Received: by 2002:a05:6a10:413:0:0:0:0 with SMTP id 19csp2016450pxp; Thu, 10 Mar 2022 17:33:48 -0800 (PST) X-Google-Smtp-Source: ABdhPJy1Nr18rX6EtzdMQTB0qARAFkrmHErPuePvLBFf9jK3523oiSzw7PnTL16p5Oaaexez+0T+ X-Received: by 2002:a05:6402:b87:b0:416:44f5:10d1 with SMTP id cf7-20020a0564020b8700b0041644f510d1mr6753557edb.323.1646962427974; Thu, 10 Mar 2022 17:33:47 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1646962427; cv=none; d=google.com; s=arc-20160816; b=SNGIrZnY/BLHJ+56WSVHv2YvdeyKmP/Q3OYNMl0om0ClZ4M9rKnM462zYecJ4NazYY Kj4c3bM1TlQPylHm+3oP+HV65LtFmHxQMsJb6Tmuc9Buyhg6AuqbF+rDxOuilboiHOvu usAltL+2jQ+L0nNJYqLr/AEr04UIaM3Z7gRq2yx6pNiMuM+/z7NmFsxmNHXPrnij1GIY Jt/Px8O6QismD2uxTjyvFYpnXag1hDk/WiI8tLcbwKw88HLcptHm3EVFRCqhhjVdNAEN gnM80y4f/kzQsV7/tlLhrzgRUrLu4CxHS1RVD+6rY3SBjSkClEYQ2a3vnrcA2qn2YZOS KTgw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=mVXJLoKE1FyJYa8pr42Clwizd2xOZqDn7sXGqEztymk=; b=oXaOMxowRwNuMcE3sf3kITrsATJwqUz7S4DMThDY2nbKC607LDkiqLUJWy7uMSvuy0 4hj/YVQvtc8ZVudvcQOfSF5TjTotRRgqObpzYRoTurhMgCg0Imy7CcBkfSKNfl7oOaoY M3OD3e2N872pxHHeShnGfn41l5l20dEPNKzpRSVRxMN5lK4R9/hCwSFBYfWgKzrQqzih KCnu5N0j+CzS8SYdzQ3RYCquD+aJEgz/8TyivbnD/RZOaiPv8/aXIjqpupgYaG3eM5vt mklS2k6hOLXldwbay5T2e+0MRvwXcm8jcGKI6M2xsw3Ur4Ub2obI8+3sbA5aYbXYeXuN jRcQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=FuzFfsNA; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id qx21-20020a170906fcd500b006d0b3918d3csi4135890ejb.280.2022.03.10.17.33.26; Thu, 10 Mar 2022 17:33:47 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=FuzFfsNA; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S244716AbiCJRWo (ORCPT + 99 others); Thu, 10 Mar 2022 12:22:44 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:53574 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S244665AbiCJRWT (ORCPT ); Thu, 10 Mar 2022 12:22:19 -0500 Received: from mga06.intel.com (mga06.intel.com [134.134.136.31]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 0F64C198EFA for ; Thu, 10 Mar 2022 09:21:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1646932874; x=1678468874; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=/qAqwvqN1UfdsoPW7wsFflhq2JGtsmM6NLtqre3sgcY=; b=FuzFfsNAk/xE87wZnuB14eXPe2sJJXv1atmhzT4QgiderAHKZMylM5J1 cLmu0n2pReiKPIM+17zpIY/c7lhu8ILaeLlW/YAfHcp5kwXGk+g1mW89I T++nSLZwFrT/S+IeP88G4qOgZ84/xSIY9rF9QDdhwuLCYUWDptxz8sO0a m5wUPyzKlvAArGn0hN92T7bauE/Ljftnl8QKGViCAgtKfrgKy7yeLONW0 //b46U8O37EGYzE00SLntrFtruSwtQT/n6OFu9xrhAcTXYYD4F+AxwnG4 cAos6mYKrhNlOUaB7TXni9Kw4nrBWoCFLMyUuglFqeu8Wk2BJE/Q0mwTC w==; X-IronPort-AV: E=McAfee;i="6200,9189,10282"; a="316033027" X-IronPort-AV: E=Sophos;i="5.90,171,1643702400"; d="scan'208";a="316033027" Received: from fmsmga005.fm.intel.com ([10.253.24.32]) by orsmga104.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 10 Mar 2022 09:21:09 -0800 X-IronPort-AV: E=Sophos;i="5.90,171,1643702400"; d="scan'208";a="815940253" Received: from gdavids1-mobl.amr.corp.intel.com (HELO localhost) ([10.212.65.108]) by fmsmga005-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 10 Mar 2022 09:21:09 -0800 From: ira.weiny@intel.com To: Dave Hansen , "H. Peter Anvin" , Dan Williams Cc: Ira Weiny , Fenghua Yu , Rick Edgecombe , "Shankar, Ravi V" , linux-kernel@vger.kernel.org Subject: [PATCH V9 21/45] mm/pkeys: PKS testing, add pks_set_*() tests Date: Thu, 10 Mar 2022 09:19:55 -0800 Message-Id: <20220310172019.850939-22-ira.weiny@intel.com> X-Mailer: git-send-email 2.35.1 In-Reply-To: <20220310172019.850939-1-ira.weiny@intel.com> References: <20220310172019.850939-1-ira.weiny@intel.