xref: /openbmc/qemu/include/hw/core/cpu.h (revision c4fa97c7f216fc80b09a5d32be847ff8d502cba6)
1 /*
2  * QEMU CPU model
3  *
4  * Copyright (c) 2012 SUSE LINUX Products GmbH
5  *
6  * This program is free software; you can redistribute it and/or
7  * modify it under the terms of the GNU General Public License
8  * as published by the Free Software Foundation; either version 2
9  * of the License, or (at your option) any later version.
10  *
11  * This program is distributed in the hope that it will be useful,
12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14  * GNU General Public License for more details.
15  *
16  * You should have received a copy of the GNU General Public License
17  * along with this program; if not, see
18  * <http://www.gnu.org/licenses/gpl-2.0.html>
19  */
20 #ifndef QEMU_CPU_H
21 #define QEMU_CPU_H
22 
23 #include "hw/qdev-core.h"
24 #include "disas/dis-asm.h"
25 #include "exec/breakpoint.h"
26 #include "exec/hwaddr.h"
27 #include "exec/vaddr.h"
28 #include "exec/memattrs.h"
29 #include "exec/mmu-access-type.h"
30 #include "exec/tlb-common.h"
31 #include "qapi/qapi-types-machine.h"
32 #include "qapi/qapi-types-run-state.h"
33 #include "qemu/bitmap.h"
34 #include "qemu/rcu_queue.h"
35 #include "qemu/queue.h"
36 #include "qemu/lockcnt.h"
37 #include "qemu/thread.h"
38 #include "qom/object.h"
39 
40 typedef int (*WriteCoreDumpFunction)(const void *buf, size_t size,
41                                      void *opaque);
42 
43 /**
44  * SECTION:cpu
45  * @section_id: QEMU-cpu
46  * @title: CPU Class
47  * @short_description: Base class for all CPUs
48  */
49 
50 #define TYPE_CPU "cpu"
51 
52 /* Since this macro is used a lot in hot code paths and in conjunction with
53  * FooCPU *foo_env_get_cpu(), we deviate from usual QOM practice by using
54  * an unchecked cast.
55  */
56 #define CPU(obj) ((CPUState *)(obj))
57 
58 /*
59  * The class checkers bring in CPU_GET_CLASS() which is potentially
60  * expensive given the eventual call to
61  * object_class_dynamic_cast_assert(). Because of this the CPUState
62  * has a cached value for the class in cs->cc which is set up in
63  * cpu_exec_realizefn() for use in hot code paths.
64  */
65 typedef struct CPUClass CPUClass;
66 DECLARE_CLASS_CHECKERS(CPUClass, CPU,
67                        TYPE_CPU)
68 
69 /**
70  * OBJECT_DECLARE_CPU_TYPE:
71  * @CpuInstanceType: instance struct name
72  * @CpuClassType: class struct name
73  * @CPU_MODULE_OBJ_NAME: the CPU name in uppercase with underscore separators
74  *
75  * This macro is typically used in "cpu-qom.h" header file, and will:
76  *
77  *   - create the typedefs for the CPU object and class structs
78  *   - register the type for use with g_autoptr
79  *   - provide three standard type cast functions
80  *
81  * The object struct and class struct need to be declared manually.
82  */
83 #define OBJECT_DECLARE_CPU_TYPE(CpuInstanceType, CpuClassType, CPU_MODULE_OBJ_NAME) \
84     typedef struct ArchCPU CpuInstanceType; \
85     OBJECT_DECLARE_TYPE(ArchCPU, CpuClassType, CPU_MODULE_OBJ_NAME);
86 
87 typedef struct CPUWatchpoint CPUWatchpoint;
88 
89 /* see physmem.c */
90 struct CPUAddressSpace;
91 
92 /* see accel/tcg/tb-jmp-cache.h */
93 struct CPUJumpCache;
94 
95 /* see accel-cpu.h */
96 struct AccelCPUClass;
97 
98 /* see sysemu-cpu-ops.h */
99 struct SysemuCPUOps;
100 
101 /**
102  * CPUClass:
103  * @class_by_name: Callback to map -cpu command line model name to an
104  *                 instantiatable CPU type.
105  * @list_cpus: list available CPU models and flags.
106  * @parse_features: Callback to parse command line arguments.
107  * @reset_dump_flags: #CPUDumpFlags to use for reset logging.
108  * @memory_rw_debug: Callback for GDB memory access.
109  * @dump_state: Callback for dumping state.
110  * @query_cpu_fast:
111  *       Fill in target specific information for the "query-cpus-fast"
112  *       QAPI call.
113  * @get_arch_id: Callback for getting architecture-dependent CPU ID.
114  * @set_pc: Callback for setting the Program Counter register. This
115  *       should have the semantics used by the target architecture when
116  *       setting the PC from a source such as an ELF file entry point;
117  *       for example on Arm it will also set the Thumb mode bit based
118  *       on the least significant bit of the new PC value.
119  *       If the target behaviour here is anything other than "set
120  *       the PC register to the value passed in" then the target must
121  *       also implement the synchronize_from_tb hook.
122  * @get_pc: Callback for getting the Program Counter register.
123  *       As above, with the semantics of the target architecture.
124  * @gdb_read_register: Callback for letting GDB read a register.
125  *                     No more than @gdb_num_core_regs registers can be read.
126  * @gdb_write_register: Callback for letting GDB write a register.
127  *                     No more than @gdb_num_core_regs registers can be written.
128  * @gdb_adjust_breakpoint: Callback for adjusting the address of a
129  *       breakpoint.  Used by AVR to handle a gdb mis-feature with
130  *       its Harvard architecture split code and data.
