4 * This module includes support for MSI-X in pci devices.
6 * Author: Michael S. Tsirkin <mst@redhat.com>
8 * Copyright (c) 2009, Red Hat Inc, Michael S. Tsirkin (mst@redhat.com)
10 * This work is licensed under the terms of the GNU GPL, version 2. See
11 * the COPYING file in the top-level directory.
13 * Contributions after 2012-01-13 are licensed under the terms of the
14 * GNU GPL, version 2 or (at your option) any later version.
18 #include "hw/pci/msi.h"
19 #include "hw/pci/msix.h"
20 #include "hw/pci/pci.h"
21 #include "qemu/range.h"
23 #define MSIX_CAP_LENGTH 12
25 /* MSI enable bit and maskall bit are in byte 1 in FLAGS register */
26 #define MSIX_CONTROL_OFFSET (PCI_MSIX_FLAGS + 1)
27 #define MSIX_ENABLE_MASK (PCI_MSIX_FLAGS_ENABLE >> 8)
28 #define MSIX_MASKALL_MASK (PCI_MSIX_FLAGS_MASKALL >> 8)
30 MSIMessage
msix_get_message(PCIDevice
*dev
, unsigned vector
)
32 uint8_t *table_entry
= dev
->msix_table
+ vector
* PCI_MSIX_ENTRY_SIZE
;
35 msg
.address
= pci_get_quad(table_entry
+ PCI_MSIX_ENTRY_LOWER_ADDR
);
36 msg
.data
= pci_get_long(table_entry
+ PCI_MSIX_ENTRY_DATA
);
41 * Special API for POWER to configure the vectors through
42 * a side channel. Should never be used by devices.
44 void msix_set_message(PCIDevice
*dev
, int vector
, struct MSIMessage msg
)
46 uint8_t *table_entry
= dev
->msix_table
+ vector
* PCI_MSIX_ENTRY_SIZE
;
48 pci_set_quad(table_entry
+ PCI_MSIX_ENTRY_LOWER_ADDR
, msg
.address
);
49 pci_set_long(table_entry
+ PCI_MSIX_ENTRY_DATA
, msg
.data
);
50 table_entry
[PCI_MSIX_ENTRY_VECTOR_CTRL
] &= ~PCI_MSIX_ENTRY_CTRL_MASKBIT
;
53 static uint8_t msix_pending_mask(int vector
)
55 return 1 << (vector
% 8);
58 static uint8_t *msix_pending_byte(PCIDevice
*dev
, int vector
)
60 return dev
->msix_pba
+ vector
/ 8;
63 static int msix_is_pending(PCIDevice
*dev
, int vector
)
65 return *msix_pending_byte(dev
, vector
) & msix_pending_mask(vector
);
68 void msix_set_pending(PCIDevice
*dev
, unsigned int vector
)
70 *msix_pending_byte(dev
, vector
) |= msix_pending_mask(vector
);
73 static void msix_clr_pending(PCIDevice
*dev
, int vector
)
75 *msix_pending_byte(dev
, vector
) &= ~msix_pending_mask(vector
);
78 static bool msix_vector_masked(PCIDevice
*dev
, unsigned int vector
, bool fmask
)
80 unsigned offset
= vector
* PCI_MSIX_ENTRY_SIZE
+ PCI_MSIX_ENTRY_VECTOR_CTRL
;
81 return fmask
|| dev
->msix_table
[offset
] & PCI_MSIX_ENTRY_CTRL_MASKBIT
;
84 bool msix_is_masked(PCIDevice
*dev
, unsigned int vector
)
86 return msix_vector_masked(dev
, vector
, dev
->msix_function_masked
);
89 static void msix_fire_vector_notifier(PCIDevice
*dev
,
90 unsigned int vector
, bool is_masked
)
95 if (!dev
->msix_vector_use_notifier
) {
99 dev
->msix_vector_release_notifier(dev
, vector
);
101 msg
= msix_get_message(dev
, vector
);
102 ret
= dev
->msix_vector_use_notifier(dev
, vector
, msg
);
107 static void msix_handle_mask_update(PCIDevice
*dev
, int vector
, bool was_masked
)
109 bool is_masked
= msix_is_masked(dev
, vector
);
111 if (is_masked
== was_masked
) {
