|  | /* | 
|  | *  Copyright (C) 1991, 1992  Linus Torvalds | 
|  | *  Copyright (C) 2000, 2001, 2002 Andi Kleen, SuSE Labs | 
|  | */ | 
|  | #include <linux/kallsyms.h> | 
|  | #include <linux/kprobes.h> | 
|  | #include <linux/uaccess.h> | 
|  | #include <linux/utsname.h> | 
|  | #include <linux/hardirq.h> | 
|  | #include <linux/kdebug.h> | 
|  | #include <linux/module.h> | 
|  | #include <linux/ptrace.h> | 
|  | #include <linux/kexec.h> | 
|  | #include <linux/bug.h> | 
|  | #include <linux/nmi.h> | 
|  | #include <linux/sysfs.h> | 
|  |  | 
|  | #include <asm/stacktrace.h> | 
|  |  | 
|  | #define STACKSLOTS_PER_LINE 4 | 
|  | #define get_bp(bp) asm("movq %%rbp, %0" : "=r" (bp) :) | 
|  |  | 
|  | int panic_on_unrecovered_nmi; | 
|  | int kstack_depth_to_print = 3 * STACKSLOTS_PER_LINE; | 
|  | static unsigned int code_bytes = 64; | 
|  | static int die_counter; | 
|  |  | 
|  | void printk_address(unsigned long address, int reliable) | 
|  | { | 
|  | printk(" [<%p>] %s%pS\n", (void *) address, | 
|  | reliable ? "" : "? ", (void *) address); | 
|  | } | 
|  |  | 
|  | static unsigned long *in_exception_stack(unsigned cpu, unsigned long stack, | 
|  | unsigned *usedp, char **idp) | 
|  | { | 
|  | static char ids[][8] = { | 
|  | [DEBUG_STACK - 1] = "#DB", | 
|  | [NMI_STACK - 1] = "NMI", | 
|  | [DOUBLEFAULT_STACK - 1] = "#DF", | 
|  | [STACKFAULT_STACK - 1] = "#SS", | 
|  | [MCE_STACK - 1] = "#MC", | 
|  | #if DEBUG_STKSZ > EXCEPTION_STKSZ | 
|  | [N_EXCEPTION_STACKS ... | 
|  | N_EXCEPTION_STACKS + DEBUG_STKSZ / EXCEPTION_STKSZ - 2] = "#DB[?]" | 
|  | #endif | 
|  | }; | 
|  | unsigned k; | 
|  |  | 
|  | /* | 
|  | * Iterate over all exception stacks, and figure out whether | 
|  | * 'stack' is in one of them: | 
|  | */ | 
|  | for (k = 0; k < N_EXCEPTION_STACKS; k++) { | 
|  | unsigned long end = per_cpu(orig_ist, cpu).ist[k]; | 
|  | /* | 
|  | * Is 'stack' above this exception frame's end? | 
|  | * If yes then skip to the next frame. | 
|  | */ | 
|  | if (stack >= end) | 
|  | continue; | 
|  | /* | 
|  | * Is 'stack' above this exception frame's start address? | 
|  | * If yes then we found the right frame. | 
|  | */ | 
|  | if (stack >= end - EXCEPTION_STKSZ) { | 
|  | /* | 
|  | * Make sure we only iterate through an exception | 
|  | * stack once. If it comes up for the second time | 
|  | * then there's something wrong going on - just | 
|  | * break out and return NULL: | 
|  | */ | 
|  | if (*usedp & (1U << k)) | 
|  | break; | 
|  | *usedp |= 1U << k; | 
|  | *idp = ids[k]; | 
|  | return (unsigned long *)end; | 
|  | } | 
|  | /* | 
|  | * If this is a debug stack, and if it has a larger size than | 
|  | * the usual exception stacks, then 'stack' might still | 
|  | * be within the lower portion of the debug stack: | 
|  | */ | 
|  | #if DEBUG_STKSZ > EXCEPTION_STKSZ | 
|  | if (k == DEBUG_STACK - 1 && stack >= end - DEBUG_STKSZ) { | 
