Skip to contentSkip to conversation

x86/mm: A _PAGE_NX fixlet and a kmap cleanup

PATCH New Andy Lutomirski 2 participants 5 messages Jan 19, 2016 – Jan 20, 2016

Subsystems (2)
lore
Share & tools
lore

Andy Lutomirski

author maintainer
#0 lore raw

v2 cover x86/mm: A _PAGE_NX fixlet and a kmap cleanup

The fixlet might help with some WX warnings. The kmap cleanup is just a cleanup.

This is very lightly tested.

Changes from v1:
- Rebased on top of the cpu_has_xyz cleanups.

Andy Lutomirski (2):
x86_32/mm: Set NX in __supported_pte_mask before enabling paging x86/mm: Make kmap_prot into a #define

 arch/x86/include/asm/fixmap.h | 2 +-
 arch/x86/kernel/head_32.S     | 6 ++++++
 arch/x86/mm/init_32.c         | 3 ---
 arch/x86/mm/setup_nx.c        | 5 ++---
 4 files changed, 9 insertions(+), 7 deletions(-)
Signature · 1 line
2.5.0
author maintainer
#1 lore raw

PATCH v2 1/2 x86_32/mm: Set NX in __supported_pte_mask before enabling paging

There's a short window in which very early mappings can end up with NX clear because they are created before we've noticed that we have NX.

It turns out that we detect NX very early, so there's no need to defer __supported_pte_mask setup.

---
 arch/x86/kernel/head_32.S | 6 ++++++
 arch/x86/mm/setup_nx.c    | 5 ++---
 2 files changed, 8 insertions(+), 3 deletions(-)
arch/x86/kernel/head_32.S +6 -0
index 6bc9ae24b6d2..57fc3f8c85fd 100644
@@ -389,6 +389,12 @@ default_entry:
 	/* Make changes effective */
 	wrmsr
 
+	/*
+	 * And make sure that all the mappings we set up have NX set from
+	 * the beginning.
+	 */
+	orl $(1 << (_PAGE_BIT_NX - 32)), pa(__supported_pte_mask + 4)
+
 enable_paging:
 
 /*
arch/x86/mm/setup_nx.c +2 -3
index 92e2eacb3321..78f5d5907f98 100644
@@ -31,9 +31,8 @@ early_param("noexec", noexec_setup);
 
 void x86_configure_nx(void)
 {
-	if (boot_cpu_has(X86_FEATURE_NX) && !disable_nx)
-		__supported_pte_mask |= _PAGE_NX;
-	else
+	/* If disable_nx is set, clear NX on all new mappings going forward. */
+	if (disable_nx)
 		__supported_pte_mask &= ~_PAGE_NX;
 }
 
Signature · 1 line
2.5.0
#2 lore raw

[tip:x86/mm] x86/mm/32: Set NX in __supported_pte_mask before enabling paging

x86/mm/32: Set NX in __supported_pte_mask before enabling paging
Commit-ID:  320d25b6a05f8b73c23fc21025d2906ecdd2d4fc
Gitweb:     http://git.kernel.org/tip/320d25b6a05f8b73c23fc21025d2906ecdd2d4fc
Author:     Andy Lutomirski <[email protected]>
AuthorDate: Tue, 19 Jan 2016 13:38:58 -0800
Committer:  Ingo Molnar <[email protected]>
CommitDate: Wed, 20 Jan 2016 11:39:14 +0100

x86/mm/32: Set NX in __supported_pte_mask before enabling paging

There's a short window in which very early mappings can end up with NX clear because they are created before we've noticed that we have NX.

It turns out that we detect NX very early, so there's no need to defer __supported_pte_mask setup.

Cc Andy Lutomirski <[email protected]>
Cc Arjan van de Ven <[email protected]>
Cc Borislav Petkov <[email protected]>
Cc Brian Gerst <[email protected]>
Cc Denys Vlasenko <[email protected]>
Cc H. Peter Anvin <[email protected]>
Cc Linus Torvalds <[email protected]>
Cc Mike Galbraith <[email protected]>
Cc Pavel Machek <[email protected]>
Cc Peter Zijlstra <[email protected]>
Cc Stephen Smalley <[email protected]>
Cc Thomas Gleixner <[email protected]>
---
 arch/x86/kernel/head_32.S | 6 ++++++
 arch/x86/mm/setup_nx.c    | 5 ++---
 2 files changed, 8 insertions(+), 3 deletions(-)
arch/x86/kernel/head_32.S +6 -0
index 6bc9ae2..57fc3f8 100644
@@ -389,6 +389,12 @@ default_entry:
 	/* Make changes effective */
 	wrmsr
 
+	/*
+	 * And make sure that all the mappings we set up have NX set from
+	 * the beginning.
+	 */
+	orl $(1 << (_PAGE_BIT_NX - 32)), pa(__supported_pte_mask + 4)
+
 enable_paging:
 
