2 * Copyright © 2018, 2021 Oracle and/or its affiliates.
4 * This work is licensed under the terms of the GNU GPL, version 2 or later.
5 * See the COPYING file in the top-level directory.
9 #include "qemu/osdep.h"
11 #include "hw/remote/proxy.h"
12 #include "hw/pci/pci.h"
13 #include "qapi/error.h"
14 #include "io/channel-util.h"
15 #include "hw/qdev-properties.h"
16 #include "monitor/monitor.h"
17 #include "migration/blocker.h"
18 #include "qemu/sockets.h"
19 #include "hw/remote/mpqemu-link.h"
20 #include "qemu/error-report.h"
21 #include "hw/remote/proxy-memory-listener.h"
22 #include "qom/object.h"
23 #include "qemu/event_notifier.h"
24 #include "sysemu/kvm.h"
26 static void probe_pci_info(PCIDevice
*dev
, Error
**errp
);
27 static void proxy_device_reset(DeviceState
*dev
);
29 static void proxy_intx_update(PCIDevice
*pci_dev
)
31 PCIProxyDev
*dev
= PCI_PROXY_DEV(pci_dev
);
33 int pin
= pci_get_byte(pci_dev
->config
+ PCI_INTERRUPT_PIN
) - 1;
35 if (dev
->virq
!= -1) {
36 kvm_irqchip_remove_irqfd_notifier_gsi(kvm_state
, &dev
->intr
, dev
->virq
);
40 route
= pci_device_route_intx_to_irq(pci_dev
, pin
);
42 dev
->virq
= route
.irq
;
44 if (dev
->virq
!= -1) {
45 kvm_irqchip_add_irqfd_notifier_gsi(kvm_state
, &dev
->intr
,
46 &dev
->resample
, dev
->virq
);
50 static void setup_irqfd(PCIProxyDev
*dev
)
52 PCIDevice
*pci_dev
= PCI_DEVICE(dev
);
54 Error
*local_err
= NULL
;
56 event_notifier_init(&dev
->intr
, 0);
57 event_notifier_init(&dev
->resample
, 0);
59 memset(&msg
, 0, sizeof(MPQemuMsg
));
60 msg
.cmd
= MPQEMU_CMD_SET_IRQFD
;
62 msg
.fds
[0] = event_notifier_get_fd(&dev
->intr
);
63 msg
.fds
[1] = event_notifier_get_fd(&dev
->resample
);
66 if (!mpqemu_msg_send(&msg
, dev
->ioc
, &local_err
)) {
67 error_report_err(local_err
);
72 proxy_intx_update(pci_dev
);
74 pci_device_set_intx_routing_notifier(pci_dev
, proxy_intx_update
);
77 static void pci_proxy_dev_realize(PCIDevice
*device
, Error
**errp
)
80 PCIProxyDev
*dev
= PCI_PROXY_DEV(device
);
81 uint8_t *pci_conf
= device
->config
;
85 error_setg(errp
, "fd parameter not specified for %s",
90 fd
= monitor_fd_param(monitor_cur(), dev
->fd
, errp
);
92 error_prepend(errp
, "proxy: unable to parse fd %s: ", dev
->fd
);
96 if (!fd_is_socket(fd
)) {
97 error_setg(errp
, "proxy: fd %d is not a socket", fd
);
102 dev
->ioc
= qio_channel_new_fd(fd
, errp
);
108 error_setg(&dev
->migration_blocker
, "%s does not support migration",
110 if (migrate_add_blocker(&dev
->migration_blocker
, errp
) < 0) {
111 object_unref(dev
->ioc
);
115 qemu_mutex_init(&dev
->io_mutex
);
116 qio_channel_set_blocking(dev
->ioc
, true, NULL
);
118 pci_conf
[PCI_LATENCY_TIMER
] = 0xff;
119 pci_conf
[PCI_INTERRUPT_PIN
] = 0x01;
121 proxy_memory_listener_configure(&dev
->proxy_listener
, dev
->ioc
);
125 probe_pci_info(PCI_DEVICE(dev
), errp
);
128 static void pci_proxy_dev_exit(PCIDevice
*pdev
)
130 PCIProxyDev
*dev
= PCI_PROXY_DEV(pdev
);
133 qio_channel_close(dev
->ioc
, NULL
);
136 migrate_del_blocker(&dev
->migration_blocker
);
138 proxy_memory_listener_deconfigure(&dev
->proxy_listener
);
140 event_notifier_cleanup(&dev
->intr
);
