sgx_framework.c 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375
  1. /* -*- mode:c; c-file-style:"k&r"; c-basic-offset: 4; tab-width:4; indent-tabs-mode:nil; mode:auto-fill; fill-column:78; -*- */
  2. /* vim: set ts=4 sw=4 et tw=78 fo=cqt wm=0: */
  3. #include <pal_linux.h>
  4. #include <pal_rtld.h>
  5. #include "sgx_internal.h"
  6. #include "sgx_arch.h"
  7. #include "sgx_enclave.h"
  8. #include "graphene-sgx.h"
  9. #include <asm/errno.h>
  10. int gsgx_device = -1;
  11. int isgx_device = -1;
  12. #define ISGX_FILE "/dev/isgx"
  13. void * zero_page;
  14. int open_gsgx(void)
  15. {
  16. gsgx_device = INLINE_SYSCALL(open, 3, GSGX_FILE, O_RDWR, 0);
  17. if (IS_ERR(gsgx_device))
  18. return -ERRNO(gsgx_device);
  19. isgx_device = INLINE_SYSCALL(open, 3, ISGX_FILE, O_RDWR, 0);
  20. if (IS_ERR(isgx_device))
  21. return -ERRNO(isgx_device);
  22. return 0;
  23. }
  24. int read_enclave_token(int token_file, sgx_arch_token_t * token)
  25. {
  26. struct stat stat;
  27. int ret;
  28. ret = INLINE_SYSCALL(fstat, 2, token_file, &stat);
  29. if (IS_ERR(ret))
  30. return -ERRNO(ret);
  31. if (stat.st_size != sizeof(sgx_arch_token_t)) {
  32. SGX_DBG(DBG_I, "size of token size does not match\n");
  33. return -EINVAL;
  34. }
  35. int bytes = INLINE_SYSCALL(read, 3, token_file, token, sizeof(sgx_arch_token_t));
  36. if (IS_ERR(bytes))
  37. return -ERRNO(bytes);
  38. return 0;
  39. }
  40. int read_enclave_sigstruct(int sigfile, sgx_arch_sigstruct_t * sig)
  41. {
  42. struct stat stat;
  43. int ret;
  44. ret = INLINE_SYSCALL(fstat, 2, sigfile, &stat);
  45. if (IS_ERR(ret))
  46. return -ERRNO(ret);
  47. if (stat.st_size < sizeof(sgx_arch_sigstruct_t)) {
  48. SGX_DBG(DBG_I, "size of sigstruct size does not match\n");
  49. return -EINVAL;
  50. }
  51. int bytes = INLINE_SYSCALL(read, 3, sigfile, sig, sizeof(sgx_arch_sigstruct_t));
  52. if (IS_ERR(bytes))
  53. return -ERRNO(bytes);
  54. return 0;
  55. }
  56. #define SE_LEAF 0x12
  57. static inline void cpuid(uint32_t leaf, uint32_t subleaf, uint32_t info[4])
  58. {
  59. asm volatile("cpuid"
  60. : "=a"(info[0]),
  61. "=b"(info[1]),
  62. "=c"(info[2]),
  63. "=d"(info[3])
  64. : "a"(leaf),
  65. "c"(subleaf));
  66. }
  67. static size_t get_ssaframesize (uint64_t xfrm)
  68. {
  69. uint32_t cpuinfo[4];
  70. uint64_t xfrm_ex;
  71. int xsave_size = 0;
  72. cpuid(SE_LEAF, 1, cpuinfo);
  73. xfrm_ex = ((uint64_t) cpuinfo[3] << 32) + cpuinfo[2];
  74. for (int i = 2; i < 64; i++)
  75. if ((xfrm & (1 << i)) || (xfrm_ex & (1 << i))) {
  76. cpuid(0xd, i, cpuinfo);
  77. if (cpuinfo[0] + cpuinfo[1] > xsave_size)
  78. xsave_size = cpuinfo[0] + cpuinfo[1];
  79. }
  80. return ALLOC_ALIGNUP(xsave_size + sizeof(sgx_arch_gpr_t) + 1);
