kvm-all.c 28.3 KB
Newer Older
A
aliguori 已提交
1 2 3 4
/*
 * QEMU KVM support
 *
 * Copyright IBM, Corp. 2008
5
 *           Red Hat, Inc. 2008
A
aliguori 已提交
6 7 8
 *
 * Authors:
 *  Anthony Liguori   <aliguori@us.ibm.com>
9
 *  Glauber Costa     <gcosta@redhat.com>
A
aliguori 已提交
10 11 12 13 14 15 16 17 18
 *
 * This work is licensed under the terms of the GNU GPL, version 2 or later.
 * See the COPYING file in the top-level directory.
 *
 */

#include <sys/types.h>
#include <sys/ioctl.h>
#include <sys/mman.h>
19
#include <stdarg.h>
A
aliguori 已提交
20 21 22 23 24

#include <linux/kvm.h>

#include "qemu-common.h"
#include "sysemu.h"
J
Jan Kiszka 已提交
25
#include "hw/hw.h"
26
#include "gdbstub.h"
A
aliguori 已提交
27 28
#include "kvm.h"

A
aliguori 已提交
29 30 31
/* KVM uses PAGE_SIZE in it's definition of COALESCED_MMIO_MAX */
#define PAGE_SIZE TARGET_PAGE_SIZE

A
aliguori 已提交
32 33 34 35 36 37 38 39 40 41
//#define DEBUG_KVM

#ifdef DEBUG_KVM
#define dprintf(fmt, ...) \
    do { fprintf(stderr, fmt, ## __VA_ARGS__); } while (0)
#else
#define dprintf(fmt, ...) \
    do { } while (0)
#endif

A
aliguori 已提交
42 43
typedef struct KVMSlot
{
A
Anthony Liguori 已提交
44 45 46
    target_phys_addr_t start_addr;
    ram_addr_t memory_size;
    ram_addr_t phys_offset;
A
aliguori 已提交
47 48 49
    int slot;
    int flags;
} KVMSlot;
A
aliguori 已提交
50

51 52
typedef struct kvm_dirty_log KVMDirtyLog;

A
aliguori 已提交
53 54 55 56 57 58 59
int kvm_allowed = 0;

struct KVMState
{
    KVMSlot slots[32];
    int fd;
    int vmfd;
A
aliguori 已提交
60
    int coalesced_mmio;
61 62 63
#ifdef KVM_CAP_COALESCED_MMIO
    struct kvm_coalesced_mmio_ring *coalesced_mmio_ring;
#endif
64
    int broken_set_mem_region;
65
    int migration_log;
66
    int vcpu_events;
67 68 69
#ifdef KVM_CAP_SET_GUEST_DEBUG
    struct kvm_sw_breakpoint_head kvm_sw_breakpoints;
#endif
70 71
    int irqchip_in_kernel;
    int pit_in_kernel;
A
aliguori 已提交
72 73 74 75 76 77 78 79 80
};

static KVMState *kvm_state;

static KVMSlot *kvm_alloc_slot(KVMState *s)
{
    int i;

    for (i = 0; i < ARRAY_SIZE(s->slots); i++) {
A
aliguori 已提交
81 82 83
        /* KVM private memory slots */
        if (i >= 8 && i < 12)
            continue;
A
aliguori 已提交
84 85 86 87
        if (s->slots[i].memory_size == 0)
            return &s->slots[i];
    }

88 89 90 91 92
    fprintf(stderr, "%s: no free slot available\n", __func__);
    abort();
}

static KVMSlot *kvm_lookup_matching_slot(KVMState *s,
A
Anthony Liguori 已提交
93 94
                                         target_phys_addr_t start_addr,
                                         target_phys_addr_t end_addr)
95 96 97 98 99 100 101 102 103 104 105 106
{
    int i;

    for (i = 0; i < ARRAY_SIZE(s->slots); i++) {
        KVMSlot *mem = &s->slots[i];

        if (start_addr == mem->start_addr &&
            end_addr == mem->start_addr + mem->memory_size) {
            return mem;
        }
    }

A
aliguori 已提交
107 108 109
    return NULL;
}

110 111 112 113
/*
 * Find overlapping slot with lowest start address
 */
static KVMSlot *kvm_lookup_overlapping_slot(KVMState *s,
A
Anthony Liguori 已提交
114 115
                                            target_phys_addr_t start_addr,
                                            target_phys_addr_t end_addr)
A
aliguori 已提交
116
{
117
    KVMSlot *found = NULL;
A
aliguori 已提交
118 119 120 121 122
    int i;

    for (i = 0; i < ARRAY_SIZE(s->slots); i++) {
        KVMSlot *mem = &s->slots[i];

123 124 125 126 127 128 129 130 131
        if (mem->memory_size == 0 ||
            (found && found->start_addr < mem->start_addr)) {
            continue;
        }

        if (end_addr > mem->start_addr &&
            start_addr < mem->start_addr + mem->memory_size) {
            found = mem;
        }
A
aliguori 已提交
132 133
    }

