Loading...
1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 *
4 * Copyright SUSE Linux Products GmbH 2009
5 *
6 * Authors: Alexander Graf <agraf@suse.de>
7 */
8
9#include <asm/kvm_ppc.h>
10#include <asm/disassemble.h>
11#include <asm/kvm_book3s.h>
12#include <asm/reg.h>
13#include <asm/switch_to.h>
14#include <asm/time.h>
15#include <asm/tm.h>
16#include "book3s.h"
17#include <asm/asm-prototypes.h>
18
19#define OP_19_XOP_RFID 18
20#define OP_19_XOP_RFI 50
21
22#define OP_31_XOP_MFMSR 83
23#define OP_31_XOP_MTMSR 146
24#define OP_31_XOP_MTMSRD 178
25#define OP_31_XOP_MTSR 210
26#define OP_31_XOP_MTSRIN 242
27#define OP_31_XOP_TLBIEL 274
28/* Opcode is officially reserved, reuse it as sc 1 when sc 1 doesn't trap */
29#define OP_31_XOP_FAKE_SC1 308
30#define OP_31_XOP_SLBMTE 402
31#define OP_31_XOP_SLBIE 434
32#define OP_31_XOP_SLBIA 498
33#define OP_31_XOP_MFSR 595
34#define OP_31_XOP_MFSRIN 659
35#define OP_31_XOP_DCBA 758
36#define OP_31_XOP_SLBMFEV 851
37#define OP_31_XOP_EIOIO 854
38#define OP_31_XOP_SLBMFEE 915
39#define OP_31_XOP_SLBFEE 979
40
41#define OP_31_XOP_TBEGIN 654
42#define OP_31_XOP_TABORT 910
43
44#define OP_31_XOP_TRECLAIM 942
45#define OP_31_XOP_TRCHKPT 1006
46
47/* DCBZ is actually 1014, but we patch it to 1010 so we get a trap */
48#define OP_31_XOP_DCBZ 1010
49
50#define OP_LFS 48
51#define OP_LFD 50
52#define OP_STFS 52
53#define OP_STFD 54
54
55#define SPRN_GQR0 912
56#define SPRN_GQR1 913
57#define SPRN_GQR2 914
58#define SPRN_GQR3 915
59#define SPRN_GQR4 916
60#define SPRN_GQR5 917
61#define SPRN_GQR6 918
62#define SPRN_GQR7 919
63
64enum priv_level {
65 PRIV_PROBLEM = 0,
66 PRIV_SUPER = 1,
67 PRIV_HYPER = 2,
68};
69
70static bool spr_allowed(struct kvm_vcpu *vcpu, enum priv_level level)
71{
72 /* PAPR VMs only access supervisor SPRs */
73 if (vcpu->arch.papr_enabled && (level > PRIV_SUPER))
74 return false;
75
76 /* Limit user space to its own small SPR set */
77 if ((kvmppc_get_msr(vcpu) & MSR_PR) && level > PRIV_PROBLEM)
78 return false;
79
80 return true;
81}
82
83#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
84static inline void kvmppc_copyto_vcpu_tm(struct kvm_vcpu *vcpu)
85{
86 memcpy(&vcpu->arch.gpr_tm[0], &vcpu->arch.regs.gpr[0],
87 sizeof(vcpu->arch.gpr_tm));
88 memcpy(&vcpu->arch.fp_tm, &vcpu->arch.fp,
89 sizeof(struct thread_fp_state));
90 memcpy(&vcpu->arch.vr_tm, &vcpu->arch.vr,
91 sizeof(struct thread_vr_state));
92 vcpu->arch.ppr_tm = vcpu->arch.ppr;
93 vcpu->arch.dscr_tm = vcpu->arch.dscr;
94 vcpu->arch.amr_tm = vcpu->arch.amr;
95 vcpu->arch.ctr_tm = vcpu->arch.regs.ctr;
96 vcpu->arch.tar_tm = vcpu->arch.tar;
97 vcpu->arch.lr_tm = vcpu->arch.regs.link;
98 vcpu->arch.cr_tm = vcpu->arch.regs.ccr;
99 vcpu->arch.xer_tm = vcpu->arch.regs.xer;
100 vcpu->arch.vrsave_tm = vcpu->arch.vrsave;
101}
102
103static inline void kvmppc_copyfrom_vcpu_tm(struct kvm_vcpu *vcpu)
104{
105 memcpy(&vcpu->arch.regs.gpr[0], &vcpu->arch.gpr_tm[0],
106 sizeof(vcpu->arch.regs.gpr));
107 memcpy(&vcpu->arch.fp, &vcpu->arch.fp_tm,
108 sizeof(struct thread_fp_state));
109 memcpy(&vcpu->arch.vr, &vcpu->arch.vr_tm,
110 sizeof(struct thread_vr_state));
111 vcpu->arch.ppr = vcpu->arch.ppr_tm;
112 vcpu->arch.dscr = vcpu->arch.dscr_tm;
113 vcpu->arch.amr = vcpu->arch.amr_tm;
114 vcpu->arch.regs.ctr = vcpu->arch.ctr_tm;
115 vcpu->arch.tar = vcpu->arch.tar_tm;
116 vcpu->arch.regs.link = vcpu->arch.lr_tm;
117 vcpu->arch.regs.ccr = vcpu->arch.cr_tm;
118 vcpu->arch.regs.xer = vcpu->arch.xer_tm;
119 vcpu->arch.vrsave = vcpu->arch.vrsave_tm;
120}
121
122static void kvmppc_emulate_treclaim(struct kvm_vcpu *vcpu, int ra_val)
123{
124 unsigned long guest_msr = kvmppc_get_msr(vcpu);
125 int fc_val = ra_val ? ra_val : 1;
126 uint64_t texasr;
127
128 /* CR0 = 0 | MSR[TS] | 0 */
129 vcpu->arch.regs.ccr = (vcpu->arch.regs.ccr & ~(CR0_MASK << CR0_SHIFT)) |
130 (((guest_msr & MSR_TS_MASK) >> (MSR_TS_S_LG - 1))
131 << CR0_SHIFT);
132
133 preempt_disable();
134 tm_enable();
135 texasr = mfspr(SPRN_TEXASR);
136 kvmppc_save_tm_pr(vcpu);
137 kvmppc_copyfrom_vcpu_tm(vcpu);
138
139 /* failure recording depends on Failure Summary bit */
140 if (!(texasr & TEXASR_FS)) {
141 texasr &= ~TEXASR_FC;
142 texasr |= ((u64)fc_val << TEXASR_FC_LG) | TEXASR_FS;
143
144 texasr &= ~(TEXASR_PR | TEXASR_HV);
145 if (kvmppc_get_msr(vcpu) & MSR_PR)
146 texasr |= TEXASR_PR;
147
148 if (kvmppc_get_msr(vcpu) & MSR_HV)
149 texasr |= TEXASR_HV;
150
151 vcpu->arch.texasr = texasr;
152 vcpu->arch.tfiar = kvmppc_get_pc(vcpu);
153 mtspr(SPRN_TEXASR, texasr);
154 mtspr(SPRN_TFIAR, vcpu->arch.tfiar);
155 }
156 tm_disable();
157 /*
158 * treclaim need quit to non-transactional state.
159 */
160 guest_msr &= ~(MSR_TS_MASK);
161 kvmppc_set_msr(vcpu, guest_msr);
162 preempt_enable();
163
164 if (vcpu->arch.shadow_fscr & FSCR_TAR)
165 mtspr(SPRN_TAR, vcpu->arch.tar);
166}
167
168static void kvmppc_emulate_trchkpt(struct kvm_vcpu *vcpu)
169{
170 unsigned long guest_msr = kvmppc_get_msr(vcpu);
171
172 preempt_disable();
173 /*
174 * need flush FP/VEC/VSX to vcpu save area before
175 * copy.
176 */
177 kvmppc_giveup_ext(vcpu, MSR_VSX);
178 kvmppc_giveup_fac(vcpu, FSCR_TAR_LG);
179 kvmppc_copyto_vcpu_tm(vcpu);
180 kvmppc_save_tm_sprs(vcpu);
181
182 /*
183 * as a result of trecheckpoint. set TS to suspended.
