intel_irq_remapping.c 27.3 KB
Newer Older
Y
Yinghai Lu 已提交
1
#include <linux/interrupt.h>
2
#include <linux/dmar.h>
3
#include <linux/spinlock.h>
4
#include <linux/slab.h>
5
#include <linux/jiffies.h>
6
#include <linux/hpet.h>
7
#include <linux/pci.h>
8
#include <linux/irq.h>
9 10
#include <linux/intel-iommu.h>
#include <linux/acpi.h>
11
#include <asm/io_apic.h>
Y
Yinghai Lu 已提交
12
#include <asm/smp.h>
13
#include <asm/cpu.h>
14
#include <asm/irq_remapping.h>
15
#include <asm/pci-direct.h>
16
#include <asm/msidef.h>
17

18
#include "irq_remapping.h"
19

20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
struct ioapic_scope {
	struct intel_iommu *iommu;
	unsigned int id;
	unsigned int bus;	/* PCI bus number */
	unsigned int devfn;	/* PCI devfn number */
};

struct hpet_scope {
	struct intel_iommu *iommu;
	u8 id;
	unsigned int bus;
	unsigned int devfn;
};

#define IR_X2APIC_MODE(mode) (mode ? (1 << 11) : 0)
35
#define IRTE_DEST(dest) ((x2apic_mode) ? dest : dest << 8)
36

37
static struct ioapic_scope ir_ioapic[MAX_IO_APICS];
38 39
static struct hpet_scope ir_hpet[MAX_HPET_TBS];
static int ir_ioapic_num, ir_hpet_num;
40

41 42 43 44 45 46 47 48 49 50 51
/*
 * Lock ordering:
 * ->dmar_global_lock
 *	->irq_2_ir_lock
 *		->qi->q_lock
 *	->iommu->register_lock
 * Note:
 * intel_irq_remap_ops.{supported,prepare,enable,disable,reenable} are called
 * in single-threaded environment with interrupt disabled, so no need to tabke
 * the dmar_global_lock.
 */
52
static DEFINE_RAW_SPINLOCK(irq_2_ir_lock);
53

54 55
static int __init parse_ioapics_under_ir(void);

56 57
static struct irq_2_iommu *irq_2_iommu(unsigned int irq)
{
58
	struct irq_cfg *cfg = irq_get_chip_data(irq);
59
	return cfg ? &cfg->irq_2_iommu : NULL;
60 61
}

62
static int get_irte(int irq, struct irte *entry)
63
{
64
	struct irq_2_iommu *irq_iommu = irq_2_iommu(irq);
65
	unsigned long flags;
66
	int index;
67

68
	if (!entry || !irq_iommu)
69 70
		return -1;

71
	raw_spin_lock_irqsave(&irq_2_ir_lock, flags);
72

73 74
	index = irq_iommu->irte_index + irq_iommu->sub_handle;
	*entry = *(irq_iommu->iommu->ir_table->base + index);
75

76
	raw_spin_unlock_irqrestore(&irq_2_ir_lock, flags);
77 78 79
	return 0;
}

80
static int alloc_irte(struct intel_iommu *iommu, int irq, u16 count)
81 82
{
	struct ir_table *table = iommu->ir_table;
83
	struct irq_2_iommu *irq_iommu = irq_2_iommu(irq);
84
	struct irq_cfg *cfg = irq_get_chip_data(irq);
85
	unsigned int mask = 0;
86
	unsigned long flags;
87
	int index;
88

89
	if (!count || !irq_iommu)
90 91
		return -1;

92 93 94 95 96 97 98 99 100 101 102 103 104
	if (count > 1) {
		count = __roundup_pow_of_two(count);
		mask = ilog2(count);
	}

	if (mask > ecap_max_handle_mask(iommu->ecap)) {
		printk(KERN_ERR
		       "Requested mask %x exceeds the max invalidation handle"
		       " mask value %Lx\n", mask,
		       ecap_max_handle_mask(iommu->ecap));
		return -1;
	}

105
	raw_spin_lock_irqsave(&irq_2_ir_lock, flags);
106 107 108 109 110 111 112 113 114 115 116
	index = bitmap_find_free_region(table->bitmap,
					INTR_REMAP_TABLE_ENTRIES, mask);
	if (index < 0) {
		pr_warn("IR%d: can't allocate an IRTE\n", iommu->seq_id);
	} else {
		cfg->remapped = 1;
		irq_iommu->iommu = iommu;
		irq_iommu->irte_index =  index;
		irq_iommu->sub_handle = 0;
		irq_iommu->irte_mask = mask;
	}
117
	raw_spin_unlock_irqrestore(&irq_2_ir_lock, flags);
118 119 120 121

	return index;
}

122
static int qi_flush_iec(struct intel_iommu *iommu, int index, int mask)
123 124 125 126 127 128 129
{
	struct qi_desc desc;

	desc.low = QI_IEC_IIDEX(index) | QI_IEC_TYPE | QI_IEC_IM(mask)
		   | QI_IEC_SELECTIVE;
	desc.high = 0;

130
	return qi_submit_sync(&desc, iommu);
131 132
}

133
static int map_irq_to_irte_handle(int irq, u16 *sub_handle)
134
{
135
	struct irq_2_iommu *irq_iommu = irq_2_iommu(irq);
136
	unsigned long flags;
137
	int index;
138

