]> git.ipfire.org Git - thirdparty/linux.git/blame - mm/mlock.c
arm64: tegra: Remove duplicate nodes on Jetson Orin NX
[thirdparty/linux.git] / mm / mlock.c
CommitLineData
b2441318 1// SPDX-License-Identifier: GPL-2.0
1da177e4
LT
2/*
3 * linux/mm/mlock.c
4 *
5 * (C) Copyright 1995 Linus Torvalds
6 * (C) Copyright 2002 Christoph Hellwig
7 */
8
c59ede7b 9#include <linux/capability.h>
1da177e4
LT
10#include <linux/mman.h>
11#include <linux/mm.h>
8703e8a4 12#include <linux/sched/user.h>
b291f000
NP
13#include <linux/swap.h>
14#include <linux/swapops.h>
15#include <linux/pagemap.h>
7225522b 16#include <linux/pagevec.h>
34b67923 17#include <linux/pagewalk.h>
1da177e4
LT
18#include <linux/mempolicy.h>
19#include <linux/syscalls.h>
e8edc6e0 20#include <linux/sched.h>
b95f1b31 21#include <linux/export.h>
b291f000
NP
22#include <linux/rmap.h>
23#include <linux/mmzone.h>
24#include <linux/hugetlb.h>
7225522b
VB
25#include <linux/memcontrol.h>
26#include <linux/mm_inline.h>
1507f512 27#include <linux/secretmem.h>
b291f000
NP
28
29#include "internal.h"
1da177e4 30
90d07210 31struct mlock_fbatch {
adb11e78 32 local_lock_t lock;
90d07210 33 struct folio_batch fbatch;
adb11e78
SAS
34};
35
90d07210 36static DEFINE_PER_CPU(struct mlock_fbatch, mlock_fbatch) = {
adb11e78
SAS
37 .lock = INIT_LOCAL_LOCK(lock),
38};
2fbb0c10 39
7f43add4 40bool can_do_mlock(void)
e8edc6e0 41{
59e99e5b 42 if (rlimit(RLIMIT_MEMLOCK) != 0)
7f43add4 43 return true;
a5a6579d 44 if (capable(CAP_IPC_LOCK))
7f43add4
WX
45 return true;
46 return false;
e8edc6e0
AD
47}
48EXPORT_SYMBOL(can_do_mlock);
1da177e4 49
b291f000 50/*
90d07210 51 * Mlocked folios are marked with the PG_mlocked flag for efficient testing
b291f000
NP
52 * in vmscan and, possibly, the fault path; and to support semi-accurate
53 * statistics.
54 *
90d07210
LS
55 * An mlocked folio [folio_test_mlocked(folio)] is unevictable. As such, it
56 * will be ostensibly placed on the LRU "unevictable" list (actually no such
57 * list exists), rather than the [in]active lists. PG_unevictable is set to
58 * indicate the unevictable state.
b291f000
NP
59 */
60
90d07210 61static struct lruvec *__mlock_folio(struct folio *folio, struct lruvec *lruvec)
b291f000 62{
2fbb0c10 63 /* There is nothing more we can do while it's off LRU */
90d07210 64 if (!folio_test_clear_lru(folio))
2fbb0c10 65 return lruvec;
0964730b 66
90d07210 67 lruvec = folio_lruvec_relock_irq(folio, lruvec);
b291f000 68
90d07210 69 if (unlikely(folio_evictable(folio))) {
b291f000 70 /*
90d07210
LS
71 * This is a little surprising, but quite possible: PG_mlocked
72 * must have got cleared already by another CPU. Could this
73 * folio be unevictable? I'm not sure, but move it now if so.
