1 /* 2 * A virtio device implementing a hardware random number generator. 3 * 4 * Copyright 2012 Red Hat, Inc. 5 * Copyright 2012 Amit Shah <amit.shah@redhat.com> 6 * 7 * This work is licensed under the terms of the GNU GPL, version 2 or 8 * (at your option) any later version. See the COPYING file in the 9 * top-level directory. 10 */ 11 12 #include "qemu/osdep.h" 13 #include "qapi/error.h" 14 #include "qemu/iov.h" 15 #include "hw/qdev.h" 16 #include "hw/virtio/virtio.h" 17 #include "hw/virtio/virtio-rng.h" 18 #include "sysemu/rng.h" 19 #include "qom/object_interfaces.h" 20 #include "trace.h" 21 22 static bool is_guest_ready(VirtIORNG *vrng) 23 { 24 VirtIODevice *vdev = VIRTIO_DEVICE(vrng); 25 if (virtio_queue_ready(vrng->vq) 26 && (vdev->status & VIRTIO_CONFIG_S_DRIVER_OK)) { 27 return true; 28 } 29 trace_virtio_rng_guest_not_ready(vrng); 30 return false; 31 } 32 33 static size_t get_request_size(VirtQueue *vq, unsigned quota) 34 { 35 unsigned int in, out; 36 37 virtqueue_get_avail_bytes(vq, &in, &out, quota, 0); 38 return in; 39 } 40 41 static void virtio_rng_process(VirtIORNG *vrng); 42 43 /* Send data from a char device over to the guest */ 44 static void chr_read(void *opaque, const void *buf, size_t size) 45 { 46 VirtIORNG *vrng = opaque; 47 VirtIODevice *vdev = VIRTIO_DEVICE(vrng); 48 VirtQueueElement *elem; 49 size_t len; 50 int offset; 51 52 if (!is_guest_ready(vrng)) { 53 return; 54 } 55 56 vrng->quota_remaining -= size; 57 58 offset = 0; 59 while (offset < size) { 60 elem = virtqueue_pop(vrng->vq, sizeof(VirtQueueElement)); 61 if (!elem) { 62 break; 63 } 64 len = iov_from_buf(elem->in_sg, elem->in_num, 65 0, buf + offset, size - offset); 66 offset += len; 67 68 virtqueue_push(vrng->vq, elem, len); 69 trace_virtio_rng_pushed(vrng, len); 70 g_free(elem); 71 } 72 virtio_notify(vdev, vrng->vq); 73 74 if (!virtio_queue_empty(vrng->vq)) { 75 /* If we didn't drain the queue, call virtio_rng_process 76 * to take care of asking for more data as appropriate. 77 */ 78 virtio_rng_process(vrng); 79 } 80 } 81 82 static void virtio_rng_process(VirtIORNG *vrng) 83 { 84 size_t size; 85 unsigned quota; 86 87 if (!is_guest_ready(vrng)) { 88 return; 89 } 90 91 if (vrng->activate_timer) { 92 timer_mod(vrng->rate_limit_timer, 93 qemu_clock_get_ms(QEMU_CLOCK_VIRTUAL) + vrng->conf.period_ms); 94 vrng->activate_timer = false; 95 } 96 97 if (vrng->quota_remaining < 0) { 98 quota = 0; 99 } else { 100 quota = MIN((uint64_t)vrng->quota_remaining, (uint64_t)UINT32_MAX); 101 } 102 size = get_request_size(vrng->vq, quota); 103 104 trace_virtio_rng_request(vrng, size, quota); 105 106 size = MIN(vrng->quota_remaining, size); 107 if (size) { 108 rng_backend_request_entropy(vrng->rng, size, chr_read, vrng); 109 } 110 } 111 112 static void handle_input(VirtIODevice *vdev, VirtQueue *vq) 113 { 114 VirtIORNG *vrng = VIRTIO_RNG(vdev); 115 virtio_rng_process(vrng); 116 } 117 118 static uint64_t get_features(VirtIODevice *vdev, uint64_t f, Error **errp) 119 { 120 return f; 121 } 122 123 static void virtio_rng_save(QEMUFile *f, void *opaque) 124 { 125 VirtIODevice *vdev = opaque; 126 127 virtio_save(vdev, f); 128 } 129 130 static int virtio_rng_load(QEMUFile *f, void *opaque, int version_id) 131 { 132 VirtIORNG *vrng = opaque; 133 int ret; 134 135 if (version_id != 1) { 136 return -EINVAL; 137 } 138 ret = virtio_load(VIRTIO_DEVICE(vrng), f, version_id); 139 if (ret != 0) { 140 return ret; 141 } 142 143 /* We may have an element ready but couldn't process it due to a quota 144 * limit. Make sure to try again after live migration when the quota may 145 * have been reset. 