traps_64.c 29.2 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12
/*
 *  Copyright (C) 1991, 1992  Linus Torvalds
 *  Copyright (C) 2000, 2001, 2002 Andi Kleen, SuSE Labs
 *
 *  Pentium III FXSR, SSE support
 *	Gareth Hughes <gareth@valinux.com>, May 2000
 */

/*
 * 'Traps.c' handles hardware traps and faults after we have saved some
 * state in 'entry.S'.
 */
13 14 15 16 17 18 19 20
#include <linux/moduleparam.h>
#include <linux/interrupt.h>
#include <linux/kallsyms.h>
#include <linux/spinlock.h>
#include <linux/kprobes.h>
#include <linux/uaccess.h>
#include <linux/utsname.h>
#include <linux/kdebug.h>
L
Linus Torvalds 已提交
21
#include <linux/kernel.h>
22 23
#include <linux/module.h>
#include <linux/ptrace.h>
L
Linus Torvalds 已提交
24
#include <linux/string.h>
25 26
#include <linux/unwind.h>
#include <linux/delay.h>
L
Linus Torvalds 已提交
27
#include <linux/errno.h>
28 29
#include <linux/kexec.h>
#include <linux/sched.h>
L
Linus Torvalds 已提交
30 31
#include <linux/timer.h>
#include <linux/init.h>
32
#include <linux/bug.h>
33 34
#include <linux/nmi.h>
#include <linux/mm.h>
35 36
#include <linux/smp.h>
#include <linux/io.h>
37

D
Dave Jiang 已提交
38 39 40 41
#if defined(CONFIG_EDAC)
#include <linux/edac.h>
#endif

42 43
#include <asm/stacktrace.h>
#include <asm/processor.h>
L
Linus Torvalds 已提交
44
#include <asm/debugreg.h>
45 46 47
#include <asm/atomic.h>
#include <asm/system.h>
#include <asm/unwind.h>
L
Linus Torvalds 已提交
48 49 50 51
#include <asm/desc.h>
#include <asm/i387.h>
#include <asm/pgalloc.h>
#include <asm/proto.h>
52
#include <asm/pda.h>
53
#include <asm/traps.h>
54 55

#include <mach_traps.h>
L
Linus Torvalds 已提交
56

57
int panic_on_unrecovered_nmi;
58
int kstack_depth_to_print = 12;
59
static unsigned int code_bytes = 64;
60 61
static int ignore_nmis;
static int die_counter;
62

L
Linus Torvalds 已提交
63 64
static inline void conditional_sti(struct pt_regs *regs)
{
65
	if (regs->flags & X86_EFLAGS_IF)
L
Linus Torvalds 已提交
66 67 68
		local_irq_enable();
}

69 70
static inline void preempt_conditional_sti(struct pt_regs *regs)
{
71
	inc_preempt_count();
72
	if (regs->flags & X86_EFLAGS_IF)
73 74 75 76 77
		local_irq_enable();
}

static inline void preempt_conditional_cli(struct pt_regs *regs)
{
78
	if (regs->flags & X86_EFLAGS_IF)
79
		local_irq_disable();
80 81
	/* Make sure to not schedule here because we could be running
	   on an exception stack. */
82
	dec_preempt_count();
83 84
}

85
void printk_address(unsigned long address, int reliable)
86
{
87 88
	printk(" [<%016lx>] %s%pS\n",
			address, reliable ?	"" : "? ", (void *) address);
89
}
L
Linus Torvalds 已提交
90

91
static unsigned long *in_exception_stack(unsigned cpu, unsigned long stack,
92
					unsigned *usedp, char **idp)
93
{
94
	static char ids[][8] = {
95 96 97 98 99
		[DEBUG_STACK - 1] = "#DB",
		[NMI_STACK - 1] = "NMI",
		[DOUBLEFAULT_STACK - 1] = "#DF",
		[STACKFAULT_STACK - 1] = "#SS",
		[MCE_STACK - 1] = "#MC",
100
#if DEBUG_STKSZ > EXCEPTION_STKSZ
101 102
		[N_EXCEPTION_STACKS ...
			N_EXCEPTION_STACKS + DEBUG_STKSZ / EXCEPTION_STKSZ - 2] = "#DB[?]"
103
#endif
104 105
	};
	unsigned k;
L
Linus Torvalds 已提交
106

107 108 109 110
	/*
	 * Iterate over all exception stacks, and figure out whether
	 * 'stack' is in one of them:
	 */
111
	for (k = 0; k < N_EXCEPTION_STACKS; k++) {
112
		unsigned long end = per_cpu(orig_ist, cpu).ist[k];
113 114 115 116
		/*
		 * Is 'stack' above this exception frame's end?
		 * If yes then skip to the next frame.
		 */
117 118
		if (stack >= end)
			continue;
119 120 121 122
		/*
		 * Is 'stack' above this exception frame's start address?
		 * If yes then we found the right frame.
		 */
123
		if (stack >= end - EXCEPTION_STKSZ) {
124 125 126 127 128 129
			/*
			 * Make sure we only iterate through an exception
			 * stack once. If it comes up for the second time
			 * then there's something wrong going on - just
			 * break out and return NULL:
			 */
130 131 132 133 134 135
			if (*usedp & (1U << k))
				break;
			*usedp |= 1U << k;
			*idp = ids[k];
			return (unsigned long *)end;
		}
136 137 138 139 140
		/*
		 * If this is a debug stack, and if it has a larger size than
		 * the usual exception stacks, then 'stack' might still
		 * be within the lower portion of the debug stack:
		 */
141 142 143 144
#if DEBUG_STKSZ > EXCEPTION_STKSZ
		if (k == DEBUG_STACK - 1 && stack >= end - DEBUG_STKSZ) {
			unsigned j = N_EXCEPTION_STACKS - 1;

