2018-12-04 05:53:05 +08:00
|
|
|
// SPDX-License-Identifier: GPL-2.0
|
|
|
|
|
|
|
|
|
|
#include "vmcs12.h"
|
|
|
|
|
|
|
|
|
|
#define VMCS12_OFFSET(x) offsetof(struct vmcs12, x)
|
|
|
|
|
#define FIELD(number, name) [ROL16(number, 6)] = VMCS12_OFFSET(name)
|
|
|
|
|
#define FIELD64(number, name) \
|
|
|
|
|
FIELD(number, name), \
|
|
|
|
|
[ROL16(number##_HIGH, 6)] = VMCS12_OFFSET(name) + sizeof(u32)
|
|
|
|
|
|
2022-01-13 01:01:32 +08:00
|
|
|
const unsigned short vmcs12_field_offsets[] = {
|
2018-12-04 05:53:05 +08:00
|
|
|
FIELD(VIRTUAL_PROCESSOR_ID, virtual_processor_id),
|
|
|
|
|
FIELD(POSTED_INTR_NV, posted_intr_nv),
|
|
|
|
|
FIELD(GUEST_ES_SELECTOR, guest_es_selector),
|
|
|
|
|
FIELD(GUEST_CS_SELECTOR, guest_cs_selector),
|
|
|
|
|
FIELD(GUEST_SS_SELECTOR, guest_ss_selector),
|
|
|
|
|
FIELD(GUEST_DS_SELECTOR, guest_ds_selector),
|
|
|
|
|
FIELD(GUEST_FS_SELECTOR, guest_fs_selector),
|
|
|
|
|
FIELD(GUEST_GS_SELECTOR, guest_gs_selector),
|
|
|
|
|
FIELD(GUEST_LDTR_SELECTOR, guest_ldtr_selector),
|
|
|
|
|
FIELD(GUEST_TR_SELECTOR, guest_tr_selector),
|
|
|
|
|
FIELD(GUEST_INTR_STATUS, guest_intr_status),
|
|
|
|
|
FIELD(GUEST_PML_INDEX, guest_pml_index),
|
|
|
|
|
FIELD(HOST_ES_SELECTOR, host_es_selector),
|
|
|
|
|
FIELD(HOST_CS_SELECTOR, host_cs_selector),
|
|
|
|
|
FIELD(HOST_SS_SELECTOR, host_ss_selector),
|
|
|
|
|
FIELD(HOST_DS_SELECTOR, host_ds_selector),
|
|
|
|
|
FIELD(HOST_FS_SELECTOR, host_fs_selector),
|
|
|
|
|
FIELD(HOST_GS_SELECTOR, host_gs_selector),
|
|
|
|
|
FIELD(HOST_TR_SELECTOR, host_tr_selector),
|
|
|
|
|
FIELD64(IO_BITMAP_A, io_bitmap_a),
|
|
|
|
|
FIELD64(IO_BITMAP_B, io_bitmap_b),
|
|
|
|
|
FIELD64(MSR_BITMAP, msr_bitmap),
|
|
|
|
|
FIELD64(VM_EXIT_MSR_STORE_ADDR, vm_exit_msr_store_addr),
|
|
|
|
|
FIELD64(VM_EXIT_MSR_LOAD_ADDR, vm_exit_msr_load_addr),
|
|
|
|
|
FIELD64(VM_ENTRY_MSR_LOAD_ADDR, vm_entry_msr_load_addr),
|
|
|
|
|
FIELD64(PML_ADDRESS, pml_address),
|
|
|
|
|
FIELD64(TSC_OFFSET, tsc_offset),
|
2021-05-27 02:44:12 +08:00
|
|
|
FIELD64(TSC_MULTIPLIER, tsc_multiplier),
|
2018-12-04 05:53:05 +08:00
|
|
|
FIELD64(VIRTUAL_APIC_PAGE_ADDR, virtual_apic_page_addr),
|
|
|
|
|
FIELD64(APIC_ACCESS_ADDR, apic_access_addr),
|
|
|
|
|
FIELD64(POSTED_INTR_DESC_ADDR, posted_intr_desc_addr),
|
|
|
|
|
FIELD64(VM_FUNCTION_CONTROL, vm_function_control),
|
|
|
|
|
FIELD64(EPT_POINTER, ept_pointer),
|
|
|
|
|
FIELD64(EOI_EXIT_BITMAP0, eoi_exit_bitmap0),
|
|
|
|
|
FIELD64(EOI_EXIT_BITMAP1, eoi_exit_bitmap1),
|
|
|
|
|
FIELD64(EOI_EXIT_BITMAP2, eoi_exit_bitmap2),
|
|
|
|
|
FIELD64(EOI_EXIT_BITMAP3, eoi_exit_bitmap3),
|
|
|
|
|
FIELD64(EPTP_LIST_ADDRESS, eptp_list_address),
|
|
|
|
|
FIELD64(VMREAD_BITMAP, vmread_bitmap),
|
|
|
|
|
FIELD64(VMWRITE_BITMAP, vmwrite_bitmap),
|
|
|
|
|
FIELD64(XSS_EXIT_BITMAP, xss_exit_bitmap),
|
KVM: VMX: Enable SGX virtualization for SGX1, SGX2 and LC
Enable SGX virtualization now that KVM has the VM-Exit handlers needed
to trap-and-execute ENCLS to ensure correctness and/or enforce the CPU
model exposed to the guest. Add a KVM module param, "sgx", to allow an
admin to disable SGX virtualization independent of the kernel.