  81. }
  82. int check_wrfsbase_support (void)
  83. {
  84. if (gsgx_device == -1)
  85. return -EACCES;
  86. uint32_t cpuinfo[4];
  87. cpuid(7, 0, cpuinfo);
  88. if (!(cpuinfo[1] & 0x1))
  89. return 0;
  90. return 1;
  91. }
  92. int create_enclave(sgx_arch_secs_t * secs,
  93. unsigned long baseaddr,
  94. unsigned long size,
  95. sgx_arch_token_t * token)
  96. {
  97. int flags = MAP_SHARED;
  98. if (!zero_page) {
  99. zero_page = (void *)
  100. INLINE_SYSCALL(mmap, 6, NULL, pagesize,
  101. PROT_READ, MAP_PRIVATE|MAP_ANONYMOUS,
  102. -1, 0);
  103. if (IS_ERR_P(zero_page))
  104. return -ENOMEM;
  105. }
  106. memset(secs, 0, sizeof(sgx_arch_secs_t));
  107. secs->size = pagesize;
  108. while (secs->size < size)
  109. secs->size <<= 1;
  110. secs->ssaframesize = get_ssaframesize(token->attributes.xfrm) / pagesize;
  111. secs->miscselect = token->miscselect_mask;
  112. memcpy(&secs->attributes, &token->attributes,
  113. sizeof(sgx_arch_attributes_t));
  114. memcpy(&secs->mrenclave, &token->mrenclave, sizeof(sgx_arch_hash_t));
  115. memcpy(&secs->mrsigner, &token->mrsigner, sizeof(sgx_arch_hash_t));
  116. if (baseaddr) {
  117. secs->baseaddr = (uint64_t) baseaddr & ~(secs->size - 1);
  118. } else {
  119. secs->baseaddr = ENCLAVE_HIGH_ADDRESS;
  120. }
  121. uint64_t addr = INLINE_SYSCALL(mmap, 6, secs->baseaddr, secs->size,
  122. PROT_READ|PROT_WRITE|PROT_EXEC,
  123. flags|MAP_FIXED, isgx_device, 0);
  124. if (IS_ERR_P(addr)) {
  125. if (ERRNO_P(addr) == 1 && (flags | MAP_FIXED))
  126. pal_printf("Permission denied on mapping enclave. "
  127. "You may need to set sysctl vm.mmap_min_addr to zero\n");
  128. SGX_DBG(DBG_I, "enclave ECREATE failed in allocating EPC memory "
  129. "(errno = %d)\n", ERRNO_P(addr));
  130. return -ENOMEM;
  131. }
  132. secs->baseaddr = addr;
  133. #if SDK_DRIVER_VERSION >= KERNEL_VERSION(1, 8, 0)
  134. struct sgx_enclave_create param = {
  135. .src = (uint64_t) secs,
  136. };
  137. int ret = INLINE_SYSCALL(ioctl, 3, isgx_device, SGX_IOC_ENCLAVE_CREATE,
  138. &param);
  139. #else
  140. struct gsgx_enclave_create param = {
  141. .src = (uint64_t) secs,
  142. };
  143. int ret = INLINE_SYSCALL(ioctl, 3, gsgx_device, GSGX_IOCTL_ENCLAVE_CREATE,
  144. &param);
  145. #endif
  146. if (IS_ERR(ret)) {
  147. SGX_DBG(DBG_I, "enclave ECREATE failed in enclave creation ioctl - %d\n", ERRNO(ret));
  148. return -ERRNO(ret);
  149. }
  150. if (ret) {
  151. SGX_DBG(DBG_I, "enclave ECREATE failed - %d\n", ret);
  152. return -EPERM;
  153. }
  154. secs->attributes.flags |= SGX_FLAGS_INITIALIZED;
  155. SGX_DBG(DBG_I, "enclave created:\n");
  156. SGX_DBG(DBG_I, " base: 0x%016lx\n", secs->baseaddr);
  157. SGX_DBG(DBG_I, " size: 0x%016lx\n", secs->size);
