kvm-all.c 28.7 KB
Newer Older
A
aliguori 已提交
1 2 3 4
/*
 * QEMU KVM support
 *
 * Copyright IBM, Corp. 2008
5
 *           Red Hat, Inc. 2008
A
aliguori 已提交
6 7 8
 *
 * Authors:
 *  Anthony Liguori   <aliguori@us.ibm.com>
9
 *  Glauber Costa     <gcosta@redhat.com>
A
aliguori 已提交
10 11 12 13 14 15 16 17 18
 *
 * This work is licensed under the terms of the GNU GPL, version 2 or later.
 * See the COPYING file in the top-level directory.
 *
 */

#include <sys/types.h>
#include <sys/ioctl.h>
#include <sys/mman.h>
19
#include <stdarg.h>
A
aliguori 已提交
20 21 22 23

#include <linux/kvm.h>

#include "qemu-common.h"
24
#include "qemu-barrier.h"
A
aliguori 已提交
25
#include "sysemu.h"
J
Jan Kiszka 已提交
26
#include "hw/hw.h"
27
#include "gdbstub.h"
A
aliguori 已提交
28 29
#include "kvm.h"

A
aliguori 已提交
30 31 32
/* KVM uses PAGE_SIZE in it's definition of COALESCED_MMIO_MAX */
#define PAGE_SIZE TARGET_PAGE_SIZE

A
aliguori 已提交
33 34 35 36 37 38 39 40 41 42
//#define DEBUG_KVM

#ifdef DEBUG_KVM
#define dprintf(fmt, ...) \
    do { fprintf(stderr, fmt, ## __VA_ARGS__); } while (0)
#else
#define dprintf(fmt, ...) \
    do { } while (0)
#endif

A
aliguori 已提交
43 44
typedef struct KVMSlot
{
A
Anthony Liguori 已提交
45 46 47
    target_phys_addr_t start_addr;
    ram_addr_t memory_size;
    ram_addr_t phys_offset;
A
aliguori 已提交
48 49 50
    int slot;
    int flags;
} KVMSlot;
A
aliguori 已提交
51

52 53
typedef struct kvm_dirty_log KVMDirtyLog;

A
aliguori 已提交
54 55 56 57 58 59 60
int kvm_allowed = 0;

struct KVMState
{
    KVMSlot slots[32];
    int fd;
    int vmfd;
A
aliguori 已提交
61
    int coalesced_mmio;
62 63 64
#ifdef KVM_CAP_COALESCED_MMIO
    struct kvm_coalesced_mmio_ring *coalesced_mmio_ring;
#endif
65
    int broken_set_mem_region;
66
    int migration_log;
67
    int vcpu_events;
68 69 70
#ifdef KVM_CAP_SET_GUEST_DEBUG
    struct kvm_sw_breakpoint_head kvm_sw_breakpoints;
#endif
71 72
    int irqchip_in_kernel;
    int pit_in_kernel;
A
aliguori 已提交
73 74 75 76 77 78 79 80 81
};

static KVMState *kvm_state;

static KVMSlot *kvm_alloc_slot(KVMState *s)
{
    int i;

    for (i = 0; i < ARRAY_SIZE(s->slots); i++) {
A
aliguori 已提交
82 83 84
        /* KVM private memory slots */
        if (i >= 8 && i < 12)
            continue;
A
aliguori 已提交
85 86 87 88
        if (s->slots[i].memory_size == 0)
            return &s->slots[i];
    }

89 90 91 92 93
    fprintf(stderr, "%s: no free slot available\n", __func__);
    abort();
}

static KVMSlot *kvm_lookup_matching_slot(KVMState *s,
A
Anthony Liguori 已提交
94 95
                                         target_phys_addr_t start_addr,
                                         target_phys_addr_t end_addr)
96 97 98 99 100 101 102 103 104 105 106 107
{
    int i;

    for (i = 0; i < ARRAY_SIZE(s->slots); i++) {
        KVMSlot *mem = &s->slots[i];

        if (start_addr == mem->start_addr &&
            end_addr == mem->start_addr + mem->memory_size) {
            return mem;
        }
    }

A
aliguori 已提交
108 109 110
    return NULL;
}

111 112 113 114
/*
 * Find overlapping slot with lowest start address
 */
static KVMSlot *kvm_lookup_overlapping_slot(KVMState *s,
A
Anthony Liguori 已提交
115 116
                                            target_phys_addr_t start_addr,
                                            target_phys_addr_t end_addr)
A
aliguori 已提交
117
{
118
    KVMSlot *found = NULL;
A
aliguori 已提交
119 120 121 122 123
    int i;

    for (i = 0; i < ARRAY_SIZE(s->slots); i++) {
        KVMSlot *mem = &s->slots[i];

124 125 126 127 128 129 130 131 132
        if (mem->memory_size == 0 ||
            (found && found->start_addr < mem->start_addr)) {
            continue;
        }

        if (end_addr > mem->start_addr &&
            start_addr < mem->start_addr + mem->memory_size) {
            found = mem;
        }
A
aliguori 已提交
133 134
    }