145 146 147 148 149
			/*
			 * Black magic. A large debug stack is composed of
			 * multiple exception stack entries, which we
			 * iterate through now. Dont look:
			 */
150 151 152 153 154 155 156 157 158 159 160 161
			do {
				++j;
				end -= EXCEPTION_STKSZ;
				ids[j][4] = '1' + (j - N_EXCEPTION_STACKS);
			} while (stack < end - EXCEPTION_STKSZ);
			if (*usedp & (1U << j))
				break;
			*usedp |= 1U << j;
			*idp = ids[j];
			return (unsigned long *)end;
		}
#endif
L
Linus Torvalds 已提交
162 163
	}
	return NULL;
164
}
L
Linus Torvalds 已提交
165 166

/*
167
 * x86-64 can have up to three kernel stacks:
L
Linus Torvalds 已提交
168 169
 * process stack
 * interrupt stack
170
 * severe exception (double fault, nmi, stack fault, debug, mce) hardware stack
L
Linus Torvalds 已提交
171 172
 */

173 174
static inline int valid_stack_ptr(struct thread_info *tinfo,
			void *p, unsigned int size, void *end)
175
{
J
Jan Engelhardt 已提交
176
	void *t = tinfo;
177 178 179 180 181 182 183 184 185
	if (end) {
		if (p < end && p >= (end-THREAD_SIZE))
			return 1;
		else
			return 0;
	}
	return p > t && p < t + THREAD_SIZE - size;
}

186 187 188 189 190 191
/* The form of the top of the frame on the stack */
struct stack_frame {
	struct stack_frame *next_frame;
	unsigned long return_address;
};

192 193 194 195 196
static inline unsigned long
print_context_stack(struct thread_info *tinfo,
		unsigned long *stack, unsigned long bp,
		const struct stacktrace_ops *ops, void *data,
		unsigned long *end)
197
{
198 199 200 201 202 203
	struct stack_frame *frame = (struct stack_frame *)bp;

	while (valid_stack_ptr(tinfo, stack, sizeof(*stack), end)) {
		unsigned long addr;

		addr = *stack;
204
		if (__kernel_text_address(addr)) {
205 206 207 208 209 210 211
			if ((unsigned long) stack == bp + 8) {
				ops->address(data, addr, 1);
				frame = frame->next_frame;
				bp = (unsigned long) frame;
			} else {
				ops->address(data, addr, bp == 0);
			}
212
		}
213
		stack++;
214 215
	}
	return bp;
216 217
}

218
void dump_trace(struct task_struct *task, struct pt_regs *regs,
219
		unsigned long *stack, unsigned long bp,
J
Jan Beulich 已提交
220
		const struct stacktrace_ops *ops, void *data)
L
Linus Torvalds 已提交
221
{
222
	const unsigned cpu = get_cpu();
223
	unsigned long *irqstack_end = (unsigned long *)cpu_pda(cpu)->irqstackptr;
224
	unsigned used = 0;
225
	struct thread_info *tinfo;
L
Linus Torvalds 已提交
226

227 228
	if (!task)
		task = current;
229

230 231 232
	if (!stack) {
		unsigned long dummy;
		stack = &dummy;
233 234
		if (task && task != current)
			stack = (unsigned long *)task->thread.sp;
235 236
	}

237 238
#ifdef CONFIG_FRAME_POINTER
	if (!bp) {
239
		if (task == current) {
240
			/* Grab bp right from our regs */
241
			asm("movq %%rbp, %0" : "=r" (bp) : );
242 243
		} else {
			/* bp is the last reg pushed by switch_to */
244
			bp = *(unsigned long *) task->thread.sp;
245 246 247 248
		}
	}
#endif

249 250 251 252 253
	/*
	 * Print function call entries in all stacks, starting at the
	 * current stack address. If the stacks consist of nested
	 * exceptions
	 */
254
	tinfo = task_thread_info(task);
255 256
	for (;;) {
		char *id;
257 258 259 260 261
		unsigned long *estack_end;
		estack_end = in_exception_stack(cpu, (unsigned long)stack,
						&used, &id);

		if (estack_end) {
262 263
			if (ops->stack(data, id) < 0)
				break;
264

265 266
			bp = print_context_stack(tinfo, stack, bp, ops,
							data, estack_end);
267
			ops->stack(data, "<EOE>");
268 269 270 271 272
			/*
			 * We link to the next stack via the
			 * second-to-last pointer (index -2 to end) in the
			 * exception stack:
			 */
273 274
			stack = (unsigned long *) estack_end[-2];
			continue;
L
Linus Torvalds 已提交
275
		}
276 277 278 279 280 281
		if (irqstack_end) {
			unsigned long *irqstack;
			irqstack = irqstack_end -
				(IRQSTACKSIZE - 64) / sizeof(*irqstack);

			if (stack >= irqstack && stack < irqstack_end) {
282 283
				if (ops->stack(data, "IRQ") < 0)
					break;
284 285
				bp = print_context_stack(tinfo, stack, bp,
						ops, data, irqstack_end);
286 287 288 289 290
				/*
				 * We link to the next stack (which would be
				 * the process stack normally) the last
				 * pointer (index -1 to end) in the IRQ stack:
				 */
291 292
				stack = (unsigned long *) (irqstack_end[-1]);
				irqstack_end = NULL;
293
				ops->stack(data, "EOI");
294
				continue;
L
Linus Torvalds 已提交
295 296
			}
		}
297
		break;
L
Linus Torvalds 已提交
298
	}
299

300
	/*
301
	 * This handles the process stack:
302
	 */
303
	bp = print_context_stack(tinfo, stack, bp, ops, data, NULL);
304
	put_cpu();
305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324
}
EXPORT_SYMBOL(dump_trace);

static void
print_trace_warning_symbol(void *data, char *msg, unsigned long symbol)
{
	print_symbol(msg, symbol);
	printk("\n");
}

static void print_trace_warning(void *data, char *msg)
{
	printk("%s\n", msg);
}

static int print_trace_stack(void *data, char *name)
{
	printk(" <%s> ", name);
	return 0;
}
325

326
static void print_trace_address(void *data, unsigned long addr, int reliable)
327
{
328
	touch_nmi_watchdog();
329
	printk_address(addr, reliable);
330 331
}

J
Jan Beulich 已提交
332
static const struct stacktrace_ops print_trace_ops = {
333 334 335 336 337 338
	.warning = print_trace_warning,
	.warning_symbol = print_trace_warning_symbol,
	.stack = print_trace_stack,
	.address = print_trace_address,
};

