hw/ppc/spapr_caps.c

   1 /*
   2  * QEMU PowerPC pSeries Logical Partition capabilities handling
   3  *
   4  * Copyright (c) 2017 David Gibson, Red Hat Inc.
   5  *
   6  * Permission is hereby granted, free of charge, to any person obtaining a copy
   7  * of this software and associated documentation files (the "Software"), to deal
   8  * in the Software without restriction, including without limitation the rights
   9  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  10  * copies of the Software, and to permit persons to whom the Software is
  11  * furnished to do so, subject to the following conditions:
  12  *
  13  * The above copyright notice and this permission notice shall be included in
  14  * all copies or substantial portions of the Software.
  15  *
  16  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  17  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  19  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  20  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  21  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  22  * THE SOFTWARE.
  23  */
  24
  25 #include "qemu/osdep.h"
  26 #include "qemu/error-report.h"
  27 #include "qapi/error.h"
  28 #include "qapi/visitor.h"
  29 #include "sysemu/hw_accel.h"
  30 #include "exec/ram_addr.h"
  31 #include "target/ppc/cpu.h"
  32 #include "target/ppc/mmu-hash64.h"
  33 #include "cpu-models.h"
  34 #include "kvm_ppc.h"
  35 #include "migration/vmstate.h"
  36 #include "sysemu/tcg.h"
  37
  38 #include "hw/ppc/spapr.h"
  39
  40 typedef struct SpaprCapPossible {
  41     int num;            /* size of vals array below */
  42     const char *help;   /* help text for vals */
  43     /*
  44      * Note:
  45      * - because of the way compatibility is determined vals MUST be ordered
  46      *   such that later options are a superset of all preceding options.
  47      * - the order of vals must be preserved, that is their index is important,
  48      *   however vals may be added to the end of the list so long as the above
  49      *   point is observed
  50      */
  51     const char *vals[];
  52 } SpaprCapPossible;
  53
  54 typedef struct SpaprCapabilityInfo {
  55     const char *name;
  56     const char *description;
  57     int index;
  58
  59     /* Getter and Setter Function Pointers */
  60     ObjectPropertyAccessor *get;
  61     ObjectPropertyAccessor *set;
  62     const char *type;
  63     /* Possible values if this is a custom string type */
  64     SpaprCapPossible *possible;
  65     /* Make sure the virtual hardware can support this capability */
  66     void (*apply)(SpaprMachineState *spapr, uint8_t val, Error **errp);
  67     void (*cpu_apply)(SpaprMachineState *spapr, PowerPCCPU *cpu,
  68                       uint8_t val, Error **errp);
  69     bool (*migrate_needed)(void *opaque);
  70 } SpaprCapabilityInfo;
  71
  72 static void spapr_cap_get_bool(Object *obj, Visitor *v, const char *name,
  73                                void *opaque, Error **errp)
  74 {
  75     SpaprCapabilityInfo *cap = opaque;
  76     SpaprMachineState *spapr = SPAPR_MACHINE(obj);
  77     bool value = spapr_get_cap(spapr, cap->index) == SPAPR_CAP_ON;
  78
  79     visit_type_bool(v, name, &value, errp);
  80 }
  81
  82 static void spapr_cap_set_bool(Object *obj, Visitor *v, const char *name,
  83                                void *opaque, Error **errp)
  84 {
  85     SpaprCapabilityInfo *cap = opaque;
  86     SpaprMachineState *spapr = SPAPR_MACHINE(obj);
  87     bool value;
  88
  89     if (!visit_type_bool(v, name, &value, errp)) {
  90         return;
  91     }
  92
  93     spapr->cmd_line_caps[cap->index] = true;
  94     spapr->eff.caps[cap->index] = value ? SPAPR_CAP_ON : SPAPR_CAP_OFF;
  95 }
  96
  97
  98 static void  spapr_cap_get_string(Object *obj, Visitor *v, const char *name,
  99                                   void *opaque, Error **errp)
 100 {
 101     SpaprCapabilityInfo *cap = opaque;
 102     SpaprMachineState *spapr = SPAPR_MACHINE(obj);
 103     char *val = NULL;
 104     uint8_t value = spapr_get_cap(spapr, cap->index);
 105
 106     if (value >= cap->possible->num) {
 107         error_setg(errp, "Invalid value (%d) for cap-%s", value, cap->name);
 108         return;
 109     }
 110
 111     val = g_strdup(cap->possible->vals[value]);
 112
 113     visit_type_str(v, name, &val, errp);
 114     g_free(val);
 115 }
 116
 117 static void spapr_cap_set_string(Object *obj, Visitor *v, const char *name,