131  * @gdb_num_core_regs: Number of core registers accessible to GDB or 0 to infer
132  *                     from @gdb_core_xml_file.
133  * @gdb_core_xml_file: File name for core registers GDB XML description.
134  * @gdb_get_core_xml_file: Optional callback that returns the file name for
135  * the core registers GDB XML description. The returned value is expected to
136  * be a simple constant string: the caller will not g_free() it. If this
137  * is NULL then @gdb_core_xml_file will be used instead.
138  * @gdb_stop_before_watchpoint: Indicates whether GDB expects the CPU to stop
139  *           before the insn which triggers a watchpoint rather than after it.
140  * @gdb_arch_name: Optional callback that returns the architecture name known
141  * to GDB. The returned value is expected to be a simple constant string:
142  * the caller will not g_free() it.
143  * @disas_set_info: Setup architecture specific components of disassembly info
144  * @adjust_watchpoint_address: Perform a target-specific adjustment to an
145  * address before attempting to match it against watchpoints.
146  * @deprecation_note: If this CPUClass is deprecated, this field provides
147  *                    related information.
148  *
149  * Represents a CPU family or model.
150  */
151 struct CPUClass {
152     /*< private >*/
153     DeviceClass parent_class;
154     /*< public >*/
155 
156     ObjectClass *(*class_by_name)(const char *cpu_model);
157     void (*list_cpus)(void);
158     void (*parse_features)(const char *typename, char *str, Error **errp);
159 
160     int (*memory_rw_debug)(CPUState *cpu, vaddr addr,
161                            uint8_t *buf, size_t len, bool is_write);
162     void (*dump_state)(CPUState *cpu, FILE *, int flags);
163     void (*query_cpu_fast)(CPUState *cpu, CpuInfoFast *value);
164     int64_t (*get_arch_id)(CPUState *cpu);
165     void (*set_pc)(CPUState *cpu, vaddr value);
166     vaddr (*get_pc)(CPUState *cpu);
167     int (*gdb_read_register)(CPUState *cpu, GByteArray *buf, int reg);
168     int (*gdb_write_register)(CPUState *cpu, uint8_t *buf, int reg);
169     vaddr (*gdb_adjust_breakpoint)(CPUState *cpu, vaddr addr);
170 
171     const char *gdb_core_xml_file;
172     const gchar * (*gdb_arch_name)(CPUState *cpu);
173     const char * (*gdb_get_core_xml_file)(CPUState *cpu);
174 
175     void (*disas_set_info)(CPUState *cpu, disassemble_info *info);
176 
177     const char *deprecation_note;
178     struct AccelCPUClass *accel_cpu;
179 
180     /* when system emulation is not available, this pointer is NULL */
181     const struct SysemuCPUOps *sysemu_ops;
182 
183     /* when TCG is not available, this pointer is NULL */
184     const TCGCPUOps *tcg_ops;
185 
186     /*
187      * if not NULL, this is called in order for the CPUClass to initialize
188      * class data that depends on the accelerator, see accel/accel-common.c.
189      */
190     void (*init_accel_cpu)(struct AccelCPUClass *accel_cpu, CPUClass *cc);
191 
192     /*
193      * Keep non-pointer data at the end to minimize holes.
194      */
195     int reset_dump_flags;
196     int gdb_num_core_regs;
197     bool gdb_stop_before_watchpoint;
198 };
199 
200 /*
201  * Fix the number of mmu modes to 16, which is also the maximum
202  * supported by the softmmu tlb api.
203  */
204 #define NB_MMU_MODES 16
205 
206 /* Use a fully associative victim tlb of 8 entries. */
207 #define CPU_VTLB_SIZE 8
208 
209 /*
210  * The full TLB entry, which is not accessed by generated TCG code,
211  * so the layout is not as critical as that of CPUTLBEntry. This is
212  * also why we don't want to combine the two structs.
213  */
214 struct CPUTLBEntryFull {
215     /*
216      * @xlat_section contains:
217      *  - in the lower TARGET_PAGE_BITS, a physical section number
218      *  - with the lower TARGET_PAGE_BITS masked off, an offset which
219      *    must be added to the virtual address to obtain:
220      *     + the ram_addr_t of the target RAM (if the physical section
221      *       number is PHYS_SECTION_NOTDIRTY or PHYS_SECTION_ROM)
222      *     + the offset within the target MemoryRegion (otherwise)
223      */
224     hwaddr xlat_section;
225 
226     /*
227      * @phys_addr contains the physical address in the address space
228      * given by cpu_asidx_from_attrs(cpu, @attrs).
229      */
230     hwaddr phys_addr;
231 
232     /* @attrs contains the memory transaction attributes for the page. */
233     MemTxAttrs attrs;
234 
235     /* @prot contains the complete protections for the page. */
236     uint8_t prot;
237 
238     /* @lg_page_size contains the log2 of the page size. */
239     uint8_t lg_page_size;
240 
241     /* Additional tlb flags requested by tlb_fill. */
242     uint8_t tlb_fill_flags;
243 
244     /*
245      * Additional tlb flags for use by the slow path. If non-zero,
246      * the corresponding CPUTLBEntry comparator must have TLB_FORCE_SLOW.
247      */
248     uint8_t slow_flags[MMU_ACCESS_COUNT];
249 
250     /*
251      * Allow target-specific additions to this structure.
252      * This may be used to cache items from the guest cpu
253      * page tables for later use by the implementation.
254      */
255     union {
256         /*
257          * Cache the attrs and shareability fields from the page table entry.
258          *
259          * For ARMMMUIdx_Stage2*, pte_attrs is the S2 descriptor bits [5:2].
