From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-10.3 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PATCH,MAILING_LIST_MULTI,NICE_REPLY_A, SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_1 autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8AB34C63777 for ; Mon, 30 Nov 2020 04:25:13 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id CBD7420757 for ; Mon, 30 Nov 2020 04:25:12 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org CBD7420757 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=arm.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id EC8FD6B0036; Sun, 29 Nov 2020 23:25:11 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id E796B6B005D; Sun, 29 Nov 2020 23:25:11 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id DB6DD6B0068; Sun, 29 Nov 2020 23:25:11 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0005.hostedemail.com [216.40.44.5]) by kanga.kvack.org (Postfix) with ESMTP id C66916B0036 for ; Sun, 29 Nov 2020 23:25:11 -0500 (EST) Received: from smtpin17.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay04.hostedemail.com (Postfix) with ESMTP id 80C711EE6 for ; Mon, 30 Nov 2020 04:25:11 +0000 (UTC) X-FDA: 77539794822.17.mint77_06121d02739f Received: from filter.hostedemail.com (10.5.16.251.rfc1918.com [10.5.16.251]) by smtpin17.hostedemail.com (Postfix) with ESMTP id 4B2F8180D0181 for ; Mon, 30 Nov 2020 04:25:11 +0000 (UTC) X-HE-Tag: mint77_06121d02739f X-Filterd-Recvd-Size: 4349 Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by imf45.hostedemail.com (Postfix) with ESMTP for ; Mon, 30 Nov 2020 04:25:10 +0000 (UTC) Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 1B7B930E; Sun, 29 Nov 2020 20:25:10 -0800 (PST) Received: from [10.163.84.86] (unknown [10.163.84.86]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 882B03F23F; Sun, 29 Nov 2020 20:25:07 -0800 (PST) Subject: Re: [PATCH 1/2] mm/debug_vm_pgtable/basic: Add validation for dirtiness after write protect To: Catalin Marinas , Christophe Leroy Cc: linux-mm@kvack.org, akpm@linux-foundation.org, linux-kernel@vger.kernel.org, steven.price@arm.com, gerald.schaefer@linux.ibm.com, vgupta@synopsys.com, paul.walmsley@sifive.com References: <1606453584-15399-1-git-send-email-anshuman.khandual@arm.com> <1606453584-15399-2-git-send-email-anshuman.khandual@arm.com> <20201127094421.GA25070@gaia> From: Anshuman Khandual Message-ID: <9d9e5c8b-08f6-9ed4-074c-3dafc8fa3717@arm.com> Date: Mon, 30 Nov 2020 09:55:00 +0530 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: <20201127094421.GA25070@gaia> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On 11/27/20 3:14 PM, Catalin Marinas wrote: > On Fri, Nov 27, 2020 at 09:22:24AM +0100, Christophe Leroy wrote: >> Le 27/11/2020 =C3=A0 06:06, Anshuman Khandual a =C3=A9crit=C2=A0: >>> This adds validation tests for dirtiness after write protect conversi= on for >>> each page table level. This is important for platforms such as arm64 = that >>> removes the hardware dirty bit while making it an write protected one= . This >>> also fixes pxx_wrprotect() related typos in the documentation file. >> >>> diff --git a/mm/debug_vm_pgtable.c b/mm/debug_vm_pgtable.c >>> index c05d9dcf7891..a5be11210597 100644 >>> --- a/mm/debug_vm_pgtable.c >>> +++ b/mm/debug_vm_pgtable.c >>> @@ -70,6 +70,7 @@ static void __init pte_basic_tests(unsigned long pf= n, pgprot_t prot) >>> WARN_ON(pte_young(pte_mkold(pte_mkyoung(pte)))); >>> WARN_ON(pte_dirty(pte_mkclean(pte_mkdirty(pte)))); >>> WARN_ON(pte_write(pte_wrprotect(pte_mkwrite(pte)))); >>> + WARN_ON(pte_dirty(pte_wrprotect(pte))); >> >> Wondering what you are testing here exactly. >> >> Do you expect that if PTE has the dirty bit, it gets cleared by pte_wr= protect() ? >> >> Powerpc doesn't do that, it only clears the RW bit but the dirty bit r= emains >> if it is set, until you call pte_mkclean() explicitely. >=20 > Arm64 has an unusual way of setting a hardware dirty "bit", it actually > clears the PTE_RDONLY bit. The pte_wrprotect() sets the PTE_RDONLY bit > back and we can lose the dirty information. Will found this and posted > patches to fix the arm64 pte_wprotect() to set a software PTE_DIRTY if > !PTE_RDONLY (we do this for ptep_set_wrprotect() already). My concern > was that we may inadvertently make a fresh/clean pte dirty with such > change, hence the suggestion for the test. >=20 > That said, I think we also need a test in the other direction, > pte_wrprotect() should preserve any dirty information: >=20 > WARN_ON(!pte_dirty(pte_wrprotect(pte_mkdirty(pte)))); This seems like a generic enough principle which all platforms should adhere to. But the proposed test WARN_ON(pte_dirty(pte_wrprotect(pte))) might fail on some platforms if the page table entry came in as a dirty one and pte_wrprotect() is not expected to alter the dirty state. Instead, should we just add the following two tests, which would ensure that pte_wrprotect() never alters the dirty state of a page table entry. WARN_ON(!pte_dirty(pte_wrprotect(pte_mkdirty(pte)))); WARN_ON(pte_dirty(pte_wrprotect(pte_mkclean(pte)))); >=20 > If pte_mkwrite() makes a pte truly writable and potentially dirty, we > could also add a test as below. However, I think that's valid for arm64= , > other architectures with a separate hardware dirty bit would fail this: >=20 > WARN_ON(!pte_dirty(pte_wrprotect(pte_mkwrite(pte)))); Right.