sys/kern/subr_csan.c

   1 /*      $NetBSD: subr_csan.c,v 1.5 2019/11/15 08:11:37 maxv Exp $       */
   2
   3 /*
   4  * Copyright (c) 2019 The NetBSD Foundation, Inc.
   5  * All rights reserved.
   6  * Copyright (c) 2019 Andrew Turner
   7  *
   8  * This code is derived from software contributed to The NetBSD Foundation
   9  * by Maxime Villard.
  10  *
  11  * Redistribution and use in source and binary forms, with or without
  12  * modification, are permitted provided that the following conditions
  13  * are met:
  14  * 1. Redistributions of source code must retain the above copyright
  15  *    notice, this list of conditions and the following disclaimer.
  16  * 2. Redistributions in binary form must reproduce the above copyright
  17  *    notice, this list of conditions and the following disclaimer in the
  18  *    documentation and/or other materials provided with the distribution.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
  21  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
  22  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  23  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
  24  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  25  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  26  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  27  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  28  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  29  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
  30  * POSSIBILITY OF SUCH DAMAGE.
  31  */
  32
  33 #define SAN_RUNTIME
  34
  35 #include "opt_ddb.h"
  36
  37 #include <sys/cdefs.h>
  38 __FBSDID("$FreeBSD$");
  39
  40 #include <sys/param.h>
  41 #include <sys/kernel.h>
  42 #include <sys/bus.h>
  43 #include <sys/conf.h>
  44 #include <sys/cpu.h>
  45 #include <sys/csan.h>
  46 #include <sys/proc.h>
  47 #include <sys/smp.h>
  48 #include <sys/systm.h>
  49
  50 #include <ddb/ddb.h>
  51 #include <ddb/db_sym.h>
  52
  53 #ifdef KCSAN_PANIC
  54 #define REPORT panic
  55 #else
  56 #define REPORT printf
  57 #endif
  58
  59 typedef struct {
  60         uintptr_t addr;
  61         uint32_t size;
  62         bool write:1;
  63         bool atomic:1;
  64         uintptr_t pc;
  65 } csan_cell_t;
  66
  67 typedef struct {
  68         bool inited;
  69         uint32_t cnt;
  70         csan_cell_t cell;
  71 } csan_cpu_t;
  72
  73 static csan_cpu_t kcsan_cpus[MAXCPU];
  74 static bool kcsan_enabled __read_mostly;
  75
  76 #define __RET_ADDR      (uintptr_t)__builtin_return_address(0)
  77
  78 #define KCSAN_NACCESSES 1024
  79 #define KCSAN_DELAY     10      /* 10 microseconds */
  80
  81 /* -------------------------------------------------------------------------- */
  82
  83 /* The MD code. */
  84 #include <machine/csan.h>
  85
  86 /* -------------------------------------------------------------------------- */
  87
  88 static void
  89 kcsan_enable(void *dummy __unused)
  90 {
  91
  92         printf("Enabling KCSCAN, expect reduced performance.\n");
  93         kcsan_enabled = true;
  94 }
  95 SYSINIT(kcsan_enable, SI_SUB_SMP, SI_ORDER_SECOND, kcsan_enable, NULL);
  96
  97 void
  98 kcsan_cpu_init(u_int cpu)
  99 {
 100         kcsan_cpus[cpu].inited = true;
 101 }
 102
 103 /* -------------------------------------------------------------------------- */
 104
 105 static inline void
 106 kcsan_report(csan_cell_t *new, u_int newcpu, csan_cell_t *old, u_int oldcpu)
 107 {
 108         const char *newsym, *oldsym;
 109 #ifdef DDB
 110         c_db_sym_t sym;
 111         db_expr_t offset;
 112
 113         sym = db_search_symbol((vm_offset_t)new->pc, DB_STGY_PROC, &offset);
 114         db_symbol_values(sym, &newsym, NULL);
 115
 116         sym = db_search_symbol((vm_offset_t)old->pc, DB_STGY_PROC, &offset);
 117         db_symbol_values(sym, &oldsym, NULL);
 118 #else
 119         newsym = "";
 120         oldsym = "";
 121 #endif
 122         REPORT("CSan: Racy Access "
 123             "[Cpu%u %s%s Addr=%p Size=%u PC=%p<%s>] "
 124             "[Cpu%u %s%s Addr=%p Size=%u PC=%p<%s>]\n",
 125             newcpu,
 126             (new->atomic ? "Atomic " : ""), (new->write ? "Write" : "Read"),
 127             (void *)new->addr, new->size, (void *)new->pc, newsym,
 128             oldcpu,
 129             (old->atomic ? "Atomic " : ""), (old->write ? "Write" : "Read"),
 130             (void *)old->addr, old->size, (void *)old->pc, oldsym);
 131         kcsan_md_unwind();
 132 }
 133
 134 static inline bool
 135 kcsan_access_is_atomic(csan_cell_t *new, csan_cell_t *old)
 136 {
 137         if (new->write && !new->atomic)
