cpu_errata.c 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479
  1. /*
  2. * Contains CPU specific errata definitions
  3. *
  4. * Copyright (C) 2014 ARM Ltd.
  5. *
  6. * This program is free software; you can redistribute it and/or modify
  7. * it under the terms of the GNU General Public License version 2 as
  8. * published by the Free Software Foundation.
  9. *
  10. * This program is distributed in the hope that it will be useful,
  11. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  13. * GNU General Public License for more details.
  14. *
  15. * You should have received a copy of the GNU General Public License
  16. * along with this program. If not, see <http://www.gnu.org/licenses/>.
  17. */
  18. #include <linux/types.h>
  19. #include <asm/cpu.h>
  20. #include <asm/cputype.h>
  21. #include <asm/cpufeature.h>
  22. static bool __maybe_unused
  23. is_affected_midr_range(const struct arm64_cpu_capabilities *entry, int scope)
  24. {
  25. WARN_ON(scope != SCOPE_LOCAL_CPU || preemptible());
  26. return MIDR_IS_CPU_MODEL_RANGE(read_cpuid_id(), entry->midr_model,
  27. entry->midr_range_min,
  28. entry->midr_range_max);
  29. }
  30. static bool __maybe_unused
  31. is_kryo_midr(const struct arm64_cpu_capabilities *entry, int scope)
  32. {
  33. u32 model;
  34. WARN_ON(scope != SCOPE_LOCAL_CPU || preemptible());
  35. model = read_cpuid_id();
  36. model &= MIDR_IMPLEMENTOR_MASK | (0xf00 << MIDR_PARTNUM_SHIFT) |
  37. MIDR_ARCHITECTURE_MASK;
  38. return model == entry->midr_model;
  39. }
  40. static bool
  41. has_mismatched_cache_line_size(const struct arm64_cpu_capabilities *entry,
  42. int scope)
  43. {
  44. WARN_ON(scope != SCOPE_LOCAL_CPU || preemptible());
  45. return (read_cpuid_cachetype() & arm64_ftr_reg_ctrel0.strict_mask) !=
  46. (arm64_ftr_reg_ctrel0.sys_val & arm64_ftr_reg_ctrel0.strict_mask);
  47. }
  48. static int cpu_enable_trap_ctr_access(void *__unused)
  49. {
  50. /* Clear SCTLR_EL1.UCT */
  51. config_sctlr_el1(SCTLR_EL1_UCT, 0);
  52. return 0;
  53. }
  54. atomic_t arm64_el2_vector_last_slot = ATOMIC_INIT(-1);
  55. #ifdef CONFIG_HARDEN_BRANCH_PREDICTOR
  56. #include <asm/mmu_context.h>
  57. #include <asm/cacheflush.h>
  58. DEFINE_PER_CPU_READ_MOSTLY(struct bp_hardening_data, bp_hardening_data);
  59. #ifdef CONFIG_KVM
  60. extern char __qcom_hyp_sanitize_link_stack_start[];
  61. extern char __qcom_hyp_sanitize_link_stack_end[];
  62. extern char __smccc_workaround_1_smc_start[];
  63. extern char __smccc_workaround_1_smc_end[];
  64. extern char __smccc_workaround_1_hvc_start[];
  65. extern char __smccc_workaround_1_hvc_end[];
  66. static void __copy_hyp_vect_bpi(int slot, const char *hyp_vecs_start,
  67. const char *hyp_vecs_end)
  68. {
  69. void *dst = lm_alias(__bp_harden_hyp_vecs_start + slot * SZ_2K);
  70. int i;
  71. for (i = 0; i < SZ_2K; i += 0x80)
  72. memcpy(dst + i, hyp_vecs_start, hyp_vecs_end - hyp_vecs_start);
  73. flush_icache_range((uintptr_t)dst, (uintptr_t)dst + SZ_2K);
