2 * Physical memory management
4 * Copyright 2011 Red Hat, Inc. and/or its affiliates
7 * Avi Kivity <avi@redhat.com>
9 * This work is licensed under the terms of the GNU GPL, version 2. See
10 * the COPYING file in the top-level directory.
12 * Contributions after 2012-01-13 are licensed under the terms of the
13 * GNU GPL, version 2 or (at your option) any later version.
17 #include "exec-memory.h"
23 #define WANT_EXEC_OBSOLETE
24 #include "exec-obsolete.h"
26 unsigned memory_region_transaction_depth
= 0;
27 static bool memory_region_update_pending
= false;
28 static bool global_dirty_log
= false;
30 static QTAILQ_HEAD(memory_listeners
, MemoryListener
) memory_listeners
31 = QTAILQ_HEAD_INITIALIZER(memory_listeners
);
33 typedef struct AddrRange AddrRange
;
36 * Note using signed integers limits us to physical addresses at most
37 * 63 bits wide. They are needed for negative offsetting in aliases
38 * (large MemoryRegion::alias_offset).
45 static AddrRange
addrrange_make(Int128 start
, Int128 size
)
47 return (AddrRange
) { start
, size
};
50 static bool addrrange_equal(AddrRange r1
, AddrRange r2
)
52 return int128_eq(r1
.start
, r2
.start
) && int128_eq(r1
.size
, r2
.size
);
55 static Int128
addrrange_end(AddrRange r
)
57 return int128_add(r
.start
, r
.size
);
60 static AddrRange
addrrange_shift(AddrRange range
, Int128 delta
)
62 int128_addto(&range
.start
, delta
);
66 static bool addrrange_contains(AddrRange range
, Int128 addr
)
68 return int128_ge(addr
, range
.start
)
69 && int128_lt(addr
, addrrange_end(range
));
72 static bool addrrange_intersects(AddrRange r1
, AddrRange r2
)
74 return addrrange_contains(r1
, r2
.start
)
75 || addrrange_contains(r2
, r1
.start
);
78 static AddrRange
addrrange_intersection(AddrRange r1
, AddrRange r2
)
80 Int128 start
= int128_max(r1
.start
, r2
.start
);
81 Int128 end
= int128_min(addrrange_end(r1
), addrrange_end(r2
));
82 return addrrange_make(start
, int128_sub(end
, start
));
85 enum ListenerDirection
{ Forward
, Reverse
};
87 #define MEMORY_LISTENER_CALL(_callback, _direction, _args...) \
89 MemoryListener *_listener; \
91 switch (_direction) { \
93 QTAILQ_FOREACH(_listener, &memory_listeners, link) { \
94 _listener->_callback(_listener, ##_args); \
98 QTAILQ_FOREACH_REVERSE(_listener, &memory_listeners, \
99 memory_listeners, link) { \
100 _listener->_callback(_listener, ##_args); \
108 #define MEMORY_LISTENER_UPDATE_REGION(fr, as, dir, callback) \
109 MEMORY_LISTENER_CALL(callback, dir, &(MemoryRegionSection) { \
111 .address_space = (as)->root, \
112 .offset_within_region = (fr)->offset_in_region, \
113 .size = int128_get64((fr)->addr.size), \
114 .offset_within_address_space = int128_get64((fr)->addr.start), \
117 struct CoalescedMemoryRange
{
119 QTAILQ_ENTRY(CoalescedMemoryRange
) link
;
122 struct MemoryRegionIoeventfd
{
129 static bool memory_region_ioeventfd_before(MemoryRegionIoeventfd a
,
130 MemoryRegionIoeventfd b
)
132 if (int128_lt(a
.addr
.start
, b
.addr
.start
)) {
134 } else if (int128_gt(a
.addr
.start
, b
.addr
.start
)) {
136 } else if (int128_lt(a
.addr
.size
, b
.addr
.size
)) {
138 } else if (int128_gt(a
.addr
.size
, b
.addr
.size
)) {
140 } else if (a
.match_data
< b
.match_data
) {
142 } else if (a
.match_data
> b
.match_data
) {
144 } else if (a
.match_data
) {
145 if (a
.data
< b
.data
) {
147 } else if (a
.data
> b
.data
) {
153 } else if (a
.fd
> b
.fd
) {
159 static bool memory_region_ioeventfd_equal(MemoryRegionIoeventfd a
,
160 MemoryRegionIoeventfd b
)
162 return !memory_region_ioeventfd_before(a
, b
)
163 && !memory_region_ioeventfd_before(b
, a
);
166 typedef struct FlatRange FlatRange
;
167 typedef struct FlatView FlatView
;
169 /* Range of memory in the global map. Addresses are absolute. */
172 target_phys_addr_t offset_in_region
;
174 uint8_t dirty_log_mask
;
179 /* Flattened global view of current active memory hierarchy. Kept in sorted
185 unsigned nr_allocated
;
188 typedef struct AddressSpace AddressSpace
;
189 typedef struct AddressSpaceOps AddressSpaceOps
;
191 /* A system address space - I/O, memory, etc. */
192 struct AddressSpace
{
193 const AddressSpaceOps
*ops
;
195 FlatView current_map
;
197 MemoryRegionIoeventfd
*ioeventfds
;
200 struct AddressSpaceOps
{
201 void (*range_add
)(AddressSpace
*as
, FlatRange
*fr
);
202 void (*range_del
)(AddressSpace
*as
, FlatRange
*fr
);
203 void (*log_start
)(AddressSpace
*as
, FlatRange
*fr
);
204 void (*log_stop
)(AddressSpace
*as
, FlatRange
*fr
);
207 #define FOR_EACH_FLAT_RANGE(var, view) \
208 for (var = (view)->ranges; var < (view)->ranges + (view)->nr; ++var)
210 static bool flatrange_equal(FlatRange
*a
, FlatRange
*b
)
212 return a
->mr
== b
->mr
213 && addrrange_equal(a
->addr
, b
->addr
)
214 && a
->offset_in_region
== b
->offset_in_region
215 && a
->readable
== b
->readable
216 && a
->readonly
== b
->readonly
;
219 static void flatview_init(FlatView
*view
)
223 view
->nr_allocated
= 0;
226 /* Insert a range into a given position. Caller is responsible for maintaining
229 static void flatview_insert(FlatView
*view
, unsigned pos
, FlatRange
*range
)
231 if (view
->nr
== view
->nr_allocated
) {
232 view
->nr_allocated
= MAX(2 * view
->nr
, 10);
233 view
->ranges
= g_realloc(view
->ranges
,
234 view
