1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * Userfaultfd unit tests.
4  *
5  *  Copyright (C) 2015-2023  Red Hat, Inc.
6  */
7 
8 #include "uffd-common.h"
9 
10 #include "../../../../mm/gup_test.h"
11 
12 #ifdef __NR_userfaultfd
13 
14 /* The unit test doesn't need a large or random size, make it 32MB for now */
15 #define  UFFD_TEST_MEM_SIZE               (32UL << 20)
16 
17 #define  MEM_ANON                         BIT_ULL(0)
18 #define  MEM_SHMEM                        BIT_ULL(1)
19 #define  MEM_SHMEM_PRIVATE                BIT_ULL(2)
20 #define  MEM_HUGETLB                      BIT_ULL(3)
21 #define  MEM_HUGETLB_PRIVATE              BIT_ULL(4)
22 
23 #define  MEM_ALL  (MEM_ANON | MEM_SHMEM | MEM_SHMEM_PRIVATE | \
24 		   MEM_HUGETLB | MEM_HUGETLB_PRIVATE)
25 
26 #define ALIGN_UP(x, align_to) \
27 	((__typeof__(x))((((unsigned long)(x)) + ((align_to)-1)) & ~((align_to)-1)))
28 
29 #define MAX(a, b) (((a) > (b)) ? (a) : (b))
30 
31 struct mem_type {
32 	const char *name;
33 	unsigned int mem_flag;
34 	uffd_test_ops_t *mem_ops;
35 	bool shared;
36 };
37 typedef struct mem_type mem_type_t;
38 
39 mem_type_t mem_types[] = {
40 	{
41 		.name = "anon",
42 		.mem_flag = MEM_ANON,
43 		.mem_ops = &anon_uffd_test_ops,
44 		.shared = false,
45 	},
46 	{
47 		.name = "shmem",
48 		.mem_flag = MEM_SHMEM,
49 		.mem_ops = &shmem_uffd_test_ops,
50 		.shared = true,
51 	},
52 	{
53 		.name = "shmem-private",
54 		.mem_flag = MEM_SHMEM_PRIVATE,
55 		.mem_ops = &shmem_uffd_test_ops,
56 		.shared = false,
57 	},
58 	{
59 		.name = "hugetlb",
60 		.mem_flag = MEM_HUGETLB,
61 		.mem_ops = &hugetlb_uffd_test_ops,
62 		.shared = true,
63 	},
64 	{
65 		.name = "hugetlb-private",
66 		.mem_flag = MEM_HUGETLB_PRIVATE,
67 		.mem_ops = &hugetlb_uffd_test_ops,
68 		.shared = false,
69 	},
70 };
71 
72 /* Arguments to be passed over to each uffd unit test */
73 struct uffd_test_args {
74 	mem_type_t *mem_type;
75 };
76 typedef struct uffd_test_args uffd_test_args_t;
77 
78 /* Returns: UFFD_TEST_* */
79 typedef void (*uffd_test_fn)(uffd_test_args_t *);
80 
81 typedef struct {
82 	const char *name;
83 	uffd_test_fn uffd_fn;
84 	unsigned int mem_targets;
85 	uint64_t uffd_feature_required;
86 	uffd_test_case_ops_t *test_case_ops;
87 } uffd_test_case_t;
88 
uffd_test_report(void)89 static void uffd_test_report(void)
90 {
91 	printf("Userfaults unit tests: pass=%u, skip=%u, fail=%u (total=%u)\n",
92 	       ksft_get_pass_cnt(),
93 	       ksft_get_xskip_cnt(),
94 	       ksft_get_fail_cnt(),
95 	       ksft_test_num());
96 }
97 
uffd_test_pass(void)98 static void uffd_test_pass(void)
99 {
100 	printf("done\n");
101 	ksft_inc_pass_cnt();
102 }
103 
104 #define  uffd_test_start(...)  do {		\
105 		printf("Testing ");		\
106 		printf(__VA_ARGS__);		\
107 		printf("... ");			\
108 		fflush(stdout);			\
109 	} while (0)
110 
111 #define  uffd_test_fail(...)  do {		\
112 		printf("failed [reason: ");	\
113 		printf(__VA_ARGS__);		\
114 		printf("]\n");			\
115 		ksft_inc_fail_cnt();		\
116 	} while (0)
117 
uffd_test_skip(const char * message)118 static void uffd_test_skip(const char *message)
119 {
120 	printf("skipped [reason: %s]\n", message);
121 	ksft_inc_xskip_cnt();
122 }
123 
124 /*
125  * Returns 1 if specific userfaultfd supported, 0 otherwise.  Note, we'll
126  * return 1 even if some test failed as long as uffd supported, because in
127  * that case we still want to proceed with the rest uffd unit tests.
128  */
test_uffd_api(bool use_dev)129 static int test_uffd_api(bool use_dev)
130 {
131 	struct uffdio_api uffdio_api;
132 	int uffd;
133 
134 	uffd_test_start("UFFDIO_API (with %s)",
135 			use_dev ? "/dev/userfaultfd" : "syscall");
136 
137 	if (use_dev)
138 		uffd = uffd_open_dev(UFFD_FLAGS);
139 	else
140 		uffd = uffd_open_sys(UFFD_FLAGS);
141 	if (uffd < 0) {
142 		uffd_test_skip("cannot open userfaultfd handle");
143 		return 0;
144 	}
145 
146 	/* Test wrong UFFD_API */
147 	uffdio_api.api = 0xab;
148 	uffdio_api.features = 0;
149 	if (ioctl(uffd, UFFDIO_API, &uffdio_api) == 0) {
150 		uffd_test_fail("UFFDIO_API should fail with wrong api but didn't");
151 		goto out;
152 	}
153 
154 	/* Test wrong feature bit */
155 	uffdio_api.api = UFFD_API;
156 	uffdio_api.features = BIT_ULL(63);
157 	if (ioctl(uffd, UFFDIO_API, &uffdio_api) == 0) {
158 		uffd_test_fail("UFFDIO_API should fail with wrong feature but didn't");
159 		goto out;
160 	}
161 
162 	/* Test normal UFFDIO_API */
163 	uffdio_api.api = UFFD_API;
164 	uffdio_api.features = 0;
165 	if (ioctl(uffd, UFFDIO_API, &uffdio_api)) {
166 		uffd_test_fail("UFFDIO_API should succeed but failed");
167 		goto out;
168 	}
169 
170 	/* Test double requests of UFFDIO_API with a random feature set */
171 	uffdio_api.features = BIT_ULL(0);
172 	if (ioctl(uffd, UFFDIO_API, &uffdio_api) == 0) {
173 		uffd_test_fail("UFFDIO_API should reject initialized uffd");
174 		goto out;
175 	}
176 
177 	uffd_test_pass();
178 out:
179 	close(uffd);
180 	/* We have a valid uffd handle */
181 	return 1;
182 }
183 
184 /*
185  * This function initializes the global variables.  TODO: remove global
186  * vars and then remove this.
