xref: /openbmc/qemu/hw/acpi/erst.c (revision effd60c8)
1 /*
2  * ACPI Error Record Serialization Table, ERST, Implementation
3  *
4  * ACPI ERST introduced in ACPI 4.0, June 16, 2009.
5  * ACPI Platform Error Interfaces : Error Serialization
6  *
7  * Copyright (c) 2021 Oracle and/or its affiliates.
8  *
9  * SPDX-License-Identifier: GPL-2.0-or-later
10  */
11 
12 #include "qemu/osdep.h"
13 #include "qapi/error.h"
14 #include "hw/qdev-core.h"
15 #include "exec/memory.h"
16 #include "qom/object.h"
17 #include "hw/pci/pci_device.h"
18 #include "qom/object_interfaces.h"
19 #include "qemu/error-report.h"
20 #include "migration/vmstate.h"
21 #include "hw/qdev-properties.h"
22 #include "hw/acpi/acpi.h"
23 #include "hw/acpi/acpi-defs.h"
24 #include "hw/acpi/aml-build.h"
25 #include "hw/acpi/bios-linker-loader.h"
26 #include "exec/address-spaces.h"
27 #include "sysemu/hostmem.h"
28 #include "hw/acpi/erst.h"
29 #include "trace.h"
30 
31 /* ACPI 4.0: Table 17-16 Serialization Actions */
32 #define ACTION_BEGIN_WRITE_OPERATION         0x0
33 #define ACTION_BEGIN_READ_OPERATION          0x1
34 #define ACTION_BEGIN_CLEAR_OPERATION         0x2
35 #define ACTION_END_OPERATION                 0x3
36 #define ACTION_SET_RECORD_OFFSET             0x4
37 #define ACTION_EXECUTE_OPERATION             0x5
38 #define ACTION_CHECK_BUSY_STATUS             0x6
39 #define ACTION_GET_COMMAND_STATUS            0x7
40 #define ACTION_GET_RECORD_IDENTIFIER         0x8
41 #define ACTION_SET_RECORD_IDENTIFIER         0x9
42 #define ACTION_GET_RECORD_COUNT              0xA
43 #define ACTION_BEGIN_DUMMY_WRITE_OPERATION   0xB
44 #define ACTION_RESERVED                      0xC
45 #define ACTION_GET_ERROR_LOG_ADDRESS_RANGE   0xD
46 #define ACTION_GET_ERROR_LOG_ADDRESS_LENGTH  0xE
47 #define ACTION_GET_ERROR_LOG_ADDRESS_RANGE_ATTRIBUTES 0xF
48 #define ACTION_GET_EXECUTE_OPERATION_TIMINGS 0x10 /* ACPI 6.3 */
49 
50 /* ACPI 4.0: Table 17-17 Command Status Definitions */
51 #define STATUS_SUCCESS                0x00
52 #define STATUS_NOT_ENOUGH_SPACE       0x01
53 #define STATUS_HARDWARE_NOT_AVAILABLE 0x02
54 #define STATUS_FAILED                 0x03
55 #define STATUS_RECORD_STORE_EMPTY     0x04
56 #define STATUS_RECORD_NOT_FOUND       0x05
57 
58 /* ACPI 4.0: Table 17-19 Serialization Instructions */
59 #define INST_READ_REGISTER                 0x00
60 #define INST_READ_REGISTER_VALUE           0x01
61 #define INST_WRITE_REGISTER                0x02
62 #define INST_WRITE_REGISTER_VALUE          0x03
63 #define INST_NOOP                          0x04
64 #define INST_LOAD_VAR1                     0x05
65 #define INST_LOAD_VAR2                     0x06
66 #define INST_STORE_VAR1                    0x07
67 #define INST_ADD                           0x08
68 #define INST_SUBTRACT                      0x09
69 #define INST_ADD_VALUE                     0x0A
70 #define INST_SUBTRACT_VALUE                0x0B
71 #define INST_STALL                         0x0C
72 #define INST_STALL_WHILE_TRUE              0x0D
73 #define INST_SKIP_NEXT_INSTRUCTION_IF_TRUE 0x0E
74 #define INST_GOTO                          0x0F
75 #define INST_SET_SRC_ADDRESS_BASE          0x10
76 #define INST_SET_DST_ADDRESS_BASE          0x11
77 #define INST_MOVE_DATA                     0x12
78 
79 /* UEFI 2.1: Appendix N Common Platform Error Record */
80 #define UEFI_CPER_RECORD_MIN_SIZE 128U
81 #define UEFI_CPER_RECORD_LENGTH_OFFSET 20U
82 #define UEFI_CPER_RECORD_ID_OFFSET 96U
83 
84 /*
85  * NOTE that when accessing CPER fields within a record, memcpy()
86  * is utilized to avoid a possible misaligned access on the host.
87  */
88 
89 /*
90  * This implementation is an ACTION (cmd) and VALUE (data)
91  * interface consisting of just two 64-bit registers.
92  */
93 #define ERST_REG_SIZE (16UL)
94 #define ERST_ACTION_OFFSET (0UL) /* action (cmd) */
95 #define ERST_VALUE_OFFSET  (8UL) /* argument/value (data) */
96 
97 /*
98  * ERST_RECORD_SIZE is the buffer size for exchanging ERST
99  * record contents. Thus, it defines the maximum record size.
100  * As this is mapped through a PCI BAR, it must be a power of
101  * two and larger than UEFI_CPER_RECORD_MIN_SIZE.
