Changes in 4.9.326 Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put ntfs: fix use-after-free in ntfs_ucsncmp() scsi: ufs: host: Hold reference returned by of_parse_phandle() net: ping6: Fix memleak in ipv6_renew_options(). net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() netfilter: nf_queue: do not allow packet truncation below transport header offset ARM: crypto: comment out gcc warning that breaks clang builds mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. ion: Make user_ion_handle_put_nolock() a void function selinux: Minor cleanups proc: Pass file mode to proc_pid_make_inode selinux: Clean up initialization of isec->sclass selinux: Convert isec->lock into a spinlock selinux: fix error initialization in inode_doinit_with_dentry() selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap init/main: Fix double "the" in comment init/main: properly align the multi-line comment init: move stack canary initialization after setup_arch init/main.c: extract early boot entropy from the passed cmdline ACPI: video: Force backlight native for some TongFang devices ACPI: video: Shortening quirk list by identifying Clevo by board_name only random: only call boot_init_stack_canary() once macintosh/adb: fix oob read in do_adb_query() function ALSA: bcd2000: Fix a UAF bug on the error path of probing add barriers to buffer_uptodate and set_buffer_uptodate KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model ALSA: hda/cirrus - support for iMac 12,1 model vfs: Check the truncate maximum size in inode_newsize_ok() usbnet: Fix linkwatch use-after-free on disconnect parisc: Fix device names in /proc/iomem drm/nouveau: fix another off-by-one in nvbios_addr bpf: fix overflow in prog accounting fuse: limit nsec md-raid10: fix KASAN warning ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() PCI: Add defines for normal and subtractive PCI bridges powerpc/fsl-pci: Fix Class Code of PCIe Root Port powerpc/powernv: Avoid crashing if rng is NULL MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK USB: HCD: Fix URB giveback issue in tasklet function netfilter: nf_tables: fix null deref due to zeroed list head scsi: zfcp: Fix missing auto port scan and thus missing target ports x86/olpc: fix 'logical not is only applied to the left hand side' spmi: trace: fix stack-out-of-bound access in SPMI tracing functions ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h ext4: make sure ext4_append() always allocates new block ext4: fix use-after-free in ext4_xattr_set_entry ext4: update s_overhead_clusters in the superblock during an on-line resize ext4: fix extent status tree race in writeback error recovery path ext4: correct max_inline_xattr_value_size computing dm raid: fix address sanitizer warning in raid_status net_sched: cls_route: remove from list when handle is 0 btrfs: reject log replay if there is unsupported RO compat flag tcp: fix over estimation in sk_forced_mem_schedule() scsi: sg: Allow waiting for commands to complete on removed device Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression nios2: time: Read timer in get_cycles only if initialized net/9p: Initialize the iounit field during fid creation net_sched: cls_route: disallow handle of 0 ALSA: info: Fix llseek return value when using callback rds: add missing barrier to release_refill ata: libata-eh: Add missing command name btrfs: fix lost error handling when looking up extended ref on log replay can: ems_usb: fix clang's -Wunaligned-access warning NFSv4.1: RECLAIM_COMPLETE must handle EACCES SUNRPC: Reinitialise the backchannel request buffers before reuse pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed vsock: Fix memory leak in vsock_connect() xen/xenbus: fix return type in xenbus_file_read() atm: idt77252: fix use-after-free bugs caused by tst_timer nios2: page fault et.al. are *not* restartable syscalls... nios2: don't leave NULLs in sys_call_table[] nios2: traced syscall does need to check the syscall number nios2: fix syscall restart checks nios2: restarts apply only to the first sigframe we build... nios2: add force_successful_syscall_return() netfilter: nf_tables: really skip inactive sets when allocating name fec: Fix timer capture timing in `fec_ptp_enable_pps()` irqchip/tegra: Fix overflow implicit truncation warnings usb: host: ohci-ppc-of: Fix refcount leak bug gadgetfs: ep_io - wait until IRQ finishes cxl: Fix a memory leak in an error handling path drivers:md:fix a potential use-after-free bug ext4: avoid remove directory when directory is corrupted ext4: avoid resizing to a partial cluster size tty: serial: Fix refcount leak bug in ucc_uart.c vfio: Clear the caps->buf to NULL after free mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start ALSA: core: Add async signal helpers ALSA: timer: Use deferred fasync helper powerpc/64: Init jump labels before parse_early_param() video: fbdev: i740fb: Check the argument of i740_calc_vclk() MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 Linux 4.9.326 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I3ca17af58cd0c61bd81028c496849592cfd22f0f
221 lines
4.3 KiB
C
221 lines
4.3 KiB
C
/*
|
|
* Copyright 2013, Michael Ellerman, IBM Corporation.
