1 /* SPDX-License-Identifier: MIT */
2 
3 /******************************************************************************
4  * arch-arm.h
5  *
6  * Guest OS interface to ARM Xen.
7  *
8  * Permission is hereby granted, free of charge, to any person obtaining a copy
9  * of this software and associated documentation files (the "Software"), to
10  * deal in the Software without restriction, including without limitation the
11  * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
12  * sell copies of the Software, and to permit persons to whom the Software is
13  * furnished to do so, subject to the following conditions:
14  *
15  * The above copyright notice and this permission notice shall be included in
16  * all copies or substantial portions of the Software.
17  *
18  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
19  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
20  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
21  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
22  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
23  * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
24  * DEALINGS IN THE SOFTWARE.
25  *
26  * Copyright 2011 (C) Citrix Systems
27  */
28 
29 #ifndef __XEN_PUBLIC_ARCH_ARM_H__
30 #define __XEN_PUBLIC_ARCH_ARM_H__
31 
32 #include <zephyr/kernel.h>
33 
34 /*
35  * `incontents 50 arm_abi Hypercall Calling Convention
36  *
37  * A hypercall is issued using the ARM HVC instruction.
38  *
39  * A hypercall can take up to 5 arguments. These are passed in
40  * registers, the first argument in x0/r0 (for arm64/arm32 guests
41  * respectively irrespective of whether the underlying hypervisor is
42  * 32- or 64-bit), the second argument in x1/r1, the third in x2/r2,
43  * the forth in x3/r3 and the fifth in x4/r4.
44  *
45  * The hypercall number is passed in r12 (arm) or x16 (arm64). In both
46  * cases the relevant ARM procedure calling convention specifies this
47  * is an inter-procedure-call scratch register (e.g. for use in linker
48  * stubs). This use does not conflict with use during a hypercall.
49  *
50  * The HVC ISS must contain a Xen specific TAG: XEN_HYPERCALL_TAG.
51  *
52  * The return value is in x0/r0.
53  *
54  * The hypercall will clobber x16/r12 and the argument registers used
55  * by that hypercall (except r0 which is the return value) i.e. in
56  * addition to x16/r12 a 2 argument hypercall will clobber x1/r1 and a
57  * 4 argument hypercall will clobber x1/r1, x2/r2 and x3/r3.
58  *
59  * Parameter structs passed to hypercalls are laid out according to
60  * the Procedure Call Standard for the ARM Architecture (AAPCS, AKA
61  * EABI) and Procedure Call Standard for the ARM 64-bit Architecture
62  * (AAPCS64). Where there is a conflict the 64-bit standard should be
63  * used regardless of guest type. Structures which are passed as
64  * hypercall arguments are always little endian.
65  *
66  * All memory which is shared with other entities in the system
67  * (including the hypervisor and other guests) must reside in memory
68  * which is mapped as Normal Inner Write-Back Outer Write-Back Inner-Shareable.
69  * This applies to:
70  *  - hypercall arguments passed via a pointer to guest memory.
71  *  - memory shared via the grant table mechanism (including PV I/O
72  *    rings etc).
73  *  - memory shared with the hypervisor (struct shared_info, struct
74  *    vcpu_info, the grant table, etc).
75  *
76  * Any cache allocation hints are acceptable.
77  */
78 
79 /*
80  * `incontents 55 arm_hcall Supported Hypercalls
81  *
82  * Xen on ARM makes extensive use of hardware facilities and therefore
83  * only a subset of the potential hypercalls are required.
84  *
85  * Since ARM uses second stage paging any machine/physical addresses
86  * passed to hypercalls are Guest Physical Addresses (Intermediate
87  * Physical Addresses) unless otherwise noted.
88  *
89  * The following hypercalls (and sub operations) are supported on the
90  * ARM platform. Other hypercalls should be considered
91  * unavailable/unsupported.
