This patch implements a checker to detect instructions which
should be paravirtualized instead of direct writing raw instruction.
This patch does rough check so that it doesn't fully cover all cases,
but it can detects most cases of paravirtualization breakage of hand
written assembly codes.
Signed-off-by: Isaku Yamahata <yamahata@xxxxxxxxxxxxx>
---
arch/ia64/kernel/Makefile | 164 ++++++++++++++++++++++++++++++++++
arch/ia64/kernel/paravirt_inst.h | 4 +-
include/asm-ia64/native/pvchk_inst.h | 158 ++++++++++++++++++++++++++++++++
3 files changed, 325 insertions(+), 1 deletions(-)
create mode 100644 include/asm-ia64/native/pvchk_inst.h
diff --git a/arch/ia64/kernel/Makefile b/arch/ia64/kernel/Makefile
index 87fea11..bd1fd21 100644
--- a/arch/ia64/kernel/Makefile
+++ b/arch/ia64/kernel/Makefile
@@ -112,5 +112,169 @@ clean-files += $(objtree)/include/asm-ia64/nr-irqs.h
ASM_PARAVIRT_OBJS = ivt.o entry.o
define paravirtualized_native
AFLAGS_$(1) += -D__IA64_ASM_PARAVIRTUALIZED_NATIVE
+AFLAGS_pvchk-sed-$(1) += -D__IA64_ASM_PARAVIRTUALIZED_PVCHECK
+extra-y += pvchk-$(1)
endef
$(foreach obj,$(ASM_PARAVIRT_OBJS),$(eval $(call
paravirtualized_native,$(obj))))
+
+#
+# Checker for paravirtualizations of privileged operations.
+#
+define sed-pvchk-ssm-psr-ic
+ "s/ssm.+psr\.ic/.warning \"ssm psr.ic should not be used directly\"/g"
+endef
+
+define sed-pvchk-rsm-psr-ic
+ "s/rsm.+psr\.ic/.warning \"rsm psr.ic should not be used directly\"/g"
+endef
+
+define sed-pvchk-ssm-psr-i
+ "s/ssm.+psr\.i/.warning \"ssm psr.i should not be used directly\"/g"
+endef
+
+define sed-pvchk-rsm-psr-i
+ "s/rsm.+psr\.i/.warning \"rsm psr.i should not be used directly\"/g"
+endef
+
+define sed-pvchk-ssm-psr-dt
+ "s/ssm.+psr\.dt/.warning \"ssm psr.dt should not be used directly\"/g"
+endef
+
+define sed-pvchk-rsm-psr-dt
+ "s/rsm.+psr\.dt/.warning \"rsm psr.dt should not be used directly\"/g"
+endef
+
+define sed-pvchk-mov-from-cr-ifa
+ "s/mov.+=.*cr\.ifa/.warning \"cr.ifa should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-from-cr-itir
+ "s/mov.+=.*cr\.itir/.warning \"cr.itir should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-from-cr-isr
+ "s/mov.+=.*cr\.isr/.warning \"cr.isr should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-from-cr-iha
+ "s/mov.+=.*cr\.iha/.warning \"cr.iha should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-from-cr-ipsr
+ "s/mov.+=.*cr\.ipsr/.warning \"cr.ipsr should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-from-cr-iim
+ "s/mov.+=.*cr\.iim/.warning \"cr.iim should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-from-cr-iip
+ "s/mov.+=.*cr\.iip/.warning \"cr.iip should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-from-cr-ivr
+ "s/mov.+=.*cr\.ivr/.warning \"cr.ivr should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-from-psr
+ "s/mov.+=.*psr/.warning \"psr should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-from-ar-eflags
+ "s/mov.+=.*ar\.eflags/.warning \"ar.eflags should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-to-cr-ifa
+ "s/mov.+cr\.ifa.*=/.warning \"cr.ifa should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-to-cr-itir
+ "s/mov.+cr\.itir.*=/.warning \"cr.itir should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-to-cr-iha
+ "s/mov.+cr\.iha.*=/.warning \"cr.iha should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-to-cr-ipsr
+ "s/mov.+cr\.ipsr.*=/.warning \"cr.ipsr should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-to-cr-ifs
+ "s/mov.+cr\.ifs.*=/.warning \"cr.ifs should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-to-cr-iip
+ "s/mov.+cr\.iip.*=/.warning \"cr.iip should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-to-cr-kr