260          * Otherwise, pte_attrs is the same as the MAIR_EL1 8-bit format.
261          * For shareability and guarded, as in the SH and GP fields respectively
262          * of the VMSAv8-64 PTEs.
263          */
264         struct {
265             uint8_t pte_attrs;
266             uint8_t shareability;
267             bool guarded;
268         } arm;
269     } extra;
270 };
271 
272 /*
273  * Data elements that are per MMU mode, minus the bits accessed by
274  * the TCG fast path.
275  */
276 typedef struct CPUTLBDesc {
277     /*
278      * Describe a region covering all of the large pages allocated
279      * into the tlb.  When any page within this region is flushed,
280      * we must flush the entire tlb.  The region is matched if
281      * (addr & large_page_mask) == large_page_addr.
282      */
283     vaddr large_page_addr;
284     vaddr large_page_mask;
285     /* host time (in ns) at the beginning of the time window */
286     int64_t window_begin_ns;
287     /* maximum number of entries observed in the window */
288     size_t window_max_entries;
289     size_t n_used_entries;
290     /* The next index to use in the tlb victim table.  */
291     size_t vindex;
292     /* The tlb victim table, in two parts.  */
293     CPUTLBEntry vtable[CPU_VTLB_SIZE];
294     CPUTLBEntryFull vfulltlb[CPU_VTLB_SIZE];
295     CPUTLBEntryFull *fulltlb;
296 } CPUTLBDesc;
297 
298 /*
299  * Data elements that are shared between all MMU modes.
300  */
301 typedef struct CPUTLBCommon {
302     /* Serialize updates to f.table and d.vtable, and others as noted. */
303     QemuSpin lock;
304     /*
305      * Within dirty, for each bit N, modifications have been made to
306      * mmu_idx N since the last time that mmu_idx was flushed.
307      * Protected by tlb_c.lock.
308      */
309     uint16_t dirty;
310     /*
311      * Statistics.  These are not lock protected, but are read and
312      * written atomically.  This allows the monitor to print a snapshot
313      * of the stats without interfering with the cpu.
314      */
315     size_t full_flush_count;
316     size_t part_flush_count;
317     size_t elide_flush_count;
318 } CPUTLBCommon;
319 
320 /*
321  * The entire softmmu tlb, for all MMU modes.
322  * The meaning of each of the MMU modes is defined in the target code.
323  * Since this is placed within CPUNegativeOffsetState, the smallest
324  * negative offsets are at the end of the struct.
325  */
326 typedef struct CPUTLB {
327 #ifdef CONFIG_TCG
328     CPUTLBCommon c;
329     CPUTLBDesc d[NB_MMU_MODES];
330     CPUTLBDescFast f[NB_MMU_MODES];
331 #endif
332 } CPUTLB;
333 
334 /*
335  * Low 16 bits: number of cycles left, used only in icount mode.
336  * High 16 bits: Set to -1 to force TCG to stop executing linked TBs
337  * for this CPU and return to its top level loop (even in non-icount mode).
338  * This allows a single read-compare-cbranch-write sequence to test
339  * for both decrementer underflow and exceptions.
340  */
341 typedef union IcountDecr {
342     uint32_t u32;
343     struct {
344 #if HOST_BIG_ENDIAN
345         uint16_t high;
346         uint16_t low;
347 #else
348         uint16_t low;
349         uint16_t high;
350 #endif
351     } u16;
352 } IcountDecr;
353 
354 /**
355  * CPUNegativeOffsetState: Elements of CPUState most efficiently accessed
356  *                         from CPUArchState, via small negative offsets.
357  * @can_do_io: True if memory-mapped IO is allowed.
358  * @plugin_mem_cbs: active plugin memory callbacks
359  * @plugin_mem_value_low: 64 lower bits of latest accessed mem value.
360  * @plugin_mem_value_high: 64 higher bits of latest accessed mem value.
361  */
362 typedef struct CPUNegativeOffsetState {
363     CPUTLB tlb;
364 #ifdef CONFIG_PLUGIN
365     /*
366      * The callback pointer are accessed via TCG (see gen_empty_mem_helper).
367      */
368     GArray *plugin_mem_cbs;
369     uint64_t plugin_mem_value_low;
370     uint64_t plugin_mem_value_high;
371     int32_t plugin_cb_flags;
372 #endif
373     IcountDecr icount_decr;
374     bool can_do_io;
375 } CPUNegativeOffsetState;
376 
377 struct KVMState;
378 struct kvm_run;
379 
380 /* work queue */
381 
382 /* The union type allows passing of 64 bit target pointers on 32 bit
383  * hosts in a single parameter
384  */
385 typedef union {
386     int           host_int;
387     unsigned long host_ulong;
388     void         *host_ptr;
389     vaddr         target_ptr;
390 } run_on_cpu_data;
391 
392 #define RUN_ON_CPU_HOST_PTR(p)    ((run_on_cpu_data){.host_ptr = (p)})
393 #define RUN_ON_CPU_HOST_INT(i)    ((run_on_cpu_data){.host_int = (i)})
394 #define RUN_ON_CPU_HOST_ULONG(ul) ((run_on_cpu_data){.host_ulong = (ul)})
395 #define RUN_ON_CPU_TARGET_PTR(v)  ((run_on_cpu_data){.target_ptr = (v)})
396 #define RUN_ON_CPU_NULL           RUN_ON_CPU_HOST_PTR(NULL)
397 
398 typedef void (*run_on_cpu_func)(CPUState *cpu, run_on_cpu_data data);
399 
400 struct qemu_work_item;
401 
402 #define CPU_UNSET_NUMA_NODE_ID -1
403 
404 /**
405  * struct CPUState - common state of one CPU core or thread.
