1 /* SPDX-License-Identifier: GPL-2.0-or-later */
2 /*
3 * vma.h
4 *
5 * Core VMA manipulation API implemented in vma.c.
6 */
7 #ifndef __MM_VMA_H
8 #define __MM_VMA_H
9
10 /*
11 * VMA lock generalization
12 */
13 struct vma_prepare {
14 struct vm_area_struct *vma;
15 struct vm_area_struct *adj_next;
16 struct file *file;
17 struct address_space *mapping;
18 struct anon_vma *anon_vma;
19 struct vm_area_struct *insert;
20 struct vm_area_struct *remove;
21 struct vm_area_struct *remove2;
22 };
23
24 struct unlink_vma_file_batch {
25 int count;
26 struct vm_area_struct *vmas[8];
27 };
28
29 /*
30 * vma munmap operation
31 */
32 struct vma_munmap_struct {
33 struct vma_iterator *vmi;
34 struct vm_area_struct *vma; /* The first vma to munmap */
35 struct vm_area_struct *prev; /* vma before the munmap area */
36 struct vm_area_struct *next; /* vma after the munmap area */
37 struct list_head *uf; /* Userfaultfd list_head */
38 unsigned long start; /* Aligned start addr (inclusive) */
39 unsigned long end; /* Aligned end addr (exclusive) */
40 unsigned long unmap_start; /* Unmap PTE start */
41 unsigned long unmap_end; /* Unmap PTE end */
42 int vma_count; /* Number of vmas that will be removed */
43 bool unlock; /* Unlock after the munmap */
44 bool clear_ptes; /* If there are outstanding PTE to be cleared */
45 /* 2 byte hole */
46 unsigned long nr_pages; /* Number of pages being removed */
47 unsigned long locked_vm; /* Number of locked pages */
48 unsigned long nr_accounted; /* Number of VM_ACCOUNT pages */
49 unsigned long exec_vm;
50 unsigned long stack_vm;
51 unsigned long data_vm;
52 };
53
54 enum vma_merge_state {
55 VMA_MERGE_START,
56 VMA_MERGE_ERROR_NOMEM,
57 VMA_MERGE_NOMERGE,
58 VMA_MERGE_SUCCESS,
59 };
60
61 /*
62 * Describes a VMA merge operation and is threaded throughout it.
63 *
64 * Any of the fields may be mutated by the merge operation, so no guarantees are
65 * made to the contents of this structure after a merge operation has completed.
66 */
67 struct vma_merge_struct {
68 struct mm_struct *mm;
69 struct vma_iterator *vmi;
70 /*
71 * Adjacent VMAs, any of which may be NULL if not present:
72 *
73 * |------|--------|------|
74 * | prev | middle | next |
75 * |------|--------|------|
76 *
77 * middle may not yet exist in the case of a proposed new VMA being
78 * merged, or it may be an existing VMA.
79 *
80 * next may be assigned by the caller.
81 */
82 struct vm_area_struct *prev;
83 struct vm_area_struct *middle;
84 struct vm_area_struct *next;
85 /* This is the VMA we ultimately target to become the merged VMA. */
86 struct vm_area_struct *target;
87 /*
88 * Initially, the start, end, pgoff fields are provided by the caller
89 * and describe the proposed new VMA range, whether modifying an
90 * existing VMA (which will be 'middle'), or adding a new one.
91 *
92 * During the merge process these fields are updated to describe the new
93 * range _including those VMAs which will be merged_.
94 */
95 unsigned long start;
96 unsigned long end;
97 pgoff_t pgoff;
98
99 unsigned long flags;
100 struct file *file;
101 struct anon_vma *anon_vma;
102 struct mempolicy *policy;
103 struct vm_userfaultfd_ctx uffd_ctx;
104 struct anon_vma_name *anon_name;
105 enum vma_merge_state state;
106
107 /* Flags which callers can use to modify merge behaviour: */
108
109 /*
110 * If we can expand, simply do so. We know there is nothing to merge to
111 * the right. Does not reset state upon failure to merge. The VMA
112 * iterator is assumed to be positioned at the previous VMA, rather than
113 * at the gap.
114 */
115 bool just_expand :1;
116
117 /*
118 * If a merge is possible, but an OOM error occurs, give up and don't
119 * execute the merge, returning NULL.
120 */
121 bool give_up_on_oom :1;
122
123 /* Internal flags set during merge process: */
124
125 /*
126 * Internal flag indicating the merge increases vmg->middle->vm_start
127 * (and thereby, vmg->prev->vm_end).
