1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * Copyright (C) 2015, 2016 ARM Ltd.
4  */
5 
6 #include <linux/irqchip/arm-gic.h>
7 #include <linux/kvm.h>
8 #include <linux/kvm_host.h>
9 #include <kvm/arm_vgic.h>
10 #include <asm/kvm_mmu.h>
11 
12 #include "vgic.h"
13 
vgic_v2_write_lr(int lr,u32 val)14 static inline void vgic_v2_write_lr(int lr, u32 val)
15 {
16 	void __iomem *base = kvm_vgic_global_state.vctrl_base;
17 
18 	writel_relaxed(val, base + GICH_LR0 + (lr * 4));
19 }
20 
vgic_v2_init_lrs(void)21 void vgic_v2_init_lrs(void)
22 {
23 	int i;
24 
25 	for (i = 0; i < kvm_vgic_global_state.nr_lr; i++)
26 		vgic_v2_write_lr(i, 0);
27 }
28 
vgic_v2_set_underflow(struct kvm_vcpu * vcpu)29 void vgic_v2_set_underflow(struct kvm_vcpu *vcpu)
30 {
31 	struct vgic_v2_cpu_if *cpuif = &vcpu->arch.vgic_cpu.vgic_v2;
32 
33 	cpuif->vgic_hcr |= GICH_HCR_UIE;
34 }
35 
lr_signals_eoi_mi(u32 lr_val)36 static bool lr_signals_eoi_mi(u32 lr_val)
37 {
38 	return !(lr_val & GICH_LR_STATE) && (lr_val & GICH_LR_EOI) &&
39 	       !(lr_val & GICH_LR_HW);
40 }
41 
42 /*
43  * transfer the content of the LRs back into the corresponding ap_list:
44  * - active bit is transferred as is
45  * - pending bit is
46  *   - transferred as is in case of edge sensitive IRQs
47  *   - set to the line-level (resample time) for level sensitive IRQs
48  */
vgic_v2_fold_lr_state(struct kvm_vcpu * vcpu)49 void vgic_v2_fold_lr_state(struct kvm_vcpu *vcpu)
50 {
51 	struct vgic_cpu *vgic_cpu = &vcpu->arch.vgic_cpu;
52 	struct vgic_v2_cpu_if *cpuif = &vgic_cpu->vgic_v2;
53 	int lr;
54 
55 	DEBUG_SPINLOCK_BUG_ON(!irqs_disabled());
56 
57 	cpuif->vgic_hcr &= ~GICH_HCR_UIE;
58 
59 	for (lr = 0; lr < vgic_cpu->vgic_v2.used_lrs; lr++) {
60 		u32 val = cpuif->vgic_lr[lr];
61 		u32 cpuid, intid = val & GICH_LR_VIRTUALID;
62 		struct vgic_irq *irq;
63 		bool deactivated;
64 
65 		/* Extract the source vCPU id from the LR */
66 		cpuid = val & GICH_LR_PHYSID_CPUID;
67 		cpuid >>= GICH_LR_PHYSID_CPUID_SHIFT;
68 		cpuid &= 7;
69 
70 		/* Notify fds when the guest EOI'ed a level-triggered SPI */
71 		if (lr_signals_eoi_mi(val) && vgic_valid_spi(vcpu->kvm, intid))
72 			kvm_notify_acked_irq(vcpu->kvm, 0,
73 					     intid - VGIC_NR_PRIVATE_IRQS);
74 
75 		irq = vgic_get_irq(vcpu->kvm, vcpu, intid);
76 
77 		raw_spin_lock(&irq->irq_lock);
78 
79 		/* Always preserve the active bit, note deactivation */
80 		deactivated = irq->active && !(val & GICH_LR_ACTIVE_BIT);
81 		irq->active = !!(val & GICH_LR_ACTIVE_BIT);
82 
83 		if (irq->active && vgic_irq_is_sgi(intid))
84 			irq->active_source = cpuid;
85 
86 		/* Edge is the only case where we preserve the pending bit */
87 		if (irq->config == VGIC_CONFIG_EDGE &&
88 		    (val & GICH_LR_PENDING_BIT)) {
89 			irq->pending_latch = true;
90 
91 			if (vgic_irq_is_sgi(intid))
92 				irq->source |= (1 << cpuid);
93 		}
94 
95 		/*
96 		 * Clear soft pending state when level irqs have been acked.