92  *
93  *  HYPERVISOR_memory_op
94  *   All generic sub-operations
95  *
96  *  HYPERVISOR_domctl
97  *   All generic sub-operations, with the exception of:
98  *    * XEN_DOMCTL_irq_permission (not yet implemented)
99  *
100  *  HYPERVISOR_sched_op
101  *   All generic sub-operations, with the exception of:
102  *    * SCHEDOP_block -- prefer wfi hardware instruction
103  *
104  *  HYPERVISOR_console_io
105  *   All generic sub-operations
106  *
107  *  HYPERVISOR_xen_version
108  *   All generic sub-operations
109  *
110  *  HYPERVISOR_event_channel_op
111  *   All generic sub-operations
112  *
113  *  HYPERVISOR_physdev_op
114  *   No sub-operations are currently supported
115  *
116  *  HYPERVISOR_sysctl
117  *   All generic sub-operations, with the exception of:
118  *    * XEN_SYSCTL_page_offline_op
119  *    * XEN_SYSCTL_get_pmstat
120  *    * XEN_SYSCTL_pm_op
121  *
122  *  HYPERVISOR_hvm_op
123  *   Exactly these sub-operations are supported:
124  *    * HVMOP_set_param
125  *    * HVMOP_get_param
126  *
127  *  HYPERVISOR_grant_table_op
128  *   All generic sub-operations
129  *
130  *  HYPERVISOR_vcpu_op
131  *   Exactly these sub-operations are supported:
132  *    * VCPUOP_register_vcpu_info
133  *    * VCPUOP_register_runstate_memory_area
134  *
135  *
136  * Other notes on the ARM ABI:
137  *
138  * - struct start_info is not exported to ARM guests.
139  *
140  * - struct shared_info is mapped by ARM guests using the
141  *   HYPERVISOR_memory_op sub-op XENMEM_add_to_physmap, passing
142  *   XENMAPSPACE_shared_info as space parameter.
143  *
144  * - All the per-cpu struct vcpu_info are mapped by ARM guests using the
145  *   HYPERVISOR_vcpu_op sub-op VCPUOP_register_vcpu_info, including cpu0
146  *   struct vcpu_info.
147  *
148  * - The grant table is mapped using the HYPERVISOR_memory_op sub-op
149  *   XENMEM_add_to_physmap, passing XENMAPSPACE_grant_table as space
150  *   parameter. The memory range specified under the Xen compatible
151  *   hypervisor node on device tree can be used as target gpfn for the
152  *   mapping.
153  *
154  * - Xenstore is initialized by using the two hvm_params
155  *   HVM_PARAM_STORE_PFN and HVM_PARAM_STORE_EVTCHN. They can be read
156  *   with the HYPERVISOR_hvm_op sub-op HVMOP_get_param.
157  *
158  * - The paravirtualized console is initialized by using the two
159  *   hvm_params HVM_PARAM_CONSOLE_PFN and HVM_PARAM_CONSOLE_EVTCHN. They
160  *   can be read with the HYPERVISOR_hvm_op sub-op HVMOP_get_param.
161  *
162  * - Event channel notifications are delivered using the percpu GIC
163  *   interrupt specified under the Xen compatible hypervisor node on
164  *   device tree.
165  *
166  * - The device tree Xen compatible node is fully described under Linux
167  *   at Documentation/devicetree/bindings/arm/xen.txt.
168  */
169 
170 #define XEN_HYPERCALL_TAG 0XEA1
171 
172 #define  int64_aligned_t  int64_t __aligned(8)
173 #define uint64_aligned_t uint64_t __aligned(8)
174 
175 #ifndef __ASSEMBLY__
176 #define ___DEFINE_XEN_GUEST_HANDLE(name, type)		\
177 	typedef union { type *p; unsigned long q; }	\
178 		__guest_handle_ ## name;		\
179 	typedef union { type *p; uint64_aligned_t q; }	\
180 		__guest_handle_64_ ## name
181 
182 /*
183  * XEN_GUEST_HANDLE represents a guest pointer, when passed as a field
184  * in a struct in memory. On ARM is always 8 bytes sizes and 8 bytes
185  * aligned.
186  * XEN_GUEST_HANDLE_PARAM represents a guest pointer, when passed as an
187  * hypercall argument. It is 4 bytes on aarch32 and 8 bytes on aarch64.
188  */
189 #define __DEFINE_XEN_GUEST_HANDLE(name, type)	\
190 	___DEFINE_XEN_GUEST_HANDLE(name, type);	\
191 	___DEFINE_XEN_GUEST_HANDLE(const_##name, const type)
192 #define DEFINE_XEN_GUEST_HANDLE(name)		__DEFINE_XEN_GUEST_HANDLE(name, name)
193 #define __XEN_GUEST_HANDLE(name)		__guest_handle_64_ ## name
194 #define XEN_GUEST_HANDLE(name)			__XEN_GUEST_HANDLE(name)
195 #define XEN_GUEST_HANDLE_PARAM(name)		__guest_handle_ ## name
196 #define set_xen_guest_handle_raw(hnd, val)		\
197 	do {						\
198 		__typeof__(&(hnd)) _sxghr_tmp = &(hnd);	\
199 		_sxghr_tmp->q = 0;			\
200 		_sxghr_tmp->p = val;			\
201 	} while (0)
202 #define set_xen_guest_handle(hnd, val) set_xen_guest_handle_raw(hnd, val)
203 
204 typedef uint64_t xen_pfn_t;
205 #define PRI_xen_pfn PRIx64
206 #define PRIu_xen_pfn PRIu64
207 
208 /*
209  * Maximum number of virtual CPUs in legacy multi-processor guests.