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version
|
|
* 2 of the License, or (at your option) any later version.
|
|
*/
|
|
|
|
#define pr_fmt(fmt) "powernv-rng: " fmt
|
|
|
|
#include <linux/kernel.h>
|
|
#include <linux/of.h>
|
|
#include <linux/of_address.h>
|
|
#include <linux/of_platform.h>
|
|
#include <linux/slab.h>
|
|
#include <linux/smp.h>
|
|
#include <asm/archrandom.h>
|
|
#include <asm/cputable.h>
|
|
#include <asm/io.h>
|
|
#include <asm/prom.h>
|
|
#include <asm/machdep.h>
|
|
#include <asm/smp.h>
|
|
#include "powernv.h"
|
|
|
|
#define DARN_ERR 0xFFFFFFFFFFFFFFFFul
|
|
|
|
struct powernv_rng {
|
|
void __iomem *regs;
|
|
void __iomem *regs_real;
|
|
unsigned long mask;
|
|
};
|
|
|
|
static DEFINE_PER_CPU(struct powernv_rng *, powernv_rng);
|
|
|
|
int powernv_hwrng_present(void)
|
|
{
|
|
struct powernv_rng *rng;
|
|
|
|
rng = get_cpu_var(powernv_rng);
|
|
put_cpu_var(rng);
|
|
return rng != NULL;
|
|
}
|
|
|
|
static unsigned long rng_whiten(struct powernv_rng *rng, unsigned long val)
|
|
{
|
|
unsigned long parity;
|
|
|
|
/* Calculate the parity of the value */
|
|
asm (".machine push; \
|
|
.machine power7; \
|
|
popcntd %0,%1; \
|
|
.machine pop;"
|
|
: "=r" (parity) : "r" (val));
|
|
|
|
/* xor our value with the previous mask */
|
|
val ^= rng->mask;
|
|
|
|
/* update the mask based on the parity of this value */
|
|
rng->mask = (rng->mask << 1) | (parity & 1);
|
|
|
|
return val;
|
|
}
|
|
|
|
int powernv_get_random_real_mode(unsigned long *v)
|
|
{
|
|
struct powernv_rng *rng;
|
|
|
|
rng = raw_cpu_read(powernv_rng);
|
|
if (!rng)
|
|
return 0;
|
|
|
|
*v = rng_whiten(rng, in_rm64(rng->regs_real));
|
|
|
|
return 1;
|
|
}
|
|
|
|
static int powernv_get_random_darn(unsigned long *v)
|
|
{
|
|
unsigned long val;
|
|
|
|
/* Using DARN with L=1 - 64-bit conditioned random number */
|
|
asm volatile(PPC_DARN(%0, 1) : "=r"(val));
|
|
|
|
if (val == DARN_ERR)
|
|
return 0;
|
|
|
|
*v = val;
|
|
|
|
return 1;
|
|
}
|
|
|
|
static int __init initialise_darn(void)
|
|
{
|
|
unsigned long val;
|
|
int i;
|
|
|
|
if (!cpu_has_feature(CPU_FTR_ARCH_300))
|
|
return -ENODEV;
|
|
|
|
for (i = 0; i < 10; i++) {
|
|
if (powernv_get_random_darn(&val)) {
|
|
ppc_md.get_random_seed = powernv_get_random_darn;
|
|
return 0;
|
|
}
|
|
}
|
|
return -EIO;
|
|
}
|
|
|
|
int powernv_get_random_long(unsigned long *v)
|
|
{
|
|
struct powernv_rng *rng;
|
|
|
|
rng = get_cpu_var(powernv_rng);
