riscv: add a data fence for CMODX in the kernel mode

RISC-V spec explicitly calls out that a local fence.i is not enough for
the code modification to be visble from a remote hart. In fact, it
states:

To make a store to instruction memory visible to all RISC-V harts, the
writing hart also has to execute a data FENCE before requesting that all
remote RISC-V harts execute a FENCE.I.

Although current riscv drivers for IPI use ordered MMIO when sending IPIs
in order to synchronize the action between previous csd writes, riscv
does not restrict itself to any particular flavor of IPI. Any driver or
firmware implementation that does not order data writes before the IPI
may pose a risk for code-modifying race.

Thus, add a fence here to order data writes before making the IPI.

Signed-off-by: Andy Chiu <andybnac@gmail.com>
Reviewed-by: Björn Töpel <bjorn@rivosinc.com>
Link: https://lore.kernel.org/r/20250407180838.42877-8-andybnac@gmail.com
Signed-off-by: Alexandre Ghiti <alexghiti@rivosinc.com>
Signed-off-by: Palmer Dabbelt <palmer@dabbelt.com>

diff --git a/arch/riscv/mm/cacheflush.c b/arch/riscv/mm/cacheflush.c
index b8167272988723ecdda97a6aa528aab7cd55eada..b2e4b81763f8882eaced2ec158ea92388330c53f 100644 (file)
--- a/arch/riscv/mm/cacheflush.c
+++ b/arch/riscv/mm/cacheflush.c
@@ -24,7 +24,20 @@ void flush_icache_all(void)
 
        if (num_online_cpus() < 2)
                return;
-       else if (riscv_use_sbi_for_rfence())
+
+       /*
+        * Make sure all previous writes to the D$ are ordered before making
+        * the IPI. The RISC-V spec states that a hart must execute a data fence
+        * before triggering a remote fence.i in order to make the modification
+        * visable for remote harts.
+        *
+        * IPIs on RISC-V are triggered by MMIO writes to either CLINT or
+        * S-IMSIC, so the fence ensures previous data writes "happen before"
+        * the MMIO.
+        */
+       RISCV_FENCE(w, o);
+
+       if (riscv_use_sbi_for_rfence())
                sbi_remote_fence_i(NULL);
        else
                on_each_cpu(ipi_remote_fence_i, NULL, 1);