339 340 341
static void
show_trace_log_lvl(struct task_struct *task, struct pt_regs *regs,
		unsigned long *stack, unsigned long bp, char *log_lvl)
342
{
343
	printk("Call Trace:\n");
344
	dump_trace(task, regs, stack, bp, &print_trace_ops, log_lvl);
L
Linus Torvalds 已提交
345 346
}

347 348 349 350 351 352
void show_trace(struct task_struct *task, struct pt_regs *regs,
		unsigned long *stack, unsigned long bp)
{
	show_trace_log_lvl(task, regs, stack, bp, "");
}

353
static void
354 355
show_stack_log_lvl(struct task_struct *task, struct pt_regs *regs,
		unsigned long *sp, unsigned long bp, char *log_lvl)
L
Linus Torvalds 已提交
356 357 358
{
	unsigned long *stack;
	int i;
359
	const int cpu = smp_processor_id();
360 361 362 363
	unsigned long *irqstack_end =
		(unsigned long *) (cpu_pda(cpu)->irqstackptr);
	unsigned long *irqstack =
		(unsigned long *) (cpu_pda(cpu)->irqstackptr - IRQSTACKSIZE);
L
Linus Torvalds 已提交
364

365 366 367 368
	/*
	 * debugging aid: "show_stack(NULL, NULL);" prints the
	 * back trace for this cpu.
	 */
L
Linus Torvalds 已提交
369

370
	if (sp == NULL) {
371 372
		if (task)
			sp = (unsigned long *)task->thread.sp;
L
Linus Torvalds 已提交
373
		else
374
			sp = (unsigned long *)&sp;
L
Linus Torvalds 已提交
375 376
	}

377
	stack = sp;
378
	for (i = 0; i < kstack_depth_to_print; i++) {
L
Linus Torvalds 已提交
379 380 381 382 383 384 385 386 387 388
		if (stack >= irqstack && stack <= irqstack_end) {
			if (stack == irqstack_end) {
				stack = (unsigned long *) (irqstack_end[-1]);
				printk(" <EOI> ");
			}
		} else {
		if (((long) stack & (THREAD_SIZE-1)) == 0)
			break;
		}
		if (i && ((i % 4) == 0))
389 390
			printk("\n");
		printk(" %016lx", *stack++);
391
		touch_nmi_watchdog();
L
Linus Torvalds 已提交
392
	}
393
	printk("\n");
394
	show_trace_log_lvl(task, regs, sp, bp, log_lvl);
395 396
}

397
void show_stack(struct task_struct *task, unsigned long *sp)
398
{
399
	show_stack_log_lvl(task, NULL, sp, 0, "");
L
Linus Torvalds 已提交
400 401 402 403 404 405 406
}

/*
 * The architecture-independent dump_stack generator
 */
void dump_stack(void)
{
407
	unsigned long bp = 0;
408
	unsigned long stack;
409

410 411
#ifdef CONFIG_FRAME_POINTER
	if (!bp)
412
		asm("movq %%rbp, %0" : "=r" (bp) : );
413 414
#endif

415 416 417 418 419
	printk("Pid: %d, comm: %.20s %s %s %.*s\n",
		current->pid, current->comm, print_tainted(),
		init_utsname()->release,
		(int)strcspn(init_utsname()->version, " "),
		init_utsname()->version);
420
	show_trace(NULL, NULL, &stack, bp);
L
Linus Torvalds 已提交
421 422 423 424 425 426
}
EXPORT_SYMBOL(dump_stack);

void show_registers(struct pt_regs *regs)
{
	int i;
427
	unsigned long sp;
428
	const int cpu = smp_processor_id();
429
	struct task_struct *cur = cpu_pda(cpu)->pcurrent;
L
Linus Torvalds 已提交
430

431
	sp = regs->sp;
L
Linus Torvalds 已提交
432 433 434
	printk("CPU %d ", cpu);
	__show_regs(regs);
	printk("Process %s (pid: %d, threadinfo %p, task %p)\n",
A
Al Viro 已提交
435
		cur->comm, cur->pid, task_thread_info(cur), cur);
L
Linus Torvalds 已提交
436 437 438 439 440

	/*
	 * When in-kernel, we also print out the stack and code at the
	 * time of the fault..
	 */
441
	if (!user_mode(regs)) {
442 443
		unsigned int code_prologue = code_bytes * 43 / 64;
		unsigned int code_len = code_bytes;
444
		unsigned char c;
445 446
		u8 *ip;

L
Linus Torvalds 已提交
447
		printk("Stack: ");
448 449
		show_stack_log_lvl(NULL, regs, (unsigned long *)sp,
				regs->bp, "");
L
Linus Torvalds 已提交
450

451
		printk(KERN_EMERG "Code: ");
452 453

		ip = (u8 *)regs->ip - code_prologue;
454 455
		if (ip < (u8 *)PAGE_OFFSET || probe_kernel_address(ip, c)) {
			/* try starting at RIP */
456
			ip = (u8 *)regs->ip;
457 458 459 460 461
			code_len = code_len - code_prologue + 1;
		}
		for (i = 0; i < code_len; i++, ip++) {
			if (ip < (u8 *)PAGE_OFFSET ||
					probe_kernel_address(ip, c)) {
L
Linus Torvalds 已提交
462 463 464
				printk(" Bad RIP value.");
				break;
			}
465 466 467 468
			if (ip == (u8 *)regs->ip)
				printk("<%02x> ", c);
			else
				printk("%02x ", c);
L
Linus Torvalds 已提交
469 470 471
		}
	}
	printk("\n");
472
}
L
Linus Torvalds 已提交
473

474
int is_valid_bugaddr(unsigned long ip)
475 476 477
{
	unsigned short ud2;

478
	if (__copy_from_user(&ud2, (const void __user *) ip, sizeof(ud2)))
479 480 481 482
		return 0;

	return ud2 == 0x0b0f;
}
L
Linus Torvalds 已提交
483

A
Andi Kleen 已提交
484
static raw_spinlock_t die_lock = __RAW_SPIN_LOCK_UNLOCKED;
L
Linus Torvalds 已提交
485
static int die_owner = -1;
486
static unsigned int die_nest_count;
L
Linus Torvalds 已提交
487

