11da12ec4SLe Tan /* 21da12ec4SLe Tan * QEMU emulation of an Intel IOMMU (VT-d) 31da12ec4SLe Tan * (DMA Remapping device) 41da12ec4SLe Tan * 51da12ec4SLe Tan * Copyright (C) 2013 Knut Omang, Oracle <knut.omang@oracle.com> 61da12ec4SLe Tan * Copyright (C) 2014 Le Tan, <tamlokveer@gmail.com> 71da12ec4SLe Tan * 81da12ec4SLe Tan * This program is free software; you can redistribute it and/or modify 91da12ec4SLe Tan * it under the terms of the GNU General Public License as published by 101da12ec4SLe Tan * the Free Software Foundation; either version 2 of the License, or 111da12ec4SLe Tan * (at your option) any later version. 121da12ec4SLe Tan 131da12ec4SLe Tan * This program is distributed in the hope that it will be useful, 141da12ec4SLe Tan * but WITHOUT ANY WARRANTY; without even the implied warranty of 151da12ec4SLe Tan * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 161da12ec4SLe Tan * GNU General Public License for more details. 171da12ec4SLe Tan 181da12ec4SLe Tan * You should have received a copy of the GNU General Public License along 191da12ec4SLe Tan * with this program; if not, see <http://www.gnu.org/licenses/>. 201da12ec4SLe Tan */ 211da12ec4SLe Tan 221da12ec4SLe Tan #ifndef INTEL_IOMMU_H 231da12ec4SLe Tan #define INTEL_IOMMU_H 241da12ec4SLe Tan #include "hw/qdev.h" 251da12ec4SLe Tan #include "sysemu/dma.h" 261c7955c4SPeter Xu #include "hw/i386/x86-iommu.h" 27651e4cefSPeter Xu #include "hw/i386/ioapic.h" 28651e4cefSPeter Xu #include "hw/pci/msi.h" 298b5ed7dfSPeter Xu #include "hw/sysbus.h" 301da12ec4SLe Tan 311da12ec4SLe Tan #define TYPE_INTEL_IOMMU_DEVICE "intel-iommu" 321da12ec4SLe Tan #define INTEL_IOMMU_DEVICE(obj) \ 331da12ec4SLe Tan OBJECT_CHECK(IntelIOMMUState, (obj), TYPE_INTEL_IOMMU_DEVICE) 341da12ec4SLe Tan 351da12ec4SLe Tan /* DMAR Hardware Unit Definition address (IOMMU unit) */ 361da12ec4SLe Tan #define Q35_HOST_BRIDGE_IOMMU_ADDR 0xfed90000ULL 371da12ec4SLe Tan 381da12ec4SLe Tan #define VTD_PCI_BUS_MAX 256 391da12ec4SLe Tan #define VTD_PCI_SLOT_MAX 32 401da12ec4SLe Tan #define VTD_PCI_FUNC_MAX 8 411da12ec4SLe Tan #define VTD_PCI_SLOT(devfn) (((devfn) >> 3) & 0x1f) 421da12ec4SLe Tan #define VTD_PCI_FUNC(devfn) ((devfn) & 0x07) 431e06f131SMichael S. Tsirkin #define VTD_SID_TO_BUS(sid) (((sid) >> 8) & 0xff) 44d92fa2dcSLe Tan #define VTD_SID_TO_DEVFN(sid) ((sid) & 0xff) 451da12ec4SLe Tan 461da12ec4SLe Tan #define DMAR_REG_SIZE 0x230 471da12ec4SLe Tan #define VTD_HOST_ADDRESS_WIDTH 39 481da12ec4SLe Tan #define VTD_HAW_MASK ((1ULL << VTD_HOST_ADDRESS_WIDTH) - 1) 491da12ec4SLe Tan 50d46114f9SPeter Xu #define DMAR_REPORT_F_INTR (1) 51d46114f9SPeter Xu 52651e4cefSPeter Xu #define VTD_MSI_ADDR_HI_MASK (0xffffffff00000000ULL) 53651e4cefSPeter Xu #define VTD_MSI_ADDR_HI_SHIFT (32) 54651e4cefSPeter Xu #define VTD_MSI_ADDR_LO_MASK (0x00000000ffffffffULL) 55651e4cefSPeter Xu 56d92fa2dcSLe Tan typedef struct VTDContextEntry VTDContextEntry; 57d92fa2dcSLe Tan typedef struct VTDContextCacheEntry VTDContextCacheEntry; 581da12ec4SLe Tan typedef struct IntelIOMMUState