5 * This work is licensed under the terms of the GNU GPL, version 2. See
6 * the COPYING file in the top-level directory.
9 #include <linux/types.h>
10 #include <linux/list.h>
11 #include <linux/mutex.h>
12 #include <linux/spinlock.h>
13 #include <linux/signal.h>
14 #include <linux/sched.h>
16 #include <linux/preempt.h>
17 #include <asm/signal.h>
19 #include <linux/kvm.h>
20 #include <linux/kvm_para.h>
22 #define CR3_PAE_RESERVED_BITS ((X86_CR3_PWT | X86_CR3_PCD) - 1)
23 #define CR3_NONPAE_RESERVED_BITS ((PAGE_SIZE-1) & ~(X86_CR3_PWT | X86_CR3_PCD))
24 #define CR3_L_MODE_RESERVED_BITS (CR3_NONPAE_RESERVED_BITS|0xFFFFFF0000000000ULL)
26 #define KVM_GUEST_CR0_MASK \
27 (X86_CR0_PG | X86_CR0_PE | X86_CR0_WP | X86_CR0_NE \
28 | X86_CR0_NW | X86_CR0_CD)
29 #define KVM_VM_CR0_ALWAYS_ON \
30 (X86_CR0_PG | X86_CR0_PE | X86_CR0_WP | X86_CR0_NE | X86_CR0_TS \
32 #define KVM_GUEST_CR4_MASK \
33 (X86_CR4_VME | X86_CR4_PSE | X86_CR4_PAE | X86_CR4_PGE | X86_CR4_VMXE)
34 #define KVM_PMODE_VM_CR4_ALWAYS_ON (X86_CR4_PAE | X86_CR4_VMXE)
35 #define KVM_RMODE_VM_CR4_ALWAYS_ON (X86_CR4_VME | X86_CR4_PAE | X86_CR4_VMXE)
37 #define INVALID_PAGE (~(hpa_t)0)
38 #define UNMAPPED_GVA (~(gpa_t)0)
40 #define KVM_MAX_VCPUS 4
41 #define KVM_ALIAS_SLOTS 4
42 #define KVM_MEMORY_SLOTS 8
43 #define KVM_NUM_MMU_PAGES 1024
44 #define KVM_MIN_FREE_MMU_PAGES 5
45 #define KVM_REFILL_PAGES 25
46 #define KVM_MAX_CPUID_ENTRIES 40
57 #define SELECTOR_TI_MASK (1 << 2)
58 #define SELECTOR_RPL_MASK 0x03
62 #define KVM_PIO_PAGE_OFFSET 1
65 * vcpu->requests bit members
67 #define KVM_TLB_FLUSH 0
72 * gva - guest virtual address
73 * gpa - guest physical address
74 * gfn - guest frame number
75 * hva - host virtual address
76 * hpa - host physical address
77 * hfn - host frame number
80 typedef unsigned long gva_t;
82 typedef unsigned long gfn_t;
84 typedef unsigned long hva_t;
86 typedef unsigned long hfn_t;
88 #define NR_PTE_CHAIN_ENTRIES 5
90 struct kvm_pte_chain {
91 u64 *parent_ptes[NR_PTE_CHAIN_ENTRIES];
92 struct hlist_node link;
96 * kvm_mmu_page_role, below, is defined as:
98 * bits 0:3 - total guest paging levels (2-4, or zero for real mode)
99 * bits 4:7 - page table level for this shadow (1-4)
100 * bits 8:9 - page table quadrant for 2-level guests
101 * bit 16 - "metaphysical" - gfn is not a real page (huge page/real mode)
102 * bits 17:19 - "access" - the user, writable, and nx bits of a huge page pde
104 union kvm_mmu_page_role {
107 unsigned glevels : 4;
109 unsigned quadrant : 2;
110 unsigned pad_for_nice_hex_output : 6;
111 unsigned metaphysical : 1;
112 unsigned hugepage_access : 3;
116 struct kvm_mmu_page {
117 struct list_head link;
118 struct hlist_node hash_link;
121 * The following two entries are used to key the shadow page in the
125 union kvm_mmu_page_role role;
128 unsigned long slot_bitmap; /* One bit set per slot which has memory
129 * in this shadow page.
