accel/hvf/hvf-accel-ops.c

   1 /*
   2  * Copyright 2008 IBM Corporation
   3  *           2008 Red Hat, Inc.
   4  * Copyright 2011 Intel Corporation
   5  * Copyright 2016 Veertu, Inc.
   6  * Copyright 2017 The Android Open Source Project
   7  *
   8  * QEMU Hypervisor.framework support
   9  *
  10  * This program is free software; you can redistribute it and/or
  11  * modify it under the terms of version 2 of the GNU General Public
  12  * License as published by the Free Software Foundation.
  13  *
  14  * This program is distributed in the hope that it will be useful,
  15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  17  * General Public License for more details.
  18  *
  19  * You should have received a copy of the GNU General Public License
  20  * along with this program; if not, see <http://www.gnu.org/licenses/>.
  21  *
  22  * This file contain code under public domain from the hvdos project:
  23  * https://github.com/mist64/hvdos
  24  *
  25  * Parts Copyright (c) 2011 NetApp, Inc.
  26  * All rights reserved.
  27  *
  28  * Redistribution and use in source and binary forms, with or without
  29  * modification, are permitted provided that the following conditions
  30  * are met:
  31  * 1. Redistributions of source code must retain the above copyright
  32  *    notice, this list of conditions and the following disclaimer.
  33  * 2. Redistributions in binary form must reproduce the above copyright
  34  *    notice, this list of conditions and the following disclaimer in the
  35  *    documentation and/or other materials provided with the distribution.
  36  *
  37  * THIS SOFTWARE IS PROVIDED BY NETAPP, INC ``AS IS'' AND
  38  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  39  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  40  * ARE DISCLAIMED.  IN NO EVENT SHALL NETAPP, INC OR CONTRIBUTORS BE LIABLE
  41  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  42  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  43  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  44  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  45  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  46  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  47  * SUCH DAMAGE.
  48  */
  49
  50 #include "qemu/osdep.h"
  51 #include "qemu/error-report.h"
  52 #include "qemu/main-loop.h"
  53 #include "exec/address-spaces.h"
  54 #include "exec/exec-all.h"
  55 #include "exec/gdbstub.h"
  56 #include "sysemu/cpus.h"
  57 #include "sysemu/hvf.h"
  58 #include "sysemu/hvf_int.h"
  59 #include "sysemu/runstate.h"
  60 #include "qemu/guest-random.h"
  61
  62 HVFState *hvf_state;
  63
  64 #ifdef __aarch64__
  65 #define HV_VM_DEFAULT NULL
  66 #endif
  67
  68 /* Memory slots */
  69
  70 hvf_slot *hvf_find_overlap_slot(uint64_t start, uint64_t size)
  71 {
  72     hvf_slot *slot;
  73     int x;
  74     for (x = 0; x < hvf_state->num_slots; ++x) {
  75         slot = &hvf_state->slots[x];
  76         if (slot->size && start < (slot->start + slot->size) &&
  77             (start + size) > slot->start) {
  78             return slot;
  79         }
  80     }
  81     return NULL;
  82 }
  83
  84 struct mac_slot {
  85     int present;
  86     uint64_t size;
  87     uint64_t gpa_start;
  88     uint64_t gva;
  89 };
  90
  91 struct mac_slot mac_slots[32];
  92
  93 static int do_hvf_set_memory(hvf_slot *slot, hv_memory_flags_t flags)
  94 {
  95     struct mac_slot *macslot;
  96     hv_return_t ret;
  97
  98     macslot = &mac_slots[slot->slot_id];
  99
 100     if (macslot->present) {
 101         if (macslot->size != slot->size) {
 102             macslot->present = 0;
 103             ret = hv_vm_unmap(macslot->gpa_start, macslot->size);
 104             assert_hvf_ok(ret);
 105         }
 106     }
 107
 108     if (!slot->size) {
 109         return 0;
 110     }
 111
 112     macslot->present = 1;
 113     macslot->gpa_start = slot->start;
 114     macslot->size = slot->size;
 115     ret = hv_vm_map(slot->mem, slot->start, slot->size, flags);
 116     assert_hvf_ok(ret);
 117     return 0;
 118 }
 119
 120 static void hvf_set_phys_mem(MemoryRegionSection *section, bool add)
 121 {
 122     hvf_slot *mem;
 123     MemoryRegion *area = section->mr;
 124     bool writable = !area->readonly && !area->rom_device;
 125     hv_memory_flags_t flags;
 126     uint64_t page_size = qemu_real_host_page_size();
 127
 128     if (!memory_region_is_ram(area)) {
 129         if (writable) {
 130             return;
 131         } else if (!memory_region_is_romd(area)) {
 132             /*
 133              * If the memory device is not in romd_mode, then we actually want
 134              * to remove the hvf memory slot so all accesses will trap.
