OvmfPkg/VmgExitLib: Add support for NPF NAE events (MMIO)

BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=2198

Under SEV-ES, a NPF intercept for an NPT entry with a reserved bit set
generates a #VC exception. This condition is assumed to be an MMIO access.
VMGEXIT must be used to allow the hypervisor to handle this intercept.

Add support to construct the required GHCB values to support a NPF NAE
event for MMIO.  Parse the instruction that generated the #VC exception,
setting the required register values in the GHCB and creating the proper
SW_EXIT_INFO1, SW_EXITINFO2 and SW_SCRATCH values in the GHCB.

Cc: Jordan Justen <jordan.l.justen@intel.com>
Cc: Laszlo Ersek <lersek@redhat.com>
Cc: Ard Biesheuvel <ard.biesheuvel@arm.com>
Acked-by: Laszlo Ersek <lersek@redhat.com>
Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Regression-tested-by: Laszlo Ersek <lersek@redhat.com>

diff --git a/OvmfPkg/Library/VmgExitLib/VmgExitVcHandler.c b/OvmfPkg/Library/VmgExitLib/VmgExitVcHandler.c
index f6cfd7fa29930e7d8430ecbcbcb7a5c3ec73e9a8..03fa9f6f7f46d3b22808261193b4b86a618eba51 100644 (file)
--- a/OvmfPkg/Library/VmgExitLib/VmgExitVcHandler.c
+++ b/OvmfPkg/Library/VmgExitLib/VmgExitVcHandler.c
@@ -183,6 +183,281 @@ GhcbSetRegValid (
   Ghcb->SaveArea.ValidBitmap[RegIndex] |= (1 << RegBit);\r
 }\r
 \r
+/**\r
+  Return a pointer to the contents of the specified register.\r
+\r
+  Based upon the input register, return a pointer to the registers contents\r
+  in the x86 processor context.\r
+\r
+  @param[in] Regs      x64 processor context\r
+  @param[in] Register  Register to obtain pointer for\r
+\r
+  @return              Pointer to the contents of the requested register\r
+\r
+**/\r
+STATIC\r
+UINT64 *\r
+GetRegisterPointer (\r
+  IN EFI_SYSTEM_CONTEXT_X64   *Regs,\r
+  IN UINT8                    Register\r
+  )\r
+{\r
+  UINT64 *Reg;\r
+\r
+  switch (Register) {\r
+  case 0:\r
+    Reg = &Regs->Rax;\r
+    break;\r
+  case 1:\r
+    Reg = &Regs->Rcx;\r
+    break;\r
+  case 2:\r
+    Reg = &Regs->Rdx;\r
+    break;\r
+  case 3:\r
+    Reg = &Regs->Rbx;\r
+    break;\r
+  case 4:\r
+    Reg = &Regs->Rsp;\r
+    break;\r
+  case 5:\r
+    Reg = &Regs->Rbp;\r
+    break;\r
+  case 6:\r
+    Reg = &Regs->Rsi;\r
+    break;\r
+  case 7:\r
+    Reg = &Regs->Rdi;\r
+    break;\r
+  case 8:\r
+    Reg = &Regs->R8;\r
+    break;\r
+  case 9:\r
+    Reg = &Regs->R9;\r
+    break;\r
+  case 10:\r
+    Reg = &Regs->R10;\r
+    break;\r
+  case 11:\r
+    Reg = &Regs->R11;\r
+    break;\r
+  case 12:\r
+    Reg = &Regs->R12;\r
+    break;\r
+  case 13:\r
+    Reg = &Regs->R13;\r
+    break;\r
+  case 14:\r
+    Reg = &Regs->R14;\r
+    break;\r
+  case 15:\r
+    Reg = &Regs->R15;\r
+    break;\r
+  default:\r
+    Reg = NULL;\r
+  }\r
+  ASSERT (Reg != NULL);\r
+\r
+  return Reg;\r
+}\r
+\r
+/**\r
+  Update the instruction parsing context for displacement bytes.\r
+\r
+  @param[in, out] InstructionData  Instruction parsing context\r
