qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
From: steffen_hirschmann@web.de
To: qemu-devel@nongnu.org
Cc: "Pierrick Bouvier" <pierrick.bouvier@linaro.org>,
	"Alex Bennée" <alex.bennee@linaro.org>,
	"Mahmoud Mandour" <ma.mandourr@gmail.com>,
	"Alexandre Iooss" <erdnaxe@crans.org>,
	"Steffen Hirschmann" <steffen_hirschmann@web.de>
Subject: [PATCH RFC 1/1] TCG insn.c: Implement counting specific addresses
Date: Wed, 30 Apr 2025 12:59:37 +0200	[thread overview]
Message-ID: <20250430105937.191814-2-steffen_hirschmann@web.de> (raw)
In-Reply-To: <20250430105937.191814-1-steffen_hirschmann@web.de>

From: Steffen Hirschmann <steffen_hirschmann@web.de>

This commit implements counting of executed instruction within certain
virtual address ranges via libinsn.so

Signed-off-by: Steffen Hirschmann <steffen_hirschmann@web.de>
---
 docs/about/emulation.rst |  2 +
 tests/tcg/plugins/insn.c | 89 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 91 insertions(+)

diff --git a/docs/about/emulation.rst b/docs/about/emulation.rst
index a72591ee4d..1fd122bc50 100644
--- a/docs/about/emulation.rst
+++ b/docs/about/emulation.rst
@@ -336,6 +336,8 @@ Behaviour can be tweaked with the following arguments:
     - Give a summary of the instruction sizes for the execution
   * - match=<string>
     - Only instrument instructions matching the string prefix
+  * - vaddr=<start>+<count>
+    - Counts executed instructions in this virtual address range. <start> and <count> must be in base 16
 
 The ``match`` option will show some basic stats including how many
 instructions have executed since the last execution. For
diff --git a/tests/tcg/plugins/insn.c b/tests/tcg/plugins/insn.c
index 0c723cb9ed..c6d5b07d05 100644
--- a/tests/tcg/plugins/insn.c
+++ b/tests/tcg/plugins/insn.c
@@ -48,6 +48,14 @@ static GHashTable *match_insn_records;
 static GMutex match_hash_lock;
 
 
+typedef struct {
+    uint64_t start;
+    uint64_t end;
+    qemu_plugin_u64 hits; /* Number of insn executed in this range */
+} VaddrRange;
+
+static GArray *vaddr_ranges;
+
 static Instruction * get_insn_record(const char *disas, uint64_t vaddr, Match *m)
 {
     g_autofree char *str_hash = g_strdup_printf("%"PRIx64" %s", vaddr, disas);
@@ -187,6 +195,15 @@ static void vcpu_tb_trans(qemu_plugin_id_t id, struct qemu_plugin_tb *tb)
             }
             g_free(insn_disas);
         }
+
+        for (int j = 0; j < vaddr_ranges->len; j++) {
+            VaddrRange *var = &g_array_index(vaddr_ranges, VaddrRange, j);
+            uint64_t vaddr = qemu_plugin_insn_vaddr(insn);
+            if (var->start <= vaddr && vaddr < var->end) {
+                qemu_plugin_register_vcpu_insn_exec_inline_per_vcpu(
+                    insn, QEMU_PLUGIN_INLINE_ADD_U64, var->hits, 1);
+            }
+        }
     }
 }
 
@@ -246,6 +263,19 @@ static void plugin_exit(qemu_plugin_id_t id, void *p)
 
     g_array_free(matches, TRUE);
     g_array_free(sizes, TRUE);
+
+    for (i = 0; i < vaddr_ranges->len; ++i) {
+        VaddrRange *var = &g_array_index(vaddr_ranges, VaddrRange, i);
+        uint64_t hits = qemu_plugin_u64_sum(var->hits);
+
+        g_string_printf(out, "Vaddr range [0x%08lx, 0x%08lx): %"PRId64" hits\n",
+                        var->start, var->end, hits);
+        qemu_plugin_outs(out->str);
+        qemu_plugin_scoreboard_free(var->hits.score);
+    }
+
+
+    g_array_free(vaddr_ranges, TRUE);
 }
 
 
@@ -258,6 +288,48 @@ static void parse_match(char *match)
     g_array_append_val(matches, new_match);
 }
 
