1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
|
/******************************************************************************
* hypervisor-if.h
*
* Interface to Xeno hypervisor.
*/
#include "network.h"
#include "block.h"
#ifndef __HYPERVISOR_IF_H__
#define __HYPERVISOR_IF_H__
/*
* Virtual addresses beyond this are not modifiable by guest OSes.
* The machine->physical mapping table starts at this address, read-only
* to all domains except DOM0.
*/
#define HYPERVISOR_VIRT_START (0xFC000000UL)
#ifndef machine_to_phys_mapping
#define machine_to_phys_mapping ((unsigned long *)HYPERVISOR_VIRT_START)
#endif
typedef struct trap_info_st
{
unsigned char vector; /* exception/interrupt vector */
unsigned char dpl; /* privilege level */
unsigned short cs; /* code selector */
unsigned long address; /* code address */
} trap_info_t;
typedef struct
{
/*
* PGREQ_XXX: specified in least-significant bits of 'ptr' field.
* All requests specify relevent PTE or PT address in 'ptr'.
* Normal requests specify update value in 'value'.
* Extended requests specify command in least 8 bits of 'value'.
*/
/* A normal page-table update request. */
#define PGREQ_NORMAL 0
/* Update an entry in the machine->physical mapping table. */
#define PGREQ_MPT_UPDATE 1
/* An extended command. */
#define PGREQ_EXTENDED_COMMAND 2
/* DOM0 can make entirely unchecked updates which do not affect refcnts. */
#define PGREQ_UNCHECKED_UPDATE 3
unsigned long ptr, val; /* *ptr = val */
/* Announce a new top-level page table. */
#define PGEXT_PIN_L1_TABLE 0
#define PGEXT_PIN_L2_TABLE 1
#define PGEXT_PIN_L3_TABLE 2
#define PGEXT_PIN_L4_TABLE 3
#define PGEXT_UNPIN_TABLE 4
#define PGEXT_NEW_BASEPTR 5
#define PGEXT_TLB_FLUSH 6
#define PGEXT_INVLPG 7
#define PGEXT_CMD_MASK 255
#define PGEXT_CMD_SHIFT 8
} page_update_request_t;
/*
* Segment descriptor tables.
*/
/* 8 entries, plus a TSS entry for each CPU (up to 32 CPUs). */
#define FIRST_DOMAIN_GDT_ENTRY 40
/* These are flat segments for domain bootstrap and fallback. */
#define FLAT_RING1_CS 0x11
#define FLAT_RING1_DS 0x19
#define FLAT_RING3_CS 0x23
#define FLAT_RING3_DS 0x2b
/* EAX = vector; EBX, ECX, EDX, ESI, EDI = args 1, 2, 3, 4, 5. */
#define __HYPERVISOR_set_trap_table 0
#define __HYPERVISOR_pt_update 1
#define __HYPERVISOR_console_write 2
#define __HYPERVISOR_set_gdt 3
#define __HYPERVISOR_stack_and_ldt_switch 4
#define __HYPERVISOR_net_update 5
#define __HYPERVISOR_fpu_taskswitch 6
#define __HYPERVISOR_yield 7
#define __HYPERVISOR_exit 8
#define __HYPERVISOR_dom0_op 9
#define __HYPERVISOR_network_op 10
#define __HYPERVISOR_block_io_op 11
#define __HYPERVISOR_set_debugreg 12
#define __HYPERVISOR_get_debugreg 13
#define __HYPERVISOR_update_descriptor 14
#define __HYPERVISOR_set_fast_trap 15
#define TRAP_INSTR "int $0x82"
/* Event message note:
*
* Here, as in the interrupts to the guestos, additional network interfaces
* are defined. These definitions server as placeholders for the event bits,
* however, in the code these events will allways be referred to as shifted
* offsets from the base NET events.