|  | unsigned j = N_EXCEPTION_STACKS - 1; | 
|  |  | 
|  | /* | 
|  | * Black magic. A large debug stack is composed of | 
|  | * multiple exception stack entries, which we | 
|  | * iterate through now. Dont look: | 
|  | */ | 
|  | do { | 
|  | ++j; | 
|  | end -= EXCEPTION_STKSZ; | 
|  | ids[j][4] = '1' + (j - N_EXCEPTION_STACKS); | 
|  | } while (stack < end - EXCEPTION_STKSZ); | 
|  | if (*usedp & (1U << j)) | 
|  | break; | 
|  | *usedp |= 1U << j; | 
|  | *idp = ids[j]; | 
|  | return (unsigned long *)end; | 
|  | } | 
|  | #endif | 
|  | } | 
|  | return NULL; | 
|  | } | 
|  |  | 
|  | /* | 
|  | * x86-64 can have up to three kernel stacks: | 
|  | * process stack | 
|  | * interrupt stack | 
|  | * severe exception (double fault, nmi, stack fault, debug, mce) hardware stack | 
|  | */ | 
|  |  | 
|  | static inline int valid_stack_ptr(struct thread_info *tinfo, | 
|  | void *p, unsigned int size, void *end) | 
|  | { | 
|  | void *t = tinfo; | 
|  | if (end) { | 
|  | if (p < end && p >= (end-THREAD_SIZE)) | 
|  | return 1; | 
|  | else | 
|  | return 0; | 
|  | } | 
|  | return p > t && p < t + THREAD_SIZE - size; | 
|  | } | 
|  |  | 
|  | /* The form of the top of the frame on the stack */ | 
|  | struct stack_frame { | 
|  | struct stack_frame *next_frame; | 
|  | unsigned long return_address; | 
|  | }; | 
|  |  | 
|  | static inline unsigned long | 
|  | print_context_stack(struct thread_info *tinfo, | 
|  | unsigned long *stack, unsigned long bp, | 
|  | const struct stacktrace_ops *ops, void *data, | 
|  | unsigned long *end) | 
|  | { | 
|  | struct stack_frame *frame = (struct stack_frame *)bp; | 
|  |  | 
|  | while (valid_stack_ptr(tinfo, stack, sizeof(*stack), end)) { | 
|  | unsigned long addr; | 
|  |  | 
|  | addr = *stack; | 
|  | if (__kernel_text_address(addr)) { | 
|  | if ((unsigned long) stack == bp + sizeof(long)) { | 
|  | ops->address(data, addr, 1); | 
|  | frame = frame->next_frame; | 
|  | bp = (unsigned long) frame; | 
|  | } else { | 
|  | ops->address(data, addr, bp == 0); | 
|  | } | 
|  | } | 
|  | stack++; | 
|  | } | 
|  | return bp; | 
|  | } | 
|  |  | 
|  | void dump_trace(struct task_struct *task, struct pt_regs *regs, | 
|  | unsigned long *stack, unsigned long bp, | 
|  | const struct stacktrace_ops *ops, void *data) | 
|  | { | 
|  | const unsigned cpu = get_cpu(); | 
|  | unsigned long *irqstack_end = (unsigned long *)cpu_pda(cpu)->irqstackptr; | 
|  | unsigned used = 0; | 
|  | struct thread_info *tinfo; | 
|  |  | 
|  | if (!task) | 
|  | task = current; | 
|  |  | 
|  | if (!stack) { | 
|  | unsigned long dummy; | 
|  | stack = &dummy; | 
|  | if (task && task != current) | 
|  | stack = (unsigned long *)task->thread.sp; | 
|  | } | 
|  |  | 
|  | #ifdef CONFIG_FRAME_POINTER | 
|  | if (!bp) { | 
|  | if (task == current) { | 