97 		 */
98 		if (irq->config == VGIC_CONFIG_LEVEL && !(val & GICH_LR_STATE))
99 			irq->pending_latch = false;
100 
101 		/* Handle resampling for mapped interrupts if required */
102 		vgic_irq_handle_resampling(irq, deactivated, val & GICH_LR_PENDING_BIT);
103 
104 		raw_spin_unlock(&irq->irq_lock);
105 		vgic_put_irq(vcpu->kvm, irq);
106 	}
107 
108 	cpuif->used_lrs = 0;
109 }
110 
111 /*
112  * Populates the particular LR with the state of a given IRQ:
113  * - for an edge sensitive IRQ the pending state is cleared in struct vgic_irq
114  * - for a level sensitive IRQ the pending state value is unchanged;
115  *   it is dictated directly by the input level
116  *
117  * If @irq describes an SGI with multiple sources, we choose the
118  * lowest-numbered source VCPU and clear that bit in the source bitmap.
119  *
120  * The irq_lock must be held by the caller.
121  */
vgic_v2_populate_lr(struct kvm_vcpu * vcpu,struct vgic_irq * irq,int lr)122 void vgic_v2_populate_lr(struct kvm_vcpu *vcpu, struct vgic_irq *irq, int lr)
123 {
124 	u32 val = irq->intid;
125 	bool allow_pending = true;
126 
127 	if (irq->active) {
128 		val |= GICH_LR_ACTIVE_BIT;
129 		if (vgic_irq_is_sgi(irq->intid))
130 			val |= irq->active_source << GICH_LR_PHYSID_CPUID_SHIFT;
131 		if (vgic_irq_is_multi_sgi(irq)) {
132 			allow_pending = false;
133 			val |= GICH_LR_EOI;
134 		}
135 	}
136 
137 	if (irq->group)
138 		val |= GICH_LR_GROUP1;
139 
140 	if (irq->hw && !vgic_irq_needs_resampling(irq)) {
141 		val |= GICH_LR_HW;
142 		val |= irq->hwintid << GICH_LR_PHYSID_CPUID_SHIFT;
143 		/*
144 		 * Never set pending+active on a HW interrupt, as the
145 		 * pending state is kept at the physical distributor
146 		 * level.
147 		 */
148 		if (irq->active)
149 			allow_pending = false;
150 	} else {
151 		if (irq->config == VGIC_CONFIG_LEVEL) {
152 			val |= GICH_LR_EOI;
153 
154 			/*
155 			 * Software resampling doesn't work very well
156 			 * if we allow P+A, so let's not do that.
157 			 */
158 			if (irq->active)
159 				allow_pending = false;
160 		}
161 	}
162 
163 	if (allow_pending && irq_is_pending(irq)) {
164 		val |= GICH_LR_PENDING_BIT;
165 
166 		if (irq->config == VGIC_CONFIG_EDGE)
167 			irq->pending_latch = false;
168 
169 		if (vgic_irq_is_sgi(irq->intid)) {
170 			u32 src = ffs(irq->source);
171 
172 			if (WARN_RATELIMIT(!src, "No SGI source for INTID %d\n",
173 					   irq->intid))
174 				return;
175 
176 			val |= (src - 1) << GICH_LR_PHYSID_CPUID_SHIFT;
177 			irq->source &= ~(1 << (src - 1));
178 			if (irq->source) {
179 				irq->pending_latch = true;
180 				val |= GICH_LR_EOI;
181 			}
182 		}
183 	}
184 
185 	/*
186 	 * Level-triggered mapped IRQs are special because we only observe
187 	 * rising edges as input to the VGIC.  We therefore lower the line
188 	 * level here, so that we can take new virtual IRQs.  See
189 	 * vgic_v2_fold_lr_state for more info.
