From patchwork Tue Nov 26 13:34:48 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Maciej Wieczor-Retman X-Patchwork-Id: 13886014 Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B4C81B652; Tue, 26 Nov 2024 13:35:54 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=198.175.65.21 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1732628156; cv=none; b=MZb07P5AAyXhXRvut/9aOAkEuroLI66mTdQpQcaXiQURej6oZqdx93XYAV0x3vAWKOsBazH/f4UDsK7Xoa3IckEW5WNgfb30Cg2rfaCil0or6xHl6gZHTFjppVfRyCEsqMy3Lr2imZwambWgSREV3rrZzcsUepgHaQFlFYxXz10= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1732628156; c=relaxed/simple; bh=n745VD2OvPkixDHWabVD2p+eyvl2SoAh53Jc/3xQELg=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=DsG4HqFBvcW/SQgWVYu+rNjHYi6OcQZzOL9pkf7+F2TcuVFfBwgyorcm2qFmw1gxXwvem5kEVTlifIuxxmvIagGqF43RycKIyRI9mOgFbBqxtUfS6pDw38XPBZW0l8MwovX0HDC3Jrr8uKHhOM63/ejKm4iKeOjUCPkJikzSS3o= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com; spf=pass smtp.mailfrom=intel.com; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b=HCwEqDXU; arc=none smtp.client-ip=198.175.65.21 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=intel.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b="HCwEqDXU" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1732628155; x=1764164155; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=n745VD2OvPkixDHWabVD2p+eyvl2SoAh53Jc/3xQELg=; b=HCwEqDXUMFPCobiqK4KVuaelwXnyefKGVQKHxNrrVx199PquFonIj33l IhtEdCz4xO3I4BZwoYeYpzLE6wrR1XBjfGl2UkmRPLzsLFzOVPLoaNrg2 FJaybUJF+2JGEFTqShJPWs2yH5GhciHIB2DkBcat7atlkemiA8KuInLVy rkqQpO7ug7b2tZDC09j25JwQUyAjAN6j570PAgHUfSfWciii8uavuy+Sg CGulL26IwVbmFcqkdA/EZqRKixzaWP7T+TX0WE0uS5FwCQbfXtwpzdVcw +4dVk5agxVeFlVXRY2HzdaThfIDa5wyw+UwzhoU1ComM3HR6UqXkHiS1+ g==; X-CSE-ConnectionGUID: ZhWjXSo5Soi+E0vAyRlrDw== X-CSE-MsgGUID: ncdbLRYrTXqK0zfQs2SXwg== X-IronPort-AV: E=McAfee;i="6700,10204,11268"; a="32727814" X-IronPort-AV: E=Sophos;i="6.12,186,1728975600"; d="scan'208";a="32727814" Received: from fmviesa008.fm.intel.com ([10.60.135.148]) by orvoesa113.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 26 Nov 2024 05:35:11 -0800 X-CSE-ConnectionGUID: bFFjyPYnQZ2WyhMCtQKiug== X-CSE-MsgGUID: P1EDm4I/TRyRiE1BllEf1w== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.12,186,1728975600"; d="scan'208";a="91782181" Received: from pgcooper-mobl3.ger.corp.intel.com (HELO wieczorr-mobl1.intel.com) ([10.245.245.170]) by fmviesa008-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 26 Nov 2024 05:35:07 -0800 From: Maciej Wieczor-Retman To: shuah@kernel.org, hpa@zytor.com, x86@kernel.org, dave.hansen@linux.intel.com, bp@alien8.de, mingo@redhat.com, tglx@linutronix.de Cc: linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, kirill@shutemov.name, maciej.wieczor-retman@intel.com Subject: [PATCH v4 1/3] selftests/lam: Move cpu_has_la57() to use cpuinfo flag Date: Tue, 26 Nov 2024 14:34:48 +0100 Message-ID: <4979b3de7021f34cbef22d44799e28c914f993ca.1732627541.git.maciej.wieczor-retman@intel.com> X-Mailer: git-send-email 2.47.1 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kselftest@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 In current form cpu_has_la57() reports platform's support for LA57 through reading the output of cpuid. A much more useful information is whether 5-level paging is actually