VirtualBox

source: vbox/trunk/src/VBox/VMM/include/HMInternal.h@ 94249

Last change on this file since 94249 was 93963, checked in by vboxsync, 3 years ago

VMM: Nested VMX: bugref:10092 Add HM ring-0 API for querying transient VMX/SVM info.
  • Property svn:eol-style set to native
  • Property svn:keywords set to Id Revision
File size: 55.8 KB
Line 
1/* $Id: HMInternal.h 93963 2022-02-28 08:39:08Z vboxsync $ */
2/** @file
3 * HM - Internal header file.
4 */
5
6/*
7 * Copyright (C) 2006-2022 Oracle Corporation
8 *
9 * This file is part of VirtualBox Open Source Edition (OSE), as
10 * available from http://www.virtualbox.org. This file is free software;
11 * you can redistribute it and/or modify it under the terms of the GNU
12 * General Public License (GPL) as published by the Free Software
13 * Foundation, in version 2 as it comes in the "COPYING" file of the
14 * VirtualBox OSE distribution. VirtualBox OSE is distributed in the
15 * hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
16 */
17
18#ifndef VMM_INCLUDED_SRC_include_HMInternal_h
19#define VMM_INCLUDED_SRC_include_HMInternal_h
20#ifndef RT_WITHOUT_PRAGMA_ONCE
21# pragma once
22#endif
23
24#include <VBox/cdefs.h>
25#include <VBox/types.h>
26#include <VBox/vmm/stam.h>
27#include <VBox/dis.h>
28#include <VBox/vmm/hm.h>
29#include <VBox/vmm/hm_vmx.h>
30#include <VBox/vmm/hm_svm.h>
31#include <VBox/vmm/pgm.h>
32#include <VBox/vmm/cpum.h>
33#include <VBox/vmm/trpm.h>
34#include <iprt/memobj.h>
35#include <iprt/cpuset.h>
36#include <iprt/mp.h>
37#include <iprt/avl.h>
38#include <iprt/string.h>
39
40#include "VMXInternal.h"
41#include "SVMInternal.h"
42
43#if HC_ARCH_BITS == 32
44# error "32-bit hosts are no longer supported. Go back to 6.0 or earlier!"
45#endif
46
47/** @def HM_PROFILE_EXIT_DISPATCH
48 * Enables profiling of the VM exit handler dispatching. */
49#if 0 || defined(DOXYGEN_RUNNING)
50# define HM_PROFILE_EXIT_DISPATCH
51#endif
52
53RT_C_DECLS_BEGIN
54
55
56/** @defgroup grp_hm_int Internal
57 * @ingroup grp_hm
58 * @internal
59 * @{
60 */
61
62/** Size for the EPT identity page table (1024 4 MB pages to cover the entire address space). */
63#define HM_EPT_IDENTITY_PG_TABLE_SIZE HOST_PAGE_SIZE
64/** Size of the TSS structure + 2 pages for the IO bitmap + end byte. */
65#define HM_VTX_TSS_SIZE (sizeof(VBOXTSS) + 2 * X86_PAGE_SIZE + 1)
66/** Total guest mapped memory needed. */
67#define HM_VTX_TOTAL_DEVHEAP_MEM (HM_EPT_IDENTITY_PG_TABLE_SIZE + HM_VTX_TSS_SIZE)
68
69
70/** @name Macros for enabling and disabling preemption.
71 * These are really just for hiding the RTTHREADPREEMPTSTATE and asserting that
72 * preemption has already been disabled when there is no context hook.
73 * @{ */
74#ifdef VBOX_STRICT
75# define HM_DISABLE_PREEMPT(a_pVCpu) \
76 RTTHREADPREEMPTSTATE PreemptStateInternal = RTTHREADPREEMPTSTATE_INITIALIZER; \
77 Assert(!RTThreadPreemptIsEnabled(NIL_RTTHREAD) || VMMR0ThreadCtxHookIsEnabled((a_pVCpu))); \
78 RTThreadPreemptDisable(&PreemptStateInternal)
79#else
80# define HM_DISABLE_PREEMPT(a_pVCpu) \
81 RTTHREADPREEMPTSTATE PreemptStateInternal = RTTHREADPREEMPTSTATE_INITIALIZER; \
82 RTThreadPreemptDisable(&PreemptStateInternal)
83#endif /* VBOX_STRICT */
84#define HM_RESTORE_PREEMPT() do { RTThreadPreemptRestore(&PreemptStateInternal); } while(0)
85/** @} */
86
87
88/** @name HM saved state versions.
89 * @{
90 */
91#define HM_SAVED_STATE_VERSION HM_SAVED_STATE_VERSION_SVM_NESTED_HWVIRT
92#define HM_SAVED_STATE_VERSION_SVM_NESTED_HWVIRT 6
93#define HM_SAVED_STATE_VERSION_TPR_PATCHING 5
94#define HM_SAVED_STATE_VERSION_NO_TPR_PATCHING 4
95#define HM_SAVED_STATE_VERSION_2_0_X 3
96/** @} */
97
98
99/**
100 * HM physical (host) CPU information.
101 */
102typedef struct HMPHYSCPU
103{
104 /** The CPU ID. */
105 RTCPUID idCpu;
106 /** The VM_HSAVE_AREA (AMD-V) / VMXON region (Intel) memory backing. */
107 RTR0MEMOBJ hMemObj;
108 /** The physical address of the first page in hMemObj (it's a
109 * physcially contigous allocation if it spans multiple pages). */
110 RTHCPHYS HCPhysMemObj;
111 /** The address of the memory (for pfnEnable). */
112 void *pvMemObj;
113 /** Current ASID (AMD-V) / VPID (Intel). */
114 uint32_t uCurrentAsid;
115 /** TLB flush count. */
116 uint32_t cTlbFlushes;
117 /** Whether to flush each new ASID/VPID before use. */
118 bool fFlushAsidBeforeUse;
119 /** Configured for VT-x or AMD-V. */
120 bool fConfigured;
121 /** Set if the VBOX_HWVIRTEX_IGNORE_SVM_IN_USE hack is active. */
122 bool fIgnoreAMDVInUseError;
123 /** Whether CR4.VMXE was already enabled prior to us enabling it. */
124 bool fVmxeAlreadyEnabled;
125 /** In use by our code. (for power suspend) */
126 bool volatile fInUse;
127#ifdef VBOX_WITH_NESTED_HWVIRT_SVM
128 /** Nested-guest union (put data common to SVM/VMX outside the union). */
129 union
130 {
131 /** Nested-guest SVM data. */
132 struct
133 {
134 /** The active nested-guest MSR permission bitmap memory backing. */
135 RTR0MEMOBJ hNstGstMsrpm;
136 /** The physical address of the first page in hNstGstMsrpm (physcially
137 * contiguous allocation). */
138 RTHCPHYS HCPhysNstGstMsrpm;
139 /** The address of the active nested-guest MSRPM. */
140 void *pvNstGstMsrpm;
141 } svm;
142 /** @todo Nested-VMX. */
143 } n;
144#endif
145} HMPHYSCPU;
146/** Pointer to HMPHYSCPU struct. */
147typedef HMPHYSCPU *PHMPHYSCPU;
148/** Pointer to a const HMPHYSCPU struct. */
149typedef const HMPHYSCPU *PCHMPHYSCPU;
150
151/**
152 * TPR-instruction type.
153 */
154typedef enum
155{
156 HMTPRINSTR_INVALID,
157 HMTPRINSTR_READ,
158 HMTPRINSTR_READ_SHR4,
159 HMTPRINSTR_WRITE_REG,
160 HMTPRINSTR_WRITE_IMM,
161 HMTPRINSTR_JUMP_REPLACEMENT,
162 /** The usual 32-bit paranoia. */
163 HMTPRINSTR_32BIT_HACK = 0x7fffffff
164} HMTPRINSTR;
165
166/**
167 * TPR patch information.
