From: Andrew Cooper <andrew.cooper3@citrix.com>
To: Xen-devel <xen-devel@lists.xenproject.org>
Cc: "Andrew Cooper" <andrew.cooper3@citrix.com>,
"Wei Liu" <wl@xen.org>, "Jan Beulich" <JBeulich@suse.com>,
"Roger Pau Monné" <roger.pau@citrix.com>
Subject: [Xen-devel] [PATCH 1/8] libx86: Introduce x86_cpu_policies_are_compatible()
Date: Wed, 11 Sep 2019 21:04:57 +0100 [thread overview]
Message-ID: <20190911200504.5693-2-andrew.cooper3@citrix.com> (raw)
In-Reply-To: <20190911200504.5693-1-andrew.cooper3@citrix.com>
This helper will eventually be the core "can a guest confiured like this run
on the CPU?" logic. For now, it is just enough of a stub to allow us to
replace the hypercall interface while retaining the previous behaviour.
It will be expanded as various other bits of CPUID handling get cleaned up.
Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
---
CC: Jan Beulich <JBeulich@suse.com>
CC: Wei Liu <wl@xen.org>
CC: Roger Pau Monné <roger.pau@citrix.com>
---
tools/tests/cpu-policy/Makefile | 2 +-
tools/tests/cpu-policy/test-cpu-policy.c | 111 ++++++++++++++++++++++++++++++-
xen/include/xen/lib/x86/cpu-policy.h | 19 ++++++
xen/lib/x86/Makefile | 1 +
xen/lib/x86/policy.c | 53 +++++++++++++++
5 files changed, 183 insertions(+), 3 deletions(-)
create mode 100644 xen/lib/x86/policy.c
diff --git a/tools/tests/cpu-policy/Makefile b/tools/tests/cpu-policy/Makefile
index fb548c9b9a..70ff154da6 100644
--- a/tools/tests/cpu-policy/Makefile
+++ b/tools/tests/cpu-policy/Makefile
@@ -39,7 +39,7 @@ CFLAGS += $(APPEND_CFLAGS)
vpath %.c ../../../xen/lib/x86
-test-cpu-policy: test-cpu-policy.o msr.o cpuid.o
+test-cpu-policy: test-cpu-policy.o msr.o cpuid.o policy.o
$(CC) $(CFLAGS) $^ -o $@
-include $(DEPS_INCLUDE)
diff --git a/tools/tests/cpu-policy/test-cpu-policy.c b/tools/tests/cpu-policy/test-cpu-policy.c
index fe00cd4276..10cfa7cd97 100644
--- a/tools/tests/cpu-policy/test-cpu-policy.c
+++ b/tools/tests/cpu-policy/test-cpu-policy.c
@@ -9,8 +9,7 @@
#include <xen-tools/libs.h>
#include <xen/asm/x86-vendors.h>
-#include <xen/lib/x86/cpuid.h>
-#include <xen/lib/x86/msr.h>
+#include <xen/lib/x86/cpu-policy.h>
#include <xen/domctl.h>
static unsigned int nr_failures;
@@ -503,6 +502,111 @@ static void test_cpuid_out_of_range_clearing(void)
}
}
+static void test_is_compatible_success(void)
+{
+ static struct test {
+ const char *name;
+ struct cpuid_policy host_cpuid;
+ struct cpuid_policy guest_cpuid;
+ struct msr_policy host_msr;
+ struct msr_policy guest_msr;
+ } tests[] = {
+ {
+ .name = "Host CPUID faulting, Guest not",
+ .host_msr = {
+ .plaform_info.cpuid_faulting = true,
+ },
+ },
+ {
+ .name = "Host CPUID faulting, Guest wanted",
+ .host_msr = {
+ .plaform_info.cpuid_faulting = true,
+ },
+ .guest_msr = {
+ .plaform_info.cpuid_faulting = true,
+ },
+ },
+ };
+ struct cpu_policy_errors no_errors = INIT_CPU_POLICY_ERRORS;
+
+ printf("Testing policy compatibility success:\n");
+
+ for ( size_t i = 0; i < ARRAY_SIZE(tests); ++i )
+ {
+ struct test *t = &tests[i];
+ struct cpu_policy sys = {
+ &t->host_cpuid,
+ &t->host_msr,
+ }, new = {
+ &t->guest_cpuid,
+ &t->guest_msr,
+ };
+ struct cpu_policy_errors e = INIT_CPU_POLICY_ERRORS;
+ int res = x86_cpu_policies_are_compatible(&sys, &new, &e);
+
+ /* Check the expected error output. */
+ if ( res != 0 || memcmp(&no_errors, &e, sizeof(no_errors)) )