406  *
407  * @cpu_index: CPU index (informative).
408  * @cluster_index: Identifies which cluster this CPU is in.
409  *   For boards which don't define clusters or for "loose" CPUs not assigned
410  *   to a cluster this will be UNASSIGNED_CLUSTER_INDEX; otherwise it will
411  *   be the same as the cluster-id property of the CPU object's TYPE_CPU_CLUSTER
412  *   QOM parent.
413  *   Under TCG this value is propagated to @tcg_cflags.
414  *   See TranslationBlock::TCG CF_CLUSTER_MASK.
415  * @tcg_cflags: Pre-computed cflags for this cpu.
416  * @nr_threads: Number of threads within this CPU core.
417  * @thread: Host thread details, only live once @created is #true
418  * @sem: WIN32 only semaphore used only for qtest
419  * @thread_id: native thread id of vCPU, only live once @created is #true
420  * @running: #true if CPU is currently running (lockless).
421  * @has_waiter: #true if a CPU is currently waiting for the cpu_exec_end;
422  * valid under cpu_list_lock.
423  * @created: Indicates whether the CPU thread has been successfully created.
424  * @halt_cond: condition variable sleeping threads can wait on.
425  * @interrupt_request: Indicates a pending interrupt request.
426  * @halted: Nonzero if the CPU is in suspended state.
427  * @stop: Indicates a pending stop request.
428  * @stopped: Indicates the CPU has been artificially stopped.
429  * @unplug: Indicates a pending CPU unplug request.
430  * @crash_occurred: Indicates the OS reported a crash (panic) for this CPU
431  * @singlestep_enabled: Flags for single-stepping.
432  * @icount_extra: Instructions until next timer event.
433  * @cpu_ases: Pointer to array of CPUAddressSpaces (which define the
434  *            AddressSpaces this CPU has)
435  * @num_ases: number of CPUAddressSpaces in @cpu_ases
436  * @as: Pointer to the first AddressSpace, for the convenience of targets which
437  *      only have a single AddressSpace
438  * @gdb_regs: Additional GDB registers.
439  * @gdb_num_regs: Number of total registers accessible to GDB.
440  * @gdb_num_g_regs: Number of registers in GDB 'g' packets.
441  * @node: QTAILQ of CPUs sharing TB cache.
442  * @opaque: User data.
443  * @mem_io_pc: Host Program Counter at which the memory was accessed.
444  * @accel: Pointer to accelerator specific state.
445  * @vcpu_dirty: Hardware accelerator is not synchronized with QEMU state
446  * @kvm_fd: vCPU file descriptor for KVM.
447  * @work_mutex: Lock to prevent multiple access to @work_list.
448  * @work_list: List of pending asynchronous work.
449  * @plugin_state: per-CPU plugin state
450  * @ignore_memory_transaction_failures: Cached copy of the MachineState
451  *    flag of the same name: allows the board to suppress calling of the
452  *    CPU do_transaction_failed hook function.
453  * @kvm_dirty_gfns: Points to the KVM dirty ring for this CPU when KVM dirty
454  *    ring is enabled.
455  * @kvm_fetch_index: Keeps the index that we last fetched from the per-vCPU
456  *    dirty ring structure.
457  *
458  * @neg_align: The CPUState is the common part of a concrete ArchCPU
459  * which is allocated when an individual CPU instance is created. As
460  * such care is taken is ensure there is no gap between between
461  * CPUState and CPUArchState within ArchCPU.
462  *
463  * @neg: The architectural register state ("cpu_env") immediately follows
464  * CPUState in ArchCPU and is passed to TCG code. The @neg structure holds
465  * some common TCG CPU variables which are accessed with a negative offset
466  * from cpu_env.
467  */
468 struct CPUState {
469     /*< private >*/
470     DeviceState parent_obj;
471     /* cache to avoid expensive CPU_GET_CLASS */
472     CPUClass *cc;
473     /*< public >*/
474 
475     int nr_threads;
476 
477     struct QemuThread *thread;
478 #ifdef _WIN32
479     QemuSemaphore sem;
480 #endif
481     int thread_id;
482     bool running, has_waiter;
483     struct QemuCond *halt_cond;
484     bool thread_kicked;
485     bool created;
486     bool stop;
487     bool stopped;
488 
489     /* Should CPU start in powered-off state? */
490     bool start_powered_off;
491 
492     bool unplug;
493     bool crash_occurred;
494     bool exit_request;
495     int exclusive_context_count;
496     uint32_t cflags_next_tb;
497     /* updates protected by BQL */
498     uint32_t interrupt_request;
499     int singlestep_enabled;
500     int64_t icount_budget;
501     int64_t icount_extra;
502     uint64_t random_seed;
503     sigjmp_buf jmp_env;
504 
505     QemuMutex work_mutex;
506     QSIMPLEQ_HEAD(, qemu_work_item) work_list;
507 
508     struct CPUAddressSpace *cpu_ases;
509     int num_ases;
510     AddressSpace *as;
511     MemoryRegion *memory;
512 
513     struct CPUJumpCache *tb_jmp_cache;
514 
515     GArray *gdb_regs;
516     int gdb_num_regs;
517     int gdb_num_g_regs;
518     QTAILQ_ENTRY(CPUState) node;
519 
520     /* ice debug support */
521     QTAILQ_HEAD(, CPUBreakpoint) breakpoints;
522 
523     QTAILQ_HEAD(, CPUWatchpoint) watchpoints;
524     CPUWatchpoint *watchpoint_hit;
525 
526     void *opaque;
527 
528     /* In order to avoid passing too many arguments to the MMIO helpers,
529      * we store some rarely used information in the CPU context.