187  */
188 static int
uffd_setup_environment(uffd_test_args_t * args,uffd_test_case_t * test,mem_type_t * mem_type,const char ** errmsg)189 uffd_setup_environment(uffd_test_args_t *args, uffd_test_case_t *test,
190 		       mem_type_t *mem_type, const char **errmsg)
191 {
192 	map_shared = mem_type->shared;
193 	uffd_test_ops = mem_type->mem_ops;
194 	uffd_test_case_ops = test->test_case_ops;
195 
196 	if (mem_type->mem_flag & (MEM_HUGETLB_PRIVATE | MEM_HUGETLB))
197 		page_size = default_huge_page_size();
198 	else
199 		page_size = psize();
200 
201 	/* Ensure we have at least 2 pages */
202 	nr_pages = MAX(UFFD_TEST_MEM_SIZE, page_size * 2) / page_size;
203 	/* TODO: remove this global var.. it's so ugly */
204 	nr_parallel = 1;
205 
206 	/* Initialize test arguments */
207 	args->mem_type = mem_type;
208 
209 	return uffd_test_ctx_init(test->uffd_feature_required, errmsg);
210 }
211 
uffd_feature_supported(uffd_test_case_t * test)212 static bool uffd_feature_supported(uffd_test_case_t *test)
213 {
214 	uint64_t features;
215 
216 	if (uffd_get_features(&features))
217 		return false;
218 
219 	return (features & test->uffd_feature_required) ==
220 	    test->uffd_feature_required;
221 }
222 
pagemap_open(void)223 static int pagemap_open(void)
224 {
225 	int fd = open("/proc/self/pagemap", O_RDONLY);
226 
227 	if (fd < 0)
228 		err("open pagemap");
229 
230 	return fd;
231 }
232 
233 /* This macro let __LINE__ works in err() */
234 #define  pagemap_check_wp(value, wp) do {				\
235 		if (!!(value & PM_UFFD_WP) != wp)			\
236 			err("pagemap uffd-wp bit error: 0x%"PRIx64, value); \
237 	} while (0)
238 
239 typedef struct {
240 	int parent_uffd, child_uffd;
241 } fork_event_args;
242 
fork_event_consumer(void * data)243 static void *fork_event_consumer(void *data)
244 {
245 	fork_event_args *args = data;
246 	struct uffd_msg msg = { 0 };
247 
248 	ready_for_fork = true;
249 
250 	/* Read until a full msg received */
251 	while (uffd_read_msg(args->parent_uffd, &msg));
252 
253 	if (msg.event != UFFD_EVENT_FORK)
254 		err("wrong message: %u\n", msg.event);
255 
256 	/* Just to be properly freed later */
257 	args->child_uffd = msg.arg.fork.ufd;
258 	return NULL;
259 }
260 
261 typedef struct {
262 	int gup_fd;
263 	bool pinned;
264 } pin_args;
265 
266 /*
267  * Returns 0 if succeed, <0 for errors.  pin_pages() needs to be paired
268  * with unpin_pages().  Currently it needs to be RO longterm pin to satisfy
269  * all needs of the test cases (e.g., trigger unshare, trigger fork() early
270  * CoW, etc.).
271  */
pin_pages(pin_args * args,void * buffer,size_t size)272 static int pin_pages(pin_args *args, void *buffer, size_t size)
273 {
274 	struct pin_longterm_test test = {
275 		.addr = (uintptr_t)buffer,
276 		.size = size,
277 		/* Read-only pins */
278 		.flags = 0,
279 	};
280 
281 	if (args->pinned)
282 		err("already pinned");
283 
284 	args->gup_fd = open("/sys/kernel/debug/gup_test", O_RDWR);
285 	if (args->gup_fd < 0)
286 		return -errno;
287 
288 	if (ioctl(args->gup_fd, PIN_LONGTERM_TEST_START, &test)) {
289 		/* Even if gup_test existed, can be an old gup_test / kernel */
290 		close(args->gup_fd);
291 		return -errno;
292 	}
293 	args->pinned = true;
294 	return 0;
295 }
296 
unpin_pages(pin_args * args)297 static void unpin_pages(pin_args *args)
298 {
299 	if (!args->pinned)
300 		err("unpin without pin first");
301 	if (ioctl(args->gup_fd, PIN_LONGTERM_TEST_STOP))
302 		err("PIN_LONGTERM_TEST_STOP");
303 	close(args->gup_fd);
304 	args->pinned = false;
305 }
306 
pagemap_test_fork(int uffd,bool with_event,bool test_pin)307 static int pagemap_test_fork(int uffd, bool with_event, bool test_pin)
308 {
309 	fork_event_args args = { .parent_uffd = uffd, .child_uffd = -1 };
310 	pthread_t thread;
311 	pid_t child;
312 	uint64_t value;
313 	int fd, result;
314 
315 	/* Prepare a thread to resolve EVENT_FORK */
316 	if (with_event) {
317 		ready_for_fork = false;
318 		if (pthread_create(&thread, NULL, fork_event_consumer, &args))
319 			err("pthread_create()");
320 		while (!ready_for_fork)
321 			; /* Wait for the poll_thread to start executing before forking */
322 	}
323 
324 	child = fork();
325 	if (!child) {
326 		/* Open the pagemap fd of the child itself */
327 		pin_args args = {};
328 
329 		fd = pagemap_open();
330 
331 		if (test_pin && pin_pages(&args, area_dst, page_size))
332 			/*
333 			 * Normally when reach here we have pinned in
334 			 * previous tests, so shouldn't fail anymore
335 			 */
336 			err("pin page failed in child");
337 
338 		value = pagemap_get_entry(fd, area_dst);
339 		/*
340 		 * After fork(), we should handle uffd-wp bit differently:
341 		 *
342 		 * (1) when with EVENT_FORK, it should persist
343 		 * (2) when without EVENT_FORK, it should be dropped
344 		 */
345 		pagemap_check_wp(value, with_event);
346 		if (test_pin)
347 			unpin_pages(&args);
348 		/* Succeed */
349 		exit(0);
350 	}
351 	waitpid(child, &result, 0);
352 
353 	if (with_event) {
354 		if (pthread_join(thread, NULL))
355 			err("pthread_join()");
356 		if (args.child_uffd < 0)
357 			err("Didn't receive child uffd");
358 		close(args.child_uffd);
359 	}
360 
361 	return result;
362 }
363 
uffd_wp_unpopulated_test(uffd_test_args_t * args)364 static void uffd_wp_unpopulated_test(uffd_test_args_t *args)
365 {
366 	uint64_t value;
367 	int pagemap_fd;
368 
369 	if (uffd_register(uffd, area_dst, nr_pages * page_size,
370 			  false, true, false))
371 		err("register failed");
372 
373 	pagemap_fd = pagemap_open();
374 
375 	/* Test applying pte marker to anon unpopulated */
376 	wp_range(uffd, (uint64_t)area_dst, page_size, true);
377 	value = pagemap_get_entry(pagemap_fd, area_dst);
378 	pagemap_check_wp(value, true);
379 
380 	/* Test unprotect on anon pte marker */
381 	wp_range(uffd, (uint64_t)area_dst, page_size, false);
382 	value = pagemap_get_entry(pagemap_fd, area_dst);
383 	pagemap_check_wp(value, false);
384 
385 	/* Test zap on anon marker */
386 	wp_range(uffd, (uint64_t)area_dst, page_size, true);
387 	if (madvise(area_dst, page_size, MADV_DONTNEED))
388 		err("madvise(MADV_DONTNEED) failed");
389 	value = pagemap_get_entry(pagemap_fd, area_dst);
390 	pagemap_check_wp(value, false);
391 
392 	/* Test fault in after marker removed */
393 	*area_dst = 1;
394 	value = pagemap_get_entry(pagemap_fd, area_dst);
395 	pagemap_check_wp(value, false);
396 	/* Drop it to make pte none again */
397 	if (madvise(area_dst, page_size, MADV_DONTNEED))
398 		err("madvise(MADV_DONTNEED) failed");
399 
400 	/* Test read-zero-page upon pte marker */
401 	wp_range(uffd, (uint64_t)area_dst, page_size, true);
402 	*(volatile char *)area_dst;
403 	/* Drop it to make pte none again */
404 	if (madvise(area_dst, page_size, MADV_DONTNEED))
405 		err("madvise(MADV_DONTNEED) failed");
406 
407 	uffd_test_pass();
408 }
409 
uffd_wp_fork_test_common(uffd_test_args_t * args,bool with_event)410 static void uffd_wp_fork_test_common(uffd_test_args_t *args,
411 				     bool with_event)
412 {
413 	int pagemap_fd;
414 	uint64_t value;
415 
416 	if (uffd_register(uffd, area_dst, nr_pages * page_size,
417 			  false, true, false))
418 		err("register failed");
419 
420 	pagemap_fd = pagemap_open();
421 
422 	/* Touch the page */
423 	*area_dst = 1;
424 	wp_range(uffd, (uint64_t)area_dst, page_size, true);
425 	value = pagemap_get_entry(pagemap_fd, area_dst);
426 	pagemap_check_wp(value, true);
427 	if (pagemap_test_fork(uffd, with_event, false)) {
428 		uffd_test_fail("Detected %s uffd-wp bit in child in present pte",
429 			       with_event ? "missing" : "stall");
430 		goto out;
431 	}
432 
433 	/*
434 	 * This is an attempt for zapping the pgtable so as to test the
435 	 * markers.
