vmx.h 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580
  1. /*
  2. * vmx.h: VMX Architecture related definitions
  3. * Copyright (c) 2004, Intel Corporation.
  4. *
  5. * This program is free software; you can redistribute it and/or modify it
  6. * under the terms and conditions of the GNU General Public License,
  7. * version 2, as published by the Free Software Foundation.
  8. *
  9. * This program is distributed in the hope it will be useful, but WITHOUT
  10. * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11. * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  12. * more details.
  13. *
  14. * You should have received a copy of the GNU General Public License along with
  15. * this program; if not, write to the Free Software Foundation, Inc., 59 Temple
  16. * Place - Suite 330, Boston, MA 02111-1307 USA.
  17. *
  18. * A few random additions are:
  19. * Copyright (C) 2006 Qumranet
  20. * Avi Kivity <avi@qumranet.com>
  21. * Yaniv Kamay <yaniv@qumranet.com>
  22. *
  23. */
  24. #ifndef VMX_H
  25. #define VMX_H
  26. #include <linux/bitops.h>
  27. #include <linux/types.h>
  28. #include <uapi/asm/vmx.h>
  29. /*
  30. * Definitions of Primary Processor-Based VM-Execution Controls.
  31. */
  32. #define CPU_BASED_VIRTUAL_INTR_PENDING 0x00000004
  33. #define CPU_BASED_USE_TSC_OFFSETING 0x00000008
  34. #define CPU_BASED_HLT_EXITING 0x00000080
  35. #define CPU_BASED_INVLPG_EXITING 0x00000200
  36. #define CPU_BASED_MWAIT_EXITING 0x00000400
  37. #define CPU_BASED_RDPMC_EXITING 0x00000800
  38. #define CPU_BASED_RDTSC_EXITING 0x00001000
  39. #define CPU_BASED_CR3_LOAD_EXITING 0x00008000
  40. #define CPU_BASED_CR3_STORE_EXITING 0x00010000
  41. #define CPU_BASED_CR8_LOAD_EXITING 0x00080000
  42. #define CPU_BASED_CR8_STORE_EXITING 0x00100000
  43. #define CPU_BASED_TPR_SHADOW 0x00200000
  44. #define CPU_BASED_VIRTUAL_NMI_PENDING 0x00400000
  45. #define CPU_BASED_MOV_DR_EXITING 0x00800000
  46. #define CPU_BASED_UNCOND_IO_EXITING 0x01000000
  47. #define CPU_BASED_USE_IO_BITMAPS 0x02000000
  48. #define CPU_BASED_MONITOR_TRAP_FLAG 0x08000000
  49. #define CPU_BASED_USE_MSR_BITMAPS 0x10000000
  50. #define CPU_BASED_MONITOR_EXITING 0x20000000
  51. #define CPU_BASED_PAUSE_EXITING 0x40000000
  52. #define CPU_BASED_ACTIVATE_SECONDARY_CONTROLS 0x80000000
  53. #define CPU_BASED_ALWAYSON_WITHOUT_TRUE_MSR 0x0401e172
  54. /*
  55. * Definitions of Secondary Processor-Based VM-Execution Controls.
  56. */
  57. #define SECONDARY_EXEC_VIRTUALIZE_APIC_ACCESSES 0x00000001
  58. #define SECONDARY_EXEC_ENABLE_EPT 0x00000002
  59. #define SECONDARY_EXEC_DESC 0x00000004
  60. #define SECONDARY_EXEC_RDTSCP 0x00000008
  61. #define SECONDARY_EXEC_VIRTUALIZE_X2APIC_MODE 0x00000010
  62. #define SECONDARY_EXEC_ENABLE_VPID 0x00000020
  63. #define SECONDARY_EXEC_WBINVD_EXITING 0x00000040
  64. #define SECONDARY_EXEC_UNRESTRICTED_GUEST 0x00000080
