sys/amd64/vmm/vmm_dev.c

   1 /*-
   2  * Copyright (c) 2011 NetApp, Inc.
   3  * All rights reserved.
   4  *
   5  * Redistribution and use in source and binary forms, with or without
   6  * modification, are permitted provided that the following conditions
   7  * are met:
   8  * 1. Redistributions of source code must retain the above copyright
   9  *    notice, this list of conditions and the following disclaimer.
  10  * 2. Redistributions in binary form must reproduce the above copyright
  11  *    notice, this list of conditions and the following disclaimer in the
  12  *    documentation and/or other materials provided with the distribution.
  13  *
  14  * THIS SOFTWARE IS PROVIDED BY NETAPP, INC ``AS IS'' AND
  15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  17  * ARE DISCLAIMED.  IN NO EVENT SHALL NETAPP, INC OR CONTRIBUTORS BE LIABLE
  18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  24  * SUCH DAMAGE.
  25  *
  26  * $FreeBSD$
  27  */
  28
  29 #include <sys/cdefs.h>
  30 __FBSDID("$FreeBSD$");
  31
  32 #include <sys/param.h>
  33 #include <sys/kernel.h>
  34 #include <sys/queue.h>
  35 #include <sys/lock.h>
  36 #include <sys/mutex.h>
  37 #include <sys/malloc.h>
  38 #include <sys/conf.h>
  39 #include <sys/sysctl.h>
  40 #include <sys/libkern.h>
  41 #include <sys/ioccom.h>
  42 #include <sys/mman.h>
  43 #include <sys/uio.h>
  44
  45 #include <vm/vm.h>
  46 #include <vm/pmap.h>
  47 #include <vm/vm_map.h>
  48
  49 #include <machine/pmap.h>
  50 #include <machine/vmparam.h>
  51
  52 #include <machine/vmm.h>
  53 #include "vmm_lapic.h"
  54 #include "vmm_stat.h"
  55 #include "vmm_mem.h"
  56 #include "io/ppt.h"
  57 #include <machine/vmm_dev.h>
  58
  59 struct vmmdev_softc {
  60         struct vm       *vm;            /* vm instance cookie */
  61         struct cdev     *cdev;
  62         SLIST_ENTRY(vmmdev_softc) link;
  63 };
  64 static SLIST_HEAD(, vmmdev_softc) head;
  65
  66 static struct mtx vmmdev_mtx;
  67
  68 static MALLOC_DEFINE(M_VMMDEV, "vmmdev", "vmmdev");
  69
  70 SYSCTL_DECL(_hw_vmm);
  71
  72 static struct vmmdev_softc *
  73 vmmdev_lookup(const char *name)
  74 {
  75         struct vmmdev_softc *sc;
  76
  77 #ifdef notyet   /* XXX kernel is not compiled with invariants */
  78         mtx_assert(&vmmdev_mtx, MA_OWNED);
  79 #endif
  80
  81         SLIST_FOREACH(sc, &head, link) {
  82                 if (strcmp(name, vm_name(sc->vm)) == 0)
  83                         break;
  84         }
  85
  86         return (sc);
  87 }
  88
  89 static struct vmmdev_softc *
  90 vmmdev_lookup2(struct cdev *cdev)
  91 {
  92
  93         return (cdev->si_drv1);
  94 }
  95
  96 static int
  97 vmmdev_rw(struct cdev *cdev, struct uio *uio, int flags)
  98 {
  99         int error, off, c, prot;
 100         vm_paddr_t gpa;
 101         void *hpa, *cookie;
 102         struct vmmdev_softc *sc;
 103
 104         static char zerobuf[PAGE_SIZE];
 105
 106         error = 0;
 107         mtx_lock(&vmmdev_mtx);
 108         sc = vmmdev_lookup2(cdev);
 109         if (sc == NULL)
 110                 error = ENXIO;
 111
 112         prot = (uio->uio_rw == UIO_WRITE ? VM_PROT_WRITE : VM_PROT_READ);
 113         while (uio->uio_resid > 0 && error == 0) {
 114                 gpa = uio->uio_offset;
 115                 off = gpa & PAGE_MASK;
 116                 c = min(uio->uio_resid, PAGE_SIZE - off);
 117
 118                 /*
 119                  * The VM has a hole in its physical memory map. If we want to
 120                  * use 'dd' to inspect memory beyond the hole we need to
 121                  * provide bogus data for memory that lies in the hole.
