arch/x86/kernel/cpu/microcode/amd.c

   1 /*
   2  *  AMD CPU Microcode Update Driver for Linux
   3  *  Copyright (C) 2008-2011 Advanced Micro Devices Inc.
   4  *
   5  *  Author: Peter Oruba <peter.oruba@amd.com>
   6  *
   7  *  Based on work by:
   8  *  Tigran Aivazian <tigran@aivazian.fsnet.co.uk>
   9  *
  10  *  Maintainers:
  11  *  Andreas Herrmann <herrmann.der.user@googlemail.com>
  12  *  Borislav Petkov <bp@alien8.de>
  13  *
  14  *  This driver allows to upgrade microcode on F10h AMD
  15  *  CPUs and later.
  16  *
  17  *  Licensed under the terms of the GNU General Public
  18  *  License version 2. See file COPYING for details.
  19  */
  20
  21 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  22
  23 #include <linux/firmware.h>
  24 #include <linux/uaccess.h>
  25 #include <linux/vmalloc.h>
  26 #include <linux/kernel.h>
  27 #include <linux/module.h>
  28 #include <linux/pci.h>
  29
  30 #include <asm/microcode.h>
  31 #include <asm/processor.h>
  32 #include <asm/msr.h>
  33 #include <asm/microcode_amd.h>
  34
  35 MODULE_DESCRIPTION("AMD Microcode Update Driver");
  36 MODULE_AUTHOR("Peter Oruba");
  37 MODULE_LICENSE("GPL v2");
  38
  39 static struct equiv_cpu_entry *equiv_cpu_table;
  40
  41 struct ucode_patch {
  42         struct list_head plist;
  43         void *data;
  44         u32 patch_id;
  45         u16 equiv_cpu;
  46 };
  47
  48 static LIST_HEAD(pcache);
  49
  50 static u16 __find_equiv_id(unsigned int cpu)
  51 {
  52         struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
  53         return find_equiv_id(equiv_cpu_table, uci->cpu_sig.sig);
  54 }
  55
  56 static u32 find_cpu_family_by_equiv_cpu(u16 equiv_cpu)
  57 {
  58         int i = 0;
  59
  60         BUG_ON(!equiv_cpu_table);
  61
  62         while (equiv_cpu_table[i].equiv_cpu != 0) {
  63                 if (equiv_cpu == equiv_cpu_table[i].equiv_cpu)
  64                         return equiv_cpu_table[i].installed_cpu;
  65                 i++;
  66         }
  67         return 0;
  68 }
  69
  70 /*
  71  * a small, trivial cache of per-family ucode patches
  72  */
  73 static struct ucode_patch *cache_find_patch(u16 equiv_cpu)
  74 {
  75         struct ucode_patch *p;
  76
  77         list_for_each_entry(p, &pcache, plist)
  78                 if (p->equiv_cpu == equiv_cpu)
  79                         return p;
  80         return NULL;
  81 }
  82
  83 static void update_cache(struct ucode_patch *new_patch)
  84 {
  85         struct ucode_patch *p;
  86
  87         list_for_each_entry(p, &pcache, plist) {
  88                 if (p->equiv_cpu == new_patch->equiv_cpu) {
  89                         if (p->patch_id >= new_patch->patch_id)
  90                                 /* we already have the latest patch */
  91                                 return;
  92
  93                         list_replace(&p->plist, &new_patch->plist);
  94                         kfree(p->data);
  95                         kfree(p);
  96                         return;
  97                 }
  98         }
  99         /* no patch found, add it */
 100         list_add_tail(&new_patch->plist, &pcache);
 101 }
 102
 103 static void free_cache(void)
 104 {
 105         struct ucode_patch *p, *tmp;
 106
 107         list_for_each_entry_safe(p, tmp, &pcache, plist) {
 108                 __list_del(p->plist.prev, p->plist.next);
 109                 kfree(p->data);
 110                 kfree(p);
 111         }
 112 }
 113
 114 static struct ucode_patch *find_patch(unsigned int cpu)
 115 {
 116         u16 equiv_id;
 117
 118         equiv_id = __find_equiv_id(cpu);
 119         if (!equiv_id)
 120                 return NULL;
 121
 122         return cache_find_patch(equiv_id);
 123 }
 124
 125 static int collect_cpu_info_amd(int cpu, struct cpu_signature *csig)
 126 {
 127         struct cpuinfo_x86 *c = &cpu_data(cpu);
 128         struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
 129         struct ucode_patch *p;
 130
 131         csig->sig = cpuid_eax(0x00000001);
 132         csig->rev = c->microcode;
 133
 134         /*
 135          * a patch could have been loaded early, set uci->mc so that
 136          * mc_bp_resume() can call apply_microcode()
 137          */
 138         p = find_patch(cpu);
 139         if (p && (p->patch_id == csig->rev))
 140                 uci->mc = p->data;
 141
 142         pr_info("CPU%d: patch_level=0x%08x\n", cpu, csig->rev);
 143
 144         return 0;
 145 }
 146
 147 static unsigned int verify_patch_size(u8 family, u32 patch_size,