IntelIOMMUState; 591da12ec4SLe Tan typedef struct VTDAddressSpace VTDAddressSpace; 60b5a280c0SLe Tan typedef struct VTDIOTLBEntry VTDIOTLBEntry; 617df953bdSKnut Omang typedef struct VTDBus VTDBus; 62bc38ee10SMichael S. Tsirkin typedef union VTD_IR_TableEntry VTD_IR_TableEntry; 631f91aceeSPeter Xu typedef union VTD_IR_MSIAddress VTD_IR_MSIAddress; 64651e4cefSPeter Xu typedef struct VTDIrq VTDIrq; 65651e4cefSPeter Xu typedef struct VTD_MSIMessage VTD_MSIMessage; 66d92fa2dcSLe Tan 67d92fa2dcSLe Tan /* Context-Entry */ 68d92fa2dcSLe Tan struct VTDContextEntry { 69d92fa2dcSLe Tan uint64_t lo; 70d92fa2dcSLe Tan uint64_t hi; 71d92fa2dcSLe Tan }; 72d92fa2dcSLe Tan 73d92fa2dcSLe Tan struct VTDContextCacheEntry { 74d92fa2dcSLe Tan /* The cache entry is obsolete if 75d92fa2dcSLe Tan * context_cache_gen!=IntelIOMMUState.context_cache_gen 76d92fa2dcSLe Tan */ 77d92fa2dcSLe Tan uint32_t context_cache_gen; 78d92fa2dcSLe Tan struct VTDContextEntry context_entry; 79d92fa2dcSLe Tan }; 80d92fa2dcSLe Tan 811da12ec4SLe Tan struct VTDAddressSpace { 827df953bdSKnut Omang PCIBus *bus; 831da12ec4SLe Tan uint8_t devfn; 841da12ec4SLe Tan AddressSpace as; 851da12ec4SLe Tan MemoryRegion iommu; 86651e4cefSPeter Xu MemoryRegion iommu_ir; /* Interrupt region: 0xfeeXXXXX */ 871da12ec4SLe Tan IntelIOMMUState *iommu_state; 88d92fa2dcSLe Tan VTDContextCacheEntry context_cache_entry; 891da12ec4SLe Tan }; 901da12ec4SLe Tan 917df953bdSKnut Omang struct VTDBus { 927df953bdSKnut Omang PCIBus* bus; /* A reference to the bus to provide translation for */ 937df953bdSKnut Omang VTDAddressSpace *dev_as[0]; /* A table of VTDAddressSpace objects indexed by devfn */ 947df953bdSKnut Omang }; 957df953bdSKnut Omang 96b5a280c0SLe Tan struct VTDIOTLBEntry { 97b5a280c0SLe Tan uint64_t gfn; 98b5a280c0SLe Tan uint16_t domain_id; 99b5a280c0SLe Tan uint64_t slpte; 100d66b969bSJason Wang uint64_t mask; 101b5a280c0SLe Tan bool read_flags; 102b5a280c0SLe Tan bool write_flags; 103b5a280c0SLe Tan }; 104b5a280c0SLe Tan 105ede9c94aSPeter Xu /* VT-d Source-ID Qualifier types */ 106ede9c94aSPeter Xu enum { 107ede9c94aSPeter Xu VTD_SQ_FULL = 0x00, /* Full SID verification */ 108ede9c94aSPeter Xu VTD_SQ_IGN_3 = 0x01, /* Ignore bit 3 */ 109ede9c94aSPeter Xu VTD_SQ_IGN_2_3 = 0x02, /* Ignore bits 2 & 3 */ 110ede9c94aSPeter Xu VTD_SQ_IGN_1_3 = 0x03, /* Ignore bits 1-3 */ 111ede9c94aSPeter Xu VTD_SQ_MAX, 112ede9c94aSPeter Xu }; 113ede9c94aSPeter Xu 114ede9c94aSPeter Xu /* VT-d Source Validation Types */ 115ede9c94aSPeter Xu enum { 116ede9c94aSPeter Xu VTD_SVT_NONE = 0x00, /* No validation */ 117ede9c94aSPeter Xu VTD_SVT_ALL = 0x01, /* Do full validation */ 118ede9c94aSPeter Xu VTD_SVT_BUS = 0x02, /* Validate bus range */ 119ede9c94aSPeter Xu VTD_SVT_MAX, 120ede9c94aSPeter Xu }; 121ede9c94aSPeter Xu 1221f91aceeSPeter Xu /* Interrupt Remapping Table Entry Definition */ 123bc38ee10SMichael S. Tsirkin union VTD_IR_TableEntry { 1241f91aceeSPeter Xu struct { 1251f91aceeSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 1261f91aceeSPeter Xu uint32_t