x86_xpmap.c revision 1.9 1 /* $NetBSD: x86_xpmap.c,v 1.9 2008/09/05 13:37:24 tron Exp $ */
2
3 /*
4 * Copyright (c) 2006 Mathieu Ropert <mro (at) adviseo.fr>
5 *
6 * Permission to use, copy, modify, and distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
9 *
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 */
18
19 /*
20 * Copyright (c) 2006, 2007 Manuel Bouyer.
21 *
22 * Redistribution and use in source and binary forms, with or without
23 * modification, are permitted provided that the following conditions
24 * are met:
25 * 1. Redistributions of source code must retain the above copyright
26 * notice, this list of conditions and the following disclaimer.
27 * 2. Redistributions in binary form must reproduce the above copyright
28 * notice, this list of conditions and the following disclaimer in the
29 * documentation and/or other materials provided with the distribution.
30 * 3. All advertising materials mentioning features or use of this software
31 * must display the following acknowledgement:
32 * This product includes software developed by Manuel Bouyer.
33 * 4. The name of the author may not be used to endorse or promote products
34 * derived from this software without specific prior written permission.
35 *
36 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
37 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
38 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
39 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
40 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
41 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
42 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
43 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
44 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
45 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
46 *
47 */
48
49 /*
50 *
51 * Copyright (c) 2004 Christian Limpach.
52 * All rights reserved.
53 *
54 * Redistribution and use in source and binary forms, with or without
55 * modification, are permitted provided that the following conditions
56 * are met:
57 * 1. Redistributions of source code must retain the above copyright
58 * notice, this list of conditions and the following disclaimer.
59 * 2. Redistributions in binary form must reproduce the above copyright
60 * notice, this list of conditions and the following disclaimer in the
61 * documentation and/or other materials provided with the distribution.
62 * 3. All advertising materials mentioning features or use of this software
63 * must display the following acknowledgement:
64 * This product includes software developed by Christian Limpach.
65 * 4. The name of the author may not be used to endorse or promote products
66 * derived from this software without specific prior written permission.
67 *
68 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
69 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
70 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
71 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
72 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
73 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
74 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
75 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
76 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
77 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
78 */
79
80
81 #include <sys/cdefs.h>
82 __KERNEL_RCSID(0, "$NetBSD: x86_xpmap.c,v 1.9 2008/09/05 13:37:24 tron Exp $");
83
84 #include "opt_xen.h"
85 #include "opt_ddb.h"
86 #include "ksyms.h"
87
88 #include <sys/param.h>
89 #include <sys/systm.h>
90
91 #include <uvm/uvm.h>
92
93 #include <machine/pmap.h>
94 #include <machine/gdt.h>
95 #include <xen/xenfunc.h>
96
97 #include <dev/isa/isareg.h>
98 #include <machine/isa_machdep.h>
99
100 #undef XENDEBUG
101 /* #define XENDEBUG_SYNC */
102 /* #define XENDEBUG_LOW */
103
104 #ifdef XENDEBUG
105 #define XENPRINTF(x) printf x
106 #define XENPRINTK(x) printk x
107 #define XENPRINTK2(x) /* printk x */
108
109 static char XBUF[256];
110 #else
111 #define XENPRINTF(x)
112 #define XENPRINTK(x)