530      */
531     uintptr_t mem_io_pc;
532 
533     /* Only used in KVM */
534     int kvm_fd;
535     struct KVMState *kvm_state;
536     struct kvm_run *kvm_run;
537     struct kvm_dirty_gfn *kvm_dirty_gfns;
538     uint32_t kvm_fetch_index;
539     uint64_t dirty_pages;
540     int kvm_vcpu_stats_fd;
541 
542     /* Use by accel-block: CPU is executing an ioctl() */
543     QemuLockCnt in_ioctl_lock;
544 
545 #ifdef CONFIG_PLUGIN
546     CPUPluginState *plugin_state;
547 #endif
548 
549     /* TODO Move common fields from CPUArchState here. */
550     int cpu_index;
551     int cluster_index;
552     uint32_t tcg_cflags;
553     uint32_t halted;
554     int32_t exception_index;
555 
556     bool vcpu_dirty;
557     AccelCPUState *accel;
558 
559     /* Used to keep track of an outstanding cpu throttle thread for migration
560      * autoconverge
561      */
562     bool throttle_thread_scheduled;
563 
564     /*
565      * Sleep throttle_us_per_full microseconds once dirty ring is full
566      * if dirty page rate limit is enabled.
567      */
568     int64_t throttle_us_per_full;
569 
570     bool ignore_memory_transaction_failures;
571 
572     /* Used for user-only emulation of prctl(PR_SET_UNALIGN). */
573     bool prctl_unalign_sigbus;
574 
575     /* track IOMMUs whose translations we've cached in the TCG TLB */
576     GArray *iommu_notifiers;
577 
578     /*
579      * MUST BE LAST in order to minimize the displacement to CPUArchState.
580      */
581     char neg_align[-sizeof(CPUNegativeOffsetState) % 16] QEMU_ALIGNED(16);
582     CPUNegativeOffsetState neg;
583 };
584 
585 /* Validate placement of CPUNegativeOffsetState. */
586 QEMU_BUILD_BUG_ON(offsetof(CPUState, neg) !=
587                   sizeof(CPUState) - sizeof(CPUNegativeOffsetState));
588 
589 static inline CPUArchState *cpu_env(CPUState *cpu)
590 {
591     /* We validate that CPUArchState follows CPUState in cpu-target.c */
592     return (CPUArchState *)(cpu + 1);
593 }
594 
595 typedef QTAILQ_HEAD(CPUTailQ, CPUState) CPUTailQ;
596 extern CPUTailQ cpus_queue;
597 
598 #define first_cpu        QTAILQ_FIRST_RCU(&cpus_queue)
599 #define CPU_NEXT(cpu)    QTAILQ_NEXT_RCU(cpu, node)
600 #define CPU_FOREACH(cpu) QTAILQ_FOREACH_RCU(cpu, &cpus_queue, node)
601 #define CPU_FOREACH_SAFE(cpu, next_cpu) \
602     QTAILQ_FOREACH_SAFE_RCU(cpu, &cpus_queue, node, next_cpu)
603 
604 extern __thread CPUState *current_cpu;
605 
606 /**
607  * cpu_paging_enabled:
608  * @cpu: The CPU whose state is to be inspected.
609  *
610  * Returns: %true if paging is enabled, %false otherwise.
611  */
612 bool cpu_paging_enabled(const CPUState *cpu);
613 
614 /**
615  * cpu_get_memory_mapping:
616  * @cpu: The CPU whose memory mappings are to be obtained.
617  * @list: Where to write the memory mappings to.
618  * @errp: Pointer for reporting an #Error.
619  *
620  * Returns: %true on success, %false otherwise.
621  */
622 bool cpu_get_memory_mapping(CPUState *cpu, MemoryMappingList *list,
623                             Error **errp);
624 
625 /**
626  * cpu_write_elf64_note:
627  * @f: pointer to a function that writes memory to a file
628  * @cpu: The CPU whose memory is to be dumped
629  * @cpuid: ID number of the CPU
630  * @opaque: pointer to the CPUState struct
631  */
632 int cpu_write_elf64_note(WriteCoreDumpFunction f, CPUState *cpu,
633                          int cpuid, void *opaque);
634 
635 /**
636  * cpu_write_elf64_qemunote:
637  * @f: pointer to a function that writes memory to a file
638  * @cpu: The CPU whose memory is to be dumped
639  * @cpuid: ID number of the CPU
640  * @opaque: pointer to the CPUState struct
641  */
642 int cpu_write_elf64_qemunote(WriteCoreDumpFunction f, CPUState *cpu,
643                              void *opaque);
644 
645 /**
646  * cpu_write_elf32_note:
647  * @f: pointer to a function that writes memory to a file
648  * @cpu: The CPU whose memory is to be dumped
649  * @cpuid: ID number of the CPU
650  * @opaque: pointer to the CPUState struct
651  */
652 int cpu_write_elf32_note(WriteCoreDumpFunction f, CPUState *cpu,
653                          int cpuid, void *opaque);
654 
655 /**
656  * cpu_write_elf32_qemunote:
657  * @f: pointer to a function that writes memory to a file
658  * @cpu: The CPU whose memory is to be dumped
659  * @cpuid: ID number of the CPU
660  * @opaque: pointer to the CPUState struct
661  */
662 int cpu_write_elf32_qemunote(WriteCoreDumpFunction f, CPUState *cpu,
663                              void *opaque);
664 
665 /**
666  * cpu_get_crash_info:
667  * @cpu: The CPU to get crash information for
668  *
669  * Gets the previously saved crash information.
670  * Caller is responsible for freeing the data.
