blob: b6850fedf6227124a318365d35a485cce20d39ce [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001/*
2 * linux/arch/arm/mm/fault.c
3 *
4 * Copyright (C) 1995 Linus Torvalds
5 * Modifications for ARM processor (c) 1995-2004 Russell King
6 *
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License version 2 as
9 * published by the Free Software Foundation.
10 */
Linus Torvalds1da177e2005-04-16 15:20:36 -070011#include <linux/module.h>
12#include <linux/signal.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070013#include <linux/mm.h>
Russell King67306da2008-12-14 18:01:44 +000014#include <linux/hardirq.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070015#include <linux/init.h>
Nicolas Pitre25ce1dd2007-12-03 15:21:57 -050016#include <linux/kprobes.h>
Russell King33fa9b12008-09-06 11:35:55 +010017#include <linux/uaccess.h>
Nicolas Pitre252d4c22008-09-11 11:52:02 -040018#include <linux/page-flags.h>
Catalin Marinas412bb0a2009-07-24 12:37:09 +010019#include <linux/sched.h>
Russell King65cec8e2009-08-17 20:02:06 +010020#include <linux/highmem.h>
Jamie Iles7ada1892010-02-02 20:24:58 +010021#include <linux/perf_event.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -070022
23#include <asm/system.h>
24#include <asm/pgtable.h>
25#include <asm/tlbflush.h>
Bryan Huntsman3f2bc4d2011-08-16 17:27:22 -070026#if defined(CONFIG_ARCH_MSM_SCORPION) && !defined(CONFIG_MSM_SMP)
27#include <asm/io.h>
28#include <mach/msm_iomap.h>
29#endif
30
31#ifdef CONFIG_EMULATE_DOMAIN_MANAGER_V7
32#include <asm/domain.h>
33#endif /* CONFIG_EMULATE_DOMAIN_MANAGER_V7 */
Linus Torvalds1da177e2005-04-16 15:20:36 -070034
35#include "fault.h"
36
Russell Kingc88d6aa2009-09-20 12:41:58 +010037/*
Russell Kingdf297bf2009-09-20 13:18:47 +010038 * Fault status register encodings. We steal bit 31 for our own purposes.
Russell Kingc88d6aa2009-09-20 12:41:58 +010039 */
Russell Kingdf297bf2009-09-20 13:18:47 +010040#define FSR_LNX_PF (1 << 31)
Russell Kingc88d6aa2009-09-20 12:41:58 +010041#define FSR_WRITE (1 << 11)
42#define FSR_FS4 (1 << 10)
43#define FSR_FS3_0 (15)
44
45static inline int fsr_fs(unsigned int fsr)
46{
47 return (fsr & FSR_FS3_0) | (fsr & FSR_FS4) >> 6;
48}
49
Catalin Marinas09529f72009-07-24 12:34:55 +010050#ifdef CONFIG_MMU
Nicolas Pitre25ce1dd2007-12-03 15:21:57 -050051
52#ifdef CONFIG_KPROBES
53static inline int notify_page_fault(struct pt_regs *regs, unsigned int fsr)
54{
55 int ret = 0;
56
57 if (!user_mode(regs)) {
58 /* kprobe_running() needs smp_processor_id() */
59 preempt_disable();
60 if (kprobe_running() && kprobe_fault_handler(regs, fsr))
61 ret = 1;
62 preempt_enable();
63 }
64
65 return ret;
66}
67#else
68static inline int notify_page_fault(struct pt_regs *regs, unsigned int fsr)
69{
70 return 0;
71}
72#endif
73
Linus Torvalds1da177e2005-04-16 15:20:36 -070074/*
75 * This is useful to dump out the page tables associated with
76 * 'addr' in mm 'mm'.