 118                                  void *opaque, Error **errp)
 119 {
 120     SpaprCapabilityInfo *cap = opaque;
 121     SpaprMachineState *spapr = SPAPR_MACHINE(obj);
 122     uint8_t i;
 123     char *val;
 124
 125     if (!visit_type_str(v, name, &val, errp)) {
 126         return;
 127     }
 128
 129     if (!strcmp(val, "?")) {
 130         error_setg(errp, "%s", cap->possible->help);
 131         goto out;
 132     }
 133     for (i = 0; i < cap->possible->num; i++) {
 134         if (!strcasecmp(val, cap->possible->vals[i])) {
 135             spapr->cmd_line_caps[cap->index] = true;
 136             spapr->eff.caps[cap->index] = i;
 137             goto out;
 138         }
 139     }
 140
 141     error_setg(errp, "Invalid capability mode \"%s\" for cap-%s", val,
 142                cap->name);
 143 out:
 144     g_free(val);
 145 }
 146
 147 static void spapr_cap_get_pagesize(Object *obj, Visitor *v, const char *name,
 148                                    void *opaque, Error **errp)
 149 {
 150     SpaprCapabilityInfo *cap = opaque;
 151     SpaprMachineState *spapr = SPAPR_MACHINE(obj);
 152     uint8_t val = spapr_get_cap(spapr, cap->index);
 153     uint64_t pagesize = (1ULL << val);
 154
 155     visit_type_size(v, name, &pagesize, errp);
 156 }
 157
 158 static void spapr_cap_set_pagesize(Object *obj, Visitor *v, const char *name,
 159                                    void *opaque, Error **errp)
 160 {
 161     SpaprCapabilityInfo *cap = opaque;
 162     SpaprMachineState *spapr = SPAPR_MACHINE(obj);
 163     uint64_t pagesize;
 164     uint8_t val;
 165
 166     if (!visit_type_size(v, name, &pagesize, errp)) {
 167         return;
 168     }
 169
 170     if (!is_power_of_2(pagesize)) {
 171         error_setg(errp, "cap-%s must be a power of 2", cap->name);
 172         return;
 173     }
 174
 175     val = ctz64(pagesize);
 176     spapr->cmd_line_caps[cap->index] = true;
 177     spapr->eff.caps[cap->index] = val;
 178 }
 179
 180 static void cap_htm_apply(SpaprMachineState *spapr, uint8_t val, Error **errp)
 181 {
 182     ERRP_GUARD();
 183     if (!val) {
 184         /* TODO: We don't support disabling htm yet */
 185         return;
 186     }
 187     if (tcg_enabled()) {
 188         error_setg(errp, "No Transactional Memory support in TCG");
 189         error_append_hint(errp, "Try appending -machine cap-htm=off\n");
 190     } else if (kvm_enabled() && !kvmppc_has_cap_htm()) {
 191         error_setg(errp,
 192                    "KVM implementation does not support Transactional Memory");
 193         error_append_hint(errp, "Try appending -machine cap-htm=off\n");
 194     }
 195 }
 196
 197 static void cap_vsx_apply(SpaprMachineState *spapr, uint8_t val, Error **errp)
 198 {
 199     ERRP_GUARD();
 200     PowerPCCPU *cpu = POWERPC_CPU(first_cpu);
 201     CPUPPCState *env = &cpu->env;
 202
 203     if (!val) {
 204         /* TODO: We don't support disabling vsx yet */
 205         return;
 206     }
 207     /* Allowable CPUs in spapr_cpu_core.c should already have gotten
 208      * rid of anything that doesn't do VMX */
 209     g_assert(env->insns_flags & PPC_ALTIVEC);
 210     if (!(env->insns_flags2 & PPC2_VSX)) {
 211         error_setg(errp, "VSX support not available");
 212         error_append_hint(errp, "Try appending -machine cap-vsx=off\n");
 213     }
 214 }
 215
 216 static void cap_dfp_apply(SpaprMachineState *spapr, uint8_t val, Error **errp)
 217 {
 218     ERRP_GUARD();
 219     PowerPCCPU *cpu = POWERPC_CPU(first_cpu);
 220     CPUPPCState *env = &cpu->env;
 221
 222     if (!val) {
 223         /* TODO: We don't support disabling dfp yet */
 224         return;
 225     }
 226     if (!(env->insns_flags2 & PPC2_DFP)) {
 227         error_setg(errp, "DFP support not available");
 228         error_append_hint(errp, "Try appending -machine cap-dfp=off\n");
 229     }
 230 }
 231
 232 SpaprCapPossible cap_cfpc_possible = {
 233     .num = 3,
 234     .vals = {"broken", "workaround", "fixed"},
 235     .help = "broken - no protection, workaround - workaround available,"
 236             " fixed - fixed in hardware",
 237 };
 238
 239 static void cap_safe_cache_apply(SpaprMachineState *spapr, uint8_t val,
 240                                  Error **errp)
 241 {
 242     ERRP_GUARD();
 243     uint8_t kvm_val =  kvmppc_get_cap_safe_cache();
 244
 245     if (tcg_enabled() && val) {
