1 #ifndef VMX_H 2 #define VMX_H 3 4 /* 5 * vmx.h: VMX Architecture related definitions 6 * Copyright (c) 2004, Intel Corporation. 7 * 8 * This program is free software; you can redistribute it and/or modify it 9 * under the terms and conditions of the GNU General Public License, 10 * version 2, as published by the Free Software Foundation. 11 * 12 * This program is distributed in the hope it will be useful, but WITHOUT 13 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or 14 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for 15 * more details. 16 * 17 * You should have received a copy of the GNU General Public License along with 18 * this program; if not, write to the Free Software Foundation, Inc., 59 Temple 19 * Place - Suite 330, Boston, MA 02111-1307 USA. 20 * 21 * A few random additions are: 22 * Copyright (C) 2006 Qumranet 23 * Avi Kivity <avi@qumranet.com> 24 * Yaniv Kamay <yaniv@qumranet.com> 25 * 26 */ 27 28 /* 29 * Definitions of Primary Processor-Based VM-Execution Controls. 30 */ 31 #define CPU_BASED_VIRTUAL_INTR_PENDING 0x00000004 32 #define CPU_BASED_USE_TSC_OFFSETING 0x00000008 33 #define CPU_BASED_HLT_EXITING 0x00000080 34 #define CPU_BASED_INVLPG_EXITING 0x00000200 35 #define CPU_BASED_MWAIT_EXITING 0x00000400 36 #define CPU_BASED_RDPMC_EXITING 0x00000800 37 #define CPU_BASED_RDTSC_EXITING 0x00001000 38 #define CPU_BASED_CR3_LOAD_EXITING 0x00008000 39 #define CPU_BASED_CR3_STORE_EXITING 0x00010000 40 #define CPU_BASED_CR8_LOAD_EXITING 0x00080000 41 #define CPU_BASED_CR8_STORE_EXITING 0x00100000 42 #define CPU_BASED_TPR_SHADOW 0x00200000 43 #define CPU_BASED_VIRTUAL_NMI_PENDING 0x00400000 44 #define CPU_BASED_MOV_DR_EXITING 0x00800000 45 #define CPU_BASED_UNCOND_IO_EXITING 0x01000000 46 #define CPU_BASED_USE_IO_BITMAPS 0x02000000 47 #define CPU_BASED_USE_MSR_BITMAPS 0x10000000 48 #define CPU_BASED_MONITOR_EXITING 0x20000000 49 #define CPU_BASED_PAUSE_EXITING 0x40000000 50 #define CPU_BASED_ACTIVATE_SECONDARY_CONTROLS 0x80000000 51 /* 52 * Definitions of Secondary Processor-Based VM-Execution Controls. 53 */ 54 #define SECONDARY_EXEC_VIRTUALIZE_APIC_ACCESSES 0x00000001 55 #define SECONDARY_EXEC_ENABLE_EPT 0x00000002 56 #define SECONDARY_EXEC_RDTSCP 0x00000008 57 #define SECONDARY_EXEC_ENABLE_VPID 0x00000020 58 #define SECONDARY_EXEC_WBINVD_EXITING 0x00000040 59 #define SECONDARY_EXEC_UNRESTRICTED_GUEST 0x00000080 60 #define SECONDARY_EXEC_PAUSE_LOOP_EXITING 0x00000400 61 62 