dest_id:32; /* Destination ID */ 1271f91aceeSPeter Xu uint32_t __reserved_1:8; /* Reserved 1 */ 1281f91aceeSPeter Xu uint32_t vector:8; /* Interrupt Vector */ 1291f91aceeSPeter Xu uint32_t irte_mode:1; /* IRTE Mode */ 1301f91aceeSPeter Xu uint32_t __reserved_0:3; /* Reserved 0 */ 1311f91aceeSPeter Xu uint32_t __avail:4; /* Available spaces for software */ 1321f91aceeSPeter Xu uint32_t delivery_mode:3; /* Delivery Mode */ 1331f91aceeSPeter Xu uint32_t trigger_mode:1; /* Trigger Mode */ 1341f91aceeSPeter Xu uint32_t redir_hint:1; /* Redirection Hint */ 1351f91aceeSPeter Xu uint32_t dest_mode:1; /* Destination Mode */ 1361f91aceeSPeter Xu uint32_t fault_disable:1; /* Fault Processing Disable */ 1371f91aceeSPeter Xu uint32_t present:1; /* Whether entry present/available */ 1381f91aceeSPeter Xu #else 1391f91aceeSPeter Xu uint32_t present:1; /* Whether entry present/available */ 1401f91aceeSPeter Xu uint32_t fault_disable:1; /* Fault Processing Disable */ 1411f91aceeSPeter Xu uint32_t dest_mode:1; /* Destination Mode */ 1421f91aceeSPeter Xu uint32_t redir_hint:1; /* Redirection Hint */ 1431f91aceeSPeter Xu uint32_t trigger_mode:1; /* Trigger Mode */ 1441f91aceeSPeter Xu uint32_t delivery_mode:3; /* Delivery Mode */ 1451f91aceeSPeter Xu uint32_t __avail:4; /* Available spaces for software */ 1461f91aceeSPeter Xu uint32_t __reserved_0:3; /* Reserved 0 */ 1471f91aceeSPeter Xu uint32_t irte_mode:1; /* IRTE Mode */ 1481f91aceeSPeter Xu uint32_t vector:8; /* Interrupt Vector */ 1491f91aceeSPeter Xu uint32_t __reserved_1:8; /* Reserved 1 */ 1501f91aceeSPeter Xu uint32_t dest_id:32; /* Destination ID */ 1511f91aceeSPeter Xu #endif 1521f91aceeSPeter Xu uint16_t source_id:16; /* Source-ID */ 1531f91aceeSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 1541f91aceeSPeter Xu uint64_t __reserved_2:44; /* Reserved 2 */ 1551f91aceeSPeter Xu uint64_t sid_vtype:2; /* Source-ID Validation Type */ 1561f91aceeSPeter Xu uint64_t sid_q:2; /* Source-ID Qualifier */ 1571f91aceeSPeter Xu #else 1581f91aceeSPeter Xu uint64_t sid_q:2; /* Source-ID Qualifier */ 1591f91aceeSPeter Xu uint64_t sid_vtype:2; /* Source-ID Validation Type */ 1601f91aceeSPeter Xu uint64_t __reserved_2:44; /* Reserved 2 */ 1611f91aceeSPeter Xu #endif 162bc38ee10SMichael S. Tsirkin } QEMU_PACKED irte; 1631f91aceeSPeter Xu uint64_t data[2]; 1641f91aceeSPeter Xu }; 1651f91aceeSPeter Xu 1661f91aceeSPeter Xu #define VTD_IR_INT_FORMAT_COMPAT (0) /* Compatible Interrupt */ 1671f91aceeSPeter Xu #define VTD_IR_INT_FORMAT_REMAP (1) /* Remappable Interrupt */ 1681f91aceeSPeter Xu 1691f91aceeSPeter Xu /* Programming format for MSI/MSI-X addresses */ 1701f91aceeSPeter Xu union VTD_IR_MSIAddress { 1711f91aceeSPeter Xu struct { 1721f91aceeSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 1731f91aceeSPeter Xu uint32_t __head:12; /* Should always be: 0x0fee */ 1741f91aceeSPeter Xu uint32_t index_l:15; /* Interrupt index bit 14-0 */ 1751f91aceeSPeter Xu uint32_t int_mode:1; /* Interrupt format */ 1761f91aceeSPeter Xu uint32_t sub_valid:1; /* SHV: Sub-Handle