 246         /* TCG only supports broken, allow other values and print a warning */
 247         warn_report("TCG doesn't support requested feature, cap-cfpc=%s",
 248                     cap_cfpc_possible.vals[val]);
 249     } else if (kvm_enabled() && (val > kvm_val)) {
 250         error_setg(errp,
 251                    "Requested safe cache capability level not supported by KVM");
 252         error_append_hint(errp, "Try appending -machine cap-cfpc=%s\n",
 253                           cap_cfpc_possible.vals[kvm_val]);
 254     }
 255 }
 256
 257 SpaprCapPossible cap_sbbc_possible = {
 258     .num = 3,
 259     .vals = {"broken", "workaround", "fixed"},
 260     .help = "broken - no protection, workaround - workaround available,"
 261             " fixed - fixed in hardware",
 262 };
 263
 264 static void cap_safe_bounds_check_apply(SpaprMachineState *spapr, uint8_t val,
 265                                         Error **errp)
 266 {
 267     ERRP_GUARD();
 268     uint8_t kvm_val =  kvmppc_get_cap_safe_bounds_check();
 269
 270     if (tcg_enabled() && val) {
 271         /* TCG only supports broken, allow other values and print a warning */
 272         warn_report("TCG doesn't support requested feature, cap-sbbc=%s",
 273                     cap_sbbc_possible.vals[val]);
 274     } else if (kvm_enabled() && (val > kvm_val)) {
 275         error_setg(errp,
 276 "Requested safe bounds check capability level not supported by KVM");
 277         error_append_hint(errp, "Try appending -machine cap-sbbc=%s\n",
 278                           cap_sbbc_possible.vals[kvm_val]);
 279     }
 280 }
 281
 282 SpaprCapPossible cap_ibs_possible = {
 283     .num = 5,
 284     /* Note workaround only maintained for compatibility */
 285     .vals = {"broken", "workaround", "fixed-ibs", "fixed-ccd", "fixed-na"},
 286     .help = "broken - no protection, workaround - count cache flush"
 287             ", fixed-ibs - indirect branch serialisation,"
 288             " fixed-ccd - cache count disabled,"
 289             " fixed-na - fixed in hardware (no longer applicable)",
 290 };
 291
 292 static void cap_safe_indirect_branch_apply(SpaprMachineState *spapr,
 293                                            uint8_t val, Error **errp)
 294 {
 295     ERRP_GUARD();
 296     uint8_t kvm_val = kvmppc_get_cap_safe_indirect_branch();
 297
 298     if (tcg_enabled() && val) {
 299         /* TCG only supports broken, allow other values and print a warning */
 300         warn_report("TCG doesn't support requested feature, cap-ibs=%s",
 301                     cap_ibs_possible.vals[val]);
 302     } else if (kvm_enabled() && (val > kvm_val)) {
 303         error_setg(errp,
 304 "Requested safe indirect branch capability level not supported by KVM");
 305         error_append_hint(errp, "Try appending -machine cap-ibs=%s\n",
 306                           cap_ibs_possible.vals[kvm_val]);
 307     }
 308 }
 309
 310 #define VALUE_DESC_TRISTATE     " (broken, workaround, fixed)"
 311
 312 bool spapr_check_pagesize(SpaprMachineState *spapr, hwaddr pagesize,
 313                           Error **errp)
 314 {
 315     hwaddr maxpagesize = (1ULL << spapr->eff.caps[SPAPR_CAP_HPT_MAXPAGESIZE]);
 316
 317     if (!kvmppc_hpt_needs_host_contiguous_pages()) {
 318         return true;
 319     }
 320
 321     if (maxpagesize > pagesize) {
 322         error_setg(errp,
 323                    "Can't support %"HWADDR_PRIu" kiB guest pages with %"
 324                    HWADDR_PRIu" kiB host pages with this KVM implementation",
 325                    maxpagesize >> 10, pagesize >> 10);
 326         return false;
 327     }
 328
 329     return true;
 330 }
 331
 332 static void cap_hpt_maxpagesize_apply(SpaprMachineState *spapr,
 333                                       uint8_t val, Error **errp)
 334 {
 335     if (val < 12) {
 336         error_setg(errp, "Require at least 4kiB hpt-max-page-size");
 337         return;
 338     } else if (val < 16) {
 339         warn_report("Many guests require at least 64kiB hpt-max-page-size");
 340     }
 341
 342     spapr_check_pagesize(spapr, qemu_minrampagesize(), errp);
 343 }
 344
 345 static bool cap_hpt_maxpagesize_migrate_needed(void *opaque)
 346 {
 347     return !SPAPR_MACHINE_GET_CLASS(opaque)->pre_4_1_migration;
 348 }
 349
 350 static bool spapr_pagesize_cb(void *opaque, uint32_t seg_pshift,
 351                               uint32_t pshift)
 352 {
 353     unsigned maxshift = *((unsigned *)opaque);