184 */
185 guest_msr &= ~(MSR_TS_MASK);
186 guest_msr |= MSR_TS_S;
187 kvmppc_set_msr(vcpu, guest_msr);
188 kvmppc_restore_tm_pr(vcpu);
189 preempt_enable();
190}
191
192/* emulate tabort. at guest privilege state */
193void kvmppc_emulate_tabort(struct kvm_vcpu *vcpu, int ra_val)
194{
195 /* currently we only emulate tabort. but no emulation of other
196 * tabort variants since there is no kernel usage of them at
197 * present.
198 */
199 unsigned long guest_msr = kvmppc_get_msr(vcpu);
200 uint64_t org_texasr;
201
202 preempt_disable();
203 tm_enable();
204 org_texasr = mfspr(SPRN_TEXASR);
205 tm_abort(ra_val);
206
207 /* CR0 = 0 | MSR[TS] | 0 */
208 vcpu->arch.regs.ccr = (vcpu->arch.regs.ccr & ~(CR0_MASK << CR0_SHIFT)) |
209 (((guest_msr & MSR_TS_MASK) >> (MSR_TS_S_LG - 1))
210 << CR0_SHIFT);
211
212 vcpu->arch.texasr = mfspr(SPRN_TEXASR);
213 /* failure recording depends on Failure Summary bit,
214 * and tabort will be treated as nops in non-transactional
215 * state.
216 */
217 if (!(org_texasr & TEXASR_FS) &&
218 MSR_TM_ACTIVE(guest_msr)) {
219 vcpu->arch.texasr &= ~(TEXASR_PR | TEXASR_HV);
220 if (guest_msr & MSR_PR)
221 vcpu->arch.texasr |= TEXASR_PR;
222
223 if (guest_msr & MSR_HV)
224 vcpu->arch.texasr |= TEXASR_HV;
225
226 vcpu->arch.tfiar = kvmppc_get_pc(vcpu);
227 }
228 tm_disable();
229 preempt_enable();
230}
231
232#endif
233
234int kvmppc_core_emulate_op_pr(struct kvm_vcpu *vcpu,
235 unsigned int inst, int *advance)
236{
237 int emulated = EMULATE_DONE;
238 int rt = get_rt(inst);
239 int rs = get_rs(inst);
240 int ra = get_ra(inst);
241 int rb = get_rb(inst);
242 u32 inst_sc = 0x44000002;
243
244 switch (get_op(inst)) {
245 case 0:
246 emulated = EMULATE_FAIL;
247 if ((kvmppc_get_msr(vcpu) & MSR_LE) &&
248 (inst == swab32(inst_sc))) {
249 /*
250 * This is the byte reversed syscall instruction of our
251 * hypercall handler. Early versions of LE Linux didn't
252 * swap the instructions correctly and ended up in
253 * illegal instructions.
254 * Just always fail hypercalls on these broken systems.
255 */
256 kvmppc_set_gpr(vcpu, 3, EV_UNIMPLEMENTED);
257 kvmppc_set_pc(vcpu, kvmppc_get_pc(vcpu) + 4);
258 emulated = EMULATE_DONE;
259 }
260 break;
261 case 19:
262 switch (get_xop(inst)) {
263 case OP_19_XOP_RFID:
264 case OP_19_XOP_RFI: {
265 unsigned long srr1 = kvmppc_get_srr1(vcpu);
266#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
267 unsigned long cur_msr = kvmppc_get_msr(vcpu);
268
269 /*
270 * add rules to fit in ISA specification regarding TM
271 * state transition in TM disable/Suspended state,
272 * and target TM state is TM inactive(00) state. (the
273 * change should be suppressed).
274 */
275 if (((cur_msr & MSR_TM) == 0) &&
276 ((srr1 & MSR_TM) == 0) &&
277 MSR_TM_SUSPENDED(cur_msr) &&
278 !MSR_TM_ACTIVE(srr1))
279 srr1 |= MSR_TS_S;
280#endif
281 kvmppc_set_pc(vcpu, kvmppc_get_srr0(vcpu));
282 kvmppc_set_msr(vcpu, srr1);
283 *advance = 0;
284 break;
285 }
286
287 default:
288 emulated = EMULATE_FAIL;
289 break;
290 }
291 break;
292 case 31:
293 switch (get_xop(inst)) {
294 case OP_31_XOP_MFMSR:
295 kvmppc_set_gpr(vcpu, rt, kvmppc_get_msr(vcpu));
296 break;
297 case OP_31_XOP_MTMSRD:
298 {
299 ulong rs_val = kvmppc_get_gpr(vcpu, rs);
300 if (inst & 0x10000) {
301 ulong new_msr = kvmppc_get_msr(vcpu);
302 new_msr &= ~(MSR_RI | MSR_EE);
303 new_msr |= rs_val & (MSR_RI | MSR_EE);
304 kvmppc_set_msr_fast(vcpu, new_msr);
305 } else
306 kvmppc_set_msr(vcpu, rs_val);
307 break;
308 }
309 case OP_31_XOP_MTMSR:
310 kvmppc_set_msr(vcpu, kvmppc_get_gpr(vcpu, rs));
311 break;
312 case OP_31_XOP_MFSR:
313 {
314 int srnum;
315
316 srnum = kvmppc_get_field(inst, 12 + 32, 15 + 32);
317 if (vcpu->arch.mmu.mfsrin) {
318 u32 sr;
319 sr = vcpu->arch.mmu.mfsrin(vcpu, srnum);
320 kvmppc_set_gpr(vcpu, rt, sr);
321 }
322 break;
323 }
324 case OP_31_XOP_MFSRIN:
325 {
326 int srnum;
327
328 srnum = (kvmppc_get_gpr(vcpu, rb) >> 28) & 0xf;
329 if (vcpu->arch.mmu.mfsrin) {
330 u32 sr;
331 sr = vcpu->arch.mmu.mfsrin(vcpu, srnum);
332 kvmppc_set_gpr(vcpu, rt, sr);
333 }
334 break;
335 }
336 case OP_31_XOP_MTSR:
337 vcpu->arch.mmu.mtsrin(vcpu,
338 (inst >> 16) & 0xf,
339 kvmppc_get_gpr(vcpu, rs));
340 break;
341 case OP_31_XOP_MTSRIN:
342 vcpu->arch.mmu.mtsrin(vcpu,
343 (kvmppc_get_gpr(vcpu, rb) >> 28) & 0xf,
344 kvmppc_get_gpr(vcpu, rs));
345 break;
346 case OP_31_XOP_TLBIE:
347 case OP_31_XOP_TLBIEL:
348 {
349 bool large = (inst & 0x00200000) ? true : false;
350 ulong addr = kvmppc_get_gpr(vcpu, rb);
351 vcpu->arch.mmu.tlbie(vcpu, addr, large);
352 break;
353 }