128 */
129 bool __adjust_middle_start :1;
130 /*
131 * Internal flag indicating the merge decreases vmg->next->vm_start
132 * (and thereby, vmg->middle->vm_end).
133 */
134 bool __adjust_next_start :1;
135 /*
136 * Internal flag used during the merge operation to indicate we will
137 * remove vmg->middle.
138 */
139 bool __remove_middle :1;
140 /*
141 * Internal flag used during the merge operationr to indicate we will
142 * remove vmg->next.
143 */
144 bool __remove_next :1;
145
146 };
147
vmg_nomem(struct vma_merge_struct * vmg)148 static inline bool vmg_nomem(struct vma_merge_struct *vmg)
149 {
150 return vmg->state == VMA_MERGE_ERROR_NOMEM;
151 }
152
153 /* Assumes addr >= vma->vm_start. */
vma_pgoff_offset(struct vm_area_struct * vma,unsigned long addr)154 static inline pgoff_t vma_pgoff_offset(struct vm_area_struct *vma,
155 unsigned long addr)
156 {
157 return vma->vm_pgoff + PHYS_PFN(addr - vma->vm_start);
158 }
159
160 #define VMG_STATE(name, mm_, vmi_, start_, end_, flags_, pgoff_) \
161 struct vma_merge_struct name = { \
162 .mm = mm_, \
163 .vmi = vmi_, \
164 .start = start_, \
165 .end = end_, \
166 .flags = flags_, \
167 .pgoff = pgoff_, \
168 .state = VMA_MERGE_START, \
169 }
170
171 #define VMG_VMA_STATE(name, vmi_, prev_, vma_, start_, end_) \
172 struct vma_merge_struct name = { \
173 .mm = vma_->vm_mm, \
174 .vmi = vmi_, \
175 .prev = prev_, \
176 .middle = vma_, \
177 .next = NULL, \
178 .start = start_, \
179 .end = end_, \
180 .flags = vma_->vm_flags, \
181 .pgoff = vma_pgoff_offset(vma_, start_), \
182 .file = vma_->vm_file, \
183 .anon_vma = vma_->anon_vma, \
184 .policy = vma_policy(vma_), \
185 .uffd_ctx = vma_->vm_userfaultfd_ctx, \
186 .anon_name = anon_vma_name(vma_), \
187 .state = VMA_MERGE_START, \
188 }
189
190 #ifdef CONFIG_DEBUG_VM_MAPLE_TREE
191 void validate_mm(struct mm_struct *mm);
192 #else
193 #define validate_mm(mm) do { } while (0)
194 #endif
195
196 __must_check int vma_expand(struct vma_merge_struct *vmg);
197 __must_check int vma_shrink(struct vma_iterator *vmi,
198 struct vm_area_struct *vma,
199 unsigned long start, unsigned long end, pgoff_t pgoff);
200
vma_iter_store_gfp(struct vma_iterator * vmi,struct vm_area_struct * vma,gfp_t gfp)201 static inline int vma_iter_store_gfp(struct vma_iterator *vmi,
202 struct vm_area_struct *vma, gfp_t gfp)
203
204 {
205 if (vmi->mas.status != ma_start &&
206 ((vmi->mas.index > vma->vm_start) || (vmi->mas.last < vma->vm_start)))
207 vma_iter_invalidate(vmi);
208
209 __mas_set_range(&vmi->mas, vma->vm_start, vma->vm_end - 1);
210 mas_store_gfp(&vmi->mas, vma, gfp);
211 if (unlikely(mas_is_err(&vmi->mas)))
212 return -ENOMEM;
213
214 vma_mark_attached(vma);
215 return 0;
216 }
217
218 int
219 do_vmi_align_munmap(struct vma_iterator *vmi, struct vm_area_struct *vma,
220 struct mm_struct *mm, unsigned long start,
221 unsigned long end, struct list_head *uf, bool unlock);
222
223 int do_vmi_munmap(struct vma_iterator *vmi, struct mm_struct *mm,
224 unsigned long start, size_t len, struct list_head *uf,
225 bool unlock);
226
227 void remove_vma(struct vm_area_struct *vma);
228
229 void unmap_region(struct ma_state *mas, struct vm_area_struct *vma,
230 struct vm_area_struct *prev, struct vm_area_struct *next);
231
232 /* We are about to modify the VMA's flags. */
233 __must_check struct vm_area_struct
234 *vma_modify_flags(struct vma_iterator *vmi,
235 struct vm_area_struct *prev, struct vm_area_struct *vma,
236 unsigned long start, unsigned long end,
237 unsigned long new_flags);
238
239 /* We are about to modify the VMA's flags and/or anon_name. */
240 __must_check struct vm_area_struct