  158. SGX_DBG(DBG_I, " attr: 0x%016lx\n", secs->attributes.flags);
  159. SGX_DBG(DBG_I, " xfrm: 0x%016lx\n", secs->attributes.xfrm);
  160. SGX_DBG(DBG_I, " ssaframesize: %ld\n", secs->ssaframesize);
  161. SGX_DBG(DBG_I, " isvprodid: 0x%08x\n", secs->isvprodid);
  162. SGX_DBG(DBG_I, " isvsvn: 0x%08x\n", secs->isvsvn);
  163. return 0;
  164. }
  165. int add_pages_to_enclave(sgx_arch_secs_t * secs,
  166. void * addr, void * user_addr,
  167. unsigned long size,
  168. enum sgx_page_type type, int prot,
  169. bool skip_eextend,
  170. const char * comment)
  171. {
  172. sgx_arch_secinfo_t secinfo;
  173. int ret;
  174. memset(&secinfo, 0, sizeof(sgx_arch_secinfo_t));
  175. switch (type) {
  176. case SGX_PAGE_SECS:
  177. return -EPERM;
  178. case SGX_PAGE_TCS:
  179. secinfo.flags |= SGX_SECINFO_FLAGS_TCS;
  180. break;
  181. case SGX_PAGE_REG:
  182. secinfo.flags |= SGX_SECINFO_FLAGS_REG;
  183. if (prot & PROT_READ)
  184. secinfo.flags |= SGX_SECINFO_FLAGS_R;
  185. if (prot & PROT_WRITE)
  186. secinfo.flags |= SGX_SECINFO_FLAGS_W;
  187. if (prot & PROT_EXEC)
  188. secinfo.flags |= SGX_SECINFO_FLAGS_X;
  189. break;
  190. }
  191. char p[4] = "---";
  192. const char * t = (type == SGX_PAGE_TCS) ? "TCS" : "REG";
  193. const char * m = skip_eextend ? "" : " measured";
  194. if (type == SGX_PAGE_REG) {
  195. if (prot & PROT_READ)
  196. p[0] = 'R';
  197. if (prot & PROT_WRITE)
  198. p[1] = 'W';
  199. if (prot & PROT_EXEC)
  200. p[2] = 'X';
  201. }
  202. if (size == pagesize)
  203. SGX_DBG(DBG_I, "adding page to enclave: %016lx [%s:%s] (%s)%s\n",
  204. addr, t, p, comment, m);
  205. else
  206. SGX_DBG(DBG_I, "adding pages to enclave: %016lx-%016lx [%s:%s] (%s)%s\n",
  207. addr, addr + size, t, p, comment, m);
  208. #if SDK_DRIVER_VERSION >= KERNEL_VERSION(1, 8, 0)
  209. struct sgx_enclave_add_page param = {
  210. .addr = secs->baseaddr + (uint64_t) addr,
  211. .src = (uint64_t) (user_addr ? : zero_page),
  212. .secinfo = (uint64_t) &secinfo,
  213. .mrmask = skip_eextend ? 0 : (uint16_t) -1,
  214. };
  215. uint64_t added_size = 0;
  216. while (added_size < size) {
  217. ret = INLINE_SYSCALL(ioctl, 3, isgx_device,
  218. SGX_IOC_ENCLAVE_ADD_PAGE, &param);
  219. if (IS_ERR(ret)) {
  220. SGX_DBG(DBG_I, "Enclave add page returned %d\n", ret);
  221. return -ERRNO(ret);
  222. }
  223. param.addr += pagesize;
  224. if (param.src != (uint64_t) zero_page) param.src += pagesize;
  225. added_size += pagesize;
  226. }
  227. #else
  228. struct gsgx_enclave_add_pages param = {
  229. .addr = secs->baseaddr + (uint64_t) addr,
  230. .user_addr = (uint64_t) user_addr,
  231. .size = size,
  232. .secinfo = (uint64_t) &secinfo,
