memory.c 50.5 KB
Newer Older
A
Avi Kivity 已提交
1 2 3 4 5 6 7 8 9 10 11
/*
 * Physical memory management
 *
 * Copyright 2011 Red Hat, Inc. and/or its affiliates
 *
 * Authors:
 *  Avi Kivity <avi@redhat.com>
 *
 * This work is licensed under the terms of the GNU GPL, version 2.  See
 * the COPYING file in the top-level directory.
 *
12 13
 * Contributions after 2012-01-13 are licensed under the terms of the
 * GNU GPL, version 2 or (at your option) any later version.
A
Avi Kivity 已提交
14 15 16
 */

#include "memory.h"
A
Avi Kivity 已提交
17
#include "exec-memory.h"
A
Avi Kivity 已提交
18
#include "ioport.h"
19
#include "bitops.h"
A
Avi Kivity 已提交
20
#include "kvm.h"
A
Avi Kivity 已提交
21 22
#include <assert.h>

23 24 25
#define WANT_EXEC_OBSOLETE
#include "exec-obsolete.h"

A
Avi Kivity 已提交
26
unsigned memory_region_transaction_depth = 0;
27
static bool memory_region_update_pending = false;
28 29
static bool global_dirty_log = false;

30 31
static QTAILQ_HEAD(memory_listeners, MemoryListener) memory_listeners
    = QTAILQ_HEAD_INITIALIZER(memory_listeners);
A
Avi Kivity 已提交
32

A
Avi Kivity 已提交
33 34
typedef struct AddrRange AddrRange;

A
Avi Kivity 已提交
35 36 37 38 39
/*
 * Note using signed integers limits us to physical addresses at most
 * 63 bits wide.  They are needed for negative offsetting in aliases
 * (large MemoryRegion::alias_offset).
 */
A
Avi Kivity 已提交
40
struct AddrRange {
41 42
    Int128 start;
    Int128 size;
A
Avi Kivity 已提交
43 44
};

45
static AddrRange addrrange_make(Int128 start, Int128 size)
A
Avi Kivity 已提交
46 47 48 49 50 51
{
    return (AddrRange) { start, size };
}

static bool addrrange_equal(AddrRange r1, AddrRange r2)
{
52
    return int128_eq(r1.start, r2.start) && int128_eq(r1.size, r2.size);
A
Avi Kivity 已提交
53 54
}

55
static Int128 addrrange_end(AddrRange r)
A
Avi Kivity 已提交
56
{
57
    return int128_add(r.start, r.size);
A
Avi Kivity 已提交
58 59
}

60
static AddrRange addrrange_shift(AddrRange range, Int128 delta)
A
Avi Kivity 已提交
61
{
62
    int128_addto(&range.start, delta);
A
Avi Kivity 已提交
63 64 65
    return range;
}

66 67 68 69 70 71
static bool addrrange_contains(AddrRange range, Int128 addr)
{
    return int128_ge(addr, range.start)
        && int128_lt(addr, addrrange_end(range));
}

A
Avi Kivity 已提交
72 73
static bool addrrange_intersects(AddrRange r1, AddrRange r2)
{
74 75
    return addrrange_contains(r1, r2.start)
        || addrrange_contains(r2, r1.start);
A
Avi Kivity 已提交
76 77 78 79
}

static AddrRange addrrange_intersection(AddrRange r1, AddrRange r2)
{
80 81 82
    Int128 start = int128_max(r1.start, r2.start);
    Int128 end = int128_min(addrrange_end(r1), addrrange_end(r2));
    return addrrange_make(start, int128_sub(end, start));
A
Avi Kivity 已提交
83 84
}

85 86
enum ListenerDirection { Forward, Reverse };

87 88 89 90 91 92 93 94
static bool memory_listener_match(MemoryListener *listener,
                                  MemoryRegionSection *section)
{
    return !listener->address_space_filter
        || listener->address_space_filter == section->address_space;
}

#define MEMORY_LISTENER_CALL_GLOBAL(_callback, _direction, _args...)    \
95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114
    do {                                                                \
        MemoryListener *_listener;                                      \
                                                                        \
        switch (_direction) {                                           \
        case Forward:                                                   \
            QTAILQ_FOREACH(_listener, &memory_listeners, link) {        \
                _listener->_callback(_listener, ##_args);               \
            }                                                           \
            break;                                                      \
        case Reverse:                                                   \
            QTAILQ_FOREACH_REVERSE(_listener, &memory_listeners,        \
                                   memory_listeners, link) {            \
                _listener->_callback(_listener, ##_args);               \
            }                                                           \
            break;                                                      \
        default:                                                        \
            abort();                                                    \
        }                                                               \
    } while (0)

115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139
#define MEMORY_LISTENER_CALL(_callback, _direction, _section, _args...) \
    do {                                                                \
        MemoryListener *_listener;                                      \
                                                                        \
        switch (_direction) {                                           \
        case Forward:                                                   \
            QTAILQ_FOREACH(_listener, &memory_listeners, link) {        \
                if (memory_listener_match(_listener, _section)) {       \
                    _listener->_callback(_listener, _section, ##_args); \
                }                                                       \
            }                                                           \
            break;                                                      \
        case Reverse:                                                   \
            QTAILQ_FOREACH_REVERSE(_listener, &memory_listeners,        \
                                   memory_listeners, link) {            \
                if (memory_listener_match(_listener, _section)) {       \
                    _listener->_callback(_listener, _section, ##_args); \
                }                                                       \
            }                                                           \
            break;                                                      \
        default:                                                        \
            abort();                                                    \
        }                                                               \
    } while (0)

140
#define MEMORY_LISTENER_UPDATE_REGION(fr, as, dir, callback)            \
141
    MEMORY_LISTENER_CALL(callback, dir, (&(MemoryRegionSection) {       \
142 143 144 145 146
        .mr = (fr)->mr,                                                 \
        .address_space = (as)->root,                                    \
        .offset_within_region = (fr)->offset_in_region,                 \
        .size = int128_get64((fr)->addr.size),                          \
        .offset_within_address_space = int128_get64((fr)->addr.start),  \
147
        .readonly = (fr)->readonly,                                     \
148
              }))
149

A
Avi Kivity 已提交
150 151 152 153 154
struct CoalescedMemoryRange {
    AddrRange addr;
    QTAILQ_ENTRY(CoalescedMemoryRange) link;
};

A
Avi Kivity 已提交
155 156 157 158 159 160 161 162 163 164
struct MemoryRegionIoeventfd {
    AddrRange addr;
    bool match_data;
    uint64_t data;
    int fd;
};

static bool memory_region_ioeventfd_before(MemoryRegionIoeventfd a,
                                           MemoryRegionIoeventfd b)
{
165
    if (int128_lt(a.addr.start, b.addr.start)) {
A
Avi Kivity 已提交
166
        return true;
167
    } else if (int128_gt(a.addr.start, b.addr.start)) {
A
Avi Kivity 已提交
168
        return false;
169
    } else if (int128_lt(a.addr.size, b.addr.size)) {
A
Avi Kivity 已提交
170
        return true;
171
    } else if (int128_gt(a.addr.size, b.addr.size)) {
A
Avi Kivity 已提交
172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198
        return false;
    } else if (a.match_data < b.match_data) {
        return true;
    } else  if (a.match_data > b.match_data) {
        return false;
    } else if (a.match_data) {
        if (a.data < b.data) {
            return true;
        } else if (a.data > b.data) {
            return false;
        }
    }
    if (a.fd < b.fd) {
        return true;
    } else if (a.fd > b.fd) {
        return false;
    }
    return false;
}

static bool memory_region_ioeventfd_equal(MemoryRegionIoeventfd a,
                                          MemoryRegionIoeventfd b)
{
    return !memory_region_ioeventfd_before(a, b)
        && !memory_region_ioeventfd_before(b, a);
}

A
Avi Kivity 已提交
199 200 201 202 203 204 205 206
typedef struct FlatRange FlatRange;
typedef struct FlatView FlatView;

