2 * Physical memory management
4 * Copyright 2011 Red Hat, Inc. and/or its affiliates
7 * Avi Kivity <avi@redhat.com>
9 * This work is licensed under the terms of the GNU GPL, version 2. See
10 * the COPYING file in the top-level directory.
15 #include "exec-memory.h"
21 #define WANT_EXEC_OBSOLETE
22 #include "exec-obsolete.h"
24 unsigned memory_region_transaction_depth = 0;
25 static bool memory_region_update_pending = false;
26 static bool global_dirty_log = false;
28 static QLIST_HEAD(, MemoryListener) memory_listeners
29 = QLIST_HEAD_INITIALIZER(memory_listeners);
31 typedef struct AddrRange AddrRange;
34 * Note using signed integers limits us to physical addresses at most
35 * 63 bits wide. They are needed for negative offsetting in aliases
36 * (large MemoryRegion::alias_offset).
43 static AddrRange addrrange_make(Int128 start, Int128 size)
45 return (AddrRange) { start, size };
48 static bool addrrange_equal(AddrRange r1, AddrRange r2)
50 return int128_eq(r1.start, r2.start) && int128_eq(r1.size, r2.size);
53 static Int128 addrrange_end(AddrRange r)
55 return int128_add(r.start, r.size);
58 static AddrRange addrrange_shift(AddrRange range, Int128 delta)
60 int128_addto(&range.start, delta);
64 static bool addrrange_contains(AddrRange range, Int128 addr)
66 return int128_ge(addr, range.start)
67 && int128_lt(addr, addrrange_end(range));
70 static bool addrrange_intersects(AddrRange r1, AddrRange r2)
72 return addrrange_contains(r1, r2.start)
73 || addrrange_contains(r2, r1.start);
76 static AddrRange addrrange_intersection(AddrRange r1, AddrRange r2)
78 Int128 start = int128_max(r1.start, r2.start);
79 Int128 end = int128_min(addrrange_end(r1), addrrange_end(r2));
80 return addrrange_make(start, int128_sub(end, start));
83 struct CoalescedMemoryRange {
85 QTAILQ_ENTRY(CoalescedMemoryRange) link;
88 struct MemoryRegionIoeventfd {
95 static bool memory_region_ioeventfd_before(MemoryRegionIoeventfd a,
96 MemoryRegionIoeventfd b)
98 if (int128_lt(a.addr.start, b.addr.start)) {
100 } else if (int128_gt(a.addr.start, b.addr.start)) {
102 } else if (int128_lt(a.addr.size, b.addr.size)) {
104 } else if (int128_gt(a.addr.size, b.addr.size)) {
106 } else if (a.match_data < b.match_data) {
108 } else if (a.match_data > b.match_data) {
110 } else if (a.match_data) {
111 if (a.data < b.data) {
113 } else if (a.data > b.data) {
119 } else if (a.fd > b.fd) {
125 static bool memory_region_ioeventfd_equal(MemoryRegionIoeventfd a,
126 MemoryRegionIoeventfd b)
128 return !memory_region_ioeventfd_before(a, b)
129 && !memory_region_ioeventfd_before(b, a);
132 typedef struct FlatRange FlatRange;
133 typedef struct FlatView FlatView;
135 /* Range of memory in the global map. Addresses are absolute. */
138 target_phys_addr_t offset_in_region;
140 uint8_t dirty_log_mask;
145 /* Flattened global view of current active memory hierarchy. Kept in sorted
151 unsigned nr_allocated;
154 typedef struct AddressSpace AddressSpace;
155 typedef struct AddressSpaceOps AddressSpaceOps;
157 /* A system address space - I/O, memory, etc. */
158 struct AddressSpace {
159 const AddressSpaceOps *ops;
161 FlatView current_map;
163 MemoryRegionIoeventfd *ioeventfds;
166 struct AddressSpaceOps {
167 void (*range_add)(AddressSpace *as, FlatRange *fr);
168 void (*range_del)(AddressSpace *as, FlatRange *fr);
169 void (*log_start)(AddressSpace *as, FlatRange *fr);
170 void (*log_stop)(AddressSpace *as, FlatRange *fr);
171 void (*ioeventfd_add)(AddressSpace *as, MemoryRegionIoeventfd *fd);
172 void (*ioeventfd_del)(AddressSpace *as, MemoryRegionIoeventfd *fd);
175 #define FOR_EACH_FLAT_RANGE(var, view) \
176 for (var = (view)->ranges; var < (view)->ranges + (view)->nr; ++var)
178 static bool flatrange_equal(FlatRange *a, FlatRange *b)
180 return a->mr == b->mr
181 && addrrange_equal(a->addr, b->addr)
182 && a->offset_in_region == b->offset_in_region
183 && a->readable == b->readable
184 && a->readonly == b->readonly;
187 static void flatview_init(FlatView *view)
191 view->nr_allocated = 0;
194 /* Insert a range into a given position. Caller is responsible for maintaining
197 static void flatview_insert(FlatView *view, unsigned pos, FlatRange *range)
199 if (view->nr == view->nr_allocated) {
200 view->nr_allocated = MAX(2 * view->nr, 10);
201 view->ranges = g_realloc(view->ranges,
202 view->nr_allocated * sizeof(*view->ranges));
204 memmove(view->ranges + pos + 1, view->ranges + pos,
205 (view->nr - pos) * sizeof(FlatRange));
206 view->ranges[pos] = *range;
210 static void flatview_destroy(FlatView *view)
