xref: /linux/arch/arm64/kernel/probes/simulate-insn.c (revision c771600c6af14749609b49565ffb4cac2959710d)
11802d0beSThomas Gleixner // SPDX-License-Identifier: GPL-2.0-only
239a67d49SSandeepa Prabhu /*
339a67d49SSandeepa Prabhu  * arch/arm64/kernel/probes/simulate-insn.c
439a67d49SSandeepa Prabhu  *
539a67d49SSandeepa Prabhu  * Copyright (C) 2013 Linaro Limited.
639a67d49SSandeepa Prabhu  */
739a67d49SSandeepa Prabhu 
84890ae46SRobin Murphy #include <linux/bitops.h>
939a67d49SSandeepa Prabhu #include <linux/kernel.h>
1039a67d49SSandeepa Prabhu #include <linux/kprobes.h>
1139a67d49SSandeepa Prabhu 
12ffe7afd1SMark Rutland #include <asm/ptrace.h>
13633e5e93SJulien Thierry #include <asm/traps.h>
14ffe7afd1SMark Rutland 
1539a67d49SSandeepa Prabhu #include "simulate-insn.h"
1639a67d49SSandeepa Prabhu 
1739a67d49SSandeepa Prabhu #define bbl_displacement(insn)		\
184890ae46SRobin Murphy 	sign_extend32(((insn) & 0x3ffffff) << 2, 27)
1939a67d49SSandeepa Prabhu 
2039a67d49SSandeepa Prabhu #define bcond_displacement(insn)	\
214890ae46SRobin Murphy 	sign_extend32(((insn >> 5) & 0x7ffff) << 2, 20)
2239a67d49SSandeepa Prabhu 
2339a67d49SSandeepa Prabhu #define cbz_displacement(insn)	\
244890ae46SRobin Murphy 	sign_extend32(((insn >> 5) & 0x7ffff) << 2, 20)
2539a67d49SSandeepa Prabhu 
2639a67d49SSandeepa Prabhu #define tbz_displacement(insn)	\
274890ae46SRobin Murphy 	sign_extend32(((insn >> 5) & 0x3fff) << 2, 15)
2839a67d49SSandeepa Prabhu 
2939a67d49SSandeepa Prabhu #define ldr_displacement(insn)	\
304890ae46SRobin Murphy 	sign_extend32(((insn >> 5) & 0x7ffff) << 2, 20)
3139a67d49SSandeepa Prabhu 
set_x_reg(struct pt_regs * regs,int reg,u64 val)3239a67d49SSandeepa Prabhu static inline void set_x_reg(struct pt_regs *regs, int reg, u64 val)
3339a67d49SSandeepa Prabhu {
34ffe7afd1SMark Rutland 	pt_regs_write_reg(regs, reg, val);
3539a67d49SSandeepa Prabhu }
3639a67d49SSandeepa Prabhu 
set_w_reg(struct pt_regs * regs,int reg,u64 val)3739a67d49SSandeepa Prabhu static inline void set_w_reg(struct pt_regs *regs, int reg, u64 val)
3839a67d49SSandeepa Prabhu {
39ffe7afd1SMark Rutland 	pt_regs_write_reg(regs, reg, lower_32_bits(val));
4039a67d49SSandeepa Prabhu }
4139a67d49SSandeepa Prabhu 
get_x_reg(struct pt_regs * regs,int reg)4239a67d49SSandeepa Prabhu static inline u64 get_x_reg(struct pt_regs *regs, int reg)
4339a67d49SSandeepa Prabhu {
44ffe7afd1SMark Rutland 	return pt_regs_read_reg(regs, reg);
4539a67d49SSandeepa Prabhu }
4639a67d49SSandeepa Prabhu 
get_w_reg(struct pt_regs * regs,int reg)4739a67d49SSandeepa Prabhu static inline u32 get_w_reg(struct pt_regs *regs, int reg)
4839a67d49SSandeepa Prabhu {
49ffe7afd1SMark Rutland 	return lower_32_bits(pt_regs_read_reg(regs, reg));
5039a67d49SSandeepa Prabhu }
5139a67d49SSandeepa Prabhu 
check_cbz(u32 opcode,struct pt_regs * regs)5239a67d49SSandeepa Prabhu static bool __kprobes check_cbz(u32 opcode, struct pt_regs *regs)
5339a67d49SSandeepa Prabhu {
5439a67d49SSandeepa Prabhu 	int xn = opcode & 0x1f;
5539a67d49SSandeepa Prabhu 
5639a67d49SSandeepa Prabhu 	return (opcode & (1 << 31)) ?