77 */
78void show_pte(struct mm_struct *mm, unsigned long addr)
79{
80 pgd_t *pgd;
81
82 if (!mm)
83 mm = &init_mm;
84
85 printk(KERN_ALERT "pgd = %p\n", mm->pgd);
86 pgd = pgd_offset(mm, addr);
Will Deacon29a38192011-02-15 14:31:37 +010087 printk(KERN_ALERT "[%08lx] *pgd=%08llx",
88 addr, (long long)pgd_val(*pgd));
Linus Torvalds1da177e2005-04-16 15:20:36 -070089
90 do {
Russell King516295e2010-11-21 16:27:49 +000091 pud_t *pud;
Linus Torvalds1da177e2005-04-16 15:20:36 -070092 pmd_t *pmd;
93 pte_t *pte;
94
95 if (pgd_none(*pgd))
96 break;
97
98 if (pgd_bad(*pgd)) {
99 printk("(bad)");
100 break;
101 }
102
Russell King516295e2010-11-21 16:27:49 +0000103 pud = pud_offset(pgd, addr);
104 if (PTRS_PER_PUD != 1)
105 printk(", *pud=%08lx", pud_val(*pud));
106
107 if (pud_none(*pud))
108 break;
109
110 if (pud_bad(*pud)) {
111 printk("(bad)");
112 break;
113 }
114
115 pmd = pmd_offset(pud, addr);
Nicolas Pitreda46c792008-09-30 16:10:11 +0100116 if (PTRS_PER_PMD != 1)
Will Deacon29a38192011-02-15 14:31:37 +0100117 printk(", *pmd=%08llx", (long long)pmd_val(*pmd));
Linus Torvalds1da177e2005-04-16 15:20:36 -0700118
119 if (pmd_none(*pmd))
120 break;
121
122 if (pmd_bad(*pmd)) {
123 printk("(bad)");
124 break;
125 }
126
Linus Torvalds1da177e2005-04-16 15:20:36 -0700127 /* We must not map this if we have highmem enabled */
Nicolas Pitre252d4c22008-09-11 11:52:02 -0400128 if (PageHighMem(pfn_to_page(pmd_val(*pmd) >> PAGE_SHIFT)))
129 break;
130
Linus Torvalds1da177e2005-04-16 15:20:36 -0700131 pte = pte_offset_map(pmd, addr);
Will Deacon29a38192011-02-15 14:31:37 +0100132 printk(", *pte=%08llx", (long long)pte_val(*pte));
133 printk(", *ppte=%08llx",
134 (long long)pte_val(pte[PTE_HWTABLE_PTRS]));
Linus Torvalds1da177e2005-04-16 15:20:36 -0700135 pte_unmap(pte);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700136 } while(0);
137
138 printk("\n");
139}
Catalin Marinas09529f72009-07-24 12:34:55 +0100140#else /* CONFIG_MMU */
141void show_pte(struct mm_struct *mm, unsigned long addr)
142{ }
143#endif /* CONFIG_MMU */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700144
145/*
146 * Oops. The kernel tried to access some page that wasn't present.
147 */
148static void
149__do_kernel_fault(struct mm_struct *mm, unsigned long addr, unsigned int fsr,
150 struct pt_regs *regs)
151{
152 /*
153 * Are we prepared to handle this kernel fault?
154 */
155 if (fixup_exception(regs))
156 return;
157
158 /*
159 * No handler, we'll have to terminate things with extreme prejudice.
160 */
161 bust_spinlocks(1);
162 printk(KERN_ALERT
163 "Unable to handle kernel %s at virtual address %08lx\n",
164 (addr < PAGE_SIZE) ? "NULL pointer dereference" :
165 "paging request", addr);
166
167 show_pte(mm, addr);
168 die("Oops", regs, fsr);
169 bust_spinlocks(0);
170 do_exit(SIGKILL);
171}
172
173/*
174 * Something tried to access memory that isn't in our memory map..
175 * User mode accesses just cause a SIGSEGV
176 */
177static void
178__do_user_fault(struct task_struct *tsk, unsigned long addr,
akpm@osdl.org2d137c22005-04-16 15:23:55 -0700179 unsigned int fsr, unsigned int sig, int code,
180 struct pt_regs *regs)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700181{
182 struct siginfo si;
183
184#ifdef CONFIG_DEBUG_USER
185 if (user_debug & UDBG_SEGV) {
akpm@osdl.org2d137c22005-04-16 15:23:55 -0700186 printk(KERN_DEBUG "%s: unhandled page fault (%d) at 0x%08lx, code 0x%03x\n",
187 tsk->comm, sig, addr, fsr);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700188 show_pte(tsk->mm, addr);
189 show_regs(regs);
190 }
191#endif
192
193 tsk->thread.address = addr;
194 tsk->thread.error_code = fsr;
195 tsk->thread.trap_no = 14;
akpm@osdl.org2d137c22005-04-16 15:23:55 -0700196 si.si_signo = sig;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700197 si.si_errno = 0;
198 si.si_code = code;
199 si.si_addr = (void __user *)addr;
akpm@osdl.org2d137c22005-04-16 15:23:55 -0700200 force_sig_info(sig, &si, tsk);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700201}
202
Russell Kinge5beac32006-09-27 16:13:48 +0100203void do_bad_area(unsigned long addr, unsigned int fsr, struct pt_regs *regs)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700204{
Russell Kinge5beac32006-09-27 16:13:48 +0100205 struct task_struct *tsk = current;
206 struct mm_struct *mm = tsk->active_mm;
207
Linus Torvalds1da177e2005-04-16 15:20:36 -0700208 /*
209 * If we are in kernel mode at this point, we
210 * have no context to handle this fault with.