135
    return found;
A
aliguori 已提交
136 137
}

138 139 140 141 142 143 144
static int kvm_set_user_memory_region(KVMState *s, KVMSlot *slot)
{
    struct kvm_userspace_memory_region mem;

    mem.slot = slot->slot;
    mem.guest_phys_addr = slot->start_addr;
    mem.memory_size = slot->memory_size;
P
pbrook 已提交
145
    mem.userspace_addr = (unsigned long)qemu_get_ram_ptr(slot->phys_offset);
146
    mem.flags = slot->flags;
147 148 149
    if (s->migration_log) {
        mem.flags |= KVM_MEM_LOG_DIRTY_PAGES;
    }
150 151 152
    return kvm_vm_ioctl(s, KVM_SET_USER_MEMORY_REGION, &mem);
}

J
Jan Kiszka 已提交
153 154 155 156
static void kvm_reset_vcpu(void *opaque)
{
    CPUState *env = opaque;

J
Jan Kiszka 已提交
157
    kvm_arch_reset_vcpu(env);
J
Jan Kiszka 已提交
158 159 160 161 162
    if (kvm_arch_put_registers(env)) {
        fprintf(stderr, "Fatal: kvm vcpu reset failed\n");
        abort();
    }
}
163

164 165 166 167 168 169 170 171 172 173 174
int kvm_irqchip_in_kernel(void)
{
    return kvm_state->irqchip_in_kernel;
}

int kvm_pit_in_kernel(void)
{
    return kvm_state->pit_in_kernel;
}


A
aliguori 已提交
175 176 177 178 179 180 181 182
int kvm_init_vcpu(CPUState *env)
{
    KVMState *s = kvm_state;
    long mmap_size;
    int ret;

    dprintf("kvm_init_vcpu\n");

183
    ret = kvm_vm_ioctl(s, KVM_CREATE_VCPU, env->cpu_index);
A
aliguori 已提交
184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205
    if (ret < 0) {
        dprintf("kvm_create_vcpu failed\n");
        goto err;
    }

    env->kvm_fd = ret;
    env->kvm_state = s;

    mmap_size = kvm_ioctl(s, KVM_GET_VCPU_MMAP_SIZE, 0);
    if (mmap_size < 0) {
        dprintf("KVM_GET_VCPU_MMAP_SIZE failed\n");
        goto err;
    }

    env->kvm_run = mmap(NULL, mmap_size, PROT_READ | PROT_WRITE, MAP_SHARED,
                        env->kvm_fd, 0);
    if (env->kvm_run == MAP_FAILED) {
        ret = -errno;
        dprintf("mmap'ing vcpu state failed\n");
        goto err;
    }

206 207 208 209 210 211
#ifdef KVM_CAP_COALESCED_MMIO
    if (s->coalesced_mmio && !s->coalesced_mmio_ring)
        s->coalesced_mmio_ring = (void *) env->kvm_run +
		s->coalesced_mmio * PAGE_SIZE;
#endif

A
aliguori 已提交
212
    ret = kvm_arch_init_vcpu(env);
J
Jan Kiszka 已提交
213
    if (ret == 0) {
214
        qemu_register_reset(kvm_reset_vcpu, env);
J
Jan Kiszka 已提交
215
        kvm_arch_reset_vcpu(env);
J
Jan Kiszka 已提交
216 217
        ret = kvm_arch_put_registers(env);
    }
A
aliguori 已提交
218 219 220 221
err:
    return ret;
}

222 223 224
/*
 * dirty pages logging control
 */
A
Anthony Liguori 已提交
225 226
static int kvm_dirty_pages_log_change(target_phys_addr_t phys_addr,
                                      ram_addr_t size, int flags, int mask)
227 228
{
    KVMState *s = kvm_state;
229
    KVMSlot *mem = kvm_lookup_matching_slot(s, phys_addr, phys_addr + size);
230 231
    int old_flags;

232
    if (mem == NULL)  {
233 234
            fprintf(stderr, "BUG: %s: invalid parameters " TARGET_FMT_plx "-"
                    TARGET_FMT_plx "\n", __func__, phys_addr,
A
Anthony Liguori 已提交
235
                    (target_phys_addr_t)(phys_addr + size - 1));
236 237 238
            return -EINVAL;
    }

239
    old_flags = mem->flags;
240

241
    flags = (mem->flags & ~mask) | flags;
242 243
    mem->flags = flags;

244 245 246 247 248 249 250 251
    /* If nothing changed effectively, no need to issue ioctl */
    if (s->migration_log) {
        flags |= KVM_MEM_LOG_DIRTY_PAGES;
    }
    if (flags == old_flags) {
            return 0;
    }

252 253 254
    return kvm_set_user_memory_region(s, mem);
}

A
Anthony Liguori 已提交
255
int kvm_log_start(target_phys_addr_t phys_addr, ram_addr_t size)
256
{
257
        return kvm_dirty_pages_log_change(phys_addr, size,
258 259 260 261
                                          KVM_MEM_LOG_DIRTY_PAGES,
                                          KVM_MEM_LOG_DIRTY_PAGES);
}

A
Anthony Liguori 已提交
262
int kvm_log_stop(target_phys_addr_t phys_addr, ram_addr_t size)
263
{
264
        return kvm_dirty_pages_log_change(phys_addr, size,
265 266 267 268
                                          0,
                                          KVM_MEM_LOG_DIRTY_PAGES);
}