 /*
arch/x86/mm/setup_nx.c +2 -3
index 92e2eac..78f5d59 100644
@@ -31,9 +31,8 @@ early_param("noexec", noexec_setup);
 
 void x86_configure_nx(void)
 {
-	if (boot_cpu_has(X86_FEATURE_NX) && !disable_nx)
-		__supported_pte_mask |= _PAGE_NX;
-	else
+	/* If disable_nx is set, clear NX on all new mappings going forward. */
+	if (disable_nx)
 		__supported_pte_mask &= ~_PAGE_NX;
 }
 
author maintainer
#3 lore raw

PATCH v2 2/2 x86/mm: Make kmap_prot into a #define

In reply to Andy Lutomirski

The value (once we initialize it) is a foregone conclusion. Make it a #define to save a tiny amount of text and data size and to make it more comprehensible.

---
 arch/x86/include/asm/fixmap.h | 2 +-
 arch/x86/mm/init_32.c         | 3 ---
 2 files changed, 1 insertion(+), 4 deletions(-)
arch/x86/include/asm/fixmap.h +1 -1
index 32c60a02ec80..ce941b7e7900 100644
@@ -142,7 +142,7 @@ extern void reserve_top_address(unsigned long reserve);
 extern int fixmaps_set;
 
 extern pte_t *kmap_pte;
-extern pgprot_t kmap_prot;
+#define kmap_prot PAGE_KERNEL
 extern pte_t *pkmap_page_table;
 
 void __native_set_fixmap(enum fixed_addresses idx, pte_t pte);
arch/x86/mm/init_32.c +0 -3
index cb4ef3de61f9..a4bb1c7ab65e 100644
@@ -388,7 +388,6 @@ repeat:
 }
 
 pte_t *kmap_pte;
-pgprot_t kmap_prot;
 
 static inline pte_t *kmap_get_fixmap_pte(unsigned long vaddr)
 {
@@ -405,8 +404,6 @@ static void __init kmap_init(void)
 	 */
 	kmap_vstart = __fix_to_virt(FIX_KMAP_BEGIN);
 	kmap_pte = kmap_get_fixmap_pte(kmap_vstart);
-
-	kmap_prot = PAGE_KERNEL;
 }
 
 #ifdef CONFIG_HIGHMEM
Signature · 1 line
2.5.0
#4 lore raw

[tip:x86/mm] x86/mm: Make kmap_prot into a #define

x86/mm: Make kmap_prot into a #define
Commit-ID:  7c360572b430a0e9757bafc0c20f26c920f2a07f
Gitweb:     http://git.kernel.org/tip/7c360572b430a0e9757bafc0c20f26c920f2a07f
Author:     Andy Lutomirski <[email protected]>
AuthorDate: Tue, 19 Jan 2016 13:38:59 -0800
Committer:  Ingo Molnar <[email protected]>
CommitDate: Wed, 20 Jan 2016 11:39:14 +0100

x86/mm: Make kmap_prot into a #define

The value (once we initialize it) is a foregone conclusion. Make it a #define to save a tiny amount of text and data size and to make it more comprehensible.

Cc Andy Lutomirski <[email protected]>
Cc Arjan van de Ven <[email protected]>
Cc Borislav Petkov <[email protected]>
Cc Brian Gerst <[email protected]>
Cc Denys Vlasenko <[email protected]>
Cc H. Peter Anvin <[email protected]>
Cc Linus Torvalds <[email protected]>
Cc Mike Galbraith <[email protected]>
Cc Pavel Machek <[email protected]>
Cc Peter Zijlstra <[email protected]>
Cc Stephen Smalley <[email protected]>
Cc Thomas Gleixner <[email protected]>
---
 arch/x86/include/asm/fixmap.h | 2 +-
 arch/x86/mm/init_32.c         | 3 ---
 2 files changed, 1 insertion(+), 4 deletions(-)
arch/x86/include/asm/fixmap.h +1 -1
index 6d7d0e5..8554f96 100644
@@ -138,7 +138,7 @@ extern void reserve_top_address(unsigned long reserve);
 extern int fixmaps_set;
 
 extern pte_t *kmap_pte;
-extern pgprot_t kmap_prot;
+#define kmap_prot PAGE_KERNEL
 extern pte_t *pkmap_page_table;
 
 void __native_set_fixmap(enum fixed_addresses idx, pte_t pte);
arch/x86/mm/init_32.c +0 -3
index cb4ef3d..a4bb1c7 100644
@@ -388,7 +388,6 @@ repeat:
 }
 
 pte_t *kmap_pte;
-pgprot_t kmap_prot;
 
 static inline pte_t *kmap_get_fixmap_pte(unsigned long vaddr)
 {
@@ -405,8 +404,6 @@ static void __init kmap_init(void)
 	 */
 	kmap_vstart = __fix_to_virt(FIX_KMAP_BEGIN);
 	kmap_pte = kmap_get_fixmap_pte(kmap_vstart);
-
-	kmap_prot = PAGE_KERNEL;
 }
 
 #ifdef CONFIG_HIGHMEM