211 */
212 if (user_mode(regs))
akpm@osdl.org2d137c22005-04-16 15:23:55 -0700213 __do_user_fault(tsk, addr, fsr, SIGSEGV, SEGV_MAPERR, regs);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700214 else
215 __do_kernel_fault(mm, addr, fsr, regs);
216}
217
Catalin Marinas09529f72009-07-24 12:34:55 +0100218#ifdef CONFIG_MMU
Nick Piggin5c72fc52007-07-20 09:21:06 +0200219#define VM_FAULT_BADMAP 0x010000
220#define VM_FAULT_BADACCESS 0x020000
Linus Torvalds1da177e2005-04-16 15:20:36 -0700221
Russell Kingd374bf12009-09-20 12:53:01 +0100222/*
223 * Check that the permissions on the VMA allow for the fault which occurred.
224 * If we encountered a write fault, we must have write permission, otherwise
225 * we allow any permission.
226 */
227static inline bool access_error(unsigned int fsr, struct vm_area_struct *vma)
228{
229 unsigned int mask = VM_READ | VM_WRITE | VM_EXEC;
230
231 if (fsr & FSR_WRITE)
232 mask = VM_WRITE;
Russell Kingdf297bf2009-09-20 13:18:47 +0100233 if (fsr & FSR_LNX_PF)
234 mask = VM_EXEC;
Russell Kingd374bf12009-09-20 12:53:01 +0100235
236 return vma->vm_flags & mask ? false : true;
237}
238
239static int __kprobes
Linus Torvalds1da177e2005-04-16 15:20:36 -0700240__do_page_fault(struct mm_struct *mm, unsigned long addr, unsigned int fsr,
241 struct task_struct *tsk)
242{
243 struct vm_area_struct *vma;
Russell Kingd374bf12009-09-20 12:53:01 +0100244 int fault;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700245
246 vma = find_vma(mm, addr);
247 fault = VM_FAULT_BADMAP;
Russell Kingd374bf12009-09-20 12:53:01 +0100248 if (unlikely(!vma))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700249 goto out;
Russell Kingd374bf12009-09-20 12:53:01 +0100250 if (unlikely(vma->vm_start > addr))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700251 goto check_stack;
252
253 /*
254 * Ok, we have a good vm_area for this
255 * memory access, so we can handle it.
256 */
257good_area:
Russell Kingd374bf12009-09-20 12:53:01 +0100258 if (access_error(fsr, vma)) {
259 fault = VM_FAULT_BADACCESS;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700260 goto out;
Russell Kingd374bf12009-09-20 12:53:01 +0100261 }
Linus Torvalds1da177e2005-04-16 15:20:36 -0700262
263 /*
Russell Kingb42c6342009-09-20 12:47:40 +0100264 * If for any reason at all we couldn't handle the fault, make
265 * sure we exit gracefully rather than endlessly redo the fault.
Linus Torvalds1da177e2005-04-16 15:20:36 -0700266 */
Russell Kingc88d6aa2009-09-20 12:41:58 +0100267 fault = handle_mm_fault(mm, vma, addr & PAGE_MASK, (fsr & FSR_WRITE) ? FAULT_FLAG_WRITE : 0);
Russell Kingb42c6342009-09-20 12:47:40 +0100268 if (unlikely(fault & VM_FAULT_ERROR))
269 return fault;
Nick Piggin83c54072007-07-19 01:47:05 -0700270 if (fault & VM_FAULT_MAJOR)
271 tsk->maj_flt++;
272 else
273 tsk->min_flt++;
274 return fault;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700275
Linus Torvalds1da177e2005-04-16 15:20:36 -0700276check_stack:
277 if (vma->vm_flags & VM_GROWSDOWN && !expand_stack(vma, addr))
278 goto good_area;
279out:
280 return fault;
281}
282
Nicolas Pitre785d3cd2007-12-03 15:27:56 -0500283static int __kprobes
Linus Torvalds1da177e2005-04-16 15:20:36 -0700284do_page_fault(unsigned long addr, unsigned int fsr, struct pt_regs *regs)
285{
286 struct task_struct *tsk;
287 struct mm_struct *mm;
akpm@osdl.org2d137c22005-04-16 15:23:55 -0700288 int fault, sig, code;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700289
Nicolas Pitre25ce1dd2007-12-03 15:21:57 -0500290 if (notify_page_fault(regs, fsr))
291 return 0;
292
Linus Torvalds1da177e2005-04-16 15:20:36 -0700293 tsk = current;
294 mm = tsk->mm;
295
296 /*
297 * If we're in an interrupt or have no user
298 * context, we must not take the fault..
