1 /* SPDX-License-Identifier: GPL-2.0 */
2 #ifndef __KVM_X86_VMX_INSN_H
3 #define __KVM_X86_VMX_INSN_H
4 
5 #include <linux/nospec.h>
6 
7 #include <asm/vmx.h>
8 
9 #include "evmcs.h"
10 #include "vmcs.h"
11 #include "../x86.h"
12 
13 asmlinkage void vmread_error(unsigned long field, bool fault);
14 __attribute__((regparm(0))) void vmread_error_trampoline(unsigned long field,
15 							 bool fault);
16 void vmwrite_error(unsigned long field, unsigned long value);
17 void vmclear_error(struct vmcs *vmcs, u64 phys_addr);
18 void vmptrld_error(struct vmcs *vmcs, u64 phys_addr);
19 void invvpid_error(unsigned long ext, u16 vpid, gva_t gva);
20 void invept_error(unsigned long ext, u64 eptp, gpa_t gpa);
21 
vmcs_check16(unsigned long field)22 static __always_inline void vmcs_check16(unsigned long field)
23 {
24 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6001) == 0x2000,
25 			 "16-bit accessor invalid for 64-bit field");
26 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6001) == 0x2001,
27 			 "16-bit accessor invalid for 64-bit high field");
28 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6000) == 0x4000,
29 			 "16-bit accessor invalid for 32-bit high field");
30 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6000) == 0x6000,
31 			 "16-bit accessor invalid for natural width field");
32 }
33 
vmcs_check32(unsigned long field)34 static __always_inline void vmcs_check32(unsigned long field)
35 {
36 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6000) == 0,
37 			 "32-bit accessor invalid for 16-bit field");
38 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6001) == 0x2000,
39 			 "32-bit accessor invalid for 64-bit field");
40 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6001) == 0x2001,
41 			 "32-bit accessor invalid for 64-bit high field");
42 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6000) == 0x6000,
43 			 "32-bit accessor invalid for natural width field");
44 }
45 
vmcs_check64(unsigned long field)46 static __always_inline void vmcs_check64(unsigned long field)
47 {
48 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6000) == 0,
49 			 "64-bit accessor invalid for 16-bit field");
50 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6001) == 0x2001,
51 			 "64-bit accessor invalid for 64-bit high field");
52 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6000) == 0x4000,
53 			 "64-bit accessor invalid for 32-bit field");
54 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6000) == 0x6000,
55 			 "64-bit accessor invalid for natural width field");
56 }
57 
vmcs_checkl(unsigned long field)58 static __always_inline void vmcs_checkl(unsigned long field)
59 {
60 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6000) == 0,
61 			 "Natural width accessor invalid for 16-bit field");
62 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6001) == 0x2000,
63 			 "Natural width accessor invalid for 64-bit field");
64 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6001) == 0x2001,
65 			 "Natural width accessor invalid for 64-bit high field");
66 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6000) == 0x4000,
67 			 "Natural width accessor invalid for 32-bit field");
68 }
69 
__vmcs_readl(unsigned long field)70 static __always_inline unsigned long __vmcs_readl(unsigned long field)
71 {
72 	unsigned long value;
73 
74 #ifdef CONFIG_CC_HAS_ASM_GOTO_OUTPUT
75 
76 	asm_volatile_goto("1: vmread %[field], %[output]\n\t"
77 			  "jna %l[do_fail]\n\t"
78 
79 			  _ASM_EXTABLE(1b, %l[do_exception])
80 
81 			  : [output] "=r" (value)
82 			  : [field] "r" (field)
83 			  : "cc"
84 			  : do_fail, do_exception);
85 
86 	return value;
87 
88 do_fail:
89 	WARN_ONCE(1, "kvm: vmread failed: field=%lx\n", field);
90 	pr_warn_ratelimited("kvm: vmread failed: field=%lx\n", field);
91 	return 0;
92 
93 do_exception:
94 	kvm_spurious_fault();
95 	return 0;
96 
97 #else /* !CONFIG_CC_HAS_ASM_GOTO_OUTPUT */
98 
99 	asm volatile("1: vmread %2, %1\n\t"
100 		     ".byte 0x3e\n\t" /* branch taken hint */
101 		     "ja 3f\n\t"
102 
103 		     /*
104 		      * VMREAD failed.  Push '0' for @fault, push the failing
105 		      * @field, and bounce through the trampoline to preserve
106 		      * volatile registers.
107 		      */
108 		     "xorl %k1, %k1\n\t"
109 		     "2:\n\t"
110 		     "push %1\n\t"
111 		     "push %2\n\t"
112 		     "call vmread_error_trampoline\n\t"
113 
114 		     /*
115 		      * Unwind the stack.  Note, the trampoline zeros out the
116 		      * memory for @fault so that the result is '0' on error.