671  */
672 GuestPanicInformation *cpu_get_crash_info(CPUState *cpu);
673 
674 /**
675  * CPUDumpFlags:
676  * @CPU_DUMP_CODE:
677  * @CPU_DUMP_FPU: dump FPU register state, not just integer
678  * @CPU_DUMP_CCOP: dump info about TCG QEMU's condition code optimization state
679  * @CPU_DUMP_VPU: dump VPU registers
680  */
681 enum CPUDumpFlags {
682     CPU_DUMP_CODE = 0x00010000,
683     CPU_DUMP_FPU  = 0x00020000,
684     CPU_DUMP_CCOP = 0x00040000,
685     CPU_DUMP_VPU  = 0x00080000,
686 };
687 
688 /**
689  * cpu_dump_state:
690  * @cpu: The CPU whose state is to be dumped.
691  * @f: If non-null, dump to this stream, else to current print sink.
692  *
693  * Dumps CPU state.
694  */
695 void cpu_dump_state(CPUState *cpu, FILE *f, int flags);
696 
697 /**
698  * cpu_get_phys_page_attrs_debug:
699  * @cpu: The CPU to obtain the physical page address for.
700  * @addr: The virtual address.
701  * @attrs: Updated on return with the memory transaction attributes to use
702  *         for this access.
703  *
704  * Obtains the physical page corresponding to a virtual one, together
705  * with the corresponding memory transaction attributes to use for the access.
706  * Use it only for debugging because no protection checks are done.
707  *
708  * Returns: Corresponding physical page address or -1 if no page found.
709  */
710 hwaddr cpu_get_phys_page_attrs_debug(CPUState *cpu, vaddr addr,
711                                      MemTxAttrs *attrs);
712 
713 /**
714  * cpu_get_phys_page_debug:
715  * @cpu: The CPU to obtain the physical page address for.
716  * @addr: The virtual address.
717  *
718  * Obtains the physical page corresponding to a virtual one.
719  * Use it only for debugging because no protection checks are done.
720  *
721  * Returns: Corresponding physical page address or -1 if no page found.
722  */
723 hwaddr cpu_get_phys_page_debug(CPUState *cpu, vaddr addr);
724 
725 /** cpu_asidx_from_attrs:
726  * @cpu: CPU
727  * @attrs: memory transaction attributes
728  *
729  * Returns the address space index specifying the CPU AddressSpace
730  * to use for a memory access with the given transaction attributes.
731  */
732 int cpu_asidx_from_attrs(CPUState *cpu, MemTxAttrs attrs);
733 
734 /**
735  * cpu_virtio_is_big_endian:
736  * @cpu: CPU
737 
738  * Returns %true if a CPU which supports runtime configurable endianness
739  * is currently big-endian.
740  */
741 bool cpu_virtio_is_big_endian(CPUState *cpu);
742 
743 /**
744  * cpu_has_work:
745  * @cpu: The vCPU to check.
746  *
747  * Checks whether the CPU has work to do.
748  *
749  * Returns: %true if the CPU has work, %false otherwise.
750  */
751 bool cpu_has_work(CPUState *cpu);
752 
753 /**
754  * cpu_list_add:
755  * @cpu: The CPU to be added to the list of CPUs.
756  */
757 void cpu_list_add(CPUState *cpu);
758 
759 /**
760  * cpu_list_remove:
761  * @cpu: The CPU to be removed from the list of CPUs.
762  */
763 void cpu_list_remove(CPUState *cpu);
764 
765 /**
766  * cpu_reset:
767  * @cpu: The CPU whose state is to be reset.
768  */
769 void cpu_reset(CPUState *cpu);
770 
771 /**
772  * cpu_class_by_name:
773  * @typename: The CPU base type.
774  * @cpu_model: The model string without any parameters.
775  *
776  * Looks up a concrete CPU #ObjectClass matching name @cpu_model.
777  *
778  * Returns: A concrete #CPUClass or %NULL if no matching class is found
779  *          or if the matching class is abstract.
780  */
781 ObjectClass *cpu_class_by_name(const char *typename, const char *cpu_model);
782 
783 /**
784  * cpu_model_from_type:
785  * @typename: The CPU type name
786  *
787  * Extract the CPU model name from the CPU type name. The
788  * CPU type name is either the combination of the CPU model
789  * name and suffix, or same to the CPU model name.
790  *
791  * Returns: CPU model name or NULL if the CPU class doesn't exist
792  *          The user should g_free() the string once no longer needed.
793  */
794 char *cpu_model_from_type(const char *typename);
795 
796 /**
797  * cpu_create:
798  * @typename: The CPU type.
799  *
800  * Instantiates a CPU and realizes the CPU.
801  *
802  * Returns: A #CPUState or %NULL if an error occurred.
803  */
804 CPUState *cpu_create(const char *typename);
805 
806 /**
807  * parse_cpu_option:
808  * @cpu_option: The -cpu option including optional parameters.
809  *
810  * processes optional parameters and registers them as global properties
811  *
812  * Returns: type of CPU to create or prints error and terminates process
813  *          if an error occurred.
814  */
815 const char *parse_cpu_option(const char *cpu_option);
816 
817 /**
818  * qemu_cpu_is_self:
819  * @cpu: The vCPU to check against.
820  *
821  * Checks whether the caller is executing on the vCPU thread.
822  *
823  * Returns: %true if called from @cpu's thread, %false otherwise.
824  */
825 bool qemu_cpu_is_self(CPUState *cpu);
826 
827 /**
828  * qemu_cpu_kick:
829  * @cpu: The vCPU to kick.
830  *
831  * Kicks @cpu's thread.