+  @param[in]      Size             The instruction displacement size\r
+\r
+**/\r
+STATIC\r
+VOID\r
+UpdateForDisplacement (\r
+  IN OUT SEV_ES_INSTRUCTION_DATA  *InstructionData,\r
+  IN     UINTN                    Size\r
+  )\r
+{\r
+  InstructionData->DisplacementSize = Size;\r
+  InstructionData->Immediate += Size;\r
+  InstructionData->End += Size;\r
+}\r
+\r
+/**\r
+  Determine if an instruction address if RIP relative.\r
+\r
+  Examine the instruction parsing context to determine if the address offset\r
+  is relative to the instruction pointer.\r
+\r
+  @param[in] InstructionData  Instruction parsing context\r
+\r
+  @retval TRUE                Instruction addressing is RIP relative\r
+  @retval FALSE               Instruction addressing is not RIP relative\r
+\r
+**/\r
+STATIC\r
+BOOLEAN\r
+IsRipRelative (\r
+  IN SEV_ES_INSTRUCTION_DATA  *InstructionData\r
+  )\r
+{\r
+  SEV_ES_INSTRUCTION_OPCODE_EXT  *Ext;\r
+\r
+  Ext = &InstructionData->Ext;\r
+\r
+  return ((InstructionData->Mode == LongMode64Bit) &&\r
+          (Ext->ModRm.Mod == 0) &&\r
+          (Ext->ModRm.Rm == 5)  &&\r
+          (InstructionData->SibPresent == FALSE));\r
+}\r
+\r
+/**\r
+  Return the effective address of a memory operand.\r
+\r
+  Examine the instruction parsing context to obtain the effective memory\r
+  address of a memory operand.\r
+\r
+  @param[in] Regs             x64 processor context\r
+  @param[in] InstructionData  Instruction parsing context\r
+\r
+  @return                     The memory operand effective address\r
+\r
+**/\r
+STATIC\r
+UINT64\r
+GetEffectiveMemoryAddress (\r
+  IN EFI_SYSTEM_CONTEXT_X64   *Regs,\r
+  IN SEV_ES_INSTRUCTION_DATA  *InstructionData\r
+  )\r
+{\r
+  SEV_ES_INSTRUCTION_OPCODE_EXT  *Ext;\r
+  UINT64                         EffectiveAddress;\r
+\r
+  Ext = &InstructionData->Ext;\r
+  EffectiveAddress = 0;\r
+\r
+  if (IsRipRelative (InstructionData)) {\r
+    //\r
+    // RIP-relative displacement is a 32-bit signed value\r
+    //\r
+    INT32 RipRelative;\r
+\r
+    RipRelative = *(INT32 *) InstructionData->Displacement;\r
+\r
+    UpdateForDisplacement (InstructionData, 4);\r
+\r
+    //\r
+    // Negative displacement is handled by standard UINT64 wrap-around.\r
+    //\r
+    return Regs->Rip + (UINT64) RipRelative;\r
+  }\r
+\r
+  switch (Ext->ModRm.Mod) {\r
+  case 1:\r
+    UpdateForDisplacement (InstructionData, 1);\r
+    EffectiveAddress += (UINT64) (*(INT8 *) (InstructionData->Displacement));\r
+    break;\r
+  case 2:\r
+    switch (InstructionData->AddrSize) {\r
+    case Size16Bits:\r
+      UpdateForDisplacement (InstructionData, 2);\r
+      EffectiveAddress += (UINT64) (*(INT16 *) (InstructionData->Displacement));\r
+      break;\r
+    default:\r
+      UpdateForDisplacement (InstructionData, 4);\r
+      EffectiveAddress += (UINT64) (*(INT32 *) (InstructionData->Displacement));\r
+      break;\r
+    }\r
+    break;\r
+  }\r
+\r
+  if (InstructionData->SibPresent) {\r
+    INT64  Displacement;\r