 138                 return false;
 139         if (old->write && !old->atomic)
 140                 return false;
 141         return true;
 142 }
 143
 144 static inline void
 145 kcsan_access(uintptr_t addr, size_t size, bool write, bool atomic, uintptr_t pc)
 146 {
 147         csan_cell_t old, new;
 148         csan_cpu_t *cpu;
 149         uint64_t intr;
 150         size_t i;
 151
 152         if (__predict_false(!kcsan_enabled))
 153                 return;
 154         if (__predict_false(kcsan_md_unsupported((vm_offset_t)addr)))
 155                 return;
 156         if (KERNEL_PANICKED())
 157                 return;
 158
 159         new.addr = addr;
 160         new.size = size;
 161         new.write = write;
 162         new.atomic = atomic;
 163         new.pc = pc;
 164
 165         CPU_FOREACH(i) {
 166                 __builtin_memcpy(&old, &kcsan_cpus[i].cell, sizeof(old));
 167
 168                 if (old.addr + old.size <= new.addr)
 169                         continue;
 170                 if (new.addr + new.size <= old.addr)
 171                         continue;
 172                 if (__predict_true(!old.write && !new.write))
 173                         continue;
 174                 if (__predict_true(kcsan_access_is_atomic(&new, &old)))
 175                         continue;
 176
 177                 kcsan_report(&new, PCPU_GET(cpuid), &old, i);
 178                 break;
 179         }
 180
 181         if (__predict_false(!kcsan_md_is_avail()))
 182                 return;
 183
 184         kcsan_md_disable_intrs(&intr);
 185
 186         cpu = &kcsan_cpus[PCPU_GET(cpuid)];
 187         if (__predict_false(!cpu->inited))
 188                 goto out;
 189         cpu->cnt = (cpu->cnt + 1) % KCSAN_NACCESSES;
 190         if (__predict_true(cpu->cnt != 0))
 191                 goto out;
 192
 193         __builtin_memcpy(&cpu->cell, &new, sizeof(new));
 194         kcsan_md_delay(KCSAN_DELAY);
 195         __builtin_memset(&cpu->cell, 0, sizeof(new));
 196
 197 out:
 198         kcsan_md_enable_intrs(&intr);
 199 }
 200
 201 #define CSAN_READ(size)                                                 \
 202         void __tsan_read##size(uintptr_t);                              \
 203         void __tsan_read##size(uintptr_t addr)                          \
 204         {                                                               \
 205                 kcsan_access(addr, size, false, false, __RET_ADDR);     \
 206         }                                                               \
 207         void __tsan_unaligned_read##size(uintptr_t);                    \
 208         void __tsan_unaligned_read##size(uintptr_t addr)                \
 209         {                                                               \
 210                 kcsan_access(addr, size, false, false, __RET_ADDR);     \
 211         }
 212
 213 CSAN_READ(1)
 214 CSAN_READ(2)
 215 CSAN_READ(4)
 216 CSAN_READ(8)
 217 CSAN_READ(16)
 218
 219 #define CSAN_WRITE(size)                                                \
 220         void __tsan_write##size(uintptr_t);                             \
 221         void __tsan_write##size(uintptr_t addr)                         \
 222         {                                                               \
 223                 kcsan_access(addr, size, true, false, __RET_ADDR);      \
 224         }                                                               \
 225         void __tsan_unaligned_write##size(uintptr_t);                   \
 226         void __tsan_unaligned_write##size(uintptr_t addr)               \
 227         {                                                               \
 228                 kcsan_access(addr, size, true, false, __RET_ADDR);      \
 229         }
 230
 231 CSAN_WRITE(1)
 232 CSAN_WRITE(2)
 233 CSAN_WRITE(4)
 234 CSAN_WRITE(8)
 235 CSAN_WRITE(16)
 236
 237 void __tsan_read_range(uintptr_t, size_t);
 238 void __tsan_write_range(uintptr_t, size_t);
 239
 240 void
 241 __tsan_read_range(uintptr_t addr, size_t size)
 242 {
 243         kcsan_access(addr, size, false, false, __RET_ADDR);
 244 }
 245
 246 void
 247 __tsan_write_range(uintptr_t addr, size_t size)
 248 {
 249         kcsan_access(addr, size, true, false, __RET_ADDR);
 250 }
 251
 252 void __tsan_init(void);
 253 void __tsan_func_entry(void *);
 254 void __tsan_func_exit(void);
 255
 256 void
 257 __tsan_init(void)
 258 {
 259 }
 260
 261 void
 262 __tsan_func_entry(void *call_pc)
 263 {
 264 }
 265
 266 void
 267 __tsan_func_exit(void)
 268 {
 269 }
 270
 271 /* -------------------------------------------------------------------------- */