102  * The backing storage is divided into fixed size "slots",
103  * each ERST_RECORD_SIZE in length, and each "slot"
104  * storing a single record. No attempt at optimizing storage
105  * through compression, compaction, etc is attempted.
106  * NOTE that slot 0 is reserved for the backing storage header.
107  * Depending upon the size of the backing storage, additional
108  * slots will be part of the slot 0 header in order to account
109  * for a record_id for each available remaining slot.
110  */
111 /* 8KiB records, not too small, not too big */
112 #define ERST_RECORD_SIZE (8192UL)
113 
114 #define ACPI_ERST_MEMDEV_PROP "memdev"
115 #define ACPI_ERST_RECORD_SIZE_PROP "record_size"
116 
117 /*
118  * From the ACPI ERST spec sections:
119  * A record id of all 0s is used to indicate 'unspecified' record id.
120  * A record id of all 1s is used to indicate empty or end.
121  */
122 #define ERST_UNSPECIFIED_RECORD_ID (0UL)
123 #define ERST_EMPTY_END_RECORD_ID (~0UL)
124 
125 #define ERST_IS_VALID_RECORD_ID(rid) \
126     ((rid != ERST_UNSPECIFIED_RECORD_ID) && \
127      (rid != ERST_EMPTY_END_RECORD_ID))
128 
129 /*
130  * Implementation-specific definitions and types.
131  * Values are arbitrary and chosen for this implementation.
132  * See erst.rst documentation for details.
133  */
134 #define ERST_EXECUTE_OPERATION_MAGIC 0x9CUL
135 #define ERST_STORE_MAGIC 0x524F545354535245UL /* ERSTSTOR */
136 typedef struct {
137     uint64_t magic;
138     uint32_t record_size;
139     uint32_t storage_offset; /* offset to record storage beyond header */
140     uint16_t version;
141     uint16_t reserved;
142     uint32_t record_count;
143     uint64_t map[]; /* contains record_ids, and position indicates index */
144 } __attribute__((packed)) ERSTStorageHeader;
145 
146 /*
147  * Object cast macro
148  */
149 #define ACPIERST(obj) \
150     OBJECT_CHECK(ERSTDeviceState, (obj), TYPE_ACPI_ERST)
151 
152 /*
153  * Main ERST device state structure
154  */
155 typedef struct {
156     PCIDevice parent_obj;
157 
158     /* Backend storage */
159     HostMemoryBackend *hostmem;
160     MemoryRegion *hostmem_mr;
161     uint32_t storage_size;
162     uint32_t default_record_size;
163 
164     /* Programming registers */
165     MemoryRegion iomem_mr;
166 
167     /* Exchange buffer */
168     MemoryRegion exchange_mr;
169 
170     /* Interface state */
171     uint8_t operation;
172     uint8_t busy_status;
173     uint8_t command_status;
174     uint32_t record_offset;
175     uint64_t reg_action;
176     uint64_t reg_value;
177     uint64_t record_identifier;
178     ERSTStorageHeader *header;
179     unsigned first_record_index;
180     unsigned last_record_index;
181     unsigned next_record_index;
182 
183 } ERSTDeviceState;
184 
185 /*******************************************************************/
186 /*******************************************************************/
187 typedef struct {
188     GArray *table_data;
189     pcibus_t bar;
190     uint8_t instruction;
191     uint8_t flags;
192     uint8_t register_bit_width;
193     pcibus_t register_offset;
194 } BuildSerializationInstructionEntry;
195 
196 /* ACPI 4.0: 17.4.1.2 Serialization Instruction Entries */
197 static void build_serialization_instruction(
198     BuildSerializationInstructionEntry *e,
199     uint8_t serialization_action,
200     uint64_t value)
201 {
202     /* ACPI 4.0: Table 17-18 Serialization Instruction Entry */
203     struct AcpiGenericAddress gas;
204     uint64_t mask;
205 
206     /* Serialization Action */
207     build_append_int_noprefix(e->table_data, serialization_action, 1);
208     /* Instruction */
209     build_append_int_noprefix(e->table_data, e->instruction, 1);
210     /* Flags */
211     build_append_int_noprefix(e->table_data, e->flags, 1);
212     /* Reserved */
213     build_append_int_noprefix(e->table_data, 0, 1);
214     /* Register Region */
215     gas.space_id = AML_SYSTEM_MEMORY;
216     gas.bit_width = e->register_bit_width;
217     gas.bit_offset = 0;
218     gas.access_width = (uint8_t)ctz32(e->register_bit_width) - 2;
219     gas.address = (uint64_t)(e->bar + e->register_offset);
220     build_append_gas_from_struct(e->table_data, &gas);
221     /* Value */
222     build_append_int_noprefix(e->table_data, value, 8);
223     /* Mask */
224     mask = (1ULL << (e->register_bit_width - 1) << 1) - 1;
225     build_append_int_noprefix(e->table_data, mask, 8);
226 }
227 
228 /* ACPI 4.0: 17.4.1 Serialization Action Table */
229 void build_erst(GArray *table_data, BIOSLinker *linker, Object *erst_dev,
230     const char *oem_id, const char *oem_table_id)
231 {
232     /*
233      * Serialization Action Table
234      * The serialization action table must be generated first
235      * so that its size can be known in order to populate the
236      * Instruction Entry Count field.