168 */
169typedef struct
170{
171 /** The key is the address of patched instruction. (32 bits GC ptr) */
172 AVLOU32NODECORE Core;
173 /** Original opcode. */
174 uint8_t aOpcode[16];
175 /** Instruction size. */
176 uint32_t cbOp;
177 /** Replacement opcode. */
178 uint8_t aNewOpcode[16];
179 /** Replacement instruction size. */
180 uint32_t cbNewOp;
181 /** Instruction type. */
182 HMTPRINSTR enmType;
183 /** Source operand. */
184 uint32_t uSrcOperand;
185 /** Destination operand. */
186 uint32_t uDstOperand;
187 /** Number of times the instruction caused a fault. */
188 uint32_t cFaults;
189 /** Patch address of the jump replacement. */
190 RTGCPTR32 pJumpTarget;
191} HMTPRPATCH;
192/** Pointer to HMTPRPATCH. */
193typedef HMTPRPATCH *PHMTPRPATCH;
194/** Pointer to a const HMTPRPATCH. */
195typedef const HMTPRPATCH *PCHMTPRPATCH;
196
197
198/**
199 * Makes a HMEXITSTAT::uKey value from a program counter and an exit code.
200 *
201 * @returns 64-bit key
202 * @param a_uPC The RIP + CS.BASE value of the exit.
203 * @param a_uExit The exit code.
204 * @todo Add CPL?
205 */
206#define HMEXITSTAT_MAKE_KEY(a_uPC, a_uExit) (((a_uPC) & UINT64_C(0x0000ffffffffffff)) | (uint64_t)(a_uExit) << 48)
207
208typedef struct HMEXITINFO
209{
210 /** See HMEXITSTAT_MAKE_KEY(). */
211 uint64_t uKey;
212 /** Number of recent hits (depreciates with time). */
213 uint32_t volatile cHits;
214 /** The age + lock. */
215 uint16_t volatile uAge;
216 /** Action or action table index. */
217 uint16_t iAction;
218} HMEXITINFO;
219AssertCompileSize(HMEXITINFO, 16); /* Lots of these guys, so don't add any unnecessary stuff! */
220
221typedef struct HMEXITHISTORY
222{
223 /** The exit timestamp. */
224 uint64_t uTscExit;
225 /** The index of the corresponding HMEXITINFO entry.
226 * UINT32_MAX if none (too many collisions, race, whatever). */
227 uint32_t iExitInfo;
228 /** Figure out later, needed for padding now. */
229 uint32_t uSomeClueOrSomething;
230} HMEXITHISTORY;
231
232/**
233 * Switcher function, HC to the special 64-bit RC.
234 *
235 * @param pVM The cross context VM structure.
236 * @param offCpumVCpu Offset from pVM->cpum to pVM->aCpus[idCpu].cpum.
237 * @returns Return code indicating the action to take.
238 */
239typedef DECLCALLBACKTYPE(int, FNHMSWITCHERHC,(PVM pVM, uint32_t offCpumVCpu));
240/** Pointer to switcher function. */
241typedef FNHMSWITCHERHC *PFNHMSWITCHERHC;
242
243
244/**
245 * HM VM Instance data.
246 * Changes to this must checked against the padding of the hm union in VM!
247 */
248typedef struct HM
249{
250 /** Set when the debug facility has breakpoints/events enabled that requires
251 * us to use the debug execution loop in ring-0. */
252 bool fUseDebugLoop;
253 /** Set when TPR patching is allowed. */
254 bool fTprPatchingAllowed;
255 /** Set when TPR patching is active. */
256 bool fTprPatchingActive;
257 /** Alignment padding. */
258 bool afAlignment1[5];
259
260 struct
261 {
262 /** Set by the ring-0 side of HM to indicate VMX is supported by the CPU. */
263 bool fSupported;
264 /** Set when we've enabled VMX. */
265 bool fEnabled;
266 /** The shift mask employed by the VMX-Preemption timer (set by ring-0). */
267 uint8_t cPreemptTimerShift;
268 bool fAlignment1;
269
270 /** @name Configuration (gets copied if problematic)
271 * @{ */
272 /** Set if Last Branch Record (LBR) is enabled. */
273 bool fLbrCfg;
274 /** Set if VT-x VPID is allowed. */
275 bool fAllowVpid;
276 /** Set if unrestricted guest execution is in use (real and protected mode
277 * without paging). */
278 bool fUnrestrictedGuestCfg;
279 /** Set if the preemption timer should be used if available. Ring-0
280 * quietly clears this if the hardware doesn't support the preemption timer. */
281 bool fUsePreemptTimerCfg;
282 /** @} */
283
284 /** Pause-loop exiting (PLE) gap in ticks. */
285 uint32_t cPleGapTicks;
286 /** Pause-loop exiting (PLE) window in ticks. */
287 uint32_t cPleWindowTicks;
288
289 /** Virtual address of the TSS page used for real mode emulation. */
290 R3PTRTYPE(PVBOXTSS) pRealModeTSS;
291 /** Virtual address of the identity page table used for real mode and protected
292 * mode without paging emulation in EPT mode. */
293 R3PTRTYPE(PX86PD) pNonPagingModeEPTPageTable;
294 } vmx;
295
296 struct
297 {
298 /** Set by the ring-0 side of HM to indicate SVM is supported by the CPU. */
299 bool fSupported;
300 /** Set when we've enabled SVM. */
301 bool fEnabled;
302 /** Set when the hack to ignore VERR_SVM_IN_USE is active.
303 * @todo Safe? */
304 bool fIgnoreInUseError;
305 /** Whether to use virtualized VMSAVE/VMLOAD feature. */
306 bool fVirtVmsaveVmload;
307 /** Whether to use virtual GIF feature. */
308 bool fVGif;
309 /** Whether to use LBR virtualization feature. */
310 bool fLbrVirt;
311 bool afAlignment1[2];
312
313 /** Pause filter counter. */
314 uint16_t cPauseFilter;
315 /** Pause filter treshold in ticks. */
316 uint16_t cPauseFilterThresholdTicks;
317 uint32_t u32Alignment2;
318 } svm;
319
320 /** AVL tree with all patches (active or disabled) sorted by guest instruction address.
321 * @todo For @bugref{9217} this AVL tree must be eliminated and instead
322 * sort aPatches by address and do a safe binary search on it. */
323 AVLOU32TREE PatchTree;
324 uint32_t cPatches;
325 HMTPRPATCH aPatches[64];
326
327 /** Guest allocated memory for patching purposes. */
328 RTGCPTR pGuestPatchMem;
329 /** Current free pointer inside the patch block. */
330 RTGCPTR pFreeGuestPatchMem;
331 /** Size of the guest patch memory block. */
332 uint32_t cbGuestPatchMem;
333 uint32_t u32Alignment2;
334
335 /** For ring-3 use only. */
336 struct
337 {
338 /** Last recorded error code during HM ring-0 init. */
339 int32_t rcInit;
340 uint32_t u32Alignment3;
341
342 /** Maximum ASID allowed.
343 * This is mainly for the release log. */
344 uint32_t uMaxAsid;
345 /** World switcher flags (HM_WSF_XXX) for the release log. */
346 uint32_t fWorldSwitcher;
347
348 struct
349 {
350 /** Set if VPID is supported (ring-3 copy). */
351 bool fVpid;
352 /** Whether the CPU supports VMCS fields for swapping EFER (set by ring-0 VMX
353 * init, for logging). */
354 bool fSupportsVmcsEfer;
355 /** Whether to use VMCS shadowing. */
356 bool fUseVmcsShadowing;
357 bool fAlignment2;
358
359 /** Host CR4 value (set by ring-0 VMX init, for logging). */
360 uint64_t u64HostCr4;
361 /** Host SMM monitor control (set by ring-0 VMX init, for logging). */
362 uint64_t u64HostSmmMonitorCtl;
363 /** Host EFER value (set by ring-0 VMX init, for logging and guest NX). */
364 uint64_t u64HostMsrEfer;
365 /** Host IA32_FEATURE_CONTROL MSR (set by ring-0 VMX init, for logging). */
366 uint64_t u64HostFeatCtrl;
367
368 /** The first valid host LBR branch-from-IP stack range. */
369 uint32_t idLbrFromIpMsrFirst;
370 /** The last valid host LBR branch-from-IP stack range. */
371 uint32_t idLbrFromIpMsrLast;
372
373 /** The first valid host LBR branch-to-IP stack range. */
374 uint32_t idLbrToIpMsrFirst;
375 /** The last valid host LBR branch-to-IP stack range. */
376 uint32_t idLbrToIpMsrLast;
377
378 /** Host-physical address for a failing VMXON instruction (for diagnostics, ring-3). */
379 RTHCPHYS HCPhysVmxEnableError;
380 /** VMX MSR values (only for ring-3 consumption). */
381 VMXMSRS Msrs;
382
383 /** Tagged-TLB flush type (only for ring-3 consumption). */
384 VMXTLBFLUSHTYPE enmTlbFlushType;
385 /** Flush type to use for INVEPT (only for ring-3 consumption). */
386 VMXTLBFLUSHEPT enmTlbFlushEpt;
387 /** Flush type to use for INVVPID (only for ring-3 consumption). */
388 VMXTLBFLUSHVPID enmTlbFlushVpid;
389 } vmx;
390
391 struct
392 {
393 /** SVM revision. */
394 uint32_t u32Rev;
395 /** SVM feature bits from cpuid 0x8000000a, ring-3 copy. */
396 uint32_t fFeatures;
397 /** HWCR MSR (for diagnostics). */
398 uint64_t u64MsrHwcr;
399 } svm;
400 } ForR3;
401
402 /** @name Configuration not used (much) after VM setup
403 * @{ */
404 /** The maximum number of resumes loops allowed in ring-0 (safety precaution).
