From patchwork Mon Apr 25 10:35:39 2016 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yu Zhang X-Patchwork-Id: 8925411 Return-Path: X-Original-To: patchwork-xen-devel@patchwork.kernel.org Delivered-To: patchwork-parsemail@patchwork2.web.kernel.org Received: from mail.kernel.org (mail.kernel.org [198.145.29.136]) by patchwork2.web.kernel.org (Postfix) with ESMTP id 81161BF29F for ; Mon, 25 Apr 2016 10:50:30 +0000 (UTC) Received: from mail.kernel.org (localhost [127.0.0.1]) by mail.kernel.org (Postfix) with ESMTP id EE5DF2011B for ; Mon, 25 Apr 2016 10:50:28 +0000 (UTC) Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) (using TLSv1.2 with cipher AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id C0DC720172 for ; Mon, 25 Apr 2016 10:50:27 +0000 (UTC) Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1aue48-0007Fj-9t; Mon, 25 Apr 2016 10:48:32 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1aue47-0007FT-SE for xen-devel@lists.xen.org; Mon, 25 Apr 2016 10:48:31 +0000 Received: from [85.158.139.211] by server-13.bemta-5.messagelabs.com id 32/48-28710-FF5FD175; Mon, 25 Apr 2016 10:48:31 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrJLMWRWlGSWpSXmKPExsVywNwkQvffV9l wg3WvNCyWfFzM4sDocXT3b6YAxijWzLyk/IoE1oyLU1+xFEzxq7i5pZmtgXGLSRcjB4eQQIXE mwNZXYycHBICvBJHls1ghbD9JZ5MuMQKUVInsXpqAkiYTUBb4sfq34wgtoiAtMS1z5fBbGaBO 4wSx89zgJQLC4RI3DolCxJmEVCV6OyfDlbCK+ApsWfPSXaI6XISJ49NBtvEKeAlcaT/HxOILQ RUc+R7M+MERt4FjAyrGNWLU4vKUot0LfSSijLTM0pyEzNzdA0NTPVyU4uLE9NTcxKTivWS83M 3MQKDgAEIdjAebHY+xCjJwaQkynvykGy4EF9SfkplRmJxRnxRaU5q8SFGGQ4OJQneE1+AcoJF qempFWmZOcBwhElLcPAoifA+BknzFhck5hZnpkOkTjEqSonz2gGDWEgAJJFRmgfXBouBS4yyU sK8jECHCPEUpBblZpagyr9iFOdgVBLmrQUZz5OZVwI3/RXQYiagxZcPgS0uSURISTUwCn3uVz eVKa3c3cR5X/xxFMeUpP+rAmefl5ikZr7u8K0kQYPcdRIXu0M1Xr/N7zp3cMe9rMIvsz7vy1h fo8K594amaxhL+IVfzrG2sy7/zu871a93T1d1j++B13uFzA6Lu018w+5/Iljod/evdelPGPu+ cGZ86Z3wmr9EgFXK/+jx/QUJZ9SPKLEUZyQaajEXFScCAPAnpj18AgAA X-Env-Sender: yu.c.zhang@linux.intel.com X-Msg-Ref: server-14.tower-206.messagelabs.com!1461581303!3568679!3 X-Originating-IP: [192.55.52.88] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogMTkyLjU1LjUyLjg4ID0+IDM3NDcyNQ==\n X-StarScan-Received: X-StarScan-Version: 8.28; banners=-,-,- X-VirusChecked: Checked Received: (qmail 60709 invoked from network); 25 Apr 2016 10:48:29 -0000 Received: from mga01.intel.com (HELO mga01.intel.com) (192.55.52.88) by server-14.tower-206.messagelabs.com with SMTP; 25 Apr 2016 10:48:29 -0000 Received: from orsmga003.jf.intel.com ([10.7.209.27]) by fmsmga101.fm.intel.com with ESMTP; 25 Apr 2016 03:48:28 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.24,532,1455004800"; d="scan'208";a="791819035" Received: from zhangyu-xengt.bj.intel.com ([10.238.157.66]) by orsmga003.jf.intel.com with ESMTP; 25 Apr 2016 03:48:26 -0700 From: Yu Zhang To: xen-devel@lists.xen.org Date: Mon, 25 Apr 2016 18:35:39 +0800 