 354
 355     assert(pshift >= seg_pshift);
 356
 357     /* Don't allow the guest to use pages bigger than the configured
 358      * maximum size */
 359     if (pshift > maxshift) {
 360         return false;
 361     }
 362
 363     /* For whatever reason, KVM doesn't allow multiple pagesizes
 364      * within a segment, *except* for the case of 16M pages in a 4k or
 365      * 64k segment.  Always exclude other cases, so that TCG and KVM
 366      * guests see a consistent environment */
 367     if ((pshift != seg_pshift) && (pshift != 24)) {
 368         return false;
 369     }
 370
 371     return true;
 372 }
 373
 374 static void ppc_hash64_filter_pagesizes(PowerPCCPU *cpu,
 375                                  bool (*cb)(void *, uint32_t, uint32_t),
 376                                  void *opaque)
 377 {
 378     PPCHash64Options *opts = cpu->hash64_opts;
 379     int i;
 380     int n = 0;
 381     bool ci_largepage = false;
 382
 383     assert(opts);
 384
 385     n = 0;
 386     for (i = 0; i < ARRAY_SIZE(opts->sps); i++) {
 387         PPCHash64SegmentPageSizes *sps = &opts->sps[i];
 388         int j;
 389         int m = 0;
 390
 391         assert(n <= i);
 392
 393         if (!sps->page_shift) {
 394             break;
 395         }
 396
 397         for (j = 0; j < ARRAY_SIZE(sps->enc); j++) {
 398             PPCHash64PageSize *ps = &sps->enc[j];
 399
 400             assert(m <= j);
 401             if (!ps->page_shift) {
 402                 break;
 403             }
 404
 405             if (cb(opaque, sps->page_shift, ps->page_shift)) {
 406                 if (ps->page_shift >= 16) {
 407                     ci_largepage = true;
 408                 }
 409                 sps->enc[m++] = *ps;
 410             }
 411         }
 412
 413         /* Clear rest of the row */
 414         for (j = m; j < ARRAY_SIZE(sps->enc); j++) {
 415             memset(&sps->enc[j], 0, sizeof(sps->enc[j]));
 416         }
 417
 418         if (m) {
 419             n++;
 420         }
 421     }
 422
 423     /* Clear the rest of the table */
 424     for (i = n; i < ARRAY_SIZE(opts->sps); i++) {
 425         memset(&opts->sps[i], 0, sizeof(opts->sps[i]));
 426     }
 427
 428     if (!ci_largepage) {
 429         opts->flags &= ~PPC_HASH64_CI_LARGEPAGE;
 430     }
 431 }
 432
 433 static void cap_hpt_maxpagesize_cpu_apply(SpaprMachineState *spapr,
 434                                           PowerPCCPU *cpu,
 435                                           uint8_t val, Error **errp)
 436 {
 437     unsigned maxshift = val;
 438
 439     ppc_hash64_filter_pagesizes(cpu, spapr_pagesize_cb, &maxshift);
 440 }
 441
 442 static void cap_nested_kvm_hv_apply(SpaprMachineState *spapr,
 443                                     uint8_t val, Error **errp)
 444 {
 445     ERRP_GUARD();
 446     PowerPCCPU *cpu = POWERPC_CPU(first_cpu);
 447
 448     if (!val) {
 449         /* capability disabled by default */
 450         return;
 451     }
 452
 453     if (tcg_enabled()) {
 454         error_setg(errp, "No Nested KVM-HV support in TCG");
 455         error_append_hint(errp, "Try appending -machine cap-nested-hv=off\n");
 456     } else if (kvm_enabled()) {
 457         if (!ppc_check_compat(cpu, CPU_POWERPC_LOGICAL_3_00, 0,
 458                               spapr->max_compat_pvr)) {
 459             error_setg(errp, "Nested KVM-HV only supported on POWER9");
 460             error_append_hint(errp,
 461                               "Try appending -machine max-cpu-compat=power9\n");
 462             return;
 463         }
 464
 465         if (!kvmppc_has_cap_nested_kvm_hv()) {
 466             error_setg(errp,
 467                        "KVM implementation does not support Nested KVM-HV");
 468             error_append_hint(errp,
 469                               "Try appending -machine cap-nested-hv=off\n");
 470         } else if (kvmppc_set_cap_nested_kvm_hv(val) < 0) {
 471                 error_setg(errp, "Error enabling cap-nested-hv with KVM");
 472                 error_append_hint(errp,
 473                                   "Try appending -machine cap-nested-hv=off\n");
 474         }
 475     }
 476 }
 477
 478 static void cap_large_decr_apply(SpaprMachineState *spapr,
 479                                  uint8_t val, Error **errp)
 480 {
 481     ERRP_GUARD();
 482     PowerPCCPU *cpu = POWERPC_CPU(first_cpu);
 483     PowerPCCPUClass *pcc = POWERPC_CPU_GET_CLASS(cpu);
 484
