]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * Copyright (C) 2010 Citrix Ltd. | |
3 | * | |
4 | * This work is licensed under the terms of the GNU GPL, version 2. See | |
5 | * the COPYING file in the top-level directory. | |
6 | * | |
7 | * Contributions after 2012-01-13 are licensed under the terms of the | |
8 | * GNU GPL, version 2 or (at your option) any later version. | |
9 | */ | |
10 | ||
11 | #include <sys/mman.h> | |
12 | ||
13 | #include "hw/pci.h" | |
14 | #include "hw/pc.h" | |
15 | #include "hw/xen_common.h" | |
16 | #include "hw/xen_backend.h" | |
17 | ||
18 | #include "range.h" | |
19 | #include "xen-mapcache.h" | |
20 | #include "trace.h" | |
21 | #include "exec-memory.h" | |
22 | ||
23 | #include <xen/hvm/ioreq.h> | |
24 | #include <xen/hvm/params.h> | |
25 | #include <xen/hvm/e820.h> | |
26 | ||
27 | //#define DEBUG_XEN | |
28 | ||
29 | #ifdef DEBUG_XEN | |
30 | #define DPRINTF(fmt, ...) \ | |
31 | do { fprintf(stderr, "xen: " fmt, ## __VA_ARGS__); } while (0) | |
32 | #else | |
33 | #define DPRINTF(fmt, ...) \ | |
34 | do { } while (0) | |
35 | #endif | |
36 | ||
37 | static MemoryRegion ram_memory, ram_640k, ram_lo, ram_hi; | |
38 | static MemoryRegion *framebuffer; | |
39 | ||
40 | /* Compatibility with older version */ | |
41 | #if __XEN_LATEST_INTERFACE_VERSION__ < 0x0003020a | |
42 | static inline uint32_t xen_vcpu_eport(shared_iopage_t *shared_page, int i) | |
43 | { | |
44 | return shared_page->vcpu_iodata[i].vp_eport; | |
45 | } | |
46 | static inline ioreq_t *xen_vcpu_ioreq(shared_iopage_t *shared_page, int vcpu) | |
47 | { | |
48 | return &shared_page->vcpu_iodata[vcpu].vp_ioreq; | |
49 | } | |
50 | # define FMT_ioreq_size PRIx64 | |
51 | #else | |
52 | static inline uint32_t xen_vcpu_eport(shared_iopage_t *shared_page, int i) | |
53 | { | |
54 | return shared_page->vcpu_ioreq[i].vp_eport; | |
55 | } | |
56 | static inline ioreq_t *xen_vcpu_ioreq(shared_iopage_t *shared_page, int vcpu) | |
57 | { | |
58 | return &shared_page->vcpu_ioreq[vcpu]; | |
59 | } | |
60 | # define FMT_ioreq_size "u" | |
61 | #endif | |
62 | ||
63 | #define BUFFER_IO_MAX_DELAY 100 | |
64 | ||
65 | typedef struct XenPhysmap { | |
66 | target_phys_addr_t start_addr; | |
67 | ram_addr_t size; | |
68 | MemoryRegion *mr; | |
69 | target_phys_addr_t phys_offset; | |
70 | ||
71 | QLIST_ENTRY(XenPhysmap) list; | |
72 | } XenPhysmap; | |
73 | ||
74 | typedef struct XenIOState { | |
75 | shared_iopage_t *shared_page; | |
76 | buffered_iopage_t *buffered_io_page; | |
77 | QEMUTimer *buffered_io_timer; | |
78 | /* the evtchn port for polling the notification, */ | |
79 | evtchn_port_t *ioreq_local_port; | |
80 | /* the evtchn fd for polling */ | |
81 | XenEvtchn xce_handle; | |
82 | /* which vcpu we are serving */ | |
83 | int send_vcpu; | |
84 | ||
85 | struct xs_handle *xenstore; | |
86 | MemoryListener memory_listener; | |
87 | QLIST_HEAD(, XenPhysmap) physmap; | |
88 | target_phys_addr_t free_phys_offset; | |
89 | const XenPhysmap *log_for_dirtybit; | |
90 | ||
91 | Notifier exit; | |
92 | Notifier suspend; | |
93 | } XenIOState; | |
94 | ||
95 | /* Xen specific function for piix pci */ | |
96 | ||
97 | int xen_pci_slot_get_pirq(PCIDevice *pci_dev, int irq_num) | |
98 | { | |
99 | return irq_num + ((pci_dev->devfn >> 3) << 2); | |
100 | } | |
101 | ||
102 | void xen_piix3_set_irq(void *opaque, int irq_num, int level) | |
103 | { | |
104 | xc_hvm_set_pci_intx_level(xen_xc, xen_domid, 0, 0, irq_num >> 2, | |
105 | irq_num & 3, level); | |
106 | } | |
107 | ||
108 | void xen_piix_pci_write_config_client(uint32_t address, uint32_t val, int len) | |
109 | { | |
110 | int i; | |
111 | ||
112 | /* Scan for updates to PCI link routes (0x60-0x63). */ | |
113 | for (i = 0; i < len; i++) { | |
114 | uint8_t v = (val >> (8 * i)) & 0xff; | |
115 | if (v & 0x80) { | |
116 | v = 0; | |
117 | } | |
118 | v &= 0xf; | |
119 | if (((address + i) >= 0x60) && ((address + i) <= 0x63)) { | |
120 | xc_hvm_set_pci_link_route(xen_xc, xen_domid, address + i - 0x60, v); | |
121 | } | |
122 | } | |
123 | } | |
124 | ||
125 | static void xen_suspend_notifier(Notifier *notifier, void *data) | |
126 | { | |
127 | xc_set_hvm_param(xen_xc, xen_domid, HVM_PARAM_ACPI_S_STATE, 3); | |
128 | } | |