enabled on the running system. Presence of the la57 flag in /proc/cpuinfo signifies that 5-level paging was compiled into the kernel, is supported by the platform and wasn't disabled by kernel command line argument. Use system() with cat and grep to figure out if la57 is enabled on the running system. Signed-off-by: Maciej Wieczor-Retman --- Changelog v4: - Add this patch to the series. tools/testing/selftests/x86/lam.c | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/tools/testing/selftests/x86/lam.c b/tools/testing/selftests/x86/lam.c index 0ea4f6813930..0ac805125ab2 100644 --- a/tools/testing/selftests/x86/lam.c +++ b/tools/testing/selftests/x86/lam.c @@ -124,14 +124,11 @@ static inline int cpu_has_lam(void) return (cpuinfo[0] & (1 << 26)); } -/* Check 5-level page table feature in CPUID.(EAX=07H, ECX=00H):ECX.[bit 16] */ static inline int cpu_has_la57(void) { - unsigned int cpuinfo[4]; - - __cpuid_count(0x7, 0, cpuinfo[0], cpuinfo[1], cpuinfo[2], cpuinfo[3]); + int ret = !!system("cat /proc/cpuinfo | grep -wq la57\n"); - return (cpuinfo[2] & (1 << 16)); + return !ret; } /* From patchwork Tue Nov 26 13:34:49 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Maciej Wieczor-Retman X-Patchwork-Id: 13886015 Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 83B5BDF78; Tue, 26 Nov 2024 13:35:55 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=198.175.65.21 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1732628157; cv=none; b=KNI4ggPk+cOdoFQ3wO6mNkui15Xr5/iHmlYm/gQxpuvjFGqgpAA8+qlyh4hFw4hb81xY8XN5jistdOzVOjU5DBNVjx5HKRnTFw+6RgADHaN9OzuFB9OdJ7jQ4Sa8H7bGTVSkuTiBhGS9QfRUVwi47S3+q+iAwcwQEV5Fv8HJnnY= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1732628157; c=relaxed/simple; bh=AeCvd7Yno46s8+oOSsWLJmA/0+F3XIUcR0CFLZf+laA=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=k7o87k0ffluA8IlEYUZzvDdjTKF8QfxqcwNE7qurukqvR8vtX330fE2FhrYcKY23ULUQa5aLjfH12vgcqZx82gcqk2w85/93eW+I+LO281ROoNUrM0rLpijWJPM2fd1ZTtiEOUxDEO+Q58AgUgdpXc4Ob76MOZtQx8IpOxmxwac= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com; spf=pass smtp.mailfrom=intel.com; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b=HKm4tyid; arc=none smtp.client-ip=198.175.65.21 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=intel.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b="HKm4tyid" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1732628156; x=1764164156; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=AeCvd7Yno46s8+oOSsWLJmA/0+F3XIUcR0CFLZf+laA=; b=HKm4tyid2QoJvBq4i0omdUAmfP7yJeuPWGpMCuikuQQzenGqyxL2xEix r5eaGn3Lmhte3OW6qXdQ3vf2aVlUFebMPzgZPVr1bpHTfRfXfMF/GocVY VAYd21hQpGJqlvPo9Zx3LdaCq/5YlAfsxhVak7JHJs0swUPZoEotQX335 Xaq2E1aatQsNeJQ/oOR4YREyTsQbsn71zB+xPtbDoI5OF3cEy1SPV3Z6B jSyK4FaIUvzgC1vK9LkS1w54cDuRoB08lPa8hSzUBIhWXGoBMMwABnWp9 AgXXzS3kl0LSMslde+KvMRc780QyaI4dVy1agX2TQh4fNp2RnwfWbBO/b g==; X-CSE-ConnectionGUID: lB3XmAomRb+0UcwOwul+7w== X-CSE-MsgGUID: i3X8J9LxRLOVHkUG0A36zA== X-IronPort-AV: E=McAfee;i="6700,10204,11268"; a="32727823" X-IronPort-AV: E=Sophos;i="6.12,186,1728975600"; d="scan'208";a="32727823" Received: from fmviesa008.fm.intel.com ([10.60.135.148]) by orvoesa113.