131 int multimapped; /* More than one parent_pte? */
132 int root_count; /* Currently serving as active root */
134 u64 *parent_pte; /* !multimapped */
135 struct hlist_head parent_ptes; /* multimapped, kvm_pte_chain */
140 extern struct kmem_cache *kvm_vcpu_cache;
143 * x86 supports 3 paging modes (4-level 64-bit, 3-level 64-bit, and 2-level
144 * 32-bit). The kvm_mmu structure abstracts the details of the current mmu
148 void (*new_cr3)(struct kvm_vcpu *vcpu);
149 int (*page_fault)(struct kvm_vcpu *vcpu, gva_t gva, u32 err);
150 void (*free)(struct kvm_vcpu *vcpu);
151 gpa_t (*gva_to_gpa)(struct kvm_vcpu *vcpu, gva_t gva);
154 int shadow_root_level;
159 #define KVM_NR_MEM_OBJS 20
161 struct kvm_mmu_memory_cache {
163 void *objects[KVM_NR_MEM_OBJS];
167 * We don't want allocation failures within the mmu code, so we preallocate
168 * enough memory for a single page fault in a cache.
170 struct kvm_guest_debug {
209 struct kvm_pio_request {
212 struct page *guest_pages[2];
213 unsigned guest_page_offset;
232 u32 irq_window_exits;
235 u32 request_irq_exits;
241 struct kvm_io_device {
242 void (*read)(struct kvm_io_device *this,
246 void (*write)(struct kvm_io_device *this,
250 int (*in_range)(struct kvm_io_device *this, gpa_t addr);
251 void (*destructor)(struct kvm_io_device *this);
256 static inline void kvm_iodevice_read(struct kvm_io_device *dev,
261 dev->read(dev, addr, len, val);
264 static inline void kvm_iodevice_write(struct kvm_io_device *dev,
269 dev->write(dev, addr, len, val);
272 static inline int kvm_iodevice_inrange(struct kvm_io_device *dev, gpa_t addr)
274 return dev->in_range(dev, addr);
277 static inline void kvm_iodevice_destructor(struct kvm_io_device *dev)
280 dev->destructor(dev);
284 * It would be nice to use something smarter than a linear search, TBD...
285 * Thankfully we dont expect many devices to register (famous last words :),
286 * so until then it will suffice. At least its abstracted so we can change
291 #define NR_IOBUS_DEVS 6
292 struct kvm_io_device *devs[NR_IOBUS_DEVS];
295 void kvm_io_bus_init(struct kvm_io_bus *bus);
296 void kvm_io_bus_destroy(struct kvm_io_bus *bus);
297 struct kvm_io_device *kvm_io_bus_find_dev(struct kvm_io_bus *bus, gpa_t addr);
298 void kvm_io_bus_register_dev(struct kvm_io_bus *bus,
299 struct kvm_io_device *dev);
303 struct preempt_notifier preempt_notifier;
309 int interrupt_window_open;
311 unsigned long requests;
312 unsigned long irq_summary; /* bit vector: 1 per word in irq_pending */
313 DECLARE_BITMAP(irq_pending, KVM_NR_INTERRUPTS);
314 unsigned long regs[NR_VCPU_REGS]; /* for rsp: vcpu_load_rsp_rip() */
315 unsigned long rip; /* needs vcpu_load_rsp_rip() */
320 gpa_t para_state_gpa;
321 struct page *para_state_page;
325 u64 pdptrs[4]; /* pae */
328 struct kvm_lapic *apic; /* kernel irqchip context */
329 u64 ia32_misc_enable_msr;
333 struct kvm_mmu_memory_cache mmu_pte_chain_cache;
334 struct kvm_mmu_memory_cache mmu_rmap_desc_cache;
335 struct kvm_mmu_memory_cache mmu_page_cache;
336 struct kvm_mmu_memory_cache mmu_page_header_cache;
338 gfn_t last_pt_write_gfn;
339 int last_pt_write_count;
341 struct kvm_guest_debug guest_debug;
343 struct i387_fxsave_struct host_fx_image;
344 struct i387_fxsave_struct guest_fx_image;
346 int guest_fpu_loaded;
349 int mmio_read_completed;
352 unsigned char mmio_data[8];
353 gpa_t mmio_phys_addr;
354 gva_t mmio_fault_cr2;
355 struct kvm_pio_request pio;
357 wait_queue_head_t wq;
362 struct kvm_stat stat;
367 struct kvm_save_segment {
372 } tr, es, ds, fs, gs;
374 int halt_request; /* real mode on Intel only */
377 struct kvm_cpuid_entry cpuid_entries[KVM_MAX_CPUID_ENTRIES];
380 struct kvm_mem_alias {
382 unsigned long npages;
386 struct kvm_memory_slot {
388 unsigned long npages;
390 struct page **phys_mem;
391 unsigned long *dirty_bitmap;
395 struct mutex lock; /* protects everything except vcpus */
397 struct kvm_mem_alias aliases[KVM_ALIAS_SLOTS];
399 struct kvm_memory_slot memslots[KVM_MEMORY_SLOTS];
401 * Hash table of struct kvm_mmu_page.