134
    return found;
A
aliguori 已提交
135 136
}

137 138 139 140 141 142 143
static int kvm_set_user_memory_region(KVMState *s, KVMSlot *slot)
{
    struct kvm_userspace_memory_region mem;

    mem.slot = slot->slot;
    mem.guest_phys_addr = slot->start_addr;
    mem.memory_size = slot->memory_size;
P
pbrook 已提交
144
    mem.userspace_addr = (unsigned long)qemu_get_ram_ptr(slot->phys_offset);
145
    mem.flags = slot->flags;
146 147 148
    if (s->migration_log) {
        mem.flags |= KVM_MEM_LOG_DIRTY_PAGES;
    }
149 150 151
    return kvm_vm_ioctl(s, KVM_SET_USER_MEMORY_REGION, &mem);
}

J
Jan Kiszka 已提交
152 153 154 155
static void kvm_reset_vcpu(void *opaque)
{
    CPUState *env = opaque;

J
Jan Kiszka 已提交
156
    kvm_arch_reset_vcpu(env);
J
Jan Kiszka 已提交
157 158 159 160 161
    if (kvm_arch_put_registers(env)) {
        fprintf(stderr, "Fatal: kvm vcpu reset failed\n");
        abort();
    }
}
162

163 164 165 166 167 168 169 170 171 172 173
int kvm_irqchip_in_kernel(void)
{
    return kvm_state->irqchip_in_kernel;
}

int kvm_pit_in_kernel(void)
{
    return kvm_state->pit_in_kernel;
}


A
aliguori 已提交
174 175 176 177 178 179 180 181
int kvm_init_vcpu(CPUState *env)
{
    KVMState *s = kvm_state;
    long mmap_size;
    int ret;

    dprintf("kvm_init_vcpu\n");

182
    ret = kvm_vm_ioctl(s, KVM_CREATE_VCPU, env->cpu_index);
A
aliguori 已提交
183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204
    if (ret < 0) {
        dprintf("kvm_create_vcpu failed\n");
        goto err;
    }

    env->kvm_fd = ret;
    env->kvm_state = s;

    mmap_size = kvm_ioctl(s, KVM_GET_VCPU_MMAP_SIZE, 0);
    if (mmap_size < 0) {
        dprintf("KVM_GET_VCPU_MMAP_SIZE failed\n");
        goto err;
    }

    env->kvm_run = mmap(NULL, mmap_size, PROT_READ | PROT_WRITE, MAP_SHARED,
                        env->kvm_fd, 0);
    if (env->kvm_run == MAP_FAILED) {
        ret = -errno;
        dprintf("mmap'ing vcpu state failed\n");
        goto err;
    }

205 206 207 208 209 210
#ifdef KVM_CAP_COALESCED_MMIO
    if (s->coalesced_mmio && !s->coalesced_mmio_ring)
        s->coalesced_mmio_ring = (void *) env->kvm_run +
		s->coalesced_mmio * PAGE_SIZE;
#endif

A
aliguori 已提交
211
    ret = kvm_arch_init_vcpu(env);
J
Jan Kiszka 已提交
212
    if (ret == 0) {
213
        qemu_register_reset(kvm_reset_vcpu, env);
J
Jan Kiszka 已提交
214
        kvm_arch_reset_vcpu(env);
J
Jan Kiszka 已提交
215 216
        ret = kvm_arch_put_registers(env);
    }
A
aliguori 已提交
217 218 219 220
err:
    return ret;
}

221 222 223
/*
 * dirty pages logging control
 */
A
Anthony Liguori 已提交
224 225
static int kvm_dirty_pages_log_change(target_phys_addr_t phys_addr,
                                      ram_addr_t size, int flags, int mask)
226 227
{
    KVMState *s = kvm_state;
228
    KVMSlot *mem = kvm_lookup_matching_slot(s, phys_addr, phys_addr + size);
229 230
    int old_flags;

231
    if (mem == NULL)  {
232 233
            fprintf(stderr, "BUG: %s: invalid parameters " TARGET_FMT_plx "-"
                    TARGET_FMT_plx "\n", __func__, phys_addr,
A
Anthony Liguori 已提交
234
                    (target_phys_addr_t)(phys_addr + size - 1));
235 236 237
            return -EINVAL;
    }

238
    old_flags = mem->flags;
239

240
    flags = (mem->flags & ~mask) | flags;
241 242
    mem->flags = flags;

243 244 245 246 247 248 249 250
    /* If nothing changed effectively, no need to issue ioctl */
    if (s->migration_log) {
        flags |= KVM_MEM_LOG_DIRTY_PAGES;
    }
    if (flags == old_flags) {
            return 0;
    }

251 252 253
    return kvm_set_user_memory_region(s, mem);
}

A
Anthony Liguori 已提交
254
int kvm_log_start(target_phys_addr_t phys_addr, ram_addr_t size)
255
{
256
        return kvm_dirty_pages_log_change(phys_addr, size,
257 258 259 260
                                          KVM_MEM_LOG_DIRTY_PAGES,
                                          KVM_MEM_LOG_DIRTY_PAGES);
}