129 | ||
130 | /* Xen Interrupt Controller */ | |
131 | ||
132 | static void xen_set_irq(void *opaque, int irq, int level) | |
133 | { | |
134 | xc_hvm_set_isa_irq_level(xen_xc, xen_domid, irq, level); | |
135 | } | |
136 | ||
137 | qemu_irq *xen_interrupt_controller_init(void) | |
138 | { | |
139 | return qemu_allocate_irqs(xen_set_irq, NULL, 16); | |
140 | } | |
141 | ||
142 | /* Memory Ops */ | |
143 | ||
144 | static void xen_ram_init(ram_addr_t ram_size) | |
145 | { | |
146 | MemoryRegion *sysmem = get_system_memory(); | |
147 | ram_addr_t below_4g_mem_size, above_4g_mem_size = 0; | |
148 | ram_addr_t block_len; | |
149 | ||
150 | block_len = ram_size; | |
151 | if (ram_size >= HVM_BELOW_4G_RAM_END) { | |
152 | /* Xen does not allocate the memory continuously, and keep a hole at | |
153 | * HVM_BELOW_4G_MMIO_START of HVM_BELOW_4G_MMIO_LENGTH | |
154 | */ | |
155 | block_len += HVM_BELOW_4G_MMIO_LENGTH; | |
156 | } | |
157 | memory_region_init_ram(&ram_memory, "xen.ram", block_len); | |
158 | vmstate_register_ram_global(&ram_memory); | |
159 | ||
160 | if (ram_size >= HVM_BELOW_4G_RAM_END) { | |
161 | above_4g_mem_size = ram_size - HVM_BELOW_4G_RAM_END; | |
162 | below_4g_mem_size = HVM_BELOW_4G_RAM_END; | |
163 | } else { | |
164 | below_4g_mem_size = ram_size; | |
165 | } | |
166 | ||
167 | memory_region_init_alias(&ram_640k, "xen.ram.640k", | |
168 | &ram_memory, 0, 0xa0000); | |
169 | memory_region_add_subregion(sysmem, 0, &ram_640k); | |
170 | /* Skip of the VGA IO memory space, it will be registered later by the VGA | |
171 | * emulated device. | |
172 | * | |
173 | * The area between 0xc0000 and 0x100000 will be used by SeaBIOS to load | |
174 | * the Options ROM, so it is registered here as RAM. | |
175 | */ | |
176 | memory_region_init_alias(&ram_lo, "xen.ram.lo", | |
177 | &ram_memory, 0xc0000, below_4g_mem_size - 0xc0000); | |
178 | memory_region_add_subregion(sysmem, 0xc0000, &ram_lo); | |
179 | if (above_4g_mem_size > 0) { | |
180 | memory_region_init_alias(&ram_hi, "xen.ram.hi", | |
181 | &ram_memory, 0x100000000ULL, | |
182 | above_4g_mem_size); | |
183 | memory_region_add_subregion(sysmem, 0x100000000ULL, &ram_hi); | |
184 | } | |
185 | } | |
186 | ||
187 | void xen_ram_alloc(ram_addr_t ram_addr, ram_addr_t size, MemoryRegion *mr) | |
188 | { | |
189 | unsigned long nr_pfn; | |
190 | xen_pfn_t *pfn_list; | |
191 | int i; | |
192 | ||
193 | if (mr == &ram_memory) { | |
194 | return; | |
195 | } | |
196 | ||
197 | trace_xen_ram_alloc(ram_addr, size); | |
198 | ||
199 | nr_pfn = size >> TARGET_PAGE_BITS; | |
200 | pfn_list = g_malloc(sizeof (*pfn_list) * nr_pfn); | |
201 | ||
202 | for (i = 0; i < nr_pfn; i++) { | |
203 | pfn_list[i] = (ram_addr >> TARGET_PAGE_BITS) + i; | |
204 | } | |
205 | ||
206 | if (xc_domain_populate_physmap_exact(xen_xc, xen_domid, nr_pfn, 0, 0, pfn_list)) { | |
207 | hw_error("xen: failed to populate ram at " RAM_ADDR_FMT, ram_addr); | |
208 | } | |
209 | ||
210 | g_free(pfn_list); | |
211 | } | |
212 | ||
213 | static XenPhysmap *get_physmapping(XenIOState *state, | |
214 | target_phys_addr_t start_addr, ram_addr_t size) | |
215 | { | |
216 | XenPhysmap *physmap = NULL; | |
217 | ||
218 | start_addr &= TARGET_PAGE_MASK; | |
219 | ||
220 | QLIST_FOREACH(physmap, &state->physmap, list) { | |
221 | if (range_covers_byte(physmap->start_addr, physmap->size, start_addr)) { | |
222 | return physmap; | |
223 | } | |
224 | } | |
225 | return NULL; | |
226 | } | |
227 | ||
228 | #if CONFIG_XEN_CTRL_INTERFACE_VERSION >= 340 | |
229 | static int xen_add_to_physmap(XenIOState *state, | |
230 | target_phys_addr_t start_addr, | |
231 | ram_addr_t size, | |
232 | MemoryRegion *mr, | |
233 | target_phys_addr_t offset_within_region) | |
234 | { | |
235 | unsigned long i = 0; | |
236 | int rc = 0; | |
237 | XenPhysmap *physmap = NULL; | |
238 | target_phys_addr_t pfn, start_gpfn; | |
239 | target_phys_addr_t phys_offset = memory_region_get_ram_addr(mr); | |
240 | ||
241 | if (get_physmapping(state, start_addr, size)) { | |
242 | return 0; | |
243 | } | |
244 | if (size <= 0) { | |
245 | return -1; | |
246 | } | |
247 | ||
248 | /* Xen can only handle a single dirty log region for now and we want | |
249 | * the linear framebuffer to be that region. | |