b291f000 74 */
90d07210
LS
75 if (folio_test_unevictable(folio)) {
76 lruvec_del_folio(lruvec, folio);
77 folio_clear_unevictable(folio);
78 lruvec_add_folio(lruvec, folio);
79
2fbb0c10 80 __count_vm_events(UNEVICTABLE_PGRESCUED,
90d07210 81 folio_nr_pages(folio));
2fbb0c10
HD
82 }
83 goto out;
b291f000 84 }
07ca7606 85
90d07210
LS
86 if (folio_test_unevictable(folio)) {
87 if (folio_test_mlocked(folio))
88 folio->mlock_count++;
07ca7606 89 goto out;
5344b7e6 90 }
07ca7606 91
90d07210
LS
92 lruvec_del_folio(lruvec, folio);
93 folio_clear_active(folio);
94 folio_set_unevictable(folio);
95 folio->mlock_count = !!folio_test_mlocked(folio);
96 lruvec_add_folio(lruvec, folio);
97 __count_vm_events(UNEVICTABLE_PGCULLED, folio_nr_pages(folio));
07ca7606 98out:
90d07210 99 folio_set_lru(folio);
2fbb0c10 100 return lruvec;
b291f000
NP
101}
102
90d07210 103static struct lruvec *__mlock_new_folio(struct folio *folio, struct lruvec *lruvec)
b291f000 104{
90d07210 105 VM_BUG_ON_FOLIO(folio_test_lru(folio), folio);
b291f000 106
90d07210 107 lruvec = folio_lruvec_relock_irq(folio, lruvec);
e90309c9 108
2fbb0c10 109 /* As above, this is a little surprising, but possible */
90d07210 110 if (unlikely(folio_evictable(folio)))
2fbb0c10 111 goto out;
0964730b 112
90d07210
LS
113 folio_set_unevictable(folio);
114 folio->mlock_count = !!folio_test_mlocked(folio);
115 __count_vm_events(UNEVICTABLE_PGCULLED, folio_nr_pages(folio));
2fbb0c10 116out:
90d07210
LS
117 lruvec_add_folio(lruvec, folio);
118 folio_set_lru(folio);
2fbb0c10 119 return lruvec;
b291f000
NP
120}
121
90d07210 122static struct lruvec *__munlock_folio(struct folio *folio, struct lruvec *lruvec)
7225522b 123{
90d07210 124 int nr_pages = folio_nr_pages(folio);
2fbb0c10
HD
125 bool isolated = false;
126
90d07210 127 if (!folio_test_clear_lru(folio))
2fbb0c10 128 goto munlock;
7225522b 129
2fbb0c10 130 isolated = true;
90d07210 131 lruvec = folio_lruvec_relock_irq(folio, lruvec);
7225522b 132
90d07210 133 if (folio_test_unevictable(folio)) {
07ca7606 134 /* Then mlock_count is maintained, but might undercount */
90d07210
LS
135 if (folio->mlock_count)
136 folio->mlock_count--;
137 if (folio->mlock_count)
07ca7606
HD
138 goto out;
139 }
140 /* else assume that was the last mlock: reclaim will fix it if not */
141
2fbb0c10 142munlock:
90d07210
LS
143 if (folio_test_clear_mlocked(folio)) {
144 __zone_stat_mod_folio(folio, NR_MLOCK, -nr_pages);
145 if (isolated || !folio_test_unevictable(folio))
07ca7606
HD
146 __count_vm_events(UNEVICTABLE_PGMUNLOCKED, nr_pages);
147 else
148 __count_vm_events(UNEVICTABLE_PGSTRANDED, nr_pages);
149 }
150
90d07210
LS
151 /* folio_evictable() has to be checked *after* clearing Mlocked */
152 if (isolated && folio_test_unevictable(folio) && folio_evictable(folio)) {
153 lruvec_del_folio(lruvec, folio);
154 folio_clear_unevictable(folio);
155 lruvec_add_folio(lruvec, folio);
07ca7606 156 __count_vm_events(UNEVICTABLE_PGRESCUED, nr_pages);
7225522b 157 }
07ca7606 158out:
2fbb0c10 159 if (isolated)
90d07210 160 folio_set_lru(folio);
2fbb0c10 161 return lruvec;
7225522b
VB
162}
163
164/*
90d07210 165 * Flags held in the low bits of a struct folio pointer on the mlock_fbatch.
7225522b 166 */
90d07210
LS
167#define LRU_FOLIO 0x1
168#define NEW_FOLIO 0x2
169static inline struct folio *mlock_lru(struct folio *folio)
7225522b 170{
90d07210 171 return (struct folio *)((unsigned long)folio + LRU_FOLIO);
2fbb0c10 172}
0964730b 173
90d07210 174static inline struct folio *mlock_new(struct folio *folio)
2fbb0c10 175{
90d07210 176 return (struct folio *)((unsigned long)folio + NEW_FOLIO);
7225522b
VB
177}
178
2fbb0c10 179/*
90d07210
LS
180 * mlock_folio_batch() is derived from folio_batch_move_lru(): perhaps that can
181 * make use of such folio pointer flags in future, but for now just keep it for
182 * mlock. We could use three separate folio batches instead, but one feels
183 * better (munlocking a full folio batch does not need to drain mlocking folio
184 * batches first).
