cpu_errata.c 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479
  1. /*
  2. * Contains CPU specific errata definitions
  3. *
  4. * Copyright (C) 2014 ARM Ltd.
  5. *
  6. * This program is free software; you can redistribute it and/or modify
  7. * it under the terms of the GNU General Public License version 2 as
  8. * published by the Free Software Foundation.
  9. *
  10. * This program is distributed in the hope that it will be useful,
  11. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  13. * GNU General Public License for more details.
  14. *
  15. * You should have received a copy of the GNU General Public License
  16. * along with this program. If not, see <http://www.gnu.org/licenses/>.
  17. */
  18. #include <linux/types.h>
  19. #include <asm/cpu.h>
  20. #include <asm/cputype.h>
  21. #include <asm/cpufeature.h>
  22. static bool __maybe_unused
  23. is_affected_midr_range(const struct arm64_cpu_capabilities *entry, int scope)
  24. {
  25. const struct arm64_midr_revidr *fix;
  26. u32 midr = read_cpuid_id(), revidr;
  27. WARN_ON(scope != SCOPE_LOCAL_CPU || preemptible());
  28. if (!MIDR_IS_CPU_MODEL_RANGE(midr, entry->midr_model,
  29. entry->midr_range_min,
  30. entry->midr_range_max))
  31. return false;
  32. midr &= MIDR_REVISION_MASK | MIDR_VARIANT_MASK;
  33. revidr = read_cpuid(REVIDR_EL1);
  34. for (fix = entry->fixed_revs; fix && fix->revidr_mask; fix++)
  35. if (midr == fix->midr_rv && (revidr & fix->revidr_mask))
  36. return false;
  37. return true;
  38. }
  39. static bool __maybe_unused
  40. is_kryo_midr(const struct arm64_cpu_capabilities *entry, int scope)
  41. {
  42. u32 model;
  43. WARN_ON(scope != SCOPE_LOCAL_CPU || preemptible());
  44. model = read_cpuid_id();
  45. model &= MIDR_IMPLEMENTOR_MASK | (0xf00 << MIDR_PARTNUM_SHIFT) |
  46. MIDR_ARCHITECTURE_MASK;
  47. return model == entry->midr_model;
  48. }
  49. static bool
  50. has_mismatched_cache_line_size(const struct arm64_cpu_capabilities *entry,
  51. int scope)
  52. {
  53. WARN_ON(scope != SCOPE_LOCAL_CPU || preemptible());
  54. return (read_cpuid_cachetype() & arm64_ftr_reg_ctrel0.strict_mask) !=
  55. (arm64_ftr_reg_ctrel0.sys_val & arm64_ftr_reg_ctrel0.strict_mask);
  56. }
  57. static int cpu_enable_trap_ctr_access(void *__unused)
  58. {
  59. /* Clear SCTLR_EL1.UCT */
  60. config_sctlr_el1(SCTLR_EL1_UCT, 0);
  61. return 0;
  62. }
  63. #ifdef CONFIG_HARDEN_BRANCH_PREDICTOR
  64. #include <asm/mmu_context.h>
  65. #include <asm/cacheflush.h>
  66. DEFINE_PER_CPU_READ_MOSTLY(struct bp_hardening_data, bp_hardening_data);
  67. #ifdef CONFIG_KVM
  68. extern char __qcom_hyp_sanitize_link_stack_start[];
  69. extern char __qcom_hyp_sanitize_link_stack_end[];
  70. extern char __smccc_workaround_1_smc_start[];
  71. extern char __smccc_workaround_1_smc_end[];
  72. extern char __smccc_workaround_1_hvc_start[];
  73. extern char __smccc_workaround_1_hvc_end[];
  74. static void __copy_hyp_vect_bpi(int slot, const char *hyp_vecs_start,