5739a67d49SSandeepa Prabhu 	    (get_x_reg(regs, xn) == 0) : (get_w_reg(regs, xn) == 0);
5839a67d49SSandeepa Prabhu }
5939a67d49SSandeepa Prabhu 
check_cbnz(u32 opcode,struct pt_regs * regs)6039a67d49SSandeepa Prabhu static bool __kprobes check_cbnz(u32 opcode, struct pt_regs *regs)
6139a67d49SSandeepa Prabhu {
6239a67d49SSandeepa Prabhu 	int xn = opcode & 0x1f;
6339a67d49SSandeepa Prabhu 
6439a67d49SSandeepa Prabhu 	return (opcode & (1 << 31)) ?
6539a67d49SSandeepa Prabhu 	    (get_x_reg(regs, xn) != 0) : (get_w_reg(regs, xn) != 0);
6639a67d49SSandeepa Prabhu }
6739a67d49SSandeepa Prabhu 
check_tbz(u32 opcode,struct pt_regs * regs)6839a67d49SSandeepa Prabhu static bool __kprobes check_tbz(u32 opcode, struct pt_regs *regs)
6939a67d49SSandeepa Prabhu {
7039a67d49SSandeepa Prabhu 	int xn = opcode & 0x1f;
7139a67d49SSandeepa Prabhu 	int bit_pos = ((opcode & (1 << 31)) >> 26) | ((opcode >> 19) & 0x1f);
7239a67d49SSandeepa Prabhu 
7339a67d49SSandeepa Prabhu 	return ((get_x_reg(regs, xn) >> bit_pos) & 0x1) == 0;
7439a67d49SSandeepa Prabhu }
7539a67d49SSandeepa Prabhu 
check_tbnz(u32 opcode,struct pt_regs * regs)7639a67d49SSandeepa Prabhu static bool __kprobes check_tbnz(u32 opcode, struct pt_regs *regs)
7739a67d49SSandeepa Prabhu {
7839a67d49SSandeepa Prabhu 	int xn = opcode & 0x1f;
7939a67d49SSandeepa Prabhu 	int bit_pos = ((opcode & (1 << 31)) >> 26) | ((opcode >> 19) & 0x1f);
8039a67d49SSandeepa Prabhu 
8139a67d49SSandeepa Prabhu 	return ((get_x_reg(regs, xn) >> bit_pos) & 0x1) != 0;
8239a67d49SSandeepa Prabhu }
8339a67d49SSandeepa Prabhu 
8439a67d49SSandeepa Prabhu /*
8539a67d49SSandeepa Prabhu  * instruction simulation functions
8639a67d49SSandeepa Prabhu  */
8739a67d49SSandeepa Prabhu void __kprobes
simulate_adr_adrp(u32 opcode,long addr,struct pt_regs * regs)8839a67d49SSandeepa Prabhu simulate_adr_adrp(u32 opcode, long addr, struct pt_regs *regs)
8939a67d49SSandeepa Prabhu {
9039a67d49SSandeepa Prabhu 	long imm, xn, val;
9139a67d49SSandeepa Prabhu 
9239a67d49SSandeepa Prabhu 	xn = opcode & 0x1f;
9339a67d49SSandeepa Prabhu 	imm = ((opcode >> 3) & 0x1ffffc) | ((opcode >> 29) & 0x3);
944890ae46SRobin Murphy 	imm = sign_extend64(imm, 20);
9539a67d49SSandeepa Prabhu 	if (opcode & 0x80000000)
9639a67d49SSandeepa Prabhu 		val = (imm<<12) + (addr & 0xfffffffffffff000);
9739a67d49SSandeepa Prabhu 	else
9839a67d49SSandeepa Prabhu 		val = imm + addr;
9939a67d49SSandeepa Prabhu 
10039a67d49SSandeepa Prabhu 	set_x_reg(regs, xn, val);
10139a67d49SSandeepa Prabhu 
10239a67d49SSandeepa Prabhu 	instruction_pointer_set(regs, instruction_pointer(regs) + 4);
10339a67d49SSandeepa Prabhu }
10439a67d49SSandeepa Prabhu 
10539a67d49SSandeepa Prabhu void __kprobes