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 26 Nov 2024 05:35:14 -0800 X-CSE-ConnectionGUID: nmCTSLu3RAWK2QqG9V6Vyg== X-CSE-MsgGUID: Y0LRNZCzQC+peR+dmScA2A== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.12,186,1728975600"; d="scan'208";a="91782188" Received: from pgcooper-mobl3.ger.corp.intel.com (HELO wieczorr-mobl1.intel.com) ([10.245.245.170]) by fmviesa008-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 26 Nov 2024 05:35:11 -0800 From: Maciej Wieczor-Retman To: shuah@kernel.org, hpa@zytor.com, x86@kernel.org, dave.hansen@linux.intel.com, bp@alien8.de, mingo@redhat.com, tglx@linutronix.de Cc: linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, kirill@shutemov.name, maciej.wieczor-retman@intel.com Subject: [PATCH v4 2/3] selftests/lam: Skip test if LAM is disabled Date: Tue, 26 Nov 2024 14:34:49 +0100 Message-ID: <09af68980f1c32f013a9e3b39fde70647f4a8879.1732627541.git.maciej.wieczor-retman@intel.com> X-Mailer: git-send-email 2.47.1 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kselftest@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Until LASS is merged into the kernel [1], LAM is left disabled in the config file. Running the LAM selftest with disabled LAM only results in unhelpful output. Use one of LAM syscalls() to determine whether the kernel was compiled with LAM support (CONFIG_ADDRESS_MASKING) or not. Skip running the tests in the latter case. [1] https://lore.kernel.org/all/20241028160917.1380714-1-alexander.shishkin@linux.intel.com/ Signed-off-by: Maciej Wieczor-Retman --- Changelog v4: - Add this patch to the series. tools/testing/selftests/x86/lam.c | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/tools/testing/selftests/x86/lam.c b/tools/testing/selftests/x86/lam.c index 0ac805125ab2..5aee3e231a96 100644 --- a/tools/testing/selftests/x86/lam.c +++ b/tools/testing/selftests/x86/lam.c @@ -124,6 +124,14 @@ static inline int cpu_has_lam(void) return (cpuinfo[0] & (1 << 26)); } +static inline int kernel_has_lam(void) +{ + unsigned long bits; + + syscall(SYS_arch_prctl, ARCH_GET_MAX_TAG_BITS, &bits); + return !!bits; +} + static inline int cpu_has_la57(void) { int ret = !!system("cat /proc/cpuinfo | grep -wq la57\n"); @@ -1183,6 +1191,11 @@ int main(int argc, char **argv) return KSFT_SKIP; } + if (!kernel_has_lam()) { + ksft_print_msg("LAM is disabled in the kernel!\n"); + return KSFT_SKIP; + } + while ((c = getopt(argc, argv, "ht:")) != -1) { switch (c) { case 't': From patchwork Tue Nov 26 13:34:50 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Maciej Wieczor-Retman X-Patchwork-Id: 13886016 Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4065A1D5160; Tue, 26 Nov 2024 13:35:57 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=198.175.65.21 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1732628158; cv=none; b=gW/cKwF3o8xemAbE4kh6wqG5ONn+9wcht0Qm/47F6jrx2cnWWANYv7NwlnVyOvI+BBM/9wYqk1dwF21xOdUJx8I35ta7tyMgzBkn9uPtyt0aqOjjDKDV0VhGiYeCwslJ5CxKsceYgWT32heMFCFfOcUk212B1F3xtzAWUoLBVs8= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1732628158; c=relaxed/simple; bh=hoWfabRqjkdZ9l1Df0oiXRXXnbmKH/HzRWBmtiNfj4M=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=jloCcJh4u/f/ETeuqm1ZmoWjKSGpWglUx5GIATQChXvuILLK3HK64iZYuNHW0NmC6AVP0PMLy2KLf/0bNea4/SvokvhgZBarf5MT267qxXVJ4RkUJOiOHYt+khrSfzgE3JsuQtXhgWvMs0xZk0JAqj4EzUZkRw9TCKUvBzNhcLk= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com; spf=pass smtp.mailfrom=intel.com; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b=WXk2xKkP; arc=none smtp.client-ip=198.175.65.21 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=intel.