63 #define PIN_BASED_EXT_INTR_MASK 0x00000001 64 #define PIN_BASED_NMI_EXITING 0x00000008 65 #define PIN_BASED_VIRTUAL_NMIS 0x00000020 66 67 #define VM_EXIT_HOST_ADDR_SPACE_SIZE 0x00000200 68 #define VM_EXIT_ACK_INTR_ON_EXIT 0x00008000 69 #define VM_EXIT_SAVE_IA32_PAT 0x00040000 70 #define VM_EXIT_LOAD_IA32_PAT 0x00080000 71 72 #define VM_ENTRY_IA32E_MODE 0x00000200 73 #define VM_ENTRY_SMM 0x00000400 74 #define VM_ENTRY_DEACT_DUAL_MONITOR 0x00000800 75 #define VM_ENTRY_LOAD_IA32_PAT 0x00004000 76 77 /* VMCS Encodings */ 78 enum vmcs_field { 79 VIRTUAL_PROCESSOR_ID = 0x00000000, 80 GUEST_ES_SELECTOR = 0x00000800, 81 GUEST_CS_SELECTOR = 0x00000802, 82 GUEST_SS_SELECTOR = 0x00000804, 83 GUEST_DS_SELECTOR = 0x00000806, 84 GUEST_FS_SELECTOR = 0x00000808, 85 GUEST_GS_SELECTOR = 0x0000080a, 86 GUEST_LDTR_SELECTOR = 0x0000080c, 87 GUEST_TR_SELECTOR = 0x0000080e, 88 HOST_ES_SELECTOR = 0x00000c00, 89 HOST_CS_SELECTOR = 0x00000c02, 90 HOST_SS_SELECTOR = 0x00000c04, 91 HOST_DS_SELECTOR = 0x00000c06, 92 HOST_FS_SELECTOR = 0x00000c08, 93 HOST_GS_SELECTOR = 0x00000c0a, 94 HOST_TR_SELECTOR = 0x00000c0c, 95 IO_BITMAP_A = 0x00002000, 96 IO_BITMAP_A_HIGH = 0x00002001, 97 IO_BITMAP_B = 0x00002002, 98 IO_BITMAP_B_HIGH = 0x00002003, 99 MSR_BITMAP = 0x00002004, 100 MSR_BITMAP_HIGH = 0x00002005, 101 VM_EXIT_MSR_STORE_ADDR = 0x00002006, 102 VM_EXIT_MSR_STORE_ADDR_HIGH = 0x00002007, 103 VM_EXIT_MSR_LOAD_ADDR = 0x00002008, 104 VM_EXIT_MSR_LOAD_ADDR_HIGH = 0x00002009, 105 VM_ENTRY_MSR_LOAD_ADDR = 0x0000200a, 106 VM_ENTRY_MSR_LOAD_ADDR_HIGH = 0x0000200b, 107 TSC_OFFSET = 0x00002010, 108 TSC_OFFSET_HIGH = 0x00002011, 109 VIRTUAL_APIC_PAGE_ADDR = 0x00002012, 110 VIRTUAL_APIC_PAGE_ADDR_HIGH = 0x00002013, 111 APIC_ACCESS_ADDR = 0x00002014, 112 APIC_ACCESS_ADDR_HIGH = 0x00002015, 113 EPT_POINTER = 0x0000201a, 114 EPT_POINTER_HIGH = 0x0000201b, 115 GUEST_PHYSICAL_ADDRESS = 0x00002400, 116 GUEST_PHYSICAL_ADDRESS_HIGH = 0x00002401, 117 VMCS_LINK_POINTER = 0x00002800, 118 VMCS_LINK_POINTER_HIGH = 0x00002801, 119 GUEST_IA32_DEBUGCTL = 0x00002802, 120 GUEST_IA32_DEBUGCTL_HIGH = 0x00002803, 121 GUEST_IA32_PAT = 0x00002804, 122 GUEST_IA32_PAT_HIGH = 0x00002805, 123 GUEST_PDPTR0 = 0x0000280a, 124 GUEST_PDPTR0_HIGH = 0x0000280b, 125 GUEST_PDPTR1 = 0x0000280c, 126 GUEST_PDPTR1_HIGH = 0x0000280d, 127 GUEST_PDPTR2 = 0x0000280e, 128 GUEST_PDPTR2_HIGH = 0x0000280f, 129 GUEST_PDPTR3 = 0x00002810, 130 GUEST_PDPTR3_HIGH = 0x00002811, 131 HOST_IA32_PAT = 