269
static int kvm_set_migration_log(int enable)
270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290
{
    KVMState *s = kvm_state;
    KVMSlot *mem;
    int i, err;

    s->migration_log = enable;

    for (i = 0; i < ARRAY_SIZE(s->slots); i++) {
        mem = &s->slots[i];

        if (!!(mem->flags & KVM_MEM_LOG_DIRTY_PAGES) == enable) {
            continue;
        }
        err = kvm_set_user_memory_region(s, mem);
        if (err) {
            return err;
        }
    }
    return 0;
}

A
Alexander Graf 已提交
291 292 293 294 295
static int test_le_bit(unsigned long nr, unsigned char *addr)
{
    return (addr[nr >> 3] >> (nr & 7)) & 1;
}

296 297 298 299 300
/**
 * kvm_physical_sync_dirty_bitmap - Grab dirty bitmap from kernel space
 * This function updates qemu's dirty bitmap using cpu_physical_memory_set_dirty().
 * This means all bits are set to dirty.
 *
301
 * @start_add: start of logged region.
302 303
 * @end_addr: end of logged region.
 */
304 305
static int kvm_physical_sync_dirty_bitmap(target_phys_addr_t start_addr,
					  target_phys_addr_t end_addr)
306 307
{
    KVMState *s = kvm_state;
308
    unsigned long size, allocated_size = 0;
A
Anthony Liguori 已提交
309 310
    target_phys_addr_t phys_addr;
    ram_addr_t addr;
311 312 313
    KVMDirtyLog d;
    KVMSlot *mem;
    int ret = 0;
314

315 316 317 318 319 320
    d.dirty_bitmap = NULL;
    while (start_addr < end_addr) {
        mem = kvm_lookup_overlapping_slot(s, start_addr, end_addr);
        if (mem == NULL) {
            break;
        }
321

322 323 324 325 326 327 328 329
        size = ((mem->memory_size >> TARGET_PAGE_BITS) + 7) / 8;
        if (!d.dirty_bitmap) {
            d.dirty_bitmap = qemu_malloc(size);
        } else if (size > allocated_size) {
            d.dirty_bitmap = qemu_realloc(d.dirty_bitmap, size);
        }
        allocated_size = size;
        memset(d.dirty_bitmap, 0, allocated_size);
330

331
        d.slot = mem->slot;
332

333
        if (kvm_vm_ioctl(s, KVM_GET_DIRTY_LOG, &d) == -1) {
334 335 336 337
            dprintf("ioctl failed %d\n", errno);
            ret = -1;
            break;
        }
338

339 340 341
        for (phys_addr = mem->start_addr, addr = mem->phys_offset;
             phys_addr < mem->start_addr + mem->memory_size;
             phys_addr += TARGET_PAGE_SIZE, addr += TARGET_PAGE_SIZE) {
A
Alexander Graf 已提交
342
            unsigned char *bitmap = (unsigned char *)d.dirty_bitmap;
343 344
            unsigned nr = (phys_addr - mem->start_addr) >> TARGET_PAGE_BITS;

A
Alexander Graf 已提交
345
            if (test_le_bit(nr, bitmap)) {
346 347 348 349
                cpu_physical_memory_set_dirty(addr);
            }
        }
        start_addr = phys_addr;
350 351
    }
    qemu_free(d.dirty_bitmap);
352 353

    return ret;
354 355
}

A
Anthony Liguori 已提交
356
int kvm_coalesce_mmio_region(target_phys_addr_t start, ram_addr_t size)
A
aliguori 已提交
357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374
{
    int ret = -ENOSYS;
#ifdef KVM_CAP_COALESCED_MMIO
    KVMState *s = kvm_state;

    if (s->coalesced_mmio) {
        struct kvm_coalesced_mmio_zone zone;

        zone.addr = start;
        zone.size = size;

        ret = kvm_vm_ioctl(s, KVM_REGISTER_COALESCED_MMIO, &zone);
    }
#endif

    return ret;
}

A
Anthony Liguori 已提交
375
int kvm_uncoalesce_mmio_region(target_phys_addr_t start, ram_addr_t size)
A
aliguori 已提交
376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393
{
    int ret = -ENOSYS;
#ifdef KVM_CAP_COALESCED_MMIO
    KVMState *s = kvm_state;

    if (s->coalesced_mmio) {
        struct kvm_coalesced_mmio_zone zone;

        zone.addr = start;
        zone.size = size;

        ret = kvm_vm_ioctl(s, KVM_UNREGISTER_COALESCED_MMIO, &zone);
    }
#endif

    return ret;
}

394 395 396 397 398 399 400 401 402 403 404 405
int kvm_check_extension(KVMState *s, unsigned int extension)
{
    int ret;

    ret = kvm_ioctl(s, KVM_CHECK_EXTENSION, extension);
    if (ret < 0) {
        ret = 0;
    }

    return ret;
}

406 407 408
static void kvm_set_phys_mem(target_phys_addr_t start_addr,
			     ram_addr_t size,
			     ram_addr_t phys_offset)
409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543
{
    KVMState *s = kvm_state;
    ram_addr_t flags = phys_offset & ~TARGET_PAGE_MASK;
    KVMSlot *mem, old;
    int err;

    if (start_addr & ~TARGET_PAGE_MASK) {
        if (flags >= IO_MEM_UNASSIGNED) {
            if (!kvm_lookup_overlapping_slot(s, start_addr,
                                             start_addr + size)) {
                return;
            }
            fprintf(stderr, "Unaligned split of a KVM memory slot\n");
        } else {
            fprintf(stderr, "Only page-aligned memory slots supported\n");
        }
        abort();
    }