488
unsigned __kprobes long oops_begin(void)
L
Linus Torvalds 已提交
489
{
A
Andrew Morton 已提交
490
	int cpu;
491 492
	unsigned long flags;

493 494
	oops_enter();

495
	/* racy, but better than risking deadlock. */
A
Andi Kleen 已提交
496
	raw_local_irq_save(flags);
A
Andrew Morton 已提交
497
	cpu = smp_processor_id();
A
Andi Kleen 已提交
498
	if (!__raw_spin_trylock(&die_lock)) {
499
		if (cpu == die_owner)
L
Linus Torvalds 已提交
500 501
			/* nested oops. should stop eventually */;
		else
A
Andi Kleen 已提交
502
			__raw_spin_lock(&die_lock);
L
Linus Torvalds 已提交
503
	}
504
	die_nest_count++;
505
	die_owner = cpu;
L
Linus Torvalds 已提交
506
	console_verbose();
507 508
	bust_spinlocks(1);
	return flags;
L
Linus Torvalds 已提交
509 510
}

511
void __kprobes oops_end(unsigned long flags, struct pt_regs *regs, int signr)
512
{
L
Linus Torvalds 已提交
513
	die_owner = -1;
514
	bust_spinlocks(0);
515
	die_nest_count--;
A
Andi Kleen 已提交
516
	if (!die_nest_count)
517
		/* Nest count reaches zero, release the lock. */
A
Andi Kleen 已提交
518 519
		__raw_spin_unlock(&die_lock);
	raw_local_irq_restore(flags);
520 521 522 523
	if (!regs) {
		oops_exit();
		return;
	}
L
Linus Torvalds 已提交
524
	if (panic_on_oops)
525
		panic("Fatal exception");
526
	oops_exit();
527
	do_exit(signr);
528
}
L
Linus Torvalds 已提交
529

530
int __kprobes __die(const char *str, struct pt_regs *regs, long err)
L
Linus Torvalds 已提交
531
{
532
	printk(KERN_EMERG "%s: %04lx [%u] ", str, err & 0xffff, ++die_counter);
L
Linus Torvalds 已提交
533 534 535 536 537 538 539 540 541 542
#ifdef CONFIG_PREEMPT
	printk("PREEMPT ");
#endif
#ifdef CONFIG_SMP
	printk("SMP ");
#endif
#ifdef CONFIG_DEBUG_PAGEALLOC
	printk("DEBUG_PAGEALLOC");
#endif
	printk("\n");
543 544
	if (notify_die(DIE_OOPS, str, regs, err,
			current->thread.trap_no, SIGSEGV) == NOTIFY_STOP)
545
		return 1;
546

L
Linus Torvalds 已提交
547
	show_registers(regs);
548
	add_taint(TAINT_DIE);
L
Linus Torvalds 已提交
549 550
	/* Executive summary in case the oops scrolled away */
	printk(KERN_ALERT "RIP ");
551
	printk_address(regs->ip, 1);
552
	printk(" RSP <%016lx>\n", regs->sp);
553 554
	if (kexec_should_crash(current))
		crash_kexec(regs);
555
	return 0;
L
Linus Torvalds 已提交
556 557
}

558
void die(const char *str, struct pt_regs *regs, long err)
L
Linus Torvalds 已提交
559
{
560 561
	unsigned long flags = oops_begin();

562
	if (!user_mode(regs))
563
		report_bug(regs->ip, regs);
564

565 566 567
	if (__die(str, regs, err))
		regs = NULL;
	oops_end(flags, regs, SIGSEGV);
L
Linus Torvalds 已提交
568 569
}

570 571
notrace __kprobes void
die_nmi(char *str, struct pt_regs *regs, int do_panic)
L
Linus Torvalds 已提交
572
{
573
	unsigned long flags;
574

575
	if (notify_die(DIE_NMIWATCHDOG, str, regs, 0, 2, SIGINT) == NOTIFY_STOP)
576
		return;
577

578
	flags = oops_begin();
L
Linus Torvalds 已提交
579 580 581 582
	/*
	 * We are in trouble anyway, lets at least try
	 * to get a message out.
	 */
583 584 585
	printk(KERN_EMERG "%s", str);
	printk(" on CPU%d, ip %08lx, registers:\n",
		smp_processor_id(), regs->ip);
L
Linus Torvalds 已提交
586
	show_registers(regs);
587 588
	if (kexec_should_crash(current))
		crash_kexec(regs);
589 590
	if (do_panic || panic_on_oops)
		panic("Non maskable interrupt");
591
	oops_end(flags, NULL, SIGBUS);
592 593
	nmi_exit();
	local_irq_enable();
594
	do_exit(SIGBUS);
L
Linus Torvalds 已提交
595 596
}

597 598 599
static void __kprobes
do_trap(int trapnr, int signr, char *str, struct pt_regs *regs,
	long error_code, siginfo_t *info)
L
Linus Torvalds 已提交
600
{
601 602
	struct task_struct *tsk = current;

603 604
	if (!user_mode(regs))
		goto kernel_trap;
L
Linus Torvalds 已提交
605

606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625
	/*
	 * We want error_code and trap_no set for userspace faults and
	 * kernelspace faults which result in die(), but not
	 * kernelspace faults which are fixed up.  die() gives the
	 * process no chance to handle the signal and notice the
	 * kernel fault information, so that won't result in polluting
	 * the information about previously queued, but not yet
	 * delivered, faults.  See also do_general_protection below.
	 */
	tsk->thread.error_code = error_code;
	tsk->thread.trap_no = trapnr;

	if (show_unhandled_signals && unhandled_signal(tsk, signr) &&
	    printk_ratelimit()) {
		printk(KERN_INFO
		       "%s[%d] trap %s ip:%lx sp:%lx error:%lx",
		       tsk->comm, tsk->pid, str,
		       regs->ip, regs->sp, error_code);
		print_vma_addr(" in ", regs->ip);
		printk("\n");
L
Linus Torvalds 已提交
626 627
	}