 485     if (!val) {
 486         return; /* Disabled by default */
 487     }
 488
 489     if (tcg_enabled()) {
 490         if (!ppc_check_compat(cpu, CPU_POWERPC_LOGICAL_3_00, 0,
 491                               spapr->max_compat_pvr)) {
 492             error_setg(errp, "Large decrementer only supported on POWER9");
 493             error_append_hint(errp, "Try -cpu POWER9\n");
 494             return;
 495         }
 496     } else if (kvm_enabled()) {
 497         int kvm_nr_bits = kvmppc_get_cap_large_decr();
 498
 499         if (!kvm_nr_bits) {
 500             error_setg(errp, "No large decrementer support");
 501             error_append_hint(errp,
 502                               "Try appending -machine cap-large-decr=off\n");
 503         } else if (pcc->lrg_decr_bits != kvm_nr_bits) {
 504             error_setg(errp,
 505                        "KVM large decrementer size (%d) differs to model (%d)",
 506                        kvm_nr_bits, pcc->lrg_decr_bits);
 507             error_append_hint(errp,
 508                               "Try appending -machine cap-large-decr=off\n");
 509         }
 510     }
 511 }
 512
 513 static void cap_large_decr_cpu_apply(SpaprMachineState *spapr,
 514                                      PowerPCCPU *cpu,
 515                                      uint8_t val, Error **errp)
 516 {
 517     ERRP_GUARD();
 518     CPUPPCState *env = &cpu->env;
 519     target_ulong lpcr = env->spr[SPR_LPCR];
 520
 521     if (kvm_enabled()) {
 522         if (kvmppc_enable_cap_large_decr(cpu, val)) {
 523             error_setg(errp, "No large decrementer support");
 524             error_append_hint(errp,
 525                               "Try appending -machine cap-large-decr=off\n");
 526         }
 527     }
 528
 529     if (val) {
 530         lpcr |= LPCR_LD;
 531     } else {
 532         lpcr &= ~LPCR_LD;
 533     }
 534     ppc_store_lpcr(cpu, lpcr);
 535 }
 536
 537 static void cap_ccf_assist_apply(SpaprMachineState *spapr, uint8_t val,
 538                                  Error **errp)
 539 {
 540     ERRP_GUARD();
 541     uint8_t kvm_val = kvmppc_get_cap_count_cache_flush_assist();
 542
 543     if (tcg_enabled() && val) {
 544         /* TCG doesn't implement anything here, but allow with a warning */
 545         warn_report("TCG doesn't support requested feature, cap-ccf-assist=on");
 546     } else if (kvm_enabled() && (val > kvm_val)) {
 547         uint8_t kvm_ibs = kvmppc_get_cap_safe_indirect_branch();
 548
 549         if (kvm_ibs == SPAPR_CAP_FIXED_CCD) {
 550             /*
 551              * If we don't have CCF assist on the host, the assist
 552              * instruction is a harmless no-op.  It won't correctly
 553              * implement the cache count flush *but* if we have
 554              * count-cache-disabled in the host, that flush is
 555              * unnnecessary.  So, specifically allow this case.  This
 556              * allows us to have better performance on POWER9 DD2.3,
 557              * while still working on POWER9 DD2.2 and POWER8 host
 558              * cpus.
 559              */
 560             return;
 561         }
 562         error_setg(errp,
 563                    "Requested count cache flush assist capability level not supported by KVM");
 564         error_append_hint(errp, "Try appending -machine cap-ccf-assist=off\n");
 565     }
 566 }
 567
 568 static void cap_fwnmi_apply(SpaprMachineState *spapr, uint8_t val,
 569                                 Error **errp)
 570 {
 571     ERRP_GUARD();
 572     if (!val) {
 573         return; /* Disabled by default */
 574     }
 575
 576     if (kvm_enabled()) {
 577         if (!kvmppc_get_fwnmi()) {
 578             error_setg(errp,
 579 "Firmware Assisted Non-Maskable Interrupts(FWNMI) not supported by KVM.");
 580             error_append_hint(errp, "Try appending -machine cap-fwnmi=off\n");
 581         }
 582     }
 583 }
 584
 585 static void cap_rpt_invalidate_apply(SpaprMachineState *spapr,
 586                                      uint8_t val, Error **errp)
 587 {
 588     ERRP_GUARD();
 589
 590     if (!val) {
 591         /* capability disabled by default */
 592         return;
 593     }
 594
 595     if (tcg_enabled()) {
 596         error_setg(errp, "No H_RPT_INVALIDATE support in TCG");
 597         error_append_hint(errp,
 598                           "Try appending -machine cap-rpt-invalidate=off\n");
 599     } else if (kvm_enabled()) {