237      */
238     unsigned action;
239     GArray *table_instruction_data = g_array_new(FALSE, FALSE, sizeof(char));
240     pcibus_t bar0 = pci_get_bar_addr(PCI_DEVICE(erst_dev), 0);
241     AcpiTable table = { .sig = "ERST", .rev = 1, .oem_id = oem_id,
242                         .oem_table_id = oem_table_id };
243     /* Contexts for the different ways ACTION and VALUE are accessed */
244     BuildSerializationInstructionEntry rd_value_32_val = {
245         .table_data = table_instruction_data, .bar = bar0, .flags = 0,
246         .instruction = INST_READ_REGISTER_VALUE,
247         .register_bit_width = 32,
248         .register_offset = ERST_VALUE_OFFSET,
249     };
250     BuildSerializationInstructionEntry rd_value_32 = {
251         .table_data = table_instruction_data, .bar = bar0, .flags = 0,
252         .instruction = INST_READ_REGISTER,
253         .register_bit_width = 32,
254         .register_offset = ERST_VALUE_OFFSET,
255     };
256     BuildSerializationInstructionEntry rd_value_64 = {
257         .table_data = table_instruction_data, .bar = bar0, .flags = 0,
258         .instruction = INST_READ_REGISTER,
259         .register_bit_width = 64,
260         .register_offset = ERST_VALUE_OFFSET,
261     };
262     BuildSerializationInstructionEntry wr_value_32_val = {
263         .table_data = table_instruction_data, .bar = bar0, .flags = 0,
264         .instruction = INST_WRITE_REGISTER_VALUE,
265         .register_bit_width = 32,
266         .register_offset = ERST_VALUE_OFFSET,
267     };
268     BuildSerializationInstructionEntry wr_value_32 = {
269         .table_data = table_instruction_data, .bar = bar0, .flags = 0,
270         .instruction = INST_WRITE_REGISTER,
271         .register_bit_width = 32,
272         .register_offset = ERST_VALUE_OFFSET,
273     };
274     BuildSerializationInstructionEntry wr_value_64 = {
275         .table_data = table_instruction_data, .bar = bar0, .flags = 0,
276         .instruction = INST_WRITE_REGISTER,
277         .register_bit_width = 64,
278         .register_offset = ERST_VALUE_OFFSET,
279     };
280     BuildSerializationInstructionEntry wr_action = {
281         .table_data = table_instruction_data, .bar = bar0, .flags = 0,
282         .instruction = INST_WRITE_REGISTER_VALUE,
283         .register_bit_width = 32,
284         .register_offset = ERST_ACTION_OFFSET,
285     };
286 
287     trace_acpi_erst_pci_bar_0(bar0);
288 
289     /* Serialization Instruction Entries */
290     action = ACTION_BEGIN_WRITE_OPERATION;
291     build_serialization_instruction(&wr_action, action, action);
292 
293     action = ACTION_BEGIN_READ_OPERATION;
294     build_serialization_instruction(&wr_action, action, action);
295 
296     action = ACTION_BEGIN_CLEAR_OPERATION;
297     build_serialization_instruction(&wr_action, action, action);
298 
299     action = ACTION_END_OPERATION;
300     build_serialization_instruction(&wr_action, action, action);
301 
302     action = ACTION_SET_RECORD_OFFSET;
303     build_serialization_instruction(&wr_value_32, action, 0);
304     build_serialization_instruction(&wr_action, action, action);
305 
306     action = ACTION_EXECUTE_OPERATION;
307     build_serialization_instruction(&wr_value_32_val, action,
308         ERST_EXECUTE_OPERATION_MAGIC);
309     build_serialization_instruction(&wr_action, action, action);
310 
311     action = ACTION_CHECK_BUSY_STATUS;
312     build_serialization_instruction(&wr_action, action, action);
313     build_serialization_instruction(&rd_value_32_val, action, 0x01);
314 
315     action = ACTION_GET_COMMAND_STATUS;
316     build_serialization_instruction(&wr_action, action, action);
317     build_serialization_instruction(&rd_value_32, action, 0);
318 
319     action = ACTION_GET_RECORD_IDENTIFIER;
320     build_serialization_instruction(&wr_action, action, action);
321     build_serialization_instruction(&rd_value_64, action, 0);
322 
323     action = ACTION_SET_RECORD_IDENTIFIER;
324     build_serialization_instruction(&wr_value_64, action, 0);
325     build_serialization_instruction(&wr_action, action, action);
326 
327     action = ACTION_GET_RECORD_COUNT;
328     build_serialization_instruction(&wr_action, action, action);
329     build_serialization_instruction(&rd_value_32, action, 0);
330 
331     action = ACTION_BEGIN_DUMMY_WRITE_OPERATION;
332     build_serialization_instruction(&wr_action, action, action);
333 
334     action = ACTION_GET_ERROR_LOG_ADDRESS_RANGE;
335     build_serialization_instruction(&wr_action, action, action);
336     build_serialization_instruction(&rd_value_64, action, 0);
337 
338     action = ACTION_GET_ERROR_LOG_ADDRESS_LENGTH;
339     build_serialization_instruction(&wr_action, action, action);
340     build_serialization_instruction(&rd_value_64, action, 0);
341 
342     action = ACTION_GET_ERROR_LOG_ADDRESS_RANGE_ATTRIBUTES;
343     build_serialization_instruction(&wr_action, action, action);
344     build_serialization_instruction(&rd_value_32, action, 0);
345 
346     action = ACTION_GET_EXECUTE_OPERATION_TIMINGS;
347     build_serialization_instruction(&wr_action, action, action);