A
Anthony Liguori 已提交
261
int kvm_log_stop(target_phys_addr_t phys_addr, ram_addr_t size)
262
{
263
        return kvm_dirty_pages_log_change(phys_addr, size,
264 265 266 267
                                          0,
                                          KVM_MEM_LOG_DIRTY_PAGES);
}

268
static int kvm_set_migration_log(int enable)
269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289
{
    KVMState *s = kvm_state;
    KVMSlot *mem;
    int i, err;

    s->migration_log = enable;

    for (i = 0; i < ARRAY_SIZE(s->slots); i++) {
        mem = &s->slots[i];

        if (!!(mem->flags & KVM_MEM_LOG_DIRTY_PAGES) == enable) {
            continue;
        }
        err = kvm_set_user_memory_region(s, mem);
        if (err) {
            return err;
        }
    }
    return 0;
}

A
Alexander Graf 已提交
290 291 292 293 294
static int test_le_bit(unsigned long nr, unsigned char *addr)
{
    return (addr[nr >> 3] >> (nr & 7)) & 1;
}

295 296 297 298 299
/**
 * kvm_physical_sync_dirty_bitmap - Grab dirty bitmap from kernel space
 * This function updates qemu's dirty bitmap using cpu_physical_memory_set_dirty().
 * This means all bits are set to dirty.
 *
300
 * @start_add: start of logged region.
301 302
 * @end_addr: end of logged region.
 */
303 304
static int kvm_physical_sync_dirty_bitmap(target_phys_addr_t start_addr,
					  target_phys_addr_t end_addr)
305 306
{
    KVMState *s = kvm_state;
307
    unsigned long size, allocated_size = 0;
A
Anthony Liguori 已提交
308 309
    target_phys_addr_t phys_addr;
    ram_addr_t addr;
310 311 312
    KVMDirtyLog d;
    KVMSlot *mem;
    int ret = 0;
313

314 315 316 317 318 319
    d.dirty_bitmap = NULL;
    while (start_addr < end_addr) {
        mem = kvm_lookup_overlapping_slot(s, start_addr, end_addr);
        if (mem == NULL) {
            break;
        }
320

321 322 323 324 325 326 327 328
        size = ((mem->memory_size >> TARGET_PAGE_BITS) + 7) / 8;
        if (!d.dirty_bitmap) {
            d.dirty_bitmap = qemu_malloc(size);
        } else if (size > allocated_size) {
            d.dirty_bitmap = qemu_realloc(d.dirty_bitmap, size);
        }
        allocated_size = size;
        memset(d.dirty_bitmap, 0, allocated_size);
329

330
        d.slot = mem->slot;
331

332
        if (kvm_vm_ioctl(s, KVM_GET_DIRTY_LOG, &d) == -1) {
333 334 335 336
            dprintf("ioctl failed %d\n", errno);
            ret = -1;
            break;
        }
337

338 339 340
        for (phys_addr = mem->start_addr, addr = mem->phys_offset;
             phys_addr < mem->start_addr + mem->memory_size;
             phys_addr += TARGET_PAGE_SIZE, addr += TARGET_PAGE_SIZE) {
A
Alexander Graf 已提交
341
            unsigned char *bitmap = (unsigned char *)d.dirty_bitmap;
342 343
            unsigned nr = (phys_addr - mem->start_addr) >> TARGET_PAGE_BITS;

A
Alexander Graf 已提交
344
            if (test_le_bit(nr, bitmap)) {
345 346 347 348
                cpu_physical_memory_set_dirty(addr);
            }
        }
        start_addr = phys_addr;
349 350
    }
    qemu_free(d.dirty_bitmap);
351 352

    return ret;
353 354
}

A
Anthony Liguori 已提交
355
int kvm_coalesce_mmio_region(target_phys_addr_t start, ram_addr_t size)
A
aliguori 已提交
356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373
{
    int ret = -ENOSYS;
#ifdef KVM_CAP_COALESCED_MMIO
    KVMState *s = kvm_state;

    if (s->coalesced_mmio) {
        struct kvm_coalesced_mmio_zone zone;

        zone.addr = start;
        zone.size = size;

        ret = kvm_vm_ioctl(s, KVM_REGISTER_COALESCED_MMIO, &zone);
    }
#endif

    return ret;
}

A
Anthony Liguori 已提交
374
int kvm_uncoalesce_mmio_region(target_phys_addr_t start, ram_addr_t size)
A
aliguori 已提交
375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392
{
    int ret = -ENOSYS;
#ifdef KVM_CAP_COALESCED_MMIO
    KVMState *s = kvm_state;

    if (s->coalesced_mmio) {
        struct kvm_coalesced_mmio_zone zone;

        zone.addr = start;
        zone.size = size;

        ret = kvm_vm_ioctl(s, KVM_UNREGISTER_COALESCED_MMIO, &zone);
    }
#endif

    return ret;
}

393 394 395 396 397 398 399 400 401 402 403 404
int kvm_check_extension(KVMState *s, unsigned int extension)
{
    int ret;

    ret = kvm_ioctl(s, KVM_CHECK_EXTENSION, extension);
    if (ret < 0) {
        ret = 0;
    }

    return ret;
}

405 406 407
static void kvm_set_phys_mem(target_phys_addr_t start_addr,
			     ram_addr_t size,
			     ram_addr_t phys_offset)
408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542
{
    KVMState *s = kvm_state;
    ram_addr_t flags = phys_offset & ~TARGET_PAGE_MASK;
    KVMSlot *mem, old;
    int err;

    if (start_addr & ~TARGET_PAGE_MASK) {
        if (flags >= IO_MEM_UNASSIGNED) {
            if (!kvm_lookup_overlapping_slot(s, start_addr,
                                             start_addr + size)) {
                return;
            }
            fprintf(stderr, "Unaligned split of a KVM memory slot\n");
        } else {
            fprintf(stderr, "Only page-aligned memory slots supported\n");
        }
        abort();
    }