403 struct list_head active_mmu_pages;
404 int n_free_mmu_pages;
405 struct hlist_head mmu_page_hash[KVM_NUM_MMU_PAGES];
406 struct kvm_vcpu *vcpus[KVM_MAX_VCPUS];
407 int memory_config_version;
409 unsigned long rmap_overflow;
410 struct list_head vm_list;
412 struct kvm_io_bus mmio_bus;
413 struct kvm_io_bus pio_bus;
414 struct kvm_pic *vpic;
415 struct kvm_ioapic *vioapic;
416 int round_robin_prev_vcpu;
419 static inline struct kvm_pic *pic_irqchip(struct kvm *kvm)
424 static inline struct kvm_ioapic *ioapic_irqchip(struct kvm *kvm)
429 static inline int irqchip_in_kernel(struct kvm *kvm)
431 return pic_irqchip(kvm) != 0;
434 struct descriptor_table {
437 } __attribute__((packed));
439 struct kvm_arch_ops {
440 int (*cpu_has_kvm_support)(void); /* __init */
441 int (*disabled_by_bios)(void); /* __init */
442 void (*hardware_enable)(void *dummy); /* __init */
443 void (*hardware_disable)(void *dummy);
444 void (*check_processor_compatibility)(void *rtn);
445 int (*hardware_setup)(void); /* __init */
446 void (*hardware_unsetup)(void); /* __exit */
448 /* Create, but do not attach this VCPU */
449 struct kvm_vcpu *(*vcpu_create)(struct kvm *kvm, unsigned id);
450 void (*vcpu_free)(struct kvm_vcpu *vcpu);
452 void (*vcpu_load)(struct kvm_vcpu *vcpu, int cpu);
453 void (*vcpu_put)(struct kvm_vcpu *vcpu);
454 void (*vcpu_decache)(struct kvm_vcpu *vcpu);
456 int (*set_guest_debug)(struct kvm_vcpu *vcpu,
457 struct kvm_debug_guest *dbg);
458 int (*get_msr)(struct kvm_vcpu *vcpu, u32 msr_index, u64 *pdata);
459 int (*set_msr)(struct kvm_vcpu *vcpu, u32 msr_index, u64 data);
460 u64 (*get_segment_base)(struct kvm_vcpu *vcpu, int seg);
461 void (*get_segment)(struct kvm_vcpu *vcpu,
462 struct kvm_segment *var, int seg);
463 void (*set_segment)(struct kvm_vcpu *vcpu,
464 struct kvm_segment *var, int seg);
465 void (*get_cs_db_l_bits)(struct kvm_vcpu *vcpu, int *db, int *l);
466 void (*decache_cr4_guest_bits)(struct kvm_vcpu *vcpu);
467 void (*set_cr0)(struct kvm_vcpu *vcpu, unsigned long cr0);
468 void (*set_cr3)(struct kvm_vcpu *vcpu, unsigned long cr3);
469 void (*set_cr4)(struct kvm_vcpu *vcpu, unsigned long cr4);
470 void (*set_efer)(struct kvm_vcpu *vcpu, u64 efer);
471 void (*get_idt)(struct kvm_vcpu *vcpu, struct descriptor_table *dt);
472 void (*set_idt)(struct kvm_vcpu *vcpu, struct descriptor_table *dt);
473 void (*get_gdt)(struct kvm_vcpu *vcpu, struct descriptor_table *dt);
474 void (*set_gdt)(struct kvm_vcpu *vcpu, struct descriptor_table *dt);
475 unsigned long (*get_dr)(struct kvm_vcpu *vcpu, int dr);
476 void (*set_dr)(struct kvm_vcpu *vcpu, int dr, unsigned long value,
478 void (*cache_regs)(struct kvm_vcpu *vcpu);
479 void (*decache_regs)(struct kvm_vcpu *vcpu);