348     build_serialization_instruction(&rd_value_64, action, 0);
349 
350     /* Serialization Header */
351     acpi_table_begin(&table, table_data);
352 
353     /* Serialization Header Size */
354     build_append_int_noprefix(table_data, 48, 4);
355 
356     /* Reserved */
357     build_append_int_noprefix(table_data,  0, 4);
358 
359     /*
360      * Instruction Entry Count
361      * Each instruction entry is 32 bytes
362      */
363     g_assert((table_instruction_data->len) % 32 == 0);
364     build_append_int_noprefix(table_data,
365         (table_instruction_data->len / 32), 4);
366 
367     /* Serialization Instruction Entries */
368     g_array_append_vals(table_data, table_instruction_data->data,
369         table_instruction_data->len);
370     g_array_free(table_instruction_data, TRUE);
371 
372     acpi_table_end(linker, &table);
373 }
374 
375 /*******************************************************************/
376 /*******************************************************************/
377 static uint8_t *get_nvram_ptr_by_index(ERSTDeviceState *s, unsigned index)
378 {
379     uint8_t *rc = NULL;
380     off_t offset = (index * le32_to_cpu(s->header->record_size));
381 
382     g_assert(offset < s->storage_size);
383 
384     rc = memory_region_get_ram_ptr(s->hostmem_mr);
385     rc += offset;
386 
387     return rc;
388 }
389 
390 static void make_erst_storage_header(ERSTDeviceState *s)
391 {
392     ERSTStorageHeader *header = s->header;
393     unsigned mapsz, headersz;
394 
395     header->magic = cpu_to_le64(ERST_STORE_MAGIC);
396     header->record_size = cpu_to_le32(s->default_record_size);
397     header->version = cpu_to_le16(0x0100);
398     header->reserved = cpu_to_le16(0x0000);
399 
400     /* Compute mapsize */
401     mapsz = s->storage_size / s->default_record_size;
402     mapsz *= sizeof(uint64_t);
403     /* Compute header+map size */
404     headersz = sizeof(ERSTStorageHeader) + mapsz;
405     /* Round up to nearest integer multiple of ERST_RECORD_SIZE */
406     headersz = QEMU_ALIGN_UP(headersz, s->default_record_size);
407     header->storage_offset = cpu_to_le32(headersz);
408 
409     /*
410      * The HostMemoryBackend initializes contents to zero,
411      * so all record_ids stashed in the map are zero'd.
412      * As well the record_count is zero. Properly initialized.
413      */
414 }
415 
416 static void check_erst_backend_storage(ERSTDeviceState *s, Error **errp)
417 {
418     ERSTStorageHeader *header;
419     uint32_t record_size;
420 
421     header = memory_region_get_ram_ptr(s->hostmem_mr);
422     s->header = header;
423 
424     /* Ensure pointer to header is 64-bit aligned */
425     g_assert(QEMU_PTR_IS_ALIGNED(header, sizeof(uint64_t)));
426 
427     /*
428      * Check if header is uninitialized; HostMemoryBackend inits to 0
429      */
430     if (le64_to_cpu(header->magic) == 0UL) {
431         make_erst_storage_header(s);
432     }
433 
434     /* Validity check record_size */
435     record_size = le32_to_cpu(header->record_size);
436     if (!(
437         (record_size) && /* non zero */
438         (record_size >= UEFI_CPER_RECORD_MIN_SIZE) &&
439         (((record_size - 1) & record_size) == 0) && /* is power of 2 */
440         (record_size >= 4096) /* PAGE_SIZE */
441         )) {
442         error_setg(errp, "ERST record_size %u is invalid", record_size);
443         return;
444     }
445 
446     /* Validity check header */
447     if (!(
448         (le64_to_cpu(header->magic) == ERST_STORE_MAGIC) &&
449         ((le32_to_cpu(header->storage_offset) % record_size) == 0) &&
450         (le16_to_cpu(header->version) == 0x0100) &&
451         (le16_to_cpu(header->reserved) == 0)
452         )) {
453         error_setg(errp, "ERST backend storage header is invalid");
454         return;
455     }
456 
457     /* Check storage_size against record_size */
458     if (((s->storage_size % record_size) != 0) ||
459          (record_size > s->storage_size)) {
460         error_setg(errp, "ACPI ERST requires storage size be multiple of "
461             "record size (%uKiB)", record_size);
462         return;
463     }
464 
465     /* Compute offset of first and last record storage slot */
466     s->first_record_index = le32_to_cpu(header->storage_offset)
467         / record_size;
468     s->last_record_index = (s->storage_size / record_size);
469 }
470 
471 static void update_map_entry(ERSTDeviceState *s, unsigned index,
472     uint64_t record_id)
473 {
474     if (index < s->last_record_index) {
475         s->header->map[index] = cpu_to_le64(record_id);
476     }
477 }
478 
479 static unsigned find_next_empty_record_index(ERSTDeviceState *s)
480 {
481     unsigned rc = 0; /* 0 not a valid index */
482     unsigned index = s->first_record_index;
483 
484     for (; index < s->last_record_index; ++index) {
485         if (le64_to_cpu(s->header->map[index]) == ERST_UNSPECIFIED_RECORD_ID) {
486             rc = index;
487             break;
488         }
489     }
490 
491     return rc;
492 }
493 
494 static unsigned lookup_erst_record(ERSTDeviceState *s,