250 | * Avoid tracking any regions that is not videoram and avoid tracking | |
251 | * the legacy vga region. */ | |
252 | if (mr == framebuffer && start_addr > 0xbffff) { | |
253 | goto go_physmap; | |
254 | } | |
255 | return -1; | |
256 | ||
257 | go_physmap: | |
258 | DPRINTF("mapping vram to %llx - %llx\n", start_addr, start_addr + size); | |
259 | ||
260 | pfn = phys_offset >> TARGET_PAGE_BITS; | |
261 | start_gpfn = start_addr >> TARGET_PAGE_BITS; | |
262 | for (i = 0; i < size >> TARGET_PAGE_BITS; i++) { | |
263 | unsigned long idx = pfn + i; | |
264 | xen_pfn_t gpfn = start_gpfn + i; | |
265 | ||
266 | rc = xc_domain_add_to_physmap(xen_xc, xen_domid, XENMAPSPACE_gmfn, idx, gpfn); | |
267 | if (rc) { | |
268 | DPRINTF("add_to_physmap MFN %"PRI_xen_pfn" to PFN %" | |
269 | PRI_xen_pfn" failed: %d\n", idx, gpfn, rc); | |
270 | return -rc; | |
271 | } | |
272 | } | |
273 | ||
274 | physmap = g_malloc(sizeof (XenPhysmap)); | |
275 | ||
276 | physmap->start_addr = start_addr; | |
277 | physmap->size = size; | |
278 | physmap->phys_offset = phys_offset; | |
279 | ||
280 | QLIST_INSERT_HEAD(&state->physmap, physmap, list); | |
281 | ||
282 | xc_domain_pin_memory_cacheattr(xen_xc, xen_domid, | |
283 | start_addr >> TARGET_PAGE_BITS, | |
284 | (start_addr + size) >> TARGET_PAGE_BITS, | |
285 | XEN_DOMCTL_MEM_CACHEATTR_WB); | |
286 | return 0; | |
287 | } | |
288 | ||
289 | static int xen_remove_from_physmap(XenIOState *state, | |
290 | target_phys_addr_t start_addr, | |
291 | ram_addr_t size) | |
292 | { | |
293 | unsigned long i = 0; | |
294 | int rc = 0; | |
295 | XenPhysmap *physmap = NULL; | |
296 | target_phys_addr_t phys_offset = 0; | |
297 | ||
298 | physmap = get_physmapping(state, start_addr, size); | |
299 | if (physmap == NULL) { | |
300 | return -1; | |
301 | } | |
302 | ||
303 | phys_offset = physmap->phys_offset; | |
304 | size = physmap->size; | |
305 | ||
306 | DPRINTF("unmapping vram to %llx - %llx, from %llx\n", | |
307 | phys_offset, phys_offset + size, start_addr); | |
308 | ||
309 | size >>= TARGET_PAGE_BITS; | |
310 | start_addr >>= TARGET_PAGE_BITS; | |
311 | phys_offset >>= TARGET_PAGE_BITS; | |
312 | for (i = 0; i < size; i++) { | |
313 | unsigned long idx = start_addr + i; | |
314 | xen_pfn_t gpfn = phys_offset + i; | |
315 | ||
316 | rc = xc_domain_add_to_physmap(xen_xc, xen_domid, XENMAPSPACE_gmfn, idx, gpfn); | |
317 | if (rc) { | |
318 | fprintf(stderr, "add_to_physmap MFN %"PRI_xen_pfn" to PFN %" | |
319 | PRI_xen_pfn" failed: %d\n", idx, gpfn, rc); | |
320 | return -rc; | |
321 | } | |
322 | } | |
323 | ||
324 | QLIST_REMOVE(physmap, list); | |
325 | if (state->log_for_dirtybit == physmap) { | |
326 | state->log_for_dirtybit = NULL; | |
327 | } | |
328 | free(physmap); | |
329 | ||
330 | return 0; | |
331 | } | |
332 | ||
333 | #else | |
334 | static int xen_add_to_physmap(XenIOState *state, | |
335 | target_phys_addr_t start_addr, | |
336 | ram_addr_t size, | |
337 | MemoryRegion *mr, | |
338 | target_phys_addr_t offset_within_region) | |
339 | { | |
340 | return -ENOSYS; | |
341 | } | |
342 | ||
343 | static int xen_remove_from_physmap(XenIOState *state, | |
344 | target_phys_addr_t start_addr, | |
345 | ram_addr_t size) | |
346 | { | |
347 | return -ENOSYS; | |
348 | } | |
349 | #endif | |
350 | ||
351 | static void xen_set_memory(struct MemoryListener *listener, | |
352 | MemoryRegionSection *section, | |
353 | bool add) | |
354 | { | |
355 | XenIOState *state = container_of(listener, XenIOState, memory_listener); | |
356 | target_phys_addr_t start_addr = section->offset_within_address_space; | |
357 | ram_addr_t size = section->size; | |
358 | bool log_dirty = memory_region_is_logging(section->mr); | |
359 | hvmmem_type_t mem_type; | |
360 | ||
361 | if (!memory_region_is_ram(section->mr)) { | |
362 | return; | |
363 | } | |
364 | ||
365 | if (!(section->mr != &ram_memory | |
366 | && ( (log_dirty && add) || (!log_dirty && !add)))) { | |
367 | return; | |
368 | } | |
369 | ||
370 | trace_xen_client_set_memory(start_addr, size, log_dirty); | |
371 | ||
372 | start_addr &= TARGET_PAGE_MASK; | |
373 | size = TARGET_PAGE_ALIGN(size); | |
374 | ||
375 | if (add) { | |
376 | if (!memory_region_is_rom(section->mr)) { | |