    /* KVM does not support read-only slots */
    phys_offset &= ~IO_MEM_ROM;

    while (1) {
        mem = kvm_lookup_overlapping_slot(s, start_addr, start_addr + size);
        if (!mem) {
            break;
        }

        if (flags < IO_MEM_UNASSIGNED && start_addr >= mem->start_addr &&
            (start_addr + size <= mem->start_addr + mem->memory_size) &&
            (phys_offset - start_addr == mem->phys_offset - mem->start_addr)) {
            /* The new slot fits into the existing one and comes with
             * identical parameters - nothing to be done. */
            return;
        }

        old = *mem;

        /* unregister the overlapping slot */
        mem->memory_size = 0;
        err = kvm_set_user_memory_region(s, mem);
        if (err) {
            fprintf(stderr, "%s: error unregistering overlapping slot: %s\n",
                    __func__, strerror(-err));
            abort();
        }

        /* Workaround for older KVM versions: we can't join slots, even not by
         * unregistering the previous ones and then registering the larger
         * slot. We have to maintain the existing fragmentation. Sigh.
         *
         * This workaround assumes that the new slot starts at the same
         * address as the first existing one. If not or if some overlapping
         * slot comes around later, we will fail (not seen in practice so far)
         * - and actually require a recent KVM version. */
        if (s->broken_set_mem_region &&
            old.start_addr == start_addr && old.memory_size < size &&
            flags < IO_MEM_UNASSIGNED) {
            mem = kvm_alloc_slot(s);
            mem->memory_size = old.memory_size;
            mem->start_addr = old.start_addr;
            mem->phys_offset = old.phys_offset;
            mem->flags = 0;

            err = kvm_set_user_memory_region(s, mem);
            if (err) {
                fprintf(stderr, "%s: error updating slot: %s\n", __func__,
                        strerror(-err));
                abort();
            }

            start_addr += old.memory_size;
            phys_offset += old.memory_size;
            size -= old.memory_size;
            continue;
        }

        /* register prefix slot */
        if (old.start_addr < start_addr) {
            mem = kvm_alloc_slot(s);
            mem->memory_size = start_addr - old.start_addr;
            mem->start_addr = old.start_addr;
            mem->phys_offset = old.phys_offset;
            mem->flags = 0;

            err = kvm_set_user_memory_region(s, mem);
            if (err) {
                fprintf(stderr, "%s: error registering prefix slot: %s\n",
                        __func__, strerror(-err));
                abort();
            }
        }

        /* register suffix slot */
        if (old.start_addr + old.memory_size > start_addr + size) {
            ram_addr_t size_delta;

            mem = kvm_alloc_slot(s);
            mem->start_addr = start_addr + size;
            size_delta = mem->start_addr - old.start_addr;
            mem->memory_size = old.memory_size - size_delta;
            mem->phys_offset = old.phys_offset + size_delta;
            mem->flags = 0;

            err = kvm_set_user_memory_region(s, mem);
            if (err) {
                fprintf(stderr, "%s: error registering suffix slot: %s\n",
                        __func__, strerror(-err));
                abort();
            }
        }
    }

    /* in case the KVM bug workaround already "consumed" the new slot */
    if (!size)
        return;

    /* KVM does not need to know about this memory */
    if (flags >= IO_MEM_UNASSIGNED)
        return;

    mem = kvm_alloc_slot(s);
    mem->memory_size = size;
    mem->start_addr = start_addr;
    mem->phys_offset = phys_offset;
    mem->flags = 0;

    err = kvm_set_user_memory_region(s, mem);
    if (err) {
        fprintf(stderr, "%s: error registering slot: %s\n", __func__,
                strerror(-err));
        abort();
    }
}

544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570
static void kvm_client_set_memory(struct CPUPhysMemoryClient *client,
				  target_phys_addr_t start_addr,
				  ram_addr_t size,
				  ram_addr_t phys_offset)
{
	kvm_set_phys_mem(start_addr, size, phys_offset);
}

static int kvm_client_sync_dirty_bitmap(struct CPUPhysMemoryClient *client,
					target_phys_addr_t start_addr,
					target_phys_addr_t end_addr)
{
	return kvm_physical_sync_dirty_bitmap(start_addr, end_addr);
}

static int kvm_client_migration_log(struct CPUPhysMemoryClient *client,
				    int enable)
{
	return kvm_set_migration_log(enable);
}

static CPUPhysMemoryClient kvm_cpu_phys_memory_client = {
	.set_memory = kvm_client_set_memory,
	.sync_dirty_bitmap = kvm_client_sync_dirty_bitmap,
	.migration_log = kvm_client_migration_log,
};