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=-4.9 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_MED, SPF_HELO_NONE,SPF_NONE,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Ira Weiny Test that the pks_set_*() functions operate as intended. First, verify that the pkey was properly set in the PTE. Second, use the fault callback mechanism to detect if a fault occurred when expected and if so clear the fault. The test iterates each of the following test cases. PKS_TEST_NO_ACCESS, WRITE, FAULT_EXPECTED PKS_TEST_NO_ACCESS, READ, FAULT_EXPECTED PKS_TEST_RDWR, WRITE, NO_FAULT_EXPECTED PKS_TEST_RDWR, READ, NO_FAULT_EXPECTED Add documentation. Signed-off-by: Ira Weiny --- Changes for V9 Update commit message Clarify use of global state for faults to be used by all tests Add test to test_pks user app Remove an incorrect comment in the kdoc Change pkey type to u8 From Dave Hansen s/pks_mk*/pks_set*/ From Rick Edgecombe Use standard fault callback instead of the custom PKS test one Changes for V8 Remove readonly test, as that patch is not needed for PMEM Split this off into a patch which follows the pks_mk_*() patches. Thus allowing for a better view of how the test works compared to the functionality added with those patches. Remove unneeded prints --- lib/pks/pks_test.c | 161 ++++++++++++++++++++++++- tools/testing/selftests/x86/test_pks.c | 5 +- 2 files changed, 162 insertions(+), 4 deletions(-) diff --git a/lib/pks/pks_test.c b/lib/pks/pks_test.c index 37f2cd7d0f56..3e14c621bde6 100644 --- a/lib/pks/pks_test.c +++ b/lib/pks/pks_test.c @@ -33,11 +33,14 @@ #include #include #include +#include +#include #include #define PKS_TEST_MEM_SIZE (PAGE_SIZE) #define CHECK_DEFAULTS 0 +#define RUN_SINGLE 1 #define RUN_CRASH_TEST 9 static struct dentry *pks_test_dentry; @@ -48,6 +51,7 @@ struct pks_test_ctx { u8 pkey; char data[64]; void *test_page; + bool fault_seen; }; static void debug_context(const char *label, struct pks_test_ctx *ctx) @@ -85,10 +89,103 @@ static void debug_result(const char *label, int test_num, sd->last_test_pass ? "PASS" : "FAIL"); } +/* Global data protected by test_run_lock */ +struct pks_test_ctx *g_ctx_under_test; + +/* + * Call set_context_for_fault() after the context has been set up and prior to + * the expected fault. + */ +static void set_context_for_fault(struct pks_test_ctx *ctx) +{ + g_ctx_under_test = ctx; + /* Ensure the state of the global context is correct prior to a fault */ + barrier(); +} + bool pks_test_fault_callback(struct pt_regs *regs, unsigned long address, bool write) { - return false; + pr_debug("PKS Fault callback: ctx %p\n", g_ctx_under_test); + + if (!g_ctx_under_test) + return false; + + pks_set_readwrite(g_ctx_under_test->pkey); + g_ctx_under_test->fault_seen = true; + return true; +} + +enum pks_access_mode { + PKS_TEST_NO_ACCESS, + PKS_TEST_RDWR, +}; + +#define PKS_WRITE true +#define PKS_READ false +#define PKS_FAULT_EXPECTED true +#define PKS_NO_FAULT_EXPECTED false + +static char *get_mode_str(enum pks_access_mode mode) +{ + switch (mode) { + case PKS_TEST_NO_ACCESS: + return "No Access"; + case PKS_TEST_RDWR: + return "Read Write"; + } + + return ""; +} + +struct pks_access_test { + enum pks_access_mode mode; + bool write; + bool fault; +}; + +static struct pks_access_test pkey_test_ary[] = { + { PKS_TEST_NO_ACCESS, PKS_WRITE, PKS_FAULT_EXPECTED }, + { PKS_TEST_NO_ACCESS, PKS_READ, PKS_FAULT_EXPECTED }, + + { PKS_TEST_RDWR, PKS_WRITE, PKS_NO_FAULT_EXPECTED }, + { PKS_TEST_RDWR, PKS_READ, PKS_NO_FAULT_EXPECTED }, +}; + +static bool run_access_test(struct pks_test_ctx *ctx, + struct pks_access_test *test, + void *ptr) +{ + switch (test->mode) { + case PKS_TEST_NO_ACCESS: + pks_set_noaccess(ctx->pkey); + break; + case PKS_TEST_RDWR: + pks_set_readwrite(ctx->pkey); + break; + default: + pr_debug("BUG in test, invalid mode\n"); + return false; + } + + ctx->fault_seen = false; + set_context_for_fault(ctx); + + if (test->write) + memcpy(ptr, ctx->data, 8); + else + memcpy(ctx->data, ptr, 8); + + if (test->fault != ctx->fault_seen) { + pr_err("pkey test FAILED: mode %s; write %s; fault %s != %s\n", + get_mode_str(test->mode), + test->write ? "TRUE" : "FALSE", + test->fault ? "YES" : "NO", + ctx->fault_seen ? "YES" : "NO"); + return false; + } + + return true; } static void *alloc_test_page(u8 pkey) @@ -108,6 +205,37 @@ static void free_ctx(struct pks_test_ctx *ctx) kfree(ctx); } +static bool test_ctx(struct pks_test_ctx *ctx) +{ + bool rc = true; + int i; + u8 pkey; + void *ptr = ctx->test_page; + pte_t *ptep = NULL; + unsigned int level; + + ptep = lookup_address((unsigned long)ptr, &level); + if (!ptep) { + pr_err("Failed to lookup address???\n"); + return false; + } + + pkey = pte_flags_pkey(ptep->pte); + if (pkey != ctx->pkey) { + pr_err("invalid pkey found: %u, test_pkey: %u\n", + pkey, ctx->pkey); + return false; + } + + for (i = 0; i < ARRAY_SIZE(pkey_test_ary); i++) { + /* sticky fail */ + if (!run_access_test(ctx, &pkey_test_ary[i], ptr)) + rc = false; + } + + return rc; +} + static struct pks_test_ctx *alloc_ctx(u8 pkey) { struct pks_test_ctx *ctx = kzalloc(sizeof(*ctx), GFP_KERNEL); @@ -139,6 +267,23 @@ static void set_ctx_data(struct pks_session_data *sd, struct pks_test_ctx *ctx) sd->ctx = ctx; } +static bool run_single(struct pks_session_data *sd) +{ + struct pks_test_ctx *ctx; + bool rc; + + ctx = alloc_ctx(PKS_KEY_TEST); + if (IS_ERR(ctx)) + return false; + + set_ctx_data(sd, ctx); + + rc = test_ctx(ctx); + pks_set_noaccess(ctx->pkey); + + return rc; +} + static void crash_it(struct pks_session_data *sd) { struct pks_test_ctx *ctx; @@ -203,6 +348,12 @@ static ssize_t pks_read_file(struct file *file, char __user *user_buf, return simple_read_from_buffer(user_buf, count, ppos, buf, len); } +static void cleanup_test(void) +{ + g_ctx_under_test = NULL; + mutex_unlock(&test_run_lock); +} + static ssize_t pks_write_file(struct file *file, const char __user *user_buf, size_t count, loff_t *ppos) { @@ -235,6 +386,10 @@ static ssize_t pks_write_file(struct file *file, const char __user *user_buf, pr_debug("check defaults test: 0x%lx\n", PKS_INIT_VALUE); on_each_cpu(check_pkey_settings, file->private_data, 1); break; + case RUN_SINGLE: + pr_debug("Single key\n"); + sd->last_test_pass = run_single(file->private_data); + break; default: pr_debug("Unknown test\n"); sd->last_test_pass = false; @@ -251,7 +406,7 @@ static ssize_t pks_write_file(struct file *file, const char __user *user_buf, * Normal exit; clear up the locking flag */ sd->need_unlock = false; - mutex_unlock(&test_run_lock); + cleanup_test(); debug_result("Test complete", test_num, sd); return count; } @@ -282,7 +437,7 @@ static int pks_release_file(struct inode *inode, struct file *file) * not exit normally. */ if (sd->need_unlock) - mutex_unlock(&test_run_lock); + cleanup_test(); free_ctx(sd->ctx); kfree(sd); return 0; diff --git a/tools/testing/selftests/x86/test_pks.c b/tools/testing/selftests/x86/test_pks.c index df5bde9bfdbe..2c10b6c50416 100644 --- a/tools/testing/selftests/x86/test_pks.c +++ b/tools/testing/selftests/x86/test_pks.c @@ -31,6 +31,7 @@ /* Values from the kernel */ #define CHECK_DEFAULTS "0" +#define RUN_SINGLE "1" #define RUN_CRASH_TEST "9" time_t g_start_time; @@ -53,6 +54,7 @@ static int do_simple_test(const char *debugfs_str); */ enum { TEST_DEFAULTS = 0, + TEST_SINGLE, MAX_TESTS, } tests; @@ -64,7 +66,8 @@ struct test_item { const char *debugfs_str; int (*test_fn)(const char *debugfs_str); } test_list[] = { - { "check_defaults", CHECK_DEFAULTS, do_simple_test } + { "check_defaults", CHECK_DEFAULTS, do_simple_test }, + { "single", RUN_SINGLE, do_simple_test } }; static char *get_test_name(int test_num) -- 2.35.1