190 	 */
191 	if (vgic_irq_is_mapped_level(irq) && (val & GICH_LR_PENDING_BIT))
192 		irq->line_level = false;
193 
194 	/* The GICv2 LR only holds five bits of priority. */
195 	val |= (irq->priority >> 3) << GICH_LR_PRIORITY_SHIFT;
196 
197 	vcpu->arch.vgic_cpu.vgic_v2.vgic_lr[lr] = val;
198 }
199 
vgic_v2_clear_lr(struct kvm_vcpu * vcpu,int lr)200 void vgic_v2_clear_lr(struct kvm_vcpu *vcpu, int lr)
201 {
202 	vcpu->arch.vgic_cpu.vgic_v2.vgic_lr[lr] = 0;
203 }
204 
vgic_v2_set_vmcr(struct kvm_vcpu * vcpu,struct vgic_vmcr * vmcrp)205 void vgic_v2_set_vmcr(struct kvm_vcpu *vcpu, struct vgic_vmcr *vmcrp)
206 {
207 	struct vgic_v2_cpu_if *cpu_if = &vcpu->arch.vgic_cpu.vgic_v2;
208 	u32 vmcr;
209 
210 	vmcr = (vmcrp->grpen0 << GICH_VMCR_ENABLE_GRP0_SHIFT) &
211 		GICH_VMCR_ENABLE_GRP0_MASK;
212 	vmcr |= (vmcrp->grpen1 << GICH_VMCR_ENABLE_GRP1_SHIFT) &
213 		GICH_VMCR_ENABLE_GRP1_MASK;
214 	vmcr |= (vmcrp->ackctl << GICH_VMCR_ACK_CTL_SHIFT) &
215 		GICH_VMCR_ACK_CTL_MASK;
216 	vmcr |= (vmcrp->fiqen << GICH_VMCR_FIQ_EN_SHIFT) &
217 		GICH_VMCR_FIQ_EN_MASK;
218 	vmcr |= (vmcrp->cbpr << GICH_VMCR_CBPR_SHIFT) &
219 		GICH_VMCR_CBPR_MASK;
220 	vmcr |= (vmcrp->eoim << GICH_VMCR_EOI_MODE_SHIFT) &
221 		GICH_VMCR_EOI_MODE_MASK;
222 	vmcr |= (vmcrp->abpr << GICH_VMCR_ALIAS_BINPOINT_SHIFT) &
223 		GICH_VMCR_ALIAS_BINPOINT_MASK;
224 	vmcr |= (vmcrp->bpr << GICH_VMCR_BINPOINT_SHIFT) &
225 		GICH_VMCR_BINPOINT_MASK;
226 	vmcr |= ((vmcrp->pmr >> GICV_PMR_PRIORITY_SHIFT) <<
227 		 GICH_VMCR_PRIMASK_SHIFT) & GICH_VMCR_PRIMASK_MASK;
228 
229 	cpu_if->vgic_vmcr = vmcr;
230 }
231 
vgic_v2_get_vmcr(struct kvm_vcpu * vcpu,struct vgic_vmcr * vmcrp)232 void vgic_v2_get_vmcr(struct kvm_vcpu *vcpu, struct vgic_vmcr *vmcrp)
233 {
234 	struct vgic_v2_cpu_if *cpu_if = &vcpu->arch.vgic_cpu.vgic_v2;
235 	u32 vmcr;
236 
237 	vmcr = cpu_if->vgic_vmcr;
238 
239 	vmcrp->grpen0 = (vmcr & GICH_VMCR_ENABLE_GRP0_MASK) >>
240 		GICH_VMCR_ENABLE_GRP0_SHIFT;
241 	vmcrp->grpen1 = (vmcr & GICH_VMCR_ENABLE_GRP1_MASK) >>
242 		GICH_VMCR_ENABLE_GRP1_SHIFT;
243 	vmcrp->ackctl = (vmcr & GICH_VMCR_ACK_CTL_MASK) >>
244 		GICH_VMCR_ACK_CTL_SHIFT;
245 	vmcrp->fiqen = (vmcr & GICH_VMCR_FIQ_EN_MASK) >>