simulate_b_bl(u32 opcode,long addr,struct pt_regs * regs)10639a67d49SSandeepa Prabhu simulate_b_bl(u32 opcode, long addr, struct pt_regs *regs)
10739a67d49SSandeepa Prabhu {
10839a67d49SSandeepa Prabhu 	int disp = bbl_displacement(opcode);
10939a67d49SSandeepa Prabhu 
11039a67d49SSandeepa Prabhu 	/* Link register is x30 */
11139a67d49SSandeepa Prabhu 	if (opcode & (1 << 31))
11239a67d49SSandeepa Prabhu 		set_x_reg(regs, 30, addr + 4);
11339a67d49SSandeepa Prabhu 
11439a67d49SSandeepa Prabhu 	instruction_pointer_set(regs, addr + disp);
11539a67d49SSandeepa Prabhu }
11639a67d49SSandeepa Prabhu 
11739a67d49SSandeepa Prabhu void __kprobes
simulate_b_cond(u32 opcode,long addr,struct pt_regs * regs)11839a67d49SSandeepa Prabhu simulate_b_cond(u32 opcode, long addr, struct pt_regs *regs)
11939a67d49SSandeepa Prabhu {
12039a67d49SSandeepa Prabhu 	int disp = 4;
12139a67d49SSandeepa Prabhu 
12239a67d49SSandeepa Prabhu 	if (aarch32_opcode_cond_checks[opcode & 0xf](regs->pstate & 0xffffffff))
12339a67d49SSandeepa Prabhu 		disp = bcond_displacement(opcode);
12439a67d49SSandeepa Prabhu 
12539a67d49SSandeepa Prabhu 	instruction_pointer_set(regs, addr + disp);
12639a67d49SSandeepa Prabhu }
12739a67d49SSandeepa Prabhu 
12839a67d49SSandeepa Prabhu void __kprobes
simulate_br_blr_ret(u32 opcode,long addr,struct pt_regs * regs)12939a67d49SSandeepa Prabhu simulate_br_blr_ret(u32 opcode, long addr, struct pt_regs *regs)
13039a67d49SSandeepa Prabhu {
13139a67d49SSandeepa Prabhu 	int xn = (opcode >> 5) & 0x1f;
13239a67d49SSandeepa Prabhu 
13339a67d49SSandeepa Prabhu 	/* update pc first in case we're doing a "blr lr" */
13439a67d49SSandeepa Prabhu 	instruction_pointer_set(regs, get_x_reg(regs, xn));
13539a67d49SSandeepa Prabhu 
13639a67d49SSandeepa Prabhu 	/* Link register is x30 */
13739a67d49SSandeepa Prabhu 	if (((opcode >> 21) & 0x3) == 1)
13839a67d49SSandeepa Prabhu 		set_x_reg(regs, 30, addr + 4);
13939a67d49SSandeepa Prabhu }
14039a67d49SSandeepa Prabhu 
14139a67d49SSandeepa Prabhu void __kprobes
simulate_cbz_cbnz(u32 opcode,long addr,struct pt_regs * regs)14239a67d49SSandeepa Prabhu simulate_cbz_cbnz(u32 opcode, long addr, struct pt_regs *regs)
14339a67d49SSandeepa Prabhu {
14439a67d49SSandeepa Prabhu 	int disp = 4;
14539a67d49SSandeepa Prabhu 
14639a67d49SSandeepa Prabhu 	if (opcode & (1 << 24)) {
14739a67d49SSandeepa Prabhu 		if (check_cbnz(opcode, regs))
14839a67d49SSandeepa Prabhu 			disp = cbz_displacement(opcode);
14939a67d49SSandeepa Prabhu 	} else {
15039a67d49SSandeepa Prabhu 		if (check_cbz(opcode, regs))
15139a67d49SSandeepa Prabhu 			disp = cbz_displacement(opcode);
15239a67d49SSandeepa Prabhu 	}
15339a67d49SSandeepa Prabhu 	instruction_pointer_set(regs, addr + disp);
15439a67d49SSandeepa Prabhu }
15539a67d49SSandeepa Prabhu 