/* Range of memory in the global map.  Addresses are absolute. */
struct FlatRange {
    MemoryRegion *mr;
    target_phys_addr_t offset_in_region;
    AddrRange addr;
A
Avi Kivity 已提交
207
    uint8_t dirty_log_mask;
208
    bool readable;
209
    bool readonly;
A
Avi Kivity 已提交
210 211 212 213 214 215 216 217 218 219 220
};

/* Flattened global view of current active memory hierarchy.  Kept in sorted
 * order.
 */
struct FlatView {
    FlatRange *ranges;
    unsigned nr;
    unsigned nr_allocated;
};

221 222 223 224 225 226 227
typedef struct AddressSpace AddressSpace;
typedef struct AddressSpaceOps AddressSpaceOps;

/* A system address space - I/O, memory, etc. */
struct AddressSpace {
    MemoryRegion *root;
    FlatView current_map;
A
Avi Kivity 已提交
228 229
    int ioeventfd_nb;
    MemoryRegionIoeventfd *ioeventfds;
230 231
};

A
Avi Kivity 已提交
232 233 234 235 236 237 238
#define FOR_EACH_FLAT_RANGE(var, view)          \
    for (var = (view)->ranges; var < (view)->ranges + (view)->nr; ++var)

static bool flatrange_equal(FlatRange *a, FlatRange *b)
{
    return a->mr == b->mr
        && addrrange_equal(a->addr, b->addr)
239
        && a->offset_in_region == b->offset_in_region
240 241
        && a->readable == b->readable
        && a->readonly == b->readonly;
A
Avi Kivity 已提交
242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257
}

static void flatview_init(FlatView *view)
{
    view->ranges = NULL;
    view->nr = 0;
    view->nr_allocated = 0;
}

/* Insert a range into a given position.  Caller is responsible for maintaining
 * sorting order.
 */
static void flatview_insert(FlatView *view, unsigned pos, FlatRange *range)
{
    if (view->nr == view->nr_allocated) {
        view->nr_allocated = MAX(2 * view->nr, 10);
258
        view->ranges = g_realloc(view->ranges,
A
Avi Kivity 已提交
259 260 261 262 263 264 265 266 267 268
                                    view->nr_allocated * sizeof(*view->ranges));
    }
    memmove(view->ranges + pos + 1, view->ranges + pos,
            (view->nr - pos) * sizeof(FlatRange));
    view->ranges[pos] = *range;
    ++view->nr;
}

static void flatview_destroy(FlatView *view)
{
269
    g_free(view->ranges);
A
Avi Kivity 已提交
270 271
}

272 273
static bool can_merge(FlatRange *r1, FlatRange *r2)
{
274
    return int128_eq(addrrange_end(r1->addr), r2->addr.start)
275
        && r1->mr == r2->mr
276 277 278
        && int128_eq(int128_add(int128_make64(r1->offset_in_region),
                                r1->addr.size),
                     int128_make64(r2->offset_in_region))
279
        && r1->dirty_log_mask == r2->dirty_log_mask
280 281
        && r1->readable == r2->readable
        && r1->readonly == r2->readonly;
282 283 284 285 286 287 288 289 290 291 292 293
}

/* Attempt to simplify a view by merging ajacent ranges */
static void flatview_simplify(FlatView *view)
{
    unsigned i, j;

    i = 0;
    while (i < view->nr) {
        j = i + 1;
        while (j < view->nr
               && can_merge(&view->ranges[j-1], &view->ranges[j])) {
294
            int128_addto(&view->ranges[i].addr.size, view->ranges[j].addr.size);
295 296 297 298 299 300 301 302 303
            ++j;
        }
        ++i;
        memmove(&view->ranges[i], &view->ranges[j],
                (view->nr - j) * sizeof(view->ranges[j]));
        view->nr -= j - i;
    }
}

304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362
static void memory_region_read_accessor(void *opaque,
                                        target_phys_addr_t addr,
                                        uint64_t *value,
                                        unsigned size,
                                        unsigned shift,
                                        uint64_t mask)
{
    MemoryRegion *mr = opaque;
    uint64_t tmp;

    tmp = mr->ops->read(mr->opaque, addr, size);
    *value |= (tmp & mask) << shift;
}

static void memory_region_write_accessor(void *opaque,
                                         target_phys_addr_t addr,
                                         uint64_t *value,
                                         unsigned size,
                                         unsigned shift,
                                         uint64_t mask)
{
    MemoryRegion *mr = opaque;
    uint64_t tmp;

    tmp = (*value >> shift) & mask;
    mr->ops->write(mr->opaque, addr, tmp, size);
}

static void access_with_adjusted_size(target_phys_addr_t addr,
                                      uint64_t *value,
                                      unsigned size,
                                      unsigned access_size_min,
                                      unsigned access_size_max,
                                      void (*access)(void *opaque,
                                                     target_phys_addr_t addr,
                                                     uint64_t *value,
                                                     unsigned size,
                                                     unsigned shift,
                                                     uint64_t mask),
                                      void *opaque)
{
    uint64_t access_mask;
    unsigned access_size;
    unsigned i;

    if (!access_size_min) {
        access_size_min = 1;
    }
    if (!access_size_max) {
        access_size_max = 4;
    }
    access_size = MAX(MIN(size, access_size_max), access_size_min);
    access_mask = -1ULL >> (64 - access_size * 8);
    for (i = 0; i < size; i += access_size) {
        /* FIXME: big-endian support */
        access(opaque, addr + i, value, access_size, i * 8, access_mask);
    }
}

A
Avi Kivity 已提交
363
static AddressSpace address_space_memory;
364

365 366 367 368 369 370 371 372 373 374 375 376 377 378 379
static const MemoryRegionPortio *find_portio(MemoryRegion *mr, uint64_t offset,
                                             unsigned width, bool write)
{
    const MemoryRegionPortio *mrp;

    for (mrp = mr->ops->old_portio; mrp->size; ++mrp) {
        if (offset >= mrp->offset && offset < mrp->offset + mrp->len
            && width == mrp->size
            && (write ? (bool)mrp->write : (bool)mrp->read)) {
            return mrp;
        }
    }
    return NULL;
}

A
Avi Kivity 已提交
380 381 382 383 384 385 386
static void memory_region_iorange_read(IORange *iorange,
                                       uint64_t offset,
                                       unsigned width,
                                       uint64_t *data)
{
    MemoryRegion *mr = container_of(iorange, MemoryRegion, iorange);

387 388 389 390 391
    if (mr->ops->old_portio) {
        const MemoryRegionPortio *mrp = find_portio(mr, offset, width, false);

        *data = ((uint64_t)1 << (width * 8)) - 1;
        if (mrp) {
392
            *data = mrp->read(mr->opaque, offset);
J
Jan Kiszka 已提交
393 394 395
        } else if (width == 2) {
            mrp = find_portio(mr, offset, 1, false);
            assert(mrp);
396 397
            *data = mrp->read(mr->opaque, offset) |
                    (mrp->read(mr->opaque, offset + 1) << 8);
398 399 400
        }
        return;
    }
401
    *data = 0;
402
    access_with_adjusted_size(offset, data, width,
403 404 405
                              mr->ops->impl.min_access_size,
                              mr->ops->impl.max_access_size,
                              memory_region_read_accessor, mr);
A
Avi Kivity 已提交
406 407 408 409 410 411 412 413 414
}

static void memory_region_iorange_write(IORange *iorange,
                                        uint64_t offset,
                                        unsigned width,
                                        uint64_t data)
{
    MemoryRegion *mr = container_of(iorange, MemoryRegion, iorange);