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b="WXk2xKkP" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1732628157; x=1764164157; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=hoWfabRqjkdZ9l1Df0oiXRXXnbmKH/HzRWBmtiNfj4M=; b=WXk2xKkPTrX6FMVsesn0x1anj+ndorRybLwFJuPEfks1tI64wnEbytWS i71kHIXEF2XKp5cEGdBZ0Jo1K3he5PAKXPTVp6IqZMSquAP/7CvPuaKDc 9QtkKg0ViPCg81cJuj7YPzOurXc1xo0w8aEUcXFlA93K4e2ltYFJB841v vdHwKWL+GaRiRZHEZs98WU1Nugg/QhPfnE2JqKMJYElEKwZF1RD2Vq+kt CJxzNT6CZ4sj84TgmCIKqDaekDdaLjK8OBc5INrXCE7Y+kgkLBq636sM0 Y5OTjWg0p4BstSz5Gk55wvXxgXGwEGXm6xhtJg4Lu/8AGZF+GqxbCiaVX w==; X-CSE-ConnectionGUID: qDtno7fXQDuRX0jYN3jrOQ== X-CSE-MsgGUID: cX9OiZcFTT+gdt8SINuqQQ== X-IronPort-AV: E=McAfee;i="6700,10204,11268"; a="32727842" X-IronPort-AV: E=Sophos;i="6.12,186,1728975600"; d="scan'208";a="32727842" Received: from fmviesa008.fm.intel.com ([10.60.135.148]) by orvoesa113.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 26 Nov 2024 05:35:17 -0800 X-CSE-ConnectionGUID: QBlVfOHpSgqDQg2VwE37Zg== X-CSE-MsgGUID: 7Oyg5FGnRD+OnHnLrENTUA== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.12,186,1728975600"; d="scan'208";a="91782197" Received: from pgcooper-mobl3.ger.corp.intel.com (HELO wieczorr-mobl1.intel.com) ([10.245.245.170]) by fmviesa008-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 26 Nov 2024 05:35:14 -0800 From: Maciej Wieczor-Retman To: shuah@kernel.org, hpa@zytor.com, x86@kernel.org, dave.hansen@linux.intel.com, bp@alien8.de, mingo@redhat.com, tglx@linutronix.de Cc: linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, kirill@shutemov.name, maciej.wieczor-retman@intel.com Subject: [PATCH v4 3/3] selftests/lam: Test get_user() LAM pointer handling Date: Tue, 26 Nov 2024 14:34:50 +0100 Message-ID: X-Mailer: git-send-email 2.47.1 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kselftest@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Recent change in how get_user() handles pointers [1] has a specific case for LAM. It assigns a different bitmask that's later used to check whether a pointer comes from userland in get_user(). Add test case to LAM that utilizes a ioctl (FIOASYNC) syscall which uses get_user() in its implementation. Execute the syscall with differently tagged pointers to verify that valid user pointers are passing through and invalid kernel/non-canonical pointers are not. [1] https://lore.kernel.org/all/20241024013214.129639-1-torvalds@linux-foundation.org/ Signed-off-by: Maciej Wieczor-Retman --- Changelog v4: - Use the changed cpu_has_la57() instead of mmap() to figure out current paging level. - Apply Kirill's other comments: Remove redundant always true check, close the ioctl file before exiting, change mapping size to PAGE_SIZE so it looks less odd. - Turn this patch into a series and move some text to the cover letter. Changelog v3: - mmap the pointer passed to get_user to high address if 5 level paging is enabled and to low address if 4 level paging is enabled. Changelog v2: - Use mmap with HIGH_ADDR to check if we're in 5 or 4 level pagetables. tools/testing/selftests/x86/lam.c | 102 ++++++++++++++++++++++++++++++ 1 file changed, 102 insertions(+) diff --git a/tools/testing/selftests/x86/lam.c