377 | xen_add_to_physmap(state, start_addr, size, | |
378 | section->mr, section->offset_within_region); | |
379 | } else { | |
380 | mem_type = HVMMEM_ram_ro; | |
381 | if (xc_hvm_set_mem_type(xen_xc, xen_domid, mem_type, | |
382 | start_addr >> TARGET_PAGE_BITS, | |
383 | size >> TARGET_PAGE_BITS)) { | |
384 | DPRINTF("xc_hvm_set_mem_type error, addr: "TARGET_FMT_plx"\n", | |
385 | start_addr); | |
386 | } | |
387 | } | |
388 | } else { | |
389 | if (xen_remove_from_physmap(state, start_addr, size) < 0) { | |
390 | DPRINTF("physmapping does not exist at "TARGET_FMT_plx"\n", start_addr); | |
391 | } | |
392 | } | |
393 | } | |
394 | ||
395 | static void xen_region_add(MemoryListener *listener, | |
396 | MemoryRegionSection *section) | |
397 | { | |
398 | xen_set_memory(listener, section, true); | |
399 | } | |
400 | ||
401 | static void xen_region_del(MemoryListener *listener, | |
402 | MemoryRegionSection *section) | |
403 | { | |
404 | xen_set_memory(listener, section, false); | |
405 | } | |
406 | ||
407 | static void xen_sync_dirty_bitmap(XenIOState *state, | |
408 | target_phys_addr_t start_addr, | |
409 | ram_addr_t size) | |
410 | { | |
411 | target_phys_addr_t npages = size >> TARGET_PAGE_BITS; | |
412 | const int width = sizeof(unsigned long) * 8; | |
413 | unsigned long bitmap[(npages + width - 1) / width]; | |
414 | int rc, i, j; | |
415 | const XenPhysmap *physmap = NULL; | |
416 | ||
417 | physmap = get_physmapping(state, start_addr, size); | |
418 | if (physmap == NULL) { | |
419 | /* not handled */ | |
420 | return; | |
421 | } | |
422 | ||
423 | if (state->log_for_dirtybit == NULL) { | |
424 | state->log_for_dirtybit = physmap; | |
425 | } else if (state->log_for_dirtybit != physmap) { | |
426 | /* Only one range for dirty bitmap can be tracked. */ | |
427 | return; | |
428 | } | |
429 | ||
430 | rc = xc_hvm_track_dirty_vram(xen_xc, xen_domid, | |
431 | start_addr >> TARGET_PAGE_BITS, npages, | |
432 | bitmap); | |
433 | if (rc < 0) { | |
434 | if (rc != -ENODATA) { | |
435 | fprintf(stderr, "xen: track_dirty_vram failed (0x" TARGET_FMT_plx | |
436 | ", 0x" TARGET_FMT_plx "): %s\n", | |
437 | start_addr, start_addr + size, strerror(-rc)); | |
438 | } | |
439 | return; | |
440 | } | |
441 | ||
442 | for (i = 0; i < ARRAY_SIZE(bitmap); i++) { | |
443 | unsigned long map = bitmap[i]; | |
444 | while (map != 0) { | |
445 | j = ffsl(map) - 1; | |
446 | map &= ~(1ul << j); | |
447 | memory_region_set_dirty(framebuffer, | |
448 | (i * width + j) * TARGET_PAGE_SIZE, | |
449 | TARGET_PAGE_SIZE); | |
450 | }; | |
451 | } | |
452 | } | |
453 | ||
454 | static void xen_log_start(MemoryListener *listener, | |
455 | MemoryRegionSection *section) | |
456 | { | |
457 | XenIOState *state = container_of(listener, XenIOState, memory_listener); | |
458 | ||
459 | xen_sync_dirty_bitmap(state, section->offset_within_address_space, | |
460 | section->size); | |
461 | } | |
462 | ||
463 | static void xen_log_stop(MemoryListener *listener, MemoryRegionSection *section) | |
464 | { | |
465 | XenIOState *state = container_of(listener, XenIOState, memory_listener); | |
466 | ||
467 | state->log_for_dirtybit = NULL; | |
468 | /* Disable dirty bit tracking */ | |
469 | xc_hvm_track_dirty_vram(xen_xc, xen_domid, 0, 0, NULL); | |
470 | } | |
471 | ||
472 | static void xen_log_sync(MemoryListener *listener, MemoryRegionSection *section) | |
473 | { | |
474 | XenIOState *state = container_of(listener, XenIOState, memory_listener); | |
475 | ||
476 | xen_sync_dirty_bitmap(state, section->offset_within_address_space, | |
477 | section->size); | |
478 | } | |
479 | ||
480 | static void xen_log_global_start(MemoryListener *listener) | |
481 | { | |
482 | } | |
483 | ||
484 | static void xen_log_global_stop(MemoryListener *listener) | |
485 | { | |
486 | } | |
487 | ||
488 | static MemoryListener xen_memory_listener = { | |
489 | .region_add = xen_region_add, | |
490 | .region_del = xen_region_del, | |
491 | .log_start = xen_log_start, | |
492 | .log_stop = xen_log_stop, | |
493 | .log_sync = xen_log_sync, | |
494 | .log_global_start = xen_log_global_start, | |
495 | .log_global_stop = xen_log_global_stop, | |
496 | }; | |
497 | ||
498 | /* VCPU Operations, MMIO, IO ring ... */ | |
