Hello,
I got a little problem in ARMv8's MMU.
Obviously, when we access the kernel virtual address in application such as :
unsigned long *p = 0xffffffff28008000; unsigned long x = *p; *p = 1;
The application will be killed by kernel and then reports "segment fault".
But What the actual action does by MMU in ARMv8? When does it find the permission fault?
In the first time it gets the VA? OR when MMU obtains the value from the TTBR1_EL1? OR at the time when MMU translates the table and gets some descriptor which determines the permission?
Besides the check of ESR_EL1 as from Martin, another thought is to make sure that your AP bits on the right page table entry for this virtual address. there are some unused kernel VA holes . fffffe0000000000 - ffffffffffffffff (2TB ) guard region. and your VA is under this region.
more info: www.kernel.org/.../memory.rst