->nr_allocated
* sizeof(*view
->ranges
));
236 memmove(view
->ranges
+ pos
+ 1, view
->ranges
+ pos
,
237 (view
->nr
- pos
) * sizeof(FlatRange
));
238 view
->ranges
[pos
] = *range
;
242 static void flatview_destroy(FlatView
*view
)
244 g_free(view
->ranges
);
247 static bool can_merge(FlatRange
*r1
, FlatRange
*r2
)
249 return int128_eq(addrrange_end(r1
->addr
), r2
->addr
.start
)
251 && int128_eq(int128_add(int128_make64(r1
->offset_in_region
),
253 int128_make64(r2
->offset_in_region
))
254 && r1
->dirty_log_mask
== r2
->dirty_log_mask
255 && r1
->readable
== r2
->readable
256 && r1
->readonly
== r2
->readonly
;
259 /* Attempt to simplify a view by merging ajacent ranges */
260 static void flatview_simplify(FlatView
*view
)
265 while (i
< view
->nr
) {
268 && can_merge(&view
->ranges
[j
-1], &view
->ranges
[j
])) {
269 int128_addto(&view
->ranges
[i
].addr
.size
, view
->ranges
[j
].addr
.size
);
273 memmove(&view
->ranges
[i
], &view
->ranges
[j
],
274 (view
->nr
- j
) * sizeof(view
->ranges
[j
]));
279 static void memory_region_read_accessor(void *opaque
,
280 target_phys_addr_t addr
,
286 MemoryRegion
*mr
= opaque
;
289 tmp
= mr
->ops
->read(mr
->opaque
, addr
, size
);
290 *value
|= (tmp
& mask
) << shift
;
293 static void memory_region_write_accessor(void *opaque
,
294 target_phys_addr_t addr
,
300 MemoryRegion
*mr
= opaque
;
303 tmp
= (*value
>> shift
) & mask
;
304 mr
->ops
->write(mr
->opaque
, addr
, tmp
, size
);
307 static void access_with_adjusted_size(target_phys_addr_t addr
,
310 unsigned access_size_min
,
311 unsigned access_size_max
,
312 void (*access
)(void *opaque
,
313 target_phys_addr_t addr
,
320 uint64_t access_mask
;
321 unsigned access_size
;
324 if (!access_size_min
) {
327 if (!access_size_max
) {
330 access_size
= MAX(MIN(size
, access_size_max
), access_size_min
);
331 access_mask
= -1ULL >> (64 - access_size
* 8);
332 for (i
= 0; i
< size
; i
+= access_size
) {
333 /* FIXME: big-endian support */
334 access(opaque
, addr
+ i
, value
, access_size
, i
* 8, access_mask
);
338 static void as_memory_range_add(AddressSpace
*as
, FlatRange
*fr
)
340 MemoryRegionSection section
= {
342 .offset_within_address_space
= int128_get64(fr
->addr
.start
),
343 .offset_within_region
= fr
->offset_in_region
,
344 .size
= int128_get64(fr
->addr
.size
),
347 cpu_register_physical_memory_log(§ion
, fr
->readable
, fr
->readonly
);
350 static void as_memory_range_del(AddressSpace
*as
, FlatRange
*fr
)
352 MemoryRegionSection section
= {
353 .mr
= &io_mem_unassigned
,
354 .offset_within_address_space
= int128_get64(fr
->addr
.start
),
355 .offset_within_region
= int128_get64(fr
->addr
.start
),
356 .size
= int128_get64(fr
->addr
.size
),
359 cpu_register_physical_memory_log(§ion
, true, false);
362 static void as_memory_log_start(AddressSpace
*as
, FlatRange
*fr
)
366 static void as_memory_log_stop(AddressSpace
*as
, FlatRange
*fr
)
370 static const AddressSpaceOps address_space_ops_memory
= {
371 .range_add
= as_memory_range_add
,
372 .range_del
= as_memory_range_del
,
373 .log_start
= as_memory_log_start
,
374 .log_stop
= as_memory_log_stop
,
377 static AddressSpace address_space_memory
= {
378 .ops
= &address_space_ops_memory
,
381 static const MemoryRegionPortio
*find_portio(MemoryRegion
*mr
, uint64_t offset
,
382 unsigned width
, bool write
)
384 const MemoryRegionPortio
*mrp
;
386 for (mrp
= mr
->ops
->old_portio
; mrp
->size
; ++mrp
) {
387 if (offset
>= mrp
->offset
&& offset
< mrp
->offset
+ mrp
->len
388 && width
== mrp
->size
389 && (write
? (bool)mrp
->write
: (bool)mrp
->read
)) {
396 static void memory_region_iorange_read(IORange
*iorange
,
401 MemoryRegion
*mr
= container_of(iorange
, MemoryRegion
, iorange
);
403 if (mr
->ops
->old_portio
) {
404 const MemoryRegionPortio
*mrp
= find_portio(mr
, offset
, width
, false);
406 *data
= ((uint64_t)1 << (width
* 8)) - 1;
408 *data
= mrp
->read(mr
->opaque
, offset
);
409 } else if (width
== 2) {
410 mrp
= find_portio(mr
, offset
, 1, false);
412 *data
= mrp
->read(mr
->opaque
, offset
) |
413 (mrp
->read(mr
->opaque
, offset
+ 1) << 8);
418 access_with_adjusted_size(offset
, data
, width
,
419 mr
->ops
->impl
.min_access_size
,
420 mr
->ops
->impl
.max_access_size
,
421 memory_region_read_accessor
, mr
);
424 static void memory_region_iorange_write(IORange
*iorange
,
429 MemoryRegion
*mr
= container_of(iorange
, MemoryRegion
, iorange
);
431 if (mr
->ops
->old_portio
) {
432 const MemoryRegionPortio
*mrp
= find_portio(mr
, offset
, width
, true);
435 mrp
->write(mr
->opaque
, offset
, data
);
436 } else if (width
== 2) {
437 mrp
= find_portio(mr
, offset
, 1, false);
439 mrp
->write(mr
->opaque
, offset
, data
& 0xff);
440 mrp
->write(mr
->opaque
, offset
+ 1, data
>> 8);
444 access_with_adjusted_size(offset
, &data
, width
,
445 mr
->ops
->impl
.min_access_size
,
446 mr
->ops
->impl
.max_access_size
,
447 memory_region_write_accessor
, mr
);
450 static const IORangeOps memory_region_iorange_ops
= {
451 .read
= memory_region_iorange_read
,
452 .write
= memory_region_iorange_write
,
455 static void as_io_range_add(AddressSpace
*as
, FlatRange
*fr
)
457 iorange_init(&fr
->mr
->iorange
, &memory_region_iorange_ops
,
458 int128_get64(fr
->addr
.start
), int128_get64(fr
->addr
.size
));