+\r
+    if (Ext->Sib.Index != 4) {\r
+      CopyMem (\r
+        &Displacement,\r
+        GetRegisterPointer (Regs, Ext->Sib.Index),\r
+        sizeof (Displacement)\r
+        );\r
+      Displacement *= (INT64)(1 << Ext->Sib.Scale);\r
+\r
+      //\r
+      // Negative displacement is handled by standard UINT64 wrap-around.\r
+      //\r
+      EffectiveAddress += (UINT64) Displacement;\r
+    }\r
+\r
+    if ((Ext->Sib.Base != 5) || Ext->ModRm.Mod) {\r
+      EffectiveAddress += *GetRegisterPointer (Regs, Ext->Sib.Base);\r
+    } else {\r
+      UpdateForDisplacement (InstructionData, 4);\r
+      EffectiveAddress += (UINT64) (*(INT32 *) (InstructionData->Displacement));\r
+    }\r
+  } else {\r
+    EffectiveAddress += *GetRegisterPointer (Regs, Ext->ModRm.Rm);\r
+  }\r
+\r
+  return EffectiveAddress;\r
+}\r
+\r
+/**\r
+  Decode a ModRM byte.\r
+\r
+  Examine the instruction parsing context to decode a ModRM byte and the SIB\r
+  byte, if present.\r
+\r
+  @param[in]      Regs             x64 processor context\r
+  @param[in, out] InstructionData  Instruction parsing context\r
+\r
+**/\r
+STATIC\r
+VOID\r
+DecodeModRm (\r
+  IN     EFI_SYSTEM_CONTEXT_X64   *Regs,\r
+  IN OUT SEV_ES_INSTRUCTION_DATA  *InstructionData\r
+  )\r
+{\r
+  SEV_ES_INSTRUCTION_OPCODE_EXT  *Ext;\r
+  INSTRUCTION_REX_PREFIX         *RexPrefix;\r
+  INSTRUCTION_MODRM              *ModRm;\r
+  INSTRUCTION_SIB                *Sib;\r
+\r
+  RexPrefix = &InstructionData->RexPrefix;\r
+  Ext = &InstructionData->Ext;\r
+  ModRm = &InstructionData->ModRm;\r
+  Sib = &InstructionData->Sib;\r
+\r
+  InstructionData->ModRmPresent = TRUE;\r
+  ModRm->Uint8 = *(InstructionData->End);\r
+\r
+  InstructionData->Displacement++;\r
+  InstructionData->Immediate++;\r
+  InstructionData->End++;\r
+\r
+  Ext->ModRm.Mod = ModRm->Bits.Mod;\r
+  Ext->ModRm.Reg = (RexPrefix->Bits.BitR << 3) | ModRm->Bits.Reg;\r
+  Ext->ModRm.Rm  = (RexPrefix->Bits.BitB << 3) | ModRm->Bits.Rm;\r
+\r
+  Ext->RegData = *GetRegisterPointer (Regs, Ext->ModRm.Reg);\r
+\r
+  if (Ext->ModRm.Mod == 3) {\r
+    Ext->RmData = *GetRegisterPointer (Regs, Ext->ModRm.Rm);\r
+  } else {\r
+    if (ModRm->Bits.Rm == 4) {\r
+      InstructionData->SibPresent = TRUE;\r
+      Sib->Uint8 = *(InstructionData->End);\r
+\r
+      InstructionData->Displacement++;\r
+      InstructionData->Immediate++;\r
+      InstructionData->End++;\r
+\r
+      Ext->Sib.Scale = Sib->Bits.Scale;\r
+      Ext->Sib.Index = (RexPrefix->Bits.BitX << 3) | Sib->Bits.Index;\r
+      Ext->Sib.Base  = (RexPrefix->Bits.BitB << 3) | Sib->Bits.Base;\r
+    }\r
+\r
+    Ext->RmData = GetEffectiveMemoryAddress (Regs, InstructionData);\r
+  }\r
+}\r
+\r
 /**\r
   Decode instruction prefixes.\r
 \r
@@ -374,6 +649,215 @@ UnsupportedExit (
   return Status;\r
 }\r
 \r
+/**\r
+  Handle an MMIO event.\r
+\r
+  Use the VMGEXIT instruction to handle either an MMIO read or an MMIO write.\r
+\r
+  @param[in, out] Ghcb             Pointer to the Guest-Hypervisor Communication\r