When supported in hardware and the kernel, advertise SGX1, SGX2 and SGX
LC to userspace via CPUID and wire up the ENCLS_EXITING bitmap based on
the guest's SGX capabilities, i.e. to allow ENCLS to be executed in an
SGX-enabled guest. With the exception of the provision key, all SGX
attribute bits may be exposed to the guest. Guest access to the
provision key, which is controlled via securityfs, will be added in a
future patch.
Note, KVM does not yet support exposing ENCLS_C leafs or ENCLV leafs.
Signed-off-by: Sean Christopherson <sean.j.christopherson@intel.com>
Signed-off-by: Kai Huang <kai.huang@intel.com>
Message-Id: <a99e9c23310c79f2f4175c1af4c4cbcef913c3e5.1618196135.git.kai.huang@intel.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2021-04-12 12:21:42 +08:00
|
|
|
FIELD64(ENCLS_EXITING_BITMAP, encls_exiting_bitmap),
|
2018-12-04 05:53:05 +08:00
|
|
|
FIELD64(GUEST_PHYSICAL_ADDRESS, guest_physical_address),
|
|
|
|
|
FIELD64(VMCS_LINK_POINTER, vmcs_link_pointer),
|
|
|
|
|
FIELD64(GUEST_IA32_DEBUGCTL, guest_ia32_debugctl),
|
|
|
|
|
FIELD64(GUEST_IA32_PAT, guest_ia32_pat),
|
|
|
|
|
FIELD64(GUEST_IA32_EFER, guest_ia32_efer),
|
|
|
|
|
FIELD64(GUEST_IA32_PERF_GLOBAL_CTRL, guest_ia32_perf_global_ctrl),
|
|
|
|
|
FIELD64(GUEST_PDPTR0, guest_pdptr0),
|
|
|
|
|
FIELD64(GUEST_PDPTR1, guest_pdptr1),
|
|
|
|
|
FIELD64(GUEST_PDPTR2, guest_pdptr2),
|
|
|
|
|
FIELD64(GUEST_PDPTR3, guest_pdptr3),
|
|
|
|
|
FIELD64(GUEST_BNDCFGS, guest_bndcfgs),
|
|
|
|
|
FIELD64(HOST_IA32_PAT, host_ia32_pat),
|
|
|
|
|
FIELD64(HOST_IA32_EFER, host_ia32_efer),
|
|
|
|
|
FIELD64(HOST_IA32_PERF_GLOBAL_CTRL, host_ia32_perf_global_ctrl),
|
|
|
|
|
FIELD(PIN_BASED_VM_EXEC_CONTROL, pin_based_vm_exec_control),
|
|
|
|
|
FIELD(CPU_BASED_VM_EXEC_CONTROL, cpu_based_vm_exec_control),
|
|
|
|
|
FIELD(EXCEPTION_BITMAP, exception_bitmap),
|
|
|
|
|
FIELD(PAGE_FAULT_ERROR_CODE_MASK, page_fault_error_code_mask),
|
|
|
|
|
FIELD(PAGE_FAULT_ERROR_CODE_MATCH, page_fault_error_code_match),
|
|
|
|
|
FIELD(CR3_TARGET_COUNT, cr3_target_count),
|
|
|
|
|
FIELD(VM_EXIT_CONTROLS, vm_exit_controls),
|
|
|
|
|
FIELD(VM_EXIT_MSR_STORE_COUNT, vm_exit_msr_store_count),
