lg.h 7.5 KB
Newer Older
R
Rusty Russell 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13
#ifndef _LGUEST_H
#define _LGUEST_H

#ifndef __ASSEMBLY__
#include <linux/types.h>
#include <linux/init.h>
#include <linux/stringify.h>
#include <linux/lguest.h>
#include <linux/lguest_launcher.h>
#include <linux/wait.h>
#include <linux/err.h>
#include <asm/semaphore.h>

14
#include <asm/lguest.h>
R
Rusty Russell 已提交
15 16 17 18 19 20

void free_pagetables(void);
int init_pagetables(struct page **switcher_page, unsigned int pages);

struct pgdir
{
21
	unsigned long gpgdir;
22
	pgd_t *pgdir;
R
Rusty Russell 已提交
23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40
};

/* We have two pages shared with guests, per cpu.  */
struct lguest_pages
{
	/* This is the stack page mapped rw in guest */
	char spare[PAGE_SIZE - sizeof(struct lguest_regs)];
	struct lguest_regs regs;

	/* This is the host state & guest descriptor page, ro in guest */
	struct lguest_ro_state state;
} __attribute__((aligned(PAGE_SIZE)));

#define CHANGED_IDT		1
#define CHANGED_GDT		2
#define CHANGED_GDT_TLS		4 /* Actually a subset of CHANGED_GDT */
#define CHANGED_ALL	        3

41 42 43 44 45
struct lguest;

struct lg_cpu {
	unsigned int id;
	struct lguest *lg;
46 47 48 49

	/* If a hypercall was asked for, this points to the arguments. */
	struct hcall_args *hcall;
	u32 next_hcall;
50 51
};

R
Rusty Russell 已提交
52 53 54 55 56 57 58 59 60
/* The private info the thread maintains about the guest. */
struct lguest
{
	/* At end of a page shared mapped over lguest_pages in guest.  */
	unsigned long regs_page;
	struct lguest_regs *regs;
	struct lguest_data __user *lguest_data;
	struct task_struct *tsk;
	struct mm_struct *mm; 	/* == tsk->mm, but that becomes NULL on exit */
61 62 63
	struct lg_cpu cpus[NR_CPUS];
	unsigned int nr_cpus;

R
Rusty Russell 已提交
64
	u32 pfn_limit;
65 66 67
	/* This provides the offset to the base of guest-physical
	 * memory in the Launcher. */
	void __user *mem_base;
68
	unsigned long kernel_address;
R
Rusty Russell 已提交
69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87
	u32 cr2;
	int halted;
	int ts;
	u32 esp1;
	u8 ss1;

	/* Do we need to stop what we're doing and return to userspace? */
	int break_out;
	wait_queue_head_t break_wq;

	/* Bitmap of what has changed: see CHANGED_* above. */
	int changed;
	struct lguest_pages *last_pages;

	/* We keep a small number of these. */
	u32 pgdidx;
	struct pgdir pgdirs[4];

	unsigned long noirq_start, noirq_end;
88
	unsigned long pending_notify; /* pfn from LHCALL_NOTIFY */
R
Rusty Russell 已提交
89 90 91 92 93 94 95

	unsigned int stack_pages;
	u32 tsc_khz;

	/* Dead? */
	const char *dead;

96
	struct lguest_arch arch;
R
Rusty Russell 已提交
97 98 99 100 101 102 103 104 105 106 107 108 109

	/* Virtual clock device */
	struct hrtimer hrt;

	/* Pending virtual interrupts */
	DECLARE_BITMAP(irqs_pending, LGUEST_IRQS);
};

extern struct mutex lguest_lock;

/* core.c: */
int lguest_address_ok(const struct lguest *lg,
		      unsigned long addr, unsigned long len);
R
Rusty Russell 已提交
110 111 112
void __lgread(struct lguest *, void *, unsigned long, unsigned);
void __lgwrite(struct lguest *, unsigned long, const void *, unsigned);

R
Rusty Russell 已提交
113
/*H:035 Using memory-copy operations like that is usually inconvient, so we
R
Rusty Russell 已提交
114 115 116 117 118 119 120 121 122 123 124 125 126 127 128
 * have the following helper macros which read and write a specific type (often
 * an unsigned long).
 *
 * This reads into a variable of the given type then returns that. */
#define lgread(lg, addr, type)						\
	({ type _v; __lgread((lg), &_v, (addr), sizeof(_v)); _v; })

/* This checks that the variable is of the given type, then writes it out. */
#define lgwrite(lg, addr, type, val)				\
	do {							\
		typecheck(type, val);				\
		__lgwrite((lg), (addr), &(val), sizeof(val));	\
	} while(0)
/* (end of memory access helper routines) :*/

129
int run_guest(struct lg_cpu *cpu, unsigned long __user *user);
R
Rusty Russell 已提交
130

131 132 133 134 135 136
/* Helper macros to obtain the first 12 or the last 20 bits, this is only the
 * first step in the migration to the kernel types.  pte_pfn is already defined
 * in the kernel. */
#define pgd_flags(x)	(pgd_val(x) & ~PAGE_MASK)
#define pte_flags(x)	(pte_val(x) & ~PAGE_MASK)
#define pgd_pfn(x)	(pgd_val(x) >> PAGE_SHIFT)
R
Rusty Russell 已提交
137 138 139 140 141 142 143 144 145 146 147 148 149

