lcd-domains-arch.h 9.27 KB
Newer Older
1 2
#ifndef _ASM_X86_LCD_DOMAINS_ARCH_H
#define _ASM_X86_LCD_DOMAINS_ARCH_H
3

4
#include <asm/vmx.h>
5
#include <linux/spinlock.h>
6
#include <lcd-domains/utcb.h>
7

8
struct lcd_arch_vmcs {
9 10 11 12 13
	u32 revision_id;
	u32 abort;
	char data[0];
};

14
#define LCD_ARCH_NUM_AUTOLOAD_MSRS 0
15

16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
enum lcd_arch_reg {
	LCD_ARCH_REGS_RAX = 0,
	LCD_ARCH_REGS_RCX = 1,
	LCD_ARCH_REGS_RDX = 2,
	LCD_ARCH_REGS_RBX = 3,
	LCD_ARCH_REGS_RSP = 4,
	LCD_ARCH_REGS_RBP = 5,
	LCD_ARCH_REGS_RSI = 6,
	LCD_ARCH_REGS_RDI = 7,
	LCD_ARCH_REGS_R8 = 8,
	LCD_ARCH_REGS_R9 = 9,
	LCD_ARCH_REGS_R10 = 10,
	LCD_ARCH_REGS_R11 = 11,
	LCD_ARCH_REGS_R12 = 12,
	LCD_ARCH_REGS_R13 = 13,
	LCD_ARCH_REGS_R14 = 14,
	LCD_ARCH_REGS_R15 = 15,
	LCD_ARCH_REGS_RIP,
	LCD_ARCH_NUM_REGS
35 36
};

Charlie Jacobsen's avatar
Charlie Jacobsen committed
37 38
#define LCD_ARCH_EPT_WALK_LENGTH 4
#define LCD_ARCH_EPTP_WALK_SHIFT 3
39
#define LCD_ARCH_PTRS_PER_EPTE   (1 << 9)
Charlie Jacobsen's avatar
Charlie Jacobsen committed
40

41
struct lcd_arch_ept {
42 43 44 45
	spinlock_t lock;
	unsigned long root_hpa;
	unsigned long vmcs_ptr;
	bool access_dirty_enabled;
46 47
};

48
typedef unsigned long lcd_arch_epte_t;
Charlie Jacobsen's avatar
Charlie Jacobsen committed
49

50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65
struct lcd_arch_tss {
	/*
	 * Intel SDM V3 7.7
	 *
	 * Base TSS before I/O bitmap, etc.
	 */
	struct x86_hw_tss base_tss;
	/*
	 * I/O bitmap must be at least 8 bits to contain
	 * required 8 bits that are set.
	 *
	 * Intel SDM V1 16.5.2
	 */
	u8 io_bitmap[1];
} __attribute__((packed));

66
struct lcd_arch {
67 68 69
	/*
	 * Public Data
	 */
70 71 72 73
	struct {
		u64 gva;
		u64 gpa;
	} run_info;
74 75 76 77

	/*
	 * Private Data
	 */
78 79
	int cpu;
	int launched;
80
	int vpid;
81
	struct lcd_arch_vmcs *vmcs;
82

83
	struct lcd_arch_ept ept;
84 85
	struct desc_struct  *gdt;
	struct lcd_arch_tss *tss;
86
	struct lcd_utcb *utcb;
87 88 89 90 91 92 93 94 95

	u8  fail;
	u64 exit_reason;
	u64 exit_qualification;
	u32 idt_vectoring_info;
	u32 exit_intr_info;
	u32 error_code;
	u32 vec_no;
	u64 host_rsp;
96
	u64 regs[LCD_ARCH_NUM_REGS];
97 98 99 100 101
	u64 cr2;
	int shutdown;
	int ret_code;

	struct msr_autoload {
102 103 104
#if LCD_ARCH_NUM_AUTOLOAD_MSRS > 0
		struct vmx_msr_entry guest[LCD_ARCH_NUM_AUTOLOAD_MSRS];
		struct vmx_msr_entry host[LCD_ARCH_NUM_AUTOLOAD_MSRS];
105 106 107 108
#else
		struct vmx_msr_entry *guest;
		struct vmx_msr_entry *host;
#endif
109 110 111
	} msr_autoload;
};

112 113 114 115
/**
 * Initializes the arch-dependent code for LCD (detects required
 * features, turns on VMX on *all* cpu's).
 */
116
int lcd_arch_init(void);
117 118 119 120 121 122
/**
 * Turns off VMX on *all* cpu's and tears down arch-dependent code.
 * 
 * Important: All LCDs should be destroyed before calling this
 * routine (otherwise, memory will leak).
 */
123
void lcd_arch_exit(void);
124 125 126 127
/**
 * Creates the arch-dependent part of an LCD, and initializes 
 * the settings and most register values.
 */
128
struct lcd_arch *lcd_arch_create(void);
129 130 131 132
/**
 * Tears down arch-dep part of LCD. (If LCD is launched on
 * some cpu, it will become inactive.)
 */
133
void lcd_arch_destroy(struct lcd_arch *vcpu);
134 135 136 137 138
/**
 * Runs the LCD on the calling cpu. (If the LCD is active on
 * a different cpu, it will become inactive there.) Kernel
 * preemption is disabled while the LCD is launched, but
 * external interrupts are not disabled and will be handled.
139 140 141
 *
 * Unless the caller does otherwise, kernel preemption is
 * enabled before returning.
142 143 144
 *
 * Returns status code (e.g., LCD_ARCH_STATUS_PAGE_FAULT)
 * so that caller knows why lcd exited and can respond.
145 146 147 148 149 150 151
 */
int lcd_arch_run(struct lcd_arch *vcpu);