139
	if (!irq_iommu)
140 141
		return -1;

142
	raw_spin_lock_irqsave(&irq_2_ir_lock, flags);
143 144
	*sub_handle = irq_iommu->sub_handle;
	index = irq_iommu->irte_index;
145
	raw_spin_unlock_irqrestore(&irq_2_ir_lock, flags);
146 147 148
	return index;
}

149
static int set_irte_irq(int irq, struct intel_iommu *iommu, u16 index, u16 subhandle)
150
{
151
	struct irq_2_iommu *irq_iommu = irq_2_iommu(irq);
152
	struct irq_cfg *cfg = irq_get_chip_data(irq);
153
	unsigned long flags;
154

155
	if (!irq_iommu)
156
		return -1;
157

158
	raw_spin_lock_irqsave(&irq_2_ir_lock, flags);
159

160
	cfg->remapped = 1;
161 162 163 164
	irq_iommu->iommu = iommu;
	irq_iommu->irte_index = index;
	irq_iommu->sub_handle = subhandle;
	irq_iommu->irte_mask = 0;
165

166
	raw_spin_unlock_irqrestore(&irq_2_ir_lock, flags);
167 168 169 170

	return 0;
}

171
static int modify_irte(int irq, struct irte *irte_modified)
172
{
173
	struct irq_2_iommu *irq_iommu = irq_2_iommu(irq);
174
	struct intel_iommu *iommu;
175
	unsigned long flags;
176 177
	struct irte *irte;
	int rc, index;
178

179
	if (!irq_iommu)
180
		return -1;
181

182
	raw_spin_lock_irqsave(&irq_2_ir_lock, flags);
183

184
	iommu = irq_iommu->iommu;
185

186
	index = irq_iommu->irte_index + irq_iommu->sub_handle;
187 188
	irte = &iommu->ir_table->base[index];

189 190
	set_64bit(&irte->low, irte_modified->low);
	set_64bit(&irte->high, irte_modified->high);
191 192
	__iommu_flush_cache(iommu, irte, sizeof(*irte));

193
	rc = qi_flush_iec(iommu, index, 0);
194
	raw_spin_unlock_irqrestore(&irq_2_ir_lock, flags);
195 196

	return rc;
197 198
}

199
static struct intel_iommu *map_hpet_to_ir(u8 hpet_id)
200 201 202 203 204 205 206 207 208
{
	int i;

	for (i = 0; i < MAX_HPET_TBS; i++)
		if (ir_hpet[i].id == hpet_id)
			return ir_hpet[i].iommu;
	return NULL;
}

209
static struct intel_iommu *map_ioapic_to_ir(int apic)
210 211 212 213 214 215 216 217 218
{
	int i;

	for (i = 0; i < MAX_IO_APICS; i++)
		if (ir_ioapic[i].id == apic)
			return ir_ioapic[i].iommu;
	return NULL;
}

219
static struct intel_iommu *map_dev_to_ir(struct pci_dev *dev)
220 221 222 223 224 225 226 227 228 229
{
	struct dmar_drhd_unit *drhd;

	drhd = dmar_find_matched_drhd_unit(dev);
	if (!drhd)
		return NULL;

	return drhd->iommu;
}

230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245
static int clear_entries(struct irq_2_iommu *irq_iommu)
{
	struct irte *start, *entry, *end;
	struct intel_iommu *iommu;
	int index;

	if (irq_iommu->sub_handle)
		return 0;

	iommu = irq_iommu->iommu;
	index = irq_iommu->irte_index + irq_iommu->sub_handle;

	start = iommu->ir_table->base + index;
	end = start + (1 << irq_iommu->irte_mask);

	for (entry = start; entry < end; entry++) {
246 247
		set_64bit(&entry->low, 0);
		set_64bit(&entry->high, 0);
248
	}
249 250
	bitmap_release_region(iommu->ir_table->bitmap, index,
			      irq_iommu->irte_mask);
251 252 253 254

	return qi_flush_iec(iommu, index, irq_iommu->irte_mask);
}

255
static int free_irte(int irq)
256
{
257
	struct irq_2_iommu *irq_iommu = irq_2_iommu(irq);
258
	unsigned long flags;
259
	int rc;
260

261
	if (!irq_iommu)
262
		return -1;
263

264
	raw_spin_lock_irqsave(&irq_2_ir_lock, flags);
265

266
	rc = clear_entries(irq_iommu);
267

268 269 270 271
	irq_iommu->iommu = NULL;
	irq_iommu->irte_index = 0;
	irq_iommu->sub_handle = 0;
	irq_iommu->irte_mask = 0;
272

273
	raw_spin_unlock_irqrestore(&irq_2_ir_lock, flags);
274

275
	return rc;
276 277
}

278 279 280 281
/*
 * source validation type
 */
#define SVT_NO_VERIFY		0x0  /* no verification is required */
L
Lucas De Marchi 已提交
282
#define SVT_VERIFY_SID_SQ	0x1  /* verify using SID and SQ fields */
283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305
#define SVT_VERIFY_BUS		0x2  /* verify bus of request-id */