 122                  *
 123                  * Since this device does not support lseek(2), dd(1) will
 124                  * read(2) blocks of data to simulate the lseek(2).
 125                  */
 126                 hpa = vm_gpa_hold(sc->vm, gpa, c, prot, &cookie);
 127                 if (hpa == NULL) {
 128                         if (uio->uio_rw == UIO_READ)
 129                                 error = uiomove(zerobuf, c, uio);
 130                         else
 131                                 error = EFAULT;
 132                 } else {
 133                         error = uiomove(hpa, c, uio);
 134                         vm_gpa_release(cookie);
 135                 }
 136         }
 137
 138         mtx_unlock(&vmmdev_mtx);
 139         return (error);
 140 }
 141
 142 static int
 143 vmmdev_ioctl(struct cdev *cdev, u_long cmd, caddr_t data, int fflag,
 144              struct thread *td)
 145 {
 146         int error, vcpu, state_changed;
 147         struct vmmdev_softc *sc;
 148         struct vm_memory_segment *seg;
 149         struct vm_register *vmreg;
 150         struct vm_seg_desc* vmsegdesc;
 151         struct vm_run *vmrun;
 152         struct vm_event *vmevent;
 153         struct vm_lapic_irq *vmirq;
 154         struct vm_capability *vmcap;
 155         struct vm_pptdev *pptdev;
 156         struct vm_pptdev_mmio *pptmmio;
 157         struct vm_pptdev_msi *pptmsi;
 158         struct vm_pptdev_msix *pptmsix;
 159         struct vm_nmi *vmnmi;
 160         struct vm_stats *vmstats;
 161         struct vm_stat_desc *statdesc;
 162         struct vm_x2apic *x2apic;
 163         struct vm_gpa_pte *gpapte;
 164
 165         sc = vmmdev_lookup2(cdev);
 166         if (sc == NULL)
 167                 return (ENXIO);
 168
 169         vcpu = -1;
 170         state_changed = 0;
 171
 172         /*
 173          * Some VMM ioctls can operate only on vcpus that are not running.
 174          */
 175         switch (cmd) {
 176         case VM_RUN:
 177         case VM_GET_REGISTER:
 178         case VM_SET_REGISTER:
 179         case VM_GET_SEGMENT_DESCRIPTOR:
 180         case VM_SET_SEGMENT_DESCRIPTOR:
 181         case VM_INJECT_EVENT:
 182         case VM_GET_CAPABILITY:
 183         case VM_SET_CAPABILITY:
 184         case VM_PPTDEV_MSI:
 185         case VM_PPTDEV_MSIX:
 186         case VM_SET_X2APIC_STATE:
 187                 /*
 188                  * XXX fragile, handle with care
 189                  * Assumes that the first field of the ioctl data is the vcpu.
 190                  */
 191                 vcpu = *(int *)data;
 192                 if (vcpu < 0 || vcpu >= VM_MAXCPU) {
 193                         error = EINVAL;
 194                         goto done;
 195                 }
 196
 197                 error = vcpu_set_state(sc->vm, vcpu, VCPU_FROZEN);
 198                 if (error)
 199                         goto done;
 200
 201                 state_changed = 1;
 202                 break;
 203
 204         case VM_MAP_PPTDEV_MMIO:
 205         case VM_BIND_PPTDEV:
 206         case VM_UNBIND_PPTDEV:
 207         case VM_MAP_MEMORY:
 208                 /*
 209                  * ioctls that operate on the entire virtual machine must
 210                  * prevent all vcpus from running.
