x64 0.16.2

x86_64 support with LA57 (5-level paging) for 57-bit virtual addresses
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116

//! This module provides helpers for Supervisor Mode Access Prevention (SMAP).
//!
//! SMAP is a security feature that helps prevent accidental accesses to user
//! memory by a kernel. This feature can be enabled by setting
//! [`Cr4Flags::SUPERVISOR_MODE_ACCESS_PREVENTION`]. Once enabled, accesses to
//! user memory by the kernel will generate a page fault (#PF) unless the
//! [`RFlags::ALIGNMENT_CHECK`] bit is set.
//!
//! The `stac` and `clac` instructions can be used to efficiently update the
//! `ALIGNMENT_CHECK` flag.
//!
//! Not all processors support SMAP.

use core::arch::asm;

use bit_field::BitField;

#[cfg(doc)]
use crate::registers::control::Cr4Flags;
use crate::registers::rflags::{self, RFlags};

/// A helper type that provides SMAP related methods.
///
/// This type can only be instantiated if SMAP is supported by the CPU.
#[derive(Debug, Clone, Copy)]
pub struct Smap(());

impl Smap {
    /// Checks if the CPU supports SMAP and returns a [`Smap`] instance if
    /// supported or `None` if not.
    ///
    /// This function uses CPUID to determine if SMAP is supported by the CPU.
    ///
    /// Note that this function does not check whether SMAP has be enabled in
    /// CR4.
    pub fn new() -> Option<Self> {
        // Check if the CPU supports `stac` and `clac`.
        #[allow(unused_unsafe)]
        let cpuid = unsafe { core::arch::x86_64::__cpuid(7) };
        if cpuid.ebx.get_bit(20) {
            Some(Self(()))
        } else {
            None
        }
    }

    /// Returns a [`Smap`] instance.
    ///
    /// # Safety
    ///
    /// The caller must ensure that the CPU supports SMAP.
    #[inline]
    pub const unsafe fn new_unchecked() -> Self {
        Self(())
    }

    /// Returns whether the [`RFlags::ALIGNMENT_CHECK`] flag is unset.
    ///
    /// Note that SMAP also requires
    /// [`Cr4Flags::SUPERVISOR_MODE_ACCESS_PREVENTION`] to be set. This
    /// function does not check CR4 because doing so is much slower than just
    /// checking the AC flag.
    #[inline]
    pub fn is_enabled(self) -> bool {
        !rflags::read().contains(RFlags::ALIGNMENT_CHECK)
    }

    /// Disable SMAP access checks by setting [`RFlags::ALIGNMENT_CHECK`] using
    /// the `stac` instruction.
    ///
    /// This will do nothing if `SMAP` access checks are already disabled.
    #[doc(alias = "stac")]
    #[inline]
    pub fn disable(self) {
        // Technically this modifies the AC flag, but the Rust compiler doesn't
        // care about that, so it's fine to use preserves_flags.
        unsafe {
            asm!("stac", options(nomem, nostack, preserves_flags));
        }
    }

    /// Enable SMAP access checks by clearing [`RFlags::ALIGNMENT_CHECK`] using
    /// the `clac` instruction.
    ///
    /// This will do nothing if `SMAP` access checks are already enabled.
    #[doc(alias = "clac")]
    #[inline]
    pub fn enable(self) {
        // Technically this modifies the AC flag, but the Rust compiler doesn't
        // care about that, so it's fine to use preserves_flags.
        unsafe {
            asm!("clac", options(nomem, nostack, preserves_flags));
        }
    }

    /// Call a closure with SMAP disabled.
    ///
    /// This function disables SMAP before calling the closure and restores the
    /// SMAP state afterwards.
    pub fn without_smap<F, R>(self, f: F) -> R
    where
        F: FnOnce() -> R,
    {
        let was_enabled = self.is_enabled();

        self.disable();

        let result = f();

        if was_enabled {
            self.enable();
        }

        result
    }
}