+static void parse_vaddr(const char *arg)
+{
+    char *vaddr = g_strdup(arg);
+    char *saveptr, *token1, *token2;
+    uint64_t start, len, end;
+    token1 = strtok_r(vaddr, "+", &saveptr);
+    token2 = strtok_r(NULL, "+", &saveptr);
+    if (!token1 || !token2) {
+        fprintf(stderr, "vaddr usage: vaddr=start+count (both base 16!)\n");
+        exit(1);
+    }
+
+    start = g_ascii_strtoull(token1, NULL, 16);
+    len = g_ascii_strtoull(token2, NULL, 16);
+    end = start + len;
+
+    g_free(vaddr);
+
+    if (start == 0 || end == 0) {
+        fprintf(stderr, "vaddr usage: vaddr=start+count (both base 16!)\n");
+        exit(1);
+    }
+
+    if (UINT64_MAX - start < len) {
+        fprintf(stderr, "integer overflow in vaddr end address calculation."
+                        " Specified vaddr=start+count incorrect.\n");
+        exit(1);
+    }
+
+    g_autoptr(GString) out = g_string_new(NULL);
+    g_string_printf(out, "Registering new Vaddr range"
+                        " start=0x%08lx len=0x%08lx end=0x%08lx\n", start, len, end);
+    qemu_plugin_outs(out->str);
+
+    VaddrRange new_vaddrrange = {
+        .start = start,
+        .end = end,
+        .hits = qemu_plugin_scoreboard_u64(
+            qemu_plugin_scoreboard_new(sizeof(uint64_t))) };
+    g_array_append_val(vaddr_ranges, new_vaddrrange);
+}
+
 QEMU_PLUGIN_EXPORT int qemu_plugin_install(qemu_plugin_id_t id,
                                            const qemu_info_t *info,
                                            int argc, char **argv)
@@ -265,6 +337,7 @@ QEMU_PLUGIN_EXPORT int qemu_plugin_install(qemu_plugin_id_t id,
     matches = g_array_new(false, true, sizeof(Match));
     /* null terminated so 0 is not a special case */
     sizes = g_array_new(true, true, sizeof(unsigned long));
+    vaddr_ranges = g_array_new(false, true, sizeof(VaddrRange));
 
     for (int i = 0; i < argc; i++) {
         char *opt = argv[i];
@@ -281,6 +354,8 @@ QEMU_PLUGIN_EXPORT int qemu_plugin_install(qemu_plugin_id_t id,
             }
         } else if (g_strcmp0(tokens[0], "match") == 0) {
             parse_match(tokens[1]);
+        } else if (g_strcmp0(tokens[0], "vaddr") == 0) {
+            parse_vaddr(tokens[1]);
         } else if (g_strcmp0(tokens[0], "trace") == 0) {
             if (!qemu_plugin_bool_parse(tokens[0], tokens[1], &do_trace)) {
                 fprintf(stderr, "boolean argument parsing failed: %s\n", opt);
@@ -292,6 +367,20 @@ QEMU_PLUGIN_EXPORT int qemu_plugin_install(qemu_plugin_id_t id,
         }
     }
 
+    /* Check for invalid parameter combinations */
+    if (vaddr_ranges->len > 0) {
+        if (matches->len > 0) {
+            fprintf(stderr, "match=... and vaddr=... are incompatible."
+                            " Use only one of them.\n");
+            return -1;
+        }
+
+        if (!do_inline) {
+            fprintf(stderr, "vaddr=... is only supported in conjunction with inline.\n");
+            return -1;
+        }
+    }
+
     insn_count = qemu_plugin_scoreboard_u64(
         qemu_plugin_scoreboard_new(sizeof(uint64_t)));
 
-- 
2.39.5



  reply	other threads:[~2025-04-30 13:05 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-04-30 10:59 [PATCH RFC 0/1] TCG plugin libinso.so: Virtual address range count steffen_hirschmann
2025-04-30 10:59 ` steffen_hirschmann [this message]
2025-05-20 14:13   ` [PATCH RFC 1/1] TCG insn.c: Implement counting specific addresses Alex Bennée
2025-05-28 10:35     ` Steffen Hirschmann
2025-05-26 14:35   ` [PATCH RFC v2 " steffen_hirschmann

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20250430105937.191814-2-steffen_hirschmann@web.de \
    --to=steffen_hirschmann@web.de \
    --cc=alex.bennee@linaro.org \
    --cc=erdnaxe@crans.org \
    --cc=ma.mandourr@gmail.com \
    --cc=pierrick.bouvier@linaro.org \
    --cc=qemu-devel@nongnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).