b/tools/testing/selftests/x86/lam.c index 5aee3e231a96..13bfc6e5d7e0 100644 --- a/tools/testing/selftests/x86/lam.c +++ b/tools/testing/selftests/x86/lam.c @@ -4,6 +4,7 @@ #include #include #include +#include #include #include #include @@ -43,7 +44,15 @@ #define FUNC_INHERITE 0x20 #define FUNC_PASID 0x40 +/* get_user() pointer test cases */ +#define GET_USER_USER 0 +#define GET_USER_KERNEL_TOP 1 +#define GET_USER_KERNEL_BOT 2 +#define GET_USER_KERNEL 3 + #define TEST_MASK 0x7f +#define L5_SIGN_EXT_MASK (0xFFUL << 56) +#define L4_SIGN_EXT_MASK (0x1FFFFUL << 47) #define LOW_ADDR (0x1UL << 30) #define HIGH_ADDR (0x3UL << 48) @@ -375,6 +384,72 @@ static int handle_syscall(struct testcases *test) return ret; } +static int get_user_syscall(struct testcases *test) +{ + uint64_t ptr_address, bitmask; + int fd, ret = 0; + void *ptr; + + if (cpu_has_la57()) { + bitmask = L5_SIGN_EXT_MASK; + ptr_address = HIGH_ADDR; + } else { + bitmask = L4_SIGN_EXT_MASK; + ptr_address = LOW_ADDR; + } + + ptr = mmap((void *)ptr_address, PAGE_SIZE, PROT_READ | PROT_WRITE, + MAP_PRIVATE | MAP_ANONYMOUS | MAP_FIXED, -1, 0); + + if (ptr == MAP_FAILED) { + perror("failed to map byte to pass into get_user"); + return 1; + } + + if (set_lam(test->lam) != 0) { + ret = 2; + goto error; + } + + fd = memfd_create("lam_ioctl", 0); + if (fd == -1) { + munmap(ptr, PAGE_SIZE); + exit(EXIT_FAILURE); + } + + switch (test->later) { + case GET_USER_USER: + /* Control group - properly tagger user pointer */ + ptr = (void *)set_metadata((uint64_t)ptr, test->lam); + break; + case GET_USER_KERNEL_TOP: + /* Kernel address with top bit cleared */ + bitmask &= (bitmask >> 1); + ptr = (void *)((uint64_t)ptr | bitmask); + break; + case GET_USER_KERNEL_BOT: + /* Kernel address with bottom sign-extension bit cleared */ + bitmask &= (bitmask << 1); + ptr = (void *)((uint64_t)ptr | bitmask); + break; + case GET_USER_KERNEL: + /* Try to pass a kernel address */ + ptr = (void *)((uint64_t)ptr | bitmask); + break; + default: + printf("Invalid test case value passed!\n"); + break; + } + + if (ioctl(fd, FIOASYNC, ptr) != 0) + ret = 1; + + close(fd); +error: + munmap(ptr, PAGE_SIZE); + return ret; +} + int sys_uring_setup(unsigned int entries, struct io_uring_params *p) { return (int)syscall(__NR_io_uring_setup, entries, p); @@ -888,6 +963,33 @@ static struct testcases syscall_cases[] = { .test_func = handle_syscall, .msg = "SYSCALL:[Negative] Disable LAM. Dereferencing pointer with metadata.\n", }, + { + .later = GET_USER_USER, + .lam = LAM_U57_BITS, + .test_func = get_user_syscall, + .msg = "GET_USER: get_user() and pass a properly tagged user pointer.\n", + }, + { + .later = GET_USER_KERNEL_TOP, + .expected = 1, + .lam = LAM_U57_BITS, + .test_func = get_user_syscall, + .msg = "GET_USER:[Negative] get_user() with a kernel pointer and the top bit cleared.\n", + }, + { + .later = GET_USER_KERNEL_BOT, + .expected = 1, + .lam = LAM_U57_BITS, + .test_func = get_user_syscall, + .msg = "GET_USER:[Negative] get_user() with a kernel pointer and the bottom sign-extension bit cleared.\n", + }, + { + .later = GET_USER_KERNEL, + .expected = 1, + .lam = LAM_U57_BITS, + .test_func = get_user_syscall, + .msg = "GET_USER:[Negative] get_user() and pass a kernel pointer.\n", + }, }; static struct testcases mmap_cases[] = {