT_FRAME \
	CFI_STARTPROC simple;\
192
	CFI_SIGNAL_FRAME;\
193 194 195 196 197 198
	CFI_DEF_CFA esp, 3*4;\
	/*CFI_OFFSET cs, -2*4;*/\
	CFI_OFFSET eip, -3*4

#define RING0_EC_FRAME \
	CFI_STARTPROC simple;\
199
	CFI_SIGNAL_FRAME;\
200 201 202 203 204 205
	CFI_DEF_CFA esp, 4*4;\
	/*CFI_OFFSET cs, -2*4;*/\
	CFI_OFFSET eip, -3*4

#define RING0_PTREGS_FRAME \
	CFI_STARTPROC simple;\
206
	CFI_SIGNAL_FRAME;\
207 208 209 210 211 212 213 214 215 216 217 218
	CFI_DEF_CFA esp, PT_OLDESP-PT_EBX;\
	/*CFI_OFFSET cs, PT_CS-PT_OLDESP;*/\
	CFI_OFFSET eip, PT_EIP-PT_OLDESP;\
	/*CFI_OFFSET es, PT_ES-PT_OLDESP;*/\
	/*CFI_OFFSET ds, PT_DS-PT_OLDESP;*/\
	CFI_OFFSET eax, PT_EAX-PT_OLDESP;\
	CFI_OFFSET ebp, PT_EBP-PT_OLDESP;\
	CFI_OFFSET edi, PT_EDI-PT_OLDESP;\
	CFI_OFFSET esi, PT_ESI-PT_OLDESP;\
	CFI_OFFSET edx, PT_EDX-PT_OLDESP;\
	CFI_OFFSET ecx, PT_ECX-PT_OLDESP;\
	CFI_OFFSET ebx, PT_EBX-PT_OLDESP
L
Linus Torvalds 已提交
219 220

ENTRY(ret_from_fork)
221
	CFI_STARTPROC
L
Linus Torvalds 已提交
222
	pushl %eax
223
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
224 225 226
	call schedule_tail
	GET_THREAD_INFO(%ebp)
	popl %eax
227
	CFI_ADJUST_CFA_OFFSET -4
228 229 230 231
	pushl $0x0202			# Reset kernel eflags
	CFI_ADJUST_CFA_OFFSET 4
	popfl
	CFI_ADJUST_CFA_OFFSET -4
L
Linus Torvalds 已提交
232
	jmp syscall_exit
233
	CFI_ENDPROC
234
END(ret_from_fork)
L
Linus Torvalds 已提交
235 236 237 238 239 240 241 242 243 244

/*
 * Return to user mode is not as complex as all this looks,
 * but we want the default path for a system call return to
 * go as quickly as possible which is why some of this is
 * less clear than it otherwise should be.
 */

	# userspace resumption stub bypassing syscall exit tracing
	ALIGN
245
	RING0_PTREGS_FRAME
L
Linus Torvalds 已提交
246
ret_from_exception:
247
	preempt_stop(CLBR_ANY)
L
Linus Torvalds 已提交
248 249
ret_from_intr:
	GET_THREAD_INFO(%ebp)
250
check_userspace:
251 252
	movl PT_EFLAGS(%esp), %eax	# mix EFLAGS and CS
	movb PT_CS(%esp), %al
253
	andl $(X86_EFLAGS_VM | SEGMENT_RPL_MASK), %eax
254 255
	cmpl $USER_RPL, %eax
	jb resume_kernel		# not returning to v8086 or userspace
256

L
Linus Torvalds 已提交
257
ENTRY(resume_userspace)
258
	LOCKDEP_SYS_EXIT
259
 	DISABLE_INTERRUPTS(CLBR_ANY)	# make sure we don't miss an interrupt
L
Linus Torvalds 已提交
260 261
					# setting need_resched or sigpending
					# between sampling and the iret
262
	TRACE_IRQS_OFF
L
Linus Torvalds 已提交
263 264 265 266 267
	movl TI_flags(%ebp), %ecx
	andl $_TIF_WORK_MASK, %ecx	# is there any work to be done on
					# int/exception return?
	jne work_pending
	jmp restore_all
268
END(ret_from_exception)
L
Linus Torvalds 已提交
269 270 271

#ifdef CONFIG_PREEMPT
ENTRY(resume_kernel)
272
	DISABLE_INTERRUPTS(CLBR_ANY)
L
Linus Torvalds 已提交
273 274 275 276 277 278
	cmpl $0,TI_preempt_count(%ebp)	# non-zero preempt_count ?
	jnz restore_nocheck
need_resched:
	movl TI_flags(%ebp), %ecx	# need_resched set ?
	testb $_TIF_NEED_RESCHED, %cl
	jz restore_all
279
	testl $X86_EFLAGS_IF,PT_EFLAGS(%esp)	# interrupts off (exception path) ?
L
Linus Torvalds 已提交
280 281 282
	jz restore_all
	call preempt_schedule_irq
	jmp need_resched
283
END(resume_kernel)
L
Linus Torvalds 已提交
284
#endif
285
	CFI_ENDPROC
L
Linus Torvalds 已提交
286 287 288 289 290

/* SYSENTER_RETURN points to after the "sysenter" instruction in
   the vsyscall page.  See vsyscall-sysentry.S, which defines the symbol.  */

