From patchwork Thu May 3 13:20:24 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Mark Rutland X-Patchwork-Id: 134894 Delivered-To: patch@linaro.org Received: by 10.46.151.6 with SMTP id r6csp1920140lji; Thu, 3 May 2018 06:20:52 -0700 (PDT) X-Google-Smtp-Source: AB8JxZoRUq+W8H/eqaVPdvle2YUrM+oD59gaq438xEsQeTI++2sfsH/fiYy8xrozhk2OOT6+QU4Y X-Received: by 2002:a17:902:8e8b:: with SMTP id bg11-v6mr20787773plb.95.1525353652581; Thu, 03 May 2018 06:20:52 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1525353652; cv=none; d=google.com; s=arc-20160816; b=Bdwa+j+ISu7w0eloKYW0JM2q1P1VMb3Znif9/YH41Si2XAuoU1MfRe0qfgTtay0h3V M74ziTC4bQjX4UKgPgAPIvNUQc7N2EMcm3uvoU1h7MptR/yGu8XfE+XvTwB17lUOP2gb BT2Xz+tc9CwFijrsUbgwQwX6taoxVuqwsARWd7s9xmiry+0W/p8a0qX8CEvSkfwamYWJ 2lfek5nuPsgqBA8OyBF2mJIZmg9k1weDmNcTw18XLmp+bI3P43lb73N3V/ipxDrLJ6ij p6NXJtT6DsbeH17uPclYHfSHtNIigFu0/dlVa24NsKmTVBz9PBIPVMFt1SxHAxX3bbh3 BZkA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:references:in-reply-to:message-id:date :subject:cc:to:from:arc-authentication-results; bh=Lv5HJWC5t9ju06g1hqftYmvrOAa26eRDTMn0b9sqL+U=; b=hMYLTg/X0tgShURZzRaRrzz+zPyXEe9ZDPkJei5LvWBM1ltGQCXrdeR+yDctvC1G1E sxYX4Sseo71v6q5CZLHYwkNYQzMkp3+utG/823nt2e3V+JndEQFsKS8ZuN27GfnmKpeU ThDSZMhWt/8sAyPf76/XEIhXVl6XnGVCVlcaTqFhk8cpy3XHswCL2AhVwRB1qukB22QD xCvMofhbpiRfNbeKPgHEhG02EoXHchNTONnL9Z42IX868ngU6SaT3VOkzVIMZUyNhWfK iW7AQ5j2ESuCbocyqQrzRFDaq6rBjdw3grdYMAx1A/X5QIVIe07xGdWlwpNSzccrDayJ 5QCg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id i12-v6si11317190pgr.256.2018.05.03.06.20.52; Thu, 03 May 2018 06:20:52 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751443AbeECNUu (ORCPT + 29 others); Thu, 3 May 2018 09:20:50 -0400 Received: from usa-sjc-mx-foss1.foss.arm.com ([217.140.101.70]:41596 "EHLO foss.arm.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750922AbeECNUr (ORCPT ); Thu, 3 May 2018 09:20:47 -0400 Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.72.51.249]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 377A81650; Thu, 3 May 2018 06:20:47 -0700 (PDT) Received: from lakrids.cambridge.arm.com (usa-sjc-imap-foss1.foss.arm.com [10.72.51.249]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPA id 266BE3F487; Thu, 3 May 2018 06:20:45 -0700 (PDT) From: Mark Rutland To: linux-arm-kernel@lists.infradead.org Cc: linux-kernel@vger.kernel.org, kvmarm@lists.cs.columbia.edu, catalin.marinas@arm.com, christoffer.dall@arm.com, drjones@redhat.com, marc.zyngier@arm.com, mark.rutland@arm.com, ramana.radhakrishnan@arm.com, suzuki.poulose@arm.com, will.deacon@arm.com, awallis@codeaurora.org Subject: [PATCHv4 03/10] arm64/kvm: hide ptrauth from guests Date: Thu, 3 May 2018 14:20:24 +0100 Message-Id: <20180503132031.25705-4-mark.rutland@arm.com> X-Mailer: git-send-email 2.11.0 In-Reply-To: <20180503132031.25705-1-mark.rutland@arm.com> References: <20180503132031.25705-1-mark.rutland@arm.com> Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org In subsequent patches we're going to expose ptrauth to the host kernel and userspace, but things are a bit trickier for guest kernels. For the time being, let's hide ptrauth from KVM guests. Regardless of how well-behaved the guest kernel is, guest userspace could attempt to use ptrauth instructions, triggering a trap to EL2, resulting in noise from kvm_handle_unknown_ec(). So let's write up a handler for the PAC trap, which silently injects an UNDEF into the guest, as if the feature were really missing. Signed-off-by: Mark Rutland Reviewed-by: Andrew Jones Reviewed-by: Christoffer Dall Cc: Marc Zyngier Cc: kvmarm@lists.cs.columbia.edu --- arch/arm64/kvm/handle_exit.c | 18 ++++++++++++++++++ arch/arm64/kvm/sys_regs.c | 8 ++++++++ 2 files changed, 26 insertions(+) -- 2.11.0 diff --git a/arch/arm64/kvm/handle_exit.c b/arch/arm64/kvm/handle_exit.c index e5e741bfffe1..5114ad691eae 100644 --- a/arch/arm64/kvm/handle_exit.c +++ b/arch/arm64/kvm/handle_exit.c @@ -173,6 +173,23 @@ static int handle_sve(struct kvm_vcpu *vcpu, struct kvm_run *run) return 1; } +/* + * Guest usage of a ptrauth instruction (which the guest EL1 did not turn into + * a NOP), or guest EL1 access to a ptrauth register. + */ +static int kvm_handle_ptrauth(struct kvm_vcpu *vcpu, struct kvm_run *run) +{ + /* + * We don't currently suport ptrauth in a guest, and we mask the ID + * registers to prevent well-behaved guests from trying to make use of + * it. + * + * Inject an UNDEF, as if the feature really isn't present. + */ + kvm_inject_undefined(vcpu); + return 1; +} + static exit_handle_fn arm_exit_handlers[] = { [0 ... ESR_ELx_EC_MAX] = kvm_handle_unknown_ec, [ESR_ELx_EC_WFx] = kvm_handle_wfx, @@ -195,6 +212,7 @@ static exit_handle_fn arm_exit_handlers[] = { [ESR_ELx_EC_BKPT32] = kvm_handle_guest_debug, [ESR_ELx_EC_BRK64] = kvm_handle_guest_debug, [ESR_ELx_EC_FP_ASIMD] = handle_no_fpsimd, + [ESR_ELx_EC_PAC] = kvm_handle_ptrauth, }; static exit_handle_fn kvm_get_exit_handler(struct kvm_vcpu *vcpu) diff --git a/arch/arm64/kvm/sys_regs.c b/arch/arm64/kvm/sys_regs.c index 806b0b126a64..8b0dfc00bf5e 100644 --- a/arch/arm64/kvm/sys_regs.c +++ b/arch/arm64/kvm/sys_regs.c @@ -1000,6 +1000,14 @@ static u64 read_id_reg(struct sys_reg_desc const *r, bool raz) task_pid_nr(current)); val &= ~(0xfUL << ID_AA64PFR0_SVE_SHIFT); + } else if (id == SYS_ID_AA64ISAR1_EL1) { + const u64 ptrauth_mask = (0xfUL << ID_AA64ISAR1_APA_SHIFT) | + (0xfUL << ID_AA64ISAR1_API_SHIFT) | + (0xfUL << ID_AA64ISAR1_GPA_SHIFT) | + (0xfUL << ID_AA64ISAR1_GPI_SHIFT); + if (val & ptrauth_mask) + kvm_debug("ptrauth unsupported for guests, suppressing\n"); + val &= ~ptrauth_mask; } else if (id == SYS_ID_AA64MMFR1_EL1) { if (val & (0xfUL << ID_AA64MMFR1_LOR_SHIFT)) pr_err_once("kvm [%i]: LORegions unsupported for guests, suppressing\n",