b291f000 185 */
90d07210 186static void mlock_folio_batch(struct folio_batch *fbatch)
b291f000 187{
2fbb0c10
HD
188 struct lruvec *lruvec = NULL;
189 unsigned long mlock;
90d07210 190 struct folio *folio;
2fbb0c10 191 int i;
e90309c9 192
90d07210
LS
193 for (i = 0; i < folio_batch_count(fbatch); i++) {
194 folio = fbatch->folios[i];
195 mlock = (unsigned long)folio & (LRU_FOLIO | NEW_FOLIO);
196 folio = (struct folio *)((unsigned long)folio - mlock);
197 fbatch->folios[i] = folio;
2fbb0c10 198
90d07210
LS
199 if (mlock & LRU_FOLIO)
200 lruvec = __mlock_folio(folio, lruvec);
201 else if (mlock & NEW_FOLIO)
202 lruvec = __mlock_new_folio(folio, lruvec);
2fbb0c10 203 else
90d07210 204 lruvec = __munlock_folio(folio, lruvec);
655548bf 205 }
01cc2e58 206
2fbb0c10
HD
207 if (lruvec)
208 unlock_page_lruvec_irq(lruvec);
2bd7f621 209 folios_put(fbatch->folios, folio_batch_count(fbatch));
90d07210 210 folio_batch_reinit(fbatch);
2fbb0c10 211}
01cc2e58 212
96f97c43 213void mlock_drain_local(void)
adb11e78 214{
90d07210 215 struct folio_batch *fbatch;
adb11e78 216
90d07210
LS
217 local_lock(&mlock_fbatch.lock);
218 fbatch = this_cpu_ptr(&mlock_fbatch.fbatch);
219 if (folio_batch_count(fbatch))
220 mlock_folio_batch(fbatch);
221 local_unlock(&mlock_fbatch.lock);
adb11e78
SAS
222}
223
96f97c43 224void mlock_drain_remote(int cpu)
2fbb0c10 225{
90d07210 226 struct folio_batch *fbatch;
01cc2e58 227
adb11e78 228 WARN_ON_ONCE(cpu_online(cpu));
90d07210
LS
229 fbatch = &per_cpu(mlock_fbatch.fbatch, cpu);
230 if (folio_batch_count(fbatch))
231 mlock_folio_batch(fbatch);
b291f000
NP
232}
233
96f97c43 234bool need_mlock_drain(int cpu)
9978ad58 235{
90d07210 236 return folio_batch_count(&per_cpu(mlock_fbatch.fbatch, cpu));
b291f000
NP
237}
238
2fbb0c10 239/**
dcc5d337
MWO
240 * mlock_folio - mlock a folio already on (or temporarily off) LRU
241 * @folio: folio to be mlocked.
56afe477 242 */
dcc5d337 243void mlock_folio(struct folio *folio)
56afe477 244{
90d07210 245 struct folio_batch *fbatch;
adb11e78 246
90d07210
LS
247 local_lock(&mlock_fbatch.lock);
248 fbatch = this_cpu_ptr(&mlock_fbatch.fbatch);
56afe477 249
dcc5d337
MWO
250 if (!folio_test_set_mlocked(folio)) {
251 int nr_pages = folio_nr_pages(folio);
2fbb0c10 252
dcc5d337 253 zone_stat_mod_folio(folio, NR_MLOCK, nr_pages);
2fbb0c10 254 __count_vm_events(UNEVICTABLE_PGMLOCKED, nr_pages);
56afe477
VB
255 }
256
dcc5d337 257 folio_get(folio);
90d07210 258 if (!folio_batch_add(fbatch, mlock_lru(folio)) ||
dcc5d337 259 folio_test_large(folio) || lru_cache_disabled())
90d07210
LS
260 mlock_folio_batch(fbatch);
261 local_unlock(&mlock_fbatch.lock);
56afe477
VB
262}
263
2fbb0c10 264/**
96f97c43
LS
265 * mlock_new_folio - mlock a newly allocated folio not yet on LRU
266 * @folio: folio to be mlocked, either normal or a THP head.
56afe477 267 */
96f97c43 268void mlock_new_folio(struct folio *folio)
56afe477 269{
90d07210 270 struct folio_batch *fbatch;
90d07210 271 int nr_pages = folio_nr_pages(folio);
2fbb0c10 272
90d07210
LS
273 local_lock(&mlock_fbatch.lock);
274 fbatch = this_cpu_ptr(&mlock_fbatch.fbatch);
275 folio_set_mlocked(folio);
276
277 zone_stat_mod_folio(folio, NR_MLOCK, nr_pages);
2fbb0c10
HD
278 __count_vm_events(UNEVICTABLE_PGMLOCKED, nr_pages);
279
90d07210
LS
280 folio_get(folio);
281 if (!folio_batch_add(fbatch, mlock_new(folio)) ||
282 folio_test_large(folio) || lru_cache_disabled())
283 mlock_folio_batch(fbatch);
284 local_unlock(&mlock_fbatch.lock);
56afe477
VB
285}
286
2fbb0c10 287/**
96f97c43
LS
288 * munlock_folio - munlock a folio
289 * @folio: folio to be munlocked, either normal or a THP head.