354#ifdef CONFIG_PPC_BOOK3S_64
355 case OP_31_XOP_FAKE_SC1:
356 {
357 /* SC 1 papr hypercalls */
358 ulong cmd = kvmppc_get_gpr(vcpu, 3);
359 int i;
360
361 if ((kvmppc_get_msr(vcpu) & MSR_PR) ||
362 !vcpu->arch.papr_enabled) {
363 emulated = EMULATE_FAIL;
364 break;
365 }
366
367 if (kvmppc_h_pr(vcpu, cmd) == EMULATE_DONE)
368 break;
369
370 vcpu->run->papr_hcall.nr = cmd;
371 for (i = 0; i < 9; ++i) {
372 ulong gpr = kvmppc_get_gpr(vcpu, 4 + i);
373 vcpu->run->papr_hcall.args[i] = gpr;
374 }
375
376 vcpu->run->exit_reason = KVM_EXIT_PAPR_HCALL;
377 vcpu->arch.hcall_needed = 1;
378 emulated = EMULATE_EXIT_USER;
379 break;
380 }
381#endif
382 case OP_31_XOP_EIOIO:
383 break;
384 case OP_31_XOP_SLBMTE:
385 if (!vcpu->arch.mmu.slbmte)
386 return EMULATE_FAIL;
387
388 vcpu->arch.mmu.slbmte(vcpu,
389 kvmppc_get_gpr(vcpu, rs),
390 kvmppc_get_gpr(vcpu, rb));
391 break;
392 case OP_31_XOP_SLBIE:
393 if (!vcpu->arch.mmu.slbie)
394 return EMULATE_FAIL;
395
396 vcpu->arch.mmu.slbie(vcpu,
397 kvmppc_get_gpr(vcpu, rb));
398 break;
399 case OP_31_XOP_SLBIA:
400 if (!vcpu->arch.mmu.slbia)
401 return EMULATE_FAIL;
402
403 vcpu->arch.mmu.slbia(vcpu);
404 break;
405 case OP_31_XOP_SLBFEE:
406 if (!(inst & 1) || !vcpu->arch.mmu.slbfee) {
407 return EMULATE_FAIL;
408 } else {
409 ulong b, t;
410 ulong cr = kvmppc_get_cr(vcpu) & ~CR0_MASK;
411
412 b = kvmppc_get_gpr(vcpu, rb);
413 if (!vcpu->arch.mmu.slbfee(vcpu, b, &t))
414 cr |= 2 << CR0_SHIFT;
415 kvmppc_set_gpr(vcpu, rt, t);
416 /* copy XER[SO] bit to CR0[SO] */
417 cr |= (vcpu->arch.regs.xer & 0x80000000) >>
418 (31 - CR0_SHIFT);
419 kvmppc_set_cr(vcpu, cr);
420 }
421 break;
422 case OP_31_XOP_SLBMFEE:
423 if (!vcpu->arch.mmu.slbmfee) {
424 emulated = EMULATE_FAIL;
425 } else {
426 ulong t, rb_val;
427
428 rb_val = kvmppc_get_gpr(vcpu, rb);
429 t = vcpu->arch.mmu.slbmfee(vcpu, rb_val);
430 kvmppc_set_gpr(vcpu, rt, t);
431 }
432 break;
433 case OP_31_XOP_SLBMFEV:
434 if (!vcpu->arch.mmu.slbmfev) {
435 emulated = EMULATE_FAIL;
436 } else {
437 ulong t, rb_val;
438
439 rb_val = kvmppc_get_gpr(vcpu, rb);
440 t = vcpu->arch.mmu.slbmfev(vcpu, rb_val);
441 kvmppc_set_gpr(vcpu, rt, t);
442 }
443 break;
444 case OP_31_XOP_DCBA:
445 /* Gets treated as NOP */
446 break;
447 case OP_31_XOP_DCBZ:
448 {
449 ulong rb_val = kvmppc_get_gpr(vcpu, rb);
450 ulong ra_val = 0;
451 ulong addr, vaddr;
452 u32 zeros[8] = { 0, 0, 0, 0, 0, 0, 0, 0 };
453 u32 dsisr;
454 int r;
455
456 if (ra)
457 ra_val = kvmppc_get_gpr(vcpu, ra);
458
459 addr = (ra_val + rb_val) & ~31ULL;
460 if (!(kvmppc_get_msr(vcpu) & MSR_SF))
461 addr &= 0xffffffff;
462 vaddr = addr;
463
464 r = kvmppc_st(vcpu, &addr, 32, zeros, true);
465 if ((r == -ENOENT) || (r == -EPERM)) {
466 *advance = 0;
467 kvmppc_set_dar(vcpu, vaddr);
468 vcpu->arch.fault_dar = vaddr;
469
470 dsisr = DSISR_ISSTORE;
471 if (r == -ENOENT)
472 dsisr |= DSISR_NOHPTE;
473 else if (r == -EPERM)
474 dsisr |= DSISR_PROTFAULT;
475
476 kvmppc_set_dsisr(vcpu, dsisr);
477 vcpu->arch.fault_dsisr = dsisr;
478
479 kvmppc_book3s_queue_irqprio(vcpu,
480 BOOK3S_INTERRUPT_DATA_STORAGE);
481 }
482
483 break;
484 }
485#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
486 case OP_31_XOP_TBEGIN:
487 {
488 if (!cpu_has_feature(CPU_FTR_TM))
489 break;
490
491 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
492 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
493 emulated = EMULATE_AGAIN;
494 break;
495 }
496
497 if (!(kvmppc_get_msr(vcpu) & MSR_PR)) {
498 preempt_disable();
499 vcpu->arch.regs.ccr = (CR0_TBEGIN_FAILURE |
500 (vcpu->arch.regs.ccr & ~(CR0_MASK << CR0_SHIFT)));
501
502 vcpu->arch.texasr = (TEXASR_FS | TEXASR_EXACT |
503 (((u64)(TM_CAUSE_EMULATE | TM_CAUSE_PERSISTENT))
504 << TEXASR_FC_LG));
505
506 if ((inst >> 21) & 0x1)
507 vcpu->arch.texasr |= TEXASR_ROT;
508
509 if (kvmppc_get_msr(vcpu) & MSR_HV)
510 vcpu->arch.texasr |= TEXASR_HV;
511
512 vcpu->arch.tfhar = kvmppc_get_pc(vcpu) + 4;
513 vcpu->arch.tfiar = kvmppc_get_pc(vcpu);
514
515 kvmppc_restore_tm_sprs(vcpu);
516 preempt_enable();
517 } else
518 emulated = EMULATE_FAIL;
519 break;
520 }
521 case OP_31_XOP_TABORT:
522 {
523 ulong guest_msr = kvmppc_get_msr(vcpu);
524 unsigned long ra_val = 0;
525
526 if (!cpu_has_feature(CPU_FTR_TM))
527 break;
528
529 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
530 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
531 emulated = EMULATE_AGAIN;
532 break;
533 }
534
535 /* only emulate for privilege guest, since problem state
536 * guest can run with TM enabled and we don't expect to
537 * trap at here for that case.