115 msix_fire_vector_notifier(dev
, vector
, is_masked
);
117 if (!is_masked
&& msix_is_pending(dev
, vector
)) {
118 msix_clr_pending(dev
, vector
);
119 msix_notify(dev
, vector
);
123 static void msix_update_function_masked(PCIDevice
*dev
)
125 dev
->msix_function_masked
= !msix_enabled(dev
) ||
126 (dev
->config
[dev
->msix_cap
+ MSIX_CONTROL_OFFSET
] & MSIX_MASKALL_MASK
);
129 /* Handle MSI-X capability config write. */
130 void msix_write_config(PCIDevice
*dev
, uint32_t addr
,
131 uint32_t val
, int len
)
133 unsigned enable_pos
= dev
->msix_cap
+ MSIX_CONTROL_OFFSET
;
137 if (!msix_present(dev
) || !range_covers_byte(addr
, len
, enable_pos
)) {
141 was_masked
= dev
->msix_function_masked
;
142 msix_update_function_masked(dev
);
144 if (!msix_enabled(dev
)) {
148 pci_device_deassert_intx(dev
);
150 if (dev
->msix_function_masked
== was_masked
) {
154 for (vector
= 0; vector
< dev
->msix_entries_nr
; ++vector
) {
155 msix_handle_mask_update(dev
, vector
,
156 msix_vector_masked(dev
, vector
, was_masked
));
160 static uint64_t msix_table_mmio_read(void *opaque
, hwaddr addr
,
163 PCIDevice
*dev
= opaque
;
165 return pci_get_long(dev
->msix_table
+ addr
);
168 static void msix_table_mmio_write(void *opaque
, hwaddr addr
,
169 uint64_t val
, unsigned size
)
171 PCIDevice
*dev
= opaque
;
172 int vector
= addr
/ PCI_MSIX_ENTRY_SIZE
;
175 was_masked
= msix_is_masked(dev
, vector
);
176 pci_set_long(dev
->msix_table
+ addr
, val
);
177 msix_handle_mask_update(dev
, vector
, was_masked
);
180 static const MemoryRegionOps msix_table_mmio_ops
= {
181 .read
= msix_table_mmio_read
,
182 .write
= msix_table_mmio_write
,
183 .endianness
= DEVICE_LITTLE_ENDIAN
,
185 .min_access_size
= 4,
186 .max_access_size
= 4,
190 static uint64_t msix_pba_mmio_read(void *opaque
, hwaddr addr
,
193 PCIDevice
*dev
= opaque
;
194 if (dev
->msix_vector_poll_notifier
) {
195 unsigned vector_start
= addr
* 8;
196 unsigned vector_end
= MIN(addr
+ size
* 8, dev
->msix_entries_nr
);
197 dev
->msix_vector_poll_notifier(dev
, vector_start
, vector_end
);
200 return pci_get_long(dev
->msix_pba
+ addr
);
203 static const MemoryRegionOps msix_pba_mmio_ops
= {
204 .read
= msix_pba_mmio_read
,
205 .endianness
= DEVICE_LITTLE_ENDIAN
,
207 .min_access_size
= 4,
208 .max_access_size
= 4,
212 static void msix_mask_all(struct PCIDevice
*dev
, unsigned nentries
)
216 for (vector
= 0; vector
< nentries
; ++vector
) {
218 vector
* PCI_MSIX_ENTRY_SIZE
+ PCI_MSIX_ENTRY_VECTOR_CTRL
;
219 bool was_masked
= msix_is_masked(dev
, vector
);
221 dev
->msix_table
[offset
] |= PCI_MSIX_ENTRY_CTRL_MASKBIT
;
222 msix_handle_mask_update(dev
, vector
, was_masked
);
226 /* Initialize the MSI-X structures */
227 int msix_init(struct PCIDevice
*dev
, unsigned short nentries
,
228 MemoryRegion
*table_bar
, uint8_t table_bar_nr
,
229 unsigned table_offset
, MemoryRegion
*pba_bar
,
230 uint8_t pba_bar_nr
, unsigned pba_offset
, uint8_t cap_pos
)
233 unsigned table_size
, pba_size
;
236 /* Nothing to do if MSI is not supported by interrupt controller */