405 * This number is set much higher when RTThreadPreemptIsPending is reliable. */
406 uint32_t cMaxResumeLoopsCfg;
407 /** Set if nested paging is enabled.
408 * Config value that is copied to HMR0PERVM::fNestedPaging on setup. */
409 bool fNestedPagingCfg;
410 /** Set if large pages are enabled (requires nested paging).
411 * Config only, passed on the PGM where it really belongs.
412 * @todo move to PGM */
413 bool fLargePages;
414 /** Set if we can support 64-bit guests or not.
415 * Config value that is copied to HMR0PERVM::fAllow64BitGuests on setup. */
416 bool fAllow64BitGuestsCfg;
417 /** Set when we initialize VT-x or AMD-V once for all CPUs. */
418 bool fGlobalInit;
419 /** Set if hardware APIC virtualization is enabled.
420 * @todo Not really used by HM, move to APIC where it's actually used. */
421 bool fVirtApicRegs;
422 /** Set if posted interrupt processing is enabled.
423 * @todo Not really used by HM, move to APIC where it's actually used. */
424 bool fPostedIntrs;
425 /** VM needs workaround for missing TLB flush in OS/2, see ticketref:20625.
426 * @note Currently only heeded by AMD-V. */
427 bool fMissingOS2TlbFlushWorkaround;
428 /** @} */
429
430 /** @name Processed into HMR0PERVCPU::fWorldSwitcher by ring-0 on VM init.
431 * @{ */
432 /** Set if indirect branch prediction barrier on VM exit. */
433 bool fIbpbOnVmExit;
434 /** Set if indirect branch prediction barrier on VM entry. */
435 bool fIbpbOnVmEntry;
436 /** Set if level 1 data cache should be flushed on VM entry. */
437 bool fL1dFlushOnVmEntry;
438 /** Set if level 1 data cache should be flushed on EMT scheduling. */
439 bool fL1dFlushOnSched;
440 /** Set if MDS related buffers should be cleared on VM entry. */
441 bool fMdsClearOnVmEntry;
442 /** Set if MDS related buffers should be cleared on EMT scheduling. */
443 bool fMdsClearOnSched;
444 /** Set if host manages speculation control settings.
445 * @todo doesn't do anything ... */
446 bool fSpecCtrlByHost;
447 /** @} */
448
449 /** Set when we've finalized the VMX / SVM initialization in ring-3
450 * (hmR3InitFinalizeR0Intel / hmR3InitFinalizeR0Amd). */
451 bool fInitialized;
452
453 bool afAlignment2[5];
454
455 STAMCOUNTER StatTprPatchSuccess;
456 STAMCOUNTER StatTprPatchFailure;
457 STAMCOUNTER StatTprReplaceSuccessCr8;
458 STAMCOUNTER StatTprReplaceSuccessVmc;
459 STAMCOUNTER StatTprReplaceFailure;
460} HM;
461/** Pointer to HM VM instance data. */
462typedef HM *PHM;
463AssertCompileMemberAlignment(HM, StatTprPatchSuccess, 8);
464AssertCompileMemberAlignment(HM, vmx, 8);
465AssertCompileMemberAlignment(HM, svm, 8);
466AssertCompileMemberAlignment(HM, StatTprPatchSuccess, 8);
467AssertCompile(RTASSERT_OFFSET_OF(HM, PatchTree) <= 64); /* First cache line has the essentials for both VT-x and SVM operation. */
468
469
470/**
471 * Per-VM ring-0 instance data for HM.
472 */
473typedef struct HMR0PERVM
474{
475 /** The maximum number of resumes loops allowed in ring-0 (safety precaution).
476 * This number is set much higher when RTThreadPreemptIsPending is reliable. */
477 uint32_t cMaxResumeLoops;
478
479 /** Set if nested paging is enabled. */
480 bool fNestedPaging;
481 /** Set if we can support 64-bit guests or not. */
482 bool fAllow64BitGuests;
483 bool afAlignment1[1];
484
485 /** AMD-V specific data. */
486 struct HMR0SVMVM
487 {
488 /** Set if erratum 170 affects the AMD cpu. */
489 bool fAlwaysFlushTLB;
490 } svm;
491
492 /** VT-x specific data. */
493 struct HMR0VMXVM
494 {
495 /** Set if unrestricted guest execution is in use (real and protected mode
496 * without paging). */
497 bool fUnrestrictedGuest;
498 /** Set if the preemption timer is in use. */
499 bool fUsePreemptTimer;
500 /** Whether to use VMCS shadowing. */
501 bool fUseVmcsShadowing;
502 /** Set if Last Branch Record (LBR) is enabled. */
503 bool fLbr;
504 bool afAlignment2[3];
505
506 /** Set if VPID is supported (copy in HM::vmx::fVpidForRing3). */
507 bool fVpid;
508 /** Tagged-TLB flush type. */
509 VMXTLBFLUSHTYPE enmTlbFlushType;
510 /** Flush type to use for INVEPT. */
511 VMXTLBFLUSHEPT enmTlbFlushEpt;
512 /** Flush type to use for INVVPID. */
513 VMXTLBFLUSHVPID enmTlbFlushVpid;
514
515 /** The host LBR TOS (top-of-stack) MSR id. */
516 uint32_t idLbrTosMsr;
517
518 /** The first valid host LBR branch-from-IP stack range. */
519 uint32_t idLbrFromIpMsrFirst;
520 /** The last valid host LBR branch-from-IP stack range. */
521 uint32_t idLbrFromIpMsrLast;
522
523 /** The first valid host LBR branch-to-IP stack range. */
524 uint32_t idLbrToIpMsrFirst;
525 /** The last valid host LBR branch-to-IP stack range. */
526 uint32_t idLbrToIpMsrLast;
527
528 /** Pointer to the VMREAD bitmap. */
529 R0PTRTYPE(void *) pvVmreadBitmap;
530 /** Pointer to the VMWRITE bitmap. */
531 R0PTRTYPE(void *) pvVmwriteBitmap;
532
533 /** Pointer to the shadow VMCS read-only fields array. */
534 R0PTRTYPE(uint32_t *) paShadowVmcsRoFields;
535 /** Pointer to the shadow VMCS read/write fields array. */
536 R0PTRTYPE(uint32_t *) paShadowVmcsFields;
537 /** Number of elements in the shadow VMCS read-only fields array. */
538 uint32_t cShadowVmcsRoFields;
539 /** Number of elements in the shadow VMCS read-write fields array. */
540 uint32_t cShadowVmcsFields;
541
542 /** Host-physical address of the APIC-access page. */
543 RTHCPHYS HCPhysApicAccess;
544 /** Host-physical address of the VMREAD bitmap. */
545 RTHCPHYS HCPhysVmreadBitmap;
546 /** Host-physical address of the VMWRITE bitmap. */
547 RTHCPHYS HCPhysVmwriteBitmap;
548
549#ifdef VBOX_WITH_CRASHDUMP_MAGIC
550 /** Host-physical address of the crash-dump scratch area. */
551 RTHCPHYS HCPhysScratch;
552 /** Pointer to the crash-dump scratch bitmap. */
553 R0PTRTYPE(uint8_t *) pbScratch;
554#endif
555
556 /** Ring-0 memory object for per-VM VMX structures. */
557 RTR0MEMOBJ hMemObj;
558 /** Virtual address of the APIC-access page (not used). */
559 R0PTRTYPE(uint8_t *) pbApicAccess;
560 } vmx;
561} HMR0PERVM;
562/** Pointer to HM's per-VM ring-0 instance data. */
563typedef HMR0PERVM *PHMR0PERVM;
564
565
566/** @addtogroup grp_hm_int_svm SVM Internal
567 * @{ */
568/** SVM VMRun function, see SVMR0VMRun(). */
569typedef DECLCALLBACKTYPE(int, FNHMSVMVMRUN,(PVMCC pVM, PVMCPUCC pVCpu, RTHCPHYS HCPhysVMCB));
570/** Pointer to a SVM VMRun function. */
571typedef R0PTRTYPE(FNHMSVMVMRUN *) PFNHMSVMVMRUN;
572
573/**
574 * SVM nested-guest VMCB cache.