436 	 *
437 	 * For private mappings, PAGEOUT will only work on exclusive ptes
438 	 * (PM_MMAP_EXCLUSIVE) which we should satisfy.
439 	 *
440 	 * For shared, PAGEOUT may not work.  Use DONTNEED instead which
441 	 * plays a similar role of zapping (rather than freeing the page)
442 	 * to expose pte markers.
443 	 */
444 	if (args->mem_type->shared) {
445 		if (madvise(area_dst, page_size, MADV_DONTNEED))
446 			err("MADV_DONTNEED");
447 	} else {
448 		/*
449 		 * NOTE: ignore retval because private-hugetlb doesn't yet
450 		 * support swapping, so it could fail.
451 		 */
452 		madvise(area_dst, page_size, MADV_PAGEOUT);
453 	}
454 
455 	/* Uffd-wp should persist even swapped out */
456 	value = pagemap_get_entry(pagemap_fd, area_dst);
457 	pagemap_check_wp(value, true);
458 	if (pagemap_test_fork(uffd, with_event, false)) {
459 		uffd_test_fail("Detected %s uffd-wp bit in child in zapped pte",
460 			       with_event ? "missing" : "stall");
461 		goto out;
462 	}
463 
464 	/* Unprotect; this tests swap pte modifications */
465 	wp_range(uffd, (uint64_t)area_dst, page_size, false);
466 	value = pagemap_get_entry(pagemap_fd, area_dst);
467 	pagemap_check_wp(value, false);
468 
469 	/* Fault in the page from disk */
470 	*area_dst = 2;
471 	value = pagemap_get_entry(pagemap_fd, area_dst);
472 	pagemap_check_wp(value, false);
473 	uffd_test_pass();
474 out:
475 	if (uffd_unregister(uffd, area_dst, nr_pages * page_size))
476 		err("unregister failed");
477 	close(pagemap_fd);
478 }
479 
uffd_wp_fork_test(uffd_test_args_t * args)480 static void uffd_wp_fork_test(uffd_test_args_t *args)
481 {
482 	uffd_wp_fork_test_common(args, false);
483 }
484 
uffd_wp_fork_with_event_test(uffd_test_args_t * args)485 static void uffd_wp_fork_with_event_test(uffd_test_args_t *args)
486 {
487 	uffd_wp_fork_test_common(args, true);
488 }
489 
uffd_wp_fork_pin_test_common(uffd_test_args_t * args,bool with_event)490 static void uffd_wp_fork_pin_test_common(uffd_test_args_t *args,
491 					 bool with_event)
492 {
493 	int pagemap_fd;
494 	pin_args pin_args = {};
495 
496 	if (uffd_register(uffd, area_dst, page_size, false, true, false))
497 		err("register failed");
498 
499 	pagemap_fd = pagemap_open();
500 
501 	/* Touch the page */
502 	*area_dst = 1;
503 	wp_range(uffd, (uint64_t)area_dst, page_size, true);
504 
505 	/*
506 	 * 1. First pin, then fork().  This tests fork() special path when
507 	 * doing early CoW if the page is private.
508 	 */
509 	if (pin_pages(&pin_args, area_dst, page_size)) {
510 		uffd_test_skip("Possibly CONFIG_GUP_TEST missing "
511 			       "or unprivileged");
512 		close(pagemap_fd);
513 		uffd_unregister(uffd, area_dst, page_size);
514 		return;
515 	}
516 
517 	if (pagemap_test_fork(uffd, with_event, false)) {
518 		uffd_test_fail("Detected %s uffd-wp bit in early CoW of fork()",
519 			       with_event ? "missing" : "stall");
520 		unpin_pages(&pin_args);
521 		goto out;
522 	}
523 
524 	unpin_pages(&pin_args);
525 
526 	/*
527 	 * 2. First fork(), then pin (in the child, where test_pin==true).
528 	 * This tests COR, aka, page unsharing on private memories.
529 	 */
530 	if (pagemap_test_fork(uffd, with_event, true)) {
531 		uffd_test_fail("Detected %s uffd-wp bit when RO pin",
532 			       with_event ? "missing" : "stall");
533 		goto out;
534 	}
535 	uffd_test_pass();
536 out:
537 	if (uffd_unregister(uffd, area_dst, page_size))
538 		err("register failed");
539 	close(pagemap_fd);
540 }
541 
uffd_wp_fork_pin_test(uffd_test_args_t * args)542 static void uffd_wp_fork_pin_test(uffd_test_args_t *args)
543 {
544 	uffd_wp_fork_pin_test_common(args, false);
545 }
546 
uffd_wp_fork_pin_with_event_test(uffd_test_args_t * args)547 static void uffd_wp_fork_pin_with_event_test(uffd_test_args_t *args)
548 {
549 	uffd_wp_fork_pin_test_common(args, true);
550 }
551 
check_memory_contents(char * p)552 static void check_memory_contents(char *p)
553 {
554 	unsigned long i, j;
555 	uint8_t expected_byte;
556 
557 	for (i = 0; i < nr_pages; ++i) {
558 		expected_byte = ~((uint8_t)(i % ((uint8_t)-1)));
559 		for (j = 0; j < page_size; j++) {
560 			uint8_t v = *(uint8_t *)(p + (i * page_size) + j);
561 			if (v != expected_byte)
562 				err("unexpected page contents");
563 		}
564 	}
565 }
566 
uffd_minor_test_common(bool test_collapse,bool test_wp)567 static void uffd_minor_test_common(bool test_collapse, bool test_wp)
568 {
569 	unsigned long p;
570 	pthread_t uffd_mon;
571 	char c;
572 	struct uffd_args args = { 0 };
573 
574 	/*
575 	 * NOTE: MADV_COLLAPSE is not yet compatible with WP, so testing
576 	 * both do not make much sense.
577 	 */
578 	assert(!(test_collapse && test_wp));
579 
580 	if (uffd_register(uffd, area_dst_alias, nr_pages * page_size,
581 			  /* NOTE! MADV_COLLAPSE may not work with uffd-wp */
582 			  false, test_wp, true))
583 		err("register failure");
584 
585 	/*
586 	 * After registering with UFFD, populate the non-UFFD-registered side of
587 	 * the shared mapping. This should *not* trigger any UFFD minor faults.
588 	 */
589 	for (p = 0; p < nr_pages; ++p)
590 		memset(area_dst + (p * page_size), p % ((uint8_t)-1),
591 		       page_size);
592 
593 	args.apply_wp = test_wp;
594 	if (pthread_create(&uffd_mon, NULL, uffd_poll_thread, &args))
595 		err("uffd_poll_thread create");
596 
597 	/*
598 	 * Read each of the pages back using the UFFD-registered mapping. We
599 	 * expect that the first time we touch a page, it will result in a minor
600 	 * fault. uffd_poll_thread will resolve the fault by bit-flipping the
601 	 * page's contents, and then issuing a CONTINUE ioctl.
602 	 */
603 	check_memory_contents(area_dst_alias);
604 
605 	if (write(pipefd[1], &c, sizeof(c)) != sizeof(c))
606 		err("pipe write");
607 	if (pthread_join(uffd_mon, NULL))
608 		err("join() failed");
609 
610 	if (test_collapse) {
611 		if (madvise(area_dst_alias, nr_pages * page_size,
612 			    MADV_COLLAPSE)) {
613 			/* It's fine to fail for this one... */
614 			uffd_test_skip("MADV_COLLAPSE failed");
615 			return;
616 		}
617 
618 		uffd_test_ops->check_pmd_mapping(area_dst,
619 						 nr_pages * page_size /
620 						 read_pmd_pagesize());
621 		/*
622 		 * This won't cause uffd-fault - it purely just makes sure there
623 		 * was no corruption.