499 | ||
500 | static void xen_reset_vcpu(void *opaque) | |
501 | { | |
502 | CPUState *env = opaque; | |
503 | ||
504 | env->halted = 1; | |
505 | } | |
506 | ||
507 | void xen_vcpu_init(void) | |
508 | { | |
509 | CPUState *first_cpu; | |
510 | ||
511 | if ((first_cpu = qemu_get_cpu(0))) { | |
512 | qemu_register_reset(xen_reset_vcpu, first_cpu); | |
513 | xen_reset_vcpu(first_cpu); | |
514 | } | |
515 | } | |
516 | ||
517 | /* get the ioreq packets from share mem */ | |
518 | static ioreq_t *cpu_get_ioreq_from_shared_memory(XenIOState *state, int vcpu) | |
519 | { | |
520 | ioreq_t *req = xen_vcpu_ioreq(state->shared_page, vcpu); | |
521 | ||
522 | if (req->state != STATE_IOREQ_READY) { | |
523 | DPRINTF("I/O request not ready: " | |
524 | "%x, ptr: %x, port: %"PRIx64", " | |
525 | "data: %"PRIx64", count: %" FMT_ioreq_size ", size: %" FMT_ioreq_size "\n", | |
526 | req->state, req->data_is_ptr, req->addr, | |
527 | req->data, req->count, req->size); | |
528 | return NULL; | |
529 | } | |
530 | ||
531 | xen_rmb(); /* see IOREQ_READY /then/ read contents of ioreq */ | |
532 | ||
533 | req->state = STATE_IOREQ_INPROCESS; | |
534 | return req; | |
535 | } | |
536 | ||
537 | /* use poll to get the port notification */ | |
538 | /* ioreq_vec--out,the */ | |
539 | /* retval--the number of ioreq packet */ | |
540 | static ioreq_t *cpu_get_ioreq(XenIOState *state) | |
541 | { | |
542 | int i; | |
543 | evtchn_port_t port; | |
544 | ||
545 | port = xc_evtchn_pending(state->xce_handle); | |
546 | if (port != -1) { | |
547 | for (i = 0; i < smp_cpus; i++) { | |
548 | if (state->ioreq_local_port[i] == port) { | |
549 | break; | |
550 | } | |
551 | } | |
552 | ||
553 | if (i == smp_cpus) { | |
554 | hw_error("Fatal error while trying to get io event!\n"); | |
555 | } | |
556 | ||
557 | /* unmask the wanted port again */ | |
558 | xc_evtchn_unmask(state->xce_handle, port); | |
559 | ||
560 | /* get the io packet from shared memory */ | |
561 | state->send_vcpu = i; | |
562 | return cpu_get_ioreq_from_shared_memory(state, i); | |
563 | } | |
564 | ||
565 | /* read error or read nothing */ | |
566 | return NULL; | |
567 | } | |
568 | ||
569 | static uint32_t do_inp(pio_addr_t addr, unsigned long size) | |
570 | { | |
571 | switch (size) { | |
572 | case 1: | |
573 | return cpu_inb(addr); | |
574 | case 2: | |
575 | return cpu_inw(addr); | |
576 | case 4: | |
577 | return cpu_inl(addr); | |
578 | default: | |
579 | hw_error("inp: bad size: %04"FMT_pioaddr" %lx", addr, size); | |
580 | } | |
581 | } | |
582 | ||
583 | static void do_outp(pio_addr_t addr, | |
584 | unsigned long size, uint32_t val) | |
585 | { | |
586 | switch (size) { | |
587 | case 1: | |
588 | return cpu_outb(addr, val); | |
589 | case 2: | |
590 | return cpu_outw(addr, val); | |
591 | case 4: | |
592 | return cpu_outl(addr, val); | |
593 | default: | |
594 | hw_error("outp: bad size: %04"FMT_pioaddr" %lx", addr, size); | |
595 | } | |
596 | } | |
597 | ||
598 | static void cpu_ioreq_pio(ioreq_t *req) | |
599 | { | |
600 | int i, sign; | |
601 | ||
602 | sign = req->df ? -1 : 1; | |
603 | ||
604 | if (req->dir == IOREQ_READ) { | |
605 | if (!req->data_is_ptr) { | |
606 | req->data = do_inp(req->addr, req->size); | |
607 | } else { | |
608 | uint32_t tmp; | |
609 | ||
610 | for (i = 0; i < req->count; i++) { | |
611 | tmp = do_inp(req->addr, req->size); | |
612 | cpu_physical_memory_write(req->data + (sign * i * req->size), | |
613 | (uint8_t *) &tmp, req->size); | |
614 | } | |
615 | } | |
616 | } else if (req->dir == IOREQ_WRITE) { | |
617 | if (!req->data_is_ptr) { | |
618 | do_outp(req->addr, req->size, req->data); | |
619 | } else { | |
620 | for (i = 0; i < req->count; i++) { | |
621 | uint32_t tmp = 0; | |
622 | ||
623 | cpu_physical_memory_read(req->data + (sign * i * req->size), | |
624 | (uint8_t*) &tmp, req->size); | |
625 | do_outp(req->addr, req->size, tmp); | |
626 | } | |
627 | } | |
628 | } | |
629 | } | |
630 | ||
631 | static void cpu_ioreq_move(ioreq_t *req) | |
632 | { | |
633 | int i, sign; | |
634 | ||
635 | sign = req->df ? -1 : 1; | |
636 | ||
637 | if (!req->data_is_ptr) { | |
638 | if (req->dir == IOREQ_READ) { | |
639 | for (i = 0; i < req->count; i++) { | |