459 ioport_register(&fr
->mr
->iorange
);
462 static void as_io_range_del(AddressSpace
*as
, FlatRange
*fr
)
464 isa_unassign_ioport(int128_get64(fr
->addr
.start
),
465 int128_get64(fr
->addr
.size
));
468 static const AddressSpaceOps address_space_ops_io
= {
469 .range_add
= as_io_range_add
,
470 .range_del
= as_io_range_del
,
473 static AddressSpace address_space_io
= {
474 .ops
= &address_space_ops_io
,
477 static AddressSpace
*memory_region_to_address_space(MemoryRegion
*mr
)
482 if (mr
== address_space_memory
.root
) {
483 return &address_space_memory
;
485 if (mr
== address_space_io
.root
) {
486 return &address_space_io
;
491 /* Render a memory region into the global view. Ranges in @view obscure
494 static void render_memory_region(FlatView
*view
,
500 MemoryRegion
*subregion
;
502 target_phys_addr_t offset_in_region
;
512 int128_addto(&base
, int128_make64(mr
->addr
));
513 readonly
|= mr
->readonly
;
515 tmp
= addrrange_make(base
, mr
->size
);
517 if (!addrrange_intersects(tmp
, clip
)) {
521 clip
= addrrange_intersection(tmp
, clip
);
524 int128_subfrom(&base
, int128_make64(mr
->alias
->addr
));
525 int128_subfrom(&base
, int128_make64(mr
->alias_offset
));
526 render_memory_region(view
, mr
->alias
, base
, clip
, readonly
);
530 /* Render subregions in priority order. */
531 QTAILQ_FOREACH(subregion
, &mr
->subregions
, subregions_link
) {
532 render_memory_region(view
, subregion
, base
, clip
, readonly
);
535 if (!mr
->terminates
) {
539 offset_in_region
= int128_get64(int128_sub(clip
.start
, base
));
543 /* Render the region itself into any gaps left by the current view. */
544 for (i
= 0; i
< view
->nr
&& int128_nz(remain
); ++i
) {
545 if (int128_ge(base
, addrrange_end(view
->ranges
[i
].addr
))) {
548 if (int128_lt(base
, view
->ranges
[i
].addr
.start
)) {
549 now
= int128_min(remain
,
550 int128_sub(view
->ranges
[i
].addr
.start
, base
));
552 fr
.offset_in_region
= offset_in_region
;
553 fr
.addr
= addrrange_make(base
, now
);
554 fr
.dirty_log_mask
= mr
->dirty_log_mask
;
555 fr
.readable
= mr
->readable
;
556 fr
.readonly
= readonly
;
557 flatview_insert(view
, i
, &fr
);
559 int128_addto(&base
, now
);
560 offset_in_region
+= int128_get64(now
);
561 int128_subfrom(&remain
, now
);
563 if (int128_eq(base
, view
->ranges
[i
].addr
.start
)) {
564 now
= int128_min(remain
, view
->ranges
[i
].addr
.size
);
565 int128_addto(&base
, now
);
566 offset_in_region
+= int128_get64(now
);
567 int128_subfrom(&remain
, now
);
570 if (int128_nz(remain
)) {
572 fr
.offset_in_region
= offset_in_region
;
573 fr
.addr
= addrrange_make(base
, remain
);
574 fr
.dirty_log_mask
= mr
->dirty_log_mask
;
575 fr
.readable
= mr
->readable
;
576 fr
.readonly
= readonly
;
577 flatview_insert(view
, i
, &fr
);
581 /* Render a memory topology into a list of disjoint absolute ranges. */
582 static FlatView
generate_memory_topology(MemoryRegion
*mr
)
586 flatview_init(&view
);
588 render_memory_region(&view
, mr
, int128_zero(),
589 addrrange_make(int128_zero(), int128_2_64()), false);
590 flatview_simplify(&view
);
595 static void address_space_add_del_ioeventfds(AddressSpace
*as
,
596 MemoryRegionIoeventfd
*fds_new
,
598 MemoryRegionIoeventfd
*fds_old
,
602 MemoryRegionIoeventfd
*fd
;
603 MemoryRegionSection section
;
605 /* Generate a symmetric difference of the old and new fd sets, adding
606 * and deleting as necessary.
610 while (iold
< fds_old_nb
|| inew
< fds_new_nb
) {
611 if (iold
< fds_old_nb
612 && (inew
== fds_new_nb
613 || memory_region_ioeventfd_before(fds_old
[iold
],
616 section
= (MemoryRegionSection
) {
617 .address_space
= as
->root
,
618 .offset_within_address_space
= int128_get64(fd
->addr
.start
),
619 .size
= int128_get64(fd
->addr
.size
),
621 MEMORY_LISTENER_CALL(eventfd_del
, Forward
, §ion
,
622 fd
->match_data
, fd
->data
, fd
->fd
);
624 } else if (inew
< fds_new_nb
625 && (iold
== fds_old_nb
626 || memory_region_ioeventfd_before(fds_new
[inew
],
629 section
= (MemoryRegionSection
) {
630 .address_space
= as
->root
,
631 .offset_within_address_space
= int128_get64(fd
->addr
.start
),
632 .size
= int128_get64(fd
->addr
.size
),
634 MEMORY_LISTENER_CALL(eventfd_add
, Reverse
, §ion
,
635 fd
->match_data
, fd
->data
, fd
->fd
);
644 static void address_space_update_ioeventfds(AddressSpace
*as
)
647 unsigned ioeventfd_nb
= 0;
648 MemoryRegionIoeventfd
*ioeventfds
= NULL
;
652 FOR_EACH_FLAT_RANGE(fr
, &as
->current_map
) {
653 for (i
= 0; i
< fr
->mr
->ioeventfd_nb
; ++i
) {
654 tmp
= addrrange_shift(fr
->mr
->ioeventfds
[i
].addr
,
655 int128_sub(fr
->addr
.start
,
656 int128_make64(fr
->offset_in_region
)));
657 if (addrrange_intersects(fr
->addr
, tmp
)) {
659 ioeventfds
= g_realloc(ioeventfds
,
660 ioeventfd_nb
* sizeof(*ioeventfds
));
661 ioeventfds
[ioeventfd_nb
-1] = fr
->mr
->ioeventfds
[i
];
662 ioeventfds
[ioeventfd_nb
-1].addr
= tmp
;
667 address_space_add_del_ioeventfds(as
, ioeventfds
, ioeventfd_nb
,
668 as
->ioeventfds
, as
->ioeventfd_nb
);
670 g_free(as
->ioeventfds
);
671 as
->ioeventfds
= ioeventfds
;
672 as
->ioeventfd_nb
= ioeventfd_nb
;
675 static void address_space_update_topology_pass(AddressSpace
*as
,
681 FlatRange
*frold
, *frnew
;
683 /* Generate a symmetric difference of the old and new memory maps.