  75. const char *hyp_vecs_end)
  76. {
  77. void *dst = lm_alias(__bp_harden_hyp_vecs_start + slot * SZ_2K);
  78. int i;
  79. for (i = 0; i < SZ_2K; i += 0x80)
  80. memcpy(dst + i, hyp_vecs_start, hyp_vecs_end - hyp_vecs_start);
  81. flush_icache_range((uintptr_t)dst, (uintptr_t)dst + SZ_2K);
  82. }
  83. static void __install_bp_hardening_cb(bp_hardening_cb_t fn,
  84. const char *hyp_vecs_start,
  85. const char *hyp_vecs_end)
  86. {
  87. static int last_slot = -1;
  88. static DEFINE_SPINLOCK(bp_lock);
  89. int cpu, slot = -1;
  90. spin_lock(&bp_lock);
  91. for_each_possible_cpu(cpu) {
  92. if (per_cpu(bp_hardening_data.fn, cpu) == fn) {
  93. slot = per_cpu(bp_hardening_data.hyp_vectors_slot, cpu);
  94. break;
  95. }
  96. }
  97. if (slot == -1) {
  98. last_slot++;
  99. BUG_ON(((__bp_harden_hyp_vecs_end - __bp_harden_hyp_vecs_start)
  100. / SZ_2K) <= last_slot);
  101. slot = last_slot;
  102. __copy_hyp_vect_bpi(slot, hyp_vecs_start, hyp_vecs_end);
  103. }
  104. __this_cpu_write(bp_hardening_data.hyp_vectors_slot, slot);
  105. __this_cpu_write(bp_hardening_data.fn, fn);
  106. spin_unlock(&bp_lock);
  107. }
  108. #else
  109. #define __qcom_hyp_sanitize_link_stack_start NULL
  110. #define __qcom_hyp_sanitize_link_stack_end NULL
  111. #define __smccc_workaround_1_smc_start NULL
  112. #define __smccc_workaround_1_smc_end NULL
  113. #define __smccc_workaround_1_hvc_start NULL
  114. #define __smccc_workaround_1_hvc_end NULL
  115. static void __install_bp_hardening_cb(bp_hardening_cb_t fn,
  116. const char *hyp_vecs_start,
  117. const char *hyp_vecs_end)
  118. {
  119. __this_cpu_write(bp_hardening_data.fn, fn);
  120. }
  121. #endif /* CONFIG_KVM */
  122. static void install_bp_hardening_cb(const struct arm64_cpu_capabilities *entry,
  123. bp_hardening_cb_t fn,
  124. const char *hyp_vecs_start,
  125. const char *hyp_vecs_end)
  126. {
  127. u64 pfr0;
  128. if (!entry->matches(entry, SCOPE_LOCAL_CPU))
  129. return;
  130. pfr0 = read_cpuid(ID_AA64PFR0_EL1);
  131. if (cpuid_feature_extract_unsigned_field(pfr0, ID_AA64PFR0_CSV2_SHIFT))
  132. return;
  133. __install_bp_hardening_cb(fn, hyp_vecs_start, hyp_vecs_end);
  134. }
  135. #include <uapi/linux/psci.h>
  136. #include <linux/arm-smccc.h>
  137. #include <linux/psci.h>
  138. static void call_smc_arch_workaround_1(void)
  139. {
  140. arm_smccc_1_1_smc(ARM_SMCCC_ARCH_WORKAROUND_1, NULL);
  141. }
  142. static void call_hvc_arch_workaround_1(void)
  143. {
  144. arm_smccc_1_1_hvc(ARM_SMCCC_ARCH_WORKAROUND_1, NULL);
  145. }
  146. static int enable_smccc_arch_workaround_1(void *data)
  147. {
  148. const struct arm64_cpu_capabilities *entry = data;
  149. bp_hardening_cb_t cb;
  150. void *smccc_start, *smccc_end;
  151. struct arm_smccc_res res;
  152. if (!entry->matches(entry, SCOPE_LOCAL_CPU))
  153. return 0;
  154. if (psci_ops.smccc_version == SMCCC_VERSION_1_0)
  155. return 0;
  156. switch (psci_ops.conduit) {
  157. case PSCI_CONDUIT_HVC:
  158. arm_smccc_1_1_hvc(ARM_SMCCC_ARCH_FEATURES_FUNC_ID,
  159. ARM_SMCCC_ARCH_WORKAROUND_1, &res);
  160. if (res.a0)
  161. return 0;
  162. cb = call_hvc_arch_workaround_1;
  163. smccc_start = __smccc_workaround_1_hvc_start;
  164. smccc_end = __smccc_workaround_1_hvc_end;
  165. break;
  166. case PSCI_CONDUIT_SMC:
  167. arm_smccc_1_1_smc(ARM_SMCCC_ARCH_FEATURES_FUNC_ID,
  168. ARM_SMCCC_ARCH_WORKAROUND_1, &res);
  169. if (res.a0)
  170. return 0;
  171. cb = call_smc_arch_workaround_1;
  172. smccc_start = __smccc_workaround_1_smc_start;
  173. smccc_end = __smccc_workaround_1_smc_end;
  174. break;
  175. default:
  176. return 0;
  177. }
  178. install_bp_hardening_cb(entry, cb, smccc_start, smccc_end);
  179. return 0;
  180. }
  181. static void qcom_link_stack_sanitization(void)
  182. {
  183. u64 tmp;
  184. asm volatile("mov %0, x30 \n"
  185. ".rept 16 \n"
  186. "bl . + 4 \n"
  187. ".endr \n"
  188. "mov x30, %0 \n"
  189. : "=&r" (tmp));
  190. }
  191. static int qcom_enable_link_stack_sanitization(void *data)
  192. {
  193. const struct arm64_cpu_capabilities *entry = data;
  194. install_bp_hardening_cb(entry, qcom_link_stack_sanitization,
  195. __qcom_hyp_sanitize_link_stack_start,
  196. __qcom_hyp_sanitize_link_stack_end);
  197. return 0;
  198. }
  199. #endif /* CONFIG_HARDEN_BRANCH_PREDICTOR */
  200. #define MIDR_RANGE(model, min, max) \
  201. .def_scope = SCOPE_LOCAL_CPU, \
  202. .matches = is_affected_midr_range, \
  203. .midr_model = model, \
  204. .midr_range_min = min, \
  205. .midr_range_max = max
  206. #define MIDR_ALL_VERSIONS(model) \
  207. .def_scope = SCOPE_LOCAL_CPU, \
  208. .matches = is_affected_midr_range, \
  209. .midr_model = model, \
  210. .midr_range_min = 0, \
  211. .midr_range_max = (MIDR_VARIANT_MASK | MIDR_REVISION_MASK)
  212. #define MIDR_FIXED(rev, revidr_mask) \
  213. .fixed_revs = (struct arm64_midr_revidr[]){{ (rev), (revidr_mask) }, {}}
  214. const struct arm64_cpu_capabilities arm64_errata[] = {
  215. #if defined(CONFIG_ARM64_ERRATUM_826319) || \
  216. defined(CONFIG_ARM64_ERRATUM_827319) || \
  217. defined(CONFIG_ARM64_ERRATUM_824069)
  218. {
  219. /* Cortex-A53 r0p[012] */
  220. .desc = "ARM errata 826319, 827319, 824069",
  221. .capability = ARM64_WORKAROUND_CLEAN_CACHE,
  222. MIDR_RANGE(MIDR_CORTEX_A53, 0x00, 0x02),
  223. .enable = cpu_enable_cache_maint_trap,
  224. },
  225. #endif
  226. #ifdef CONFIG_ARM64_ERRATUM_819472
  227. {
  228. /* Cortex-A53 r0p[01] */
  229. .desc = "ARM errata 819472",
  230. .capability = ARM64_WORKAROUND_CLEAN_CACHE,
  231. MIDR_RANGE(MIDR_CORTEX_A53, 0x00, 0x01),
  232. .enable = cpu_enable_cache_maint_trap,
  233. },
  234. #endif
  235. #ifdef CONFIG_ARM64_ERRATUM_832075
  236. {
  237. /* Cortex-A57 r0p0 - r1p2 */
  238. .desc = "ARM erratum 832075",
  239. .capability = ARM64_WORKAROUND_DEVICE_LOAD_ACQUIRE,
  240. MIDR_RANGE(MIDR_CORTEX_A57,
  241. MIDR_CPU_VAR_REV(0, 0),
  242. MIDR_CPU_VAR_REV(1, 2)),
  243. },
  244. #endif