 211                  */
 212                 error = 0;
 213                 for (vcpu = 0; vcpu < VM_MAXCPU; vcpu++) {
 214                         error = vcpu_set_state(sc->vm, vcpu, VCPU_FROZEN);
 215                         if (error)
 216                                 break;
 217                 }
 218
 219                 if (error) {
 220                         while (--vcpu >= 0)
 221                                 vcpu_set_state(sc->vm, vcpu, VCPU_IDLE);
 222                         goto done;
 223                 }
 224
 225                 state_changed = 2;
 226                 break;
 227
 228         default:
 229                 break;
 230         }
 231
 232         switch(cmd) {
 233         case VM_RUN:
 234                 vmrun = (struct vm_run *)data;
 235                 error = vm_run(sc->vm, vmrun);
 236                 break;
 237         case VM_STAT_DESC: {
 238                 statdesc = (struct vm_stat_desc *)data;
 239                 error = vmm_stat_desc_copy(statdesc->index,
 240                                         statdesc->desc, sizeof(statdesc->desc));
 241                 break;
 242         }
 243         case VM_STATS: {
 244                 CTASSERT(MAX_VM_STATS >= MAX_VMM_STAT_ELEMS);
 245                 vmstats = (struct vm_stats *)data;
 246                 getmicrotime(&vmstats->tv);
 247                 error = vmm_stat_copy(sc->vm, vmstats->cpuid,
 248                                       &vmstats->num_entries, vmstats->statbuf);
 249                 break;
 250         }
 251         case VM_PPTDEV_MSI:
 252                 pptmsi = (struct vm_pptdev_msi *)data;
 253                 error = ppt_setup_msi(sc->vm, pptmsi->vcpu,
 254                                       pptmsi->bus, pptmsi->slot, pptmsi->func,
 255                                       pptmsi->destcpu, pptmsi->vector,
 256                                       pptmsi->numvec);
 257                 break;
 258         case VM_PPTDEV_MSIX:
 259                 pptmsix = (struct vm_pptdev_msix *)data;
 260                 error = ppt_setup_msix(sc->vm, pptmsix->vcpu,
 261                                        pptmsix->bus, pptmsix->slot,
 262                                        pptmsix->func, pptmsix->idx,
 263                                        pptmsix->msg, pptmsix->vector_control,
 264                                        pptmsix->addr);
 265                 break;
 266         case VM_MAP_PPTDEV_MMIO:
 267                 pptmmio = (struct vm_pptdev_mmio *)data;
 268                 error = ppt_map_mmio(sc->vm, pptmmio->bus, pptmmio->slot,
 269                                      pptmmio->func, pptmmio->gpa, pptmmio->len,
 270                                      pptmmio->hpa);
 271                 break;
 272         case VM_BIND_PPTDEV:
 273                 pptdev = (struct vm_pptdev *)data;
 274                 error = vm_assign_pptdev(sc->vm, pptdev->bus, pptdev->slot,
 275                                          pptdev->func);
 276                 break;
 277         case VM_UNBIND_PPTDEV:
 278                 pptdev = (struct vm_pptdev *)data;
 279                 error = vm_unassign_pptdev(sc->vm, pptdev->bus, pptdev->slot,
 280                                            pptdev->func);
 281                 break;
 282         case VM_INJECT_EVENT:
 283                 vmevent = (struct vm_event *)data;
 284                 error = vm_inject_event(sc->vm, vmevent->cpuid, vmevent->type,
 285                                         vmevent->vector,
 286                                         vmevent->error_code,
 287                                         vmevent->error_code_valid);
 288                 break;
 289         case VM_INJECT_NMI:
 290                 vmnmi = (struct vm_nmi *)data;
 291                 error = vm_inject_nmi(sc->vm, vmnmi->cpuid);
 292                 break;
 293         case VM_LAPIC_IRQ:
 294                 vmirq = (struct vm_lapic_irq *)data;
 295                 error = lapic_set_intr(sc->vm, vmirq->cpuid, vmirq->vector);
 296                 break;
 297         case VM_MAP_MEMORY:
 298                 seg = (struct vm_memory_segment *)data;
 299                 error = vm_malloc(sc->vm, seg->gpa, seg->len);
 300                 break;
 301         case VM_GET_MEMORY_SEG:
 302                 seg = (struct vm_memory_segment *)data;
 303                 seg->len = 0;
 304                 (void)vm_gpabase2memseg(sc->vm, seg->gpa, seg);
 305                 error = 0;
 306                 break;
 307         case VM_GET_REGISTER:
 308                 vmreg = (struct vm_register *)data;
 309                 error = vm_get_register(sc->vm, vmreg->cpuid, vmreg->regnum,
 310                                         &vmreg->regval);
 311                 break;
 312         case VM_SET_REGISTER:
 313                 vmreg = (struct vm_register *)data;
 314                 error = vm_set_register(sc->vm, vmreg->cpuid, vmreg->regnum,
 315                                         vmreg->regval);
 316                 break;
 317         case VM_SET_SEGMENT_DESCRIPTOR:
 318                 vmsegdesc = (struct vm_seg_desc *)data;
 319                 error = vm_set_seg_desc(sc->vm, vmsegdesc->cpuid,
 320                                         vmsegdesc->regnum,
 321                                         &vmsegdesc->desc);
 322                 break;
 323         case VM_GET_SEGMENT_DESCRIPTOR:
 324                 vmsegdesc = (struct vm_seg_desc *)data;
 325                 error = vm_get_seg_desc(sc->vm, vmsegdesc->cpuid,
 326                                         vmsegdesc->regnum,
 327                                         &vmsegdesc->desc);
 328                 break;
 329         case VM_GET_CAPABILITY:
 330                 vmcap = (struct vm_capability *)data;
 331                 error = vm_get_capability(sc->vm, vmcap->cpuid,
 332                                           vmcap->captype,
 333                                           &vmcap->capval);
 334                 break;
 335         case VM_SET_CAPABILITY:
 336                 vmcap = (struct vm_capability *)data;
 337                 error = vm_set_capability(sc->vm, vmcap->cpuid,
 338                                           vmcap->captype,
 339                                           vmcap->capval);
 340                 break;
 341         case VM_SET_X2APIC_STATE:
 342                 x2apic = (struct vm_x2apic *)data;
 343                 error = vm_set_x2apic_state(sc->vm,
 344                                             x2apic->cpuid, x2apic->state);
 345                 break;
 346         case VM_GET_X2APIC_STATE:
 347                 x2apic = (struct vm_x2apic *)data;
 348                 error = vm_get_x2apic_state(sc->vm,
 349                                             x2apic->cpuid, &x2apic->state);
 350                 break;
 351         case VM_GET_GPA_PMAP:
 352                 gpapte = (struct vm_gpa_pte *)data;
 353                 pmap_get_mapping(vmspace_pmap(vm_get_vmspace(sc->vm)),
 354                                  gpapte->gpa, gpapte->pte, &gpapte->ptenum);
 355                 error = 0;
 356                 break;
 357         default:
 358                 error = ENOTTY;
 359                 break;
 360         }
 361
 362         if (state_changed == 1) {
 363                 vcpu_set_state(sc->vm, vcpu, VCPU_IDLE);
 364         } else if (state_changed == 2) {
 365                 for (vcpu = 0; vcpu < VM_MAXCPU; vcpu++)
 366                         vcpu_set_state(sc->vm, vcpu, VCPU_IDLE);
 367         }
 368
 369 done:
 370         /* Make sure that no handler returns a bogus value like ERESTART */
 371         KASSERT(error >= 0, ("vmmdev_ioctl: invalid error return %d", error));
 372         return (error);
 373 }
 374
 375 static int
 376 vmmdev_mmap_single(struct cdev *cdev, vm_ooffset_t *offset,
 377                    vm_size_t size, struct vm_object **object, int nprot)
 378 {
 379         int error;
 380         struct vmmdev_softc *sc;
 381
 382         mtx_lock(&vmmdev_mtx);
 383
 384         sc = vmmdev_lookup2(cdev);
 385         if (sc != NULL && (nprot & PROT_EXEC) == 0)
 386                 error = vm_get_memobj(sc->vm, *offset, size, offset, object);
 387         else
 388                 error = EINVAL;
 389
 390         mtx_unlock(&vmmdev_mtx);
 391
 392         return (error);
 393 }
 394
 395 static void
 396 vmmdev_destroy(struct vmmdev_softc *sc, boolean_t unlink)
 397 {
 398
 399         /*
 400          * XXX must stop virtual machine instances that may be still
 401          * running and cleanup their state.
