]> bbs.cooldavid.org Git - net-next-2.6.git/blame - arch/x86/kernel/entry_32.S
x86-32, asm: Directly access per-cpu GDT
[net-next-2.6.git] / arch / x86 / kernel / entry_32.S
CommitLineData
1da177e4 1/*
1da177e4
LT
2 *
3 * Copyright (C) 1991, 1992 Linus Torvalds
4 */
5
6/*
7 * entry.S contains the system-call and fault low-level handling routines.
8 * This also contains the timer-interrupt handler, as well as all interrupts
9 * and faults that can result in a task-switch.
10 *
11 * NOTE: This code handles signal-recognition, which happens every time
12 * after a timer-interrupt and after each system call.
13 *
14 * I changed all the .align's to 4 (16 byte alignment), as that's faster
15 * on a 486.
16 *
889f21ce 17 * Stack layout in 'syscall_exit':
1da177e4
LT
18 * ptrace needs to have all regs on the stack.
19 * if the order here is changed, it needs to be
20 * updated in fork.c:copy_process, signal.c:do_signal,
21 * ptrace.c and ptrace.h
22 *
23 * 0(%esp) - %ebx
24 * 4(%esp) - %ecx
25 * 8(%esp) - %edx
26 * C(%esp) - %esi
27 * 10(%esp) - %edi
28 * 14(%esp) - %ebp
29 * 18(%esp) - %eax
30 * 1C(%esp) - %ds
31 * 20(%esp) - %es
464d1a78 32 * 24(%esp) - %fs
ccbeed3a
TH
33 * 28(%esp) - %gs saved iff !CONFIG_X86_32_LAZY_GS
34 * 2C(%esp) - orig_eax
35 * 30(%esp) - %eip
36 * 34(%esp) - %cs
37 * 38(%esp) - %eflags
38 * 3C(%esp) - %oldesp
39 * 40(%esp) - %oldss
1da177e4
LT
40 *
41 * "current" is in register %ebx during any slow entries.
42 */
43
1da177e4
LT
44#include <linux/linkage.h>
45#include <asm/thread_info.h>
55f327fa 46#include <asm/irqflags.h>
1da177e4
LT
47#include <asm/errno.h>
48#include <asm/segment.h>
49#include <asm/smp.h>
0341c14d 50#include <asm/page_types.h>
be44d2aa 51#include <asm/percpu.h>
fe7cacc1 52#include <asm/dwarf2.h>
ab68ed98 53#include <asm/processor-flags.h>
395a59d0 54#include <asm/ftrace.h>
9b7dc567 55#include <asm/irq_vectors.h>
40d2e763 56#include <asm/cpufeature.h>
1da177e4 57
af0575bb
RM
58/* Avoid __ASSEMBLER__'ifying <linux/audit.h> just for this. */
59#include <linux/elf-em.h>
60#define AUDIT_ARCH_I386 (EM_386|__AUDIT_ARCH_LE)
61#define __AUDIT_ARCH_LE 0x40000000
62
63#ifndef CONFIG_AUDITSYSCALL
64#define sysenter_audit syscall_trace_entry
65#define sysexit_audit syscall_exit_work
66#endif
67
139ec7c4
RR
68/*
69 * We use macros for low-level operations which need to be overridden
70 * for paravirtualization. The following will never clobber any registers:
71 * INTERRUPT_RETURN (aka. "iret")
72 * GET_CR0_INTO_EAX (aka. "movl %cr0, %eax")
d75cd22f 73 * ENABLE_INTERRUPTS_SYSEXIT (aka "sti; sysexit").
139ec7c4
RR
74 *
75 * For DISABLE_INTERRUPTS/ENABLE_INTERRUPTS (aka "cli"/"sti"), you must
76 * specify what registers can be overwritten (CLBR_NONE, CLBR_EAX/EDX/ECX/ANY).
77 * Allowing a register to be clobbered can shrink the paravirt replacement
78 * enough to patch inline, increasing performance.
79 */
80
1da177e4
LT
81#define nr_syscalls ((syscall_table_size)/4)
82
1da177e4 83#ifdef CONFIG_PREEMPT
139ec7c4 84#define preempt_stop(clobbers) DISABLE_INTERRUPTS(clobbers); TRACE_IRQS_OFF
1da177e4 85#else
139ec7c4 86#define preempt_stop(clobbers)
2e04bc76 87#define resume_kernel restore_all
1da177e4
LT
88#endif
89
55f327fa
IM
90.macro TRACE_IRQS_IRET
91#ifdef CONFIG_TRACE_IRQFLAGS
ab68ed98 92 testl $X86_EFLAGS_IF,PT_EFLAGS(%esp) # interrupts off?
55f327fa
IM
93 jz 1f
94 TRACE_IRQS_ON
951:
96#endif
97.endm
98
4031ff38
AG
99#ifdef CONFIG_VM86
100#define resume_userspace_sig check_userspace
101#else
102#define resume_userspace_sig resume_userspace
103#endif
104
ccbeed3a
TH
105/*
106 * User gs save/restore
107 *
108 * %gs is used for userland TLS and kernel only uses it for stack
109 * canary which is required to be at %gs:20 by gcc. Read the comment
110 * at the top of stackprotector.h for more info.
111 *
112 * Local labels 98 and 99 are used.
113 */
114#ifdef CONFIG_X86_32_LAZY_GS
115
116 /* unfortunately push/pop can't be no-op */
117.macro PUSH_GS
118 pushl $0
119 CFI_ADJUST_CFA_OFFSET 4
120.endm
121.macro POP_GS pop=0
122 addl $(4 + \pop), %esp
123 CFI_ADJUST_CFA_OFFSET -(4 + \pop)
124.endm
125.macro POP_GS_EX
126.endm
127
128 /* all the rest are no-op */
129.macro PTGS_TO_GS
130.endm
131.macro PTGS_TO_GS_EX
132.endm
133.macro GS_TO_REG reg
134.endm
135.macro REG_TO_PTGS reg
136.endm
137.macro SET_KERNEL_GS reg
138.endm
139
140#else /* CONFIG_X86_32_LAZY_GS */
141
142.macro PUSH_GS
143 pushl %gs
144 CFI_ADJUST_CFA_OFFSET 4
145 /*CFI_REL_OFFSET gs, 0*/
146.endm
147
148.macro POP_GS pop=0
14998: popl %gs
150 CFI_ADJUST_CFA_OFFSET -4
151 /*CFI_RESTORE gs*/
152 .if \pop <> 0
153 add $\pop, %esp
154 CFI_ADJUST_CFA_OFFSET -\pop
155 .endif
156.endm
157.macro POP_GS_EX
158.pushsection .fixup, "ax"
15999: movl $0, (%esp)
160 jmp 98b
161.section __ex_table, "a"
162 .align 4
163 .long 98b, 99b
164.popsection
165.endm
166
167.macro PTGS_TO_GS
16898: mov PT_GS(%esp), %gs
169.endm
170.macro PTGS_TO_GS_EX
171.pushsection .fixup, "ax"
17299: movl $0, PT_GS(%esp)
173 jmp 98b
174.section __ex_table, "a"
175 .align 4
176 .long 98b, 99b
177.popsection
178.endm
179
180.macro GS_TO_REG reg
181 movl %gs, \reg
182 /*CFI_REGISTER gs, \reg*/
183.endm
184.macro REG_TO_PTGS reg
185 movl \reg, PT_GS(%esp)
186 /*CFI_REL_OFFSET gs, PT_GS*/
187.endm
188.macro SET_KERNEL_GS reg
60a5317f 189 movl $(__KERNEL_STACK_CANARY), \reg
ccbeed3a
TH
190 movl \reg, %gs
191.endm
192
