11da12ec4SLe Tan /* 21da12ec4SLe Tan * QEMU emulation of an Intel IOMMU (VT-d) 31da12ec4SLe Tan * (DMA Remapping device) 41da12ec4SLe Tan * 51da12ec4SLe Tan * Copyright (C) 2013 Knut Omang, Oracle <knut.omang@oracle.com> 61da12ec4SLe Tan * Copyright (C) 2014 Le Tan, <tamlokveer@gmail.com> 71da12ec4SLe Tan * 81da12ec4SLe Tan * This program is free software; you can redistribute it and/or modify 91da12ec4SLe Tan * it under the terms of the GNU General Public License as published by 101da12ec4SLe Tan * the Free Software Foundation; either version 2 of the License, or 111da12ec4SLe Tan * (at your option) any later version. 121da12ec4SLe Tan 131da12ec4SLe Tan * This program is distributed in the hope that it will be useful, 141da12ec4SLe Tan * but WITHOUT ANY WARRANTY; without even the implied warranty of 151da12ec4SLe Tan * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 161da12ec4SLe Tan * GNU General Public License for more details. 171da12ec4SLe Tan 181da12ec4SLe Tan * You should have received a copy of the GNU General Public License along 191da12ec4SLe Tan * with this program; if not, see <http://www.gnu.org/licenses/>. 201da12ec4SLe Tan */ 211da12ec4SLe Tan 221da12ec4SLe Tan #ifndef INTEL_IOMMU_H 231da12ec4SLe Tan #define INTEL_IOMMU_H 241da12ec4SLe Tan #include "hw/qdev.h" 251da12ec4SLe Tan #include "sysemu/dma.h" 261c7955c4SPeter Xu #include "hw/i386/x86-iommu.h" 27651e4cefSPeter Xu #include "hw/i386/ioapic.h" 28651e4cefSPeter Xu #include "hw/pci/msi.h" 29*8b5ed7dfSPeter Xu #include "hw/sysbus.h" 301da12ec4SLe Tan 311da12ec4SLe Tan #define TYPE_INTEL_IOMMU_DEVICE "intel-iommu" 321da12ec4SLe Tan #define INTEL_IOMMU_DEVICE(obj) \ 331da12ec4SLe Tan OBJECT_CHECK(IntelIOMMUState, (obj), TYPE_INTEL_IOMMU_DEVICE) 341da12ec4SLe Tan 351da12ec4SLe Tan /* DMAR Hardware Unit Definition address (IOMMU unit) */ 361da12ec4SLe Tan #define Q35_HOST_BRIDGE_IOMMU_ADDR 0xfed90000ULL 371da12ec4SLe Tan 381da12ec4SLe Tan #define VTD_PCI_BUS_MAX 256 391da12ec4SLe Tan #define VTD_PCI_SLOT_MAX 32 401da12ec4SLe Tan #define VTD_PCI_FUNC_MAX 8 411da12ec4SLe Tan #define VTD_PCI_SLOT(devfn) (((devfn) >> 3) & 0x1f) 421da12ec4SLe Tan #define VTD_PCI_FUNC(devfn) ((devfn) & 0x07) 431e06f131SMichael S. Tsirkin #define VTD_SID_TO_BUS(sid) (((sid) >> 8) & 0xff) 44d92fa2dcSLe Tan #define VTD_SID_TO_DEVFN(sid) ((sid) & 0xff) 451da12ec4SLe Tan 461da12ec4SLe Tan #define DMAR_REG_SIZE 0x230 471da12ec4SLe Tan #define VTD_HOST_ADDRESS_WIDTH 39 481da12ec4SLe Tan #define VTD_HAW_MASK ((1ULL << VTD_HOST_ADDRESS_WIDTH) - 1) 491da12ec4SLe Tan 50d46114f9SPeter Xu #define DMAR_REPORT_F_INTR (1) 51d46114f9SPeter Xu 52651e4cefSPeter Xu #define VTD_MSI_ADDR_HI_MASK (0xffffffff00000000ULL) 53651e4cefSPeter Xu #define VTD_MSI_ADDR_HI_SHIFT (32) 54651e4cefSPeter Xu #define VTD_MSI_ADDR_LO_MASK (0x00000000ffffffffULL) 55651e4cefSPeter