xref: /openbmc/qemu/target/i386/hvf/vmx.h (revision d781e24d)
169e0a03cSPaolo Bonzini /*
269e0a03cSPaolo Bonzini  * Copyright (C) 2016 Veertu Inc,
369e0a03cSPaolo Bonzini  * Copyright (C) 2017 Google Inc,
469e0a03cSPaolo Bonzini  * Based on Veertu vddh/vmm/vmx.h
569e0a03cSPaolo Bonzini  *
669e0a03cSPaolo Bonzini  * Interfaces to Hypervisor.framework to read/write X86 registers and VMCS.
769e0a03cSPaolo Bonzini  *
869e0a03cSPaolo Bonzini  * This program is free software; you can redistribute it and/or
969e0a03cSPaolo Bonzini  * modify it under the terms of the GNU Lesser General Public
1069e0a03cSPaolo Bonzini  * License as published by the Free Software Foundation; either
1169e0a03cSPaolo Bonzini  * version 2 of the License, or (at your option) any later version.
1269e0a03cSPaolo Bonzini  *
1369e0a03cSPaolo Bonzini  * This program is distributed in the hope that it will be useful,
1469e0a03cSPaolo Bonzini  * but WITHOUT ANY WARRANTY; without even the implied warranty of
1569e0a03cSPaolo Bonzini  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
1669e0a03cSPaolo Bonzini  * Lesser General Public License for more details.
1769e0a03cSPaolo Bonzini  *
1869e0a03cSPaolo Bonzini  * You should have received a copy of the GNU Lesser General Public
1969e0a03cSPaolo Bonzini  * License along with this program; if not, see <http://www.gnu.org/licenses/>.
20*d781e24dSIzik Eidus  *
21*d781e24dSIzik Eidus  * This file contain code under public domain from the hvdos project:
22*d781e24dSIzik Eidus  * https://github.com/mist64/hvdos
2369e0a03cSPaolo Bonzini  */
2469e0a03cSPaolo Bonzini 
2569e0a03cSPaolo Bonzini #ifndef VMX_H
2669e0a03cSPaolo Bonzini #define VMX_H
2769e0a03cSPaolo Bonzini 
2869e0a03cSPaolo Bonzini #include <stdint.h>
2969e0a03cSPaolo Bonzini #include <Hypervisor/hv.h>
3069e0a03cSPaolo Bonzini #include <Hypervisor/hv_vmx.h>
3169e0a03cSPaolo Bonzini #include "vmcs.h"
3269e0a03cSPaolo Bonzini #include "cpu.h"
3369e0a03cSPaolo Bonzini #include "x86.h"
3469e0a03cSPaolo Bonzini 
3569e0a03cSPaolo Bonzini #include "exec/address-spaces.h"
3669e0a03cSPaolo Bonzini 
3769e0a03cSPaolo Bonzini static inline uint64_t rreg(hv_vcpuid_t vcpu, hv_x86_reg_t reg)
3869e0a03cSPaolo Bonzini {
3969e0a03cSPaolo Bonzini     uint64_t v;
4069e0a03cSPaolo Bonzini 
4169e0a03cSPaolo Bonzini     if (hv_vcpu_read_register(vcpu, reg, &v)) {
4269e0a03cSPaolo Bonzini         abort();
4369e0a03cSPaolo Bonzini     }
4469e0a03cSPaolo Bonzini 
4569e0a03cSPaolo Bonzini     return v;
4669e0a03cSPaolo Bonzini }
4769e0a03cSPaolo Bonzini 
4869e0a03cSPaolo Bonzini /* write GPR */
4969e0a03cSPaolo Bonzini static inline void wreg(hv_vcpuid_t vcpu, hv_x86_reg_t reg, uint64_t v)
5069e0a03cSPaolo Bonzini {
5169e0a03cSPaolo Bonzini     if (hv_vcpu_write_register(vcpu, reg, v)) {
5269e0a03cSPaolo Bonzini         abort();
5369e0a03cSPaolo Bonzini     }
5469e0a03cSPaolo Bonzini }
5569e0a03cSPaolo Bonzini 
5669e0a03cSPaolo Bonzini /* read VMCS field */
5769e0a03cSPaolo Bonzini static inline uint64_t rvmcs(hv_vcpuid_t vcpu, uint32_t field)
5869e0a03cSPaolo Bonzini {
5969e0a03cSPaolo Bonzini     uint64_t v;
6069e0a03cSPaolo Bonzini 
6169e0a03cSPaolo Bonzini     hv_vmx_vcpu_read_vmcs(vcpu, field, &v);
6269e0a03cSPaolo Bonzini 
6369e0a03cSPaolo Bonzini     return v;
6469e0a03cSPaolo Bonzini }
6569e0a03cSPaolo Bonzini 
6669e0a03cSPaolo Bonzini /* write VMCS field */
6769e0a03cSPaolo Bonzini static inline void wvmcs(hv_vcpuid_t vcpu, uint32_t field, uint64_t v)
6869e0a03cSPaolo Bonzini {
6969e0a03cSPaolo Bonzini     hv_vmx_vcpu_write_vmcs(vcpu, field, v);
7069e0a03cSPaolo Bonzini }
7169e0a03cSPaolo Bonzini 
7269e0a03cSPaolo Bonzini /* desired control word constrained by hardware/hypervisor capabilities */
7369e0a03cSPaolo Bonzini static inline uint64_t cap2ctrl(uint64_t cap, uint64_t ctrl)
7469e0a03cSPaolo Bonzini {
7569e0a03cSPaolo Bonzini     return (ctrl | (cap & 0xffffffff)) & (cap >> 32);
7669e0a03cSPaolo Bonzini }
7769e0a03cSPaolo Bonzini 
7869e0a03cSPaolo Bonzini #define VM_ENTRY_GUEST_LMA (1LL << 9)
7969e0a03cSPaolo Bonzini 
8069e0a03cSPaolo Bonzini #define AR_TYPE_ACCESSES_MASK 1
8169e0a03cSPaolo Bonzini #define AR_TYPE_READABLE_MASK (1 << 1)
8269e0a03cSPaolo Bonzini #define AR_TYPE_WRITEABLE_MASK (1 << 2)
8369e0a03cSPaolo Bonzini #define AR_TYPE_CODE_MASK (1 << 3)
8469e0a03cSPaolo Bonzini #define AR_TYPE_MASK 0x0f
8569e0a03cSPaolo Bonzini #define AR_TYPE_BUSY_64_TSS 11
8669e0a03cSPaolo Bonzini #define AR_TYPE_BUSY_32_TSS 11
8769e0a03cSPaolo Bonzini #define AR_TYPE_BUSY_16_TSS 3
8869e0a03cSPaolo Bonzini #define AR_TYPE_LDT 2
8969e0a03cSPaolo Bonzini 
9069e0a03cSPaolo Bonzini static void enter_long_mode(hv_vcpuid_t vcpu, uint64_t cr0, uint64_t efer)
9169e0a03cSPaolo Bonzini {
9269e0a03cSPaolo Bonzini     uint64_t entry_ctls;
9369e0a03cSPaolo Bonzini 
946701d81dSPaolo Bonzini     efer |= MSR_EFER_LMA;
9569e0a03cSPaolo Bonzini     wvmcs(vcpu, VMCS_GUEST_IA32_EFER, efer);
9669e0a03cSPaolo Bonzini     entry_ctls = rvmcs(vcpu, VMCS_ENTRY_CTLS);
9769e0a03cSPaolo Bonzini     wvmcs(vcpu, VMCS_ENTRY_CTLS, rvmcs(vcpu, VMCS_ENTRY_CTLS) |
9869e0a03cSPaolo Bonzini           VM_ENTRY_GUEST_LMA);
9969e0a03cSPaolo Bonzini 
10069e0a03cSPaolo Bonzini     uint64_t guest_tr_ar = rvmcs(vcpu, VMCS_GUEST_TR_ACCESS_RIGHTS);
1016701d81dSPaolo Bonzini     if ((efer & MSR_EFER_LME) &&
10269e0a03cSPaolo Bonzini         (guest_tr_ar & AR_TYPE_MASK) != AR_TYPE_BUSY_64_TSS) {
10369e0a03cSPaolo Bonzini         wvmcs(vcpu, VMCS_GUEST_TR_ACCESS_RIGHTS,
10469e0a03cSPaolo Bonzini               (guest_tr_ar & ~AR_TYPE_MASK) | AR_TYPE_BUSY_64_TSS);
10569e0a03cSPaolo Bonzini     }
10669e0a03cSPaolo Bonzini }
10769e0a03cSPaolo Bonzini 
10869e0a03cSPaolo Bonzini static void exit_long_mode(hv_vcpuid_t vcpu, uint64_t cr0, uint64_t efer)
10969e0a03cSPaolo Bonzini {
11069e0a03cSPaolo Bonzini     uint64_t entry_ctls;
11169e0a03cSPaolo Bonzini 
11269e0a03cSPaolo Bonzini     entry_ctls = rvmcs(vcpu, VMCS_ENTRY_CTLS);
11369e0a03cSPaolo Bonzini     wvmcs(vcpu, VMCS_ENTRY_CTLS, entry_ctls & ~VM_ENTRY_GUEST_LMA);
11469e0a03cSPaolo Bonzini 
1156701d81dSPaolo Bonzini     efer &= ~MSR_EFER_LMA;
11669e0a03cSPaolo Bonzini     wvmcs(vcpu, VMCS_GUEST_IA32_EFER, efer);
11769e0a03cSPaolo Bonzini }
11869e0a03cSPaolo Bonzini 
11969e0a03cSPaolo Bonzini static inline void macvm_set_cr0(hv_vcpuid_t vcpu, uint64_t cr0)
12069e0a03cSPaolo Bonzini {
12169e0a03cSPaolo Bonzini     int i;
12269e0a03cSPaolo Bonzini     uint64_t pdpte[4] = {0, 0, 0, 0};
12369e0a03cSPaolo Bonzini     uint64_t efer = rvmcs(vcpu, VMCS_GUEST_IA32_EFER);
12469e0a03cSPaolo Bonzini     uint64_t old_cr0 = rvmcs(vcpu, VMCS_GUEST_CR0);
12569e0a03cSPaolo Bonzini 
12669e0a03cSPaolo Bonzini     if ((cr0 & CR0_PG) && (rvmcs(vcpu, VMCS_GUEST_CR4) & CR4_PAE) &&
1276701d81dSPaolo Bonzini         !(efer & MSR_EFER_LME)) {
12869e0a03cSPaolo Bonzini         address_space_rw(&address_space_memory,
12969e0a03cSPaolo Bonzini                          rvmcs(vcpu, VMCS_GUEST_CR3) & ~0x1f,
13069e0a03cSPaolo Bonzini                          MEMTXATTRS_UNSPECIFIED,
13169e0a03cSPaolo Bonzini                          (uint8_t *)pdpte, 32, 0);
13269e0a03cSPaolo Bonzini     }
13369e0a03cSPaolo Bonzini 
13469e0a03cSPaolo Bonzini     for (i = 0; i < 4; i++) {
13569e0a03cSPaolo Bonzini         wvmcs(vcpu, VMCS_GUEST_PDPTE0 + i * 2, pdpte[i]);
13669e0a03cSPaolo Bonzini     }
13769e0a03cSPaolo Bonzini 
13869e0a03cSPaolo Bonzini     wvmcs(vcpu, VMCS_CR0_MASK, CR0_CD | CR0_NE | CR0_PG);
13969e0a03cSPaolo Bonzini     wvmcs(vcpu, VMCS_CR0_SHADOW, cr0);
14069e0a03cSPaolo Bonzini 
14169e0a03cSPaolo Bonzini     cr0 &= ~CR0_CD;
14269e0a03cSPaolo Bonzini     wvmcs(vcpu, VMCS_GUEST_CR0, cr0 | CR0_NE | CR0_ET);
14369e0a03cSPaolo Bonzini 
1446701d81dSPaolo Bonzini     if (efer & MSR_EFER_LME) {
14569e0a03cSPaolo Bonzini         if (!(old_cr0 & CR0_PG) && (cr0 & CR0_PG)) {
14669e0a03cSPaolo Bonzini             enter_long_mode(vcpu, cr0, efer);
14769e0a03cSPaolo Bonzini         }
14869e0a03cSPaolo Bonzini         if (/*(old_cr0 & CR0_PG) &&*/ !(cr0 & CR0_PG)) {
14969e0a03cSPaolo Bonzini             exit_long_mode(vcpu, cr0, efer);
15069e0a03cSPaolo Bonzini         }
15169e0a03cSPaolo Bonzini     }
15269e0a03cSPaolo Bonzini 
15369e0a03cSPaolo Bonzini     hv_vcpu_invalidate_tlb(vcpu);
15469e0a03cSPaolo Bonzini     hv_vcpu_flush(vcpu);
15569e0a03cSPaolo Bonzini }
15669e0a03cSPaolo Bonzini 
15769e0a03cSPaolo Bonzini static inline void macvm_set_cr4(hv_vcpuid_t vcpu, uint64_t cr4)
15869e0a03cSPaolo Bonzini {
15969e0a03cSPaolo Bonzini     uint64_t guest_cr4 = cr4 | CR4_VMXE;
16069e0a03cSPaolo Bonzini 
16169e0a03cSPaolo Bonzini     wvmcs(vcpu, VMCS_GUEST_CR4, guest_cr4);
16269e0a03cSPaolo Bonzini     wvmcs(vcpu, VMCS_CR4_SHADOW, cr4);
16369e0a03cSPaolo Bonzini 
16469e0a03cSPaolo Bonzini     hv_vcpu_invalidate_tlb(vcpu);
16569e0a03cSPaolo Bonzini     hv_vcpu_flush(vcpu);
16669e0a03cSPaolo Bonzini }
16769e0a03cSPaolo Bonzini 
16869e0a03cSPaolo Bonzini static inline void macvm_set_rip(CPUState *cpu, uint64_t rip)
16969e0a03cSPaolo Bonzini {
17069e0a03cSPaolo Bonzini     uint64_t val;
17169e0a03cSPaolo Bonzini 
17269e0a03cSPaolo Bonzini     /* BUG, should take considering overlap.. */
17369e0a03cSPaolo Bonzini     wreg(cpu->hvf_fd, HV_X86_RIP, rip);
17469e0a03cSPaolo Bonzini 
17569e0a03cSPaolo Bonzini     /* after moving forward in rip, we need to clean INTERRUPTABILITY */
17669e0a03cSPaolo Bonzini    val = rvmcs(cpu->hvf_fd, VMCS_GUEST_INTERRUPTIBILITY);
17769e0a03cSPaolo Bonzini    if (val & (VMCS_INTERRUPTIBILITY_STI_BLOCKING |
17869e0a03cSPaolo Bonzini                VMCS_INTERRUPTIBILITY_MOVSS_BLOCKING)) {
17969e0a03cSPaolo Bonzini         wvmcs(cpu->hvf_fd, VMCS_GUEST_INTERRUPTIBILITY,
18069e0a03cSPaolo Bonzini                val & ~(VMCS_INTERRUPTIBILITY_STI_BLOCKING |
18169e0a03cSPaolo Bonzini                VMCS_INTERRUPTIBILITY_MOVSS_BLOCKING));
18269e0a03cSPaolo Bonzini    }
18369e0a03cSPaolo Bonzini }
18469e0a03cSPaolo Bonzini 
18569e0a03cSPaolo Bonzini static inline void vmx_clear_nmi_blocking(CPUState *cpu)
18669e0a03cSPaolo Bonzini {
18769e0a03cSPaolo Bonzini     X86CPU *x86_cpu = X86_CPU(cpu);
18869e0a03cSPaolo Bonzini     CPUX86State *env = &x86_cpu->env;
18969e0a03cSPaolo Bonzini 
19069e0a03cSPaolo Bonzini     env->hflags2 &= ~HF2_NMI_MASK;
19169e0a03cSPaolo Bonzini     uint32_t gi = (uint32_t) rvmcs(cpu->hvf_fd, VMCS_GUEST_INTERRUPTIBILITY);
19269e0a03cSPaolo Bonzini     gi &= ~VMCS_INTERRUPTIBILITY_NMI_BLOCKING;
19369e0a03cSPaolo Bonzini     wvmcs(cpu->hvf_fd, VMCS_GUEST_INTERRUPTIBILITY, gi);
19469e0a03cSPaolo Bonzini }
19569e0a03cSPaolo Bonzini 
19669e0a03cSPaolo Bonzini static inline void vmx_set_nmi_blocking(CPUState *cpu)
19769e0a03cSPaolo Bonzini {
19869e0a03cSPaolo Bonzini     X86CPU *x86_cpu = X86_CPU(cpu);
19969e0a03cSPaolo Bonzini     CPUX86State *env = &x86_cpu->env;
20069e0a03cSPaolo Bonzini 
20169e0a03cSPaolo Bonzini     env->hflags2 |= HF2_NMI_MASK;
20269e0a03cSPaolo Bonzini     uint32_t gi = (uint32_t)rvmcs(cpu->hvf_fd, VMCS_GUEST_INTERRUPTIBILITY);
20369e0a03cSPaolo Bonzini     gi |= VMCS_INTERRUPTIBILITY_NMI_BLOCKING;
20469e0a03cSPaolo Bonzini     wvmcs(cpu->hvf_fd, VMCS_GUEST_INTERRUPTIBILITY, gi);
20569e0a03cSPaolo Bonzini }
20669e0a03cSPaolo Bonzini 
20769e0a03cSPaolo Bonzini static inline void vmx_set_nmi_window_exiting(CPUState *cpu)
20869e0a03cSPaolo Bonzini {
20969e0a03cSPaolo Bonzini     uint64_t val;
21069e0a03cSPaolo Bonzini     val = rvmcs(cpu->hvf_fd, VMCS_PRI_PROC_BASED_CTLS);
21169e0a03cSPaolo Bonzini     wvmcs(cpu->hvf_fd, VMCS_PRI_PROC_BASED_CTLS, val |
21269e0a03cSPaolo Bonzini           VMCS_PRI_PROC_BASED_CTLS_NMI_WINDOW_EXITING);
21369e0a03cSPaolo Bonzini 
21469e0a03cSPaolo Bonzini }
21569e0a03cSPaolo Bonzini 
21669e0a03cSPaolo Bonzini static inline void vmx_clear_nmi_window_exiting(CPUState *cpu)
21769e0a03cSPaolo Bonzini {
21869e0a03cSPaolo Bonzini 
21969e0a03cSPaolo Bonzini     uint64_t val;
22069e0a03cSPaolo Bonzini     val = rvmcs(cpu->hvf_fd, VMCS_PRI_PROC_BASED_CTLS);
22169e0a03cSPaolo Bonzini     wvmcs(cpu->hvf_fd, VMCS_PRI_PROC_BASED_CTLS, val &
22269e0a03cSPaolo Bonzini           ~VMCS_PRI_PROC_BASED_CTLS_NMI_WINDOW_EXITING);
22369e0a03cSPaolo Bonzini }
22469e0a03cSPaolo Bonzini 
22569e0a03cSPaolo Bonzini #endif
226