  65. #define SECONDARY_EXEC_APIC_REGISTER_VIRT 0x00000100
  66. #define SECONDARY_EXEC_VIRTUAL_INTR_DELIVERY 0x00000200
  67. #define SECONDARY_EXEC_PAUSE_LOOP_EXITING 0x00000400
  68. #define SECONDARY_EXEC_RDRAND_EXITING 0x00000800
  69. #define SECONDARY_EXEC_ENABLE_INVPCID 0x00001000
  70. #define SECONDARY_EXEC_ENABLE_VMFUNC 0x00002000
  71. #define SECONDARY_EXEC_SHADOW_VMCS 0x00004000
  72. #define SECONDARY_EXEC_ENCLS_EXITING 0x00008000
  73. #define SECONDARY_EXEC_RDSEED_EXITING 0x00010000
  74. #define SECONDARY_EXEC_ENABLE_PML 0x00020000
  75. #define SECONDARY_EXEC_XSAVES 0x00100000
  76. #define SECONDARY_EXEC_TSC_SCALING 0x02000000
  77. #define PIN_BASED_EXT_INTR_MASK 0x00000001
  78. #define PIN_BASED_NMI_EXITING 0x00000008
  79. #define PIN_BASED_VIRTUAL_NMIS 0x00000020
  80. #define PIN_BASED_VMX_PREEMPTION_TIMER 0x00000040
  81. #define PIN_BASED_POSTED_INTR 0x00000080
  82. #define PIN_BASED_ALWAYSON_WITHOUT_TRUE_MSR 0x00000016
  83. #define VM_EXIT_SAVE_DEBUG_CONTROLS 0x00000004
  84. #define VM_EXIT_HOST_ADDR_SPACE_SIZE 0x00000200
  85. #define VM_EXIT_LOAD_IA32_PERF_GLOBAL_CTRL 0x00001000
  86. #define VM_EXIT_ACK_INTR_ON_EXIT 0x00008000
  87. #define VM_EXIT_SAVE_IA32_PAT 0x00040000
  88. #define VM_EXIT_LOAD_IA32_PAT 0x00080000
  89. #define VM_EXIT_SAVE_IA32_EFER 0x00100000
  90. #define VM_EXIT_LOAD_IA32_EFER 0x00200000
  91. #define VM_EXIT_SAVE_VMX_PREEMPTION_TIMER 0x00400000
  92. #define VM_EXIT_CLEAR_BNDCFGS 0x00800000
  93. #define VM_EXIT_ALWAYSON_WITHOUT_TRUE_MSR 0x00036dff
  94. #define VM_ENTRY_LOAD_DEBUG_CONTROLS 0x00000004
  95. #define VM_ENTRY_IA32E_MODE 0x00000200
  96. #define VM_ENTRY_SMM 0x00000400
  97. #define VM_ENTRY_DEACT_DUAL_MONITOR 0x00000800
  98. #define VM_ENTRY_LOAD_IA32_PERF_GLOBAL_CTRL 0x00002000
  99. #define VM_ENTRY_LOAD_IA32_PAT 0x00004000
  100. #define VM_ENTRY_LOAD_IA32_EFER 0x00008000
  101. #define VM_ENTRY_LOAD_BNDCFGS 0x00010000
  102. #define VM_ENTRY_ALWAYSON_WITHOUT_TRUE_MSR 0x000011ff
  103. #define VMX_MISC_PREEMPTION_TIMER_RATE_MASK 0x0000001f
  104. #define VMX_MISC_SAVE_EFER_LMA 0x00000020
  105. #define VMX_MISC_ACTIVITY_HLT 0x00000040
  106. #define VMX_MISC_ZERO_LEN_INS 0x40000000
  107. /* VMFUNC functions */
  108. #define VMX_VMFUNC_EPTP_SWITCHING 0x00000001
  109. #define VMFUNC_EPTP_ENTRIES 512
  110. static inline u32 vmx_basic_vmcs_revision_id(u64 vmx_basic)
  111. {
  112. return vmx_basic & GENMASK_ULL(30, 0);
  113. }
  114. static inline u32 vmx_basic_vmcs_size(u64 vmx_basic)
  115. {
  116. return (vmx_basic & GENMASK_ULL(44, 32)) >> 32;
  117. }
  118. static inline int vmx_misc_preemption_timer_rate(u64 vmx_misc)
  119. {
  120. return vmx_misc & VMX_MISC_PREEMPTION_TIMER_RATE_MASK;
  121. }
  122. static inline int vmx_misc_cr3_count(u64 vmx_misc)
  123. {
  124. return (vmx_misc & GENMASK_ULL(24, 16)) >> 16;
  125. }