Xu 56d92fa2dcSLe Tan typedef struct VTDContextEntry VTDContextEntry; 57d92fa2dcSLe Tan typedef struct VTDContextCacheEntry VTDContextCacheEntry; 581da12ec4SLe Tan typedef struct IntelIOMMUState IntelIOMMUState; 591da12ec4SLe Tan typedef struct VTDAddressSpace VTDAddressSpace; 60b5a280c0SLe Tan typedef struct VTDIOTLBEntry VTDIOTLBEntry; 617df953bdSKnut Omang typedef struct VTDBus VTDBus; 621f91aceeSPeter Xu typedef union VTD_IRTE VTD_IRTE; 631f91aceeSPeter Xu typedef union VTD_IR_MSIAddress VTD_IR_MSIAddress; 64651e4cefSPeter Xu typedef struct VTDIrq VTDIrq; 65651e4cefSPeter Xu typedef struct VTD_MSIMessage VTD_MSIMessage; 66d92fa2dcSLe Tan 67d92fa2dcSLe Tan /* Context-Entry */ 68d92fa2dcSLe Tan struct VTDContextEntry { 69d92fa2dcSLe Tan uint64_t lo; 70d92fa2dcSLe Tan uint64_t hi; 71d92fa2dcSLe Tan }; 72d92fa2dcSLe Tan 73d92fa2dcSLe Tan struct VTDContextCacheEntry { 74d92fa2dcSLe Tan /* The cache entry is obsolete if 75d92fa2dcSLe Tan * context_cache_gen!=IntelIOMMUState.context_cache_gen 76d92fa2dcSLe Tan */ 77d92fa2dcSLe Tan uint32_t context_cache_gen; 78d92fa2dcSLe Tan struct VTDContextEntry context_entry; 79d92fa2dcSLe Tan }; 80d92fa2dcSLe Tan 811da12ec4SLe Tan struct VTDAddressSpace { 827df953bdSKnut Omang PCIBus *bus; 831da12ec4SLe Tan uint8_t devfn; 841da12ec4SLe Tan AddressSpace as; 851da12ec4SLe Tan MemoryRegion iommu; 86651e4cefSPeter Xu MemoryRegion iommu_ir; /* Interrupt region: 0xfeeXXXXX */ 871da12ec4SLe Tan IntelIOMMUState *iommu_state; 88d92fa2dcSLe Tan VTDContextCacheEntry context_cache_entry; 891da12ec4SLe Tan }; 901da12ec4SLe Tan 917df953bdSKnut Omang struct VTDBus { 927df953bdSKnut Omang PCIBus* bus; /* A reference to the bus to provide translation for */ 937df953bdSKnut Omang VTDAddressSpace *dev_as[0]; /* A table of VTDAddressSpace objects indexed by devfn */ 947df953bdSKnut Omang }; 957df953bdSKnut Omang 96b5a280c0SLe Tan struct VTDIOTLBEntry { 97b5a280c0SLe Tan uint64_t gfn; 98b5a280c0SLe Tan uint16_t domain_id; 99b5a280c0SLe Tan uint64_t slpte; 100d66b969bSJason Wang uint64_t mask; 101b5a280c0SLe Tan bool read_flags; 102b5a280c0SLe Tan bool write_flags; 103b5a280c0SLe Tan }; 104b5a280c0SLe Tan 1051f91aceeSPeter Xu /* Interrupt Remapping Table Entry Definition */ 1061f91aceeSPeter Xu union VTD_IRTE { 1071f91aceeSPeter Xu struct { 1081f91aceeSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 1091f91aceeSPeter Xu uint32_t dest_id:32; /* Destination ID */ 1101f91aceeSPeter Xu uint32_t __reserved_1:8; /* Reserved 1 */ 1111f91aceeSPeter Xu uint32_t vector:8; /* Interrupt Vector */ 1121f91aceeSPeter Xu uint32_t irte_mode:1; /* IRTE Mode */ 1131f91aceeSPeter Xu uint32_t __reserved_0:3; /* Reserved 0 */ 1141f91aceeSPeter Xu uint32_t __avail:4; /* Available spaces for software */ 1151f91aceeSPeter Xu uint32_t delivery_mode:3; /* Delivery Mode */ 1161f91aceeSPeter