+                                   Block\r
+  @param[in, out] Regs             x64 processor context\r
+  @param[in, out] InstructionData  Instruction parsing context\r
+\r
+  @retval 0                        Event handled successfully\r
+  @return                          New exception value to propagate\r
+\r
+**/\r
+STATIC\r
+UINT64\r
+MmioExit (\r
+  IN OUT GHCB                     *Ghcb,\r
+  IN OUT EFI_SYSTEM_CONTEXT_X64   *Regs,\r
+  IN OUT SEV_ES_INSTRUCTION_DATA  *InstructionData\r
+  )\r
+{\r
+  UINT64  ExitInfo1, ExitInfo2, Status;\r
+  UINTN   Bytes;\r
+  UINT64  *Register;\r
+  UINT8   OpCode, SignByte;\r
+\r
+  Bytes = 0;\r
+\r
+  OpCode = *(InstructionData->OpCodes);\r
+  if (OpCode == TWO_BYTE_OPCODE_ESCAPE) {\r
+    OpCode = *(InstructionData->OpCodes + 1);\r
+  }\r
+\r
+  switch (OpCode) {\r
+  //\r
+  // MMIO write (MOV reg/memX, regX)\r
+  //\r
+  case 0x88:\r
+    Bytes = 1;\r
+    //\r
+    // fall through\r
+    //\r
+  case 0x89:\r
+    DecodeModRm (Regs, InstructionData);\r
+    Bytes = ((Bytes != 0) ? Bytes :\r
+             (InstructionData->DataSize == Size16Bits) ? 2 :\r
+             (InstructionData->DataSize == Size32Bits) ? 4 :\r
+             (InstructionData->DataSize == Size64Bits) ? 8 :\r
+             0);\r
+\r
+    if (InstructionData->Ext.ModRm.Mod == 3) {\r
+      //\r
+      // NPF on two register operands???\r
+      //\r
+      return UnsupportedExit (Ghcb, Regs, InstructionData);\r
+    }\r
+\r
+    ExitInfo1 = InstructionData->Ext.RmData;\r
+    ExitInfo2 = Bytes;\r
+    CopyMem (Ghcb->SharedBuffer, &InstructionData->Ext.RegData, Bytes);\r
+\r
+    Ghcb->SaveArea.SwScratch = (UINT64) Ghcb->SharedBuffer;\r
+    Status = VmgExit (Ghcb, SVM_EXIT_MMIO_WRITE, ExitInfo1, ExitInfo2);\r
+    if (Status != 0) {\r
+      return Status;\r
+    }\r
+    break;\r
+\r
+  //\r
+  // MMIO write (MOV reg/memX, immX)\r
+  //\r
+  case 0xC6:\r
+    Bytes = 1;\r
+    //\r
+    // fall through\r
+    //\r
+  case 0xC7:\r
+    DecodeModRm (Regs, InstructionData);\r
+    Bytes = ((Bytes != 0) ? Bytes :\r
+             (InstructionData->DataSize == Size16Bits) ? 2 :\r
+             (InstructionData->DataSize == Size32Bits) ? 4 :\r
+             0);\r
+\r
+    InstructionData->ImmediateSize = Bytes;\r
+    InstructionData->End += Bytes;\r
+\r
+    ExitInfo1 = InstructionData->Ext.RmData;\r
+    ExitInfo2 = Bytes;\r
+    CopyMem (Ghcb->SharedBuffer, InstructionData->Immediate, Bytes);\r
+\r
+    Ghcb->SaveArea.SwScratch = (UINT64) Ghcb->SharedBuffer;\r
+    Status = VmgExit (Ghcb, SVM_EXIT_MMIO_WRITE, ExitInfo1, ExitInfo2);\r
+    if (Status != 0) {\r
+      return Status;\r
+    }\r
+    break;\r
+\r
+  //\r
+  // MMIO read (MOV regX, reg/memX)\r
+  //\r
+  case 0x8A:\r
+    Bytes = 1;\r
+    //\r
+    // fall through\r
+    //\r
+  case 0x8B:\r
+    DecodeModRm (Regs, InstructionData);\r
+    Bytes = ((Bytes != 0) ? Bytes :\r
+             (InstructionData->DataSize == Size16Bits) ? 2 :\r