    /* KVM does not support read-only slots */
    phys_offset &= ~IO_MEM_ROM;

    while (1) {
        mem = kvm_lookup_overlapping_slot(s, start_addr, start_addr + size);
        if (!mem) {
            break;
        }

        if (flags < IO_MEM_UNASSIGNED && start_addr >= mem->start_addr &&
            (start_addr + size <= mem->start_addr + mem->memory_size) &&
            (phys_offset - start_addr == mem->phys_offset - mem->start_addr)) {
            /* The new slot fits into the existing one and comes with
             * identical parameters - nothing to be done. */
            return;
        }

        old = *mem;

        /* unregister the overlapping slot */
        mem->memory_size = 0;
        err = kvm_set_user_memory_region(s, mem);
        if (err) {
            fprintf(stderr, "%s: error unregistering overlapping slot: %s\n",
                    __func__, strerror(-err));
            abort();
        }

        /* Workaround for older KVM versions: we can't join slots, even not by
         * unregistering the previous ones and then registering the larger
         * slot. We have to maintain the existing fragmentation. Sigh.
         *
         * This workaround assumes that the new slot starts at the same
         * address as the first existing one. If not or if some overlapping
         * slot comes around later, we will fail (not seen in practice so far)
         * - and actually require a recent KVM version. */
        if (s->broken_set_mem_region &&
            old.start_addr == start_addr && old.memory_size < size &&
            flags < IO_MEM_UNASSIGNED) {
            mem = kvm_alloc_slot(s);
            mem->memory_size = old.memory_size;
            mem->start_addr = old.start_addr;
            mem->phys_offset = old.phys_offset;
            mem->flags = 0;

            err = kvm_set_user_memory_region(s, mem);
            if (err) {
                fprintf(stderr, "%s: error updating slot: %s\n", __func__,
                        strerror(-err));
                abort();
            }

            start_addr += old.memory_size;
            phys_offset += old.memory_size;
            size -= old.memory_size;
            continue;
        }

        /* register prefix slot */
        if (old.start_addr < start_addr) {
            mem = kvm_alloc_slot(s);
            mem->memory_size = start_addr - old.start_addr;
            mem->start_addr = old.start_addr;
            mem->phys_offset = old.phys_offset;
            mem->flags = 0;

            err = kvm_set_user_memory_region(s, mem);
            if (err) {
                fprintf(stderr, "%s: error registering prefix slot: %s\n",
                        __func__, strerror(-err));
                abort();
            }
        }

        /* register suffix slot */
        if (old.start_addr + old.memory_size > start_addr + size) {
            ram_addr_t size_delta;

            mem = kvm_alloc_slot(s);
            mem->start_addr = start_addr + size;
            size_delta = mem->start_addr - old.start_addr;
            mem->memory_size = old.memory_size - size_delta;
            mem->phys_offset = old.phys_offset + size_delta;
            mem->flags = 0;

            err = kvm_set_user_memory_region(s, mem);
            if (err) {
                fprintf(stderr, "%s: error registering suffix slot: %s\n",
                        __func__, strerror(-err));
                abort();
            }
        }
    }

    /* in case the KVM bug workaround already "consumed" the new slot */
    if (!size)
        return;

    /* KVM does not need to know about this memory */
    if (flags >= IO_MEM_UNASSIGNED)
        return;

    mem = kvm_alloc_slot(s);
    mem->memory_size = size;
    mem->start_addr = start_addr;
    mem->phys_offset = phys_offset;
    mem->flags = 0;

    err = kvm_set_user_memory_region(s, mem);
    if (err) {
        fprintf(stderr, "%s: error registering slot: %s\n", __func__,
                strerror(-err));
        abort();
    }
}

543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569
static void kvm_client_set_memory(struct CPUPhysMemoryClient *client,
				  target_phys_addr_t start_addr,
				  ram_addr_t size,
				  ram_addr_t phys_offset)
{
	kvm_set_phys_mem(start_addr, size, phys_offset);
}

static int kvm_client_sync_dirty_bitmap(struct CPUPhysMemoryClient *client,
					target_phys_addr_t start_addr,
					target_phys_addr_t end_addr)
{
	return kvm_physical_sync_dirty_bitmap(start_addr, end_addr);
}

static int kvm_client_migration_log(struct CPUPhysMemoryClient *client,
				    int enable)
{
	return kvm_set_migration_log(enable);
}

static CPUPhysMemoryClient kvm_cpu_phys_memory_client = {
	.set_memory = kvm_client_set_memory,
	.sync_dirty_bitmap = kvm_client_sync_dirty_bitmap,
	.migration_log = kvm_client_migration_log,
};