146 */ 147 virtio_rng_process(vrng); 148 149 return 0; 150 } 151 152 static void check_rate_limit(void *opaque) 153 { 154 VirtIORNG *vrng = opaque; 155 156 vrng->quota_remaining = vrng->conf.max_bytes; 157 virtio_rng_process(vrng); 158 vrng->activate_timer = true; 159 } 160 161 static void virtio_rng_device_realize(DeviceState *dev, Error **errp) 162 { 163 VirtIODevice *vdev = VIRTIO_DEVICE(dev); 164 VirtIORNG *vrng = VIRTIO_RNG(dev); 165 Error *local_err = NULL; 166 167 if (vrng->conf.period_ms <= 0) { 168 error_setg(errp, "'period' parameter expects a positive integer"); 169 return; 170 } 171 172 /* Workaround: Property parsing does not enforce unsigned integers, 173 * So this is a hack to reject such numbers. */ 174 if (vrng->conf.max_bytes > INT64_MAX) { 175 error_setg(errp, "'max-bytes' parameter must be non-negative, " 176 "and less than 2^63"); 177 return; 178 } 179 180 if (vrng->conf.rng == NULL) { 181 vrng->conf.default_backend = RNG_RANDOM(object_new(TYPE_RNG_RANDOM)); 182 183 user_creatable_complete(OBJECT(vrng->conf.default_backend), 184 &local_err); 185 if (local_err) { 186 error_propagate(errp, local_err); 187 object_unref(OBJECT(vrng->conf.default_backend)); 188 return; 189 } 190 191 object_property_add_child(OBJECT(dev), 192 "default-backend", 193 OBJECT(vrng->conf.default_backend), 194 NULL); 195 196 /* The child property took a reference, we can safely drop ours now */ 197 object_unref(OBJECT(vrng->conf.default_backend)); 198 199 object_property_set_link(OBJECT(dev), 200 OBJECT(vrng->conf.default_backend), 201 "rng", NULL); 202 } 203 204 vrng->rng = vrng->conf.rng; 205 if (vrng->rng == NULL) { 206 error_setg(errp, "'rng' parameter expects a valid object"); 207 return; 208 } 209 210 virtio_init(vdev, "virtio-rng", VIRTIO_ID_RNG, 0); 211 212 vrng->vq = virtio_add_queue(vdev, 8, handle_input); 213 vrng->quota_remaining = vrng->conf.max_bytes; 214 vrng->rate_limit_timer = timer_new_ms(QEMU_CLOCK_VIRTUAL, 215 check_rate_limit, vrng); 216 vrng->activate_timer = true; 217 register_savevm(dev, "virtio-rng", -1, 1, virtio_rng_save, 218 virtio_rng_load, vrng); 219 } 220 221 static void virtio_rng_device_unrealize(DeviceState *dev, Error **errp) 222 { 223 VirtIODevice *vdev = VIRTIO_DEVICE(dev); 224 VirtIORNG *vrng = VIRTIO_RNG(dev); 225 226 timer_del(vrng->rate_limit_timer); 227 timer_free(vrng->rate_limit_timer); 228 unregister_savevm(dev, "virtio-rng", vrng); 229 virtio_cleanup(vdev); 230 } 231 232 static Property virtio_rng_properties[] = { 233 /* Set a default rate limit of 2^47 bytes per minute or roughly 2TB/s. If 234 * you have an entropy source capable of generating more entropy than this 235 * and you can pass it through via virtio-rng, then hats off to you. Until 236 * then, this is unlimited for all practical purposes. 237 */ 238 DEFINE_PROP_UINT64("max-bytes", VirtIORNG, conf.max_bytes, INT64_MAX), 239 DEFINE_PROP_UINT32("period", VirtIORNG, conf.period_ms, 1 << 16), 240 DEFINE_PROP_END_OF_LIST(), 241 }; 242 243 static void virtio_rng_class_init(ObjectClass *klass, void *data) 244 { 245 DeviceClass *dc = DEVICE_CLASS(klass); 246 VirtioDeviceClass *vdc = VIRTIO_DEVICE_CLASS(klass); 247 248 dc->props = virtio_rng_properties; 249 set_bit(DEVICE_CATEGORY_MISC, dc->categories); 250 vdc->realize = virtio_rng_device_realize; 251 vdc->unrealize = virtio_rng_device_unrealize; 252 vdc->get_features = get_features; 253 } 254 255 static void virtio_rng_initfn(Object *obj) 256 { 257 VirtIORNG *vrng = VIRTIO_RNG(obj); 258 259 object_property_add_link(obj, "rng", TYPE_RNG_BACKEND, 260 (Object **)&vrng->conf.rng, 261 qdev_prop_allow_set_link_before_realize, 262 OBJ_PROP_LINK_UNREF_ON_RELEASE, NULL); 263 } 264 265 static const TypeInfo virtio_rng_info = { 266 .name = TYPE_VIRTIO_RNG, 267 .parent = TYPE_VIRTIO_DEVICE, 268 .instance_size = sizeof(VirtIORNG), 269 .instance_init = virtio_rng_initfn, 270 .class_init = virtio_rng_class_init, 271 }; 272 273 static void virtio_register_types(void) 274 { 275 type_register_static(&virtio_rng_info); 276 } 277 278 type_init(virtio_register_types) 279