480 unsigned long (*get_rflags)(struct kvm_vcpu *vcpu);
481 void (*set_rflags)(struct kvm_vcpu *vcpu, unsigned long rflags);
483 void (*invlpg)(struct kvm_vcpu *vcpu, gva_t addr);
484 void (*tlb_flush)(struct kvm_vcpu *vcpu);
485 void (*inject_page_fault)(struct kvm_vcpu *vcpu,
486 unsigned long addr, u32 err_code);
488 void (*inject_gp)(struct kvm_vcpu *vcpu, unsigned err_code);
490 int (*run)(struct kvm_vcpu *vcpu, struct kvm_run *run);
491 void (*skip_emulated_instruction)(struct kvm_vcpu *vcpu);
492 void (*patch_hypercall)(struct kvm_vcpu *vcpu,
493 unsigned char *hypercall_addr);
494 int (*get_irq)(struct kvm_vcpu *vcpu);
495 void (*set_irq)(struct kvm_vcpu *vcpu, int vec);
498 extern struct kvm_arch_ops *kvm_arch_ops;
500 /* The guest did something we don't support. */
501 #define pr_unimpl(vcpu, fmt, ...) \
503 if (printk_ratelimit()) \
504 printk(KERN_ERR "kvm: %i: cpu%i " fmt, \
505 current->tgid, (vcpu)->vcpu_id , ## __VA_ARGS__); \
508 #define kvm_printf(kvm, fmt ...) printk(KERN_DEBUG fmt)
509 #define vcpu_printf(vcpu, fmt...) kvm_printf(vcpu->kvm, fmt)
511 int kvm_vcpu_init(struct kvm_vcpu *vcpu, struct kvm *kvm, unsigned id);
512 void kvm_vcpu_uninit(struct kvm_vcpu *vcpu);
514 int kvm_init_arch(struct kvm_arch_ops *ops, unsigned int vcpu_size,
515 struct module *module);
516 void kvm_exit_arch(void);
518 int kvm_mmu_module_init(void);
519 void kvm_mmu_module_exit(void);
521 void kvm_mmu_destroy(struct kvm_vcpu *vcpu);
522 int kvm_mmu_create(struct kvm_vcpu *vcpu);
523 int kvm_mmu_setup(struct kvm_vcpu *vcpu);
525 int kvm_mmu_reset_context(struct kvm_vcpu *vcpu);
526 void kvm_mmu_slot_remove_write_access(struct kvm *kvm, int slot);
527 void kvm_mmu_zap_all(struct kvm *kvm);
529 hpa_t gpa_to_hpa(struct kvm_vcpu *vcpu, gpa_t gpa);
530 #define HPA_MSB ((sizeof(hpa_t) * 8) - 1)
531 #define HPA_ERR_MASK ((hpa_t)1 << HPA_MSB)
532 static inline int is_error_hpa(hpa_t hpa) { return hpa >> HPA_MSB; }
533 hpa_t gva_to_hpa(struct kvm_vcpu *vcpu, gva_t gva);
534 struct page *gva_to_page(struct kvm_vcpu *vcpu, gva_t gva);
536 void kvm_emulator_want_group7_invlpg(void);
538 extern hpa_t bad_page_address;
540 struct page *gfn_to_page(struct kvm *kvm, gfn_t gfn);
541 struct kvm_memory_slot *gfn_to_memslot(struct kvm *kvm, gfn_t gfn);
542 void mark_page_dirty(struct kvm *kvm, gfn_t gfn);
544 enum emulation_result {
545 EMULATE_DONE, /* no further processing */
546 EMULATE_DO_MMIO, /* kvm_run filled with mmio request */
547 EMULATE_FAIL, /* can't emulate this instruction */
550 int emulate_instruction(struct kvm_vcpu *vcpu, struct kvm_run *run,
551 unsigned long cr2, u16 error_code);
552 void realmode_lgdt(struct kvm_vcpu *vcpu, u16 size, unsigned long address);
553 void realmode_lidt(struct kvm_vcpu *vcpu, u16 size, unsigned long address);