237 if (!msi_supported
) {
241 if (nentries
< 1 || nentries
> PCI_MSIX_FLAGS_QSIZE
+ 1) {
245 table_size
= nentries
* PCI_MSIX_ENTRY_SIZE
;
246 pba_size
= QEMU_ALIGN_UP(nentries
, 64) / 8;
248 /* Sanity test: table & pba don't overlap, fit within BARs, min aligned */
249 if ((table_bar_nr
== pba_bar_nr
&&
250 ranges_overlap(table_offset
, table_size
, pba_offset
, pba_size
)) ||
251 table_offset
+ table_size
> memory_region_size(table_bar
) ||
252 pba_offset
+ pba_size
> memory_region_size(pba_bar
) ||
253 (table_offset
| pba_offset
) & PCI_MSIX_FLAGS_BIRMASK
) {
257 cap
= pci_add_capability(dev
, PCI_CAP_ID_MSIX
, cap_pos
, MSIX_CAP_LENGTH
);
263 dev
->cap_present
|= QEMU_PCI_CAP_MSIX
;
264 config
= dev
->config
+ cap
;
266 pci_set_word(config
+ PCI_MSIX_FLAGS
, nentries
- 1);
267 dev
->msix_entries_nr
= nentries
;
268 dev
->msix_function_masked
= true;
270 pci_set_long(config
+ PCI_MSIX_TABLE
, table_offset
| table_bar_nr
);
271 pci_set_long(config
+ PCI_MSIX_PBA
, pba_offset
| pba_bar_nr
);
273 /* Make flags bit writable. */
274 dev
->wmask
[cap
+ MSIX_CONTROL_OFFSET
] |= MSIX_ENABLE_MASK
|
277 dev
->msix_table
= g_malloc0(table_size
);
278 dev
->msix_pba
= g_malloc0(pba_size
);
279 dev
->msix_entry_used
= g_malloc0(nentries
* sizeof *dev
->msix_entry_used
);
281 msix_mask_all(dev
, nentries
);
283 memory_region_init_io(&dev
->msix_table_mmio
, &msix_table_mmio_ops
, dev
,
284 "msix-table", table_size
);
285 memory_region_add_subregion(table_bar
, table_offset
, &dev
->msix_table_mmio
);
286 memory_region_init_io(&dev
->msix_pba_mmio
, &msix_pba_mmio_ops
, dev
,
287 "msix-pba", pba_size
);
288 memory_region_add_subregion(pba_bar
, pba_offset
, &dev
->msix_pba_mmio
);
293 int msix_init_exclusive_bar(PCIDevice
*dev
, unsigned short nentries
,
300 * Migration compatibility dictates that this remains a 4k
301 * BAR with the vector table in the lower half and PBA in
302 * the upper half. Do not use these elsewhere!
304 #define MSIX_EXCLUSIVE_BAR_SIZE 4096
305 #define MSIX_EXCLUSIVE_BAR_TABLE_OFFSET 0
306 #define MSIX_EXCLUSIVE_BAR_PBA_OFFSET (MSIX_EXCLUSIVE_BAR_SIZE / 2)
307 #define MSIX_EXCLUSIVE_CAP_OFFSET 0
309 if (nentries
* PCI_MSIX_ENTRY_SIZE
> MSIX_EXCLUSIVE_BAR_PBA_OFFSET
) {
313 name
= g_strdup_printf("%s-msix", dev
->name
);
314 memory_region_init(&dev
->msix_exclusive_bar
, name
, MSIX_EXCLUSIVE_BAR_SIZE
);
317 ret
= msix_init(dev
, nentries
, &dev
->msix_exclusive_bar
, bar_nr
,
318 MSIX_EXCLUSIVE_BAR_TABLE_OFFSET
, &dev
->msix_exclusive_bar
,
319 bar_nr
, MSIX_EXCLUSIVE_BAR_PBA_OFFSET
,
320 MSIX_EXCLUSIVE_CAP_OFFSET
);
322 memory_region_destroy(&dev
->msix_exclusive_bar
);
326 pci_register_bar(dev
, bar_nr
, PCI_BASE_ADDRESS_SPACE_MEMORY
,
327 &dev
->msix_exclusive_bar
);
332 static void msix_free_irq_entries(PCIDevice
*dev
)
336 for (vector
= 0; vector
< dev
->msix_entries_nr
; ++vector
) {
337 dev
->msix_entry_used
[vector
] = 0;
338 msix_clr_pending(dev
, vector
);
342 static void msix_clear_all_vectors(PCIDevice
*dev
)
346 for (vector
= 0; vector
< dev