212 g_free(view->ranges);
215 static bool can_merge(FlatRange *r1, FlatRange *r2)
217 return int128_eq(addrrange_end(r1->addr), r2->addr.start)
219 && int128_eq(int128_add(int128_make64(r1->offset_in_region),
221 int128_make64(r2->offset_in_region))
222 && r1->dirty_log_mask == r2->dirty_log_mask
223 && r1->readable == r2->readable
224 && r1->readonly == r2->readonly;
227 /* Attempt to simplify a view by merging ajacent ranges */
228 static void flatview_simplify(FlatView *view)
233 while (i < view->nr) {
236 && can_merge(&view->ranges[j-1], &view->ranges[j])) {
237 int128_addto(&view->ranges[i].addr.size, view->ranges[j].addr.size);
241 memmove(&view->ranges[i], &view->ranges[j],
242 (view->nr - j) * sizeof(view->ranges[j]));
247 static void memory_region_read_accessor(void *opaque,
248 target_phys_addr_t addr,
254 MemoryRegion *mr = opaque;
257 tmp = mr->ops->read(mr->opaque, addr, size);
258 *value |= (tmp & mask) << shift;
261 static void memory_region_write_accessor(void *opaque,
262 target_phys_addr_t addr,
268 MemoryRegion *mr = opaque;
271 tmp = (*value >> shift) & mask;
272 mr->ops->write(mr->opaque, addr, tmp, size);
275 static void access_with_adjusted_size(target_phys_addr_t addr,
278 unsigned access_size_min,
279 unsigned access_size_max,
280 void (*access)(void *opaque,
281 target_phys_addr_t addr,
288 uint64_t access_mask;
289 unsigned access_size;
292 if (!access_size_min) {
295 if (!access_size_max) {
298 access_size = MAX(MIN(size, access_size_max), access_size_min);
299 access_mask = -1ULL >> (64 - access_size * 8);
300 for (i = 0; i < size; i += access_size) {
301 /* FIXME: big-endian support */
302 access(opaque, addr + i, value, access_size, i * 8, access_mask);
306 static void as_memory_range_add(AddressSpace *as, FlatRange *fr)
308 ram_addr_t phys_offset, region_offset;
310 phys_offset = fr->mr->ram_addr;
311 region_offset = fr->offset_in_region;
312 /* cpu_register_physical_memory_log() wants region_offset for
313 * mmio, but prefers offseting phys_offset for RAM. Humour it.
315 if (memory_region_is_ram(fr->mr)) {
316 phys_offset += region_offset;
321 phys_offset &= ~TARGET_PAGE_MASK & ~IO_MEM_ROMD;
325 phys_offset |= io_mem_rom.ram_addr;
328 cpu_register_physical_memory_log(int128_get64(fr->addr.start),
329 int128_get64(fr->addr.size),
335 static void as_memory_range_del(AddressSpace *as, FlatRange *fr)
337 cpu_register_physical_memory(int128_get64(fr->addr.start),
338 int128_get64(fr->addr.size),
339 io_mem_unassigned.ram_addr);
342 static void as_memory_log_start(AddressSpace *as, FlatRange *fr)
346 static void as_memory_log_stop(AddressSpace *as, FlatRange *fr)
350 static void as_memory_ioeventfd_add(AddressSpace *as, MemoryRegionIoeventfd *fd)
354 assert(fd->match_data && int128_get64(fd->addr.size) == 4);
356 r = kvm_set_ioeventfd_mmio_long(fd->fd, int128_get64(fd->addr.start),
363 static void as_memory_ioeventfd_del(AddressSpace *as, MemoryRegionIoeventfd *fd)
367 r = kvm_set_ioeventfd_mmio_long(fd->fd, int128_get64(fd->addr.start),
374 static const AddressSpaceOps address_space_ops_memory = {
375 .range_add = as_memory_range_add,
376 .range_del = as_memory_range_del,
377 .log_start = as_memory_log_start,
378 .log_stop = as_memory_log_stop,
379 .ioeventfd_add = as_memory_ioeventfd_add,
380 .ioeventfd_del = as_memory_ioeventfd_del,
383 static AddressSpace address_space_memory = {
384 .ops = &address_space_ops_memory,
387 static const MemoryRegionPortio *find_portio(MemoryRegion *mr, uint64_t offset,
388 unsigned width, bool write)
390 const MemoryRegionPortio *mrp;
392 for (mrp = mr->ops->old_portio; mrp->size; ++mrp) {
393 if (offset >= mrp->offset && offset < mrp->offset + mrp->len
394 && width == mrp->size
395 && (write ? (bool)mrp->write : (bool)mrp->read)) {
402 static void memory_region_iorange_read(IORange *iorange,
407 MemoryRegion *mr = container_of(iorange, MemoryRegion, iorange);
409 if (mr->ops->old_portio) {
410 const MemoryRegionPortio *mrp = find_portio(mr, offset, width, false);
412 *data = ((uint64_t)1 << (width * 8)) - 1;
414 *data = mrp->read(mr->opaque, offset + mr->offset);
415 } else if (width == 2) {
416 mrp = find_portio(mr, offset, 1, false);
418 *data = mrp->read(mr->opaque, offset + mr->offset) |
419 (mrp->read(mr->opaque, offset + mr->offset + 1) << 8);
424 access_with_adjusted_size(offset + mr->offset, data, width,
425 mr->ops->impl.min_access_size,
426 mr->ops->impl.max_access_size,
427 memory_region_read_accessor, mr);
430 static void memory_region_iorange_write(IORange *iorange,