117 		      */
118 		     "pop %2\n\t"
119 		     "pop %1\n\t"
120 		     "3:\n\t"
121 
122 		     /* VMREAD faulted.  As above, except push '1' for @fault. */
123 		     _ASM_EXTABLE_TYPE_REG(1b, 2b, EX_TYPE_ONE_REG, %1)
124 
125 		     : ASM_CALL_CONSTRAINT, "=&r"(value) : "r"(field) : "cc");
126 	return value;
127 
128 #endif /* CONFIG_CC_HAS_ASM_GOTO_OUTPUT */
129 }
130 
vmcs_read16(unsigned long field)131 static __always_inline u16 vmcs_read16(unsigned long field)
132 {
133 	vmcs_check16(field);
134 	if (static_branch_unlikely(&enable_evmcs))
135 		return evmcs_read16(field);
136 	return __vmcs_readl(field);
137 }
138 
vmcs_read32(unsigned long field)139 static __always_inline u32 vmcs_read32(unsigned long field)
140 {
141 	vmcs_check32(field);
142 	if (static_branch_unlikely(&enable_evmcs))
143 		return evmcs_read32(field);
144 	return __vmcs_readl(field);
145 }
146 
vmcs_read64(unsigned long field)147 static __always_inline u64 vmcs_read64(unsigned long field)
148 {
149 	vmcs_check64(field);
150 	if (static_branch_unlikely(&enable_evmcs))
151 		return evmcs_read64(field);
152 #ifdef CONFIG_X86_64
153 	return __vmcs_readl(field);
154 #else
155 	return __vmcs_readl(field) | ((u64)__vmcs_readl(field+1) << 32);
156 #endif
157 }
158 
vmcs_readl(unsigned long field)159 static __always_inline unsigned long vmcs_readl(unsigned long field)
160 {
161 	vmcs_checkl(field);
162 	if (static_branch_unlikely(&enable_evmcs))
163 		return evmcs_read64(field);
164 	return __vmcs_readl(field);
165 }
166 
167 #define vmx_asm1(insn, op1, error_args...)				\
168 do {									\
169 	asm_volatile_goto("1: " __stringify(insn) " %0\n\t"		\
170 			  ".byte 0x2e\n\t" /* branch not taken hint */	\
171 			  "jna %l[error]\n\t"				\
172 			  _ASM_EXTABLE(1b, %l[fault])			\
173 			  : : op1 : "cc" : error, fault);		\
174 	return;								\
175 error:									\
176 	instrumentation_begin();					\
177 	insn##_error(error_args);					\
178 	instrumentation_end();						\
179 	return;								\
180 fault:									\
181 	kvm_spurious_fault();						\
182 } while (0)
183 
184 #define vmx_asm2(insn, op1, op2, error_args...)				\
185 do {									\
186 	asm_volatile_goto("1: "  __stringify(insn) " %1, %0\n\t"	\
187 			  ".byte 0x2e\n\t" /* branch not taken hint */	\
188 			  "jna %l[error]\n\t"				\
189 			  _ASM_EXTABLE(1b, %l[fault])			\
190 			  : : op1, op2 : "cc" : error, fault);		\
191 	return;								\
192 error:									\
193 	instrumentation_begin();					\
194 	insn##_error(error_args);					\
195 	instrumentation_end();						\
196 	return;								\
197 fault:									\
198 	kvm_spurious_fault();						\
199 } while (0)
200 
__vmcs_writel(unsigned long field,unsigned long value)201 static __always_inline void __vmcs_writel(unsigned long field, unsigned long value)
202 {
203 	vmx_asm2(vmwrite, "r"(field), "rm"(value), field, value);
204 }
205 
vmcs_write16(unsigned long field,u16 value)206 static __always_inline void vmcs_write16(unsigned long field, u16 value)
207 {
208 	vmcs_check16(field);
209 	if (static_branch_unlikely(&enable_evmcs))
210 		return evmcs_write16(field, value);
211 
212 	__vmcs_writel(field, value);
213 }
214 
vmcs_write32(unsigned long field,u32 value)215 static __always_inline void vmcs_write32(unsigned long field, u32 value)
216 {
217 	vmcs_check32(field);
218 	if (static_branch_unlikely(&enable_evmcs))
219 		return evmcs_write32(field, value);
220 
221 	__vmcs_writel(field, value);
222 }
223 
vmcs_write64(unsigned long field,u64 value)224 static __always_inline void vmcs_write64(unsigned long field, u64 value)
225 {
226 	vmcs_check64(field);
227 	if (static_branch_unlikely(&enable_evmcs))
228 		return evmcs_write64(field, value);