Message-Id: <1461580540-9314-3-git-send-email-yu.c.zhang@linux.intel.com> X-Mailer: git-send-email 1.9.1 In-Reply-To: <1461580540-9314-1-git-send-email-yu.c.zhang@linux.intel.com> References: <1461580540-9314-1-git-send-email-yu.c.zhang@linux.intel.com> Cc: Keir Fraser , Andrew Cooper , Paul Durrant , zhiyuan.lv@intel.com, Jan Beulich , wei.liu2@citrix.com Subject: [Xen-devel] [PATCH v3 2/3] x86/ioreq server: Add new functions to get/set memory types. X-BeenThere: xen-devel@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: xen-devel-bounces@lists.xen.org Sender: "Xen-devel" X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00, RCVD_IN_DNSWL_MED, UNPARSEABLE_RELAY autolearn=unavailable version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mail.kernel.org X-Virus-Scanned: ClamAV using ClamSMTP For clarity this patch breaks the code to set/get memory types out of do_hvm_op() into dedicated functions: hvmop_set/get_mem_type(). Also, for clarity, checks for whether a memory type change is allowed are broken out into a separate function called by hvmop_set_mem_type(). There is no intentional functional change in this patch. changes in v3: - Add Andrew's Acked-by and George's Reviewed-by. changes in v2: - According to George Dunlap's comments, follow the "set rc / do something / goto out" pattern in hvmop_get_mem_type(). Signed-off-by: Paul Durrant Signed-off-by: Yu Zhang Reviewed-by: George Dunlap Acked-by: Andrew Cooper Cc: Keir Fraser Cc: Jan Beulich Cc: Andrew Cooper --- xen/arch/x86/hvm/hvm.c | 288 +++++++++++++++++++++++++++---------------------- 1 file changed, 161 insertions(+), 127 deletions(-) diff --git a/xen/arch/x86/hvm/hvm.c b/xen/arch/x86/hvm/hvm.c index 874cb0f..607546c 100644 --- a/xen/arch/x86/hvm/hvm.c +++ b/xen/arch/x86/hvm/hvm.c @@ -5279,6 +5279,61 @@ static int do_altp2m_op( return rc; } +static int hvmop_get_mem_type( + XEN_GUEST_HANDLE_PARAM(xen_hvm_get_mem_type_t) arg) +{ + struct xen_hvm_get_mem_type a; + struct domain *d; + p2m_type_t t; + int rc; + + if ( copy_from_guest(&a, arg, 1) ) + return -EFAULT; + + d = rcu_lock_domain_by_any_id(a.domid); + if ( d == NULL ) + return -ESRCH; + + rc = xsm_hvm_param(XSM_TARGET, d, HVMOP_get_mem_type); + if ( rc ) + goto out; + + rc = -EINVAL; + if ( !is_hvm_domain(d) ) + goto out; + + /* + * Use get_gfn query as we are interested in the current + * type, not in allocating or unsharing. That'll happen + * on access. + */ + get_gfn_query_unlocked(d, a.pfn, &t); + if ( p2m_is_mmio(t) ) + a.mem_type = HVMMEM_mmio_dm; + else if ( t == p2m_ioreq_server ) + a.mem_type = HVMMEM_ioreq_server; + else if ( p2m_is_readonly(t) ) + a.mem_type = HVMMEM_ram_ro; + else if ( p2m_is_ram(t) ) + a.mem_type = HVMMEM_ram_rw; + else if ( p2m_is_pod(t) ) + a.mem_type = HVMMEM_ram_rw; + else if ( p2m_is_grant(t) ) + a.mem_type = HVMMEM_ram_rw; + else + a.mem_type = HVMMEM_mmio_dm; + + rc = -EFAULT; + if ( __copy_to_guest(arg, &a, 1) ) + goto out; + rc = 0; + + out: + rcu_unlock_domain(d); + + return rc; +} + /* * Note that this value is effectively part of the ABI, even if we don't need * to make it a formal part of it: A guest suspended for migration in the @@ -5287,6 +5342,107 @@ static int do_altp2m_op( */ #define HVMOP_op_mask 0xff +static bool_t hvm_allow_p2m_type_change(p2m_type_t old, p2m_type_t new) +{ + if ( p2m_is_ram(old) || + (p2m_is_hole(old) && new == p2m_mmio_dm) || + (old == p2m_ioreq_server && new == p2m_ram_rw) ) + return 1; + + return 0; +} + +static int hvmop_set_mem_type( + XEN_GUEST_HANDLE_PARAM(xen_hvm_set_mem_type_t) arg, + unsigned long *iter) +{ + unsigned long start_iter = *iter; + struct xen_hvm_set_mem_type a; + struct domain *d; + int rc; + + /* Interface types to internal p2m types */ + static const p2m_type_t memtype[] = { + [HVMMEM_ram_rw] = p2m_ram_rw, + [HVMMEM_ram_ro] = p2m_ram_ro, + [HVMMEM_mmio_dm] = p2m_mmio_dm, + [HVMMEM_unused] = p2m_invalid, + [HVMMEM_ioreq_server] = p2m_ioreq_server + }; + + if ( copy_from_guest(&a, arg, 1) ) + return -EFAULT; + + rc = rcu_lock_remote_domain_by_id(a.domid, &d); + if ( rc != 0 ) + return rc; + + rc = -EINVAL; + if ( !is_hvm_domain(d) ) + goto out; + + rc = xsm_hvm_control(XSM_DM_PRIV, d, HVMOP_set_mem_type); + if ( rc ) + goto out; + + rc = -EINVAL; + if ( a.nr < start_iter || + ((a.first_pfn + a.nr - 1) < a.first_pfn) || + ((a.first_pfn + a.nr - 1) > domain_get_maximum_gpfn(d)) ) + goto out; + + if ( a.hvmmem_type >= ARRAY_SIZE(memtype) || + unlikely(a.hvmmem_type == HVMMEM_unused) ) + goto out; + + while ( a.nr > start_iter ) + { + unsigned long pfn = a.first_pfn + start_iter; + p2m_type_t t; + + get_gfn_unshare(d, pfn, &t); + if ( p2m_is_paging(t) ) + { + put_gfn(d, pfn); + p2m_mem_paging_populate(d, pfn); + rc = -EAGAIN; + goto out; + } + if ( p2m_is_shared(t) ) + { + put_gfn(d, pfn); + rc = -EAGAIN; + goto out; + } + if ( !hvm_allow_p2m_type_change(t, memtype[a.hvmmem_type]) ) + { + put_gfn(d, pfn); + goto out; + } + + rc = p2m_change_type_one(d, pfn, t, memtype[a.hvmmem_type]); + put_gfn(d, pfn); + + if ( rc ) + goto out; + + /* Check for continuation if it's not the last interation */ + if ( a.nr > ++start_iter && !(start_iter & HVMOP_op_mask) && + hypercall_preempt_check() ) + { + rc = -ERESTART; + goto out; + } + } + rc = 0; + + out: + rcu_unlock_domain(d); + *iter = start_iter; + + return rc; +} + long do_hvm_op(unsigned long op, XEN_GUEST_HANDLE_PARAM(void) arg) { unsigned long start_iter, mask; @@ -5476,137 +5632,15 @@ long do_hvm_op(unsigned long op, XEN_GUEST_HANDLE_PARAM(void) arg) } case HVMOP_get_mem_type: - { - struct xen_hvm_get_mem_type a; - struct domain *d; - p2m_type_t t; - - if ( copy_from_guest(&a, arg, 1) ) - return -EFAULT; - - d = rcu_lock_domain_by_any_id(a.domid); - if ( d == NULL ) - return -ESRCH; - - rc = xsm_hvm_param(XSM_TARGET, d, op); - if ( unlikely(rc) ) - /* nothing */; - else if ( likely(is_hvm_domain(d)) ) - { - /* Use get_gfn query as we are interested in the current - * type, not in allocating or unsharing. That'll happen - * on access. */ - get_gfn_query_unlocked(d, a.pfn, &t); - if ( p2m_is_mmio(t) ) - a.mem_type = HVMMEM_mmio_dm; - else if ( t == p2m_ioreq_server ) - a.mem_type = HVMMEM_ioreq_server; - else if ( p2m_is_readonly(t) ) - a.mem_type = HVMMEM_ram_ro; - else if ( p2m_is_ram(t) ) - a.mem_type = HVMMEM_ram_rw; - else if ( p2m_is_pod(t) ) - a.mem_type = HVMMEM_ram_rw; - else if ( p2m_is_grant(t) ) - a.mem_type = HVMMEM_ram_rw; - else - a.mem_type = HVMMEM_mmio_dm; - if ( __copy_to_guest(arg, &a, 1) ) - rc = -EFAULT; - } - else - rc = -EINVAL; - - rcu_unlock_domain(d); + rc = hvmop_get_mem_type( + guest_handle_cast(arg, xen_hvm_get_mem_type_t)); break; - } case HVMOP_set_mem_type: - { - struct xen_hvm_set_mem_type a; - struct domain *d; - - /* Interface types to internal p2m types */ - static const p2m_type_t memtype[] = { - [HVMMEM_ram_rw] = p2m_ram_rw, - [HVMMEM_ram_ro] = p2m_ram_ro, - [HVMMEM_mmio_dm] = p2m_mmio_dm, - [HVMMEM_unused] = p2m_invalid, - [HVMMEM_ioreq_server] = p2m_ioreq_server - }; - - if ( copy_from_guest(&a, arg, 1) ) - return -EFAULT; - - rc = rcu_lock_remote_domain_by_id(a.domid, &d); - if ( rc != 0 ) - return rc; - - rc = -EINVAL; - if ( !is_hvm_domain(d) ) - goto setmemtype_fail; - - rc = xsm_hvm_control(XSM_DM_PRIV, d, op); - if ( rc ) - goto setmemtype_fail; - - rc = -EINVAL; - if ( a.nr < start_iter || - ((a.first_pfn + a.nr - 1) < a.first_pfn) || - ((a.first_pfn + a.nr - 1) > domain_get_maximum_gpfn(d)) ) - goto setmemtype_fail; - - if ( a.hvmmem_type >= ARRAY_SIZE(memtype) || - unlikely(a.hvmmem_type == HVMMEM_unused) ) - goto setmemtype_fail; - - while ( a.nr > start_iter ) - { - unsigned long pfn = a.first_pfn + start_iter; - p2m_type_t t; - - get_gfn_unshare(d, pfn, &t); - if ( p2m_is_paging(t) ) - { - put_gfn(d, pfn); - p2m_mem_paging_populate(d, pfn); - rc = -EAGAIN; - goto setmemtype_fail; - } - if ( p2m_is_shared(t) ) - { - put_gfn(d, pfn); - rc = -EAGAIN; - goto setmemtype_fail; - } - if ( !p2m_is_ram(t) && - (!p2m_is_hole(t) || a.hvmmem_type != HVMMEM_mmio_dm) && - (t != p2m_ioreq_server || a.hvmmem_type != HVMMEM_ram_rw) ) - { - put_gfn(d, pfn); - goto setmemtype_fail; - } - - rc = p2m_change_type_one(d, pfn, t, memtype[a.hvmmem_type]); - put_gfn(d, pfn); - if ( rc ) - goto setmemtype_fail; - - /* Check for continuation if it's not the last interation */ - if ( a.nr > ++start_iter && !(start_iter & HVMOP_op_mask) && - hypercall_preempt_check() ) - { - rc = -ERESTART; - goto setmemtype_fail; - } - } - - rc = 0; - - setmemtype_fail: - rcu_unlock_domain(d); + rc = hvmop_set_mem_type( + guest_handle_cast(arg, xen_hvm_set_mem_type_t), + &start_iter); break; - } case HVMOP_pagetable_dying: {