435 MemoryRegion *mr = container_of(iorange, MemoryRegion, iorange);
437 if (mr->ops->old_portio) {
438 const MemoryRegionPortio *mrp = find_portio(mr, offset, width, true);
441 mrp->write(mr->opaque, offset + mr->offset, data);
442 } else if (width == 2) {
443 mrp = find_portio(mr, offset, 1, false);
445 mrp->write(mr->opaque, offset + mr->offset, data & 0xff);
446 mrp->write(mr->opaque, offset + mr->offset + 1, data >> 8);
450 access_with_adjusted_size(offset + mr->offset, &data, width,
451 mr->ops->impl.min_access_size,
452 mr->ops->impl.max_access_size,
453 memory_region_write_accessor, mr);
456 static const IORangeOps memory_region_iorange_ops = {
457 .read = memory_region_iorange_read,
458 .write = memory_region_iorange_write,
461 static void as_io_range_add(AddressSpace *as, FlatRange *fr)
463 iorange_init(&fr->mr->iorange, &memory_region_iorange_ops,
464 int128_get64(fr->addr.start), int128_get64(fr->addr.size));
465 ioport_register(&fr->mr->iorange);
468 static void as_io_range_del(AddressSpace *as, FlatRange *fr)
470 isa_unassign_ioport(int128_get64(fr->addr.start),
471 int128_get64(fr->addr.size));
474 static void as_io_ioeventfd_add(AddressSpace *as, MemoryRegionIoeventfd *fd)
478 assert(fd->match_data && int128_get64(fd->addr.size) == 2);
480 r = kvm_set_ioeventfd_pio_word(fd->fd, int128_get64(fd->addr.start),
487 static void as_io_ioeventfd_del(AddressSpace *as, MemoryRegionIoeventfd *fd)
491 r = kvm_set_ioeventfd_pio_word(fd->fd, int128_get64(fd->addr.start),
498 static const AddressSpaceOps address_space_ops_io = {
499 .range_add = as_io_range_add,
500 .range_del = as_io_range_del,
501 .ioeventfd_add = as_io_ioeventfd_add,
502 .ioeventfd_del = as_io_ioeventfd_del,
505 static AddressSpace address_space_io = {
506 .ops = &address_space_ops_io,
509 static AddressSpace *memory_region_to_address_space(MemoryRegion *mr)
514 if (mr == address_space_memory.root) {
515 return &address_space_memory;
517 if (mr == address_space_io.root) {
518 return &address_space_io;
523 /* Render a memory region into the global view. Ranges in @view obscure
526 static void render_memory_region(FlatView *view,
532 MemoryRegion *subregion;
534 target_phys_addr_t offset_in_region;
544 int128_addto(&base, int128_make64(mr->addr));
545 readonly |= mr->readonly;
547 tmp = addrrange_make(base, mr->size);
549 if (!addrrange_intersects(tmp, clip)) {
553 clip = addrrange_intersection(tmp, clip);
556 int128_subfrom(&base, int128_make64(mr->alias->addr));
557 int128_subfrom(&base, int128_make64(mr->alias_offset));
558 render_memory_region(view, mr->alias, base, clip, readonly);
562 /* Render subregions in priority order. */
563 QTAILQ_FOREACH(subregion, &mr->subregions, subregions_link) {
564 render_memory_region(view, subregion, base, clip, readonly);
567 if (!mr->terminates) {
571 offset_in_region = int128_get64(int128_sub(clip.start, base));
575 /* Render the region itself into any gaps left by the current view. */
576 for (i = 0; i < view->nr && int128_nz(remain); ++i) {
577 if (int128_ge(base, addrrange_end(view->ranges[i].addr))) {
580 if (int128_lt(base, view->ranges[i].addr.start)) {
581 now = int128_min(remain,
582 int128_sub(view->ranges[i].addr.start, base));
584 fr.offset_in_region = offset_in_region;
585 fr.addr = addrrange_make(base, now);
586 fr.dirty_log_mask = mr->dirty_log_mask;
587 fr.readable = mr->readable;
588 fr.readonly = readonly;
589 flatview_insert(view, i, &fr);
591 int128_addto(&base, now);
592 offset_in_region += int128_get64(now);
593 int128_subfrom(&remain, now);
595 if (int128_eq(base, view->ranges[i].addr.start)) {
596 now = int128_min(remain, view->ranges[i].addr.size);
597 int128_addto(&base, now);
598 offset_in_region += int128_get64(now);
599 int128_subfrom(&remain, now);
602 if (int128_nz(remain)) {
604 fr.offset_in_region = offset_in_region;
605 fr.addr = addrrange_make(base, remain);
606 fr.dirty_log_mask = mr->dirty_log_mask;
607 fr.readable = mr->readable;
608 fr.readonly = readonly;
609 flatview_insert(view, i, &fr);
613 /* Render a memory topology into a list of disjoint absolute ranges. */
614 static FlatView generate_memory_topology(MemoryRegion *mr)
618 flatview_init(&view);
620 render_memory_region(&view, mr, int128_zero(),
621 addrrange_make(int128_zero(), int128_2_64()), false);
622 flatview_simplify(&view);
627 static void address_space_add_del_ioeventfds(AddressSpace *as,
628 MemoryRegionIoeventfd *fds_new,
630 MemoryRegionIoeventfd *fds_old,
635 /* Generate a symmetric difference of the old and new fd sets, adding
636 * and deleting as necessary.