113 #define XENPRINTK2(x)
114 #endif
115 #define PRINTF(x) printf x
116 #define PRINTK(x) printk x
117
118 /* on x86_64 kernel runs in ring 3 */
119 #ifdef __x86_64__
120 #define PG_k PG_u
121 #else
122 #define PG_k 0
123 #endif
124
125 volatile shared_info_t *HYPERVISOR_shared_info;
126 union start_info_union start_info_union;
127 unsigned long *xpmap_phys_to_machine_mapping;
128
129 void xen_failsafe_handler(void);
130
131 #ifdef XEN3
132 #define HYPERVISOR_mmu_update_self(req, count, success_count) \
133 HYPERVISOR_mmu_update((req), (count), (success_count), DOMID_SELF)
134 #else
135 #define HYPERVISOR_mmu_update_self(req, count, success_count) \
136 HYPERVISOR_mmu_update((req), (count), (success_count))
137 #endif
138
139 void
140 xen_failsafe_handler(void)
141 {
142
143 panic("xen_failsafe_handler called!\n");
144 }
145
146
147 void
148 xen_set_ldt(vaddr_t base, uint32_t entries)
149 {
150 vaddr_t va;
151 vaddr_t end;
152 pt_entry_t *ptp;
153 int s;
154
155 #ifdef __x86_64__
156 end = base + (entries << 3);
157 #else
158 end = base + entries * sizeof(union descriptor);
159 #endif
160
161 for (va = base; va < end; va += PAGE_SIZE) {
162 KASSERT(va >= VM_MIN_KERNEL_ADDRESS);
163 ptp = kvtopte(va);
164 XENPRINTF(("xen_set_ldt %p %d %p\n", (void *)base,
165 entries, ptp));
166 pmap_pte_clearbits(ptp, PG_RW);
167 }
168 s = splvm();
169 xpq_queue_set_ldt(base, entries);
170 xpq_flush_queue();
171 splx(s);
172 }
173
174 #ifdef XENDEBUG
175 void xpq_debug_dump(void);
176 #endif
177
178 #define XPQUEUE_SIZE 2048
179 static mmu_update_t xpq_queue[XPQUEUE_SIZE];
180 static int xpq_idx = 0;
181
182 void
183 xpq_flush_queue(void)
184 {
185 int i, ok;
186
187 XENPRINTK2(("flush queue %p entries %d\n", xpq_queue, xpq_idx));
188 for (i = 0; i < xpq_idx; i++)
189 XENPRINTK2(("%d: %p %08" PRIx64 "\n", i,
190 (uint64_t)xpq_queue[i].ptr, (uint64_t)xpq_queue[i].val));
191 if (xpq_idx != 0 &&
192 HYPERVISOR_mmu_update_self(xpq_queue, xpq_idx, &ok) < 0) {
193 printf("xpq_flush_queue: %d entries \n", xpq_idx);
194 for (i = 0; i < xpq_idx; i++)
195 printf("0x%016" PRIx64 ": 0x%016" PRIx64 "\n",
196 (uint64_t)xpq_queue[i].ptr,
197 (uint64_t)xpq_queue[i].val);
198 panic("HYPERVISOR_mmu_update failed\n");
199 }
200 xpq_idx = 0;
201 }
202
203 static inline void
204 xpq_increment_idx(void)
205 {
206
207 xpq_idx++;
208 if (__predict_false(xpq_idx == XPQUEUE_SIZE))
209 xpq_flush_queue();
210 }
211
212 void
213 xpq_queue_machphys_update(paddr_t ma, paddr_t pa)
214 {
215 XENPRINTK2(("xpq_queue_machphys_update ma=0x%" PRIx64 " pa=0x%" PRIx64
216 "\n", (int64_t)ma, (int64_t)pa));
217 xpq_queue[xpq_idx].ptr = ma | MMU_MACHPHYS_UPDATE;
218 xpq_queue[xpq_idx].val = (pa - XPMAP_OFFSET) >> PAGE_SHIFT;
219 xpq_increment_idx();
220 #ifdef XENDEBUG_SYNC
221 xpq_flush_queue();
222 #endif
223 }
224
225 void
226 xpq_queue_pte_update(paddr_t ptr, pt_entry_t val)
227 {
228
229 KASSERT((ptr & 3) == 0);
230 xpq_queue[xpq_idx].ptr = (paddr_t)ptr | MMU_NORMAL_PT_UPDATE;
231 xpq_queue[xpq_idx].val = val;
232 xpq_increment_idx();
233 #ifdef XENDEBUG_SYNC
234 xpq_flush_queue();
235 #endif
236 }
237
238 #ifdef XEN3
239 void
240 xpq_queue_pt_switch(paddr_t pa)
241 {
242 struct mmuext_op op;
243 xpq_flush_queue();
244
245 XENPRINTK2(("xpq_queue_pt_switch: 0x%" PRIx64 " 0x%" PRIx64 "\n",
246 (int64_t)pa, (int64_t)pa));
247 op.cmd = MMUEXT_NEW_BASEPTR;
248 op.arg1.mfn = pa >> PAGE_SHIFT;
249 if (HYPERVISOR_mmuext_op(&op, 1, NULL, DOMID_SELF) < 0)
250 panic("xpq_queue_pt_switch");
251 }
252
253 void
254 xpq_queue_pin_table(paddr_t pa)
255 {
256 struct mmuext_op op;
257 xpq_flush_queue();
258
259 XENPRINTK2(("xpq_queue_pin_table: 0x%" PRIx64 " 0x%" PRIx64 "\n",
260 (int64_t)pa, (int64_t)pa));
261 op.arg1.mfn = pa >> PAGE_SHIFT;
262
263 #if defined(__x86_64__)
264 op.cmd = MMUEXT_PIN_L4_TABLE;
265 #else
266 op.cmd = MMUEXT_PIN_L2_TABLE;
267 #endif
268 if (HYPERVISOR_mmuext_op(&op, 1, NULL, DOMID_SELF) < 0)
269 panic("xpq_queue_pin_table");
270 }
271
272 #ifdef PAE
273 static void
274 xpq_queue_pin_l3_table(paddr_t pa)
275 {
276 struct mmuext_op op;
277 xpq_flush_queue();
278