299 */
Peter Zijlstra6edaf682006-12-06 20:32:18 -0800300 if (in_atomic() || !mm)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700301 goto no_context;
302
Russell King840ff6a2005-09-20 17:52:13 +0100303 /*
304 * As per x86, we may deadlock here. However, since the kernel only
305 * validly references user space from well defined areas of the code,
306 * we can bug out early if this is from code which shouldn't.
307 */
308 if (!down_read_trylock(&mm->mmap_sem)) {
309 if (!user_mode(regs) && !search_exception_tables(regs->ARM_pc))
310 goto no_context;
311 down_read(&mm->mmap_sem);
Russell Kingbf456992009-09-20 12:52:19 +0100312 } else {
313 /*
314 * The above down_read_trylock() might have succeeded in
315 * which case, we'll have missed the might_sleep() from
316 * down_read()
317 */
318 might_sleep();
Imre Deak1d212712009-10-05 13:40:44 +0100319#ifdef CONFIG_DEBUG_VM
320 if (!user_mode(regs) &&
321 !search_exception_tables(regs->ARM_pc))
322 goto no_context;
323#endif
Russell King840ff6a2005-09-20 17:52:13 +0100324 }
325
Linus Torvalds1da177e2005-04-16 15:20:36 -0700326 fault = __do_page_fault(mm, addr, fsr, tsk);
327 up_read(&mm->mmap_sem);
328
Jamie Iles7ada1892010-02-02 20:24:58 +0100329 perf_sw_event(PERF_COUNT_SW_PAGE_FAULTS, 1, 0, regs, addr);
330 if (fault & VM_FAULT_MAJOR)
331 perf_sw_event(PERF_COUNT_SW_PAGE_FAULTS_MAJ, 1, 0, regs, addr);
332 else if (fault & VM_FAULT_MINOR)
333 perf_sw_event(PERF_COUNT_SW_PAGE_FAULTS_MIN, 1, 0, regs, addr);
334
Linus Torvalds1da177e2005-04-16 15:20:36 -0700335 /*
Russell Kingff2afb92005-08-04 14:17:33 +0100336 * Handle the "normal" case first - VM_FAULT_MAJOR / VM_FAULT_MINOR
Linus Torvalds1da177e2005-04-16 15:20:36 -0700337 */
Nick Piggin5c72fc52007-07-20 09:21:06 +0200338 if (likely(!(fault & (VM_FAULT_ERROR | VM_FAULT_BADMAP | VM_FAULT_BADACCESS))))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700339 return 0;
340
Russell Kingb42c6342009-09-20 12:47:40 +0100341 if (fault & VM_FAULT_OOM) {
342 /*
343 * We ran out of memory, call the OOM killer, and return to
344 * userspace (which will retry the fault, or kill us if we
345 * got oom-killed)
346 */
347 pagefault_out_of_memory();
348 return 0;
349 }
350
Linus Torvalds1da177e2005-04-16 15:20:36 -0700351 /*
Linus Torvalds1da177e2005-04-16 15:20:36 -0700352 * If we are in kernel mode at this point, we
353 * have no context to handle this fault with.
354 */
355 if (!user_mode(regs))
356 goto no_context;
357
Nick Piggin83c54072007-07-19 01:47:05 -0700358 if (fault & VM_FAULT_SIGBUS) {
akpm@osdl.org2d137c22005-04-16 15:23:55 -0700359 /*
360 * We had some memory, but were unable to
361 * successfully fix up this page fault.
362 */
363 sig = SIGBUS;
364 code = BUS_ADRERR;
Nick Piggin83c54072007-07-19 01:47:05 -0700365 } else {
akpm@osdl.org2d137c22005-04-16 15:23:55 -0700366 /*
367 * Something tried to access memory that
368 * isn't in our memory map..
369 */
370 sig = SIGSEGV;
371 code = fault == VM_FAULT_BADACCESS ?
372 SEGV_ACCERR : SEGV_MAPERR;
akpm@osdl.org2d137c22005-04-16 15:23:55 -0700373 }
374
375 __do_user_fault(tsk, addr, fsr, sig, code, regs);
376 return 0;
377
Linus Torvalds1da177e2005-04-16 15:20:36 -0700378no_context:
379 __do_kernel_fault(mm, addr, fsr, regs);
380 return 0;
381}
Catalin Marinas09529f72009-07-24 12:34:55 +0100382#else /* CONFIG_MMU */
383static int
384do_page_fault(unsigned long addr, unsigned int fsr, struct pt_regs *regs)
385{
386 return 0;
387}
388#endif /* CONFIG_MMU */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700389
390/*
391 * First Level Translation Fault Handler
392 *
393 * We enter here because the first level page table doesn't contain
394 * a valid entry for the address.