0x00002c00, 132 HOST_IA32_PAT_HIGH = 0x00002c01, 133 PIN_BASED_VM_EXEC_CONTROL = 0x00004000, 134 CPU_BASED_VM_EXEC_CONTROL = 0x00004002, 135 EXCEPTION_BITMAP = 0x00004004, 136 PAGE_FAULT_ERROR_CODE_MASK = 0x00004006, 137 PAGE_FAULT_ERROR_CODE_MATCH = 0x00004008, 138 CR3_TARGET_COUNT = 0x0000400a, 139 VM_EXIT_CONTROLS = 0x0000400c, 140 VM_EXIT_MSR_STORE_COUNT = 0x0000400e, 141 VM_EXIT_MSR_LOAD_COUNT = 0x00004010, 142 VM_ENTRY_CONTROLS = 0x00004012, 143 VM_ENTRY_MSR_LOAD_COUNT = 0x00004014, 144 VM_ENTRY_INTR_INFO_FIELD = 0x00004016, 145 VM_ENTRY_EXCEPTION_ERROR_CODE = 0x00004018, 146 VM_ENTRY_INSTRUCTION_LEN = 0x0000401a, 147 TPR_THRESHOLD = 0x0000401c, 148 SECONDARY_VM_EXEC_CONTROL = 0x0000401e, 149 PLE_GAP = 0x00004020, 150 PLE_WINDOW = 0x00004022, 151 VM_INSTRUCTION_ERROR = 0x00004400, 152 VM_EXIT_REASON = 0x00004402, 153 VM_EXIT_INTR_INFO = 0x00004404, 154 VM_EXIT_INTR_ERROR_CODE = 0x00004406, 155 IDT_VECTORING_INFO_FIELD = 0x00004408, 156 IDT_VECTORING_ERROR_CODE = 0x0000440a, 157 VM_EXIT_INSTRUCTION_LEN = 0x0000440c, 158 VMX_INSTRUCTION_INFO = 0x0000440e, 159 GUEST_ES_LIMIT = 0x00004800, 160 GUEST_CS_LIMIT = 0x00004802, 161 GUEST_SS_LIMIT = 0x00004804, 162 GUEST_DS_LIMIT = 0x00004806, 163 GUEST_FS_LIMIT = 0x00004808, 164 GUEST_GS_LIMIT = 0x0000480a, 165 GUEST_LDTR_LIMIT = 0x0000480c, 166 GUEST_TR_LIMIT = 0x0000480e, 167 GUEST_GDTR_LIMIT = 0x00004810, 168 GUEST_IDTR_LIMIT = 0x00004812, 169 GUEST_ES_AR_BYTES = 0x00004814, 170 GUEST_CS_AR_BYTES = 0x00004816, 171 GUEST_SS_AR_BYTES = 0x00004818, 172 GUEST_DS_AR_BYTES = 0x0000481a, 173 GUEST_FS_AR_BYTES = 0x0000481c, 174 GUEST_GS_AR_BYTES = 0x0000481e, 175 GUEST_LDTR_AR_BYTES = 0x00004820, 176 GUEST_TR_AR_BYTES = 0x00004822, 177 GUEST_INTERRUPTIBILITY_INFO = 0x00004824, 178 GUEST_ACTIVITY_STATE = 0X00004826, 179 GUEST_SYSENTER_CS = 0x0000482A, 180 HOST_IA32_SYSENTER_CS = 0x00004c00, 181 CR0_GUEST_HOST_MASK = 0x00006000, 182 CR4_GUEST_HOST_MASK = 0x00006002, 183 CR0_READ_SHADOW = 0x00006004, 184 CR4_READ_SHADOW = 0x00006006, 185 CR3_TARGET_VALUE0 = 0x00006008, 186 CR3_TARGET_VALUE1 = 0x0000600a, 187 CR3_TARGET_VALUE2 = 0x0000600c, 188 CR3_TARGET_VALUE3 = 0x0000600e, 189 EXIT_QUALIFICATION = 0x00006400, 190 GUEST_LINEAR_ADDRESS = 0x0000640a, 191 GUEST_CR0 = 0x00006800, 192 GUEST_CR3 = 0x00006802, 193 GUEST_CR4 = 0x00006804, 194 GUEST_ES_BASE = 0x00006806, 195 GUEST_CS_BASE = 0x00006808, 196 GUEST_SS_BASE = 0x0000680a, 197 GUEST_DS_BASE = 0x0000680c, 198 