575 *
576 * Contains VMCB fields from the nested-guest VMCB before they're modified by
577 * SVM R0 code for hardware-assisted SVM execution of a nested-guest.
578 *
579 * A VMCB field needs to be cached when it needs to be modified for execution using
580 * hardware-assisted SVM and any of the following are true:
581 * - If the original field needs to be inspected during execution of the
582 * nested-guest or \#VMEXIT processing.
583 * - If the field is written back to memory on \#VMEXIT by the physical CPU.
584 *
585 * A VMCB field needs to be restored only when the field is written back to
586 * memory on \#VMEXIT by the physical CPU and thus would be visible to the
587 * guest.
588 *
589 * @remarks Please update hmR3InfoSvmNstGstVmcbCache() when changes are made to
590 * this structure.
591 */
592typedef struct SVMNESTEDVMCBCACHE
593{
594 /** Cache of CRX read intercepts. */
595 uint16_t u16InterceptRdCRx;
596 /** Cache of CRX write intercepts. */
597 uint16_t u16InterceptWrCRx;
598 /** Cache of DRX read intercepts. */
599 uint16_t u16InterceptRdDRx;
600 /** Cache of DRX write intercepts. */
601 uint16_t u16InterceptWrDRx;
602
603 /** Cache of the pause-filter threshold. */
604 uint16_t u16PauseFilterThreshold;
605 /** Cache of the pause-filter count. */
606 uint16_t u16PauseFilterCount;
607
608 /** Cache of exception intercepts. */
609 uint32_t u32InterceptXcpt;
610 /** Cache of control intercepts. */
611 uint64_t u64InterceptCtrl;
612
613 /** Cache of the TSC offset. */
614 uint64_t u64TSCOffset;
615
616 /** Cache of V_INTR_MASKING bit. */
617 bool fVIntrMasking;
618 /** Cache of the nested-paging bit. */
619 bool fNestedPaging;
620 /** Cache of the LBR virtualization bit. */
621 bool fLbrVirt;
622 /** Whether the VMCB is cached by HM. */
623 bool fCacheValid;
624 /** Alignment. */
625 bool afPadding0[4];
626} SVMNESTEDVMCBCACHE;
627/** Pointer to the SVMNESTEDVMCBCACHE structure. */
628typedef SVMNESTEDVMCBCACHE *PSVMNESTEDVMCBCACHE;
629/** Pointer to a const SVMNESTEDVMCBCACHE structure. */
630typedef const SVMNESTEDVMCBCACHE *PCSVMNESTEDVMCBCACHE;
631AssertCompileSizeAlignment(SVMNESTEDVMCBCACHE, 8);
632
633/** @} */
634
635/** @name Host-state restoration flags.
636 * @note If you change these values don't forget to update the assembly
637 * defines as well!
638 * @{
639 */
640#define VMX_RESTORE_HOST_SEL_DS RT_BIT(0)
641#define VMX_RESTORE_HOST_SEL_ES RT_BIT(1)
642#define VMX_RESTORE_HOST_SEL_FS RT_BIT(2)
643#define VMX_RESTORE_HOST_SEL_GS RT_BIT(3)
644#define VMX_RESTORE_HOST_SEL_TR RT_BIT(4)
645#define VMX_RESTORE_HOST_GDTR RT_BIT(5)
646#define VMX_RESTORE_HOST_IDTR RT_BIT(6)
647#define VMX_RESTORE_HOST_GDT_READ_ONLY RT_BIT(7)
648#define VMX_RESTORE_HOST_GDT_NEED_WRITABLE RT_BIT(8)
649#define VMX_RESTORE_HOST_CAN_USE_WRFSBASE_AND_WRGSBASE RT_BIT(9)
650/**
651 * This _must_ be the top most bit, so that we can easily check that it and
652 * something else is set w/o having to do two checks like this:
653 * @code
654 * if ( (pVCpu->hm.s.vmx.fRestoreHostFlags & VMX_RESTORE_HOST_REQUIRED)
655 * && (pVCpu->hm.s.vmx.fRestoreHostFlags & ~VMX_RESTORE_HOST_REQUIRED))
656 * @endcode
657 * Instead we can then do:
658 * @code
659 * if (pVCpu->hm.s.vmx.fRestoreHostFlags > VMX_RESTORE_HOST_REQUIRED)
660 * @endcode
661 */
662#define VMX_RESTORE_HOST_REQUIRED RT_BIT(10)
663/** @} */
664
665/**
666 * Host-state restoration structure.
667 *
668 * This holds host-state fields that require manual restoration.
669 * Assembly version found in HMInternal.mac (should be automatically verified).
670 */
671typedef struct VMXRESTOREHOST
672{
673 RTSEL uHostSelDS; /**< 0x00 */
674 RTSEL uHostSelES; /**< 0x02 */
675 RTSEL uHostSelFS; /**< 0x04 */
676 X86XDTR64 HostGdtr; /**< 0x06 - should be aligned by its 64-bit member. */
677 RTSEL uHostSelGS; /**< 0x10 */
678 RTSEL uHostSelTR; /**< 0x12 */
679 RTSEL uHostSelSS; /**< 0x14 - not restored, just for fetching */
680 X86XDTR64 HostGdtrRw; /**< 0x16 - should be aligned by its 64-bit member. */
681 RTSEL uHostSelCS; /**< 0x20 - not restored, just for fetching */
682 uint8_t abPadding1[4]; /**< 0x22 */
683 X86XDTR64 HostIdtr; /**< 0x26 - should be aligned by its 64-bit member. */
684 uint64_t uHostFSBase; /**< 0x30 */
685 uint64_t uHostGSBase; /**< 0x38 */
686} VMXRESTOREHOST;
687/** Pointer to VMXRESTOREHOST. */
688typedef VMXRESTOREHOST *PVMXRESTOREHOST;
689AssertCompileSize(X86XDTR64, 10);
690AssertCompileMemberOffset(VMXRESTOREHOST, HostGdtr.uAddr, 0x08);
691AssertCompileMemberOffset(VMXRESTOREHOST, HostGdtrRw.uAddr, 0x18);
692AssertCompileMemberOffset(VMXRESTOREHOST, HostIdtr.uAddr, 0x28);
693AssertCompileMemberOffset(VMXRESTOREHOST, uHostFSBase, 0x30);
694AssertCompileSize(VMXRESTOREHOST, 64);
695AssertCompileSizeAlignment(VMXRESTOREHOST, 8);
696
697/**
698 * VMX StartVM function.
699 *
700 * @returns VBox status code (no informational stuff).
701 * @param pVmcsInfo Pointer to the VMCS info (for cached host RIP and RSP).
702 * @param pVCpu Pointer to the cross context per-CPU structure.
703 * @param fResume Whether to use VMRESUME (true) or VMLAUNCH (false).
704 */
705typedef DECLCALLBACKTYPE(int, FNHMVMXSTARTVM,(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume));
706/** Pointer to a VMX StartVM function. */
707typedef R0PTRTYPE(FNHMVMXSTARTVM *) PFNHMVMXSTARTVM;
708/** @} */
709
710/**
711 * HM VMCPU Instance data.
712 *
713 * Note! If you change members of this struct, make sure to check if the
714 * assembly counterpart in HMInternal.mac needs to be updated as well.