554 void realmode_lmsw(struct kvm_vcpu *vcpu, unsigned long msw,
555 unsigned long *rflags);
557 unsigned long realmode_get_cr(struct kvm_vcpu *vcpu, int cr);
558 void realmode_set_cr(struct kvm_vcpu *vcpu, int cr, unsigned long value,
559 unsigned long *rflags);
560 int kvm_get_msr(struct kvm_vcpu *vcpu, u32 msr_index, u64 *data);
561 int kvm_set_msr(struct kvm_vcpu *vcpu, u32 msr_index, u64 data);
563 struct x86_emulate_ctxt;
565 int kvm_emulate_pio (struct kvm_vcpu *vcpu, struct kvm_run *run, int in,
566 int size, unsigned port);
567 int kvm_emulate_pio_string(struct kvm_vcpu *vcpu, struct kvm_run *run, int in,
568 int size, unsigned long count, int down,
569 gva_t address, int rep, unsigned port);
570 void kvm_emulate_cpuid(struct kvm_vcpu *vcpu);
571 int kvm_emulate_halt(struct kvm_vcpu *vcpu);
572 int emulate_invlpg(struct kvm_vcpu *vcpu, gva_t address);
573 int emulate_clts(struct kvm_vcpu *vcpu);
574 int emulator_get_dr(struct x86_emulate_ctxt* ctxt, int dr,
575 unsigned long *dest);
576 int emulator_set_dr(struct x86_emulate_ctxt *ctxt, int dr,
577 unsigned long value);
579 void set_cr0(struct kvm_vcpu *vcpu, unsigned long cr0);
580 void set_cr3(struct kvm_vcpu *vcpu, unsigned long cr0);
581 void set_cr4(struct kvm_vcpu *vcpu, unsigned long cr0);
582 void set_cr8(struct kvm_vcpu *vcpu, unsigned long cr0);
583 unsigned long get_cr8(struct kvm_vcpu *vcpu);
584 void lmsw(struct kvm_vcpu *vcpu, unsigned long msw);
586 int kvm_get_msr_common(struct kvm_vcpu *vcpu, u32 msr, u64 *pdata);
587 int kvm_set_msr_common(struct kvm_vcpu *vcpu, u32 msr, u64 data);
589 void fx_init(struct kvm_vcpu *vcpu);
591 void kvm_resched(struct kvm_vcpu *vcpu);
592 void kvm_load_guest_fpu(struct kvm_vcpu *vcpu);
593 void kvm_put_guest_fpu(struct kvm_vcpu *vcpu);
594 void kvm_flush_remote_tlbs(struct kvm *kvm);
596 int emulator_read_std(unsigned long addr,
599 struct kvm_vcpu *vcpu);
600 int emulator_write_emulated(unsigned long addr,
603 struct kvm_vcpu *vcpu);
605 unsigned long segment_base(u16 selector);
607 void kvm_mmu_pte_write(struct kvm_vcpu *vcpu, gpa_t gpa,
608 const u8 *new, int bytes);
609 int kvm_mmu_unprotect_page_virt(struct kvm_vcpu *vcpu, gva_t gva);
610 void __kvm_mmu_free_some_pages(struct kvm_vcpu *vcpu);
611 int kvm_mmu_load(struct kvm_vcpu *vcpu);
612 void kvm_mmu_unload(struct kvm_vcpu *vcpu);
614 int kvm_hypercall(struct kvm_vcpu *vcpu, struct kvm_run *run);
616 static inline int kvm_mmu_page_fault(struct kvm_vcpu *vcpu, gva_t gva,
619 return vcpu->mmu.page_fault(vcpu, gva, error_code);
622 static inline void kvm_mmu_free_some_pages(struct kvm_vcpu *vcpu)
624 if (unlikely(vcpu->kvm->n_free_mmu_pages < KVM_MIN_FREE_MMU_PAGES))
625 __kvm_mmu_free_some_pages(vcpu);