  74. }
  75. static void __install_bp_hardening_cb(bp_hardening_cb_t fn,
  76. const char *hyp_vecs_start,
  77. const char *hyp_vecs_end)
  78. {
  79. static DEFINE_SPINLOCK(bp_lock);
  80. int cpu, slot = -1;
  81. spin_lock(&bp_lock);
  82. for_each_possible_cpu(cpu) {
  83. if (per_cpu(bp_hardening_data.fn, cpu) == fn) {
  84. slot = per_cpu(bp_hardening_data.hyp_vectors_slot, cpu);
  85. break;
  86. }
  87. }
  88. if (slot == -1) {
  89. slot = atomic_inc_return(&arm64_el2_vector_last_slot);
  90. BUG_ON(slot >= BP_HARDEN_EL2_SLOTS);
  91. __copy_hyp_vect_bpi(slot, hyp_vecs_start, hyp_vecs_end);
  92. }
  93. __this_cpu_write(bp_hardening_data.hyp_vectors_slot, slot);
  94. __this_cpu_write(bp_hardening_data.fn, fn);
  95. spin_unlock(&bp_lock);
  96. }
  97. #else
  98. #define __qcom_hyp_sanitize_link_stack_start NULL
  99. #define __qcom_hyp_sanitize_link_stack_end NULL
  100. #define __smccc_workaround_1_smc_start NULL
  101. #define __smccc_workaround_1_smc_end NULL
  102. #define __smccc_workaround_1_hvc_start NULL
  103. #define __smccc_workaround_1_hvc_end NULL
  104. static void __install_bp_hardening_cb(bp_hardening_cb_t fn,
  105. const char *hyp_vecs_start,
  106. const char *hyp_vecs_end)
  107. {
  108. __this_cpu_write(bp_hardening_data.fn, fn);
  109. }
  110. #endif /* CONFIG_KVM */
  111. static void install_bp_hardening_cb(const struct arm64_cpu_capabilities *entry,
  112. bp_hardening_cb_t fn,
  113. const char *hyp_vecs_start,
  114. const char *hyp_vecs_end)
  115. {
  116. u64 pfr0;
  117. if (!entry->matches(entry, SCOPE_LOCAL_CPU))
  118. return;
  119. pfr0 = read_cpuid(ID_AA64PFR0_EL1);
  120. if (cpuid_feature_extract_unsigned_field(pfr0, ID_AA64PFR0_CSV2_SHIFT))
  121. return;
  122. __install_bp_hardening_cb(fn, hyp_vecs_start, hyp_vecs_end);
  123. }
  124. #include <uapi/linux/psci.h>
  125. #include <linux/arm-smccc.h>
  126. #include <linux/psci.h>
  127. static void call_smc_arch_workaround_1(void)
  128. {
  129. arm_smccc_1_1_smc(ARM_SMCCC_ARCH_WORKAROUND_1, NULL);
  130. }
  131. static void call_hvc_arch_workaround_1(void)
  132. {
  133. arm_smccc_1_1_hvc(ARM_SMCCC_ARCH_WORKAROUND_1, NULL);
  134. }
  135. static int enable_smccc_arch_workaround_1(void *data)
  136. {
  137. const struct arm64_cpu_capabilities *entry = data;
  138. bp_hardening_cb_t cb;
  139. void *smccc_start, *smccc_end;
  140. struct arm_smccc_res res;
  141. if (!entry->matches(entry, SCOPE_LOCAL_CPU))
  142. return 0;
  143. if (psci_ops.smccc_version == SMCCC_VERSION_1_0)
  144. return 0;
  145. switch (psci_ops.conduit) {
  146. case PSCI_CONDUIT_HVC:
  147. arm_smccc_1_1_hvc(ARM_SMCCC_ARCH_FEATURES_FUNC_ID,
  148. ARM_SMCCC_ARCH_WORKAROUND_1, &res);
  149. if (res.a0)
  150. return 0;
  151. cb = call_hvc_arch_workaround_1;
  152. smccc_start = __smccc_workaround_1_hvc_start;
  153. smccc_end = __smccc_workaround_1_hvc_end;
  154. break;
  155. case PSCI_CONDUIT_SMC:
  156. arm_smccc_1_1_smc(ARM_SMCCC_ARCH_FEATURES_FUNC_ID,