	# sysenter call handler stub
R
Roland McGrath 已提交
291
ENTRY(ia32_sysenter_target)
292
	CFI_STARTPROC simple
293
	CFI_SIGNAL_FRAME
294 295
	CFI_DEF_CFA esp, 0
	CFI_REGISTER esp, ebp
296
	movl TSS_sysenter_sp0(%esp),%esp
L
Linus Torvalds 已提交
297
sysenter_past_esp:
298
	/*
299 300 301
	 * Interrupts are disabled here, but we can't trace it until
	 * enough kernel state to call TRACE_IRQS_OFF can be called - but
	 * we immediately enable interrupts at that point anyway.
302
	 */
L
Linus Torvalds 已提交
303
	pushl $(__USER_DS)
304 305
	CFI_ADJUST_CFA_OFFSET 4
	/*CFI_REL_OFFSET ss, 0*/
L
Linus Torvalds 已提交
306
	pushl %ebp
307 308
	CFI_ADJUST_CFA_OFFSET 4
	CFI_REL_OFFSET esp, 0
L
Linus Torvalds 已提交
309
	pushfl
310
	orl $X86_EFLAGS_IF, (%esp)
311
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
312
	pushl $(__USER_CS)
313 314
	CFI_ADJUST_CFA_OFFSET 4
	/*CFI_REL_OFFSET cs, 0*/
315 316 317 318 319 320
	/*
	 * Push current_thread_info()->sysenter_return to the stack.
	 * A tiny bit of offset fixup is necessary - 4*4 means the 4 words
	 * pushed above; +8 corresponds to copy_thread's esp0 setting.
	 */
	pushl (TI_sysenter_return-THREAD_SIZE+8+4*4)(%esp)
321 322
	CFI_ADJUST_CFA_OFFSET 4
	CFI_REL_OFFSET eip, 0
L
Linus Torvalds 已提交
323

324 325 326 327 328
	pushl %eax
	CFI_ADJUST_CFA_OFFSET 4
	SAVE_ALL
	ENABLE_INTERRUPTS(CLBR_NONE)

L
Linus Torvalds 已提交
329 330 331 332 333 334 335
/*
 * Load the potential sixth argument from user stack.
 * Careful about security.
 */
	cmpl $__PAGE_OFFSET-3,%ebp
	jae syscall_fault
1:	movl (%ebp),%ebp
336
	movl %ebp,PT_EBP(%esp)
L
Linus Torvalds 已提交
337 338 339 340 341 342 343 344
.section __ex_table,"a"
	.align 4
	.long 1b,syscall_fault
.previous

	GET_THREAD_INFO(%ebp)

	/* Note, _TIF_SECCOMP is bit number 8, and so it needs testw and not testb */
345
	testw $_TIF_WORK_SYSCALL_ENTRY,TI_flags(%ebp)
R
Roland McGrath 已提交
346 347
	jnz sysenter_audit
sysenter_do_call:
L
Linus Torvalds 已提交
348 349 350
	cmpl $(nr_syscalls), %eax
	jae syscall_badsys
	call *sys_call_table(,%eax,4)
351
	movl %eax,PT_EAX(%esp)
352
	LOCKDEP_SYS_EXIT
353
	DISABLE_INTERRUPTS(CLBR_ANY)
354
	TRACE_IRQS_OFF
L
Linus Torvalds 已提交
355 356
	movl TI_flags(%ebp), %ecx
	testw $_TIF_ALLWORK_MASK, %cx
R
Roland McGrath 已提交
357 358
	jne sysexit_audit
sysenter_exit:
L
Linus Torvalds 已提交
359
/* if something modifies registers it must also disable sysexit */
360 361
	movl PT_EIP(%esp), %edx
	movl PT_OLDESP(%esp), %ecx
L
Linus Torvalds 已提交
362
	xorl %ebp,%ebp
363
	TRACE_IRQS_ON
364
1:	mov  PT_FS(%esp), %fs
365
	ENABLE_INTERRUPTS_SYSEXIT
R
Roland McGrath 已提交
366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404

#ifdef CONFIG_AUDITSYSCALL
sysenter_audit:
	testw $(_TIF_WORK_SYSCALL_ENTRY & ~_TIF_SYSCALL_AUDIT),TI_flags(%ebp)
	jnz syscall_trace_entry
	addl $4,%esp
	CFI_ADJUST_CFA_OFFSET -4
	/* %esi already in 8(%esp)	   6th arg: 4th syscall arg */
	/* %edx already in 4(%esp)	   5th arg: 3rd syscall arg */
	/* %ecx already in 0(%esp)	   4th arg: 2nd syscall arg */
	movl %ebx,%ecx			/* 3rd arg: 1st syscall arg */
	movl %eax,%edx			/* 2nd arg: syscall number */
	movl $AUDIT_ARCH_I386,%eax	/* 1st arg: audit arch */
	call audit_syscall_entry
	pushl %ebx
	CFI_ADJUST_CFA_OFFSET 4
	movl PT_EAX(%esp),%eax		/* reload syscall number */
	jmp sysenter_do_call

sysexit_audit:
	testw $(_TIF_ALLWORK_MASK & ~_TIF_SYSCALL_AUDIT), %cx
	jne syscall_exit_work
	TRACE_IRQS_ON
	ENABLE_INTERRUPTS(CLBR_ANY)
	movl %eax,%edx		/* second arg, syscall return value */
	cmpl $0,%eax		/* is it < 0? */
	setl %al		/* 1 if so, 0 if not */
	movzbl %al,%eax		/* zero-extend that */
	inc %eax /* first arg, 0->1(AUDITSC_SUCCESS), 1->2(AUDITSC_FAILURE) */
	call audit_syscall_exit
	DISABLE_INTERRUPTS(CLBR_ANY)
	TRACE_IRQS_OFF
	movl TI_flags(%ebp), %ecx
	testw $(_TIF_ALLWORK_MASK & ~_TIF_SYSCALL_AUDIT), %cx
	jne syscall_exit_work
	movl PT_EAX(%esp),%eax	/* reload syscall return value */
	jmp sysenter_exit
#endif

405
	CFI_ENDPROC
406
.pushsection .fixup,"ax"
407
2:	movl $0,PT_FS(%esp)
408 409 410 411 412
	jmp 1b
.section __ex_table,"a"
	.align 4
	.long 1b,2b
.popsection
R
Roland McGrath 已提交
413
ENDPROC(ia32_sysenter_target)
L
Linus Torvalds 已提交
414 415 416