624 		 */
625 		check_memory_contents(area_dst_alias);
626 	}
627 
628 	if (args.missing_faults != 0 || args.minor_faults != nr_pages)
629 		uffd_test_fail("stats check error");
630 	else
631 		uffd_test_pass();
632 }
633 
uffd_minor_test(uffd_test_args_t * args)634 void uffd_minor_test(uffd_test_args_t *args)
635 {
636 	uffd_minor_test_common(false, false);
637 }
638 
uffd_minor_wp_test(uffd_test_args_t * args)639 void uffd_minor_wp_test(uffd_test_args_t *args)
640 {
641 	uffd_minor_test_common(false, true);
642 }
643 
uffd_minor_collapse_test(uffd_test_args_t * args)644 void uffd_minor_collapse_test(uffd_test_args_t *args)
645 {
646 	uffd_minor_test_common(true, false);
647 }
648 
649 static sigjmp_buf jbuf, *sigbuf;
650 
sighndl(int sig,siginfo_t * siginfo,void * ptr)651 static void sighndl(int sig, siginfo_t *siginfo, void *ptr)
652 {
653 	if (sig == SIGBUS) {
654 		if (sigbuf)
655 			siglongjmp(*sigbuf, 1);
656 		abort();
657 	}
658 }
659 
660 /*
661  * For non-cooperative userfaultfd test we fork() a process that will
662  * generate pagefaults, will mremap the area monitored by the
663  * userfaultfd and at last this process will release the monitored
664  * area.
665  * For the anonymous and shared memory the area is divided into two
666  * parts, the first part is accessed before mremap, and the second
667  * part is accessed after mremap. Since hugetlbfs does not support
668  * mremap, the entire monitored area is accessed in a single pass for
669  * HUGETLB_TEST.
670  * The release of the pages currently generates event for shmem and
671  * anonymous memory (UFFD_EVENT_REMOVE), hence it is not checked
672  * for hugetlb.
673  * For signal test(UFFD_FEATURE_SIGBUS), signal_test = 1, we register
674  * monitored area, generate pagefaults and test that signal is delivered.
675  * Use UFFDIO_COPY to allocate missing page and retry. For signal_test = 2
676  * test robustness use case - we release monitored area, fork a process
677  * that will generate pagefaults and verify signal is generated.
678  * This also tests UFFD_FEATURE_EVENT_FORK event along with the signal
679  * feature. Using monitor thread, verify no userfault events are generated.
680  */
faulting_process(int signal_test,bool wp)681 static int faulting_process(int signal_test, bool wp)
682 {
683 	unsigned long nr, i;
684 	unsigned long long count;
685 	unsigned long split_nr_pages;
686 	unsigned long lastnr;
687 	struct sigaction act;
688 	volatile unsigned long signalled = 0;
689 
690 	split_nr_pages = (nr_pages + 1) / 2;
691 
692 	if (signal_test) {
693 		sigbuf = &jbuf;
694 		memset(&act, 0, sizeof(act));
695 		act.sa_sigaction = sighndl;
696 		act.sa_flags = SA_SIGINFO;
697 		if (sigaction(SIGBUS, &act, 0))
698 			err("sigaction");
699 		lastnr = (unsigned long)-1;
700 	}
701 
702 	for (nr = 0; nr < split_nr_pages; nr++) {
703 		volatile int steps = 1;
704 		unsigned long offset = nr * page_size;
705 
706 		if (signal_test) {
707 			if (sigsetjmp(*sigbuf, 1) != 0) {
708 				if (steps == 1 && nr == lastnr)
709 					err("Signal repeated");
710 
711 				lastnr = nr;
712 				if (signal_test == 1) {
713 					if (steps == 1) {
714 						/* This is a MISSING request */
715 						steps++;
716 						if (copy_page(uffd, offset, wp))
717 							signalled++;
718 					} else {
719 						/* This is a WP request */
720 						assert(steps == 2);
721 						wp_range(uffd,
722 							 (__u64)area_dst +
723 							 offset,
724 							 page_size, false);
725 					}
726 				} else {
727 					signalled++;
728 					continue;
729 				}
730 			}
731 		}
732 
733 		count = *area_count(area_dst, nr);
734 		if (count != count_verify[nr])
735 			err("nr %lu memory corruption %llu %llu\n",
736 			    nr, count, count_verify[nr]);
737 		/*
738 		 * Trigger write protection if there is by writing
739 		 * the same value back.
740 		 */
741 		*area_count(area_dst, nr) = count;
742 	}
743 
744 	if (signal_test)
745 		return signalled != split_nr_pages;
746 
747 	area_dst = mremap(area_dst, nr_pages * page_size,  nr_pages * page_size,
748 			  MREMAP_MAYMOVE | MREMAP_FIXED, area_src);
749 	if (area_dst == MAP_FAILED)
750 		err("mremap");
751 	/* Reset area_src since we just clobbered it */
752 	area_src = NULL;
753 
754 	for (; nr < nr_pages; nr++) {
755 		count = *area_count(area_dst, nr);
756 		if (count != count_verify[nr]) {
757 			err("nr %lu memory corruption %llu %llu\n",
758 			    nr, count, count_verify[nr]);
759 		}
760 		/*
761 		 * Trigger write protection if there is by writing
762 		 * the same value back.
763 		 */
764 		*area_count(area_dst, nr) = count;
765 	}
766 
767 	uffd_test_ops->release_pages(area_dst);
768 
769 	for (nr = 0; nr < nr_pages; nr++)
770 		for (i = 0; i < page_size; i++)
771 			if (*(area_dst + nr * page_size + i) != 0)
772 				err("page %lu offset %lu is not zero", nr, i);
773 
774 	return 0;
775 }
776 
uffd_sigbus_test_common(bool wp)777 static void uffd_sigbus_test_common(bool wp)
778 {
779 	unsigned long userfaults;
780 	pthread_t uffd_mon;
781 	pid_t pid;
782 	int err;
783 	char c;
784 	struct uffd_args args = { 0 };
785 
786 	ready_for_fork = false;
787 
788 	fcntl(uffd, F_SETFL, uffd_flags | O_NONBLOCK);
789 
790 	if (uffd_register(uffd, area_dst, nr_pages * page_size,
791 			  true, wp, false))
792 		err("register failure");
793 
794 	if (faulting_process(1, wp))
795 		err("faulting process failed");
796 
797 	uffd_test_ops->release_pages(area_dst);
798 
799 	args.apply_wp = wp;
800 	if (pthread_create(&uffd_mon, NULL, uffd_poll_thread, &args))
801 		err("uffd_poll_thread create");
802 
803 	while (!ready_for_fork)
804 		; /* Wait for the poll_thread to start executing before forking */
805 
806 	pid = fork();
807 	if (pid < 0)
808 		err("fork");
809 
810 	if (!pid)
811 		exit(faulting_process(2, wp));
812 
813 	waitpid(pid, &err, 0);
814 	if (err)
815 		err("faulting process failed");
816 	if (write(pipefd[1], &c, sizeof(c)) != sizeof(c))
817 		err("pipe write");
818 	if (pthread_join(uffd_mon, (void **)&userfaults))
819 		err("pthread_join()");
820 
821 	if (userfaults)
822 		uffd_test_fail("Signal test failed, userfaults: %ld", userfaults);
823 	else
824 		uffd_test_pass();
825 }
826 
uffd_sigbus_test(uffd_test_args_t * args)827 static void uffd_sigbus_test(uffd_test_args_t *args)
828 {
829 	uffd_sigbus_test_common(false);
830 }
831 
uffd_sigbus_wp_test(uffd_test_args_t * args)832 static void uffd_sigbus_wp_test(uffd_test_args_t *args)
833 {
834 	uffd_sigbus_test_common(true);
835 }
836 
uffd_events_test_common(bool wp)837 static void uffd_events_test_common(bool wp)
838 {
839 	pthread_t uffd_mon;
840 	pid_t pid;
841 	int err;
842 	char c;
843 	struct uffd_args args = { 0 };
844 
845 	ready_for_fork = false;
846 
847 	fcntl(uffd, F_SETFL, uffd_flags | O_NONBLOCK);
848 	if (uffd_register(uffd, area_dst, nr_pages * page_size,
849 			  true, wp, false))
850 		err("register failure");
851 
852 	args.apply_wp = wp;
853 	if (pthread_create(&uffd_mon, NULL, uffd_poll_thread, &args))
