[PATCH v3 00/15] KVM/arm64: Add NV support for ERET and PAuth

Marc Zyngier
2024-03-21T15:54:31Z

This is the third version of this series introducing ERET and PAuth
support for NV guests, and now the base prefix for the NV support
series.

Thanks again to Joey for reviewing a large part of the series!

* From v2 [2]

- Enforce that both Address and Generic authentication use the same
algorithm

- Reduce PAuth trapping by eagerly setting the HCR_EL2.API/APK bits

- Collected RBs, with thanks

- Rebased on kvmarm-6.9

* From v1 [1]:

- Don't repaint the ISS_ERET* definitions, but provide reasonable
helpers instead

- Dropped superfluous VNCR_EL2 definition

- Amended comments and creative spelling

[1] https://lore.kernel.org/r/20240219092014.783809-1-maz@kernel.org
[2] https://lore.kernel.org/r/20240226100601.2379693-1-maz@kernel.org

Marc Zyngier (15):
KVM: arm64: Harden __ctxt_sys_reg() against out-of-range values
KVM: arm64: Add helpers for ESR_ELx_ERET_ISS_ERET*
KVM: arm64: Constraint PAuth support to consistent implementations
KVM: arm64: nv: Drop VCPU_HYP_CONTEXT flag
KVM: arm64: nv: Configure HCR_EL2 for FEAT_NV2
KVM: arm64: nv: Add trap forwarding for ERET and SMC
KVM: arm64: nv: Fast-track 'InHost' exception returns
KVM: arm64: nv: Honor HFGITR_EL2.ERET being set
KVM: arm64: nv: Handle HCR_EL2.{API,APK} independently
KVM: arm64: nv: Reinject PAC exceptions caused by HCR_EL2.API==0
KVM: arm64: nv: Add kvm_has_pauth() helper
KVM: arm64: nv: Add emulation for ERETAx instructions
KVM: arm64: nv: Handle ERETA[AB] instructions
KVM: arm64: nv: Advertise support for PAuth
KVM: arm64: Drop trapping of PAuth instructions/keys

arch/arm64/include/asm/esr.h | 12 ++
arch/arm64/include/asm/kvm_emulate.h | 10 --
arch/arm64/include/asm/kvm_host.h | 26 +++-
arch/arm64/include/asm/kvm_nested.h | 13 ++
arch/arm64/include/asm/kvm_ptrauth.h | 21 +++
arch/arm64/include/asm/pgtable-hwdef.h | 1 +
arch/arm64/kvm/Makefile | 1 +
arch/arm64/kvm/arm.c | 83 +++++++++-
arch/arm64/kvm/emulate-nested.c | 66 +++++---
arch/arm64/kvm/handle_exit.c | 36 ++++-
arch/arm64/kvm/hyp/include/hyp/switch.h | 62 +-------
arch/arm64/kvm/hyp/nvhe/switch.c | 4 +-
arch/arm64/kvm/hyp/vhe/switch.c | 96 +++++++++++-
arch/arm64/kvm/nested.c | 8 +-
arch/arm64/kvm/pauth.c | 196 ++++++++++++++++++++++++
15 files changed, 514 insertions(+), 121 deletions(-)
create mode 100644 arch/arm64/kvm/pauth.c

--
2.39.2