 272
 273 void *
 274 kcsan_memcpy(void *dst, const void *src, size_t len)
 275 {
 276         kcsan_access((uintptr_t)src, len, false, false, __RET_ADDR);
 277         kcsan_access((uintptr_t)dst, len, true, false, __RET_ADDR);
 278         return __builtin_memcpy(dst, src, len);
 279 }
 280
 281 int
 282 kcsan_memcmp(const void *b1, const void *b2, size_t len)
 283 {
 284         kcsan_access((uintptr_t)b1, len, false, false, __RET_ADDR);
 285         kcsan_access((uintptr_t)b2, len, false, false, __RET_ADDR);
 286         return __builtin_memcmp(b1, b2, len);
 287 }
 288
 289 void *
 290 kcsan_memset(void *b, int c, size_t len)
 291 {
 292         kcsan_access((uintptr_t)b, len, true, false, __RET_ADDR);
 293         return __builtin_memset(b, c, len);
 294 }
 295
 296 void *
 297 kcsan_memmove(void *dst, const void *src, size_t len)
 298 {
 299         kcsan_access((uintptr_t)src, len, false, false, __RET_ADDR);
 300         kcsan_access((uintptr_t)dst, len, true, false, __RET_ADDR);
 301         return __builtin_memmove(dst, src, len);
 302 }
 303
 304 __strong_reference(kcsan_memcpy, __tsan_memcpy);
 305 __strong_reference(kcsan_memset, __tsan_memset);
 306 __strong_reference(kcsan_memmove, __tsan_memmove);
 307
 308 char *
 309 kcsan_strcpy(char *dst, const char *src)
 310 {
 311         char *save = dst;
 312
 313         while (1) {
 314                 kcsan_access((uintptr_t)src, 1, false, false, __RET_ADDR);
 315                 kcsan_access((uintptr_t)dst, 1, true, false, __RET_ADDR);
 316                 *dst = *src;
 317                 if (*src == '\0')
 318                         break;
 319                 src++, dst++;
 320         }
 321
 322         return save;
 323 }
 324
 325 int
 326 kcsan_strcmp(const char *s1, const char *s2)
 327 {
 328         while (1) {
 329                 kcsan_access((uintptr_t)s1, 1, false, false, __RET_ADDR);
 330                 kcsan_access((uintptr_t)s2, 1, false, false, __RET_ADDR);
 331                 if (*s1 != *s2)
 332                         break;
 333                 if (*s1 == '\0')
 334                         return 0;
 335                 s1++, s2++;
 336         }
 337
 338         return (*(const unsigned char *)s1 - *(const unsigned char *)s2);
 339 }
 340
 341 size_t
 342 kcsan_strlen(const char *str)
 343 {
 344         const char *s;
 345
 346         s = str;
 347         while (1) {
 348                 kcsan_access((uintptr_t)s, 1, false, false, __RET_ADDR);
 349                 if (*s == '\0')
 350                         break;
 351                 s++;
 352         }
 353
 354         return (s - str);
 355 }
 356
 357 int
 358 kcsan_copyin(const void *uaddr, void *kaddr, size_t len)
 359 {
 360         kcsan_access((uintptr_t)kaddr, len, true, false, __RET_ADDR);
 361         return copyin(uaddr, kaddr, len);
 362 }
 363
 364 int
 365 kcsan_copyinstr(const void *uaddr, void *kaddr, size_t len, size_t *done)
 366 {
 367         kcsan_access((uintptr_t)kaddr, len, true, false, __RET_ADDR);
 368         return copyinstr(uaddr, kaddr, len, done);
 369 }
 370
 371 int
 372 kcsan_copyout(const void *kaddr, void *uaddr, size_t len)
 373 {
 374         kcsan_access((uintptr_t)kaddr, len, false, false, __RET_ADDR);
 375         return copyout(kaddr, uaddr, len);
 376 }
 377
 378 /* -------------------------------------------------------------------------- */
 379
 380 #include <machine/atomic.h>
 381 #include <sys/atomic_san.h>
 382
 383 #define _CSAN_ATOMIC_FUNC_ADD(name, type)                               \
 384         void kcsan_atomic_add_##name(volatile type *ptr, type val)      \
 385         {                                                               \
 386                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 387                     __RET_ADDR);                                        \
 388                 atomic_add_##name(ptr, val);                            \
 389         }
 390
 391 #define CSAN_ATOMIC_FUNC_ADD(name, type)                                \
 392         _CSAN_ATOMIC_FUNC_ADD(name, type)                               \
 393         _CSAN_ATOMIC_FUNC_ADD(acq_##name, type)                         \
 394         _CSAN_ATOMIC_FUNC_ADD(rel_##name, type)
 395
 396 #define _CSAN_ATOMIC_FUNC_CLEAR(name, type)                             \
 397         void kcsan_atomic_clear_##name(volatile type *ptr, type val)    \
 398         {                                                               \
 399                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 400                     __RET_ADDR);                                        \