  245. #ifdef CONFIG_ARM64_ERRATUM_834220
  246. {
  247. /* Cortex-A57 r0p0 - r1p2 */
  248. .desc = "ARM erratum 834220",
  249. .capability = ARM64_WORKAROUND_834220,
  250. MIDR_RANGE(MIDR_CORTEX_A57,
  251. MIDR_CPU_VAR_REV(0, 0),
  252. MIDR_CPU_VAR_REV(1, 2)),
  253. },
  254. #endif
  255. #ifdef CONFIG_ARM64_ERRATUM_845719
  256. {
  257. /* Cortex-A53 r0p[01234] */
  258. .desc = "ARM erratum 845719",
  259. .capability = ARM64_WORKAROUND_845719,
  260. MIDR_RANGE(MIDR_CORTEX_A53, 0x00, 0x04),
  261. },
  262. #endif
  263. #ifdef CONFIG_CAVIUM_ERRATUM_23154
  264. {
  265. /* Cavium ThunderX, pass 1.x */
  266. .desc = "Cavium erratum 23154",
  267. .capability = ARM64_WORKAROUND_CAVIUM_23154,
  268. MIDR_RANGE(MIDR_THUNDERX, 0x00, 0x01),
  269. },
  270. #endif
  271. #ifdef CONFIG_CAVIUM_ERRATUM_27456
  272. {
  273. /* Cavium ThunderX, T88 pass 1.x - 2.1 */
  274. .desc = "Cavium erratum 27456",
  275. .capability = ARM64_WORKAROUND_CAVIUM_27456,
  276. MIDR_RANGE(MIDR_THUNDERX,
  277. MIDR_CPU_VAR_REV(0, 0),
  278. MIDR_CPU_VAR_REV(1, 1)),
  279. },
  280. {
  281. /* Cavium ThunderX, T81 pass 1.0 */
  282. .desc = "Cavium erratum 27456",
  283. .capability = ARM64_WORKAROUND_CAVIUM_27456,
  284. MIDR_RANGE(MIDR_THUNDERX_81XX, 0x00, 0x00),
  285. },
  286. #endif
  287. #ifdef CONFIG_CAVIUM_ERRATUM_30115
  288. {
  289. /* Cavium ThunderX, T88 pass 1.x - 2.2 */
  290. .desc = "Cavium erratum 30115",
  291. .capability = ARM64_WORKAROUND_CAVIUM_30115,
  292. MIDR_RANGE(MIDR_THUNDERX, 0x00,
  293. (1 << MIDR_VARIANT_SHIFT) | 2),
  294. },
  295. {
  296. /* Cavium ThunderX, T81 pass 1.0 - 1.2 */
  297. .desc = "Cavium erratum 30115",
  298. .capability = ARM64_WORKAROUND_CAVIUM_30115,
  299. MIDR_RANGE(MIDR_THUNDERX_81XX, 0x00, 0x02),
  300. },
  301. {
  302. /* Cavium ThunderX, T83 pass 1.0 */
  303. .desc = "Cavium erratum 30115",
  304. .capability = ARM64_WORKAROUND_CAVIUM_30115,
  305. MIDR_RANGE(MIDR_THUNDERX_83XX, 0x00, 0x00),
  306. },
  307. #endif
  308. {
  309. .desc = "Mismatched cache line size",
  310. .capability = ARM64_MISMATCHED_CACHE_LINE_SIZE,
  311. .matches = has_mismatched_cache_line_size,
  312. .def_scope = SCOPE_LOCAL_CPU,
  313. .enable = cpu_enable_trap_ctr_access,
  314. },
  315. #ifdef CONFIG_QCOM_FALKOR_ERRATUM_1003
  316. {
  317. .desc = "Qualcomm Technologies Falkor erratum 1003",
  318. .capability = ARM64_WORKAROUND_QCOM_FALKOR_E1003,
  319. MIDR_RANGE(MIDR_QCOM_FALKOR_V1,
  320. MIDR_CPU_VAR_REV(0, 0),
  321. MIDR_CPU_VAR_REV(0, 0)),
  322. },
  323. {
  324. .desc = "Qualcomm Technologies Kryo erratum 1003",
  325. .capability = ARM64_WORKAROUND_QCOM_FALKOR_E1003,
  326. .def_scope = SCOPE_LOCAL_CPU,
  327. .midr_model = MIDR_QCOM_KRYO,
  328. .matches = is_kryo_midr,
  329. },
  330. #endif
  331. #ifdef CONFIG_QCOM_FALKOR_ERRATUM_1009
  332. {
  333. .desc = "Qualcomm Technologies Falkor erratum 1009",
  334. .capability = ARM64_WORKAROUND_REPEAT_TLBI,
  335. MIDR_RANGE(MIDR_QCOM_FALKOR_V1,
  336. MIDR_CPU_VAR_REV(0, 0),