  157. ARM_SMCCC_ARCH_WORKAROUND_1, &res);
  158. if (res.a0)
  159. return 0;
  160. cb = call_smc_arch_workaround_1;
  161. smccc_start = __smccc_workaround_1_smc_start;
  162. smccc_end = __smccc_workaround_1_smc_end;
  163. break;
  164. default:
  165. return 0;
  166. }
  167. install_bp_hardening_cb(entry, cb, smccc_start, smccc_end);
  168. return 0;
  169. }
  170. static void qcom_link_stack_sanitization(void)
  171. {
  172. u64 tmp;
  173. asm volatile("mov %0, x30 \n"
  174. ".rept 16 \n"
  175. "bl . + 4 \n"
  176. ".endr \n"
  177. "mov x30, %0 \n"
  178. : "=&r" (tmp));
  179. }
  180. static int qcom_enable_link_stack_sanitization(void *data)
  181. {
  182. const struct arm64_cpu_capabilities *entry = data;
  183. install_bp_hardening_cb(entry, qcom_link_stack_sanitization,
  184. __qcom_hyp_sanitize_link_stack_start,
  185. __qcom_hyp_sanitize_link_stack_end);
  186. return 0;
  187. }
  188. #endif /* CONFIG_HARDEN_BRANCH_PREDICTOR */
  189. #define MIDR_RANGE(model, min, max) \
  190. .def_scope = SCOPE_LOCAL_CPU, \
  191. .matches = is_affected_midr_range, \
  192. .midr_model = model, \
  193. .midr_range_min = min, \
  194. .midr_range_max = max
  195. #define MIDR_ALL_VERSIONS(model) \
  196. .def_scope = SCOPE_LOCAL_CPU, \
  197. .matches = is_affected_midr_range, \
  198. .midr_model = model, \
  199. .midr_range_min = 0, \
  200. .midr_range_max = (MIDR_VARIANT_MASK | MIDR_REVISION_MASK)
  201. #ifndef ERRATA_MIDR_ALL_VERSIONS
  202. #define ERRATA_MIDR_ALL_VERSIONS(x) MIDR_ALL_VERSIONS(x)
  203. #endif
  204. const struct arm64_cpu_capabilities arm64_errata[] = {
  205. #if defined(CONFIG_ARM64_ERRATUM_826319) || \
  206. defined(CONFIG_ARM64_ERRATUM_827319) || \
  207. defined(CONFIG_ARM64_ERRATUM_824069)
  208. {
  209. /* Cortex-A53 r0p[012] */
  210. .desc = "ARM errata 826319, 827319, 824069",
  211. .capability = ARM64_WORKAROUND_CLEAN_CACHE,
  212. MIDR_RANGE(MIDR_CORTEX_A53, 0x00, 0x02),
  213. .enable = cpu_enable_cache_maint_trap,
  214. },
  215. #endif
  216. #ifdef CONFIG_ARM64_ERRATUM_819472
  217. {
  218. /* Cortex-A53 r0p[01] */
  219. .desc = "ARM errata 819472",
  220. .capability = ARM64_WORKAROUND_CLEAN_CACHE,
  221. MIDR_RANGE(MIDR_CORTEX_A53, 0x00, 0x01),
  222. .enable = cpu_enable_cache_maint_trap,
  223. },
  224. #endif
  225. #ifdef CONFIG_ARM64_ERRATUM_832075
  226. {
  227. /* Cortex-A57 r0p0 - r1p2 */
  228. .desc = "ARM erratum 832075",
  229. .capability = ARM64_WORKAROUND_DEVICE_LOAD_ACQUIRE,
  230. MIDR_RANGE(MIDR_CORTEX_A57,
  231. MIDR_CPU_VAR_REV(0, 0),
  232. MIDR_CPU_VAR_REV(1, 2)),
  233. },
  234. #endif
  235. #ifdef CONFIG_ARM64_ERRATUM_834220
  236. {
  237. /* Cortex-A57 r0p0 - r1p2 */
  238. .desc = "ARM erratum 834220",
  239. .capability = ARM64_WORKAROUND_834220,
  240. MIDR_RANGE(MIDR_CORTEX_A57,
  241. MIDR_CPU_VAR_REV(0, 0),
  242. MIDR_CPU_VAR_REV(1, 2)),
  243. },
  244. #endif
  245. #ifdef CONFIG_ARM64_ERRATUM_845719
  246. {
  247. /* Cortex-A53 r0p[01234] */
  248. .desc = "ARM erratum 845719",