Xu uint32_t trigger_mode:1; /* Trigger Mode */ 1171f91aceeSPeter Xu uint32_t redir_hint:1; /* Redirection Hint */ 1181f91aceeSPeter Xu uint32_t dest_mode:1; /* Destination Mode */ 1191f91aceeSPeter Xu uint32_t fault_disable:1; /* Fault Processing Disable */ 1201f91aceeSPeter Xu uint32_t present:1; /* Whether entry present/available */ 1211f91aceeSPeter Xu #else 1221f91aceeSPeter Xu uint32_t present:1; /* Whether entry present/available */ 1231f91aceeSPeter Xu uint32_t fault_disable:1; /* Fault Processing Disable */ 1241f91aceeSPeter Xu uint32_t dest_mode:1; /* Destination Mode */ 1251f91aceeSPeter Xu uint32_t redir_hint:1; /* Redirection Hint */ 1261f91aceeSPeter Xu uint32_t trigger_mode:1; /* Trigger Mode */ 1271f91aceeSPeter Xu uint32_t delivery_mode:3; /* Delivery Mode */ 1281f91aceeSPeter Xu uint32_t __avail:4; /* Available spaces for software */ 1291f91aceeSPeter Xu uint32_t __reserved_0:3; /* Reserved 0 */ 1301f91aceeSPeter Xu uint32_t irte_mode:1; /* IRTE Mode */ 1311f91aceeSPeter Xu uint32_t vector:8; /* Interrupt Vector */ 1321f91aceeSPeter Xu uint32_t __reserved_1:8; /* Reserved 1 */ 1331f91aceeSPeter Xu uint32_t dest_id:32; /* Destination ID */ 1341f91aceeSPeter Xu #endif 1351f91aceeSPeter Xu uint16_t source_id:16; /* Source-ID */ 1361f91aceeSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 1371f91aceeSPeter Xu uint64_t __reserved_2:44; /* Reserved 2 */ 1381f91aceeSPeter Xu uint64_t sid_vtype:2; /* Source-ID Validation Type */ 1391f91aceeSPeter Xu uint64_t sid_q:2; /* Source-ID Qualifier */ 1401f91aceeSPeter Xu #else 1411f91aceeSPeter Xu uint64_t sid_q:2; /* Source-ID Qualifier */ 1421f91aceeSPeter Xu uint64_t sid_vtype:2; /* Source-ID Validation Type */ 1431f91aceeSPeter Xu uint64_t __reserved_2:44; /* Reserved 2 */ 1441f91aceeSPeter Xu #endif 1451f91aceeSPeter Xu } QEMU_PACKED; 1461f91aceeSPeter Xu uint64_t data[2]; 1471f91aceeSPeter Xu }; 1481f91aceeSPeter Xu 1491f91aceeSPeter Xu #define VTD_IR_INT_FORMAT_COMPAT (0) /* Compatible Interrupt */ 1501f91aceeSPeter Xu #define VTD_IR_INT_FORMAT_REMAP (1) /* Remappable Interrupt */ 1511f91aceeSPeter Xu 1521f91aceeSPeter Xu /* Programming format for MSI/MSI-X addresses */ 1531f91aceeSPeter Xu union VTD_IR_MSIAddress { 1541f91aceeSPeter Xu struct { 1551f91aceeSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 1561f91aceeSPeter Xu uint32_t __head:12; /* Should always be: 0x0fee */ 1571f91aceeSPeter Xu uint32_t index_l:15; /* Interrupt index bit 14-0 */ 1581f91aceeSPeter Xu uint32_t int_mode:1; /* Interrupt format */ 1591f91aceeSPeter Xu uint32_t sub_valid:1; /* SHV: Sub-Handle Valid bit */ 1601f91aceeSPeter Xu uint32_t index_h:1; /* Interrupt index bit 15 */ 1611f91aceeSPeter Xu uint32_t __not_care:2; 1621f91aceeSPeter Xu #else 1631f91aceeSPeter Xu uint32_t __not_care:2; 1641f91aceeSPeter Xu uint32_t index_h:1; /* Interrupt