  126. static inline int vmx_misc_max_msr(u64 vmx_misc)
  127. {
  128. return (vmx_misc & GENMASK_ULL(27, 25)) >> 25;
  129. }
  130. static inline int vmx_misc_mseg_revid(u64 vmx_misc)
  131. {
  132. return (vmx_misc & GENMASK_ULL(63, 32)) >> 32;
  133. }
  134. /* VMCS Encodings */
  135. enum vmcs_field {
  136. VIRTUAL_PROCESSOR_ID = 0x00000000,
  137. POSTED_INTR_NV = 0x00000002,
  138. GUEST_ES_SELECTOR = 0x00000800,
  139. GUEST_CS_SELECTOR = 0x00000802,
  140. GUEST_SS_SELECTOR = 0x00000804,
  141. GUEST_DS_SELECTOR = 0x00000806,
  142. GUEST_FS_SELECTOR = 0x00000808,
  143. GUEST_GS_SELECTOR = 0x0000080a,
  144. GUEST_LDTR_SELECTOR = 0x0000080c,
  145. GUEST_TR_SELECTOR = 0x0000080e,
  146. GUEST_INTR_STATUS = 0x00000810,
  147. GUEST_PML_INDEX = 0x00000812,
  148. HOST_ES_SELECTOR = 0x00000c00,
  149. HOST_CS_SELECTOR = 0x00000c02,
  150. HOST_SS_SELECTOR = 0x00000c04,
  151. HOST_DS_SELECTOR = 0x00000c06,
  152. HOST_FS_SELECTOR = 0x00000c08,
  153. HOST_GS_SELECTOR = 0x00000c0a,
  154. HOST_TR_SELECTOR = 0x00000c0c,
  155. IO_BITMAP_A = 0x00002000,
  156. IO_BITMAP_A_HIGH = 0x00002001,
  157. IO_BITMAP_B = 0x00002002,
  158. IO_BITMAP_B_HIGH = 0x00002003,
  159. MSR_BITMAP = 0x00002004,
  160. MSR_BITMAP_HIGH = 0x00002005,
  161. VM_EXIT_MSR_STORE_ADDR = 0x00002006,
  162. VM_EXIT_MSR_STORE_ADDR_HIGH = 0x00002007,
  163. VM_EXIT_MSR_LOAD_ADDR = 0x00002008,
  164. VM_EXIT_MSR_LOAD_ADDR_HIGH = 0x00002009,
  165. VM_ENTRY_MSR_LOAD_ADDR = 0x0000200a,
  166. VM_ENTRY_MSR_LOAD_ADDR_HIGH = 0x0000200b,
  167. PML_ADDRESS = 0x0000200e,
  168. PML_ADDRESS_HIGH = 0x0000200f,
  169. TSC_OFFSET = 0x00002010,
  170. TSC_OFFSET_HIGH = 0x00002011,
  171. VIRTUAL_APIC_PAGE_ADDR = 0x00002012,
  172. VIRTUAL_APIC_PAGE_ADDR_HIGH = 0x00002013,
  173. APIC_ACCESS_ADDR = 0x00002014,
  174. APIC_ACCESS_ADDR_HIGH = 0x00002015,
  175. POSTED_INTR_DESC_ADDR = 0x00002016,
  176. POSTED_INTR_DESC_ADDR_HIGH = 0x00002017,
  177. VM_FUNCTION_CONTROL = 0x00002018,
  178. VM_FUNCTION_CONTROL_HIGH = 0x00002019,
  179. EPT_POINTER = 0x0000201a,
  180. EPT_POINTER_HIGH = 0x0000201b,
  181. EOI_EXIT_BITMAP0 = 0x0000201c,
  182. EOI_EXIT_BITMAP0_HIGH = 0x0000201d,
  183. EOI_EXIT_BITMAP1 = 0x0000201e,
  184. EOI_EXIT_BITMAP1_HIGH = 0x0000201f,
  185. EOI_EXIT_BITMAP2 = 0x00002020,
  186. EOI_EXIT_BITMAP2_HIGH = 0x00002021,
  187. EOI_EXIT_BITMAP3 = 0x00002022,
  188. EOI_EXIT_BITMAP3_HIGH = 0x00002023,
  189. EPTP_LIST_ADDRESS = 0x00002024,
  190. EPTP_LIST_ADDRESS_HIGH = 0x00002025,
  191. VMREAD_BITMAP = 0x00002026,
  192. VMREAD_BITMAP_HIGH = 0x00002027,
  193. VMWRITE_BITMAP = 0x00002028,
  194. VMWRITE_BITMAP_HIGH = 0x00002029,
  195. XSS_EXIT_BITMAP = 0x0000202C,
  196. XSS_EXIT_BITMAP_HIGH = 0x0000202D,
  197. ENCLS_EXITING_BITMAP = 0x0000202E,
  198. ENCLS_EXITING_BITMAP_HIGH = 0x0000202F,
  199. TSC_MULTIPLIER = 0x00002032,
  200. TSC_MULTIPLIER_HIGH = 0x00002033,
  201. GUEST_PHYSICAL_ADDRESS = 0x00002400,