7225522b 290 */
96f97c43 291void munlock_folio(struct folio *folio)
7225522b 292{
90d07210 293 struct folio_batch *fbatch;
56afe477 294
90d07210
LS
295 local_lock(&mlock_fbatch.lock);
296 fbatch = this_cpu_ptr(&mlock_fbatch.fbatch);
5b40998a 297 /*
90d07210
LS
298 * folio_test_clear_mlocked(folio) must be left to __munlock_folio(),
299 * which will check whether the folio is multiply mlocked.
5b40998a 300 */
90d07210
LS
301 folio_get(folio);
302 if (!folio_batch_add(fbatch, folio) ||
303 folio_test_large(folio) || lru_cache_disabled())
304 mlock_folio_batch(fbatch);
305 local_unlock(&mlock_fbatch.lock);
7a8010cd
VB
306}
307
34b67923
HD
308static int mlock_pte_range(pmd_t *pmd, unsigned long addr,
309 unsigned long end, struct mm_walk *walk)
310
7a8010cd 311{
34b67923 312 struct vm_area_struct *vma = walk->vma;
7a8010cd 313 spinlock_t *ptl;
34b67923 314 pte_t *start_pte, *pte;
c33c7948 315 pte_t ptent;
96f97c43 316 struct folio *folio;
7a8010cd 317
34b67923
HD
318 ptl = pmd_trans_huge_lock(pmd, vma);
319 if (ptl) {
320 if (!pmd_present(*pmd))
321 goto out;
322 if (is_huge_zero_pmd(*pmd))
323 goto out;
96f97c43 324 folio = page_folio(pmd_page(*pmd));
34b67923 325 if (vma->vm_flags & VM_LOCKED)
96f97c43 326 mlock_folio(folio);
34b67923 327 else
96f97c43 328 munlock_folio(folio);
34b67923
HD
329 goto out;
330 }
56afe477 331
34b67923 332 start_pte = pte_offset_map_lock(vma->vm_mm, pmd, addr, &ptl);
7780d040
HD
333 if (!start_pte) {
334 walk->action = ACTION_AGAIN;
335 return 0;
336 }
34b67923 337 for (pte = start_pte; addr != end; pte++, addr += PAGE_SIZE) {
c33c7948
RR
338 ptent = ptep_get(pte);
339 if (!pte_present(ptent))
34b67923 340 continue;
c33c7948 341 folio = vm_normal_folio(vma, addr, ptent);
96f97c43 342 if (!folio || folio_is_zone_device(folio))
34b67923 343 continue;
96f97c43 344 if (folio_test_large(folio))
34b67923
HD
345 continue;
346 if (vma->vm_flags & VM_LOCKED)
96f97c43 347 mlock_folio(folio);
34b67923 348 else
96f97c43 349 munlock_folio(folio);
7a8010cd 350 }
34b67923
HD
351 pte_unmap(start_pte);
352out:
353 spin_unlock(ptl);
354 cond_resched();
355 return 0;
7225522b
VB
356}
357
b291f000 358/*
34b67923
HD
359 * mlock_vma_pages_range() - mlock any pages already in the range,
360 * or munlock all pages in the range.
361 * @vma - vma containing range to be mlock()ed or munlock()ed
ba470de4 362 * @start - start address in @vma of the range
34b67923
HD
363 * @end - end of range in @vma
364 * @newflags - the new set of flags for @vma.
ba470de4 365 *
34b67923
HD
366 * Called for mlock(), mlock2() and mlockall(), to set @vma VM_LOCKED;
367 * called for munlock() and munlockall(), to clear VM_LOCKED from @vma.
b291f000 368 */
34b67923
HD
369static void mlock_vma_pages_range(struct vm_area_struct *vma,
370 unsigned long start, unsigned long end, vm_flags_t newflags)
b291f000 371{
34b67923
HD
372 static const struct mm_walk_ops mlock_walk_ops = {
373 .pmd_entry = mlock_pte_range,
49b06385 374 .walk_lock = PGWALK_WRLOCK_VERIFY,
34b67923 375 };
408e82b7 376
34b67923
HD
377 /*
378 * There is a slight chance that concurrent page migration,
379 * or page reclaim finding a page of this now-VM_LOCKED vma,
7efecffb 380 * will call mlock_vma_folio() and raise page's mlock_count:
34b67923 381 * double counting, leaving the page unevictable indefinitely.
