543 lines
		
	
	
		
			11 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			543 lines
		
	
	
		
			11 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /*
 | |
|  * Copyright (C) 2000-2007, Axis Communications AB.
 | |
|  */
 | |
| 
 | |
| #include <linux/kernel.h>
 | |
| #include <linux/sched.h>
 | |
| #include <linux/mm.h>
 | |
| #include <linux/smp.h>
 | |
| #include <linux/errno.h>
 | |
| #include <linux/ptrace.h>
 | |
| #include <linux/user.h>
 | |
| #include <linux/signal.h>
 | |
| #include <linux/security.h>
 | |
| 
 | |
| #include <asm/uaccess.h>
 | |
| #include <asm/page.h>
 | |
| #include <asm/pgtable.h>
 | |
| #include <asm/system.h>
 | |
| #include <asm/processor.h>
 | |
| #include <arch/hwregs/supp_reg.h>
 | |
| 
 | |
| /*
 | |
|  * Determines which bits in CCS the user has access to.
 | |
|  * 1 = access, 0 = no access.
 | |
|  */
 | |
| #define CCS_MASK 0x00087c00     /* SXNZVC */
 | |
| 
 | |
| #define SBIT_USER (1 << (S_CCS_BITNR + CCS_SHIFT))
 | |
| 
 | |
| static int put_debugreg(long pid, unsigned int regno, long data);
 | |
| static long get_debugreg(long pid, unsigned int regno);
 | |
| static unsigned long get_pseudo_pc(struct task_struct *child);
 | |
| void deconfigure_bp(long pid);
 | |
| 
 | |
| extern unsigned long cris_signal_return_page;
 | |
| 
 | |
| /*
 | |
|  * Get contents of register REGNO in task TASK.
 | |
|  */
 | |
| long get_reg(struct task_struct *task, unsigned int regno)
 | |
| {
 | |
| 	/* USP is a special case, it's not in the pt_regs struct but
 | |
| 	 * in the tasks thread struct
 | |
| 	 */
 | |
| 	unsigned long ret;
 | |
| 
 | |
| 	if (regno <= PT_EDA)
 | |
| 		ret = ((unsigned long *)task_pt_regs(task))[regno];
 | |
| 	else if (regno == PT_USP)
 | |
| 		ret = task->thread.usp;
 | |
| 	else if (regno == PT_PPC)
 | |
| 		ret = get_pseudo_pc(task);
 | |
| 	else if (regno <= PT_MAX)
 | |
| 		ret = get_debugreg(task->pid, regno);
 | |
| 	else
 | |
| 		ret = 0;
 | |
| 
 | |
| 	return ret;
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * Write contents of register REGNO in task TASK.
 | |
|  */
 | |
| int put_reg(struct task_struct *task, unsigned int regno, unsigned long data)
 | |
| {
 | |
| 	if (regno <= PT_EDA)
 | |
| 		((unsigned long *)task_pt_regs(task))[regno] = data;
 | |
| 	else if (regno == PT_USP)
 | |
| 		task->thread.usp = data;
 | |
| 	else if (regno == PT_PPC) {
 | |
| 		/* Write pseudo-PC to ERP only if changed. */
 | |
| 		if (data != get_pseudo_pc(task))
 | |
| 			task_pt_regs(task)->erp = data;
 | |
| 	} else if (regno <= PT_MAX)
 | |
| 		return put_debugreg(task->pid, regno, data);
 | |
| 	else
 | |
| 		return -1;
 | |
| 	return 0;
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * Called by kernel/ptrace.c when detaching.
 | |
|  *
 | |
|  * Make sure the single step bit is not set.
 | |
|  */
 | |
| void
 | |
| ptrace_disable(struct task_struct *child)
 | |
| {
 | |
| 	unsigned long tmp;
 | |
| 
 | |
| 	/* Deconfigure SPC and S-bit. */
 | |
| 	tmp = get_reg(child, PT_CCS) & ~SBIT_USER;
 | |
| 	put_reg(child, PT_CCS, tmp);
 | |
| 	put_reg(child, PT_SPC, 0);
 | |
| 
 | |
| 	/* Deconfigure any watchpoints associated with the child. */
 | |
| 	deconfigure_bp(child->pid);
 | |
| }
 | |
| 
 | |
| 
 | |
| long arch_ptrace(struct task_struct *child, long request, long addr, long data)
 | |
| {
 | |
| 	int ret;
 | |
| 	unsigned long __user *datap = (unsigned long __user *)data;
 | |
| 
 | |
| 	switch (request) {
 | |
| 		/* Read word at location address. */
 | |
| 		case PTRACE_PEEKTEXT:
 | |
| 		case PTRACE_PEEKDATA: {
 | |
| 			unsigned long tmp;
 | |
| 			int copied;
 | |
| 
 | |
| 			ret = -EIO;
 | |
| 
 | |
| 			/* The signal trampoline page is outside the normal user-addressable
 | |
| 			 * space but still accessible. This is hack to make it possible to
 | |
| 			 * access the signal handler code in GDB.