854 		err("uffd_poll_thread create");
855 
856 	while (!ready_for_fork)
857 		; /* Wait for the poll_thread to start executing before forking */
858 
859 	pid = fork();
860 	if (pid < 0)
861 		err("fork");
862 
863 	if (!pid)
864 		exit(faulting_process(0, wp));
865 
866 	waitpid(pid, &err, 0);
867 	if (err)
868 		err("faulting process failed");
869 	if (write(pipefd[1], &c, sizeof(c)) != sizeof(c))
870 		err("pipe write");
871 	if (pthread_join(uffd_mon, NULL))
872 		err("pthread_join()");
873 
874 	if (args.missing_faults != nr_pages)
875 		uffd_test_fail("Fault counts wrong");
876 	else
877 		uffd_test_pass();
878 }
879 
uffd_events_test(uffd_test_args_t * args)880 static void uffd_events_test(uffd_test_args_t *args)
881 {
882 	uffd_events_test_common(false);
883 }
884 
uffd_events_wp_test(uffd_test_args_t * args)885 static void uffd_events_wp_test(uffd_test_args_t *args)
886 {
887 	uffd_events_test_common(true);
888 }
889 
retry_uffdio_zeropage(int ufd,struct uffdio_zeropage * uffdio_zeropage)890 static void retry_uffdio_zeropage(int ufd,
891 				  struct uffdio_zeropage *uffdio_zeropage)
892 {
893 	uffd_test_ops->alias_mapping(&uffdio_zeropage->range.start,
894 				     uffdio_zeropage->range.len,
895 				     0);
896 	if (ioctl(ufd, UFFDIO_ZEROPAGE, uffdio_zeropage)) {
897 		if (uffdio_zeropage->zeropage != -EEXIST)
898 			err("UFFDIO_ZEROPAGE error: %"PRId64,
899 			    (int64_t)uffdio_zeropage->zeropage);
900 	} else {
901 		err("UFFDIO_ZEROPAGE error: %"PRId64,
902 		    (int64_t)uffdio_zeropage->zeropage);
903 	}
904 }
905 
do_uffdio_zeropage(int ufd,bool has_zeropage)906 static bool do_uffdio_zeropage(int ufd, bool has_zeropage)
907 {
908 	struct uffdio_zeropage uffdio_zeropage = { 0 };
909 	int ret;
910 	__s64 res;
911 
912 	uffdio_zeropage.range.start = (unsigned long) area_dst;
913 	uffdio_zeropage.range.len = page_size;
914 	uffdio_zeropage.mode = 0;
915 	ret = ioctl(ufd, UFFDIO_ZEROPAGE, &uffdio_zeropage);
916 	res = uffdio_zeropage.zeropage;
917 	if (ret) {
918 		/* real retval in ufdio_zeropage.zeropage */
919 		if (has_zeropage)
920 			err("UFFDIO_ZEROPAGE error: %"PRId64, (int64_t)res);
921 		else if (res != -EINVAL)
922 			err("UFFDIO_ZEROPAGE not -EINVAL");
923 	} else if (has_zeropage) {
924 		if (res != page_size)
925 			err("UFFDIO_ZEROPAGE unexpected size");
926 		else
927 			retry_uffdio_zeropage(ufd, &uffdio_zeropage);
928 		return true;
929 	} else
930 		err("UFFDIO_ZEROPAGE succeeded");
931 
932 	return false;
933 }
934 
935 /*
936  * Registers a range with MISSING mode only for zeropage test.  Return true
937  * if UFFDIO_ZEROPAGE supported, false otherwise. Can't use uffd_register()
938  * because we want to detect .ioctls along the way.
939  */
940 static bool
uffd_register_detect_zeropage(int uffd,void * addr,uint64_t len)941 uffd_register_detect_zeropage(int uffd, void *addr, uint64_t len)
942 {
943 	uint64_t ioctls = 0;
944 
945 	if (uffd_register_with_ioctls(uffd, addr, len, true,
946 				      false, false, &ioctls))
947 		err("zeropage register fail");
948 
949 	return ioctls & (1 << _UFFDIO_ZEROPAGE);
950 }
951 
952 /* exercise UFFDIO_ZEROPAGE */
uffd_zeropage_test(uffd_test_args_t * args)953 static void uffd_zeropage_test(uffd_test_args_t *args)
954 {
955 	bool has_zeropage;
956 	int i;
957 
958 	has_zeropage = uffd_register_detect_zeropage(uffd, area_dst, page_size);
959 	if (area_dst_alias)
960 		/* Ignore the retval; we already have it */
961 		uffd_register_detect_zeropage(uffd, area_dst_alias, page_size);
962 
963 	if (do_uffdio_zeropage(uffd, has_zeropage))
964 		for (i = 0; i < page_size; i++)
965 			if (area_dst[i] != 0)
966 				err("data non-zero at offset %d\n", i);
967 
968 	if (uffd_unregister(uffd, area_dst, page_size))
969 		err("unregister");
970 
971 	if (area_dst_alias && uffd_unregister(uffd, area_dst_alias, page_size))
972 		err("unregister");
973 
974 	uffd_test_pass();
975 }
976 
uffd_register_poison(int uffd,void * addr,uint64_t len)977 static void uffd_register_poison(int uffd, void *addr, uint64_t len)
978 {
979 	uint64_t ioctls = 0;
980 	uint64_t expected = (1 << _UFFDIO_COPY) | (1 << _UFFDIO_POISON);
981 
982 	if (uffd_register_with_ioctls(uffd, addr, len, true,
983 				      false, false, &ioctls))
984 		err("poison register fail");
985 
986 	if ((ioctls & expected) != expected)
987 		err("registered area doesn't support COPY and POISON ioctls");
988 }
989 
do_uffdio_poison(int uffd,unsigned long offset)990 static void do_uffdio_poison(int uffd, unsigned long offset)
991 {
992 	struct uffdio_poison uffdio_poison = { 0 };
993 	int ret;
994 	__s64 res;
995 
996 	uffdio_poison.range.start = (unsigned long) area_dst + offset;
997 	uffdio_poison.range.len = page_size;
998 	uffdio_poison.mode = 0;
999 	ret = ioctl(uffd, UFFDIO_POISON, &uffdio_poison);
1000 	res = uffdio_poison.updated;
1001 
1002 	if (ret)
1003 		err("UFFDIO_POISON error: %"PRId64, (int64_t)res);
1004 	else if (res != page_size)
1005 		err("UFFDIO_POISON unexpected size: %"PRId64, (int64_t)res);
1006 }
1007 
uffd_poison_handle_fault(struct uffd_msg * msg,struct uffd_args * args)1008 static void uffd_poison_handle_fault(
1009 	struct uffd_msg *msg, struct uffd_args *args)
1010 {
1011 	unsigned long offset;
1012 
1013 	if (msg->event != UFFD_EVENT_PAGEFAULT)
1014 		err("unexpected msg event %u", msg->event);
1015 
1016 	if (msg->arg.pagefault.flags &
1017 	    (UFFD_PAGEFAULT_FLAG_WP | UFFD_PAGEFAULT_FLAG_MINOR))
1018 		err("unexpected fault type %llu", msg->arg.pagefault.flags);
1019 
1020 	offset = (char *)(unsigned long)msg->arg.pagefault.address - area_dst;
1021 	offset &= ~(page_size-1);
1022 
1023 	/* Odd pages -> copy zeroed page; even pages -> poison. */
1024 	if (offset & page_size)
1025 		copy_page(uffd, offset, false);
1026 	else
1027 		do_uffdio_poison(uffd, offset);
1028 }
1029 
uffd_poison_test(uffd_test_args_t * targs)1030 static void uffd_poison_test(uffd_test_args_t *targs)
1031 {
1032 	pthread_t uffd_mon;
1033 	char c;
1034 	struct uffd_args args = { 0 };
1035 	struct sigaction act = { 0 };
1036 	unsigned long nr_sigbus = 0;
1037 	unsigned long nr;
1038 
1039 	fcntl(uffd, F_SETFL, uffd_flags | O_NONBLOCK);
1040 
1041 	uffd_register_poison(uffd, area_dst, nr_pages * page_size);
1042 	memset(area_src, 0, nr_pages * page_size);
1043 
1044 	args.handle_fault = uffd_poison_handle_fault;
1045 	if (pthread_create(&uffd_mon, NULL, uffd_poll_thread, &args))
1046 		err("uffd_poll_thread create");
1047 
1048 	sigbuf = &jbuf;
1049 	act.sa_sigaction = sighndl;
1050 	act.sa_flags = SA_SIGINFO;
1051 	if (sigaction(SIGBUS, &act, 0))
1052 		err("sigaction");
1053 
1054 	for (nr = 0; nr < nr_pages; ++nr) {
1055 		unsigned long offset = nr * page_size;
1056 		const char *bytes = (const char *) area_dst + offset;
1057 		const char *i;
1058 
1059 		if (sigsetjmp(*sigbuf, 1)) {
1060 			/*
1061 			 * Access below triggered a SIGBUS, which was caught by
1062 			 * sighndl, which then jumped here. Count this SIGBUS,
1063 			 * and move on to next page.