684 * Kill ranges in the old map, and instantiate ranges in the new map.
687 while (iold
< old_view
.nr
|| inew
< new_view
.nr
) {
688 if (iold
< old_view
.nr
) {
689 frold
= &old_view
.ranges
[iold
];
693 if (inew
< new_view
.nr
) {
694 frnew
= &new_view
.ranges
[inew
];
701 || int128_lt(frold
->addr
.start
, frnew
->addr
.start
)
702 || (int128_eq(frold
->addr
.start
, frnew
->addr
.start
)
703 && !flatrange_equal(frold
, frnew
)))) {
704 /* In old, but (not in new, or in new but attributes changed). */
707 MEMORY_LISTENER_UPDATE_REGION(frold
, as
, Reverse
, region_del
);
708 as
->ops
->range_del(as
, frold
);
712 } else if (frold
&& frnew
&& flatrange_equal(frold
, frnew
)) {
713 /* In both (logging may have changed) */
716 if (frold
->dirty_log_mask
&& !frnew
->dirty_log_mask
) {
717 MEMORY_LISTENER_UPDATE_REGION(frnew
, as
, Reverse
, log_stop
);
718 as
->ops
->log_stop(as
, frnew
);
719 } else if (frnew
->dirty_log_mask
&& !frold
->dirty_log_mask
) {
720 as
->ops
->log_start(as
, frnew
);
721 MEMORY_LISTENER_UPDATE_REGION(frnew
, as
, Forward
, log_start
);
731 as
->ops
->range_add(as
, frnew
);
732 MEMORY_LISTENER_UPDATE_REGION(frnew
, as
, Forward
, region_add
);
741 static void address_space_update_topology(AddressSpace
*as
)
743 FlatView old_view
= as
->current_map
;
744 FlatView new_view
= generate_memory_topology(as
->root
);
746 address_space_update_topology_pass(as
, old_view
, new_view
, false);
747 address_space_update_topology_pass(as
, old_view
, new_view
, true);
749 as
->current_map
= new_view
;
750 flatview_destroy(&old_view
);
751 address_space_update_ioeventfds(as
);
754 static void memory_region_update_topology(MemoryRegion
*mr
)
756 if (memory_region_transaction_depth
) {
757 memory_region_update_pending
|= !mr
|| mr
->enabled
;
761 if (mr
&& !mr
->enabled
) {
765 if (address_space_memory
.root
) {
766 address_space_update_topology(&address_space_memory
);
768 if (address_space_io
.root
) {
769 address_space_update_topology(&address_space_io
);
772 memory_region_update_pending
= false;
775 void memory_region_transaction_begin(void)
777 ++memory_region_transaction_depth
;
780 void memory_region_transaction_commit(void)
782 assert(memory_region_transaction_depth
);
783 --memory_region_transaction_depth
;
784 if (!memory_region_transaction_depth
&& memory_region_update_pending
) {
785 memory_region_update_topology(NULL
);
789 static void memory_region_destructor_none(MemoryRegion
*mr
)
793 static void memory_region_destructor_ram(MemoryRegion
*mr
)
795 qemu_ram_free(mr
->ram_addr
);
798 static void memory_region_destructor_ram_from_ptr(MemoryRegion
*mr
)
800 qemu_ram_free_from_ptr(mr
->ram_addr
);
803 static void memory_region_destructor_iomem(MemoryRegion
*mr
)
805 cpu_unregister_io_memory(mr
->ram_addr
);
808 static void memory_region_destructor_rom_device(MemoryRegion
*mr
)
810 qemu_ram_free(mr
->ram_addr
& TARGET_PAGE_MASK
);
811 cpu_unregister_io_memory(mr
->ram_addr
& ~TARGET_PAGE_MASK
);
814 static bool memory_region_wrong_endianness(MemoryRegion
*mr
)
816 #ifdef TARGET_WORDS_BIGENDIAN
817 return mr
->ops
->endianness
== DEVICE_LITTLE_ENDIAN
;
819 return mr
->ops
->endianness
== DEVICE_BIG_ENDIAN
;
823 void memory_region_init(MemoryRegion
*mr
,
829 mr
->size
= int128_make64(size
);
830 if (size
== UINT64_MAX
) {
831 mr
->size
= int128_2_64();
836 mr
->terminates
= false;
839 mr
->readonly
= false;
840 mr
->rom_device
= false;
841 mr
->destructor
= memory_region_destructor_none
;
843 mr
->may_overlap
= false;
845 QTAILQ_INIT(&mr
->subregions
);
846 memset(&mr
->subregions_link
, 0, sizeof mr
->subregions_link
);
847 QTAILQ_INIT(&mr
->coalesced
);
848 mr
->name
= g_strdup(name
);
849 mr
->dirty_log_mask
= 0;
850 mr
->ioeventfd_nb
= 0;
851 mr
->ioeventfds
= NULL
;
854 static bool memory_region_access_valid(MemoryRegion
*mr
,
855 target_phys_addr_t addr
,
859 if (mr
->ops
->valid
.accepts
860 && !mr
->ops
->valid
.accepts(mr
->opaque
, addr
, size
, is_write
)) {
864 if (!mr
->ops
->valid
.unaligned
&& (addr
& (size
- 1))) {
868 /* Treat zero as compatibility all valid */
869 if (!mr
->ops
->valid
.max_access_size
) {
873 if (size
> mr
->ops
->valid
.max_access_size
874 || size
< mr
->ops
->valid
.min_access_size
) {
880 static uint64_t memory_region_dispatch_read1(MemoryRegion
*mr
,
881 target_phys_addr_t addr
,
886 if (!memory_region_access_valid(mr
, addr
, size
, false)) {
887 return -1U; /* FIXME: better signalling */
890 if (!mr
->ops
->read
) {
891 return mr
->ops
->old_mmio
.read
[bitops_ffsl(size