A
aliguori 已提交
570 571
int kvm_init(int smp_cpus)
{
572 573 574
    static const char upgrade_note[] =
        "Please upgrade to at least kernel 2.6.29 or recent kvm-kmod\n"
        "(see http://sourceforge.net/projects/kvm).\n";
A
aliguori 已提交
575 576 577 578
    KVMState *s;
    int ret;
    int i;

579 580
    if (smp_cpus > 1) {
        fprintf(stderr, "No SMP KVM support, use '-smp 1'\n");
A
aliguori 已提交
581
        return -EINVAL;
582
    }
A
aliguori 已提交
583 584 585

    s = qemu_mallocz(sizeof(KVMState));

586
#ifdef KVM_CAP_SET_GUEST_DEBUG
B
Blue Swirl 已提交
587
    QTAILQ_INIT(&s->kvm_sw_breakpoints);
588
#endif
A
aliguori 已提交
589 590 591 592
    for (i = 0; i < ARRAY_SIZE(s->slots); i++)
        s->slots[i].slot = i;

    s->vmfd = -1;
K
Kevin Wolf 已提交
593
    s->fd = qemu_open("/dev/kvm", O_RDWR);
A
aliguori 已提交
594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619
    if (s->fd == -1) {
        fprintf(stderr, "Could not access KVM kernel module: %m\n");
        ret = -errno;
        goto err;
    }

    ret = kvm_ioctl(s, KVM_GET_API_VERSION, 0);
    if (ret < KVM_API_VERSION) {
        if (ret > 0)
            ret = -EINVAL;
        fprintf(stderr, "kvm version too old\n");
        goto err;
    }

    if (ret > KVM_API_VERSION) {
        ret = -EINVAL;
        fprintf(stderr, "kvm version not supported\n");
        goto err;
    }

    s->vmfd = kvm_ioctl(s, KVM_CREATE_VM, 0);
    if (s->vmfd < 0)
        goto err;

    /* initially, KVM allocated its own memory and we had to jump through
     * hooks to make phys_ram_base point to this.  Modern versions of KVM
P
pbrook 已提交
620
     * just use a user allocated buffer so we can use regular pages
A
aliguori 已提交
621 622
     * unmodified.  Make sure we have a sufficiently modern version of KVM.
     */
623 624
    if (!kvm_check_extension(s, KVM_CAP_USER_MEMORY)) {
        ret = -EINVAL;
625 626
        fprintf(stderr, "kvm does not support KVM_CAP_USER_MEMORY\n%s",
                upgrade_note);
A
aliguori 已提交
627 628 629
        goto err;
    }

630 631 632
    /* There was a nasty bug in < kvm-80 that prevents memory slots from being
     * destroyed properly.  Since we rely on this capability, refuse to work
     * with any kernel without this capability. */
633 634
    if (!kvm_check_extension(s, KVM_CAP_DESTROY_MEMORY_REGION_WORKS)) {
        ret = -EINVAL;
635 636

        fprintf(stderr,
637 638
                "KVM kernel module broken (DESTROY_MEMORY_REGION).\n%s",
                upgrade_note);
639 640 641
        goto err;
    }

642
    s->coalesced_mmio = 0;
A
aliguori 已提交
643
#ifdef KVM_CAP_COALESCED_MMIO
644
    s->coalesced_mmio = kvm_check_extension(s, KVM_CAP_COALESCED_MMIO);
645
    s->coalesced_mmio_ring = NULL;
A
aliguori 已提交
646 647
#endif

648 649 650 651 652 653 654 655
    s->broken_set_mem_region = 1;
#ifdef KVM_CAP_JOIN_MEMORY_REGIONS_WORKS
    ret = kvm_ioctl(s, KVM_CHECK_EXTENSION, KVM_CAP_JOIN_MEMORY_REGIONS_WORKS);
    if (ret > 0) {
        s->broken_set_mem_region = 0;
    }
#endif

656 657 658 659 660
    s->vcpu_events = 0;
#ifdef KVM_CAP_VCPU_EVENTS
    s->vcpu_events = kvm_check_extension(s, KVM_CAP_VCPU_EVENTS);
#endif