  249. .capability = ARM64_WORKAROUND_845719,
  250. MIDR_RANGE(MIDR_CORTEX_A53, 0x00, 0x04),
  251. },
  252. #endif
  253. #ifdef CONFIG_CAVIUM_ERRATUM_23154
  254. {
  255. /* Cavium ThunderX, pass 1.x */
  256. .desc = "Cavium erratum 23154",
  257. .capability = ARM64_WORKAROUND_CAVIUM_23154,
  258. MIDR_RANGE(MIDR_THUNDERX, 0x00, 0x01),
  259. },
  260. #endif
  261. #ifdef CONFIG_CAVIUM_ERRATUM_27456
  262. {
  263. /* Cavium ThunderX, T88 pass 1.x - 2.1 */
  264. .desc = "Cavium erratum 27456",
  265. .capability = ARM64_WORKAROUND_CAVIUM_27456,
  266. MIDR_RANGE(MIDR_THUNDERX,
  267. MIDR_CPU_VAR_REV(0, 0),
  268. MIDR_CPU_VAR_REV(1, 1)),
  269. },
  270. {
  271. /* Cavium ThunderX, T81 pass 1.0 */
  272. .desc = "Cavium erratum 27456",
  273. .capability = ARM64_WORKAROUND_CAVIUM_27456,
  274. MIDR_RANGE(MIDR_THUNDERX_81XX, 0x00, 0x00),
  275. },
  276. #endif
  277. #ifdef CONFIG_CAVIUM_ERRATUM_30115
  278. {
  279. /* Cavium ThunderX, T88 pass 1.x - 2.2 */
  280. .desc = "Cavium erratum 30115",
  281. .capability = ARM64_WORKAROUND_CAVIUM_30115,
  282. MIDR_RANGE(MIDR_THUNDERX, 0x00,
  283. (1 << MIDR_VARIANT_SHIFT) | 2),
  284. },
  285. {
  286. /* Cavium ThunderX, T81 pass 1.0 - 1.2 */
  287. .desc = "Cavium erratum 30115",
  288. .capability = ARM64_WORKAROUND_CAVIUM_30115,
  289. MIDR_RANGE(MIDR_THUNDERX_81XX, 0x00, 0x02),
  290. },
  291. {
  292. /* Cavium ThunderX, T83 pass 1.0 */
  293. .desc = "Cavium erratum 30115",
  294. .capability = ARM64_WORKAROUND_CAVIUM_30115,
  295. MIDR_RANGE(MIDR_THUNDERX_83XX, 0x00, 0x00),
  296. },
  297. #endif
  298. {
  299. .desc = "Mismatched cache line size",
  300. .capability = ARM64_MISMATCHED_CACHE_LINE_SIZE,
  301. .matches = has_mismatched_cache_line_size,
  302. .def_scope = SCOPE_LOCAL_CPU,
  303. .enable = cpu_enable_trap_ctr_access,
  304. },
  305. #ifdef CONFIG_QCOM_FALKOR_ERRATUM_1003
  306. {
  307. .desc = "Qualcomm Technologies Falkor erratum 1003",
  308. .capability = ARM64_WORKAROUND_QCOM_FALKOR_E1003,
  309. MIDR_RANGE(MIDR_QCOM_FALKOR_V1,
  310. MIDR_CPU_VAR_REV(0, 0),
  311. MIDR_CPU_VAR_REV(0, 0)),
  312. },
  313. {
  314. .desc = "Qualcomm Technologies Kryo erratum 1003",
  315. .capability = ARM64_WORKAROUND_QCOM_FALKOR_E1003,
  316. .def_scope = SCOPE_LOCAL_CPU,
  317. .midr_model = MIDR_QCOM_KRYO,
  318. .matches = is_kryo_midr,
  319. },
  320. #endif
  321. #ifdef CONFIG_QCOM_FALKOR_ERRATUM_1009
  322. {
  323. .desc = "Qualcomm Technologies Falkor erratum 1009",
  324. .capability = ARM64_WORKAROUND_REPEAT_TLBI,
  325. MIDR_RANGE(MIDR_QCOM_FALKOR_V1,
  326. MIDR_CPU_VAR_REV(0, 0),
  327. MIDR_CPU_VAR_REV(0, 0)),
  328. },
  329. #endif
  330. #ifdef CONFIG_ARM64_ERRATUM_858921
  331. {
  332. /* Cortex-A73 all versions */
  333. .desc = "ARM erratum 858921",
  334. .capability = ARM64_WORKAROUND_858921,
  335. MIDR_ALL_VERSIONS(MIDR_CORTEX_A73),
  336. },
  337. #endif
  338. #ifdef CONFIG_HARDEN_BRANCH_PREDICTOR
  339. {