GUEST_FS_BASE = 0x0000680e, 199 GUEST_GS_BASE = 0x00006810, 200 GUEST_LDTR_BASE = 0x00006812, 201 GUEST_TR_BASE = 0x00006814, 202 GUEST_GDTR_BASE = 0x00006816, 203 GUEST_IDTR_BASE = 0x00006818, 204 GUEST_DR7 = 0x0000681a, 205 GUEST_RSP = 0x0000681c, 206 GUEST_RIP = 0x0000681e, 207 GUEST_RFLAGS = 0x00006820, 208 GUEST_PENDING_DBG_EXCEPTIONS = 0x00006822, 209 GUEST_SYSENTER_ESP = 0x00006824, 210 GUEST_SYSENTER_EIP = 0x00006826, 211 HOST_CR0 = 0x00006c00, 212 HOST_CR3 = 0x00006c02, 213 HOST_CR4 = 0x00006c04, 214 HOST_FS_BASE = 0x00006c06, 215 HOST_GS_BASE = 0x00006c08, 216 HOST_TR_BASE = 0x00006c0a, 217 HOST_GDTR_BASE = 0x00006c0c, 218 HOST_IDTR_BASE = 0x00006c0e, 219 HOST_IA32_SYSENTER_ESP = 0x00006c10, 220 HOST_IA32_SYSENTER_EIP = 0x00006c12, 221 HOST_RSP = 0x00006c14, 222 HOST_RIP = 0x00006c16, 223 }; 224 225 #define VMX_EXIT_REASONS_FAILED_VMENTRY 0x80000000 226 227 #define EXIT_REASON_EXCEPTION_NMI 0 228 #define EXIT_REASON_EXTERNAL_INTERRUPT 1 229 #define EXIT_REASON_TRIPLE_FAULT 2 230 231 #define EXIT_REASON_PENDING_INTERRUPT 7 232 #define EXIT_REASON_NMI_WINDOW 8 233 #define EXIT_REASON_TASK_SWITCH 9 234 #define EXIT_REASON_CPUID 10 235 #define EXIT_REASON_HLT 12 236 #define EXIT_REASON_INVLPG 14 237 #define EXIT_REASON_RDPMC 15 238 #define EXIT_REASON_RDTSC 16 239 #define EXIT_REASON_VMCALL 18 240 #define EXIT_REASON_VMCLEAR 19 241 #define EXIT_REASON_VMLAUNCH 20 242 #define EXIT_REASON_VMPTRLD 21 243 #define EXIT_REASON_VMPTRST 22 244 #define EXIT_REASON_VMREAD 23 245 #define EXIT_REASON_VMRESUME 24 246 #define EXIT_REASON_VMWRITE 25 247 #define EXIT_REASON_VMOFF 26 248 #define EXIT_REASON_VMON 27 249 #define EXIT_REASON_CR_ACCESS 28 250 #define EXIT_REASON_DR_ACCESS 29 251 #define EXIT_REASON_IO_INSTRUCTION 30 252 #define EXIT_REASON_MSR_READ 31 253 #define EXIT_REASON_MSR_WRITE 32 254 #define EXIT_REASON_MWAIT_INSTRUCTION 36 255 #define EXIT_REASON_MONITOR_INSTRUCTION 39 256 #define EXIT_REASON_PAUSE_INSTRUCTION 40 257 #define EXIT_REASON_MCE_DURING_VMENTRY 41 258 #define EXIT_REASON_TPR_BELOW_THRESHOLD 43 259 #define EXIT_REASON_APIC_ACCESS 44 260 #define EXIT_REASON_EPT_VIOLATION 48 261 #define EXIT_REASON_EPT_MISCONFIG 49 262 #define EXIT_REASON_WBINVD 54 263 264 /* 265 * Interruption-information format 266 */ 267 #define INTR_INFO_VECTOR_MASK 0xff /* 7:0 */ 268 #define INTR_INFO_INTR_TYPE_MASK 0x700 /* 10:8 */ 269 #define INTR_INFO_DELIVER_CODE_MASK 0x800 /* 11 */ 270 #define INTR_INFO_UNBLOCK_NMI 