From: David Hildenbrand <david@redhat.com>
To: Mike Rapoport <rppt@kernel.org>,
Andrew Morton <akpm@linux-foundation.org>
Cc: Andrea Arcangeli <aarcange@redhat.com>,
Baoquan He <bhe@redhat.com>, Borislav Petkov <bp@alien8.de>,
"H. Peter Anvin" <hpa@zytor.com>, Ingo Molnar <mingo@redhat.com>,
Mel Gorman <mgorman@suse.de>, Michal Hocko <mhocko@kernel.org>,
Mike Rapoport <rppt@linux.ibm.com>, Qian Cai <cai@lca.pw>,
Thomas Gleixner <tglx@linutronix.de>,
Vlastimil Babka <vbabka@suse.cz>,
linux-kernel@vger.kernel.org, linux-mm@kvack.org, x86@kernel.org
Subject: Re: [PATCH 1/2] x86/setup: consolidate early memory reservations
Date: Fri, 15 Jan 2021 11:10:55 +0100 [thread overview]
Message-ID: <40adfd60-98da-b415-0108-dd3c15deea03@redhat.com> (raw)
In-Reply-To: <20210115083255.12744-2-rppt@kernel.org>
On 15.01.21 09:32, Mike Rapoport wrote:
> From: Mike Rapoport <rppt@linux.ibm.com>
>
> The early reservations of memory areas used by the firmware, bootloader,
> kernel text and data are spread over setup_arch(). Moreover, some of them
> happen *after* memblock allocations, e.g trim_platform_memory_ranges() and
> trim_low_memory_range() are called after reserve_real_mode() that allocates
> memory.
>
> We did not observe corruption of these memory regions because memblock
> always allocates memory either from the end of memory (in top-down mode) or
> above the kernel image (in bottom-up mode). However, the bottom up mode is
> going to be updated to span the entire memory [1] to avoid limitations
> caused by KASLR.
>
> Consolidate early memory reservations in a dedicated function to improve
> robustness against future changes. Having the early reservations in one
> place also makes it clearer what memory must be reserved before we allow
> memblock allocations.
>
> [1] https://lore.kernel.org/lkml/20201217201214.3414100-2-guro@fb.com
>
> Signed-off-by: Mike Rapoport <rppt@linux.ibm.com>
> ---
> arch/x86/kernel/setup.c | 80 ++++++++++++++++++++++-------------------
> 1 file changed, 44 insertions(+), 36 deletions(-)
>
> diff --git a/arch/x86/kernel/setup.c b/arch/x86/kernel/setup.c
> index 3412c4595efd..32cd2e790a0a 100644
> --- a/arch/x86/kernel/setup.c
> +++ b/arch/x86/kernel/setup.c
> @@ -728,7 +728,38 @@ static void __init trim_low_memory_range(void)
> */
> memblock_reserve(0, ALIGN(reserve_low, PAGE_SIZE));
> }
> -
> +
> +static void __init early_reserve_memory(void)
> +{
> + /*
> + * Reserve the memory occupied by the kernel between _text and
> + * __end_of_kernel_reserve symbols. Any kernel sections after the
> + * __end_of_kernel_reserve symbol must be explicitly reserved with a
> + * separate memblock_reserve() or they will be discarded.
> + */
> + memblock_reserve(__pa_symbol(_text),
> + (unsigned long)__end_of_kernel_reserve - (unsigned long)_text);
> +
> + /*
> + * Make sure page 0 is always reserved because on systems with
> + * L1TF its contents can be leaked to user processes.
> + */
> + memblock_reserve(0, PAGE_SIZE);
> +
> + early_reserve_initrd();
> +
> + if (efi_enabled(EFI_BOOT))
> + efi_memblock_x86_reserve_range();
> +
> + memblock_x86_reserve_range_setup_data();
> +
> + reserve_ibft_region();
> + reserve_bios_regions();
> +
> + trim_platform_memory_ranges();
> + trim_low_memory_range();
> +}
> +
> /*
> * Dump out kernel offset information on panic.
> */
> @@ -763,29 +794,6 @@ dump_kernel_offset(struct notifier_block *self, unsigned long v, void *p)
>
> void __init setup_arch(char **cmdline_p)
> {
> - /*
> - * Reserve the memory occupied by the kernel between _text and
> - * __end_of_kernel_reserve symbols. Any kernel sections after the
> - * __end_of_kernel_reserve symbol must be explicitly reserved with a
> - * separate memblock_reserve() or they will be discarded.