241 *vma_modify_flags_name(struct vma_iterator *vmi,
242 struct vm_area_struct *prev,
243 struct vm_area_struct *vma,
244 unsigned long start,
245 unsigned long end,
246 unsigned long new_flags,
247 struct anon_vma_name *new_name);
248
249 /* We are about to modify the VMA's memory policy. */
250 __must_check struct vm_area_struct
251 *vma_modify_policy(struct vma_iterator *vmi,
252 struct vm_area_struct *prev,
253 struct vm_area_struct *vma,
254 unsigned long start, unsigned long end,
255 struct mempolicy *new_pol);
256
257 /* We are about to modify the VMA's flags and/or uffd context. */
258 __must_check struct vm_area_struct
259 *vma_modify_flags_uffd(struct vma_iterator *vmi,
260 struct vm_area_struct *prev,
261 struct vm_area_struct *vma,
262 unsigned long start, unsigned long end,
263 unsigned long new_flags,
264 struct vm_userfaultfd_ctx new_ctx,
265 bool give_up_on_oom);
266
267 __must_check struct vm_area_struct
268 *vma_merge_new_range(struct vma_merge_struct *vmg);
269
270 __must_check struct vm_area_struct
271 *vma_merge_extend(struct vma_iterator *vmi,
272 struct vm_area_struct *vma,
273 unsigned long delta);
274
275 void unlink_file_vma_batch_init(struct unlink_vma_file_batch *vb);
276
277 void unlink_file_vma_batch_final(struct unlink_vma_file_batch *vb);
278
279 void unlink_file_vma_batch_add(struct unlink_vma_file_batch *vb,
280 struct vm_area_struct *vma);
281
282 void unlink_file_vma(struct vm_area_struct *vma);
283
284 void vma_link_file(struct vm_area_struct *vma);
285
286 int vma_link(struct mm_struct *mm, struct vm_area_struct *vma);
287
288 struct vm_area_struct *copy_vma(struct vm_area_struct **vmap,
289 unsigned long addr, unsigned long len, pgoff_t pgoff,
290 bool *need_rmap_locks);
291
292 struct anon_vma *find_mergeable_anon_vma(struct vm_area_struct *vma);
293
294 bool vma_needs_dirty_tracking(struct vm_area_struct *vma);
295 bool vma_wants_writenotify(struct vm_area_struct *vma, pgprot_t vm_page_prot);
296
297 int mm_take_all_locks(struct mm_struct *mm);
298 void mm_drop_all_locks(struct mm_struct *mm);
299
300 unsigned long mmap_region(struct file *file, unsigned long addr,
301 unsigned long len, vm_flags_t vm_flags, unsigned long pgoff,
302 struct list_head *uf);
303
304 int do_brk_flags(struct vma_iterator *vmi, struct vm_area_struct *brkvma,
305 unsigned long addr, unsigned long request, unsigned long flags);
306
307 unsigned long unmapped_area(struct vm_unmapped_area_info *info);
308 unsigned long unmapped_area_topdown(struct vm_unmapped_area_info *info);
309
vma_wants_manual_pte_write_upgrade(struct vm_area_struct * vma)310 static inline bool vma_wants_manual_pte_write_upgrade(struct vm_area_struct *vma)
311 {
312 /*
313 * We want to check manually if we can change individual PTEs writable
314 * if we can't do that automatically for all PTEs in a mapping. For
315 * private mappings, that's always the case when we have write
316 * permissions as we properly have to handle COW.
317 */
318 if (vma->vm_flags & VM_SHARED)
319 return vma_wants_writenotify(vma, vma->vm_page_prot);
320 return !!(vma->vm_flags & VM_WRITE);
321 }
322
323 #ifdef CONFIG_MMU
vm_pgprot_modify(pgprot_t oldprot,unsigned long vm_flags)324 static inline pgprot_t vm_pgprot_modify(pgprot_t oldprot, unsigned long vm_flags)
325 {
326 return pgprot_modify(oldprot, vm_get_page_prot(vm_flags));
327 }
328 #endif
329
vma_prev_limit(struct vma_iterator * vmi,unsigned long min)330 static inline struct vm_area_struct *vma_prev_limit(struct vma_iterator *vmi,
331 unsigned long min)
332 {
333 return mas_prev(&vmi->mas, min);
334 }
335
336 /*
337 * These three helpers classifies VMAs for virtual memory accounting.