832  */
833 void qemu_cpu_kick(CPUState *cpu);
834 
835 /**
836  * cpu_is_stopped:
837  * @cpu: The CPU to check.
838  *
839  * Checks whether the CPU is stopped.
840  *
841  * Returns: %true if run state is not running or if artificially stopped;
842  * %false otherwise.
843  */
844 bool cpu_is_stopped(CPUState *cpu);
845 
846 /**
847  * do_run_on_cpu:
848  * @cpu: The vCPU to run on.
849  * @func: The function to be executed.
850  * @data: Data to pass to the function.
851  * @mutex: Mutex to release while waiting for @func to run.
852  *
853  * Used internally in the implementation of run_on_cpu.
854  */
855 void do_run_on_cpu(CPUState *cpu, run_on_cpu_func func, run_on_cpu_data data,
856                    QemuMutex *mutex);
857 
858 /**
859  * run_on_cpu:
860  * @cpu: The vCPU to run on.
861  * @func: The function to be executed.
862  * @data: Data to pass to the function.
863  *
864  * Schedules the function @func for execution on the vCPU @cpu.
865  */
866 void run_on_cpu(CPUState *cpu, run_on_cpu_func func, run_on_cpu_data data);
867 
868 /**
869  * async_run_on_cpu:
870  * @cpu: The vCPU to run on.
871  * @func: The function to be executed.
872  * @data: Data to pass to the function.
873  *
874  * Schedules the function @func for execution on the vCPU @cpu asynchronously.
875  */
876 void async_run_on_cpu(CPUState *cpu, run_on_cpu_func func, run_on_cpu_data data);
877 
878 /**
879  * async_safe_run_on_cpu:
880  * @cpu: The vCPU to run on.
881  * @func: The function to be executed.
882  * @data: Data to pass to the function.
883  *
884  * Schedules the function @func for execution on the vCPU @cpu asynchronously,
885  * while all other vCPUs are sleeping.
886  *
887  * Unlike run_on_cpu and async_run_on_cpu, the function is run outside the
888  * BQL.
889  */
890 void async_safe_run_on_cpu(CPUState *cpu, run_on_cpu_func func, run_on_cpu_data data);
891 
892 /**
893  * cpu_in_exclusive_context()
894  * @cpu: The vCPU to check
895  *
896  * Returns true if @cpu is an exclusive context, for example running
897  * something which has previously been queued via async_safe_run_on_cpu().
898  */
899 static inline bool cpu_in_exclusive_context(const CPUState *cpu)
900 {
901     return cpu->exclusive_context_count;
902 }
903 
904 /**
905  * qemu_get_cpu:
906  * @index: The CPUState@cpu_index value of the CPU to obtain.
907  *
908  * Gets a CPU matching @index.
909  *
910  * Returns: The CPU or %NULL if there is no matching CPU.
911  */
912 CPUState *qemu_get_cpu(int index);
913 
914 /**
915  * cpu_exists:
916  * @id: Guest-exposed CPU ID to lookup.
917  *
918  * Search for CPU with specified ID.
919  *
920  * Returns: %true - CPU is found, %false - CPU isn't found.
921  */
922 bool cpu_exists(int64_t id);
923 
924 /**
925  * cpu_by_arch_id:
926  * @id: Guest-exposed CPU ID of the CPU to obtain.
927  *
928  * Get a CPU with matching @id.
929  *
930  * Returns: The CPU or %NULL if there is no matching CPU.
931  */
932 CPUState *cpu_by_arch_id(int64_t id);
933 
934 /**
935  * cpu_interrupt:
936  * @cpu: The CPU to set an interrupt on.
937  * @mask: The interrupts to set.
938  *
939  * Invokes the interrupt handler.
940  */
941 
942 void cpu_interrupt(CPUState *cpu, int mask);
943 
944 /**
945  * cpu_set_pc:
946  * @cpu: The CPU to set the program counter for.
947  * @addr: Program counter value.
948  *
949  * Sets the program counter for a CPU.
950  */
951 static inline void cpu_set_pc(CPUState *cpu, vaddr addr)
952 {
953     cpu->cc->set_pc(cpu, addr);
954 }
955 
956 /**
957  * cpu_reset_interrupt:
958  * @cpu: The CPU to clear the interrupt on.
959  * @mask: The interrupt mask to clear.
960  *
961  * Resets interrupts on the vCPU @cpu.
962  */
963 void cpu_reset_interrupt(CPUState *cpu, int mask);
964 
965 /**
966  * cpu_exit:
967  * @cpu: The CPU to exit.
968  *
969  * Requests the CPU @cpu to exit execution.
970  */
971 void cpu_exit(CPUState *cpu);
972 
973 /**
974  * cpu_pause:
975  * @cpu: The CPU to pause.
976  *
977  * Pauses CPU, i.e. puts CPU into stopped state.
978  */
979 void cpu_pause(CPUState *cpu);
980 
981 /**
982  * cpu_resume:
983  * @cpu: The CPU to resume.
984  *
985  * Resumes CPU, i.e. puts CPU into runnable state.
986  */
987 void cpu_resume(CPUState *cpu);
988 
989 /**
990  * cpu_remove_sync:
991  * @cpu: The CPU to remove.
992  *
993  * Requests the CPU to be removed and waits till it is removed.
994  */
995 void cpu_remove_sync(CPUState *cpu);
996 
997 /**
998  * free_queued_cpu_work() - free all items on CPU work queue
999  * @cpu: The CPU which work queue to free.
1000  */
1001 void free_queued_cpu_work(CPUState *cpu);
1002 
1003 /**
1004  * process_queued_cpu_work() - process all items on CPU work queue
1005  * @cpu: The CPU which work queue to process.