 135              */
 136              add = false;
 137         }
 138     }
 139
 140     if (!QEMU_IS_ALIGNED(int128_get64(section->size), page_size) ||
 141         !QEMU_IS_ALIGNED(section->offset_within_address_space, page_size)) {
 142         /* Not page aligned, so we can not map as RAM */
 143         add = false;
 144     }
 145
 146     mem = hvf_find_overlap_slot(
 147             section->offset_within_address_space,
 148             int128_get64(section->size));
 149
 150     if (mem && add) {
 151         if (mem->size == int128_get64(section->size) &&
 152             mem->start == section->offset_within_address_space &&
 153             mem->mem == (memory_region_get_ram_ptr(area) +
 154             section->offset_within_region)) {
 155             return; /* Same region was attempted to register, go away. */
 156         }
 157     }
 158
 159     /* Region needs to be reset. set the size to 0 and remap it. */
 160     if (mem) {
 161         mem->size = 0;
 162         if (do_hvf_set_memory(mem, 0)) {
 163             error_report("Failed to reset overlapping slot");
 164             abort();
 165         }
 166     }
 167
 168     if (!add) {
 169         return;
 170     }
 171
 172     if (area->readonly ||
 173         (!memory_region_is_ram(area) && memory_region_is_romd(area))) {
 174         flags = HV_MEMORY_READ | HV_MEMORY_EXEC;
 175     } else {
 176         flags = HV_MEMORY_READ | HV_MEMORY_WRITE | HV_MEMORY_EXEC;
 177     }
 178
 179     /* Now make a new slot. */
 180     int x;
 181
 182     for (x = 0; x < hvf_state->num_slots; ++x) {
 183         mem = &hvf_state->slots[x];
 184         if (!mem->size) {
 185             break;
 186         }
 187     }
 188
 189     if (x == hvf_state->num_slots) {
 190         error_report("No free slots");
 191         abort();
 192     }
 193
 194     mem->size = int128_get64(section->size);
 195     mem->mem = memory_region_get_ram_ptr(area) + section->offset_within_region;
 196     mem->start = section->offset_within_address_space;
 197     mem->region = area;
 198
 199     if (do_hvf_set_memory(mem, flags)) {
 200         error_report("Error registering new memory slot");
 201         abort();
 202     }
 203 }
 204
 205 static void do_hvf_cpu_synchronize_state(CPUState *cpu, run_on_cpu_data arg)
 206 {
 207     if (!cpu->vcpu_dirty) {
 208         hvf_get_registers(cpu);
 209         cpu->vcpu_dirty = true;
 210     }
 211 }
 212
 213 static void hvf_cpu_synchronize_state(CPUState *cpu)
 214 {
 215     if (!cpu->vcpu_dirty) {
 216         run_on_cpu(cpu, do_hvf_cpu_synchronize_state, RUN_ON_CPU_NULL);
 217     }
 218 }
 219
 220 static void do_hvf_cpu_synchronize_set_dirty(CPUState *cpu,
 221                                              run_on_cpu_data arg)
 222 {
 223     /* QEMU state is the reference, push it to HVF now and on next entry */
 224     cpu->vcpu_dirty = true;
 225 }
 226
 227 static void hvf_cpu_synchronize_post_reset(CPUState *cpu)
 228 {
 229     run_on_cpu(cpu, do_hvf_cpu_synchronize_set_dirty, RUN_ON_CPU_NULL);
 230 }
 231
 232 static void hvf_cpu_synchronize_post_init(CPUState *cpu)