279 XENPRINTK2(("xpq_queue_pin_l2_table: 0x%" PRIx64 " 0x%" PRIx64 "\n",
280 (int64_t)pa, (int64_t)pa));
281 op.arg1.mfn = pa >> PAGE_SHIFT;
282
283 op.cmd = MMUEXT_PIN_L3_TABLE;
284 if (HYPERVISOR_mmuext_op(&op, 1, NULL, DOMID_SELF) < 0)
285 panic("xpq_queue_pin_table");
286 }
287 #endif
288
289 void
290 xpq_queue_unpin_table(paddr_t pa)
291 {
292 struct mmuext_op op;
293 xpq_flush_queue();
294
295 XENPRINTK2(("xpq_queue_unpin_table: 0x%" PRIx64 " 0x%" PRIx64 "\n",
296 (int64_t)pa, (int64_t)pa));
297 op.arg1.mfn = pa >> PAGE_SHIFT;
298 op.cmd = MMUEXT_UNPIN_TABLE;
299 if (HYPERVISOR_mmuext_op(&op, 1, NULL, DOMID_SELF) < 0)
300 panic("xpq_queue_unpin_table");
301 }
302
303 void
304 xpq_queue_set_ldt(vaddr_t va, uint32_t entries)
305 {
306 struct mmuext_op op;
307 xpq_flush_queue();
308
309 XENPRINTK2(("xpq_queue_set_ldt\n"));
310 KASSERT(va == (va & ~PAGE_MASK));
311 op.cmd = MMUEXT_SET_LDT;
312 op.arg1.linear_addr = va;
313 op.arg2.nr_ents = entries;
314 if (HYPERVISOR_mmuext_op(&op, 1, NULL, DOMID_SELF) < 0)
315 panic("xpq_queue_set_ldt");
316 }
317
318 void
319 xpq_queue_tlb_flush(void)
320 {
321 struct mmuext_op op;
322 xpq_flush_queue();
323
324 XENPRINTK2(("xpq_queue_tlb_flush\n"));
325 op.cmd = MMUEXT_TLB_FLUSH_LOCAL;
326 if (HYPERVISOR_mmuext_op(&op, 1, NULL, DOMID_SELF) < 0)
327 panic("xpq_queue_tlb_flush");
328 }
329
330 void
331 xpq_flush_cache(void)
332 {
333 struct mmuext_op op;
334 int s = splvm();
335 xpq_flush_queue();
336
337 XENPRINTK2(("xpq_queue_flush_cache\n"));
338 op.cmd = MMUEXT_FLUSH_CACHE;
339 if (HYPERVISOR_mmuext_op(&op, 1, NULL, DOMID_SELF) < 0)
340 panic("xpq_flush_cache");
341 splx(s);
342 }
343
344 void
345 xpq_queue_invlpg(vaddr_t va)
346 {
347 struct mmuext_op op;
348 xpq_flush_queue();
349
350 XENPRINTK2(("xpq_queue_invlpg %p\n", (void *)va));
351 op.cmd = MMUEXT_INVLPG_LOCAL;
352 op.arg1.linear_addr = (va & ~PAGE_MASK);
353 if (HYPERVISOR_mmuext_op(&op, 1, NULL, DOMID_SELF) < 0)
354 panic("xpq_queue_invlpg");
355 }
356
357 int
358 xpq_update_foreign(paddr_t ptr, pt_entry_t val, int dom)
359 {
360 mmu_update_t op;
361 int ok;
362 xpq_flush_queue();
363
364 op.ptr = ptr;
365 op.val = val;
366 if (HYPERVISOR_mmu_update(&op, 1, &ok, dom) < 0)
367 return EFAULT;
368 return (0);
369 }
370 #else /* XEN3 */
371 void
372 xpq_queue_pt_switch(paddr_t pa)
373 {
374
375 XENPRINTK2(("xpq_queue_pt_switch: %p %p\n", (void *)pa, (void *)pa));
376 xpq_queue[xpq_idx].ptr = pa | MMU_EXTENDED_COMMAND;
377 xpq_queue[xpq_idx].val = MMUEXT_NEW_BASEPTR;
378 xpq_increment_idx();
379 }
380
381 void
382 xpq_queue_pin_table(paddr_t pa)
383 {
384
385 XENPRINTK2(("xpq_queue_pin_table: %p %p\n", (void *)pa, (void *)pa));
386 xpq_queue[xpq_idx].ptr = pa | MMU_EXTENDED_COMMAND;
387 xpq_queue[xpq_idx].val = MMUEXT_PIN_L2_TABLE;
388 xpq_increment_idx();
389 }
390
391 void
392 xpq_queue_unpin_table(paddr_t pa)
393 {
394
395 XENPRINTK2(("xpq_queue_unpin_table: %p %p\n", (void *)pa, (void *)pa));
396 xpq_queue[xpq_idx].ptr = pa | MMU_EXTENDED_COMMAND;
397 xpq_queue[xpq_idx].val = MMUEXT_UNPIN_TABLE;
398 xpq_increment_idx();
399 }
400
401 void
402 xpq_queue_set_ldt(vaddr_t va, uint32_t entries)
403 {
404
405 XENPRINTK2(("xpq_queue_set_ldt\n"));
406 KASSERT(va == (va & ~PAGE_MASK));
407 xpq_queue[xpq_idx].ptr = MMU_EXTENDED_COMMAND | va;
408 xpq_queue[xpq_idx].val = MMUEXT_SET_LDT | (entries << MMUEXT_CMD_SHIFT);
409 xpq_increment_idx();
410 }
411
412 void
413 xpq_queue_tlb_flush(void)
414 {
415
416 XENPRINTK2(("xpq_queue_tlb_flush\n"));
417 xpq_queue[xpq_idx].ptr = MMU_EXTENDED_COMMAND;
418 xpq_queue[xpq_idx].val = MMUEXT_TLB_FLUSH;
419 xpq_increment_idx();
420 }
421
422 void
423 xpq_flush_cache(void)
424 {
425 int s = splvm();
426
427 XENPRINTK2(("xpq_queue_flush_cache\n"));
428 xpq_queue[xpq_idx].ptr = MMU_EXTENDED_COMMAND;
429 xpq_queue[xpq_idx].val = MMUEXT_FLUSH_CACHE;
430 xpq_increment_idx();
431 xpq_flush_queue();
432 splx(s);
433 }
434
435 void
436 xpq_queue_invlpg(vaddr_t va)
437 {
438
439 XENPRINTK2(("xpq_queue_invlpg %p\n", (void *)va));
440 xpq_queue[xpq_idx].ptr = (va & ~PAGE_MASK) | MMU_EXTENDED_COMMAND;