> - */
> - memblock_reserve(__pa_symbol(_text),
> - (unsigned long)__end_of_kernel_reserve - (unsigned long)_text);
> -
> - /*
> - * Make sure page 0 is always reserved because on systems with
> - * L1TF its contents can be leaked to user processes.
> - */
> - memblock_reserve(0, PAGE_SIZE);
> -
> - early_reserve_initrd();
> -
> - /*
> - * At this point everything still needed from the boot loader
> - * or BIOS or kernel text should be early reserved or marked not
> - * RAM in e820. All other memory is free game.
> - */
> -
> #ifdef CONFIG_X86_32
> memcpy(&boot_cpu_data, &new_cpu_data, sizeof(new_cpu_data));
>
> @@ -909,8 +917,18 @@ void __init setup_arch(char **cmdline_p)
>
> parse_early_param();
>
> - if (efi_enabled(EFI_BOOT))
> - efi_memblock_x86_reserve_range();
> + /*
> + * Do some memory reservations *before* memory is added to
> + * memblock, so memblock allocations won't overwrite it.
> + * Do it after early param, so we could get (unlikely) panic from
> + * serial.
> + *
> + * After this point everything still needed from the boot loader or
> + * firmware or kernel text should be early reserved or marked not
> + * RAM in e820. All other memory is free game.
> + */
> + early_reserve_memory();
> +
> #ifdef CONFIG_MEMORY_HOTPLUG
> /*
> * Memory used by the kernel cannot be hot-removed because Linux
> @@ -937,9 +955,6 @@ void __init setup_arch(char **cmdline_p)
>
> x86_report_nx();
>
> - /* after early param, so could get panic from serial */
> - memblock_x86_reserve_range_setup_data();
> -
> if (acpi_mps_check()) {
> #ifdef CONFIG_X86_LOCAL_APIC
> disable_apic = 1;
> @@ -1031,8 +1046,6 @@ void __init setup_arch(char **cmdline_p)
> */
> find_smp_config();
>
> - reserve_ibft_region();
> -
> early_alloc_pgt_buf();
>
> /*
> @@ -1053,8 +1066,6 @@ void __init setup_arch(char **cmdline_p)
> */
> sev_setup_arch();
>
> - reserve_bios_regions();
> -
> efi_fake_memmap();
> efi_find_mirror();
> efi_esrt_init();
> @@ -1080,9 +1091,6 @@ void __init setup_arch(char **cmdline_p)
>
> reserve_real_mode();
>
> - trim_platform_memory_ranges();
> - trim_low_memory_range();
> -
> init_mem_mapping();
>
> idt_setup_early_pf();
>
Did not fully review for side-effects, but looks like a reasonable thing
to do!
--
Thanks,
David / dhildenb
next prev parent reply other threads:[~2021-01-15 10:11 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-01-15 8:32 [PATCH 0/2] x86/setup: consolidate early memory reservations Mike Rapoport
2021-01-15 8:32 ` [PATCH 1/2] " Mike Rapoport
2021-01-15 10:10 ` David Hildenbrand [this message]
2021-01-25 14:50 ` Borislav Petkov
2021-01-25 15:31 ` Mike Rapoport
2021-01-25 16:56 ` Borislav Petkov
2021-01-25 14:59 ` Borislav Petkov
2021-01-25 15:33 ` Mike Rapoport
2021-01-15 8:32 ` [PATCH 2/2] x86/setup: merge several reservations of start of the memory Mike Rapoport
2021-01-15 10:09 ` David Hildenbrand
2021-01-25 14:55 ` Borislav Petkov
2021-01-15 11:42 ` [PATCH 0/2] x86/setup: consolidate early memory reservations Baoquan He
2021-01-15 11:56 ` Baoquan He
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=40adfd60-98da-b415-0108-dd3c15deea03@redhat.com \
--to=david@redhat.com \
--cc=aarcange@redhat.com \
--cc=akpm@linux-foundation.org \
--cc=bhe@redhat.com \
--cc=bp@alien8.de \
--cc=cai@lca.pw \
--cc=hpa@zytor.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
--cc=mgorman@suse.de \
--cc=mhocko@kernel.org \
--cc=mingo@redhat.com \
--cc=rppt@kernel.org \
--cc=rppt@linux.ibm.com \
--cc=tglx@linutronix.de \
--cc=vbabka@suse.cz \
--cc=x86@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).