index bit 15 */ 1651f91aceeSPeter Xu uint32_t sub_valid:1; /* SHV: Sub-Handle Valid bit */ 1661f91aceeSPeter Xu uint32_t int_mode:1; /* Interrupt format */ 1671f91aceeSPeter Xu uint32_t index_l:15; /* Interrupt index bit 14-0 */ 1681f91aceeSPeter Xu uint32_t __head:12; /* Should always be: 0x0fee */ 1691f91aceeSPeter Xu #endif 1701f91aceeSPeter Xu } QEMU_PACKED; 1711f91aceeSPeter Xu uint32_t data; 1721f91aceeSPeter Xu }; 1731f91aceeSPeter Xu 174651e4cefSPeter Xu /* Generic IRQ entry information */ 175651e4cefSPeter Xu struct VTDIrq { 176651e4cefSPeter Xu /* Used by both IOAPIC/MSI interrupt remapping */ 177651e4cefSPeter Xu uint8_t trigger_mode; 178651e4cefSPeter Xu uint8_t vector; 179651e4cefSPeter Xu uint8_t delivery_mode; 180651e4cefSPeter Xu uint32_t dest; 181651e4cefSPeter Xu uint8_t dest_mode; 182651e4cefSPeter Xu 183651e4cefSPeter Xu /* only used by MSI interrupt remapping */ 184651e4cefSPeter Xu uint8_t redir_hint; 185651e4cefSPeter Xu uint8_t msi_addr_last_bits; 186651e4cefSPeter Xu }; 187651e4cefSPeter Xu 188651e4cefSPeter Xu struct VTD_MSIMessage { 189651e4cefSPeter Xu union { 190651e4cefSPeter Xu struct { 191651e4cefSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 192651e4cefSPeter Xu uint32_t __addr_head:12; /* 0xfee */ 193651e4cefSPeter Xu uint32_t dest:8; 194651e4cefSPeter Xu uint32_t __reserved:8; 195651e4cefSPeter Xu uint32_t redir_hint:1; 196651e4cefSPeter Xu uint32_t dest_mode:1; 197651e4cefSPeter Xu uint32_t __not_used:2; 198651e4cefSPeter Xu #else 199651e4cefSPeter Xu uint32_t __not_used:2; 200651e4cefSPeter Xu uint32_t dest_mode:1; 201651e4cefSPeter Xu uint32_t redir_hint:1; 202651e4cefSPeter Xu uint32_t __reserved:8; 203651e4cefSPeter Xu uint32_t dest:8; 204651e4cefSPeter Xu uint32_t __addr_head:12; /* 0xfee */ 205651e4cefSPeter Xu #endif 206651e4cefSPeter Xu uint32_t __addr_hi:32; 207651e4cefSPeter Xu } QEMU_PACKED; 208651e4cefSPeter Xu uint64_t msi_addr; 209651e4cefSPeter Xu }; 210651e4cefSPeter Xu union { 211651e4cefSPeter Xu struct { 212651e4cefSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 213651e4cefSPeter Xu uint16_t trigger_mode:1; 214651e4cefSPeter Xu uint16_t level:1; 215651e4cefSPeter Xu uint16_t __resved:3; 216651e4cefSPeter Xu uint16_t delivery_mode:3; 217651e4cefSPeter Xu uint16_t vector:8; 218651e4cefSPeter Xu #else 219651e4cefSPeter Xu uint16_t vector:8; 220651e4cefSPeter Xu uint16_t delivery_mode:3; 221651e4cefSPeter Xu uint16_t __resved:3; 222651e4cefSPeter Xu uint16_t level:1; 223651e4cefSPeter Xu uint16_t trigger_mode:1; 224651e4cefSPeter Xu #endif 225651e4cefSPeter Xu uint16_t __resved1:16; 226651e4cefSPeter Xu } QEMU_PACKED; 227651e4cefSPeter Xu uint32_t msi_data; 228651e4cefSPeter Xu }; 229651e4cefSPeter Xu }; 230651e4cefSPeter Xu 2311f91aceeSPeter Xu /* When IR is enabled, all MSI/MSI-X data bits should be zero */ 2321f91aceeSPeter Xu #define VTD_IR_MSI_DATA (0) 2331f91aceeSPeter Xu 2341da12ec4SLe Tan /* The iommu (DMAR) device state struct */ 2351da12ec4SLe Tan struct IntelIOMMUState { 2361c7955c4SPeter Xu X86IOMMUState x86_iommu; 2371da12ec4SLe Tan MemoryRegion csrmem; 2381da12ec4SLe Tan uint8_t csr[DMAR_REG_SIZE]; /* register values */ 2391da12ec4SLe Tan uint8_t wmask[DMAR_REG_SIZE]; /* R/W bytes */ 2401da12ec4SLe Tan uint8_t w1cmask[DMAR_REG_SIZE]; /* RW1C(Write 1 to Clear) bytes */ 2411da12ec4SLe Tan uint8_t womask[DMAR_REG_SIZE]; /* WO (write only - read returns 0) */ 2421da12ec4SLe Tan uint32_t version; 2431da12ec4SLe Tan 2441da12ec4SLe Tan dma_addr_t root; /* Current root table pointer */ 2451da12ec4SLe Tan bool root_extended; /* Type of root table (extended or not) */ 2461da12ec4SLe Tan bool dmar_enabled; /* Set if DMA remapping is enabled */ 2471da12ec4SLe Tan 2481da12ec4SLe Tan uint16_t iq_head; /* Current invalidation queue head */ 2491da12ec4SLe Tan uint16_t iq_tail; /* Current invalidation queue tail */ 2501da12ec4SLe Tan dma_addr_t iq; /* Current invalidation queue pointer */ 2511da12ec4SLe Tan uint16_t iq_size; /* IQ Size in number of entries */ 2521da12ec4SLe Tan bool qi_enabled; /* Set if the QI is enabled */ 2531da12ec4SLe Tan uint8_t iq_last_desc_type; /* The type of last completed descriptor */ 2541da12ec4SLe Tan 2551da12ec4SLe Tan /* The index of the Fault Recording Register to be used next. 2561da12ec4SLe Tan * Wraps around from N-1 to 0, where N is the number of FRCD_REG. 2571da12ec4SLe Tan */ 2581da12ec4SLe Tan uint16_t next_frcd_reg; 2591da12ec4SLe Tan 2601da12ec4SLe Tan uint64_t cap; /* The value of capability reg */ 2611da12ec4SLe Tan uint64_t ecap; /* The value of extended capability reg */ 2621da12ec4SLe Tan 263d92fa2dcSLe Tan uint32_t context_cache_gen; /* Should be in [1,MAX] */ 264b5a280c0SLe Tan GHashTable *iotlb; /* IOTLB */ 265d92fa2dcSLe Tan 2661da12ec4SLe Tan MemoryRegionIOMMUOps iommu_ops; 2677df953bdSKnut Omang GHashTable *vtd_as_by_busptr; /* VTDBus objects indexed by PCIBus* reference */ 2687df953bdSKnut Omang VTDBus *vtd_as_by_bus_num[VTD_PCI_BUS_MAX]; /* VTDBus objects indexed by bus number */ 269a5861439SPeter Xu 270a5861439SPeter Xu /* interrupt remapping */ 271a5861439SPeter Xu bool intr_enabled; /* Whether guest enabled IR */ 272a5861439SPeter Xu dma_addr_t intr_root; /* Interrupt remapping table pointer */ 273a5861439SPeter Xu uint32_t intr_size; /* Number of IR table entries */ 2741da12ec4SLe Tan }; 2751da12ec4SLe Tan 2767df953bdSKnut Omang /* Find the VTD Address space associated with the given bus pointer, 2777df953bdSKnut Omang * create a new one if none exists 2787df953bdSKnut Omang */ 2797df953bdSKnut Omang VTDAddressSpace *vtd_find_add_as(IntelIOMMUState *s, PCIBus *bus, int devfn); 2807df953bdSKnut Omang 2811da12ec4SLe Tan #endif 282