246 		GICH_VMCR_FIQ_EN_SHIFT;
247 	vmcrp->cbpr = (vmcr & GICH_VMCR_CBPR_MASK) >>
248 		GICH_VMCR_CBPR_SHIFT;
249 	vmcrp->eoim = (vmcr & GICH_VMCR_EOI_MODE_MASK) >>
250 		GICH_VMCR_EOI_MODE_SHIFT;
251 
252 	vmcrp->abpr = (vmcr & GICH_VMCR_ALIAS_BINPOINT_MASK) >>
253 			GICH_VMCR_ALIAS_BINPOINT_SHIFT;
254 	vmcrp->bpr  = (vmcr & GICH_VMCR_BINPOINT_MASK) >>
255 			GICH_VMCR_BINPOINT_SHIFT;
256 	vmcrp->pmr  = ((vmcr & GICH_VMCR_PRIMASK_MASK) >>
257 			GICH_VMCR_PRIMASK_SHIFT) << GICV_PMR_PRIORITY_SHIFT;
258 }
259 
vgic_v2_enable(struct kvm_vcpu * vcpu)260 void vgic_v2_enable(struct kvm_vcpu *vcpu)
261 {
262 	/*
263 	 * By forcing VMCR to zero, the GIC will restore the binary
264 	 * points to their reset values. Anything else resets to zero
265 	 * anyway.
266 	 */
267 	vcpu->arch.vgic_cpu.vgic_v2.vgic_vmcr = 0;
268 
269 	/* Get the show on the road... */
270 	vcpu->arch.vgic_cpu.vgic_v2.vgic_hcr = GICH_HCR_EN;
271 }
272 
273 /* check for overlapping regions and for regions crossing the end of memory */
vgic_v2_check_base(gpa_t dist_base,gpa_t cpu_base)274 static bool vgic_v2_check_base(gpa_t dist_base, gpa_t cpu_base)
275 {
276 	if (dist_base + KVM_VGIC_V2_DIST_SIZE < dist_base)
277 		return false;
278 	if (cpu_base + KVM_VGIC_V2_CPU_SIZE < cpu_base)
279 		return false;
280 
281 	if (dist_base + KVM_VGIC_V2_DIST_SIZE <= cpu_base)
282 		return true;
283 	if (cpu_base + KVM_VGIC_V2_CPU_SIZE <= dist_base)
284 		return true;
285 
286 	return false;
287 }
288 
vgic_v2_map_resources(struct kvm * kvm)289 int vgic_v2_map_resources(struct kvm *kvm)
290 {
291 	struct vgic_dist *dist = &kvm->arch.vgic;
292 	int ret = 0;
293 
294 	if (IS_VGIC_ADDR_UNDEF(dist->vgic_dist_base) ||
295 	    IS_VGIC_ADDR_UNDEF(dist->vgic_cpu_base)) {
296 		kvm_debug("Need to set vgic cpu and dist addresses first\n");
297 		return -ENXIO;
298 	}
299 
300 	if (!vgic_v2_check_base(dist->vgic_dist_base, dist->vgic_cpu_base)) {
301 		kvm_debug("VGIC CPU and dist frames overlap\n");
302 		return -EINVAL;
303 	}
304 
305 	/*
306 	 * Initialize the vgic if this hasn't already been done on demand by
307 	 * accessing the vgic state from userspace.