->msix_entries_nr
; ++vector
) {
347 msix_clr_pending(dev
, vector
);
351 /* Clean up resources for the device. */
352 void msix_uninit(PCIDevice
*dev
, MemoryRegion
*table_bar
, MemoryRegion
*pba_bar
)
354 if (!msix_present(dev
)) {
357 pci_del_capability(dev
, PCI_CAP_ID_MSIX
, MSIX_CAP_LENGTH
);
359 msix_free_irq_entries(dev
);
360 dev
->msix_entries_nr
= 0;
361 memory_region_del_subregion(pba_bar
, &dev
->msix_pba_mmio
);
362 memory_region_destroy(&dev
->msix_pba_mmio
);
363 g_free(dev
->msix_pba
);
364 dev
->msix_pba
= NULL
;
365 memory_region_del_subregion(table_bar
, &dev
->msix_table_mmio
);
366 memory_region_destroy(&dev
->msix_table_mmio
);
367 g_free(dev
->msix_table
);
368 dev
->msix_table
= NULL
;
369 g_free(dev
->msix_entry_used
);
370 dev
->msix_entry_used
= NULL
;
371 dev
->cap_present
&= ~QEMU_PCI_CAP_MSIX
;
374 void msix_uninit_exclusive_bar(PCIDevice
*dev
)
376 if (msix_present(dev
)) {
377 msix_uninit(dev
, &dev
->msix_exclusive_bar
, &dev
->msix_exclusive_bar
);
378 memory_region_destroy(&dev
->msix_exclusive_bar
);
382 void msix_save(PCIDevice
*dev
, QEMUFile
*f
)
384 unsigned n
= dev
->msix_entries_nr
;
386 if (!msix_present(dev
)) {
390 qemu_put_buffer(f
, dev
->msix_table
, n
* PCI_MSIX_ENTRY_SIZE
);
391 qemu_put_buffer(f
, dev
->msix_pba
, (n
+ 7) / 8);
394 /* Should be called after restoring the config space. */
395 void msix_load(PCIDevice
*dev
, QEMUFile
*f
)
397 unsigned n
= dev
->msix_entries_nr
;
400 if (!msix_present(dev
)) {
404 msix_clear_all_vectors(dev
);
405 qemu_get_buffer(f
, dev
->msix_table
, n
* PCI_MSIX_ENTRY_SIZE
);
406 qemu_get_buffer(f
, dev
->msix_pba
, (n
+ 7) / 8);
407 msix_update_function_masked(dev
);
409 for (vector
= 0; vector
< n
; vector
++) {
410 msix_handle_mask_update(dev
, vector
, true);
414 /* Does device support MSI-X? */
415 int msix_present(PCIDevice
*dev
)
417 return dev
->cap_present
& QEMU_PCI_CAP_MSIX
;
420 /* Is MSI-X enabled? */
421 int msix_enabled(PCIDevice
*dev
)
423 return (dev
->cap_present
& QEMU_PCI_CAP_MSIX
) &&
424 (dev
->config
[dev
->msix_cap
+ MSIX_CONTROL_OFFSET
] &
428 /* Send an MSI-X message */
429 void msix_notify(PCIDevice
*dev
, unsigned vector
)
433 if (vector
>= dev
->msix_entries_nr
|| !dev
->msix_entry_used
[vector
])
435 if (msix_is_masked(dev
, vector
)) {
436 msix_set_pending(dev
, vector
);
440 msg
= msix_get_message(dev
, vector
);
442 stl_le_phys(msg
.address
, msg
.data
);
445 void msix_reset(PCIDevice
*dev
)
447 if (!msix_present(dev
)) {
450 msix_clear_all_vectors(dev
);
451 dev
->config
[dev
->msix_cap
+ MSIX_CONTROL_OFFSET
] &=
452 ~dev
->wmask
[dev
->msix_cap
+ MSIX_CONTROL_OFFSET
];
453 memset(dev
->msix_table
, 0, dev
->msix_entries_nr
* PCI_MSIX_ENTRY_SIZE
);
454 memset(dev
->msix_pba
, 0, QEMU_ALIGN_UP(dev
->msix_entries_nr
, 64) / 8);
455 msix_mask_all(dev
, dev
->msix_entries_nr
);
458 /* PCI spec suggests that devices make it possible for software to configure
459 * less vectors than supported by the device, but does not specify a standard
460 * mechanism for devices to do so.