495     uint64_t record_identifier)
496 {
497     unsigned rc = 0; /* 0 not a valid index */
498 
499     /* Find the record_identifier in the map */
500     if (record_identifier != ERST_UNSPECIFIED_RECORD_ID) {
501         /*
502          * Count number of valid records encountered, and
503          * short-circuit the loop if identifier not found
504          */
505         uint32_t record_count = le32_to_cpu(s->header->record_count);
506         unsigned count = 0;
507         unsigned index;
508         for (index = s->first_record_index; index < s->last_record_index &&
509                 count < record_count; ++index) {
510             if (le64_to_cpu(s->header->map[index]) == record_identifier) {
511                 rc = index;
512                 break;
513             }
514             if (le64_to_cpu(s->header->map[index]) !=
515                 ERST_UNSPECIFIED_RECORD_ID) {
516                 ++count;
517             }
518         }
519     }
520 
521     return rc;
522 }
523 
524 /*
525  * ACPI 4.0: 17.4.1.1 Serialization Actions, also see
526  * ACPI 4.0: 17.4.2.2 Operations - Reading 6.c and 2.c
527  */
528 static unsigned get_next_record_identifier(ERSTDeviceState *s,
529     uint64_t *record_identifier, bool first)
530 {
531     unsigned found = 0;
532     unsigned index;
533 
534     /* For operations needing to return 'first' record identifier */
535     if (first) {
536         /* Reset initial index to beginning */
537         s->next_record_index = s->first_record_index;
538     }
539     index = s->next_record_index;
540 
541     *record_identifier = ERST_EMPTY_END_RECORD_ID;
542 
543     if (le32_to_cpu(s->header->record_count)) {
544         for (; index < s->last_record_index; ++index) {
545             if (le64_to_cpu(s->header->map[index]) !=
546                     ERST_UNSPECIFIED_RECORD_ID) {
547                     /* where to start next time */
548                     s->next_record_index = index + 1;
549                     *record_identifier = le64_to_cpu(s->header->map[index]);
550                     found = 1;
551                     break;
552             }
553         }
554     }
555     if (!found) {
556         /* at end (ie scan complete), reset */
557         s->next_record_index = s->first_record_index;
558     }
559 
560     return STATUS_SUCCESS;
561 }
562 
563 /* ACPI 4.0: 17.4.2.3 Operations - Clearing */
564 static unsigned clear_erst_record(ERSTDeviceState *s)
565 {
566     unsigned rc = STATUS_RECORD_NOT_FOUND;
567     unsigned index;
568 
569     /* Check for valid record identifier */
570     if (!ERST_IS_VALID_RECORD_ID(s->record_identifier)) {
571         return STATUS_FAILED;
572     }
573 
574     index = lookup_erst_record(s, s->record_identifier);
575     if (index) {
576         /* No need to wipe record, just invalidate its map entry */
577         uint32_t record_count;
578         update_map_entry(s, index, ERST_UNSPECIFIED_RECORD_ID);
579         record_count = le32_to_cpu(s->header->record_count);
580         record_count -= 1;
581         s->header->record_count = cpu_to_le32(record_count);
582         rc = STATUS_SUCCESS;
583     }
584 
585     return rc;
586 }
587 
588 /* ACPI 4.0: 17.4.2.2 Operations - Reading */
589 static unsigned read_erst_record(ERSTDeviceState *s)
590 {
591     unsigned rc = STATUS_RECORD_NOT_FOUND;
592     unsigned exchange_length;
593     unsigned index;
594 
595     /* Check if backend storage is empty */
596     if (le32_to_cpu(s->header->record_count) == 0) {
597         return STATUS_RECORD_STORE_EMPTY;
598     }
599 
600     exchange_length = memory_region_size(&s->exchange_mr);
601 
602     /* Check for record identifier of all 0s */
603     if (s->record_identifier == ERST_UNSPECIFIED_RECORD_ID) {
604         /* Set to 'first' record in storage */
605         get_next_record_identifier(s, &s->record_identifier, true);
606         /* record_identifier is now a valid id, or all 1s */
607     }
608 
609     /* Check for record identifier of all 1s */
610     if (s->record_identifier == ERST_EMPTY_END_RECORD_ID) {
611         return STATUS_FAILED;
612     }
613 
614     /* Validate record_offset */
615     if (s->record_offset > (exchange_length - UEFI_CPER_RECORD_MIN_SIZE)) {
616         return STATUS_FAILED;
617     }
618 
619     index = lookup_erst_record(s, s->record_identifier);
620     if (index) {
621         uint8_t *nvram;
622         uint8_t *exchange;
623         uint32_t record_length;
624 
625         /* Obtain pointer to the exchange buffer */
626         exchange = memory_region_get_ram_ptr(&s->exchange_mr);
627         exchange += s->record_offset;
628         /* Obtain pointer to slot in storage */
629         nvram = get_nvram_ptr_by_index(s, index);
630         /* Validate CPER record_length */
631         memcpy((uint8_t *)&record_length,
632             &nvram[UEFI_CPER_RECORD_LENGTH_OFFSET],
633             sizeof(uint32_t));
634         record_length = le32_to_cpu(record_length);
635         if (record_length < UEFI_CPER_RECORD_MIN_SIZE) {
636             rc = STATUS_FAILED;
