11da12ec4SLe Tan /* 21da12ec4SLe Tan * QEMU emulation of an Intel IOMMU (VT-d) 31da12ec4SLe Tan * (DMA Remapping device) 41da12ec4SLe Tan * 51da12ec4SLe Tan * Copyright (C) 2013 Knut Omang, Oracle <knut.omang@oracle.com> 61da12ec4SLe Tan * Copyright (C) 2014 Le Tan, <tamlokveer@gmail.com> 71da12ec4SLe Tan * 81da12ec4SLe Tan * This program is free software; you can redistribute it and/or modify 91da12ec4SLe Tan * it under the terms of the GNU General Public License as published by 101da12ec4SLe Tan * the Free Software Foundation; either version 2 of the License, or 111da12ec4SLe Tan * (at your option) any later version. 121da12ec4SLe Tan 131da12ec4SLe Tan * This program is distributed in the hope that it will be useful, 141da12ec4SLe Tan * but WITHOUT ANY WARRANTY; without even the implied warranty of 151da12ec4SLe Tan * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 161da12ec4SLe Tan * GNU General Public License for more details. 171da12ec4SLe Tan 181da12ec4SLe Tan * You should have received a copy of the GNU General Public License along 191da12ec4SLe Tan * with this program; if not, see <http://www.gnu.org/licenses/>. 201da12ec4SLe Tan */ 211da12ec4SLe Tan 221da12ec4SLe Tan #ifndef INTEL_IOMMU_H 231da12ec4SLe Tan #define INTEL_IOMMU_H 241da12ec4SLe Tan #include "hw/qdev.h" 251da12ec4SLe Tan #include "sysemu/dma.h" 261c7955c4SPeter Xu #include "hw/i386/x86-iommu.h" 27651e4cefSPeter Xu #include "hw/i386/ioapic.h" 28651e4cefSPeter Xu #include "hw/pci/msi.h" 298b5ed7dfSPeter Xu #include "hw/sysbus.h" 301da12ec4SLe Tan 311da12ec4SLe Tan #define TYPE_INTEL_IOMMU_DEVICE "intel-iommu" 321da12ec4SLe Tan #define INTEL_IOMMU_DEVICE(obj) \ 331da12ec4SLe Tan OBJECT_CHECK(IntelIOMMUState, (obj), TYPE_INTEL_IOMMU_DEVICE) 341da12ec4SLe Tan 351da12ec4SLe Tan /* DMAR Hardware Unit Definition address (IOMMU unit) */ 361da12ec4SLe Tan #define Q35_HOST_BRIDGE_IOMMU_ADDR 0xfed90000ULL 371da12ec4SLe Tan 381da12ec4SLe Tan #define VTD_PCI_BUS_MAX 256 391da12ec4SLe Tan #define VTD_PCI_SLOT_MAX 32 401da12ec4SLe Tan #define VTD_PCI_FUNC_MAX 8 411da12ec4SLe Tan #define VTD_PCI_SLOT(devfn) (((devfn) >> 3) & 0x1f) 421da12ec4SLe Tan #define VTD_PCI_FUNC(devfn) ((devfn) & 0x07) 431e06f131SMichael S. Tsirkin #define VTD_SID_TO_BUS(sid) (((sid) >> 8) & 0xff) 44d92fa2dcSLe Tan #define VTD_SID_TO_DEVFN(sid) ((sid) & 0xff) 451da12ec4SLe Tan 461da12ec4SLe Tan #define DMAR_REG_SIZE 0x230 471da12ec4SLe Tan #define VTD_HOST_ADDRESS_WIDTH 39 481da12ec4SLe Tan #define VTD_HAW_MASK ((1ULL << VTD_HOST_ADDRESS_WIDTH) - 1) 491da12ec4SLe Tan 50d46114f9SPeter Xu #define DMAR_REPORT_F_INTR (1) 51d46114f9SPeter Xu 52651e4cefSPeter