Valid bit */ 1771f91aceeSPeter Xu uint32_t index_h:1; /* Interrupt index bit 15 */ 1781f91aceeSPeter Xu uint32_t __not_care:2; 1791f91aceeSPeter Xu #else 1801f91aceeSPeter Xu uint32_t __not_care:2; 1811f91aceeSPeter Xu uint32_t index_h:1; /* Interrupt index bit 15 */ 1821f91aceeSPeter Xu uint32_t sub_valid:1; /* SHV: Sub-Handle Valid bit */ 1831f91aceeSPeter Xu uint32_t int_mode:1; /* Interrupt format */ 1841f91aceeSPeter Xu uint32_t index_l:15; /* Interrupt index bit 14-0 */ 1851f91aceeSPeter Xu uint32_t __head:12; /* Should always be: 0x0fee */ 1861f91aceeSPeter Xu #endif 187bc38ee10SMichael S. Tsirkin } QEMU_PACKED addr; 1881f91aceeSPeter Xu uint32_t data; 1891f91aceeSPeter Xu }; 1901f91aceeSPeter Xu 191651e4cefSPeter Xu /* Generic IRQ entry information */ 192651e4cefSPeter Xu struct VTDIrq { 193651e4cefSPeter Xu /* Used by both IOAPIC/MSI interrupt remapping */ 194651e4cefSPeter Xu uint8_t trigger_mode; 195651e4cefSPeter Xu uint8_t vector; 196651e4cefSPeter Xu uint8_t delivery_mode; 197651e4cefSPeter Xu uint32_t dest; 198651e4cefSPeter Xu uint8_t dest_mode; 199651e4cefSPeter Xu 200651e4cefSPeter Xu /* only used by MSI interrupt remapping */ 201651e4cefSPeter Xu uint8_t redir_hint; 202651e4cefSPeter Xu uint8_t msi_addr_last_bits; 203651e4cefSPeter Xu }; 204651e4cefSPeter Xu 205651e4cefSPeter Xu struct VTD_MSIMessage { 206651e4cefSPeter Xu union { 207651e4cefSPeter Xu struct { 208651e4cefSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 209651e4cefSPeter Xu uint32_t __addr_head:12; /* 0xfee */ 210651e4cefSPeter Xu uint32_t dest:8; 211651e4cefSPeter Xu uint32_t __reserved:8; 212651e4cefSPeter Xu uint32_t redir_hint:1; 213651e4cefSPeter Xu uint32_t dest_mode:1; 214651e4cefSPeter Xu uint32_t __not_used:2; 215651e4cefSPeter Xu #else 216651e4cefSPeter Xu uint32_t __not_used:2; 217651e4cefSPeter Xu uint32_t dest_mode:1; 218651e4cefSPeter Xu uint32_t redir_hint:1; 219651e4cefSPeter Xu uint32_t __reserved:8; 220651e4cefSPeter Xu uint32_t dest:8; 221651e4cefSPeter Xu uint32_t __addr_head:12; /* 0xfee */ 222651e4cefSPeter Xu #endif 223651e4cefSPeter Xu uint32_t __addr_hi:32; 224651e4cefSPeter Xu } QEMU_PACKED; 225651e4cefSPeter Xu uint64_t msi_addr; 226651e4cefSPeter Xu }; 227651e4cefSPeter Xu union { 228651e4cefSPeter Xu struct { 229651e4cefSPeter Xu #ifdef HOST_WORDS_BIGENDIAN 230651e4cefSPeter Xu uint16_t trigger_mode:1; 231651e4cefSPeter Xu uint16_t level:1; 232651e4cefSPeter Xu uint16_t __resved:3; 233651e4cefSPeter Xu uint16_t delivery_mode:3; 234651e4cefSPeter Xu uint16_t vector:8; 235651e4cefSPeter Xu #else 236651e4cefSPeter Xu uint16_t vector:8; 237651e4cefSPeter Xu uint16_t delivery_mode:3; 238651e4cefSPeter Xu uint16_t __resved:3; 239651e4cefSPeter Xu uint16_t level:1; 240651e4cefSPeter Xu uint16_t trigger_mode:1; 241651e4cefSPeter Xu #endif 242651e4cefSPeter Xu uint16_t __resved1:16; 243651e4cefSPeter Xu } QEMU_PACKED; 244651e4cefSPeter Xu uint32_t msi_data; 245651e4cefSPeter Xu }; 246651e4cefSPeter Xu }; 247651e4cefSPeter Xu 2481f91aceeSPeter Xu /* When IR is