640 while (iold < fds_old_nb || inew < fds_new_nb) {
641 if (iold < fds_old_nb
642 && (inew == fds_new_nb
643 || memory_region_ioeventfd_before(fds_old[iold],
645 as->ops->ioeventfd_del(as, &fds_old[iold]);
647 } else if (inew < fds_new_nb
648 && (iold == fds_old_nb
649 || memory_region_ioeventfd_before(fds_new[inew],
651 as->ops->ioeventfd_add(as, &fds_new[inew]);
660 static void address_space_update_ioeventfds(AddressSpace *as)
663 unsigned ioeventfd_nb = 0;
664 MemoryRegionIoeventfd *ioeventfds = NULL;
668 FOR_EACH_FLAT_RANGE(fr, &as->current_map) {
669 for (i = 0; i < fr->mr->ioeventfd_nb; ++i) {
670 tmp = addrrange_shift(fr->mr->ioeventfds[i].addr,
671 int128_sub(fr->addr.start,
672 int128_make64(fr->offset_in_region)));
673 if (addrrange_intersects(fr->addr, tmp)) {
675 ioeventfds = g_realloc(ioeventfds,
676 ioeventfd_nb * sizeof(*ioeventfds));
677 ioeventfds[ioeventfd_nb-1] = fr->mr->ioeventfds[i];
678 ioeventfds[ioeventfd_nb-1].addr = tmp;
683 address_space_add_del_ioeventfds(as, ioeventfds, ioeventfd_nb,
684 as->ioeventfds, as->ioeventfd_nb);
686 g_free(as->ioeventfds);
687 as->ioeventfds = ioeventfds;
688 as->ioeventfd_nb = ioeventfd_nb;
691 typedef void ListenerCallback(MemoryListener *listener,
692 MemoryRegionSection *mrs);
694 /* Want "void (&MemoryListener::*callback)(const MemoryRegionSection& s)" */
695 static void memory_listener_update_region(FlatRange *fr, AddressSpace *as,
696 size_t callback_offset)
698 MemoryRegionSection section = {
700 .address_space = as->root,
701 .offset_within_region = fr->offset_in_region,
702 .size = int128_get64(fr->addr.size),
703 .offset_within_address_space = int128_get64(fr->addr.start),
705 MemoryListener *listener;
707 QLIST_FOREACH(listener, &memory_listeners, link) {
708 ListenerCallback *callback
709 = *(ListenerCallback **)((void *)listener + callback_offset);
710 callback(listener, §ion);
714 #define MEMORY_LISTENER_UPDATE_REGION(fr, as, callback) \
715 memory_listener_update_region(fr, as, offsetof(MemoryListener, callback))
717 static void address_space_update_topology_pass(AddressSpace *as,
723 FlatRange *frold, *frnew;
725 /* Generate a symmetric difference of the old and new memory maps.
726 * Kill ranges in the old map, and instantiate ranges in the new map.
729 while (iold < old_view.nr || inew < new_view.nr) {
730 if (iold < old_view.nr) {
731 frold = &old_view.ranges[iold];
735 if (inew < new_view.nr) {
736 frnew = &new_view.ranges[inew];
743 || int128_lt(frold->addr.start, frnew->addr.start)
744 || (int128_eq(frold->addr.start, frnew->addr.start)
745 && !flatrange_equal(frold, frnew)))) {
746 /* In old, but (not in new, or in new but attributes changed). */
749 MEMORY_LISTENER_UPDATE_REGION(frold, as, region_del);
750 as->ops->range_del(as, frold);
754 } else if (frold && frnew && flatrange_equal(frold, frnew)) {
755 /* In both (logging may have changed) */
758 if (frold->dirty_log_mask && !frnew->dirty_log_mask) {
759 MEMORY_LISTENER_UPDATE_REGION(frnew, as, log_stop);
760 as->ops->log_stop(as, frnew);
761 } else if (frnew->dirty_log_mask && !frold->dirty_log_mask) {
762 as->ops->log_start(as, frnew);
763 MEMORY_LISTENER_UPDATE_REGION(frnew, as, log_start);
773 as->ops->range_add(as, frnew);
774 MEMORY_LISTENER_UPDATE_REGION(frnew, as, region_add);
783 static void address_space_update_topology(AddressSpace *as)
785 FlatView old_view = as->current_map;
786 FlatView new_view = generate_memory_topology(as->root);
788 address_space_update_topology_pass(as, old_view, new_view, false);
789 address_space_update_topology_pass(as, old_view, new_view, true);
791 as->current_map = new_view;
792 flatview_destroy(&old_view);
793 address_space_update_ioeventfds(as);
796 static void memory_region_update_topology(MemoryRegion *mr)
798 if (memory_region_transaction_depth) {
799 memory_region_update_pending |= !mr || mr->enabled;
803 if (mr && !mr->enabled) {
807 if (address_space_memory.root) {
808 address_space_update_topology(&address_space_memory);
810 if (address_space_io.root) {
811 address_space_update_topology(&address_space_io);
814 memory_region_update_pending = false;
817 void memory_region_transaction_begin(void)
819 ++memory_region_transaction_depth;
822 void memory_region_transaction_commit(void)
824 assert(memory_region_transaction_depth);
825 --memory_region_transaction_depth;
826 if (!memory_region_transaction_depth && memory_region_update_pending) {
827 memory_region_update_topology(NULL);
831 static void memory_region_destructor_none(MemoryRegion *mr)
835 static void memory_region_destructor_ram(MemoryRegion *mr)
837 qemu_ram_free(mr->ram_addr);
840 static void memory_region_destructor_ram_from_ptr(MemoryRegion *mr)
842 qemu_ram_free_from_ptr(mr->ram_addr);
845 static void memory_region_destructor_iomem(MemoryRegion *mr)