Xu #define VTD_MSI_ADDR_HI_MASK (0xffffffff00000000ULL) 53651e4cefSPeter Xu #define VTD_MSI_ADDR_HI_SHIFT (32) 54651e4cefSPeter Xu #define VTD_MSI_ADDR_LO_MASK (0x00000000ffffffffULL) 55651e4cefSPeter Xu 56d92fa2dcSLe Tan typedef struct VTDContextEntry VTDContextEntry; 57d92fa2dcSLe Tan typedef struct VTDContextCacheEntry VTDContextCacheEntry; 581da12ec4SLe Tan typedef struct IntelIOMMUState IntelIOMMUState; 591da12ec4SLe Tan typedef struct VTDAddressSpace VTDAddressSpace; 60b5a280c0SLe Tan typedef struct VTDIOTLBEntry VTDIOTLBEntry; 617df953bdSKnut Omang typedef struct VTDBus VTDBus; 62bc38ee10SMichael S. Tsirkin typedef union VTD_IR_TableEntry VTD_IR_TableEntry; 631f91aceeSPeter Xu typedef union VTD_IR_MSIAddress VTD_IR_MSIAddress; 64651e4cefSPeter Xu typedef struct VTDIrq VTDIrq; 65651e4cefSPeter Xu typedef struct VTD_MSIMessage VTD_MSIMessage; 66*dd4d607eSPeter Xu typedef struct IntelIOMMUNotifierNode IntelIOMMUNotifierNode; 67d92fa2dcSLe Tan 68d92fa2dcSLe Tan /* Context-Entry */ 69d92fa2dcSLe Tan struct VTDContextEntry { 70d92fa2dcSLe Tan uint64_t lo; 71d92fa2dcSLe Tan uint64_t hi; 72d92fa2dcSLe Tan }; 73d92fa2dcSLe Tan 74d92fa2dcSLe Tan struct VTDContextCacheEntry { 75d92fa2dcSLe Tan /* The cache entry is obsolete if 76d92fa2dcSLe Tan * context_cache_gen!=IntelIOMMUState.context_cache_gen 77d92fa2dcSLe Tan */ 78d92fa2dcSLe Tan uint32_t context_cache_gen; 79d92fa2dcSLe Tan struct VTDContextEntry context_entry; 80d92fa2dcSLe Tan }; 81d92fa2dcSLe Tan 821da12ec4SLe Tan struct VTDAddressSpace { 837df953bdSKnut Omang PCIBus *bus; 841da12ec4SLe Tan uint8_t devfn; 851da12ec4SLe Tan AddressSpace as; 861da12ec4SLe Tan MemoryRegion iommu; 87558e0024SPeter Xu MemoryRegion root; 88558e0024SPeter Xu MemoryRegion sys_alias; 89651e4cefSPeter Xu MemoryRegion iommu_ir; /* Interrupt region: 0xfeeXXXXX */ 901da12ec4SLe Tan IntelIOMMUState *iommu_state; 91d92fa2dcSLe Tan VTDContextCacheEntry context_cache_entry; 921da12ec4SLe Tan }; 931da12ec4SLe Tan 947df953bdSKnut Omang struct VTDBus { 957df953bdSKnut Omang PCIBus* bus; /* A reference to the bus to provide translation for */ 967df953bdSKnut Omang VTDAddressSpace *dev_as[0]; /* A table of VTDAddressSpace objects indexed by devfn */ 977df953bdSKnut Omang }; 987df953bdSKnut Omang 99b5a280c0SLe Tan struct VTDIOTLBEntry { 100b5a280c0SLe Tan uint64_t gfn; 101b5a280c0SLe Tan uint16_t domain_id; 102b5a280c0SLe Tan uint64_t slpte; 103d66b969bSJason Wang uint64_t mask; 104b5a280c0SLe Tan bool read_flags; 105b5a280c0SLe Tan bool write_flags; 106b5a280c0SLe Tan }; 107b5a280c0SLe Tan 108ede9c94aSPeter Xu /* VT-d Source-ID Qualifier types */ 109ede9c94aSPeter