| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 1 | /* | 
|  | 2 | * This file is subject to the terms and conditions of the GNU General Public | 
|  | 3 | * License.  See the file "COPYING" in the main directory of this archive | 
|  | 4 | * for more details. | 
|  | 5 | * | 
|  | 6 | * Copyright (C) 2011 Wind River Systems, | 
|  | 7 | *   written by Ralf Baechle <ralf@linux-mips.org> | 
|  | 8 | */ | 
|  | 9 | #include <linux/errno.h> | 
|  | 10 | #include <linux/mm.h> | 
|  | 11 | #include <linux/mman.h> | 
|  | 12 | #include <linux/module.h> | 
| Jian Peng | d0be89f | 2011-05-17 12:27:49 -0700 | [diff] [blame] | 13 | #include <linux/personality.h> | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 14 | #include <linux/random.h> | 
|  | 15 | #include <linux/sched.h> | 
|  | 16 |  | 
|  | 17 | unsigned long shm_align_mask = PAGE_SIZE - 1;	/* Sane caches */ | 
|  | 18 |  | 
|  | 19 | EXPORT_SYMBOL(shm_align_mask); | 
|  | 20 |  | 
| Jian Peng | d0be89f | 2011-05-17 12:27:49 -0700 | [diff] [blame] | 21 | /* gap between mmap and stack */ | 
|  | 22 | #define MIN_GAP (128*1024*1024UL) | 
|  | 23 | #define MAX_GAP        ((TASK_SIZE)/6*5) | 
|  | 24 |  | 
|  | 25 | static int mmap_is_legacy(void) | 
|  | 26 | { | 
|  | 27 | if (current->personality & ADDR_COMPAT_LAYOUT) | 
|  | 28 | return 1; | 
|  | 29 |  | 
|  | 30 | if (rlimit(RLIMIT_STACK) == RLIM_INFINITY) | 
|  | 31 | return 1; | 
|  | 32 |  | 
|  | 33 | return sysctl_legacy_va_layout; | 
|  | 34 | } | 
|  | 35 |  | 
|  | 36 | static unsigned long mmap_base(unsigned long rnd) | 
|  | 37 | { | 
|  | 38 | unsigned long gap = rlimit(RLIMIT_STACK); | 
|  | 39 |  | 
|  | 40 | if (gap < MIN_GAP) | 
|  | 41 | gap = MIN_GAP; | 
|  | 42 | else if (gap > MAX_GAP) | 
|  | 43 | gap = MAX_GAP; | 
|  | 44 |  | 
|  | 45 | return PAGE_ALIGN(TASK_SIZE - gap - rnd); | 
|  | 46 | } | 
|  | 47 |  | 
|  | 48 | static inline unsigned long COLOUR_ALIGN_DOWN(unsigned long addr, | 
|  | 49 | unsigned long pgoff) | 
|  | 50 | { | 
|  | 51 | unsigned long base = addr & ~shm_align_mask; | 
|  | 52 | unsigned long off = (pgoff << PAGE_SHIFT) & shm_align_mask; | 
|  | 53 |  | 
|  | 54 | if (base + off <= addr) | 
|  | 55 | return base + off; | 
|  | 56 |  | 
|  | 57 | return base - off; | 
|  | 58 | } | 
|  | 59 |  | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 60 | #define COLOUR_ALIGN(addr,pgoff)				\ | 
|  | 61 | ((((addr) + shm_align_mask) & ~shm_align_mask) +	\ | 
|  | 62 | (((pgoff) << PAGE_SHIFT) & shm_align_mask)) | 
|  | 63 |  | 
| Jian Peng | d0be89f | 2011-05-17 12:27:49 -0700 | [diff] [blame] | 64 | enum mmap_allocation_direction {UP, DOWN}; | 
|  | 65 |  | 
|  | 66 | static unsigned long arch_get_unmapped_area_foo(struct file *filp, | 
|  | 67 | unsigned long addr0, unsigned long len, unsigned long pgoff, | 
|  | 68 | unsigned long flags, enum mmap_allocation_direction dir) | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 69 | { | 
| Jian Peng | d0be89f | 2011-05-17 12:27:49 -0700 | [diff] [blame] | 70 | struct mm_struct *mm = current->mm; | 
|  | 71 | struct vm_area_struct *vma; | 
|  | 72 | unsigned long addr = addr0; | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 73 | int do_color_align; | 
|  | 74 |  | 
| Jian Peng | d0be89f | 2011-05-17 12:27:49 -0700 | [diff] [blame] | 75 | if (unlikely(len > TASK_SIZE)) | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 76 | return -ENOMEM; | 
|  | 77 |  | 
|  | 78 | if (flags & MAP_FIXED) { | 
| Jian Peng | d0be89f | 2011-05-17 12:27:49 -0700 | [diff] [blame] | 79 | /* Even MAP_FIXED mappings must reside within TASK_SIZE */ | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 80 | if (TASK_SIZE - len < addr) | 
|  | 81 | return -EINVAL; | 
|  | 82 |  | 
|  | 83 | /* | 