395 *
396 * If the address is in kernel space (>= TASK_SIZE), then we are
397 * probably faulting in the vmalloc() area.
398 *
399 * If the init_task's first level page tables contains the relevant
400 * entry, we copy the it to this task. If not, we send the process
401 * a signal, fixup the exception, or oops the kernel.
402 *
403 * NOTE! We MUST NOT take any locks for this case. We may be in an
404 * interrupt or a critical region, and should only copy the information
405 * from the master page table, nothing more.
406 */
Catalin Marinas09529f72009-07-24 12:34:55 +0100407#ifdef CONFIG_MMU
Nicolas Pitre785d3cd2007-12-03 15:27:56 -0500408static int __kprobes
Linus Torvalds1da177e2005-04-16 15:20:36 -0700409do_translation_fault(unsigned long addr, unsigned int fsr,
410 struct pt_regs *regs)
411{
Linus Torvalds1da177e2005-04-16 15:20:36 -0700412 unsigned int index;
413 pgd_t *pgd, *pgd_k;
Russell King516295e2010-11-21 16:27:49 +0000414 pud_t *pud, *pud_k;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700415 pmd_t *pmd, *pmd_k;
416
417 if (addr < TASK_SIZE)
418 return do_page_fault(addr, fsr, regs);
419
Anfei5e27fb72010-06-08 15:16:49 +0100420 if (user_mode(regs))
421 goto bad_area;
422
Linus Torvalds1da177e2005-04-16 15:20:36 -0700423 index = pgd_index(addr);
424
425 /*
426 * FIXME: CP15 C1 is write only on ARMv3 architectures.
427 */
428 pgd = cpu_get_pgd() + index;
429 pgd_k = init_mm.pgd + index;
430
431 if (pgd_none(*pgd_k))
432 goto bad_area;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700433 if (!pgd_present(*pgd))
434 set_pgd(pgd, *pgd_k);
435
Russell King516295e2010-11-21 16:27:49 +0000436 pud = pud_offset(pgd, addr);
437 pud_k = pud_offset(pgd_k, addr);
438
439 if (pud_none(*pud_k))
440 goto bad_area;
441 if (!pud_present(*pud))
442 set_pud(pud, *pud_k);
443
444 pmd = pmd_offset(pud, addr);
445 pmd_k = pmd_offset(pud_k, addr);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700446
Kirill A. Shutemov33a9c412010-07-22 13:20:22 +0100447 /*
448 * On ARM one Linux PGD entry contains two hardware entries (see page
449 * tables layout in pgtable.h). We normally guarantee that we always
450 * fill both L1 entries. But create_mapping() doesn't follow the rule.
451 * It can create inidividual L1 entries, so here we have to call
452 * pmd_none() check for the entry really corresponded to address, not
453 * for the first of pair.
454 */
455 index = (addr >> SECTION_SHIFT) & 1;
456 if (pmd_none(pmd_k[index]))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700457 goto bad_area;
458
459 copy_pmd(pmd, pmd_k);
460 return 0;
461
462bad_area:
Russell Kinge5beac32006-09-27 16:13:48 +0100463 do_bad_area(addr, fsr, regs);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700464 return 0;
465}
Catalin Marinas09529f72009-07-24 12:34:55 +0100466#else /* CONFIG_MMU */
467static int
468do_translation_fault(unsigned long addr, unsigned int fsr,
469 struct pt_regs *regs)
470{
471 return 0;
472}
473#endif /* CONFIG_MMU */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700474
475/*
476 * Some section permission faults need to be handled gracefully.
477 * They can happen due to a __{get,put}_user during an oops.
478 */
479static int
480do_sect_fault(unsigned long addr, unsigned int fsr, struct pt_regs *regs)
481{
Russell Kinge5beac32006-09-27 16:13:48 +0100482 do_bad_area(addr, fsr, regs);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700483 return 0;
484}
485
486/*
487 * This abort handler always returns "fault".