|
|
|
|
|
FIELD(VM_EXIT_MSR_LOAD_COUNT, vm_exit_msr_load_count),
|
|
|
|
|
FIELD(VM_ENTRY_CONTROLS, vm_entry_controls),
|
|
|
|
|
FIELD(VM_ENTRY_MSR_LOAD_COUNT, vm_entry_msr_load_count),
|
|
|
|
|
FIELD(VM_ENTRY_INTR_INFO_FIELD, vm_entry_intr_info_field),
|
|
|
|
|
FIELD(VM_ENTRY_EXCEPTION_ERROR_CODE, vm_entry_exception_error_code),
|
|
|
|
|
FIELD(VM_ENTRY_INSTRUCTION_LEN, vm_entry_instruction_len),
|
|
|
|
|
FIELD(TPR_THRESHOLD, tpr_threshold),
|
|
|
|
|
FIELD(SECONDARY_VM_EXEC_CONTROL, secondary_vm_exec_control),
|
|
|
|
|
FIELD(VM_INSTRUCTION_ERROR, vm_instruction_error),
|
|
|
|
|
FIELD(VM_EXIT_REASON, vm_exit_reason),
|
|
|
|
|
FIELD(VM_EXIT_INTR_INFO, vm_exit_intr_info),
|
|
|
|
|
FIELD(VM_EXIT_INTR_ERROR_CODE, vm_exit_intr_error_code),
|
|
|
|
|
FIELD(IDT_VECTORING_INFO_FIELD, idt_vectoring_info_field),
|
|
|
|
|
FIELD(IDT_VECTORING_ERROR_CODE, idt_vectoring_error_code),
|
|
|
|
|
FIELD(VM_EXIT_INSTRUCTION_LEN, vm_exit_instruction_len),
|
|
|
|
|
FIELD(VMX_INSTRUCTION_INFO, vmx_instruction_info),
|
|
|
|
|
FIELD(GUEST_ES_LIMIT, guest_es_limit),
|
|
|
|
|
FIELD(GUEST_CS_LIMIT, guest_cs_limit),
|
|
|
|
|
FIELD(GUEST_SS_LIMIT, guest_ss_limit),
|
|
|
|
|
FIELD(GUEST_DS_LIMIT, guest_ds_limit),
|
|
|
|
|
FIELD(GUEST_FS_LIMIT, guest_fs_limit),
|
|
|
|
|
FIELD(GUEST_GS_LIMIT, guest_gs_limit),
|
|
|
|
|
FIELD(GUEST_LDTR_LIMIT, guest_ldtr_limit),
|
|
|
|
|
FIELD(GUEST_TR_LIMIT, guest_tr_limit),
|
|
|
|
|
FIELD(GUEST_GDTR_LIMIT, guest_gdtr_limit),
|
|
|
|
|
FIELD(GUEST_IDTR_LIMIT, guest_idtr_limit),
|
|
|
|
|
FIELD(GUEST_ES_AR_BYTES, guest_es_ar_bytes),
|
|
|
|
|
FIELD(GUEST_CS_AR_BYTES, guest_cs_ar_bytes),
|
|
|
|
|
FIELD(GUEST_SS_AR_BYTES, guest_ss_ar_bytes),
|
|
|
|
|
FIELD(GUEST_DS_AR_BYTES, guest_ds_ar_bytes),
|
|
|
|
|
FIELD(GUEST_FS_AR_BYTES, guest_fs_ar_bytes),
|
|
|
|
|
FIELD(GUEST_GS_AR_BYTES, guest_gs_ar_bytes),
|
|
|
|
|
FIELD(GUEST_LDTR_AR_BYTES, guest_ldtr_ar_bytes),
|
|
|
|
|
FIELD(GUEST_TR_AR_BYTES, guest_tr_ar_bytes),
|
|
|
|
|
FIELD(GUEST_INTERRUPTIBILITY_INFO, guest_interruptibility_info),
|
|
|
|
|
FIELD(GUEST_ACTIVITY_STATE, guest_activity_state),
|
|
|
|
|