193#endif /* CONFIG_X86_32_LAZY_GS */
194
f0d96110
TH
195.macro SAVE_ALL
196 cld
ccbeed3a 197 PUSH_GS
f0d96110
TH
198 pushl %fs
199 CFI_ADJUST_CFA_OFFSET 4
200 /*CFI_REL_OFFSET fs, 0;*/
201 pushl %es
202 CFI_ADJUST_CFA_OFFSET 4
203 /*CFI_REL_OFFSET es, 0;*/
204 pushl %ds
205 CFI_ADJUST_CFA_OFFSET 4
206 /*CFI_REL_OFFSET ds, 0;*/
207 pushl %eax
208 CFI_ADJUST_CFA_OFFSET 4
209 CFI_REL_OFFSET eax, 0
210 pushl %ebp
211 CFI_ADJUST_CFA_OFFSET 4
212 CFI_REL_OFFSET ebp, 0
213 pushl %edi
214 CFI_ADJUST_CFA_OFFSET 4
215 CFI_REL_OFFSET edi, 0
216 pushl %esi
217 CFI_ADJUST_CFA_OFFSET 4
218 CFI_REL_OFFSET esi, 0
219 pushl %edx
220 CFI_ADJUST_CFA_OFFSET 4
221 CFI_REL_OFFSET edx, 0
222 pushl %ecx
223 CFI_ADJUST_CFA_OFFSET 4
224 CFI_REL_OFFSET ecx, 0
225 pushl %ebx
226 CFI_ADJUST_CFA_OFFSET 4
227 CFI_REL_OFFSET ebx, 0
228 movl $(__USER_DS), %edx
229 movl %edx, %ds
230 movl %edx, %es
231 movl $(__KERNEL_PERCPU), %edx
464d1a78 232 movl %edx, %fs
ccbeed3a 233 SET_KERNEL_GS %edx
f0d96110 234.endm
1da177e4 235
f0d96110
TH
236.macro RESTORE_INT_REGS
237 popl %ebx
238 CFI_ADJUST_CFA_OFFSET -4
239 CFI_RESTORE ebx
240 popl %ecx
241 CFI_ADJUST_CFA_OFFSET -4
242 CFI_RESTORE ecx
243 popl %edx
244 CFI_ADJUST_CFA_OFFSET -4
245 CFI_RESTORE edx
246 popl %esi
247 CFI_ADJUST_CFA_OFFSET -4
248 CFI_RESTORE esi
249 popl %edi
250 CFI_ADJUST_CFA_OFFSET -4
251 CFI_RESTORE edi
252 popl %ebp
253 CFI_ADJUST_CFA_OFFSET -4
254 CFI_RESTORE ebp
255 popl %eax
256 CFI_ADJUST_CFA_OFFSET -4
fe7cacc1 257 CFI_RESTORE eax
f0d96110 258.endm
1da177e4 259
ccbeed3a 260.macro RESTORE_REGS pop=0
f0d96110
TH
261 RESTORE_INT_REGS
2621: popl %ds
263 CFI_ADJUST_CFA_OFFSET -4
264 /*CFI_RESTORE ds;*/
2652: popl %es
266 CFI_ADJUST_CFA_OFFSET -4
267 /*CFI_RESTORE es;*/
2683: popl %fs
269 CFI_ADJUST_CFA_OFFSET -4
270 /*CFI_RESTORE fs;*/
ccbeed3a 271 POP_GS \pop
f0d96110
TH
272.pushsection .fixup, "ax"
2734: movl $0, (%esp)
274 jmp 1b
2755: movl $0, (%esp)
276 jmp 2b
2776: movl $0, (%esp)
278 jmp 3b
279.section __ex_table, "a"
280 .align 4
281 .long 1b, 4b
282 .long 2b, 5b
283 .long 3b, 6b
f95d47ca 284.popsection
ccbeed3a 285 POP_GS_EX
f0d96110 286.endm
1da177e4 287
f0d96110
TH
288.macro RING0_INT_FRAME
289 CFI_STARTPROC simple
290 CFI_SIGNAL_FRAME
291 CFI_DEF_CFA esp, 3*4
292 /*CFI_OFFSET cs, -2*4;*/
fe7cacc1 293 CFI_OFFSET eip, -3*4
f0d96110 294.endm
fe7cacc1 295
f0d96110
TH
296.macro RING0_EC_FRAME
297 CFI_STARTPROC simple
298 CFI_SIGNAL_FRAME
299 CFI_DEF_CFA esp, 4*4
300 /*CFI_OFFSET cs, -2*4;*/
fe7cacc1 301 CFI_OFFSET eip, -3*4
f0d96110 302.endm
fe7cacc1 303
f0d96110
TH
304.macro RING0_PTREGS_FRAME
305 CFI_STARTPROC simple
306 CFI_SIGNAL_FRAME
307 CFI_DEF_CFA esp, PT_OLDESP-PT_EBX
308 /*CFI_OFFSET cs, PT_CS-PT_OLDESP;*/
309 CFI_OFFSET eip, PT_EIP-PT_OLDESP
310 /*CFI_OFFSET es, PT_ES-PT_OLDESP;*/
311 /*CFI_OFFSET ds, PT_DS-PT_OLDESP;*/
312 CFI_OFFSET eax, PT_EAX-PT_OLDESP
313 CFI_OFFSET ebp, PT_EBP-PT_OLDESP
314 CFI_OFFSET edi, PT_EDI-PT_OLDESP
315 CFI_OFFSET esi, PT_ESI-PT_OLDESP
316 CFI_OFFSET edx, PT_EDX-PT_OLDESP
317 CFI_OFFSET ecx, PT_ECX-PT_OLDESP
eb5b7b9d 318 CFI_OFFSET ebx, PT_EBX-PT_OLDESP
f0d96110 319.endm
1da177e4
LT
320
321ENTRY(ret_from_fork)
fe7cacc1 322 CFI_STARTPROC
1da177e4 323 pushl %eax
25d7dfda 324 CFI_ADJUST_CFA_OFFSET 4
1da177e4
LT
325 call schedule_tail
326 GET_THREAD_INFO(%ebp)
327 popl %eax
fe7cacc1 328 CFI_ADJUST_CFA_OFFSET -4
47a5c6fa
LT
329 pushl $0x0202 # Reset kernel eflags
330 CFI_ADJUST_CFA_OFFSET 4
331 popfl
332 CFI_ADJUST_CFA_OFFSET -4
1da177e4 333 jmp syscall_exit
fe7cacc1 334 CFI_ENDPROC
47a55cd7 335END(ret_from_fork)
1da177e4 336
a00e817f
MH
337/*
338 * Interrupt exit functions should be protected against kprobes
339 */
340 .pushsection .kprobes.text, "ax"
1da177e4
LT
341/*
342 * Return to user mode is not as complex as all this looks,
343 * but we want the default path for a system call return to
344 * go as quickly as possible which is why some of this is
345 * less clear than it otherwise should be.
346 */
347
348 # userspace resumption stub bypassing syscall exit tracing
349 ALIGN
fe7cacc1 350 RING0_PTREGS_FRAME
1da177e4 351ret_from_exception:
139ec7c4 352 preempt_stop(CLBR_ANY)
1da177e4
LT
353ret_from_intr:
354 GET_THREAD_INFO(%ebp)
4031ff38 355check_userspace:
eb5b7b9d
JF
356 movl PT_EFLAGS(%esp), %eax # mix EFLAGS and CS
357 movb PT_CS(%esp), %al
ab68ed98 358 andl $(X86_EFLAGS_VM | SEGMENT_RPL_MASK), %eax
78be3706
RR
359 cmpl $USER_RPL, %eax
360 jb resume_kernel # not returning to v8086 or userspace
f95d47ca 361
1da177e4 362ENTRY(resume_userspace)
c7e872e7 363 LOCKDEP_SYS_EXIT
139ec7c4 364 DISABLE_INTERRUPTS(CLBR_ANY) # make sure we don't miss an interrupt
1da177e4
LT
365 # setting need_resched or sigpending
366 # between sampling and the iret
e32e58a9 367 TRACE_IRQS_OFF
1da177e4
LT
368 movl TI_flags(%ebp), %ecx
369 andl $_TIF_WORK_MASK, %ecx # is there any work to be done on
370 # int/exception return?
371 jne work_pending
372 jmp restore_all
47a55cd7 373END(ret_from_exception)
1da177e4
LT
374
375#ifdef CONFIG_PREEMPT
376ENTRY(resume_kernel)
139ec7c4 377 DISABLE_INTERRUPTS(CLBR_ANY)
1da177e4 378 cmpl $0,TI_preempt_count(%ebp) # non-zero preempt_count ?
2e04bc76 379 jnz restore_all
1da177e4
LT
380need_resched:
381 movl TI_flags(%ebp), %ecx # need_resched set ?
382 testb $_TIF_NEED_RESCHED, %cl
383 jz restore_all
ab68ed98 384 testl $X86_EFLAGS_IF,PT_EFLAGS(%esp) # interrupts off (exception path) ?