7efecffb 382 * Communicate this danger to mlock_vma_folio() with VM_IO,
34b67923
HD
383 * which is a VM_SPECIAL flag not allowed on VM_LOCKED vmas.
384 * mmap_lock is held in write mode here, so this weird
385 * combination should not be visible to other mmap_lock users;
386 * but WRITE_ONCE so rmap walkers must see VM_IO if VM_LOCKED.
387 */
388 if (newflags & VM_LOCKED)
389 newflags |= VM_IO;
60081bf1 390 vma_start_write(vma);
601c3c29 391 vm_flags_reset_once(vma, newflags);
ff6a6da6 392
34b67923
HD
393 lru_add_drain();
394 walk_page_range(vma->vm_mm, start, end, &mlock_walk_ops, NULL);
395 lru_add_drain();
408e82b7 396
34b67923
HD
397 if (newflags & VM_IO) {
398 newflags &= ~VM_IO;
601c3c29 399 vm_flags_reset_once(vma, newflags);
408e82b7 400 }
b291f000
NP
401}
402
403/*
404 * mlock_fixup - handle mlock[all]/munlock[all] requests.
405 *
406 * Filters out "special" vmas -- VM_LOCKED never gets set for these, and
407 * munlock is a no-op. However, for some special vmas, we go ahead and
cea10a19 408 * populate the ptes.
b291f000
NP
409 *
410 * For vmas that pass the filters, merge/split as appropriate.
411 */
37598f5a
LH
412static int mlock_fixup(struct vma_iterator *vmi, struct vm_area_struct *vma,
413 struct vm_area_struct **prev, unsigned long start,
414 unsigned long end, vm_flags_t newflags)
1da177e4 415{
b291f000 416 struct mm_struct *mm = vma->vm_mm;
1da177e4 417 pgoff_t pgoff;
b291f000 418 int nr_pages;
1da177e4 419 int ret = 0;
34b67923 420 vm_flags_t oldflags = vma->vm_flags;
1da177e4 421
34b67923 422 if (newflags == oldflags || (oldflags & VM_SPECIAL) ||
e1fb4a08 423 is_vm_hugetlb_page(vma) || vma == get_gate_vma(current->mm) ||
1507f512 424 vma_is_dax(vma) || vma_is_secretmem(vma))
b0f205c2
EM
425 /* don't set VM_LOCKED or VM_LOCKONFAULT and don't count */
426 goto out;
b291f000 427
1da177e4 428 pgoff = vma->vm_pgoff + ((start - vma->vm_start) >> PAGE_SHIFT);
9760ebff 429 *prev = vma_merge(vmi, mm, *prev, start, end, newflags,
37598f5a
LH
430 vma->anon_vma, vma->vm_file, pgoff, vma_policy(vma),
431 vma->vm_userfaultfd_ctx, anon_vma_name(vma));
1da177e4
LT
432 if (*prev) {
433 vma = *prev;
434 goto success;
435 }
436
1da177e4 437 if (start != vma->vm_start) {
9760ebff 438 ret = split_vma(vmi, vma, start, 1);
1da177e4
LT
439 if (ret)
440 goto out;
441 }
442
443 if (end != vma->vm_end) {
9760ebff 444 ret = split_vma(vmi, vma, end, 0);
1da177e4
LT
445 if (ret)
446 goto out;
447 }
448
449success:
b291f000
NP
450 /*
451 * Keep track of amount of locked VM.
452 */
453 nr_pages = (end - start) >> PAGE_SHIFT;
34b67923 454 if (!(newflags & VM_LOCKED))
b291f000 455 nr_pages = -nr_pages;
34b67923 456 else if (oldflags & VM_LOCKED)
b155b4fd 457 nr_pages = 0;
b291f000
NP
458 mm->locked_vm += nr_pages;
459
1da177e4 460 /*
c1e8d7c6 461 * vm_flags is protected by the mmap_lock held in write mode.
1da177e4 462 * It's okay if try_to_unmap_one unmaps a page just after we
fc05f566 463 * set VM_LOCKED, populate_vma_page_range will bring it back.