|  | 84 | * We do not accept a shared mapping if it would violate | 
|  | 85 | * cache aliasing constraints. | 
|  | 86 | */ | 
|  | 87 | if ((flags & MAP_SHARED) && | 
|  | 88 | ((addr - (pgoff << PAGE_SHIFT)) & shm_align_mask)) | 
|  | 89 | return -EINVAL; | 
|  | 90 | return addr; | 
|  | 91 | } | 
|  | 92 |  | 
|  | 93 | do_color_align = 0; | 
|  | 94 | if (filp || (flags & MAP_SHARED)) | 
|  | 95 | do_color_align = 1; | 
| Jian Peng | d0be89f | 2011-05-17 12:27:49 -0700 | [diff] [blame] | 96 |  | 
|  | 97 | /* requesting a specific address */ | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 98 | if (addr) { | 
|  | 99 | if (do_color_align) | 
|  | 100 | addr = COLOUR_ALIGN(addr, pgoff); | 
|  | 101 | else | 
|  | 102 | addr = PAGE_ALIGN(addr); | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 103 |  | 
| Jian Peng | d0be89f | 2011-05-17 12:27:49 -0700 | [diff] [blame] | 104 | vma = find_vma(mm, addr); | 
|  | 105 | if (TASK_SIZE - len >= addr && | 
|  | 106 | (!vma || addr + len <= vma->vm_start)) | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 107 | return addr; | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 108 | } | 
| Jian Peng | d0be89f | 2011-05-17 12:27:49 -0700 | [diff] [blame] | 109 |  | 
|  | 110 | if (dir == UP) { | 
|  | 111 | addr = mm->mmap_base; | 
|  | 112 | if (do_color_align) | 
|  | 113 | addr = COLOUR_ALIGN(addr, pgoff); | 
|  | 114 | else | 
|  | 115 | addr = PAGE_ALIGN(addr); | 
|  | 116 |  | 
|  | 117 | for (vma = find_vma(current->mm, addr); ; vma = vma->vm_next) { | 
|  | 118 | /* At this point:  (!vma || addr < vma->vm_end). */ | 
|  | 119 | if (TASK_SIZE - len < addr) | 
|  | 120 | return -ENOMEM; | 
|  | 121 | if (!vma || addr + len <= vma->vm_start) | 
|  | 122 | return addr; | 
|  | 123 | addr = vma->vm_end; | 
|  | 124 | if (do_color_align) | 
|  | 125 | addr = COLOUR_ALIGN(addr, pgoff); | 
|  | 126 | } | 
|  | 127 | } else { | 
|  | 128 | /* check if free_area_cache is useful for us */ | 
|  | 129 | if (len <= mm->cached_hole_size) { | 
|  | 130 | mm->cached_hole_size = 0; | 
|  | 131 | mm->free_area_cache = mm->mmap_base; | 
|  | 132 | } | 
|  | 133 |  | 
|  | 134 | /* either no address requested or can't fit in requested address hole */ | 
|  | 135 | addr = mm->free_area_cache; | 
|  | 136 | if (do_color_align) { | 
|  | 137 | unsigned long base = | 
|  | 138 | COLOUR_ALIGN_DOWN(addr - len, pgoff); | 
|  | 139 |  | 
|  | 140 | addr = base + len; | 
|  | 141 | } | 
|  | 142 |  | 
|  | 143 | /* make sure it can fit in the remaining address space */ | 
|  | 144 | if (likely(addr > len)) { | 
|  | 145 | vma = find_vma(mm, addr - len); | 
|  | 146 | if (!vma || addr <= vma->vm_start) { | 
|  | 147 | /* remember the address as a hint for next time */ | 
|  | 148 | return mm->free_area_cache = addr-len; | 
|  | 149 | } | 
|  | 150 | } | 
|  | 151 |  | 
|  | 152 | if (unlikely(mm->mmap_base < len)) | 
|  | 153 | goto bottomup; | 
|  | 154 |  | 
|  | 155 | addr = mm->mmap_base-len; | 
|  | 156 | if (do_color_align) | 
|  | 157 | addr = COLOUR_ALIGN_DOWN(addr, pgoff); | 
|  | 158 |  | 
|  | 159 | do { | 
|  | 160 | /* | 
|  | 161 | * Lookup failure means no vma is above this address, | 
|  | 162 | * else if new region fits below vma->vm_start, | 
|  | 163 | * return with success: | 
|  | 164 | */ | 
|  | 165 | vma = find_vma(mm, addr); | 
|  | 166 | if (likely(!vma || addr+len <= vma->vm_start)) { | 
|  | 167 | /* remember the address as a hint for next time */ | 
|  | 168 | return mm->free_area_cache = addr; | 
|  | 169 | } | 
|  | 170 |  | 
|  | 171 | /* remember the largest hole we saw so far */ | 
|  | 172 | if (addr + mm->cached_hole_size < vma->vm_start) | 
|  | 173 | mm->cached_hole_size = vma->vm_start - addr; | 