628 629 630 631 632
	if (info)
		force_sig_info(signr, info, tsk);
	else
		force_sig(signr, tsk);
	return;
L
Linus Torvalds 已提交
633

634
kernel_trap:
635 636 637 638
	if (!fixup_exception(regs)) {
		tsk->thread.error_code = error_code;
		tsk->thread.trap_no = trapnr;
		die(str, regs, error_code);
L
Linus Torvalds 已提交
639
	}
640
	return;
L
Linus Torvalds 已提交
641 642 643
}

#define DO_ERROR(trapnr, signr, str, name) \
644
asmlinkage void do_##name(struct pt_regs *regs, long error_code)	\
645 646 647 648
{									\
	if (notify_die(DIE_TRAP, str, regs, error_code, trapnr, signr)	\
							== NOTIFY_STOP)	\
		return;							\
649
	conditional_sti(regs);						\
650
	do_trap(trapnr, signr, str, regs, error_code, NULL);		\
L
Linus Torvalds 已提交
651 652
}

653
#define DO_ERROR_INFO(trapnr, signr, str, name, sicode, siaddr)		\
654
asmlinkage void do_##name(struct pt_regs *regs, long error_code)	\
655 656 657 658 659 660 661 662 663 664
{									\
	siginfo_t info;							\
	info.si_signo = signr;						\
	info.si_errno = 0;						\
	info.si_code = sicode;						\
	info.si_addr = (void __user *)siaddr;				\
	trace_hardirqs_fixup();						\
	if (notify_die(DIE_TRAP, str, regs, error_code, trapnr, signr)	\
							== NOTIFY_STOP)	\
		return;							\
665
	conditional_sti(regs);						\
666
	do_trap(trapnr, signr, str, regs, error_code, &info);		\
L
Linus Torvalds 已提交
667 668
}

669 670 671 672 673
DO_ERROR_INFO(0, SIGFPE, "divide error", divide_error, FPE_INTDIV, regs->ip)
DO_ERROR(4, SIGSEGV, "overflow", overflow)
DO_ERROR(5, SIGSEGV, "bounds", bounds)
DO_ERROR_INFO(6, SIGILL, "invalid opcode", invalid_op, ILL_ILLOPN, regs->ip)
DO_ERROR(9, SIGFPE, "coprocessor segment overrun", coprocessor_segment_overrun)
L
Linus Torvalds 已提交
674
DO_ERROR(10, SIGSEGV, "invalid TSS", invalid_TSS)
675
DO_ERROR(11, SIGBUS, "segment not present", segment_not_present)
L
Linus Torvalds 已提交
676
DO_ERROR_INFO(17, SIGBUS, "alignment check", alignment_check, BUS_ADRALN, 0)
677 678 679 680 681 682 683 684 685 686 687

/* Runs on IST stack */
asmlinkage void do_stack_segment(struct pt_regs *regs, long error_code)
{
	if (notify_die(DIE_TRAP, "stack segment", regs, error_code,
			12, SIGBUS) == NOTIFY_STOP)
		return;
	preempt_conditional_sti(regs);
	do_trap(12, SIGBUS, "stack segment", regs, error_code, NULL);
	preempt_conditional_cli(regs);
}
688

689
asmlinkage void do_double_fault(struct pt_regs *regs, long error_code)
690 691 692 693 694 695 696 697 698 699 700 701 702 703 704
{
	static const char str[] = "double fault";
	struct task_struct *tsk = current;

	/* Return not checked because double check cannot be ignored */
	notify_die(DIE_TRAP, str, regs, error_code, 8, SIGSEGV);

	tsk->thread.error_code = error_code;
	tsk->thread.trap_no = 8;

	/* This is always a kernel trap and never fixable (and thus must
	   never return). */
	for (;;)
		die(str, regs, error_code);
}
L
Linus Torvalds 已提交
705

706 707
asmlinkage void __kprobes
do_general_protection(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
708
{
709
	struct task_struct *tsk;
710

L
Linus Torvalds 已提交
711 712
	conditional_sti(regs);

713 714 715
	tsk = current;
	if (!user_mode(regs))
		goto gp_in_kernel;
L
Linus Torvalds 已提交
716

717 718 719 720 721 722 723 724 725 726 727 728 729 730 731
	tsk->thread.error_code = error_code;
	tsk->thread.trap_no = 13;

	if (show_unhandled_signals && unhandled_signal(tsk, SIGSEGV) &&
			printk_ratelimit()) {
		printk(KERN_INFO
			"%s[%d] general protection ip:%lx sp:%lx error:%lx",
			tsk->comm, tsk->pid,
			regs->ip, regs->sp, error_code);
		print_vma_addr(" in ", regs->ip);
		printk("\n");
	}

	force_sig(SIGSEGV, tsk);
	return;
L
Linus Torvalds 已提交
732

733
gp_in_kernel:
734 735
	if (fixup_exception(regs))
		return;
736

737 738 739 740 741 742
	tsk->thread.error_code = error_code;
	tsk->thread.trap_no = 13;
	if (notify_die(DIE_GPF, "general protection fault", regs,
				error_code, 13, SIGSEGV) == NOTIFY_STOP)
		return;
	die("general protection fault", regs, error_code);
L
Linus Torvalds 已提交
743 744
}

745
static notrace __kprobes void
746
mem_parity_error(unsigned char reason, struct pt_regs *regs)
L
Linus Torvalds 已提交
747
{
748 749
	printk(KERN_EMERG "Uhhuh. NMI received for unknown reason %02x.\n",
		reason);
750
	printk(KERN_EMERG "You have some hardware problem, likely on the PCI bus.\n");
751

D
Dave Jiang 已提交
752
#if defined(CONFIG_EDAC)
753
	if (edac_handler_set()) {
D
Dave Jiang 已提交
754 755 756 757 758
		edac_atomic_assert_error();
		return;
	}
#endif

759
	if (panic_on_unrecovered_nmi)
760 761 762
		panic("NMI: Not continuing");

	printk(KERN_EMERG "Dazed and confused, but trying to continue\n");
L
Linus Torvalds 已提交
763 764 765 766 767 768