 600         if (!kvmppc_has_cap_mmu_radix()) {
 601             error_setg(errp, "H_RPT_INVALIDATE only supported on Radix");
 602             return;
 603         }
 604
 605         if (!kvmppc_has_cap_rpt_invalidate()) {
 606             error_setg(errp,
 607                        "KVM implementation does not support H_RPT_INVALIDATE");
 608             error_append_hint(errp,
 609                               "Try appending -machine cap-rpt-invalidate=off\n");
 610         } else {
 611             kvmppc_enable_h_rpt_invalidate();
 612         }
 613     }
 614 }
 615
 616 SpaprCapabilityInfo capability_table[SPAPR_CAP_NUM] = {
 617     [SPAPR_CAP_HTM] = {
 618         .name = "htm",
 619         .description = "Allow Hardware Transactional Memory (HTM)",
 620         .index = SPAPR_CAP_HTM,
 621         .get = spapr_cap_get_bool,
 622         .set = spapr_cap_set_bool,
 623         .type = "bool",
 624         .apply = cap_htm_apply,
 625     },
 626     [SPAPR_CAP_VSX] = {
 627         .name = "vsx",
 628         .description = "Allow Vector Scalar Extensions (VSX)",
 629         .index = SPAPR_CAP_VSX,
 630         .get = spapr_cap_get_bool,
 631         .set = spapr_cap_set_bool,
 632         .type = "bool",
 633         .apply = cap_vsx_apply,
 634     },
 635     [SPAPR_CAP_DFP] = {
 636         .name = "dfp",
 637         .description = "Allow Decimal Floating Point (DFP)",
 638         .index = SPAPR_CAP_DFP,
 639         .get = spapr_cap_get_bool,
 640         .set = spapr_cap_set_bool,
 641         .type = "bool",
 642         .apply = cap_dfp_apply,
 643     },
 644     [SPAPR_CAP_CFPC] = {
 645         .name = "cfpc",
 646         .description = "Cache Flush on Privilege Change" VALUE_DESC_TRISTATE,
 647         .index = SPAPR_CAP_CFPC,
 648         .get = spapr_cap_get_string,
 649         .set = spapr_cap_set_string,
 650         .type = "string",
 651         .possible = &cap_cfpc_possible,
 652         .apply = cap_safe_cache_apply,
 653     },
 654     [SPAPR_CAP_SBBC] = {
 655         .name = "sbbc",
 656         .description = "Speculation Barrier Bounds Checking" VALUE_DESC_TRISTATE,
 657         .index = SPAPR_CAP_SBBC,
 658         .get = spapr_cap_get_string,
 659         .set = spapr_cap_set_string,
 660         .type = "string",
 661         .possible = &cap_sbbc_possible,
 662         .apply = cap_safe_bounds_check_apply,
 663     },
 664     [SPAPR_CAP_IBS] = {
 665         .name = "ibs",
 666         .description =
 667             "Indirect Branch Speculation (broken, workaround, fixed-ibs,"
 668             "fixed-ccd, fixed-na)",
 669         .index = SPAPR_CAP_IBS,
 670         .get = spapr_cap_get_string,
 671         .set = spapr_cap_set_string,
 672         .type = "string",
 673         .possible = &cap_ibs_possible,
 674         .apply = cap_safe_indirect_branch_apply,
 675     },
 676     [SPAPR_CAP_HPT_MAXPAGESIZE] = {
 677         .name = "hpt-max-page-size",
 678         .description = "Maximum page size for Hash Page Table guests",
 679         .index = SPAPR_CAP_HPT_MAXPAGESIZE,
 680         .get = spapr_cap_get_pagesize,
 681         .set = spapr_cap_set_pagesize,
 682         .type = "int",
 683         .apply = cap_hpt_maxpagesize_apply,
 684         .cpu_apply = cap_hpt_maxpagesize_cpu_apply,
 685         .migrate_needed = cap_hpt_maxpagesize_migrate_needed,
 686     },
 687     [SPAPR_CAP_NESTED_KVM_HV] = {
 688         .name = "nested-hv",
 689         .description = "Allow Nested KVM-HV",
 690         .index = SPAPR_CAP_NESTED_KVM_HV,
 691         .get = spapr_cap_get_bool,
 692         .set = spapr_cap_set_bool,
 693         .type = "bool",
 694         .apply = cap_nested_kvm_hv_apply,
 695     },
 696     [SPAPR_CAP_LARGE_DECREMENTER] = {
 697         .name = "large-decr",
 698         .description = "Allow Large Decrementer",
 699         .index = SPAPR_CAP_LARGE_DECREMENTER,
 700         .get = spapr_cap_get_bool,
 701         .set = spapr_cap_set_bool,
 702         .type = "bool",
 703         .apply = cap_large_decr_apply,
 704         .cpu_apply = cap_large_decr_cpu_apply,
 705     },
 706     [SPAPR_CAP_CCF_ASSIST] = {
 707         .name = "ccf-assist",
 708         .description = "Count Cache Flush Assist via HW Instruction",
 709         .index = SPAPR_CAP_CCF_ASSIST,
 710         .get = spapr_cap_get_bool,
 711         .set = spapr_cap_set_bool,
 712         .type = "bool",
 713         .apply = cap_ccf_assist_apply,
 714     },