640 | cpu_physical_memory_read(req->addr + (sign * i * req->size), | |
641 | (uint8_t *) &req->data, req->size); | |
642 | } | |
643 | } else if (req->dir == IOREQ_WRITE) { | |
644 | for (i = 0; i < req->count; i++) { | |
645 | cpu_physical_memory_write(req->addr + (sign * i * req->size), | |
646 | (uint8_t *) &req->data, req->size); | |
647 | } | |
648 | } | |
649 | } else { | |
650 | uint64_t tmp; | |
651 | ||
652 | if (req->dir == IOREQ_READ) { | |
653 | for (i = 0; i < req->count; i++) { | |
654 | cpu_physical_memory_read(req->addr + (sign * i * req->size), | |
655 | (uint8_t*) &tmp, req->size); | |
656 | cpu_physical_memory_write(req->data + (sign * i * req->size), | |
657 | (uint8_t*) &tmp, req->size); | |
658 | } | |
659 | } else if (req->dir == IOREQ_WRITE) { | |
660 | for (i = 0; i < req->count; i++) { | |
661 | cpu_physical_memory_read(req->data + (sign * i * req->size), | |
662 | (uint8_t*) &tmp, req->size); | |
663 | cpu_physical_memory_write(req->addr + (sign * i * req->size), | |
664 | (uint8_t*) &tmp, req->size); | |
665 | } | |
666 | } | |
667 | } | |
668 | } | |
669 | ||
670 | static void handle_ioreq(ioreq_t *req) | |
671 | { | |
672 | if (!req->data_is_ptr && (req->dir == IOREQ_WRITE) && | |
673 | (req->size < sizeof (target_ulong))) { | |
674 | req->data &= ((target_ulong) 1 << (8 * req->size)) - 1; | |
675 | } | |
676 | ||
677 | switch (req->type) { | |
678 | case IOREQ_TYPE_PIO: | |
679 | cpu_ioreq_pio(req); | |
680 | break; | |
681 | case IOREQ_TYPE_COPY: | |
682 | cpu_ioreq_move(req); | |
683 | break; | |
684 | case IOREQ_TYPE_TIMEOFFSET: | |
685 | break; | |
686 | case IOREQ_TYPE_INVALIDATE: | |
687 | xen_invalidate_map_cache(); | |
688 | break; | |
689 | default: | |
690 | hw_error("Invalid ioreq type 0x%x\n", req->type); | |
691 | } | |
692 | } | |
693 | ||
694 | static void handle_buffered_iopage(XenIOState *state) | |
695 | { | |
696 | buf_ioreq_t *buf_req = NULL; | |
697 | ioreq_t req; | |
698 | int qw; | |
699 | ||
700 | if (!state->buffered_io_page) { | |
701 | return; | |
702 | } | |
703 | ||
704 | while (state->buffered_io_page->read_pointer != state->buffered_io_page->write_pointer) { | |
705 | buf_req = &state->buffered_io_page->buf_ioreq[ | |
706 | state->buffered_io_page->read_pointer % IOREQ_BUFFER_SLOT_NUM]; | |
707 | req.size = 1UL << buf_req->size; | |
708 | req.count = 1; | |
709 | req.addr = buf_req->addr; | |
710 | req.data = buf_req->data; | |
711 | req.state = STATE_IOREQ_READY; | |
712 | req.dir = buf_req->dir; | |
713 | req.df = 1; | |
714 | req.type = buf_req->type; | |
715 | req.data_is_ptr = 0; | |
716 | qw = (req.size == 8); | |
717 | if (qw) { | |
718 | buf_req = &state->buffered_io_page->buf_ioreq[ | |
719 | (state->buffered_io_page->read_pointer + 1) % IOREQ_BUFFER_SLOT_NUM]; | |
720 | req.data |= ((uint64_t)buf_req->data) << 32; | |
721 | } | |
722 | ||
723 | handle_ioreq(&req); | |
724 | ||
725 | xen_mb(); | |
726 | state->buffered_io_page->read_pointer += qw ? 2 : 1; | |
727 | } | |
728 | } | |
729 | ||
730 | static void handle_buffered_io(void *opaque) | |
731 | { | |
732 | XenIOState *state = opaque; | |
733 | ||
734 | handle_buffered_iopage(state); | |
735 | qemu_mod_timer(state->buffered_io_timer, | |
736 | BUFFER_IO_MAX_DELAY + qemu_get_clock_ms(rt_clock)); | |
737 | } | |
738 | ||
739 | static void cpu_handle_ioreq(void *opaque) | |
740 | { | |
741 | XenIOState *state = opaque; | |
742 | ioreq_t *req = cpu_get_ioreq(state); | |
743 | ||
744 | handle_buffered_iopage(state); | |
745 | if (req) { | |
746 | handle_ioreq(req); | |
747 | ||
748 | if (req->state != STATE_IOREQ_INPROCESS) { | |
749 | fprintf(stderr, "Badness in I/O request ... not in service?!: " | |
750 | "%x, ptr: %x, port: %"PRIx64", " | |
751 | "data: %"PRIx64", count: %" FMT_ioreq_size ", size: %" FMT_ioreq_size "\n", | |
752 | req->state, req->data_is_ptr, req->addr, | |
753 | req->data, req->count, req->size); | |
754 | destroy_hvm_domain(); | |
755 | return; | |
756 | } | |
757 | ||
758 | xen_wmb(); /* Update ioreq contents /then/ update state. */ | |
759 | ||
760 | /* | |
761 | * We do this before we send the response so that the tools | |
762 | * have the opportunity to pick up on the reset before the | |
