From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id D4879CD6E4A for ; Thu, 4 Jun 2026 07:43:36 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender:List-Subscribe:List-Help :List-Post:List-Archive:List-Unsubscribe:List-Id:Content-Transfer-Encoding: Content-Type:In-Reply-To:From:References:Cc:To:Subject:MIME-Version:Date: Message-ID:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=FcphQ0Rw2o1L4ixWXv1z/UyHZdPxmHTlt/k525r269U=; b=3cKH34r6FwcqhFLw1BazMkzG5R 78FGDxvUN3HrHEMRd6d1GAk2EPUqmWz8qp+rICBZWB3uHxVopjYJaQwN19wgWEkxBb0E1M4ZUC7Yw Eu93+vqGHDj6jW8Tpjp2KaqEDQomju2+aUxVC7IlHfSSkLe5jiziVaDd17GVrSJalS2SaQK2Lsq6l dMGW973NHsYNp2cvAqWNDCxnV4is9d0pF4IAip/Pi++EEpUEBxRgVG0kP6GrkQn+KlNzOXpZC4By3 lZ0XGKbWzEp5LcfFK89u2geP1u4Cor9I+iuX3IsQkn0bfSWOJTnkaYrV5JX89P8XLSyt8Nk8+i48+ o3aXBb+A==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.99.1 #2 (Red Hat Linux)) id 1wV2jh-0000000GJov-2dae; Thu, 04 Jun 2026 07:43:29 +0000 Received: from tor.source.kernel.org ([172.105.4.254]) by bombadil.infradead.org with esmtps (Exim 4.99.1 #2 (Red Hat Linux)) id 1wV2jg-0000000GJok-17m5 for linux-arm-kernel@lists.infradead.org; Thu, 04 Jun 2026 07:43:28 +0000 Received: from smtp.kernel.org (quasi.space.kernel.org [100.103.45.18]) by tor.source.kernel.org (Postfix) with ESMTP id 0E62760126; Thu, 4 Jun 2026 07:43:27 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 93BE01F00893; Thu, 4 Jun 2026 07:43:21 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1780559006; bh=FcphQ0Rw2o1L4ixWXv1z/UyHZdPxmHTlt/k525r269U=; h=Date:Subject:To:Cc:References:From:In-Reply-To; b=FP8b2xGDkzxHJ7n2qYYxpH1CybRl8kL3CD+0OVxwkPI/nHpC05YEnca4gvdN7gNb/ lNynqq4CtTAoVYy5gcVYxgxcyR+ySL7wGXlUJl7SXYUt+iBE7iVmXvpBBM+2ZqjF6g S6HCf1RdhXjHRVgAnWsNT2IkrrMof03Tzon8NrSOG7oG6Q7iIrM9GW/GzpfWV+Z0QD x0c9tYofo+wlJFnOT8RyGrdU6BkUBheELnytF2mQlTwMYTlA7KUDyyB2PVRQFlSBgg rBdpIxXTBVVqbhtHf77+iowcjPoA1Dv5MyERvxzSPC/DKi6Z0ThqJoDesIlgePnZYK 2LCn5WB81zLvw== Message-ID: <11d2f0bd-baca-42aa-89ce-328a9d555f7e@kernel.org> Date: Thu, 4 Jun 2026 09:43:19 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v7 11/15] powerpc/code-patching: Avoid r/w mapping of the zero page To: Ard Biesheuvel , linux-arm-kernel@lists.infradead.org Cc: linux-kernel@vger.kernel.org, will@kernel.org, catalin.marinas@arm.com, mark.rutland@arm.com, Ard Biesheuvel , Ryan Roberts , Anshuman Khandual , Kevin Brodsky , Liz Prucka , Seth Jenkins , Kees Cook , Mike Rapoport , David Hildenbrand , Andrew Morton , Jann Horn , linux-mm@kvack.org, linux-hardening@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, linux-sh@vger.kernel.org, Madhavan Srinivasan , Michael Ellerman , Nicholas Piggin References: <20260529150150.1670604-17-ardb+git@google.com> <20260529150150.1670604-28-ardb+git@google.com> Content-Language: fr-FR From: "Christophe Leroy (CS GROUP)" In-Reply-To: <20260529150150.1670604-28-ardb+git@google.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org Le 29/05/2026 à 17:02, Ard Biesheuvel a écrit : > From: Ard Biesheuvel > > The only remaining use of map_patch_area() is mapping the zero page, and > immediately unmapping it again so that the intermediate page table > levels are all guaranteed to be populated. > > The use of the zero page here is completely arbitrary, and not harmful > per se, but currently, it creates a writable mapping, and does so in a > manner that requires that the empty_zero_page[] symbol is not > const-qualified. > > Given