  202. GUEST_PHYSICAL_ADDRESS_HIGH = 0x00002401,
  203. VMCS_LINK_POINTER = 0x00002800,
  204. VMCS_LINK_POINTER_HIGH = 0x00002801,
  205. GUEST_IA32_DEBUGCTL = 0x00002802,
  206. GUEST_IA32_DEBUGCTL_HIGH = 0x00002803,
  207. GUEST_IA32_PAT = 0x00002804,
  208. GUEST_IA32_PAT_HIGH = 0x00002805,
  209. GUEST_IA32_EFER = 0x00002806,
  210. GUEST_IA32_EFER_HIGH = 0x00002807,
  211. GUEST_IA32_PERF_GLOBAL_CTRL = 0x00002808,
  212. GUEST_IA32_PERF_GLOBAL_CTRL_HIGH= 0x00002809,
  213. GUEST_PDPTR0 = 0x0000280a,
  214. GUEST_PDPTR0_HIGH = 0x0000280b,
  215. GUEST_PDPTR1 = 0x0000280c,
  216. GUEST_PDPTR1_HIGH = 0x0000280d,
  217. GUEST_PDPTR2 = 0x0000280e,
  218. GUEST_PDPTR2_HIGH = 0x0000280f,
  219. GUEST_PDPTR3 = 0x00002810,
  220. GUEST_PDPTR3_HIGH = 0x00002811,
  221. GUEST_BNDCFGS = 0x00002812,
  222. GUEST_BNDCFGS_HIGH = 0x00002813,
  223. HOST_IA32_PAT = 0x00002c00,
  224. HOST_IA32_PAT_HIGH = 0x00002c01,
  225. HOST_IA32_EFER = 0x00002c02,
  226. HOST_IA32_EFER_HIGH = 0x00002c03,
  227. HOST_IA32_PERF_GLOBAL_CTRL = 0x00002c04,
  228. HOST_IA32_PERF_GLOBAL_CTRL_HIGH = 0x00002c05,
  229. PIN_BASED_VM_EXEC_CONTROL = 0x00004000,
  230. CPU_BASED_VM_EXEC_CONTROL = 0x00004002,
  231. EXCEPTION_BITMAP = 0x00004004,
  232. PAGE_FAULT_ERROR_CODE_MASK = 0x00004006,
  233. PAGE_FAULT_ERROR_CODE_MATCH = 0x00004008,
  234. CR3_TARGET_COUNT = 0x0000400a,
  235. VM_EXIT_CONTROLS = 0x0000400c,
  236. VM_EXIT_MSR_STORE_COUNT = 0x0000400e,
  237. VM_EXIT_MSR_LOAD_COUNT = 0x00004010,
  238. VM_ENTRY_CONTROLS = 0x00004012,
  239. VM_ENTRY_MSR_LOAD_COUNT = 0x00004014,
  240. VM_ENTRY_INTR_INFO_FIELD = 0x00004016,
  241. VM_ENTRY_EXCEPTION_ERROR_CODE = 0x00004018,
  242. VM_ENTRY_INSTRUCTION_LEN = 0x0000401a,
  243. TPR_THRESHOLD = 0x0000401c,
  244. SECONDARY_VM_EXEC_CONTROL = 0x0000401e,
  245. PLE_GAP = 0x00004020,
  246. PLE_WINDOW = 0x00004022,
  247. VM_INSTRUCTION_ERROR = 0x00004400,
  248. VM_EXIT_REASON = 0x00004402,
  249. VM_EXIT_INTR_INFO = 0x00004404,
  250. VM_EXIT_INTR_ERROR_CODE = 0x00004406,
  251. IDT_VECTORING_INFO_FIELD = 0x00004408,
  252. IDT_VECTORING_ERROR_CODE = 0x0000440a,
  253. VM_EXIT_INSTRUCTION_LEN = 0x0000440c,
  254. VMX_INSTRUCTION_INFO = 0x0000440e,
  255. GUEST_ES_LIMIT = 0x00004800,
  256. GUEST_CS_LIMIT = 0x00004802,
  257. GUEST_SS_LIMIT = 0x00004804,
  258. GUEST_DS_LIMIT = 0x00004806,
  259. GUEST_FS_LIMIT = 0x00004808,
  260. GUEST_GS_LIMIT = 0x0000480a,
  261. GUEST_LDTR_LIMIT = 0x0000480c,
  262. GUEST_TR_LIMIT = 0x0000480e,
  263. GUEST_GDTR_LIMIT = 0x00004810,
  264. GUEST_IDTR_LIMIT = 0x00004812,
  265. GUEST_ES_AR_BYTES = 0x00004814,
  266. GUEST_CS_AR_BYTES = 0x00004816,
  267. GUEST_SS_AR_BYTES = 0x00004818,
  268. GUEST_DS_AR_BYTES = 0x0000481a,
  269. GUEST_FS_AR_BYTES = 0x0000481c,
  270. GUEST_GS_AR_BYTES = 0x0000481e,
  271. GUEST_LDTR_AR_BYTES = 0x00004820,
  272. GUEST_TR_AR_BYTES = 0x00004822,