 | |
| 			 */
 | |
| 			if ((addr & PAGE_MASK) == cris_signal_return_page) {
 | |
| 				/* The trampoline page is globally mapped, no page table to traverse.*/
 | |
| 				tmp = *(unsigned long*)addr;
 | |
| 			} else {
 | |
| 				copied = access_process_vm(child, addr, &tmp, sizeof(tmp), 0);
 | |
| 
 | |
| 				if (copied != sizeof(tmp))
 | |
| 					break;
 | |
| 			}
 | |
| 
 | |
| 			ret = put_user(tmp,datap);
 | |
| 			break;
 | |
| 		}
 | |
| 
 | |
| 		/* Read the word at location address in the USER area. */
 | |
| 		case PTRACE_PEEKUSR: {
 | |
| 			unsigned long tmp;
 | |
| 
 | |
| 			ret = -EIO;
 | |
| 			if ((addr & 3) || addr < 0 || addr > PT_MAX << 2)
 | |
| 				break;
 | |
| 
 | |
| 			tmp = get_reg(child, addr >> 2);
 | |
| 			ret = put_user(tmp, datap);
 | |
| 			break;
 | |
| 		}
 | |
| 
 | |
| 		/* Write the word at location address. */
 | |
| 		case PTRACE_POKETEXT:
 | |
| 		case PTRACE_POKEDATA:
 | |
| 			ret = generic_ptrace_pokedata(child, addr, data);
 | |
| 			break;
 | |
| 
 | |
| 		/* Write the word at location address in the USER area. */
 | |
| 		case PTRACE_POKEUSR:
 | |
| 			ret = -EIO;
 | |
| 			if ((addr & 3) || addr < 0 || addr > PT_MAX << 2)
 | |
| 				break;
 | |
| 
 | |
| 			addr >>= 2;
 | |
| 
 | |
| 			if (addr == PT_CCS) {
 | |
| 				/* don't allow the tracing process to change stuff like
 | |
| 				 * interrupt enable, kernel/user bit, dma enables etc.
 | |
| 				 */
 | |
| 				data &= CCS_MASK;
 | |
| 				data |= get_reg(child, PT_CCS) & ~CCS_MASK;
 | |
| 			}
 | |
| 			if (put_reg(child, addr, data))
 | |
| 				break;
 | |
| 			ret = 0;
 | |
| 			break;
 | |
| 
 | |
| 		case PTRACE_SYSCALL:
 | |
| 		case PTRACE_CONT:
 | |
| 			ret = -EIO;
 | |
| 
 | |
| 			if (!valid_signal(data))
 | |
| 				break;
 | |
| 
 | |
| 			/* Continue means no single-step. */
 | |
| 			put_reg(child, PT_SPC, 0);
 | |
| 
 | |
| 			if (!get_debugreg(child->pid, PT_BP_CTRL)) {
 | |
| 				unsigned long tmp;
 | |
| 				/* If no h/w bp configured, disable S bit. */
 | |
| 				tmp = get_reg(child, PT_CCS) & ~SBIT_USER;
 | |
| 				put_reg(child, PT_CCS, tmp);
 | |
| 			}
 | |
| 
 | |
| 			if (request == PTRACE_SYSCALL) {
 | |
| 				set_tsk_thread_flag(child, TIF_SYSCALL_TRACE);
 | |
| 			}
 | |
| 			else {
 | |
| 				clear_tsk_thread_flag(child, TIF_SYSCALL_TRACE);
 | |
| 			}
 | |
| 
 | |
| 			child->exit_code = data;
 | |
| 
 | |
| 			/* TODO: make sure any pending breakpoint is killed */
 | |
| 			wake_up_process(child);
 | |
| 			ret = 0;
 | |
| 
 | |
| 			break;
 | |
| 
 | |
| 		/* Make the child exit by sending it a sigkill. */
 | |
| 		case PTRACE_KILL:
 | |
| 			ret = 0;
 | |
| 
 | |
| 			if (child->exit_state == EXIT_ZOMBIE)
 | |
| 				break;
 | |
| 
 | |
| 			child->exit_code = SIGKILL;
 | |
| 
 | |