441 xpq_queue[xpq_idx].val = MMUEXT_INVLPG;
442 xpq_increment_idx();
443 }
444
445 int
446 xpq_update_foreign(paddr_t ptr, pt_entry_t val, int dom)
447 {
448 mmu_update_t xpq_up[3];
449
450 xpq_up[0].ptr = MMU_EXTENDED_COMMAND;
451 xpq_up[0].val = MMUEXT_SET_FOREIGNDOM | (dom << 16);
452 xpq_up[1].ptr = ptr;
453 xpq_up[1].val = val;
454 if (HYPERVISOR_mmu_update_self(xpq_up, 2, NULL) < 0)
455 return EFAULT;
456 return (0);
457 }
458 #endif /* XEN3 */
459
460 #ifdef XENDEBUG
461 void
462 xpq_debug_dump(void)
463 {
464 int i;
465
466 XENPRINTK2(("idx: %d\n", xpq_idx));
467 for (i = 0; i < xpq_idx; i++) {
468 sprintf(XBUF, "%" PRIx64 " %08" PRIx64,
469 (uint64_t)xpq_queue[i].ptr, (uint64_t)xpq_queue[i].val);
470 if (++i < xpq_idx)
471 sprintf(XBUF + strlen(XBUF), "%" PRIx64 " %08" PRIx64,
472 (uint64_t)xpq_queue[i].ptr, (uint64_t)xpq_queue[i].val);
473 if (++i < xpq_idx)
474 sprintf(XBUF + strlen(XBUF), "%" PRIx64 " %08" PRIx64,
475 (uint64_t)xpq_queue[i].ptr, (uint64_t)xpq_queue[i].val);
476 if (++i < xpq_idx)
477 sprintf(XBUF + strlen(XBUF), "%" PRIx64 " %08" PRIx64,
478 (uint64_t)xpq_queue[i].ptr, (uint64_t)xpq_queue[i].val);
479 XENPRINTK2(("%d: %s\n", xpq_idx, XBUF));
480 }
481 }
482 #endif
483
484
485 extern volatile struct xencons_interface *xencons_interface; /* XXX */
486 extern struct xenstore_domain_interface *xenstore_interface; /* XXX */
487
488 static void xen_bt_set_readonly (vaddr_t);
489 static void xen_bootstrap_tables (vaddr_t, vaddr_t, int, int, int);
490
491 /* How many PDEs ? */
492 #if L2_SLOT_KERNBASE > 0
493 #define TABLE_L2_ENTRIES (2 * (NKL2_KIMG_ENTRIES + 1))
494 #else
495 #define TABLE_L2_ENTRIES (NKL2_KIMG_ENTRIES + 1)
496 #endif
497
498 /*
499 * Construct and switch to new pagetables
500 * first_avail is the first vaddr we can use after
501 * we get rid of Xen pagetables
502 */
503
504 vaddr_t xen_pmap_bootstrap (void);
505
506 /*
507 * Function to get rid of Xen bootstrap tables
508 */
509
510 /* How many PDP do we need: */
511 #ifdef PAE
512 /*
513 * For PAE, we consider a single contigous L2 "superpage" of 4 pages,
514 * all of them mapped by the L3 page. We also need a shadow page
515 * for L3[3].
516 */
517 static const int l2_4_count = 6;
518 #else
519 static const int l2_4_count = PTP_LEVELS - 1;
520 #endif
521
522 vaddr_t
523 xen_pmap_bootstrap(void)
524 {
525 int count, oldcount;
526 long mapsize;
527 vaddr_t bootstrap_tables, init_tables;
528
529 xpmap_phys_to_machine_mapping =
530 (unsigned long *)xen_start_info.mfn_list;
531 init_tables = xen_start_info.pt_base;
532 __PRINTK(("xen_arch_pmap_bootstrap init_tables=0x%lx\n", init_tables));
533
534 /* Space after Xen boostrap tables should be free */
535 bootstrap_tables = xen_start_info.pt_base +
536 (xen_start_info.nr_pt_frames * PAGE_SIZE);
537
538 /*
539 * Calculate how many space we need
540 * first everything mapped before the Xen bootstrap tables
541 */
542 mapsize = init_tables - KERNTEXTOFF;
543 /* after the tables we'll have:
544 * - UAREA
545 * - dummy user PGD (x86_64)
546 * - HYPERVISOR_shared_info
547 * - ISA I/O mem (if needed)
548 */
549 mapsize += UPAGES * NBPG;
550 #ifdef __x86_64__
551 mapsize += NBPG;
552 #endif
553 mapsize += NBPG;
554
555 #ifdef DOM0OPS
556 if (xen_start_info.flags & SIF_INITDOMAIN) {
557 /* space for ISA I/O mem */
558 mapsize += IOM_SIZE;
559 }
560 #endif
561 /* at this point mapsize doens't include the table size */
562
563 #ifdef __x86_64__
564 count = TABLE_L2_ENTRIES;
565 #else
566 count = (mapsize + (NBPD_L2 -1)) >> L2_SHIFT;
567 #endif /* __x86_64__ */
568
569 /* now compute how many L2 pages we need exactly */
570 XENPRINTK(("bootstrap_final mapsize 0x%lx count %d\n", mapsize, count));
571 while (mapsize + (count + l2_4_count) * PAGE_SIZE + KERNTEXTOFF >
572 ((long)count << L2_SHIFT) + KERNBASE) {
573 count++;
574 }
575 #ifndef __x86_64__
576 /*
577 * one more L2 page: we'll alocate several pages after kva_start
578 * in pmap_bootstrap() before pmap_growkernel(), which have not been
579 * counted here. It's not a big issue to allocate one more L2 as
580 * pmap_growkernel() will be called anyway.