+ fail(" Test '%s' expected no errors\n"
+ " got res %d { leaf %08x, subleaf %08x, msr %08x }\n",
+ t->name, res, e.leaf, e.subleaf, e.msr);
+ }
+}
+
+static void test_is_compatible_failure(void)
+{
+ static struct test {
+ const char *name;
+ struct cpuid_policy host_cpuid;
+ struct cpuid_policy guest_cpuid;
+ struct msr_policy host_msr;
+ struct msr_policy guest_msr;
+ struct cpu_policy_errors e;
+ } tests[] = {
+ {
+ .name = "Host basic.max_leaf out of range",
+ .guest_cpuid.basic.max_leaf = 1,
+ .e = { 0, -1, -1 },
+ },
+ {
+ .name = "Host extd.max_leaf out of range",
+ .guest_cpuid.extd.max_leaf = 1,
+ .e = { 0x80000008, -1, -1 },
+ },
+ {
+ .name = "Host no CPUID faulting, Guest wanted",
+ .guest_msr = {
+ .plaform_info.cpuid_faulting = true,
+ },
+ .e = { -1, -1, 0xce },
+ },
+ };
+
+ printf("Testing policy compatibility failure:\n");
+
+ for ( size_t i = 0; i < ARRAY_SIZE(tests); ++i )
+ {
+ struct test *t = &tests[i];
+ struct cpu_policy sys = {
+ &t->host_cpuid,
+ &t->host_msr,
+ }, new = {
+ &t->guest_cpuid,
+ &t->guest_msr,
+ };
+ struct cpu_policy_errors e = INIT_CPU_POLICY_ERRORS;
+ int res = x86_cpu_policies_are_compatible(&sys, &new, &e);
+
+ /* Check the expected error output. */
+ if ( res == 0 || memcmp(&t->e, &e, sizeof(t->e)) )
+ fail(" Test '%s' res %d\n"
+ " expected { leaf %08x, subleaf %08x, msr %08x }\n"
+ " got { leaf %08x, subleaf %08x, msr %08x }\n",
+ t->name, res,
+ t->e.leaf, t->e.subleaf, t->e.msr,
+ e.leaf, e.subleaf, e.msr);
+ }
+}
+
int main(int argc, char **argv)
{
printf("CPU Policy unit tests\n");
@@ -516,6 +620,9 @@ int main(int argc, char **argv)
test_msr_serialise_success();
test_msr_deserialise_failure();
+ test_is_compatible_success();
+ test_is_compatible_failure();
+
if ( nr_failures )
printf("Done: %u failures\n", nr_failures);
else
diff --git a/xen/include/xen/lib/x86/cpu-policy.h b/xen/include/xen/lib/x86/cpu-policy.h
index 6f07c4b493..65ec71835b 100644
--- a/xen/include/xen/lib/x86/cpu-policy.h
+++ b/xen/include/xen/lib/x86/cpu-policy.h
@@ -11,6 +11,25 @@ struct cpu_policy
struct msr_policy *msr;
};
+struct cpu_policy_errors
+{
+ uint32_t leaf, subleaf;
+ uint32_t msr;
+};
+
+#define INIT_CPU_POLICY_ERRORS { ~0u, ~0u, ~0u }
+
+/*
+ * Calculate whether two policies are compatible.
+ *
+ * i.e. Can a VM configured with @guest run on a CPU supporting @host.
+ *
+ * For typical usage, @host should be a system policy.
+ */
+int x86_cpu_policies_are_compatible(const struct cpu_policy *host,
+ const struct cpu_policy *guest,
+ struct cpu_policy_errors *e);
+
#endif /* !XEN_LIB_X86_POLICIES_H */
/*
diff --git a/xen/lib/x86/Makefile b/xen/lib/x86/Makefile
index 2f9691e964..780ea05db1 100644
--- a/xen/lib/x86/Makefile
+++ b/xen/lib/x86/Makefile
@@ -1,2 +1,3 @@
obj-y += cpuid.o
obj-y += msr.o
+obj-y += policy.o
diff --git a/xen/lib/x86/policy.c b/xen/lib/x86/policy.c
new file mode 100644
index 0000000000..3155e07a7c
--- /dev/null
+++ b/xen/lib/x86/policy.c
@@ -0,0 +1,53 @@
+#include "private.h"
+
+#include <xen/lib/x86/cpu-policy.h>
+
+int x86_cpu_policies_are_compatible(const struct cpu_policy *host,
+ const struct cpu_policy *guest,
+ struct cpu_policy_errors *e)
+{
+ uint32_t leaf = -1, subleaf = -1, msr = -1;
+ int ret = -EINVAL;
+
+#define NA XEN_CPUID_NO_SUBLEAF
+#define FAIL_CPUID(l, s) do { leaf = (l); subleaf = (s); goto out; } while ( 0 )