	# system call handler stub
ENTRY(system_call)
417
	RING0_INT_FRAME			# can't unwind into user space anyway
L
Linus Torvalds 已提交
418
	pushl %eax			# save orig_eax
419
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
420 421
	SAVE_ALL
	GET_THREAD_INFO(%ebp)
422
					# system call tracing in operation / emulation
L
Linus Torvalds 已提交
423
	/* Note, _TIF_SECCOMP is bit number 8, and so it needs testw and not testb */
424
	testw $_TIF_WORK_SYSCALL_ENTRY,TI_flags(%ebp)
L
Linus Torvalds 已提交
425 426 427 428 429
	jnz syscall_trace_entry
	cmpl $(nr_syscalls), %eax
	jae syscall_badsys
syscall_call:
	call *sys_call_table(,%eax,4)
430
	movl %eax,PT_EAX(%esp)		# store the return value
L
Linus Torvalds 已提交
431
syscall_exit:
432
	LOCKDEP_SYS_EXIT
433
	DISABLE_INTERRUPTS(CLBR_ANY)	# make sure we don't miss an interrupt
L
Linus Torvalds 已提交
434 435
					# setting need_resched or sigpending
					# between sampling and the iret
436
	TRACE_IRQS_OFF
L
Linus Torvalds 已提交
437 438 439 440 441
	movl TI_flags(%ebp), %ecx
	testw $_TIF_ALLWORK_MASK, %cx	# current->work
	jne syscall_exit_work

restore_all:
442 443
	movl PT_EFLAGS(%esp), %eax	# mix EFLAGS, SS and CS
	# Warning: PT_OLDSS(%esp) contains the wrong/random values if we
444 445
	# are returning to the kernel.
	# See comments in process.c:copy_thread() for details.
446 447
	movb PT_OLDSS(%esp), %ah
	movb PT_CS(%esp), %al
448
	andl $(X86_EFLAGS_VM | (SEGMENT_TI_MASK << 8) | SEGMENT_RPL_MASK), %eax
449
	cmpl $((SEGMENT_LDT << 8) | USER_RPL), %eax
450
	CFI_REMEMBER_STATE
L
Linus Torvalds 已提交
451 452
	je ldt_ss			# returning to user-space with LDT SS
restore_nocheck:
453 454
	TRACE_IRQS_IRET
restore_nocheck_notrace:
L
Linus Torvalds 已提交
455
	RESTORE_REGS
456
	addl $4, %esp			# skip orig_eax/error_code
457
	CFI_ADJUST_CFA_OFFSET -4
A
Adrian Bunk 已提交
458
irq_return:
I
Ingo Molnar 已提交
459
	INTERRUPT_RETURN
L
Linus Torvalds 已提交
460
.section .fixup,"ax"
461
ENTRY(iret_exc)
462 463 464
	pushl $0			# no error code
	pushl $do_iret_error
	jmp error_code
L
Linus Torvalds 已提交
465 466 467
.previous
.section __ex_table,"a"
	.align 4
I
Ingo Molnar 已提交
468
	.long irq_return,iret_exc
L
Linus Torvalds 已提交
469 470
.previous

471
	CFI_RESTORE_STATE
L
Linus Torvalds 已提交
472
ldt_ss:
473
	larl PT_OLDSS(%esp), %eax
L
Linus Torvalds 已提交
474 475 476
	jnz restore_nocheck
	testl $0x00400000, %eax		# returning to 32bit stack?
	jnz restore_nocheck		# allright, normal return
477 478 479 480 481 482 483 484 485 486

#ifdef CONFIG_PARAVIRT
	/*
	 * The kernel can't run on a non-flat stack if paravirt mode
	 * is active.  Rather than try to fixup the high bits of
	 * ESP, bypass this code entirely.  This may break DOSemu
	 * and/or Wine support in a paravirt VM, although the option
	 * is still available to implement the setting of the high
	 * 16-bits in the INTERRUPT_RETURN paravirt-op.
	 */
487
	cmpl $0, pv_info+PARAVIRT_enabled
488 489 490
	jne restore_nocheck
#endif

L
Linus Torvalds 已提交
491 492 493 494 495 496
	/* If returning to userspace with 16bit stack,
	 * try to fix the higher word of ESP, as the CPU
	 * won't restore it.
	 * This is an "official" bug of all the x86-compatible
	 * CPUs, which we can try to work around to make
	 * dosemu and wine happy. */
497
	movl PT_OLDESP(%esp), %eax
S
Stas Sergeev 已提交
498 499 500 501 502 503
	movl %esp, %edx
	call patch_espfix_desc
	pushl $__ESPFIX_SS
	CFI_ADJUST_CFA_OFFSET 4
	pushl %eax
	CFI_ADJUST_CFA_OFFSET 4
504
	DISABLE_INTERRUPTS(CLBR_EAX)
505
	TRACE_IRQS_OFF
S
Stas Sergeev 已提交
506 507 508
	lss (%esp), %esp
	CFI_ADJUST_CFA_OFFSET -8
	jmp restore_nocheck
509
	CFI_ENDPROC
510
ENDPROC(system_call)
L
Linus Torvalds 已提交
511 512 513