 148                                       unsigned int size)
 149 {
 150         u32 max_size;
 151
 152 #define F1XH_MPB_MAX_SIZE 2048
 153 #define F14H_MPB_MAX_SIZE 1824
 154 #define F15H_MPB_MAX_SIZE 4096
 155 #define F16H_MPB_MAX_SIZE 3458
 156
 157         switch (family) {
 158         case 0x14:
 159                 max_size = F14H_MPB_MAX_SIZE;
 160                 break;
 161         case 0x15:
 162                 max_size = F15H_MPB_MAX_SIZE;
 163                 break;
 164         case 0x16:
 165                 max_size = F16H_MPB_MAX_SIZE;
 166                 break;
 167         default:
 168                 max_size = F1XH_MPB_MAX_SIZE;
 169                 break;
 170         }
 171
 172         if (patch_size > min_t(u32, size, max_size)) {
 173                 pr_err("patch size mismatch\n");
 174                 return 0;
 175         }
 176
 177         return patch_size;
 178 }
 179
 180 /*
 181  * Check the current patch level on this CPU.
 182  *
 183  * @rev: Use it to return the patch level. It is set to 0 in the case of
 184  * error.
 185  *
 186  * Returns:
 187  *  - true: if update should stop
 188  *  - false: otherwise
 189  */
 190 bool check_current_patch_level(u32 *rev)
 191 {
 192         u32 dummy;
 193
 194         native_rdmsr(MSR_AMD64_PATCH_LEVEL, *rev, dummy);
 195
 196         return false;
 197 }
 198
 199 int __apply_microcode_amd(struct microcode_amd *mc_amd)
 200 {
 201         u32 rev, dummy;
 202
 203         native_wrmsrl(MSR_AMD64_PATCH_LOADER, (u64)(long)&mc_amd->hdr.data_code);
 204
 205         /* verify patch application was successful */
 206         native_rdmsr(MSR_AMD64_PATCH_LEVEL, rev, dummy);
 207         if (rev != mc_amd->hdr.patch_id)
 208                 return -1;
 209
 210         return 0;
 211 }
 212
 213 int apply_microcode_amd(int cpu)
 214 {
 215         struct cpuinfo_x86 *c = &cpu_data(cpu);
 216         struct microcode_amd *mc_amd;
 217         struct ucode_cpu_info *uci;
 218         struct ucode_patch *p;
 219         u32 rev;
 220
 221         BUG_ON(raw_smp_processor_id() != cpu);
 222
 223         uci = ucode_cpu_info + cpu;
 224
 225         p = find_patch(cpu);
 226         if (!p)
 227                 return 0;
 228
 229         mc_amd  = p->data;
 230         uci->mc = p->data;
 231
 232         if (check_current_patch_level(&rev))
 233                 return -1;
 234
 235         /* need to apply patch? */
 236         if (rev >= mc_amd->hdr.patch_id) {
 237                 c->microcode = rev;
 238                 uci->cpu_sig.rev = rev;
 239                 return 0;
 240         }
 241
 242         if (__apply_microcode_amd(mc_amd)) {
 243                 pr_err("CPU%d: update failed for patch_level=0x%08x\n",
 244                         cpu, mc_amd->hdr.patch_id);
 245                 return -1;
 246         }
 247         pr_info("CPU%d: new patch_level=0x%08x\n", cpu,
 248                 mc_amd->hdr.patch_id);
 249
 250         uci->cpu_sig.rev = mc_amd->hdr.patch_id;
 251         c->microcode = mc_amd->hdr.patch_id;
 252
 253         return 0;
 254 }
 255
 256 static int install_equiv_cpu_table(const u8 *buf)
 257 {
 258         unsigned int *ibuf = (unsigned int *)buf;
 259         unsigned int type = ibuf[1];
 260         unsigned int size = ibuf[2];
 261
 262         if (type != UCODE_EQUIV_CPU_TABLE_TYPE || !size) {
 263                 pr_err("empty section/"
 264                        "invalid type field in container file section header\n");
 265                 return -EINVAL;
 266         }
 267
 268         equiv_cpu_table = vmalloc(size);
 269         if (!equiv_cpu_table) {
 270                 pr_err("failed to allocate equivalent CPU table\n");
 271                 return -ENOMEM;
 272         }
 273
 274         memcpy(equiv_cpu_table, buf + CONTAINER_HDR_SZ, size);
 275
 276         /* add header length */
 277         return size + CONTAINER_HDR_SZ;
 278 }
 279
 280 static void free_equiv_cpu_table(void)
 281 {
 282         vfree(equiv_cpu_table);
 283         equiv_cpu_table = NULL;
 284 }
 285
 286 static void cleanup(void)
 287 {
 288         free_equiv_cpu_table();
 289         free_cache();
 290 }
 291
 292 /*
 293  * We return the current size even if some of the checks failed so that
 294  * we can skip over the next patch. If we return a negative value, we
 295  * signal a grave error like a memory allocation has failed and the
 296  * driver cannot continue functioning normally. In such cases, we tear
 297  * down everything we've used up so far and exit.