	/* Clear and disable the memory parity error line. */
	reason = (reason & 0xf) | 4;
	outb(reason, 0x61);
}

769
static notrace __kprobes void
770
io_check_error(unsigned char reason, struct pt_regs *regs)
L
Linus Torvalds 已提交
771 772 773 774 775 776 777 778 779 780 781 782
{
	printk("NMI: IOCK error (debug interrupt?)\n");
	show_registers(regs);

	/* Re-enable the IOCK line, wait for a few seconds */
	reason = (reason & 0xf) | 8;
	outb(reason, 0x61);
	mdelay(2000);
	reason &= ~8;
	outb(reason, 0x61);
}

783
static notrace __kprobes void
784
unknown_nmi_error(unsigned char reason, struct pt_regs *regs)
785
{
786 787
	if (notify_die(DIE_NMIUNKNOWN, "nmi", regs, reason, 2, SIGINT) ==
			NOTIFY_STOP)
J
Jason Wessel 已提交
788
		return;
789 790 791
	printk(KERN_EMERG "Uhhuh. NMI received for unknown reason %02x.\n",
		reason);
	printk(KERN_EMERG "Do you have a strange power saving mode enabled?\n");
792 793

	if (panic_on_unrecovered_nmi)
794
		panic("NMI: Not continuing");
795

796
	printk(KERN_EMERG "Dazed and confused, but trying to continue\n");
L
Linus Torvalds 已提交
797 798
}

799 800
/* Runs on IST stack. This code must keep interrupts off all the time.
   Nested NMIs are prevented by the CPU. */
801
asmlinkage notrace __kprobes void default_do_nmi(struct pt_regs *regs)
L
Linus Torvalds 已提交
802 803
{
	unsigned char reason = 0;
A
Ashok Raj 已提交
804 805 806
	int cpu;

	cpu = smp_processor_id();
L
Linus Torvalds 已提交
807

808
	/* Only the BSP gets external NMIs from the system. */
A
Ashok Raj 已提交
809
	if (!cpu)
L
Linus Torvalds 已提交
810 811 812
		reason = get_nmi_reason();

	if (!(reason & 0xc0)) {
813
		if (notify_die(DIE_NMI_IPI, "nmi_ipi", regs, reason, 2, SIGINT)
L
Linus Torvalds 已提交
814 815 816 817 818 819
								== NOTIFY_STOP)
			return;
		/*
		 * Ok, so this is none of the documented NMI sources,
		 * so it must be the NMI watchdog.
		 */
820
		if (nmi_watchdog_tick(regs, reason))
L
Linus Torvalds 已提交
821
			return;
822
		if (!do_nmi_callback(regs, cpu))
823 824
			unknown_nmi_error(reason, regs);

L
Linus Torvalds 已提交
825 826
		return;
	}
827
	if (notify_die(DIE_NMI, "nmi", regs, reason, 2, SIGINT) == NOTIFY_STOP)
828
		return;
L
Linus Torvalds 已提交
829 830 831 832 833 834 835 836

	/* AK: following checks seem to be broken on modern chipsets. FIXME */
	if (reason & 0x80)
		mem_parity_error(reason, regs);
	if (reason & 0x40)
		io_check_error(reason, regs);
}

837 838 839 840
asmlinkage notrace __kprobes void
do_nmi(struct pt_regs *regs, long error_code)
{
	nmi_enter();
841

842
	add_pda(__nmi_count, 1);
843

844 845
	if (!ignore_nmis)
		default_do_nmi(regs);
846

847 848 849 850 851 852 853 854 855 856 857 858 859 860 861
	nmi_exit();
}

void stop_nmi(void)
{
	acpi_nmi_disable();
	ignore_nmis++;
}

void restart_nmi(void)
{
	ignore_nmis--;
	acpi_nmi_enable();
}

862
/* runs on IST stack. */
863
asmlinkage void __kprobes do_int3(struct pt_regs *regs, long error_code)
L
Linus Torvalds 已提交
864
{
P
Peter Zijlstra 已提交
865 866
	trace_hardirqs_fixup();

867 868
	if (notify_die(DIE_INT3, "int3", regs, error_code, 3, SIGTRAP)
			== NOTIFY_STOP)
L
Linus Torvalds 已提交
869
		return;
870

871
	preempt_conditional_sti(regs);
L
Linus Torvalds 已提交
872
	do_trap(3, SIGTRAP, "int3", regs, error_code, NULL);
873
	preempt_conditional_cli(regs);
L
Linus Torvalds 已提交
874 875
}

876 877 878
/* Help handler running on IST stack to switch back to user stack
   for scheduling or signal handling. The actual stack switch is done in
   entry.S */
879
asmlinkage __kprobes struct pt_regs *sync_regs(struct pt_regs *eregs)
880 881 882
{
	struct pt_regs *regs = eregs;
	/* Did already sync */
883
	if (eregs == (struct pt_regs *)eregs->sp)
884 885
		;
	/* Exception from user space */
886
	else if (user_mode(eregs))
A
Al Viro 已提交
887
		regs = task_pt_regs(current);
888
	/* Exception from kernel and interrupts are enabled. Move to
889
	   kernel process stack. */
890 891
	else if (eregs->flags & X86_EFLAGS_IF)
		regs = (struct pt_regs *)(eregs->sp -= sizeof(struct pt_regs));
892 893 894 895 896
	if (eregs != regs)
		*regs = *eregs;
	return regs;
}

L
Linus Torvalds 已提交
897
/* runs on IST stack. */
898
asmlinkage void __kprobes do_debug(struct pt_regs *regs,
899
				   unsigned long error_code)
L
Linus Torvalds 已提交
900 901
{
	struct task_struct *tsk = current;
902
	unsigned long condition;
L
Linus Torvalds 已提交
903 904
	siginfo_t info;

905 906
	trace_hardirqs_fixup();

907
	get_debugreg(condition, 6);
L
Linus Torvalds 已提交
908

909 910 911 912 913 914
	/*
	 * The processor cleared BTF, so don't mark that we need it set.
	 */
	clear_tsk_thread_flag(tsk, TIF_DEBUGCTLMSR);
	tsk->thread.debugctlmsr = 0;

