• Sandipan Das's avatar
    powerpc/sstep: Fix load-store and update emulation · bbda4b6c
    Sandipan Das authored
    The Power ISA says that the fixed-point load and update instructions
    must neither use R0 for the base address (RA) nor have the
    destination (RT) and the base address (RA) as the same register.
    Similarly, for fixed-point stores and floating-point loads and stores,
    the instruction is invalid when R0 is used as the base address (RA).
    
    This is applicable to the following instructions.
      * Load Byte and Zero with Update (lbzu)
      * Load Byte and Zero with Update Indexed (lbzux)
      * Load Halfword and Zero with Update (lhzu)
      * Load Halfword and Zero with Update Indexed (lhzux)
      * Load Halfword Algebraic with Update (lhau)
      * Load Halfword Algebraic with Update Indexed (lhaux)
      * Load Word and Zero with Update (lwzu)
      * Load Word and Zero with Update Indexed (lwzux)
      * Load Word Algebraic with Update Indexed (lwaux)
      * Load Doubleword with Update (ldu)
      * Load Doubleword with Update Indexed (ldux)
      * Load Floating Single with Update (lfsu)
      * Load Floating Single with Update Indexed (lfsux)
      * Load Floating Double with Update (lfdu)
      * Load Floating Double with Update Indexed (lfdux)
      * Store Byte with Update (stbu)
      * Store Byte with Update Indexed (stbux)
      * Store Halfword with Update (sthu)
      * Store Halfword with Update Indexed (sthux)
      * Store Word with Update (stwu)
      * Store Word with Update Indexed (stwux)
      * Store Doubleword with Update (stdu)
      * Store Doubleword with Update Indexed (stdux)
      * Store Floating Single with Update (stfsu)
      * Store Floating Single with Update Indexed (stfsux)
      * Store Floating Double with Update (stfdu)
      * Store Floating Double with Update Indexed (stfdux)
    
    E.g. the following behaviour is observed for an invalid load and
    update instruction having RA = RT.
    
    While a userspace program having an instruction word like 0xe9ce0001,
    i.e. ldu r14, 0(r14), runs without getting receiving a SIGILL on a
    Power system (observed on P8 and P9), the outcome of executing that
    instruction word varies and its behaviour can be considered to be
    undefined.
    
    Attaching an uprobe at that instruction's address results in emulation
    which currently performs the load as well as writes the effective
    address back to the base register. This might not match the outcome
    from hardware.
    
    To remove any inconsistencies, this adds additional checks for the
    aforementioned instructions to make sure that the emulation
    infrastructure treats them as unknown. The kernel can then fallback to
    executing such instructions on hardware.
    
    Fixes: 0016a4cf ("powerpc: Emulate most Book I instructions in emulate_step()")
    Signed-off-by: default avatarSandipan Das <sandipan@linux.ibm.com>
    Reviewed-by: default avatarNaveen N. Rao <naveen.n.rao@linux.vnet.ibm.com>
    Signed-off-by: default avatarMichael Ellerman <mpe@ellerman.id.au>
    Link: https://lore.kernel.org/r/20210204080744.135785-1-sandipan@linux.ibm.com
    bbda4b6c
sstep.c 80.2 KB