 401                 atomic_clear_##name(ptr, val);                          \
 402         }
 403
 404 #define CSAN_ATOMIC_FUNC_CLEAR(name, type)                              \
 405         _CSAN_ATOMIC_FUNC_CLEAR(name, type)                             \
 406         _CSAN_ATOMIC_FUNC_CLEAR(acq_##name, type)                       \
 407         _CSAN_ATOMIC_FUNC_CLEAR(rel_##name, type)
 408
 409 #define _CSAN_ATOMIC_FUNC_CMPSET(name, type)                            \
 410         int kcsan_atomic_cmpset_##name(volatile type *ptr, type val1,   \
 411             type val2)                                                  \
 412         {                                                               \
 413                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 414                     __RET_ADDR);                                        \
 415                 return (atomic_cmpset_##name(ptr, val1, val2));         \
 416         }
 417
 418 #define CSAN_ATOMIC_FUNC_CMPSET(name, type)                             \
 419         _CSAN_ATOMIC_FUNC_CMPSET(name, type)                            \
 420         _CSAN_ATOMIC_FUNC_CMPSET(acq_##name, type)                      \
 421         _CSAN_ATOMIC_FUNC_CMPSET(rel_##name, type)
 422
 423 #define _CSAN_ATOMIC_FUNC_FCMPSET(name, type)                           \
 424         int kcsan_atomic_fcmpset_##name(volatile type *ptr, type *val1, \
 425             type val2)                                                  \
 426         {                                                               \
 427                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 428                     __RET_ADDR);                                        \
 429                 return (atomic_fcmpset_##name(ptr, val1, val2));        \
 430         }
 431
 432 #define CSAN_ATOMIC_FUNC_FCMPSET(name, type)                            \
 433         _CSAN_ATOMIC_FUNC_FCMPSET(name, type)                           \
 434         _CSAN_ATOMIC_FUNC_FCMPSET(acq_##name, type)                     \
 435         _CSAN_ATOMIC_FUNC_FCMPSET(rel_##name, type)
 436
 437 #define CSAN_ATOMIC_FUNC_FETCHADD(name, type)                           \
 438         type kcsan_atomic_fetchadd_##name(volatile type *ptr, type val) \
 439         {                                                               \
 440                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 441                     __RET_ADDR);                                        \
 442                 return (atomic_fetchadd_##name(ptr, val));              \
 443         }
 444
 445 #define _CSAN_ATOMIC_FUNC_LOAD(name, type)                              \
 446         type kcsan_atomic_load_##name(volatile type *ptr)               \
 447         {                                                               \
 448                 kcsan_access((uintptr_t)ptr, sizeof(type), false, true, \
 449                     __RET_ADDR);                                        \
 450                 return (atomic_load_##name(ptr));                       \
 451         }
 452
 453 #define CSAN_ATOMIC_FUNC_LOAD(name, type)                               \
 454         _CSAN_ATOMIC_FUNC_LOAD(name, type)                              \
 455         _CSAN_ATOMIC_FUNC_LOAD(acq_##name, type)                        \
 456
 457 #define CSAN_ATOMIC_FUNC_READANDCLEAR(name, type)                       \
 458         type kcsan_atomic_readandclear_##name(volatile type *ptr)       \
 459         {                                                               \
 460                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 461                     __RET_ADDR);                                        \
 462                 return (atomic_readandclear_##name(ptr));               \
 463         }
 464
 465 #define _CSAN_ATOMIC_FUNC_SET(name, type)                               \
 466         void kcsan_atomic_set_##name(volatile type *ptr, type val)      \
 467         {                                                               \
 468                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 469                     __RET_ADDR);                                        \
 470                 atomic_set_##name(ptr, val);                            \
 471         }
 472
 473 #define CSAN_ATOMIC_FUNC_SET(name, type)                                \
 474         _CSAN_ATOMIC_FUNC_SET(name, type)                               \
 475         _CSAN_ATOMIC_FUNC_SET(acq_##name, type)                         \
 476         _CSAN_ATOMIC_FUNC_SET(rel_##name, type)
 477
 478 #define _CSAN_ATOMIC_FUNC_SUBTRACT(name, type)                          \