488 */
489static int
490do_bad(unsigned long addr, unsigned int fsr, struct pt_regs *regs)
491{
492 return 1;
493}
494
Bryan Huntsman3f2bc4d2011-08-16 17:27:22 -0700495#if defined(CONFIG_ARCH_MSM_SCORPION) && !defined(CONFIG_MSM_SMP)
496#define __str(x) #x
497#define MRC(x, v1, v2, v4, v5, v6) do { \
498 unsigned int __##x; \
499 asm("mrc " __str(v1) ", " __str(v2) ", %0, " __str(v4) ", " \
500 __str(v5) ", " __str(v6) "\n" \
501 : "=r" (__##x)); \
502 pr_info("%s: %s = 0x%.8x\n", __func__, #x, __##x); \
503} while(0)
504
505#define MSM_TCSR_SPARE2 (MSM_TCSR_BASE + 0x60)
506
507#endif
508
509static int
510do_imprecise_ext(unsigned long addr, unsigned int fsr, struct pt_regs *regs)
511{
512#if defined(CONFIG_ARCH_MSM_SCORPION) && !defined(CONFIG_MSM_SMP)
513 MRC(ADFSR, p15, 0, c5, c1, 0);
514 MRC(DFSR, p15, 0, c5, c0, 0);
515 MRC(ACTLR, p15, 0, c1, c0, 1);
516 MRC(EFSR, p15, 7, c15, c0, 1);
517 MRC(L2SR, p15, 3, c15, c1, 0);
518 MRC(L2CR0, p15, 3, c15, c0, 1);
519 MRC(L2CPUESR, p15, 3, c15, c1, 1);
520 MRC(L2CPUCR, p15, 3, c15, c0, 2);
521 MRC(SPESR, p15, 1, c9, c7, 0);
522 MRC(SPCR, p15, 0, c9, c7, 0);
523 MRC(DMACHSR, p15, 1, c11, c0, 0);
524 MRC(DMACHESR, p15, 1, c11, c0, 1);
525 MRC(DMACHCR, p15, 0, c11, c0, 2);
526
527 /* clear out EFSR and ADFSR after fault */
528 asm volatile ("mcr p15, 7, %0, c15, c0, 1\n\t"
529 "mcr p15, 0, %0, c5, c1, 0"
530 : : "r" (0));
531#endif
532#if defined(CONFIG_ARCH_MSM_SCORPION) && !defined(CONFIG_MSM_SMP)
533 pr_info("%s: TCSR_SPARE2 = 0x%.8x\n", __func__, readl(MSM_TCSR_SPARE2));
534#endif
535 return 1;
536}
537
Linus Torvalds1da177e2005-04-16 15:20:36 -0700538static struct fsr_info {
539 int (*fn)(unsigned long addr, unsigned int fsr, struct pt_regs *regs);
540 int sig;
Russell Kingcfb08102005-06-30 11:06:49 +0100541 int code;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700542 const char *name;
543} fsr_info[] = {
544 /*
545 * The following are the standard ARMv3 and ARMv4 aborts. ARMv5
546 * defines these to be "precise" aborts.
547 */
Russell Kingcfb08102005-06-30 11:06:49 +0100548 { do_bad, SIGSEGV, 0, "vector exception" },
Kirill A. Shutemov3dc91af2010-07-22 13:16:49 +0100549 { do_bad, SIGBUS, BUS_ADRALN, "alignment exception" },
Russell Kingcfb08102005-06-30 11:06:49 +0100550 { do_bad, SIGKILL, 0, "terminal exception" },
Kirill A. Shutemov3dc91af2010-07-22 13:16:49 +0100551 { do_bad, SIGBUS, BUS_ADRALN, "alignment exception" },
Russell Kingcfb08102005-06-30 11:06:49 +0100552 { do_bad, SIGBUS, 0, "external abort on linefetch" },
553 { do_translation_fault, SIGSEGV, SEGV_MAPERR, "section translation fault" },
554 { do_bad, SIGBUS, 0, "external abort on linefetch" },
555 { do_page_fault, SIGSEGV, SEGV_MAPERR, "page translation fault" },
556 { do_bad, SIGBUS, 0, "external abort on non-linefetch" },
557 { do_bad, SIGSEGV, SEGV_ACCERR, "section domain fault" },
558 { do_bad, SIGBUS, 0, "external abort on non-linefetch" },
559 { do_bad, SIGSEGV, SEGV_ACCERR, "page domain fault" },
560 { do_bad, SIGBUS, 0, "external abort on translation" },
561 { do_sect_fault, SIGSEGV, SEGV_ACCERR, "section permission fault" },
562 { do_bad, SIGBUS, 0, "external abort on translation" },
563 { do_page_fault, SIGSEGV, SEGV_ACCERR, "page permission fault" },
Linus Torvalds1da177e2005-04-16 15:20:36 -0700564 /*
565 * The following are "imprecise" aborts, which are signalled by bit
566 * 10 of the FSR, and may not be recoverable. These are only
567 * supported if the CPU abort handler supports bit 10.