415 416 417 418
    if (mr->ops->old_portio) {
        const MemoryRegionPortio *mrp = find_portio(mr, offset, width, true);

        if (mrp) {
419
            mrp->write(mr->opaque, offset, data);
J
Jan Kiszka 已提交
420 421 422
        } else if (width == 2) {
            mrp = find_portio(mr, offset, 1, false);
            assert(mrp);
423 424
            mrp->write(mr->opaque, offset, data & 0xff);
            mrp->write(mr->opaque, offset + 1, data >> 8);
425 426 427
        }
        return;
    }
428
    access_with_adjusted_size(offset, &data, width,
429 430 431
                              mr->ops->impl.min_access_size,
                              mr->ops->impl.max_access_size,
                              memory_region_write_accessor, mr);
A
Avi Kivity 已提交
432 433
}

434
const IORangeOps memory_region_iorange_ops = {
A
Avi Kivity 已提交
435 436 437 438
    .read = memory_region_iorange_read,
    .write = memory_region_iorange_write,
};

A
Avi Kivity 已提交
439
static AddressSpace address_space_io;
A
Avi Kivity 已提交
440

441 442 443 444 445 446 447 448 449 450 451 452 453 454
static AddressSpace *memory_region_to_address_space(MemoryRegion *mr)
{
    while (mr->parent) {
        mr = mr->parent;
    }
    if (mr == address_space_memory.root) {
        return &address_space_memory;
    }
    if (mr == address_space_io.root) {
        return &address_space_io;
    }
    abort();
}

A
Avi Kivity 已提交
455 456 457 458 459
/* Render a memory region into the global view.  Ranges in @view obscure
 * ranges in @mr.
 */
static void render_memory_region(FlatView *view,
                                 MemoryRegion *mr,
460
                                 Int128 base,
461 462
                                 AddrRange clip,
                                 bool readonly)
A
Avi Kivity 已提交
463 464 465 466
{
    MemoryRegion *subregion;
    unsigned i;
    target_phys_addr_t offset_in_region;
467 468
    Int128 remain;
    Int128 now;
A
Avi Kivity 已提交
469 470 471
    FlatRange fr;
    AddrRange tmp;

472 473 474 475
    if (!mr->enabled) {
        return;
    }

476
    int128_addto(&base, int128_make64(mr->addr));
477
    readonly |= mr->readonly;
A
Avi Kivity 已提交
478 479 480 481 482 483 484 485 486 487

    tmp = addrrange_make(base, mr->size);

    if (!addrrange_intersects(tmp, clip)) {
        return;
    }

    clip = addrrange_intersection(tmp, clip);

    if (mr->alias) {
488 489
        int128_subfrom(&base, int128_make64(mr->alias->addr));
        int128_subfrom(&base, int128_make64(mr->alias_offset));
490
        render_memory_region(view, mr->alias, base, clip, readonly);
A
Avi Kivity 已提交
491 492 493 494 495
        return;
    }

    /* Render subregions in priority order. */
    QTAILQ_FOREACH(subregion, &mr->subregions, subregions_link) {
496
        render_memory_region(view, subregion, base, clip, readonly);
A
Avi Kivity 已提交
497 498
    }

499
    if (!mr->terminates) {
A
Avi Kivity 已提交
500 501 502
        return;
    }

503
    offset_in_region = int128_get64(int128_sub(clip.start, base));
A
Avi Kivity 已提交
504 505 506 507
    base = clip.start;
    remain = clip.size;

    /* Render the region itself into any gaps left by the current view. */
508 509
    for (i = 0; i < view->nr && int128_nz(remain); ++i) {
        if (int128_ge(base, addrrange_end(view->ranges[i].addr))) {
A
Avi Kivity 已提交
510 511
            continue;
        }
512 513 514
        if (int128_lt(base, view->ranges[i].addr.start)) {
            now = int128_min(remain,
                             int128_sub(view->ranges[i].addr.start, base));
A
Avi Kivity 已提交
515 516 517
            fr.mr = mr;
            fr.offset_in_region = offset_in_region;
            fr.addr = addrrange_make(base, now);
A
Avi Kivity 已提交
518
            fr.dirty_log_mask = mr->dirty_log_mask;
519
            fr.readable = mr->readable;
520
            fr.readonly = readonly;
A
Avi Kivity 已提交
521 522
            flatview_insert(view, i, &fr);
            ++i;
523 524 525
            int128_addto(&base, now);
            offset_in_region += int128_get64(now);
            int128_subfrom(&remain, now);
A
Avi Kivity 已提交
526
        }
527 528 529 530 531
        if (int128_eq(base, view->ranges[i].addr.start)) {
            now = int128_min(remain, view->ranges[i].addr.size);
            int128_addto(&base, now);
            offset_in_region += int128_get64(now);
            int128_subfrom(&remain, now);
A
Avi Kivity 已提交
532 533
        }
    }
534
    if (int128_nz(remain)) {
A
Avi Kivity 已提交
535 536 537
        fr.mr = mr;
        fr.offset_in_region = offset_in_region;
        fr.addr = addrrange_make(base, remain);
A
Avi Kivity 已提交
538
        fr.dirty_log_mask = mr->dirty_log_mask;
539
        fr.readable = mr->readable;
540
        fr.readonly = readonly;
A
Avi Kivity 已提交
541 542 543 544 545 546 547 548 549 550 551
        flatview_insert(view, i, &fr);
    }
}

/* Render a memory topology into a list of disjoint absolute ranges. */
static FlatView generate_memory_topology(MemoryRegion *mr)
{
    FlatView view;

    flatview_init(&view);

552 553
    render_memory_region(&view, mr, int128_zero(),
                         addrrange_make(int128_zero(), int128_2_64()), false);
554
    flatview_simplify(&view);
A
Avi Kivity 已提交
555 556 557 558

    return view;
}

A
Avi Kivity 已提交
559 560 561 562 563 564 565
static void address_space_add_del_ioeventfds(AddressSpace *as,
                                             MemoryRegionIoeventfd *fds_new,
                                             unsigned fds_new_nb,
                                             MemoryRegionIoeventfd *fds_old,
                                             unsigned fds_old_nb)
{
    unsigned iold, inew;
566 567
    MemoryRegionIoeventfd *fd;
    MemoryRegionSection section;
A
Avi Kivity 已提交
568 569 570 571 572 573 574 575 576 577 578

    /* Generate a symmetric difference of the old and new fd sets, adding
     * and deleting as necessary.
     */

    iold = inew = 0;
    while (iold < fds_old_nb || inew < fds_new_nb) {
        if (iold < fds_old_nb
            && (inew == fds_new_nb
                || memory_region_ioeventfd_before(fds_old[iold],
                                                  fds_new[inew]))) {
579 580 581 582 583 584 585 586
            fd = &fds_old[iold];
            section = (MemoryRegionSection) {
                .address_space = as->root,
                .offset_within_address_space = int128_get64(fd->addr.start),
                .size = int128_get64(fd->addr.size),
            };
            MEMORY_LISTENER_CALL(eventfd_del, Forward, &section,
                                 fd->match_data, fd->data, fd->fd);
A
Avi Kivity 已提交
587 588 589 590 591
            ++iold;
        } else if (inew < fds_new_nb
                   && (iold == fds_old_nb
                       || memory_region_ioeventfd_before(fds_new[inew],
                                                         fds_old[iold]))) {
592 593 594 595 596 597 598 599
            fd = &fds_new[inew];
            section = (MemoryRegionSection) {
                .address_space = as->root,
                .offset_within_address_space = int128_get64(fd->addr.start),
                .size = int128_get64(fd->addr.size),
            };
            MEMORY_LISTENER_CALL(eventfd_add, Reverse, &section,
                                 fd->match_data, fd->data, fd->fd);
A
Avi Kivity 已提交
600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618
            ++inew;
        } else {
            ++iold;
            ++inew;
        }
    }
}

static void address_space_update_ioeventfds(AddressSpace *as)
{
    FlatRange *fr;
    unsigned ioeventfd_nb = 0;
    MemoryRegionIoeventfd *ioeventfds = NULL;
    AddrRange tmp;
    unsigned i;