 715     [SPAPR_CAP_FWNMI] = {
 716         .name = "fwnmi",
 717         .description = "Implements PAPR FWNMI option",
 718         .index = SPAPR_CAP_FWNMI,
 719         .get = spapr_cap_get_bool,
 720         .set = spapr_cap_set_bool,
 721         .type = "bool",
 722         .apply = cap_fwnmi_apply,
 723     },
 724     [SPAPR_CAP_RPT_INVALIDATE] = {
 725         .name = "rpt-invalidate",
 726         .description = "Allow H_RPT_INVALIDATE",
 727         .index = SPAPR_CAP_RPT_INVALIDATE,
 728         .get = spapr_cap_get_bool,
 729         .set = spapr_cap_set_bool,
 730         .type = "bool",
 731         .apply = cap_rpt_invalidate_apply,
 732     },
 733 };
 734
 735 static SpaprCapabilities default_caps_with_cpu(SpaprMachineState *spapr,
 736                                                const char *cputype)
 737 {
 738     SpaprMachineClass *smc = SPAPR_MACHINE_GET_CLASS(spapr);
 739     SpaprCapabilities caps;
 740
 741     caps = smc->default_caps;
 742
 743     if (!ppc_type_check_compat(cputype, CPU_POWERPC_LOGICAL_3_00,
 744                                0, spapr->max_compat_pvr)) {
 745         caps.caps[SPAPR_CAP_LARGE_DECREMENTER] = SPAPR_CAP_OFF;
 746     }
 747
 748     if (!ppc_type_check_compat(cputype, CPU_POWERPC_LOGICAL_2_07,
 749                                0, spapr->max_compat_pvr)) {
 750         caps.caps[SPAPR_CAP_HTM] = SPAPR_CAP_OFF;
 751         caps.caps[SPAPR_CAP_CFPC] = SPAPR_CAP_BROKEN;
 752     }
 753
 754     if (!ppc_type_check_compat(cputype, CPU_POWERPC_LOGICAL_2_06_PLUS,
 755                                0, spapr->max_compat_pvr)) {
 756         caps.caps[SPAPR_CAP_SBBC] = SPAPR_CAP_BROKEN;
 757     }
 758
 759     if (!ppc_type_check_compat(cputype, CPU_POWERPC_LOGICAL_2_06,
 760                                0, spapr->max_compat_pvr)) {
 761         caps.caps[SPAPR_CAP_VSX] = SPAPR_CAP_OFF;
 762         caps.caps[SPAPR_CAP_DFP] = SPAPR_CAP_OFF;
 763         caps.caps[SPAPR_CAP_IBS] = SPAPR_CAP_BROKEN;
 764     }
 765
 766     /* This is for pseries-2.12 and older */
 767     if (smc->default_caps.caps[SPAPR_CAP_HPT_MAXPAGESIZE] == 0) {
 768         uint8_t mps;
 769
 770         if (kvmppc_hpt_needs_host_contiguous_pages()) {
 771             mps = ctz64(qemu_minrampagesize());
 772         } else {
 773             mps = 34; /* allow everything up to 16GiB, i.e. everything */
 774         }
 775
 776         caps.caps[SPAPR_CAP_HPT_MAXPAGESIZE] = mps;
 777     }
 778
 779     return caps;
 780 }
 781
 782 int spapr_caps_pre_load(void *opaque)
 783 {
 784     SpaprMachineState *spapr = opaque;
 785
 786     /* Set to default so we can tell if this came in with the migration */
 787     spapr->mig = spapr->def;
 788     return 0;
 789 }
 790
 791 int spapr_caps_pre_save(void *opaque)
 792 {
 793     SpaprMachineState *spapr = opaque;
 794
 795     spapr->mig = spapr->eff;
 796     return 0;
 797 }
 798
 799 /* This has to be called from the top-level spapr post_load, not the
 800  * caps specific one.  Otherwise it wouldn't be called when the source
 801  * caps are all defaults, which could still conflict with overridden
 802  * caps on the destination */
 803 int spapr_caps_post_migration(SpaprMachineState *spapr)
 804 {
 805     int i;
 806     bool ok = true;
 807     SpaprCapabilities dstcaps = spapr->eff;
 808     SpaprCapabilities srccaps;
 809
 810     srccaps = default_caps_with_cpu(spapr, MACHINE(spapr)->cpu_type);
 811     for (i = 0; i < SPAPR_CAP_NUM; i++) {
 812         /* If not default value then assume came in with the migration */
 813         if (spapr->mig.caps[i] != spapr->def.caps[i]) {
 814             srccaps.caps[i] = spapr->mig.caps[i];
 815         }
 816     }
 817
 818     for (i = 0; i < SPAPR_CAP_NUM; i++) {
 819         SpaprCapabilityInfo *info = &capability_table[i];
 820
 821         if (srccaps.caps[i] > dstcaps.caps[i]) {
 822             error_report("cap-%s higher level (%d) in incoming stream than on destination (%d)",
 823                          info->name, srccaps.caps[i], dstcaps.caps[i]);
 824             ok = false;
 825         }
 826
 827         if (srccaps.caps[i] < dstcaps.caps[i]) {
 828             warn_report("cap-%s lower level (%d) in incoming stream than on destination (%d)",
 829                          info->name, srccaps.caps[i], dstcaps.caps[i]);
 830         }
 831     }
 832
 833     return ok ? 0 : -EINVAL;
 834 }
 835
 836 /* Used to generate the migration field and needed function for a spapr cap */