1da177e4
LT
385 jz restore_all
386 call preempt_schedule_irq
387 jmp need_resched
47a55cd7 388END(resume_kernel)
1da177e4 389#endif
fe7cacc1 390 CFI_ENDPROC
a00e817f
MH
391/*
392 * End of kprobes section
393 */
394 .popsection
1da177e4
LT
395
396/* SYSENTER_RETURN points to after the "sysenter" instruction in
397 the vsyscall page. See vsyscall-sysentry.S, which defines the symbol. */
398
399 # sysenter call handler stub
0aa97fb2 400ENTRY(ia32_sysenter_target)
fe7cacc1 401 CFI_STARTPROC simple
adf14236 402 CFI_SIGNAL_FRAME
fe7cacc1
JB
403 CFI_DEF_CFA esp, 0
404 CFI_REGISTER esp, ebp
faca6227 405 movl TSS_sysenter_sp0(%esp),%esp
1da177e4 406sysenter_past_esp:
55f327fa 407 /*
d93c870b
JF
408 * Interrupts are disabled here, but we can't trace it until
409 * enough kernel state to call TRACE_IRQS_OFF can be called - but
410 * we immediately enable interrupts at that point anyway.
55f327fa 411 */
1da177e4 412 pushl $(__USER_DS)
fe7cacc1
JB
413 CFI_ADJUST_CFA_OFFSET 4
414 /*CFI_REL_OFFSET ss, 0*/
1da177e4 415 pushl %ebp
fe7cacc1
JB
416 CFI_ADJUST_CFA_OFFSET 4
417 CFI_REL_OFFSET esp, 0
1da177e4 418 pushfl
d93c870b 419 orl $X86_EFLAGS_IF, (%esp)
fe7cacc1 420 CFI_ADJUST_CFA_OFFSET 4
1da177e4 421 pushl $(__USER_CS)
fe7cacc1
JB
422 CFI_ADJUST_CFA_OFFSET 4
423 /*CFI_REL_OFFSET cs, 0*/
e6e5494c
IM
424 /*
425 * Push current_thread_info()->sysenter_return to the stack.
426 * A tiny bit of offset fixup is necessary - 4*4 means the 4 words
427 * pushed above; +8 corresponds to copy_thread's esp0 setting.
428 */
429 pushl (TI_sysenter_return-THREAD_SIZE+8+4*4)(%esp)
fe7cacc1
JB
430 CFI_ADJUST_CFA_OFFSET 4
431 CFI_REL_OFFSET eip, 0
1da177e4 432
d93c870b
JF
433 pushl %eax
434 CFI_ADJUST_CFA_OFFSET 4
435 SAVE_ALL
436 ENABLE_INTERRUPTS(CLBR_NONE)
437
1da177e4
LT
438/*
439 * Load the potential sixth argument from user stack.
440 * Careful about security.
441 */
442 cmpl $__PAGE_OFFSET-3,%ebp
443 jae syscall_fault
4441: movl (%ebp),%ebp
d93c870b 445 movl %ebp,PT_EBP(%esp)
1da177e4
LT
446.section __ex_table,"a"
447 .align 4
448 .long 1b,syscall_fault
449.previous
450
1da177e4
LT
451 GET_THREAD_INFO(%ebp)
452
88200bc2 453 testl $_TIF_WORK_SYSCALL_ENTRY,TI_flags(%ebp)
af0575bb
RM
454 jnz sysenter_audit
455sysenter_do_call:
1da177e4
LT
456 cmpl $(nr_syscalls), %eax
457 jae syscall_badsys
458 call *sys_call_table(,%eax,4)
eb5b7b9d 459 movl %eax,PT_EAX(%esp)
c7e872e7 460 LOCKDEP_SYS_EXIT
42c24fa2 461 DISABLE_INTERRUPTS(CLBR_ANY)
55f327fa 462 TRACE_IRQS_OFF
1da177e4 463 movl TI_flags(%ebp), %ecx
88200bc2 464 testl $_TIF_ALLWORK_MASK, %ecx
af0575bb
RM
465 jne sysexit_audit
466sysenter_exit:
1da177e4 467/* if something modifies registers it must also disable sysexit */
eb5b7b9d
JF
468 movl PT_EIP(%esp), %edx
469 movl PT_OLDESP(%esp), %ecx
1da177e4 470 xorl %ebp,%ebp
55f327fa 471 TRACE_IRQS_ON
464d1a78 4721: mov PT_FS(%esp), %fs
ccbeed3a 473 PTGS_TO_GS
d75cd22f 474 ENABLE_INTERRUPTS_SYSEXIT
af0575bb
RM
475
476#ifdef CONFIG_AUDITSYSCALL
477sysenter_audit:
88200bc2 478 testl $(_TIF_WORK_SYSCALL_ENTRY & ~_TIF_SYSCALL_AUDIT),TI_flags(%ebp)
af0575bb
RM
479 jnz syscall_trace_entry
480 addl $4,%esp
481 CFI_ADJUST_CFA_OFFSET -4
482 /* %esi already in 8(%esp) 6th arg: 4th syscall arg */
483 /* %edx already in 4(%esp) 5th arg: 3rd syscall arg */
484 /* %ecx already in 0(%esp) 4th arg: 2nd syscall arg */
485 movl %ebx,%ecx /* 3rd arg: 1st syscall arg */
486 movl %eax,%edx /* 2nd arg: syscall number */
487 movl $AUDIT_ARCH_I386,%eax /* 1st arg: audit arch */
488 call audit_syscall_entry
489 pushl %ebx
490 CFI_ADJUST_CFA_OFFSET 4
491 movl PT_EAX(%esp),%eax /* reload syscall number */
492 jmp sysenter_do_call
493
494sysexit_audit:
88200bc2 495 testl $(_TIF_ALLWORK_MASK & ~_TIF_SYSCALL_AUDIT), %ecx
af0575bb
RM
496 jne syscall_exit_work
497 TRACE_IRQS_ON
498 ENABLE_INTERRUPTS(CLBR_ANY)
499 movl %eax,%edx /* second arg, syscall return value */
500 cmpl $0,%eax /* is it < 0? */
501 setl %al /* 1 if so, 0 if not */
502 movzbl %al,%eax /* zero-extend that */
503 inc %eax /* first arg, 0->1(AUDITSC_SUCCESS), 1->2(AUDITSC_FAILURE) */
504 call audit_syscall_exit
505 DISABLE_INTERRUPTS(CLBR_ANY)
506 TRACE_IRQS_OFF
507 movl TI_flags(%ebp), %ecx
88200bc2 508 testl $(_TIF_ALLWORK_MASK & ~_TIF_SYSCALL_AUDIT), %ecx
af0575bb
RM
509 jne syscall_exit_work
510 movl PT_EAX(%esp),%eax /* reload syscall return value */
511 jmp sysenter_exit
512#endif
513
fe7cacc1 514 CFI_ENDPROC
f95d47ca 515.pushsection .fixup,"ax"
464d1a78 5162: movl $0,PT_FS(%esp)
f95d47ca
JF
517 jmp 1b
518.section __ex_table,"a"
519 .align 4
520 .long 1b,2b
521.popsection
ccbeed3a 522 PTGS_TO_GS_EX
0aa97fb2 523ENDPROC(ia32_sysenter_target)
1da177e4 524
a00e817f
MH
525/*
526 * syscall stub including irq exit should be protected against kprobes
527 */
528 .pushsection .kprobes.text, "ax"
1da177e4
LT
529 # system call handler stub
530ENTRY(system_call)
fe7cacc1 531 RING0_INT_FRAME # can't unwind into user space anyway
1da177e4 532 pushl %eax # save orig_eax
fe7cacc1 533 CFI_ADJUST_CFA_OFFSET 4
1da177e4
LT
534 SAVE_ALL
535 GET_THREAD_INFO(%ebp)
ed75e8d5 536 # system call tracing in operation / emulation
88200bc2 537 testl $_TIF_WORK_SYSCALL_ENTRY,TI_flags(%ebp)
1da177e4
LT
538 jnz syscall_trace_entry
539 cmpl $(nr_syscalls), %eax
540 jae syscall_badsys
541syscall_call:
542 call *sys_call_table(,%eax,4)
eb5b7b9d 543 movl %eax,PT_EAX(%esp) # store the return value
1da177e4 544syscall_exit:
c7e872e7 545 LOCKDEP_SYS_EXIT
139ec7c4 546 DISABLE_INTERRUPTS(CLBR_ANY) # make sure we don't miss an interrupt
1da177e4
LT
547 # setting need_resched or sigpending
548 # between sampling and the iret
55f327fa 549 TRACE_IRQS_OFF
1da177e4 550 movl TI_flags(%ebp), %ecx
88200bc2 551 testl $_TIF_ALLWORK_MASK, %ecx # current->work
1da177e4
LT
552 jne syscall_exit_work
553
554restore_all:
2e04bc76
AH
555 TRACE_IRQS_IRET
556restore_all_notrace:
eb5b7b9d
JF
557 movl PT_EFLAGS(%esp), %eax # mix EFLAGS, SS and CS
558 # Warning: PT_OLDSS(%esp) contains the wrong/random values if we
5df24082
SS
559 # are returning to the kernel.