 298  */
 299 static int verify_and_add_patch(u8 family, u8 *fw, unsigned int leftover)
 300 {
 301         struct microcode_header_amd *mc_hdr;
 302         struct ucode_patch *patch;
 303         unsigned int patch_size, crnt_size, ret;
 304         u32 proc_fam;
 305         u16 proc_id;
 306
 307         patch_size  = *(u32 *)(fw + 4);
 308         crnt_size   = patch_size + SECTION_HDR_SIZE;
 309         mc_hdr      = (struct microcode_header_amd *)(fw + SECTION_HDR_SIZE);
 310         proc_id     = mc_hdr->processor_rev_id;
 311
 312         proc_fam = find_cpu_family_by_equiv_cpu(proc_id);
 313         if (!proc_fam) {
 314                 pr_err("No patch family for equiv ID: 0x%04x\n", proc_id);
 315                 return crnt_size;
 316         }
 317
 318         /* check if patch is for the current family */
 319         proc_fam = ((proc_fam >> 8) & 0xf) + ((proc_fam >> 20) & 0xff);
 320         if (proc_fam != family)
 321                 return crnt_size;
 322
 323         if (mc_hdr->nb_dev_id || mc_hdr->sb_dev_id) {
 324                 pr_err("Patch-ID 0x%08x: chipset-specific code unsupported.\n",
 325                         mc_hdr->patch_id);
 326                 return crnt_size;
 327         }
 328
 329         ret = verify_patch_size(family, patch_size, leftover);
 330         if (!ret) {
 331                 pr_err("Patch-ID 0x%08x: size mismatch.\n", mc_hdr->patch_id);
 332                 return crnt_size;
 333         }
 334
 335         patch = kzalloc(sizeof(*patch), GFP_KERNEL);
 336         if (!patch) {
 337                 pr_err("Patch allocation failure.\n");
 338                 return -EINVAL;
 339         }
 340
 341         patch->data = kzalloc(patch_size, GFP_KERNEL);
 342         if (!patch->data) {
 343                 pr_err("Patch data allocation failure.\n");
 344                 kfree(patch);
 345                 return -EINVAL;
 346         }
 347
 348         /* All looks ok, copy patch... */
 349         memcpy(patch->data, fw + SECTION_HDR_SIZE, patch_size);
 350         INIT_LIST_HEAD(&patch->plist);
 351         patch->patch_id  = mc_hdr->patch_id;
 352         patch->equiv_cpu = proc_id;
 353
 354         pr_debug("%s: Added patch_id: 0x%08x, proc_id: 0x%04x\n",
 355                  __func__, patch->patch_id, proc_id);
 356
 357         /* ... and add to cache. */
 358         update_cache(patch);
 359
 360         return crnt_size;
 361 }
 362
 363 static enum ucode_state __load_microcode_amd(u8 family, const u8 *data,
 364                                              size_t size)
 365 {
 366         enum ucode_state ret = UCODE_ERROR;
 367         unsigned int leftover;
 368         u8 *fw = (u8 *)data;
 369         int crnt_size = 0;
 370         int offset;
 371
 372         offset = install_equiv_cpu_table(data);
 373         if (offset < 0) {
 374                 pr_err("failed to create equivalent cpu table\n");
 375                 return ret;
 376         }
 377         fw += offset;
 378         leftover = size - offset;
 379
 380         if (*(u32 *)fw != UCODE_UCODE_TYPE) {
 381                 pr_err("invalid type field in container file section header\n");
 382                 free_equiv_cpu_table();
 383                 return ret;
 384         }
 385
 386         while (leftover) {
 387                 crnt_size = verify_and_add_patch(family, fw, leftover);
 388                 if (crnt_size < 0)
 389                         return ret;
 390
 391                 fw       += crnt_size;
 392                 leftover -= crnt_size;
 393         }
 394
 395         return UCODE_OK;
 396 }
 397
 398 enum ucode_state load_microcode_amd(int cpu, u8 family, const u8 *data, size_t size)
 399 {
 400         enum ucode_state ret;
 401
 402         /* free old equiv table */