847 cpu_unregister_io_memory(mr->ram_addr);
850 static void memory_region_destructor_rom_device(MemoryRegion *mr)
852 qemu_ram_free(mr->ram_addr & TARGET_PAGE_MASK);
853 cpu_unregister_io_memory(mr->ram_addr & ~(TARGET_PAGE_MASK | IO_MEM_ROMD));
856 static bool memory_region_wrong_endianness(MemoryRegion *mr)
858 #ifdef TARGET_BIG_ENDIAN
859 return mr->ops->endianness == DEVICE_LITTLE_ENDIAN;
861 return mr->ops->endianness == DEVICE_BIG_ENDIAN;
865 void memory_region_init(MemoryRegion *mr,
871 mr->size = int128_make64(size);
872 if (size == UINT64_MAX) {
873 mr->size = int128_2_64();
878 mr->terminates = false;
881 mr->readonly = false;
882 mr->destructor = memory_region_destructor_none;
884 mr->may_overlap = false;
886 QTAILQ_INIT(&mr->subregions);
887 memset(&mr->subregions_link, 0, sizeof mr->subregions_link);
888 QTAILQ_INIT(&mr->coalesced);
889 mr->name = g_strdup(name);
890 mr->dirty_log_mask = 0;
891 mr->ioeventfd_nb = 0;
892 mr->ioeventfds = NULL;
895 static bool memory_region_access_valid(MemoryRegion *mr,
896 target_phys_addr_t addr,
900 if (mr->ops->valid.accepts
901 && !mr->ops->valid.accepts(mr->opaque, addr, size, is_write)) {
905 if (!mr->ops->valid.unaligned && (addr & (size - 1))) {
909 /* Treat zero as compatibility all valid */
910 if (!mr->ops->valid.max_access_size) {
914 if (size > mr->ops->valid.max_access_size
915 || size < mr->ops->valid.min_access_size) {
921 static uint32_t memory_region_read_thunk_n(void *_mr,
922 target_phys_addr_t addr,
925 MemoryRegion *mr = _mr;
928 if (!memory_region_access_valid(mr, addr, size, false)) {
929 return -1U; /* FIXME: better signalling */
932 if (!mr->ops->read) {
933 return mr->ops->old_mmio.read[bitops_ffsl(size)](mr->opaque, addr);
936 /* FIXME: support unaligned access */
937 access_with_adjusted_size(addr + mr->offset, &data, size,
938 mr->ops->impl.min_access_size,
939 mr->ops->impl.max_access_size,
940 memory_region_read_accessor, mr);
945 static void memory_region_write_thunk_n(void *_mr,
946 target_phys_addr_t addr,
950 MemoryRegion *mr = _mr;
952 if (!memory_region_access_valid(mr, addr, size, true)) {
953 return; /* FIXME: better signalling */
956 if (!mr->ops->write) {
957 mr->ops->old_mmio.write[bitops_ffsl(size)](mr->opaque, addr, data);
961 /* FIXME: support unaligned access */
962 access_with_adjusted_size(addr + mr->offset, &data, size,
963 mr->ops->impl.min_access_size,
964 mr->ops->impl.max_access_size,
965 memory_region_write_accessor, mr);
968 static uint32_t memory_region_read_thunk_b(void *mr, target_phys_addr_t addr)
970 return memory_region_read_thunk_n(mr, addr, 1);
973 static uint32_t memory_region_read_thunk_w(void *mr, target_phys_addr_t addr)
977 data = memory_region_read_thunk_n(mr, addr, 2);
978 if (memory_region_wrong_endianness(mr)) {
979 data = bswap16(data);
984 static uint32_t memory_region_read_thunk_l(void *mr, target_phys_addr_t addr)
988 data = memory_region_read_thunk_n(mr, addr, 4);
989 if (memory_region_wrong_endianness(mr)) {
990 data = bswap32(data);
995 static void memory_region_write_thunk_b(void *mr, target_phys_addr_t addr,
998 memory_region_write_thunk_n(mr, addr, 1, data);
1001 static void memory_region_write_thunk_w(void *mr, target_phys_addr_t addr,
1004 if (memory_region_wrong_endianness(mr)) {
1005 data = bswap16(data);
1007 memory_region_write_thunk_n(mr, addr, 2, data);
1010 static void memory_region_write_thunk_l(void *mr, target_phys_addr_t addr,
1013 if (memory_region_wrong_endianness(mr)) {
1014 data = bswap32(data);
1016 memory_region_write_thunk_n(mr, addr, 4, data);
1019 static CPUReadMemoryFunc * const memory_region_read_thunk[] = {
1020 memory_region_read_thunk_b,
1021 memory_region_read_thunk_w,
1022 memory_region_read_thunk_l,
1025 static CPUWriteMemoryFunc * const memory_region_write_thunk[] = {
1026 memory_region_write_thunk_b,
1027 memory_region_write_thunk_w,
1028 memory_region_write_thunk_l,
1031 void memory_region_init_io(MemoryRegion *mr,
1032 const MemoryRegionOps *ops,
1037 memory_region_init(mr, name, size);
1039 mr->opaque = opaque;
1040 mr->terminates = true;
1041 mr->destructor = memory_region_destructor_iomem;
1042 mr->ram_addr = cpu_register_io_memory(memory_region_read_thunk,
1043 memory_region_write_thunk,
1047 void memory_region_init_ram(MemoryRegion *mr,
1051 memory_region_init(mr, name, size);
1053 mr->terminates = true;
1054 mr->destructor = memory_region_destructor_ram;
1055 mr->ram_addr = qemu_ram_alloc(size, mr);
1058 void memory_region_init_ram_ptr(MemoryRegion *mr,
1063 memory_region_init(mr, name, size);
1065 mr->terminates = true;
1066 mr->destructor = memory_region_destructor_ram_from_ptr;
1067 mr->ram_addr = qemu_ram_alloc_from_ptr(size, ptr, mr);
1070 void memory_region_init_alias(MemoryRegion *mr,
1073 target_phys_addr_t offset,
