Add tests for the FWFT SBI extension. Currently, only the reserved range as well as the misaligned exception delegation are used. Signed-off-by: Clément Léger <cleger@xxxxxxxxxxxx> --- riscv/Makefile | 2 +- lib/riscv/asm/sbi.h | 34 ++++++++ riscv/sbi-fwft.c | 189 ++++++++++++++++++++++++++++++++++++++++++++ riscv/sbi.c | 3 + 4 files changed, 227 insertions(+), 1 deletion(-) create mode 100644 riscv/sbi-fwft.c diff --git a/riscv/Makefile b/riscv/Makefile index 5b5e157c..52718f3f 100644 --- a/riscv/Makefile +++ b/riscv/Makefile @@ -17,7 +17,7 @@ tests += $(TEST_DIR)/sieve.$(exe) all: $(tests) -$(TEST_DIR)/sbi-deps = $(TEST_DIR)/sbi-asm.o +$(TEST_DIR)/sbi-deps = $(TEST_DIR)/sbi-asm.o $(TEST_DIR)/sbi-fwft.o # When built for EFI sieve needs extra memory, run with e.g. '-m 256' on QEMU $(TEST_DIR)/sieve.$(exe): AUXFLAGS = 0x1 diff --git a/lib/riscv/asm/sbi.h b/lib/riscv/asm/sbi.h index 98a9b097..397400f2 100644 --- a/lib/riscv/asm/sbi.h +++ b/lib/riscv/asm/sbi.h @@ -11,6 +11,12 @@ #define SBI_ERR_ALREADY_AVAILABLE -6 #define SBI_ERR_ALREADY_STARTED -7 #define SBI_ERR_ALREADY_STOPPED -8 +#define SBI_ERR_NO_SHMEM -9 +#define SBI_ERR_INVALID_STATE -10 +#define SBI_ERR_BAD_RANGE -11 +#define SBI_ERR_TIMEOUT -12 +#define SBI_ERR_IO -13 +#define SBI_ERR_LOCKED -14 #ifndef __ASSEMBLY__ #include <cpumask.h> @@ -23,6 +29,7 @@ enum sbi_ext_id { SBI_EXT_SRST = 0x53525354, SBI_EXT_DBCN = 0x4442434E, SBI_EXT_SUSP = 0x53555350, + SBI_EXT_FWFT = 0x46574654, }; enum sbi_ext_base_fid { @@ -71,6 +78,33 @@ enum sbi_ext_dbcn_fid { SBI_EXT_DBCN_CONSOLE_WRITE_BYTE, }; + +enum sbi_ext_fwft_fid { + SBI_EXT_FWFT_SET = 0, + SBI_EXT_FWFT_GET, +}; + +#define SBI_FWFT_MISALIGNED_EXC_DELEG 0x0 +#define SBI_FWFT_LANDING_PAD 0x1 +#define SBI_FWFT_SHADOW_STACK 0x2 +#define SBI_FWFT_DOUBLE_TRAP 0x3 +#define SBI_FWFT_PTE_AD_HW_UPDATING 0x4 +#define SBI_FWFT_POINTER_MASKING_PMLEN 0x5 +#define SBI_FWFT_LOCAL_RESERVED_START 0x6 +#define SBI_FWFT_LOCAL_RESERVED_END 0x3fffffff +#define SBI_FWFT_LOCAL_PLATFORM_START 0x40000000 +#define SBI_FWFT_LOCAL_PLATFORM_END 0x7fffffff + +#define SBI_FWFT_GLOBAL_RESERVED_START 0x80000000 +#define SBI_FWFT_GLOBAL_RESERVED_END 0xbfffffff +#define SBI_FWFT_GLOBAL_PLATFORM_START 0xc0000000 +#define SBI_FWFT_GLOBAL_PLATFORM_END 0xffffffff + +#define SBI_FWFT_PLATFORM_FEATURE_BIT BIT(30) +#define SBI_FWFT_GLOBAL_FEATURE_BIT BIT(31) + +#define SBI_FWFT_SET_FLAG_LOCK BIT(0) + struct sbiret { long error; long value; diff --git a/riscv/sbi-fwft.c b/riscv/sbi-fwft.c new file mode 100644 index 00000000..7866a917 --- /dev/null +++ b/riscv/sbi-fwft.c @@ -0,0 +1,189 @@ +// SPDX-License-Identifier: GPL-2.0-only +/* + * SBI verification + * + * Copyright (C) 2024, Rivos Inc., Clément Léger <cleger@xxxxxxxxxxxx> + */ +#include <libcflat.h> +#include <stdlib.h> + +#include <asm/csr.h> +#include <asm/processor.h> +#include <asm/ptrace.h> +#include <asm/sbi.h> + +void check_fwft(void); + + +static struct sbiret fwft_set_raw(unsigned long feature_id, unsigned long value, + unsigned long flags) +{ + return sbi_ecall(SBI_EXT_FWFT, SBI_EXT_FWFT_SET, feature_id, value, + flags, 0, 0, 0); +} + +static struct sbiret fwft_set(uint32_t feature_id, unsigned long value, + unsigned long flags) +{ + return fwft_set_raw(feature_id, value, flags); +} + +static struct sbiret fwft_get_raw(unsigned long feature_id) +{ + return sbi_ecall(SBI_EXT_FWFT, SBI_EXT_FWFT_GET, feature_id, 0, 0, 0, 0, + 0); +} + +static struct sbiret fwft_get(uint32_t feature_id) +{ + return fwft_get_raw(feature_id); +} + +static void fwft_check_reserved(unsigned long id) +{ + struct sbiret ret; + + ret = fwft_get(id); + report(ret.error == SBI_ERR_DENIED, + "get reserved feature 0x%lx error == SBI_ERR_DENIED", id); + + ret = fwft_set(id, 1, 0); + report(ret.error == SBI_ERR_DENIED, + "set reserved feature 0x%lx error == SBI_ERR_DENIED", id); +} + +static void fwft_check_base(void) +{ + struct sbiret ret; + + report_prefix_push("base"); + + fwft_check_reserved(SBI_FWFT_LOCAL_RESERVED_START); + fwft_check_reserved(SBI_FWFT_LOCAL_RESERVED_END); + fwft_check_reserved(SBI_FWFT_GLOBAL_RESERVED_START); + fwft_check_reserved(SBI_FWFT_GLOBAL_RESERVED_END); + + /* Check id > 32 bits */ + if (__riscv_xlen > 32) { + ret = fwft_get_raw(BIT(32)); + report(ret.error == SBI_ERR_INVALID_PARAM, + "get feature 0x%lx error == SBI_ERR_INVALID_PARAM", BIT(32)); + + ret = fwft_set_raw(BIT(32), 0, 0); + report(ret.error == SBI_ERR_INVALID_PARAM, + "set feature 0x%lx error == SBI_ERR_INVALID_PARAM", BIT(32)); + } + + report_prefix_pop(); +} + +static bool misaligned_handled; + +static void misaligned_handler(struct pt_regs *regs) +{ + misaligned_handled = true; + regs->epc += 4; +} + +static void fwft_check_misaligned_exc_deleg(void) +{ + struct sbiret ret; + + report_prefix_push("misaligned_exc_deleg"); + + ret = fwft_get(SBI_FWFT_MISALIGNED_EXC_DELEG); + if (ret.error == SBI_ERR_NOT_SUPPORTED) { + report_skip("SBI_FWFT_MISALIGNED_EXC_DELEG is not supported"); + return; + } + report(!ret.error, "Get misaligned deleg feature no error: %lx", + ret.error); + if (ret.error) + return; + + ret = fwft_set(SBI_FWFT_MISALIGNED_EXC_DELEG, 2, 0); + report(ret.error == SBI_ERR_INVALID_PARAM, + "Set misaligned deleg feature invalid value error"); + ret = fwft_set(SBI_FWFT_MISALIGNED_EXC_DELEG, 0xFFFFFFFF, 0); + report(ret.error == SBI_ERR_INVALID_PARAM, + "Set misaligned deleg feature invalid value error"); + + if (__riscv_xlen > 32) { + ret = fwft_set(SBI_FWFT_MISALIGNED_EXC_DELEG, BIT(32), 0); + report(ret.error == SBI_ERR_INVALID_PARAM, + "Set