| 			/* Deconfigure single-step and h/w bp. */
 | |
| 			ptrace_disable(child);
 | |
| 
 | |
| 			/* TODO: make sure any pending breakpoint is killed */
 | |
| 			wake_up_process(child);
 | |
| 			break;
 | |
| 
 | |
| 		/* Set the trap flag. */
 | |
| 		case PTRACE_SINGLESTEP:	{
 | |
| 			unsigned long tmp;
 | |
| 			ret = -EIO;
 | |
| 
 | |
| 			/* Set up SPC if not set already (in which case we have
 | |
| 			   no other choice but to trust it). */
 | |
| 			if (!get_reg(child, PT_SPC)) {
 | |
| 				/* In case we're stopped in a delay slot. */
 | |
| 				tmp = get_reg(child, PT_ERP) & ~1;
 | |
| 				put_reg(child, PT_SPC, tmp);
 | |
| 			}
 | |
| 			tmp = get_reg(child, PT_CCS) | SBIT_USER;
 | |
| 			put_reg(child, PT_CCS, tmp);
 | |
| 
 | |
| 			if (!valid_signal(data))
 | |
| 				break;
 | |
| 
 | |
| 			clear_tsk_thread_flag(child, TIF_SYSCALL_TRACE);
 | |
| 
 | |
| 			/* TODO: set some clever breakpoint mechanism... */
 | |
| 
 | |
| 			child->exit_code = data;
 | |
| 			wake_up_process(child);
 | |
| 			ret = 0;
 | |
| 			break;
 | |
| 
 | |
| 		}
 | |
| 
 | |
| 		/* Get all GP registers from the child. */
 | |
| 		case PTRACE_GETREGS: {
 | |
| 			int i;
 | |
| 			unsigned long tmp;
 | |
| 
 | |
| 			for (i = 0; i <= PT_MAX; i++) {
 | |
| 				tmp = get_reg(child, i);
 | |
| 
 | |
| 				if (put_user(tmp, datap)) {
 | |
| 					ret = -EFAULT;
 | |
| 					goto out_tsk;
 | |
| 				}
 | |
| 
 | |
| 				datap++;
 | |
| 			}
 | |
| 
 | |
| 			ret = 0;
 | |
| 			break;
 | |
| 		}
 | |
| 
 | |
| 		/* Set all GP registers in the child. */
 | |
| 		case PTRACE_SETREGS: {
 | |
| 			int i;
 | |
| 			unsigned long tmp;
 | |
| 
 | |
| 			for (i = 0; i <= PT_MAX; i++) {
 | |
| 				if (get_user(tmp, datap)) {
 | |
| 					ret = -EFAULT;
 | |
| 					goto out_tsk;
 | |
| 				}
 | |
| 
 | |
| 				if (i == PT_CCS) {
 | |
| 					tmp &= CCS_MASK;
 | |
| 					tmp |= get_reg(child, PT_CCS) & ~CCS_MASK;
 | |
| 				}
 | |
| 
 | |
| 				put_reg(child, i, tmp);
 | |
| 				datap++;
 | |
| 			}
 | |
| 
 | |
| 			ret = 0;
 | |
| 			break;
 | |
| 		}
 | |
| 
 | |
| 		default:
 | |
| 			ret = ptrace_request(child, request, addr, data);
 | |
| 			break;
 | |
| 	}
 | |
| 
 | |
| out_tsk:
 | |
| 	return ret;
 | |
| }
 | |
| 
 | |
| void do_syscall_trace(void)
 | |
| {
 | |
| 	if (!test_thread_flag(TIF_SYSCALL_TRACE))
 | |
| 		return;
 | |
| 
 | |
| 	if (!(current->ptrace & PT_PTRACED))
 | |
| 		return;
 | |
| 
 | |
| 	/* the 0x80 provides a way for the tracing parent to distinguish
 | |
| 	   between a syscall stop and SIGTRAP delivery */
 | |
| 	ptrace_notify(SIGTRAP | ((current->ptrace & PT_TRACESYSGOOD)
 | |
| 				 ? 0x80 : 0));
 | |
| 
 | |
| 	/*
 | |
| 	 * This isn't the same as continuing with a signal, but it will do for
 | |
| 	 * normal use.