/**
 * Status codes for running LCDs.
 */
enum lcd_arch_status {
152
	LCD_ARCH_STATUS_PAGE_FAULT = 0,
153 154 155
	LCD_ARCH_STATUS_EXT_INTR   = 1,
	LCD_ARCH_STATUS_EPT_FAULT  = 2,
	LCD_ARCH_STATUS_CR3_ACCESS = 3,
156
	LCD_ARCH_STATUS_SYSCALL    = 4,
157
};
158

Charlie Jacobsen's avatar
Charlie Jacobsen committed
159 160 161 162 163 164 165 166 167 168 169
/**
 * Lookup ept entry for guest physical address gpa.
 *
 * Set create = 1 to allocate ept page table data structures
 * along the path as needed.
 */
int lcd_arch_ept_walk(struct lcd_arch *vcpu, u64 gpa, int create,
		lcd_arch_epte_t **epte_out);
/**
 * Set the guest physical => host physical mapping in the ept entry.
 */
170
void lcd_arch_ept_set(lcd_arch_epte_t *epte, u64 hpa);
Charlie Jacobsen's avatar
Charlie Jacobsen committed
171 172 173 174
/**
 * Read the host physical address stored in epte.
 */
u64 lcd_arch_ept_hpa(lcd_arch_epte_t *epte);
175 176 177 178 179 180 181 182
/**
 * Simple routine combining ept walk and set.
 *
 * overwrite = 0  => do not overwrite if ept entry is already present
 * overwrite = 1  => overwrite any existing ept entry
 */
int lcd_arch_ept_map_gpa_to_hpa(struct lcd_arch *vcpu, u64 gpa, u64 hpa,
				int create, int overwrite);
183 184 185 186
/**
 * Simple routine combinding ept walk and get.
 */
int lcd_arch_ept_gpa_to_hpa(struct lcd_arch *vcpu, u64 gpa, u64 *hpa_out);
187 188 189 190 191
/**
 * Set the lcd's program counter to the guest physical address
 * gpa.
 */
int lcd_arch_set_pc(struct lcd_arch *vcpu, u64 gpa);
Charlie Jacobsen's avatar
Charlie Jacobsen committed
192

193 194 195 196 197
/*
 * GDT Layout
 * ==========
 * 0 = NULL
 * 1 = Code segment
198 199
 * 2 = Data segment  (%fs, default not present)
 * 3 = Data segment  (%gs, default not present)
200 201 202 203 204 205 206 207 208 209
 * 4 = Task segment
 *
 * See Intel SDM V3 26.3.1.2, 26.3.1.3 for register requirements.
 * See Intel SDM V3 3.4.2, 3.4.3 for segment register layout
 * See Intel SDM V3 2.4.1 - 2.4.4 for gdtr, ldtr, idtr, tr
 */
#define LCD_ARCH_FS_BASE     0x0UL
#define LCD_ARCH_FS_LIMIT    0xFFFFFFFF
#define LCD_ARCH_GS_BASE     0x0UL
#define LCD_ARCH_GS_LIMIT    0xFFFFFFFF
210
#define LCD_ARCH_GDTR_BASE   0x0000000000001000UL
211
#define LCD_ARCH_GDTR_LIMIT  ((u32)~(PAGE_SIZE - 1))
212
#define LCD_ARCH_TSS_BASE    0x0000000000002000UL
213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239
/* tss base + limit = address of last byte in tss, hence -1 */
#define LCD_ARCH_TSS_LIMIT   (sizeof(struct lcd_arch_tss) - 1)
#define LCD_ARCH_IDTR_BASE   0x0UL
#define LCD_ARCH_IDTR_LIMIT  0x0 /* no idt right now */

#define LCD_ARCH_CS_SELECTOR   (1 << 3)
#define LCD_ARCH_FS_SELECTOR   (2 << 3)
#define LCD_ARCH_GS_SELECTOR   (3 << 3)
#define LCD_ARCH_TR_SELECTOR   (4 << 3) /* TI must be 0 */
#define LCD_ARCH_LDTR_SELECTOR (0 << 3) /* unusable */