A
aliguori 已提交
661 662 663 664 665
    ret = kvm_arch_init(s, smp_cpus);
    if (ret < 0)
        goto err;

    kvm_state = s;
666
    cpu_register_phys_memory_client(&kvm_cpu_phys_memory_client);
A
aliguori 已提交
667 668 669 670 671 672 673 674 675 676 677 678 679 680 681

    return 0;

err:
    if (s) {
        if (s->vmfd != -1)
            close(s->vmfd);
        if (s->fd != -1)
            close(s->fd);
    }
    qemu_free(s);

    return ret;
}

682 683
static int kvm_handle_io(uint16_t port, void *data, int direction, int size,
                         uint32_t count)
A
aliguori 已提交
684 685 686 687 688 689 690 691
{
    int i;
    uint8_t *ptr = data;

    for (i = 0; i < count; i++) {
        if (direction == KVM_EXIT_IO_IN) {
            switch (size) {
            case 1:
692
                stb_p(ptr, cpu_inb(port));
A
aliguori 已提交
693 694
                break;
            case 2:
695
                stw_p(ptr, cpu_inw(port));
A
aliguori 已提交
696 697
                break;
            case 4:
698
                stl_p(ptr, cpu_inl(port));
A
aliguori 已提交
699 700 701 702 703
                break;
            }
        } else {
            switch (size) {
            case 1:
704
                cpu_outb(port, ldub_p(ptr));
A
aliguori 已提交
705 706
                break;
            case 2:
707
                cpu_outw(port, lduw_p(ptr));
A
aliguori 已提交
708 709
                break;
            case 4:
710
                cpu_outl(port, ldl_p(ptr));
A
aliguori 已提交
711 712 713 714 715 716 717 718 719 720
                break;
            }
        }

        ptr += size;
    }

    return 1;
}

721
void kvm_flush_coalesced_mmio_buffer(void)
A
aliguori 已提交
722 723 724
{
#ifdef KVM_CAP_COALESCED_MMIO
    KVMState *s = kvm_state;
725 726
    if (s->coalesced_mmio_ring) {
        struct kvm_coalesced_mmio_ring *ring = s->coalesced_mmio_ring;
A
aliguori 已提交
727 728 729 730 731 732 733 734 735 736 737 738 739
        while (ring->first != ring->last) {
            struct kvm_coalesced_mmio *ent;

            ent = &ring->coalesced_mmio[ring->first];

            cpu_physical_memory_write(ent->phys_addr, ent->data, ent->len);
            /* FIXME smp_wmb() */
            ring->first = (ring->first + 1) % KVM_COALESCED_MMIO_MAX;
        }
    }
#endif
}

740 741
void kvm_cpu_synchronize_state(CPUState *env)
{
J
Jan Kiszka 已提交
742
    if (!env->kvm_vcpu_dirty) {
743
        kvm_arch_get_registers(env);
J
Jan Kiszka 已提交
744
        env->kvm_vcpu_dirty = 1;
745 746 747
    }
}

A
aliguori 已提交
748 749 750 751 752 753 754 755
int kvm_cpu_exec(CPUState *env)
{
    struct kvm_run *run = env->kvm_run;
    int ret;

    dprintf("kvm_cpu_exec()\n");

    do {
756
        if (env->exit_request) {
A
aliguori 已提交
757 758 759 760 761
            dprintf("interrupt exit requested\n");
            ret = 0;
            break;
        }

J
Jan Kiszka 已提交
762
        if (env->kvm_vcpu_dirty) {
763
            kvm_arch_put_registers(env);
J
Jan Kiszka 已提交
764
            env->kvm_vcpu_dirty = 0;
765 766
        }

767
        kvm_arch_pre_run(env, run);
768
        qemu_mutex_unlock_iothread();
A
aliguori 已提交
769
        ret = kvm_vcpu_ioctl(env, KVM_RUN, 0);
770
        qemu_mutex_lock_iothread();
A
aliguori 已提交
771 772 773 774 775 776 777 778 779 780 781 782 783
        kvm_arch_post_run(env, run);

        if (ret == -EINTR || ret == -EAGAIN) {
            dprintf("io window exit\n");
            ret = 0;
            break;
        }

        if (ret < 0) {
            dprintf("kvm run failed %s\n", strerror(-ret));
            abort();
        }

784
        kvm_flush_coalesced_mmio_buffer();
A
aliguori 已提交
785

A
aliguori 已提交
786 787 788 789
        ret = 0; /* exit loop */
        switch (run->exit_reason) {
        case KVM_EXIT_IO:
            dprintf("handle_io\n");
790
            ret = kvm_handle_io(run->io.port,
A
aliguori 已提交
791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822
                                (uint8_t *)run + run->io.data_offset,
                                run->io.direction,
                                run->io.size,
                                run->io.count);
            break;
        case KVM_EXIT_MMIO:
            dprintf("handle_mmio\n");
            cpu_physical_memory_rw(run->mmio.phys_addr,
                                   run->mmio.data,
                                   run->mmio.len,
                                   run->mmio.is_write);
            ret = 1;
            break;
        case KVM_EXIT_IRQ_WINDOW_OPEN:
            dprintf("irq_window_open\n");
            break;
        case KVM_EXIT_SHUTDOWN:
            dprintf("shutdown\n");
            qemu_system_reset_request();
            ret = 1;
            break;
        case KVM_EXIT_UNKNOWN:
            dprintf("kvm_exit_unknown\n");
            break;
        case KVM_EXIT_FAIL_ENTRY:
            dprintf("kvm_exit_fail_entry\n");
            break;
        case KVM_EXIT_EXCEPTION:
            dprintf("kvm_exit_exception\n");
            break;
        case KVM_EXIT_DEBUG:
            dprintf("kvm_exit_debug\n");
823 824 825 826 827 828 829 830 831 832
#ifdef KVM_CAP_SET_GUEST_DEBUG
            if (kvm_arch_debug(&run->debug.arch)) {
                gdb_set_stop_cpu(env);
                vm_stop(EXCP_DEBUG);
                env->exception_index = EXCP_DEBUG;
                return 0;
            }
            /* re-enter, this exception was guest-internal */
            ret = 1;
#endif /* KVM_CAP_SET_GUEST_DEBUG */
A
aliguori 已提交
833 834 835 836 837 838 839 840
            break;
        default:
            dprintf("kvm_arch_handle_exit\n");
            ret = kvm_arch_handle_exit(env, run);
            break;
        }
    } while (ret > 0);