141 event_notifier_cleanup(&dev
->resample
);
144 static void config_op_send(PCIProxyDev
*pdev
, uint32_t addr
, uint32_t *val
,
145 int len
, unsigned int op
)
147 MPQemuMsg msg
= { 0 };
148 uint64_t ret
= -EINVAL
;
149 Error
*local_err
= NULL
;
152 msg
.data
.pci_conf_data
.addr
= addr
;
153 msg
.data
.pci_conf_data
.val
= (op
== MPQEMU_CMD_PCI_CFGWRITE
) ? *val
: 0;
154 msg
.data
.pci_conf_data
.len
= len
;
155 msg
.size
= sizeof(PciConfDataMsg
);
157 ret
= mpqemu_msg_send_and_await_reply(&msg
, pdev
, &local_err
);
159 error_report_err(local_err
);
162 if (ret
== UINT64_MAX
) {
163 error_report("Failed to perform PCI config %s operation",
164 (op
== MPQEMU_CMD_PCI_CFGREAD
) ? "READ" : "WRITE");
167 if (op
== MPQEMU_CMD_PCI_CFGREAD
) {
168 *val
= (uint32_t)ret
;
172 static uint32_t pci_proxy_read_config(PCIDevice
*d
, uint32_t addr
, int len
)
176 config_op_send(PCI_PROXY_DEV(d
), addr
, &val
, len
, MPQEMU_CMD_PCI_CFGREAD
);
181 static void pci_proxy_write_config(PCIDevice
*d
, uint32_t addr
, uint32_t val
,
185 * Some of the functions access the copy of remote device's PCI config
186 * space which is cached in the proxy device. Therefore, maintain
189 pci_default_write_config(d
, addr
, val
, len
);
191 config_op_send(PCI_PROXY_DEV(d
), addr
, &val
, len
, MPQEMU_CMD_PCI_CFGWRITE
);
194 static Property proxy_properties
[] = {
195 DEFINE_PROP_STRING("fd", PCIProxyDev
, fd
),
196 DEFINE_PROP_END_OF_LIST(),
199 static void pci_proxy_dev_class_init(ObjectClass
*klass
, void *data
)
201 DeviceClass
*dc
= DEVICE_CLASS(klass
);
202 PCIDeviceClass
*k
= PCI_DEVICE_CLASS(klass
);
204 k
->realize
= pci_proxy_dev_realize
;
205 k
->exit
= pci_proxy_dev_exit
;
206 k
->config_read
= pci_proxy_read_config
;
207 k
->config_write
= pci_proxy_write_config
;
209 device_class_set_legacy_reset(dc
, proxy_device_reset
);
211 device_class_set_props(dc
, proxy_properties
);
214 static const TypeInfo pci_proxy_dev_type_info
= {
215 .name
= TYPE_PCI_PROXY_DEV
,
216 .parent
= TYPE_PCI_DEVICE
,
217 .instance_size
= sizeof(PCIProxyDev
),
218 .class_init
= pci_proxy_dev_class_init
,
219 .interfaces
= (InterfaceInfo
[]) {
220 { INTERFACE_CONVENTIONAL_PCI_DEVICE
},
225 static void pci_proxy_dev_register_types(void)
227 type_register_static(&pci_proxy_dev_type_info
);
230 type_init(pci_proxy_dev_register_types
)
232 static void send_bar_access_msg(PCIProxyDev
*pdev
, MemoryRegion
*mr
,
233 bool write
, hwaddr addr
, uint64_t *val
,
234 unsigned size
, bool memory
)
236 MPQemuMsg msg
= { 0 };
238 Error
*local_err
= NULL
;
240 msg
.size
= sizeof(BarAccessMsg
);
241 msg
.data
.bar_access
.addr
= mr
->addr
+ addr
;
242 msg
.data
.bar_access
.size
= size
;
243 msg
.data
.bar_access
.memory
= memory
;
246 msg
.cmd
= MPQEMU_CMD_BAR_WRITE
;
247 msg
.data
.bar_access
.val
= *val
;
249 msg
.cmd
= MPQEMU_CMD_BAR_READ
;
252 ret
= mpqemu_msg_send_and_await_reply(&msg
, pdev
, &local_err
);
254 error_report_err(local_err
);
262 static void proxy_bar_write(void *opaque
, hwaddr addr
, uint64_t val
,
265 ProxyMemoryRegion
*pmr
= opaque
;
267 send_bar_access_msg(pmr
->dev
, &pmr
->mr
, true, addr
, &val