715 *
716 * Note! The members here are ordered and aligned based on estimated frequency of
717 * usage and grouped to fit within a cache line in hot code paths. Even subtle
718 * changes here have a noticeable effect in the bootsector benchmarks. Modify with
719 * care.
720 */
721typedef struct HMCPU
722{
723 /** Set when the TLB has been checked until we return from the world switch. */
724 bool volatile fCheckedTLBFlush;
725 /** Set when we're using VT-x or AMD-V at that moment.
726 * @todo r=bird: Misleading description. For AMD-V this will be set the first
727 * time HMCanExecuteGuest() is called and only cleared again by
728 * HMR3ResetCpu(). For VT-x it will be set by HMCanExecuteGuest when we
729 * can execute something in VT-x mode, and cleared if we cannot.
730 *
731 * The field is much more about recording the last HMCanExecuteGuest
732 * return value than anything about any "moment". */
733 bool fActive;
734
735 /** Whether we should use the debug loop because of single stepping or special
736 * debug breakpoints / events are armed. */
737 bool fUseDebugLoop;
738
739 /** Whether \#UD needs to be intercepted (required by certain GIM providers). */
740 bool fGIMTrapXcptUD;
741 /** Whether \#GP needs to be intercepted for mesa driver workaround. */
742 bool fTrapXcptGpForLovelyMesaDrv;
743 /** Whether we're executing a single instruction. */
744 bool fSingleInstruction;
745
746 bool afAlignment0[2];
747
748 /** An additional error code used for some gurus. */
749 uint32_t u32HMError;
750 /** The last exit-to-ring-3 reason. */
751 int32_t rcLastExitToR3;
752 /** CPU-context changed flags (see HM_CHANGED_xxx). */
753 uint64_t fCtxChanged;
754
755 /** VT-x data. */
756 struct HMCPUVMX
757 {
758 /** @name Guest information.
759 * @{ */
760 /** Guest VMCS information shared with ring-3. */
761 VMXVMCSINFOSHARED VmcsInfo;
762 /** Nested-guest VMCS information shared with ring-3. */
763 VMXVMCSINFOSHARED VmcsInfoNstGst;
764 /** Whether the nested-guest VMCS was the last current VMCS (shadow copy for ring-3).
765 * @see HMR0PERVCPU::vmx.fSwitchedToNstGstVmcs */
766 bool fSwitchedToNstGstVmcsCopyForRing3;
767 /** Whether the static guest VMCS controls has been merged with the
768 * nested-guest VMCS controls. */
769 bool fMergedNstGstCtls;
770 /** Whether the nested-guest VMCS has been copied to the shadow VMCS. */
771 bool fCopiedNstGstToShadowVmcs;
772 /** Whether flushing the TLB is required due to switching to/from the
773 * nested-guest. */
774 bool fSwitchedNstGstFlushTlb;
775 /** Alignment. */
776 bool afAlignment0[4];
777 /** Cached guest APIC-base MSR for identifying when to map the APIC-access page. */
778 uint64_t u64GstMsrApicBase;
779 /** @} */
780
781 /** @name Error reporting and diagnostics.
782 * @{ */
783 /** VT-x error-reporting (mainly for ring-3 propagation). */
784 struct
785 {
786 RTCPUID idCurrentCpu;
787 RTCPUID idEnteredCpu;
788 RTHCPHYS HCPhysCurrentVmcs;
789 uint32_t u32VmcsRev;
790 uint32_t u32InstrError;
791 uint32_t u32ExitReason;
792 uint32_t u32GuestIntrState;
793 } LastError;
794 /** @} */
795 } vmx;
796
797 /** SVM data. */
798 struct HMCPUSVM
799 {
800 /** Whether to emulate long mode support for sysenter/sysexit like intel CPUs
801 * does. This means intercepting \#UD to emulate the instructions in
802 * long-mode and to intercept reads and writes to the SYSENTER MSRs in order to
803 * preserve the upper 32 bits written to them (AMD will ignore and discard). */
804 bool fEmulateLongModeSysEnterExit;
805 uint8_t au8Alignment0[7];
806
807 /** Cache of the nested-guest's VMCB fields that we modify in order to run the
808 * nested-guest using AMD-V. This will be restored on \#VMEXIT. */
809 SVMNESTEDVMCBCACHE NstGstVmcbCache;
810 } svm;
811
812 /** Event injection state. */
813 HMEVENT Event;
814
815 /** Current shadow paging mode for updating CR4.
816 * @todo move later (@bugref{9217}). */
817 PGMMODE enmShadowMode;
818 uint32_t u32TemporaryPadding;
819
820 /** The PAE PDPEs used with Nested Paging (only valid when
821 * VMCPU_FF_HM_UPDATE_PAE_PDPES is set). */
822 X86PDPE aPdpes[4];
823
824 /* These two comes because they are accessed from assembly and we don't
825 want to detail all the stats in the assembly version of this structure. */
826 STAMCOUNTER StatVmxWriteHostRip;
827 STAMCOUNTER StatVmxWriteHostRsp;
828 STAMCOUNTER StatVmxVmLaunch;
829 STAMCOUNTER StatVmxVmResume;
830
831 STAMPROFILEADV StatEntry;
832 STAMPROFILEADV StatPreExit;
833 STAMPROFILEADV StatExitHandling;
834 STAMPROFILEADV StatExitIO;
835 STAMPROFILEADV StatExitMovCRx;
836 STAMPROFILEADV StatExitXcptNmi;
837 STAMPROFILEADV StatExitVmentry;
838 STAMPROFILEADV StatImportGuestState;
839 STAMPROFILEADV StatExportGuestState;
840 STAMPROFILEADV StatLoadGuestFpuState;
841 STAMPROFILEADV StatInGC;
842 STAMPROFILEADV StatPoke;
843 STAMPROFILEADV StatSpinPoke;
844 STAMPROFILEADV StatSpinPokeFailed;
845
846 STAMCOUNTER StatInjectInterrupt;
847 STAMCOUNTER StatInjectXcpt;
848 STAMCOUNTER StatInjectReflect;
849 STAMCOUNTER StatInjectConvertDF;
850 STAMCOUNTER StatInjectInterpret;
851 STAMCOUNTER StatInjectReflectNPF;
852
853 STAMCOUNTER StatExitAll;
854 STAMCOUNTER StatDebugExitAll;
855 STAMCOUNTER StatNestedExitAll;
856 STAMCOUNTER StatExitShadowNM;
857 STAMCOUNTER StatExitGuestNM;
858 STAMCOUNTER StatExitShadowPF; /**< Misleading, currently used for MMIO \#PFs as well. */
859 STAMCOUNTER StatExitShadowPFEM;
860 STAMCOUNTER StatExitGuestPF;
861 STAMCOUNTER StatExitGuestUD;
862 STAMCOUNTER StatExitGuestSS;
863 STAMCOUNTER StatExitGuestNP;
864 STAMCOUNTER StatExitGuestTS;
865 STAMCOUNTER StatExitGuestOF;
866 STAMCOUNTER StatExitGuestGP;
867 STAMCOUNTER StatExitGuestDE;
868 STAMCOUNTER StatExitGuestDF;
869 STAMCOUNTER StatExitGuestBR;
870 STAMCOUNTER StatExitGuestAC;
871 STAMCOUNTER StatExitGuestACSplitLock;
872 STAMCOUNTER StatExitGuestDB;
873 STAMCOUNTER StatExitGuestMF;
874 STAMCOUNTER StatExitGuestBP;
875 STAMCOUNTER StatExitGuestXF;
876 STAMCOUNTER StatExitGuestXcpUnk;
877 STAMCOUNTER StatExitDRxWrite;