538 */
539 WARN_ON(guest_msr & MSR_PR);
540
541 if (ra)
542 ra_val = kvmppc_get_gpr(vcpu, ra);
543
544 kvmppc_emulate_tabort(vcpu, ra_val);
545 break;
546 }
547 case OP_31_XOP_TRECLAIM:
548 {
549 ulong guest_msr = kvmppc_get_msr(vcpu);
550 unsigned long ra_val = 0;
551
552 if (!cpu_has_feature(CPU_FTR_TM))
553 break;
554
555 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
556 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
557 emulated = EMULATE_AGAIN;
558 break;
559 }
560
561 /* generate interrupts based on priorities */
562 if (guest_msr & MSR_PR) {
563 /* Privileged Instruction type Program Interrupt */
564 kvmppc_core_queue_program(vcpu, SRR1_PROGPRIV);
565 emulated = EMULATE_AGAIN;
566 break;
567 }
568
569 if (!MSR_TM_ACTIVE(guest_msr)) {
570 /* TM bad thing interrupt */
571 kvmppc_core_queue_program(vcpu, SRR1_PROGTM);
572 emulated = EMULATE_AGAIN;
573 break;
574 }
575
576 if (ra)
577 ra_val = kvmppc_get_gpr(vcpu, ra);
578 kvmppc_emulate_treclaim(vcpu, ra_val);
579 break;
580 }
581 case OP_31_XOP_TRCHKPT:
582 {
583 ulong guest_msr = kvmppc_get_msr(vcpu);
584 unsigned long texasr;
585
586 if (!cpu_has_feature(CPU_FTR_TM))
587 break;
588
589 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
590 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
591 emulated = EMULATE_AGAIN;
592 break;
593 }
594
595 /* generate interrupt based on priorities */
596 if (guest_msr & MSR_PR) {
597 /* Privileged Instruction type Program Intr */
598 kvmppc_core_queue_program(vcpu, SRR1_PROGPRIV);
599 emulated = EMULATE_AGAIN;
600 break;
601 }
602
603 tm_enable();
604 texasr = mfspr(SPRN_TEXASR);
605 tm_disable();
606
607 if (MSR_TM_ACTIVE(guest_msr) ||
608 !(texasr & (TEXASR_FS))) {
609 /* TM bad thing interrupt */
610 kvmppc_core_queue_program(vcpu, SRR1_PROGTM);
611 emulated = EMULATE_AGAIN;
612 break;
613 }
614
615 kvmppc_emulate_trchkpt(vcpu);
616 break;
617 }
618#endif
619 default:
620 emulated = EMULATE_FAIL;
621 }
622 break;
623 default:
624 emulated = EMULATE_FAIL;
625 }
626
627 if (emulated == EMULATE_FAIL)
628 emulated = kvmppc_emulate_paired_single(vcpu);
629
630 return emulated;
631}
632
633void kvmppc_set_bat(struct kvm_vcpu *vcpu, struct kvmppc_bat *bat, bool upper,
634 u32 val)
635{
636 if (upper) {
637 /* Upper BAT */
638 u32 bl = (val >> 2) & 0x7ff;
639 bat->bepi_mask = (~bl << 17);
640 bat->bepi = val & 0xfffe0000;
641 bat->vs = (val & 2) ? 1 : 0;
642 bat->vp = (val & 1) ? 1 : 0;
643 bat->raw = (bat->raw & 0xffffffff00000000ULL) | val;
644 } else {
645 /* Lower BAT */
646 bat->brpn = val & 0xfffe0000;
647 bat->wimg = (val >> 3) & 0xf;
648 bat->pp = val & 3;
649 bat->raw = (bat->raw & 0x00000000ffffffffULL) | ((u64)val << 32);
650 }
651}
652
653static struct kvmppc_bat *kvmppc_find_bat(struct kvm_vcpu *vcpu, int sprn)
654{
655 struct kvmppc_vcpu_book3s *vcpu_book3s = to_book3s(vcpu);
656 struct kvmppc_bat *bat;
657
658 switch (sprn) {
659 case SPRN_IBAT0U ... SPRN_IBAT3L:
660 bat = &vcpu_book3s->ibat[(sprn - SPRN_IBAT0U) / 2];
661 break;
662 case SPRN_IBAT4U ... SPRN_IBAT7L:
663 bat = &vcpu_book3s->ibat[4 + ((sprn - SPRN_IBAT4U) / 2)];
664 break;
665 case SPRN_DBAT0U ... SPRN_DBAT3L:
666 bat = &vcpu_book3s->dbat[(sprn - SPRN_DBAT0U) / 2];
667 break;
668 case SPRN_DBAT4U ... SPRN_DBAT7L:
669 bat = &vcpu_book3s->dbat[4 + ((sprn - SPRN_DBAT4U) / 2)];
670 break;
671 default:
672 BUG();
673 }
674
675 return bat;
676}
677
678int kvmppc_core_emulate_mtspr_pr(struct kvm_vcpu *vcpu, int sprn, ulong spr_val)
679{
680 int emulated = EMULATE_DONE;
681
682 switch (sprn) {
683 case SPRN_SDR1:
684 if (!spr_allowed(vcpu, PRIV_HYPER))
685 goto unprivileged;
686 to_book3s(vcpu)->sdr1 = spr_val;
687 break;
688 case SPRN_DSISR:
689 kvmppc_set_dsisr(vcpu, spr_val);
690 break;
691 case SPRN_DAR:
692 kvmppc_set_dar(vcpu, spr_val);
693 break;
694 case SPRN_HIOR:
695 to_book3s(vcpu)->hior = spr_val;
696 break;
697 case SPRN_IBAT0U ... SPRN_IBAT3L:
698 case SPRN_IBAT4U ... SPRN_IBAT7L:
699 case SPRN_DBAT0U ... SPRN_DBAT3L:
700 case SPRN_DBAT4U ... SPRN_DBAT7L:
701 {
702 struct kvmppc_bat *bat = kvmppc_find_bat(vcpu, sprn);
703
704 kvmppc_set_bat(vcpu, bat, !(sprn % 2), (u32)spr_val);
705 /* BAT writes happen so rarely that we're ok to flush
706 * everything here */
707 kvmppc_mmu_pte_flush(vcpu, 0, 0);
708 kvmppc_mmu_flush_segments(vcpu);
709 break;
710 }
711 case SPRN_HID0:
712 to_book3s(vcpu)->hid[0] = spr_val;
713 break;
714 case SPRN_HID1:
715 to_book3s(vcpu)->hid[1] = spr_val;
716 break;
717 case SPRN_HID2:
718 to_book3s(vcpu)->hid[2] = spr_val;
719 break;
720 case SPRN_HID2_GEKKO:
721 to_book3s(vcpu)->hid[2] = spr_val;
722 /* HID2.PSE controls paired single on gekko */
723 switch (vcpu->arch.pvr) {
724 case 0x00080200: /* lonestar 2.0 */
725 case 0x00088202: /* lonestar 2.2 */
726 case 0x70000100: /* gekko 1.0 */
727 case 0x00080100: /* gekko 2.0 */
728 case 0x00083203: /* gekko 2.3a */
729 case 0x00083213: /* gekko 2.3b */
730 case 0x00083204: /* gekko 2.4 */
731 case 0x00083214: /* gekko 2.4e (8SE) - retail HW2 */
732 case 0x00087200: /* broadway */
733 if (vcpu->arch.hflags & BOOK3S_HFLAG_NATIVE_PS) {
734 /* Native paired singles */
735 } else if (spr_val & (1 << 29)) { /* HID2.PSE */
736 vcpu->arch.hflags |= BOOK3S_HFLAG_PAIRED_SINGLE;
737 kvmppc_giveup_ext(vcpu, MSR_FP);
738 } else {
739 vcpu->arch.hflags &= ~BOOK3S_HFLAG_PAIRED_SINGLE;
740 }
741 break;
742 }
743 break;
744 case SPRN_HID4:
745 case SPRN_HID4_GEKKO:
746 to_book3s(vcpu)->hid[4] = spr_val;
747 break;
748 case SPRN_HID5:
749 to_book3s(vcpu)->hid[5] = spr_val;
750 /* guest HID5 set can change is_dcbz32 */
751 if (vcpu->arch.mmu.is_dcbz32(vcpu) &&
752 (mfmsr() & MSR_HV))
753 vcpu->arch.hflags |= BOOK3S_HFLAG_DCBZ32;
754 break;
755 case SPRN_GQR0:
756 case SPRN_GQR1:
757 case SPRN_GQR2:
758 case SPRN_GQR3:
759 case SPRN_GQR4:
760 case SPRN_GQR5:
761 case SPRN_GQR6:
762 case SPRN_GQR7:
763 to_book3s(vcpu)->gqr[sprn - SPRN_GQR0] = spr_val;
764 break;
765#ifdef CONFIG_PPC_BOOK3S_64
766 case SPRN_FSCR:
767 kvmppc_set_fscr(vcpu, spr_val);
768 break;
769 case SPRN_BESCR:
770 vcpu->arch.bescr = spr_val;
771 break;
772 case SPRN_EBBHR:
773 vcpu->arch.ebbhr = spr_val;
774 break;
775 case SPRN_EBBRR:
776 vcpu->arch.ebbrr = spr_val;
777 break;
778#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
779 case SPRN_TFHAR:
780 case SPRN_TEXASR:
781 case SPRN_TFIAR:
782 if (!cpu_has_feature(CPU_FTR_TM))
783 break;
784
785 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
786 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
787 emulated = EMULATE_AGAIN;
788 break;
789 }
790
791 if (MSR_TM_ACTIVE(kvmppc_get_msr(vcpu)) &&
792 !((MSR_TM_SUSPENDED(kvmppc_get_msr(vcpu))) &&
793 (sprn == SPRN_TFHAR))) {
794 /* it is illegal to mtspr() TM regs in
795 * other than non-transactional state, with
796 * the exception of TFHAR in suspend state.