L
Linus Torvalds 已提交
915
	if (notify_die(DIE_DEBUG, "debug", regs, condition, error_code,
916
						SIGTRAP) == NOTIFY_STOP)
917
		return;
918

919
	preempt_conditional_sti(regs);
L
Linus Torvalds 已提交
920 921 922

	/* Mask out spurious debug traps due to lazy DR7 setting */
	if (condition & (DR_TRAP0|DR_TRAP1|DR_TRAP2|DR_TRAP3)) {
923
		if (!tsk->thread.debugreg7)
L
Linus Torvalds 已提交
924 925 926 927 928
			goto clear_dr7;
	}

	tsk->thread.debugreg6 = condition;

R
Roland McGrath 已提交
929 930 931 932
	/*
	 * Single-stepping through TF: make sure we ignore any events in
	 * kernel space (but re-enable TF when returning to user mode).
	 */
933
	if (condition & DR_STEP) {
934 935
		if (!user_mode(regs))
			goto clear_TF_reenable;
L
Linus Torvalds 已提交
936 937 938 939 940 941 942
	}

	/* Ok, finally something we can handle */
	tsk->thread.trap_no = 1;
	tsk->thread.error_code = error_code;
	info.si_signo = SIGTRAP;
	info.si_errno = 0;
943
	info.si_code = get_si_code(condition);
944
	info.si_addr = user_mode(regs) ? (void __user *)regs->ip : NULL;
945
	force_sig_info(SIGTRAP, &info, tsk);
L
Linus Torvalds 已提交
946 947

clear_dr7:
948
	set_debugreg(0, 7);
949
	preempt_conditional_cli(regs);
950
	return;
L
Linus Torvalds 已提交
951 952 953

clear_TF_reenable:
	set_tsk_thread_flag(tsk, TIF_SINGLESTEP);
954
	regs->flags &= ~X86_EFLAGS_TF;
955
	preempt_conditional_cli(regs);
956
	return;
L
Linus Torvalds 已提交
957 958
}

959
static int kernel_math_error(struct pt_regs *regs, const char *str, int trapnr)
L
Linus Torvalds 已提交
960
{
961
	if (fixup_exception(regs))
L
Linus Torvalds 已提交
962
		return 1;
963

964
	notify_die(DIE_GPF, str, regs, 0, trapnr, SIGFPE);
965
	/* Illegal floating point operation in the kernel */
966
	current->thread.trap_no = trapnr;
L
Linus Torvalds 已提交
967 968 969 970 971 972 973 974 975 976 977
	die(str, regs, 0);
	return 0;
}

/*
 * Note that we play around with the 'TS' bit in an attempt to get
 * the correct behaviour even in the presence of the asynchronous
 * IRQ13 behaviour
 */
asmlinkage void do_coprocessor_error(struct pt_regs *regs)
{
978
	void __user *ip = (void __user *)(regs->ip);
979
	struct task_struct *task;
L
Linus Torvalds 已提交
980 981 982 983
	siginfo_t info;
	unsigned short cwd, swd;

	conditional_sti(regs);
984
	if (!user_mode(regs) &&
985
	    kernel_math_error(regs, "kernel x87 math error", 16))
L
Linus Torvalds 已提交
986 987 988 989 990 991 992 993 994 995 996 997
		return;

	/*
	 * Save the info for the exception handler and clear the error.
	 */
	task = current;
	save_init_fpu(task);
	task->thread.trap_no = 16;
	task->thread.error_code = 0;
	info.si_signo = SIGFPE;
	info.si_errno = 0;
	info.si_code = __SI_FAULT;
998
	info.si_addr = ip;
L
Linus Torvalds 已提交
999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010
	/*
	 * (~cwd & swd) will mask out exceptions that are not set to unmasked
	 * status.  0x3f is the exception bits in these regs, 0x200 is the
	 * C1 reg you need in case of a stack fault, 0x040 is the stack
	 * fault bit.  We should only be taking one exception at a time,
	 * so if this combination doesn't produce any single exception,
	 * then we have a bad program that isn't synchronizing its FPU usage
	 * and it will suffer the consequences since we won't be able to
	 * fully reproduce the context of the exception
	 */
	cwd = get_fpu_cwd(task);
	swd = get_fpu_swd(task);
1011
	switch (swd & ~cwd & 0x3f) {
1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035
	case 0x000: /* No unmasked exception */
	default: /* Multiple exceptions */
		break;
	case 0x001: /* Invalid Op */
		/*
		 * swd & 0x240 == 0x040: Stack Underflow
		 * swd & 0x240 == 0x240: Stack Overflow
		 * User must clear the SF bit (0x40) if set
		 */
		info.si_code = FPE_FLTINV;
		break;
	case 0x002: /* Denormalize */
	case 0x010: /* Underflow */
		info.si_code = FPE_FLTUND;
		break;
	case 0x004: /* Zero Divide */
		info.si_code = FPE_FLTDIV;
		break;
	case 0x008: /* Overflow */
		info.si_code = FPE_FLTOVF;
		break;
	case 0x020: /* Precision */
		info.si_code = FPE_FLTRES;
		break;
L
Linus Torvalds 已提交
1036 1037 1038 1039 1040 1041
	}
	force_sig_info(SIGFPE, &info, task);
}

asmlinkage void bad_intr(void)
{
1042
	printk("bad interrupt");
L
Linus Torvalds 已提交
1043 1044 1045 1046
}

asmlinkage void do_simd_coprocessor_error(struct pt_regs *regs)
{
1047
	void __user *ip = (void __user *)(regs->ip);
1048
	struct task_struct *task;
L
Linus Torvalds 已提交
1049 1050 1051 1052
	siginfo_t info;
	unsigned short mxcsr;

	conditional_sti(regs);
1053
	if (!user_mode(regs) &&
1054
			kernel_math_error(regs, "kernel simd math error", 19))
L
Linus Torvalds 已提交
1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066
		return;