)](mr
->opaque
, addr
);
894 /* FIXME: support unaligned access */
895 access_with_adjusted_size(addr
, &data
, size
,
896 mr
->ops
->impl
.min_access_size
,
897 mr
->ops
->impl
.max_access_size
,
898 memory_region_read_accessor
, mr
);
903 static void adjust_endianness(MemoryRegion
*mr
, uint64_t *data
, unsigned size
)
905 if (memory_region_wrong_endianness(mr
)) {
910 *data
= bswap16(*data
);
913 *data
= bswap32(*data
);
921 static uint64_t memory_region_dispatch_read(MemoryRegion
*mr
,
922 target_phys_addr_t addr
,
927 ret
= memory_region_dispatch_read1(mr
, addr
, size
);
928 adjust_endianness(mr
, &ret
, size
);
932 static void memory_region_dispatch_write(MemoryRegion
*mr
,
933 target_phys_addr_t addr
,
937 if (!memory_region_access_valid(mr
, addr
, size
, true)) {
938 return; /* FIXME: better signalling */
941 adjust_endianness(mr
, &data
, size
);
943 if (!mr
->ops
->write
) {
944 mr
->ops
->old_mmio
.write
[bitops_ffsl(size
)](mr
->opaque
, addr
, data
);
948 /* FIXME: support unaligned access */
949 access_with_adjusted_size(addr
, &data
, size
,
950 mr
->ops
->impl
.min_access_size
,
951 mr
->ops
->impl
.max_access_size
,
952 memory_region_write_accessor
, mr
);
955 void memory_region_init_io(MemoryRegion
*mr
,
956 const MemoryRegionOps
*ops
,
961 memory_region_init(mr
, name
, size
);
964 mr
->terminates
= true;
965 mr
->destructor
= memory_region_destructor_iomem
;
966 mr
->ram_addr
= cpu_register_io_memory(mr
);
969 void memory_region_init_ram(MemoryRegion
*mr
,
973 memory_region_init(mr
, name
, size
);
975 mr
->terminates
= true;
976 mr
->destructor
= memory_region_destructor_ram
;
977 mr
->ram_addr
= qemu_ram_alloc(size
, mr
);
980 void memory_region_init_ram_ptr(MemoryRegion
*mr
,
985 memory_region_init(mr
, name
, size
);
987 mr
->terminates
= true;
988 mr
->destructor
= memory_region_destructor_ram_from_ptr
;
989 mr
->ram_addr
= qemu_ram_alloc_from_ptr(size
, ptr
, mr
);
992 void memory_region_init_alias(MemoryRegion
*mr
,
995 target_phys_addr_t offset
,
998 memory_region_init(mr
, name
, size
);
1000 mr
->alias_offset
= offset
;
1003 void memory_region_init_rom_device(MemoryRegion
*mr
,
1004 const MemoryRegionOps
*ops
,
1009 memory_region_init(mr
, name
, size
);
1011 mr
->opaque
= opaque
;
1012 mr
->terminates
= true;
1013 mr
->rom_device
= true;
1014 mr
->destructor
= memory_region_destructor_rom_device
;
1015 mr
->ram_addr
= qemu_ram_alloc(size
, mr
);
1016 mr
->ram_addr
|= cpu_register_io_memory(mr
);
1019 static uint64_t invalid_read(void *opaque
, target_phys_addr_t addr
,
1022 MemoryRegion
*mr
= opaque
;
1024 if (!mr
->warning_printed
) {
1025 fprintf(stderr
, "Invalid read from memory region %s\n", mr
->name
);
1026 mr
->warning_printed
= true;
1031 static void invalid_write(void *opaque
, target_phys_addr_t addr
, uint64_t data
,
1034 MemoryRegion
*mr
= opaque
;
1036 if (!mr
->warning_printed
) {
1037 fprintf(stderr
, "Invalid write to memory region %s\n", mr
->name
);
1038 mr
->warning_printed
= true;
1042 static const MemoryRegionOps reservation_ops
= {
1043 .read
= invalid_read
,
1044 .write
= invalid_write
,
1045 .endianness
= DEVICE_NATIVE_ENDIAN
,
1048 void memory_region_init_reservation(MemoryRegion
*mr
,
1052 memory_region_init_io(mr
, &reservation_ops
, mr
, name
, size
);
1055 void memory_region_destroy(MemoryRegion
*mr
)
1057 assert(QTAILQ_EMPTY(&mr
->subregions
));
1059 memory_region_clear_coalescing(mr
);
1060 g_free((char *)mr
->name
);
1061 g_free(mr
->ioeventfds
);
1064 uint64_t memory_region_size(MemoryRegion
*mr
)
1066 if (int128_eq(mr
->size
, int128_2_64())) {
1069 return int128_get64(mr
->size
);
1072 const char *memory_region_name(MemoryRegion
*mr
)
1077 bool memory_region_is_ram(MemoryRegion
*mr
)
1082 bool memory_region_is_logging(MemoryRegion
*mr
)
1084 return mr
->dirty_log_mask
;
1087 bool memory_region_is_rom(MemoryRegion
*mr
)
1089 return mr
->ram
&& mr
->readonly
;
1092 void memory_region_set_log(MemoryRegion
*mr
, bool log
, unsigned client
)
1094 uint8_t mask
= 1 << client
;
1096 mr
->dirty_log_mask
= (mr
->dirty_log_mask
& ~mask
) | (log
* mask
);
1097 memory_region_update_topology(mr
);
1100 bool memory_region_get_dirty(MemoryRegion
*mr
, target_phys_addr_t addr
,
1101 target_phys_addr_t size
, unsigned client
)
1103 assert(mr
->terminates
);
1104 return cpu_physical_memory_get_dirty(mr
->ram_addr
+ addr
, size
,
1108 void memory_region_set_dirty(MemoryRegion
*mr
, target_phys_addr_t addr
,
1109 target_phys_addr_t size
)
1111 assert(mr
->terminates
);