637         }
638         if (record_length > exchange_length - s->record_offset) {
639             rc = STATUS_FAILED;
640         }
641         /* If all is ok, copy the record to the exchange buffer */
642         if (rc != STATUS_FAILED) {
643             memcpy(exchange, nvram, record_length);
644             rc = STATUS_SUCCESS;
645         }
646     } else {
647         /*
648          * See "Reading : 'The steps performed by the platform ...' 2.c"
649          * Set to 'first' record in storage
650          */
651         get_next_record_identifier(s, &s->record_identifier, true);
652     }
653 
654     return rc;
655 }
656 
657 /* ACPI 4.0: 17.4.2.1 Operations - Writing */
658 static unsigned write_erst_record(ERSTDeviceState *s)
659 {
660     unsigned rc = STATUS_FAILED;
661     unsigned exchange_length;
662     unsigned index;
663     uint64_t record_identifier;
664     uint32_t record_length;
665     uint8_t *exchange;
666     uint8_t *nvram = NULL;
667     bool record_found = false;
668 
669     exchange_length = memory_region_size(&s->exchange_mr);
670 
671     /* Validate record_offset */
672     if (s->record_offset > (exchange_length - UEFI_CPER_RECORD_MIN_SIZE)) {
673         return STATUS_FAILED;
674     }
675 
676     /* Obtain pointer to record in the exchange buffer */
677     exchange = memory_region_get_ram_ptr(&s->exchange_mr);
678     exchange += s->record_offset;
679 
680     /* Validate CPER record_length */
681     memcpy((uint8_t *)&record_length, &exchange[UEFI_CPER_RECORD_LENGTH_OFFSET],
682         sizeof(uint32_t));
683     record_length = le32_to_cpu(record_length);
684     if (record_length < UEFI_CPER_RECORD_MIN_SIZE) {
685         return STATUS_FAILED;
686     }
687     if (record_length > exchange_length - s->record_offset) {
688         return STATUS_FAILED;
689     }
690 
691     /* Extract record identifier */
692     memcpy((uint8_t *)&record_identifier, &exchange[UEFI_CPER_RECORD_ID_OFFSET],
693         sizeof(uint64_t));
694     record_identifier = le64_to_cpu(record_identifier);
695 
696     /* Check for valid record identifier */
697     if (!ERST_IS_VALID_RECORD_ID(record_identifier)) {
698         return STATUS_FAILED;
699     }
700 
701     index = lookup_erst_record(s, record_identifier);
702     if (index) {
703         /* Record found, overwrite existing record */
704         nvram = get_nvram_ptr_by_index(s, index);
705         record_found = true;
706     } else {
707         /* Record not found, not an overwrite, allocate for write */
708         index = find_next_empty_record_index(s);
709         if (index) {
710             nvram = get_nvram_ptr_by_index(s, index);
711         } else {
712             /* All slots are occupied */
713             rc = STATUS_NOT_ENOUGH_SPACE;
714         }
715     }
716     if (nvram) {
717         /* Write the record into the slot */
718         memcpy(nvram, exchange, record_length);
719         memset(nvram + record_length, 0xFF, exchange_length - record_length);
720         /* If a new record, increment the record_count */
721         if (!record_found) {
722             uint32_t record_count;
723             record_count = le32_to_cpu(s->header->record_count);
724             record_count += 1; /* writing new record */
725             s->header->record_count = cpu_to_le32(record_count);
726         }
727         update_map_entry(s, index, record_identifier);
728         rc = STATUS_SUCCESS;
729     }
730 
731     return rc;
732 }
733 
734 /*******************************************************************/
735 
736 static uint64_t erst_rd_reg64(hwaddr addr,
737     uint64_t reg, unsigned size)
738 {
739     uint64_t rdval;
740     uint64_t mask;
741     unsigned shift;
742 
743     if (size == sizeof(uint64_t)) {
744         /* 64b access */
745         mask = 0xFFFFFFFFFFFFFFFFUL;
746         shift = 0;
747     } else {
748         /* 32b access */
749         mask = 0x00000000FFFFFFFFUL;
750         shift = ((addr & 0x4) == 0x4) ? 32 : 0;
751     }
752 
753     rdval = reg;
754     rdval >>= shift;
755     rdval &= mask;
756 
757     return rdval;
758 }
759 
760 static uint64_t erst_wr_reg64(hwaddr addr,
761     uint64_t reg, uint64_t val, unsigned size)
762 {
763     uint64_t wrval;
764     uint64_t mask;
765     unsigned shift;
766 
767     if (size == sizeof(uint64_t)) {
768         /* 64b access */
769         mask = 0xFFFFFFFFFFFFFFFFUL;
770         shift = 0;
771     } else {
772         /* 32b access */
773         mask = 0x00000000FFFFFFFFUL;
774         shift = ((addr & 0x4) == 0x4) ? 32 : 0;
775     }
776 
777     val &= mask;
778     val <<= shift;
779     mask <<= shift;
780     wrval = reg;
781     wrval &= ~mask;
782     wrval |= val;
783 
784     return wrval;
785 }
786 
787 static void erst_reg_write(void *opaque, hwaddr addr,
788     uint64_t val, unsigned size)
789 {
790     ERSTDeviceState *s = (ERSTDeviceState *)opaque;
791 
792     /*
793      * NOTE: All actions/operations/side effects happen on the WRITE,
794      * by this implementation's design. The READs simply return the
795      * reg_value contents.