  233. .flags = skip_eextend ? GSGX_ENCLAVE_ADD_PAGES_SKIP_EEXTEND : 0,
  234. };
  235. if (!user_addr) {
  236. param.user_addr = (unsigned long) zero_page;
  237. param.flags |= GSGX_ENCLAVE_ADD_PAGES_REPEAT_SRC;
  238. }
  239. ret = INLINE_SYSCALL(ioctl, 3, gsgx_device,
  240. GSGX_IOCTL_ENCLAVE_ADD_PAGES,
  241. &param);
  242. if (IS_ERR(ret)) {
  243. SGX_DBG(DBG_I, "Enclave add page returned %d\n", ret);
  244. return -ERRNO(ret);
  245. }
  246. #endif
  247. return 0;
  248. }
  249. int init_enclave(sgx_arch_secs_t * secs,
  250. sgx_arch_sigstruct_t * sigstruct,
  251. sgx_arch_token_t * token)
  252. {
  253. unsigned long enclave_valid_addr =
  254. secs->baseaddr + secs->size - pagesize;
  255. SGX_DBG(DBG_I, "enclave initializing:\n");
  256. SGX_DBG(DBG_I, " enclave id: 0x%016lx\n", enclave_valid_addr);
  257. SGX_DBG(DBG_I, " enclave hash:");
  258. for (int i = 0 ; i < sizeof(sgx_arch_hash_t) ; i++)
  259. SGX_DBG(DBG_I, " %02x", sigstruct->enclave_hash[i]);
  260. SGX_DBG(DBG_I, "\n");
  261. #if SDK_DRIVER_VERSION >= KERNEL_VERSION(1, 8, 0)
  262. struct sgx_enclave_init param = {
  263. .addr = enclave_valid_addr,
  264. .sigstruct = (uint64_t) sigstruct,
  265. .einittoken = (uint64_t) token,
  266. };
  267. int ret = INLINE_SYSCALL(ioctl, 3, isgx_device, SGX_IOC_ENCLAVE_INIT,
  268. &param);
  269. #else
  270. struct gsgx_enclave_init param = {
  271. .addr = enclave_valid_addr,
  272. .sigstruct = (uint64_t) sigstruct,
  273. .einittoken = (uint64_t) token,
  274. };
  275. int ret = INLINE_SYSCALL(ioctl, 3, gsgx_device, GSGX_IOCTL_ENCLAVE_INIT,
  276. &param);
  277. #endif
  278. if (IS_ERR(ret)) {
  279. return -ERRNO(ret);
  280. }
  281. if (ret) {
  282. const char * error;
  283. /* DEP 3/22/17: Try to improve error messages */
  284. switch(ret) {
  285. case SGX_INVALID_SIG_STRUCT:
  286. error = "Invalid SIGSTRUCT"; break;
  287. case SGX_INVALID_ATTRIBUTE:
  288. error = "Invalid enclave attribute"; break;
  289. case SGX_INVALID_MEASUREMENT:
  290. error = "Invalid measurement"; break;
  291. case SGX_INVALID_SIGNATURE:
  292. error = "Invalid signature"; break;
  293. case SGX_INVALID_LICENSE:
  294. error = "Invalid EINIT token"; break;
  295. case SGX_INVALID_CPUSVN:
  296. error = "Invalid CPU SVN"; break;
  297. default:
  298. error = "Unknown reason"; break;
  299. }
  300. SGX_DBG(DBG_I, "enclave EINIT failed - %s\n", error);
  301. return -EPERM;
  302. }
  303. return 0;
  304. }
  305. int destroy_enclave(void * base_addr, size_t length)
  306. {
  307. SGX_DBG(DBG_I, "destroying enclave...\n");
  308. int ret = INLINE_SYSCALL(munmap, 2, base_addr, length);
  309. if (IS_ERR(ret)) {
  310. SGX_DBG(DBG_I, "enclave EDESTROY failed\n");
  311. return -ERRNO(ret);
  312. }
  313. return 0;
  314. }