 403         free_equiv_cpu_table();
 404
 405         ret = __load_microcode_amd(family, data, size);
 406
 407         if (ret != UCODE_OK)
 408                 cleanup();
 409
 410 #if defined(CONFIG_MICROCODE_AMD_EARLY) && defined(CONFIG_X86_32)
 411         /* save BSP's matching patch for early load */
 412         if (cpu_data(cpu).cpu_index == boot_cpu_data.cpu_index) {
 413                 struct ucode_patch *p = find_patch(cpu);
 414                 if (p) {
 415                         memset(amd_ucode_patch, 0, PATCH_MAX_SIZE);
 416                         memcpy(amd_ucode_patch, p->data, min_t(u32, ksize(p->data),
 417                                                                PATCH_MAX_SIZE));
 418                 }
 419         }
 420 #endif
 421         return ret;
 422 }
 423
 424 /*
 425  * AMD microcode firmware naming convention, up to family 15h they are in
 426  * the legacy file:
 427  *
 428  *    amd-ucode/microcode_amd.bin
 429  *
 430  * This legacy file is always smaller than 2K in size.
 431  *
 432  * Beginning with family 15h, they are in family-specific firmware files:
 433  *
 434  *    amd-ucode/microcode_amd_fam15h.bin
 435  *    amd-ucode/microcode_amd_fam16h.bin
 436  *    ...
 437  *
 438  * These might be larger than 2K.
 439  */
 440 static enum ucode_state request_microcode_amd(int cpu, struct device *device,
 441                                               bool refresh_fw)
 442 {
 443         char fw_name[36] = "amd-ucode/microcode_amd.bin";
 444         struct cpuinfo_x86 *c = &cpu_data(cpu);
 445         enum ucode_state ret = UCODE_NFOUND;
 446         const struct firmware *fw;
 447
 448         /* reload ucode container only on the boot cpu */
 449         if (!refresh_fw || c->cpu_index != boot_cpu_data.cpu_index)
 450                 return UCODE_OK;
 451
 452         if (c->x86 >= 0x15)
 453                 snprintf(fw_name, sizeof(fw_name), "amd-ucode/microcode_amd_fam%.2xh.bin", c->x86);
 454
 455         if (request_firmware_direct(&fw, (const char *)fw_name, device)) {
 456                 pr_debug("failed to load file %s\n", fw_name);
 457                 goto out;
 458         }
 459
 460         ret = UCODE_ERROR;
 461         if (*(u32 *)fw->data != UCODE_MAGIC) {
 462                 pr_err("invalid magic value (0x%08x)\n", *(u32 *)fw->data);
 463                 goto fw_release;
 464         }
 465
 466         ret = load_microcode_amd(cpu, c->x86, fw->data, fw->size);
 467
 468  fw_release:
 469         release_firmware(fw);
 470
 471  out:
 472         return ret;
 473 }
 474
 475 static enum ucode_state
 476 request_microcode_user(int cpu, const void __user *buf, size_t size)
 477 {
 478         return UCODE_ERROR;
 479 }
 480
 481 static void microcode_fini_cpu_amd(int cpu)
 482 {
 483         struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
 484
 485         uci->mc = NULL;
 486 }
 487
 488 static struct microcode_ops microcode_amd_ops = {
 489         .request_microcode_user           = request_microcode_user,
 490         .request_microcode_fw             = request_microcode_amd,
 491         .collect_cpu_info                 = collect_cpu_info_amd,
 492         .apply_microcode                  = apply_microcode_amd,
 493         .microcode_fini_cpu               = microcode_fini_cpu_amd,
 494 };
 495
 496 struct microcode_ops * __init init_amd_microcode(void)
 497 {
 498         struct cpuinfo_x86 *c = &cpu_data(0);
 499
 500         if (c->x86_vendor != X86_VENDOR_AMD || c->x86 < 0x10) {
 501                 pr_warning("AMD CPU family 0x%x not supported\n", c->x86);
 502                 return NULL;
 503         }
 504
 505         return &microcode_amd_ops;
 506 }
 507
 508 void __exit exit_amd_microcode(void)
 509 {
 510         cleanup();
 511 }