|
|
|
|
*v = rng_whiten(rng, in_be64(rng->regs));
|
|
|
|
put_cpu_var(rng);
|
|
|
|
return 1;
|
|
}
|
|
EXPORT_SYMBOL_GPL(powernv_get_random_long);
|
|
|
|
static __init void rng_init_per_cpu(struct powernv_rng *rng,
|
|
struct device_node *dn)
|
|
{
|
|
int chip_id, cpu;
|
|
|
|
chip_id = of_get_ibm_chip_id(dn);
|
|
if (chip_id == -1)
|
|
pr_warn("No ibm,chip-id found for %pOF.\n", dn);
|
|
|
|
for_each_possible_cpu(cpu) {
|
|
if (per_cpu(powernv_rng, cpu) == NULL ||
|
|
cpu_to_chip_id(cpu) == chip_id) {
|
|
per_cpu(powernv_rng, cpu) = rng;
|
|
}
|
|
}
|
|
}
|
|
|
|
static __init int rng_create(struct device_node *dn)
|
|
{
|
|
struct powernv_rng *rng;
|
|
struct resource res;
|
|
unsigned long val;
|
|
|
|
rng = kzalloc(sizeof(*rng), GFP_KERNEL);
|
|
if (!rng)
|
|
return -ENOMEM;
|
|
|
|
if (of_address_to_resource(dn, 0, &res)) {
|
|
kfree(rng);
|
|
return -ENXIO;
|
|
}
|
|
|
|
rng->regs_real = (void __iomem *)res.start;
|
|
|
|
rng->regs = of_iomap(dn, 0);
|
|
if (!rng->regs) {
|
|
kfree(rng);
|
|
return -ENXIO;
|
|
}
|
|
|
|
val = in_be64(rng->regs);
|
|
rng->mask = val;
|
|
|
|
rng_init_per_cpu(rng, dn);
|
|
|
|
ppc_md.get_random_seed = powernv_get_random_long;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int __init pnv_get_random_long_early(unsigned long *v)
|
|
{
|
|
struct device_node *dn;
|
|
|
|
if (!slab_is_available())
|
|
return 0;
|
|
|
|
if (cmpxchg(&ppc_md.get_random_seed, pnv_get_random_long_early,
|
|
NULL) != pnv_get_random_long_early)
|
|
return 0;
|
|
|
|
for_each_compatible_node(dn, NULL, "ibm,power-rng") {
|
|
if (rng_create(dn))
|
|
continue;
|
|
/* Create devices for hwrng driver */
|
|
of_platform_device_create(dn, NULL, NULL);
|
|
}
|
|
|
|
if (!ppc_md.get_random_seed)
|
|
return 0;
|
|
return ppc_md.get_random_seed(v);
|
|
}
|
|
|
|
void __init pnv_rng_init(void)
|
|
{
|
|
struct device_node *dn;
|
|
|
|
/* Prefer darn over the rest. */
|
|
if (!initialise_darn())
|
|
return;
|
|
|
|
dn = of_find_compatible_node(NULL, NULL, "ibm,power-rng");
|
|
if (dn)
|
|
ppc_md.get_random_seed = pnv_get_random_long_early;
|
|
|
|
of_node_put(dn);
|
|
}
|
|
|
|
static int __init pnv_rng_late_init(void)
|
|
{
|
|
unsigned long v;
|
|
/* In case it wasn't called during init for some other reason. */
|
|
if (ppc_md.get_random_seed == pnv_get_random_long_early)
|
|
pnv_get_random_long_early(&v);
|
|
return 0;
|
|
}
|
|
machine_subsys_initcall(powernv, pnv_rng_late_init);
|