enabled, all MSI/MSI-X data bits should be zero */ 2491f91aceeSPeter Xu #define VTD_IR_MSI_DATA (0) 2501f91aceeSPeter Xu 2511da12ec4SLe Tan /* The iommu (DMAR) device state struct */ 2521da12ec4SLe Tan struct IntelIOMMUState { 2531c7955c4SPeter Xu X86IOMMUState x86_iommu; 2541da12ec4SLe Tan MemoryRegion csrmem; 2551da12ec4SLe Tan uint8_t csr[DMAR_REG_SIZE]; /* register values */ 2561da12ec4SLe Tan uint8_t wmask[DMAR_REG_SIZE]; /* R/W bytes */ 2571da12ec4SLe Tan uint8_t w1cmask[DMAR_REG_SIZE]; /* RW1C(Write 1 to Clear) bytes */ 2581da12ec4SLe Tan uint8_t womask[DMAR_REG_SIZE]; /* WO (write only - read returns 0) */ 2591da12ec4SLe Tan uint32_t version; 2601da12ec4SLe Tan 2611da12ec4SLe Tan dma_addr_t root; /* Current root table pointer */ 2621da12ec4SLe Tan bool root_extended; /* Type of root table (extended or not) */ 2631da12ec4SLe Tan bool dmar_enabled; /* Set if DMA remapping is enabled */ 2641da12ec4SLe Tan 2651da12ec4SLe Tan uint16_t iq_head; /* Current invalidation queue head */ 2661da12ec4SLe Tan uint16_t iq_tail; /* Current invalidation queue tail */ 2671da12ec4SLe Tan dma_addr_t iq; /* Current invalidation queue pointer */ 2681da12ec4SLe Tan uint16_t iq_size; /* IQ Size in number of entries */ 2691da12ec4SLe Tan bool qi_enabled; /* Set if the QI is enabled */ 2701da12ec4SLe Tan uint8_t iq_last_desc_type; /* The type of last completed descriptor */ 2711da12ec4SLe Tan 2721da12ec4SLe Tan /* The index of the Fault Recording Register to be used next. 2731da12ec4SLe Tan * Wraps around from N-1 to 0, where N is the number of FRCD_REG. 2741da12ec4SLe Tan */ 2751da12ec4SLe Tan uint16_t next_frcd_reg; 2761da12ec4SLe Tan 2771da12ec4SLe Tan uint64_t cap; /* The value of capability reg */ 2781da12ec4SLe Tan uint64_t ecap; /* The value of extended capability reg */ 2791da12ec4SLe Tan 280d92fa2dcSLe Tan uint32_t context_cache_gen; /* Should be in [1,MAX] */ 281b5a280c0SLe Tan GHashTable *iotlb; /* IOTLB */ 282d92fa2dcSLe Tan 2831da12ec4SLe Tan MemoryRegionIOMMUOps iommu_ops; 2847df953bdSKnut Omang GHashTable *vtd_as_by_busptr; /* VTDBus objects indexed by PCIBus* reference */ 2857df953bdSKnut Omang VTDBus *vtd_as_by_bus_num[VTD_PCI_BUS_MAX]; /* VTDBus objects indexed by bus number */ 286a5861439SPeter Xu 287a5861439SPeter Xu /* interrupt remapping */ 288a5861439SPeter Xu bool intr_enabled; /* Whether guest enabled IR */ 289a5861439SPeter Xu dma_addr_t intr_root; /* Interrupt remapping table pointer */ 290a5861439SPeter Xu uint32_t intr_size; /* Number of IR table entries */ 29128589311SJan Kiszka bool intr_eime; /* Extended interrupt mode enabled */ 292*e6b6af05SRadim Krčmář OnOffAuto intr_eim; /* Toggle for EIM cabability */ 2931da12ec4SLe Tan }; 2941da12ec4SLe Tan 2957df953bdSKnut Omang /* Find the VTD Address space associated with the given bus pointer, 2967df953bdSKnut Omang * create a new one if none exists 2977df953bdSKnut Omang */ 2987df953bdSKnut Omang VTDAddressSpace *vtd_find_add_as(IntelIOMMUState *s, PCIBus *bus, int devfn); 2997df953bdSKnut Omang 3001da12ec4SLe Tan #endif 301