Page MenuHomeFreeBSD

arm64: validate breakpoint registers
ClosedPublic

Authored by mhorne on Feb 9 2021, 8:39 PM.
Tags
None
Referenced Files
F132212786: D28560.id83643.diff
Tue, Oct 14, 8:26 PM
F132212784: D28560.id84090.diff
Tue, Oct 14, 8:26 PM
F132212781: D28560.id.diff
Tue, Oct 14, 8:26 PM
F132212780: D28560.id83608.diff
Tue, Oct 14, 8:26 PM
Unknown Object (File)
Tue, Oct 14, 10:23 AM
Unknown Object (File)
Fri, Sep 26, 1:48 AM
Unknown Object (File)
Wed, Sep 24, 10:26 PM
Unknown Object (File)
Sun, Sep 21, 12:44 PM
Subscribers

Details

Summary

In particular, we want to disallow setting breakpoints on kernel
addresses from userspace. The control register fields are validated or
ignored as appropriate.

For reference: https://developer.arm.com/documentation/ddi0595/2020-12/AArch64-Registers/DBGBCR-n--EL1--Debug-Breakpoint-Control-Registers

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

mhorne requested review of this revision.Feb 9 2021, 8:39 PM
sys/arm64/arm64/machdep.c
374

I think this should be a >=. Contrary to the name, VM_MAXUSER_ADDRESS is not a valid user address.

I guess it's ok to silently round down the address to the nearest half word boundary?

396–400

The dbg_enable_count value is left non-zero in error paths. I guess that's ok so long as we don't set DBGMON_ENABLED.

Fix VM_MAXUSER_ADDRESS conditional. Round down address.

This revision is now accepted and ready to land.Feb 12 2021, 3:25 PM
This revision was automatically updated to reflect the committed changes.