560 # See comments in process.c:copy_thread() for details.
eb5b7b9d
JF
561 movb PT_OLDSS(%esp), %ah
562 movb PT_CS(%esp), %al
ab68ed98 563 andl $(X86_EFLAGS_VM | (SEGMENT_TI_MASK << 8) | SEGMENT_RPL_MASK), %eax
78be3706 564 cmpl $((SEGMENT_LDT << 8) | USER_RPL), %eax
fe7cacc1 565 CFI_REMEMBER_STATE
1da177e4
LT
566 je ldt_ss # returning to user-space with LDT SS
567restore_nocheck:
ccbeed3a 568 RESTORE_REGS 4 # skip orig_eax/error_code
fe7cacc1 569 CFI_ADJUST_CFA_OFFSET -4
f7f3d791 570irq_return:
3701d863 571 INTERRUPT_RETURN
1da177e4 572.section .fixup,"ax"
90e9f536 573ENTRY(iret_exc)
a879cbbb
LT
574 pushl $0 # no error code
575 pushl $do_iret_error
576 jmp error_code
1da177e4
LT
577.previous
578.section __ex_table,"a"
579 .align 4
3701d863 580 .long irq_return,iret_exc
1da177e4
LT
581.previous
582
fe7cacc1 583 CFI_RESTORE_STATE
1da177e4 584ldt_ss:
eb5b7b9d 585 larl PT_OLDSS(%esp), %eax
1da177e4
LT
586 jnz restore_nocheck
587 testl $0x00400000, %eax # returning to 32bit stack?
588 jnz restore_nocheck # allright, normal return
d3561b7f
RR
589
590#ifdef CONFIG_PARAVIRT
591 /*
592 * The kernel can't run on a non-flat stack if paravirt mode
593 * is active. Rather than try to fixup the high bits of
594 * ESP, bypass this code entirely. This may break DOSemu
595 * and/or Wine support in a paravirt VM, although the option
596 * is still available to implement the setting of the high
597 * 16-bits in the INTERRUPT_RETURN paravirt-op.
598 */
93b1eab3 599 cmpl $0, pv_info+PARAVIRT_enabled
d3561b7f
RR
600 jne restore_nocheck
601#endif
602
dc4c2a0a
AH
603/*
604 * Setup and switch to ESPFIX stack
605 *
606 * We're returning to userspace with a 16 bit stack. The CPU will not
607 * restore the high word of ESP for us on executing iret... This is an
608 * "official" bug of all the x86-compatible CPUs, which we can work
609 * around to make dosemu and wine happy. We do this by preloading the
610 * high word of ESP with the high word of the userspace ESP while
611 * compensating for the offset by changing to the ESPFIX segment with
612 * a base address that matches for the difference.
613 */
72c511dd 614#define GDT_ESPFIX_SS PER_CPU_VAR(gdt_page) + (GDT_ENTRY_ESPFIX_SS * 8)
dc4c2a0a
AH
615 mov %esp, %edx /* load kernel esp */
616 mov PT_OLDESP(%esp), %eax /* load userspace esp */
617 mov %dx, %ax /* eax: new kernel esp */
618 sub %eax, %edx /* offset (low word is 0) */
dc4c2a0a 619 shr $16, %edx
72c511dd
BG
620 mov %dl, GDT_ESPFIX_SS + 4 /* bits 16..23 */
621 mov %dh, GDT_ESPFIX_SS + 7 /* bits 24..31 */
be44d2aa
SS
622 pushl $__ESPFIX_SS
623 CFI_ADJUST_CFA_OFFSET 4
dc4c2a0a 624 push %eax /* new kernel esp */
be44d2aa 625 CFI_ADJUST_CFA_OFFSET 4
2e04bc76
AH
626 /* Disable interrupts, but do not irqtrace this section: we
627 * will soon execute iret and the tracer was already set to
628 * the irqstate after the iret */
139ec7c4 629 DISABLE_INTERRUPTS(CLBR_EAX)
dc4c2a0a 630 lss (%esp), %esp /* switch to espfix segment */
be44d2aa
SS
631 CFI_ADJUST_CFA_OFFSET -8
632 jmp restore_nocheck
fe7cacc1 633 CFI_ENDPROC
47a55cd7 634ENDPROC(system_call)
1da177e4
LT
635
636 # perform work that needs to be done immediately before resumption
637 ALIGN
fe7cacc1 638 RING0_PTREGS_FRAME # can't unwind into user space anyway
1da177e4
LT
639work_pending:
640 testb $_TIF_NEED_RESCHED, %cl
641 jz work_notifysig
642work_resched:
643 call schedule
c7e872e7 644 LOCKDEP_SYS_EXIT
139ec7c4 645 DISABLE_INTERRUPTS(CLBR_ANY) # make sure we don't miss an interrupt
1da177e4
LT
646 # setting need_resched or sigpending
647 # between sampling and the iret
55f327fa 648 TRACE_IRQS_OFF
1da177e4
LT
649 movl TI_flags(%ebp), %ecx
650 andl $_TIF_WORK_MASK, %ecx # is there any work to be done other
651 # than syscall tracing?
652 jz restore_all
653 testb $_TIF_NEED_RESCHED, %cl
654 jnz work_resched
655
656work_notifysig: # deal with pending signals and
657 # notify-resume requests
74b47a78 658#ifdef CONFIG_VM86
ab68ed98 659 testl $X86_EFLAGS_VM, PT_EFLAGS(%esp)
1da177e4
LT
660 movl %esp, %eax
661 jne work_notifysig_v86 # returning to kernel-space or
662 # vm86-space
663 xorl %edx, %edx
664 call do_notify_resume
4031ff38 665 jmp resume_userspace_sig
1da177e4
LT
666
667 ALIGN
668work_notifysig_v86:
669 pushl %ecx # save ti_flags for do_notify_resume
fe7cacc1 670 CFI_ADJUST_CFA_OFFSET 4
1da177e4
LT
671 call save_v86_state # %eax contains pt_regs pointer
672 popl %ecx
fe7cacc1 673 CFI_ADJUST_CFA_OFFSET -4
1da177e4 674 movl %eax, %esp
74b47a78
JK
675#else
676 movl %esp, %eax
677#endif
1da177e4
LT
678 xorl %edx, %edx
679 call do_notify_resume
4031ff38 680 jmp resume_userspace_sig
47a55cd7 681END(work_pending)
1da177e4
LT
682
683 # perform syscall exit tracing
684 ALIGN
685syscall_trace_entry:
eb5b7b9d 686 movl $-ENOSYS,PT_EAX(%esp)
1da177e4 687 movl %esp, %eax
d4d67150
RM
688 call syscall_trace_enter
689 /* What it returned is what we'll actually use. */
1da177e4
LT
690 cmpl $(nr_syscalls), %eax
691 jnae syscall_call
692 jmp syscall_exit
47a55cd7 693END(syscall_trace_entry)
1da177e4
LT
694
695 # perform syscall exit tracing
696 ALIGN
697syscall_exit_work:
88200bc2 698 testl $_TIF_WORK_SYSCALL_EXIT, %ecx
1da177e4 699 jz work_pending
55f327fa 700 TRACE_IRQS_ON
d4d67150 701 ENABLE_INTERRUPTS(CLBR_ANY) # could let syscall_trace_leave() call
1da177e4
LT
702 # schedule() instead
703 movl %esp, %eax
d4d67150 704 call syscall_trace_leave
1da177e4 705 jmp resume_userspace
47a55cd7 706END(syscall_exit_work)
fe7cacc1 707 CFI_ENDPROC
1da177e4 708
fe7cacc1 709 RING0_INT_FRAME # can't unwind into user space anyway
1da177e4 710syscall_fault:
1da177e4 711 GET_THREAD_INFO(%ebp)
eb5b7b9d 712 movl $-EFAULT,PT_EAX(%esp)
1da177e4 713 jmp resume_userspace
47a55cd7 714END(syscall_fault)
1da177e4 715
1da177e4 716syscall_badsys:
eb5b7b9d 717 movl $-ENOSYS,PT_EAX(%esp)
1da177e4 718 jmp resume_userspace
47a55cd7 719END(syscall_badsys)
fe7cacc1 720 CFI_ENDPROC
a00e817f
MH
721/*
722 * End of kprobes section
723 */
724 .popsection
1da177e4 725
253f29a4
BG
726/*
727 * System calls that need a pt_regs pointer.