/*
 * Guest Physical Memory Layout
 * ============================
 *
 *                         +---------------------------+ 0xFFFF FFFF FFFF FFFF
 *                         |                           |
 *                         :                           :
 *                         :      Free / Unmapped      :
 *                         :                           :
 *                         |                           |
 * LCD_ARCH_STACK_TOP,---> +---------------------------+ 0x0000 0000 0000 4000
 * LCD_ARCH_FREE           |                           |
 *                         |          Stack            |
 *                         :       (grows down)        : (4 KBs)
 *                         :                           :
 *                         |                           |
240 241
 *                         |   User Thread Ctrl Block  |
 * LCD_ARCH_UTCB---------> +---------------------------+ 0x0000 0000 0000 3000
242 243 244 245 246
 *                         |           TSS             |
 *                         |    only sizeof(tss) is    | (4 KBs)
 *                         |           used            |
 * LCD_ARCH_TSS_BASE-----> +---------------------------+ 0x0000 0000 0000 2000
 *                         |           GDT             | (4 KBs)
247
 * LCD_ARCH_GDTR_BASE----> +---------------------------+ 0x0000 0000 0000 1000
248 249 250 251
 *                         |         Reserved          |
 *                         |       (not mapped)        | (4 KBs)
 *                         +---------------------------+ 0x0000 0000 0000 0000
 */
252
#define LCD_ARCH_UTCB        0x0000000000003000UL
253 254
#define LCD_ARCH_STACK_TOP   0x0000000000004000UL
#define LCD_ARCH_FREE        LCD_ARCH_STACK_TOP
Charlie Jacobsen's avatar
Charlie Jacobsen committed
255

256 257 258 259 260
/*
 * Accessor Macro for syscalls
 * ===========================
 */
#define LCD_ARCH_GET_SYSCALL_NUM(vcpu) (vcpu->regs[LCD_ARCH_REGS_RAX])
261 262 263 264 265 266 267 268 269

/*
 * Accessor Macros for IPC
 * =======================
 *
 * Based on x86 seL4 message register design.
 *
 * See seL4 manual, 4.1.
 */
270
#define LCD_ARCH_GET_CAP_REG(vcpu) (vcpu->regs[LCD_ARCH_REGS_RBX])
271 272 273
#define LCD_ARCH_GET_BDG_REG(vcpu) (vcpu->regs[LCD_ARCH_REGS_RBX])
#define LCD_ARCH_GET_TAG_REG(vcpu) (vcpu->regs[LCD_ARCH_REGS_RSI])
#define LCD_ARCH_GET_MSG_REG(vcpu, idx) (__lcd_arch_get_msg_reg(vcpu, idx))
274 275
static inline u64 __lcd_arch_get_msg_reg(struct lcd_arch *vcpu, 
					unsigned int idx)
276 277 278 279 280 281
{
	/*
	 * Message regs 0 and 1 are fast (use machine registers)
	 *
	 * Message regs 2, ... always use the mr's in struct lcd_ipc_regs.
	 *
282
	 * (The first two mr's in utcb are reserved for
283
	 * mr's 0 and 1. If the caller wishes to explicitly use those mr's,
284
	 * they should do so by manually accessing the mr's in utcb.)
285 286
	 */
	if (idx == 0)
287
		return vcpu->regs[LCD_ARCH_REGS_RDI];
288
	else if (idx == 1)
289
		return vcpu->regs[LCD_ARCH_REGS_RBP];
290
	else
291
		return vcpu->utcb->ipc.mr[idx];
292 293 294
}

#define LCD_ARCH_SET_CAP_REG(vcpu, val) ({                    \
295
			vcpu->regs[LCD_ARCH_REGS_RBX] = val;  \
296 297 298 299 300 301 302 303 304 305
		})
#define LCD_ARCH_SET_BDG_REG(vcpu, val) ({                    \
			vcpu->regs[LCD_ARCH_REGS_RBX] = val;  \
		})
#define LCD_ARCH_SET_TAG_REG(vcpu, val) ({                    \
			vcpu->regs[LCD_ARCH_REGS_RSI] = val;  \
		})
#define LCD_ARCH_SET_MSG_REG(vcpu, idx, val) ({                 \
			__lcd_arch_set_msg_reg(vcpu, val, idx);	\
		})
306 307
static inline void __lcd_arch_set_msg_reg(struct lcd_arch *vcpu, 
					unsigned int idx, u64 val)
308 309 310 311 312 313
{
	/*
	 * Message regs 0 and 1 are fast (use machine registers)
	 *
	 * Message regs 2, ... always use the mr's in struct lcd_ipc_regs.
	 *
314
	 * (The first two mr's in utcb are reserved for
315
	 * mr's 0 and 1. If the caller wishes to explicitly use those mr's,
316
	 * they should do so by manually accessing the mr's in utcb.)
317 318
	 */
	if (idx == 0)
319
		vcpu->regs[LCD_ARCH_REGS_RDI] = val;
320
	else if (idx == 1)
321
		vcpu->regs[LCD_ARCH_REGS_RBP] = val;
322
	else
323
		vcpu->utcb->ipc.mr[idx] = val;
324 325
}

326
#endif  /* _ASM_X86_LCD_DOMAINS_ARCH_H */