A
aliguori 已提交
571 572
int kvm_init(int smp_cpus)
{
573 574 575
    static const char upgrade_note[] =
        "Please upgrade to at least kernel 2.6.29 or recent kvm-kmod\n"
        "(see http://sourceforge.net/projects/kvm).\n";
A
aliguori 已提交
576 577 578 579
    KVMState *s;
    int ret;
    int i;

580 581
    if (smp_cpus > 1) {
        fprintf(stderr, "No SMP KVM support, use '-smp 1'\n");
A
aliguori 已提交
582
        return -EINVAL;
583
    }
A
aliguori 已提交
584 585 586

    s = qemu_mallocz(sizeof(KVMState));

587
#ifdef KVM_CAP_SET_GUEST_DEBUG
B
Blue Swirl 已提交
588
    QTAILQ_INIT(&s->kvm_sw_breakpoints);
589
#endif
A
aliguori 已提交
590 591 592 593
    for (i = 0; i < ARRAY_SIZE(s->slots); i++)
        s->slots[i].slot = i;

    s->vmfd = -1;
K
Kevin Wolf 已提交
594
    s->fd = qemu_open("/dev/kvm", O_RDWR);
A
aliguori 已提交
595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620
    if (s->fd == -1) {
        fprintf(stderr, "Could not access KVM kernel module: %m\n");
        ret = -errno;
        goto err;
    }

    ret = kvm_ioctl(s, KVM_GET_API_VERSION, 0);
    if (ret < KVM_API_VERSION) {
        if (ret > 0)
            ret = -EINVAL;
        fprintf(stderr, "kvm version too old\n");
        goto err;
    }

    if (ret > KVM_API_VERSION) {
        ret = -EINVAL;
        fprintf(stderr, "kvm version not supported\n");
        goto err;
    }

    s->vmfd = kvm_ioctl(s, KVM_CREATE_VM, 0);
    if (s->vmfd < 0)
        goto err;

    /* initially, KVM allocated its own memory and we had to jump through
     * hooks to make phys_ram_base point to this.  Modern versions of KVM
P
pbrook 已提交
621
     * just use a user allocated buffer so we can use regular pages
A
aliguori 已提交
622 623
     * unmodified.  Make sure we have a sufficiently modern version of KVM.
     */
624 625
    if (!kvm_check_extension(s, KVM_CAP_USER_MEMORY)) {
        ret = -EINVAL;
626 627
        fprintf(stderr, "kvm does not support KVM_CAP_USER_MEMORY\n%s",
                upgrade_note);
A
aliguori 已提交
628 629 630
        goto err;
    }

631 632 633
    /* There was a nasty bug in < kvm-80 that prevents memory slots from being
     * destroyed properly.  Since we rely on this capability, refuse to work
     * with any kernel without this capability. */
634 635
    if (!kvm_check_extension(s, KVM_CAP_DESTROY_MEMORY_REGION_WORKS)) {
        ret = -EINVAL;
636 637

        fprintf(stderr,
638 639
                "KVM kernel module broken (DESTROY_MEMORY_REGION).\n%s",
                upgrade_note);
640 641 642
        goto err;
    }

643
    s->coalesced_mmio = 0;
A
aliguori 已提交
644
#ifdef KVM_CAP_COALESCED_MMIO
645
    s->coalesced_mmio = kvm_check_extension(s, KVM_CAP_COALESCED_MMIO);
646
    s->coalesced_mmio_ring = NULL;
A
aliguori 已提交
647 648
#endif

649 650 651 652 653 654 655 656
    s->broken_set_mem_region = 1;
#ifdef KVM_CAP_JOIN_MEMORY_REGIONS_WORKS
    ret = kvm_ioctl(s, KVM_CHECK_EXTENSION, KVM_CAP_JOIN_MEMORY_REGIONS_WORKS);
    if (ret > 0) {
        s->broken_set_mem_region = 0;
    }
#endif

657 658 659 660 661
    s->vcpu_events = 0;
#ifdef KVM_CAP_VCPU_EVENTS
    s->vcpu_events = kvm_check_extension(s, KVM_CAP_VCPU_EVENTS);
#endif

A
aliguori 已提交
662 663 664 665 666
    ret = kvm_arch_init(s, smp_cpus);
    if (ret < 0)
        goto err;

    kvm_state = s;
667
    cpu_register_phys_memory_client(&kvm_cpu_phys_memory_client);
A
aliguori 已提交
668 669 670 671 672 673 674 675 676 677 678 679 680 681 682

    return 0;

err:
    if (s) {
        if (s->vmfd != -1)
            close(s->vmfd);
        if (s->fd != -1)
            close(s->fd);
    }
    qemu_free(s);

    return ret;
}

683 684
static int kvm_handle_io(uint16_t port, void *data, int direction, int size,
                         uint32_t count)
A
aliguori 已提交
685 686 687 688 689 690 691 692
{
    int i;
    uint8_t *ptr = data;