1112 return cpu_physical_memory_set_dirty_range(mr
->ram_addr
+ addr
, size
, -1);
1115 void memory_region_sync_dirty_bitmap(MemoryRegion
*mr
)
1119 FOR_EACH_FLAT_RANGE(fr
, &address_space_memory
.current_map
) {
1121 MEMORY_LISTENER_UPDATE_REGION(fr
, &address_space_memory
,
1127 void memory_region_set_readonly(MemoryRegion
*mr
, bool readonly
)
1129 if (mr
->readonly
!= readonly
) {
1130 mr
->readonly
= readonly
;
1131 memory_region_update_topology(mr
);
1135 void memory_region_rom_device_set_readable(MemoryRegion
*mr
, bool readable
)
1137 if (mr
->readable
!= readable
) {
1138 mr
->readable
= readable
;
1139 memory_region_update_topology(mr
);
1143 void memory_region_reset_dirty(MemoryRegion
*mr
, target_phys_addr_t addr
,
1144 target_phys_addr_t size
, unsigned client
)
1146 assert(mr
->terminates
);
1147 cpu_physical_memory_reset_dirty(mr
->ram_addr
+ addr
,
1148 mr
->ram_addr
+ addr
+ size
,
1152 void *memory_region_get_ram_ptr(MemoryRegion
*mr
)
1155 return memory_region_get_ram_ptr(mr
->alias
) + mr
->alias_offset
;
1158 assert(mr
->terminates
);
1160 return qemu_get_ram_ptr(mr
->ram_addr
& TARGET_PAGE_MASK
);
1163 static void memory_region_update_coalesced_range(MemoryRegion
*mr
)
1166 CoalescedMemoryRange
*cmr
;
1169 FOR_EACH_FLAT_RANGE(fr
, &address_space_memory
.current_map
) {
1171 qemu_unregister_coalesced_mmio(int128_get64(fr
->addr
.start
),
1172 int128_get64(fr
->addr
.size
));
1173 QTAILQ_FOREACH(cmr
, &mr
->coalesced
, link
) {
1174 tmp
= addrrange_shift(cmr
->addr
,
1175 int128_sub(fr
->addr
.start
,
1176 int128_make64(fr
->offset_in_region
)));
1177 if (!addrrange_intersects(tmp
, fr
->addr
)) {
1180 tmp
= addrrange_intersection(tmp
, fr
->addr
);
1181 qemu_register_coalesced_mmio(int128_get64(tmp
.start
),
1182 int128_get64(tmp
.size
));
1188 void memory_region_set_coalescing(MemoryRegion
*mr
)
1190 memory_region_clear_coalescing(mr
);
1191 memory_region_add_coalescing(mr
, 0, int128_get64(mr
->size
));
1194 void memory_region_add_coalescing(MemoryRegion
*mr
,
1195 target_phys_addr_t offset
,
1198 CoalescedMemoryRange
*cmr
= g_malloc(sizeof(*cmr
));
1200 cmr
->addr
= addrrange_make(int128_make64(offset
), int128_make64(size
));
1201 QTAILQ_INSERT_TAIL(&mr
->coalesced
, cmr
, link
);
1202 memory_region_update_coalesced_range(mr
);
1205 void memory_region_clear_coalescing(MemoryRegion
*mr
)
1207 CoalescedMemoryRange
*cmr
;
1209 while (!QTAILQ_EMPTY(&mr
->coalesced
)) {
1210 cmr
= QTAILQ_FIRST(&mr
->coalesced
);
1211 QTAILQ_REMOVE(&mr
->coalesced
, cmr
, link
);
1214 memory_region_update_coalesced_range(mr
);
1217 void memory_region_add_eventfd(MemoryRegion
*mr
,
1218 target_phys_addr_t addr
,
1224 MemoryRegionIoeventfd mrfd
= {
1225 .addr
.start
= int128_make64(addr
),
1226 .addr
.size
= int128_make64(size
),
1227 .match_data
= match_data
,
1233 for (i
= 0; i
< mr
->ioeventfd_nb
; ++i
) {
1234 if (memory_region_ioeventfd_before(mrfd
, mr
->ioeventfds
[i
])) {
1239 mr
->ioeventfds
= g_realloc(mr
->ioeventfds
,
1240 sizeof(*mr
->ioeventfds
) * mr
->ioeventfd_nb
);
1241 memmove(&mr
->ioeventfds
[i
+1], &mr
->ioeventfds
[i
],
1242 sizeof(*mr
->ioeventfds
) * (mr
->ioeventfd_nb
-1 - i
));
1243 mr
->ioeventfds
[i
] = mrfd
;
1244 memory_region_update_topology(mr
);
1247 void memory_region_del_eventfd(MemoryRegion
*mr
,
1248 target_phys_addr_t addr
,
1254 MemoryRegionIoeventfd mrfd
= {
1255 .addr
.start
= int128_make64(addr
),
1256 .addr
.size
= int128_make64(size
),
1257 .match_data
= match_data
,
1263 for (i
= 0; i
< mr
->ioeventfd_nb
; ++i
) {
1264 if (memory_region_ioeventfd_equal(mrfd
, mr
->ioeventfds
[i
])) {
1268 assert(i
!= mr
->ioeventfd_nb
);
1269 memmove(&mr
->ioeventfds
[i
], &mr
->ioeventfds
[i
+1],
1270 sizeof(*mr
->ioeventfds
) * (mr
->ioeventfd_nb
- (i
+1)));
1272 mr
->ioeventfds
= g_realloc(mr
->ioeventfds
,
1273 sizeof(*mr
->ioeventfds
)*mr
->ioeventfd_nb
+ 1);
1274 memory_region_update_topology(mr
);
1277 static void memory_region_add_subregion_common(MemoryRegion
*mr
,
1278 target_phys_addr_t offset
,
1279 MemoryRegion
*subregion
)
1281 MemoryRegion
*other
;
1283 assert(!subregion
->parent
);
1284 subregion
->parent
= mr
;
1285 subregion
->addr
= offset
;
1286 QTAILQ_FOREACH(other
, &mr
->subregions
, subregions_link
) {
1287 if (subregion
->may_overlap
|| other
->may_overlap
) {
1290 if (int128_gt(int128_make64(offset
),
1291 int128_add(int128_make64(other
->addr
), other
->size
))
1292 || int128_le(int128_add(int128_make64(offset
), subregion
->size
),
1293 int128_make64(other
->addr
))) {