misaligned deleg with value > 32bits invalid param error"); + + ret = fwft_set(SBI_FWFT_MISALIGNED_EXC_DELEG, 0, BIT(32)); + report(ret.error == SBI_ERR_INVALID_PARAM, + "Set misaligned deleg with flag > 32bits invalid param error"); + } + + /* Set to 0 and check after with get */ + ret = fwft_set(SBI_FWFT_MISALIGNED_EXC_DELEG, 0, 0); + report(!ret.error, "Set misaligned deleg feature value no error"); + ret = fwft_get(SBI_FWFT_MISALIGNED_EXC_DELEG); + if (ret.error) + report_fail("Get misaligned deleg feature after set: %lx", + ret.error); + else + report(ret.value == 0, "Set misaligned deleg feature value 0"); + + /* Set to 1 and check after with get */ + ret = fwft_set(SBI_FWFT_MISALIGNED_EXC_DELEG, 1, 0); + report(!ret.error, "Set misaligned deleg feature value no error"); + ret = fwft_get(SBI_FWFT_MISALIGNED_EXC_DELEG); + if (ret.error) + report_fail("Get misaligned deleg feature after set: %lx", + ret.error); + else + report(ret.value == 1, "Set misaligned deleg feature value 1"); + + install_exception_handler(EXC_LOAD_MISALIGNED, misaligned_handler); + + asm volatile ( + ".option push\n" + /* + * Disable compression so the lw takes exactly 4 bytes and thus + * can be skipped reliably from the exception handler. + */ + ".option arch,-c\n" + "lw %[val], 1(%[val_addr])\n" + ".option pop\n" + : [val] "+r" (ret.value) + : [val_addr] "r" (&ret.value) + : "memory"); + + if (!misaligned_handled) + report_skip("Verify misaligned load exception trap in supervisor"); + else + report_pass("Verify misaligned load exception trap in supervisor"); + + install_exception_handler(EXC_LOAD_MISALIGNED, NULL); + + /* Lock the feature */ + ret = fwft_set(SBI_FWFT_MISALIGNED_EXC_DELEG, 0, SBI_FWFT_SET_FLAG_LOCK); + report(!ret.error, "Set misaligned deleg feature value 0 and lock no error"); + ret = fwft_set(SBI_FWFT_MISALIGNED_EXC_DELEG, 1, 0); + report(ret.error == SBI_ERR_LOCKED, + "Set misaligned deleg feature value 0 and lock no error"); + ret = fwft_get(SBI_FWFT_MISALIGNED_EXC_DELEG); + report(!ret.error, "Get misaligned deleg locked value no error"); + + report_prefix_pop(); +} + +void check_fwft(void) +{ + report_prefix_push("fwft"); + + if (!sbi_probe(SBI_EXT_FWFT)) { + report_skip("FWFT extension not available"); + report_prefix_pop(); + return; + } + + fwft_check_base(); + fwft_check_misaligned_exc_deleg(); + + report_prefix_pop(); +} diff --git a/riscv/sbi.c b/riscv/sbi.c index 6f4ddaf1..8600e38e 100644 --- a/riscv/sbi.c +++ b/riscv/sbi.c @@ -32,6 +32,8 @@ #define HIGH_ADDR_BOUNDARY ((phys_addr_t)1 << 32) +void check_fwft(void); + static long __labs(long a) { return __builtin_labs(a); @@ -1451,6 +1453,7 @@ int main(int argc, char **argv) check_hsm(); check_dbcn(); check_susp(); + check_fwft(); return report_summary(); } -- 2.47.1