    for (i = 0; i < count; i++) {
        if (direction == KVM_EXIT_IO_IN) {
            switch (size) {
            case 1:
693
                stb_p(ptr, cpu_inb(port));
A
aliguori 已提交
694 695
                break;
            case 2:
696
                stw_p(ptr, cpu_inw(port));
A
aliguori 已提交
697 698
                break;
            case 4:
699
                stl_p(ptr, cpu_inl(port));
A
aliguori 已提交
700 701 702 703 704
                break;
            }
        } else {
            switch (size) {
            case 1:
705
                cpu_outb(port, ldub_p(ptr));
A
aliguori 已提交
706 707
                break;
            case 2:
708
                cpu_outw(port, lduw_p(ptr));
A
aliguori 已提交
709 710
                break;
            case 4:
711
                cpu_outl(port, ldl_p(ptr));
A
aliguori 已提交
712 713 714 715 716 717 718 719 720 721
                break;
            }
        }

        ptr += size;
    }

    return 1;
}

722
void kvm_flush_coalesced_mmio_buffer(void)
A
aliguori 已提交
723 724 725
{
#ifdef KVM_CAP_COALESCED_MMIO
    KVMState *s = kvm_state;
726 727
    if (s->coalesced_mmio_ring) {
        struct kvm_coalesced_mmio_ring *ring = s->coalesced_mmio_ring;
A
aliguori 已提交
728 729 730 731 732 733
        while (ring->first != ring->last) {
            struct kvm_coalesced_mmio *ent;

            ent = &ring->coalesced_mmio[ring->first];

            cpu_physical_memory_write(ent->phys_addr, ent->data, ent->len);
734
            smp_wmb();
A
aliguori 已提交
735 736 737 738 739 740
            ring->first = (ring->first + 1) % KVM_COALESCED_MMIO_MAX;
        }
    }
#endif
}

741 742
void kvm_cpu_synchronize_state(CPUState *env)
{
J
Jan Kiszka 已提交
743
    if (!env->kvm_vcpu_dirty) {
744
        kvm_arch_get_registers(env);
J
Jan Kiszka 已提交
745
        env->kvm_vcpu_dirty = 1;
746 747 748
    }
}

A
aliguori 已提交
749 750 751 752 753 754 755 756
int kvm_cpu_exec(CPUState *env)
{
    struct kvm_run *run = env->kvm_run;
    int ret;

    dprintf("kvm_cpu_exec()\n");

    do {
757
#ifndef CONFIG_IOTHREAD
758
        if (env->exit_request) {
A
aliguori 已提交
759 760 761 762
            dprintf("interrupt exit requested\n");
            ret = 0;
            break;
        }
763
#endif
A
aliguori 已提交
764

J
Jan Kiszka 已提交
765
        if (env->kvm_vcpu_dirty) {
766
            kvm_arch_put_registers(env);
J
Jan Kiszka 已提交
767
            env->kvm_vcpu_dirty = 0;
768 769
        }

770
        kvm_arch_pre_run(env, run);
771
        qemu_mutex_unlock_iothread();
A
aliguori 已提交
772
        ret = kvm_vcpu_ioctl(env, KVM_RUN, 0);
773
        qemu_mutex_lock_iothread();
A
aliguori 已提交
774 775 776
        kvm_arch_post_run(env, run);

        if (ret == -EINTR || ret == -EAGAIN) {
777
            cpu_exit(env);
A
aliguori 已提交
778 779 780 781 782 783 784 785 786 787
            dprintf("io window exit\n");
            ret = 0;
            break;
        }

        if (ret < 0) {
            dprintf("kvm run failed %s\n", strerror(-ret));
            abort();
        }

788
        kvm_flush_coalesced_mmio_buffer();
A
aliguori 已提交
789

A
aliguori 已提交
790 791 792 793
        ret = 0; /* exit loop */
        switch (run->exit_reason) {
        case KVM_EXIT_IO:
            dprintf("handle_io\n");
794
            ret = kvm_handle_io(run->io.port,
A
aliguori 已提交
795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826
                                (uint8_t *)run + run->io.data_offset,
                                run->io.direction,
                                run->io.size,
                                run->io.count);
            break;
        case KVM_EXIT_MMIO:
            dprintf("handle_mmio\n");
            cpu_physical_memory_rw(run->mmio.phys_addr,
                                   run->mmio.data,
                                   run->mmio.len,
                                   run->mmio.is_write);
            ret = 1;
            break;
        case KVM_EXIT_IRQ_WINDOW_OPEN:
            dprintf("irq_window_open\n");
            break;
        case KVM_EXIT_SHUTDOWN:
            dprintf("shutdown\n");
            qemu_system_reset_request();
            ret = 1;
            break;
        case KVM_EXIT_UNKNOWN:
            dprintf("kvm_exit_unknown\n");
            break;
        case KVM_EXIT_FAIL_ENTRY:
            dprintf("kvm_exit_fail_entry\n");
            break;
        case KVM_EXIT_EXCEPTION:
            dprintf("kvm_exit_exception\n");
            break;
        case KVM_EXIT_DEBUG:
            dprintf("kvm_exit_debug\n");
827 828 829 830 831 832 833 834 835 836
#ifdef KVM_CAP_SET_GUEST_DEBUG
            if (kvm_arch_debug(&run->debug.arch)) {
                gdb_set_stop_cpu(env);
                vm_stop(EXCP_DEBUG);
                env->exception_index = EXCP_DEBUG;
                return 0;
            }
            /* re-enter, this exception was guest-internal */
            ret = 1;
#endif /* KVM_CAP_SET_GUEST_DEBUG */
A
aliguori 已提交
837 838 839 840 841 842 843 844
            break;
        default:
            dprintf("kvm_arch_handle_exit\n");
            ret = kvm_arch_handle_exit(env, run);
            break;
        }
    } while (ret > 0);