338 */
339
340 /*
341 * Executable code area - executable, not writable, not stack
342 */
is_exec_mapping(vm_flags_t flags)343 static inline bool is_exec_mapping(vm_flags_t flags)
344 {
345 return (flags & (VM_EXEC | VM_WRITE | VM_STACK)) == VM_EXEC;
346 }
347
348 /*
349 * Stack area (including shadow stacks)
350 *
351 * VM_GROWSUP / VM_GROWSDOWN VMAs are always private anonymous:
352 * do_mmap() forbids all other combinations.
353 */
is_stack_mapping(vm_flags_t flags)354 static inline bool is_stack_mapping(vm_flags_t flags)
355 {
356 return ((flags & VM_STACK) == VM_STACK) || (flags & VM_SHADOW_STACK);
357 }
358
359 /*
360 * Data area - private, writable, not stack
361 */
is_data_mapping(vm_flags_t flags)362 static inline bool is_data_mapping(vm_flags_t flags)
363 {
364 return (flags & (VM_WRITE | VM_SHARED | VM_STACK)) == VM_WRITE;
365 }
366
367
vma_iter_config(struct vma_iterator * vmi,unsigned long index,unsigned long last)368 static inline void vma_iter_config(struct vma_iterator *vmi,
369 unsigned long index, unsigned long last)
370 {
371 __mas_set_range(&vmi->mas, index, last - 1);
372 }
373
vma_iter_reset(struct vma_iterator * vmi)374 static inline void vma_iter_reset(struct vma_iterator *vmi)
375 {
376 mas_reset(&vmi->mas);
377 }
378
379 static inline
vma_iter_prev_range_limit(struct vma_iterator * vmi,unsigned long min)380 struct vm_area_struct *vma_iter_prev_range_limit(struct vma_iterator *vmi, unsigned long min)
381 {
382 return mas_prev_range(&vmi->mas, min);
383 }
384
385 static inline
vma_iter_next_range_limit(struct vma_iterator * vmi,unsigned long max)386 struct vm_area_struct *vma_iter_next_range_limit(struct vma_iterator *vmi, unsigned long max)
387 {
388 return mas_next_range(&vmi->mas, max);
389 }
390
vma_iter_area_lowest(struct vma_iterator * vmi,unsigned long min,unsigned long max,unsigned long size)391 static inline int vma_iter_area_lowest(struct vma_iterator *vmi, unsigned long min,
392 unsigned long max, unsigned long size)
393 {
394 return mas_empty_area(&vmi->mas, min, max - 1, size);
395 }
396
vma_iter_area_highest(struct vma_iterator * vmi,unsigned long min,unsigned long max,unsigned long size)397 static inline int vma_iter_area_highest(struct vma_iterator *vmi, unsigned long min,
398 unsigned long max, unsigned long size)
399 {
400 return mas_empty_area_rev(&vmi->mas, min, max - 1, size);
401 }
402
403 /*
404 * VMA Iterator functions shared between nommu and mmap
405 */
vma_iter_prealloc(struct vma_iterator * vmi,struct vm_area_struct * vma)406 static inline int vma_iter_prealloc(struct vma_iterator *vmi,
407 struct vm_area_struct *vma)
408 {
409 return mas_preallocate(&vmi->mas, vma, GFP_KERNEL);
410 }
411
vma_iter_clear(struct vma_iterator * vmi)412 static inline void vma_iter_clear(struct vma_iterator *vmi)
413 {
414 mas_store_prealloc(&vmi->mas, NULL);
415 }
416
vma_iter_load(struct vma_iterator * vmi)417 static inline struct vm_area_struct *vma_iter_load(struct vma_iterator *vmi)
418 {
419 return mas_walk(&vmi->mas);
420 }
421
422 /* Store a VMA with preallocated memory */
vma_iter_store_overwrite(struct vma_iterator * vmi,struct vm_area_struct * vma)423 static inline void vma_iter_store_overwrite(struct vma_iterator *vmi,
424 struct vm_area_struct *vma)
425 {
426 vma_assert_attached(vma);
427
428 #if defined(CONFIG_DEBUG_VM_MAPLE_TREE)
429 if (MAS_WARN_ON(&vmi->mas, vmi->mas.status != ma_start &&
430 vmi->mas.index > vma->vm_start)) {
431 pr_warn("%lx > %lx\n store vma %lx-%lx\n into slot %lx-%lx\n",
432 vmi->mas.index, vma->vm_start, vma->vm_start,
433 vma->vm_end, vmi->mas.index, vmi->mas.last);
434 }