1297 printf("warning: subregion collision %llx/%llx (%s) "
1298 "vs %llx/%llx (%s)\n",
1299 (unsigned long long)offset
,
1300 (unsigned long long)int128_get64(subregion
->size
),
1302 (unsigned long long)other
->addr
,
1303 (unsigned long long)int128_get64(other
->size
),
1307 QTAILQ_FOREACH(other
, &mr
->subregions
, subregions_link
) {
1308 if (subregion
->priority
>= other
->priority
) {
1309 QTAILQ_INSERT_BEFORE(other
, subregion
, subregions_link
);
1313 QTAILQ_INSERT_TAIL(&mr
->subregions
, subregion
, subregions_link
);
1315 memory_region_update_topology(mr
);
1319 void memory_region_add_subregion(MemoryRegion
*mr
,
1320 target_phys_addr_t offset
,
1321 MemoryRegion
*subregion
)
1323 subregion
->may_overlap
= false;
1324 subregion
->priority
= 0;
1325 memory_region_add_subregion_common(mr
, offset
, subregion
);
1328 void memory_region_add_subregion_overlap(MemoryRegion
*mr
,
1329 target_phys_addr_t offset
,
1330 MemoryRegion
*subregion
,
1333 subregion
->may_overlap
= true;
1334 subregion
->priority
= priority
;
1335 memory_region_add_subregion_common(mr
, offset
, subregion
);
1338 void memory_region_del_subregion(MemoryRegion
*mr
,
1339 MemoryRegion
*subregion
)
1341 assert(subregion
->parent
== mr
);
1342 subregion
->parent
= NULL
;
1343 QTAILQ_REMOVE(&mr
->subregions
, subregion
, subregions_link
);
1344 memory_region_update_topology(mr
);
1347 void memory_region_set_enabled(MemoryRegion
*mr
, bool enabled
)
1349 if (enabled
== mr
->enabled
) {
1352 mr
->enabled
= enabled
;
1353 memory_region_update_topology(NULL
);
1356 void memory_region_set_address(MemoryRegion
*mr
, target_phys_addr_t addr
)
1358 MemoryRegion
*parent
= mr
->parent
;
1359 unsigned priority
= mr
->priority
;
1360 bool may_overlap
= mr
->may_overlap
;
1362 if (addr
== mr
->addr
|| !parent
) {
1367 memory_region_transaction_begin();
1368 memory_region_del_subregion(parent
, mr
);
1370 memory_region_add_subregion_overlap(parent
, addr
, mr
, priority
);
1372 memory_region_add_subregion(parent
, addr
, mr
);
1374 memory_region_transaction_commit();
1377 void memory_region_set_alias_offset(MemoryRegion
*mr
, target_phys_addr_t offset
)
1379 target_phys_addr_t old_offset
= mr
->alias_offset
;
1382 mr
->alias_offset
= offset
;
1384 if (offset
== old_offset
|| !mr
->parent
) {
1388 memory_region_update_topology(mr
);
1391 ram_addr_t
memory_region_get_ram_addr(MemoryRegion
*mr
)
1393 return mr
->ram_addr
;
1396 static int cmp_flatrange_addr(const void *addr_
, const void *fr_
)
1398 const AddrRange
*addr
= addr_
;
1399 const FlatRange
*fr
= fr_
;
1401 if (int128_le(addrrange_end(*addr
), fr
->addr
.start
)) {
1403 } else if (int128_ge(addr
->start
, addrrange_end(fr
->addr
))) {
1409 static FlatRange
*address_space_lookup(AddressSpace
*as
, AddrRange addr
)
1411 return bsearch(&addr
, as
->current_map
.ranges
, as
->current_map
.nr
,
1412 sizeof(FlatRange
), cmp_flatrange_addr
);
1415 MemoryRegionSection
memory_region_find(MemoryRegion
*address_space
,
1416 target_phys_addr_t addr
, uint64_t size
)
1418 AddressSpace
*as
= memory_region_to_address_space(address_space
);
1419 AddrRange range
= addrrange_make(int128_make64(addr
),
1420 int128_make64(size
));
1421 FlatRange
*fr
= address_space_lookup(as
, range
);
1422 MemoryRegionSection ret
= { .mr
= NULL
, .size
= 0 };
1428 while (fr
> as
->current_map
.ranges
1429 && addrrange_intersects(fr
[-1].addr
, range
)) {
1434 range
= addrrange_intersection(range
, fr
->addr
);
1435 ret
.offset_within_region
= fr
->offset_in_region
;
1436 ret
.offset_within_region
+= int128_get64(int128_sub(range
.start
,
1438 ret
.size
= int128_get64(range
.size
);
1439 ret
.offset_within_address_space
= int128_get64(range
.start
);
1443 void memory_global_sync_dirty_bitmap(MemoryRegion
*address_space
)
1445 AddressSpace
*as
= memory_region_to_address_space(address_space
);
1448 FOR_EACH_FLAT_RANGE(fr
, &as
->current_map
) {
1449 MEMORY_LISTENER_UPDATE_REGION(fr
, as
, Forward
, log_sync
);
1453 void memory_global_dirty_log_start(void)
1455 cpu_physical_memory_set_dirty_tracking(1);
1456 global_dirty_log
= true;
1457 MEMORY_LISTENER_CALL(log_global_start
, Forward
);
1460 void memory_global_dirty_log_stop(void)
1462 global_dirty_log
= false;
1463 MEMORY_LISTENER_CALL(log_global_stop
, Reverse
);
1464 cpu_physical_memory_set_dirty_tracking(0);
1467 static void listener_add_address_space(MemoryListener
*listener
,
1472 if (global_dirty_log
) {
1473 listener
->log_global_start(listener
);
1475 FOR_EACH_FLAT_RANGE(fr
, &as
->current_map
) {