Xu enum { 110ede9c94aSPeter Xu VTD_SQ_FULL = 0x00, /* Full SID verification */ 111ede9c94aSPeter Xu VTD_SQ_IGN_3 = 0x01, /* Ignore bit 3 */ 112ede9c94aSPeter Xu VTD_SQ_IGN_2_3 = 0x02, /* Ignore bits 2 & 3 */ 113ede9c94aSPeter Xu VTD_SQ_IGN_1_3 = 0x03, /* Ignore bits 1-3 */ 114ede9c94aSPeter Xu VTD_SQ_MAX, 115ede9c94aSPeter Xu }; 116ede9c94aSPeter Xu 117ede9c94aSPeter Xu /* VT-d Source Validation Types */ 118ede9c94aSPeter Xu enum { 119ede9c94aSPeter Xu VTD_SVT_NONE = 0x00, /* No validation */ 120ede9c94aSPeter Xu VTD_SVT_ALL = 0x01, /* Do full validation */ 121ede9c94aSPeter Xu VTD_SVT_BUS = 0x02, /* Validate bus range */ 122ede9c94aSPeter Xu VTD_SVT_MAX, 123ede9c94aSPeter Xu }; 124ede9c94aSPeter Xu 1251f91aceeSPeter Xu /* Interrupt Remapping Table Entry Definition */ 126bc38ee10SMichael S. Tsirkin union VTD_IR_TableEntry { 1271f91aceeSPeter Xu struct { 1281f91aceeSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 1291f91aceeSPeter Xu uint32_t __reserved_1:8; /* Reserved 1 */ 1301f91aceeSPeter Xu uint32_t vector:8; /* Interrupt Vector */ 1311f91aceeSPeter Xu uint32_t irte_mode:1; /* IRTE Mode */ 1321f91aceeSPeter Xu uint32_t __reserved_0:3; /* Reserved 0 */ 1331f91aceeSPeter Xu uint32_t __avail:4; /* Available spaces for software */ 1341f91aceeSPeter Xu uint32_t delivery_mode:3; /* Delivery Mode */ 1351f91aceeSPeter Xu uint32_t trigger_mode:1; /* Trigger Mode */ 1361f91aceeSPeter Xu uint32_t redir_hint:1; /* Redirection Hint */ 1371f91aceeSPeter Xu uint32_t dest_mode:1; /* Destination Mode */ 1381f91aceeSPeter Xu uint32_t fault_disable:1; /* Fault Processing Disable */ 1391f91aceeSPeter Xu uint32_t present:1; /* Whether entry present/available */ 1401f91aceeSPeter Xu #else 1411f91aceeSPeter Xu uint32_t present:1; /* Whether entry present/available */ 1421f91aceeSPeter Xu uint32_t fault_disable:1; /* Fault Processing Disable */ 1431f91aceeSPeter Xu uint32_t dest_mode:1; /* Destination Mode */ 1441f91aceeSPeter Xu uint32_t redir_hint:1; /* Redirection Hint */ 1451f91aceeSPeter Xu uint32_t trigger_mode:1; /* Trigger Mode */ 1461f91aceeSPeter Xu uint32_t delivery_mode:3; /* Delivery Mode */ 1471f91aceeSPeter Xu uint32_t __avail:4; /* Available spaces for software */ 1481f91aceeSPeter Xu uint32_t __reserved_0:3; /* Reserved 0 */ 1491f91aceeSPeter Xu uint32_t irte_mode:1; /* IRTE Mode */ 1501f91aceeSPeter Xu uint32_t vector:8; /* Interrupt Vector */ 1511f91aceeSPeter Xu uint32_t __reserved_1:8; /* Reserved 1 */ 1521f91aceeSPeter Xu #endif 1531a43713bSPeter Xu uint32_t dest_id; /* Destination ID */ 1541a43713bSPeter Xu uint16_t source_id; /* Source-ID */ 1551f91aceeSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 