1064 			 */
1065 			++nr_sigbus;
1066 			continue;
1067 		}
1068 
1069 		for (i = bytes; i < bytes + page_size; ++i) {
1070 			if (*i)
1071 				err("nonzero byte in area_dst (%p) at %p: %u",
1072 				    area_dst, i, *i);
1073 		}
1074 	}
1075 
1076 	if (write(pipefd[1], &c, sizeof(c)) != sizeof(c))
1077 		err("pipe write");
1078 	if (pthread_join(uffd_mon, NULL))
1079 		err("pthread_join()");
1080 
1081 	if (nr_sigbus != nr_pages / 2)
1082 		err("expected to receive %lu SIGBUS, actually received %lu",
1083 		    nr_pages / 2, nr_sigbus);
1084 
1085 	uffd_test_pass();
1086 }
1087 
1088 static void
uffd_move_handle_fault_common(struct uffd_msg * msg,struct uffd_args * args,unsigned long len)1089 uffd_move_handle_fault_common(struct uffd_msg *msg, struct uffd_args *args,
1090 			      unsigned long len)
1091 {
1092 	unsigned long offset;
1093 
1094 	if (msg->event != UFFD_EVENT_PAGEFAULT)
1095 		err("unexpected msg event %u", msg->event);
1096 
1097 	if (msg->arg.pagefault.flags &
1098 	    (UFFD_PAGEFAULT_FLAG_WP | UFFD_PAGEFAULT_FLAG_MINOR | UFFD_PAGEFAULT_FLAG_WRITE))
1099 		err("unexpected fault type %llu", msg->arg.pagefault.flags);
1100 
1101 	offset = (char *)(unsigned long)msg->arg.pagefault.address - area_dst;
1102 	offset &= ~(len-1);
1103 
1104 	if (move_page(uffd, offset, len))
1105 		args->missing_faults++;
1106 }
1107 
uffd_move_handle_fault(struct uffd_msg * msg,struct uffd_args * args)1108 static void uffd_move_handle_fault(struct uffd_msg *msg,
1109 				   struct uffd_args *args)
1110 {
1111 	uffd_move_handle_fault_common(msg, args, page_size);
1112 }
1113 
uffd_move_pmd_handle_fault(struct uffd_msg * msg,struct uffd_args * args)1114 static void uffd_move_pmd_handle_fault(struct uffd_msg *msg,
1115 				       struct uffd_args *args)
1116 {
1117 	uffd_move_handle_fault_common(msg, args, read_pmd_pagesize());
1118 }
1119 
1120 static void
uffd_move_test_common(uffd_test_args_t * targs,unsigned long chunk_size,void (* handle_fault)(struct uffd_msg * msg,struct uffd_args * args))1121 uffd_move_test_common(uffd_test_args_t *targs, unsigned long chunk_size,
1122 		      void (*handle_fault)(struct uffd_msg *msg, struct uffd_args *args))
1123 {
1124 	unsigned long nr;
1125 	pthread_t uffd_mon;
1126 	char c;
1127 	unsigned long long count;
1128 	struct uffd_args args = { 0 };
1129 	char *orig_area_src = NULL, *orig_area_dst = NULL;
1130 	unsigned long step_size, step_count;
1131 	unsigned long src_offs = 0;
1132 	unsigned long dst_offs = 0;
1133 
1134 	/* Prevent source pages from being mapped more than once */
1135 	if (madvise(area_src, nr_pages * page_size, MADV_DONTFORK))
1136 		err("madvise(MADV_DONTFORK) failure");
1137 
1138 	if (uffd_register(uffd, area_dst, nr_pages * page_size,
1139 			  true, false, false))
1140 		err("register failure");
1141 
1142 	args.handle_fault = handle_fault;
1143 	if (pthread_create(&uffd_mon, NULL, uffd_poll_thread, &args))
1144 		err("uffd_poll_thread create");
1145 
1146 	step_size = chunk_size / page_size;
1147 	step_count = nr_pages / step_size;
1148 
1149 	if (chunk_size > page_size) {
1150 		char *aligned_src = ALIGN_UP(area_src, chunk_size);
1151 		char *aligned_dst = ALIGN_UP(area_dst, chunk_size);
1152 
1153 		if (aligned_src != area_src || aligned_dst != area_dst) {
1154 			src_offs = (aligned_src - area_src) / page_size;
1155 			dst_offs = (aligned_dst - area_dst) / page_size;
1156 			step_count--;
1157 		}
1158 		orig_area_src = area_src;
1159 		orig_area_dst = area_dst;
1160 		area_src = aligned_src;
1161 		area_dst = aligned_dst;
1162 	}
1163 
1164 	/*
1165 	 * Read each of the pages back using the UFFD-registered mapping. We
1166 	 * expect that the first time we touch a page, it will result in a missing
1167 	 * fault. uffd_poll_thread will resolve the fault by moving source
1168 	 * page to destination.
1169 	 */
1170 	for (nr = 0; nr < step_count * step_size; nr += step_size) {
1171 		unsigned long i;
1172 
1173 		/* Check area_src content */
1174 		for (i = 0; i < step_size; i++) {
1175 			count = *area_count(area_src, nr + i);
1176 			if (count != count_verify[src_offs + nr + i])
1177 				err("nr %lu source memory invalid %llu %llu\n",
1178 				    nr + i, count, count_verify[src_offs + nr + i]);
1179 		}
1180 
1181 		/* Faulting into area_dst should move the page or the huge page */
1182 		for (i = 0; i < step_size; i++) {
1183 			count = *area_count(area_dst, nr + i);
1184 			if (count != count_verify[dst_offs + nr + i])
1185 				err("nr %lu memory corruption %llu %llu\n",
1186 				    nr, count, count_verify[dst_offs + nr + i]);
1187 		}
1188 
1189 		/* Re-check area_src content which should be empty */
1190 		for (i = 0; i < step_size; i++) {
1191 			count = *area_count(area_src, nr + i);
1192 			if (count != 0)
1193 				err("nr %lu move failed %llu %llu\n",
1194 				    nr, count, count_verify[src_offs + nr + i]);
1195 		}
1196 	}
1197 	if (chunk_size > page_size) {
1198 		area_src = orig_area_src;
1199 		area_dst = orig_area_dst;
1200 	}
1201 
1202 	if (write(pipefd[1], &c, sizeof(c)) != sizeof(c))
1203 		err("pipe write");
1204 	if (pthread_join(uffd_mon, NULL))
1205 		err("join() failed");
1206 
1207 	if (args.missing_faults != step_count || args.minor_faults != 0)
1208 		uffd_test_fail("stats check error");
1209 	else
1210 		uffd_test_pass();
1211 }
1212 
uffd_move_test(uffd_test_args_t * targs)1213 static void uffd_move_test(uffd_test_args_t *targs)
1214 {
1215 	uffd_move_test_common(targs, page_size, uffd_move_handle_fault);
1216 }
1217 
uffd_move_pmd_test(uffd_test_args_t * targs)1218 static void uffd_move_pmd_test(uffd_test_args_t *targs)
1219 {
1220 	if (madvise(area_dst, nr_pages * page_size, MADV_HUGEPAGE))
1221 		err("madvise(MADV_HUGEPAGE) failure");
1222 	uffd_move_test_common(targs, read_pmd_pagesize(),
1223 			      uffd_move_pmd_handle_fault);
1224 }
1225 
uffd_move_pmd_split_test(uffd_test_args_t * targs)1226 static void uffd_move_pmd_split_test(uffd_test_args_t *targs)
1227 {
1228 	if (madvise(area_dst, nr_pages * page_size, MADV_NOHUGEPAGE))
1229 		err("madvise(MADV_NOHUGEPAGE) failure");
1230 	uffd_move_test_common(targs, read_pmd_pagesize(),
1231 			      uffd_move_pmd_handle_fault);
1232 }
1233 
prevent_hugepages(const char ** errmsg)1234 static int prevent_hugepages(const char **errmsg)
1235 {
1236 	/* This should be done before source area is populated */
1237 	if (madvise(area_src, nr_pages * page_size, MADV_NOHUGEPAGE)) {
1238 		/* Ignore only if CONFIG_TRANSPARENT_HUGEPAGE=n */
1239 		if (errno != EINVAL) {
1240 			if (errmsg)
1241 				*errmsg = "madvise(MADV_NOHUGEPAGE) failed";
1242 			return -errno;
1243 		}
1244 	}
1245 	return 0;
1246 }
1247 
request_hugepages(const char ** errmsg)1248 static int request_hugepages(const char **errmsg)
1249 {
1250 	/* This should be done before source area is populated */
1251 	if (madvise(area_src, nr_pages * page_size, MADV_HUGEPAGE)) {
1252 		if (errmsg) {
1253 			*errmsg = (errno == EINVAL) ?
