freebsd-skq/sys/amd64/vmm/vmm_ioport.c
neel 4b40e47cf8 Add segment protection and limits violation checks in vie_calculate_gla()
for 32-bit x86 guests.

Tested using ins/outs executed in a FreeBSD/i386 guest.
2014-05-27 04:26:22 +00:00

172 lines
4.4 KiB
C

/*-
* Copyright (c) 2014 Tycho Nightingale <tycho.nightingale@pluribusnetworks.com>
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*/
#include <sys/cdefs.h>
__FBSDID("$FreeBSD$");
#include <sys/param.h>
#include <sys/types.h>
#include <sys/queue.h>
#include <sys/cpuset.h>
#include <sys/systm.h>
#include <vm/vm.h>
#include <machine/vmm.h>
#include <machine/vmm_instruction_emul.h>
#include <x86/psl.h>
#include "vatpic.h"
#include "vatpit.h"
#include "vmm_ioport.h"
#include "vmm_ktr.h"
#define MAX_IOPORTS 1280
ioport_handler_func_t ioport_handler[MAX_IOPORTS] = {
[TIMER_MODE] = vatpit_handler,
[TIMER_CNTR0] = vatpit_handler,
[TIMER_CNTR1] = vatpit_handler,
[TIMER_CNTR2] = vatpit_handler,
[NMISC_PORT] = vatpit_nmisc_handler,
[IO_ICU1] = vatpic_master_handler,
[IO_ICU1 + ICU_IMR_OFFSET] = vatpic_master_handler,
[IO_ICU2] = vatpic_slave_handler,
[IO_ICU2 + ICU_IMR_OFFSET] = vatpic_slave_handler,
[IO_ELCR1] = vatpic_elc_handler,
[IO_ELCR2] = vatpic_elc_handler,
};
#ifdef KTR
static const char *
inout_instruction(struct vm_exit *vmexit)
{
int index;
static const char *iodesc[] = {
"outb", "outw", "outl",
"inb", "inw", "inl",
"outsb", "outsw", "outsd"
"insb", "insw", "insd",
};
switch (vmexit->u.inout.bytes) {
case 1:
index = 0;
break;
case 2:
index = 1;
break;
default:
index = 2;
break;
}
if (vmexit->u.inout.in)
index += 3;
if (vmexit->u.inout.string)
index += 6;
KASSERT(index < nitems(iodesc), ("%s: invalid index %d",
__func__, index));
return (iodesc[index]);
}
#endif /* KTR */
static int
emulate_inout_port(struct vm *vm, int vcpuid, struct vm_exit *vmexit,
bool *retu)
{
ioport_handler_func_t handler;
uint32_t mask, val;
int error;
error = 0;
*retu = true;
if (vmexit->u.inout.port >= MAX_IOPORTS)
goto done;
handler = ioport_handler[vmexit->u.inout.port];
if (handler == NULL)
goto done;
mask = vie_size2mask(vmexit->u.inout.bytes);
if (!vmexit->u.inout.in) {
val = vmexit->u.inout.eax & mask;
}
error = (*handler)(vm, vcpuid, vmexit->u.inout.in,
vmexit->u.inout.port, vmexit->u.inout.bytes, &val);
if (!error) {
*retu = false;
if (vmexit->u.inout.in) {
vmexit->u.inout.eax &= ~mask;
vmexit->u.inout.eax |= val & mask;
error = vm_set_register(vm, vcpuid,
VM_REG_GUEST_RAX, vmexit->u.inout.eax);
KASSERT(error == 0, ("emulate_ioport: error %d "
"setting guest rax register", error));
}
}
done:
return (error);
}
static int
emulate_inout_str(struct vm *vm, int vcpuid, struct vm_exit *vmexit, bool *retu)
{
*retu = true;
return (0); /* Return to userspace to finish emulation */
}
int
vm_handle_inout(struct vm *vm, int vcpuid, struct vm_exit *vmexit, bool *retu)
{
int bytes, error;
bytes = vmexit->u.inout.bytes;
KASSERT(bytes == 1 || bytes == 2 || bytes == 4,
("vm_handle_inout: invalid operand size %d", bytes));
if (vmexit->u.inout.string)
error = emulate_inout_str(vm, vcpuid, vmexit, retu);
else
error = emulate_inout_port(vm, vcpuid, vmexit, retu);
VCPU_CTR4(vm, vcpuid, "%s%s 0x%04x: %s",
vmexit->u.inout.rep ? "rep " : "",
inout_instruction(vmexit),
vmexit->u.inout.port,
error ? "error" : (*retu ? "userspace" : "handled"));
return (error);
}