797 */
798 kvmppc_core_queue_program(vcpu, SRR1_PROGTM);
799 emulated = EMULATE_AGAIN;
800 break;
801 }
802
803 tm_enable();
804 if (sprn == SPRN_TFHAR)
805 mtspr(SPRN_TFHAR, spr_val);
806 else if (sprn == SPRN_TEXASR)
807 mtspr(SPRN_TEXASR, spr_val);
808 else
809 mtspr(SPRN_TFIAR, spr_val);
810 tm_disable();
811
812 break;
813#endif
814#endif
815 case SPRN_ICTC:
816 case SPRN_THRM1:
817 case SPRN_THRM2:
818 case SPRN_THRM3:
819 case SPRN_CTRLF:
820 case SPRN_CTRLT:
821 case SPRN_L2CR:
822 case SPRN_DSCR:
823 case SPRN_MMCR0_GEKKO:
824 case SPRN_MMCR1_GEKKO:
825 case SPRN_PMC1_GEKKO:
826 case SPRN_PMC2_GEKKO:
827 case SPRN_PMC3_GEKKO:
828 case SPRN_PMC4_GEKKO:
829 case SPRN_WPAR_GEKKO:
830 case SPRN_MSSSR0:
831 case SPRN_DABR:
832#ifdef CONFIG_PPC_BOOK3S_64
833 case SPRN_MMCRS:
834 case SPRN_MMCRA:
835 case SPRN_MMCR0:
836 case SPRN_MMCR1:
837 case SPRN_MMCR2:
838 case SPRN_UMMCR2:
839 case SPRN_UAMOR:
840 case SPRN_IAMR:
841 case SPRN_AMR:
842#endif
843 break;
844unprivileged:
845 default:
846 pr_info_ratelimited("KVM: invalid SPR write: %d\n", sprn);
847 if (sprn & 0x10) {
848 if (kvmppc_get_msr(vcpu) & MSR_PR) {
849 kvmppc_core_queue_program(vcpu, SRR1_PROGPRIV);
850 emulated = EMULATE_AGAIN;
851 }
852 } else {
853 if ((kvmppc_get_msr(vcpu) & MSR_PR) || sprn == 0) {
854 kvmppc_core_queue_program(vcpu, SRR1_PROGILL);
855 emulated = EMULATE_AGAIN;
856 }
857 }
858 break;
859 }
860
861 return emulated;
862}
863
864int kvmppc_core_emulate_mfspr_pr(struct kvm_vcpu *vcpu, int sprn, ulong *spr_val)
865{
866 int emulated = EMULATE_DONE;
867
868 switch (sprn) {
869 case SPRN_IBAT0U ... SPRN_IBAT3L:
870 case SPRN_IBAT4U ... SPRN_IBAT7L:
871 case SPRN_DBAT0U ... SPRN_DBAT3L:
872 case SPRN_DBAT4U ... SPRN_DBAT7L:
873 {
874 struct kvmppc_bat *bat = kvmppc_find_bat(vcpu, sprn);
875
876 if (sprn % 2)
877 *spr_val = bat->raw >> 32;
878 else
879 *spr_val = bat->raw;
880
881 break;
882 }
883 case SPRN_SDR1:
884 if (!spr_allowed(vcpu, PRIV_HYPER))
885 goto unprivileged;
886 *spr_val = to_book3s(vcpu)->sdr1;
887 break;
888 case SPRN_DSISR:
889 *spr_val = kvmppc_get_dsisr(vcpu);
890 break;
891 case SPRN_DAR:
892 *spr_val = kvmppc_get_dar(vcpu);
893 break;
894 case SPRN_HIOR:
895 *spr_val = to_book3s(vcpu)->hior;
896 break;
897 case SPRN_HID0:
898 *spr_val = to_book3s(vcpu)->hid[0];
899 break;
900 case SPRN_HID1:
901 *spr_val = to_book3s(vcpu)->hid[1];
902 break;
903 case SPRN_HID2:
904 case SPRN_HID2_GEKKO:
905 *spr_val = to_book3s(vcpu)->hid[2];
906 break;
907 case SPRN_HID4:
908 case SPRN_HID4_GEKKO:
909 *spr_val = to_book3s(vcpu)->hid[4];
910 break;
911 case SPRN_HID5:
912 *spr_val = to_book3s(vcpu)->hid[5];
913 break;
914 case SPRN_CFAR:
915 case SPRN_DSCR:
916 *spr_val = 0;
917 break;
918 case SPRN_PURR:
919 /*
920 * On exit we would have updated purr
921 */
922 *spr_val = vcpu->arch.purr;
923 break;
924 case SPRN_SPURR:
925 /*
926 * On exit we would have updated spurr
927 */
928 *spr_val = vcpu->arch.spurr;
929 break;
930 case SPRN_VTB:
931 *spr_val = to_book3s(vcpu)->vtb;
932 break;
933 case SPRN_IC:
934 *spr_val = vcpu->arch.ic;
935 break;
936 case SPRN_GQR0:
937 case SPRN_GQR1:
938 case SPRN_GQR2:
939 case SPRN_GQR3:
940 case SPRN_GQR4:
941 case SPRN_GQR5:
942 case SPRN_GQR6:
943 case SPRN_GQR7:
944 *spr_val = to_book3s(vcpu)->gqr[sprn - SPRN_GQR0];
945 break;
946#ifdef CONFIG_PPC_BOOK3S_64
947 case SPRN_FSCR:
948 *spr_val = vcpu->arch.fscr;
949 break;
950 case SPRN_BESCR:
951 *spr_val = vcpu->arch.bescr;
952 break;
953 case SPRN_EBBHR:
954 *spr_val = vcpu->arch.ebbhr;
955 break;
956 case SPRN_EBBRR:
957 *spr_val = vcpu->arch.ebbrr;
958 break;
959#ifdef CONFIG_PPC_TRANSACTIONAL_MEM
960 case SPRN_TFHAR:
961 case SPRN_TEXASR:
962 case SPRN_TFIAR:
963 if (!cpu_has_feature(CPU_FTR_TM))
964 break;
965
966 if (!(kvmppc_get_msr(vcpu) & MSR_TM)) {
967 kvmppc_trigger_fac_interrupt(vcpu, FSCR_TM_LG);
968 emulated = EMULATE_AGAIN;
969 break;
970 }
971
972 tm_enable();
973 if (sprn == SPRN_TFHAR)
974 *spr_val = mfspr(SPRN_TFHAR);
975 else if (sprn == SPRN_TEXASR)
976 *spr_val = mfspr(SPRN_TEXASR);
977 else if (sprn == SPRN_TFIAR)
978 *spr_val = mfspr(SPRN_TFIAR);
979 tm_disable();
980 break;
981#endif
982#endif
983 case SPRN_THRM1:
984 case SPRN_THRM2:
985 case SPRN_THRM3:
986 case SPRN_CTRLF:
987 case SPRN_CTRLT:
988 case SPRN_L2CR:
989 case SPRN_MMCR0_GEKKO:
990 case SPRN_MMCR1_GEKKO:
991 case SPRN_PMC1_GEKKO:
992 case SPRN_PMC2_GEKKO:
993 case SPRN_PMC3_GEKKO:
994 case SPRN_PMC4_GEKKO:
995 case SPRN_WPAR_GEKKO:
996 case SPRN_MSSSR0:
997 case SPRN_DABR:
998#ifdef CONFIG_PPC_BOOK3S_64
999 case SPRN_MMCRS:
1000 case SPRN_MMCRA:
1001 case SPRN_MMCR0:
1002 case SPRN_MMCR1:
1003 case SPRN_MMCR2:
1004 case SPRN_UMMCR2:
1005 case SPRN_TIR:
1006 case SPRN_UAMOR:
1007 case SPRN_IAMR:
1008 case SPRN_AMR:
1009#endif
1010 *spr_val = 0;
1011 break;
1012 default:
1013unprivileged:
1014 pr_info_ratelimited("KVM: invalid SPR read: %d\n", sprn);
1015 if (sprn & 0x10) {
1016 if (kvmppc_get_msr(vcpu) & MSR_PR) {
1017 kvmppc_core_queue_program(vcpu, SRR1_PROGPRIV);
1018 emulated = EMULATE_AGAIN;
1019 }
1020 } else {
1021 if ((kvmppc_get_msr(vcpu) & MSR_PR) || sprn == 0 ||
1022 sprn == 4 || sprn == 5 || sprn == 6) {
1023 kvmppc_core_queue_program(vcpu, SRR1_PROGILL);
1024 emulated = EMULATE_AGAIN;
1025 }
1026 }
1027
1028 break;
1029 }
1030
1031 return emulated;
1032}
1033
1034u32 kvmppc_alignment_dsisr(struct kvm_vcpu *vcpu, unsigned int inst)
1035{
1036 return make_dsisr(inst);
1037}
1038
1039ulong kvmppc_alignment_dar(struct kvm_vcpu *vcpu, unsigned int inst)
1040{
1041#ifdef CONFIG_PPC_BOOK3S_64
1042 /*
1043 * Linux's fix_alignment() assumes that DAR is valid, so can we
1044 */
1045 return vcpu->arch.fault_dar;
1046#else
1047 ulong dar = 0;
1048 ulong ra = get_ra(inst);
1049 ulong rb = get_rb(inst);
1050
1051 switch (get_op(inst)) {
1052 case OP_LFS:
1053 case OP_LFD:
1054 case OP_STFD:
1055 case OP_STFS:
1056 if (ra)
1057 dar = kvmppc_get_gpr(vcpu, ra);
1058 dar += (s32)((s16)inst);
1059 break;
1060 case 31:
1061 if (ra)
1062 dar = kvmppc_get_gpr(vcpu, ra);
1063 dar += kvmppc_get_gpr(vcpu, rb);
1064 break;
1065 default:
1066 printk(KERN_INFO "KVM: Unaligned instruction 0x%x\n", inst);
1067 break;
1068 }
1069
1070 return dar;
1071#endif
1072}
1/*
2 * This program is free software; you can redistribute it and/or modify
3 * it under the terms of the GNU General Public License, version 2, as
4 * published by the Free Software Foundation.