1254 				"CONFIG_TRANSPARENT_HUGEPAGE is not set" :
1255 				"madvise(MADV_HUGEPAGE) failed";
1256 		}
1257 		return -errno;
1258 	}
1259 	return 0;
1260 }
1261 
1262 struct uffd_test_case_ops uffd_move_test_case_ops = {
1263 	.post_alloc = prevent_hugepages,
1264 };
1265 
1266 struct uffd_test_case_ops uffd_move_test_pmd_case_ops = {
1267 	.post_alloc = request_hugepages,
1268 };
1269 
1270 /*
1271  * Test the returned uffdio_register.ioctls with different register modes.
1272  * Note that _UFFDIO_ZEROPAGE is tested separately in the zeropage test.
1273  */
1274 static void
do_register_ioctls_test(uffd_test_args_t * args,bool miss,bool wp,bool minor)1275 do_register_ioctls_test(uffd_test_args_t *args, bool miss, bool wp, bool minor)
1276 {
1277 	uint64_t ioctls = 0, expected = BIT_ULL(_UFFDIO_WAKE);
1278 	mem_type_t *mem_type = args->mem_type;
1279 	int ret;
1280 
1281 	ret = uffd_register_with_ioctls(uffd, area_dst, page_size,
1282 					miss, wp, minor, &ioctls);
1283 
1284 	/*
1285 	 * Handle special cases of UFFDIO_REGISTER here where it should
1286 	 * just fail with -EINVAL first..
1287 	 *
1288 	 * Case 1: register MINOR on anon
1289 	 * Case 2: register with no mode selected
1290 	 */
1291 	if ((minor && (mem_type->mem_flag == MEM_ANON)) ||
1292 	    (!miss && !wp && !minor)) {
1293 		if (ret != -EINVAL)
1294 			err("register (miss=%d, wp=%d, minor=%d) failed "
1295 			    "with wrong errno=%d", miss, wp, minor, ret);
1296 		return;
1297 	}
1298 
1299 	/* UFFDIO_REGISTER should succeed, then check ioctls returned */
1300 	if (miss)
1301 		expected |= BIT_ULL(_UFFDIO_COPY);
1302 	if (wp)
1303 		expected |= BIT_ULL(_UFFDIO_WRITEPROTECT);
1304 	if (minor)
1305 		expected |= BIT_ULL(_UFFDIO_CONTINUE);
1306 
1307 	if ((ioctls & expected) != expected)
1308 		err("unexpected uffdio_register.ioctls "
1309 		    "(miss=%d, wp=%d, minor=%d): expected=0x%"PRIx64", "
1310 		    "returned=0x%"PRIx64, miss, wp, minor, expected, ioctls);
1311 
1312 	if (uffd_unregister(uffd, area_dst, page_size))
1313 		err("unregister");
1314 }
1315 
uffd_register_ioctls_test(uffd_test_args_t * args)1316 static void uffd_register_ioctls_test(uffd_test_args_t *args)
1317 {
1318 	int miss, wp, minor;
1319 
1320 	for (miss = 0; miss <= 1; miss++)
1321 		for (wp = 0; wp <= 1; wp++)
1322 			for (minor = 0; minor <= 1; minor++)
1323 				do_register_ioctls_test(args, miss, wp, minor);
1324 
1325 	uffd_test_pass();
1326 }
1327 
1328 uffd_test_case_t uffd_tests[] = {
1329 	{
1330 		/* Test returned uffdio_register.ioctls. */
1331 		.name = "register-ioctls",
1332 		.uffd_fn = uffd_register_ioctls_test,
1333 		.mem_targets = MEM_ALL,
1334 		.uffd_feature_required = UFFD_FEATURE_MISSING_HUGETLBFS |
1335 		UFFD_FEATURE_MISSING_SHMEM |
1336 		UFFD_FEATURE_PAGEFAULT_FLAG_WP |
1337 		UFFD_FEATURE_WP_HUGETLBFS_SHMEM |
1338 		UFFD_FEATURE_MINOR_HUGETLBFS |
1339 		UFFD_FEATURE_MINOR_SHMEM,
1340 	},
1341 	{
1342 		.name = "zeropage",
1343 		.uffd_fn = uffd_zeropage_test,
1344 		.mem_targets = MEM_ALL,
1345 		.uffd_feature_required = 0,
1346 	},
1347 	{
1348 		.name = "move",
1349 		.uffd_fn = uffd_move_test,
1350 		.mem_targets = MEM_ANON,
1351 		.uffd_feature_required = UFFD_FEATURE_MOVE,
1352 		.test_case_ops = &uffd_move_test_case_ops,
1353 	},
1354 	{
1355 		.name = "move-pmd",
1356 		.uffd_fn = uffd_move_pmd_test,
1357 		.mem_targets = MEM_ANON,
1358 		.uffd_feature_required = UFFD_FEATURE_MOVE,
1359 		.test_case_ops = &uffd_move_test_pmd_case_ops,
1360 	},
1361 	{
1362 		.name = "move-pmd-split",
1363 		.uffd_fn = uffd_move_pmd_split_test,
1364 		.mem_targets = MEM_ANON,
1365 		.uffd_feature_required = UFFD_FEATURE_MOVE,
1366 		.test_case_ops = &uffd_move_test_pmd_case_ops,
1367 	},
1368 	{
1369 		.name = "wp-fork",
1370 		.uffd_fn = uffd_wp_fork_test,
1371 		.mem_targets = MEM_ALL,
1372 		.uffd_feature_required = UFFD_FEATURE_PAGEFAULT_FLAG_WP |
1373 		UFFD_FEATURE_WP_HUGETLBFS_SHMEM,
1374 	},
1375 	{
1376 		.name = "wp-fork-with-event",
1377 		.uffd_fn = uffd_wp_fork_with_event_test,
1378 		.mem_targets = MEM_ALL,
1379 		.uffd_feature_required = UFFD_FEATURE_PAGEFAULT_FLAG_WP |
1380 		UFFD_FEATURE_WP_HUGETLBFS_SHMEM |
1381 		/* when set, child process should inherit uffd-wp bits */
1382 		UFFD_FEATURE_EVENT_FORK,
1383 	},
1384 	{
1385 		.name = "wp-fork-pin",
1386 		.uffd_fn = uffd_wp_fork_pin_test,
1387 		.mem_targets = MEM_ALL,
1388 		.uffd_feature_required = UFFD_FEATURE_PAGEFAULT_FLAG_WP |
1389 		UFFD_FEATURE_WP_HUGETLBFS_SHMEM,
1390 	},
1391 	{
1392 		.name = "wp-fork-pin-with-event",
1393 		.uffd_fn = uffd_wp_fork_pin_with_event_test,
1394 		.mem_targets = MEM_ALL,
1395 		.uffd_feature_required = UFFD_FEATURE_PAGEFAULT_FLAG_WP |
1396 		UFFD_FEATURE_WP_HUGETLBFS_SHMEM |
1397 		/* when set, child process should inherit uffd-wp bits */
1398 		UFFD_FEATURE_EVENT_FORK,
1399 	},
1400 	{
1401 		.name = "wp-unpopulated",
1402 		.uffd_fn = uffd_wp_unpopulated_test,
1403 		.mem_targets = MEM_ANON,
1404 		.uffd_feature_required =
1405 		UFFD_FEATURE_PAGEFAULT_FLAG_WP | UFFD_FEATURE_WP_UNPOPULATED,
1406 	},
1407 	{
1408 		.name = "minor",
1409 		.uffd_fn = uffd_minor_test,
1410 		.mem_targets = MEM_SHMEM | MEM_HUGETLB,
1411 		.uffd_feature_required =
1412 		UFFD_FEATURE_MINOR_HUGETLBFS | UFFD_FEATURE_MINOR_SHMEM,
1413 	},
1414 	{
1415 		.name = "minor-wp",
1416 		.uffd_fn = uffd_minor_wp_test,
1417 		.mem_targets = MEM_SHMEM | MEM_HUGETLB,
1418 		.uffd_feature_required =
1419 		UFFD_FEATURE_MINOR_HUGETLBFS | UFFD_FEATURE_MINOR_SHMEM |
1420 		UFFD_FEATURE_PAGEFAULT_FLAG_WP |
1421 		/*
1422 		 * HACK: here we leveraged WP_UNPOPULATED to detect whether
1423 		 * minor mode supports wr-protect.  There's no feature flag
1424 		 * for it so this is the best we can test against.