|  | /* Grab bp right from our regs */ | 
|  | get_bp(bp); | 
|  | } else { | 
|  | /* bp is the last reg pushed by switch_to */ | 
|  | bp = *(unsigned long *) task->thread.sp; | 
|  | } | 
|  | } | 
|  | #endif | 
|  |  | 
|  | /* | 
|  | * Print function call entries in all stacks, starting at the | 
|  | * current stack address. If the stacks consist of nested | 
|  | * exceptions | 
|  | */ | 
|  | tinfo = task_thread_info(task); | 
|  | for (;;) { | 
|  | char *id; | 
|  | unsigned long *estack_end; | 
|  | estack_end = in_exception_stack(cpu, (unsigned long)stack, | 
|  | &used, &id); | 
|  |  | 
|  | if (estack_end) { | 
|  | if (ops->stack(data, id) < 0) | 
|  | break; | 
|  |  | 
|  | bp = print_context_stack(tinfo, stack, bp, ops, | 
|  | data, estack_end); | 
|  | ops->stack(data, "<EOE>"); | 
|  | /* | 
|  | * We link to the next stack via the | 
|  | * second-to-last pointer (index -2 to end) in the | 
|  | * exception stack: | 
|  | */ | 
|  | stack = (unsigned long *) estack_end[-2]; | 
|  | continue; | 
|  | } | 
|  | if (irqstack_end) { | 
|  | unsigned long *irqstack; | 
|  | irqstack = irqstack_end - | 
|  | (IRQSTACKSIZE - 64) / sizeof(*irqstack); | 
|  |  | 
|  | if (stack >= irqstack && stack < irqstack_end) { | 
|  | if (ops->stack(data, "IRQ") < 0) | 
|  | break; | 
|  | bp = print_context_stack(tinfo, stack, bp, | 
|  | ops, data, irqstack_end); | 
|  | /* | 
|  | * We link to the next stack (which would be | 
|  | * the process stack normally) the last | 
|  | * pointer (index -1 to end) in the IRQ stack: | 
|  | */ | 
|  | stack = (unsigned long *) (irqstack_end[-1]); | 
|  | irqstack_end = NULL; | 
|  | ops->stack(data, "EOI"); | 
|  | continue; | 
|  | } | 
|  | } | 
|  | break; | 
|  | } | 
|  |  | 
|  | /* | 
|  | * This handles the process stack: | 
|  | */ | 
|  | bp = print_context_stack(tinfo, stack, bp, ops, data, NULL); | 
|  | put_cpu(); | 
|  | } | 
|  | EXPORT_SYMBOL(dump_trace); | 
|  |  | 
|  | static void | 
|  | print_trace_warning_symbol(void *data, char *msg, unsigned long symbol) | 
|  | { | 
|  | printk(data); | 
|  | print_symbol(msg, symbol); | 
|  | printk("\n"); | 
|  | } | 
|  |  | 
|  | static void print_trace_warning(void *data, char *msg) | 
|  | { | 
|  | printk("%s%s\n", (char *)data, msg); | 
|  | } | 
|  |  | 
|  | static int print_trace_stack(void *data, char *name) | 
|  | { | 
|  | printk("%s <%s> ", (char *)data, name); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | /* | 
|  | * Print one address/symbol entries per line. | 
|  | */ | 
|  | static void print_trace_address(void *data, unsigned long addr, int reliable) | 
|  | { | 
|  | touch_nmi_watchdog(); | 
|  | printk(data); | 
|  | printk_address(addr, reliable); | 
|  | } | 
|  |  | 
|  | static const struct stacktrace_ops print_trace_ops = { | 
|  | .warning = print_trace_warning, | 
|  | .warning_symbol = print_trace_warning_symbol, | 