581 */
582 count++;
583 nkptp[1] = count;
584 #endif
585
586 /*
587 * install bootstrap pages. We may need more L2 pages than will
588 * have the final table here, as it's installed after the final table
589 */
590 oldcount = count;
591
592 bootstrap_again:
593 XENPRINTK(("bootstrap_again oldcount %d\n", oldcount));
594 /*
595 * Xen space we'll reclaim may not be enough for our new page tables,
596 * move bootstrap tables if necessary
597 */
598 if (bootstrap_tables < init_tables + ((count + l2_4_count) * PAGE_SIZE))
599 bootstrap_tables = init_tables +
600 ((count + l2_4_count) * PAGE_SIZE);
601 /* make sure we have enough to map the bootstrap_tables */
602 if (bootstrap_tables + ((oldcount + l2_4_count) * PAGE_SIZE) >
603 ((long)oldcount << L2_SHIFT) + KERNBASE) {
604 oldcount++;
605 goto bootstrap_again;
606 }
607
608 /* Create temporary tables */
609 xen_bootstrap_tables(xen_start_info.pt_base, bootstrap_tables,
610 xen_start_info.nr_pt_frames, oldcount, 0);
611
612 /* Create final tables */
613 xen_bootstrap_tables(bootstrap_tables, init_tables,
614 oldcount + l2_4_count, count, 1);
615
616 /* zero out free space after tables */
617 memset((void *)(init_tables + ((count + l2_4_count) * PAGE_SIZE)), 0,
618 (UPAGES + 1) * NBPG);
619 return (init_tables + ((count + l2_4_count) * PAGE_SIZE));
620 }
621
622
623 /*
624 * Build a new table and switch to it
625 * old_count is # of old tables (including PGD, PDTPE and PDE)
626 * new_count is # of new tables (PTE only)
627 * we assume areas don't overlap
628 */
629
630
631 static void
632 xen_bootstrap_tables (vaddr_t old_pgd, vaddr_t new_pgd,
633 int old_count, int new_count, int final)
634 {
635 pd_entry_t *pdtpe, *pde, *pte;
636 pd_entry_t *cur_pgd, *bt_pgd;
637 paddr_t addr;
638 vaddr_t page, avail, text_end, map_end;
639 int i;
640 extern char __data_start;
641
642 __PRINTK(("xen_bootstrap_tables(0x%lx, 0x%lx, %d, %d)\n",
643 old_pgd, new_pgd, old_count, new_count));
644 text_end = ((vaddr_t)&__data_start) & ~PAGE_MASK;
645 /*
646 * size of R/W area after kernel text:
647 * xencons_interface (if present)
648 * xenstore_interface (if present)
649 * table pages (new_count + l2_4_count entries)
650 * extra mappings (only when final is true):
651 * UAREA
652 * dummy user PGD (x86_64 only)/gdt page (i386 only)
653 * HYPERVISOR_shared_info
654 * ISA I/O mem (if needed)
655 */
656 map_end = new_pgd + ((new_count + l2_4_count) * NBPG);
657 if (final) {
658 map_end += (UPAGES + 1) * NBPG;
659 HYPERVISOR_shared_info = (shared_info_t *)map_end;
660 map_end += NBPG;
661 }
662 /*
663 * we always set atdevbase, as it's used by init386 to find the first
664 * available VA. map_end is updated only if we are dom0, so
665 * atdevbase -> atdevbase + IOM_SIZE will be mapped only in
666 * this case.