728 */
e258e4e0 729#define PTREGSCALL0(name) \
253f29a4
BG
730 ALIGN; \
731ptregs_##name: \
732 leal 4(%esp),%eax; \
733 jmp sys_##name;
734
e258e4e0
BG
735#define PTREGSCALL1(name) \
736 ALIGN; \
737ptregs_##name: \
738 leal 4(%esp),%edx; \
ce9119ad 739 movl (PT_EBX+4)(%esp),%eax; \
e258e4e0
BG
740 jmp sys_##name;
741
742#define PTREGSCALL2(name) \
743 ALIGN; \
744ptregs_##name: \
745 leal 4(%esp),%ecx; \
ce9119ad
PA
746 movl (PT_ECX+4)(%esp),%edx; \
747 movl (PT_EBX+4)(%esp),%eax; \
e258e4e0
BG
748 jmp sys_##name;
749
750#define PTREGSCALL3(name) \
751 ALIGN; \
752ptregs_##name: \
753 leal 4(%esp),%eax; \
754 pushl %eax; \
755 movl PT_EDX(%eax),%ecx; \
756 movl PT_ECX(%eax),%edx; \
757 movl PT_EBX(%eax),%eax; \
758 call sys_##name; \
759 addl $4,%esp; \
760 ret
761
27f59559 762PTREGSCALL1(iopl)
e258e4e0 763PTREGSCALL0(fork)
e258e4e0 764PTREGSCALL0(vfork)
11cf88bd 765PTREGSCALL3(execve)
052acad4 766PTREGSCALL2(sigaltstack)
e258e4e0
BG
767PTREGSCALL0(sigreturn)
768PTREGSCALL0(rt_sigreturn)
f1382f15
BG
769PTREGSCALL2(vm86)
770PTREGSCALL1(vm86old)
253f29a4 771
f839bbc5
BG
772/* Clone is an oddball. The 4th arg is in %edi */
773 ALIGN;
774ptregs_clone:
775 leal 4(%esp),%eax
776 pushl %eax
777 pushl PT_EDI(%eax)
778 movl PT_EDX(%eax),%ecx
779 movl PT_ECX(%eax),%edx
780 movl PT_EBX(%eax),%eax
781 call sys_clone
782 addl $8,%esp
783 ret
784
f0d96110 785.macro FIXUP_ESPFIX_STACK
dc4c2a0a
AH
786/*
787 * Switch back for ESPFIX stack to the normal zerobased stack
788 *
789 * We can't call C functions using the ESPFIX stack. This code reads
790 * the high word of the segment base from the GDT and swiches to the
791 * normal stack and adjusts ESP with the matching offset.
792 */
793 /* fixup the stack */
72c511dd
BG
794 mov GDT_ESPFIX_SS + 4, %al /* bits 16..23 */
795 mov GDT_ESPFIX_SS + 7, %ah /* bits 24..31 */
dc4c2a0a
AH
796 shl $16, %eax
797 addl %esp, %eax /* the adjusted stack pointer */
f0d96110
TH
798 pushl $__KERNEL_DS
799 CFI_ADJUST_CFA_OFFSET 4
800 pushl %eax
801 CFI_ADJUST_CFA_OFFSET 4
dc4c2a0a 802 lss (%esp), %esp /* switch to the normal stack segment */
f0d96110
TH
803 CFI_ADJUST_CFA_OFFSET -8
804.endm
805.macro UNWIND_ESPFIX_STACK
806 movl %ss, %eax
807 /* see if on espfix stack */
808 cmpw $__ESPFIX_SS, %ax
809 jne 27f
810 movl $__KERNEL_DS, %eax
811 movl %eax, %ds
812 movl %eax, %es
813 /* switch to normal stack */
814 FIXUP_ESPFIX_STACK
81527:
816.endm
1da177e4
LT
817
818/*
b7c6244f
PA
819 * Build the entry stubs and pointer table with some assembler magic.
820 * We pack 7 stubs into a single 32-byte chunk, which will fit in a
821 * single cache line on all modern x86 implementations.
1da177e4 822 */
4687518c 823.section .init.rodata,"a"
1da177e4
LT
824ENTRY(interrupt)
825.text
b7c6244f
PA
826 .p2align 5
827 .p2align CONFIG_X86_L1_CACHE_SHIFT
1da177e4 828ENTRY(irq_entries_start)
fe7cacc1 829 RING0_INT_FRAME
4687518c 830vector=FIRST_EXTERNAL_VECTOR
b7c6244f
PA
831.rept (NR_VECTORS-FIRST_EXTERNAL_VECTOR+6)/7
832 .balign 32
833 .rept 7
834 .if vector < NR_VECTORS
8665596e 835 .if vector <> FIRST_EXTERNAL_VECTOR
fe7cacc1 836 CFI_ADJUST_CFA_OFFSET -4
b7c6244f
PA
837 .endif
8381: pushl $(~vector+0x80) /* Note: always in signed byte range */
fe7cacc1 839 CFI_ADJUST_CFA_OFFSET 4
8665596e 840 .if ((vector-FIRST_EXTERNAL_VECTOR)%7) <> 6
b7c6244f
PA
841 jmp 2f
842 .endif
843 .previous
1da177e4 844 .long 1b
b7c6244f 845 .text
1da177e4 846vector=vector+1
b7c6244f
PA
847 .endif
848 .endr
8492: jmp common_interrupt
1da177e4 850.endr
47a55cd7
JB
851END(irq_entries_start)
852
853.previous
854END(interrupt)
855.previous
1da177e4 856
55f327fa
IM
857/*
858 * the CPU automatically disables interrupts when executing an IRQ vector,
859 * so IRQ-flags tracing has to follow that:
860 */
b7c6244f 861 .p2align CONFIG_X86_L1_CACHE_SHIFT
1da177e4 862common_interrupt:
b7c6244f 863 addl $-0x80,(%esp) /* Adjust vector into the [-256,-1] range */
1da177e4 864 SAVE_ALL
55f327fa 865 TRACE_IRQS_OFF
1da177e4
LT
866 movl %esp,%eax
867 call do_IRQ
868 jmp ret_from_intr
47a55cd7 869ENDPROC(common_interrupt)
fe7cacc1 870 CFI_ENDPROC
1da177e4 871
a00e817f
MH
872/*
873 * Irq entries should be protected against kprobes
874 */
875 .pushsection .kprobes.text, "ax"
02cf94c3 876#define BUILD_INTERRUPT3(name, nr, fn) \
1da177e4 877ENTRY(name) \
fe7cacc1 878 RING0_INT_FRAME; \
19eadf98 879 pushl $~(nr); \
fe7cacc1
JB
880 CFI_ADJUST_CFA_OFFSET 4; \
881 SAVE_ALL; \
55f327fa 882 TRACE_IRQS_OFF \
1da177e4 883 movl %esp,%eax; \
02cf94c3 884 call fn; \
55f327fa 885 jmp ret_from_intr; \
47a55cd7
JB
886 CFI_ENDPROC; \
887ENDPROC(name)
1da177e4 888
02cf94c3
TH
889#define BUILD_INTERRUPT(name, nr) BUILD_INTERRUPT3(name, nr, smp_##name)
890
1da177e4 891/* The include is where all of the SMP etc. interrupts come from */
1164dd00 892#include <asm/entry_arch.h>
1da177e4 893
1da177e4 894ENTRY(coprocessor_error)
fe7cacc1 895 RING0_INT_FRAME
1da177e4 896 pushl $0
fe7cacc1 897 CFI_ADJUST_CFA_OFFSET 4
1da177e4 898 pushl $do_coprocessor_error
fe7cacc1 899 CFI_ADJUST_CFA_OFFSET 4
1da177e4 900 jmp error_code
fe7cacc1 901 CFI_ENDPROC
47a55cd7 902END(coprocessor_error)
1da177e4
LT
903
904ENTRY(simd_coprocessor_error)
fe7cacc1 905 RING0_INT_FRAME
1da177e4 906 pushl $0
fe7cacc1 907 CFI_ADJUST_CFA_OFFSET 4
40d2e763
BG
908#ifdef CONFIG_X86_INVD_BUG
909 /* AMD 486 bug: invd from userspace calls exception 19 instead of #GP */
910661: pushl $do_general_protection
911662:
912.section .altinstructions,"a"
913 .balign 4
914 .long 661b
915 .long 663f
916 .byte X86_FEATURE_XMM
917 .byte 662b-661b
918 .byte 664f-663f
919.previous
920.section .altinstr_replacement,"ax"
921663: pushl $do_simd_coprocessor_error