/* interrupts_and_traps.c: */
void maybe_do_interrupt(struct lguest *lg);
int deliver_trap(struct lguest *lg, unsigned int num);
void load_guest_idt_entry(struct lguest *lg, unsigned int i, u32 low, u32 hi);
void guest_set_stack(struct lguest *lg, u32 seg, u32 esp, unsigned int pages);
void pin_stack_pages(struct lguest *lg);
void setup_default_idt_entries(struct lguest_ro_state *state,
			       const unsigned long *def);
void copy_traps(const struct lguest *lg, struct desc_struct *idt,
		const unsigned long *def);
void guest_set_clockevent(struct lguest *lg, unsigned long delta);
void init_clockdev(struct lguest *lg);
150 151 152
bool check_syscall_vector(struct lguest *lg);
int init_interrupts(void);
void free_interrupts(void);
R
Rusty Russell 已提交
153 154 155 156 157 158 159 160 161 162 163 164 165

/* segments.c: */
void setup_default_gdt_entries(struct lguest_ro_state *state);
void setup_guest_gdt(struct lguest *lg);
void load_guest_gdt(struct lguest *lg, unsigned long table, u32 num);
void guest_load_tls(struct lguest *lg, unsigned long tls_array);
void copy_gdt(const struct lguest *lg, struct desc_struct *gdt);
void copy_gdt_tls(const struct lguest *lg, struct desc_struct *gdt);

/* page_tables.c: */
int init_guest_pagetable(struct lguest *lg, unsigned long pgtable);
void free_guest_pagetable(struct lguest *lg);
void guest_new_pagetable(struct lguest *lg, unsigned long pgtable);
166
void guest_set_pmd(struct lguest *lg, unsigned long gpgdir, u32 i);
R
Rusty Russell 已提交
167 168
void guest_pagetable_clear_all(struct lguest *lg);
void guest_pagetable_flush_user(struct lguest *lg);
169
void guest_set_pte(struct lguest *lg, unsigned long gpgdir,
170
		   unsigned long vaddr, pte_t val);
R
Rusty Russell 已提交
171 172 173
void map_switcher_in_guest(struct lguest *lg, struct lguest_pages *pages);
int demand_page(struct lguest *info, unsigned long cr2, int errcode);
void pin_page(struct lguest *lg, unsigned long vaddr);
174 175
unsigned long guest_pa(struct lguest *lg, unsigned long vaddr);
void page_table_guest_data_init(struct lguest *lg);
R
Rusty Russell 已提交
176

177 178 179
/* <arch>/core.c: */
void lguest_arch_host_init(void);
void lguest_arch_host_fini(void);
180
void lguest_arch_run_guest(struct lg_cpu *cpu);
181 182 183
void lguest_arch_handle_trap(struct lg_cpu *cpu);
int lguest_arch_init_hypercalls(struct lg_cpu *cpu);
int lguest_arch_do_hcall(struct lg_cpu *cpu, struct hcall_args *args);
184
void lguest_arch_setup_regs(struct lguest *lg, unsigned long start);
185 186 187 188

/* <arch>/switcher.S: */
extern char start_switcher_text[], end_switcher_text[], switch_to_guest[];

R
Rusty Russell 已提交
189 190 191 192 193
/* lguest_user.c: */
int lguest_device_init(void);
void lguest_device_remove(void);

/* hypercalls.c: */
194
void do_hypercalls(struct lg_cpu *cpu);
195
void write_timestamp(struct lguest *lg);
R
Rusty Russell 已提交
196

197 198 199 200
/*L:035
 * Let's step aside for the moment, to study one important routine that's used
 * widely in the Host code.
 *
R
Rusty Russell 已提交
201
 * There are many cases where the Guest can do something invalid, like pass crap
202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220
 * to a hypercall.  Since only the Guest kernel can make hypercalls, it's quite
 * acceptable to simply terminate the Guest and give the Launcher a nicely
 * formatted reason.  It's also simpler for the Guest itself, which doesn't
 * need to check most hypercalls for "success"; if you're still running, it
 * succeeded.
 *
 * Once this is called, the Guest will never run again, so most Host code can
 * call this then continue as if nothing had happened.  This means many
 * functions don't have to explicitly return an error code, which keeps the
 * code simple.
 *
 * It also means that this can be called more than once: only the first one is
 * remembered.  The only trick is that we still need to kill the Guest even if
 * we can't allocate memory to store the reason.  Linux has a neat way of
 * packing error codes into invalid pointers, so we use that here.
 *
 * Like any macro which uses an "if", it is safely wrapped in a run-once "do {
 * } while(0)".
 */
R
Rusty Russell 已提交
221 222 223 224 225 226 227 228
#define kill_guest(lg, fmt...)					\
do {								\
	if (!(lg)->dead) {					\
		(lg)->dead = kasprintf(GFP_ATOMIC, fmt);	\
		if (!(lg)->dead)				\
			(lg)->dead = ERR_PTR(-ENOMEM);		\
	}							\
} while(0)
229
/* (End of aside) :*/
R
Rusty Russell 已提交
230 231 232

#endif	/* __ASSEMBLY__ */
#endif	/* _LGUEST_H */