/*
 * source-id qualifier
 */
#define SQ_ALL_16	0x0  /* verify all 16 bits of request-id */
#define SQ_13_IGNORE_1	0x1  /* verify most significant 13 bits, ignore
			      * the third least significant bit
			      */
#define SQ_13_IGNORE_2	0x2  /* verify most significant 13 bits, ignore
			      * the second and third least significant bits
			      */
#define SQ_13_IGNORE_3	0x3  /* verify most significant 13 bits, ignore
			      * the least three significant bits
			      */

/*
 * set SVT, SQ and SID fields of irte to verify
 * source ids of interrupt requests
 */
static void set_irte_sid(struct irte *irte, unsigned int svt,
			 unsigned int sq, unsigned int sid)
{
306 307
	if (disable_sourceid_checking)
		svt = SVT_NO_VERIFY;
308 309 310 311 312
	irte->svt = svt;
	irte->sq = sq;
	irte->sid = sid;
}

313
static int set_ioapic_sid(struct irte *irte, int apic)
314 315 316 317 318 319 320
{
	int i;
	u16 sid = 0;

	if (!irte)
		return -1;

321
	down_read(&dmar_global_lock);
322 323 324 325 326 327
	for (i = 0; i < MAX_IO_APICS; i++) {
		if (ir_ioapic[i].id == apic) {
			sid = (ir_ioapic[i].bus << 8) | ir_ioapic[i].devfn;
			break;
		}
	}
328
	up_read(&dmar_global_lock);
329 330 331 332 333 334

	if (sid == 0) {
		pr_warning("Failed to set source-id of IOAPIC (%d)\n", apic);
		return -1;
	}

335
	set_irte_sid(irte, SVT_VERIFY_SID_SQ, SQ_ALL_16, sid);
336 337 338 339

	return 0;
}

340
static int set_hpet_sid(struct irte *irte, u8 id)
341 342 343 344 345 346 347
{
	int i;
	u16 sid = 0;

	if (!irte)
		return -1;

348
	down_read(&dmar_global_lock);
349 350 351 352 353 354
	for (i = 0; i < MAX_HPET_TBS; i++) {
		if (ir_hpet[i].id == id) {
			sid = (ir_hpet[i].bus << 8) | ir_hpet[i].devfn;
			break;
		}
	}
355
	up_read(&dmar_global_lock);
356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371

	if (sid == 0) {
		pr_warning("Failed to set source-id of HPET block (%d)\n", id);
		return -1;
	}

	/*
	 * Should really use SQ_ALL_16. Some platforms are broken.
	 * While we figure out the right quirks for these broken platforms, use
	 * SQ_13_IGNORE_3 for now.
	 */
	set_irte_sid(irte, SVT_VERIFY_SID_SQ, SQ_13_IGNORE_3, sid);

	return 0;
}

372 373 374 375 376 377 378 379 380 381 382 383 384 385 386
struct set_msi_sid_data {
	struct pci_dev *pdev;
	u16 alias;
};

static int set_msi_sid_cb(struct pci_dev *pdev, u16 alias, void *opaque)
{
	struct set_msi_sid_data *data = opaque;

	data->pdev = pdev;
	data->alias = alias;

	return 0;
}

387
static int set_msi_sid(struct irte *irte, struct pci_dev *dev)
388
{
389
	struct set_msi_sid_data data;
390 391 392 393

	if (!irte || !dev)
		return -1;

394
	pci_for_each_dma_alias(dev, set_msi_sid_cb, &data);
395

396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417
	/*
	 * DMA alias provides us with a PCI device and alias.  The only case
	 * where the it will return an alias on a different bus than the
	 * device is the case of a PCIe-to-PCI bridge, where the alias is for
	 * the subordinate bus.  In this case we can only verify the bus.
	 *
	 * If the alias device is on a different bus than our source device
	 * then we have a topology based alias, use it.
	 *
	 * Otherwise, the alias is for a device DMA quirk and we cannot
	 * assume that MSI uses the same requester ID.  Therefore use the
	 * original device.
	 */
	if (PCI_BUS_NUM(data.alias) != data.pdev->bus->number)
		set_irte_sid(irte, SVT_VERIFY_BUS, SQ_ALL_16,
			     PCI_DEVID(PCI_BUS_NUM(data.alias),
				       dev->bus->number));
	else if (data.pdev->bus->number != dev->bus->number)
		set_irte_sid(irte, SVT_VERIFY_SID_SQ, SQ_ALL_16, data.alias);
	else
		set_irte_sid(irte, SVT_VERIFY_SID_SQ, SQ_ALL_16,
			     PCI_DEVID(dev->bus->number, dev->devfn));
418 419 420 421

	return 0;
}

422
static void iommu_set_irq_remapping(struct intel_iommu *iommu, int mode)
423 424
{
	u64 addr;
425
	u32 sts;
426 427 428 429
	unsigned long flags;

	addr = virt_to_phys((void *)iommu->ir_table->base);

430
	raw_spin_lock_irqsave(&iommu->register_lock, flags);
431 432 433 434 435

	dmar_writeq(iommu->reg + DMAR_IRTA_REG,
		    (addr) | IR_X2APIC_MODE(mode) | INTR_REMAP_TABLE_REG_SIZE);

	/* Set interrupt-remapping table pointer */
436
	iommu->gcmd |= DMA_GCMD_SIRTP;
437
	writel(iommu->gcmd, iommu->reg + DMAR_GCMD_REG);
438 439 440

	IOMMU_WAIT_OP(iommu, DMAR_GSTS_REG,
		      readl, (sts & DMA_GSTS_IRTPS), sts);
441
	raw_spin_unlock_irqrestore(&iommu->register_lock, flags);
442 443 444 445 446 447 448

	/*
	 * global invalidation of interrupt entry cache before enabling
	 * interrupt-remapping.
	 */
	qi_global_iec(iommu);

449
	raw_spin_lock_irqsave(&iommu->register_lock, flags);
450 451 452

	/* Enable interrupt-remapping */
	iommu->gcmd |= DMA_GCMD_IRE;
453
	iommu->gcmd &= ~DMA_GCMD_CFI;  /* Block compatibility-format MSIs */
454
	writel(iommu->gcmd, iommu->reg + DMAR_GCMD_REG);
455 456 457 458

	IOMMU_WAIT_OP(iommu, DMAR_GSTS_REG,
		      readl, (sts & DMA_GSTS_IRES), sts);

459 460 461 462 463 464 465 466 467 468
	/*
	 * With CFI clear in the Global Command register, we should be
	 * protected from dangerous (i.e. compatibility) interrupts
	 * regardless of x2apic status.  Check just to be sure.
	 */
	if (sts & DMA_GSTS_CFIS)
		WARN(1, KERN_WARNING
			"Compatibility-format IRQs enabled despite intr remapping;\n"
			"you are vulnerable to IRQ injection.\n");

469
	raw_spin_unlock_irqrestore(&iommu->register_lock, flags);
470 471 472
}


473
static int intel_setup_irq_remapping(struct intel_iommu *iommu, int mode)
474 475 476
{
	struct ir_table *ir_table;
	struct page *pages;
477
	unsigned long *bitmap;
478 479

	ir_table = iommu->ir_table = kzalloc(sizeof(struct ir_table),
480
					     GFP_ATOMIC);
481 482 483 484

	if (!iommu->ir_table)
		return -ENOMEM;

485 486
	pages = alloc_pages_node(iommu->node, GFP_ATOMIC | __GFP_ZERO,
				 INTR_REMAP_PAGE_ORDER);
487 488

	if (!pages) {
489 490
		pr_err("IR%d: failed to allocate pages of order %d\n",
		       iommu->seq_id, INTR_REMAP_PAGE_ORDER);
491 492 493 494
		kfree(iommu->ir_table);
		return -ENOMEM;
	}

495 496 497 498 499 500 501 502 503
	bitmap = kcalloc(BITS_TO_LONGS(INTR_REMAP_TABLE_ENTRIES),
			 sizeof(long), GFP_ATOMIC);
	if (bitmap == NULL) {
		pr_err("IR%d: failed to allocate bitmap\n", iommu->seq_id);
		__free_pages(pages, INTR_REMAP_PAGE_ORDER);
		kfree(ir_table);
		return -ENOMEM;
	}

504
	ir_table->base = page_address(pages);
505
	ir_table->bitmap = bitmap;
506

507
	iommu_set_irq_remapping(iommu, mode);
508 509 510
	return 0;
}

511 512 513
/*
 * Disable Interrupt Remapping.
 */
514
static void iommu_disable_irq_remapping(struct intel_iommu *iommu)
515 516 517 518 519 520 521
{
	unsigned long flags;
	u32 sts;

	if (!ecap_ir_support(iommu->ecap))
		return;

522 523 524 525 526 527
	/*
	 * global invalidation of interrupt entry cache before disabling
	 * interrupt-remapping.
	 */
	qi_global_iec(iommu);

528
	raw_spin_lock_irqsave(&iommu->register_lock, flags);
529 530 531 532 533 534 535 536 537 538 539 540

	sts = dmar_readq(iommu->reg + DMAR_GSTS_REG);
	if (!(sts & DMA_GSTS_IRES))
		goto end;

	iommu->gcmd &= ~DMA_GCMD_IRE;
	writel(iommu->gcmd, iommu->reg + DMAR_GCMD_REG);

	IOMMU_WAIT_OP(iommu, DMAR_GSTS_REG,
		      readl, !(sts & DMA_GSTS_IRES), sts);

end:
541
	raw_spin_unlock_irqrestore(&iommu->register_lock, flags);
542 543
}

544 545 546 547 548 549 550 551 552
static int __init dmar_x2apic_optout(void)
{
	struct acpi_table_dmar *dmar;
	dmar = (struct acpi_table_dmar *)dmar_tbl;
	if (!dmar || no_x2apic_optout)
		return 0;
	return dmar->flags & DMAR_X2APIC_OPT_OUT;
}

553
static int __init intel_irq_remapping_supported(void)
554 555
{
	struct dmar_drhd_unit *drhd;
556
	struct intel_iommu *iommu;
557

558
	if (disable_irq_remap)
559
		return 0;
560
	if (irq_remap_broken) {
561 562 563 564 565 566 567
		printk(KERN_WARNING
			"This system BIOS has enabled interrupt remapping\n"
			"on a chipset that contains an erratum making that\n"
			"feature unstable.  To maintain system stability\n"
			"interrupt remapping is being disabled.  Please\n"
			"contact your BIOS vendor for an update\n");
		add_taint(TAINT_FIRMWARE_WORKAROUND, LOCKDEP_STILL_OK);
568 569 570
		disable_irq_remap = 1;
		return 0;
	}
571