845 846
    if (env->exit_request) {
        env->exit_request = 0;
A
aliguori 已提交
847 848 849
        env->exception_index = EXCP_INTERRUPT;
    }

A
aliguori 已提交
850 851 852
    return ret;
}

853
int kvm_ioctl(KVMState *s, int type, ...)
A
aliguori 已提交
854 855
{
    int ret;
856 857
    void *arg;
    va_list ap;
A
aliguori 已提交
858

859 860 861 862 863
    va_start(ap, type);
    arg = va_arg(ap, void *);
    va_end(ap);

    ret = ioctl(s->fd, type, arg);
A
aliguori 已提交
864 865 866 867 868 869
    if (ret == -1)
        ret = -errno;

    return ret;
}

870
int kvm_vm_ioctl(KVMState *s, int type, ...)
A
aliguori 已提交
871 872
{
    int ret;
873 874 875 876 877 878
    void *arg;
    va_list ap;

    va_start(ap, type);
    arg = va_arg(ap, void *);
    va_end(ap);
A
aliguori 已提交
879

880
    ret = ioctl(s->vmfd, type, arg);
A
aliguori 已提交
881 882 883 884 885 886
    if (ret == -1)
        ret = -errno;

    return ret;
}

887
int kvm_vcpu_ioctl(CPUState *env, int type, ...)
A
aliguori 已提交
888 889
{
    int ret;
890 891 892 893 894 895
    void *arg;
    va_list ap;

    va_start(ap, type);
    arg = va_arg(ap, void *);
    va_end(ap);
A
aliguori 已提交
896

897
    ret = ioctl(env->kvm_fd, type, arg);
A
aliguori 已提交
898 899 900 901 902
    if (ret == -1)
        ret = -errno;

    return ret;
}
A
aliguori 已提交
903 904 905

int kvm_has_sync_mmu(void)
{
A
aurel32 已提交
906
#ifdef KVM_CAP_SYNC_MMU
A
aliguori 已提交
907 908
    KVMState *s = kvm_state;

909 910
    return kvm_check_extension(s, KVM_CAP_SYNC_MMU);
#else
A
aliguori 已提交
911
    return 0;
912
#endif
A
aliguori 已提交
913
}
914

915 916 917 918 919
int kvm_has_vcpu_events(void)
{
    return kvm_state->vcpu_events;
}

920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937
void kvm_setup_guest_memory(void *start, size_t size)
{
    if (!kvm_has_sync_mmu()) {
#ifdef MADV_DONTFORK
        int ret = madvise(start, size, MADV_DONTFORK);

        if (ret) {
            perror("madvice");
            exit(1);
        }
#else
        fprintf(stderr,
                "Need MADV_DONTFORK in absence of synchronous KVM MMU\n");
        exit(1);
#endif
    }
}

938
#ifdef KVM_CAP_SET_GUEST_DEBUG
L
Luiz Capitulino 已提交
939 940
static void on_vcpu(CPUState *env, void (*func)(void *data), void *data)
{
G
Glauber Costa 已提交
941
#ifdef CONFIG_IOTHREAD
942 943
    if (env != cpu_single_env) {
        abort();
L
Luiz Capitulino 已提交
944
    }
G
Glauber Costa 已提交
945
#endif
946
    func(data);
L
Luiz Capitulino 已提交
947 948
}

949 950 951 952 953
struct kvm_sw_breakpoint *kvm_find_sw_breakpoint(CPUState *env,
                                                 target_ulong pc)
{
    struct kvm_sw_breakpoint *bp;

B
Blue Swirl 已提交
954
    QTAILQ_FOREACH(bp, &env->kvm_state->kvm_sw_breakpoints, entry) {
955 956 957 958 959 960 961 962
        if (bp->pc == pc)
            return bp;
    }
    return NULL;
}

int kvm_sw_breakpoints_active(CPUState *env)
{
B
Blue Swirl 已提交
963
    return !QTAILQ_EMPTY(&env->kvm_state->kvm_sw_breakpoints);
964 965
}

G
Glauber Costa 已提交
966 967 968 969 970 971 972 973 974
struct kvm_set_guest_debug_data {
    struct kvm_guest_debug dbg;
    CPUState *env;
    int err;
};

static void kvm_invoke_set_guest_debug(void *data)
{
    struct kvm_set_guest_debug_data *dbg_data = data;
J
Jan Kiszka 已提交
975 976
    CPUState *env = dbg_data->env;

J
Jan Kiszka 已提交
977
    if (env->kvm_vcpu_dirty) {
J
Jan Kiszka 已提交
978
        kvm_arch_put_registers(env);
J
Jan Kiszka 已提交
979
        env->kvm_vcpu_dirty = 0;
J
Jan Kiszka 已提交
980 981
    }
    dbg_data->err = kvm_vcpu_ioctl(env, KVM_SET_GUEST_DEBUG, &dbg_data->dbg);
G
Glauber Costa 已提交
982 983
}

