00e37bdb01
Currently kexec in a PVonHVM guest fails with a triple fault because the new kernel overwrites the shared info page. The exact failure depends on the size of the kernel image. This patch moves the pfn from RAM into MMIO space before the kexec boot. The pfn containing the shared_info is located somewhere in RAM. This will cause trouble if the current kernel is doing a kexec boot into a new kernel. The new kernel (and its startup code) can not know where the pfn is, so it can not reserve the page. The hypervisor will continue to update the pfn, and as a result memory corruption occours in the new kernel. One way to work around this issue is to allocate a page in the xen-platform pci device's BAR memory range. But pci init is done very late and the shared_info page is already in use very early to read the pvclock. So moving the pfn from RAM to MMIO is racy because some code paths on other vcpus could access the pfn during the small window when the old pfn is moved to the new pfn. There is even a small window were the old pfn is not backed by a mfn, and during that time all reads return -1. Because it is not known upfront where the MMIO region is located it can not be used right from the start in xen_hvm_init_shared_info. To minimise trouble the move of the pfn is done shortly before kexec. This does not eliminate the race because all vcpus are still online when the syscore_ops will be called. But hopefully there is no work pending at this point in time. Also the syscore_op is run last which reduces the risk further. Signed-off-by: Olaf Hering <olaf@aepfle.de> Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
115 lines
3.7 KiB
C
115 lines
3.7 KiB
C
#ifndef _XEN_EVENTS_H
|
|
#define _XEN_EVENTS_H
|
|
|
|
#include <linux/interrupt.h>
|
|
|
|
#include <xen/interface/event_channel.h>
|
|
#include <asm/xen/hypercall.h>
|
|
#include <asm/xen/events.h>
|
|
|
|
int bind_evtchn_to_irq(unsigned int evtchn);
|
|
int bind_evtchn_to_irqhandler(unsigned int evtchn,
|
|
irq_handler_t handler,
|
|
unsigned long irqflags, const char *devname,
|
|
void *dev_id);
|
|
int bind_virq_to_irq(unsigned int virq, unsigned int cpu);
|
|
int bind_virq_to_irqhandler(unsigned int virq, unsigned int cpu,
|
|
irq_handler_t handler,
|
|
unsigned long irqflags, const char *devname,
|
|
void *dev_id);
|
|
int bind_ipi_to_irqhandler(enum ipi_vector ipi,
|
|
unsigned int cpu,
|
|
irq_handler_t handler,
|
|
unsigned long irqflags,
|
|
const char *devname,
|
|
void *dev_id);
|
|
int bind_interdomain_evtchn_to_irqhandler(unsigned int remote_domain,
|
|
unsigned int remote_port,
|
|
irq_handler_t handler,
|
|
unsigned long irqflags,
|
|
const char *devname,
|
|
void *dev_id);
|
|
|
|
/*
|
|
* Common unbind function for all event sources. Takes IRQ to unbind from.
|
|
* Automatically closes the underlying event channel (even for bindings
|
|
* made with bind_evtchn_to_irqhandler()).
|
|
*/
|
|
void unbind_from_irqhandler(unsigned int irq, void *dev_id);
|
|
|
|
/*
|
|
* Allow extra references to event channels exposed to userspace by evtchn
|
|
*/
|
|
int evtchn_make_refcounted(unsigned int evtchn);
|
|
int evtchn_get(unsigned int evtchn);
|
|
void evtchn_put(unsigned int evtchn);
|
|
|
|
void xen_send_IPI_one(unsigned int cpu, enum ipi_vector vector);
|
|
int resend_irq_on_evtchn(unsigned int irq);
|
|
void rebind_evtchn_irq(int evtchn, int irq);
|
|
|
|
static inline void notify_remote_via_evtchn(int port)
|
|
{
|
|
struct evtchn_send send = { .port = port };
|
|
(void)HYPERVISOR_event_channel_op(EVTCHNOP_send, &send);
|
|
}
|
|
|
|
void notify_remote_via_irq(int irq);
|
|
|
|
void xen_irq_resume(void);
|
|
|
|
void xen_hvm_prepare_kexec(struct shared_info *sip, unsigned long pfn);
|
|
|
|
/* Clear an irq's pending state, in preparation for polling on it */
|
|
void xen_clear_irq_pending(int irq);
|
|
void xen_set_irq_pending(int irq);
|
|
bool xen_test_irq_pending(int irq);
|
|
|
|
/* Poll waiting for an irq to become pending. In the usual case, the
|
|
irq will be disabled so it won't deliver an interrupt. */
|
|
void xen_poll_irq(int irq);
|
|
|
|
/* Poll waiting for an irq to become pending with a timeout. In the usual case,
|
|
* the irq will be disabled so it won't deliver an interrupt. */
|
|
void xen_poll_irq_timeout(int irq, u64 timeout);
|
|
|
|
/* Determine the IRQ which is bound to an event channel */
|
|
unsigned irq_from_evtchn(unsigned int evtchn);
|
|
|
|
/* Xen HVM evtchn vector callback */
|
|
void xen_hvm_callback_vector(void);
|
|
extern int xen_have_vector_callback;
|
|
int xen_set_callback_via(uint64_t via);
|
|
void xen_evtchn_do_upcall(struct pt_regs *regs);
|
|
void xen_hvm_evtchn_do_upcall(void);
|
|
|
|
/* Bind a pirq for a physical interrupt to an irq. */
|
|
int xen_bind_pirq_gsi_to_irq(unsigned gsi,
|
|
unsigned pirq, int shareable, char *name);
|
|
|
|
#ifdef CONFIG_PCI_MSI
|
|
/* Allocate a pirq for a MSI style physical interrupt. */
|
|
int xen_allocate_pirq_msi(struct pci_dev *dev, struct msi_desc *msidesc);
|
|
/* Bind an PSI pirq to an irq. */
|
|
int xen_bind_pirq_msi_to_irq(struct pci_dev *dev, struct msi_desc *msidesc,
|
|
int pirq, int vector, const char *name,
|
|
domid_t domid);
|
|
#endif
|
|
|
|
/* De-allocates the above mentioned physical interrupt. */
|
|
int xen_destroy_irq(int irq);
|
|
|
|
/* Return irq from pirq */
|
|
int xen_irq_from_pirq(unsigned pirq);
|
|
|
|
/* Return the pirq allocated to the irq. */
|
|
int xen_pirq_from_irq(unsigned irq);
|
|
|
|
/* Return the irq allocated to the gsi */
|
|
int xen_irq_from_gsi(unsigned gsi);
|
|
|
|
/* Determine whether to ignore this IRQ if it is passed to a guest. */
|
|
int xen_test_irq_shared(int irq);
|
|
|
|
#endif /* _XEN_EVENTS_H */
|