878 STAMCOUNTER StatExitDRxRead;
879 STAMCOUNTER StatExitCR0Read;
880 STAMCOUNTER StatExitCR2Read;
881 STAMCOUNTER StatExitCR3Read;
882 STAMCOUNTER StatExitCR4Read;
883 STAMCOUNTER StatExitCR8Read;
884 STAMCOUNTER StatExitCR0Write;
885 STAMCOUNTER StatExitCR2Write;
886 STAMCOUNTER StatExitCR3Write;
887 STAMCOUNTER StatExitCR4Write;
888 STAMCOUNTER StatExitCR8Write;
889 STAMCOUNTER StatExitRdmsr;
890 STAMCOUNTER StatExitWrmsr;
891 STAMCOUNTER StatExitClts;
892 STAMCOUNTER StatExitXdtrAccess;
893 STAMCOUNTER StatExitLmsw;
894 STAMCOUNTER StatExitIOWrite;
895 STAMCOUNTER StatExitIORead;
896 STAMCOUNTER StatExitIOStringWrite;
897 STAMCOUNTER StatExitIOStringRead;
898 STAMCOUNTER StatExitIntWindow;
899 STAMCOUNTER StatExitExtInt;
900 STAMCOUNTER StatExitHostNmiInGC;
901 STAMCOUNTER StatExitHostNmiInGCIpi;
902 STAMCOUNTER StatExitPreemptTimer;
903 STAMCOUNTER StatExitTprBelowThreshold;
904 STAMCOUNTER StatExitTaskSwitch;
905 STAMCOUNTER StatExitApicAccess;
906 STAMCOUNTER StatExitReasonNpf;
907
908 STAMCOUNTER StatNestedExitReasonNpf;
909
910 STAMCOUNTER StatFlushPage;
911 STAMCOUNTER StatFlushPageManual;
912 STAMCOUNTER StatFlushPhysPageManual;
913 STAMCOUNTER StatFlushTlb;
914 STAMCOUNTER StatFlushTlbNstGst;
915 STAMCOUNTER StatFlushTlbManual;
916 STAMCOUNTER StatFlushTlbWorldSwitch;
917 STAMCOUNTER StatNoFlushTlbWorldSwitch;
918 STAMCOUNTER StatFlushEntire;
919 STAMCOUNTER StatFlushAsid;
920 STAMCOUNTER StatFlushNestedPaging;
921 STAMCOUNTER StatFlushTlbInvlpgVirt;
922 STAMCOUNTER StatFlushTlbInvlpgPhys;
923 STAMCOUNTER StatTlbShootdown;
924 STAMCOUNTER StatTlbShootdownFlush;
925
926 STAMCOUNTER StatSwitchPendingHostIrq;
927 STAMCOUNTER StatSwitchTprMaskedIrq;
928 STAMCOUNTER StatSwitchGuestIrq;
929 STAMCOUNTER StatSwitchHmToR3FF;
930 STAMCOUNTER StatSwitchVmReq;
931 STAMCOUNTER StatSwitchPgmPoolFlush;
932 STAMCOUNTER StatSwitchDma;
933 STAMCOUNTER StatSwitchExitToR3;
934 STAMCOUNTER StatSwitchLongJmpToR3;
935 STAMCOUNTER StatSwitchMaxResumeLoops;
936 STAMCOUNTER StatSwitchHltToR3;
937 STAMCOUNTER StatSwitchApicAccessToR3;
938 STAMCOUNTER StatSwitchPreempt;
939 STAMCOUNTER StatSwitchNstGstVmexit;
940
941 STAMCOUNTER StatTscParavirt;
942 STAMCOUNTER StatTscOffset;
943 STAMCOUNTER StatTscIntercept;
944
945 STAMCOUNTER StatDRxArmed;
946 STAMCOUNTER StatDRxContextSwitch;
947 STAMCOUNTER StatDRxIoCheck;
948
949 STAMCOUNTER StatExportMinimal;
950 STAMCOUNTER StatExportFull;
951 STAMCOUNTER StatLoadGuestFpu;
952 STAMCOUNTER StatExportHostState;
953
954 STAMCOUNTER StatVmxCheckBadRmSelBase;
955 STAMCOUNTER StatVmxCheckBadRmSelLimit;
956 STAMCOUNTER StatVmxCheckBadRmSelAttr;
957 STAMCOUNTER StatVmxCheckBadV86SelBase;
958 STAMCOUNTER StatVmxCheckBadV86SelLimit;
959 STAMCOUNTER StatVmxCheckBadV86SelAttr;
960 STAMCOUNTER StatVmxCheckRmOk;
961 STAMCOUNTER StatVmxCheckBadSel;
962 STAMCOUNTER StatVmxCheckBadRpl;
963 STAMCOUNTER StatVmxCheckPmOk;
964
965 STAMCOUNTER StatVmxPreemptionRecalcingDeadline;
966 STAMCOUNTER StatVmxPreemptionRecalcingDeadlineExpired;
967 STAMCOUNTER StatVmxPreemptionReusingDeadline;
968 STAMCOUNTER StatVmxPreemptionReusingDeadlineExpired;
969
970#ifdef VBOX_WITH_STATISTICS
971 STAMCOUNTER aStatExitReason[MAX_EXITREASON_STAT];
972 STAMCOUNTER aStatNestedExitReason[MAX_EXITREASON_STAT];
973 STAMCOUNTER aStatInjectedIrqs[256];
974 STAMCOUNTER aStatInjectedXcpts[X86_XCPT_LAST + 1];
975#endif
976#ifdef HM_PROFILE_EXIT_DISPATCH
977 STAMPROFILEADV StatExitDispatch;
978#endif
979} HMCPU;
980/** Pointer to HM VMCPU instance data. */
981typedef HMCPU *PHMCPU;
982AssertCompileMemberAlignment(HMCPU, fCheckedTLBFlush, 4);
983AssertCompileMemberAlignment(HMCPU, fCtxChanged, 8);
984AssertCompileMemberAlignment(HMCPU, vmx, 8);
985AssertCompileMemberAlignment(HMCPU, vmx.VmcsInfo, 8);
986AssertCompileMemberAlignment(HMCPU, vmx.VmcsInfoNstGst, 8);
987AssertCompileMemberAlignment(HMCPU, svm, 8);
988AssertCompileMemberAlignment(HMCPU, Event, 8);
989
990
991/**
992 * HM per-VCpu ring-0 only instance data.
993 */
994typedef struct HMR0PERVCPU
995{
996 /** World switch exit counter. */
997 uint32_t volatile cWorldSwitchExits;
998 /** TLB flush count. */
999 uint32_t cTlbFlushes;
1000 /** The last CPU we were executing code on (NIL_RTCPUID for the first time). */
1001 RTCPUID idLastCpu;
1002 /** The CPU ID of the CPU currently owning the VMCS. Set in
1003 * HMR0Enter and cleared in HMR0Leave. */
1004 RTCPUID idEnteredCpu;
1005 /** Current ASID in use by the VM. */
1006 uint32_t uCurrentAsid;
1007
1008 /** Set if we need to flush the TLB during the world switch. */
1009 bool fForceTLBFlush;
1010 /** Whether we've completed the inner HM leave function. */
1011 bool fLeaveDone;
1012 /** Whether we're using the hyper DR7 or guest DR7. */
1013 bool fUsingHyperDR7;
1014 /** Whether we are currently executing in the debug loop.
1015 * Mainly for assertions. */
1016 bool fUsingDebugLoop;
1017 /** Set if we using the debug loop and wish to intercept RDTSC. */
1018 bool fDebugWantRdTscExit;
1019 /** Set if XCR0 needs to be saved/restored when entering/exiting guest code
1020 * execution. */
1021 bool fLoadSaveGuestXcr0;
1022 /** Set if we need to clear the trap flag because of single stepping. */
1023 bool fClearTrapFlag;
1024
1025 bool afPadding1[1];
1026 /** World switcher flags (HM_WSF_XXX - was CPUMCTX::fWorldSwitcher in 6.1). */
1027 uint32_t fWorldSwitcher;
1028 /** The raw host TSC value from the last VM exit (set by HMR0A.asm). */
1029 uint64_t uTscExit;
1030
1031 /** VT-x data. */
1032 struct HMR0CPUVMX
1033 {
1034 /** Ring-0 pointer to the hardware-assisted VMX execution function. */
1035 PFNHMVMXSTARTVM pfnStartVm;
1036 /** Absolute TSC deadline. */
1037 uint64_t uTscDeadline;
1038 /** The deadline version number. */
1039 uint64_t uTscDeadlineVersion;
1040
1041 /** @name Guest information.
1042 * @{ */
1043 /** Guest VMCS information. */
1044 VMXVMCSINFO VmcsInfo;
1045 /** Nested-guest VMCS information. */
1046 VMXVMCSINFO VmcsInfoNstGst;
1047 /* Whether the nested-guest VMCS was the last current VMCS (authoritative copy).