1076 memory_region_init(mr, name, size);
1078 mr->alias_offset = offset;
1081 void memory_region_init_rom_device(MemoryRegion *mr,
1082 const MemoryRegionOps *ops,
1087 memory_region_init(mr, name, size);
1089 mr->opaque = opaque;
1090 mr->terminates = true;
1091 mr->destructor = memory_region_destructor_rom_device;
1092 mr->ram_addr = qemu_ram_alloc(size, mr);
1093 mr->ram_addr |= cpu_register_io_memory(memory_region_read_thunk,
1094 memory_region_write_thunk,
1096 mr->ram_addr |= IO_MEM_ROMD;
1099 void memory_region_destroy(MemoryRegion *mr)
1101 assert(QTAILQ_EMPTY(&mr->subregions));
1103 memory_region_clear_coalescing(mr);
1104 g_free((char *)mr->name);
1105 g_free(mr->ioeventfds);
1108 uint64_t memory_region_size(MemoryRegion *mr)
1110 if (int128_eq(mr->size, int128_2_64())) {
1113 return int128_get64(mr->size);
1116 const char *memory_region_name(MemoryRegion *mr)
1121 bool memory_region_is_ram(MemoryRegion *mr)
1126 bool memory_region_is_logging(MemoryRegion *mr)
1128 return mr->dirty_log_mask;
1131 bool memory_region_is_rom(MemoryRegion *mr)
1133 return mr->ram && mr->readonly;
1136 void memory_region_set_offset(MemoryRegion *mr, target_phys_addr_t offset)
1138 mr->offset = offset;
1141 void memory_region_set_log(MemoryRegion *mr, bool log, unsigned client)
1143 uint8_t mask = 1 << client;
1145 mr->dirty_log_mask = (mr->dirty_log_mask & ~mask) | (log * mask);
1146 memory_region_update_topology(mr);
1149 bool memory_region_get_dirty(MemoryRegion *mr, target_phys_addr_t addr,
1152 assert(mr->terminates);
1153 return cpu_physical_memory_get_dirty(mr->ram_addr + addr, 1 << client);
1156 void memory_region_set_dirty(MemoryRegion *mr, target_phys_addr_t addr)
1158 assert(mr->terminates);
1159 return cpu_physical_memory_set_dirty(mr->ram_addr + addr);
1162 void memory_region_sync_dirty_bitmap(MemoryRegion *mr)
1166 FOR_EACH_FLAT_RANGE(fr, &address_space_memory.current_map) {
1168 MEMORY_LISTENER_UPDATE_REGION(fr, &address_space_memory, log_sync);
1173 void memory_region_set_readonly(MemoryRegion *mr, bool readonly)
1175 if (mr->readonly != readonly) {
1176 mr->readonly = readonly;
1177 memory_region_update_topology(mr);
1181 void memory_region_rom_device_set_readable(MemoryRegion *mr, bool readable)
1183 if (mr->readable != readable) {
1184 mr->readable = readable;
1185 memory_region_update_topology(mr);
1189 void memory_region_reset_dirty(MemoryRegion *mr, target_phys_addr_t addr,
1190 target_phys_addr_t size, unsigned client)
1192 assert(mr->terminates);
1193 cpu_physical_memory_reset_dirty(mr->ram_addr + addr,
1194 mr->ram_addr + addr + size,
1198 void *memory_region_get_ram_ptr(MemoryRegion *mr)
1201 return memory_region_get_ram_ptr(mr->alias) + mr->alias_offset;
1204 assert(mr->terminates);
1206 return qemu_get_ram_ptr(mr->ram_addr & TARGET_PAGE_MASK);
1209 static void memory_region_update_coalesced_range(MemoryRegion *mr)
1212 CoalescedMemoryRange *cmr;
1215 FOR_EACH_FLAT_RANGE(fr, &address_space_memory.current_map) {
1217 qemu_unregister_coalesced_mmio(int128_get64(fr->addr.start),
1218 int128_get64(fr->addr.size));
1219 QTAILQ_FOREACH(cmr, &mr->coalesced, link) {
1220 tmp = addrrange_shift(cmr->addr,
1221 int128_sub(fr->addr.start,
1222 int128_make64(fr->offset_in_region)));
1223 if (!addrrange_intersects(tmp, fr->addr)) {
1226 tmp = addrrange_intersection(tmp, fr->addr);
1227 qemu_register_coalesced_mmio(int128_get64(tmp.start),
1228 int128_get64(tmp.size));
1234 void memory_region_set_coalescing(MemoryRegion *mr)
1236 memory_region_clear_coalescing(mr);
1237 memory_region_add_coalescing(mr, 0, int128_get64(mr->size));
1240 void memory_region_add_coalescing(MemoryRegion *mr,
1241 target_phys_addr_t offset,
1244 CoalescedMemoryRange *cmr = g_malloc(sizeof(*cmr));
1246 cmr->addr = addrrange_make(int128_make64(offset), int128_make64(size));
1247 QTAILQ_INSERT_TAIL(&mr->coalesced, cmr, link);
1248 memory_region_update_coalesced_range(mr);
1251 void memory_region_clear_coalescing(MemoryRegion *mr)
1253 CoalescedMemoryRange *cmr;
1255 while (!QTAILQ_EMPTY(&mr->coalesced)) {
1256 cmr = QTAILQ_FIRST(&mr->coalesced);
1257 QTAILQ_REMOVE(&mr->coalesced, cmr, link);
1260 memory_region_update_coalesced_range(mr);
1263 void memory_region_add_eventfd(MemoryRegion *mr,
1264 target_phys_addr_t addr,
1270 MemoryRegionIoeventfd mrfd = {
1271 .addr.start = int128_make64(addr),
1272 .addr.size = int128_make64(size),
1273 .match_data = match_data,
1279 for (i = 0; i < mr->ioeventfd_nb; ++i) {
1280 if (memory_region_ioeventfd_before(mrfd, mr->ioeventfds[i])) {
1285 mr->ioeventfds = g_realloc(mr->ioeventfds,
1286 sizeof(*mr->ioeventfds) * mr->ioeventfd_nb);
1287 memmove(&mr->ioeventfds[i+1], &mr->ioeventfds[i],
1288 sizeof(*mr->ioeventfds) * (mr->ioeventfd_nb-1 - i));
1289 mr->ioeventfds[i] = mrfd;