922664:
923.previous
924#else
1da177e4 925 pushl $do_simd_coprocessor_error
40d2e763 926#endif
fe7cacc1 927 CFI_ADJUST_CFA_OFFSET 4
1da177e4 928 jmp error_code
fe7cacc1 929 CFI_ENDPROC
47a55cd7 930END(simd_coprocessor_error)
1da177e4
LT
931
932ENTRY(device_not_available)
fe7cacc1 933 RING0_INT_FRAME
1da177e4 934 pushl $-1 # mark this as an int
fe7cacc1 935 CFI_ADJUST_CFA_OFFSET 4
7643e9b9 936 pushl $do_device_not_available
fe7cacc1 937 CFI_ADJUST_CFA_OFFSET 4
7643e9b9 938 jmp error_code
fe7cacc1 939 CFI_ENDPROC
47a55cd7 940END(device_not_available)
1da177e4 941
d3561b7f
RR
942#ifdef CONFIG_PARAVIRT
943ENTRY(native_iret)
3701d863 944 iret
d3561b7f
RR
945.section __ex_table,"a"
946 .align 4
3701d863 947 .long native_iret, iret_exc
d3561b7f 948.previous
47a55cd7 949END(native_iret)
d3561b7f 950
d75cd22f 951ENTRY(native_irq_enable_sysexit)
d3561b7f
RR
952 sti
953 sysexit
d75cd22f 954END(native_irq_enable_sysexit)
d3561b7f
RR
955#endif
956
1da177e4 957ENTRY(overflow)
fe7cacc1 958 RING0_INT_FRAME
1da177e4 959 pushl $0
fe7cacc1 960 CFI_ADJUST_CFA_OFFSET 4
1da177e4 961 pushl $do_overflow
fe7cacc1 962 CFI_ADJUST_CFA_OFFSET 4
1da177e4 963 jmp error_code
fe7cacc1 964 CFI_ENDPROC
47a55cd7 965END(overflow)
1da177e4
LT
966
967ENTRY(bounds)
fe7cacc1 968 RING0_INT_FRAME
1da177e4 969 pushl $0
fe7cacc1 970 CFI_ADJUST_CFA_OFFSET 4
1da177e4 971 pushl $do_bounds
fe7cacc1 972 CFI_ADJUST_CFA_OFFSET 4
1da177e4 973 jmp error_code
fe7cacc1 974 CFI_ENDPROC
47a55cd7 975END(bounds)
1da177e4
LT
976
977ENTRY(invalid_op)
fe7cacc1 978 RING0_INT_FRAME
1da177e4 979 pushl $0
fe7cacc1 980 CFI_ADJUST_CFA_OFFSET 4
1da177e4 981 pushl $do_invalid_op
fe7cacc1 982 CFI_ADJUST_CFA_OFFSET 4
1da177e4 983 jmp error_code
fe7cacc1 984 CFI_ENDPROC
47a55cd7 985END(invalid_op)
1da177e4
LT
986
987ENTRY(coprocessor_segment_overrun)
fe7cacc1 988 RING0_INT_FRAME
1da177e4 989 pushl $0
fe7cacc1 990 CFI_ADJUST_CFA_OFFSET 4
1da177e4 991 pushl $do_coprocessor_segment_overrun
fe7cacc1 992 CFI_ADJUST_CFA_OFFSET 4
1da177e4 993 jmp error_code
fe7cacc1 994 CFI_ENDPROC
47a55cd7 995END(coprocessor_segment_overrun)
1da177e4
LT
996
997ENTRY(invalid_TSS)
fe7cacc1 998 RING0_EC_FRAME
1da177e4 999 pushl $do_invalid_TSS
fe7cacc1 1000 CFI_ADJUST_CFA_OFFSET 4
1da177e4 1001 jmp error_code
fe7cacc1 1002 CFI_ENDPROC
47a55cd7 1003END(invalid_TSS)
1da177e4
LT
1004
1005ENTRY(segment_not_present)
fe7cacc1 1006 RING0_EC_FRAME
1da177e4 1007 pushl $do_segment_not_present
fe7cacc1 1008 CFI_ADJUST_CFA_OFFSET 4
1da177e4 1009 jmp error_code
fe7cacc1 1010 CFI_ENDPROC
47a55cd7 1011END(segment_not_present)
1da177e4
LT
1012
1013ENTRY(stack_segment)
fe7cacc1 1014 RING0_EC_FRAME
1da177e4 1015 pushl $do_stack_segment
fe7cacc1 1016 CFI_ADJUST_CFA_OFFSET 4
1da177e4 1017 jmp error_code
fe7cacc1 1018 CFI_ENDPROC
47a55cd7 1019END(stack_segment)
1da177e4 1020
1da177e4 1021ENTRY(alignment_check)
fe7cacc1 1022 RING0_EC_FRAME
1da177e4 1023 pushl $do_alignment_check
fe7cacc1 1024 CFI_ADJUST_CFA_OFFSET 4
1da177e4 1025 jmp error_code
fe7cacc1 1026 CFI_ENDPROC
47a55cd7 1027END(alignment_check)
1da177e4 1028
d28c4393
P
1029ENTRY(divide_error)
1030 RING0_INT_FRAME
1031 pushl $0 # no error code
1032 CFI_ADJUST_CFA_OFFSET 4
1033 pushl $do_divide_error
fe7cacc1 1034 CFI_ADJUST_CFA_OFFSET 4
1da177e4 1035 jmp error_code
fe7cacc1 1036 CFI_ENDPROC
47a55cd7 1037END(divide_error)
1da177e4
LT
1038
1039#ifdef CONFIG_X86_MCE
1040ENTRY(machine_check)
fe7cacc1 1041 RING0_INT_FRAME
1da177e4 1042 pushl $0
fe7cacc1 1043 CFI_ADJUST_CFA_OFFSET 4
d2f6f7ae 1044 pushl machine_check_vector
fe7cacc1 1045 CFI_ADJUST_CFA_OFFSET 4
1da177e4 1046 jmp error_code
fe7cacc1 1047 CFI_ENDPROC
47a55cd7 1048END(machine_check)
1da177e4
LT
1049#endif
1050
1051ENTRY(spurious_interrupt_bug)
fe7cacc1 1052 RING0_INT_FRAME
1da177e4 1053 pushl $0
fe7cacc1 1054 CFI_ADJUST_CFA_OFFSET 4
1da177e4 1055 pushl $do_spurious_interrupt_bug
fe7cacc1 1056 CFI_ADJUST_CFA_OFFSET 4
1da177e4 1057 jmp error_code
fe7cacc1 1058 CFI_ENDPROC
47a55cd7 1059END(spurious_interrupt_bug)
a00e817f
MH
1060/*
1061 * End of kprobes section
1062 */
1063 .popsection
1da177e4 1064
02ba1a32
AK
1065ENTRY(kernel_thread_helper)
1066 pushl $0 # fake return address for unwinder
1067 CFI_STARTPROC
e840227c
BG
1068 movl %edi,%eax
1069 call *%esi
02ba1a32 1070 call do_exit
5f5db591 1071 ud2 # padding for call trace
02ba1a32
AK
1072 CFI_ENDPROC
1073ENDPROC(kernel_thread_helper)
1074
5ead97c8 1075#ifdef CONFIG_XEN
e2a81baf
JF
1076/* Xen doesn't set %esp to be precisely what the normal sysenter
1077 entrypoint expects, so fix it up before using the normal path. */
1078ENTRY(xen_sysenter_target)
1079 RING0_INT_FRAME
1080 addl $5*4, %esp /* remove xen-provided frame */
2ddf9b7b 1081 CFI_ADJUST_CFA_OFFSET -5*4
e2a81baf 1082 jmp sysenter_past_esp
557d7d4e 1083 CFI_ENDPROC
e2a81baf 1084
5ead97c8
JF
1085ENTRY(xen_hypervisor_callback)
1086 CFI_STARTPROC
1087 pushl $0
1088 CFI_ADJUST_CFA_OFFSET 4
1089 SAVE_ALL
1090 TRACE_IRQS_OFF
9ec2b804
JF
1091
1092 /* Check to see if we got the event in the critical
1093 region in xen_iret_direct, after we've reenabled
1094 events and checked for pending events. This simulates
1095 iret instruction's behaviour where it delivers a
1096 pending interrupt when enabling interrupts. */
1097 movl PT_EIP(%esp),%eax
1098 cmpl $xen_iret_start_crit,%eax
1099 jb 1f
1100 cmpl $xen_iret_end_crit,%eax
1101 jae 1f
1102
0f2c8769 1103 jmp xen_iret_crit_fixup
e2a81baf 1104
e2a81baf 1105ENTRY(xen_do_upcall)
b77797fb 11061: mov %esp, %eax
5ead97c8
JF
1107 call xen_evtchn_do_upcall
1108 jmp ret_from_intr
1109 CFI_ENDPROC
1110ENDPROC(xen_hypervisor_callback)
1111
1112# Hypervisor uses this for application faults while it executes.