 479         void kcsan_atomic_subtract_##name(volatile type *ptr, type val) \
 480         {                                                               \
 481                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 482                     __RET_ADDR);                                        \
 483                 atomic_subtract_##name(ptr, val);                       \
 484         }
 485
 486 #define CSAN_ATOMIC_FUNC_SUBTRACT(name, type)                           \
 487         _CSAN_ATOMIC_FUNC_SUBTRACT(name, type)                          \
 488         _CSAN_ATOMIC_FUNC_SUBTRACT(acq_##name, type)                    \
 489         _CSAN_ATOMIC_FUNC_SUBTRACT(rel_##name, type)
 490
 491 #define _CSAN_ATOMIC_FUNC_STORE(name, type)                             \
 492         void kcsan_atomic_store_##name(volatile type *ptr, type val)    \
 493         {                                                               \
 494                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 495                     __RET_ADDR);                                        \
 496                 atomic_store_##name(ptr, val);                          \
 497         }
 498
 499 #define CSAN_ATOMIC_FUNC_STORE(name, type)                              \
 500         _CSAN_ATOMIC_FUNC_STORE(name, type)                             \
 501         _CSAN_ATOMIC_FUNC_STORE(rel_##name, type)
 502
 503 #define CSAN_ATOMIC_FUNC_SWAP(name, type)                               \
 504         type kcsan_atomic_swap_##name(volatile type *ptr, type val)     \
 505         {                                                               \
 506                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 507                     __RET_ADDR);                                        \
 508                 return(atomic_swap_##name(ptr, val));                   \
 509         }
 510
 511 #define CSAN_ATOMIC_FUNC_TESTANDCLEAR(name, type)                       \
 512         int kcsan_atomic_testandclear_##name(volatile type *ptr, u_int val) \
 513         {                                                               \
 514                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 515                     __RET_ADDR);                                        \
 516                 return(atomic_testandclear_##name(ptr, val));           \
 517         }
 518
 519 #define CSAN_ATOMIC_FUNC_TESTANDSET(name, type)                         \
 520         int kcsan_atomic_testandset_##name(volatile type *ptr, u_int val) \
 521         {                                                               \
 522                 kcsan_access((uintptr_t)ptr, sizeof(type), true, true,  \
 523                     __RET_ADDR);                                        \
 524                 return (atomic_testandset_##name(ptr, val));            \
 525         }
 526
 527 _CSAN_ATOMIC_FUNC_LOAD(bool, bool)
 528 _CSAN_ATOMIC_FUNC_STORE(bool, bool)
 529
 530 CSAN_ATOMIC_FUNC_ADD(8, uint8_t)
 531 CSAN_ATOMIC_FUNC_CLEAR(8, uint8_t)
 532 CSAN_ATOMIC_FUNC_CMPSET(8, uint8_t)
 533 CSAN_ATOMIC_FUNC_FCMPSET(8, uint8_t)
 534 CSAN_ATOMIC_FUNC_LOAD(8, uint8_t)
 535 CSAN_ATOMIC_FUNC_SET(8, uint8_t)
 536 CSAN_ATOMIC_FUNC_SUBTRACT(8, uint8_t)
 537 _CSAN_ATOMIC_FUNC_STORE(8, uint8_t)
 538 #if 0
 539 CSAN_ATOMIC_FUNC_FETCHADD(8, uint8_t)
 540 CSAN_ATOMIC_FUNC_READANDCLEAR(8, uint8_t)
 541 CSAN_ATOMIC_FUNC_SWAP(8, uint8_t)
 542 CSAN_ATOMIC_FUNC_TESTANDCLEAR(8, uint8_t)
 543 CSAN_ATOMIC_FUNC_TESTANDSET(8, uint8_t)
 544 #endif
 545
 546 CSAN_ATOMIC_FUNC_ADD(16, uint16_t)
 547 CSAN_ATOMIC_FUNC_CLEAR(16, uint16_t)
 548 CSAN_ATOMIC_FUNC_CMPSET(16, uint16_t)
 549 CSAN_ATOMIC_FUNC_FCMPSET(16, uint16_t)
 550 CSAN_ATOMIC_FUNC_LOAD(16, uint16_t)
 551 CSAN_ATOMIC_FUNC_SET(16, uint16_t)
 552 CSAN_ATOMIC_FUNC_SUBTRACT(16, uint16_t)
 553 _CSAN_ATOMIC_FUNC_STORE(16, uint16_t)
 554 #if 0
 555 CSAN_ATOMIC_FUNC_FETCHADD(16, uint16_t)
 556 CSAN_ATOMIC_FUNC_READANDCLEAR(16, uint16_t)
 557 CSAN_ATOMIC_FUNC_SWAP(16, uint16_t)
 558 CSAN_ATOMIC_FUNC_TESTANDCLEAR(16, uint16_t)
 559 CSAN_ATOMIC_FUNC_TESTANDSET(16, uint16_t)
 560 #endif
 561
 562 CSAN_ATOMIC_FUNC_ADD(32, uint32_t)
 563 CSAN_ATOMIC_FUNC_CLEAR(32, uint32_t)
 564 CSAN_ATOMIC_FUNC_CMPSET(32, uint32_t)
 565 CSAN_ATOMIC_FUNC_FCMPSET(32, uint32_t)
 566 CSAN_ATOMIC_FUNC_FETCHADD(32, uint32_t)
 567 CSAN_ATOMIC_FUNC_LOAD(32, uint32_t)
 568 CSAN_ATOMIC_FUNC_READANDCLEAR(32, uint32_t)
 569 CSAN_ATOMIC_FUNC_SET(32, uint32_t)
 570 CSAN_ATOMIC_FUNC_SUBTRACT(32, uint32_t)
 571 CSAN_ATOMIC_FUNC_STORE(32, uint32_t)
 572 CSAN_ATOMIC_FUNC_SWAP(32, uint32_t)