5 *
6 * This program is distributed in the hope that it will be useful,
7 * but WITHOUT ANY WARRANTY; without even the implied warranty of
8 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
9 * GNU General Public License for more details.
10 *
11 * You should have received a copy of the GNU General Public License
12 * along with this program; if not, write to the Free Software
13 * Foundation, 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
14 *
15 * Copyright SUSE Linux Products GmbH 2009
16 *
17 * Authors: Alexander Graf <agraf@suse.de>
18 */
19
20#include <asm/kvm_ppc.h>
21#include <asm/disassemble.h>
22#include <asm/kvm_book3s.h>
23#include <asm/reg.h>
24#include <asm/switch_to.h>
25
26#define OP_19_XOP_RFID 18
27#define OP_19_XOP_RFI 50
28
29#define OP_31_XOP_MFMSR 83
30#define OP_31_XOP_MTMSR 146
31#define OP_31_XOP_MTMSRD 178
32#define OP_31_XOP_MTSR 210
33#define OP_31_XOP_MTSRIN 242
34#define OP_31_XOP_TLBIEL 274
35#define OP_31_XOP_TLBIE 306
36#define OP_31_XOP_SLBMTE 402
37#define OP_31_XOP_SLBIE 434
38#define OP_31_XOP_SLBIA 498
39#define OP_31_XOP_MFSR 595
40#define OP_31_XOP_MFSRIN 659
41#define OP_31_XOP_DCBA 758
42#define OP_31_XOP_SLBMFEV 851
43#define OP_31_XOP_EIOIO 854
44#define OP_31_XOP_SLBMFEE 915
45
46/* DCBZ is actually 1014, but we patch it to 1010 so we get a trap */
47#define OP_31_XOP_DCBZ 1010
48
49#define OP_LFS 48
50#define OP_LFD 50
51#define OP_STFS 52
52#define OP_STFD 54
53
54#define SPRN_GQR0 912
55#define SPRN_GQR1 913
56#define SPRN_GQR2 914
57#define SPRN_GQR3 915
58#define SPRN_GQR4 916
59#define SPRN_GQR5 917
60#define SPRN_GQR6 918
61#define SPRN_GQR7 919
62
63/* Book3S_32 defines mfsrin(v) - but that messes up our abstract
64 * function pointers, so let's just disable the define. */
65#undef mfsrin
66
67enum priv_level {
68 PRIV_PROBLEM = 0,
69 PRIV_SUPER = 1,
70 PRIV_HYPER = 2,
71};
72
73static bool spr_allowed(struct kvm_vcpu *vcpu, enum priv_level level)
74{
75 /* PAPR VMs only access supervisor SPRs */
76 if (vcpu->arch.papr_enabled && (level > PRIV_SUPER))
77 return false;
78
79 /* Limit user space to its own small SPR set */
80 if ((vcpu->arch.shared->msr & MSR_PR) && level > PRIV_PROBLEM)
81 return false;
82
83 return true;
84}
85
86int kvmppc_core_emulate_op(struct kvm_run *run, struct kvm_vcpu *vcpu,
87 unsigned int inst, int *advance)
88{
89 int emulated = EMULATE_DONE;
90 int rt = get_rt(inst);
91 int rs = get_rs(inst);
92 int ra = get_ra(inst);
93 int rb = get_rb(inst);
94
95 switch (get_op(inst)) {
96 case 19:
97 switch (get_xop(inst)) {
98 case OP_19_XOP_RFID:
99 case OP_19_XOP_RFI:
100 kvmppc_set_pc(vcpu, vcpu->arch.shared->srr0);
101 kvmppc_set_msr(vcpu, vcpu->arch.shared->srr1);
102 *advance = 0;
103 break;
104
105 default:
106 emulated = EMULATE_FAIL;
107 break;
108 }
109 break;
110 case 31:
111 switch (get_xop(inst)) {
112 case OP_31_XOP_MFMSR:
113 kvmppc_set_gpr(vcpu, rt, vcpu->arch.shared->msr);
114 break;
115 case OP_31_XOP_MTMSRD:
116 {
117 ulong rs_val = kvmppc_get_gpr(vcpu, rs);
118 if (inst & 0x10000) {
119 ulong new_msr = vcpu->arch.shared->msr;
120 new_msr &= ~(MSR_RI | MSR_EE);
121 new_msr |= rs_val & (MSR_RI | MSR_EE);
122 vcpu->arch.shared->msr = new_msr;
123 } else
124 kvmppc_set_msr(vcpu, rs_val);
125 break;
126 }
127 case OP_31_XOP_MTMSR:
128 kvmppc_set_msr(vcpu, kvmppc_get_gpr(vcpu, rs));
129 break;
130 case OP_31_XOP_MFSR:
131 {
132 int srnum;
133
134 srnum = kvmppc_get_field(inst, 12 + 32, 15 + 32);
135 if (vcpu->arch.mmu.mfsrin) {
136 u32 sr;
137 sr = vcpu->arch.mmu.mfsrin(vcpu, srnum);
138 kvmppc_set_gpr(vcpu, rt, sr);
139 }
140 break;
141 }
142 case OP_31_XOP_MFSRIN:
143 {
144 int srnum;
145
146 srnum = (kvmppc_get_gpr(vcpu, rb) >> 28) & 0xf;
147 if (vcpu->arch.mmu.mfsrin) {
148 u32 sr;
149 sr = vcpu->arch.mmu.mfsrin(vcpu, srnum);
150 kvmppc_set_gpr(vcpu, rt, sr);
151 }
152 break;
153 }
154 case OP_31_XOP_MTSR:
155 vcpu->arch.mmu.mtsrin(vcpu,
156 (inst >> 16) & 0xf,
157 kvmppc_get_gpr(vcpu, rs));
158 break;
159 case OP_31_XOP_MTSRIN:
160 vcpu->arch.mmu.mtsrin(vcpu,
161 (kvmppc_get_gpr(vcpu, rb) >> 28) & 0xf,
162 kvmppc_get_gpr(vcpu, rs));
163 break;
164 case OP_31_XOP_TLBIE:
165 case OP_31_XOP_TLBIEL:
166 {
167 bool large = (inst & 0x00200000) ? true : false;
168 ulong addr = kvmppc_get_gpr(vcpu, rb);
169 vcpu->arch.mmu.tlbie(vcpu, addr, large);
170 break;
171 }
172 case OP_31_XOP_EIOIO:
173 break;
174 case OP_31_XOP_SLBMTE:
175 if (!vcpu->arch.mmu.slbmte)
176 return EMULATE_FAIL;
177
178 vcpu->arch.mmu.slbmte(vcpu,
179 kvmppc_get_gpr(vcpu, rs),
180 kvmppc_get_gpr(vcpu, rb));
181 break;
182 case OP_31_XOP_SLBIE:
183 if (!vcpu->arch.mmu.slbie)
184 return EMULATE_FAIL;
185
186 vcpu->arch.mmu.slbie(vcpu,
187 kvmppc_get_gpr(vcpu, rb));
188 break;
189 case OP_31_XOP_SLBIA:
190 if (!vcpu->arch.mmu.slbia)
191 return EMULATE_FAIL;
192
193 vcpu->arch.mmu.slbia(vcpu);
194 break;
195 case OP_31_XOP_SLBMFEE:
196 if (!vcpu->arch.mmu.slbmfee) {
197 emulated = EMULATE_FAIL;
198 } else {
199 ulong t, rb_val;
200
201 rb_val = kvmppc_get_gpr(vcpu, rb);
202 t = vcpu->arch.mmu.slbmfee(vcpu, rb_val);
203 kvmppc_set_gpr(vcpu, rt, t);
204 }
205 break;
206 case OP_31_XOP_SLBMFEV:
207 if (!vcpu->arch.mmu.slbmfev) {
208 emulated = EMULATE_FAIL;
209 } else {
210 ulong t, rb_val;
211
212 rb_val = kvmppc_get_gpr(vcpu, rb);
213 t = vcpu->arch.mmu.slbmfev(vcpu, rb_val);
214 kvmppc_set_gpr(vcpu, rt, t);
215 }
216 break;
217 case OP_31_XOP_DCBA:
218 /* Gets treated as NOP */
219 break;
220 case OP_31_XOP_DCBZ:
221 {
222 ulong rb_val = kvmppc_get_gpr(vcpu, rb);
223 ulong ra_val = 0;
224 ulong addr, vaddr;
225 u32 zeros[8] = { 0, 0, 0, 0, 0, 0, 0, 0 };
226 u32 dsisr;
227 int r;
228
229 if (ra)
230 ra_val = kvmppc_get_gpr(vcpu, ra);
231
232 addr = (ra_val + rb_val) & ~31ULL;
233 if (!(vcpu->arch.shared->msr & MSR_SF))
234 addr &= 0xffffffff;
235 vaddr = addr;
236
237 r = kvmppc_st(vcpu, &addr, 32, zeros, true);
238 if ((r == -ENOENT) || (r == -EPERM)) {
239 struct kvmppc_book3s_shadow_vcpu *svcpu;
240
241 svcpu = svcpu_get(vcpu);
242 *advance = 0;
243 vcpu->arch.shared->dar = vaddr;
244 svcpu->fault_dar = vaddr;
245
246 dsisr = DSISR_ISSTORE;
247 if (r == -ENOENT)
248 dsisr |= DSISR_NOHPTE;
249 else if (r == -EPERM)
250 dsisr |= DSISR_PROTFAULT;
251
252 vcpu->arch.shared->dsisr = dsisr;
253 svcpu->fault_dsisr = dsisr;
254 svcpu_put(svcpu);
255
256 kvmppc_book3s_queue_irqprio(vcpu,
257 BOOK3S_INTERRUPT_DATA_STORAGE);
258 }
259
260 break;
261 }
262 default:
263 emulated = EMULATE_FAIL;
264 }
265 break;
266 default:
267 emulated = EMULATE_FAIL;
268 }
269
270 if (emulated == EMULATE_FAIL)
271 emulated = kvmppc_emulate_paired_single(run, vcpu);
272
273 return emulated;
274}
275
276void kvmppc_set_bat(struct kvm_vcpu *vcpu, struct kvmppc_bat *bat, bool upper,
277 u32 val)
278{
279 if (upper) {
280 /* Upper BAT */
281 u32 bl = (val >> 2) & 0x7ff;
282 bat->bepi_mask = (~bl << 17);
283 bat->bepi = val & 0xfffe0000;
284 bat->vs = (val & 2) ? 1 : 0;
285 bat->vp = (val & 1) ? 1 : 0;
286 bat->raw = (bat->raw & 0xffffffff00000000ULL) | val;
287 } else {
288 /* Lower BAT */
289 bat->brpn = val & 0xfffe0000;
290 bat->wimg = (val >> 3) & 0xf;
291 bat->pp = val & 3;
292 bat->raw = (bat->raw & 0x00000000ffffffffULL) | ((u64)val << 32);
293 }
294}
295
296static struct kvmppc_bat *kvmppc_find_bat(struct kvm_vcpu *vcpu, int sprn)
297{
298 struct kvmppc_vcpu_book3s *vcpu_book3s = to_book3s(vcpu);
299 struct kvmppc_bat *bat;
300
301 switch (sprn) {
302 case SPRN_IBAT0U ... SPRN_IBAT3L:
303 bat = &vcpu_book3s->ibat[(sprn - SPRN_IBAT0U) / 2];
304 break;
305 case SPRN_IBAT4U ... SPRN_IBAT7L:
306 bat = &vcpu_book3s->ibat[4 + ((sprn - SPRN_IBAT4U) / 2)];
307 break;
308 case SPRN_DBAT0U ... SPRN_DBAT3L:
309 bat = &vcpu_book3s->dbat[(sprn - SPRN_DBAT0U) / 2];
310 break;
311 case SPRN_DBAT4U ... SPRN_DBAT7L:
312 bat = &vcpu_book3s->dbat[4 + ((sprn - SPRN_DBAT4U) / 2)];
313 break;
314 default:
315 BUG();
316 }
317
318 return bat;
319}
320
321int kvmppc_core_emulate_mtspr(struct kvm_vcpu *vcpu, int sprn, ulong spr_val)
322{
323 int emulated = EMULATE_DONE;
324
325 switch (sprn) {
326 case SPRN_SDR1:
327 if (!spr_allowed(vcpu, PRIV_HYPER))
328 goto unprivileged;
329 to_book3s(vcpu)->sdr1 = spr_val;
330 break;
331 case SPRN_DSISR:
332 vcpu->arch.shared->dsisr = spr_val;
333 break;
334 case SPRN_DAR:
335 vcpu->arch.shared->dar = spr_val;
336 break;
337 case SPRN_HIOR:
338 to_book3s(vcpu)->hior = spr_val;
339 break;
340 case SPRN_IBAT0U ... SPRN_IBAT3L:
341 case SPRN_IBAT4U ... SPRN_IBAT7L:
342 case SPRN_DBAT0U ... SPRN_DBAT3L:
343 case SPRN_DBAT4U ... SPRN_DBAT7L:
344 {
345 struct kvmppc_bat *bat = kvmppc_find_bat(vcpu, sprn);
346
347 kvmppc_set_bat(vcpu, bat, !(sprn % 2), (u32)spr_val);
348 /* BAT writes happen so rarely that we're ok to flush
349 * everything here */
350 kvmppc_mmu_pte_flush(vcpu, 0, 0);
351 kvmppc_mmu_flush_segments(vcpu);
352 break;
353 }
354 case SPRN_HID0:
355 to_book3s(vcpu)->hid[0] = spr_val;
356 break;
357 case SPRN_HID1:
358 to_book3s(vcpu)->hid[1] = spr_val;
359 break;
360 case SPRN_HID2:
361 to_book3s(vcpu)->hid[2] = spr_val;
362 break;
363 case SPRN_HID2_GEKKO:
364 to_book3s(vcpu)->hid[2] = spr_val;
365 /* HID2.PSE controls paired single on gekko */
366 switch (vcpu->arch.pvr) {
367 case 0x00080200: /* lonestar 2.0 */
368 case 0x00088202: /* lonestar 2.2 */
369 case 0x70000100: /* gekko 1.0 */
370 case 0x00080100: /* gekko 2.0 */
371 case 0x00083203: /* gekko 2.3a */
372 case 0x00083213: /* gekko 2.3b */
373 case 0x00083204: /* gekko 2.4 */
374 case 0x00083214: /* gekko 2.4e (8SE) - retail HW2 */
375 case 0x00087200: /* broadway */
376 if (vcpu->arch.hflags & BOOK3S_HFLAG_NATIVE_PS) {
377 /* Native paired singles */
378 } else if (spr_val & (1 << 29)) { /* HID2.PSE */
379 vcpu->arch.hflags |= BOOK3S_HFLAG_PAIRED_SINGLE;
380 kvmppc_giveup_ext(vcpu, MSR_FP);