  337. MIDR_CPU_VAR_REV(0, 0)),
  338. },
  339. #endif
  340. #ifdef CONFIG_ARM64_ERRATUM_858921
  341. {
  342. /* Cortex-A73 all versions */
  343. .desc = "ARM erratum 858921",
  344. .capability = ARM64_WORKAROUND_858921,
  345. MIDR_ALL_VERSIONS(MIDR_CORTEX_A73),
  346. },
  347. #endif
  348. #ifdef CONFIG_HARDEN_BRANCH_PREDICTOR
  349. {
  350. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  351. MIDR_ALL_VERSIONS(MIDR_CORTEX_A57),
  352. .enable = enable_smccc_arch_workaround_1,
  353. },
  354. {
  355. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  356. MIDR_ALL_VERSIONS(MIDR_CORTEX_A72),
  357. .enable = enable_smccc_arch_workaround_1,
  358. },
  359. {
  360. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  361. MIDR_ALL_VERSIONS(MIDR_CORTEX_A73),
  362. .enable = enable_smccc_arch_workaround_1,
  363. },
  364. {
  365. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  366. MIDR_ALL_VERSIONS(MIDR_CORTEX_A75),
  367. .enable = enable_smccc_arch_workaround_1,
  368. },
  369. {
  370. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  371. MIDR_ALL_VERSIONS(MIDR_QCOM_FALKOR_V1),
  372. .enable = qcom_enable_link_stack_sanitization,
  373. },
  374. {
  375. .capability = ARM64_HARDEN_BP_POST_GUEST_EXIT,
  376. MIDR_ALL_VERSIONS(MIDR_QCOM_FALKOR_V1),
  377. },
  378. {
  379. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  380. MIDR_ALL_VERSIONS(MIDR_QCOM_FALKOR),
  381. .enable = qcom_enable_link_stack_sanitization,
  382. },
  383. {
  384. .capability = ARM64_HARDEN_BP_POST_GUEST_EXIT,
  385. MIDR_ALL_VERSIONS(MIDR_QCOM_FALKOR),
  386. },
  387. {
  388. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  389. MIDR_ALL_VERSIONS(MIDR_BRCM_VULCAN),
  390. .enable = enable_smccc_arch_workaround_1,
  391. },
  392. {
  393. .capability = ARM64_HARDEN_BRANCH_PREDICTOR,
  394. MIDR_ALL_VERSIONS(MIDR_CAVIUM_THUNDERX2),
  395. .enable = enable_smccc_arch_workaround_1,
  396. },
  397. #endif
  398. {
  399. }
  400. };
  401. /*
  402. * The CPU Errata work arounds are detected and applied at boot time
  403. * and the related information is freed soon after. If the new CPU requires
  404. * an errata not detected at boot, fail this CPU.
  405. */
  406. void verify_local_cpu_errata_workarounds(void)
  407. {
  408. const struct arm64_cpu_capabilities *caps = arm64_errata;
  409. for (; caps->matches; caps++) {
  410. if (cpus_have_cap(caps->capability)) {
  411. if (caps->enable)
  412. caps->enable((void *)caps);
  413. } else if (caps->matches(caps, SCOPE_LOCAL_CPU)) {
  414. pr_crit("CPU%d: Requires work around for %s, not detected"
  415. " at boot time\n",
  416. smp_processor_id(),
  417. caps->desc ? : "an erratum");
  418. cpu_die_early();
  419. }
  420. }
  421. }
  422. void update_cpu_errata_workarounds(void)
  423. {
  424. update_cpu_capabilities(arm64_errata, "enabling workaround for");
  425. }
  426. void __init enable_errata_workarounds(void)
  427. {
  428. enable_cpu_capabilities(arm64_errata);
  429. }