+             (InstructionData->DataSize == Size32Bits) ? 4 :\r
+             (InstructionData->DataSize == Size64Bits) ? 8 :\r
+             0);\r
+    if (InstructionData->Ext.ModRm.Mod == 3) {\r
+      //\r
+      // NPF on two register operands???\r
+      //\r
+      return UnsupportedExit (Ghcb, Regs, InstructionData);\r
+    }\r
+\r
+    ExitInfo1 = InstructionData->Ext.RmData;\r
+    ExitInfo2 = Bytes;\r
+\r
+    Ghcb->SaveArea.SwScratch = (UINT64) Ghcb->SharedBuffer;\r
+    Status = VmgExit (Ghcb, SVM_EXIT_MMIO_READ, ExitInfo1, ExitInfo2);\r
+    if (Status != 0) {\r
+      return Status;\r
+    }\r
+\r
+    Register = GetRegisterPointer (Regs, InstructionData->Ext.ModRm.Reg);\r
+    if (Bytes == 4) {\r
+      //\r
+      // Zero-extend for 32-bit operation\r
+      //\r
+      *Register = 0;\r
+    }\r
+    CopyMem (Register, Ghcb->SharedBuffer, Bytes);\r
+    break;\r
+\r
+  //\r
+  // MMIO read w/ zero-extension ((MOVZX regX, reg/memX)\r
+  //\r
+  case 0xB6:\r
+    Bytes = 1;\r
+    //\r
+    // fall through\r
+    //\r
+  case 0xB7:\r
+    Bytes = (Bytes != 0) ? Bytes : 2;\r
+\r
+    ExitInfo1 = InstructionData->Ext.RmData;\r
+    ExitInfo2 = Bytes;\r
+\r
+    Ghcb->SaveArea.SwScratch = (UINT64) Ghcb->SharedBuffer;\r
+    Status = VmgExit (Ghcb, SVM_EXIT_MMIO_READ, ExitInfo1, ExitInfo2);\r
+    if (Status != 0) {\r
+      return Status;\r
+    }\r
+\r
+    Register = GetRegisterPointer (Regs, InstructionData->Ext.ModRm.Reg);\r
+    SetMem (Register, InstructionData->DataSize, 0);\r
+    CopyMem (Register, Ghcb->SharedBuffer, Bytes);\r
+    break;\r
+\r
+  //\r
+  // MMIO read w/ sign-extension (MOVSX regX, reg/memX)\r
+  //\r
+  case 0xBE:\r
+    Bytes = 1;\r
+    //\r
+    // fall through\r
+    //\r
+  case 0xBF:\r
+    Bytes = (Bytes != 0) ? Bytes : 2;\r
+\r
+    ExitInfo1 = InstructionData->Ext.RmData;\r
+    ExitInfo2 = Bytes;\r
+\r
+    Ghcb->SaveArea.SwScratch = (UINT64) Ghcb->SharedBuffer;\r
+    Status = VmgExit (Ghcb, SVM_EXIT_MMIO_READ, ExitInfo1, ExitInfo2);\r
+    if (Status != 0) {\r
+      return Status;\r
+    }\r
+\r
+    if (Bytes == 1) {\r
+      UINT8 *Data;\r
+\r
+      Data = (UINT8 *) Ghcb->SharedBuffer;\r
+      SignByte = ((*Data & BIT7) != 0) ? 0xFF : 0x00;\r
+    } else {\r
+      UINT16 *Data;\r
+\r
+      Data = (UINT16 *) Ghcb->SharedBuffer;\r
+      SignByte = ((*Data & BIT15) != 0) ? 0xFF : 0x00;\r
+    }\r
+\r
+    Register = GetRegisterPointer (Regs, InstructionData->Ext.ModRm.Reg);\r
+    SetMem (Register, InstructionData->DataSize, SignByte);\r
+    CopyMem (Register, Ghcb->SharedBuffer, Bytes);\r
+    break;\r
+\r
+  default:\r
+    Status = GP_EXCEPTION;\r
+    ASSERT (FALSE);\r
+  }\r
+\r
+  return Status;\r
+}\r
+\r
 /**\r
   Handle an MSR event.\r
 \r
@@ -770,6 +1254,10 @@ VmgExitHandleVc (
     NaeExit = MsrExit;\r
     break;\r
 \r
+  case SVM_EXIT_NPF:\r
+    NaeExit = MmioExit;\r
+    break;\r
+\r
   default:\r
     NaeExit = UnsupportedExit;\r
   }\r