1da177e4 464 */
34b67923
HD
465 if ((newflags & VM_LOCKED) && (oldflags & VM_LOCKED)) {
466 /* No work to do, and mlocking twice would be wrong */
60081bf1 467 vma_start_write(vma);
1c71222e 468 vm_flags_reset(vma, newflags);
34b67923
HD
469 } else {
470 mlock_vma_pages_range(vma, start, end, newflags);
471 }
1da177e4 472out:
b291f000 473 *prev = vma;
1da177e4
LT
474 return ret;
475}
476
1aab92ec
EM
477static int apply_vma_lock_flags(unsigned long start, size_t len,
478 vm_flags_t flags)
1da177e4
LT
479{
480 unsigned long nstart, end, tmp;
68d68ff6 481 struct vm_area_struct *vma, *prev;
37598f5a 482 VMA_ITERATOR(vmi, current->mm, start);
1da177e4 483
8fd9e488 484 VM_BUG_ON(offset_in_page(start));
fed067da 485 VM_BUG_ON(len != PAGE_ALIGN(len));
1da177e4
LT
486 end = start + len;
487 if (end < start)
488 return -EINVAL;
489 if (end == start)
490 return 0;
37598f5a 491 vma = vma_iter_load(&vmi);
33108b05 492 if (!vma)
1da177e4
LT
493 return -ENOMEM;
494
37598f5a 495 prev = vma_prev(&vmi);
1da177e4
LT
496 if (start > vma->vm_start)
497 prev = vma;
498
37598f5a
LH
499 nstart = start;
500 tmp = vma->vm_start;
501 for_each_vma_range(vmi, vma, end) {
2658f94d 502 int error;
37598f5a 503 vm_flags_t newflags;
1da177e4 504
37598f5a
LH
505 if (vma->vm_start != tmp)
506 return -ENOMEM;
1da177e4 507
e430a95a 508 newflags = vma->vm_flags & ~VM_LOCKED_MASK;
37598f5a 509 newflags |= flags;
1aab92ec 510 /* Here we know that vma->vm_start <= nstart < vma->vm_end. */
1da177e4
LT
511 tmp = vma->vm_end;
512 if (tmp > end)
513 tmp = end;
37598f5a 514 error = mlock_fixup(&vmi, vma, &prev, nstart, tmp, newflags);
1da177e4 515 if (error)
2658f94d
LH
516 return error;
517 tmp = vma_iter_end(&vmi);
1da177e4 518 nstart = tmp;
1da177e4 519 }
37598f5a 520
2658f94d 521 if (tmp < end)
37598f5a
LH
522 return -ENOMEM;
523
2658f94d 524 return 0;
1da177e4
LT
525}
526
0cf2f6f6
SG
527/*
528 * Go through vma areas and sum size of mlocked
529 * vma pages, as return value.
530 * Note deferred memory locking case(mlock2(,,MLOCK_ONFAULT)
531 * is also counted.
532 * Return value: previously mlocked page counts
533 */
0874bb49 534static unsigned long count_mm_mlocked_page_nr(struct mm_struct *mm,
0cf2f6f6
SG
535 unsigned long start, size_t len)
536{
537 struct vm_area_struct *vma;
0874bb49 538 unsigned long count = 0;
33108b05
MWO
539 unsigned long end;
540 VMA_ITERATOR(vmi, mm, start);
0cf2f6f6 541
33108b05
MWO
542 /* Don't overflow past ULONG_MAX */
543 if (unlikely(ULONG_MAX - len < start))
544 end = ULONG_MAX;
545 else
546 end = start + len;
66071896 547
33108b05 548 for_each_vma_range(vmi, vma, end) {
0cf2f6f6
SG
549 if (vma->vm_flags & VM_LOCKED) {
550 if (start > vma->vm_start)
551 count -= (start - vma->vm_start);
33108b05
MWO
552 if (end < vma->vm_end) {
553 count += end - vma->vm_start;
0cf2f6f6
SG
554 break;
555 }
556 count += vma->vm_end - vma->vm_start;
557 }
558 }
559
560 return count >> PAGE_SHIFT;
561}
562
ebcbc6ea
HD
563/*
564 * convert get_user_pages() return value to posix mlock() error
565 */
566static int __mlock_posix_error_return(long retval)
567{
568 if (retval == -EFAULT)
569 retval = -ENOMEM;
570 else if (retval == -ENOMEM)
571 retval = -EAGAIN;
572 return retval;
573}
574
dc0ef0df 575static __must_check int do_mlock(unsigned long start, size_t len, vm_flags_t flags)
1da177e4
LT
576{
577 unsigned long locked;
578 unsigned long lock_limit;
579 int error = -ENOMEM;
580
057d3389
AK
581 start = untagged_addr(start);
582
1da177e4
LT
583 if (!can_do_mlock())
584 return -EPERM;
585
8fd9e488 586 len = PAGE_ALIGN(len + (offset_in_page(start)));
1da177e4
LT
587 start &= PAGE_MASK;
588
59e99e5b 589 lock_limit = rlimit(RLIMIT_MEMLOCK);
1da177e4 590 lock_limit >>= PAGE_SHIFT;
1f1cd705
DB
591 locked = len >> PAGE_SHIFT;
592
d8ed45c5 593 if (mmap_write_lock_killable(current->mm))
dc0ef0df 594 return -EINTR;
1f1cd705
DB
595
596 locked += current->mm->locked_vm;
0cf2f6f6
SG
597 if ((locked > lock_limit) && (!capable(CAP_IPC_LOCK))) {
598 /*
599 * It is possible that the regions requested intersect with
600 * previously mlocked areas, that part area in "mm->locked_vm"
601 * should not be counted to new mlock increment count. So check
602 * and adjust locked count if necessary.