, size
,
271 static uint64_t proxy_bar_read(void *opaque
, hwaddr addr
, unsigned size
)
273 ProxyMemoryRegion
*pmr
= opaque
;
276 send_bar_access_msg(pmr
->dev
, &pmr
->mr
, false, addr
, &val
, size
,
282 const MemoryRegionOps proxy_mr_ops
= {
283 .read
= proxy_bar_read
,
284 .write
= proxy_bar_write
,
285 .endianness
= DEVICE_NATIVE_ENDIAN
,
287 .min_access_size
= 1,
288 .max_access_size
= 8,
292 static void probe_pci_info(PCIDevice
*dev
, Error
**errp
)
294 PCIDeviceClass
*pc
= PCI_DEVICE_GET_CLASS(dev
);
295 uint32_t orig_val
, new_val
, base_class
, val
;
296 PCIProxyDev
*pdev
= PCI_PROXY_DEV(dev
);
297 DeviceClass
*dc
= DEVICE_CLASS(pc
);
301 config_op_send(pdev
, PCI_VENDOR_ID
, &val
, 2, MPQEMU_CMD_PCI_CFGREAD
);
302 pc
->vendor_id
= (uint16_t)val
;
304 config_op_send(pdev
, PCI_DEVICE_ID
, &val
, 2, MPQEMU_CMD_PCI_CFGREAD
);
305 pc
->device_id
= (uint16_t)val
;
307 config_op_send(pdev
, PCI_CLASS_DEVICE
, &val
, 2, MPQEMU_CMD_PCI_CFGREAD
);
308 pc
->class_id
= (uint16_t)val
;
310 config_op_send(pdev
, PCI_SUBSYSTEM_ID
, &val
, 2, MPQEMU_CMD_PCI_CFGREAD
);
311 pc
->subsystem_id
= (uint16_t)val
;
313 base_class
= pc
->class_id
>> 4;
314 switch (base_class
) {
315 case PCI_BASE_CLASS_BRIDGE
:
316 set_bit(DEVICE_CATEGORY_BRIDGE
, dc
->categories
);
318 case PCI_BASE_CLASS_STORAGE
:
319 set_bit(DEVICE_CATEGORY_STORAGE
, dc
->categories
);
321 case PCI_BASE_CLASS_NETWORK
:
322 case PCI_BASE_CLASS_WIRELESS
:
323 set_bit(DEVICE_CATEGORY_NETWORK
, dc
->categories
);
325 case PCI_BASE_CLASS_INPUT
:
326 set_bit(DEVICE_CATEGORY_INPUT
, dc
->categories
);
328 case PCI_BASE_CLASS_DISPLAY
:
329 set_bit(DEVICE_CATEGORY_DISPLAY
, dc
->categories
);
331 case PCI_BASE_CLASS_PROCESSOR
:
332 set_bit(DEVICE_CATEGORY_CPU
, dc
->categories
);
335 set_bit(DEVICE_CATEGORY_MISC
, dc
->categories
);
339 for (i
= 0; i
< PCI_NUM_REGIONS
; i
++) {
340 config_op_send(pdev
, PCI_BASE_ADDRESS_0
+ (4 * i
), &orig_val
, 4,
341 MPQEMU_CMD_PCI_CFGREAD
);
342 new_val
= 0xffffffff;
343 config_op_send(pdev
, PCI_BASE_ADDRESS_0
+ (4 * i
), &new_val
, 4,
344 MPQEMU_CMD_PCI_CFGWRITE
);
345 config_op_send(pdev
, PCI_BASE_ADDRESS_0
+ (4 * i
), &new_val
, 4,
346 MPQEMU_CMD_PCI_CFGREAD
);
347 size
= (~(new_val
& 0xFFFFFFF0)) + 1;
348 config_op_send(pdev
, PCI_BASE_ADDRESS_0
+ (4 * i
), &orig_val
, 4,
349 MPQEMU_CMD_PCI_CFGWRITE
);
350 type
= (new_val
& 0x1) ?
351 PCI_BASE_ADDRESS_SPACE_IO
: PCI_BASE_ADDRESS_SPACE_MEMORY
;
354 g_autofree
char *name
= g_strdup_printf("bar-region-%d", i
);
355 pdev
->region
[i
].dev
= pdev
;
356 pdev
->region
[i
].present
= true;
357 if (type
== PCI_BASE_ADDRESS_SPACE_MEMORY
) {
358 pdev
->region
[i
].memory
= true;
360 memory_region_init_io(&pdev
->region
[i
].mr
, OBJECT(pdev
),
361 &proxy_mr_ops
, &pdev
->region
[i
],
363 pci_register_bar(dev
, i
, type
, &pdev
->region
[i
].mr
);
368 static void proxy_device_reset(DeviceState
*dev
)
370 PCIProxyDev
*pdev
= PCI_PROXY_DEV(dev
);
371 MPQemuMsg msg
= { 0 };
372 Error
*local_err
= NULL
;
374 msg
.cmd
= MPQEMU_CMD_DEVICE_RESET
;
377 mpqemu_msg_send_and_await_reply(&msg
, pdev
, &local_err
);
379 error_report_err(local_err
);