    FOR_EACH_FLAT_RANGE(fr, &as->current_map) {
        for (i = 0; i < fr->mr->ioeventfd_nb; ++i) {
            tmp = addrrange_shift(fr->mr->ioeventfds[i].addr,
619 620
                                  int128_sub(fr->addr.start,
                                             int128_make64(fr->offset_in_region)));
A
Avi Kivity 已提交
621 622
            if (addrrange_intersects(fr->addr, tmp)) {
                ++ioeventfd_nb;
623
                ioeventfds = g_realloc(ioeventfds,
A
Avi Kivity 已提交
624 625 626 627 628 629 630 631 632 633
                                          ioeventfd_nb * sizeof(*ioeventfds));
                ioeventfds[ioeventfd_nb-1] = fr->mr->ioeventfds[i];
                ioeventfds[ioeventfd_nb-1].addr = tmp;
            }
        }
    }

    address_space_add_del_ioeventfds(as, ioeventfds, ioeventfd_nb,
                                     as->ioeventfds, as->ioeventfd_nb);

634
    g_free(as->ioeventfds);
A
Avi Kivity 已提交
635 636 637 638
    as->ioeventfds = ioeventfds;
    as->ioeventfd_nb = ioeventfd_nb;
}

639 640 641 642
static void address_space_update_topology_pass(AddressSpace *as,
                                               FlatView old_view,
                                               FlatView new_view,
                                               bool adding)
A
Avi Kivity 已提交
643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664
{
    unsigned iold, inew;
    FlatRange *frold, *frnew;

    /* Generate a symmetric difference of the old and new memory maps.
     * Kill ranges in the old map, and instantiate ranges in the new map.
     */
    iold = inew = 0;
    while (iold < old_view.nr || inew < new_view.nr) {
        if (iold < old_view.nr) {
            frold = &old_view.ranges[iold];
        } else {
            frold = NULL;
        }
        if (inew < new_view.nr) {
            frnew = &new_view.ranges[inew];
        } else {
            frnew = NULL;
        }

        if (frold
            && (!frnew
665 666
                || int128_lt(frold->addr.start, frnew->addr.start)
                || (int128_eq(frold->addr.start, frnew->addr.start)
A
Avi Kivity 已提交
667 668 669
                    && !flatrange_equal(frold, frnew)))) {
            /* In old, but (not in new, or in new but attributes changed). */

670
            if (!adding) {
671
                MEMORY_LISTENER_UPDATE_REGION(frold, as, Reverse, region_del);
672 673
            }

A
Avi Kivity 已提交
674 675 676 677
            ++iold;
        } else if (frold && frnew && flatrange_equal(frold, frnew)) {
            /* In both (logging may have changed) */

678
            if (adding) {
679
                MEMORY_LISTENER_UPDATE_REGION(frnew, as, Forward, region_nop);
680
                if (frold->dirty_log_mask && !frnew->dirty_log_mask) {
681
                    MEMORY_LISTENER_UPDATE_REGION(frnew, as, Reverse, log_stop);
682
                } else if (frnew->dirty_log_mask && !frold->dirty_log_mask) {
683
                    MEMORY_LISTENER_UPDATE_REGION(frnew, as, Forward, log_start);
684
                }
A
Avi Kivity 已提交
685 686
            }

A
Avi Kivity 已提交
687 688 689 690 691
            ++iold;
            ++inew;
        } else {
            /* In new */

692
            if (adding) {
693
                MEMORY_LISTENER_UPDATE_REGION(frnew, as, Forward, region_add);
694 695
            }

A
Avi Kivity 已提交
696 697 698
            ++inew;
        }
    }
699 700 701 702 703 704 705 706 707 708 709
}


static void address_space_update_topology(AddressSpace *as)
{
    FlatView old_view = as->current_map;
    FlatView new_view = generate_memory_topology(as->root);

    address_space_update_topology_pass(as, old_view, new_view, false);
    address_space_update_topology_pass(as, old_view, new_view, true);

710
    as->current_map = new_view;
A
Avi Kivity 已提交
711
    flatview_destroy(&old_view);
A
Avi Kivity 已提交
712
    address_space_update_ioeventfds(as);
A
Avi Kivity 已提交
713 714
}

715
static void memory_region_update_topology(MemoryRegion *mr)
716
{
A
Avi Kivity 已提交
717
    if (memory_region_transaction_depth) {
718
        memory_region_update_pending |= !mr || mr->enabled;
A
Avi Kivity 已提交
719 720 721
        return;
    }

722 723 724 725
    if (mr && !mr->enabled) {
        return;
    }

726 727
    MEMORY_LISTENER_CALL_GLOBAL(begin, Forward);

A
Avi Kivity 已提交
728 729 730 731 732 733
    if (address_space_memory.root) {
        address_space_update_topology(&address_space_memory);
    }
    if (address_space_io.root) {
        address_space_update_topology(&address_space_io);
    }
734

735 736
    MEMORY_LISTENER_CALL_GLOBAL(commit, Forward);

737
    memory_region_update_pending = false;
738 739
}

A
Avi Kivity 已提交
740 741 742 743 744 745 746 747 748
void memory_region_transaction_begin(void)
{
    ++memory_region_transaction_depth;
}

void memory_region_transaction_commit(void)
{
    assert(memory_region_transaction_depth);
    --memory_region_transaction_depth;
749 750 751
    if (!memory_region_transaction_depth && memory_region_update_pending) {
        memory_region_update_topology(NULL);
    }
A
Avi Kivity 已提交
752 753
}

754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772
static void memory_region_destructor_none(MemoryRegion *mr)
{
}

static void memory_region_destructor_ram(MemoryRegion *mr)
{
    qemu_ram_free(mr->ram_addr);
}

static void memory_region_destructor_ram_from_ptr(MemoryRegion *mr)
{
    qemu_ram_free_from_ptr(mr->ram_addr);
}

static void memory_region_destructor_iomem(MemoryRegion *mr)
{
    cpu_unregister_io_memory(mr->ram_addr);
}

773 774 775
static void memory_region_destructor_rom_device(MemoryRegion *mr)
{
    qemu_ram_free(mr->ram_addr & TARGET_PAGE_MASK);
A
Avi Kivity 已提交
776
    cpu_unregister_io_memory(mr->ram_addr & ~TARGET_PAGE_MASK);
777 778
}

779 780
static bool memory_region_wrong_endianness(MemoryRegion *mr)
{
781
#ifdef TARGET_WORDS_BIGENDIAN
782 783 784 785 786 787
    return mr->ops->endianness == DEVICE_LITTLE_ENDIAN;
#else
    return mr->ops->endianness == DEVICE_BIG_ENDIAN;
#endif
}

A
Avi Kivity 已提交
788 789 790 791 792 793
void memory_region_init(MemoryRegion *mr,
                        const char *name,
                        uint64_t size)
{
    mr->ops = NULL;
    mr->parent = NULL;
794 795 796 797
    mr->size = int128_make64(size);
    if (size == UINT64_MAX) {
        mr->size = int128_2_64();
    }
A
Avi Kivity 已提交
798
    mr->addr = 0;
A
Avi Kivity 已提交
799
    mr->subpage = false;
800
    mr->enabled = true;
801
    mr->terminates = false;
A
Avi Kivity 已提交
802
    mr->ram = false;
803
    mr->readable = true;
804
    mr->readonly = false;
A
Avi Kivity 已提交
805
    mr->rom_device = false;
806
    mr->destructor = memory_region_destructor_none;
A
Avi Kivity 已提交
807 808 809 810 811 812
    mr->priority = 0;
    mr->may_overlap = false;
    mr->alias = NULL;
    QTAILQ_INIT(&mr->subregions);
    memset(&mr->subregions_link, 0, sizeof mr->subregions_link);
    QTAILQ_INIT(&mr->coalesced);
813
    mr->name = g_strdup(name);
A
Avi Kivity 已提交
814
    mr->dirty_log_mask = 0;
A
Avi Kivity 已提交
815 816
    mr->ioeventfd_nb = 0;
    mr->ioeventfds = NULL;
A
Avi Kivity 已提交
817 818 819 820
}

static bool memory_region_access_valid(MemoryRegion *mr,
                                       target_phys_addr_t addr,
821 822
                                       unsigned size,
                                       bool is_write)
A
Avi Kivity 已提交
823
{
824 825 826 827 828
    if (mr->ops->valid.accepts
        && !mr->ops->valid.accepts(mr->opaque, addr, size, is_write)) {
        return false;
    }