462 * We support this by asking devices to declare vectors software is going to
463 * actually use, and checking this on the notification path. Devices that
464 * don't want to follow the spec suggestion can declare all vectors as used. */
466 /* Mark vector as used. */
467 int msix_vector_use(PCIDevice
*dev
, unsigned vector
)
469 if (vector
>= dev
->msix_entries_nr
)
471 dev
->msix_entry_used
[vector
]++;
475 /* Mark vector as unused. */
476 void msix_vector_unuse(PCIDevice
*dev
, unsigned vector
)
478 if (vector
>= dev
->msix_entries_nr
|| !dev
->msix_entry_used
[vector
]) {
481 if (--dev
->msix_entry_used
[vector
]) {
484 msix_clr_pending(dev
, vector
);
487 void msix_unuse_all_vectors(PCIDevice
*dev
)
489 if (!msix_present(dev
)) {
492 msix_free_irq_entries(dev
);
495 unsigned int msix_nr_vectors_allocated(const PCIDevice
*dev
)
497 return dev
->msix_entries_nr
;
500 static int msix_set_notifier_for_vector(PCIDevice
*dev
, unsigned int vector
)
504 if (msix_is_masked(dev
, vector
)) {
507 msg
= msix_get_message(dev
, vector
);
508 return dev
->msix_vector_use_notifier(dev
, vector
, msg
);
511 static void msix_unset_notifier_for_vector(PCIDevice
*dev
, unsigned int vector
)
513 if (msix_is_masked(dev
, vector
)) {
516 dev
->msix_vector_release_notifier(dev
, vector
);
519 int msix_set_vector_notifiers(PCIDevice
*dev
,
520 MSIVectorUseNotifier use_notifier
,
521 MSIVectorReleaseNotifier release_notifier
,
522 MSIVectorPollNotifier poll_notifier
)
526 assert(use_notifier
&& release_notifier
);
528 dev
->msix_vector_use_notifier
= use_notifier
;
529 dev
->msix_vector_release_notifier
= release_notifier
;
530 dev
->msix_vector_poll_notifier
= poll_notifier
;
532 if ((dev
->config
[dev
->msix_cap
+ MSIX_CONTROL_OFFSET
] &
533 (MSIX_ENABLE_MASK
| MSIX_MASKALL_MASK
)) == MSIX_ENABLE_MASK
) {
534 for (vector
= 0; vector
< dev
->msix_entries_nr
; vector
++) {
535 ret
= msix_set_notifier_for_vector(dev
, vector
);
541 if (dev
->msix_vector_poll_notifier
) {
542 dev
->msix_vector_poll_notifier(dev
, 0, dev
->msix_entries_nr
);
547 while (--vector
>= 0) {
548 msix_unset_notifier_for_vector(dev
, vector
);
550 dev
->msix_vector_use_notifier
= NULL
;
551 dev
->msix_vector_release_notifier
= NULL
;
555 void msix_unset_vector_notifiers(PCIDevice
*dev
)
559 assert(dev
->msix_vector_use_notifier
&&
560 dev
->msix_vector_release_notifier
);
562 if ((dev
->config
[dev
->msix_cap
+ MSIX_CONTROL_OFFSET
] &
563 (MSIX_ENABLE_MASK
| MSIX_MASKALL_MASK
)) == MSIX_ENABLE_MASK
) {
564 for (vector
= 0; vector
< dev
->msix_entries_nr
; vector
++) {
565 msix_unset_notifier_for_vector(dev
, vector
);
568 dev
->msix_vector_use_notifier
= NULL
;
569 dev
->msix_vector_release_notifier
= NULL
;
570 dev
->msix_vector_poll_notifier
= NULL
;