568 */
Russell Kingcfb08102005-06-30 11:06:49 +0100569 { do_bad, SIGBUS, 0, "unknown 16" },
570 { do_bad, SIGBUS, 0, "unknown 17" },
571 { do_bad, SIGBUS, 0, "unknown 18" },
572 { do_bad, SIGBUS, 0, "unknown 19" },
573 { do_bad, SIGBUS, 0, "lock abort" }, /* xscale */
574 { do_bad, SIGBUS, 0, "unknown 21" },
Bryan Huntsman3f2bc4d2011-08-16 17:27:22 -0700575 { do_imprecise_ext, SIGBUS, BUS_OBJERR, "imprecise external abort" }, /* xscale */
Russell Kingcfb08102005-06-30 11:06:49 +0100576 { do_bad, SIGBUS, 0, "unknown 23" },
577 { do_bad, SIGBUS, 0, "dcache parity error" }, /* xscale */
578 { do_bad, SIGBUS, 0, "unknown 25" },
579 { do_bad, SIGBUS, 0, "unknown 26" },
580 { do_bad, SIGBUS, 0, "unknown 27" },
581 { do_bad, SIGBUS, 0, "unknown 28" },
582 { do_bad, SIGBUS, 0, "unknown 29" },
583 { do_bad, SIGBUS, 0, "unknown 30" },
584 { do_bad, SIGBUS, 0, "unknown 31" }
Linus Torvalds1da177e2005-04-16 15:20:36 -0700585};
586
587void __init
588hook_fault_code(int nr, int (*fn)(unsigned long, unsigned int, struct pt_regs *),
Kirill A. Shutemov6338a6a2010-07-22 13:18:19 +0100589 int sig, int code, const char *name)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700590{
Kirill A. Shutemov6338a6a2010-07-22 13:18:19 +0100591 if (nr < 0 || nr >= ARRAY_SIZE(fsr_info))
592 BUG();
593
594 fsr_info[nr].fn = fn;
595 fsr_info[nr].sig = sig;
596 fsr_info[nr].code = code;
597 fsr_info[nr].name = name;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700598}
599
600/*
601 * Dispatch a data abort to the relevant handler.
602 */
Russell King7ab3f8d2007-03-02 15:01:36 +0000603asmlinkage void __exception
Linus Torvalds1da177e2005-04-16 15:20:36 -0700604do_DataAbort(unsigned long addr, unsigned int fsr, struct pt_regs *regs)
605{
Russell Kingc88d6aa2009-09-20 12:41:58 +0100606 const struct fsr_info *inf = fsr_info + fsr_fs(fsr);
Russell Kingcfb08102005-06-30 11:06:49 +0100607 struct siginfo info;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700608
Bryan Huntsman3f2bc4d2011-08-16 17:27:22 -0700609#ifdef CONFIG_EMULATE_DOMAIN_MANAGER_V7
610 if (emulate_domain_manager_data_abort(fsr, addr))
611 return;
612#endif
613
Russell Kingdf297bf2009-09-20 13:18:47 +0100614 if (!inf->fn(addr, fsr & ~FSR_LNX_PF, regs))
Linus Torvalds1da177e2005-04-16 15:20:36 -0700615 return;
616
617 printk(KERN_ALERT "Unhandled fault: %s (0x%03x) at 0x%08lx\n",
618 inf->name, fsr, addr);
Russell Kingcfb08102005-06-30 11:06:49 +0100619
620 info.si_signo = inf->sig;
621 info.si_errno = 0;
622 info.si_code = inf->code;
623 info.si_addr = (void __user *)addr;
Christoph Hellwig1eeb66a2007-05-08 00:27:03 -0700624 arm_notify_die("", regs, &info, fsr, 0);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700625}
626
Kirill A. Shutemovd25ef8b2009-09-25 13:40:49 +0100627
628static struct fsr_info ifsr_info[] = {
629 { do_bad, SIGBUS, 0, "unknown 0" },
630 { do_bad, SIGBUS, 0, "unknown 1" },
631 { do_bad, SIGBUS, 0, "debug event" },
632 { do_bad, SIGSEGV, SEGV_ACCERR, "section access flag fault" },
633 { do_bad, SIGBUS, 0, "unknown 4" },
634 { do_translation_fault, SIGSEGV, SEGV_MAPERR, "section translation fault" },
635 { do_bad, SIGSEGV, SEGV_ACCERR, "page access flag fault" },
636 { do_page_fault, SIGSEGV, SEGV_MAPERR, "page translation fault" },
637 { do_bad, SIGBUS, 0, "external abort on non-linefetch" },
