summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorArcher Yan <ayan@wavecomp.com>2019-03-08 03:29:19 +0000
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2019-03-27 14:14:39 +0900
commit9d91069f48cc37367abc833fe2db8531fc2fcd3b (patch)
tree65c314508e8f7d70832298e0373113b3bec3b965
parent6e74961bd67ddea0dfa46ba4e745c2696a1d308b (diff)
downloadlinux-rpi-9d91069f48cc37367abc833fe2db8531fc2fcd3b.tar.gz
linux-rpi-9d91069f48cc37367abc833fe2db8531fc2fcd3b.tar.bz2
linux-rpi-9d91069f48cc37367abc833fe2db8531fc2fcd3b.zip
MIPS: Fix kernel crash for R6 in jump label branch function
commit 47c25036b60f27b86ab44b66a8861bcf81cde39b upstream. Insert Branch instruction instead of NOP to make sure assembler don't patch code in forbidden slot. In jump label function, it might be possible to patch Control Transfer Instructions(CTIs) into forbidden slot, which will generate Reserved Instruction exception in MIPS release 6. Signed-off-by: Archer Yan <ayan@wavecomp.com> Reviewed-by: Paul Burton <paul.burton@mips.com> [paul.burton@mips.com: - Add MIPS prefix to subject. - Mark for stable from v4.0, which introduced r6 support, onwards.] Signed-off-by: Paul Burton <paul.burton@mips.com> Cc: linux-mips@vger.kernel.org Cc: stable@vger.kernel.org # v4.0+ Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
-rw-r--r--arch/mips/include/asm/jump_label.h8
1 files changed, 4 insertions, 4 deletions
diff --git a/arch/mips/include/asm/jump_label.h b/arch/mips/include/asm/jump_label.h
index e77672539e8e..e4456e450f94 100644
--- a/arch/mips/include/asm/jump_label.h
+++ b/arch/mips/include/asm/jump_label.h
@@ -21,15 +21,15 @@
#endif
#ifdef CONFIG_CPU_MICROMIPS
-#define NOP_INSN "nop32"
+#define B_INSN "b32"
#else
-#define NOP_INSN "nop"
+#define B_INSN "b"
#endif
static __always_inline bool arch_static_branch(struct static_key *key, bool branch)
{
- asm_volatile_goto("1:\t" NOP_INSN "\n\t"
- "nop\n\t"
+ asm_volatile_goto("1:\t" B_INSN " 2f\n\t"
+ "2:\tnop\n\t"
".pushsection __jump_table, \"aw\"\n\t"
WORD_INSN " 1b, %l[l_yes], %0\n\t"
".popsection\n\t"