1561f91aceeSPeter Xu uint64_t __reserved_2:44; /* Reserved 2 */ 1571f91aceeSPeter Xu uint64_t sid_vtype:2; /* Source-ID Validation Type */ 1581f91aceeSPeter Xu uint64_t sid_q:2; /* Source-ID Qualifier */ 1591f91aceeSPeter Xu #else 1601f91aceeSPeter Xu uint64_t sid_q:2; /* Source-ID Qualifier */ 1611f91aceeSPeter Xu uint64_t sid_vtype:2; /* Source-ID Validation Type */ 1621f91aceeSPeter Xu uint64_t __reserved_2:44; /* Reserved 2 */ 1631f91aceeSPeter Xu #endif 164bc38ee10SMichael S. Tsirkin } QEMU_PACKED irte; 1651f91aceeSPeter Xu uint64_t data[2]; 1661f91aceeSPeter Xu }; 1671f91aceeSPeter Xu 1681f91aceeSPeter Xu #define VTD_IR_INT_FORMAT_COMPAT (0) /* Compatible Interrupt */ 1691f91aceeSPeter Xu #define VTD_IR_INT_FORMAT_REMAP (1) /* Remappable Interrupt */ 1701f91aceeSPeter Xu 1711f91aceeSPeter Xu /* Programming format for MSI/MSI-X addresses */ 1721f91aceeSPeter Xu union VTD_IR_MSIAddress { 1731f91aceeSPeter Xu struct { 1741f91aceeSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 1751f91aceeSPeter Xu uint32_t __head:12; /* Should always be: 0x0fee */ 1761f91aceeSPeter Xu uint32_t index_l:15; /* Interrupt index bit 14-0 */ 1771f91aceeSPeter Xu uint32_t int_mode:1; /* Interrupt format */ 1781f91aceeSPeter Xu uint32_t sub_valid:1; /* SHV: Sub-Handle Valid bit */ 1791f91aceeSPeter Xu uint32_t index_h:1; /* Interrupt index bit 15 */ 1801f91aceeSPeter Xu uint32_t __not_care:2; 1811f91aceeSPeter Xu #else 1821f91aceeSPeter Xu uint32_t __not_care:2; 1831f91aceeSPeter Xu uint32_t index_h:1; /* Interrupt index bit 15 */ 1841f91aceeSPeter Xu uint32_t sub_valid:1; /* SHV: Sub-Handle Valid bit */ 1851f91aceeSPeter Xu uint32_t int_mode:1; /* Interrupt format */ 1861f91aceeSPeter Xu uint32_t index_l:15; /* Interrupt index bit 14-0 */ 1871f91aceeSPeter Xu uint32_t __head:12; /* Should always be: 0x0fee */ 1881f91aceeSPeter Xu #endif 189bc38ee10SMichael S. Tsirkin } QEMU_PACKED addr; 1901f91aceeSPeter Xu uint32_t data; 1911f91aceeSPeter Xu }; 1921f91aceeSPeter Xu 193651e4cefSPeter Xu /* Generic IRQ entry information */ 194651e4cefSPeter Xu struct VTDIrq { 195651e4cefSPeter Xu /* Used by both IOAPIC/MSI interrupt remapping */ 196651e4cefSPeter Xu uint8_t trigger_mode; 197651e4cefSPeter Xu uint8_t vector; 198651e4cefSPeter Xu uint8_t delivery_mode; 199651e4cefSPeter Xu uint32_t dest; 200651e4cefSPeter Xu uint8_t dest_mode; 201651e4cefSPeter Xu 202651e4cefSPeter Xu /* only used by MSI interrupt remapping */ 203651e4cefSPeter Xu uint8_t redir_hint; 204651e4cefSPeter Xu uint8_t msi_addr_last_bits; 205651e4cefSPeter Xu }; 206651e4cefSPeter Xu 207651e4cefSPeter Xu struct