1113# We get here for two reasons:
1114# 1. Fault while reloading DS, ES, FS or GS
1115# 2. Fault while executing IRET
1116# Category 1 we fix up by reattempting the load, and zeroing the segment
1117# register if the load fails.
1118# Category 2 we fix up by jumping to do_iret_error. We cannot use the
1119# normal Linux return path in this case because if we use the IRET hypercall
1120# to pop the stack frame we end up in an infinite loop of failsafe callbacks.
1121# We distinguish between categories by maintaining a status value in EAX.
1122ENTRY(xen_failsafe_callback)
1123 CFI_STARTPROC
1124 pushl %eax
1125 CFI_ADJUST_CFA_OFFSET 4
1126 movl $1,%eax
11271: mov 4(%esp),%ds
11282: mov 8(%esp),%es
11293: mov 12(%esp),%fs
11304: mov 16(%esp),%gs
1131 testl %eax,%eax
1132 popl %eax
1133 CFI_ADJUST_CFA_OFFSET -4
1134 lea 16(%esp),%esp
1135 CFI_ADJUST_CFA_OFFSET -16
1136 jz 5f
1137 addl $16,%esp
1138 jmp iret_exc # EAX != 0 => Category 2 (Bad IRET)
11395: pushl $0 # EAX == 0 => Category 1 (Bad segment)
1140 CFI_ADJUST_CFA_OFFSET 4
1141 SAVE_ALL
1142 jmp ret_from_exception
1143 CFI_ENDPROC
1144
1145.section .fixup,"ax"
11466: xorl %eax,%eax
1147 movl %eax,4(%esp)
1148 jmp 1b
11497: xorl %eax,%eax
1150 movl %eax,8(%esp)
1151 jmp 2b
11528: xorl %eax,%eax
1153 movl %eax,12(%esp)
1154 jmp 3b
11559: xorl %eax,%eax
1156 movl %eax,16(%esp)
1157 jmp 4b
1158.previous
1159.section __ex_table,"a"
1160 .align 4
1161 .long 1b,6b
1162 .long 2b,7b
1163 .long 3b,8b
1164 .long 4b,9b
1165.previous
1166ENDPROC(xen_failsafe_callback)
1167
1168#endif /* CONFIG_XEN */
1169
606576ce 1170#ifdef CONFIG_FUNCTION_TRACER
d61f82d0
SR
1171#ifdef CONFIG_DYNAMIC_FTRACE
1172
1173ENTRY(mcount)
d61f82d0
SR
1174 ret
1175END(mcount)
1176
1177ENTRY(ftrace_caller)
60a7ecf4
SR
1178 cmpl $0, function_trace_stop
1179 jne ftrace_stub
1180
d61f82d0
SR
1181 pushl %eax
1182 pushl %ecx
1183 pushl %edx
1184 movl 0xc(%esp), %eax
1185 movl 0x4(%ebp), %edx
395a59d0 1186 subl $MCOUNT_INSN_SIZE, %eax
d61f82d0
SR
1187
1188.globl ftrace_call
1189ftrace_call:
1190 call ftrace_stub
1191
1192 popl %edx
1193 popl %ecx
1194 popl %eax
5a45cfe1
SR
1195#ifdef CONFIG_FUNCTION_GRAPH_TRACER
1196.globl ftrace_graph_call
1197ftrace_graph_call:
1198 jmp ftrace_stub
1199#endif
d61f82d0
SR
1200
1201.globl ftrace_stub
1202ftrace_stub:
1203 ret
1204END(ftrace_caller)
1205
1206#else /* ! CONFIG_DYNAMIC_FTRACE */
1207
16444a8a 1208ENTRY(mcount)
60a7ecf4
SR
1209 cmpl $0, function_trace_stop
1210 jne ftrace_stub
1211
16444a8a
ACM
1212 cmpl $ftrace_stub, ftrace_trace_function
1213 jnz trace
fb52607a 1214#ifdef CONFIG_FUNCTION_GRAPH_TRACER
c2324b69 1215 cmpl $ftrace_stub, ftrace_graph_return
fb52607a 1216 jnz ftrace_graph_caller
e49dc19c
SR
1217
1218 cmpl $ftrace_graph_entry_stub, ftrace_graph_entry
1219 jnz ftrace_graph_caller
caf4b323 1220#endif
16444a8a
ACM
1221.globl ftrace_stub
1222ftrace_stub:
1223 ret
1224
1225 /* taken from glibc */
1226trace:
1227 pushl %eax
1228 pushl %ecx
1229 pushl %edx
1230 movl 0xc(%esp), %eax
1231 movl 0x4(%ebp), %edx
395a59d0 1232 subl $MCOUNT_INSN_SIZE, %eax
16444a8a 1233
d61f82d0 1234 call *ftrace_trace_function
16444a8a
ACM
1235
1236 popl %edx
1237 popl %ecx
1238 popl %eax
16444a8a
ACM
1239 jmp ftrace_stub
1240END(mcount)
d61f82d0 1241#endif /* CONFIG_DYNAMIC_FTRACE */
606576ce 1242#endif /* CONFIG_FUNCTION_TRACER */
16444a8a 1243
fb52607a
FW
1244#ifdef CONFIG_FUNCTION_GRAPH_TRACER
1245ENTRY(ftrace_graph_caller)
e7d3737e
FW
1246 cmpl $0, function_trace_stop
1247 jne ftrace_stub
1248
caf4b323
FW
1249 pushl %eax
1250 pushl %ecx
1251 pushl %edx
1dc1c6ad 1252 movl 0xc(%esp), %edx
caf4b323 1253 lea 0x4(%ebp), %eax
71e308a2 1254 movl (%ebp), %ecx
bb4304c7 1255 subl $MCOUNT_INSN_SIZE, %edx
caf4b323 1256 call prepare_ftrace_return
caf4b323
FW
1257 popl %edx
1258 popl %ecx
1259 popl %eax
e7d3737e 1260 ret
fb52607a 1261END(ftrace_graph_caller)
caf4b323
FW
1262
1263.globl return_to_handler
1264return_to_handler:
caf4b323 1265 pushl %eax
caf4b323 1266 pushl %edx
71e308a2 1267 movl %ebp, %eax
caf4b323 1268 call ftrace_return_to_handler
194ec341 1269 movl %eax, %ecx
caf4b323 1270 popl %edx
caf4b323 1271 popl %eax
194ec341 1272 jmp *%ecx
e7d3737e 1273#endif
16444a8a 1274
bb152f53 1275.section .rodata,"a"
541054d9 1276#include "syscall_table_32.S"
1da177e4
LT
1277
1278syscall_table_size=(.-sys_call_table)
d211af05
AH
1279
1280/*
1281 * Some functions should be protected against kprobes
1282 */
1283 .pushsection .kprobes.text, "ax"
1284
1285ENTRY(page_fault)
1286 RING0_EC_FRAME
1287 pushl $do_page_fault
1288 CFI_ADJUST_CFA_OFFSET 4
1289 ALIGN
1290error_code:
ccbeed3a
TH
1291 /* the function address is in %gs's slot on the stack */
1292 pushl %fs
1293 CFI_ADJUST_CFA_OFFSET 4
1294 /*CFI_REL_OFFSET fs, 0*/
d211af05
AH
1295 pushl %es
1296 CFI_ADJUST_CFA_OFFSET 4
1297 /*CFI_REL_OFFSET es, 0*/
1298 pushl %ds
1299 CFI_ADJUST_CFA_OFFSET 4
1300 /*CFI_REL_OFFSET ds, 0*/
1301 pushl %eax
1302 CFI_ADJUST_CFA_OFFSET 4
1303 CFI_REL_OFFSET eax, 0
1304 pushl %ebp
1305 CFI_ADJUST_CFA_OFFSET 4
1306 CFI_REL_OFFSET ebp, 0
1307 pushl %edi
1308 CFI_ADJUST_CFA_OFFSET 4
1309 CFI_REL_OFFSET edi, 0
1310 pushl %esi
1311 CFI_ADJUST_CFA_OFFSET 4
1312 CFI_REL_OFFSET esi, 0
1313 pushl %edx
1314 CFI_ADJUST_CFA_OFFSET 4
1315 CFI_REL_OFFSET edx, 0
1316 pushl %ecx
1317 CFI_ADJUST_CFA_OFFSET 4
1318 CFI_REL_OFFSET ecx, 0
1319 pushl %ebx
1320 CFI_ADJUST_CFA_OFFSET 4
1321 CFI_REL_OFFSET ebx, 0
1322 cld
d211af05
AH
1323 movl $(__KERNEL_PERCPU), %ecx
1324 movl %ecx, %fs
1325 UNWIND_ESPFIX_STACK
ccbeed3a
TH
1326 GS_TO_REG %ecx
1327 movl PT_GS(%esp), %edi # get the function address
d211af05
AH
1328 movl PT_ORIG_EAX(%esp), %edx # get the error code
1329 movl $-1, PT_ORIG_EAX(%esp) # no syscall to restart
ccbeed3a
TH
1330 REG_TO_PTGS %ecx
1331 SET_KERNEL_GS %ecx
d211af05
AH
1332 movl $(__USER_DS), %ecx
1333 movl %ecx, %ds
1334 movl %ecx, %es
1335 TRACE_IRQS_OFF
1336 movl %esp,%eax # pt_regs pointer
1337 call *%edi
1338 jmp ret_from_exception
1339 CFI_ENDPROC
1340END(page_fault)
1341
1342/*
1343 * Debug traps and NMI can happen at the one SYSENTER instruction
1344 * that sets up the real kernel stack. Check here, since we can't
1345 * allow the wrong stack to be used.