603 */
604 locked -= count_mm_mlocked_page_nr(current->mm,
605 start, len);
606 }
1da177e4
LT
607
608 /* check against resource limits */
609 if ((locked <= lock_limit) || capable(CAP_IPC_LOCK))
1aab92ec 610 error = apply_vma_lock_flags(start, len, flags);
1f1cd705 611
d8ed45c5 612 mmap_write_unlock(current->mm);
c561259c
KS
613 if (error)
614 return error;
615
616 error = __mm_populate(start, len, 0);
617 if (error)
618 return __mlock_posix_error_return(error);
619 return 0;
1da177e4
LT
620}
621
1aab92ec
EM
622SYSCALL_DEFINE2(mlock, unsigned long, start, size_t, len)
623{
624 return do_mlock(start, len, VM_LOCKED);
625}
626
a8ca5d0e
EM
627SYSCALL_DEFINE3(mlock2, unsigned long, start, size_t, len, int, flags)
628{
b0f205c2
EM
629 vm_flags_t vm_flags = VM_LOCKED;
630
631 if (flags & ~MLOCK_ONFAULT)
a8ca5d0e
EM
632 return -EINVAL;
633
b0f205c2
EM
634 if (flags & MLOCK_ONFAULT)
635 vm_flags |= VM_LOCKONFAULT;
636
637 return do_mlock(start, len, vm_flags);
a8ca5d0e
EM
638}
639
6a6160a7 640SYSCALL_DEFINE2(munlock, unsigned long, start, size_t, len)
1da177e4
LT
641{
642 int ret;
643
057d3389
AK
644 start = untagged_addr(start);
645
8fd9e488 646 len = PAGE_ALIGN(len + (offset_in_page(start)));
1da177e4 647 start &= PAGE_MASK;
1f1cd705 648
d8ed45c5 649 if (mmap_write_lock_killable(current->mm))
dc0ef0df 650 return -EINTR;
1aab92ec 651 ret = apply_vma_lock_flags(start, len, 0);
d8ed45c5 652 mmap_write_unlock(current->mm);
1f1cd705 653
1da177e4
LT
654 return ret;
655}
656
b0f205c2
EM
657/*
658 * Take the MCL_* flags passed into mlockall (or 0 if called from munlockall)
659 * and translate into the appropriate modifications to mm->def_flags and/or the
660 * flags for all current VMAs.
661 *
662 * There are a couple of subtleties with this. If mlockall() is called multiple
663 * times with different flags, the values do not necessarily stack. If mlockall
664 * is called once including the MCL_FUTURE flag and then a second time without
665 * it, VM_LOCKED and VM_LOCKONFAULT will be cleared from mm->def_flags.