  340. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  341. MIDR_ALL_VERSIONS(MIDR_CORTEX_A57),
  342. .enable = enable_smccc_arch_workaround_1,
  343. },
  344. {
  345. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  346. MIDR_ALL_VERSIONS(MIDR_CORTEX_A72),
  347. .enable = enable_smccc_arch_workaround_1,
  348. },
  349. {
  350. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  351. MIDR_ALL_VERSIONS(MIDR_CORTEX_A73),
  352. .enable = enable_smccc_arch_workaround_1,
  353. },
  354. {
  355. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  356. MIDR_ALL_VERSIONS(MIDR_CORTEX_A75),
  357. .enable = enable_smccc_arch_workaround_1,
  358. },
  359. {
  360. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  361. MIDR_ALL_VERSIONS(MIDR_QCOM_FALKOR_V1),
  362. .enable = qcom_enable_link_stack_sanitization,
  363. },
  364. {
  365. .capability = ARM64_HARDEN_BP_POST_GUEST_EXIT,
  366. MIDR_ALL_VERSIONS(MIDR_QCOM_FALKOR_V1),
  367. },
  368. {
  369. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  370. MIDR_ALL_VERSIONS(MIDR_QCOM_FALKOR),
  371. .enable = qcom_enable_link_stack_sanitization,
  372. },
  373. {
  374. .capability = ARM64_HARDEN_BP_POST_GUEST_EXIT,
  375. MIDR_ALL_VERSIONS(MIDR_QCOM_FALKOR),
  376. },
  377. {
  378. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  379. MIDR_ALL_VERSIONS(MIDR_BRCM_VULCAN),
  380. .enable = enable_smccc_arch_workaround_1,
  381. },
  382. {
  383. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  384. MIDR_ALL_VERSIONS(MIDR_CAVIUM_THUNDERX2),
  385. .enable = enable_smccc_arch_workaround_1,
  386. },
  387. #endif
  388. #ifdef CONFIG_HARDEN_EL2_VECTORS
  389. {
  390. .desc = "Cortex-A57 EL2 vector hardening",
  391. .capability = ARM64_HARDEN_EL2_VECTORS,
  392. ERRATA_MIDR_ALL_VERSIONS(MIDR_CORTEX_A57),
  393. },
  394. {
  395. .desc = "Cortex-A72 EL2 vector hardening",
  396. .capability = ARM64_HARDEN_EL2_VECTORS,
  397. ERRATA_MIDR_ALL_VERSIONS(MIDR_CORTEX_A72),
  398. },
  399. #endif
  400. {
  401. }
  402. };
  403. /*
  404. * The CPU Errata work arounds are detected and applied at boot time
  405. * and the related information is freed soon after. If the new CPU requires
  406. * an errata not detected at boot, fail this CPU.
  407. */
  408. void verify_local_cpu_errata_workarounds(void)
  409. {
  410. const struct arm64_cpu_capabilities *caps = arm64_errata;
  411. for (; caps->matches; caps++) {
  412. if (cpus_have_cap(caps->capability)) {
  413. if (caps->enable)
  414. caps->enable((void *)caps);
  415. } else if (caps->matches(caps, SCOPE_LOCAL_CPU)) {
  416. pr_crit("CPU%d: Requires work around for %s, not detected"
  417. " at boot time\n",
  418. smp_processor_id(),
  419. caps->desc ? : "an erratum");
  420. cpu_die_early();
  421. }
  422. }
  423. }
  424. void update_cpu_errata_workarounds(void)
  425. {
  426. update_cpu_capabilities(arm64_errata, "enabling workaround for");
  427. }
  428. void __init enable_errata_workarounds(void)
  429. {
  430. enable_cpu_capabilities(arm64_errata);
  431. }