667 */
668 if (final)
669 atdevbase = map_end;
670 #ifdef DOM0OPS
671 if (final && (xen_start_info.flags & SIF_INITDOMAIN)) {
672 /* ISA I/O mem */
673 map_end += IOM_SIZE;
674 }
675 #endif /* DOM0OPS */
676
677 __PRINTK(("xen_bootstrap_tables text_end 0x%lx map_end 0x%lx\n",
678 text_end, map_end));
679 __PRINTK(("console 0x%lx ", xen_start_info.console_mfn));
680 __PRINTK(("xenstore 0x%lx\n", xen_start_info.store_mfn));
681
682 /*
683 * Create bootstrap page tables
684 * What we need:
685 * - a PGD (level 4)
686 * - a PDTPE (level 3)
687 * - a PDE (level2)
688 * - some PTEs (level 1)
689 */
690
691 cur_pgd = (pd_entry_t *) old_pgd;
692 bt_pgd = (pd_entry_t *) new_pgd;
693 memset (bt_pgd, 0, PAGE_SIZE);
694 avail = new_pgd + PAGE_SIZE;
695 #if PTP_LEVELS > 3
696 /* Install level 3 */
697 pdtpe = (pd_entry_t *) avail;
698 memset (pdtpe, 0, PAGE_SIZE);
699 avail += PAGE_SIZE;
700
701 addr = ((u_long) pdtpe) - KERNBASE;
702 bt_pgd[pl4_pi(KERNTEXTOFF)] =
703 xpmap_ptom_masked(addr) | PG_k | PG_RW | PG_V;
704
705 __PRINTK(("L3 va 0x%lx pa 0x%" PRIx64 " entry 0x%" PRIx64 " -> L4[0x%x]\n",
706 pdtpe, (uint64_t)addr, (uint64_t)bt_pgd[pl4_pi(KERNTEXTOFF)],
707 pl4_pi(KERNTEXTOFF)));
708 #else
709 pdtpe = bt_pgd;
710 #endif /* PTP_LEVELS > 3 */
711
712 #if PTP_LEVELS > 2
713 /* Level 2 */
714 pde = (pd_entry_t *) avail;
715 memset(pde, 0, PAGE_SIZE);
716 avail += PAGE_SIZE;
717
718 addr = ((u_long) pde) - KERNBASE;
719 pdtpe[pl3_pi(KERNTEXTOFF)] =
720 xpmap_ptom_masked(addr) | PG_k | PG_V | PG_RW;
721 __PRINTK(("L2 va 0x%lx pa 0x%" PRIx64 " entry 0x%" PRIx64 " -> L3[0x%x]\n",
722 pde, (int64_t)addr, (int64_t)pdtpe[pl3_pi(KERNTEXTOFF)],
723 pl3_pi(KERNTEXTOFF)));
724 #elif defined(PAE)
725 /* our PAE-style level 2: 5 contigous pages (4 L2 + 1 shadow) */
726 pde = (pd_entry_t *) avail;
727 memset(pde, 0, PAGE_SIZE * 5);
728 avail += PAGE_SIZE * 5;
729 addr = ((u_long) pde) - KERNBASE;
730 /*
731 * enter L2 pages in the L3.
732 * The real L2 kernel PD will be the last one (so that
733 * pde[L2_SLOT_KERN] always point to the shadow).
734 */
735 for (i = 0; i < 3; i++, addr += PAGE_SIZE) {
736 /*
737 * Xen doens't want R/W mappings in L3 entries, it'll add it
738 * itself.
739 */
740 pdtpe[i] = xpmap_ptom_masked(addr) | PG_k | PG_V;
741 __PRINTK(("L2 va 0x%lx pa 0x%" PRIx64 " entry 0x%" PRIx64
742 " -> L3[0x%x]\n", (vaddr_t)pde + PAGE_SIZE * i,
743 (int64_t)addr, (int64_t)pdtpe[i], i));
744 }
745 addr += PAGE_SIZE;
746 pdtpe[3] = xpmap_ptom_masked(addr) | PG_k | PG_V;
747 __PRINTK(("L2 va 0x%lx pa 0x%" PRIx64 " entry 0x%" PRIx64
748 " -> L3[0x%x]\n", (vaddr_t)pde + PAGE_SIZE * 4,
749 (int64_t)addr, (int64_t)pdtpe[3], 3));
750
751 #else /* PAE */
752 pde = bt_pgd;
753 #endif /* PTP_LEVELS > 2 */
754
755 /* Level 1 */
756 page = KERNTEXTOFF;
757 for (i = 0; i < new_count; i ++) {
758 vaddr_t cur_page = page;
759
760 pte = (pd_entry_t *) avail;
761 avail += PAGE_SIZE;
762
763 memset(pte, 0, PAGE_SIZE);
764 while (pl2_pi(page) == pl2_pi (cur_page)) {
765 if (page >= map_end) {
766 /* not mapped at all */
767 pte[pl1_pi(page)] = 0;
768 page += PAGE_SIZE;
769 continue;
770 }
771 pte[pl1_pi(page)] = xpmap_ptom_masked(page - KERNBASE);
772 if (page == (vaddr_t)HYPERVISOR_shared_info) {
773 pte[pl1_pi(page)] = xen_start_info.shared_info;
774 __PRINTK(("HYPERVISOR_shared_info "
775 "va 0x%lx pte 0x%" PRIx64 "\n",
776 HYPERVISOR_shared_info, (int64_t)pte[pl1_pi(page)]));
777 }
778 #ifdef XEN3
779 if ((xpmap_ptom_masked(page - KERNBASE) >> PAGE_SHIFT)
780 == xen_start_info.console_mfn) {
781 xencons_interface = (void *)page;
782 pte[pl1_pi(page)] = xen_start_info.console_mfn;
783 pte[pl1_pi(page)] <<= PAGE_SHIFT;