 573 CSAN_ATOMIC_FUNC_TESTANDCLEAR(32, uint32_t)
 574 CSAN_ATOMIC_FUNC_TESTANDSET(32, uint32_t)
 575
 576 CSAN_ATOMIC_FUNC_ADD(64, uint64_t)
 577 CSAN_ATOMIC_FUNC_CLEAR(64, uint64_t)
 578 CSAN_ATOMIC_FUNC_CMPSET(64, uint64_t)
 579 CSAN_ATOMIC_FUNC_FCMPSET(64, uint64_t)
 580 CSAN_ATOMIC_FUNC_FETCHADD(64, uint64_t)
 581 CSAN_ATOMIC_FUNC_LOAD(64, uint64_t)
 582 CSAN_ATOMIC_FUNC_READANDCLEAR(64, uint64_t)
 583 CSAN_ATOMIC_FUNC_SET(64, uint64_t)
 584 CSAN_ATOMIC_FUNC_SUBTRACT(64, uint64_t)
 585 CSAN_ATOMIC_FUNC_STORE(64, uint64_t)
 586 CSAN_ATOMIC_FUNC_SWAP(64, uint64_t)
 587 CSAN_ATOMIC_FUNC_TESTANDCLEAR(64, uint64_t)
 588 CSAN_ATOMIC_FUNC_TESTANDSET(64, uint64_t)
 589
 590 CSAN_ATOMIC_FUNC_ADD(char, uint8_t)
 591 CSAN_ATOMIC_FUNC_CLEAR(char, uint8_t)
 592 CSAN_ATOMIC_FUNC_CMPSET(char, uint8_t)
 593 CSAN_ATOMIC_FUNC_FCMPSET(char, uint8_t)
 594 CSAN_ATOMIC_FUNC_LOAD(char, uint8_t)
 595 CSAN_ATOMIC_FUNC_SET(char, uint8_t)
 596 CSAN_ATOMIC_FUNC_SUBTRACT(char, uint8_t)
 597 _CSAN_ATOMIC_FUNC_STORE(char, uint8_t)
 598 #if 0
 599 CSAN_ATOMIC_FUNC_FETCHADD(char, uint8_t)
 600 CSAN_ATOMIC_FUNC_READANDCLEAR(char, uint8_t)
 601 CSAN_ATOMIC_FUNC_SWAP(char, uint8_t)
 602 CSAN_ATOMIC_FUNC_TESTANDCLEAR(char, uint8_t)
 603 CSAN_ATOMIC_FUNC_TESTANDSET(char, uint8_t)
 604 #endif
 605
 606 CSAN_ATOMIC_FUNC_ADD(short, uint16_t)
 607 CSAN_ATOMIC_FUNC_CLEAR(short, uint16_t)
 608 CSAN_ATOMIC_FUNC_CMPSET(short, uint16_t)
 609 CSAN_ATOMIC_FUNC_FCMPSET(short, uint16_t)
 610 CSAN_ATOMIC_FUNC_LOAD(short, uint16_t)
 611 CSAN_ATOMIC_FUNC_SET(short, uint16_t)
 612 CSAN_ATOMIC_FUNC_SUBTRACT(short, uint16_t)
 613 _CSAN_ATOMIC_FUNC_STORE(short, uint16_t)
 614 #if 0
 615 CSAN_ATOMIC_FUNC_FETCHADD(short, uint16_t)
 616 CSAN_ATOMIC_FUNC_READANDCLEAR(short, uint16_t)
 617 CSAN_ATOMIC_FUNC_SWAP(short, uint16_t)
 618 CSAN_ATOMIC_FUNC_TESTANDCLEAR(short, uint16_t)
 619 CSAN_ATOMIC_FUNC_TESTANDSET(short, uint16_t)
 620 #endif
 621
 622 CSAN_ATOMIC_FUNC_ADD(int, u_int)
 623 CSAN_ATOMIC_FUNC_CLEAR(int, u_int)
 624 CSAN_ATOMIC_FUNC_CMPSET(int, u_int)
 625 CSAN_ATOMIC_FUNC_FCMPSET(int, u_int)
 626 CSAN_ATOMIC_FUNC_FETCHADD(int, u_int)
 627 CSAN_ATOMIC_FUNC_LOAD(int, u_int)
 628 CSAN_ATOMIC_FUNC_READANDCLEAR(int, u_int)
 629 CSAN_ATOMIC_FUNC_SET(int, u_int)
 630 CSAN_ATOMIC_FUNC_SUBTRACT(int, u_int)
 631 CSAN_ATOMIC_FUNC_STORE(int, u_int)
 632 CSAN_ATOMIC_FUNC_SWAP(int, u_int)
 633 CSAN_ATOMIC_FUNC_TESTANDCLEAR(int, u_int)
 634 CSAN_ATOMIC_FUNC_TESTANDSET(int, u_int)
 635
 636 CSAN_ATOMIC_FUNC_ADD(long, u_long)
 637 CSAN_ATOMIC_FUNC_CLEAR(long, u_long)
 638 CSAN_ATOMIC_FUNC_CMPSET(long, u_long)
 639 CSAN_ATOMIC_FUNC_FCMPSET(long, u_long)
 640 CSAN_ATOMIC_FUNC_FETCHADD(long, u_long)
 641 CSAN_ATOMIC_FUNC_LOAD(long, u_long)
 642 CSAN_ATOMIC_FUNC_READANDCLEAR(long, u_long)
 643 CSAN_ATOMIC_FUNC_SET(long, u_long)
 644 CSAN_ATOMIC_FUNC_SUBTRACT(long, u_long)
 645 CSAN_ATOMIC_FUNC_STORE(long, u_long)
 646 CSAN_ATOMIC_FUNC_SWAP(long, u_long)
 647 CSAN_ATOMIC_FUNC_TESTANDCLEAR(long, u_long)
 648 CSAN_ATOMIC_FUNC_TESTANDSET(long, u_long)
 649 CSAN_ATOMIC_FUNC_TESTANDSET(acq_long, u_long)
 650
 651 CSAN_ATOMIC_FUNC_ADD(ptr, uintptr_t)
 652 CSAN_ATOMIC_FUNC_CLEAR(ptr, uintptr_t)
 653 CSAN_ATOMIC_FUNC_CMPSET(ptr, uintptr_t)
 654 CSAN_ATOMIC_FUNC_FCMPSET(ptr, uintptr_t)
 655 #if !defined(__amd64__)
 656 CSAN_ATOMIC_FUNC_FETCHADD(ptr, uintptr_t)
 657 #endif
 658 CSAN_ATOMIC_FUNC_LOAD(ptr, uintptr_t)
 659 CSAN_ATOMIC_FUNC_READANDCLEAR(ptr, uintptr_t)
 660 CSAN_ATOMIC_FUNC_SET(ptr, uintptr_t)
 661 CSAN_ATOMIC_FUNC_SUBTRACT(ptr, uintptr_t)
 662 CSAN_ATOMIC_FUNC_STORE(ptr, uintptr_t)
 663 CSAN_ATOMIC_FUNC_SWAP(ptr, uintptr_t)
 664 #if 0
 665 CSAN_ATOMIC_FUNC_TESTANDCLEAR(ptr, uintptr_t)
 666 CSAN_ATOMIC_FUNC_TESTANDSET(ptr, uintptr_t)
 667 #endif
 668
 669 #define CSAN_ATOMIC_FUNC_THREAD_FENCE(name)                             \
 670         void kcsan_atomic_thread_fence_##name(void)                     \
 671         {                                                               \
 672                 atomic_thread_fence_##name();                           \
 673         }
 674
 675 CSAN_ATOMIC_FUNC_THREAD_FENCE(acq)
 676 CSAN_ATOMIC_FUNC_THREAD_FENCE(acq_rel)
 677 CSAN_ATOMIC_FUNC_THREAD_FENCE(rel)
 678 CSAN_ATOMIC_FUNC_THREAD_FENCE(seq_cst)
 679
 680 void
 681 kcsan_atomic_interrupt_fence(void)
 682 {
 683         atomic_interrupt_fence();
 684 }
 685
 686 /* -------------------------------------------------------------------------- */
 687
 688 #include <sys/bus.h>
 689 #include <machine/bus.h>
 690 #include <sys/bus_san.h>
 691
 692 int
 693 kcsan_bus_space_map(bus_space_tag_t tag, bus_addr_t hnd, bus_size_t size,