that this is about to change, and that map_patch_area() now never > maps anything other than the zero page, let's simplify the code and > - remove the helpers and call [un]map_kernel_page() directly > - take the PA of empty_zero_page directly > - create a read-only temporary mapping. > > This allows empty_zero_page[] to be repainted as const u8[] in a > subsequent patch, without making substantial changes to this code > patching logic. > > Cc: Madhavan Srinivasan > Cc: Michael Ellerman > Cc: Nicholas Piggin > Cc: "Christophe Leroy (CS GROUP)" > Link: https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flore.kernel.org%2Fall%2F20260520085423.485402-1-ardb%40kernel.org%2F&data=05%7C02%7Cchristophe.leroy%40csgroup.eu%7Ca75a9b5e25f14d0d9b2208debd935266%7C8b87af7d86474dc78df45f69a2011bb5%7C0%7C0%7C639156637598013085%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Q82ykchJOsuWlbmq%2BKFb2cTWIU4wGXbR53VQjNvgOCk%3D&reserved=0 > Signed-off-by: Ard Biesheuvel Reviewed-by: "Christophe Leroy (CS GROUP)" > --- > arch/powerpc/lib/code-patching.c | 52 +------------------- > 1 file changed, 2 insertions(+), 50 deletions(-) > > diff --git a/arch/powerpc/lib/code-patching.c b/arch/powerpc/lib/code-patching.c > index f84e0337cc02..44ff9f684bef 100644 > --- a/arch/powerpc/lib/code-patching.c > +++ b/arch/powerpc/lib/code-patching.c > @@ -60,9 +60,6 @@ struct patch_context { > > static DEFINE_PER_CPU(struct patch_context, cpu_patching_context); > > -static int map_patch_area(void *addr, unsigned long text_poke_addr); > -static void unmap_patch_area(unsigned long addr); > - > static bool mm_patch_enabled(void) > { > return IS_ENABLED(CONFIG_SMP) && radix_enabled(); > @@ -117,11 +114,11 @@ static int text_area_cpu_up(unsigned int cpu) > > // Map/unmap the area to ensure all page tables are pre-allocated > addr = (unsigned long)area->addr; > - err = map_patch_area(empty_zero_page, addr); > + err = map_kernel_page(addr, __pa_symbol(empty_zero_page), PAGE_KERNEL_RO); > if (err) > return err; > > - unmap_patch_area(addr); > + unmap_kernel_page(addr); > > this_cpu_write(cpu_patching_context.area, area); > this_cpu_write(cpu_patching_context.addr, addr); > @@ -233,51 +230,6 @@ static unsigned long get_patch_pfn(void *addr) > return __pa_symbol(addr) >> PAGE_SHIFT; > } > > -/* > - * This can be called for kernel text or a module. > - */ > -static int map_patch_area(void *addr, unsigned long text_poke_addr) > -{ > - unsigned long pfn = get_patch_pfn(addr); > - > - return map_kernel_page(text_poke_addr, (pfn << PAGE_SHIFT), PAGE_KERNEL); > -} > - > -static void unmap_patch_area(unsigned long addr) > -{ > - pte_t *ptep; > - pmd_t *pmdp; > - pud_t *pudp; > - p4d_t *p4dp; > - pgd_t *pgdp; > - > - pgdp = pgd_offset_k(addr); > - if (WARN_ON(pgd_none(*pgdp))) > - return; > - > - p4dp = p4d_offset(pgdp, addr); > - if (WARN_ON(p4d_none(*p4dp))) > - return; > - > - pudp = pud_offset(p4dp, addr); > - if (WARN_ON(pud_none(*pudp))) > - return; > - > - pmdp = pmd_offset(pudp, addr); > - if (WARN_ON(pmd_none(*pmdp))) > - return; > - > - ptep = pte_offset_kernel(pmdp, addr); > - if (WARN_ON(pte_none(*ptep))) > - return; > - > - /* > - * In hash, pte_clear flushes the tlb, in radix, we have to > - */ > - pte_clear(&init_mm, addr, ptep); > - flush_tlb_kernel_range(addr, addr + PAGE_SIZE); > -} > - > static int __do_patch_mem_mm(void *addr, unsigned long val, bool is_dword) > { > int err;