763 | * guest resumes and does a hlt with interrupts disabled which | |
764 | * causes Xen to powerdown the domain. | |
765 | */ | |
766 | if (runstate_is_running()) { | |
767 | if (qemu_shutdown_requested_get()) { | |
768 | destroy_hvm_domain(); | |
769 | } | |
770 | if (qemu_reset_requested_get()) { | |
771 | qemu_system_reset(VMRESET_REPORT); | |
772 | } | |
773 | } | |
774 | ||
775 | req->state = STATE_IORESP_READY; | |
776 | xc_evtchn_notify(state->xce_handle, state->ioreq_local_port[state->send_vcpu]); | |
777 | } | |
778 | } | |
779 | ||
780 | static int store_dev_info(int domid, CharDriverState *cs, const char *string) | |
781 | { | |
782 | struct xs_handle *xs = NULL; | |
783 | char *path = NULL; | |
784 | char *newpath = NULL; | |
785 | char *pts = NULL; | |
786 | int ret = -1; | |
787 | ||
788 | /* Only continue if we're talking to a pty. */ | |
789 | if (strncmp(cs->filename, "pty:", 4)) { | |
790 | return 0; | |
791 | } | |
792 | pts = cs->filename + 4; | |
793 | ||
794 | /* We now have everything we need to set the xenstore entry. */ | |
795 | xs = xs_open(0); | |
796 | if (xs == NULL) { | |
797 | fprintf(stderr, "Could not contact XenStore\n"); | |
798 | goto out; | |
799 | } | |
800 | ||
801 | path = xs_get_domain_path(xs, domid); | |
802 | if (path == NULL) { | |
803 | fprintf(stderr, "xs_get_domain_path() error\n"); | |
804 | goto out; | |
805 | } | |
806 | newpath = realloc(path, (strlen(path) + strlen(string) + | |
807 | strlen("/tty") + 1)); | |
808 | if (newpath == NULL) { | |
809 | fprintf(stderr, "realloc error\n"); | |
810 | goto out; | |
811 | } | |
812 | path = newpath; | |
813 | ||
814 | strcat(path, string); | |
815 | strcat(path, "/tty"); | |
816 | if (!xs_write(xs, XBT_NULL, path, pts, strlen(pts))) { | |
817 | fprintf(stderr, "xs_write for '%s' fail", string); | |
818 | goto out; | |
819 | } | |
820 | ret = 0; | |
821 | ||
822 | out: | |
823 | free(path); | |
824 | xs_close(xs); | |
825 | ||
826 | return ret; | |
827 | } | |
828 | ||
829 | void xenstore_store_pv_console_info(int i, CharDriverState *chr) | |
830 | { | |
831 | if (i == 0) { | |
832 | store_dev_info(xen_domid, chr, "/console"); | |
833 | } else { | |
834 | char buf[32]; | |
835 | snprintf(buf, sizeof(buf), "/device/console/%d", i); | |
836 | store_dev_info(xen_domid, chr, buf); | |
837 | } | |
838 | } | |
839 | ||
840 | static void xenstore_record_dm_state(struct xs_handle *xs, const char *state) | |
841 | { | |
842 | char path[50]; | |
843 | ||
844 | if (xs == NULL) { | |
845 | fprintf(stderr, "xenstore connection not initialized\n"); | |
846 | exit(1); | |
847 | } | |
848 | ||
849 | snprintf(path, sizeof (path), "/local/domain/0/device-model/%u/state", xen_domid); | |
850 | if (!xs_write(xs, XBT_NULL, path, state, strlen(state))) { | |
851 | fprintf(stderr, "error recording dm state\n"); | |
852 | exit(1); | |
853 | } | |
854 | } | |
855 | ||
856 | static void xen_main_loop_prepare(XenIOState *state) | |
857 | { | |
858 | int evtchn_fd = -1; | |
859 | ||
860 | if (state->xce_handle != XC_HANDLER_INITIAL_VALUE) { | |
861 | evtchn_fd = xc_evtchn_fd(state->xce_handle); | |
862 | } | |
863 | ||
864 | state->buffered_io_timer = qemu_new_timer_ms(rt_clock, handle_buffered_io, | |
865 | state); | |
866 | qemu_mod_timer(state->buffered_io_timer, qemu_get_clock_ms(rt_clock)); | |
867 | ||
868 | if (evtchn_fd != -1) { | |
869 | qemu_set_fd_handler(evtchn_fd, cpu_handle_ioreq, NULL, state); | |
870 | } | |
871 | } | |
872 | ||
873 | ||
874 | /* Initialise Xen */ | |
875 | ||
876 | static void xen_change_state_handler(void *opaque, int running, | |
877 | RunState state) | |
878 | { | |
879 | if (running) { | |
880 | /* record state running */ | |
881 | xenstore_record_dm_state(xenstore, "running"); | |
882 | } | |
883 | } | |
884 | ||
885 | static void xen_hvm_change_state_handler(void *opaque, int running, | |
886 | RunState rstate) | |
887 | { | |
888 | XenIOState *xstate = opaque; | |
889 | if (running) { | |
890 | xen_main_loop_prepare(xstate); | |
891 | } | |
892 | } | |
893 | ||
894 | static void xen_exit_notifier(Notifier *n, void *data) | |
895 | { | |
896 | XenIOState *state = container_of(n, XenIOState, exit); | |
897 | ||
898 | xc_evtchn_close(state->xce_handle); | |
899 | xs_daemon_close(state->xenstore); | |