*/
/* Events that a guest OS may receive from the hypervisor. */
#define EVENT_BLK_TX 0x01 /* packets for transmission. */
#define EVENT_BLK_RX 0x02 /* empty buffers for receive. */
#define EVENT_TIMER 0x04 /* a timeout has been updated. */
#define EVENT_DIE 0x08 /* OS is about to be killed. Clean up please! */
#define EVENT_DEBUG 0x10 /* request guest to dump debug info (gross!) */
#define EVENT_NET_TX 0x20 /* packets for transmission. */
#define EVENT_NET_RX 0x40 /* empty buffers for receive. */
/* should these macros and the ones below test for range violation? */
#define EVENT_NET_TX_FOR_VIF(x) (EVENT_NET_TX << (2 * x))
#define EVENT_NET_RX_FOR_VIF(x) (EVENT_NET_RX << (2 * x))
/* Bit offsets, as opposed to the above masks. */
#define _EVENT_BLK_TX 0
#define _EVENT_BLK_RX 1
#define _EVENT_TIMER 2
#define _EVENT_DIE 3
#define _EVENT_NET_TX 4
#define _EVENT_NET_RX 5
#define _EVENT_DEBUG 6
#define _EVENT_NET_TX_FOR_VIF(x) (_EVENT_NET_TX + (2 * x))
#define _EVENT_NET_RX_FOR_VIF(x) (_EVENT_NET_RX + (2 * x))
/*
* NB. We expect that this struct is smaller than a page.
*/
typedef struct shared_info_st {
/* Bitmask of outstanding event notifications hypervisor -> guest OS. */
unsigned long events;
/*
* Hypervisor will only signal event delivery via the "callback
* exception" when this value is non-zero. Hypervisor clears this when
* notiying the guest OS -- this prevents unbounded reentrancy and
* stack overflow (in this way, acts as an interrupt-enable flag).
*/
unsigned long events_enable;
/*
* Address for callbacks hypervisor -> guest OS.
* Stack frame looks like that of an interrupt.
* Code segment is the default flat selector.
* This handler will only be called when events_enable is non-zero.
*/
unsigned long event_address;
/*
* Hypervisor uses this callback when it takes a fault on behalf of
* an application. This can happen when returning from interrupts for
* example: various faults can occur when reloading the segment
* registers, and executing 'iret'.
* This callback is provided with an extended stack frame, augmented
* with saved values for segment registers %ds and %es:
* %ds, %es, %eip, %cs, %eflags [, %oldesp, %oldss]
* Code segment is the default flat selector.
* FAULTS WHEN CALLING THIS HANDLER WILL TERMINATE THE DOMAIN!!!
*/
unsigned long failsafe_address;
/*
* CPU ticks since start of day.
* `wall_time' counts CPU ticks in real time.
* `domain_time' counts CPU ticks during which this domain has run.
*/
unsigned long ticks_per_ms; /* CPU ticks per millisecond */
/*
* Current wall_time can be found by rdtsc. Only possible use of
* variable below is that it provides a timestamp for last update
* of domain_time.
*/
unsigned long long wall_time;
unsigned long long domain_time;
/*
* Timeouts for points at which guest OS would like a callback.
* This will probably be backed up by a timer heap in the guest OS.
* In Linux we use timeouts to update 'jiffies'.
*/
unsigned long long wall_timeout;
unsigned long long domain_timeout;
/*
* Real-Time Clock. This shows time, in seconds, since 1.1.1980.
* The timestamp shows the CPU 'wall time' when RTC was last read.
* Thus it allows a mapping between 'real time' and 'wall time'.
*/
unsigned long rtc_time;
unsigned long long rtc_timestamp;
} shared_info_t;
/*
* NB. We expect that this struct is smaller than a page.
*/
typedef struct start_info_st {
unsigned long nr_pages; /* total pages allocated to this domain */
shared_info_t *shared_info; /* start address of shared info struct */
unsigned long pt_base; /* VIRTUAL address of page directory */
unsigned long mod_start; /* start address of pre-loaded module */
unsigned long mod_len; /* size (bytes) of pre-loaded module */
net_ring_t *net_rings;
int num_net_rings;
blk_ring_t *blk_ring; /* block io communication rings */
unsigned char cmd_line[1]; /* variable-length */
} start_info_t;
/* For use in guest OSes. */
extern shared_info_t *HYPERVISOR_shared_info;
#endif /* __HYPERVISOR_IF_H__ */
|