|  | .stack = print_trace_stack, | 
|  | .address = print_trace_address, | 
|  | }; | 
|  |  | 
|  | static void | 
|  | show_trace_log_lvl(struct task_struct *task, struct pt_regs *regs, | 
|  | unsigned long *stack, unsigned long bp, char *log_lvl) | 
|  | { | 
|  | printk("%sCall Trace:\n", log_lvl); | 
|  | dump_trace(task, regs, stack, bp, &print_trace_ops, log_lvl); | 
|  | } | 
|  |  | 
|  | void show_trace(struct task_struct *task, struct pt_regs *regs, | 
|  | unsigned long *stack, unsigned long bp) | 
|  | { | 
|  | show_trace_log_lvl(task, regs, stack, bp, ""); | 
|  | } | 
|  |  | 
|  | static void | 
|  | show_stack_log_lvl(struct task_struct *task, struct pt_regs *regs, | 
|  | unsigned long *sp, unsigned long bp, char *log_lvl) | 
|  | { | 
|  | unsigned long *stack; | 
|  | int i; | 
|  | const int cpu = smp_processor_id(); | 
|  | unsigned long *irqstack_end = | 
|  | (unsigned long *) (cpu_pda(cpu)->irqstackptr); | 
|  | unsigned long *irqstack = | 
|  | (unsigned long *) (cpu_pda(cpu)->irqstackptr - IRQSTACKSIZE); | 
|  |  | 
|  | /* | 
|  | * debugging aid: "show_stack(NULL, NULL);" prints the | 
|  | * back trace for this cpu. | 
|  | */ | 
|  |  | 
|  | if (sp == NULL) { | 
|  | if (task) | 
|  | sp = (unsigned long *)task->thread.sp; | 
|  | else | 
|  | sp = (unsigned long *)&sp; | 
|  | } | 
|  |  | 
|  | stack = sp; | 
|  | for (i = 0; i < kstack_depth_to_print; i++) { | 
|  | if (stack >= irqstack && stack <= irqstack_end) { | 
|  | if (stack == irqstack_end) { | 
|  | stack = (unsigned long *) (irqstack_end[-1]); | 
|  | printk(" <EOI> "); | 
|  | } | 
|  | } else { | 
|  | if (((long) stack & (THREAD_SIZE-1)) == 0) | 
|  | break; | 
|  | } | 
|  | if (i && ((i % STACKSLOTS_PER_LINE) == 0)) | 
|  | printk("\n%s", log_lvl); | 
|  | printk(" %016lx", *stack++); | 
|  | touch_nmi_watchdog(); | 
|  | } | 
|  | printk("\n"); | 
|  | show_trace_log_lvl(task, regs, sp, bp, log_lvl); | 
|  | } | 
|  |  | 
|  | void show_stack(struct task_struct *task, unsigned long *sp) | 
|  | { | 
|  | show_stack_log_lvl(task, NULL, sp, 0, ""); | 
|  | } | 
|  |  | 
|  | /* | 
|  | * The architecture-independent dump_stack generator | 
|  | */ | 
|  | void dump_stack(void) | 
|  | { | 
|  | unsigned long bp = 0; | 
|  | unsigned long stack; | 
|  |  | 
|  | #ifdef CONFIG_FRAME_POINTER | 
|  | if (!bp) | 
|  | get_bp(bp); | 
|  | #endif | 
|  |  | 
|  | printk("Pid: %d, comm: %.20s %s %s %.*s\n", | 
|  | current->pid, current->comm, print_tainted(), | 
|  | init_utsname()->release, | 
|  | (int)strcspn(init_utsname()->version, " "), | 
|  | init_utsname()->version); | 
|  | show_trace(NULL, NULL, &stack, bp); | 
|  | } | 
|  | EXPORT_SYMBOL(dump_stack); | 
|  |  | 
|  | void show_registers(struct pt_regs *regs) | 
|  | { | 
|  | int i; | 
|  | unsigned long sp; | 
|  | const int cpu = smp_processor_id(); | 
