Impact: adds new Kconfig entry
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: cleanup
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: cleanup
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: cleanup
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: use bool instead of int for iommu->need_sync
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: use generic dev_name instead of own function
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: also hotplug devices benefit from device isolation
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: adds a new protection domain flag
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: add a generic function to lockup addresses in protection domains
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: add a generic function to unmap pages into protection domains
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: add a generic function to map pages into protection domains
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: add a generic function to attach devices to protection domains
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: add a generic function to detach devices from protection domains
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: add a generic function for releasing protection domains
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: add a generic function for allocation protection domains
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: add a function to remove all devices from a domain
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: inform IOMMU about state change of a device in the driver core
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: add helper functions to detach a device from a domain
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: rename set_device_domain() to attach_device()
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: know how many devices are assigned to a domain
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: detect when a driver uses a device assigned otherwise
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Imapct: add a new struct member to 'struct protection_domain'

When using protection domains for dma_ops and KVM its better to know for
which subsystem it was allocated. Add a flags member to struct
protection domain for that purpose.
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: add a function to flush a domain id on every IOMMU
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: save unneeded logic to add and remove domains to the list

The removal of a protection domain from the iommu_pd_list is not
necessary. Another benefit is that we save complexity because we don't
have to readd it later when the device no longer uses the domain.
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: refactoring of iommu_queue_inv_iommu_pages
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: split one function into three

The separate functions are required synchronize commands across all
hardware IOMMUs in the system.
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: add code to release a domain id
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: change code to free pagetables from protection domains

The dma_ops_free_pagetable function can only free pagetables from
dma_ops domains. Change that to free pagetables of pure protection
domains.
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Impact: function rename

The iommu_map function maps only one page. Make this clear in the
function name.
Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>

Signed-off-by: NIngo Brueckl <ib@wupperonline.de>
Signed-off-by: NLinus Torvalds <torvalds@linux-foundation.org>

Signed-off-by: NAl Viro <viro@zeniv.linux.org.uk>

The invlpg and sync walkers lack knowledge of large host sptes,
descending to non-existant pagetable level.

Stop at directory level in such case.

Fixes SMP Windows XP with hugepages.
Signed-off-by: NMarcelo Tosatti <mtosatti@redhat.com>
Signed-off-by: NAvi Kivity <avi@redhat.com>

While most accesses to the i8259 are with the kvm mutex taken, the call
to kvm_pic_read_irq() is not.  We can't easily take the kvm mutex there
since the function is called with interrupts disabled.

Fix by adding a spinlock to the virtual interrupt controller.  Since we
can't send an IPI under the spinlock (we also take the same spinlock in
an irq disabled context), we defer the IPI until the spinlock is released.
Similarly, we defer irq ack notifications until after spinlock release to
avoid lock recursion.
Signed-off-by: NAvi Kivity <avi@redhat.com>

The pte.g bit is meaningless if global pages are disabled; deferring
mmu page synchronization on these ptes will lead to the guest using stale
shadow ptes.

Fixes Vista x86 smp bootloader failure.
Signed-off-by: NAvi Kivity <avi@redhat.com>

There is no point in doing the ready_for_nmi_injection/
request_nmi_window dance with user space. First, we don't do this for
in-kernel irqchip anyway, while the code path is the same as for user
space irqchip mode. And second, there is nothing to loose if a pending
NMI is overwritten by another one (in contrast to IRQs where we have to
save the number). Actually, there is even the risk of raising spurious
NMIs this way because the reason for the held-back NMI might already be
handled while processing the first one.

Therefore this patch creates a simplified user space NMI injection
interface, exporting it under KVM_CAP_USER_NMI and dropping the old
KVM_CAP_NMI capability. And this time we also take care to provide the
interface only on archs supporting NMIs via KVM (right now only x86).
Signed-off-by: NJan Kiszka <jan.kiszka@siemens.com>
Signed-off-by: NAvi Kivity <avi@redhat.com>

As with the kernel irqchip, don't allow an NMI to stomp over an already
injected IRQ; instead wait for the IRQ injection to be completed.
Signed-off-by: NJan Kiszka <jan.kiszka@siemens.com>
Signed-off-by: NAvi Kivity <avi@redhat.com>

walk_shadow assumes the caller verified validity of the pdptr pointer in
question, which is not the case for the invlpg handler.

Fixes oops during Solaris 10 install.
Signed-off-by: NMarcelo Tosatti <mtosatti@redhat.com>
Signed-off-by: NAvi Kivity <avi@redhat.com>

Signed-off-by: NAvi Kivity <avi@redhat.com>

kvm_get_tsc_khz() currently returns the previously-calculated preset_lpj
value, but it is in loops-per-jiffy, not kHz. The current code works
correctly only when HZ=1000.
Signed-off-by: NEduardo Habkost <ehabkost@redhat.com>
Signed-off-by: NAvi Kivity <avi@redhat.com>