	/*
	 * Save the info for the exception handler and clear the error.
	 */
	task = current;
	save_init_fpu(task);
	task->thread.trap_no = 19;
	task->thread.error_code = 0;
	info.si_signo = SIGFPE;
	info.si_errno = 0;
	info.si_code = __SI_FAULT;
1067
	info.si_addr = ip;
L
Linus Torvalds 已提交
1068 1069 1070 1071 1072 1073 1074 1075
	/*
	 * The SIMD FPU exceptions are handled a little differently, as there
	 * is only a single status/control register.  Thus, to determine which
	 * unmasked exception was caught we must mask the exception mask bits
	 * at 0x1f80, and then use these to mask the exception bits at 0x3f.
	 */
	mxcsr = get_fpu_mxcsr(task);
	switch (~((mxcsr & 0x1f80) >> 7) & (mxcsr & 0x3f)) {
1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094
	case 0x000:
	default:
		break;
	case 0x001: /* Invalid Op */
		info.si_code = FPE_FLTINV;
		break;
	case 0x002: /* Denormalize */
	case 0x010: /* Underflow */
		info.si_code = FPE_FLTUND;
		break;
	case 0x004: /* Zero Divide */
		info.si_code = FPE_FLTDIV;
		break;
	case 0x008: /* Overflow */
		info.si_code = FPE_FLTOVF;
		break;
	case 0x020: /* Precision */
		info.si_code = FPE_FLTRES;
		break;
L
Linus Torvalds 已提交
1095 1096 1097 1098
	}
	force_sig_info(SIGFPE, &info, task);
}

1099
asmlinkage void do_spurious_interrupt_bug(struct pt_regs *regs)
L
Linus Torvalds 已提交
1100 1101 1102 1103
{
}

asmlinkage void __attribute__((weak)) smp_thermal_interrupt(void)
1104 1105 1106 1107
{
}

asmlinkage void __attribute__((weak)) mce_threshold_interrupt(void)
L
Linus Torvalds 已提交
1108 1109 1110 1111
{
}

/*
1112
 * 'math_state_restore()' saves the current math information in the
L
Linus Torvalds 已提交
1113 1114 1115 1116 1117 1118 1119 1120 1121
 * old math state array, and gets the new ones from the current task
 *
 * Careful.. There are problems with IBM-designed IRQ13 behaviour.
 * Don't touch unless you *really* know how it works.
 */
asmlinkage void math_state_restore(void)
{
	struct task_struct *me = current;

1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136
	if (!used_math()) {
		local_irq_enable();
		/*
		 * does a slab alloc which can sleep
		 */
		if (init_fpu(me)) {
			/*
			 * ran out of memory!
			 */
			do_group_exit(SIGKILL);
			return;
		}
		local_irq_disable();
	}

1137
	clts();				/* Allow maths ops (or we recurse) */
1138 1139 1140
	/*
	 * Paranoid restore. send a SIGSEGV if we fail to restore the state.
	 */
1141
	if (unlikely(restore_fpu_checking(me))) {
1142 1143 1144 1145
		stts();
		force_sig(SIGSEGV, me);
		return;
	}
A
Al Viro 已提交
1146
	task_thread_info(me)->status |= TS_USEDFPU;
1147
	me->fpu_counter++;
L
Linus Torvalds 已提交
1148
}
1149
EXPORT_SYMBOL_GPL(math_state_restore);
L
Linus Torvalds 已提交
1150 1151 1152

void __init trap_init(void)
{
1153 1154 1155
	set_intr_gate(0, &divide_error);
	set_intr_gate_ist(1, &debug, DEBUG_STACK);
	set_intr_gate_ist(2, &nmi, NMI_STACK);
1156 1157 1158 1159
	/* int3 can be called from all */
	set_system_gate_ist(3, &int3, DEBUG_STACK);
	/* int4 can be called from all */
	set_system_gate(4, &overflow);
1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172
	set_intr_gate(5, &bounds);
	set_intr_gate(6, &invalid_op);
	set_intr_gate(7, &device_not_available);
	set_intr_gate_ist(8, &double_fault, DOUBLEFAULT_STACK);
	set_intr_gate(9, &coprocessor_segment_overrun);
	set_intr_gate(10, &invalid_TSS);
	set_intr_gate(11, &segment_not_present);
	set_intr_gate_ist(12, &stack_segment, STACKFAULT_STACK);
	set_intr_gate(13, &general_protection);
	set_intr_gate(14, &page_fault);
	set_intr_gate(15, &spurious_interrupt_bug);
	set_intr_gate(16, &coprocessor_error);
	set_intr_gate(17, &alignment_check);
L
Linus Torvalds 已提交
1173
#ifdef CONFIG_X86_MCE
1174
	set_intr_gate_ist(18, &machine_check, MCE_STACK);
L
Linus Torvalds 已提交
1175
#endif
1176
	set_intr_gate(19, &simd_coprocessor_error);
L
Linus Torvalds 已提交
1177 1178 1179 1180 1181

#ifdef CONFIG_IA32_EMULATION
	set_system_gate(IA32_SYSCALL_VECTOR, ia32_syscall);
#endif
	/*
1182
	 * Should be a barrier for any external CPU state:
L
Linus Torvalds 已提交
1183 1184 1185 1186
	 */
	cpu_init();
}

1187
static int __init oops_setup(char *s)
1188
{
1189 1190 1191 1192 1193
	if (!s)
		return -EINVAL;
	if (!strcmp(s, "panic"))
		panic_on_oops = 1;
	return 0;
1194
}
1195
early_param("oops", oops_setup);
L
Linus Torvalds 已提交
1196 1197 1198

static int __init kstack_setup(char *s)
{
1199 1200
	if (!s)
		return -EINVAL;
1201
	kstack_depth_to_print = simple_strtoul(s, NULL, 0);
1202
	return 0;
L
Linus Torvalds 已提交
1203
}
1204
early_param("kstack", kstack_setup);
1205 1206 1207 1208 1209 1210 1211 1212 1213 1214

static int __init code_bytes_setup(char *s)
{
	code_bytes = simple_strtoul(s, NULL, 0);
	if (code_bytes > 8192)
		code_bytes = 8192;

	return 1;
}
__setup("code_bytes=", code_bytes_setup);