 402          */
 403         if (sc->cdev)
 404                 destroy_dev(sc->cdev);
 405
 406         if (sc->vm)
 407                 vm_destroy(sc->vm);
 408
 409         if (unlink) {
 410                 mtx_lock(&vmmdev_mtx);
 411                 SLIST_REMOVE(&head, sc, vmmdev_softc, link);
 412                 mtx_unlock(&vmmdev_mtx);
 413         }
 414
 415         free(sc, M_VMMDEV);
 416 }
 417
 418 static int
 419 sysctl_vmm_destroy(SYSCTL_HANDLER_ARGS)
 420 {
 421         int error;
 422         char buf[VM_MAX_NAMELEN];
 423         struct vmmdev_softc *sc;
 424
 425         strlcpy(buf, "beavis", sizeof(buf));
 426         error = sysctl_handle_string(oidp, buf, sizeof(buf), req);
 427         if (error != 0 || req->newptr == NULL)
 428                 return (error);
 429
 430         /*
 431          * XXX TODO if any process has this device open then fail
 432          */
 433
 434         mtx_lock(&vmmdev_mtx);
 435         sc = vmmdev_lookup(buf);
 436         if (sc == NULL) {
 437                 mtx_unlock(&vmmdev_mtx);
 438                 return (EINVAL);
 439         }
 440
 441         sc->cdev->si_drv1 = NULL;
 442         mtx_unlock(&vmmdev_mtx);
 443
 444         vmmdev_destroy(sc, TRUE);
 445
 446         return (0);
 447 }
 448 SYSCTL_PROC(_hw_vmm, OID_AUTO, destroy, CTLTYPE_STRING | CTLFLAG_RW,
 449             NULL, 0, sysctl_vmm_destroy, "A", NULL);
 450
 451 static struct cdevsw vmmdevsw = {
 452         .d_name         = "vmmdev",
 453         .d_version      = D_VERSION,
 454         .d_ioctl        = vmmdev_ioctl,
 455         .d_mmap_single  = vmmdev_mmap_single,
 456         .d_read         = vmmdev_rw,
 457         .d_write        = vmmdev_rw,
 458 };
 459
 460 static int
 461 sysctl_vmm_create(SYSCTL_HANDLER_ARGS)
 462 {
 463         int error;
 464         struct vm *vm;
 465         struct vmmdev_softc *sc, *sc2;
 466         char buf[VM_MAX_NAMELEN];
 467
 468         strlcpy(buf, "beavis", sizeof(buf));
 469         error = sysctl_handle_string(oidp, buf, sizeof(buf), req);
 470         if (error != 0 || req->newptr == NULL)
 471                 return (error);
 472
 473         mtx_lock(&vmmdev_mtx);
 474         sc = vmmdev_lookup(buf);
 475         mtx_unlock(&vmmdev_mtx);
 476         if (sc != NULL)
 477                 return (EEXIST);
 478
 479         error = vm_create(buf, &vm);
 480         if (error != 0)
 481                 return (error);
 482
 483         sc = malloc(sizeof(struct vmmdev_softc), M_VMMDEV, M_WAITOK | M_ZERO);
 484         sc->vm = vm;
 485
 486         /*
 487          * Lookup the name again just in case somebody sneaked in when we
 488          * dropped the lock.
 489          */
 490         mtx_lock(&vmmdev_mtx);
 491         sc2 = vmmdev_lookup(buf);
 492         if (sc2 == NULL)
 493                 SLIST_INSERT_HEAD(&head, sc, link);
 494         mtx_unlock(&vmmdev_mtx);
 495
 496         if (sc2 != NULL) {
 497                 vmmdev_destroy(sc, FALSE);
 498                 return (EEXIST);
 499         }
 500
 501         error = make_dev_p(MAKEDEV_CHECKNAME, &sc->cdev, &vmmdevsw, NULL,
 502                            UID_ROOT, GID_WHEEL, 0600, "vmm/%s", buf);
 503         if (error != 0) {
 504                 vmmdev_destroy(sc, TRUE);
 505                 return (error);
 506         }
 507         sc->cdev->si_drv1 = sc;
 508
 509         return (0);
 510 }
 511 SYSCTL_PROC(_hw_vmm, OID_AUTO, create, CTLTYPE_STRING | CTLFLAG_RW,
 512             NULL, 0, sysctl_vmm_create, "A", NULL);
 513
 514 void
 515 vmmdev_init(void)
 516 {
 517         mtx_init(&vmmdev_mtx, "vmm device mutex", NULL, MTX_DEF);
 518 }
 519
 520 int
 521 vmmdev_cleanup(void)
 522 {
 523         int error;
 524
 525         if (SLIST_EMPTY(&head))
 526                 error = 0;
 527         else
 528                 error = EBUSY;
 529
 530         return (error);
 531 }