	# perform work that needs to be done immediately before resumption
	ALIGN
514
	RING0_PTREGS_FRAME		# can't unwind into user space anyway
L
Linus Torvalds 已提交
515 516 517 518 519
work_pending:
	testb $_TIF_NEED_RESCHED, %cl
	jz work_notifysig
work_resched:
	call schedule
520
	LOCKDEP_SYS_EXIT
521
	DISABLE_INTERRUPTS(CLBR_ANY)	# make sure we don't miss an interrupt
L
Linus Torvalds 已提交
522 523
					# setting need_resched or sigpending
					# between sampling and the iret
524
	TRACE_IRQS_OFF
L
Linus Torvalds 已提交
525 526 527 528 529 530 531 532 533
	movl TI_flags(%ebp), %ecx
	andl $_TIF_WORK_MASK, %ecx	# is there any work to be done other
					# than syscall tracing?
	jz restore_all
	testb $_TIF_NEED_RESCHED, %cl
	jnz work_resched

work_notifysig:				# deal with pending signals and
					# notify-resume requests
534
#ifdef CONFIG_VM86
535
	testl $X86_EFLAGS_VM, PT_EFLAGS(%esp)
L
Linus Torvalds 已提交
536 537 538 539 540
	movl %esp, %eax
	jne work_notifysig_v86		# returning to kernel-space or
					# vm86-space
	xorl %edx, %edx
	call do_notify_resume
541
	jmp resume_userspace_sig
L
Linus Torvalds 已提交
542 543 544 545

	ALIGN
work_notifysig_v86:
	pushl %ecx			# save ti_flags for do_notify_resume
546
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
547 548
	call save_v86_state		# %eax contains pt_regs pointer
	popl %ecx
549
	CFI_ADJUST_CFA_OFFSET -4
L
Linus Torvalds 已提交
550
	movl %eax, %esp
551 552 553
#else
	movl %esp, %eax
#endif
L
Linus Torvalds 已提交
554 555
	xorl %edx, %edx
	call do_notify_resume
556
	jmp resume_userspace_sig
557
END(work_pending)
L
Linus Torvalds 已提交
558 559 560 561

	# perform syscall exit tracing
	ALIGN
syscall_trace_entry:
562
	movl $-ENOSYS,PT_EAX(%esp)
L
Linus Torvalds 已提交
563
	movl %esp, %eax
564 565
	call syscall_trace_enter
	/* What it returned is what we'll actually use.  */
L
Linus Torvalds 已提交
566 567 568
	cmpl $(nr_syscalls), %eax
	jnae syscall_call
	jmp syscall_exit
569
END(syscall_trace_entry)
L
Linus Torvalds 已提交
570 571 572 573

	# perform syscall exit tracing
	ALIGN
syscall_exit_work:
574
	testb $_TIF_WORK_SYSCALL_EXIT, %cl
L
Linus Torvalds 已提交
575
	jz work_pending
576
	TRACE_IRQS_ON
577
	ENABLE_INTERRUPTS(CLBR_ANY)	# could let syscall_trace_leave() call
L
Linus Torvalds 已提交
578 579
					# schedule() instead
	movl %esp, %eax
580
	call syscall_trace_leave
L
Linus Torvalds 已提交
581
	jmp resume_userspace
582
END(syscall_exit_work)
583
	CFI_ENDPROC
L
Linus Torvalds 已提交
584

585
	RING0_INT_FRAME			# can't unwind into user space anyway
L
Linus Torvalds 已提交
586 587
syscall_fault:
	GET_THREAD_INFO(%ebp)
588
	movl $-EFAULT,PT_EAX(%esp)
L
Linus Torvalds 已提交
589
	jmp resume_userspace
590
END(syscall_fault)
L
Linus Torvalds 已提交
591 592

syscall_badsys:
593
	movl $-ENOSYS,PT_EAX(%esp)
L
Linus Torvalds 已提交
594
	jmp resume_userspace
595
END(syscall_badsys)
596
	CFI_ENDPROC
L
Linus Torvalds 已提交
597 598

#define FIXUP_ESPFIX_STACK \
S
Stas Sergeev 已提交
599
	/* since we are on a wrong stack, we cant make it a C code :( */ \
600
	PER_CPU(gdt_page, %ebx); \
S
Stas Sergeev 已提交
601 602 603 604
	GET_DESC_BASE(GDT_ENTRY_ESPFIX_SS, %ebx, %eax, %ax, %al, %ah); \
	addl %esp, %eax; \
	pushl $__KERNEL_DS; \
	CFI_ADJUST_CFA_OFFSET 4; \
L
Linus Torvalds 已提交
605
	pushl %eax; \
606
	CFI_ADJUST_CFA_OFFSET 4; \
S
Stas Sergeev 已提交
607 608 609
	lss (%esp), %esp; \
	CFI_ADJUST_CFA_OFFSET -8;
#define UNWIND_ESPFIX_STACK \
L
Linus Torvalds 已提交
610
	movl %ss, %eax; \
S
Stas Sergeev 已提交
611
	/* see if on espfix stack */ \
L
Linus Torvalds 已提交
612
	cmpw $__ESPFIX_SS, %ax; \
S
Stas Sergeev 已提交
613 614
	jne 27f; \
	movl $__KERNEL_DS, %eax; \
615 616
	movl %eax, %ds; \
	movl %eax, %es; \
S
Stas Sergeev 已提交
617
	/* switch to normal stack */ \
618
	FIXUP_ESPFIX_STACK; \
S
Stas Sergeev 已提交
619
27:;
L
Linus Torvalds 已提交
620 621

/*
622 623 624
 * Build the entry stubs and pointer table with some assembler magic.
 * We pack 7 stubs into a single 32-byte chunk, which will fit in a
 * single cache line on all modern x86 implementations.
L
Linus Torvalds 已提交
625
 */
626
.section .init.rodata,"a"
L
Linus Torvalds 已提交
627 628
ENTRY(interrupt)
.text
629 630
	.p2align 5
	.p2align CONFIG_X86_L1_CACHE_SHIFT
L
Linus Torvalds 已提交
631
ENTRY(irq_entries_start)
632
	RING0_INT_FRAME
633
vector=FIRST_EXTERNAL_VECTOR
634 635 636 637
.rept (NR_VECTORS-FIRST_EXTERNAL_VECTOR+6)/7
	.balign 32
  .rept	7
    .if vector < NR_VECTORS
638
      .if vector <> FIRST_EXTERNAL_VECTOR
639
	CFI_ADJUST_CFA_OFFSET -4
640 641
      .endif
1:	pushl $(~vector+0x80)	/* Note: always in signed byte range */
642
	CFI_ADJUST_CFA_OFFSET 4
643
      .if ((vector-FIRST_EXTERNAL_VECTOR)%7) <> 6
644 645 646
	jmp 2f
      .endif
      .previous
L
Linus Torvalds 已提交
647
	.long 1b
648
      .text
L
Linus Torvalds 已提交
649
vector=vector+1
650 651 652
    .endif
  .endr
2:	jmp common_interrupt
L
Linus Torvalds 已提交
653
.endr
654 655 656 657 658
END(irq_entries_start)