308 	 */
309 	ret = vgic_init(kvm);
310 	if (ret) {
311 		kvm_err("Unable to initialize VGIC dynamic data structures\n");
312 		return ret;
313 	}
314 
315 	if (!static_branch_unlikely(&vgic_v2_cpuif_trap)) {
316 		ret = kvm_phys_addr_ioremap(kvm, dist->vgic_cpu_base,
317 					    kvm_vgic_global_state.vcpu_base,
318 					    KVM_VGIC_V2_CPU_SIZE, true);
319 		if (ret) {
320 			kvm_err("Unable to remap VGIC CPU to VCPU\n");
321 			return ret;
322 		}
323 	}
324 
325 	return 0;
326 }
327 
328 DEFINE_STATIC_KEY_FALSE(vgic_v2_cpuif_trap);
329 
330 /**
331  * vgic_v2_probe - probe for a VGICv2 compatible interrupt controller
332  * @info:	pointer to the GIC description
333  *
334  * Returns 0 if the VGICv2 has been probed successfully, returns an error code
335  * otherwise
336  */
vgic_v2_probe(const struct gic_kvm_info * info)337 int vgic_v2_probe(const struct gic_kvm_info *info)
338 {
339 	int ret;
340 	u32 vtr;
341 
342 	if (is_protected_kvm_enabled()) {
343 		kvm_err("GICv2 not supported in protected mode\n");
344 		return -ENXIO;
345 	}
346 
347 	if (!info->vctrl.start) {
348 		kvm_err("GICH not present in the firmware table\n");
349 		return -ENXIO;
350 	}
351 
352 	if (!PAGE_ALIGNED(info->vcpu.start) ||
353 	    !PAGE_ALIGNED(resource_size(&info->vcpu))) {
354 		kvm_info("GICV region size/alignment is unsafe, using trapping (reduced performance)\n");
355 
356 		ret = create_hyp_io_mappings(info->vcpu.start,
357 					     resource_size(&info->vcpu),
358 					     &kvm_vgic_global_state.vcpu_base_va,
359 					     &kvm_vgic_global_state.vcpu_hyp_va);
360 		if (ret) {
361 			kvm_err("Cannot map GICV into hyp\n");
362 			goto out;
363 		}
364 
365 		static_branch_enable(&vgic_v2_cpuif_trap);
366 	}
367 
368 	ret = create_hyp_io_mappings(info->vctrl.start,
369 				     resource_size(&info->vctrl),
370 				     &kvm_vgic_global_state.vctrl_base,
371 				     &kvm_vgic_global_state.vctrl_hyp);
372 	if (ret) {
373 		kvm_err("Cannot map VCTRL into hyp\n");
374 		goto out;
375 	}
376 
377 	vtr = readl_relaxed(kvm_vgic_global_state.vctrl_base + GICH_VTR);
378 	kvm_vgic_global_state.nr_lr = (vtr & 0x3f) + 1;
379 
380 	ret = kvm_register_vgic_device(KVM_DEV_TYPE_ARM_VGIC_V2);
381 	if (ret) {
382 		kvm_err("Cannot register GICv2 KVM device\n");
383 		goto out;
384 	}
385 
386 	kvm_vgic_global_state.can_emulate_gicv2 = true;
387 	kvm_vgic_global_state.vcpu_base = info->vcpu.start;
388 	kvm_vgic_global_state.type = VGIC_V2;
389 	kvm_vgic_global_state.max_gic_vcpus = VGIC_V2_MAX_CPUS;
390 
391 	kvm_debug("vgic-v2@%llx\n", info->vctrl.start);
392 
393 	return 0;
394 out:
395 	if (kvm_vgic_global_state.vctrl_base)