+ "s/mov.+cr\.kr.*=/.warning \"cr.kr should not used directly\"/g"
+endef
+
+define sed-pvchk-mov-to-ar-eflags
+ "s/mov.+ar\.eflags.*=/.warning \"ar.eflags should not used directly\"/g"
+endef
+
+define sed-pvchk-itc-i
+ "s/itc\.i/.warning \"itc.i should not be used directly.\"/g"
+endef
+
+define sed-pvchk-itc-d
+ "s/itc\.d/.warning \"itc.d should not be used directly.\"/g"
+endef
+
+define sed-pvchk-bsw-0
+ "s/bsw\.0/.warning \"bsw.0 should not be used directly.\"/g"
+endef
+
+define sed-pvchk-bsw-1
+ "s/bsw\.1/.warning \"bsw.1 should not be used directly.\"/g"
+endef
+
+define sed-pvchk-ptc-ga
+ "s/ptc\.ga/.warning \"ptc.ga should not be used directly.\"/g"
+endef
+
+quiet_cmd_pv_check_sed = PVCHK $@
+define cmd_pv_check_sed
+ sed \
+ -e $(sed-pvchk-ssm-psr-ic) \
+ -e $(sed-pvchk-rsm-psr-ic) \
+ -e $(sed-pvchk-ssm-psr-i) \
+ -e $(sed-pvchk-rsm-psr-i) \
+ -e $(sed-pvchk-ssm-psr-dt) \
+ -e $(sed-pvchk-rsm-psr-dt) \
+ -e $(sed-pvchk-mov-from-cr-ifa) \
+ -e $(sed-pvchk-mov-from-cr-itir) \
+ -e $(sed-pvchk-mov-from-cr-isr) \
+ -e $(sed-pvchk-mov-from-cr-iha) \
+ -e $(sed-pvchk-mov-from-cr-ipsr) \
+ -e $(sed-pvchk-mov-from-cr-iim) \
+ -e $(sed-pvchk-mov-from-cr-iip) \
+ -e $(sed-pvchk-mov-from-cr-ivr) \
+ -e $(sed-pvchk-mov-from-psr) \
+ -e $(sed-pvchk-mov-from-ar-eflags) \
+ -e $(sed-pvchk-mov-to-cr-ifa) \
+ -e $(sed-pvchk-mov-to-cr-itir) \
+ -e $(sed-pvchk-mov-to-cr-iha) \
+ -e $(sed-pvchk-mov-to-cr-ipsr) \
+ -e $(sed-pvchk-mov-to-cr-ifs) \
+ -e $(sed-pvchk-mov-to-cr-iip) \
+ -e $(sed-pvchk-mov-to-cr-kr) \
+ -e $(sed-pvchk-mov-to-ar-eflags) \
+ -e $(sed-pvchk-itc-i) \
+ -e $(sed-pvchk-itc-d) \
+ -e $(sed-pvchk-bsw-0) \
+ -e $(sed-pvchk-bsw-1) \
+ -e $(sed-pvchk-ptc-ga) \
+ $< > $@
+endef
+
+$(obj)/pvchk-sed-%.s: $(src)/%.S FORCE
+ $(call if_changed_dep,as_s_S)
+$(obj)/pvchk-%.s: $(obj)/pvchk-sed-%.s FORCE
+ $(call if_changed,pv_check_sed)
+$(obj)/pvchk-%.o: $(obj)/pvchk-%.s FORCE
+ $(call if_changed,as_o_S)
+.PRECIOUS: $(obj)/pvchk-sed-%.s $(obj)/pvchk-%.s $(obj)/pvchk-%.o
diff --git a/arch/ia64/kernel/paravirt_inst.h b/arch/ia64/kernel/paravirt_inst.h
index 5cad6fb..64d6d81 100644
--- a/arch/ia64/kernel/paravirt_inst.h
+++ b/arch/ia64/kernel/paravirt_inst.h
@@ -20,7 +20,9 @@
*
*/
-#ifdef __IA64_ASM_PARAVIRTUALIZED_XEN
+#ifdef __IA64_ASM_PARAVIRTUALIZED_PVCHECK
+#include <asm/native/pvchk_inst.h>
+#elif defined(__IA64_ASM_PARAVIRTUALIZED_XEN)
#include <asm/xen/inst.h>
#include <asm/xen/minstate.h>
#else
diff --git a/include/asm-ia64/native/pvchk_inst.h
b/include/asm-ia64/native/pvchk_inst.h
new file mode 100644
index 0000000..930f537
--- /dev/null
+++ b/include/asm-ia64/native/pvchk_inst.h
@@ -0,0 +1,158 @@
+#ifndef _ASM_NATIVE_PVCHK_INST_H
+#define _ASM_NATIVE_PVCHK_INST_H
+
+/******************************************************************************
+ * include/asm-ia64/native/pvcheck_inst.h
+ * Checker for paravirtualizations of privileged operations.
+ *
+ * Copyright (C) 2005 Hewlett-Packard Co
+ * Dan Magenheimer <dan.magenheimer@xxxxxx>
+ *
+ * Copyright (c) 2008 Isaku Yamahata <yamahata at valinux co jp>
+ * VA Linux Systems Japan K.K.
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
+ *
+ */
+
+/**********************************************
+ * Instructions paravirtualized for correctness
+ **********************************************/
+
+/* "fc" and "thash" are privilege-sensitive instructions, meaning they
+ * may have different semantics depending on whether they are executed
+ * at PL0 vs PL!=0. When paravirtualized, these instructions mustn't
+ * be allowed to execute directly, lest incorrect semantics result.