 233 {
 234     run_on_cpu(cpu, do_hvf_cpu_synchronize_set_dirty, RUN_ON_CPU_NULL);
 235 }
 236
 237 static void hvf_cpu_synchronize_pre_loadvm(CPUState *cpu)
 238 {
 239     run_on_cpu(cpu, do_hvf_cpu_synchronize_set_dirty, RUN_ON_CPU_NULL);
 240 }
 241
 242 static void hvf_set_dirty_tracking(MemoryRegionSection *section, bool on)
 243 {
 244     hvf_slot *slot;
 245
 246     slot = hvf_find_overlap_slot(
 247             section->offset_within_address_space,
 248             int128_get64(section->size));
 249
 250     /* protect region against writes; begin tracking it */
 251     if (on) {
 252         slot->flags |= HVF_SLOT_LOG;
 253         hv_vm_protect((uintptr_t)slot->start, (size_t)slot->size,
 254                       HV_MEMORY_READ | HV_MEMORY_EXEC);
 255     /* stop tracking region*/
 256     } else {
 257         slot->flags &= ~HVF_SLOT_LOG;
 258         hv_vm_protect((uintptr_t)slot->start, (size_t)slot->size,
 259                       HV_MEMORY_READ | HV_MEMORY_WRITE | HV_MEMORY_EXEC);
 260     }
 261 }
 262
 263 static void hvf_log_start(MemoryListener *listener,
 264                           MemoryRegionSection *section, int old, int new)
 265 {
 266     if (old != 0) {
 267         return;
 268     }
 269
 270     hvf_set_dirty_tracking(section, 1);
 271 }
 272
 273 static void hvf_log_stop(MemoryListener *listener,
 274                          MemoryRegionSection *section, int old, int new)
 275 {
 276     if (new != 0) {
 277         return;
 278     }
 279
 280     hvf_set_dirty_tracking(section, 0);
 281 }
 282
 283 static void hvf_log_sync(MemoryListener *listener,
 284                          MemoryRegionSection *section)
 285 {
 286     /*
 287      * sync of dirty pages is handled elsewhere; just make sure we keep
 288      * tracking the region.
 289      */
 290     hvf_set_dirty_tracking(section, 1);
 291 }
 292
 293 static void hvf_region_add(MemoryListener *listener,
 294                            MemoryRegionSection *section)
 295 {
 296     hvf_set_phys_mem(section, true);
 297 }
 298
 299 static void hvf_region_del(MemoryListener *listener,
 300                            MemoryRegionSection *section)
 301 {
 302     hvf_set_phys_mem(section, false);
 303 }
 304
 305 static MemoryListener hvf_memory_listener = {
 306     .name = "hvf",
 307     .priority = 10,
 308     .region_add = hvf_region_add,
 309     .region_del = hvf_region_del,
 310     .log_start = hvf_log_start,
 311     .log_stop = hvf_log_stop,
 312     .log_sync = hvf_log_sync,
 313 };
 314
 315 static void dummy_signal(int sig)
 316 {
 317 }
 318
 319 bool hvf_allowed;
 320
 321 static int hvf_accel_init(MachineState *ms)
 322 {
 323     int x;
 324     hv_return_t ret;
 325     HVFState *s;
 326
 327     ret = hv_vm_create(HV_VM_DEFAULT);
 328     assert_hvf_ok(ret);
 329
 330     s = g_new0(HVFState, 1);
 331
 332     s->num_slots = ARRAY_SIZE(s->slots);
 333     for (x = 0; x < s->num_slots; ++x) {
 334         s->slots[x].size = 0;
 335         s->slots[x].slot_id = x;
 336     }
 337
 338     QTAILQ_INIT(&s->hvf_sw_breakpoints);
 339
 340     hvf_state = s;