 694     int flags, bus_space_handle_t *handlep)
 695 {
 696
 697         return (bus_space_map(tag, hnd, size, flags, handlep));
 698 }
 699
 700 void
 701 kcsan_bus_space_unmap(bus_space_tag_t tag, bus_space_handle_t hnd,
 702     bus_size_t size)
 703 {
 704
 705         bus_space_unmap(tag, hnd, size);
 706 }
 707
 708 int
 709 kcsan_bus_space_subregion(bus_space_tag_t tag, bus_space_handle_t hnd,
 710     bus_size_t offset, bus_size_t size, bus_space_handle_t *handlep)
 711 {
 712
 713         return (bus_space_subregion(tag, hnd, offset, size, handlep));
 714 }
 715
 716 #if !defined(__amd64__)
 717 int
 718 kcsan_bus_space_alloc(bus_space_tag_t tag, bus_addr_t reg_start,
 719     bus_addr_t reg_end, bus_size_t size, bus_size_t alignment,
 720     bus_size_t boundary, int flags, bus_addr_t *addrp,
 721     bus_space_handle_t *handlep)
 722 {
 723
 724         return (bus_space_alloc(tag, reg_start, reg_end, size, alignment,
 725             boundary, flags, addrp, handlep));
 726 }
 727 #endif
 728
 729 void
 730 kcsan_bus_space_free(bus_space_tag_t tag, bus_space_handle_t hnd,
 731     bus_size_t size)
 732 {
 733
 734         bus_space_free(tag, hnd, size);
 735 }
 736
 737 void
 738 kcsan_bus_space_barrier(bus_space_tag_t tag, bus_space_handle_t hnd,
 739     bus_size_t offset, bus_size_t size, int flags)
 740 {
 741
 742         bus_space_barrier(tag, hnd, offset, size, flags);
 743 }
 744
 745 #define CSAN_BUS_READ_FUNC(func, width, type)                           \
 746         type kcsan_bus_space_read##func##_##width(bus_space_tag_t tag,  \
 747             bus_space_handle_t hnd, bus_size_t offset)                  \
 748         {                                                               \
 749                 return (bus_space_read##func##_##width(tag, hnd,        \
 750                     offset));                                           \
 751         }                                                               \
 752
 753 #define CSAN_BUS_READ_PTR_FUNC(func, width, type)                       \
 754         void kcsan_bus_space_read_##func##_##width(bus_space_tag_t tag, \
 755             bus_space_handle_t hnd, bus_size_t size, type *buf,         \
 756             bus_size_t count)                                           \
 757         {                                                               \
 758                 kcsan_access((uintptr_t)buf, sizeof(type) * count,      \
 759                     false, false, __RET_ADDR);                          \
 760                 bus_space_read_##func##_##width(tag, hnd, size, buf,    \
 761                     count);                                             \
 762         }
 763
 764 CSAN_BUS_READ_FUNC(, 1, uint8_t)
 765 CSAN_BUS_READ_FUNC(_stream, 1, uint8_t)
 766 CSAN_BUS_READ_PTR_FUNC(multi, 1, uint8_t)
 767 CSAN_BUS_READ_PTR_FUNC(multi_stream, 1, uint8_t)
 768 CSAN_BUS_READ_PTR_FUNC(region, 1, uint8_t)
 769 CSAN_BUS_READ_PTR_FUNC(region_stream, 1, uint8_t)
 770
 771 CSAN_BUS_READ_FUNC(, 2, uint16_t)
 772 CSAN_BUS_READ_FUNC(_stream, 2, uint16_t)
 773 CSAN_BUS_READ_PTR_FUNC(multi, 2, uint16_t)
 774 CSAN_BUS_READ_PTR_FUNC(multi_stream, 2, uint16_t)
 775 CSAN_BUS_READ_PTR_FUNC(region, 2, uint16_t)
 776 CSAN_BUS_READ_PTR_FUNC(region_stream, 2, uint16_t)
 777
 778 CSAN_BUS_READ_FUNC(, 4, uint32_t)
 779 CSAN_BUS_READ_FUNC(_stream, 4, uint32_t)
 780 CSAN_BUS_READ_PTR_FUNC(multi, 4, uint32_t)
 781 CSAN_BUS_READ_PTR_FUNC(multi_stream, 4, uint32_t)
 782 CSAN_BUS_READ_PTR_FUNC(region, 4, uint32_t)
 783 CSAN_BUS_READ_PTR_FUNC(region_stream, 4, uint32_t)
 784
 785 CSAN_BUS_READ_FUNC(, 8, uint64_t)
 786 #if defined(__aarch64__)
 787 CSAN_BUS_READ_FUNC(_stream, 8, uint64_t)
 788 CSAN_BUS_READ_PTR_FUNC(multi, 8, uint64_t)
 789 CSAN_BUS_READ_PTR_FUNC(multi_stream, 8, uint64_t)
 790 CSAN_BUS_READ_PTR_FUNC(region, 8, uint64_t)
 791 CSAN_BUS_READ_PTR_FUNC(region_stream, 8, uint64_t)
 792 #endif
 793
 794 #define CSAN_BUS_WRITE_FUNC(func, width, type)                          \
 795         void kcsan_bus_space_write##func##_##width(bus_space_tag_t tag,         \
 796             bus_space_handle_t hnd, bus_size_t offset, type value)      \
 797         {                                                               \
 798                 bus_space_write##func##_##width(tag, hnd, offset, value); \
 799         }                                                               \
 800
 801 #define CSAN_BUS_WRITE_PTR_FUNC(func, width, type)                      \
 802         void kcsan_bus_space_write_##func##_##width(bus_space_tag_t tag, \
 803             bus_space_handle_t hnd, bus_size_t size, const type *buf,   \