 837 #define SPAPR_CAP_MIG_STATE(sname, cap)                 \
 838 static bool spapr_cap_##sname##_needed(void *opaque)    \
 839 {                                                       \
 840     SpaprMachineState *spapr = opaque;                  \
 841     bool (*needed)(void *opaque) =                      \
 842         capability_table[cap].migrate_needed;           \
 843                                                         \
 844     return needed ? needed(opaque) : true &&            \
 845            spapr->cmd_line_caps[cap] &&                 \
 846            (spapr->eff.caps[cap] !=                     \
 847             spapr->def.caps[cap]);                      \
 848 }                                                       \
 849                                                         \
 850 const VMStateDescription vmstate_spapr_cap_##sname = {  \
 851     .name = "spapr/cap/" #sname,                        \
 852     .version_id = 1,                                    \
 853     .minimum_version_id = 1,                            \
 854     .needed = spapr_cap_##sname##_needed,               \
 855     .fields = (VMStateField[]) {                        \
 856         VMSTATE_UINT8(mig.caps[cap],                    \
 857                       SpaprMachineState),               \
 858         VMSTATE_END_OF_LIST()                           \
 859     },                                                  \
 860 }
 861
 862 SPAPR_CAP_MIG_STATE(htm, SPAPR_CAP_HTM);
 863 SPAPR_CAP_MIG_STATE(vsx, SPAPR_CAP_VSX);
 864 SPAPR_CAP_MIG_STATE(dfp, SPAPR_CAP_DFP);
 865 SPAPR_CAP_MIG_STATE(cfpc, SPAPR_CAP_CFPC);
 866 SPAPR_CAP_MIG_STATE(sbbc, SPAPR_CAP_SBBC);
 867 SPAPR_CAP_MIG_STATE(ibs, SPAPR_CAP_IBS);
 868 SPAPR_CAP_MIG_STATE(hpt_maxpagesize, SPAPR_CAP_HPT_MAXPAGESIZE);
 869 SPAPR_CAP_MIG_STATE(nested_kvm_hv, SPAPR_CAP_NESTED_KVM_HV);
 870 SPAPR_CAP_MIG_STATE(large_decr, SPAPR_CAP_LARGE_DECREMENTER);
 871 SPAPR_CAP_MIG_STATE(ccf_assist, SPAPR_CAP_CCF_ASSIST);
 872 SPAPR_CAP_MIG_STATE(fwnmi, SPAPR_CAP_FWNMI);
 873 SPAPR_CAP_MIG_STATE(rpt_invalidate, SPAPR_CAP_RPT_INVALIDATE);
 874
 875 void spapr_caps_init(SpaprMachineState *spapr)
 876 {
 877     SpaprCapabilities default_caps;
 878     int i;
 879
 880     /* Compute the actual set of caps we should run with */
 881     default_caps = default_caps_with_cpu(spapr, MACHINE(spapr)->cpu_type);
 882
 883     for (i = 0; i < SPAPR_CAP_NUM; i++) {
 884         /* Store the defaults */
 885         spapr->def.caps[i] = default_caps.caps[i];
 886         /* If not set on the command line then apply the default value */
 887         if (!spapr->cmd_line_caps[i]) {
 888             spapr->eff.caps[i] = default_caps.caps[i];
 889         }
 890     }
 891 }
 892
 893 void spapr_caps_apply(SpaprMachineState *spapr)
 894 {
 895     int i;
 896
 897     for (i = 0; i < SPAPR_CAP_NUM; i++) {
 898         SpaprCapabilityInfo *info = &capability_table[i];
 899
 900         /*
 901          * If the apply function can't set the desired level and thinks it's
 902          * fatal, it should cause that.
 903          */
 904         info->apply(spapr, spapr->eff.caps[i], &error_fatal);
 905     }
 906 }
 907
 908 void spapr_caps_cpu_apply(SpaprMachineState *spapr, PowerPCCPU *cpu)
 909 {
 910     int i;
 911
 912     for (i = 0; i < SPAPR_CAP_NUM; i++) {
 913         SpaprCapabilityInfo *info = &capability_table[i];
 914
 915         /*
 916          * If the apply function can't set the desired level and thinks it's
 917          * fatal, it should cause that.
 918          */
 919         if (info->cpu_apply) {
 920             info->cpu_apply(spapr, cpu, spapr->eff.caps[i], &error_fatal);
 921         }
 922     }
 923 }
 924
 925 void spapr_caps_add_properties(SpaprMachineClass *smc)
 926 {
 927     ObjectClass *klass = OBJECT_CLASS(smc);
 928     int i;
 929
 930     for (i = 0; i < ARRAY_SIZE(capability_table); i++) {
 931         SpaprCapabilityInfo *cap = &capability_table[i];
 932         char *name = g_strdup_printf("cap-%s", cap->name);
 933         char *desc;
 934
 935         object_class_property_add(klass, name, cap->type,
 936                                   cap->get, cap->set,
 937                                   NULL, cap);
 938
 939         desc = g_strdup_printf("%s", cap->description);
 940         object_class_property_set_description(klass, name, desc);
 941         g_free(name);
 942         g_free(desc);
 943     }
 944 }