900 | } | |
901 | ||
902 | int xen_init(void) | |
903 | { | |
904 | xen_xc = xen_xc_interface_open(0, 0, 0); | |
905 | if (xen_xc == XC_HANDLER_INITIAL_VALUE) { | |
906 | xen_be_printf(NULL, 0, "can't open xen interface\n"); | |
907 | return -1; | |
908 | } | |
909 | qemu_add_vm_change_state_handler(xen_change_state_handler, NULL); | |
910 | ||
911 | return 0; | |
912 | } | |
913 | ||
914 | int xen_hvm_init(void) | |
915 | { | |
916 | int i, rc; | |
917 | unsigned long ioreq_pfn; | |
918 | XenIOState *state; | |
919 | ||
920 | state = g_malloc0(sizeof (XenIOState)); | |
921 | ||
922 | state->xce_handle = xen_xc_evtchn_open(NULL, 0); | |
923 | if (state->xce_handle == XC_HANDLER_INITIAL_VALUE) { | |
924 | perror("xen: event channel open"); | |
925 | return -errno; | |
926 | } | |
927 | ||
928 | state->xenstore = xs_daemon_open(); | |
929 | if (state->xenstore == NULL) { | |
930 | perror("xen: xenstore open"); | |
931 | return -errno; | |
932 | } | |
933 | ||
934 | state->exit.notify = xen_exit_notifier; | |
935 | qemu_add_exit_notifier(&state->exit); | |
936 | ||
937 | state->suspend.notify = xen_suspend_notifier; | |
938 | qemu_register_suspend_notifier(&state->suspend); | |
939 | ||
940 | xc_get_hvm_param(xen_xc, xen_domid, HVM_PARAM_IOREQ_PFN, &ioreq_pfn); | |
941 | DPRINTF("shared page at pfn %lx\n", ioreq_pfn); | |
942 | state->shared_page = xc_map_foreign_range(xen_xc, xen_domid, XC_PAGE_SIZE, | |
943 | PROT_READ|PROT_WRITE, ioreq_pfn); | |
944 | if (state->shared_page == NULL) { | |
945 | hw_error("map shared IO page returned error %d handle=" XC_INTERFACE_FMT, | |
946 | errno, xen_xc); | |
947 | } | |
948 | ||
949 | xc_get_hvm_param(xen_xc, xen_domid, HVM_PARAM_BUFIOREQ_PFN, &ioreq_pfn); | |
950 | DPRINTF("buffered io page at pfn %lx\n", ioreq_pfn); | |
951 | state->buffered_io_page = xc_map_foreign_range(xen_xc, xen_domid, XC_PAGE_SIZE, | |
952 | PROT_READ|PROT_WRITE, ioreq_pfn); | |
953 | if (state->buffered_io_page == NULL) { | |
954 | hw_error("map buffered IO page returned error %d", errno); | |
955 | } | |
956 | ||
957 | state->ioreq_local_port = g_malloc0(smp_cpus * sizeof (evtchn_port_t)); | |
958 | ||
959 | /* FIXME: how about if we overflow the page here? */ | |
960 | for (i = 0; i < smp_cpus; i++) { | |
961 | rc = xc_evtchn_bind_interdomain(state->xce_handle, xen_domid, | |
962 | xen_vcpu_eport(state->shared_page, i)); | |
963 | if (rc == -1) { | |
964 | fprintf(stderr, "bind interdomain ioctl error %d\n", errno); | |
965 | return -1; | |
966 | } | |
967 | state->ioreq_local_port[i] = rc; | |
968 | } | |
969 | ||
970 | /* Init RAM management */ | |
971 | xen_map_cache_init(); | |
972 | xen_ram_init(ram_size); | |
973 | ||
974 | qemu_add_vm_change_state_handler(xen_hvm_change_state_handler, state); | |
975 | ||
976 | state->memory_listener = xen_memory_listener; | |
977 | QLIST_INIT(&state->physmap); | |
978 | memory_listener_register(&state->memory_listener); | |
979 | state->log_for_dirtybit = NULL; | |
980 | ||
981 | /* Initialize backend core & drivers */ | |
982 | if (xen_be_init() != 0) { | |
983 | fprintf(stderr, "%s: xen backend core setup failed\n", __FUNCTION__); | |
984 | exit(1); | |
985 | } | |
986 | xen_be_register("console", &xen_console_ops); | |
987 | xen_be_register("vkbd", &xen_kbdmouse_ops); | |
988 | xen_be_register("qdisk", &xen_blkdev_ops); | |
989 | ||
990 | return 0; | |
991 | } | |
992 | ||
993 | void destroy_hvm_domain(void) | |
994 | { | |
995 | XenXC xc_handle; | |
996 | int sts; | |
997 | ||
998 | xc_handle = xen_xc_interface_open(0, 0, 0); | |
999 | if (xc_handle == XC_HANDLER_INITIAL_VALUE) { | |
1000 | fprintf(stderr, "Cannot acquire xenctrl handle\n"); | |
1001 | } else { | |
1002 | sts = xc_domain_shutdown(xc_handle, xen_domid, SHUTDOWN_poweroff); | |
1003 | if (sts != 0) { | |
1004 | fprintf(stderr, "? xc_domain_shutdown failed to issue poweroff, " | |
1005 | "sts %d, %s\n", sts, strerror(errno)); | |
1006 | } else { | |
1007 | fprintf(stderr, "Issued domain %d poweroff\n", xen_domid); | |
1008 | } | |
1009 | xc_interface_close(xc_handle); | |
1010 | } | |
1011 | } | |
1012 | ||
1013 | void xen_register_framebuffer(MemoryRegion *mr) | |
1014 | { | |
1015 | framebuffer = mr; | |
1016 | } |