796      */
797     trace_acpi_erst_reg_write(addr, val, size);
798 
799     switch (addr) {
800     case ERST_VALUE_OFFSET + 0:
801     case ERST_VALUE_OFFSET + 4:
802         s->reg_value = erst_wr_reg64(addr, s->reg_value, val, size);
803         break;
804     case ERST_ACTION_OFFSET + 0:
805         /*
806          * NOTE: all valid values written to this register are of the
807          * ACTION_* variety. Thus there is no need to make this a 64-bit
808          * register, 32-bits is appropriate. As such ERST_ACTION_OFFSET+4
809          * is not needed.
810          */
811         switch (val) {
812         case ACTION_BEGIN_WRITE_OPERATION:
813         case ACTION_BEGIN_READ_OPERATION:
814         case ACTION_BEGIN_CLEAR_OPERATION:
815         case ACTION_BEGIN_DUMMY_WRITE_OPERATION:
816         case ACTION_END_OPERATION:
817             s->operation = val;
818             break;
819         case ACTION_SET_RECORD_OFFSET:
820             s->record_offset = s->reg_value;
821             break;
822         case ACTION_EXECUTE_OPERATION:
823             if ((uint8_t)s->reg_value == ERST_EXECUTE_OPERATION_MAGIC) {
824                 s->busy_status = 1;
825                 switch (s->operation) {
826                 case ACTION_BEGIN_WRITE_OPERATION:
827                     s->command_status = write_erst_record(s);
828                     break;
829                 case ACTION_BEGIN_READ_OPERATION:
830                     s->command_status = read_erst_record(s);
831                     break;
832                 case ACTION_BEGIN_CLEAR_OPERATION:
833                     s->command_status = clear_erst_record(s);
834                     break;
835                 case ACTION_BEGIN_DUMMY_WRITE_OPERATION:
836                     s->command_status = STATUS_SUCCESS;
837                     break;
838                 case ACTION_END_OPERATION:
839                     s->command_status = STATUS_SUCCESS;
840                     break;
841                 default:
842                     s->command_status = STATUS_FAILED;
843                     break;
844                 }
845                 s->busy_status = 0;
846             }
847             break;
848         case ACTION_CHECK_BUSY_STATUS:
849             s->reg_value = s->busy_status;
850             break;
851         case ACTION_GET_COMMAND_STATUS:
852             s->reg_value = s->command_status;
853             break;
854         case ACTION_GET_RECORD_IDENTIFIER:
855             s->command_status = get_next_record_identifier(s,
856                                     &s->reg_value, false);
857             break;
858         case ACTION_SET_RECORD_IDENTIFIER:
859             s->record_identifier = s->reg_value;
860             break;
861         case ACTION_GET_RECORD_COUNT:
862             s->reg_value = le32_to_cpu(s->header->record_count);
863             break;
864         case ACTION_GET_ERROR_LOG_ADDRESS_RANGE:
865             s->reg_value = (hwaddr)pci_get_bar_addr(PCI_DEVICE(s), 1);
866             break;
867         case ACTION_GET_ERROR_LOG_ADDRESS_LENGTH:
868             s->reg_value = le32_to_cpu(s->header->record_size);
869             break;
870         case ACTION_GET_ERROR_LOG_ADDRESS_RANGE_ATTRIBUTES:
871             s->reg_value = 0x0; /* intentional, not NVRAM mode */
872             break;
873         case ACTION_GET_EXECUTE_OPERATION_TIMINGS:
874             s->reg_value =
875                 (100ULL << 32) | /* 100us max time */
876                 (10ULL  <<  0) ; /*  10us min time */
877             break;
878         default:
879             /* Unknown action/command, NOP */
880             break;
881         }
882         break;
883     default:
884         /* This should not happen, but if it does, NOP */
885         break;
886     }
887 }
888 
889 static uint64_t erst_reg_read(void *opaque, hwaddr addr,
890                                 unsigned size)
891 {
892     ERSTDeviceState *s = (ERSTDeviceState *)opaque;
893     uint64_t val = 0;
894 
895     switch (addr) {
896     case ERST_ACTION_OFFSET + 0:
897     case ERST_ACTION_OFFSET + 4:
898         val = erst_rd_reg64(addr, s->reg_action, size);
899         break;
900     case ERST_VALUE_OFFSET + 0:
901     case ERST_VALUE_OFFSET + 4:
902         val = erst_rd_reg64(addr, s->reg_value, size);
903         break;
904     default:
905         break;
906     }
907     trace_acpi_erst_reg_read(addr, val, size);
908     return val;
909 }
910 
911 static const MemoryRegionOps erst_reg_ops = {
912     .read = erst_reg_read,
913     .write = erst_reg_write,
914     .endianness = DEVICE_NATIVE_ENDIAN,
915 };
916 
917 /*******************************************************************/
918 /*******************************************************************/
919 static int erst_post_load(void *opaque, int version_id)
920 {
921     ERSTDeviceState *s = opaque;
922 
923     /* Recompute pointer to header */
924     s->header = (ERSTStorageHeader *)get_nvram_ptr_by_index(s, 0);