  273. GUEST_INTERRUPTIBILITY_INFO = 0x00004824,
  274. GUEST_ACTIVITY_STATE = 0X00004826,
  275. GUEST_SYSENTER_CS = 0x0000482A,
  276. VMX_PREEMPTION_TIMER_VALUE = 0x0000482E,
  277. HOST_IA32_SYSENTER_CS = 0x00004c00,
  278. CR0_GUEST_HOST_MASK = 0x00006000,
  279. CR4_GUEST_HOST_MASK = 0x00006002,
  280. CR0_READ_SHADOW = 0x00006004,
  281. CR4_READ_SHADOW = 0x00006006,
  282. CR3_TARGET_VALUE0 = 0x00006008,
  283. CR3_TARGET_VALUE1 = 0x0000600a,
  284. CR3_TARGET_VALUE2 = 0x0000600c,
  285. CR3_TARGET_VALUE3 = 0x0000600e,
  286. EXIT_QUALIFICATION = 0x00006400,
  287. GUEST_LINEAR_ADDRESS = 0x0000640a,
  288. GUEST_CR0 = 0x00006800,
  289. GUEST_CR3 = 0x00006802,
  290. GUEST_CR4 = 0x00006804,
  291. GUEST_ES_BASE = 0x00006806,
  292. GUEST_CS_BASE = 0x00006808,
  293. GUEST_SS_BASE = 0x0000680a,
  294. GUEST_DS_BASE = 0x0000680c,
  295. GUEST_FS_BASE = 0x0000680e,
  296. GUEST_GS_BASE = 0x00006810,
  297. GUEST_LDTR_BASE = 0x00006812,
  298. GUEST_TR_BASE = 0x00006814,
  299. GUEST_GDTR_BASE = 0x00006816,
  300. GUEST_IDTR_BASE = 0x00006818,
  301. GUEST_DR7 = 0x0000681a,
  302. GUEST_RSP = 0x0000681c,
  303. GUEST_RIP = 0x0000681e,
  304. GUEST_RFLAGS = 0x00006820,
  305. GUEST_PENDING_DBG_EXCEPTIONS = 0x00006822,
  306. GUEST_SYSENTER_ESP = 0x00006824,
  307. GUEST_SYSENTER_EIP = 0x00006826,
  308. HOST_CR0 = 0x00006c00,
  309. HOST_CR3 = 0x00006c02,
  310. HOST_CR4 = 0x00006c04,
  311. HOST_FS_BASE = 0x00006c06,
  312. HOST_GS_BASE = 0x00006c08,
  313. HOST_TR_BASE = 0x00006c0a,
  314. HOST_GDTR_BASE = 0x00006c0c,
  315. HOST_IDTR_BASE = 0x00006c0e,
  316. HOST_IA32_SYSENTER_ESP = 0x00006c10,
  317. HOST_IA32_SYSENTER_EIP = 0x00006c12,
  318. HOST_RSP = 0x00006c14,
  319. HOST_RIP = 0x00006c16,
  320. };
  321. /*
  322. * Interruption-information format
  323. */
  324. #define INTR_INFO_VECTOR_MASK 0xff /* 7:0 */
  325. #define INTR_INFO_INTR_TYPE_MASK 0x700 /* 10:8 */
  326. #define INTR_INFO_DELIVER_CODE_MASK 0x800 /* 11 */
  327. #define INTR_INFO_UNBLOCK_NMI 0x1000 /* 12 */
  328. #define INTR_INFO_VALID_MASK 0x80000000 /* 31 */
  329. #define INTR_INFO_RESVD_BITS_MASK 0x7ffff000
  330. #define VECTORING_INFO_VECTOR_MASK INTR_INFO_VECTOR_MASK
  331. #define VECTORING_INFO_TYPE_MASK INTR_INFO_INTR_TYPE_MASK
  332. #define VECTORING_INFO_DELIVER_CODE_MASK INTR_INFO_DELIVER_CODE_MASK
  333. #define VECTORING_INFO_VALID_MASK INTR_INFO_VALID_MASK
  334. #define INTR_TYPE_EXT_INTR (0 << 8) /* external interrupt */
  335. #define INTR_TYPE_RESERVED (1 << 8) /* reserved */
  336. #define INTR_TYPE_NMI_INTR (2 << 8) /* NMI */
  337. #define INTR_TYPE_HARD_EXCEPTION (3 << 8) /* processor exception */
  338. #define INTR_TYPE_SOFT_INTR (4 << 8) /* software interrupt */
  339. #define INTR_TYPE_PRIV_SW_EXCEPTION (5 << 8) /* ICE breakpoint - undocumented */
  340. #define INTR_TYPE_SOFT_EXCEPTION (6 << 8) /* software exception */