784 __PRINTK(("xencons_interface "
785 "va 0x%lx pte 0x%" PRIx64 "\n",
786 xencons_interface, (int64_t)pte[pl1_pi(page)]));
787 }
788 if ((xpmap_ptom_masked(page - KERNBASE) >> PAGE_SHIFT)
789 == xen_start_info.store_mfn) {
790 xenstore_interface = (void *)page;
791 pte[pl1_pi(page)] = xen_start_info.store_mfn;
792 pte[pl1_pi(page)] <<= PAGE_SHIFT;
793 __PRINTK(("xenstore_interface "
794 "va 0x%lx pte 0x%" PRIx64 "\n",
795 xenstore_interface, (int64_t)pte[pl1_pi(page)]));
796 }
797 #endif /* XEN3 */
798 #ifdef DOM0OPS
799 if (page >= (vaddr_t)atdevbase &&
800 page < (vaddr_t)atdevbase + IOM_SIZE) {
801 pte[pl1_pi(page)] =
802 IOM_BEGIN + (page - (vaddr_t)atdevbase);
803 }
804 #endif
805 pte[pl1_pi(page)] |= PG_k | PG_V;
806 if (page < text_end) {
807 /* map kernel text RO */
808 pte[pl1_pi(page)] |= 0;
809 } else if (page >= old_pgd
810 && page < old_pgd + (old_count * PAGE_SIZE)) {
811 /* map old page tables RO */
812 pte[pl1_pi(page)] |= 0;
813 } else if (page >= new_pgd &&
814 page < new_pgd + ((new_count + l2_4_count) * PAGE_SIZE)) {
815 /* map new page tables RO */
816 pte[pl1_pi(page)] |= 0;
817 } else {
818 /* map page RW */
819 pte[pl1_pi(page)] |= PG_RW;
820 }
821
822 if ((page >= old_pgd && page < old_pgd + (old_count * PAGE_SIZE))
823 || page >= new_pgd) {
824 __PRINTK(("va 0x%lx pa 0x%lx "
825 "entry 0x%" PRIx64 " -> L1[0x%x]\n",
826 page, page - KERNBASE,
827 (int64_t)pte[pl1_pi(page)], pl1_pi(page)));
828 }
829 page += PAGE_SIZE;
830 }
831
832 addr = ((u_long) pte) - KERNBASE;
833 pde[pl2_pi(cur_page)] =
834 xpmap_ptom_masked(addr) | PG_k | PG_RW | PG_V;
835 __PRINTK(("L1 va 0x%lx pa 0x%" PRIx64 " entry 0x%" PRIx64
836 " -> L2[0x%x]\n", pte, (int64_t)addr,
837 (int64_t)pde[pl2_pi(cur_page)], pl2_pi(cur_page)));
838 /* Mark readonly */
839 xen_bt_set_readonly((vaddr_t) pte);
840 }
841
842 /* Install recursive page tables mapping */
843 #ifdef PAE
844 /*
845 * we need a shadow page for the kernel's L2 page
846 * The real L2 kernel PD will be the last one (so that
847 * pde[L2_SLOT_KERN] always point to the shadow.
848 */
849 memcpy(&pde[L2_SLOT_KERN + NPDPG], &pde[L2_SLOT_KERN], PAGE_SIZE);
850 pmap_kl2pd = &pde[L2_SLOT_KERN + NPDPG];
851 pmap_kl2paddr = (u_long)pmap_kl2pd - KERNBASE;
852
853 /*
854 * We don't enter a recursive entry from the L3 PD. Instead,
855 * we enter the first 4 L2 pages, which includes the kernel's L2
856 * shadow. But we have to entrer the shadow after switching
857 * %cr3, or Xen will refcount some PTE with the wrong type.
858 */
859 addr = (u_long)pde - KERNBASE;
860 for (i = 0; i < 3; i++, addr += PAGE_SIZE) {
861 pde[PDIR_SLOT_PTE + i] = xpmap_ptom_masked(addr) | PG_k | PG_V;
862 __PRINTK(("pde[%d] va 0x%lx pa 0x%lx entry 0x%" PRIx64 "\n",
863 (int)(PDIR_SLOT_PTE + i), pde + PAGE_SIZE * i, (long)addr,
864 (int64_t)pde[PDIR_SLOT_PTE + i]));
865 }
866 #if 0
867 addr += PAGE_SIZE; /* point to shadow L2 */
868 pde[PDIR_SLOT_PTE + 3] = xpmap_ptom_masked(addr) | PG_k | PG_V;
869 __PRINTK(("pde[%d] va 0x%lx pa 0x%lx entry 0x%" PRIx64 "\n",
870 (int)(PDIR_SLOT_PTE + 3), pde + PAGE_SIZE * 4, (long)addr,
871 (int64_t)pde[PDIR_SLOT_PTE + 3]));
872 #endif
873 /* Mark tables RO, and pin the kenrel's shadow as L2 */
874 addr = (u_long)pde - KERNBASE;
875 for (i = 0; i < 5; i++, addr += PAGE_SIZE) {
876 xen_bt_set_readonly(((vaddr_t)pde) + PAGE_SIZE * i);
877 if (i == 2 || i == 3)
878 continue;
879 #if 0
880 __PRINTK(("pin L2 %d addr 0x%" PRIx64 "\n", i, (int64_t)addr));
881 xpq_queue_pin_table(xpmap_ptom_masked(addr));
882 #endif
883 }
884 if (final) {
885 addr = (u_long)pde - KERNBASE + 3 * PAGE_SIZE;
886 __PRINTK(("pin L2 %d addr 0x%" PRIx64 "\n", 2, (int64_t)addr));