925     trace_acpi_erst_post_load(s->header, le32_to_cpu(s->header->record_size));
926 
927     return 0;
928 }
929 
930 static const VMStateDescription erst_vmstate  = {
931     .name = "acpi-erst",
932     .version_id = 1,
933     .minimum_version_id = 1,
934     .post_load = erst_post_load,
935     .fields = (const VMStateField[]) {
936         VMSTATE_UINT8(operation, ERSTDeviceState),
937         VMSTATE_UINT8(busy_status, ERSTDeviceState),
938         VMSTATE_UINT8(command_status, ERSTDeviceState),
939         VMSTATE_UINT32(record_offset, ERSTDeviceState),
940         VMSTATE_UINT64(reg_action, ERSTDeviceState),
941         VMSTATE_UINT64(reg_value, ERSTDeviceState),
942         VMSTATE_UINT64(record_identifier, ERSTDeviceState),
943         VMSTATE_UINT32(next_record_index, ERSTDeviceState),
944         VMSTATE_END_OF_LIST()
945     }
946 };
947 
948 static void erst_realizefn(PCIDevice *pci_dev, Error **errp)
949 {
950     ERRP_GUARD();
951     ERSTDeviceState *s = ACPIERST(pci_dev);
952 
953     trace_acpi_erst_realizefn_in();
954 
955     if (!s->hostmem) {
956         error_setg(errp, "'" ACPI_ERST_MEMDEV_PROP "' property is not set");
957         return;
958     } else if (host_memory_backend_is_mapped(s->hostmem)) {
959         error_setg(errp, "can't use already busy memdev: %s",
960                    object_get_canonical_path_component(OBJECT(s->hostmem)));
961         return;
962     }
963 
964     s->hostmem_mr = host_memory_backend_get_memory(s->hostmem);
965 
966     /* HostMemoryBackend size will be multiple of PAGE_SIZE */
967     s->storage_size = object_property_get_int(OBJECT(s->hostmem), "size", errp);
968     if (*errp) {
969         return;
970     }
971 
972     /* Initialize backend storage and record_count */
973     check_erst_backend_storage(s, errp);
974     if (*errp) {
975         return;
976     }
977 
978     /* BAR 0: Programming registers */
979     memory_region_init_io(&s->iomem_mr, OBJECT(pci_dev), &erst_reg_ops, s,
980                           TYPE_ACPI_ERST, ERST_REG_SIZE);
981     pci_register_bar(pci_dev, 0, PCI_BASE_ADDRESS_SPACE_MEMORY, &s->iomem_mr);
982 
983     /* BAR 1: Exchange buffer memory */
984     memory_region_init_ram(&s->exchange_mr, OBJECT(pci_dev),
985                             "erst.exchange",
986                             le32_to_cpu(s->header->record_size), errp);
987     if (*errp) {
988         return;
989     }
990     pci_register_bar(pci_dev, 1, PCI_BASE_ADDRESS_SPACE_MEMORY,
991                         &s->exchange_mr);
992 
993     /* Include the backend storage in the migration stream */
994     vmstate_register_ram_global(s->hostmem_mr);
995 
996     trace_acpi_erst_realizefn_out(s->storage_size);
997 }
998 
999 static void erst_reset(DeviceState *dev)
1000 {
1001     ERSTDeviceState *s = ACPIERST(dev);
1002 
1003     trace_acpi_erst_reset_in(le32_to_cpu(s->header->record_count));
1004     s->operation = 0;
1005     s->busy_status = 0;
1006     s->command_status = STATUS_SUCCESS;
1007     s->record_identifier = ERST_UNSPECIFIED_RECORD_ID;
1008     s->record_offset = 0;
1009     s->next_record_index = s->first_record_index;
1010     /* NOTE: first/last_record_index are computed only once */
1011     trace_acpi_erst_reset_out(le32_to_cpu(s->header->record_count));
1012 }
1013 
1014 static Property erst_properties[] = {
1015     DEFINE_PROP_LINK(ACPI_ERST_MEMDEV_PROP, ERSTDeviceState, hostmem,
1016                      TYPE_MEMORY_BACKEND, HostMemoryBackend *),
1017     DEFINE_PROP_UINT32(ACPI_ERST_RECORD_SIZE_PROP, ERSTDeviceState,
1018                      default_record_size, ERST_RECORD_SIZE),
1019     DEFINE_PROP_END_OF_LIST(),
1020 };
1021 
1022 static void erst_class_init(ObjectClass *klass, void *data)
1023 {
1024     DeviceClass *dc = DEVICE_CLASS(klass);
1025     PCIDeviceClass *k = PCI_DEVICE_CLASS(klass);
1026 
1027     trace_acpi_erst_class_init_in();
1028     k->realize = erst_realizefn;
1029     k->vendor_id = PCI_VENDOR_ID_REDHAT;
1030     k->device_id = PCI_DEVICE_ID_REDHAT_ACPI_ERST;
1031     k->revision = 0x00;
1032     k->class_id = PCI_CLASS_OTHERS;
1033     dc->reset = erst_reset;
1034     dc->vmsd = &erst_vmstate;
1035     dc->user_creatable = true;
1036     dc->hotpluggable = false;
1037     device_class_set_props(dc, erst_properties);
1038     dc->desc = "ACPI Error Record Serialization Table (ERST) device";
1039     set_bit(DEVICE_CATEGORY_MISC, dc->categories);
1040     trace_acpi_erst_class_init_out();
1041 }
1042 
1043 static const TypeInfo erst_type_info = {
1044     .name          = TYPE_ACPI_ERST,
1045     .parent        = TYPE_PCI_DEVICE,
1046     .class_init    = erst_class_init,
1047     .instance_size = sizeof(ERSTDeviceState),
1048     .interfaces = (InterfaceInfo[]) {
1049         { INTERFACE_CONVENTIONAL_PCI_DEVICE },
1050         { }
1051     }
1052 };
1053 
1054 static void erst_register_types(void)
1055 {
1056     type_register_static(&erst_type_info);
1057 }
1058 
1059 type_init(erst_register_types)
1060