  341. #define INTR_TYPE_OTHER_EVENT (7 << 8) /* other event */
  342. /* GUEST_INTERRUPTIBILITY_INFO flags. */
  343. #define GUEST_INTR_STATE_STI 0x00000001
  344. #define GUEST_INTR_STATE_MOV_SS 0x00000002
  345. #define GUEST_INTR_STATE_SMI 0x00000004
  346. #define GUEST_INTR_STATE_NMI 0x00000008
  347. /* GUEST_ACTIVITY_STATE flags */
  348. #define GUEST_ACTIVITY_ACTIVE 0
  349. #define GUEST_ACTIVITY_HLT 1
  350. #define GUEST_ACTIVITY_SHUTDOWN 2
  351. #define GUEST_ACTIVITY_WAIT_SIPI 3
  352. /*
  353. * Exit Qualifications for MOV for Control Register Access
  354. */
  355. #define CONTROL_REG_ACCESS_NUM 0x7 /* 2:0, number of control reg.*/
  356. #define CONTROL_REG_ACCESS_TYPE 0x30 /* 5:4, access type */
  357. #define CONTROL_REG_ACCESS_REG 0xf00 /* 10:8, general purpose reg. */
  358. #define LMSW_SOURCE_DATA_SHIFT 16
  359. #define LMSW_SOURCE_DATA (0xFFFF << LMSW_SOURCE_DATA_SHIFT) /* 16:31 lmsw source */
  360. #define REG_EAX (0 << 8)
  361. #define REG_ECX (1 << 8)
  362. #define REG_EDX (2 << 8)
  363. #define REG_EBX (3 << 8)
  364. #define REG_ESP (4 << 8)
  365. #define REG_EBP (5 << 8)
  366. #define REG_ESI (6 << 8)
  367. #define REG_EDI (7 << 8)
  368. #define REG_R8 (8 << 8)
  369. #define REG_R9 (9 << 8)
  370. #define REG_R10 (10 << 8)
  371. #define REG_R11 (11 << 8)
  372. #define REG_R12 (12 << 8)
  373. #define REG_R13 (13 << 8)
  374. #define REG_R14 (14 << 8)
  375. #define REG_R15 (15 << 8)
  376. /*
  377. * Exit Qualifications for MOV for Debug Register Access
  378. */
  379. #define DEBUG_REG_ACCESS_NUM 0x7 /* 2:0, number of debug reg. */
  380. #define DEBUG_REG_ACCESS_TYPE 0x10 /* 4, direction of access */
  381. #define TYPE_MOV_TO_DR (0 << 4)
  382. #define TYPE_MOV_FROM_DR (1 << 4)
  383. #define DEBUG_REG_ACCESS_REG(eq) (((eq) >> 8) & 0xf) /* 11:8, general purpose reg. */
  384. /*
  385. * Exit Qualifications for APIC-Access
  386. */
  387. #define APIC_ACCESS_OFFSET 0xfff /* 11:0, offset within the APIC page */
  388. #define APIC_ACCESS_TYPE 0xf000 /* 15:12, access type */
  389. #define TYPE_LINEAR_APIC_INST_READ (0 << 12)
  390. #define TYPE_LINEAR_APIC_INST_WRITE (1 << 12)
  391. #define TYPE_LINEAR_APIC_INST_FETCH (2 << 12)
  392. #define TYPE_LINEAR_APIC_EVENT (3 << 12)
  393. #define TYPE_PHYSICAL_APIC_EVENT (10 << 12)
  394. #define TYPE_PHYSICAL_APIC_INST (15 << 12)
  395. /* segment AR in VMCS -- these are different from what LAR reports */
  396. #define VMX_SEGMENT_AR_L_MASK (1 << 13)
  397. #define VMX_AR_TYPE_ACCESSES_MASK 1
  398. #define VMX_AR_TYPE_READABLE_MASK (1 << 1)
  399. #define VMX_AR_TYPE_WRITEABLE_MASK (1 << 2)
  400. #define VMX_AR_TYPE_CODE_MASK (1 << 3)
  401. #define VMX_AR_TYPE_MASK 0x0f
  402. #define VMX_AR_TYPE_BUSY_64_TSS 11
  403. #define VMX_AR_TYPE_BUSY_32_TSS 11
  404. #define VMX_AR_TYPE_BUSY_16_TSS 3
  405. #define VMX_AR_TYPE_LDT 2
  406. #define VMX_AR_UNUSABLE_MASK (1 << 16)