15639a67d49SSandeepa Prabhu void __kprobes
simulate_tbz_tbnz(u32 opcode,long addr,struct pt_regs * regs)15739a67d49SSandeepa Prabhu simulate_tbz_tbnz(u32 opcode, long addr, struct pt_regs *regs)
15839a67d49SSandeepa Prabhu {
15939a67d49SSandeepa Prabhu 	int disp = 4;
16039a67d49SSandeepa Prabhu 
16139a67d49SSandeepa Prabhu 	if (opcode & (1 << 24)) {
16239a67d49SSandeepa Prabhu 		if (check_tbnz(opcode, regs))
16339a67d49SSandeepa Prabhu 			disp = tbz_displacement(opcode);
16439a67d49SSandeepa Prabhu 	} else {
16539a67d49SSandeepa Prabhu 		if (check_tbz(opcode, regs))
16639a67d49SSandeepa Prabhu 			disp = tbz_displacement(opcode);
16739a67d49SSandeepa Prabhu 	}
16839a67d49SSandeepa Prabhu 	instruction_pointer_set(regs, addr + disp);
16939a67d49SSandeepa Prabhu }
17039a67d49SSandeepa Prabhu 
17139a67d49SSandeepa Prabhu void __kprobes
simulate_ldr_literal(u32 opcode,long addr,struct pt_regs * regs)17239a67d49SSandeepa Prabhu simulate_ldr_literal(u32 opcode, long addr, struct pt_regs *regs)
17339a67d49SSandeepa Prabhu {
17450f813e5SMark Rutland 	unsigned long load_addr;
17539a67d49SSandeepa Prabhu 	int xn = opcode & 0x1f;
17639a67d49SSandeepa Prabhu 
17750f813e5SMark Rutland 	load_addr = addr + ldr_displacement(opcode);
17839a67d49SSandeepa Prabhu 
17939a67d49SSandeepa Prabhu 	if (opcode & (1 << 30))	/* x0-x30 */
18050f813e5SMark Rutland 		set_x_reg(regs, xn, READ_ONCE(*(u64 *)load_addr));
18139a67d49SSandeepa Prabhu 	else			/* w0-w30 */
18250f813e5SMark Rutland 		set_w_reg(regs, xn, READ_ONCE(*(u32 *)load_addr));
18339a67d49SSandeepa Prabhu 
18439a67d49SSandeepa Prabhu 	instruction_pointer_set(regs, instruction_pointer(regs) + 4);
18539a67d49SSandeepa Prabhu }
18639a67d49SSandeepa Prabhu 
18739a67d49SSandeepa Prabhu void __kprobes
simulate_ldrsw_literal(u32 opcode,long addr,struct pt_regs * regs)18839a67d49SSandeepa Prabhu simulate_ldrsw_literal(u32 opcode, long addr, struct pt_regs *regs)
18939a67d49SSandeepa Prabhu {
19050f813e5SMark Rutland 	unsigned long load_addr;
19139a67d49SSandeepa Prabhu 	int xn = opcode & 0x1f;
19239a67d49SSandeepa Prabhu 
19350f813e5SMark Rutland 	load_addr = addr + ldr_displacement(opcode);
19439a67d49SSandeepa Prabhu 
19550f813e5SMark Rutland 	set_x_reg(regs, xn, READ_ONCE(*(s32 *)load_addr));
19639a67d49SSandeepa Prabhu 
19739a67d49SSandeepa Prabhu 	instruction_pointer_set(regs, instruction_pointer(regs) + 4);
19839a67d49SSandeepa Prabhu }
199*ac4ad5c0SLiao Chang 
200*ac4ad5c0SLiao Chang void __kprobes
simulate_nop(u32 opcode,long addr,struct pt_regs * regs)201*ac4ad5c0SLiao Chang simulate_nop(u32 opcode, long addr, struct pt_regs *regs)
202*ac4ad5c0SLiao Chang {
203*ac4ad5c0SLiao Chang 	arm64_skip_faulting_instruction(regs, AARCH64_INSN_SIZE);
204*ac4ad5c0SLiao Chang }
205