 | |
| 	 */
 | |
| 	if (current->exit_code) {
 | |
| 		send_sig(current->exit_code, current, 1);
 | |
| 		current->exit_code = 0;
 | |
| 	}
 | |
| }
 | |
| 
 | |
| /* Returns the size of an instruction that has a delay slot. */
 | |
| 
 | |
| static int insn_size(struct task_struct *child, unsigned long pc)
 | |
| {
 | |
|   unsigned long opcode;
 | |
|   int copied;
 | |
|   int opsize = 0;
 | |
| 
 | |
|   /* Read the opcode at pc (do what PTRACE_PEEKTEXT would do). */
 | |
|   copied = access_process_vm(child, pc, &opcode, sizeof(opcode), 0);
 | |
|   if (copied != sizeof(opcode))
 | |
|     return 0;
 | |
| 
 | |
|   switch ((opcode & 0x0f00) >> 8) {
 | |
|   case 0x0:
 | |
|   case 0x9:
 | |
|   case 0xb:
 | |
| 	  opsize = 2;
 | |
| 	  break;
 | |
|   case 0xe:
 | |
|   case 0xf:
 | |
| 	  opsize = 6;
 | |
| 	  break;
 | |
|   case 0xd:
 | |
| 	  /* Could be 4 or 6; check more bits. */
 | |
| 	  if ((opcode & 0xff) == 0xff)
 | |
| 		  opsize = 4;
 | |
| 	  else
 | |
| 		  opsize = 6;
 | |
| 	  break;
 | |
|   default:
 | |
| 	  panic("ERROR: Couldn't find size of opcode 0x%lx at 0x%lx\n",
 | |
| 		opcode, pc);
 | |
|   }
 | |
| 
 | |
|   return opsize;
 | |
| }
 | |
| 
 | |
| static unsigned long get_pseudo_pc(struct task_struct *child)
 | |
| {
 | |
| 	/* Default value for PC is ERP. */
 | |
| 	unsigned long pc = get_reg(child, PT_ERP);
 | |
| 
 | |
| 	if (pc & 0x1) {
 | |
| 		unsigned long spc = get_reg(child, PT_SPC);
 | |
| 		/* Delay slot bit set. Report as stopped on proper
 | |
| 		   instruction. */
 | |
| 		if (spc) {
 | |
| 			/* Rely on SPC if set. FIXME: We might want to check
 | |
| 			   that EXS indicates we stopped due to a single-step
 | |
| 			   exception. */
 | |
| 			pc = spc;
 | |
| 		} else {
 | |
| 			/* Calculate the PC from the size of the instruction
 | |
| 			   that the delay slot we're in belongs to. */
 | |
| 			pc += insn_size(child, pc & ~1) - 1;
 | |
| 		}
 | |
| 	}
 | |
| 	return pc;
 | |
| }
 | |
| 
 | |
| static long bp_owner = 0;
 | |
| 
 | |
| /* Reachable from exit_thread in signal.c, so not static. */
 | |
| void deconfigure_bp(long pid)
 | |
| {
 | |
| 	int bp;
 | |
| 
 | |
| 	/* Only deconfigure if the pid is the owner. */
 | |
| 	if (bp_owner != pid)
 | |
| 		return;
 | |
| 
 | |
| 	for (bp = 0; bp < 6; bp++) {
 | |
| 		unsigned long tmp;
 | |
| 		/* Deconfigure start and end address (also gets rid of ownership). */
 | |
| 		put_debugreg(pid, PT_BP + 3 + (bp * 2), 0);
 | |
| 		put_debugreg(pid, PT_BP + 4 + (bp * 2), 0);
 | |
| 
 | |
| 		/* Deconfigure relevant bits in control register. */
 | |
| 		tmp = get_debugreg(pid, PT_BP_CTRL) & ~(3 << (2 + (bp * 4)));
 | |
| 		put_debugreg(pid, PT_BP_CTRL, tmp);
 | |
| 	}
 | |
| 	/* No owner now. */
 | |
| 	bp_owner = 0;
 | |
| }
 | |
| 
 | |
| static int put_debugreg(long pid, unsigned int regno, long data)
 | |
| {
 | |
| 	int ret = 0;
 | |
| 	register int old_srs;
 | |
| 
 | |
| #ifdef CONFIG_ETRAX_KGDB
 | |
| 	/* Ignore write, but pretend it was ok if value is 0
 | |
| 	   (we don't want POKEUSR/SETREGS failing unnessecarily). */
 | |