  407. #define VMX_AR_S_MASK (1 << 4)
  408. #define VMX_AR_P_MASK (1 << 7)
  409. #define VMX_AR_L_MASK (1 << 13)
  410. #define VMX_AR_DB_MASK (1 << 14)
  411. #define VMX_AR_G_MASK (1 << 15)
  412. #define VMX_AR_DPL_SHIFT 5
  413. #define VMX_AR_DPL(ar) (((ar) >> VMX_AR_DPL_SHIFT) & 3)
  414. #define VMX_AR_RESERVD_MASK 0xfffe0f00
  415. #define TSS_PRIVATE_MEMSLOT (KVM_USER_MEM_SLOTS + 0)
  416. #define APIC_ACCESS_PAGE_PRIVATE_MEMSLOT (KVM_USER_MEM_SLOTS + 1)
  417. #define IDENTITY_PAGETABLE_PRIVATE_MEMSLOT (KVM_USER_MEM_SLOTS + 2)
  418. #define VMX_NR_VPIDS (1 << 16)
  419. #define VMX_VPID_EXTENT_INDIVIDUAL_ADDR 0
  420. #define VMX_VPID_EXTENT_SINGLE_CONTEXT 1
  421. #define VMX_VPID_EXTENT_ALL_CONTEXT 2
  422. #define VMX_VPID_EXTENT_SINGLE_NON_GLOBAL 3
  423. #define VMX_EPT_EXTENT_CONTEXT 1
  424. #define VMX_EPT_EXTENT_GLOBAL 2
  425. #define VMX_EPT_EXTENT_SHIFT 24
  426. #define VMX_EPT_EXECUTE_ONLY_BIT (1ull)
  427. #define VMX_EPT_PAGE_WALK_4_BIT (1ull << 6)
  428. #define VMX_EPT_PAGE_WALK_5_BIT (1ull << 7)
  429. #define VMX_EPTP_UC_BIT (1ull << 8)
  430. #define VMX_EPTP_WB_BIT (1ull << 14)
  431. #define VMX_EPT_2MB_PAGE_BIT (1ull << 16)
  432. #define VMX_EPT_1GB_PAGE_BIT (1ull << 17)
  433. #define VMX_EPT_INVEPT_BIT (1ull << 20)
  434. #define VMX_EPT_AD_BIT (1ull << 21)
  435. #define VMX_EPT_EXTENT_CONTEXT_BIT (1ull << 25)
  436. #define VMX_EPT_EXTENT_GLOBAL_BIT (1ull << 26)
  437. #define VMX_VPID_INVVPID_BIT (1ull << 0) /* (32 - 32) */
  438. #define VMX_VPID_EXTENT_INDIVIDUAL_ADDR_BIT (1ull << 8) /* (40 - 32) */
  439. #define VMX_VPID_EXTENT_SINGLE_CONTEXT_BIT (1ull << 9) /* (41 - 32) */
  440. #define VMX_VPID_EXTENT_GLOBAL_CONTEXT_BIT (1ull << 10) /* (42 - 32) */
  441. #define VMX_VPID_EXTENT_SINGLE_NON_GLOBAL_BIT (1ull << 11) /* (43 - 32) */
  442. #define VMX_EPT_MT_EPTE_SHIFT 3
  443. #define VMX_EPTP_PWL_MASK 0x38ull
  444. #define VMX_EPTP_PWL_4 0x18ull
  445. #define VMX_EPTP_PWL_5 0x20ull
  446. #define VMX_EPTP_AD_ENABLE_BIT (1ull << 6)
  447. #define VMX_EPTP_MT_MASK 0x7ull
  448. #define VMX_EPTP_MT_WB 0x6ull
  449. #define VMX_EPTP_MT_UC 0x0ull
  450. #define VMX_EPT_READABLE_MASK 0x1ull
  451. #define VMX_EPT_WRITABLE_MASK 0x2ull
  452. #define VMX_EPT_EXECUTABLE_MASK 0x4ull
  453. #define VMX_EPT_IPAT_BIT (1ull << 6)
  454. #define VMX_EPT_ACCESS_BIT (1ull << 8)
  455. #define VMX_EPT_DIRTY_BIT (1ull << 9)
  456. #define VMX_EPT_RWX_MASK (VMX_EPT_READABLE_MASK | \
  457. VMX_EPT_WRITABLE_MASK | \
  458. VMX_EPT_EXECUTABLE_MASK)
  459. #define VMX_EPT_MT_MASK (7ull << VMX_EPT_MT_EPTE_SHIFT)
  460. /* The mask to use to trigger an EPT Misconfiguration in order to track MMIO */
  461. #define VMX_EPT_MISCONFIG_WX_VALUE (VMX_EPT_WRITABLE_MASK | \
  462. VMX_EPT_EXECUTABLE_MASK)
  463. #define VMX_EPT_IDENTITY_PAGETABLE_ADDR 0xfffbc000ul
  464. struct vmx_msr_entry {
  465. u32 index;
  466. u32 reserved;
  467. u64 value;