841 842
    if (env->exit_request) {
        env->exit_request = 0;
A
aliguori 已提交
843 844 845
        env->exception_index = EXCP_INTERRUPT;
    }

A
aliguori 已提交
846 847 848
    return ret;
}

849
int kvm_ioctl(KVMState *s, int type, ...)
A
aliguori 已提交
850 851
{
    int ret;
852 853
    void *arg;
    va_list ap;
A
aliguori 已提交
854

855 856 857 858 859
    va_start(ap, type);
    arg = va_arg(ap, void *);
    va_end(ap);

    ret = ioctl(s->fd, type, arg);
A
aliguori 已提交
860 861 862 863 864 865
    if (ret == -1)
        ret = -errno;

    return ret;
}

866
int kvm_vm_ioctl(KVMState *s, int type, ...)
A
aliguori 已提交
867 868
{
    int ret;
869 870 871 872 873 874
    void *arg;
    va_list ap;

    va_start(ap, type);
    arg = va_arg(ap, void *);
    va_end(ap);
A
aliguori 已提交
875

876
    ret = ioctl(s->vmfd, type, arg);
A
aliguori 已提交
877 878 879 880 881 882
    if (ret == -1)
        ret = -errno;

    return ret;
}

883
int kvm_vcpu_ioctl(CPUState *env, int type, ...)
A
aliguori 已提交
884 885
{
    int ret;
886 887 888 889 890 891
    void *arg;
    va_list ap;

    va_start(ap, type);
    arg = va_arg(ap, void *);
    va_end(ap);
A
aliguori 已提交
892

893
    ret = ioctl(env->kvm_fd, type, arg);
A
aliguori 已提交
894 895 896 897 898
    if (ret == -1)
        ret = -errno;

    return ret;
}
A
aliguori 已提交
899 900 901

int kvm_has_sync_mmu(void)
{
A
aurel32 已提交
902
#ifdef KVM_CAP_SYNC_MMU
A
aliguori 已提交
903 904
    KVMState *s = kvm_state;

905 906
    return kvm_check_extension(s, KVM_CAP_SYNC_MMU);
#else
A
aliguori 已提交
907
    return 0;
908
#endif
A
aliguori 已提交
909
}
910

911 912 913 914 915
int kvm_has_vcpu_events(void)
{
    return kvm_state->vcpu_events;
}

916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933
void kvm_setup_guest_memory(void *start, size_t size)
{
    if (!kvm_has_sync_mmu()) {
#ifdef MADV_DONTFORK
        int ret = madvise(start, size, MADV_DONTFORK);

        if (ret) {
            perror("madvice");
            exit(1);
        }
#else
        fprintf(stderr,
                "Need MADV_DONTFORK in absence of synchronous KVM MMU\n");
        exit(1);
#endif
    }
}

934
#ifdef KVM_CAP_SET_GUEST_DEBUG
L
Luiz Capitulino 已提交
935 936
static void on_vcpu(CPUState *env, void (*func)(void *data), void *data)
{
G
Glauber Costa 已提交
937
#ifdef CONFIG_IOTHREAD
938 939
    if (env != cpu_single_env) {
        abort();
L
Luiz Capitulino 已提交
940
    }
G
Glauber Costa 已提交
941
#endif
942
    func(data);
L
Luiz Capitulino 已提交
943 944
}

945 946 947 948 949
struct kvm_sw_breakpoint *kvm_find_sw_breakpoint(CPUState *env,
                                                 target_ulong pc)
{
    struct kvm_sw_breakpoint *bp;

B
Blue Swirl 已提交
950
    QTAILQ_FOREACH(bp, &env->kvm_state->kvm_sw_breakpoints, entry) {
951 952 953 954 955 956 957 958
        if (bp->pc == pc)
            return bp;
    }
    return NULL;
}

int kvm_sw_breakpoints_active(CPUState *env)
{
B
Blue Swirl 已提交
959
    return !QTAILQ_EMPTY(&env->kvm_state->kvm_sw_breakpoints);
960 961
}

G
Glauber Costa 已提交
962 963 964 965 966 967 968 969 970
struct kvm_set_guest_debug_data {
    struct kvm_guest_debug dbg;
    CPUState *env;
    int err;
};

static void kvm_invoke_set_guest_debug(void *data)
{
    struct kvm_set_guest_debug_data *dbg_data = data;
J
Jan Kiszka 已提交
971 972
    CPUState *env = dbg_data->env;