210  * Only one. All other VCPUS must use VCPUOP_register_vcpu_info.
211  */
212 #define XEN_LEGACY_MAX_VCPUS 1
213 
214 typedef uint64_t xen_ulong_t;
215 #define PRI_xen_ulong PRIx64
216 
217 #ifdef CONFIG_XEN_DOM0
218 #if defined(__GNUC__) && !defined(__STRICT_ANSI__)
219 /* Anonymous union includes both 32- and 64-bit names (e.g., r0/x0). */
220 # define __DECL_REG(n64, n32) union {          \
221 	uint64_t n64;                           \
222 	uint32_t n32;                           \
223 }
224 #else
225 /* Non-gcc sources must always use the proper 64-bit name (e.g., x0). */
226 #define __DECL_REG(n64, n32)   uint64_t n64
227 #endif
228 
229 struct vcpu_guest_core_regs {
230 	/*      Aarch64         Aarch32 */
231 	__DECL_REG(x0,          r0_usr);
232 	__DECL_REG(x1,          r1_usr);
233 	__DECL_REG(x2,          r2_usr);
234 	__DECL_REG(x3,          r3_usr);
235 	__DECL_REG(x4,          r4_usr);
236 	__DECL_REG(x5,          r5_usr);
237 	__DECL_REG(x6,          r6_usr);
238 	__DECL_REG(x7,          r7_usr);
239 	__DECL_REG(x8,          r8_usr);
240 	__DECL_REG(x9,          r9_usr);
241 	__DECL_REG(x10,         r10_usr);
242 	__DECL_REG(x11,         r11_usr);
243 	__DECL_REG(x12,         r12_usr);
244 
245 	__DECL_REG(x13,         sp_usr);
246 	__DECL_REG(x14,         lr_usr);
247 
248 	__DECL_REG(x15,         __unused_sp_hyp);
249 
250 	__DECL_REG(x16,         lr_irq);
251 	__DECL_REG(x17,         sp_irq);
252 
253 	__DECL_REG(x18,         lr_svc);
254 	__DECL_REG(x19,         sp_svc);
255 
256 	__DECL_REG(x20,         lr_abt);
257 	__DECL_REG(x21,         sp_abt);
258 
259 	__DECL_REG(x22,         lr_und);
260 	__DECL_REG(x23,         sp_und);
261 
262 	__DECL_REG(x24,         r8_fiq);
263 	__DECL_REG(x25,         r9_fiq);
264 	__DECL_REG(x26,         r10_fiq);
265 	__DECL_REG(x27,         r11_fiq);
266 	__DECL_REG(x28,         r12_fiq);
267 
268 	__DECL_REG(x29,         sp_fiq);
269 	__DECL_REG(x30,         lr_fiq);
270 
271 	/* Return address and mode */
272 	__DECL_REG(pc64,        pc32);  /* ELR_EL2 */
273 	uint32_t cpsr;                  /* SPSR_EL2 */
274 
275 	union {
276 		uint32_t spsr_el1;      /* AArch64 */
277 		uint32_t spsr_svc;      /* AArch32 */
278 	};
279 
280 	/* AArch32 guests only */
281 	uint32_t spsr_fiq, spsr_irq, spsr_und, spsr_abt;
282 
283 	/* AArch64 guests only */
284 	uint64_t sp_el0;
285 	uint64_t sp_el1, elr_el1;
286 };
287 typedef struct vcpu_guest_core_regs vcpu_guest_core_regs_t;
288 DEFINE_XEN_GUEST_HANDLE(vcpu_guest_core_regs_t);
289 
290 #undef __DECL_REG
291 
292 struct vcpu_guest_context {
293 #define _VGCF_online			0
294 #define VGCF_online			(1 << _VGCF_online)
295 	uint32_t flags; /* VGCF_* */
296 
297 	struct vcpu_guest_core_regs user_regs; /* Core CPU registers */
298 
299 	uint64_t sctlr;
300 	uint64_t ttbcr, ttbr0, ttbr1;
301 };
302 typedef struct vcpu_guest_context vcpu_guest_context_t;
303 DEFINE_XEN_GUEST_HANDLE(vcpu_guest_context_t);
304 
305 /*
306  * struct xen_arch_domainconfig's ABI is covered by
307  * XEN_DOMCTL_INTERFACE_VERSION.