VTD_MSIMessage { 208651e4cefSPeter Xu union { 209651e4cefSPeter Xu struct { 210651e4cefSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 211651e4cefSPeter Xu uint32_t __addr_head:12; /* 0xfee */ 212651e4cefSPeter Xu uint32_t dest:8; 213651e4cefSPeter Xu uint32_t __reserved:8; 214651e4cefSPeter Xu uint32_t redir_hint:1; 215651e4cefSPeter Xu uint32_t dest_mode:1; 216651e4cefSPeter Xu uint32_t __not_used:2; 217651e4cefSPeter Xu #else 218651e4cefSPeter Xu uint32_t __not_used:2; 219651e4cefSPeter Xu uint32_t dest_mode:1; 220651e4cefSPeter Xu uint32_t redir_hint:1; 221651e4cefSPeter Xu uint32_t __reserved:8; 222651e4cefSPeter Xu uint32_t dest:8; 223651e4cefSPeter Xu uint32_t __addr_head:12; /* 0xfee */ 224651e4cefSPeter Xu #endif 2251a43713bSPeter Xu uint32_t __addr_hi; 226651e4cefSPeter Xu } QEMU_PACKED; 227651e4cefSPeter Xu uint64_t msi_addr; 228651e4cefSPeter Xu }; 229651e4cefSPeter Xu union { 230651e4cefSPeter Xu struct { 231651e4cefSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 232651e4cefSPeter Xu uint16_t trigger_mode:1; 233651e4cefSPeter Xu uint16_t level:1; 234651e4cefSPeter Xu uint16_t __resved:3; 235651e4cefSPeter Xu uint16_t delivery_mode:3; 236651e4cefSPeter Xu uint16_t vector:8; 237651e4cefSPeter Xu #else 238651e4cefSPeter Xu uint16_t vector:8; 239651e4cefSPeter Xu uint16_t delivery_mode:3; 240651e4cefSPeter Xu uint16_t __resved:3; 241651e4cefSPeter Xu uint16_t level:1; 242651e4cefSPeter Xu uint16_t trigger_mode:1; 243651e4cefSPeter Xu #endif 2441a43713bSPeter Xu uint16_t __resved1; 245651e4cefSPeter Xu } QEMU_PACKED; 246651e4cefSPeter Xu uint32_t msi_data; 247651e4cefSPeter Xu }; 248651e4cefSPeter Xu }; 249651e4cefSPeter Xu 2501f91aceeSPeter Xu /* When IR is enabled, all MSI/MSI-X data bits should be zero */ 2511f91aceeSPeter Xu #define VTD_IR_MSI_DATA (0) 2521f91aceeSPeter Xu 253*dd4d607eSPeter Xu struct IntelIOMMUNotifierNode { 254*dd4d607eSPeter Xu VTDAddressSpace *vtd_as; 255*dd4d607eSPeter Xu QLIST_ENTRY(IntelIOMMUNotifierNode) next; 256*dd4d607eSPeter Xu }; 257*dd4d607eSPeter Xu 2581da12ec4SLe Tan /* The iommu (DMAR) device state struct */ 2591da12ec4SLe Tan struct IntelIOMMUState { 2601c7955c4SPeter Xu X86IOMMUState x86_iommu; 2611da12ec4SLe Tan MemoryRegion csrmem; 2621da12ec4SLe Tan uint8_t csr[DMAR_REG_SIZE]; /* register values */ 2631da12ec4SLe Tan uint8_t wmask[DMAR_REG_SIZE]; /* R/W bytes */ 2641da12ec4SLe Tan uint8_t w1cmask[DMAR_REG_SIZE]; /* RW1C(Write 1 to Clear) bytes */ 2651da12ec4SLe Tan uint8_t womask[DMAR_REG_SIZE]; /* WO (write only - read returns 0) */ 2661da12ec4SLe Tan uint32_t version; 2671da12ec4SLe Tan 2683b40f0e5SAviv Ben-David bool