1048 * @see HMCPU::vmx.fSwitchedToNstGstVmcsCopyForRing3 */
1049 bool fSwitchedToNstGstVmcs;
1050 bool afAlignment0[7];
1051 /** Pointer to the VMX transient info during VM-exit. */
1052 PVMXTRANSIENT pVmxTransient;
1053 /** @} */
1054
1055 /** @name Host information.
1056 * @{ */
1057 /** Host LSTAR MSR to restore lazily while leaving VT-x. */
1058 uint64_t u64HostMsrLStar;
1059 /** Host STAR MSR to restore lazily while leaving VT-x. */
1060 uint64_t u64HostMsrStar;
1061 /** Host SF_MASK MSR to restore lazily while leaving VT-x. */
1062 uint64_t u64HostMsrSfMask;
1063 /** Host KernelGS-Base MSR to restore lazily while leaving VT-x. */
1064 uint64_t u64HostMsrKernelGsBase;
1065 /** The mask of lazy MSRs swap/restore state, see VMX_LAZY_MSRS_XXX. */
1066 uint32_t fLazyMsrs;
1067 /** Whether the host MSR values are up-to-date in the auto-load/store MSR area. */
1068 bool fUpdatedHostAutoMsrs;
1069 /** Alignment. */
1070 uint8_t au8Alignment0[3];
1071 /** Which host-state bits to restore before being preempted, see
1072 * VMX_RESTORE_HOST_XXX. */
1073 uint32_t fRestoreHostFlags;
1074 /** Alignment. */
1075 uint32_t u32Alignment0;
1076 /** The host-state restoration structure. */
1077 VMXRESTOREHOST RestoreHost;
1078 /** @} */
1079 } vmx;
1080
1081 /** SVM data. */
1082 struct HMR0CPUSVM
1083 {
1084 /** Ring 0 handlers for VT-x. */
1085 PFNHMSVMVMRUN pfnVMRun;
1086
1087 /** Physical address of the host VMCB which holds additional host-state. */
1088 RTHCPHYS HCPhysVmcbHost;
1089 /** R0 memory object for the host VMCB which holds additional host-state. */
1090 RTR0MEMOBJ hMemObjVmcbHost;
1091
1092 /** Physical address of the guest VMCB. */
1093 RTHCPHYS HCPhysVmcb;
1094 /** R0 memory object for the guest VMCB. */
1095 RTR0MEMOBJ hMemObjVmcb;
1096 /** Pointer to the guest VMCB. */
1097 R0PTRTYPE(PSVMVMCB) pVmcb;
1098
1099 /** Physical address of the MSR bitmap (8 KB). */
1100 RTHCPHYS HCPhysMsrBitmap;
1101 /** R0 memory object for the MSR bitmap (8 KB). */
1102 RTR0MEMOBJ hMemObjMsrBitmap;
1103 /** Pointer to the MSR bitmap. */
1104 R0PTRTYPE(void *) pvMsrBitmap;
1105
1106 /** Whether VTPR with V_INTR_MASKING set is in effect, indicating
1107 * we should check if the VTPR changed on every VM-exit. */
1108 bool fSyncVTpr;
1109 bool afAlignment[7];
1110
1111 /** Pointer to the SVM transient info during VM-exit. */
1112 PSVMTRANSIENT pSvmTransient;
1113 /** Host's TSC_AUX MSR (used when RDTSCP doesn't cause VM-exits). */
1114 uint64_t u64HostTscAux;
1115
1116 /** For saving stack space, the disassembler state is allocated here
1117 * instead of on the stack. */
1118 DISCPUSTATE DisState;
1119 } svm;
1120} HMR0PERVCPU;
1121/** Pointer to HM ring-0 VMCPU instance data. */
1122typedef HMR0PERVCPU *PHMR0PERVCPU;
1123AssertCompileMemberAlignment(HMR0PERVCPU, cWorldSwitchExits, 4);
1124AssertCompileMemberAlignment(HMR0PERVCPU, fForceTLBFlush, 4);
1125AssertCompileMemberAlignment(HMR0PERVCPU, vmx.RestoreHost, 8);
1126
1127
1128/** @name HM_WSF_XXX - @bugref{9453}, @bugref{9087}
1129 * @note If you change these values don't forget to update the assembly
1130 * defines as well!
1131 * @{ */
1132/** Touch IA32_PRED_CMD.IBPB on VM exit. */
1133#define HM_WSF_IBPB_EXIT RT_BIT_32(0)
1134/** Touch IA32_PRED_CMD.IBPB on VM entry. */
1135#define HM_WSF_IBPB_ENTRY RT_BIT_32(1)
1136/** Touch IA32_FLUSH_CMD.L1D on VM entry. */
1137#define HM_WSF_L1D_ENTRY RT_BIT_32(2)
1138/** Flush MDS buffers on VM entry. */
1139#define HM_WSF_MDS_ENTRY RT_BIT_32(3)
1140
1141/** Touch IA32_FLUSH_CMD.L1D on VM scheduling. */
1142#define HM_WSF_L1D_SCHED RT_BIT_32(16)
1143/** Flush MDS buffers on VM scheduling. */
1144#define HM_WSF_MDS_SCHED RT_BIT_32(17)
1145/** @} */
1146
1147
1148#ifdef IN_RING0
1149extern bool g_fHmVmxSupported;
1150extern uint32_t g_fHmHostKernelFeatures;
1151extern uint32_t g_uHmMaxAsid;
1152extern bool g_fHmVmxUsePreemptTimer;
1153extern uint8_t g_cHmVmxPreemptTimerShift;
1154extern bool g_fHmVmxSupportsVmcsEfer;
1155extern uint64_t g_uHmVmxHostCr4;
1156extern uint64_t g_uHmVmxHostMsrEfer;
1157extern uint64_t g_uHmVmxHostSmmMonitorCtl;
1158extern bool g_fHmSvmSupported;
1159extern uint32_t g_uHmSvmRev;
1160extern uint32_t g_fHmSvmFeatures;
1161
1162extern SUPHWVIRTMSRS g_HmMsrs;
1163
1164
1165VMMR0_INT_DECL(PHMPHYSCPU) hmR0GetCurrentCpu(void);
1166VMMR0_INT_DECL(int) hmR0EnterCpu(PVMCPUCC pVCpu);
1167
1168# ifdef VBOX_STRICT
1169# define HM_DUMP_REG_FLAGS_GPRS RT_BIT(0)
1170# define HM_DUMP_REG_FLAGS_FPU RT_BIT(1)
1171# define HM_DUMP_REG_FLAGS_MSRS RT_BIT(2)
1172# define HM_DUMP_REG_FLAGS_ALL (HM_DUMP_REG_FLAGS_GPRS | HM_DUMP_REG_FLAGS_FPU | HM_DUMP_REG_FLAGS_MSRS)
1173
1174VMMR0_INT_DECL(void) hmR0DumpRegs(PVMCPUCC pVCpu, uint32_t fFlags);
1175VMMR0_INT_DECL(void) hmR0DumpDescriptor(PCX86DESCHC pDesc, RTSEL Sel, const char *pszMsg);
1176# endif
1177
1178DECLASM(void) hmR0MdsClear(void);
1179#endif /* IN_RING0 */
1180
1181
1182/** @addtogroup grp_hm_int_svm SVM Internal
1183 * @{ */
1184VMM_INT_DECL(int) hmEmulateSvmMovTpr(PVMCC pVM, PVMCPUCC pVCpu);
1185
1186/**
1187 * Prepares for and executes VMRUN (64-bit register context).
1188 *
1189 * @returns VBox status code (no informational stuff).
1190 * @param pVM The cross context VM structure. (Not used.)
1191 * @param pVCpu The cross context virtual CPU structure.
1192 * @param HCPhyspVMCB Physical address of the VMCB.
1193 *
1194 * @remarks With spectre mitigations and the usual need for speed (/ micro
1195 * optimizations), we have a bunch of variations of this code depending
1196 * on a few precoditions. In release builds, the code is entirely
1197 * without conditionals. Debug builds have a couple of assertions that
1198 * shouldn't ever be triggered.