| 	return (data == 0) ? ret : -1;
 | |
| #endif
 | |
| 
 | |
| 	/* Simple owner management. */
 | |
| 	if (!bp_owner)
 | |
| 		bp_owner = pid;
 | |
| 	else if (bp_owner != pid) {
 | |
| 		/* Ignore write, but pretend it was ok if value is 0
 | |
| 		   (we don't want POKEUSR/SETREGS failing unnessecarily). */
 | |
| 		return (data == 0) ? ret : -1;
 | |
| 	}
 | |
| 
 | |
| 	/* Remember old SRS. */
 | |
| 	SPEC_REG_RD(SPEC_REG_SRS, old_srs);
 | |
| 	/* Switch to BP bank. */
 | |
| 	SUPP_BANK_SEL(BANK_BP);
 | |
| 
 | |
| 	switch (regno - PT_BP) {
 | |
| 	case 0:
 | |
| 		SUPP_REG_WR(0, data); break;
 | |
| 	case 1:
 | |
| 	case 2:
 | |
| 		if (data)
 | |
| 			ret = -1;
 | |
| 		break;
 | |
| 	case 3:
 | |
| 		SUPP_REG_WR(3, data); break;
 | |
| 	case 4:
 | |
| 		SUPP_REG_WR(4, data); break;
 | |
| 	case 5:
 | |
| 		SUPP_REG_WR(5, data); break;
 | |
| 	case 6:
 | |
| 		SUPP_REG_WR(6, data); break;
 | |
| 	case 7:
 | |
| 		SUPP_REG_WR(7, data); break;
 | |
| 	case 8:
 | |
| 		SUPP_REG_WR(8, data); break;
 | |
| 	case 9:
 | |
| 		SUPP_REG_WR(9, data); break;
 | |
| 	case 10:
 | |
| 		SUPP_REG_WR(10, data); break;
 | |
| 	case 11:
 | |
| 		SUPP_REG_WR(11, data); break;
 | |
| 	case 12:
 | |
| 		SUPP_REG_WR(12, data); break;
 | |
| 	case 13:
 | |
| 		SUPP_REG_WR(13, data); break;
 | |
| 	case 14:
 | |
| 		SUPP_REG_WR(14, data); break;
 | |
| 	default:
 | |
| 		ret = -1;
 | |
| 		break;
 | |
| 	}
 | |
| 
 | |
| 	/* Restore SRS. */
 | |
| 	SPEC_REG_WR(SPEC_REG_SRS, old_srs);
 | |
| 	/* Just for show. */
 | |
| 	NOP();
 | |
| 	NOP();
 | |
| 	NOP();
 | |
| 
 | |
| 	return ret;
 | |
| }
 | |
| 
 | |
| static long get_debugreg(long pid, unsigned int regno)
 | |
| {
 | |
| 	register int old_srs;
 | |
| 	register long data;
 | |
| 
 | |
| 	if (pid != bp_owner) {
 | |
| 		return 0;
 | |
| 	}
 | |
| 
 | |
| 	/* Remember old SRS. */
 | |
| 	SPEC_REG_RD(SPEC_REG_SRS, old_srs);
 | |
| 	/* Switch to BP bank. */
 | |
| 	SUPP_BANK_SEL(BANK_BP);
 | |
| 
 | |
| 	switch (regno - PT_BP) {
 | |
| 	case 0:
 | |
| 		SUPP_REG_RD(0, data); break;
 | |
| 	case 1:
 | |
| 	case 2:
 | |
| 		/* error return value? */
 | |
| 		data = 0;
 | |
| 		break;
 | |
| 	case 3:
 | |
| 		SUPP_REG_RD(3, data); break;
 | |
| 	case 4:
 | |
| 		SUPP_REG_RD(4, data); break;
 | |
| 	case 5:
 | |
| 		SUPP_REG_RD(5, data); break;
 | |
| 	case 6:
 | |
| 		SUPP_REG_RD(6, data); break;
 | |
| 	case 7:
 | |
| 		SUPP_REG_RD(7, data); break;
 | |
| 	case 8:
 | |
| 		SUPP_REG_RD(8, data); break;
 | |
| 	case 9:
 | |
| 		SUPP_REG_RD(9, data); break;
 | |
| 	case 10:
 | |
| 		SUPP_REG_RD(10, data); break;
 | |
| 	case 11:
 | |
| 		SUPP_REG_RD(11, data); break;
 | |
| 	case 12:
 | |
| 		SUPP_REG_RD(12, data); break;
 | |
| 	case 13:
 | |
| 		SUPP_REG_RD(13, data); break;
 | |
| 	case 14:
 | |
| 		SUPP_REG_RD(14, data); break;
 | |
| 	default:
 | |
| 		/* error return value? */
 | |
| 		data = 0;
 | |
| 	}
 | |
| 
 | |
| 	/* Restore SRS. */
 | |
| 	SPEC_REG_WR(SPEC_REG_SRS, old_srs);
 | |
| 	/* Just for show. */
 | |
| 	NOP();
 | |
| 	NOP();
 | |
| 	NOP();
 | |
| 
 | |
| 	return data;
 | |
| }
 |