638 { do_bad, SIGSEGV, SEGV_ACCERR, "section domain fault" },
639 { do_bad, SIGBUS, 0, "unknown 10" },
640 { do_bad, SIGSEGV, SEGV_ACCERR, "page domain fault" },
641 { do_bad, SIGBUS, 0, "external abort on translation" },
642 { do_sect_fault, SIGSEGV, SEGV_ACCERR, "section permission fault" },
643 { do_bad, SIGBUS, 0, "external abort on translation" },
644 { do_page_fault, SIGSEGV, SEGV_ACCERR, "page permission fault" },
645 { do_bad, SIGBUS, 0, "unknown 16" },
646 { do_bad, SIGBUS, 0, "unknown 17" },
647 { do_bad, SIGBUS, 0, "unknown 18" },
648 { do_bad, SIGBUS, 0, "unknown 19" },
649 { do_bad, SIGBUS, 0, "unknown 20" },
650 { do_bad, SIGBUS, 0, "unknown 21" },
651 { do_bad, SIGBUS, 0, "unknown 22" },
652 { do_bad, SIGBUS, 0, "unknown 23" },
653 { do_bad, SIGBUS, 0, "unknown 24" },
654 { do_bad, SIGBUS, 0, "unknown 25" },
655 { do_bad, SIGBUS, 0, "unknown 26" },
656 { do_bad, SIGBUS, 0, "unknown 27" },
657 { do_bad, SIGBUS, 0, "unknown 28" },
658 { do_bad, SIGBUS, 0, "unknown 29" },
659 { do_bad, SIGBUS, 0, "unknown 30" },
660 { do_bad, SIGBUS, 0, "unknown 31" },
661};
662
Will Deacon3a4b5dc2010-09-03 10:39:59 +0100663void __init
664hook_ifault_code(int nr, int (*fn)(unsigned long, unsigned int, struct pt_regs *),
665 int sig, int code, const char *name)
666{
667 if (nr < 0 || nr >= ARRAY_SIZE(ifsr_info))
668 BUG();
669
670 ifsr_info[nr].fn = fn;
671 ifsr_info[nr].sig = sig;
672 ifsr_info[nr].code = code;
673 ifsr_info[nr].name = name;
674}
675
Russell King7ab3f8d2007-03-02 15:01:36 +0000676asmlinkage void __exception
Kirill A. Shutemov4fb28472009-09-25 13:39:47 +0100677do_PrefetchAbort(unsigned long addr, unsigned int ifsr, struct pt_regs *regs)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700678{
Kirill A. Shutemovd25ef8b2009-09-25 13:40:49 +0100679 const struct fsr_info *inf = ifsr_info + fsr_fs(ifsr);
680 struct siginfo info;
681
Bryan Huntsman3f2bc4d2011-08-16 17:27:22 -0700682#ifdef CONFIG_EMULATE_DOMAIN_MANAGER_V7
683 if (emulate_domain_manager_prefetch_abort(ifsr, addr))
684 return;
685#endif
686
Kirill A. Shutemovd25ef8b2009-09-25 13:40:49 +0100687 if (!inf->fn(addr, ifsr | FSR_LNX_PF, regs))
688 return;
689
690 printk(KERN_ALERT "Unhandled prefetch abort: %s (0x%03x) at 0x%08lx\n",
691 inf->name, ifsr, addr);
692
693 info.si_signo = inf->sig;
694 info.si_errno = 0;
695 info.si_code = inf->code;
696 info.si_addr = (void __user *)addr;
697 arm_notify_die("", regs, &info, ifsr, 0);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700698}
699
Kirill A. Shutemov993bf4e2010-07-22 13:23:25 +0100700static int __init exceptions_init(void)
701{
702 if (cpu_architecture() >= CPU_ARCH_ARMv6) {
703 hook_fault_code(4, do_translation_fault, SIGSEGV, SEGV_MAPERR,
704 "I-cache maintenance fault");
705 }
706
Kirill A. Shutemovb8ab5392010-07-26 11:20:41 +0100707 if (cpu_architecture() >= CPU_ARCH_ARMv7) {
708 /*
709 * TODO: Access flag faults introduced in ARMv6K.
710 * Runtime check for 'K' extension is needed
711 */
712 hook_fault_code(3, do_bad, SIGSEGV, SEGV_MAPERR,
713 "section access flag fault");
714 hook_fault_code(6, do_bad, SIGSEGV, SEGV_MAPERR,
715 "section access flag fault");
716 }
717
Kirill A. Shutemov993bf4e2010-07-22 13:23:25 +0100718 return 0;
719}
720
721arch_initcall(exceptions_init);