1199 *
1200 * @{
1201 */
1202DECLASM(int) hmR0SvmVmRun_SansXcr0_SansIbpbEntry_SansIbpbExit(PVMCC pVM, PVMCPUCC pVCpu, RTHCPHYS HCPhyspVMCB);
1203DECLASM(int) hmR0SvmVmRun_WithXcr0_SansIbpbEntry_SansIbpbExit(PVMCC pVM, PVMCPUCC pVCpu, RTHCPHYS HCPhyspVMCB);
1204DECLASM(int) hmR0SvmVmRun_SansXcr0_WithIbpbEntry_SansIbpbExit(PVMCC pVM, PVMCPUCC pVCpu, RTHCPHYS HCPhyspVMCB);
1205DECLASM(int) hmR0SvmVmRun_WithXcr0_WithIbpbEntry_SansIbpbExit(PVMCC pVM, PVMCPUCC pVCpu, RTHCPHYS HCPhyspVMCB);
1206DECLASM(int) hmR0SvmVmRun_SansXcr0_SansIbpbEntry_WithIbpbExit(PVMCC pVM, PVMCPUCC pVCpu, RTHCPHYS HCPhyspVMCB);
1207DECLASM(int) hmR0SvmVmRun_WithXcr0_SansIbpbEntry_WithIbpbExit(PVMCC pVM, PVMCPUCC pVCpu, RTHCPHYS HCPhyspVMCB);
1208DECLASM(int) hmR0SvmVmRun_SansXcr0_WithIbpbEntry_WithIbpbExit(PVMCC pVM, PVMCPUCC pVCpu, RTHCPHYS HCPhyspVMCB);
1209DECLASM(int) hmR0SvmVmRun_WithXcr0_WithIbpbEntry_WithIbpbExit(PVMCC pVM, PVMCPUCC pVCpu, RTHCPHYS HCPhyspVMCB);
1210/** @} */
1211
1212/** @} */
1213
1214
1215/** @addtogroup grp_hm_int_vmx VMX Internal
1216 * @{ */
1217VMM_INT_DECL(PVMXVMCSINFOSHARED) hmGetVmxActiveVmcsInfoShared(PVMCPUCC pVCpu);
1218
1219/**
1220 * Used on platforms with poor inline assembly support to retrieve all the
1221 * info from the CPU and put it in the @a pRestoreHost structure.
1222 */
1223DECLASM(void) hmR0VmxExportHostSegmentRegsAsmHlp(PVMXRESTOREHOST pRestoreHost, bool fHaveFsGsBase);
1224
1225/**
1226 * Restores some host-state fields that need not be done on every VM-exit.
1227 *
1228 * @returns VBox status code.
1229 * @param fRestoreHostFlags Flags of which host registers needs to be
1230 * restored.
1231 * @param pRestoreHost Pointer to the host-restore structure.
1232 */
1233DECLASM(int) VMXRestoreHostState(uint32_t fRestoreHostFlags, PVMXRESTOREHOST pRestoreHost);
1234
1235/**
1236 * VMX StartVM functions.
1237 *
1238 * @returns VBox status code (no informational stuff).
1239 * @param pVmcsInfo Pointer to the VMCS info (for cached host RIP and RSP).
1240 * @param pVCpu Pointer to the cross context per-CPU structure of the
1241 * calling EMT.
1242 * @param fResume Whether to use VMRESUME (true) or VMLAUNCH (false).
1243 *
1244 * @remarks With spectre mitigations and the usual need for speed (/ micro
1245 * optimizations), we have a bunch of variations of this code depending
1246 * on a few precoditions. In release builds, the code is entirely
1247 * without conditionals. Debug builds have a couple of assertions that
1248 * shouldn't ever be triggered.
1249 *
1250 * @{
1251 */
1252DECLASM(int) hmR0VmxStartVm_SansXcr0_SansIbpbEntry_SansL1dEntry_SansMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1253DECLASM(int) hmR0VmxStartVm_WithXcr0_SansIbpbEntry_SansL1dEntry_SansMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1254DECLASM(int) hmR0VmxStartVm_SansXcr0_WithIbpbEntry_SansL1dEntry_SansMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1255DECLASM(int) hmR0VmxStartVm_WithXcr0_WithIbpbEntry_SansL1dEntry_SansMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1256DECLASM(int) hmR0VmxStartVm_SansXcr0_SansIbpbEntry_WithL1dEntry_SansMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1257DECLASM(int) hmR0VmxStartVm_WithXcr0_SansIbpbEntry_WithL1dEntry_SansMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1258DECLASM(int) hmR0VmxStartVm_SansXcr0_WithIbpbEntry_WithL1dEntry_SansMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1259DECLASM(int) hmR0VmxStartVm_WithXcr0_WithIbpbEntry_WithL1dEntry_SansMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1260DECLASM(int) hmR0VmxStartVm_SansXcr0_SansIbpbEntry_SansL1dEntry_WithMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1261DECLASM(int) hmR0VmxStartVm_WithXcr0_SansIbpbEntry_SansL1dEntry_WithMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1262DECLASM(int) hmR0VmxStartVm_SansXcr0_WithIbpbEntry_SansL1dEntry_WithMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1263DECLASM(int) hmR0VmxStartVm_WithXcr0_WithIbpbEntry_SansL1dEntry_WithMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1264DECLASM(int) hmR0VmxStartVm_SansXcr0_SansIbpbEntry_WithL1dEntry_WithMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1265DECLASM(int) hmR0VmxStartVm_WithXcr0_SansIbpbEntry_WithL1dEntry_WithMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1266DECLASM(int) hmR0VmxStartVm_SansXcr0_WithIbpbEntry_WithL1dEntry_WithMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1267DECLASM(int) hmR0VmxStartVm_WithXcr0_WithIbpbEntry_WithL1dEntry_WithMdsEntry_SansIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1268DECLASM(int) hmR0VmxStartVm_SansXcr0_SansIbpbEntry_SansL1dEntry_SansMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1269DECLASM(int) hmR0VmxStartVm_WithXcr0_SansIbpbEntry_SansL1dEntry_SansMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1270DECLASM(int) hmR0VmxStartVm_SansXcr0_WithIbpbEntry_SansL1dEntry_SansMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1271DECLASM(int) hmR0VmxStartVm_WithXcr0_WithIbpbEntry_SansL1dEntry_SansMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1272DECLASM(int) hmR0VmxStartVm_SansXcr0_SansIbpbEntry_WithL1dEntry_SansMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1273DECLASM(int) hmR0VmxStartVm_WithXcr0_SansIbpbEntry_WithL1dEntry_SansMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1274DECLASM(int) hmR0VmxStartVm_SansXcr0_WithIbpbEntry_WithL1dEntry_SansMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1275DECLASM(int) hmR0VmxStartVm_WithXcr0_WithIbpbEntry_WithL1dEntry_SansMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1276DECLASM(int) hmR0VmxStartVm_SansXcr0_SansIbpbEntry_SansL1dEntry_WithMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1277DECLASM(int) hmR0VmxStartVm_WithXcr0_SansIbpbEntry_SansL1dEntry_WithMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1278DECLASM(int) hmR0VmxStartVm_SansXcr0_WithIbpbEntry_SansL1dEntry_WithMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1279DECLASM(int) hmR0VmxStartVm_WithXcr0_WithIbpbEntry_SansL1dEntry_WithMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1280DECLASM(int) hmR0VmxStartVm_SansXcr0_SansIbpbEntry_WithL1dEntry_WithMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1281DECLASM(int) hmR0VmxStartVm_WithXcr0_SansIbpbEntry_WithL1dEntry_WithMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1282DECLASM(int) hmR0VmxStartVm_SansXcr0_WithIbpbEntry_WithL1dEntry_WithMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1283DECLASM(int) hmR0VmxStartVm_WithXcr0_WithIbpbEntry_WithL1dEntry_WithMdsEntry_WithIbpbExit(PVMXVMCSINFO pVmcsInfo, PVMCPUCC pVCpu, bool fResume);
1284/** @} */
1285
1286/** @} */
1287
1288/** @} */
1289
1290RT_C_DECLS_END
1291
1292#endif /* !VMM_INCLUDED_SRC_include_HMInternal_h */
1293
Note: See TracBrowser for help on using the repository browser.

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy Automated Access Etiquette