FIELD(GUEST_SYSENTER_CS, guest_sysenter_cs),
|
|
|
|
|
FIELD(HOST_IA32_SYSENTER_CS, host_ia32_sysenter_cs),
|
|
|
|
|
FIELD(VMX_PREEMPTION_TIMER_VALUE, vmx_preemption_timer_value),
|
|
|
|
|
FIELD(CR0_GUEST_HOST_MASK, cr0_guest_host_mask),
|
|
|
|
|
FIELD(CR4_GUEST_HOST_MASK, cr4_guest_host_mask),
|
|
|
|
|
FIELD(CR0_READ_SHADOW, cr0_read_shadow),
|
|
|
|
|
FIELD(CR4_READ_SHADOW, cr4_read_shadow),
|
|
|
|
|
FIELD(EXIT_QUALIFICATION, exit_qualification),
|
|
|
|
|
FIELD(GUEST_LINEAR_ADDRESS, guest_linear_address),
|
|
|
|
|
FIELD(GUEST_CR0, guest_cr0),
|
|
|
|
|
FIELD(GUEST_CR3, guest_cr3),
|
|
|
|
|
FIELD(GUEST_CR4, guest_cr4),
|
|
|
|
|
FIELD(GUEST_ES_BASE, guest_es_base),
|
|
|
|
|
FIELD(GUEST_CS_BASE, guest_cs_base),
|
|
|
|
|
FIELD(GUEST_SS_BASE, guest_ss_base),
|
|
|
|
|
FIELD(GUEST_DS_BASE, guest_ds_base),
|
|
|
|
|
FIELD(GUEST_FS_BASE, guest_fs_base),
|
|
|
|
|
FIELD(GUEST_GS_BASE, guest_gs_base),
|
|
|
|
|
FIELD(GUEST_LDTR_BASE, guest_ldtr_base),
|
|
|
|
|
FIELD(GUEST_TR_BASE, guest_tr_base),
|
|
|
|
|
FIELD(GUEST_GDTR_BASE, guest_gdtr_base),
|
|
|
|
|
FIELD(GUEST_IDTR_BASE, guest_idtr_base),
|
|
|
|
|
FIELD(GUEST_DR7, guest_dr7),
|
|
|
|
|
FIELD(GUEST_RSP, guest_rsp),
|
|
|
|
|
FIELD(GUEST_RIP, guest_rip),
|
|
|
|
|
FIELD(GUEST_RFLAGS, guest_rflags),
|
|
|
|
|
FIELD(GUEST_PENDING_DBG_EXCEPTIONS, guest_pending_dbg_exceptions),
|
|
|
|
|
FIELD(GUEST_SYSENTER_ESP, guest_sysenter_esp),
|
|
|
|
|
FIELD(GUEST_SYSENTER_EIP, guest_sysenter_eip),
|
|
|
|
|
FIELD(HOST_CR0, host_cr0),
|
|
|
|
|
FIELD(HOST_CR3, host_cr3),
|
|
|
|
|
FIELD(HOST_CR4, host_cr4),
|
|
|
|
|
FIELD(HOST_FS_BASE, host_fs_base),
|
|
|
|
|
FIELD(HOST_GS_BASE, host_gs_base),
|
|
|
|
|
FIELD(HOST_TR_BASE, host_tr_base),
|
|
|
|
|
FIELD(HOST_GDTR_BASE, host_gdtr_base),
|
|
|
|
|
FIELD(HOST_IDTR_BASE, host_idtr_base),
|
|
|
|
|
FIELD(HOST_IA32_SYSENTER_ESP, host_ia32_sysenter_esp),
|
|
|
|
|
FIELD(HOST_IA32_SYSENTER_EIP, host_ia32_sysenter_eip),
|
|
|
|
|
FIELD(HOST_RSP, host_rsp),
|
|
|
|
|
FIELD(HOST_RIP, host_rip),
|
|
|
|
|
};
|
2022-01-13 01:01:32 +08:00
|
|
|
const unsigned int nr_vmcs12_fields = ARRAY_SIZE(vmcs12_field_offsets);
|