666 */
1aab92ec 667static int apply_mlockall_flags(int flags)
1da177e4 668{
37598f5a 669 VMA_ITERATOR(vmi, current->mm, 0);
68d68ff6 670 struct vm_area_struct *vma, *prev = NULL;
b0f205c2 671 vm_flags_t to_add = 0;
1da177e4 672
e430a95a 673 current->mm->def_flags &= ~VM_LOCKED_MASK;
b0f205c2 674 if (flags & MCL_FUTURE) {
09a9f1d2 675 current->mm->def_flags |= VM_LOCKED;
1aab92ec 676
b0f205c2
EM
677 if (flags & MCL_ONFAULT)
678 current->mm->def_flags |= VM_LOCKONFAULT;
679
680 if (!(flags & MCL_CURRENT))
681 goto out;
682 }
683
684 if (flags & MCL_CURRENT) {
685 to_add |= VM_LOCKED;
686 if (flags & MCL_ONFAULT)
687 to_add |= VM_LOCKONFAULT;
688 }
1da177e4 689
37598f5a 690 for_each_vma(vmi, vma) {
ca16d140 691 vm_flags_t newflags;
1da177e4 692
e430a95a 693 newflags = vma->vm_flags & ~VM_LOCKED_MASK;
b0f205c2 694 newflags |= to_add;
1da177e4
LT
695
696 /* Ignore errors */
37598f5a
LH
697 mlock_fixup(&vmi, vma, &prev, vma->vm_start, vma->vm_end,
698 newflags);
50d4fb78 699 cond_resched();
1da177e4
LT
700 }
701out:
702 return 0;
703}
704
3480b257 705SYSCALL_DEFINE1(mlockall, int, flags)
1da177e4
LT
706{
707 unsigned long lock_limit;
86d2adcc 708 int ret;
1da177e4 709
dedca635
PS
710 if (!flags || (flags & ~(MCL_CURRENT | MCL_FUTURE | MCL_ONFAULT)) ||
711 flags == MCL_ONFAULT)
86d2adcc 712 return -EINVAL;
1da177e4 713
1da177e4 714 if (!can_do_mlock())
86d2adcc 715 return -EPERM;
1da177e4 716
59e99e5b 717 lock_limit = rlimit(RLIMIT_MEMLOCK);
1da177e4
LT
718 lock_limit >>= PAGE_SHIFT;
719
d8ed45c5 720 if (mmap_write_lock_killable(current->mm))
dc0ef0df 721 return -EINTR;
1f1cd705 722
dc0ef0df 723 ret = -ENOMEM;
1da177e4
LT
724 if (!(flags & MCL_CURRENT) || (current->mm->total_vm <= lock_limit) ||
725 capable(CAP_IPC_LOCK))
1aab92ec 726 ret = apply_mlockall_flags(flags);
d8ed45c5 727 mmap_write_unlock(current->mm);
bebeb3d6
ML
728 if (!ret && (flags & MCL_CURRENT))
729 mm_populate(0, TASK_SIZE);
86d2adcc 730
1da177e4
LT
731 return ret;
732}
733
3480b257 734SYSCALL_DEFINE0(munlockall)
1da177e4
LT
735{
736 int ret;
737
d8ed45c5 738 if (mmap_write_lock_killable(current->mm))
dc0ef0df 739 return -EINTR;
1aab92ec 740 ret = apply_mlockall_flags(0);
d8ed45c5 741 mmap_write_unlock(current->mm);
1da177e4
LT
742 return ret;
743}
744
745/*
746 * Objects with different lifetime than processes (SHM_LOCK and SHM_HUGETLB
747 * shm segments) get accounted against the user_struct instead.
748 */
749static DEFINE_SPINLOCK(shmlock_user_lock);
750
d7c9e99a 751int user_shm_lock(size_t size, struct ucounts *ucounts)
1da177e4
LT
752{
753 unsigned long lock_limit, locked;
d7c9e99a 754 long memlock;
1da177e4
LT
755 int allowed = 0;
756
757 locked = (size + PAGE_SIZE - 1) >> PAGE_SHIFT;
59e99e5b 758 lock_limit = rlimit(RLIMIT_MEMLOCK);
e97824ff
ML
759 if (lock_limit != RLIM_INFINITY)
760 lock_limit >>= PAGE_SHIFT;
1da177e4 761 spin_lock(&shmlock_user_lock);
d7c9e99a
AG
762 memlock = inc_rlimit_ucounts(ucounts, UCOUNT_RLIMIT_MEMLOCK, locked);
763
e97824ff 764 if ((memlock == LONG_MAX || memlock > lock_limit) && !capable(CAP_IPC_LOCK)) {
d7c9e99a
AG
765 dec_rlimit_ucounts(ucounts, UCOUNT_RLIMIT_MEMLOCK, locked);
766 goto out;
767 }
768 if (!get_ucounts(ucounts)) {
769 dec_rlimit_ucounts(ucounts, UCOUNT_RLIMIT_MEMLOCK, locked);
5c2a956c 770 allowed = 0;
1da177e4 771 goto out;
d7c9e99a 772 }
1da177e4
LT
773 allowed = 1;
774out:
775 spin_unlock(&shmlock_user_lock);
776 return allowed;
777}
778
d7c9e99a 779void user_shm_unlock(size_t size, struct ucounts *ucounts)
1da177e4
LT
780{
781 spin_lock(&shmlock_user_lock);
d7c9e99a 782 dec_rlimit_ucounts(ucounts, UCOUNT_RLIMIT_MEMLOCK, (size + PAGE_SIZE - 1) >> PAGE_SHIFT);
1da177e4 783 spin_unlock(&shmlock_user_lock);
d7c9e99a 784 put_ucounts(ucounts);
1da177e4 785}