caching_mode; /* RO - is cap CM enabled? */ 2693b40f0e5SAviv Ben-David 2701da12ec4SLe Tan dma_addr_t root; /* Current root table pointer */ 2711da12ec4SLe Tan bool root_extended; /* Type of root table (extended or not) */ 2721da12ec4SLe Tan bool dmar_enabled; /* Set if DMA remapping is enabled */ 2731da12ec4SLe Tan 2741da12ec4SLe Tan uint16_t iq_head; /* Current invalidation queue head */ 2751da12ec4SLe Tan uint16_t iq_tail; /* Current invalidation queue tail */ 2761da12ec4SLe Tan dma_addr_t iq; /* Current invalidation queue pointer */ 2771da12ec4SLe Tan uint16_t iq_size; /* IQ Size in number of entries */ 2781da12ec4SLe Tan bool qi_enabled; /* Set if the QI is enabled */ 2791da12ec4SLe Tan uint8_t iq_last_desc_type; /* The type of last completed descriptor */ 2801da12ec4SLe Tan 2811da12ec4SLe Tan /* The index of the Fault Recording Register to be used next. 2821da12ec4SLe Tan * Wraps around from N-1 to 0, where N is the number of FRCD_REG. 2831da12ec4SLe Tan */ 2841da12ec4SLe Tan uint16_t next_frcd_reg; 2851da12ec4SLe Tan 2861da12ec4SLe Tan uint64_t cap; /* The value of capability reg */ 2871da12ec4SLe Tan uint64_t ecap; /* The value of extended capability reg */ 2881da12ec4SLe Tan 289d92fa2dcSLe Tan uint32_t context_cache_gen; /* Should be in [1,MAX] */ 290b5a280c0SLe Tan GHashTable *iotlb; /* IOTLB */ 291d92fa2dcSLe Tan 2921da12ec4SLe Tan MemoryRegionIOMMUOps iommu_ops; 2937df953bdSKnut Omang GHashTable *vtd_as_by_busptr; /* VTDBus objects indexed by PCIBus* reference */ 2947df953bdSKnut Omang VTDBus *vtd_as_by_bus_num[VTD_PCI_BUS_MAX]; /* VTDBus objects indexed by bus number */ 295*dd4d607eSPeter Xu /* list of registered notifiers */ 296*dd4d607eSPeter Xu QLIST_HEAD(, IntelIOMMUNotifierNode) notifiers_list; 297a5861439SPeter Xu 298a5861439SPeter Xu /* interrupt remapping */ 299a5861439SPeter Xu bool intr_enabled; /* Whether guest enabled IR */ 300a5861439SPeter Xu dma_addr_t intr_root; /* Interrupt remapping table pointer */ 301a5861439SPeter Xu uint32_t intr_size; /* Number of IR table entries */ 30228589311SJan Kiszka bool intr_eime; /* Extended interrupt mode enabled */ 303e6b6af05SRadim Krčmář OnOffAuto intr_eim; /* Toggle for EIM cabability */ 304fb506e70SRadim Krčmář bool buggy_eim; /* Force buggy EIM unless eim=off */ 3051da12ec4SLe Tan }; 3061da12ec4SLe Tan 3077df953bdSKnut Omang /* Find the VTD Address space associated with the given bus pointer, 3087df953bdSKnut Omang * create a new one if none exists 3097df953bdSKnut Omang */ 3107df953bdSKnut Omang VTDAddressSpace *vtd_find_add_as(IntelIOMMUState *s, PCIBus *bus, int devfn); 3117df953bdSKnut Omang 3121da12ec4SLe Tan #endif 313