308  */
309 #define XEN_DOMCTL_CONFIG_GIC_NATIVE	0
310 #define XEN_DOMCTL_CONFIG_GIC_V2	1
311 #define XEN_DOMCTL_CONFIG_GIC_V3	2
312 
313 #define XEN_DOMCTL_CONFIG_TEE_NONE	0
314 #define XEN_DOMCTL_CONFIG_TEE_OPTEE	1
315 
316 struct xen_arch_domainconfig {
317 	/* IN/OUT */
318 	uint8_t gic_version;
319 	/* IN */
320 	uint16_t tee_type;
321 	/* IN */
322 	uint32_t nr_spis;
323 	/*
324 	 * OUT
325 	 * Based on the property clock-frequency in the DT timer node.
326 	 * The property may be present when the bootloader/firmware doesn't
327 	 * set correctly CNTFRQ which hold the timer frequency.
328 	 *
329 	 * As it's not possible to trap this register, we have to replicate
330 	 * the value in the guest DT.
331 	 *
332 	 * = 0 => property not present
333 	 * > 0 => Value of the property
334 	 *
335 	 */
336 	uint32_t clock_frequency;
337 };
338 #endif /* CONFIG_XEN_DOM0 */
339 
340 struct arch_vcpu_info {
341 };
342 typedef struct arch_vcpu_info arch_vcpu_info_t;
343 
344 struct arch_shared_info {
345 };
346 typedef struct arch_shared_info arch_shared_info_t;
347 typedef uint64_t xen_callback_t;
348 
349 #endif /* __ASSEMBLY__ */
350 
351 #ifdef CONFIG_XEN_DOM0
352 
353 /* PSR bits (CPSR, SPSR) */
354 #define PSR_THUMB			(1 << 5) /* Thumb Mode enable */
355 #define PSR_FIQ_MASK			(1 << 6) /* Fast Interrupt mask */
356 #define PSR_IRQ_MASK			(1 << 7) /* Interrupt mask */
357 #define PSR_ABT_MASK			(1 << 8) /* Asynchronous Abort mask */
358 #define PSR_BIG_ENDIAN			(1 << 9) /* arm32: Big Endian Mode */
359 #define PSR_DBG_MASK			(1 << 9) /* arm64: Debug Exception mask */
360 #define PSR_IT_MASK			(0x0600fc00) /* Thumb If-Then Mask */
361 #define PSR_JAZELLE			(1<<24) /* Jazelle Mode */
362 
363 /* 32 bit modes */
364 #define PSR_MODE_USR			0x10
365 #define PSR_MODE_FIQ			0x11
366 #define PSR_MODE_IRQ			0x12
367 #define PSR_MODE_SVC			0x13
368 #define PSR_MODE_MON			0x16
369 #define PSR_MODE_ABT			0x17
370 #define PSR_MODE_HYP			0x1a
371 #define PSR_MODE_UND			0x1b
372 #define PSR_MODE_SYS			0x1f
373 
374 /* 64 bit modes */
375 #define PSR_MODE_BIT			0x10 /* Set iff AArch32 */
376 #define PSR_MODE_EL3h			0x0d
377 #define PSR_MODE_EL3t			0x0c
378 #define PSR_MODE_EL2h			0x09
379 #define PSR_MODE_EL2t			0x08
380 #define PSR_MODE_EL1h			0x05
381 #define PSR_MODE_EL1t			0x04
382 #define PSR_MODE_EL0t			0x00
383 
384 #define PSR_GUEST32_INIT		(PSR_ABT_MASK|PSR_FIQ_MASK|PSR_IRQ_MASK|PSR_MODE_SVC)
385 #define PSR_GUEST64_INIT		(PSR_ABT_MASK|PSR_FIQ_MASK|PSR_IRQ_MASK|PSR_MODE_EL1h)
386 
387 #define SCTLR_GUEST_INIT		xen_mk_ullong(0x00c50078)
388 
389 /*
390  * Virtual machine platform (memory layout, interrupts)
391  *
392  * These are defined for consistency between the tools and the
393  * hypervisor. Guests must not rely on these hardcoded values but
394  * should instead use the FDT.
