public inbox for linux-kernel@vger.kernel.org
 help / color / mirror / Atom feed
* Re: [PATCH] boot_cpu_data corruption on SMP x86
@ 2002-03-21 21:17 Mikael Pettersson
  2002-03-21 23:36 ` Maciej W. Rozycki
  0 siblings, 1 reply; 7+ messages in thread
From: Mikael Pettersson @ 2002-03-21 21:17 UTC (permalink / raw)
  To: macro; +Cc: alan, linux-kernel, marcelo, torvalds


On Thu, 21 Mar 2002 21:01:39 +0100 (MET), Maciej W. Rozycki wrote:
>On Thu, 14 Mar 2002, Mikael Pettersson wrote:
>
>> --- linux-2.4.19-pre3/arch/i386/kernel/head.S.~1~	Tue Feb 26 13:26:56 2002
>> +++ linux-2.4.19-pre3/arch/i386/kernel/head.S	Thu Mar 14 16:20:57 2002
>> @@ -178,7 +178,7 @@
>>   * we don't need to preserve eflags.
>>   */
>>  
>> -	movl $3,X86		# at least 386
>> +	movb $3,X86		# at least 386
>...
>
> This is broken -- these word stores assure a proper initialization on
>pre-CPUID processors.

boot_cpu_data is a static-extent object with an explicit initialiser
(i.e., ".data") in setup.c in 2.2.21rc2, 2.4.19-pre4, and 2.5.7.
Any further "initialisation" by APs is called "clobbering".

/Mikael

^ permalink raw reply	[flat|nested] 7+ messages in thread
* [PATCH] boot_cpu_data corruption on SMP x86
@ 2002-03-14 17:24 Mikael Pettersson
  2002-03-21 20:01 ` Maciej W. Rozycki
  0 siblings, 1 reply; 7+ messages in thread
From: Mikael Pettersson @ 2002-03-14 17:24 UTC (permalink / raw)
  To: alan, marcelo, torvalds; +Cc: linux-kernel

The patch below eliminates a case of boot_cpu_data corruption
on SMP x86 machines. This was first observed on SMP Athlons,
but it also affects SMP Intel boxes in a less serious way.

When the secondary processors boot and execute head.S:checkCPUtype,
the code performs a 32-bit write of a small constant to the
byte-sized variable boot_cpu_data.x86 (X86 in head.S). Since the
write is 32-bit, it also writes zeros to the following 3 bytes,
which clobbers the x86_vendor, x86_model, and x86_mask fields
previously set up by check_bugs()'s call to identify_cpu().
Thus, after smp_init(), boot_cpu_data will _always_ identify
the CPU as an Intel (X86_VENDOR_INTEL == 0 in processor.h) with
model 0 and stepping 0.

The effect in standard kernels is not catastrophic, since:
(a) most SMP x86 boxes are Intel
(b) most uses of x86_vendor occur before smp_init() or reference
    the SMP cpu_data[] array
(c) most post-boot references to boot_cpu_data occur in the
    cpu_has_XXX macros which only read the x86_capability[] array
However, third-party extensions (like my x86 performance-monitoring
conters driver) can get seriously confused by this mis-identification.

The patch is for 2.4.19-pre3, but it also applies to 2.5.6 and
2.2.21rc1. Please apply.

/Mikael

--- linux-2.4.19-pre3/arch/i386/kernel/head.S.~1~	Tue Feb 26 13:26:56 2002
+++ linux-2.4.19-pre3/arch/i386/kernel/head.S	Thu Mar 14 16:20:57 2002
@@ -178,7 +178,7 @@
  * we don't need to preserve eflags.
  */
 
-	movl $3,X86		# at least 386
+	movb $3,X86		# at least 386
 	pushfl			# push EFLAGS
 	popl %eax		# get EFLAGS
 	movl %eax,%ecx		# save original EFLAGS
@@ -191,7 +191,7 @@
 	andl $0x40000,%eax	# check if AC bit changed
 	je is386
 
-	movl $4,X86		# at least 486
+	movb $4,X86		# at least 486
 	movl %ecx,%eax
 	xorl $0x200000,%eax	# check ID flag
 	pushl %eax

^ permalink raw reply	[flat|nested] 7+ messages in thread

end of thread, other threads:[~2002-03-22 14:46 UTC | newest]

Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2002-03-21 21:17 [PATCH] boot_cpu_data corruption on SMP x86 Mikael Pettersson
2002-03-21 23:36 ` Maciej W. Rozycki
2002-03-22  7:58   ` Dave Jones
2002-03-22 14:23     ` Maciej W. Rozycki
2002-03-22 14:42       ` Richard B. Johnson
  -- strict thread matches above, loose matches on Subject: below --
2002-03-14 17:24 Mikael Pettersson
2002-03-21 20:01 ` Maciej W. Rozycki

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox