2 * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
4 * Copyright (c) 2011 NetApp, Inc.
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
16 * THIS SOFTWARE IS PROVIDED BY NETAPP, INC ``AS IS'' AND
17 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19 * ARE DISCLAIMED. IN NO EVENT SHALL NETAPP, INC OR CONTRIBUTORS BE LIABLE
20 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 #include <x86/segments.h>
38 SDT_PROVIDER_DECLARE(vmm);
46 VM_SUSPEND_TRIPLEFAULT,
51 * Identifiers for architecturally defined registers.
92 VM_REG_GUEST_INTR_SHADOW,
98 VM_REG_GUEST_ENTRY_INST_LENGTH,
108 #define VM_INTINFO_VECTOR(info) ((info) & 0xff)
109 #define VM_INTINFO_DEL_ERRCODE 0x800
110 #define VM_INTINFO_RSVD 0x7ffff000
111 #define VM_INTINFO_VALID 0x80000000
112 #define VM_INTINFO_TYPE 0x700
113 #define VM_INTINFO_HWINTR (0 << 8)
114 #define VM_INTINFO_NMI (2 << 8)
115 #define VM_INTINFO_HWEXCEPTION (3 << 8)
116 #define VM_INTINFO_SWINTR (4 << 8)
119 * The VM name has to fit into the pathname length constraints of devfs,
120 * governed primarily by SPECNAMELEN. The length is the total number of
121 * characters in the full path, relative to the mount point and not
122 * including any leading '/' characters.
123 * A prefix and a suffix are added to the name specified by the user.
124 * The prefix is usually "vmm/" or "vmm.io/", but can be a few characters
125 * longer for future use.
126 * The suffix is a string that identifies a bootrom image or some similar
127 * image that is attached to the VM. A separator character gets added to
128 * the suffix automatically when generating the full path, so it must be
129 * accounted for, reducing the effective length by 1.
130 * The effective length of a VM name is 229 bytes for FreeBSD 13 and 37
131 * bytes for FreeBSD 12. A minimum length is set for safety and supports
132 * a SPECNAMELEN as small as 32 on old systems.
134 #define VM_MAX_PREFIXLEN 10
135 #define VM_MAX_SUFFIXLEN 15
136 #define VM_MIN_NAMELEN 6
137 #define VM_MAX_NAMELEN \
138 (SPECNAMELEN - VM_MAX_PREFIXLEN - VM_MAX_SUFFIXLEN - 1)
141 CTASSERT(VM_MAX_NAMELEN >= VM_MIN_NAMELEN);
153 struct vm_guest_paging;
156 struct vm_eventinfo {
157 void *rptr; /* rendezvous cookie */
158 int *sptr; /* suspend cookie */
159 int *iptr; /* reqidle cookie */
162 typedef int (*vmm_init_func_t)(int ipinum);
163 typedef int (*vmm_cleanup_func_t)(void);
164 typedef void (*vmm_resume_func_t)(void);
165 typedef void * (*vmi_init_func_t)(struct vm *vm, struct pmap *pmap);
166 typedef int (*vmi_run_func_t)(void *vmi, int vcpu, register_t rip,
167 struct pmap *pmap, struct vm_eventinfo *info);
168 typedef void (*vmi_cleanup_func_t)(void *vmi);
169 typedef int (*vmi_get_register_t)(void *vmi, int vcpu, int num,
171 typedef int (*vmi_set_register_t)(void *vmi, int vcpu, int num,
173 typedef int (*vmi_get_desc_t)(void *vmi, int vcpu, int num,
174 struct seg_desc *desc);
175 typedef int (*vmi_set_desc_t)(void *vmi, int vcpu, int num,
176 struct seg_desc *desc);
177 typedef int (*vmi_get_cap_t)(void *vmi, int vcpu, int num, int *retval);
178 typedef int (*vmi_set_cap_t)(void *vmi, int vcpu, int num, int val);
179 typedef struct vmspace * (*vmi_vmspace_alloc)(vm_offset_t min, vm_offset_t max);
180 typedef void (*vmi_vmspace_free)(struct vmspace *vmspace);
181 typedef struct vlapic * (*vmi_vlapic_init)(void *vmi, int vcpu);
182 typedef void (*vmi_vlapic_cleanup)(void *vmi, struct vlapic *vlapic);
185 vmm_init_func_t init; /* module wide initialization */
186 vmm_cleanup_func_t cleanup;
187 vmm_resume_func_t resume;
189 vmi_init_func_t vminit; /* vm-specific initialization */
190 vmi_run_func_t vmrun;
191 vmi_cleanup_func_t vmcleanup;
192 vmi_get_register_t vmgetreg;
193 vmi_set_register_t vmsetreg;
194 vmi_get_desc_t vmgetdesc;
195 vmi_set_desc_t vmsetdesc;
196 vmi_get_cap_t vmgetcap;
197 vmi_set_cap_t vmsetcap;
198 vmi_vmspace_alloc vmspace_alloc;
199 vmi_vmspace_free vmspace_free;
200 vmi_vlapic_init vlapic_init;
201 vmi_vlapic_cleanup vlapic_cleanup;
204 extern struct vmm_ops vmm_ops_intel;
205 extern struct vmm_ops vmm_ops_amd;
207 int vm_create(const char *name, struct vm **retvm);
208 void vm_destroy(struct vm *vm);
209 int vm_reinit(struct vm *vm);
210 const char *vm_name(struct vm *vm);
211 uint16_t vm_get_maxcpus(struct vm *vm);
212 void vm_get_topology(struct vm *vm, uint16_t *sockets, uint16_t *cores,
213 uint16_t *threads, uint16_t *maxcpus);
214 int vm_set_topology(struct vm *vm, uint16_t sockets, uint16_t cores,
215 uint16_t threads, uint16_t maxcpus);
218 * APIs that modify the guest memory map require all vcpus to be frozen.
220 int vm_mmap_memseg(struct vm *vm, vm_paddr_t gpa, int segid, vm_ooffset_t off,
221 size_t len, int prot, int flags);
222 int vm_alloc_memseg(struct vm *vm, int ident, size_t len, bool sysmem);
223 void vm_free_memseg(struct vm *vm, int ident);
224 int vm_map_mmio(struct vm *vm, vm_paddr_t gpa, size_t len, vm_paddr_t hpa);
225 int vm_unmap_mmio(struct vm *vm, vm_paddr_t gpa, size_t len);
226 int vm_assign_pptdev(struct vm *vm, int bus, int slot, int func);
227 int vm_unassign_pptdev(struct vm *vm, int bus, int slot, int func);
230 * APIs that inspect the guest memory map require only a *single* vcpu to
231 * be frozen. This acts like a read lock on the guest memory map since any
232 * modification requires *all* vcpus to be frozen.
234 int vm_mmap_getnext(struct vm *vm, vm_paddr_t *gpa, int *segid,
235 vm_ooffset_t *segoff, size_t *len, int *prot, int *flags);
236 int vm_get_memseg(struct vm *vm, int ident, size_t *len, bool *sysmem,
237 struct vm_object **objptr);
238 vm_paddr_t vmm_sysmem_maxaddr(struct vm *vm);
239 void *vm_gpa_hold(struct vm *, int vcpuid, vm_paddr_t gpa, size_t len,
240 int prot, void **cookie);
241 void vm_gpa_release(void *cookie);
242 bool vm_mem_allocated(struct vm *vm, int vcpuid, vm_paddr_t gpa);
244 int vm_get_register(struct vm *vm, int vcpu, int reg, uint64_t *retval);
245 int vm_set_register(struct vm *vm, int vcpu, int reg, uint64_t val);
246 int vm_get_seg_desc(struct vm *vm, int vcpu, int reg,
247 struct seg_desc *ret_desc);
248 int vm_set_seg_desc(struct vm *vm, int vcpu, int reg,
249 struct seg_desc *desc);
250 int vm_run(struct vm *vm, struct vm_run *vmrun);
251 int vm_suspend(struct vm *vm, enum vm_suspend_how how);
252 int vm_inject_nmi(struct vm *vm, int vcpu);
253 int vm_nmi_pending(struct vm *vm, int vcpuid);
254 void vm_nmi_clear(struct vm *vm, int vcpuid);
255 int vm_inject_extint(struct vm *vm, int vcpu);
256 int vm_extint_pending(struct vm *vm, int vcpuid);
257 void vm_extint_clear(struct vm *vm, int vcpuid);
258 struct vlapic *vm_lapic(struct vm *vm, int cpu);
259 struct vioapic *vm_ioapic(struct vm *vm);
260 struct vhpet *vm_hpet(struct vm *vm);
261 int vm_get_capability(struct vm *vm, int vcpu, int type, int *val);
262 int vm_set_capability(struct vm *vm, int vcpu, int type, int val);
263 int vm_get_x2apic_state(struct vm *vm, int vcpu, enum x2apic_state *state);
264 int vm_set_x2apic_state(struct vm *vm, int vcpu, enum x2apic_state state);
265 int vm_apicid2vcpuid(struct vm *vm, int apicid);
266 int vm_activate_cpu(struct vm *vm, int vcpu);
267 int vm_suspend_cpu(struct vm *vm, int vcpu);
268 int vm_resume_cpu(struct vm *vm, int vcpu);
269 struct vm_exit *vm_exitinfo(struct vm *vm, int vcpuid);
270 void vm_exit_suspended(struct vm *vm, int vcpuid, uint64_t rip);
271 void vm_exit_debug(struct vm *vm, int vcpuid, uint64_t rip);
272 void vm_exit_rendezvous(struct vm *vm, int vcpuid, uint64_t rip);
273 void vm_exit_astpending(struct vm *vm, int vcpuid, uint64_t rip);
274 void vm_exit_reqidle(struct vm *vm, int vcpuid, uint64_t rip);
276 #ifdef _SYS__CPUSET_H_
278 * Rendezvous all vcpus specified in 'dest' and execute 'func(arg)'.
279 * The rendezvous 'func(arg)' is not allowed to do anything that will
280 * cause the thread to be put to sleep.
282 * If the rendezvous is being initiated from a vcpu context then the
283 * 'vcpuid' must refer to that vcpu, otherwise it should be set to -1.
285 * The caller cannot hold any locks when initiating the rendezvous.
287 * The implementation of this API may cause vcpus other than those specified
288 * by 'dest' to be stalled. The caller should not rely on any vcpus making
289 * forward progress when the rendezvous is in progress.
291 typedef void (*vm_rendezvous_func_t)(struct vm *vm, int vcpuid, void *arg);
292 int vm_smp_rendezvous(struct vm *vm, int vcpuid, cpuset_t dest,
293 vm_rendezvous_func_t func, void *arg);
294 cpuset_t vm_active_cpus(struct vm *vm);
295 cpuset_t vm_debug_cpus(struct vm *vm);
296 cpuset_t vm_suspended_cpus(struct vm *vm);
297 #endif /* _SYS__CPUSET_H_ */
300 vcpu_rendezvous_pending(struct vm_eventinfo *info)
303 return (*((uintptr_t *)(info->rptr)) != 0);
307 vcpu_suspended(struct vm_eventinfo *info)
310 return (*info->sptr);
314 vcpu_reqidle(struct vm_eventinfo *info)
317 return (*info->iptr);
320 int vcpu_debugged(struct vm *vm, int vcpuid);
323 * Return true if device indicated by bus/slot/func is supposed to be a
324 * pci passthrough device.
326 * Return false otherwise.
328 bool vmm_is_pptdev(int bus, int slot, int func);
330 void *vm_iommu_domain(struct vm *vm);
339 int vcpu_set_state(struct vm *vm, int vcpu, enum vcpu_state state,
341 enum vcpu_state vcpu_get_state(struct vm *vm, int vcpu, int *hostcpu);
344 vcpu_is_running(struct vm *vm, int vcpu, int *hostcpu)
346 return (vcpu_get_state(vm, vcpu, hostcpu) == VCPU_RUNNING);
351 vcpu_should_yield(struct vm *vm, int vcpu)
354 if (curthread->td_flags & (TDF_ASTPENDING | TDF_NEEDRESCHED))
356 else if (curthread->td_owepreempt)
363 void *vcpu_stats(struct vm *vm, int vcpu);
364 void vcpu_notify_event(struct vm *vm, int vcpuid, bool lapic_intr);
365 struct vmspace *vm_get_vmspace(struct vm *vm);
366 struct vatpic *vm_atpic(struct vm *vm);
367 struct vatpit *vm_atpit(struct vm *vm);
368 struct vpmtmr *vm_pmtmr(struct vm *vm);
369 struct vrtc *vm_rtc(struct vm *vm);
372 * Inject exception 'vector' into the guest vcpu. This function returns 0 on
373 * success and non-zero on failure.
375 * Wrapper functions like 'vm_inject_gp()' should be preferred to calling
376 * this function directly because they enforce the trap-like or fault-like
377 * behavior of an exception.
379 * This function should only be called in the context of the thread that is
380 * executing this vcpu.
382 int vm_inject_exception(struct vm *vm, int vcpuid, int vector, int err_valid,
383 uint32_t errcode, int restart_instruction);
386 * This function is called after a VM-exit that occurred during exception or
387 * interrupt delivery through the IDT. The format of 'intinfo' is described
388 * in Figure 15-1, "EXITINTINFO for All Intercepts", APM, Vol 2.
390 * If a VM-exit handler completes the event delivery successfully then it
391 * should call vm_exit_intinfo() to extinguish the pending event. For e.g.,
392 * if the task switch emulation is triggered via a task gate then it should
393 * call this function with 'intinfo=0' to indicate that the external event
394 * is not pending anymore.
396 * Return value is 0 on success and non-zero on failure.
398 int vm_exit_intinfo(struct vm *vm, int vcpuid, uint64_t intinfo);
401 * This function is called before every VM-entry to retrieve a pending
402 * event that should be injected into the guest. This function combines
403 * nested events into a double or triple fault.
405 * Returns 0 if there are no events that need to be injected into the guest
406 * and non-zero otherwise.
408 int vm_entry_intinfo(struct vm *vm, int vcpuid, uint64_t *info);
410 int vm_get_intinfo(struct vm *vm, int vcpuid, uint64_t *info1, uint64_t *info2);
412 enum vm_reg_name vm_segment_name(int seg_encoding);
422 * Set up 'copyinfo[]' to copy to/from guest linear address space starting
423 * at 'gla' and 'len' bytes long. The 'prot' should be set to PROT_READ for
424 * a copyin or PROT_WRITE for a copyout.
426 * retval is_fault Interpretation
428 * 0 1 An exception was injected into the guest
429 * EFAULT N/A Unrecoverable error
431 * The 'copyinfo[]' can be passed to 'vm_copyin()' or 'vm_copyout()' only if
432 * the return value is 0. The 'copyinfo[]' resources should be freed by calling
433 * 'vm_copy_teardown()' after the copy is done.
435 int vm_copy_setup(struct vm *vm, int vcpuid, struct vm_guest_paging *paging,
436 uint64_t gla, size_t len, int prot, struct vm_copyinfo *copyinfo,
437 int num_copyinfo, int *is_fault);
438 void vm_copy_teardown(struct vm *vm, int vcpuid, struct vm_copyinfo *copyinfo,
440 void vm_copyin(struct vm *vm, int vcpuid, struct vm_copyinfo *copyinfo,
441 void *kaddr, size_t len);
442 void vm_copyout(struct vm *vm, int vcpuid, const void *kaddr,
443 struct vm_copyinfo *copyinfo, size_t len);
445 int vcpu_trace_exceptions(struct vm *vm, int vcpuid);
448 #define VM_MAXCPU 16 /* maximum virtual cpus */
451 * Identifiers for optional vmm capabilities
457 VM_CAP_UNRESTRICTED_GUEST,
458 VM_CAP_ENABLE_INVPCID,
463 enum vm_intr_trigger {
469 * The 'access' field has the format specified in Table 21-2 of the Intel
470 * Architecture Manual vol 3b.
472 * XXX The contents of the 'access' field are architecturally defined except
473 * bit 16 - Segment Unusable.
480 #define SEG_DESC_TYPE(access) ((access) & 0x001f)
481 #define SEG_DESC_DPL(access) (((access) >> 5) & 0x3)
482 #define SEG_DESC_PRESENT(access) (((access) & 0x0080) ? 1 : 0)
483 #define SEG_DESC_DEF32(access) (((access) & 0x4000) ? 1 : 0)
484 #define SEG_DESC_GRANULARITY(access) (((access) & 0x8000) ? 1 : 0)
485 #define SEG_DESC_UNUSABLE(access) (((access) & 0x10000) ? 1 : 0)
490 CPU_MODE_COMPATIBILITY, /* IA-32E mode (CS.L = 0) */
491 CPU_MODE_64BIT, /* IA-32E mode (CS.L = 1) */
494 enum vm_paging_mode {
501 struct vm_guest_paging {
504 enum vm_cpu_mode cpu_mode;
505 enum vm_paging_mode paging_mode;
509 * The data structures 'vie' and 'vie_op' are meant to be opaque to the
510 * consumers of instruction decoding. The only reason why their contents
511 * need to be exposed is because they are part of the 'vm_exit' structure.
514 uint8_t op_byte; /* actual opcode byte */
515 uint8_t op_type; /* type of operation (e.g. MOV) */
518 _Static_assert(sizeof(struct vie_op) == 4, "ABI");
519 _Static_assert(_Alignof(struct vie_op) == 2, "ABI");
521 #define VIE_INST_SIZE 15
523 uint8_t inst[VIE_INST_SIZE]; /* instruction bytes */
524 uint8_t num_valid; /* size of the instruction */
525 uint8_t num_processed;
527 uint8_t addrsize:4, opsize:4; /* address and operand sizes */
528 uint8_t rex_w:1, /* REX prefix */
533 repz_present:1, /* REP/REPE/REPZ prefix */
534 repnz_present:1, /* REPNE/REPNZ prefix */
535 opsize_override:1, /* Operand size override */
536 addrsize_override:1, /* Address size override */
537 segment_override:1; /* Segment override */
539 uint8_t mod:2, /* ModRM byte */
543 uint8_t ss:2, /* SIB byte */
544 vex_present:1, /* VEX prefixed */
546 index:4, /* SIB byte */
547 base:4; /* SIB byte */
554 uint8_t vex_reg:4, /* vvvv: first source register specifier */
558 uint8_t _sparebytes[2];
560 int base_register; /* VM_REG_GUEST_xyz */
561 int index_register; /* VM_REG_GUEST_xyz */
562 int segment_register; /* VM_REG_GUEST_xyz */
564 int64_t displacement; /* optional addr displacement */
565 int64_t immediate; /* optional immediate operand */
567 uint8_t decoded; /* set to 1 if successfully decoded */
571 struct vie_op op; /* opcode description */
573 _Static_assert(sizeof(struct vie) == 64, "ABI");
574 _Static_assert(__offsetof(struct vie, disp_bytes) == 22, "ABI");
575 _Static_assert(__offsetof(struct vie, scale) == 24, "ABI");
576 _Static_assert(__offsetof(struct vie, base_register) == 28, "ABI");
588 VM_EXITCODE_INST_EMUL,
589 VM_EXITCODE_SPINUP_AP,
590 VM_EXITCODE_DEPRECATED1, /* used to be SPINDOWN_CPU */
591 VM_EXITCODE_RENDEZVOUS,
592 VM_EXITCODE_IOAPIC_EOI,
593 VM_EXITCODE_SUSPENDED,
594 VM_EXITCODE_INOUT_STR,
595 VM_EXITCODE_TASK_SWITCH,
607 uint16_t bytes:3; /* 1 or 2 or 4 */
612 uint32_t eax; /* valid for out */
615 struct vm_inout_str {
616 struct vm_inout inout; /* must be the first element */
617 struct vm_guest_paging paging;
621 uint64_t count; /* rep=1 (%rcx), rep=0 (1) */
623 enum vm_reg_name seg_name;
624 struct seg_desc seg_desc;
627 enum task_switch_reason {
631 TSR_IDT_GATE, /* task gate in IDT */
634 struct vm_task_switch {
635 uint16_t tsssel; /* new TSS selector */
636 int ext; /* task switch due to external event */
638 int errcode_valid; /* push 'errcode' on the new stack */
639 enum task_switch_reason reason;
640 struct vm_guest_paging paging;
644 enum vm_exitcode exitcode;
645 int inst_length; /* 0 means unknown */
648 struct vm_inout inout;
649 struct vm_inout_str inout_str;
659 struct vm_guest_paging paging;
663 * VMX specific payload. Used when there is no "better"
664 * exitcode to represent the VM-exit.
667 int status; /* vmx inst status */
669 * 'exit_reason' and 'exit_qualification' are valid
670 * only if 'status' is zero.
672 uint32_t exit_reason;
673 uint64_t exit_qualification;
675 * 'inst_error' and 'inst_type' are valid
676 * only if 'status' is non-zero.
682 * SVM specific payload.
693 uint32_t code; /* ecx value */
702 uint64_t intr_status;
708 enum vm_suspend_how how;
710 struct vm_task_switch task_switch;
714 /* APIs to inject faults into the guest */
715 void vm_inject_fault(void *vm, int vcpuid, int vector, int errcode_valid,
719 vm_inject_ud(void *vm, int vcpuid)
721 vm_inject_fault(vm, vcpuid, IDT_UD, 0, 0);
725 vm_inject_gp(void *vm, int vcpuid)
727 vm_inject_fault(vm, vcpuid, IDT_GP, 1, 0);
731 vm_inject_ac(void *vm, int vcpuid, int errcode)
733 vm_inject_fault(vm, vcpuid, IDT_AC, 1, errcode);
737 vm_inject_ss(void *vm, int vcpuid, int errcode)
739 vm_inject_fault(vm, vcpuid, IDT_SS, 1, errcode);
742 void vm_inject_pf(void *vm, int vcpuid, int error_code, uint64_t cr2);
744 int vm_restart_instruction(void *vm, int vcpuid);