A
Avi Kivity 已提交
829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844
    if (!mr->ops->valid.unaligned && (addr & (size - 1))) {
        return false;
    }

    /* Treat zero as compatibility all valid */
    if (!mr->ops->valid.max_access_size) {
        return true;
    }

    if (size > mr->ops->valid.max_access_size
        || size < mr->ops->valid.min_access_size) {
        return false;
    }
    return true;
}

845 846 847
static uint64_t memory_region_dispatch_read1(MemoryRegion *mr,
                                             target_phys_addr_t addr,
                                             unsigned size)
A
Avi Kivity 已提交
848
{
849
    uint64_t data = 0;
A
Avi Kivity 已提交
850

851
    if (!memory_region_access_valid(mr, addr, size, false)) {
A
Avi Kivity 已提交
852 853 854
        return -1U; /* FIXME: better signalling */
    }

855 856 857 858
    if (!mr->ops->read) {
        return mr->ops->old_mmio.read[bitops_ffsl(size)](mr->opaque, addr);
    }

A
Avi Kivity 已提交
859
    /* FIXME: support unaligned access */
860
    access_with_adjusted_size(addr, &data, size,
861 862 863
                              mr->ops->impl.min_access_size,
                              mr->ops->impl.max_access_size,
                              memory_region_read_accessor, mr);
A
Avi Kivity 已提交
864 865 866 867

    return data;
}

868
static void adjust_endianness(MemoryRegion *mr, uint64_t *data, unsigned size)
A
Avi Kivity 已提交
869
{
870 871 872 873 874 875 876 877 878
    if (memory_region_wrong_endianness(mr)) {
        switch (size) {
        case 1:
            break;
        case 2:
            *data = bswap16(*data);
            break;
        case 4:
            *data = bswap32(*data);
879
            break;
880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895
        default:
            abort();
        }
    }
}

static uint64_t memory_region_dispatch_read(MemoryRegion *mr,
                                            target_phys_addr_t addr,
                                            unsigned size)
{
    uint64_t ret;

    ret = memory_region_dispatch_read1(mr, addr, size);
    adjust_endianness(mr, &ret, size);
    return ret;
}
A
Avi Kivity 已提交
896

897 898 899 900 901
static void memory_region_dispatch_write(MemoryRegion *mr,
                                         target_phys_addr_t addr,
                                         uint64_t data,
                                         unsigned size)
{
902
    if (!memory_region_access_valid(mr, addr, size, true)) {
A
Avi Kivity 已提交
903 904 905
        return; /* FIXME: better signalling */
    }

906 907
    adjust_endianness(mr, &data, size);

908 909 910 911 912
    if (!mr->ops->write) {
        mr->ops->old_mmio.write[bitops_ffsl(size)](mr->opaque, addr, data);
        return;
    }

A
Avi Kivity 已提交
913
    /* FIXME: support unaligned access */
914
    access_with_adjusted_size(addr, &data, size,
915 916 917
                              mr->ops->impl.min_access_size,
                              mr->ops->impl.max_access_size,
                              memory_region_write_accessor, mr);
A
Avi Kivity 已提交
918 919 920 921 922 923 924 925 926 927 928
}

void memory_region_init_io(MemoryRegion *mr,
                           const MemoryRegionOps *ops,
                           void *opaque,
                           const char *name,
                           uint64_t size)
{
    memory_region_init(mr, name, size);
    mr->ops = ops;
    mr->opaque = opaque;
929
    mr->terminates = true;
930
    mr->destructor = memory_region_destructor_iomem;
931
    mr->ram_addr = cpu_register_io_memory(mr);
A
Avi Kivity 已提交
932 933 934 935 936 937 938
}

void memory_region_init_ram(MemoryRegion *mr,
                            const char *name,
                            uint64_t size)
{
    memory_region_init(mr, name, size);
A
Avi Kivity 已提交
939
    mr->ram = true;
940
    mr->terminates = true;
941
    mr->destructor = memory_region_destructor_ram;
942
    mr->ram_addr = qemu_ram_alloc(size, mr);
A
Avi Kivity 已提交
943 944 945 946 947 948 949 950
}

void memory_region_init_ram_ptr(MemoryRegion *mr,
                                const char *name,
                                uint64_t size,
                                void *ptr)
{
    memory_region_init(mr, name, size);
A
Avi Kivity 已提交
951
    mr->ram = true;
952
    mr->terminates = true;
953
    mr->destructor = memory_region_destructor_ram_from_ptr;
954
    mr->ram_addr = qemu_ram_alloc_from_ptr(size, ptr, mr);
A
Avi Kivity 已提交
955 956 957 958 959 960 961 962 963 964 965 966 967
}

void memory_region_init_alias(MemoryRegion *mr,
                              const char *name,
                              MemoryRegion *orig,
                              target_phys_addr_t offset,
                              uint64_t size)
{
    memory_region_init(mr, name, size);
    mr->alias = orig;
    mr->alias_offset = offset;
}

968 969
void memory_region_init_rom_device(MemoryRegion *mr,
                                   const MemoryRegionOps *ops,
970
                                   void *opaque,
971 972 973 974
                                   const char *name,
                                   uint64_t size)
{
    memory_region_init(mr, name, size);
975
    mr->ops = ops;
976
    mr->opaque = opaque;
977
    mr->terminates = true;
A
Avi Kivity 已提交
978
    mr->rom_device = true;
979
    mr->destructor = memory_region_destructor_rom_device;
980
    mr->ram_addr = qemu_ram_alloc(size, mr);
981
    mr->ram_addr |= cpu_register_io_memory(mr);
982 983
}

984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019
static uint64_t invalid_read(void *opaque, target_phys_addr_t addr,
                             unsigned size)
{
    MemoryRegion *mr = opaque;

    if (!mr->warning_printed) {
        fprintf(stderr, "Invalid read from memory region %s\n", mr->name);
        mr->warning_printed = true;
    }
    return -1U;
}

static void invalid_write(void *opaque, target_phys_addr_t addr, uint64_t data,
                          unsigned size)
{
    MemoryRegion *mr = opaque;

    if (!mr->warning_printed) {
        fprintf(stderr, "Invalid write to memory region %s\n", mr->name);
        mr->warning_printed = true;
    }
}

static const MemoryRegionOps reservation_ops = {
    .read = invalid_read,
    .write = invalid_write,
    .endianness = DEVICE_NATIVE_ENDIAN,
};

void memory_region_init_reservation(MemoryRegion *mr,
                                    const char *name,
                                    uint64_t size)
{
    memory_region_init_io(mr, &reservation_ops, mr, name, size);
}

A
Avi Kivity 已提交
1020 1021 1022
void memory_region_destroy(MemoryRegion *mr)
{
    assert(QTAILQ_EMPTY(&mr->subregions));
1023
    mr->destructor(mr);
A
Avi Kivity 已提交
1024
    memory_region_clear_coalescing(mr);
1025 1026
    g_free((char *)mr->name);
    g_free(mr->ioeventfds);
A
Avi Kivity 已提交
1027 1028 1029 1030
}

uint64_t memory_region_size(MemoryRegion *mr)
{
1031 1032 1033 1034
    if (int128_eq(mr->size, int128_2_64())) {
        return UINT64_MAX;
    }
    return int128_get64(mr->size);
A
Avi Kivity 已提交
1035 1036
}

1037 1038 1039 1040 1041
const char *memory_region_name(MemoryRegion *mr)
{
    return mr->name;
}

A
Avi Kivity 已提交
1042 1043 1044 1045 1046
bool memory_region_is_ram(MemoryRegion *mr)
{
    return mr->ram;
}

1047 1048 1049 1050 1051
bool memory_region_is_logging(MemoryRegion *mr)
{
    return mr->dirty_log_mask;
}