229 
230 	__vmcs_writel(field, value);
231 #ifndef CONFIG_X86_64
232 	__vmcs_writel(field+1, value >> 32);
233 #endif
234 }
235 
vmcs_writel(unsigned long field,unsigned long value)236 static __always_inline void vmcs_writel(unsigned long field, unsigned long value)
237 {
238 	vmcs_checkl(field);
239 	if (static_branch_unlikely(&enable_evmcs))
240 		return evmcs_write64(field, value);
241 
242 	__vmcs_writel(field, value);
243 }
244 
vmcs_clear_bits(unsigned long field,u32 mask)245 static __always_inline void vmcs_clear_bits(unsigned long field, u32 mask)
246 {
247 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6000) == 0x2000,
248 			 "vmcs_clear_bits does not support 64-bit fields");
249 	if (static_branch_unlikely(&enable_evmcs))
250 		return evmcs_write32(field, evmcs_read32(field) & ~mask);
251 
252 	__vmcs_writel(field, __vmcs_readl(field) & ~mask);
253 }
254 
vmcs_set_bits(unsigned long field,u32 mask)255 static __always_inline void vmcs_set_bits(unsigned long field, u32 mask)
256 {
257 	BUILD_BUG_ON_MSG(__builtin_constant_p(field) && ((field) & 0x6000) == 0x2000,
258 			 "vmcs_set_bits does not support 64-bit fields");
259 	if (static_branch_unlikely(&enable_evmcs))
260 		return evmcs_write32(field, evmcs_read32(field) | mask);
261 
262 	__vmcs_writel(field, __vmcs_readl(field) | mask);
263 }
264 
vmcs_clear(struct vmcs * vmcs)265 static inline void vmcs_clear(struct vmcs *vmcs)
266 {
267 	u64 phys_addr = __pa(vmcs);
268 
269 	vmx_asm1(vmclear, "m"(phys_addr), vmcs, phys_addr);
270 }
271 
vmcs_load(struct vmcs * vmcs)272 static inline void vmcs_load(struct vmcs *vmcs)
273 {
274 	u64 phys_addr = __pa(vmcs);
275 
276 	if (static_branch_unlikely(&enable_evmcs))
277 		return evmcs_load(phys_addr);
278 
279 	vmx_asm1(vmptrld, "m"(phys_addr), vmcs, phys_addr);
280 }
281 
__invvpid(unsigned long ext,u16 vpid,gva_t gva)282 static inline void __invvpid(unsigned long ext, u16 vpid, gva_t gva)
283 {
284 	struct {
285 		u64 vpid : 16;
286 		u64 rsvd : 48;
287 		u64 gva;
288 	} operand = { vpid, 0, gva };
289 
290 	vmx_asm2(invvpid, "r"(ext), "m"(operand), ext, vpid, gva);
291 }
292 
__invept(unsigned long ext,u64 eptp,gpa_t gpa)293 static inline void __invept(unsigned long ext, u64 eptp, gpa_t gpa)
294 {
295 	struct {
296 		u64 eptp, gpa;
297 	} operand = {eptp, gpa};
298 
299 	vmx_asm2(invept, "r"(ext), "m"(operand), ext, eptp, gpa);
300 }
301 
vpid_sync_vcpu_single(int vpid)302 static inline void vpid_sync_vcpu_single(int vpid)
303 {
304 	if (vpid == 0)
305 		return;
306 
307 	__invvpid(VMX_VPID_EXTENT_SINGLE_CONTEXT, vpid, 0);
308 }
309 
vpid_sync_vcpu_global(void)310 static inline void vpid_sync_vcpu_global(void)
311 {
312 	__invvpid(VMX_VPID_EXTENT_ALL_CONTEXT, 0, 0);
313 }
314 
vpid_sync_context(int vpid)315 static inline void vpid_sync_context(int vpid)
316 {
317 	if (cpu_has_vmx_invvpid_single())
318 		vpid_sync_vcpu_single(vpid);
319 	else if (vpid != 0)
320 		vpid_sync_vcpu_global();
321 }
322 
vpid_sync_vcpu_addr(int vpid,gva_t addr)323 static inline void vpid_sync_vcpu_addr(int vpid, gva_t addr)
324 {
325 	if (vpid == 0)
326 		return;
327 
328 	if (cpu_has_vmx_invvpid_individual_addr())
329 		__invvpid(VMX_VPID_EXTENT_INDIVIDUAL_ADDR, vpid, addr);
330 	else
331 		vpid_sync_context(vpid);
332 }
333 
ept_sync_global(void)334 static inline void ept_sync_global(void)
335 {
336 	__invept(VMX_EPT_EXTENT_GLOBAL, 0, 0);
337 }
338 
ept_sync_context(u64 eptp)339 static inline void ept_sync_context(u64 eptp)
340 {
341 	if (cpu_has_vmx_invept_context())
342 		__invept(VMX_EPT_EXTENT_CONTEXT, eptp, 0);
343 	else
344 		ept_sync_global();
345 }
346 
347 #endif /* __KVM_X86_VMX_INSN_H */
348