1346 *
1347 * "TSS_sysenter_sp0+12" is because the NMI/debug handler will have
1348 * already pushed 3 words if it hits on the sysenter instruction:
1349 * eflags, cs and eip.
1350 *
1351 * We just load the right stack, and push the three (known) values
1352 * by hand onto the new stack - while updating the return eip past
1353 * the instruction that would have done it for sysenter.
1354 */
f0d96110
TH
1355.macro FIX_STACK offset ok label
1356 cmpw $__KERNEL_CS, 4(%esp)
1357 jne \ok
1358\label:
1359 movl TSS_sysenter_sp0 + \offset(%esp), %esp
1360 CFI_DEF_CFA esp, 0
1361 CFI_UNDEFINED eip
1362 pushfl
1363 CFI_ADJUST_CFA_OFFSET 4
1364 pushl $__KERNEL_CS
1365 CFI_ADJUST_CFA_OFFSET 4
1366 pushl $sysenter_past_esp
1367 CFI_ADJUST_CFA_OFFSET 4
d211af05 1368 CFI_REL_OFFSET eip, 0
f0d96110 1369.endm
d211af05
AH
1370
1371ENTRY(debug)
1372 RING0_INT_FRAME
1373 cmpl $ia32_sysenter_target,(%esp)
1374 jne debug_stack_correct
f0d96110 1375 FIX_STACK 12, debug_stack_correct, debug_esp_fix_insn
d211af05
AH
1376debug_stack_correct:
1377 pushl $-1 # mark this as an int
1378 CFI_ADJUST_CFA_OFFSET 4
1379 SAVE_ALL
1380 TRACE_IRQS_OFF
1381 xorl %edx,%edx # error code 0
1382 movl %esp,%eax # pt_regs pointer
1383 call do_debug
1384 jmp ret_from_exception
1385 CFI_ENDPROC
1386END(debug)
1387
1388/*
1389 * NMI is doubly nasty. It can happen _while_ we're handling
1390 * a debug fault, and the debug fault hasn't yet been able to
1391 * clear up the stack. So we first check whether we got an
1392 * NMI on the sysenter entry path, but after that we need to
1393 * check whether we got an NMI on the debug path where the debug
1394 * fault happened on the sysenter path.
1395 */
1396ENTRY(nmi)
1397 RING0_INT_FRAME
1398 pushl %eax
1399 CFI_ADJUST_CFA_OFFSET 4
1400 movl %ss, %eax
1401 cmpw $__ESPFIX_SS, %ax
1402 popl %eax
1403 CFI_ADJUST_CFA_OFFSET -4
1404 je nmi_espfix_stack
1405 cmpl $ia32_sysenter_target,(%esp)
1406 je nmi_stack_fixup
1407 pushl %eax
1408 CFI_ADJUST_CFA_OFFSET 4
1409 movl %esp,%eax
1410 /* Do not access memory above the end of our stack page,
1411 * it might not exist.
1412 */
1413 andl $(THREAD_SIZE-1),%eax
1414 cmpl $(THREAD_SIZE-20),%eax
1415 popl %eax
1416 CFI_ADJUST_CFA_OFFSET -4
1417 jae nmi_stack_correct
1418 cmpl $ia32_sysenter_target,12(%esp)
1419 je nmi_debug_stack_check
1420nmi_stack_correct:
1421 /* We have a RING0_INT_FRAME here */
1422 pushl %eax
1423 CFI_ADJUST_CFA_OFFSET 4
1424 SAVE_ALL
d211af05
AH
1425 xorl %edx,%edx # zero error code
1426 movl %esp,%eax # pt_regs pointer
1427 call do_nmi
2e04bc76 1428 jmp restore_all_notrace
d211af05
AH
1429 CFI_ENDPROC
1430
1431nmi_stack_fixup:
1432 RING0_INT_FRAME
f0d96110 1433 FIX_STACK 12, nmi_stack_correct, 1
d211af05
AH
1434 jmp nmi_stack_correct
1435
1436nmi_debug_stack_check:
1437 /* We have a RING0_INT_FRAME here */
1438 cmpw $__KERNEL_CS,16(%esp)
1439 jne nmi_stack_correct
1440 cmpl $debug,(%esp)
1441 jb nmi_stack_correct
1442 cmpl $debug_esp_fix_insn,(%esp)
1443 ja nmi_stack_correct
f0d96110 1444 FIX_STACK 24, nmi_stack_correct, 1
d211af05
AH
1445 jmp nmi_stack_correct
1446
1447nmi_espfix_stack:
1448 /* We have a RING0_INT_FRAME here.
1449 *
1450 * create the pointer to lss back
1451 */
1452 pushl %ss
1453 CFI_ADJUST_CFA_OFFSET 4
1454 pushl %esp
1455 CFI_ADJUST_CFA_OFFSET 4
bda3a897 1456 addl $4, (%esp)
d211af05
AH
1457 /* copy the iret frame of 12 bytes */
1458 .rept 3
1459 pushl 16(%esp)
1460 CFI_ADJUST_CFA_OFFSET 4
1461 .endr
1462 pushl %eax
1463 CFI_ADJUST_CFA_OFFSET 4
1464 SAVE_ALL
d211af05
AH
1465 FIXUP_ESPFIX_STACK # %eax == %esp
1466 xorl %edx,%edx # zero error code
1467 call do_nmi
1468 RESTORE_REGS
1469 lss 12+4(%esp), %esp # back to espfix stack
1470 CFI_ADJUST_CFA_OFFSET -24
1471 jmp irq_return
1472 CFI_ENDPROC
1473END(nmi)
1474
1475ENTRY(int3)
1476 RING0_INT_FRAME
1477 pushl $-1 # mark this as an int
1478 CFI_ADJUST_CFA_OFFSET 4
1479 SAVE_ALL
1480 TRACE_IRQS_OFF
1481 xorl %edx,%edx # zero error code
1482 movl %esp,%eax # pt_regs pointer
1483 call do_int3
1484 jmp ret_from_exception
1485 CFI_ENDPROC
1486END(int3)
1487
1488ENTRY(general_protection)
1489 RING0_EC_FRAME
1490 pushl $do_general_protection
1491 CFI_ADJUST_CFA_OFFSET 4
1492 jmp error_code
1493 CFI_ENDPROC
1494END(general_protection)
1495
1496/*
1497 * End of kprobes section
1498 */
1499 .popsection