A
Avi Kivity 已提交
1052 1053 1054 1055 1056
bool memory_region_is_rom(MemoryRegion *mr)
{
    return mr->ram && mr->readonly;
}

A
Avi Kivity 已提交
1057 1058
void memory_region_set_log(MemoryRegion *mr, bool log, unsigned client)
{
A
Avi Kivity 已提交
1059 1060 1061
    uint8_t mask = 1 << client;

    mr->dirty_log_mask = (mr->dirty_log_mask & ~mask) | (log * mask);
1062
    memory_region_update_topology(mr);
A
Avi Kivity 已提交
1063 1064 1065
}

bool memory_region_get_dirty(MemoryRegion *mr, target_phys_addr_t addr,
1066
                             target_phys_addr_t size, unsigned client)
A
Avi Kivity 已提交
1067
{
1068
    assert(mr->terminates);
1069 1070
    return cpu_physical_memory_get_dirty(mr->ram_addr + addr, size,
                                         1 << client);
A
Avi Kivity 已提交
1071 1072
}

1073 1074
void memory_region_set_dirty(MemoryRegion *mr, target_phys_addr_t addr,
                             target_phys_addr_t size)
A
Avi Kivity 已提交
1075
{
1076
    assert(mr->terminates);
1077
    return cpu_physical_memory_set_dirty_range(mr->ram_addr + addr, size, -1);
A
Avi Kivity 已提交
1078 1079 1080 1081
}

void memory_region_sync_dirty_bitmap(MemoryRegion *mr)
{
A
Avi Kivity 已提交
1082 1083
    FlatRange *fr;

1084
    FOR_EACH_FLAT_RANGE(fr, &address_space_memory.current_map) {
A
Avi Kivity 已提交
1085
        if (fr->mr == mr) {
1086 1087
            MEMORY_LISTENER_UPDATE_REGION(fr, &address_space_memory,
                                          Forward, log_sync);
A
Avi Kivity 已提交
1088 1089
        }
    }
A
Avi Kivity 已提交
1090 1091 1092 1093
}

void memory_region_set_readonly(MemoryRegion *mr, bool readonly)
{
1094 1095
    if (mr->readonly != readonly) {
        mr->readonly = readonly;
1096
        memory_region_update_topology(mr);
1097
    }
A
Avi Kivity 已提交
1098 1099
}

1100 1101 1102 1103
void memory_region_rom_device_set_readable(MemoryRegion *mr, bool readable)
{
    if (mr->readable != readable) {
        mr->readable = readable;
1104
        memory_region_update_topology(mr);
1105 1106 1107
    }
}

A
Avi Kivity 已提交
1108 1109 1110
void memory_region_reset_dirty(MemoryRegion *mr, target_phys_addr_t addr,
                               target_phys_addr_t size, unsigned client)
{
1111
    assert(mr->terminates);
A
Avi Kivity 已提交
1112 1113 1114
    cpu_physical_memory_reset_dirty(mr->ram_addr + addr,
                                    mr->ram_addr + addr + size,
                                    1 << client);
A
Avi Kivity 已提交
1115 1116 1117 1118 1119 1120 1121 1122
}

void *memory_region_get_ram_ptr(MemoryRegion *mr)
{
    if (mr->alias) {
        return memory_region_get_ram_ptr(mr->alias) + mr->alias_offset;
    }

1123
    assert(mr->terminates);
A
Avi Kivity 已提交
1124

1125
    return qemu_get_ram_ptr(mr->ram_addr & TARGET_PAGE_MASK);
A
Avi Kivity 已提交
1126 1127 1128 1129 1130 1131 1132 1133
}

static void memory_region_update_coalesced_range(MemoryRegion *mr)
{
    FlatRange *fr;
    CoalescedMemoryRange *cmr;
    AddrRange tmp;

1134
    FOR_EACH_FLAT_RANGE(fr, &address_space_memory.current_map) {
A
Avi Kivity 已提交
1135
        if (fr->mr == mr) {
1136 1137
            qemu_unregister_coalesced_mmio(int128_get64(fr->addr.start),
                                           int128_get64(fr->addr.size));
A
Avi Kivity 已提交
1138 1139
            QTAILQ_FOREACH(cmr, &mr->coalesced, link) {
                tmp = addrrange_shift(cmr->addr,
1140 1141
                                      int128_sub(fr->addr.start,
                                                 int128_make64(fr->offset_in_region)));
A
Avi Kivity 已提交
1142 1143 1144 1145
                if (!addrrange_intersects(tmp, fr->addr)) {
                    continue;
                }
                tmp = addrrange_intersection(tmp, fr->addr);
1146 1147
                qemu_register_coalesced_mmio(int128_get64(tmp.start),
                                             int128_get64(tmp.size));
A
Avi Kivity 已提交
1148 1149 1150 1151 1152 1153 1154 1155
            }
        }
    }
}

void memory_region_set_coalescing(MemoryRegion *mr)
{
    memory_region_clear_coalescing(mr);
1156
    memory_region_add_coalescing(mr, 0, int128_get64(mr->size));
A
Avi Kivity 已提交
1157 1158 1159 1160 1161 1162
}

void memory_region_add_coalescing(MemoryRegion *mr,
                                  target_phys_addr_t offset,
                                  uint64_t size)
{
1163
    CoalescedMemoryRange *cmr = g_malloc(sizeof(*cmr));
A
Avi Kivity 已提交
1164

1165
    cmr->addr = addrrange_make(int128_make64(offset), int128_make64(size));
A
Avi Kivity 已提交
1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176
    QTAILQ_INSERT_TAIL(&mr->coalesced, cmr, link);
    memory_region_update_coalesced_range(mr);
}

void memory_region_clear_coalescing(MemoryRegion *mr)
{
    CoalescedMemoryRange *cmr;

    while (!QTAILQ_EMPTY(&mr->coalesced)) {
        cmr = QTAILQ_FIRST(&mr->coalesced);
        QTAILQ_REMOVE(&mr->coalesced, cmr, link);
1177
        g_free(cmr);
A
Avi Kivity 已提交
1178 1179 1180 1181
    }
    memory_region_update_coalesced_range(mr);
}

A
Avi Kivity 已提交
1182 1183 1184 1185 1186 1187 1188 1189
void memory_region_add_eventfd(MemoryRegion *mr,
                               target_phys_addr_t addr,
                               unsigned size,
                               bool match_data,
                               uint64_t data,
                               int fd)
{
    MemoryRegionIoeventfd mrfd = {
1190 1191
        .addr.start = int128_make64(addr),
        .addr.size = int128_make64(size),
A
Avi Kivity 已提交
1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203
        .match_data = match_data,
        .data = data,
        .fd = fd,
    };
    unsigned i;

    for (i = 0; i < mr->ioeventfd_nb; ++i) {
        if (memory_region_ioeventfd_before(mrfd, mr->ioeventfds[i])) {
            break;
        }
    }
    ++mr->ioeventfd_nb;
1204
    mr->ioeventfds = g_realloc(mr->ioeventfds,
A
Avi Kivity 已提交
1205 1206 1207 1208
                                  sizeof(*mr->ioeventfds) * mr->ioeventfd_nb);
    memmove(&mr->ioeventfds[i+1], &mr->ioeventfds[i],
            sizeof(*mr->ioeventfds) * (mr->ioeventfd_nb-1 - i));
    mr->ioeventfds[i] = mrfd;
1209
    memory_region_update_topology(mr);
A
Avi Kivity 已提交
1210 1211 1212 1213 1214 1215 1216 1217 1218 1219
}

void memory_region_del_eventfd(MemoryRegion *mr,
                               target_phys_addr_t addr,
                               unsigned size,
                               bool match_data,
                               uint64_t data,
                               int fd)
{
    MemoryRegionIoeventfd mrfd = {
1220 1221
        .addr.start = int128_make64(addr),
        .addr.size = int128_make64(size),
A
Avi Kivity 已提交
1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236
        .match_data = match_data,
        .data = data,
        .fd = fd,
    };
    unsigned i;

    for (i = 0; i < mr->ioeventfd_nb; ++i) {
        if (memory_region_ioeventfd_equal(mrfd, mr->ioeventfds[i])) {
            break;
        }
    }
    assert(i != mr->ioeventfd_nb);
    memmove(&mr->ioeventfds[i], &mr->ioeventfds[i+1],
            sizeof(*mr->ioeventfds) * (mr->ioeventfd_nb - (i+1)));
    --mr->ioeventfd_nb;
1237
    mr->ioeventfds = g_realloc(mr->ioeventfds,
A
Avi Kivity 已提交
1238
                                  sizeof(*mr->ioeventfds)*mr->ioeventfd_nb + 1);
1239
    memory_region_update_topology(mr);
A
Avi Kivity 已提交
1240 1241
}