628 static inline int kvm_mmu_reload(struct kvm_vcpu *vcpu)
630 if (likely(vcpu->mmu.root_hpa != INVALID_PAGE))
633 return kvm_mmu_load(vcpu);
636 static inline int is_long_mode(struct kvm_vcpu *vcpu)
639 return vcpu->shadow_efer & EFER_LME;
645 static inline int is_pae(struct kvm_vcpu *vcpu)
647 return vcpu->cr4 & X86_CR4_PAE;
650 static inline int is_pse(struct kvm_vcpu *vcpu)
652 return vcpu->cr4 & X86_CR4_PSE;
655 static inline int is_paging(struct kvm_vcpu *vcpu)
657 return vcpu->cr0 & X86_CR0_PG;
660 static inline int memslot_id(struct kvm *kvm, struct kvm_memory_slot *slot)
662 return slot - kvm->memslots;
665 static inline struct kvm_mmu_page *page_header(hpa_t shadow_page)
667 struct page *page = pfn_to_page(shadow_page >> PAGE_SHIFT);
669 return (struct kvm_mmu_page *)page_private(page);
672 static inline u16 read_fs(void)
675 asm ("mov %%fs, %0" : "=g"(seg));
679 static inline u16 read_gs(void)
682 asm ("mov %%gs, %0" : "=g"(seg));
686 static inline u16 read_ldt(void)
689 asm ("sldt %0" : "=g"(ldt));
693 static inline void load_fs(u16 sel)
695 asm ("mov %0, %%fs" : : "rm"(sel));
698 static inline void load_gs(u16 sel)
700 asm ("mov %0, %%gs" : : "rm"(sel));
704 static inline void load_ldt(u16 sel)
706 asm ("lldt %0" : : "rm"(sel));
710 static inline void get_idt(struct descriptor_table *table)
712 asm ("sidt %0" : "=m"(*table));
715 static inline void get_gdt(struct descriptor_table *table)
717 asm ("sgdt %0" : "=m"(*table));
720 static inline unsigned long read_tr_base(void)
723 asm ("str %0" : "=g"(tr));
724 return segment_base(tr);
728 static inline unsigned long read_msr(unsigned long msr)
737 static inline void fx_save(struct i387_fxsave_struct *image)
739 asm ("fxsave (%0)":: "r" (image));
742 static inline void fx_restore(struct i387_fxsave_struct *image)
744 asm ("fxrstor (%0)":: "r" (image));
747 static inline void fpu_init(void)
752 static inline u32 get_rdx_init_val(void)
754 return 0x600; /* P6 family */
757 #define ASM_VMX_VMCLEAR_RAX ".byte 0x66, 0x0f, 0xc7, 0x30"
758 #define ASM_VMX_VMLAUNCH ".byte 0x0f, 0x01, 0xc2"
759 #define ASM_VMX_VMRESUME ".byte 0x0f, 0x01, 0xc3"
760 #define ASM_VMX_VMPTRLD_RAX ".byte 0x0f, 0xc7, 0x30"
761 #define ASM_VMX_VMREAD_RDX_RAX ".byte 0x0f, 0x78, 0xd0"
762 #define ASM_VMX_VMWRITE_RAX_RDX ".byte 0x0f, 0x79, 0xd0"
763 #define ASM_VMX_VMWRITE_RSP_RDX ".byte 0x0f, 0x79, 0xd4"
764 #define ASM_VMX_VMXOFF ".byte 0x0f, 0x01, 0xc4"
765 #define ASM_VMX_VMXON_RAX ".byte 0xf3, 0x0f, 0xc7, 0x30"
767 #define MSR_IA32_TIME_STAMP_COUNTER 0x010
769 #define TSS_IOPB_BASE_OFFSET 0x66
770 #define TSS_BASE_SIZE 0x68
771 #define TSS_IOPB_SIZE (65536 / 8)
772 #define TSS_REDIRECTION_SIZE (256 / 8)
773 #define RMODE_TSS_SIZE (TSS_BASE_SIZE + TSS_REDIRECTION_SIZE + TSS_IOPB_SIZE + 1)