1425 		 */
1426 		UFFD_FEATURE_WP_UNPOPULATED,
1427 	},
1428 	{
1429 		.name = "minor-collapse",
1430 		.uffd_fn = uffd_minor_collapse_test,
1431 		/* MADV_COLLAPSE only works with shmem */
1432 		.mem_targets = MEM_SHMEM,
1433 		/* We can't test MADV_COLLAPSE, so try our luck */
1434 		.uffd_feature_required = UFFD_FEATURE_MINOR_SHMEM,
1435 	},
1436 	{
1437 		.name = "sigbus",
1438 		.uffd_fn = uffd_sigbus_test,
1439 		.mem_targets = MEM_ALL,
1440 		.uffd_feature_required = UFFD_FEATURE_SIGBUS |
1441 		UFFD_FEATURE_EVENT_FORK,
1442 	},
1443 	{
1444 		.name = "sigbus-wp",
1445 		.uffd_fn = uffd_sigbus_wp_test,
1446 		.mem_targets = MEM_ALL,
1447 		.uffd_feature_required = UFFD_FEATURE_SIGBUS |
1448 		UFFD_FEATURE_EVENT_FORK | UFFD_FEATURE_PAGEFAULT_FLAG_WP |
1449 		UFFD_FEATURE_WP_HUGETLBFS_SHMEM,
1450 	},
1451 	{
1452 		.name = "events",
1453 		.uffd_fn = uffd_events_test,
1454 		.mem_targets = MEM_ALL,
1455 		.uffd_feature_required = UFFD_FEATURE_EVENT_FORK |
1456 		UFFD_FEATURE_EVENT_REMAP | UFFD_FEATURE_EVENT_REMOVE,
1457 	},
1458 	{
1459 		.name = "events-wp",
1460 		.uffd_fn = uffd_events_wp_test,
1461 		.mem_targets = MEM_ALL,
1462 		.uffd_feature_required = UFFD_FEATURE_EVENT_FORK |
1463 		UFFD_FEATURE_EVENT_REMAP | UFFD_FEATURE_EVENT_REMOVE |
1464 		UFFD_FEATURE_PAGEFAULT_FLAG_WP |
1465 		UFFD_FEATURE_WP_HUGETLBFS_SHMEM,
1466 	},
1467 	{
1468 		.name = "poison",
1469 		.uffd_fn = uffd_poison_test,
1470 		.mem_targets = MEM_ALL,
1471 		.uffd_feature_required = UFFD_FEATURE_POISON,
1472 	},
1473 };
1474 
usage(const char * prog)1475 static void usage(const char *prog)
1476 {
1477 	printf("usage: %s [-f TESTNAME]\n", prog);
1478 	puts("");
1479 	puts(" -f: test name to filter (e.g., event)");
1480 	puts(" -h: show the help msg");
1481 	puts(" -l: list tests only");
1482 	puts("");
1483 	exit(KSFT_FAIL);
1484 }
1485 
main(int argc,char * argv[])1486 int main(int argc, char *argv[])
1487 {
1488 	int n_tests = sizeof(uffd_tests) / sizeof(uffd_test_case_t);
1489 	int n_mems = sizeof(mem_types) / sizeof(mem_type_t);
1490 	const char *test_filter = NULL;
1491 	bool list_only = false;
1492 	uffd_test_case_t *test;
1493 	mem_type_t *mem_type;
1494 	uffd_test_args_t args;
1495 	const char *errmsg;
1496 	int has_uffd, opt;
1497 	int i, j;
1498 
1499 	while ((opt = getopt(argc, argv, "f:hl")) != -1) {
1500 		switch (opt) {
1501 		case 'f':
1502 			test_filter = optarg;
1503 			break;
1504 		case 'l':
1505 			list_only = true;
1506 			break;
1507 		case 'h':
1508 		default:
1509 			/* Unknown */
1510 			usage(argv[0]);
1511 			break;
1512 		}
1513 	}
1514 
1515 	if (!test_filter && !list_only) {
1516 		has_uffd = test_uffd_api(false);
1517 		has_uffd |= test_uffd_api(true);
1518 
1519 		if (!has_uffd) {
1520 			printf("Userfaultfd not supported or unprivileged, skip all tests\n");
1521 			exit(KSFT_SKIP);
1522 		}
1523 	}
1524 
1525 	for (i = 0; i < n_tests; i++) {
1526 		test = &uffd_tests[i];
1527 		if (test_filter && !strstr(test->name, test_filter))
1528 			continue;
1529 		if (list_only) {
1530 			printf("%s\n", test->name);
1531 			continue;
1532 		}
1533 		for (j = 0; j < n_mems; j++) {
1534 			mem_type = &mem_types[j];
1535 			if (!(test->mem_targets & mem_type->mem_flag))
1536 				continue;
1537 
1538 			uffd_test_start("%s on %s", test->name, mem_type->name);
1539 			if ((mem_type->mem_flag == MEM_HUGETLB ||
1540 			    mem_type->mem_flag == MEM_HUGETLB_PRIVATE) &&
1541 			    (default_huge_page_size() == 0)) {
1542 				uffd_test_skip("huge page size is 0, feature missing?");
1543 				continue;
1544 			}
1545 			if (!uffd_feature_supported(test)) {
1546 				uffd_test_skip("feature missing");
1547 				continue;
1548 			}
1549 			if (uffd_setup_environment(&args, test, mem_type,
1550 						   &errmsg)) {
1551 				uffd_test_skip(errmsg);
1552 				continue;
1553 			}
1554 			test->uffd_fn(&args);
1555 			uffd_test_ctx_clear();
1556 		}
1557 	}
1558 
1559 	if (!list_only)
1560 		uffd_test_report();
1561 
1562 	return ksft_get_fail_cnt() ? KSFT_FAIL : KSFT_PASS;
1563 }
1564 
1565 #else /* __NR_userfaultfd */
1566 
1567 #warning "missing __NR_userfaultfd definition"
1568 
main(void)1569 int main(void)
1570 {
1571 	printf("Skipping %s (missing __NR_userfaultfd)\n", __file__);
1572 	return KSFT_SKIP;
1573 }
1574 
1575 #endif /* __NR_userfaultfd */
1576