A
Avi Kivity 已提交
1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254
static void memory_region_add_subregion_common(MemoryRegion *mr,
                                               target_phys_addr_t offset,
                                               MemoryRegion *subregion)
{
    MemoryRegion *other;

    assert(!subregion->parent);
    subregion->parent = mr;
    subregion->addr = offset;
    QTAILQ_FOREACH(other, &mr->subregions, subregions_link) {
        if (subregion->may_overlap || other->may_overlap) {
            continue;
        }
1255 1256 1257 1258
        if (int128_gt(int128_make64(offset),
                      int128_add(int128_make64(other->addr), other->size))
            || int128_le(int128_add(int128_make64(offset), subregion->size),
                         int128_make64(other->addr))) {
A
Avi Kivity 已提交
1259 1260
            continue;
        }
1261
#if 0
1262 1263
        printf("warning: subregion collision %llx/%llx (%s) "
               "vs %llx/%llx (%s)\n",
A
Avi Kivity 已提交
1264
               (unsigned long long)offset,
1265
               (unsigned long long)int128_get64(subregion->size),
1266 1267
               subregion->name,
               (unsigned long long)other->addr,
1268
               (unsigned long long)int128_get64(other->size),
1269
               other->name);
1270
#endif
A
Avi Kivity 已提交
1271 1272 1273 1274 1275 1276 1277 1278 1279
    }
    QTAILQ_FOREACH(other, &mr->subregions, subregions_link) {
        if (subregion->priority >= other->priority) {
            QTAILQ_INSERT_BEFORE(other, subregion, subregions_link);
            goto done;
        }
    }
    QTAILQ_INSERT_TAIL(&mr->subregions, subregion, subregions_link);
done:
1280
    memory_region_update_topology(mr);
A
Avi Kivity 已提交
1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308
}


void memory_region_add_subregion(MemoryRegion *mr,
                                 target_phys_addr_t offset,
                                 MemoryRegion *subregion)
{
    subregion->may_overlap = false;
    subregion->priority = 0;
    memory_region_add_subregion_common(mr, offset, subregion);
}

void memory_region_add_subregion_overlap(MemoryRegion *mr,
                                         target_phys_addr_t offset,
                                         MemoryRegion *subregion,
                                         unsigned priority)
{
    subregion->may_overlap = true;
    subregion->priority = priority;
    memory_region_add_subregion_common(mr, offset, subregion);
}

void memory_region_del_subregion(MemoryRegion *mr,
                                 MemoryRegion *subregion)
{
    assert(subregion->parent == mr);
    subregion->parent = NULL;
    QTAILQ_REMOVE(&mr->subregions, subregion, subregions_link);
1309 1310 1311 1312 1313 1314 1315 1316 1317 1318
    memory_region_update_topology(mr);
}

void memory_region_set_enabled(MemoryRegion *mr, bool enabled)
{
    if (enabled == mr->enabled) {
        return;
    }
    mr->enabled = enabled;
    memory_region_update_topology(NULL);
A
Avi Kivity 已提交
1319
}
A
Avi Kivity 已提交
1320

1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341
void memory_region_set_address(MemoryRegion *mr, target_phys_addr_t addr)
{
    MemoryRegion *parent = mr->parent;
    unsigned priority = mr->priority;
    bool may_overlap = mr->may_overlap;

    if (addr == mr->addr || !parent) {
        mr->addr = addr;
        return;
    }

    memory_region_transaction_begin();
    memory_region_del_subregion(parent, mr);
    if (may_overlap) {
        memory_region_add_subregion_overlap(parent, addr, mr, priority);
    } else {
        memory_region_add_subregion(parent, addr, mr);
    }
    memory_region_transaction_commit();
}

1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355
void memory_region_set_alias_offset(MemoryRegion *mr, target_phys_addr_t offset)
{
    target_phys_addr_t old_offset = mr->alias_offset;

    assert(mr->alias);
    mr->alias_offset = offset;

    if (offset == old_offset || !mr->parent) {
        return;
    }

    memory_region_update_topology(mr);
}

1356 1357 1358 1359 1360
ram_addr_t memory_region_get_ram_addr(MemoryRegion *mr)
{
    return mr->ram_addr;
}

1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404
static int cmp_flatrange_addr(const void *addr_, const void *fr_)
{
    const AddrRange *addr = addr_;
    const FlatRange *fr = fr_;

    if (int128_le(addrrange_end(*addr), fr->addr.start)) {
        return -1;
    } else if (int128_ge(addr->start, addrrange_end(fr->addr))) {
        return 1;
    }
    return 0;
}

static FlatRange *address_space_lookup(AddressSpace *as, AddrRange addr)
{
    return bsearch(&addr, as->current_map.ranges, as->current_map.nr,
                   sizeof(FlatRange), cmp_flatrange_addr);
}

MemoryRegionSection memory_region_find(MemoryRegion *address_space,
                                       target_phys_addr_t addr, uint64_t size)
{
    AddressSpace *as = memory_region_to_address_space(address_space);
    AddrRange range = addrrange_make(int128_make64(addr),
                                     int128_make64(size));
    FlatRange *fr = address_space_lookup(as, range);
    MemoryRegionSection ret = { .mr = NULL, .size = 0 };

    if (!fr) {
        return ret;
    }

    while (fr > as->current_map.ranges
           && addrrange_intersects(fr[-1].addr, range)) {
        --fr;
    }

    ret.mr = fr->mr;
    range = addrrange_intersection(range, fr->addr);
    ret.offset_within_region = fr->offset_in_region;
    ret.offset_within_region += int128_get64(int128_sub(range.start,
                                                        fr->addr.start));
    ret.size = int128_get64(range.size);
    ret.offset_within_address_space = int128_get64(range.start);
1405
    ret.readonly = fr->readonly;
1406 1407 1408
    return ret;
}

1409 1410
void memory_global_sync_dirty_bitmap(MemoryRegion *address_space)
{
1411 1412 1413 1414
    AddressSpace *as = memory_region_to_address_space(address_space);
    FlatRange *fr;

    FOR_EACH_FLAT_RANGE(fr, &as->current_map) {
1415
        MEMORY_LISTENER_UPDATE_REGION(fr, as, Forward, log_sync);
1416 1417 1418 1419 1420 1421
    }
}

void memory_global_dirty_log_start(void)
{
    global_dirty_log = true;
1422
    MEMORY_LISTENER_CALL_GLOBAL(log_global_start, Forward);
1423 1424 1425 1426 1427
}

void memory_global_dirty_log_stop(void)
{
    global_dirty_log = false;
1428
    MEMORY_LISTENER_CALL_GLOBAL(log_global_stop, Reverse);
1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445
}

static void listener_add_address_space(MemoryListener *listener,
                                       AddressSpace *as)
{
    FlatRange *fr;

    if (global_dirty_log) {
        listener->log_global_start(listener);
    }
    FOR_EACH_FLAT_RANGE(fr, &as->current_map) {
        MemoryRegionSection section = {
            .mr = fr->mr,
            .address_space = as->root,
            .offset_within_region = fr->offset_in_region,
            .size = int128_get64(fr->addr.size),
            .offset_within_address_space = int128_get64(fr->addr.start),
1446
            .readonly = fr->readonly,
1447 1448 1449 1450 1451
        };
        listener->region_add(listener, &section);
    }
}