.previous
END(interrupt)
.previous
L
Linus Torvalds 已提交
659

660 661 662 663
/*
 * the CPU automatically disables interrupts when executing an IRQ vector,
 * so IRQ-flags tracing has to follow that:
 */
664
	.p2align CONFIG_X86_L1_CACHE_SHIFT
L
Linus Torvalds 已提交
665
common_interrupt:
666
	addl $-0x80,(%esp)	/* Adjust vector into the [-256,-1] range */
L
Linus Torvalds 已提交
667
	SAVE_ALL
668
	TRACE_IRQS_OFF
L
Linus Torvalds 已提交
669 670 671
	movl %esp,%eax
	call do_IRQ
	jmp ret_from_intr
672
ENDPROC(common_interrupt)
673
	CFI_ENDPROC
L
Linus Torvalds 已提交
674 675 676

#define BUILD_INTERRUPT(name, nr)	\
ENTRY(name)				\
677
	RING0_INT_FRAME;		\
678
	pushl $~(nr);			\
679 680
	CFI_ADJUST_CFA_OFFSET 4;	\
	SAVE_ALL;			\
681
	TRACE_IRQS_OFF			\
L
Linus Torvalds 已提交
682
	movl %esp,%eax;			\
683
	call smp_##name;		\
684
	jmp ret_from_intr;		\
685 686
	CFI_ENDPROC;			\
ENDPROC(name)
L
Linus Torvalds 已提交
687 688 689 690 691

/* The include is where all of the SMP etc. interrupts come from */
#include "entry_arch.h"

ENTRY(coprocessor_error)
692
	RING0_INT_FRAME
L
Linus Torvalds 已提交
693
	pushl $0
694
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
695
	pushl $do_coprocessor_error
696
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
697
	jmp error_code
698
	CFI_ENDPROC
699
END(coprocessor_error)
L
Linus Torvalds 已提交
700 701

ENTRY(simd_coprocessor_error)
702
	RING0_INT_FRAME
L
Linus Torvalds 已提交
703
	pushl $0
704
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
705
	pushl $do_simd_coprocessor_error
706
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
707
	jmp error_code
708
	CFI_ENDPROC
709
END(simd_coprocessor_error)
L
Linus Torvalds 已提交
710 711

ENTRY(device_not_available)
712
	RING0_INT_FRAME
L
Linus Torvalds 已提交
713
	pushl $-1			# mark this as an int
714
	CFI_ADJUST_CFA_OFFSET 4
715
	pushl $do_device_not_available
716
	CFI_ADJUST_CFA_OFFSET 4
717
	jmp error_code
718
	CFI_ENDPROC
719
END(device_not_available)
L
Linus Torvalds 已提交
720

721 722
#ifdef CONFIG_PARAVIRT
ENTRY(native_iret)
I
Ingo Molnar 已提交
723
	iret
724 725
.section __ex_table,"a"
	.align 4
I
Ingo Molnar 已提交
726
	.long native_iret, iret_exc
727
.previous
728
END(native_iret)
729

730
ENTRY(native_irq_enable_sysexit)
731 732
	sti
	sysexit
733
END(native_irq_enable_sysexit)
734 735
#endif

L
Linus Torvalds 已提交
736
ENTRY(overflow)
737
	RING0_INT_FRAME
L
Linus Torvalds 已提交
738
	pushl $0
739
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
740
	pushl $do_overflow
741
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
742
	jmp error_code
743
	CFI_ENDPROC
744
END(overflow)
L
Linus Torvalds 已提交
745 746

ENTRY(bounds)
747
	RING0_INT_FRAME
L
Linus Torvalds 已提交
748
	pushl $0
749
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
750
	pushl $do_bounds
751
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
752
	jmp error_code
753
	CFI_ENDPROC
754
END(bounds)
L
Linus Torvalds 已提交
755 756

ENTRY(invalid_op)
757
	RING0_INT_FRAME
L
Linus Torvalds 已提交
758
	pushl $0
759
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
760
	pushl $do_invalid_op
761
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
762
	jmp error_code
763
	CFI_ENDPROC
764
END(invalid_op)
L
Linus Torvalds 已提交
765 766

ENTRY(coprocessor_segment_overrun)
767
	RING0_INT_FRAME
L
Linus Torvalds 已提交
768
	pushl $0
769
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
770
	pushl $do_coprocessor_segment_overrun
771
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
772
	jmp error_code
773
	CFI_ENDPROC
774
END(coprocessor_segment_overrun)
L
Linus Torvalds 已提交
775 776

ENTRY(invalid_TSS)
777
	RING0_EC_FRAME
L
Linus Torvalds 已提交
778
	pushl $do_invalid_TSS
779
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
780
	jmp error_code
781
	CFI_ENDPROC
782
END(invalid_TSS)
L
Linus Torvalds 已提交
783 784

ENTRY(segment_not_present)
785
	RING0_EC_FRAME
L
Linus Torvalds 已提交
786
	pushl $do_segment_not_present
787
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
788
	jmp error_code
789
	CFI_ENDPROC
790
END(segment_not_present)
L
Linus Torvalds 已提交
791 792