1290 memory_region_update_topology(mr);
1293 void memory_region_del_eventfd(MemoryRegion *mr,
1294 target_phys_addr_t addr,
1300 MemoryRegionIoeventfd mrfd = {
1301 .addr.start = int128_make64(addr),
1302 .addr.size = int128_make64(size),
1303 .match_data = match_data,
1309 for (i = 0; i < mr->ioeventfd_nb; ++i) {
1310 if (memory_region_ioeventfd_equal(mrfd, mr->ioeventfds[i])) {
1314 assert(i != mr->ioeventfd_nb);
1315 memmove(&mr->ioeventfds[i], &mr->ioeventfds[i+1],
1316 sizeof(*mr->ioeventfds) * (mr->ioeventfd_nb - (i+1)));
1318 mr->ioeventfds = g_realloc(mr->ioeventfds,
1319 sizeof(*mr->ioeventfds)*mr->ioeventfd_nb + 1);
1320 memory_region_update_topology(mr);
1323 static void memory_region_add_subregion_common(MemoryRegion *mr,
1324 target_phys_addr_t offset,
1325 MemoryRegion *subregion)
1327 MemoryRegion *other;
1329 assert(!subregion->parent);
1330 subregion->parent = mr;
1331 subregion->addr = offset;
1332 QTAILQ_FOREACH(other, &mr->subregions, subregions_link) {
1333 if (subregion->may_overlap || other->may_overlap) {
1336 if (int128_gt(int128_make64(offset),
1337 int128_add(int128_make64(other->addr), other->size))
1338 || int128_le(int128_add(int128_make64(offset), subregion->size),
1339 int128_make64(other->addr))) {
1343 printf("warning: subregion collision %llx/%llx (%s) "
1344 "vs %llx/%llx (%s)\n",
1345 (unsigned long long)offset,
1346 (unsigned long long)int128_get64(subregion->size),
1348 (unsigned long long)other->addr,
1349 (unsigned long long)int128_get64(other->size),
1353 QTAILQ_FOREACH(other, &mr->subregions, subregions_link) {
1354 if (subregion->priority >= other->priority) {
1355 QTAILQ_INSERT_BEFORE(other, subregion, subregions_link);
1359 QTAILQ_INSERT_TAIL(&mr->subregions, subregion, subregions_link);
1361 memory_region_update_topology(mr);
1365 void memory_region_add_subregion(MemoryRegion *mr,
1366 target_phys_addr_t offset,
1367 MemoryRegion *subregion)
1369 subregion->may_overlap = false;
1370 subregion->priority = 0;
1371 memory_region_add_subregion_common(mr, offset, subregion);
1374 void memory_region_add_subregion_overlap(MemoryRegion *mr,
1375 target_phys_addr_t offset,
1376 MemoryRegion *subregion,
1379 subregion->may_overlap = true;
1380 subregion->priority = priority;
1381 memory_region_add_subregion_common(mr, offset, subregion);
1384 void memory_region_del_subregion(MemoryRegion *mr,
1385 MemoryRegion *subregion)
1387 assert(subregion->parent == mr);
1388 subregion->parent = NULL;
1389 QTAILQ_REMOVE(&mr->subregions, subregion, subregions_link);
1390 memory_region_update_topology(mr);
1393 void memory_region_set_enabled(MemoryRegion *mr, bool enabled)
1395 if (enabled == mr->enabled) {
1398 mr->enabled = enabled;
1399 memory_region_update_topology(NULL);
1402 void memory_region_set_address(MemoryRegion *mr, target_phys_addr_t addr)
1404 MemoryRegion *parent = mr->parent;
1405 unsigned priority = mr->priority;
1406 bool may_overlap = mr->may_overlap;
1408 if (addr == mr->addr || !parent) {
1413 memory_region_transaction_begin();
1414 memory_region_del_subregion(parent, mr);
1416 memory_region_add_subregion_overlap(parent, addr, mr, priority);
1418 memory_region_add_subregion(parent, addr, mr);
1420 memory_region_transaction_commit();
1423 void memory_region_set_alias_offset(MemoryRegion *mr, target_phys_addr_t offset)
1425 target_phys_addr_t old_offset = mr->alias_offset;
1428 mr->alias_offset = offset;
1430 if (offset == old_offset || !mr->parent) {
1434 memory_region_update_topology(mr);
1437 ram_addr_t memory_region_get_ram_addr(MemoryRegion *mr)
1439 return mr->ram_addr;
1442 static int cmp_flatrange_addr(const void *addr_, const void *fr_)
1444 const AddrRange *addr = addr_;
1445 const FlatRange *fr = fr_;
1447 if (int128_le(addrrange_end(*addr), fr->addr.start)) {
1449 } else if (int128_ge(addr->start, addrrange_end(fr->addr))) {
1455 static FlatRange *address_space_lookup(AddressSpace *as, AddrRange addr)
1457 return bsearch(&addr, as->current_map.ranges, as->current_map.nr,
1458 sizeof(FlatRange), cmp_flatrange_addr);
1461 MemoryRegionSection memory_region_find(MemoryRegion *address_space,
1462 target_phys_addr_t addr, uint64_t size)
1464 AddressSpace *as = memory_region_to_address_space(address_space);
1465 AddrRange range = addrrange_make(int128_make64(addr),
1466 int128_make64(size));
1467 FlatRange *fr = address_space_lookup(as, range);
1468 MemoryRegionSection ret = { .mr = NULL, .size = 0 };
1474 while (fr > as->current_map.ranges
1475 && addrrange_intersects(fr[-1].addr, range)) {
1480 range = addrrange_intersection(range, fr->addr);
1481 ret.offset_within_region = fr->offset_in_region;
1482 ret.offset_within_region += int128_get64(int128_sub(range.start,
1484 ret.size = int128_get64(range.size);