  468. } __aligned(16);
  469. /*
  470. * Exit Qualifications for entry failure during or after loading guest state
  471. */
  472. #define ENTRY_FAIL_DEFAULT 0
  473. #define ENTRY_FAIL_PDPTE 2
  474. #define ENTRY_FAIL_NMI 3
  475. #define ENTRY_FAIL_VMCS_LINK_PTR 4
  476. /*
  477. * Exit Qualifications for EPT Violations
  478. */
  479. #define EPT_VIOLATION_ACC_READ_BIT 0
  480. #define EPT_VIOLATION_ACC_WRITE_BIT 1
  481. #define EPT_VIOLATION_ACC_INSTR_BIT 2
  482. #define EPT_VIOLATION_READABLE_BIT 3
  483. #define EPT_VIOLATION_WRITABLE_BIT 4
  484. #define EPT_VIOLATION_EXECUTABLE_BIT 5
  485. #define EPT_VIOLATION_GVA_TRANSLATED_BIT 8
  486. #define EPT_VIOLATION_ACC_READ (1 << EPT_VIOLATION_ACC_READ_BIT)
  487. #define EPT_VIOLATION_ACC_WRITE (1 << EPT_VIOLATION_ACC_WRITE_BIT)
  488. #define EPT_VIOLATION_ACC_INSTR (1 << EPT_VIOLATION_ACC_INSTR_BIT)
  489. #define EPT_VIOLATION_READABLE (1 << EPT_VIOLATION_READABLE_BIT)
  490. #define EPT_VIOLATION_WRITABLE (1 << EPT_VIOLATION_WRITABLE_BIT)
  491. #define EPT_VIOLATION_EXECUTABLE (1 << EPT_VIOLATION_EXECUTABLE_BIT)
  492. #define EPT_VIOLATION_GVA_TRANSLATED (1 << EPT_VIOLATION_GVA_TRANSLATED_BIT)
  493. /*
  494. * VM-instruction error numbers
  495. */
  496. enum vm_instruction_error_number {
  497. VMXERR_VMCALL_IN_VMX_ROOT_OPERATION = 1,
  498. VMXERR_VMCLEAR_INVALID_ADDRESS = 2,
  499. VMXERR_VMCLEAR_VMXON_POINTER = 3,
  500. VMXERR_VMLAUNCH_NONCLEAR_VMCS = 4,
  501. VMXERR_VMRESUME_NONLAUNCHED_VMCS = 5,
  502. VMXERR_VMRESUME_AFTER_VMXOFF = 6,
  503. VMXERR_ENTRY_INVALID_CONTROL_FIELD = 7,
  504. VMXERR_ENTRY_INVALID_HOST_STATE_FIELD = 8,
  505. VMXERR_VMPTRLD_INVALID_ADDRESS = 9,
  506. VMXERR_VMPTRLD_VMXON_POINTER = 10,
  507. VMXERR_VMPTRLD_INCORRECT_VMCS_REVISION_ID = 11,
  508. VMXERR_UNSUPPORTED_VMCS_COMPONENT = 12,
  509. VMXERR_VMWRITE_READ_ONLY_VMCS_COMPONENT = 13,
  510. VMXERR_VMXON_IN_VMX_ROOT_OPERATION = 15,
  511. VMXERR_ENTRY_INVALID_EXECUTIVE_VMCS_POINTER = 16,
  512. VMXERR_ENTRY_NONLAUNCHED_EXECUTIVE_VMCS = 17,
  513. VMXERR_ENTRY_EXECUTIVE_VMCS_POINTER_NOT_VMXON_POINTER = 18,
  514. VMXERR_VMCALL_NONCLEAR_VMCS = 19,
  515. VMXERR_VMCALL_INVALID_VM_EXIT_CONTROL_FIELDS = 20,
  516. VMXERR_VMCALL_INCORRECT_MSEG_REVISION_ID = 22,
  517. VMXERR_VMXOFF_UNDER_DUAL_MONITOR_TREATMENT_OF_SMIS_AND_SMM = 23,
  518. VMXERR_VMCALL_INVALID_SMM_MONITOR_FEATURES = 24,
  519. VMXERR_ENTRY_INVALID_VM_EXECUTION_CONTROL_FIELDS_IN_EXECUTIVE_VMCS = 25,
  520. VMXERR_ENTRY_EVENTS_BLOCKED_BY_MOV_SS = 26,
  521. VMXERR_INVALID_OPERAND_TO_INVEPT_INVVPID = 28,
  522. };
  523. enum vmx_l1d_flush_state {
  524. VMENTER_L1D_FLUSH_AUTO,
  525. VMENTER_L1D_FLUSH_NEVER,
  526. VMENTER_L1D_FLUSH_COND,
  527. VMENTER_L1D_FLUSH_ALWAYS,
  528. VMENTER_L1D_FLUSH_EPT_DISABLED,
  529. VMENTER_L1D_FLUSH_NOT_REQUIRED,
  530. };
  531. extern enum vmx_l1d_flush_state l1tf_vmx_mitigation;
  532. #endif