435 if (MAS_WARN_ON(&vmi->mas, vmi->mas.status != ma_start &&
436 vmi->mas.last < vma->vm_start)) {
437 pr_warn("%lx < %lx\nstore vma %lx-%lx\ninto slot %lx-%lx\n",
438 vmi->mas.last, vma->vm_start, vma->vm_start, vma->vm_end,
439 vmi->mas.index, vmi->mas.last);
440 }
441 #endif
442
443 if (vmi->mas.status != ma_start &&
444 ((vmi->mas.index > vma->vm_start) || (vmi->mas.last < vma->vm_start)))
445 vma_iter_invalidate(vmi);
446
447 __mas_set_range(&vmi->mas, vma->vm_start, vma->vm_end - 1);
448 mas_store_prealloc(&vmi->mas, vma);
449 }
450
vma_iter_store_new(struct vma_iterator * vmi,struct vm_area_struct * vma)451 static inline void vma_iter_store_new(struct vma_iterator *vmi,
452 struct vm_area_struct *vma)
453 {
454 vma_mark_attached(vma);
455 vma_iter_store_overwrite(vmi, vma);
456 }
457
vma_iter_addr(struct vma_iterator * vmi)458 static inline unsigned long vma_iter_addr(struct vma_iterator *vmi)
459 {
460 return vmi->mas.index;
461 }
462
vma_iter_end(struct vma_iterator * vmi)463 static inline unsigned long vma_iter_end(struct vma_iterator *vmi)
464 {
465 return vmi->mas.last + 1;
466 }
467
vma_iter_bulk_alloc(struct vma_iterator * vmi,unsigned long count)468 static inline int vma_iter_bulk_alloc(struct vma_iterator *vmi,
469 unsigned long count)
470 {
471 return mas_expected_entries(&vmi->mas, count);
472 }
473
474 static inline
vma_iter_prev_range(struct vma_iterator * vmi)475 struct vm_area_struct *vma_iter_prev_range(struct vma_iterator *vmi)
476 {
477 return mas_prev_range(&vmi->mas, 0);
478 }
479
480 /*
481 * Retrieve the next VMA and rewind the iterator to end of the previous VMA, or
482 * if no previous VMA, to index 0.
483 */
484 static inline
vma_iter_next_rewind(struct vma_iterator * vmi,struct vm_area_struct ** pprev)485 struct vm_area_struct *vma_iter_next_rewind(struct vma_iterator *vmi,
486 struct vm_area_struct **pprev)
487 {
488 struct vm_area_struct *next = vma_next(vmi);
489 struct vm_area_struct *prev = vma_prev(vmi);
490
491 /*
492 * Consider the case where no previous VMA exists. We advance to the
493 * next VMA, skipping any gap, then rewind to the start of the range.
494 *
495 * If we were to unconditionally advance to the next range we'd wind up
496 * at the next VMA again, so we check to ensure there is a previous VMA
497 * to skip over.
498 */
499 if (prev)
500 vma_iter_next_range(vmi);
501
502 if (pprev)
503 *pprev = prev;
504
505 return next;
506 }
507
508 #ifdef CONFIG_64BIT
509
vma_is_sealed(struct vm_area_struct * vma)510 static inline bool vma_is_sealed(struct vm_area_struct *vma)
511 {
512 return (vma->vm_flags & VM_SEALED);
513 }
514
515 /*
516 * check if a vma is sealed for modification.
517 * return true, if modification is allowed.
518 */
can_modify_vma(struct vm_area_struct * vma)519 static inline bool can_modify_vma(struct vm_area_struct *vma)
520 {
521 if (unlikely(vma_is_sealed(vma)))
522 return false;
523
524 return true;
525 }
526
527 bool can_modify_vma_madv(struct vm_area_struct *vma, int behavior);
528
529 #else
530
can_modify_vma(struct vm_area_struct * vma)531 static inline bool can_modify_vma(struct vm_area_struct *vma)
532 {
533 return true;
534 }
535
can_modify_vma_madv(struct vm_area_struct * vma,int behavior)536 static inline bool can_modify_vma_madv(struct vm_area_struct *vma, int behavior)
537 {
538 return true;
539 }
540
541 #endif
542
543 #if defined(CONFIG_STACK_GROWSUP)
544 int expand_upwards(struct vm_area_struct *vma, unsigned long address);
545 #endif
546
547 int expand_downwards(struct vm_area_struct *vma, unsigned long address);
548
549 int __vm_munmap(unsigned long start, size_t len, bool unlock);
550
551 #endif /* __MM_VMA_H */
552