1452
void memory_listener_register(MemoryListener *listener, MemoryRegion *filter)
1453
{
1454 1455
    MemoryListener *other = NULL;

1456
    listener->address_space_filter = filter;
1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468
    if (QTAILQ_EMPTY(&memory_listeners)
        || listener->priority >= QTAILQ_LAST(&memory_listeners,
                                             memory_listeners)->priority) {
        QTAILQ_INSERT_TAIL(&memory_listeners, listener, link);
    } else {
        QTAILQ_FOREACH(other, &memory_listeners, link) {
            if (listener->priority < other->priority) {
                break;
            }
        }
        QTAILQ_INSERT_BEFORE(other, listener, link);
    }
1469 1470 1471 1472 1473 1474
    listener_add_address_space(listener, &address_space_memory);
    listener_add_address_space(listener, &address_space_io);
}

void memory_listener_unregister(MemoryListener *listener)
{
1475
    QTAILQ_REMOVE(&memory_listeners, listener, link);
1476
}
1477

A
Avi Kivity 已提交
1478 1479
void set_system_memory_map(MemoryRegion *mr)
{
1480
    address_space_memory.root = mr;
1481
    memory_region_update_topology(NULL);
A
Avi Kivity 已提交
1482
}
A
Avi Kivity 已提交
1483 1484 1485 1486

void set_system_io_map(MemoryRegion *mr)
{
    address_space_io.root = mr;
1487
    memory_region_update_topology(NULL);
A
Avi Kivity 已提交
1488
}
B
Blue Swirl 已提交
1489

1490 1491
uint64_t io_mem_read(int io_index, target_phys_addr_t addr, unsigned size)
{
1492
    return memory_region_dispatch_read(io_mem_region[io_index], addr, size);
1493 1494 1495 1496 1497
}

void io_mem_write(int io_index, target_phys_addr_t addr,
                  uint64_t val, unsigned size)
{
1498
    memory_region_dispatch_write(io_mem_region[io_index], addr, val, size);
1499 1500
}

B
Blue Swirl 已提交
1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513
typedef struct MemoryRegionList MemoryRegionList;

struct MemoryRegionList {
    const MemoryRegion *mr;
    bool printed;
    QTAILQ_ENTRY(MemoryRegionList) queue;
};

typedef QTAILQ_HEAD(queue, MemoryRegionList) MemoryRegionListHead;

static void mtree_print_mr(fprintf_function mon_printf, void *f,
                           const MemoryRegion *mr, unsigned int level,
                           target_phys_addr_t base,
1514
                           MemoryRegionListHead *alias_print_queue)
B
Blue Swirl 已提交
1515
{
1516 1517
    MemoryRegionList *new_ml, *ml, *next_ml;
    MemoryRegionListHead submr_print_queue;
B
Blue Swirl 已提交
1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533
    const MemoryRegion *submr;
    unsigned int i;

    if (!mr) {
        return;
    }

    for (i = 0; i < level; i++) {
        mon_printf(f, "  ");
    }

    if (mr->alias) {
        MemoryRegionList *ml;
        bool found = false;

        /* check if the alias is already in the queue */
1534
        QTAILQ_FOREACH(ml, alias_print_queue, queue) {
B
Blue Swirl 已提交
1535 1536 1537 1538 1539 1540 1541 1542 1543
            if (ml->mr == mr->alias && !ml->printed) {
                found = true;
            }
        }

        if (!found) {
            ml = g_new(MemoryRegionList, 1);
            ml->mr = mr->alias;
            ml->printed = false;
1544
            QTAILQ_INSERT_TAIL(alias_print_queue, ml, queue);
B
Blue Swirl 已提交
1545
        }
1546 1547 1548
        mon_printf(f, TARGET_FMT_plx "-" TARGET_FMT_plx
                   " (prio %d, %c%c): alias %s @%s " TARGET_FMT_plx
                   "-" TARGET_FMT_plx "\n",
B
Blue Swirl 已提交
1549
                   base + mr->addr,
1550 1551
                   base + mr->addr
                   + (target_phys_addr_t)int128_get64(mr->size) - 1,
J
Jan Kiszka 已提交
1552
                   mr->priority,
1553 1554 1555
                   mr->readable ? 'R' : '-',
                   !mr->readonly && !(mr->rom_device && mr->readable) ? 'W'
                                                                      : '-',
B
Blue Swirl 已提交
1556 1557 1558
                   mr->name,
                   mr->alias->name,
                   mr->alias_offset,
1559 1560
                   mr->alias_offset
                   + (target_phys_addr_t)int128_get64(mr->size) - 1);
B
Blue Swirl 已提交
1561
    } else {
1562 1563
        mon_printf(f,
                   TARGET_FMT_plx "-" TARGET_FMT_plx " (prio %d, %c%c): %s\n",
B
Blue Swirl 已提交
1564
                   base + mr->addr,
1565 1566
                   base + mr->addr
                   + (target_phys_addr_t)int128_get64(mr->size) - 1,
J
Jan Kiszka 已提交
1567
                   mr->priority,
1568 1569 1570
                   mr->readable ? 'R' : '-',
                   !mr->readonly && !(mr->rom_device && mr->readable) ? 'W'
                                                                      : '-',
B
Blue Swirl 已提交
1571 1572
                   mr->name);
    }
1573 1574 1575

    QTAILQ_INIT(&submr_print_queue);

B
Blue Swirl 已提交
1576
    QTAILQ_FOREACH(submr, &mr->subregions, subregions_link) {
1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597
        new_ml = g_new(MemoryRegionList, 1);
        new_ml->mr = submr;
        QTAILQ_FOREACH(ml, &submr_print_queue, queue) {
            if (new_ml->mr->addr < ml->mr->addr ||
                (new_ml->mr->addr == ml->mr->addr &&
                 new_ml->mr->priority > ml->mr->priority)) {
                QTAILQ_INSERT_BEFORE(ml, new_ml, queue);
                new_ml = NULL;
                break;
            }
        }
        if (new_ml) {
            QTAILQ_INSERT_TAIL(&submr_print_queue, new_ml, queue);
        }
    }

    QTAILQ_FOREACH(ml, &submr_print_queue, queue) {
        mtree_print_mr(mon_printf, f, ml->mr, level + 1, base + mr->addr,
                       alias_print_queue);
    }

A
Avi Kivity 已提交
1598
    QTAILQ_FOREACH_SAFE(ml, &submr_print_queue, queue, next_ml) {
1599
        g_free(ml);
B
Blue Swirl 已提交
1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616 1617 1618 1619 1620 1621
    }
}

void mtree_info(fprintf_function mon_printf, void *f)
{
    MemoryRegionListHead ml_head;
    MemoryRegionList *ml, *ml2;

    QTAILQ_INIT(&ml_head);

    mon_printf(f, "memory\n");
    mtree_print_mr(mon_printf, f, address_space_memory.root, 0, 0, &ml_head);

    /* print aliased regions */
    QTAILQ_FOREACH(ml, &ml_head, queue) {
        if (!ml->printed) {
            mon_printf(f, "%s\n", ml->mr->name);
            mtree_print_mr(mon_printf, f, ml->mr, 0, 0, &ml_head);
        }
    }

    QTAILQ_FOREACH_SAFE(ml, &ml_head, queue, ml2) {
A
Avi Kivity 已提交
1622
        g_free(ml);
B
Blue Swirl 已提交
1623 1624
    }

J
Jan Kiszka 已提交
1625 1626 1627 1628 1629 1630
    if (address_space_io.root &&
        !QTAILQ_EMPTY(&address_space_io.root->subregions)) {
        QTAILQ_INIT(&ml_head);
        mon_printf(f, "I/O\n");
        mtree_print_mr(mon_printf, f, address_space_io.root, 0, 0, &ml_head);
    }
B
Blue Swirl 已提交
1631
}