arm64: kaslr: increase randomization granularity
[firefly-linux-kernel-4.4.55.git] / drivers / firmware / efi / libstub / arm64-stub.c
1 /*
2  * Copyright (C) 2013, 2014 Linaro Ltd;  <roy.franz@linaro.org>
3  *
4  * This file implements the EFI boot stub for the arm64 kernel.
5  * Adapted from ARM version by Mark Salter <msalter@redhat.com>
6  *
7  * This program is free software; you can redistribute it and/or modify
8  * it under the terms of the GNU General Public License version 2 as
9  * published by the Free Software Foundation.
10  *
11  */
12 #include <linux/efi.h>
13 #include <asm/efi.h>
14 #include <asm/sections.h>
15
16 #include "efistub.h"
17
18 extern bool __nokaslr;
19
20 efi_status_t __init handle_kernel_image(efi_system_table_t *sys_table_arg,
21                                         unsigned long *image_addr,
22                                         unsigned long *image_size,
23                                         unsigned long *reserve_addr,
24                                         unsigned long *reserve_size,
25                                         unsigned long dram_base,
26                                         efi_loaded_image_t *image)
27 {
28         efi_status_t status;
29         unsigned long kernel_size, kernel_memsize = 0;
30         void *old_image_addr = (void *)*image_addr;
31         unsigned long preferred_offset;
32         u64 phys_seed = 0;
33
34         if (IS_ENABLED(CONFIG_RANDOMIZE_BASE)) {
35                 if (!__nokaslr) {
36                         status = efi_get_random_bytes(sys_table_arg,
37                                                       sizeof(phys_seed),
38                                                       (u8 *)&phys_seed);
39                         if (status == EFI_NOT_FOUND) {
40                                 pr_efi(sys_table_arg, "EFI_RNG_PROTOCOL unavailable, no randomness supplied\n");
41                         } else if (status != EFI_SUCCESS) {
42                                 pr_efi_err(sys_table_arg, "efi_get_random_bytes() failed\n");
43                                 return status;
44                         }
45                 } else {
46                         pr_efi(sys_table_arg, "KASLR disabled on kernel command line\n");
47                 }
48         }
49
50         /*
51          * The preferred offset of the kernel Image is TEXT_OFFSET bytes beyond
52          * a 2 MB aligned base, which itself may be lower than dram_base, as
53          * long as the resulting offset equals or exceeds it.
54          */
55         preferred_offset = round_down(dram_base, MIN_KIMG_ALIGN) + TEXT_OFFSET;
56         if (preferred_offset < dram_base)
57                 preferred_offset += MIN_KIMG_ALIGN;
58
59         kernel_size = _edata - _text;
60         kernel_memsize = kernel_size + (_end - _edata);
61
62         if (IS_ENABLED(CONFIG_RANDOMIZE_BASE) && phys_seed != 0) {
63                 /*
64                  * If CONFIG_DEBUG_ALIGN_RODATA is not set, produce a
65                  * displacement in the interval [0, MIN_KIMG_ALIGN) that
66                  * is a multiple of the minimal segment alignment (SZ_64K)
67                  */
68                 u32 mask = (MIN_KIMG_ALIGN - 1) & ~(SZ_64K - 1);
69                 u32 offset = !IS_ENABLED(CONFIG_DEBUG_ALIGN_RODATA) ?
70                              (phys_seed >> 32) & mask : TEXT_OFFSET;
71
72                 /*
73                  * If KASLR is enabled, and we have some randomness available,
74                  * locate the kernel at a randomized offset in physical memory.
75                  */
76                 *reserve_size = kernel_memsize + offset;
77                 status = efi_random_alloc(sys_table_arg, *reserve_size,
78                                           MIN_KIMG_ALIGN, reserve_addr,
79                                           (u32)phys_seed);
80
81                 *image_addr = *reserve_addr + offset;
82         } else {
83                 /*
84                  * Else, try a straight allocation at the preferred offset.
85                  * This will work around the issue where, if dram_base == 0x0,
86                  * efi_low_alloc() refuses to allocate at 0x0 (to prevent the
87                  * address of the allocation to be mistaken for a FAIL return
88                  * value or a NULL pointer). It will also ensure that, on
89                  * platforms where the [dram_base, dram_base + TEXT_OFFSET)
90                  * interval is partially occupied by the firmware (like on APM
91                  * Mustang), we can still place the kernel at the address
92                  * 'dram_base + TEXT_OFFSET'.
93                  */
94                 if (*image_addr == preferred_offset)
95                         return EFI_SUCCESS;
96
97                 *image_addr = *reserve_addr = preferred_offset;
98                 *reserve_size = round_up(kernel_memsize, EFI_ALLOC_ALIGN);
99
100                 status = efi_call_early(allocate_pages, EFI_ALLOCATE_ADDRESS,
101                                         EFI_LOADER_DATA,
102                                         *reserve_size / EFI_PAGE_SIZE,
103                                         (efi_physical_addr_t *)reserve_addr);
104         }
105
106         if (status != EFI_SUCCESS) {
107                 *reserve_size = kernel_memsize + TEXT_OFFSET;
108                 status = efi_low_alloc(sys_table_arg, *reserve_size,
109                                        MIN_KIMG_ALIGN, reserve_addr);
110
111                 if (status != EFI_SUCCESS) {
112                         pr_efi_err(sys_table_arg, "Failed to relocate kernel\n");
113                         *reserve_size = 0;
114                         return status;
115                 }
116                 *image_addr = *reserve_addr + TEXT_OFFSET;
117         }
118         memcpy((void *)*image_addr, old_image_addr, kernel_size);
119
120         return EFI_SUCCESS;
121 }