 341     memory_listener_register(&hvf_memory_listener, &address_space_memory);
 342
 343     return hvf_arch_init();
 344 }
 345
 346 static void hvf_accel_class_init(ObjectClass *oc, void *data)
 347 {
 348     AccelClass *ac = ACCEL_CLASS(oc);
 349     ac->name = "HVF";
 350     ac->init_machine = hvf_accel_init;
 351     ac->allowed = &hvf_allowed;
 352 }
 353
 354 static const TypeInfo hvf_accel_type = {
 355     .name = TYPE_HVF_ACCEL,
 356     .parent = TYPE_ACCEL,
 357     .class_init = hvf_accel_class_init,
 358 };
 359
 360 static void hvf_type_init(void)
 361 {
 362     type_register_static(&hvf_accel_type);
 363 }
 364
 365 type_init(hvf_type_init);
 366
 367 static void hvf_vcpu_destroy(CPUState *cpu)
 368 {
 369     hv_return_t ret = hv_vcpu_destroy(cpu->hvf->fd);
 370     assert_hvf_ok(ret);
 371
 372     hvf_arch_vcpu_destroy(cpu);
 373     g_free(cpu->hvf);
 374     cpu->hvf = NULL;
 375 }
 376
 377 static int hvf_init_vcpu(CPUState *cpu)
 378 {
 379     int r;
 380
 381     cpu->hvf = g_malloc0(sizeof(*cpu->hvf));
 382
 383     /* init cpu signals */
 384     struct sigaction sigact;
 385
 386     memset(&sigact, 0, sizeof(sigact));
 387     sigact.sa_handler = dummy_signal;
 388     sigaction(SIG_IPI, &sigact, NULL);
 389
 390     pthread_sigmask(SIG_BLOCK, NULL, &cpu->hvf->unblock_ipi_mask);
 391     sigdelset(&cpu->hvf->unblock_ipi_mask, SIG_IPI);
 392
 393 #ifdef __aarch64__
 394     r = hv_vcpu_create(&cpu->hvf->fd, (hv_vcpu_exit_t **)&cpu->hvf->exit, NULL);
 395 #else
 396     r = hv_vcpu_create((hv_vcpuid_t *)&cpu->hvf->fd, HV_VCPU_DEFAULT);
 397 #endif
 398     cpu->vcpu_dirty = 1;
 399     assert_hvf_ok(r);
 400
 401     return hvf_arch_init_vcpu(cpu);
 402 }
 403
 404 /*
 405  * The HVF-specific vCPU thread function. This one should only run when the host
 406  * CPU supports the VMX "unrestricted guest" feature.
 407  */
 408 static void *hvf_cpu_thread_fn(void *arg)
 409 {
 410     CPUState *cpu = arg;
 411
 412     int r;
 413
 414     assert(hvf_enabled());
 415
 416     rcu_register_thread();
 417
 418     qemu_mutex_lock_iothread();
 419     qemu_thread_get_self(cpu->thread);
 420
 421     cpu->thread_id = qemu_get_thread_id();
 422     cpu->can_do_io = 1;
 423     current_cpu = cpu;
 424
 425     hvf_init_vcpu(cpu);
 426
 427     /* signal CPU creation */
 428     cpu_thread_signal_created(cpu);
 429     qemu_guest_random_seed_thread_part2(cpu->random_seed);
 430
 431     do {
 432         if (cpu_can_run(cpu)) {
 433             r = hvf_vcpu_exec(cpu);
 434             if (r == EXCP_DEBUG) {
 435                 cpu_handle_guest_debug(cpu);
 436             }
 437         }
 438         qemu_wait_io_event(cpu);
 439     } while (!cpu->unplug || cpu_can_run(cpu));
 440
 441     hvf_vcpu_destroy(cpu);
 442     cpu_thread_signal_destroyed(cpu);
 443     qemu_mutex_unlock_iothread();
 444     rcu_unregister_thread();
 445     return NULL;
 446 }
 447
 448 static void hvf_start_vcpu_thread(CPUState *cpu)
 449 {
 450     char thread_name[VCPU_THREAD_NAME_SIZE];
 451
 452     /*
 453      * HVF currently does not support TCG, and only runs in
 454      * unrestricted-guest mode.