+#define FAIL_MSR(m) do { msr = (m); goto out; } while ( 0 )
+
+ if ( guest->cpuid->basic.max_leaf > host->cpuid->basic.max_leaf )
+ FAIL_CPUID(0, NA);
+
+ if ( guest->cpuid->extd.max_leaf > host->cpuid->extd.max_leaf )
+ FAIL_CPUID(0x80000008, NA);
+
+ /* TODO: Audit more CPUID data. */
+
+ if ( ~host->msr->plaform_info.raw & guest->msr->plaform_info.raw )
+ FAIL_MSR(MSR_INTEL_PLATFORM_INFO);
+
+#undef FAIL_MSR
+#undef FAIL_CPUID
+#undef NA
+
+ /* Success. */
+ ret = 0;
+
+ out:
+ if ( ret && e )
+ {
+ e->leaf = leaf;
+ e->subleaf = subleaf;
+ e->msr = msr;
+ }
+
+ return ret;
+}
+
+/*
+ * Local variables:
+ * mode: C
+ * c-file-style: "BSD"
+ * c-basic-offset: 4
+ * tab-width: 4
+ * indent-tabs-mode: nil
+ * End:
+ */
--
2.11.0
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xenproject.org
https://lists.xenproject.org/mailman/listinfo/xen-devel
next prev parent reply other threads:[~2019-09-11 20:05 UTC|newest]
Thread overview: 36+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-09-11 20:04 [Xen-devel] [PATCH 0/8] x86/cpuid: Switch to using XEN_DOMCTL_set_cpumsr_policy Andrew Cooper
2019-09-11 20:04 ` Andrew Cooper [this message]
2019-09-12 7:43 ` [Xen-devel] [PATCH 1/8] libx86: Introduce x86_cpu_policies_are_compatible() Jan Beulich
2019-09-12 7:59 ` Andrew Cooper
2019-09-12 8:22 ` Jan Beulich
2019-09-12 11:41 ` Andrew Cooper
2019-09-11 20:04 ` [Xen-devel] [PATCH 2/8] x86/cpuid: Split update_domain_cpuid_info() in half Andrew Cooper
2019-09-12 7:52 ` Jan Beulich
2019-09-12 8:07 ` Andrew Cooper
2019-09-11 20:04 ` [Xen-devel] [PATCH 3/8] x86/domctl: Implement XEN_DOMCTL_set_cpumsr_policy Andrew Cooper
2019-09-12 8:06 ` Jan Beulich
2019-09-12 13:15 ` Andrew Cooper
2019-09-12 13:20 ` Jan Beulich
2019-09-12 16:34 ` Andrew Cooper
2019-09-11 20:05 ` [Xen-devel] [PATCH 4/8] tools/libxc: Pre-cleanup for xc_cpuid_{set, apply_policy}() Andrew Cooper
2019-09-12 8:09 ` Jan Beulich
2019-09-12 8:17 ` Jan Beulich
2019-09-12 8:38 ` Andrew Cooper
2019-09-11 20:05 ` [Xen-devel] [PATCH 5/8] tools/libxc: Rework xc_cpuid_set() to use {get, set}_cpu_policy() Andrew Cooper
2019-09-12 8:19 ` Jan Beulich
2019-09-12 8:36 ` Andrew Cooper
2019-09-12 9:11 ` Jan Beulich
2019-09-12 13:21 ` Andrew Cooper
2019-09-11 20:05 ` [Xen-devel] [PATCH 6/8] tools/libxc: Rework xc_cpuid_apply_policy() " Andrew Cooper
2019-09-12 9:02 ` Jan Beulich
2019-09-12 13:47 ` Andrew Cooper
2019-09-11 20:05 ` [Xen-devel] [PATCH 7/8] x86/domctl: Drop XEN_DOMCTL_set_cpuid Andrew Cooper
2019-09-12 9:04 ` Jan Beulich
2019-09-11 20:05 ` [Xen-devel] [PATCH 8/8] x86/cpuid: Enable CPUID Faulting for the control domain Andrew Cooper
2019-09-12 9:07 ` Jan Beulich
2019-09-12 9:28 ` Andrew Cooper
2019-09-12 18:55 ` [Xen-devel] [PATCH v2 8/8] x86/cpuid: Enable CPUID Faulting for the control domain by default Andrew Cooper
2019-09-13 6:38 ` Jan Beulich
2019-09-13 14:56 ` Andrew Cooper
2019-09-12 18:55 ` [Xen-devel] [PATCH v2 0.5/8] libx86: Proactively initialise error pointers Andrew Cooper
2019-09-13 6:20 ` Jan Beulich
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190911200504.5693-2-andrew.cooper3@citrix.com \
--to=andrew.cooper3@citrix.com \
--cc=JBeulich@suse.com \
--cc=roger.pau@citrix.com \
--cc=wl@xen.org \
--cc=xen-devel@lists.xenproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).