J
Jan Kiszka 已提交
973
    if (env->kvm_vcpu_dirty) {
J
Jan Kiszka 已提交
974
        kvm_arch_put_registers(env);
J
Jan Kiszka 已提交
975
        env->kvm_vcpu_dirty = 0;
J
Jan Kiszka 已提交
976 977
    }
    dbg_data->err = kvm_vcpu_ioctl(env, KVM_SET_GUEST_DEBUG, &dbg_data->dbg);
G
Glauber Costa 已提交
978 979
}

980 981
int kvm_update_guest_debug(CPUState *env, unsigned long reinject_trap)
{
G
Glauber Costa 已提交
982
    struct kvm_set_guest_debug_data data;
983

G
Glauber Costa 已提交
984
    data.dbg.control = 0;
985
    if (env->singlestep_enabled)
G
Glauber Costa 已提交
986
        data.dbg.control = KVM_GUESTDBG_ENABLE | KVM_GUESTDBG_SINGLESTEP;
987

G
Glauber Costa 已提交
988 989 990
    kvm_arch_update_guest_debug(env, &data.dbg);
    data.dbg.control |= reinject_trap;
    data.env = env;
991

G
Glauber Costa 已提交
992 993
    on_vcpu(env, kvm_invoke_set_guest_debug, &data);
    return data.err;
994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021
}

int kvm_insert_breakpoint(CPUState *current_env, target_ulong addr,
                          target_ulong len, int type)
{
    struct kvm_sw_breakpoint *bp;
    CPUState *env;
    int err;

    if (type == GDB_BREAKPOINT_SW) {
        bp = kvm_find_sw_breakpoint(current_env, addr);
        if (bp) {
            bp->use_count++;
            return 0;
        }

        bp = qemu_malloc(sizeof(struct kvm_sw_breakpoint));
        if (!bp)
            return -ENOMEM;

        bp->pc = addr;
        bp->use_count = 1;
        err = kvm_arch_insert_sw_breakpoint(current_env, bp);
        if (err) {
            free(bp);
            return err;
        }

B
Blue Swirl 已提交
1022
        QTAILQ_INSERT_HEAD(&current_env->kvm_state->kvm_sw_breakpoints,
1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058
                          bp, entry);
    } else {
        err = kvm_arch_insert_hw_breakpoint(addr, len, type);
        if (err)
            return err;
    }

    for (env = first_cpu; env != NULL; env = env->next_cpu) {
        err = kvm_update_guest_debug(env, 0);
        if (err)
            return err;
    }
    return 0;
}

int kvm_remove_breakpoint(CPUState *current_env, target_ulong addr,
                          target_ulong len, int type)
{
    struct kvm_sw_breakpoint *bp;
    CPUState *env;
    int err;

    if (type == GDB_BREAKPOINT_SW) {
        bp = kvm_find_sw_breakpoint(current_env, addr);
        if (!bp)
            return -ENOENT;

        if (bp->use_count > 1) {
            bp->use_count--;
            return 0;
        }

        err = kvm_arch_remove_sw_breakpoint(current_env, bp);
        if (err)
            return err;

B
Blue Swirl 已提交
1059
        QTAILQ_REMOVE(&current_env->kvm_state->kvm_sw_breakpoints, bp, entry);
1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080
        qemu_free(bp);
    } else {
        err = kvm_arch_remove_hw_breakpoint(addr, len, type);
        if (err)
            return err;
    }

    for (env = first_cpu; env != NULL; env = env->next_cpu) {
        err = kvm_update_guest_debug(env, 0);
        if (err)
            return err;
    }
    return 0;
}

void kvm_remove_all_breakpoints(CPUState *current_env)
{
    struct kvm_sw_breakpoint *bp, *next;
    KVMState *s = current_env->kvm_state;
    CPUState *env;

B
Blue Swirl 已提交
1081
    QTAILQ_FOREACH_SAFE(bp, &s->kvm_sw_breakpoints, entry, next) {
1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118
        if (kvm_arch_remove_sw_breakpoint(current_env, bp) != 0) {
            /* Try harder to find a CPU that currently sees the breakpoint. */
            for (env = first_cpu; env != NULL; env = env->next_cpu) {
                if (kvm_arch_remove_sw_breakpoint(env, bp) == 0)
                    break;
            }
        }
    }
    kvm_arch_remove_all_hw_breakpoints();

    for (env = first_cpu; env != NULL; env = env->next_cpu)
        kvm_update_guest_debug(env, 0);
}

#else /* !KVM_CAP_SET_GUEST_DEBUG */

int kvm_update_guest_debug(CPUState *env, unsigned long reinject_trap)
{
    return -EINVAL;
}

int kvm_insert_breakpoint(CPUState *current_env, target_ulong addr,
                          target_ulong len, int type)
{
    return -EINVAL;
}

int kvm_remove_breakpoint(CPUState *current_env, target_ulong addr,
                          target_ulong len, int type)
{
    return -EINVAL;
}

void kvm_remove_all_breakpoints(CPUState *current_env)
{
}
#endif /* !KVM_CAP_SET_GUEST_DEBUG */