|  | struct task_struct *cur = cpu_pda(cpu)->pcurrent; | 
|  |  | 
|  | sp = regs->sp; | 
|  | printk("CPU %d ", cpu); | 
|  | __show_regs(regs, 1); | 
|  | printk("Process %s (pid: %d, threadinfo %p, task %p)\n", | 
|  | cur->comm, cur->pid, task_thread_info(cur), cur); | 
|  |  | 
|  | /* | 
|  | * When in-kernel, we also print out the stack and code at the | 
|  | * time of the fault.. | 
|  | */ | 
|  | if (!user_mode(regs)) { | 
|  | unsigned int code_prologue = code_bytes * 43 / 64; | 
|  | unsigned int code_len = code_bytes; | 
|  | unsigned char c; | 
|  | u8 *ip; | 
|  |  | 
|  | printk(KERN_EMERG "Stack:\n"); | 
|  | show_stack_log_lvl(NULL, regs, (unsigned long *)sp, | 
|  | regs->bp, KERN_EMERG); | 
|  |  | 
|  | printk(KERN_EMERG "Code: "); | 
|  |  | 
|  | ip = (u8 *)regs->ip - code_prologue; | 
|  | if (ip < (u8 *)PAGE_OFFSET || probe_kernel_address(ip, c)) { | 
|  | /* try starting at IP */ | 
|  | ip = (u8 *)regs->ip; | 
|  | code_len = code_len - code_prologue + 1; | 
|  | } | 
|  | for (i = 0; i < code_len; i++, ip++) { | 
|  | if (ip < (u8 *)PAGE_OFFSET || | 
|  | probe_kernel_address(ip, c)) { | 
|  | printk(" Bad RIP value."); | 
|  | break; | 
|  | } | 
|  | if (ip == (u8 *)regs->ip) | 
|  | printk("<%02x> ", c); | 
|  | else | 
|  | printk("%02x ", c); | 
|  | } | 
|  | } | 
|  | printk("\n"); | 
|  | } | 
|  |  | 
|  | int is_valid_bugaddr(unsigned long ip) | 
|  | { | 
|  | unsigned short ud2; | 
|  |  | 
|  | if (__copy_from_user(&ud2, (const void __user *) ip, sizeof(ud2))) | 
|  | return 0; | 
|  |  | 
|  | return ud2 == 0x0b0f; | 
|  | } | 
|  |  | 
|  | static raw_spinlock_t die_lock = __RAW_SPIN_LOCK_UNLOCKED; | 
|  | static int die_owner = -1; | 
|  | static unsigned int die_nest_count; | 
|  |  | 
|  | unsigned __kprobes long oops_begin(void) | 
|  | { | 
|  | int cpu; | 
|  | unsigned long flags; | 
|  |  | 
|  | oops_enter(); | 
|  |  | 
|  | /* racy, but better than risking deadlock. */ | 
|  | raw_local_irq_save(flags); | 
|  | cpu = smp_processor_id(); | 
|  | if (!__raw_spin_trylock(&die_lock)) { | 
|  | if (cpu == die_owner) | 
|  | /* nested oops. should stop eventually */; | 
|  | else | 
|  | __raw_spin_lock(&die_lock); | 
|  | } | 
|  | die_nest_count++; | 
|  | die_owner = cpu; | 
|  | console_verbose(); | 
|  | bust_spinlocks(1); | 
|  | return flags; | 
|  | } | 
|  |  | 
|  | void __kprobes oops_end(unsigned long flags, struct pt_regs *regs, int signr) | 
|  | { | 
|  | die_owner = -1; | 
|  | bust_spinlocks(0); | 
|  | die_nest_count--; | 
|  | if (!die_nest_count) | 
|  | /* Nest count reaches zero, release the lock. */ | 
|  | __raw_spin_unlock(&die_lock); | 
|  | raw_local_irq_restore(flags); | 
|  | if (!regs) { | 
|  | oops_exit(); | 
|  | return; | 
|  | } | 
|  | if (in_interrupt()) | 
|  | panic("Fatal exception in interrupt"); | 
|  | if (panic_on_oops) | 
|  | panic("Fatal exception"); | 