396 		iounmap(kvm_vgic_global_state.vctrl_base);
397 	if (kvm_vgic_global_state.vcpu_base_va)
398 		iounmap(kvm_vgic_global_state.vcpu_base_va);
399 
400 	return ret;
401 }
402 
save_lrs(struct kvm_vcpu * vcpu,void __iomem * base)403 static void save_lrs(struct kvm_vcpu *vcpu, void __iomem *base)
404 {
405 	struct vgic_v2_cpu_if *cpu_if = &vcpu->arch.vgic_cpu.vgic_v2;
406 	u64 used_lrs = cpu_if->used_lrs;
407 	u64 elrsr;
408 	int i;
409 
410 	elrsr = readl_relaxed(base + GICH_ELRSR0);
411 	if (unlikely(used_lrs > 32))
412 		elrsr |= ((u64)readl_relaxed(base + GICH_ELRSR1)) << 32;
413 
414 	for (i = 0; i < used_lrs; i++) {
415 		if (elrsr & (1UL << i))
416 			cpu_if->vgic_lr[i] &= ~GICH_LR_STATE;
417 		else
418 			cpu_if->vgic_lr[i] = readl_relaxed(base + GICH_LR0 + (i * 4));
419 
420 		writel_relaxed(0, base + GICH_LR0 + (i * 4));
421 	}
422 }
423 
vgic_v2_save_state(struct kvm_vcpu * vcpu)424 void vgic_v2_save_state(struct kvm_vcpu *vcpu)
425 {
426 	void __iomem *base = kvm_vgic_global_state.vctrl_base;
427 	u64 used_lrs = vcpu->arch.vgic_cpu.vgic_v2.used_lrs;
428 
429 	if (!base)
430 		return;
431 
432 	if (used_lrs) {
433 		save_lrs(vcpu, base);
434 		writel_relaxed(0, base + GICH_HCR);
435 	}
436 }
437 
vgic_v2_restore_state(struct kvm_vcpu * vcpu)438 void vgic_v2_restore_state(struct kvm_vcpu *vcpu)
439 {
440 	struct vgic_v2_cpu_if *cpu_if = &vcpu->arch.vgic_cpu.vgic_v2;
441 	void __iomem *base = kvm_vgic_global_state.vctrl_base;
442 	u64 used_lrs = cpu_if->used_lrs;
443 	int i;
444 
445 	if (!base)
446 		return;
447 
448 	if (used_lrs) {
449 		writel_relaxed(cpu_if->vgic_hcr, base + GICH_HCR);
450 		for (i = 0; i < used_lrs; i++) {
451 			writel_relaxed(cpu_if->vgic_lr[i],
452 				       base + GICH_LR0 + (i * 4));
453 		}
454 	}
455 }
456 
vgic_v2_load(struct kvm_vcpu * vcpu)457 void vgic_v2_load(struct kvm_vcpu *vcpu)
458 {
459 	struct vgic_v2_cpu_if *cpu_if = &vcpu->arch.vgic_cpu.vgic_v2;
460 
461 	writel_relaxed(cpu_if->vgic_vmcr,
462 		       kvm_vgic_global_state.vctrl_base + GICH_VMCR);
463 	writel_relaxed(cpu_if->vgic_apr,
464 		       kvm_vgic_global_state.vctrl_base + GICH_APR);
465 }
466 
vgic_v2_vmcr_sync(struct kvm_vcpu * vcpu)467 void vgic_v2_vmcr_sync(struct kvm_vcpu *vcpu)
468 {
469 	struct vgic_v2_cpu_if *cpu_if = &vcpu->arch.vgic_cpu.vgic_v2;
470 
471 	cpu_if->vgic_vmcr = readl_relaxed(kvm_vgic_global_state.vctrl_base + GICH_VMCR);
472 }
473 
vgic_v2_put(struct kvm_vcpu * vcpu)474 void vgic_v2_put(struct kvm_vcpu *vcpu)
475 {
476 	struct vgic_v2_cpu_if *cpu_if = &vcpu->arch.vgic_cpu.vgic_v2;
477 
478 	vgic_v2_vmcr_sync(vcpu);
479 	cpu_if->vgic_apr = readl_relaxed(kvm_vgic_global_state.vctrl_base + GICH_APR);
480 }
481