1476 MemoryRegionSection section
= {
1478 .address_space
= as
->root
,
1479 .offset_within_region
= fr
->offset_in_region
,
1480 .size
= int128_get64(fr
->addr
.size
),
1481 .offset_within_address_space
= int128_get64(fr
->addr
.start
),
1483 listener
->region_add(listener
, §ion
);
1487 void memory_listener_register(MemoryListener
*listener
)
1489 MemoryListener
*other
= NULL
;
1491 if (QTAILQ_EMPTY(&memory_listeners
)
1492 || listener
->priority
>= QTAILQ_LAST(&memory_listeners
,
1493 memory_listeners
)->priority
) {
1494 QTAILQ_INSERT_TAIL(&memory_listeners
, listener
, link
);
1496 QTAILQ_FOREACH(other
, &memory_listeners
, link
) {
1497 if (listener
->priority
< other
->priority
) {
1501 QTAILQ_INSERT_BEFORE(other
, listener
, link
);
1503 listener_add_address_space(listener
, &address_space_memory
);
1504 listener_add_address_space(listener
, &address_space_io
);
1507 void memory_listener_unregister(MemoryListener
*listener
)
1509 QTAILQ_REMOVE(&memory_listeners
, listener
, link
);
1512 void set_system_memory_map(MemoryRegion
*mr
)
1514 address_space_memory
.root
= mr
;
1515 memory_region_update_topology(NULL
);
1518 void set_system_io_map(MemoryRegion
*mr
)
1520 address_space_io
.root
= mr
;
1521 memory_region_update_topology(NULL
);
1524 uint64_t io_mem_read(int io_index
, target_phys_addr_t addr
, unsigned size
)
1526 return memory_region_dispatch_read(io_mem_region
[io_index
], addr
, size
);
1529 void io_mem_write(int io_index
, target_phys_addr_t addr
,
1530 uint64_t val
, unsigned size
)
1532 memory_region_dispatch_write(io_mem_region
[io_index
], addr
, val
, size
);
1535 typedef struct MemoryRegionList MemoryRegionList
;
1537 struct MemoryRegionList
{
1538 const MemoryRegion
*mr
;
1540 QTAILQ_ENTRY(MemoryRegionList
) queue
;
1543 typedef QTAILQ_HEAD(queue
, MemoryRegionList
) MemoryRegionListHead
;
1545 static void mtree_print_mr(fprintf_function mon_printf
, void *f
,
1546 const MemoryRegion
*mr
, unsigned int level
,
1547 target_phys_addr_t base
,
1548 MemoryRegionListHead
*alias_print_queue
)
1550 MemoryRegionList
*new_ml
, *ml
, *next_ml
;
1551 MemoryRegionListHead submr_print_queue
;
1552 const MemoryRegion
*submr
;
1559 for (i
= 0; i
< level
; i
++) {
1564 MemoryRegionList
*ml
;
1567 /* check if the alias is already in the queue */
1568 QTAILQ_FOREACH(ml
, alias_print_queue
, queue
) {
1569 if (ml
->mr
== mr
->alias
&& !ml
->printed
) {
1575 ml
= g_new(MemoryRegionList
, 1);
1577 ml
->printed
= false;
1578 QTAILQ_INSERT_TAIL(alias_print_queue
, ml
, queue
);
1580 mon_printf(f
, TARGET_FMT_plx
"-" TARGET_FMT_plx
1581 " (prio %d, %c%c): alias %s @%s " TARGET_FMT_plx
1582 "-" TARGET_FMT_plx
"\n",
1585 + (target_phys_addr_t
)int128_get64(mr
->size
) - 1,
1587 mr
->readable
? 'R' : '-',
1588 !mr
->readonly
&& !(mr
->rom_device
&& mr
->readable
) ? 'W'
1594 + (target_phys_addr_t
)int128_get64(mr
->size
) - 1);
1597 TARGET_FMT_plx
"-" TARGET_FMT_plx
" (prio %d, %c%c): %s\n",
1600 + (target_phys_addr_t
)int128_get64(mr
->size
) - 1,
1602 mr
->readable
? 'R' : '-',
1603 !mr
->readonly
&& !(mr
->rom_device
&& mr
->readable
) ? 'W'
1608 QTAILQ_INIT(&submr_print_queue
);
1610 QTAILQ_FOREACH(submr
, &mr
->subregions
, subregions_link
) {
1611 new_ml
= g_new(MemoryRegionList
, 1);
1613 QTAILQ_FOREACH(ml
, &submr_print_queue
, queue
) {
1614 if (new_ml
->mr
->addr
< ml
->mr
->addr
||
1615 (new_ml
->mr
->addr
== ml
->mr
->addr
&&
1616 new_ml
->mr
->priority
> ml
->mr
->priority
)) {
1617 QTAILQ_INSERT_BEFORE(ml
, new_ml
, queue
);
1623 QTAILQ_INSERT_TAIL(&submr_print_queue
, new_ml
, queue
);
1627 QTAILQ_FOREACH(ml
, &submr_print_queue
, queue
) {
1628 mtree_print_mr(mon_printf
, f
, ml
->mr
, level
+ 1, base
+ mr
->addr
,
1632 QTAILQ_FOREACH_SAFE(ml
, &submr_print_queue
, queue
, next_ml
) {
1637 void mtree_info(fprintf_function mon_printf
, void *f
)
1639 MemoryRegionListHead ml_head
;
1640 MemoryRegionList
*ml
, *ml2
;
1642 QTAILQ_INIT(&ml_head
);
1644 mon_printf(f
, "memory\n");
1645 mtree_print_mr(mon_printf
, f
, address_space_memory
.root
, 0, 0, &ml_head
);
1647 /* print aliased regions */
1648 QTAILQ_FOREACH(ml
, &ml_head
, queue
) {
1650 mon_printf(f
, "%s\n", ml
->mr
->name
);
1651 mtree_print_mr(mon_printf
, f
, ml
->mr
, 0, 0, &ml_head
);
1655 QTAILQ_FOREACH_SAFE(ml
, &ml_head
, queue
, ml2
) {
1659 if (address_space_io
.root
&&
1660 !QTAILQ_EMPTY(&address_space_io
.root
->subregions
)) {
1661 QTAILQ_INIT(&ml_head
);
1662 mon_printf(f
, "I/O\n");
1663 mtree_print_mr(mon_printf
, f
, address_space_io
.root
, 0, 0, &ml_head
);