572 573 574
	if (!dmar_ir_support())
		return 0;

575
	for_each_iommu(iommu, drhd)
576 577 578 579 580 581
		if (!ecap_ir_support(iommu->ecap))
			return 0;

	return 1;
}

582
static int __init intel_enable_irq_remapping(void)
583 584
{
	struct dmar_drhd_unit *drhd;
585
	struct intel_iommu *iommu;
586
	bool x2apic_present;
587
	int setup = 0;
588
	int eim = 0;
589

590 591
	x2apic_present = x2apic_supported();

592 593
	if (parse_ioapics_under_ir() != 1) {
		printk(KERN_INFO "Not enable interrupt remapping\n");
594
		goto error;
595 596
	}

597
	if (x2apic_present) {
598 599
		pr_info("Queued invalidation will be enabled to support x2apic and Intr-remapping.\n");

600
		eim = !dmar_x2apic_optout();
601 602 603 604 605
		if (!eim)
			printk(KERN_WARNING
				"Your BIOS is broken and requested that x2apic be disabled.\n"
				"This will slightly decrease performance.\n"
				"Use 'intremap=no_x2apic_optout' to override BIOS request.\n");
606 607
	}

608
	for_each_iommu(iommu, drhd) {
609 610 611 612 613 614 615
		/*
		 * If the queued invalidation is already initialized,
		 * shouldn't disable it.
		 */
		if (iommu->qi)
			continue;

616 617 618 619 620 621 622 623 624
		/*
		 * Clear previous faults.
		 */
		dmar_fault(-1, iommu);

		/*
		 * Disable intr remapping and queued invalidation, if already
		 * enabled prior to OS handover.
		 */
625
		iommu_disable_irq_remapping(iommu);
626 627 628 629

		dmar_disable_qi(iommu);
	}

630 631 632
	/*
	 * check for the Interrupt-remapping support
	 */
633
	for_each_iommu(iommu, drhd) {
634 635 636 637 638 639
		if (!ecap_ir_support(iommu->ecap))
			continue;

		if (eim && !ecap_eim_support(iommu->ecap)) {
			printk(KERN_INFO "DRHD %Lx: EIM not supported by DRHD, "
			       " ecap %Lx\n", drhd->reg_base_addr, iommu->ecap);
640
			goto error;
641 642 643 644 645 646
		}
	}

	/*
	 * Enable queued invalidation for all the DRHD's.
	 */
647 648
	for_each_iommu(iommu, drhd) {
		int ret = dmar_enable_qi(iommu);
649 650 651 652 653

		if (ret) {
			printk(KERN_ERR "DRHD %Lx: failed to enable queued, "
			       " invalidation, ecap %Lx, ret %d\n",
			       drhd->reg_base_addr, iommu->ecap, ret);
654
			goto error;
655 656 657 658 659 660
		}
	}

	/*
	 * Setup Interrupt-remapping for all the DRHD's now.
	 */
661
	for_each_iommu(iommu, drhd) {
662 663 664
		if (!ecap_ir_support(iommu->ecap))
			continue;

665
		if (intel_setup_irq_remapping(iommu, eim))
666 667 668 669 670 671 672 673
			goto error;

		setup = 1;
	}

	if (!setup)
		goto error;

674
	irq_remapping_enabled = 1;
675 676 677 678 679 680 681 682

	/*
	 * VT-d has a different layout for IO-APIC entries when
	 * interrupt remapping is enabled. So it needs a special routine
	 * to print IO-APIC entries for debugging purposes too.
	 */
	x86_io_apic_ops.print_entries = intel_ir_io_apic_print_entries;

683
	pr_info("Enabled IRQ remapping in %s mode\n", eim ? "x2apic" : "xapic");
684

685
	return eim ? IRQ_REMAP_X2APIC_MODE : IRQ_REMAP_XAPIC_MODE;
686 687 688 689 690

error:
	/*
	 * handle error condition gracefully here!
	 */
691 692

	if (x2apic_present)
693
		pr_warn("Failed to enable irq remapping.  You are vulnerable to irq-injection attacks.\n");
694

695 696
	return -1;
}
697

698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714
static void ir_parse_one_hpet_scope(struct acpi_dmar_device_scope *scope,
				      struct intel_iommu *iommu)
{
	struct acpi_dmar_pci_path *path;
	u8 bus;
	int count;

	bus = scope->bus;
	path = (struct acpi_dmar_pci_path *)(scope + 1);
	count = (scope->length - sizeof(struct acpi_dmar_device_scope))
		/ sizeof(struct acpi_dmar_pci_path);

	while (--count > 0) {
		/*
		 * Access PCI directly due to the PCI
		 * subsystem isn't initialized yet.
		 */
L
Lv Zheng 已提交
715
		bus = read_pci_config_byte(bus, path->device, path->function,
716 717 718 719
					   PCI_SECONDARY_BUS);
		path++;
	}
	ir_hpet[ir_hpet_num].bus   = bus;
L
Lv Zheng 已提交
720
	ir_hpet[ir_hpet_num].devfn = PCI_DEVFN(path->device, path->function);
721 722 723 724 725
	ir_hpet[ir_hpet_num].iommu = iommu;
	ir_hpet[ir_hpet_num].id    = scope->enumeration_id;
	ir_hpet_num++;
}