ENTRY(stack_segment)
793
	RING0_EC_FRAME
L
Linus Torvalds 已提交
794
	pushl $do_stack_segment
795
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
796
	jmp error_code
797
	CFI_ENDPROC
798
END(stack_segment)
L
Linus Torvalds 已提交
799 800

ENTRY(alignment_check)
801
	RING0_EC_FRAME
L
Linus Torvalds 已提交
802
	pushl $do_alignment_check
803
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
804
	jmp error_code
805
	CFI_ENDPROC
806
END(alignment_check)
L
Linus Torvalds 已提交
807

808 809 810 811 812
ENTRY(divide_error)
	RING0_INT_FRAME
	pushl $0			# no error code
	CFI_ADJUST_CFA_OFFSET 4
	pushl $do_divide_error
813
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
814
	jmp error_code
815
	CFI_ENDPROC
816
END(divide_error)
L
Linus Torvalds 已提交
817 818 819

#ifdef CONFIG_X86_MCE
ENTRY(machine_check)
820
	RING0_INT_FRAME
L
Linus Torvalds 已提交
821
	pushl $0
822
	CFI_ADJUST_CFA_OFFSET 4
823
	pushl machine_check_vector
824
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
825
	jmp error_code
826
	CFI_ENDPROC
827
END(machine_check)
L
Linus Torvalds 已提交
828 829 830
#endif

ENTRY(spurious_interrupt_bug)
831
	RING0_INT_FRAME
L
Linus Torvalds 已提交
832
	pushl $0
833
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
834
	pushl $do_spurious_interrupt_bug
835
	CFI_ADJUST_CFA_OFFSET 4
L
Linus Torvalds 已提交
836
	jmp error_code
837
	CFI_ENDPROC
838
END(spurious_interrupt_bug)
L
Linus Torvalds 已提交
839

840 841 842 843 844 845 846 847 848 849
ENTRY(kernel_thread_helper)
	pushl $0		# fake return address for unwinder
	CFI_STARTPROC
	movl %edx,%eax
	push %edx
	CFI_ADJUST_CFA_OFFSET 4
	call *%ebx
	push %eax
	CFI_ADJUST_CFA_OFFSET 4
	call do_exit
850
	ud2			# padding for call trace
851 852 853
	CFI_ENDPROC
ENDPROC(kernel_thread_helper)

854
#ifdef CONFIG_XEN
855 856 857 858 859
/* Xen doesn't set %esp to be precisely what the normal sysenter
   entrypoint expects, so fix it up before using the normal path. */
ENTRY(xen_sysenter_target)
	RING0_INT_FRAME
	addl $5*4, %esp		/* remove xen-provided frame */
860
	CFI_ADJUST_CFA_OFFSET -5*4
861
	jmp sysenter_past_esp
G
Glauber Costa 已提交
862
	CFI_ENDPROC
863

864 865 866 867 868 869
ENTRY(xen_hypervisor_callback)
	CFI_STARTPROC
	pushl $0
	CFI_ADJUST_CFA_OFFSET 4
	SAVE_ALL
	TRACE_IRQS_OFF
870 871 872 873 874 875 876 877 878 879 880 881

	/* Check to see if we got the event in the critical
	   region in xen_iret_direct, after we've reenabled
	   events and checked for pending events.  This simulates
	   iret instruction's behaviour where it delivers a
	   pending interrupt when enabling interrupts. */
	movl PT_EIP(%esp),%eax
	cmpl $xen_iret_start_crit,%eax
	jb   1f
	cmpl $xen_iret_end_crit,%eax
	jae  1f

J
Jeremy Fitzhardinge 已提交
882
	jmp  xen_iret_crit_fixup
883 884

ENTRY(xen_do_upcall)
885
1:	mov %esp, %eax
886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948
	call xen_evtchn_do_upcall
	jmp  ret_from_intr
	CFI_ENDPROC
ENDPROC(xen_hypervisor_callback)

# Hypervisor uses this for application faults while it executes.
# We get here for two reasons:
#  1. Fault while reloading DS, ES, FS or GS
#  2. Fault while executing IRET
# Category 1 we fix up by reattempting the load, and zeroing the segment
# register if the load fails.
# Category 2 we fix up by jumping to do_iret_error. We cannot use the
# normal Linux return path in this case because if we use the IRET hypercall
# to pop the stack frame we end up in an infinite loop of failsafe callbacks.
# We distinguish between categories by maintaining a status value in EAX.
ENTRY(xen_failsafe_callback)
	CFI_STARTPROC
	pushl %eax
	CFI_ADJUST_CFA_OFFSET 4
	movl $1,%eax
1:	mov 4(%esp),%ds
2:	mov 8(%esp),%es
3:	mov 12(%esp),%fs
4:	mov 16(%esp),%gs
	testl %eax,%eax
	popl %eax
	CFI_ADJUST_CFA_OFFSET -4
	lea 16(%esp),%esp
	CFI_ADJUST_CFA_OFFSET -16
	jz 5f
	addl $16,%esp
	jmp iret_exc		# EAX != 0 => Category 2 (Bad IRET)
5:	pushl $0		# EAX == 0 => Category 1 (Bad segment)
	CFI_ADJUST_CFA_OFFSET 4
	SAVE_ALL
	jmp ret_from_exception
	CFI_ENDPROC

.section .fixup,"ax"
6:	xorl %eax,%eax
	movl %eax,4(%esp)
	jmp 1b
7:	xorl %eax,%eax
	movl %eax,8(%esp)
	jmp 2b
8:	xorl %eax,%eax
	movl %eax,12(%esp)
	jmp 3b
9:	xorl %eax,%eax
	movl %eax,16(%esp)
	jmp 4b
.previous
.section __ex_table,"a"
	.align 4
	.long 1b,6b
	.long 2b,7b
	.long 3b,8b
	.long 4b,9b
.previous
ENDPROC(xen_failsafe_callback)