0x1000 /* 12 */ 271 #define INTR_INFO_VALID_MASK 0x80000000 /* 31 */ 272 #define INTR_INFO_RESVD_BITS_MASK 0x7ffff000 273 274 #define VECTORING_INFO_VECTOR_MASK INTR_INFO_VECTOR_MASK 275 #define VECTORING_INFO_TYPE_MASK INTR_INFO_INTR_TYPE_MASK 276 #define VECTORING_INFO_DELIVER_CODE_MASK INTR_INFO_DELIVER_CODE_MASK 277 #define VECTORING_INFO_VALID_MASK INTR_INFO_VALID_MASK 278 279 #define INTR_TYPE_EXT_INTR (0 << 8) /* external interrupt */ 280 #define INTR_TYPE_NMI_INTR (2 << 8) /* NMI */ 281 #define INTR_TYPE_HARD_EXCEPTION (3 << 8) /* processor exception */ 282 #define INTR_TYPE_SOFT_INTR (4 << 8) /* software interrupt */ 283 #define INTR_TYPE_SOFT_EXCEPTION (6 << 8) /* software exception */ 284 285 /* GUEST_INTERRUPTIBILITY_INFO flags. */ 286 #define GUEST_INTR_STATE_STI 0x00000001 287 #define GUEST_INTR_STATE_MOV_SS 0x00000002 288 #define GUEST_INTR_STATE_SMI 0x00000004 289 #define GUEST_INTR_STATE_NMI 0x00000008 290 291 /* 292 * Exit Qualifications for MOV for Control Register Access 293 */ 294 #define CONTROL_REG_ACCESS_NUM 0x7 /* 2:0, number of control reg.*/ 295 #define CONTROL_REG_ACCESS_TYPE 0x30 /* 5:4, access type */ 296 #define CONTROL_REG_ACCESS_REG 0xf00 /* 10:8, general purpose reg. */ 297 #define LMSW_SOURCE_DATA_SHIFT 16 298 #define LMSW_SOURCE_DATA (0xFFFF << LMSW_SOURCE_DATA_SHIFT) /* 16:31 lmsw source */ 299 #define REG_EAX (0 << 8) 300 #define REG_ECX (1 << 8) 301 #define REG_EDX (2 << 8) 302 #define REG_EBX (3 << 8) 303 #define REG_ESP (4 << 8) 304 #define REG_EBP (5 << 8) 305 #define REG_ESI (6 << 8) 306 #define REG_EDI (7 << 8) 307 #define REG_R8 (8 << 8) 308 #define REG_R9 (9 << 8) 309 #define REG_R10 (10 << 8) 310 #define REG_R11 (11 << 8) 311 #define REG_R12 (12 << 8) 312 #define REG_R13 (13 << 8) 313 #define REG_R14 (14 << 8) 314 #define REG_R15 (15 << 8) 315 316 /* 317 * Exit Qualifications for MOV for Debug Register Access 318 */ 319 #define DEBUG_REG_ACCESS_NUM 0x7 /* 2:0, number of debug reg. */ 320 #define DEBUG_REG_ACCESS_TYPE 0x10 /* 4, direction of access */ 321 #define TYPE_MOV_TO_DR (0 << 4) 322 #define TYPE_MOV_FROM_DR (1 << 4) 323 #define DEBUG_REG_ACCESS_REG(eq) (((eq) >> 8) & 0xf) /* 11:8, general purpose reg. */ 324 325 326 /* segment AR */ 327 #define SEGMENT_AR_L_MASK (1 << 13) 328 329 #define AR_TYPE_ACCESSES_MASK 1 330 #define AR_TYPE_READABLE_MASK (1 << 1) 331 #define AR_TYPE_WRITEABLE_MASK (1 << 2) 332 #define AR_TYPE_CODE_MASK (1 << 3) 333 #define AR_TYPE_MASK 0x0f 334 #define AR_TYPE_BUSY_64_TSS 11 335 #define AR_TYPE_BUSY_32_TSS 11 336 #define AR_TYPE_BUSY_16_TSS 3 337 #define AR_TYPE_LDT 2 338 339 #define AR_UNUSABLE_MASK (1 << 16) 340 #define AR_S_MASK (1 << 4) 341 #define AR_P_MASK (1 << 7) 342 #define AR_L_MASK (1 << 13) 343 #define AR_DB_MASK (1 << 14) 344 #define AR_G_MASK (1 << 15) 345 #define AR_DPL_SHIFT 5 346 #define AR_DPL(ar) (((ar) >> AR_DPL_SHIFT) & 3) 347 348 #define AR_RESERVD_MASK 0xfffe0f00 349 350 #define TSS_PRIVATE_MEMSLOT (KVM_MEMORY_SLOTS + 0) 351 #define APIC_ACCESS_PAGE_PRIVATE_MEMSLOT (KVM_MEMORY_SLOTS + 1) 352 #define IDENTITY_PAGETABLE_PRIVATE_MEMSLOT (KVM_MEMORY_SLOTS + 2) 353 354 #define VMX_NR_VPIDS (1 << 16) 355 #define VMX_VPID_EXTENT_SINGLE_CONTEXT 1 356 #define VMX_VPID_EXTENT_ALL_CONTEXT 2 357 358 #define VMX_EPT_EXTENT_INDIVIDUAL_ADDR 0 359 #define VMX_EPT_EXTENT_CONTEXT 1 360 #define VMX_EPT_EXTENT_GLOBAL 2 361 362 #define VMX_EPT_EXECUTE_ONLY_BIT (1ull) 363 #define VMX_EPT_PAGE_WALK_4_BIT (1ull << 6) 364 #define VMX_EPTP_UC_BIT (1ull << 8) 365 #define VMX_EPTP_WB_BIT (1ull << 14) 366 #define VMX_EPT_2MB_PAGE_BIT (1ull << 16) 367 #define VMX_EPT_1GB_PAGE_BIT (1ull << 17) 368 #define VMX_EPT_EXTENT_INDIVIDUAL_BIT (1ull << 24) 369 #define VMX_EPT_EXTENT_CONTEXT_BIT (1ull << 25) 370 #define VMX_EPT_EXTENT_GLOBAL_BIT (1ull << 26) 371 372 #define VMX_EPT_DEFAULT_GAW 3 373 #define VMX_EPT_MAX_GAW 0x4 374 #define VMX_EPT_MT_EPTE_SHIFT 3 375 #define VMX_EPT_GAW_EPTP_SHIFT 3 376 #define VMX_EPT_DEFAULT_MT 0x6ull 377 #define VMX_EPT_READABLE_MASK 0x1ull 378 #define VMX_EPT_WRITABLE_MASK 0x2ull 379 #define VMX_EPT_EXECUTABLE_MASK 0x4ull 380 #define VMX_EPT_IPAT_BIT (1ull << 6) 381 382 #define VMX_EPT_IDENTITY_PAGETABLE_ADDR 0xfffbc000ul 383 384 385 #define ASM_VMX_VMCLEAR_RAX ".byte 0x66, 0x0f, 0xc7, 0x30" 386 #define ASM_VMX_VMLAUNCH ".byte 0x0f, 0x01, 0xc2" 387 #define ASM_VMX_VMRESUME ".byte 0x0f, 0x01, 0xc3" 388 #define ASM_VMX_VMPTRLD_RAX ".byte 0x0f, 0xc7, 0x30" 389 #define ASM_VMX_VMREAD_RDX_RAX ".byte 0x0f, 0x78, 0xd0" 390 #define ASM_VMX_VMWRITE_RAX_RDX ".byte 0x0f, 0x79, 0xd0" 391 #define ASM_VMX_VMWRITE_RSP_RDX ".byte 0x0f, 0x79, 0xd4" 392 #define ASM_VMX_VMXOFF ".byte 0x0f, 0x01, 0xc4" 393 #define ASM_VMX_VMXON_RAX ".byte 0xf3, 0x0f, 0xc7, 0x30" 394 #define ASM_VMX_INVEPT ".byte 0x66, 0x0f, 0x38, 0x80, 0x08" 395 #define ASM_VMX_INVVPID ".byte 0x66, 0x0f, 0x38, 0x81, 0x08" 396 397 398 399 #endif 400