 455      */
 456     assert(hvf_enabled());
 457
 458     cpu->thread = g_malloc0(sizeof(QemuThread));
 459     cpu->halt_cond = g_malloc0(sizeof(QemuCond));
 460     qemu_cond_init(cpu->halt_cond);
 461
 462     snprintf(thread_name, VCPU_THREAD_NAME_SIZE, "CPU %d/HVF",
 463              cpu->cpu_index);
 464     qemu_thread_create(cpu->thread, thread_name, hvf_cpu_thread_fn,
 465                        cpu, QEMU_THREAD_JOINABLE);
 466 }
 467
 468 static int hvf_insert_breakpoint(CPUState *cpu, int type, hwaddr addr, hwaddr len)
 469 {
 470     struct hvf_sw_breakpoint *bp;
 471     int err;
 472
 473     if (type == GDB_BREAKPOINT_SW) {
 474         bp = hvf_find_sw_breakpoint(cpu, addr);
 475         if (bp) {
 476             bp->use_count++;
 477             return 0;
 478         }
 479
 480         bp = g_new(struct hvf_sw_breakpoint, 1);
 481         bp->pc = addr;
 482         bp->use_count = 1;
 483         err = hvf_arch_insert_sw_breakpoint(cpu, bp);
 484         if (err) {
 485             g_free(bp);
 486             return err;
 487         }
 488
 489         QTAILQ_INSERT_HEAD(&hvf_state->hvf_sw_breakpoints, bp, entry);
 490     } else {
 491         err = hvf_arch_insert_hw_breakpoint(addr, len, type);
 492         if (err) {
 493             return err;
 494         }
 495     }
 496
 497     CPU_FOREACH(cpu) {
 498         err = hvf_update_guest_debug(cpu);
 499         if (err) {
 500             return err;
 501         }
 502     }
 503     return 0;
 504 }
 505
 506 static int hvf_remove_breakpoint(CPUState *cpu, int type, hwaddr addr, hwaddr len)
 507 {
 508     struct hvf_sw_breakpoint *bp;
 509     int err;
 510
 511     if (type == GDB_BREAKPOINT_SW) {
 512         bp = hvf_find_sw_breakpoint(cpu, addr);
 513         if (!bp) {
 514             return -ENOENT;
 515         }
 516
 517         if (bp->use_count > 1) {
 518             bp->use_count--;
 519             return 0;
 520         }
 521
 522         err = hvf_arch_remove_sw_breakpoint(cpu, bp);
 523         if (err) {
 524             return err;
 525         }
 526
 527         QTAILQ_REMOVE(&hvf_state->hvf_sw_breakpoints, bp, entry);
 528         g_free(bp);
 529     } else {
 530         err = hvf_arch_remove_hw_breakpoint(addr, len, type);
 531         if (err) {
 532             return err;
 533         }
 534     }
 535
 536     CPU_FOREACH(cpu) {
 537         err = hvf_update_guest_debug(cpu);
 538         if (err) {
 539             return err;
 540         }
 541     }
 542     return 0;
 543 }
 544
 545 static void hvf_remove_all_breakpoints(CPUState *cpu)
 546 {
 547     struct hvf_sw_breakpoint *bp, *next;
 548     CPUState *tmpcpu;
 549
 550     QTAILQ_FOREACH_SAFE(bp, &hvf_state->hvf_sw_breakpoints, entry, next) {
 551         if (hvf_arch_remove_sw_breakpoint(cpu, bp) != 0) {
 552             /* Try harder to find a CPU that currently sees the breakpoint. */
 553             CPU_FOREACH(tmpcpu)
 554             {
 555                 if (hvf_arch_remove_sw_breakpoint(tmpcpu, bp) == 0) {
 556                     break;
 557                 }
 558             }
 559         }
 560         QTAILQ_REMOVE(&hvf_state->hvf_sw_breakpoints, bp, entry);
 561         g_free(bp);
 562     }
 563     hvf_arch_remove_all_hw_breakpoints();
 564
 565     CPU_FOREACH(cpu) {
 566         hvf_update_guest_debug(cpu);
 567     }
 568 }
 569
 570 static void hvf_accel_ops_class_init(ObjectClass *oc, void *data)
 571 {
 572     AccelOpsClass *ops = ACCEL_OPS_CLASS(oc);
 573
 574     ops->create_vcpu_thread = hvf_start_vcpu_thread;
 575     ops->kick_vcpu_thread = hvf_kick_vcpu_thread;
 576
 577     ops->synchronize_post_reset = hvf_cpu_synchronize_post_reset;
 578     ops->synchronize_post_init = hvf_cpu_synchronize_post_init;
 579     ops->synchronize_state = hvf_cpu_synchronize_state;
 580     ops->synchronize_pre_loadvm = hvf_cpu_synchronize_pre_loadvm;
 581
 582     ops->insert_breakpoint = hvf_insert_breakpoint;
 583     ops->remove_breakpoint = hvf_remove_breakpoint;
 584     ops->remove_all_breakpoints = hvf_remove_all_breakpoints;
 585 };
 586 static const TypeInfo hvf_accel_ops_type = {
 587     .name = ACCEL_OPS_NAME("hvf"),
 588
 589     .parent = TYPE_ACCEL_OPS,
 590     .class_init = hvf_accel_ops_class_init,
 591     .abstract = true,
 592 };
 593 static void hvf_accel_ops_register_types(void)
 594 {
 595     type_register_static(&hvf_accel_ops_type);
 596 }
 597 type_init(hvf_accel_ops_register_types);