726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742
static void ir_parse_one_ioapic_scope(struct acpi_dmar_device_scope *scope,
				      struct intel_iommu *iommu)
{
	struct acpi_dmar_pci_path *path;
	u8 bus;
	int count;

	bus = scope->bus;
	path = (struct acpi_dmar_pci_path *)(scope + 1);
	count = (scope->length - sizeof(struct acpi_dmar_device_scope))
		/ sizeof(struct acpi_dmar_pci_path);

	while (--count > 0) {
		/*
		 * Access PCI directly due to the PCI
		 * subsystem isn't initialized yet.
		 */
L
Lv Zheng 已提交
743
		bus = read_pci_config_byte(bus, path->device, path->function,
744 745 746 747 748
					   PCI_SECONDARY_BUS);
		path++;
	}

	ir_ioapic[ir_ioapic_num].bus   = bus;
L
Lv Zheng 已提交
749
	ir_ioapic[ir_ioapic_num].devfn = PCI_DEVFN(path->device, path->function);
750 751 752 753 754
	ir_ioapic[ir_ioapic_num].iommu = iommu;
	ir_ioapic[ir_ioapic_num].id    = scope->enumeration_id;
	ir_ioapic_num++;
}

755 756
static int ir_parse_ioapic_hpet_scope(struct acpi_dmar_header *header,
				      struct intel_iommu *iommu)
757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774
{
	struct acpi_dmar_hardware_unit *drhd;
	struct acpi_dmar_device_scope *scope;
	void *start, *end;

	drhd = (struct acpi_dmar_hardware_unit *)header;

	start = (void *)(drhd + 1);
	end = ((void *)drhd) + header->length;

	while (start < end) {
		scope = start;
		if (scope->entry_type == ACPI_DMAR_SCOPE_TYPE_IOAPIC) {
			if (ir_ioapic_num == MAX_IO_APICS) {
				printk(KERN_WARNING "Exceeded Max IO APICS\n");
				return -1;
			}

Y
Yinghai Lu 已提交
775 776 777
			printk(KERN_INFO "IOAPIC id %d under DRHD base "
			       " 0x%Lx IOMMU %d\n", scope->enumeration_id,
			       drhd->address, iommu->seq_id);
778

779
			ir_parse_one_ioapic_scope(scope, iommu);
780 781 782 783 784 785 786 787 788 789 790
		} else if (scope->entry_type == ACPI_DMAR_SCOPE_TYPE_HPET) {
			if (ir_hpet_num == MAX_HPET_TBS) {
				printk(KERN_WARNING "Exceeded Max HPET blocks\n");
				return -1;
			}

			printk(KERN_INFO "HPET id %d under DRHD base"
			       " 0x%Lx\n", scope->enumeration_id,
			       drhd->address);

			ir_parse_one_hpet_scope(scope, iommu);
791 792 793 794 795 796 797 798 799 800 801
		}
		start += scope->length;
	}

	return 0;
}

/*
 * Finds the assocaition between IOAPIC's and its Interrupt-remapping
 * hardware unit.
 */
802
static int __init parse_ioapics_under_ir(void)
803 804
{
	struct dmar_drhd_unit *drhd;
805
	struct intel_iommu *iommu;
806
	int ir_supported = 0;
807
	int ioapic_idx;
808

809
	for_each_iommu(iommu, drhd)
810
		if (ecap_ir_support(iommu->ecap)) {
811
			if (ir_parse_ioapic_hpet_scope(drhd->hdr, iommu))
812 813 814 815 816
				return -1;

			ir_supported = 1;
		}

817 818 819 820 821 822 823 824 825 826 827
	if (!ir_supported)
		return 0;

	for (ioapic_idx = 0; ioapic_idx < nr_ioapics; ioapic_idx++) {
		int ioapic_id = mpc_ioapic_id(ioapic_idx);
		if (!map_ioapic_to_ir(ioapic_id)) {
			pr_err(FW_BUG "ioapic %d has no mapping iommu, "
			       "interrupt remapping will be disabled\n",
			       ioapic_id);
			return -1;
		}
828 829
	}

830
	return 1;
831
}
832

833
static int __init ir_dev_scope_init(void)
834
{
835 836
	int ret;

837
	if (!irq_remapping_enabled)
838 839
		return 0;

840 841 842 843 844
	down_write(&dmar_global_lock);
	ret = dmar_dev_scope_init();
	up_write(&dmar_global_lock);

	return ret;
845 846 847
}
rootfs_initcall(ir_dev_scope_init);

848
static void disable_irq_remapping(void)
849 850 851 852 853 854 855 856 857 858 859
{
	struct dmar_drhd_unit *drhd;
	struct intel_iommu *iommu = NULL;

	/*
	 * Disable Interrupt-remapping for all the DRHD's now.
	 */
	for_each_iommu(iommu, drhd) {
		if (!ecap_ir_support(iommu->ecap))
			continue;

860
		iommu_disable_irq_remapping(iommu);
861 862 863
	}
}

864
static int reenable_irq_remapping(int eim)
865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881
{
	struct dmar_drhd_unit *drhd;
	int setup = 0;
	struct intel_iommu *iommu = NULL;

	for_each_iommu(iommu, drhd)
		if (iommu->qi)
			dmar_reenable_qi(iommu);