984 985
int kvm_update_guest_debug(CPUState *env, unsigned long reinject_trap)
{
G
Glauber Costa 已提交
986
    struct kvm_set_guest_debug_data data;
987

G
Glauber Costa 已提交
988
    data.dbg.control = 0;
989
    if (env->singlestep_enabled)
G
Glauber Costa 已提交
990
        data.dbg.control = KVM_GUESTDBG_ENABLE | KVM_GUESTDBG_SINGLESTEP;
991

G
Glauber Costa 已提交
992 993 994
    kvm_arch_update_guest_debug(env, &data.dbg);
    data.dbg.control |= reinject_trap;
    data.env = env;
995

G
Glauber Costa 已提交
996 997
    on_vcpu(env, kvm_invoke_set_guest_debug, &data);
    return data.err;
998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025
}

int kvm_insert_breakpoint(CPUState *current_env, target_ulong addr,
                          target_ulong len, int type)
{
    struct kvm_sw_breakpoint *bp;
    CPUState *env;
    int err;

    if (type == GDB_BREAKPOINT_SW) {
        bp = kvm_find_sw_breakpoint(current_env, addr);
        if (bp) {
            bp->use_count++;
            return 0;
        }

        bp = qemu_malloc(sizeof(struct kvm_sw_breakpoint));
        if (!bp)
            return -ENOMEM;

        bp->pc = addr;
        bp->use_count = 1;
        err = kvm_arch_insert_sw_breakpoint(current_env, bp);
        if (err) {
            free(bp);
            return err;
        }

B
Blue Swirl 已提交
1026
        QTAILQ_INSERT_HEAD(&current_env->kvm_state->kvm_sw_breakpoints,
1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062
                          bp, entry);
    } else {
        err = kvm_arch_insert_hw_breakpoint(addr, len, type);
        if (err)
            return err;
    }

    for (env = first_cpu; env != NULL; env = env->next_cpu) {
        err = kvm_update_guest_debug(env, 0);
        if (err)
            return err;
    }
    return 0;
}

int kvm_remove_breakpoint(CPUState *current_env, target_ulong addr,
                          target_ulong len, int type)
{
    struct kvm_sw_breakpoint *bp;
    CPUState *env;
    int err;

    if (type == GDB_BREAKPOINT_SW) {
        bp = kvm_find_sw_breakpoint(current_env, addr);
        if (!bp)
            return -ENOENT;

        if (bp->use_count > 1) {
            bp->use_count--;
            return 0;
        }

        err = kvm_arch_remove_sw_breakpoint(current_env, bp);
        if (err)
            return err;

B
Blue Swirl 已提交
1063
        QTAILQ_REMOVE(&current_env->kvm_state->kvm_sw_breakpoints, bp, entry);
1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084
        qemu_free(bp);
    } else {
        err = kvm_arch_remove_hw_breakpoint(addr, len, type);
        if (err)
            return err;
    }

    for (env = first_cpu; env != NULL; env = env->next_cpu) {
        err = kvm_update_guest_debug(env, 0);
        if (err)
            return err;
    }
    return 0;
}

void kvm_remove_all_breakpoints(CPUState *current_env)
{
    struct kvm_sw_breakpoint *bp, *next;
    KVMState *s = current_env->kvm_state;
    CPUState *env;

B
Blue Swirl 已提交
1085
    QTAILQ_FOREACH_SAFE(bp, &s->kvm_sw_breakpoints, entry, next) {
1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122
        if (kvm_arch_remove_sw_breakpoint(current_env, bp) != 0) {
            /* Try harder to find a CPU that currently sees the breakpoint. */
            for (env = first_cpu; env != NULL; env = env->next_cpu) {
                if (kvm_arch_remove_sw_breakpoint(env, bp) == 0)
                    break;
            }
        }
    }
    kvm_arch_remove_all_hw_breakpoints();

    for (env = first_cpu; env != NULL; env = env->next_cpu)
        kvm_update_guest_debug(env, 0);
}

#else /* !KVM_CAP_SET_GUEST_DEBUG */

int kvm_update_guest_debug(CPUState *env, unsigned long reinject_trap)
{
    return -EINVAL;
}

int kvm_insert_breakpoint(CPUState *current_env, target_ulong addr,
                          target_ulong len, int type)
{
    return -EINVAL;
}

int kvm_remove_breakpoint(CPUState *current_env, target_ulong addr,
                          target_ulong len, int type)
{
    return -EINVAL;
}

void kvm_remove_all_breakpoints(CPUState *current_env)
{
}
#endif /* !KVM_CAP_SET_GUEST_DEBUG */
1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140

int kvm_set_signal_mask(CPUState *env, const sigset_t *sigset)
{
    struct kvm_signal_mask *sigmask;
    int r;

    if (!sigset)
        return kvm_vcpu_ioctl(env, KVM_SET_SIGNAL_MASK, NULL);

    sigmask = qemu_malloc(sizeof(*sigmask) + sizeof(*sigset));

    sigmask->len = 8;
    memcpy(sigmask->sigset, sigset, sizeof(*sigset));
    r = kvm_vcpu_ioctl(env, KVM_SET_SIGNAL_MASK, sigmask);
    free(sigmask);

    return r;
}