#endif	/* CONFIG_XEN */

949
#ifdef CONFIG_FUNCTION_TRACER
950 951 952 953 954 955 956
#ifdef CONFIG_DYNAMIC_FTRACE

ENTRY(mcount)
	ret
END(mcount)

ENTRY(ftrace_caller)
957 958 959
	cmpl $0, function_trace_stop
	jne  ftrace_stub

960 961 962 963 964
	pushl %eax
	pushl %ecx
	pushl %edx
	movl 0xc(%esp), %eax
	movl 0x4(%ebp), %edx
965
	subl $MCOUNT_INSN_SIZE, %eax
966 967 968 969 970 971 972 973

.globl ftrace_call
ftrace_call:
	call ftrace_stub

	popl %edx
	popl %ecx
	popl %eax
974 975 976 977 978
#ifdef CONFIG_FUNCTION_GRAPH_TRACER
.globl ftrace_graph_call
ftrace_graph_call:
	jmp ftrace_stub
#endif
979 980 981 982 983 984 985 986

.globl ftrace_stub
ftrace_stub:
	ret
END(ftrace_caller)

#else /* ! CONFIG_DYNAMIC_FTRACE */

987
ENTRY(mcount)
988 989 990
	cmpl $0, function_trace_stop
	jne  ftrace_stub

991 992
	cmpl $ftrace_stub, ftrace_trace_function
	jnz trace
993
#ifdef CONFIG_FUNCTION_GRAPH_TRACER
I
Ingo Molnar 已提交
994
	cmpl $ftrace_stub, ftrace_graph_return
995
	jnz ftrace_graph_caller
996 997 998

	cmpl $ftrace_graph_entry_stub, ftrace_graph_entry
	jnz ftrace_graph_caller
999
#endif
1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010
.globl ftrace_stub
ftrace_stub:
	ret

	/* taken from glibc */
trace:
	pushl %eax
	pushl %ecx
	pushl %edx
	movl 0xc(%esp), %eax
	movl 0x4(%ebp), %edx
1011
	subl $MCOUNT_INSN_SIZE, %eax
1012

1013
	call *ftrace_trace_function
1014 1015 1016 1017 1018 1019

	popl %edx
	popl %ecx
	popl %eax
	jmp ftrace_stub
END(mcount)
1020
#endif /* CONFIG_DYNAMIC_FTRACE */
1021
#endif /* CONFIG_FUNCTION_TRACER */
1022

1023 1024
#ifdef CONFIG_FUNCTION_GRAPH_TRACER
ENTRY(ftrace_graph_caller)
1025 1026 1027
	cmpl $0, function_trace_stop
	jne ftrace_stub

1028 1029 1030
	pushl %eax
	pushl %ecx
	pushl %edx
1031
	movl 0xc(%esp), %edx
1032
	lea 0x4(%ebp), %eax
1033
	subl $MCOUNT_INSN_SIZE, %edx
1034 1035 1036 1037
	call prepare_ftrace_return
	popl %edx
	popl %ecx
	popl %eax
1038
	ret
1039
END(ftrace_graph_caller)
1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052

.globl return_to_handler
return_to_handler:
	pushl $0
	pushl %eax
	pushl %ecx
	pushl %edx
	call ftrace_return_to_handler
	movl %eax, 0xc(%esp)
	popl %edx
	popl %ecx
	popl %eax
	ret
1053
#endif
1054

1055
.section .rodata,"a"
1056
#include "syscall_table_32.S"
L
Linus Torvalds 已提交
1057 1058

syscall_table_size=(.-sys_call_table)
1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280

/*
 * Some functions should be protected against kprobes
 */
	.pushsection .kprobes.text, "ax"

ENTRY(page_fault)
	RING0_EC_FRAME
	pushl $do_page_fault
	CFI_ADJUST_CFA_OFFSET 4
	ALIGN
error_code:
	/* the function address is in %fs's slot on the stack */
	pushl %es
	CFI_ADJUST_CFA_OFFSET 4
	/*CFI_REL_OFFSET es, 0*/
	pushl %ds
	CFI_ADJUST_CFA_OFFSET 4
	/*CFI_REL_OFFSET ds, 0*/
	pushl %eax
	CFI_ADJUST_CFA_OFFSET 4
	CFI_REL_OFFSET eax, 0
	pushl %ebp
	CFI_ADJUST_CFA_OFFSET 4
	CFI_REL_OFFSET ebp, 0
	pushl %edi
	CFI_ADJUST_CFA_OFFSET 4
	CFI_REL_OFFSET edi, 0
	pushl %esi
	CFI_ADJUST_CFA_OFFSET 4
	CFI_REL_OFFSET esi, 0
	pushl %edx
	CFI_ADJUST_CFA_OFFSET 4
	CFI_REL_OFFSET edx, 0
	pushl %ecx
	CFI_ADJUST_CFA_OFFSET 4
	CFI_REL_OFFSET ecx, 0
	pushl %ebx
	CFI_ADJUST_CFA_OFFSET 4
	CFI_REL_OFFSET ebx, 0
	cld
	pushl %fs
	CFI_ADJUST_CFA_OFFSET 4
	/*CFI_REL_OFFSET fs, 0*/
	movl $(__KERNEL_PERCPU), %ecx
	movl %ecx, %fs
	UNWIND_ESPFIX_STACK
	popl %ecx
	CFI_ADJUST_CFA_OFFSET -4
	/*CFI_REGISTER es, ecx*/
	movl PT_FS(%esp), %edi		# get the function address
	movl PT_ORIG_EAX(%esp), %edx	# get the error code
	movl $-1, PT_ORIG_EAX(%esp)	# no syscall to restart
	mov  %ecx, PT_FS(%esp)
	/*CFI_REL_OFFSET fs, ES*/
	movl $(__USER_DS), %ecx
	movl %ecx, %ds
	movl %ecx, %es
	TRACE_IRQS_OFF
	movl %esp,%eax			# pt_regs pointer
	call *%edi
	jmp ret_from_exception
	CFI_ENDPROC
END(page_fault)