 804             bus_size_t count)                                           \
 805         {                                                               \
 806                 kcsan_access((uintptr_t)buf, sizeof(type) * count,      \
 807                     true, false, __RET_ADDR);                           \
 808                 bus_space_write_##func##_##width(tag, hnd, size, buf,   \
 809                     count);                                             \
 810         }
 811
 812 CSAN_BUS_WRITE_FUNC(, 1, uint8_t)
 813 CSAN_BUS_WRITE_FUNC(_stream, 1, uint8_t)
 814 CSAN_BUS_WRITE_PTR_FUNC(multi, 1, uint8_t)
 815 CSAN_BUS_WRITE_PTR_FUNC(multi_stream, 1, uint8_t)
 816 CSAN_BUS_WRITE_PTR_FUNC(region, 1, uint8_t)
 817 CSAN_BUS_WRITE_PTR_FUNC(region_stream, 1, uint8_t)
 818
 819 CSAN_BUS_WRITE_FUNC(, 2, uint16_t)
 820 CSAN_BUS_WRITE_FUNC(_stream, 2, uint16_t)
 821 CSAN_BUS_WRITE_PTR_FUNC(multi, 2, uint16_t)
 822 CSAN_BUS_WRITE_PTR_FUNC(multi_stream, 2, uint16_t)
 823 CSAN_BUS_WRITE_PTR_FUNC(region, 2, uint16_t)
 824 CSAN_BUS_WRITE_PTR_FUNC(region_stream, 2, uint16_t)
 825
 826 CSAN_BUS_WRITE_FUNC(, 4, uint32_t)
 827 CSAN_BUS_WRITE_FUNC(_stream, 4, uint32_t)
 828 CSAN_BUS_WRITE_PTR_FUNC(multi, 4, uint32_t)
 829 CSAN_BUS_WRITE_PTR_FUNC(multi_stream, 4, uint32_t)
 830 CSAN_BUS_WRITE_PTR_FUNC(region, 4, uint32_t)
 831 CSAN_BUS_WRITE_PTR_FUNC(region_stream, 4, uint32_t)
 832
 833 CSAN_BUS_WRITE_FUNC(, 8, uint64_t)
 834 #if defined(__aarch64__)
 835 CSAN_BUS_WRITE_FUNC(_stream, 8, uint64_t)
 836 CSAN_BUS_WRITE_PTR_FUNC(multi, 8, uint64_t)
 837 CSAN_BUS_WRITE_PTR_FUNC(multi_stream, 8, uint64_t)
 838 CSAN_BUS_WRITE_PTR_FUNC(region, 8, uint64_t)
 839 CSAN_BUS_WRITE_PTR_FUNC(region_stream, 8, uint64_t)
 840 #endif
 841
 842 #define CSAN_BUS_SET_FUNC(func, width, type)                            \
 843         void kcsan_bus_space_set_##func##_##width(bus_space_tag_t tag,  \
 844             bus_space_handle_t hnd, bus_size_t offset, type value,      \
 845             bus_size_t count)                                           \
 846         {                                                               \
 847                 bus_space_set_##func##_##width(tag, hnd, offset, value, \
 848                     count);                                             \
 849         }
 850
 851 CSAN_BUS_SET_FUNC(multi, 1, uint8_t)
 852 CSAN_BUS_SET_FUNC(region, 1, uint8_t)
 853 #if !defined(__aarch64__)
 854 CSAN_BUS_SET_FUNC(multi_stream, 1, uint8_t)
 855 CSAN_BUS_SET_FUNC(region_stream, 1, uint8_t)
 856 #endif
 857
 858 CSAN_BUS_SET_FUNC(multi, 2, uint16_t)
 859 CSAN_BUS_SET_FUNC(region, 2, uint16_t)
 860 #if !defined(__aarch64__)
 861 CSAN_BUS_SET_FUNC(multi_stream, 2, uint16_t)
 862 CSAN_BUS_SET_FUNC(region_stream, 2, uint16_t)
 863 #endif
 864
 865 CSAN_BUS_SET_FUNC(multi, 4, uint32_t)
 866 CSAN_BUS_SET_FUNC(region, 4, uint32_t)
 867 #if !defined(__aarch64__)
 868 CSAN_BUS_SET_FUNC(multi_stream, 4, uint32_t)
 869 CSAN_BUS_SET_FUNC(region_stream, 4, uint32_t)
 870 #endif
 871
 872 #if !defined(__amd64__)
 873 CSAN_BUS_SET_FUNC(multi, 8, uint64_t)
 874 CSAN_BUS_SET_FUNC(region, 8, uint64_t)
 875 #if !defined(__aarch64__)
 876 CSAN_BUS_SET_FUNC(multi_stream, 8, uint64_t)
 877 CSAN_BUS_SET_FUNC(region_stream, 8, uint64_t)
 878 #endif
 879 #endif
 880
 881 #define CSAN_BUS_PEEK_FUNC(width, type)                                 \
 882         int kcsan_bus_space_peek_##width(bus_space_tag_t tag,           \
 883             bus_space_handle_t hnd, bus_size_t offset, type *value)     \
 884         {                                                               \
 885                 kcsan_access((uintptr_t)value, sizeof(type), true, false, \
 886                     __RET_ADDR);                                        \
 887                 return (bus_space_peek_##width(tag, hnd, offset, value)); \
 888         }
 889
 890 CSAN_BUS_PEEK_FUNC(1, uint8_t)
 891 CSAN_BUS_PEEK_FUNC(2, uint16_t)
 892 CSAN_BUS_PEEK_FUNC(4, uint32_t)
 893 #if !defined(__i386__)
 894 CSAN_BUS_PEEK_FUNC(8, uint64_t)
 895 #endif
 896
 897 #define CSAN_BUS_POKE_FUNC(width, type)                                 \
 898         int kcsan_bus_space_poke_##width(bus_space_tag_t tag,           \
 899             bus_space_handle_t hnd, bus_size_t offset, type value)      \
 900         {                                                               \
 901                 return (bus_space_poke_##width(tag, hnd, offset, value)); \
 902         }
 903
 904 CSAN_BUS_POKE_FUNC(1, uint8_t)
 905 CSAN_BUS_POKE_FUNC(2, uint16_t)
 906 CSAN_BUS_POKE_FUNC(4, uint32_t)
 907 #if !defined(__i386__)
 908 CSAN_BUS_POKE_FUNC(8, uint64_t)
 909 #endif