	/*
	 * Setup Interrupt-remapping for all the DRHD's now.
	 */
	for_each_iommu(iommu, drhd) {
		if (!ecap_ir_support(iommu->ecap))
			continue;

		/* Set up interrupt remapping for iommu.*/
882
		iommu_set_irq_remapping(iommu, eim);
883 884 885 886 887 888 889 890 891 892 893 894 895 896 897
		setup = 1;
	}

	if (!setup)
		goto error;

	return 0;

error:
	/*
	 * handle error condition gracefully here!
	 */
	return -1;
}

898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924
static void prepare_irte(struct irte *irte, int vector,
			 unsigned int dest)
{
	memset(irte, 0, sizeof(*irte));

	irte->present = 1;
	irte->dst_mode = apic->irq_dest_mode;
	/*
	 * Trigger mode in the IRTE will always be edge, and for IO-APIC, the
	 * actual level or edge trigger will be setup in the IO-APIC
	 * RTE. This will help simplify level triggered irq migration.
	 * For more details, see the comments (in io_apic.c) explainig IO-APIC
	 * irq migration in the presence of interrupt-remapping.
	*/
	irte->trigger_mode = 0;
	irte->dlvry_mode = apic->irq_delivery_mode;
	irte->vector = vector;
	irte->dest_id = IRTE_DEST(dest);
	irte->redir_hint = 1;
}

static int intel_setup_ioapic_entry(int irq,
				    struct IO_APIC_route_entry *route_entry,
				    unsigned int destination, int vector,
				    struct io_apic_irq_attr *attr)
{
	int ioapic_id = mpc_ioapic_id(attr->ioapic);
925
	struct intel_iommu *iommu;
926 927 928 929
	struct IR_IO_APIC_route_entry *entry;
	struct irte irte;
	int index;

930 931
	down_read(&dmar_global_lock);
	iommu = map_ioapic_to_ir(ioapic_id);
932 933
	if (!iommu) {
		pr_warn("No mapping iommu for ioapic %d\n", ioapic_id);
934 935 936 937 938 939 940 941
		index = -ENODEV;
	} else {
		index = alloc_irte(iommu, irq, 1);
		if (index < 0) {
			pr_warn("Failed to allocate IRTE for ioapic %d\n",
				ioapic_id);
			index = -ENOMEM;
		}
942
	}
943 944 945
	up_read(&dmar_global_lock);
	if (index < 0)
		return index;
946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963

	prepare_irte(&irte, vector, destination);

	/* Set source-id of interrupt request */
	set_ioapic_sid(&irte, ioapic_id);

	modify_irte(irq, &irte);

	apic_printk(APIC_VERBOSE, KERN_DEBUG "IOAPIC[%d]: "
		"Set IRTE entry (P:%d FPD:%d Dst_Mode:%d "
		"Redir_hint:%d Trig_Mode:%d Dlvry_Mode:%X "
		"Avail:%X Vector:%02X Dest:%08X "
		"SID:%04X SQ:%X SVT:%X)\n",
		attr->ioapic, irte.present, irte.fpd, irte.dst_mode,
		irte.redir_hint, irte.trigger_mode, irte.dlvry_mode,
		irte.avail, irte.vector, irte.dest_id,
		irte.sid, irte.sq, irte.svt);

964
	entry = (struct IR_IO_APIC_route_entry *)route_entry;
965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988
	memset(entry, 0, sizeof(*entry));

	entry->index2	= (index >> 15) & 0x1;
	entry->zero	= 0;
	entry->format	= 1;
	entry->index	= (index & 0x7fff);
	/*
	 * IO-APIC RTE will be configured with virtual vector.
	 * irq handler will do the explicit EOI to the io-apic.
	 */
	entry->vector	= attr->ioapic_pin;
	entry->mask	= 0;			/* enable IRQ */
	entry->trigger	= attr->trigger;
	entry->polarity	= attr->polarity;

	/* Mask level triggered irqs.
	 * Use IRQ_DELAYED_DISABLE for edge triggered irqs.
	 */
	if (attr->trigger)
		entry->mask = 1;

	return 0;
}

989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009
/*
 * Migrate the IO-APIC irq in the presence of intr-remapping.
 *
 * For both level and edge triggered, irq migration is a simple atomic
 * update(of vector and cpu destination) of IRTE and flush the hardware cache.
 *
 * For level triggered, we eliminate the io-apic RTE modification (with the
 * updated vector information), by using a virtual vector (io-apic pin number).
 * Real vector that is used for interrupting cpu will be coming from
 * the interrupt-remapping table entry.
 *
 * As the migration is a simple atomic update of IRTE, the same mechanism
 * is used to migrate MSI irq's in the presence of interrupt-remapping.
 */
static int
intel_ioapic_set_affinity(struct irq_data *data, const struct cpumask *mask,
			  bool force)
{
	struct irq_cfg *cfg = data->chip_data;
	unsigned int dest, irq = data->irq;
	struct irte irte;
1010
	int err;
1011

1012 1013 1014
	if (!config_enabled(CONFIG_SMP))
		return -EINVAL;

1015 1016 1017 1018 1019 1020
	if (!cpumask_intersects(mask, cpu_online_mask))
		return -EINVAL;

	if (get_irte(irq, &irte))
		return -EBUSY;

1021 1022 1023
	err = assign_irq_vector(irq, cfg, mask);
	if (err)
		return err;
1024