1485 ret.offset_within_address_space = int128_get64(range.start);
1489 void memory_global_sync_dirty_bitmap(MemoryRegion *address_space)
1491 AddressSpace *as = memory_region_to_address_space(address_space);
1494 FOR_EACH_FLAT_RANGE(fr, &as->current_map) {
1495 MEMORY_LISTENER_UPDATE_REGION(fr, as, log_sync);
1499 void memory_global_dirty_log_start(void)
1501 MemoryListener *listener;
1503 cpu_physical_memory_set_dirty_tracking(1);
1504 global_dirty_log = true;
1505 QLIST_FOREACH(listener, &memory_listeners, link) {
1506 listener->log_global_start(listener);
1510 void memory_global_dirty_log_stop(void)
1512 MemoryListener *listener;
1514 global_dirty_log = false;
1515 QLIST_FOREACH(listener, &memory_listeners, link) {
1516 listener->log_global_stop(listener);
1518 cpu_physical_memory_set_dirty_tracking(0);
1521 static void listener_add_address_space(MemoryListener *listener,
1526 if (global_dirty_log) {
1527 listener->log_global_start(listener);
1529 FOR_EACH_FLAT_RANGE(fr, &as->current_map) {
1530 MemoryRegionSection section = {
1532 .address_space = as->root,
1533 .offset_within_region = fr->offset_in_region,
1534 .size = int128_get64(fr->addr.size),
1535 .offset_within_address_space = int128_get64(fr->addr.start),
1537 listener->region_add(listener, §ion);
1541 void memory_listener_register(MemoryListener *listener)
1543 QLIST_INSERT_HEAD(&memory_listeners, listener, link);
1544 listener_add_address_space(listener, &address_space_memory);
1545 listener_add_address_space(listener, &address_space_io);
1548 void memory_listener_unregister(MemoryListener *listener)
1550 QLIST_REMOVE(listener, link);
1553 void set_system_memory_map(MemoryRegion *mr)
1555 address_space_memory.root = mr;
1556 memory_region_update_topology(NULL);
1559 void set_system_io_map(MemoryRegion *mr)
1561 address_space_io.root = mr;
1562 memory_region_update_topology(NULL);
1565 uint64_t io_mem_read(int io_index, target_phys_addr_t addr, unsigned size)
1567 return _io_mem_read[io_index][bitops_ffsl(size)](io_mem_opaque[io_index],
1571 void io_mem_write(int io_index, target_phys_addr_t addr,
1572 uint64_t val, unsigned size)
1574 _io_mem_write[io_index][bitops_ffsl(size)](io_mem_opaque[io_index],
1578 typedef struct MemoryRegionList MemoryRegionList;
1580 struct MemoryRegionList {
1581 const MemoryRegion *mr;
1583 QTAILQ_ENTRY(MemoryRegionList) queue;
1586 typedef QTAILQ_HEAD(queue, MemoryRegionList) MemoryRegionListHead;
1588 static void mtree_print_mr(fprintf_function mon_printf, void *f,
1589 const MemoryRegion *mr, unsigned int level,
1590 target_phys_addr_t base,
1591 MemoryRegionListHead *alias_print_queue)
1593 MemoryRegionList *new_ml, *ml, *next_ml;
1594 MemoryRegionListHead submr_print_queue;
1595 const MemoryRegion *submr;
1602 for (i = 0; i < level; i++) {
1607 MemoryRegionList *ml;
1610 /* check if the alias is already in the queue */
1611 QTAILQ_FOREACH(ml, alias_print_queue, queue) {
1612 if (ml->mr == mr->alias && !ml->printed) {
1618 ml = g_new(MemoryRegionList, 1);
1620 ml->printed = false;
1621 QTAILQ_INSERT_TAIL(alias_print_queue, ml, queue);
1623 mon_printf(f, TARGET_FMT_plx "-" TARGET_FMT_plx " (prio %d): alias %s @%s "
1624 TARGET_FMT_plx "-" TARGET_FMT_plx "\n",
1627 + (target_phys_addr_t)int128_get64(mr->size) - 1,
1633 + (target_phys_addr_t)int128_get64(mr->size) - 1);
1635 mon_printf(f, TARGET_FMT_plx "-" TARGET_FMT_plx " (prio %d): %s\n",
1638 + (target_phys_addr_t)int128_get64(mr->size) - 1,
1643 QTAILQ_INIT(&submr_print_queue);
1645 QTAILQ_FOREACH(submr, &mr->subregions, subregions_link) {
1646 new_ml = g_new(MemoryRegionList, 1);
1648 QTAILQ_FOREACH(ml, &submr_print_queue, queue) {
1649 if (new_ml->mr->addr < ml->mr->addr ||
1650 (new_ml->mr->addr == ml->mr->addr &&
1651 new_ml->mr->priority > ml->mr->priority)) {
1652 QTAILQ_INSERT_BEFORE(ml, new_ml, queue);
1658 QTAILQ_INSERT_TAIL(&submr_print_queue, new_ml, queue);
1662 QTAILQ_FOREACH(ml, &submr_print_queue, queue) {
1663 mtree_print_mr(mon_printf, f, ml->mr, level + 1, base + mr->addr,
1667 QTAILQ_FOREACH_SAFE(ml, &submr_print_queue, queue, next_ml) {
1672 void mtree_info(fprintf_function mon_printf, void *f)
1674 MemoryRegionListHead ml_head;
1675 MemoryRegionList *ml, *ml2;
1677 QTAILQ_INIT(&ml_head);
1679 mon_printf(f, "memory\n");
1680 mtree_print_mr(mon_printf, f, address_space_memory.root, 0, 0, &ml_head);
1682 /* print aliased regions */
1683 QTAILQ_FOREACH(ml, &ml_head, queue) {
1685 mon_printf(f, "%s\n", ml->mr->name);
1686 mtree_print_mr(mon_printf, f, ml->mr, 0, 0, &ml_head);
1690 QTAILQ_FOREACH_SAFE(ml, &ml_head, queue, ml2) {
1694 if (address_space_io.root &&
1695 !QTAILQ_EMPTY(&address_space_io.root->subregions)) {
1696 QTAILQ_INIT(&ml_head);
1697 mon_printf(f, "I/O\n");
1698 mtree_print_mr(mon_printf, f, address_space_io.root, 0, 0, &ml_head);