/*
 * Debug traps and NMI can happen at the one SYSENTER instruction
 * that sets up the real kernel stack. Check here, since we can't
 * allow the wrong stack to be used.
 *
 * "TSS_sysenter_sp0+12" is because the NMI/debug handler will have
 * already pushed 3 words if it hits on the sysenter instruction:
 * eflags, cs and eip.
 *
 * We just load the right stack, and push the three (known) values
 * by hand onto the new stack - while updating the return eip past
 * the instruction that would have done it for sysenter.
 */
#define FIX_STACK(offset, ok, label)		\
	cmpw $__KERNEL_CS,4(%esp);		\
	jne ok;					\
label:						\
	movl TSS_sysenter_sp0+offset(%esp),%esp;	\
	CFI_DEF_CFA esp, 0;			\
	CFI_UNDEFINED eip;			\
	pushfl;					\
	CFI_ADJUST_CFA_OFFSET 4;		\
	pushl $__KERNEL_CS;			\
	CFI_ADJUST_CFA_OFFSET 4;		\
	pushl $sysenter_past_esp;		\
	CFI_ADJUST_CFA_OFFSET 4;		\
	CFI_REL_OFFSET eip, 0

ENTRY(debug)
	RING0_INT_FRAME
	cmpl $ia32_sysenter_target,(%esp)
	jne debug_stack_correct
	FIX_STACK(12, debug_stack_correct, debug_esp_fix_insn)
debug_stack_correct:
	pushl $-1			# mark this as an int
	CFI_ADJUST_CFA_OFFSET 4
	SAVE_ALL
	TRACE_IRQS_OFF
	xorl %edx,%edx			# error code 0
	movl %esp,%eax			# pt_regs pointer
	call do_debug
	jmp ret_from_exception
	CFI_ENDPROC
END(debug)

/*
 * NMI is doubly nasty. It can happen _while_ we're handling
 * a debug fault, and the debug fault hasn't yet been able to
 * clear up the stack. So we first check whether we got  an
 * NMI on the sysenter entry path, but after that we need to
 * check whether we got an NMI on the debug path where the debug
 * fault happened on the sysenter path.
 */
ENTRY(nmi)
	RING0_INT_FRAME
	pushl %eax
	CFI_ADJUST_CFA_OFFSET 4
	movl %ss, %eax
	cmpw $__ESPFIX_SS, %ax
	popl %eax
	CFI_ADJUST_CFA_OFFSET -4
	je nmi_espfix_stack
	cmpl $ia32_sysenter_target,(%esp)
	je nmi_stack_fixup
	pushl %eax
	CFI_ADJUST_CFA_OFFSET 4
	movl %esp,%eax
	/* Do not access memory above the end of our stack page,
	 * it might not exist.
	 */
	andl $(THREAD_SIZE-1),%eax
	cmpl $(THREAD_SIZE-20),%eax
	popl %eax
	CFI_ADJUST_CFA_OFFSET -4
	jae nmi_stack_correct
	cmpl $ia32_sysenter_target,12(%esp)
	je nmi_debug_stack_check
nmi_stack_correct:
	/* We have a RING0_INT_FRAME here */
	pushl %eax
	CFI_ADJUST_CFA_OFFSET 4
	SAVE_ALL
	xorl %edx,%edx		# zero error code
	movl %esp,%eax		# pt_regs pointer
	call do_nmi
	jmp restore_nocheck_notrace
	CFI_ENDPROC

nmi_stack_fixup:
	RING0_INT_FRAME
	FIX_STACK(12,nmi_stack_correct, 1)
	jmp nmi_stack_correct

nmi_debug_stack_check:
	/* We have a RING0_INT_FRAME here */
	cmpw $__KERNEL_CS,16(%esp)
	jne nmi_stack_correct
	cmpl $debug,(%esp)
	jb nmi_stack_correct
	cmpl $debug_esp_fix_insn,(%esp)
	ja nmi_stack_correct
	FIX_STACK(24,nmi_stack_correct, 1)
	jmp nmi_stack_correct

nmi_espfix_stack:
	/* We have a RING0_INT_FRAME here.
	 *
	 * create the pointer to lss back
	 */
	pushl %ss
	CFI_ADJUST_CFA_OFFSET 4
	pushl %esp
	CFI_ADJUST_CFA_OFFSET 4
	addw $4, (%esp)
	/* copy the iret frame of 12 bytes */
	.rept 3
	pushl 16(%esp)
	CFI_ADJUST_CFA_OFFSET 4
	.endr
	pushl %eax
	CFI_ADJUST_CFA_OFFSET 4
	SAVE_ALL
	FIXUP_ESPFIX_STACK		# %eax == %esp
	xorl %edx,%edx			# zero error code
	call do_nmi
	RESTORE_REGS
	lss 12+4(%esp), %esp		# back to espfix stack
	CFI_ADJUST_CFA_OFFSET -24
	jmp irq_return
	CFI_ENDPROC
END(nmi)

ENTRY(int3)
	RING0_INT_FRAME
	pushl $-1			# mark this as an int
	CFI_ADJUST_CFA_OFFSET 4
	SAVE_ALL
	TRACE_IRQS_OFF
	xorl %edx,%edx		# zero error code
	movl %esp,%eax		# pt_regs pointer
	call do_int3
	jmp ret_from_exception
	CFI_ENDPROC
END(int3)

ENTRY(general_protection)
	RING0_EC_FRAME
	pushl $do_general_protection
	CFI_ADJUST_CFA_OFFSET 4
	jmp error_code
	CFI_ENDPROC
END(general_protection)

/*
 * End of kprobes section
 */
	.popsection