1006  */
1007 void process_queued_cpu_work(CPUState *cpu);
1008 
1009 /**
1010  * cpu_exec_start:
1011  * @cpu: The CPU for the current thread.
1012  *
1013  * Record that a CPU has started execution and can be interrupted with
1014  * cpu_exit.
1015  */
1016 void cpu_exec_start(CPUState *cpu);
1017 
1018 /**
1019  * cpu_exec_end:
1020  * @cpu: The CPU for the current thread.
1021  *
1022  * Record that a CPU has stopped execution and exclusive sections
1023  * can be executed without interrupting it.
1024  */
1025 void cpu_exec_end(CPUState *cpu);
1026 
1027 /**
1028  * start_exclusive:
1029  *
1030  * Wait for a concurrent exclusive section to end, and then start
1031  * a section of work that is run while other CPUs are not running
1032  * between cpu_exec_start and cpu_exec_end.  CPUs that are running
1033  * cpu_exec are exited immediately.  CPUs that call cpu_exec_start
1034  * during the exclusive section go to sleep until this CPU calls
1035  * end_exclusive.
1036  */
1037 void start_exclusive(void);
1038 
1039 /**
1040  * end_exclusive:
1041  *
1042  * Concludes an exclusive execution section started by start_exclusive.
1043  */
1044 void end_exclusive(void);
1045 
1046 /**
1047  * qemu_init_vcpu:
1048  * @cpu: The vCPU to initialize.
1049  *
1050  * Initializes a vCPU.
1051  */
1052 void qemu_init_vcpu(CPUState *cpu);
1053 
1054 #define SSTEP_ENABLE  0x1  /* Enable simulated HW single stepping */
1055 #define SSTEP_NOIRQ   0x2  /* Do not use IRQ while single stepping */
1056 #define SSTEP_NOTIMER 0x4  /* Do not Timers while single stepping */
1057 
1058 /**
1059  * cpu_single_step:
1060  * @cpu: CPU to the flags for.
1061  * @enabled: Flags to enable.
1062  *
1063  * Enables or disables single-stepping for @cpu.
1064  */
1065 void cpu_single_step(CPUState *cpu, int enabled);
1066 
1067 /* Breakpoint/watchpoint flags */
1068 #define BP_MEM_READ           0x01
1069 #define BP_MEM_WRITE          0x02
1070 #define BP_MEM_ACCESS         (BP_MEM_READ | BP_MEM_WRITE)
1071 #define BP_STOP_BEFORE_ACCESS 0x04
1072 /* 0x08 currently unused */
1073 #define BP_GDB                0x10
1074 #define BP_CPU                0x20
1075 #define BP_ANY                (BP_GDB | BP_CPU)
1076 #define BP_HIT_SHIFT          6
1077 #define BP_WATCHPOINT_HIT_READ  (BP_MEM_READ << BP_HIT_SHIFT)
1078 #define BP_WATCHPOINT_HIT_WRITE (BP_MEM_WRITE << BP_HIT_SHIFT)
1079 #define BP_WATCHPOINT_HIT       (BP_MEM_ACCESS << BP_HIT_SHIFT)
1080 
1081 int cpu_breakpoint_insert(CPUState *cpu, vaddr pc, int flags,
1082                           CPUBreakpoint **breakpoint);
1083 int cpu_breakpoint_remove(CPUState *cpu, vaddr pc, int flags);
1084 void cpu_breakpoint_remove_by_ref(CPUState *cpu, CPUBreakpoint *breakpoint);
1085 void cpu_breakpoint_remove_all(CPUState *cpu, int mask);
1086 
1087 /* Return true if PC matches an installed breakpoint.  */
1088 static inline bool cpu_breakpoint_test(CPUState *cpu, vaddr pc, int mask)
1089 {
1090     CPUBreakpoint *bp;
1091 
1092     if (unlikely(!QTAILQ_EMPTY(&cpu->breakpoints))) {
1093         QTAILQ_FOREACH(bp, &cpu->breakpoints, entry) {
1094             if (bp->pc == pc && (bp->flags & mask)) {
1095                 return true;
1096             }
1097         }
1098     }
1099     return false;
1100 }
1101 
1102 /**
1103  * cpu_get_address_space:
1104  * @cpu: CPU to get address space from
1105  * @asidx: index identifying which address space to get
1106  *
1107  * Return the requested address space of this CPU. @asidx
1108  * specifies which address space to read.
1109  */
1110 AddressSpace *cpu_get_address_space(CPUState *cpu, int asidx);
1111 
1112 G_NORETURN void cpu_abort(CPUState *cpu, const char *fmt, ...)
1113     G_GNUC_PRINTF(2, 3);
1114 
1115 /* $(top_srcdir)/cpu.c */
1116 void cpu_class_init_props(DeviceClass *dc);
1117 void cpu_exec_class_post_init(CPUClass *cc);
1118 void cpu_exec_initfn(CPUState *cpu);
1119 void cpu_vmstate_register(CPUState *cpu);
1120 void cpu_vmstate_unregister(CPUState *cpu);
1121 bool cpu_exec_realizefn(CPUState *cpu, Error **errp);
1122 void cpu_exec_unrealizefn(CPUState *cpu);
1123 void cpu_exec_reset_hold(CPUState *cpu);
1124 
1125 extern const VMStateDescription vmstate_cpu_common;
1126 
1127 #define UNASSIGNED_CPU_INDEX -1
1128 #define UNASSIGNED_CLUSTER_INDEX -1
1129 
1130 enum CacheType {
1131     DATA_CACHE,
1132     INSTRUCTION_CACHE,
1133     UNIFIED_CACHE
1134 };
1135 
1136 #endif
1137