887 xpq_queue_pin_table(xpmap_ptom_masked(addr));
888 }
889 #if 0
890 addr = (u_long)pde - KERNBASE + 2 * PAGE_SIZE;
891 __PRINTK(("pin L2 %d addr 0x%" PRIx64 "\n", 2, (int64_t)addr));
892 xpq_queue_pin_table(xpmap_ptom_masked(addr));
893 #endif
894 #else /* PAE */
895 /* recursive entry in higher-level PD */
896 bt_pgd[PDIR_SLOT_PTE] =
897 xpmap_ptom_masked(new_pgd - KERNBASE) | PG_k | PG_V;
898 __PRINTK(("bt_pgd[PDIR_SLOT_PTE] va 0x%lx pa 0x%" PRIx64
899 " entry 0x%" PRIx64 "\n", new_pgd, (int64_t)new_pgd - KERNBASE,
900 (int64_t)bt_pgd[PDIR_SLOT_PTE]));
901 /* Mark tables RO */
902 xen_bt_set_readonly((vaddr_t) pde);
903 #endif
904 #if PTP_LEVELS > 2 || defined(PAE)
905 xen_bt_set_readonly((vaddr_t) pdtpe);
906 #endif
907 #if PTP_LEVELS > 3
908 xen_bt_set_readonly(new_pgd);
909 #endif
910 /* Pin the PGD */
911 __PRINTK(("pin PDG\n"));
912 #ifdef PAE
913 xpq_queue_pin_l3_table(xpmap_ptom_masked(new_pgd - KERNBASE));
914 #else
915 xpq_queue_pin_table(xpmap_ptom_masked(new_pgd - KERNBASE));
916 #endif
917 #ifdef __i386__
918 /* Save phys. addr of PDP, for libkvm. */
919 PDPpaddr = (long)pde;
920 #ifdef PAE
921 /* also save the address of the L3 page */
922 pmap_l3pd = pdtpe;
923 pmap_l3paddr = (new_pgd - KERNBASE);
924 #endif /* PAE */
925 #endif /* i386 */
926 /* Switch to new tables */
927 __PRINTK(("switch to PDG\n"));
928 xpq_queue_pt_switch(xpmap_ptom_masked(new_pgd - KERNBASE));
929 __PRINTK(("bt_pgd[PDIR_SLOT_PTE] now entry 0x%" PRIx64 "\n",
930 (int64_t)bt_pgd[PDIR_SLOT_PTE]));
931 #ifdef PAE
932 if (final) {
933 /* now enter kernel's PTE mappings */
934 addr = (u_long)pde - KERNBASE + PAGE_SIZE * 3;
935 xpq_queue_pte_update(
936 xpmap_ptom(((vaddr_t)&pde[PDIR_SLOT_PTE + 3]) - KERNBASE),
937 xpmap_ptom_masked(addr) | PG_k | PG_V);
938 xpq_flush_queue();
939 }
940 #endif
941
942
943
944 /* Now we can safely reclaim space taken by old tables */
945
946 __PRINTK(("unpin old PDG\n"));
947 /* Unpin old PGD */
948 xpq_queue_unpin_table(xpmap_ptom_masked(old_pgd - KERNBASE));
949 /* Mark old tables RW */
950 page = old_pgd;
951 addr = (paddr_t) pde[pl2_pi(page)] & PG_FRAME;
952 addr = xpmap_mtop(addr);
953 pte = (pd_entry_t *) ((u_long)addr + KERNBASE);
954 pte += pl1_pi(page);
955 __PRINTK(("*pde 0x%" PRIx64 " addr 0x%" PRIx64 " pte 0x%lx\n",
956 (int64_t)pde[pl2_pi(page)], (int64_t)addr, (long)pte));
957 while (page < old_pgd + (old_count * PAGE_SIZE) && page < map_end) {
958 addr = xpmap_ptom(((u_long) pte) - KERNBASE);
959 XENPRINTK(("addr 0x%" PRIx64 " pte 0x%lx *pte 0x%" PRIx64 "\n",
960 (int64_t)addr, (long)pte, (int64_t)*pte));
961 xpq_queue_pte_update(addr, *pte | PG_RW);
962 page += PAGE_SIZE;
963 /*
964 * Our ptes are contiguous
965 * so it's safe to just "++" here
966 */
967 pte++;
968 }
969 xpq_flush_queue();
970 }
971
972
973 /*
974 * Bootstrap helper functions
975 */
976
977 /*
978 * Mark a page readonly
979 * XXX: assuming vaddr = paddr + KERNBASE
980 */
981
982 static void
983 xen_bt_set_readonly (vaddr_t page)
984 {
985 pt_entry_t entry;
986
987 entry = xpmap_ptom_masked(page - KERNBASE);
988 entry |= PG_k | PG_V;
989
990 HYPERVISOR_update_va_mapping (page, entry, UVMF_INVLPG);
991 }
992
993 #ifdef __x86_64__
994 void
995 xen_set_user_pgd(paddr_t page)
996 {
997 struct mmuext_op op;
998 int s = splvm();
999
1000 xpq_flush_queue();
1001 op.cmd = MMUEXT_NEW_USER_BASEPTR;
1002 op.arg1.mfn = xpmap_phys_to_machine_mapping[page >> PAGE_SHIFT];
1003 if (HYPERVISOR_mmuext_op(&op, 1, NULL, DOMID_SELF) < 0)
1004 panic("xen_set_user_pgd: failed to install new user page"
1005 " directory %lx", page);
1006 splx(s);
1007 }
1008 #endif /* __x86_64__ */
1009