|  | oops_exit(); | 
|  | do_exit(signr); | 
|  | } | 
|  |  | 
|  | int __kprobes __die(const char *str, struct pt_regs *regs, long err) | 
|  | { | 
|  | printk(KERN_EMERG "%s: %04lx [#%d] ", str, err & 0xffff, ++die_counter); | 
|  | #ifdef CONFIG_PREEMPT | 
|  | printk("PREEMPT "); | 
|  | #endif | 
|  | #ifdef CONFIG_SMP | 
|  | printk("SMP "); | 
|  | #endif | 
|  | #ifdef CONFIG_DEBUG_PAGEALLOC | 
|  | printk("DEBUG_PAGEALLOC"); | 
|  | #endif | 
|  | printk("\n"); | 
|  | sysfs_printk_last_file(); | 
|  | if (notify_die(DIE_OOPS, str, regs, err, | 
|  | current->thread.trap_no, SIGSEGV) == NOTIFY_STOP) | 
|  | return 1; | 
|  |  | 
|  | show_registers(regs); | 
|  | add_taint(TAINT_DIE); | 
|  | /* Executive summary in case the oops scrolled away */ | 
|  | printk(KERN_ALERT "RIP "); | 
|  | printk_address(regs->ip, 1); | 
|  | printk(" RSP <%016lx>\n", regs->sp); | 
|  | if (kexec_should_crash(current)) | 
|  | crash_kexec(regs); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | void die(const char *str, struct pt_regs *regs, long err) | 
|  | { | 
|  | unsigned long flags = oops_begin(); | 
|  |  | 
|  | if (!user_mode(regs)) | 
|  | report_bug(regs->ip, regs); | 
|  |  | 
|  | if (__die(str, regs, err)) | 
|  | regs = NULL; | 
|  | oops_end(flags, regs, SIGSEGV); | 
|  | } | 
|  |  | 
|  | notrace __kprobes void | 
|  | die_nmi(char *str, struct pt_regs *regs, int do_panic) | 
|  | { | 
|  | unsigned long flags; | 
|  |  | 
|  | if (notify_die(DIE_NMIWATCHDOG, str, regs, 0, 2, SIGINT) == NOTIFY_STOP) | 
|  | return; | 
|  |  | 
|  | flags = oops_begin(); | 
|  | /* | 
|  | * We are in trouble anyway, lets at least try | 
|  | * to get a message out. | 
|  | */ | 
|  | printk(KERN_EMERG "%s", str); | 
|  | printk(" on CPU%d, ip %08lx, registers:\n", | 
|  | smp_processor_id(), regs->ip); | 
|  | show_registers(regs); | 
|  | if (kexec_should_crash(current)) | 
|  | crash_kexec(regs); | 
|  | if (do_panic || panic_on_oops) | 
|  | panic("Non maskable interrupt"); | 
|  | oops_end(flags, NULL, SIGBUS); | 
|  | nmi_exit(); | 
|  | local_irq_enable(); | 
|  | do_exit(SIGBUS); | 
|  | } | 
|  |  | 
|  | static int __init oops_setup(char *s) | 
|  | { | 
|  | if (!s) | 
|  | return -EINVAL; | 
|  | if (!strcmp(s, "panic")) | 
|  | panic_on_oops = 1; | 
|  | return 0; | 
|  | } | 
|  | early_param("oops", oops_setup); | 
|  |  | 
|  | static int __init kstack_setup(char *s) | 
|  | { | 
|  | if (!s) | 
|  | return -EINVAL; | 
|  | kstack_depth_to_print = simple_strtoul(s, NULL, 0); | 
|  | return 0; | 
|  | } | 
|  | early_param("kstack", kstack_setup); | 
|  |  | 
|  | static int __init code_bytes_setup(char *s) | 
|  | { | 
|  | code_bytes = simple_strtoul(s, NULL, 0); | 
|  | if (code_bytes > 8192) | 
|  | code_bytes = 8192; | 
|  |  | 
|  | return 1; | 
|  | } | 
|  | __setup("code_bytes=", code_bytes_setup); |