All of lore.kernel.org
 help / color / mirror / Atom feed
From: mark.rutland@arm.com (Mark Rutland)
To: linux-arm-kernel@lists.infradead.org
Subject: [PATCH] arm64: suspend: avoid potential TLB conflict
Date: Tue, 9 Aug 2016 18:51:58 +0100	[thread overview]
Message-ID: <20160809175157.GC13591@leverpostej> (raw)
In-Reply-To: <57AA0401.1020809@arm.com>

On Tue, Aug 09, 2016 at 05:25:37PM +0100, James Morse wrote:
> > @@ -217,12 +218,16 @@ static int create_safe_exec_page(void *src_start, size_t length,
> >  	set_pte(pte, __pte(virt_to_phys((void *)dst) |
> >  			 pgprot_val(PAGE_KERNEL_EXEC)));
> >  
> > -	/* Load our new page tables */
> > -	asm volatile("msr	ttbr0_el1, %0;"
> > -		     "isb;"
> > -		     "tlbi	vmalle1is;"
> > -		     "dsb	ish;"
> > -		     "isb" : : "r"(virt_to_phys(pgd)));
> > +	/*
> > +	 * Load our new page tables. TTBR0 currently points to the zero page,
> 
> fe12c00d21bb ("PM / hibernate: Introduce test_resume mode for hibernation") came
> in with the merge window, this does a suspend followed by a resume with the user
> page tables still loaded in ttbr0_el1.

Hmmm... given that, it looks like if we bail out in swsusp_arch_resume()
after the call to create_safe_exec_page(), we may return to userspace
with a corrupted TTBR0.

We probably need to defer the call to create_safe_exec_page() after the
other potential failure sites so as to avoid that.

Looking around it's not clear to me how/where the get_safe_page()
allocations are cleaned up when a failure occurs.

Thanks,
Mark.

  parent reply	other threads:[~2016-08-09 17:51 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-08-08 10:10 [PATCH] arm64: suspend: avoid potential TLB conflict Mark Rutland
2016-08-09 16:25 ` James Morse
2016-08-09 16:49   ` Mark Rutland
2016-08-09 17:51   ` Mark Rutland [this message]
2016-08-10  9:39     ` James Morse
2016-08-11 11:01       ` Mark Rutland

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20160809175157.GC13591@leverpostej \
    --to=mark.rutland@arm.com \
    --cc=linux-arm-kernel@lists.infradead.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.