|  | 174 |  | 
|  | 175 | /* try just below the current vma->vm_start */ | 
|  | 176 | addr = vma->vm_start-len; | 
|  | 177 | if (do_color_align) | 
|  | 178 | addr = COLOUR_ALIGN_DOWN(addr, pgoff); | 
|  | 179 | } while (likely(len < vma->vm_start)); | 
|  | 180 |  | 
|  | 181 | bottomup: | 
|  | 182 | /* | 
|  | 183 | * A failed mmap() very likely causes application failure, | 
|  | 184 | * so fall back to the bottom-up function here. This scenario | 
|  | 185 | * can happen with large stack limits and large mmap() | 
|  | 186 | * allocations. | 
|  | 187 | */ | 
|  | 188 | mm->cached_hole_size = ~0UL; | 
|  | 189 | mm->free_area_cache = TASK_UNMAPPED_BASE; | 
|  | 190 | addr = arch_get_unmapped_area(filp, addr0, len, pgoff, flags); | 
|  | 191 | /* | 
|  | 192 | * Restore the topdown base: | 
|  | 193 | */ | 
|  | 194 | mm->free_area_cache = mm->mmap_base; | 
|  | 195 | mm->cached_hole_size = ~0UL; | 
|  | 196 |  | 
|  | 197 | return addr; | 
|  | 198 | } | 
|  | 199 | } | 
|  | 200 |  | 
|  | 201 | unsigned long arch_get_unmapped_area(struct file *filp, unsigned long addr0, | 
|  | 202 | unsigned long len, unsigned long pgoff, unsigned long flags) | 
|  | 203 | { | 
|  | 204 | return arch_get_unmapped_area_foo(filp, | 
|  | 205 | addr0, len, pgoff, flags, UP); | 
|  | 206 | } | 
|  | 207 |  | 
|  | 208 | /* | 
|  | 209 | * There is no need to export this but sched.h declares the function as | 
|  | 210 | * extern so making it static here results in an error. | 
|  | 211 | */ | 
|  | 212 | unsigned long arch_get_unmapped_area_topdown(struct file *filp, | 
|  | 213 | unsigned long addr0, unsigned long len, unsigned long pgoff, | 
|  | 214 | unsigned long flags) | 
|  | 215 | { | 
|  | 216 | return arch_get_unmapped_area_foo(filp, | 
|  | 217 | addr0, len, pgoff, flags, DOWN); | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 218 | } | 
|  | 219 |  | 
|  | 220 | void arch_pick_mmap_layout(struct mm_struct *mm) | 
|  | 221 | { | 
|  | 222 | unsigned long random_factor = 0UL; | 
|  | 223 |  | 
|  | 224 | if (current->flags & PF_RANDOMIZE) { | 
|  | 225 | random_factor = get_random_int(); | 
|  | 226 | random_factor = random_factor << PAGE_SHIFT; | 
|  | 227 | if (TASK_IS_32BIT_ADDR) | 
|  | 228 | random_factor &= 0xfffffful; | 
|  | 229 | else | 
|  | 230 | random_factor &= 0xffffffful; | 
|  | 231 | } | 
|  | 232 |  | 
| Jian Peng | d0be89f | 2011-05-17 12:27:49 -0700 | [diff] [blame] | 233 | if (mmap_is_legacy()) { | 
|  | 234 | mm->mmap_base = TASK_UNMAPPED_BASE + random_factor; | 
|  | 235 | mm->get_unmapped_area = arch_get_unmapped_area; | 
|  | 236 | mm->unmap_area = arch_unmap_area; | 
|  | 237 | } else { | 
|  | 238 | mm->mmap_base = mmap_base(random_factor); | 
|  | 239 | mm->get_unmapped_area = arch_get_unmapped_area_topdown; | 
|  | 240 | mm->unmap_area = arch_unmap_area_topdown; | 
|  | 241 | } | 
| Ralf Baechle | 6f6c3c3 | 2011-05-19 09:21:33 +0100 | [diff] [blame] | 242 | } | 
|  | 243 |  | 
|  | 244 | static inline unsigned long brk_rnd(void) | 
|  | 245 | { | 
|  | 246 | unsigned long rnd = get_random_int(); | 
|  | 247 |  | 
|  | 248 | rnd = rnd << PAGE_SHIFT; | 
|  | 249 | /* 8MB for 32bit, 256MB for 64bit */ | 
|  | 250 | if (TASK_IS_32BIT_ADDR) | 
|  | 251 | rnd = rnd & 0x7ffffful; | 
|  | 252 | else | 
|  | 253 | rnd = rnd & 0xffffffful; | 
|  | 254 |  | 
|  | 255 | return rnd; | 
|  | 256 | } | 
|  | 257 |  | 
|  | 258 | unsigned long arch_randomize_brk(struct mm_struct *mm) | 
|  | 259 | { | 
|  | 260 | unsigned long base = mm->brk; | 
|  | 261 | unsigned long ret; | 
|  | 262 |  | 
|  | 263 | ret = PAGE_ALIGN(base + brk_rnd()); | 
|  | 264 |  | 
|  | 265 | if (ret < mm->brk) | 
|  | 266 | return mm->brk; | 
|  | 267 |  | 
|  | 268 | return ret; | 
|  | 269 | } |