381 } else {
382 vcpu->arch.hflags &= ~BOOK3S_HFLAG_PAIRED_SINGLE;
383 }
384 break;
385 }
386 break;
387 case SPRN_HID4:
388 case SPRN_HID4_GEKKO:
389 to_book3s(vcpu)->hid[4] = spr_val;
390 break;
391 case SPRN_HID5:
392 to_book3s(vcpu)->hid[5] = spr_val;
393 /* guest HID5 set can change is_dcbz32 */
394 if (vcpu->arch.mmu.is_dcbz32(vcpu) &&
395 (mfmsr() & MSR_HV))
396 vcpu->arch.hflags |= BOOK3S_HFLAG_DCBZ32;
397 break;
398 case SPRN_GQR0:
399 case SPRN_GQR1:
400 case SPRN_GQR2:
401 case SPRN_GQR3:
402 case SPRN_GQR4:
403 case SPRN_GQR5:
404 case SPRN_GQR6:
405 case SPRN_GQR7:
406 to_book3s(vcpu)->gqr[sprn - SPRN_GQR0] = spr_val;
407 break;
408 case SPRN_ICTC:
409 case SPRN_THRM1:
410 case SPRN_THRM2:
411 case SPRN_THRM3:
412 case SPRN_CTRLF:
413 case SPRN_CTRLT:
414 case SPRN_L2CR:
415 case SPRN_MMCR0_GEKKO:
416 case SPRN_MMCR1_GEKKO:
417 case SPRN_PMC1_GEKKO:
418 case SPRN_PMC2_GEKKO:
419 case SPRN_PMC3_GEKKO:
420 case SPRN_PMC4_GEKKO:
421 case SPRN_WPAR_GEKKO:
422 break;
423unprivileged:
424 default:
425 printk(KERN_INFO "KVM: invalid SPR write: %d\n", sprn);
426#ifndef DEBUG_SPR
427 emulated = EMULATE_FAIL;
428#endif
429 break;
430 }
431
432 return emulated;
433}
434
435int kvmppc_core_emulate_mfspr(struct kvm_vcpu *vcpu, int sprn, ulong *spr_val)
436{
437 int emulated = EMULATE_DONE;
438
439 switch (sprn) {
440 case SPRN_IBAT0U ... SPRN_IBAT3L:
441 case SPRN_IBAT4U ... SPRN_IBAT7L:
442 case SPRN_DBAT0U ... SPRN_DBAT3L:
443 case SPRN_DBAT4U ... SPRN_DBAT7L:
444 {
445 struct kvmppc_bat *bat = kvmppc_find_bat(vcpu, sprn);
446
447 if (sprn % 2)
448 *spr_val = bat->raw >> 32;
449 else
450 *spr_val = bat->raw;
451
452 break;
453 }
454 case SPRN_SDR1:
455 if (!spr_allowed(vcpu, PRIV_HYPER))
456 goto unprivileged;
457 *spr_val = to_book3s(vcpu)->sdr1;
458 break;
459 case SPRN_DSISR:
460 *spr_val = vcpu->arch.shared->dsisr;
461 break;
462 case SPRN_DAR:
463 *spr_val = vcpu->arch.shared->dar;
464 break;
465 case SPRN_HIOR:
466 *spr_val = to_book3s(vcpu)->hior;
467 break;
468 case SPRN_HID0:
469 *spr_val = to_book3s(vcpu)->hid[0];
470 break;
471 case SPRN_HID1:
472 *spr_val = to_book3s(vcpu)->hid[1];
473 break;
474 case SPRN_HID2:
475 case SPRN_HID2_GEKKO:
476 *spr_val = to_book3s(vcpu)->hid[2];
477 break;
478 case SPRN_HID4:
479 case SPRN_HID4_GEKKO:
480 *spr_val = to_book3s(vcpu)->hid[4];
481 break;
482 case SPRN_HID5:
483 *spr_val = to_book3s(vcpu)->hid[5];
484 break;
485 case SPRN_CFAR:
486 case SPRN_PURR:
487 *spr_val = 0;
488 break;
489 case SPRN_GQR0:
490 case SPRN_GQR1:
491 case SPRN_GQR2:
492 case SPRN_GQR3:
493 case SPRN_GQR4:
494 case SPRN_GQR5:
495 case SPRN_GQR6:
496 case SPRN_GQR7:
497 *spr_val = to_book3s(vcpu)->gqr[sprn - SPRN_GQR0];
498 break;
499 case SPRN_THRM1:
500 case SPRN_THRM2:
501 case SPRN_THRM3:
502 case SPRN_CTRLF:
503 case SPRN_CTRLT:
504 case SPRN_L2CR:
505 case SPRN_MMCR0_GEKKO:
506 case SPRN_MMCR1_GEKKO:
507 case SPRN_PMC1_GEKKO:
508 case SPRN_PMC2_GEKKO:
509 case SPRN_PMC3_GEKKO:
510 case SPRN_PMC4_GEKKO:
511 case SPRN_WPAR_GEKKO:
512 *spr_val = 0;
513 break;
514 default:
515unprivileged:
516 printk(KERN_INFO "KVM: invalid SPR read: %d\n", sprn);
517#ifndef DEBUG_SPR
518 emulated = EMULATE_FAIL;
519#endif
520 break;
521 }
522
523 return emulated;
524}
525
526u32 kvmppc_alignment_dsisr(struct kvm_vcpu *vcpu, unsigned int inst)
527{
528 u32 dsisr = 0;
529
530 /*
531 * This is what the spec says about DSISR bits (not mentioned = 0):
532 *
533 * 12:13 [DS] Set to bits 30:31
534 * 15:16 [X] Set to bits 29:30
535 * 17 [X] Set to bit 25
536 * [D/DS] Set to bit 5
537 * 18:21 [X] Set to bits 21:24
538 * [D/DS] Set to bits 1:4
539 * 22:26 Set to bits 6:10 (RT/RS/FRT/FRS)
540 * 27:31 Set to bits 11:15 (RA)
541 */
542
543 switch (get_op(inst)) {
544 /* D-form */
545 case OP_LFS:
546 case OP_LFD:
547 case OP_STFD:
548 case OP_STFS:
549 dsisr |= (inst >> 12) & 0x4000; /* bit 17 */
550 dsisr |= (inst >> 17) & 0x3c00; /* bits 18:21 */
551 break;
552 /* X-form */
553 case 31:
554 dsisr |= (inst << 14) & 0x18000; /* bits 15:16 */
555 dsisr |= (inst << 8) & 0x04000; /* bit 17 */
556 dsisr |= (inst << 3) & 0x03c00; /* bits 18:21 */
557 break;
558 default:
559 printk(KERN_INFO "KVM: Unaligned instruction 0x%x\n", inst);
560 break;
561 }
562
563 dsisr |= (inst >> 16) & 0x03ff; /* bits 22:31 */
564
565 return dsisr;
566}
567
568ulong kvmppc_alignment_dar(struct kvm_vcpu *vcpu, unsigned int inst)
569{
570 ulong dar = 0;
571 ulong ra = get_ra(inst);
572 ulong rb = get_rb(inst);
573
574 switch (get_op(inst)) {
575 case OP_LFS:
576 case OP_LFD:
577 case OP_STFD:
578 case OP_STFS:
579 if (ra)
580 dar = kvmppc_get_gpr(vcpu, ra);
581 dar += (s32)((s16)inst);
582 break;
583 case 31:
584 if (ra)
585 dar = kvmppc_get_gpr(vcpu, ra);
586 dar += kvmppc_get_gpr(vcpu, rb);
587 break;
588 default:
589 printk(KERN_INFO "KVM: Unaligned instruction 0x%x\n", inst);
590 break;
591 }
592
593 return dar;
594}