395  */
396 
397 /* Physical Address Space */
398 
399 /*
400  * vGIC mappings: Only one set of mapping is used by the guest.
401  * Therefore they can overlap.
402  */
403 
404 /* vGIC v2 mappings */
405 #define GUEST_GICD_BASE			xen_mk_ullong(0x03001000)
406 #define GUEST_GICD_SIZE			xen_mk_ullong(0x00001000)
407 #define GUEST_GICC_BASE			xen_mk_ullong(0x03002000)
408 #define GUEST_GICC_SIZE			xen_mk_ullong(0x00002000)
409 
410 /* vGIC v3 mappings */
411 #define GUEST_GICV3_GICD_BASE		xen_mk_ullong(0x03001000)
412 #define GUEST_GICV3_GICD_SIZE		xen_mk_ullong(0x00010000)
413 
414 #define GUEST_GICV3_RDIST_REGIONS	1
415 
416 #define GUEST_GICV3_GICR0_BASE		xen_mk_ullong(0x03020000) /* vCPU0..127 */
417 #define GUEST_GICV3_GICR0_SIZE		xen_mk_ullong(0x01000000)
418 
419 /* ACPI tables physical address */
420 #define GUEST_ACPI_BASE			xen_mk_ullong(0x20000000)
421 #define GUEST_ACPI_SIZE			xen_mk_ullong(0x02000000)
422 
423 /* PL011 mappings */
424 #define GUEST_PL011_BASE		xen_mk_ullong(0x22000000)
425 #define GUEST_PL011_SIZE		xen_mk_ullong(0x00001000)
426 
427 /*
428  * 16MB == 4096 pages reserved for guest to use as a region to map its
429  * grant table in.
430  */
431 #define GUEST_GNTTAB_BASE		xen_mk_ullong(0x38000000)
432 #define GUEST_GNTTAB_SIZE		xen_mk_ullong(0x01000000)
433 
434 #define GUEST_MAGIC_BASE		xen_mk_ullong(0x39000000)
435 #define GUEST_MAGIC_SIZE		xen_mk_ullong(0x01000000)
436 
437 #define GUEST_RAM_BANKS			2
438 
439 #define GUEST_RAM0_BASE			xen_mk_ullong(0x40000000) /* 3GB of low RAM @ 1GB */
440 #define GUEST_RAM0_SIZE			xen_mk_ullong(0xc0000000)
441 
442 #define GUEST_RAM1_BASE			xen_mk_ullong(0x0200000000) /* 1016GB of RAM @ 8GB */
443 #define GUEST_RAM1_SIZE			xen_mk_ullong(0xfe00000000)
444 
445 #define GUEST_RAM_BASE			GUEST_RAM0_BASE /* Lowest RAM address */
446 /* Largest amount of actual RAM, not including holes */
447 #define GUEST_RAM_MAX			(GUEST_RAM0_SIZE + GUEST_RAM1_SIZE)
448 /* Suitable for e.g. const uint64_t ramfoo[] = GUEST_RAM_BANK_FOOS; */
449 #define GUEST_RAM_BANK_BASES		{ GUEST_RAM0_BASE, GUEST_RAM1_BASE }
450 #define GUEST_RAM_BANK_SIZES		{ GUEST_RAM0_SIZE, GUEST_RAM1_SIZE }
451 
452 /* Current supported guest VCPUs */
453 #define GUEST_MAX_VCPUS 128
454 
455 /* Interrupts */
456 #define GUEST_TIMER_VIRT_PPI		27
457 #define GUEST_TIMER_PHYS_S_PPI		29
458 #define GUEST_TIMER_PHYS_NS_PPI		30
459 #define GUEST_EVTCHN_PPI		31
460 
461 #define GUEST_VPL011_SPI		32
462 
463 /* PSCI functions */
464 #define PSCI_cpu_suspend		0
465 #define PSCI_cpu_off			1
466 #define PSCI_cpu_on			2
467 #define PSCI_migrate			3
468 
469 #endif /* CONFIG_XEN_DOM0 */
470 
471 #ifndef __ASSEMBLY__
472 /* Stub definition of PMU structure */
473 typedef struct xen_pmu_arch { uint8_t dummy; } xen_pmu_arch_t;
474 #endif /* __ASSEMBLY__ */
475 
476 #endif /* __XEN_PUBLIC_ARCH_ARM_H__ */
477