1025 1026
	err = apic->cpu_mask_to_apicid_and(cfg->domain, mask, &dest);
	if (err) {
1027
		if (assign_irq_vector(irq, cfg, data->affinity))
1028 1029 1030
			pr_err("Failed to recover vector for irq %d\n", irq);
		return err;
	}
1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051

	irte.vector = cfg->vector;
	irte.dest_id = IRTE_DEST(dest);

	/*
	 * Atomically updates the IRTE with the new destination, vector
	 * and flushes the interrupt entry cache.
	 */
	modify_irte(irq, &irte);

	/*
	 * After this point, all the interrupts will start arriving
	 * at the new destination. So, time to cleanup the previous
	 * vector allocation.
	 */
	if (cfg->move_in_progress)
		send_cleanup_vector(cfg);

	cpumask_copy(data->affinity, mask);
	return 0;
}
1052

1053 1054 1055 1056 1057 1058
static void intel_compose_msi_msg(struct pci_dev *pdev,
				  unsigned int irq, unsigned int dest,
				  struct msi_msg *msg, u8 hpet_id)
{
	struct irq_cfg *cfg;
	struct irte irte;
1059
	u16 sub_handle = 0;
1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094
	int ir_index;

	cfg = irq_get_chip_data(irq);

	ir_index = map_irq_to_irte_handle(irq, &sub_handle);
	BUG_ON(ir_index == -1);

	prepare_irte(&irte, cfg->vector, dest);

	/* Set source-id of interrupt request */
	if (pdev)
		set_msi_sid(&irte, pdev);
	else
		set_hpet_sid(&irte, hpet_id);

	modify_irte(irq, &irte);

	msg->address_hi = MSI_ADDR_BASE_HI;
	msg->data = sub_handle;
	msg->address_lo = MSI_ADDR_BASE_LO | MSI_ADDR_IR_EXT_INT |
			  MSI_ADDR_IR_SHV |
			  MSI_ADDR_IR_INDEX1(ir_index) |
			  MSI_ADDR_IR_INDEX2(ir_index);
}

/*
 * Map the PCI dev to the corresponding remapping hardware unit
 * and allocate 'nvec' consecutive interrupt-remapping table entries
 * in it.
 */
static int intel_msi_alloc_irq(struct pci_dev *dev, int irq, int nvec)
{
	struct intel_iommu *iommu;
	int index;

1095
	down_read(&dmar_global_lock);
1096 1097 1098 1099
	iommu = map_dev_to_ir(dev);
	if (!iommu) {
		printk(KERN_ERR
		       "Unable to map PCI %s to iommu\n", pci_name(dev));
1100 1101 1102 1103 1104 1105 1106 1107 1108
		index = -ENOENT;
	} else {
		index = alloc_irte(iommu, irq, nvec);
		if (index < 0) {
			printk(KERN_ERR
			       "Unable to allocate %d IRTE for PCI %s\n",
			       nvec, pci_name(dev));
			index = -ENOSPC;
		}
1109
	}
1110
	up_read(&dmar_global_lock);
1111 1112 1113 1114 1115 1116 1117 1118

	return index;
}

static int intel_msi_setup_irq(struct pci_dev *pdev, unsigned int irq,
			       int index, int sub_handle)
{
	struct intel_iommu *iommu;
1119
	int ret = -ENOENT;
1120

1121
	down_read(&dmar_global_lock);
1122
	iommu = map_dev_to_ir(pdev);
1123 1124 1125 1126 1127 1128 1129 1130 1131 1132
	if (iommu) {
		/*
		 * setup the mapping between the irq and the IRTE
		 * base index, the sub_handle pointing to the
		 * appropriate interrupt remap table entry.
		 */
		set_irte_irq(irq, iommu, index, sub_handle);
		ret = 0;
	}
	up_read(&dmar_global_lock);
1133

1134
	return ret;
1135 1136 1137 1138
}

static int intel_setup_hpet_msi(unsigned int irq, unsigned int id)
{
1139 1140
	int ret = -1;
	struct intel_iommu *iommu;
1141 1142
	int index;

1143 1144 1145 1146 1147 1148 1149 1150
	down_read(&dmar_global_lock);
	iommu = map_hpet_to_ir(id);
	if (iommu) {
		index = alloc_irte(iommu, irq, 1);
		if (index >= 0)
			ret = 0;
	}
	up_read(&dmar_global_lock);
1151

1152
	return ret;
1153 1154
}

1155
struct irq_remap_ops intel_irq_remap_ops = {
1156 1157 1158 1159 1160
	.supported		= intel_irq_remapping_supported,
	.prepare		= dmar_table_init,
	.enable			= intel_enable_irq_remapping,
	.disable		= disable_irq_remapping,
	.reenable		= reenable_irq_remapping,
1161
	.enable_faulting	= enable_drhd_fault_handling,
1162
	.setup_ioapic_entry	= intel_setup_ioapic_entry,
1163
	.set_affinity		= intel_ioapic_set_affinity,
1164
	.free_irq		= free_irte,
1165 1166 1167 1168
	.compose_msi_msg	= intel_compose_msi_msg,
	.msi_alloc_irq		= intel_msi_alloc_irq,
	.msi_setup_irq		= intel_msi_setup_irq,
	.setup_hpet_msi		= intel_setup_hpet_msi,
1169
};