+ */
+
+#define fc .error "fc should not be used directly."
+#define thash .error "thash should not be used directly."
+
+/* Note that "ttag" and "cover" are also privilege-sensitive; "ttag"
+ * is not currently used (though it may be in a long-format VHPT system!)
+ * and the semantics of cover only change if psr.ic is off which is very
+ * rare (and currently non-existent outside of assembly code
+ */
+#define ttag .error "ttag should not be used directly."
+#define cover .error "cover should not be used directly."
+
+/* There are also privilege-sensitive registers. These registers are
+ * readable at any privilege level but only writable at PL0.
+ */
+#define cpuid .error "cpuid should not be used directly."
+#define pmd .error "pmd should not be used directly."
+
+/*
+ * mov ar.eflag =
+ * mov = ar.eflag
+ */
+
+/**********************************************
+ * Instructions paravirtualized for performance
+ **********************************************/
+/*
+ * Those instructions include '.' which can't be handled by cpp.
+ * or can't be handled by cpp easily.
+ * They are handled by sed instead of cpp.
+ */
+
+/* for .S
+ * itc.i
+ * itc.d
+ *
+ * bsw.0
+ * bsw.1
+ *
+ * ssm psr.ic | PSR_DEFAULT_BITS
+ * ssm psr.ic
+ * rsm psr.ic
+ * ssm psr.i
+ * rsm psr.i
+ * rsm psr.i | psr.ic
+ * rsm psr.dt
+ * ssm psr.dt
+ *
+ * mov = cr.ifa
+ * mov = cr.itir
+ * mov = cr.isr
+ * mov = cr.iha
+ * mov = cr.ipsr
+ * mov = cr.iim
+ * mov = cr.iip
+ * mov = cr.ivr
+ * mov = psr
+ *
+ * mov cr.ifa =
+ * mov cr.itir =
+ * mov cr.iha =
+ * mov cr.ipsr =
+ * mov cr.ifs =
+ * mov cr.iip =
+ * mov cr.kr =
+ */
+
+/* for intrinsics
+ * ssm psr.i
+ * rsm psr.i
+ * mov = psr
+ * mov = ivr
+ * mov = tpr
+ * mov cr.itm =
+ * mov eoi =
+ * mov rr[] =
+ * mov = rr[]
+ * mov = kr
+ * mov kr =
+ * ptc.ga
+ */
+
+/*************************************************************
+ * define paravirtualized instrcution macros as nop to ingore.
+ *************************************************************/
+#define DO_SAVE_MIN(__COVER,SAVE_IFS,EXTRA) nop 0
+#define MOV_FROM_IFA(reg) nop 0
+#define MOV_FROM_ITIR(reg) nop 0
+#define MOV_FROM_ISR(reg) nop 0
+#define MOV_FROM_IHA(reg) nop 0
+#define MOV_FROM_IPSR(pred, reg) nop 0
+#define MOV_FROM_IIM(reg) nop 0
+#define MOV_FROM_IIP(reg) nop 0
+#define MOV_FROM_IVR(reg, clob) nop 0
+#define MOV_FROM_PSR(pred, reg, clob) nop 0
+#define MOV_TO_IFA(reg, clob) nop 0
+#define MOV_TO_ITIR(pred, reg, clob) nop 0
+#define MOV_TO_IHA(pred, reg, clob) nop 0
+#define MOV_TO_IPSR(pred, reg, clob) nop 0
+#define MOV_TO_IFS(pred, reg, clob) nop 0
+#define MOV_TO_IIP(reg, clob) nop 0
+#define MOV_TO_KR(kr, reg, clob0, clob1) nop 0
+#define ITC_I(pred, reg, clob) nop 0
+#define ITC_D(pred, reg, clob) nop 0
+#define ITC_I_AND_D(pred_i, pred_d, reg, clob) nop 0
+#define THASH(pred, reg0, reg1, clob) nop 0
+#define SSM_PSR_IC_AND_DEFAULT_BITS_AND_SRLZ_I(clob0, clob1) nop 0
+#define SSM_PSR_IC_AND_SRLZ_D(clob0, clob1) nop 0
+#define RSM_PSR_IC(clob) nop 0
+#define SSM_PSR_I(pred, pred_clob, clob) nop 0
+#define RSM_PSR_I(pred, clob0, clob1) nop 0
+#define RSM_PSR_I_IC(clob0, clob1, clob2) nop 0
+#define RSM_PSR_DT nop 0
+#define SSM_PSR_DT_AND_SRLZ_I nop 0
+#define BSW_0(clob0, clob1, clob2) nop 0
+#define BSW_1(clob0, clob1) nop 0
+#define COVER nop 0
+#define RFI br.ret.sptk.many rp /* defining nop causes dependency error */
+
+#endif /* _ASM_NATIVE_PVCHK_INST_H */
--
1.5.3
_______________________________________________
Xen-ia64-devel mailing list
Xen-ia64-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-ia64-devel
|
Home