From: "Philippe Mathieu-Daudé" <philmd@linaro.org>
To: qemu-devel@nongnu.org
Cc: "Alexander Graf" <agraf@csgraf.de>,
qemu-arm@nongnu.org, "Phil Dennis-Jordan" <phil@philjordan.eu>,
"Paolo Bonzini" <pbonzini@redhat.com>,
"Richard Henderson" <richard.henderson@linaro.org>,
"Peter Collingbourne" <pcc@google.com>,
"Cameron Esfahani" <dirty@apple.com>,
"Mohamed Mediouni" <mohamed@unpredictable.fr>,
"Peter Maydell" <peter.maydell@linaro.org>,
"Akihiko Odaki" <odaki@rsg.ci.i.u-tokyo.ac.jp>,
"Philippe Mathieu-Daudé" <philmd@linaro.org>,
"Roman Bolshakov" <rbolshakov@ddn.com>,
"Mads Ynddal" <mads@ynddal.dk>
Subject: [PATCH v5 11/19] target/arm/hvf: Implement dirty page tracking
Date: Fri, 14 Nov 2025 21:04:13 +0100 [thread overview]
Message-ID: <20251114200422.4280-12-philmd@linaro.org> (raw)
In-Reply-To: <20251114200422.4280-1-philmd@linaro.org>
From: Richard Henderson <richard.henderson@linaro.org>
Notice writes to pages which are being monitored. Mark the page dirty,
re-enable writes, and retry the instruction without emulation.
Assert the fault is not from a stage1 page table walk.
Signed-off-by: Richard Henderson <richard.henderson@linaro.org>
Tested-by: Philippe Mathieu-Daudé <philmd@linaro.org>
Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org>
Signed-off-by: Philippe Mathieu-Daudé <philmd@linaro.org>
---
target/arm/hvf/hvf.c | 52 ++++++++++++++++++++++++++++++++++++--------
1 file changed, 43 insertions(+), 9 deletions(-)
diff --git a/target/arm/hvf/hvf.c b/target/arm/hvf/hvf.c
index de1e8fb8a05..0f584b8137a 100644
--- a/target/arm/hvf/hvf.c
+++ b/target/arm/hvf/hvf.c
@@ -1869,9 +1869,10 @@ static int hvf_handle_exception(CPUState *cpu, hv_vcpu_exit_exception_t *excp)
uint32_t srt = (syndrome >> 16) & 0x1f;
uint32_t cm = (syndrome >> 8) & 0x1;
uint64_t val = 0;
+ uint64_t ipa = excp->physical_address;
+ AddressSpace *as = cpu_get_address_space(cpu, ARMASIdx_NS);
- trace_hvf_data_abort(excp->virtual_address,
- excp->physical_address, isv,
+ trace_hvf_data_abort(excp->virtual_address, ipa, isv,
iswrite, s1ptw, len, srt);
if (cm) {
@@ -1880,23 +1881,56 @@ static int hvf_handle_exception(CPUState *cpu, hv_vcpu_exit_exception_t *excp)
break;
}
+ /* Handle dirty page logging for ram. */
+ if (iswrite) {
+ hwaddr xlat;
+ MemoryRegion *mr = address_space_translate(as, ipa, &xlat,
+ NULL, true,
+ MEMTXATTRS_UNSPECIFIED);
+ if (memory_region_is_ram(mr)) {
+ uintptr_t page_size = qemu_real_host_page_size();
+ intptr_t page_mask = -(intptr_t)page_size;
+ uint64_t ipa_page = ipa & page_mask;
+
+ /* TODO: Inject exception to the guest. */
+ assert(!mr->readonly);
+
+ if (memory_region_get_dirty_log_mask(mr)) {
+ memory_region_set_dirty(mr, ipa_page + xlat, page_size);
+ hvf_unprotect_dirty_range(ipa_page, page_size);
+ }
+
+ /* Retry with page writes enabled. */
+ break;
+ }
+ }
+
+ /*
+ * TODO: If s1ptw, this is an error in the guest os page tables.
+ * Inject the exception into the guest.
+ */
+ assert(!s1ptw);
+
+ /*
+ * TODO: ISV will be 0 for SIMD or SVE accesses.
+ * Inject the exception into the guest.
+ */
assert(isv);
+ /*
+ * Emulate MMIO.
+ * TODO: Inject faults for errors.
+ */
if (iswrite) {
val = hvf_get_reg(cpu, srt);
- address_space_write(&address_space_memory,
- excp->physical_address,
- MEMTXATTRS_UNSPECIFIED, &val, len);
+ address_space_write(as, ipa, MEMTXATTRS_UNSPECIFIED, &val, len);
} else {
- address_space_read(&address_space_memory,
- excp->physical_address,
- MEMTXATTRS_UNSPECIFIED, &val, len);
+ address_space_read(as, ipa, MEMTXATTRS_UNSPECIFIED, &val, len);
if (sse) {
val = sextract64(val, 0, len * 8);
}
hvf_set_reg(cpu, srt, val);
}
-
advance_pc = true;
break;
}
--
2.51.0
next prev parent reply other threads:[~2025-11-14 20:11 UTC|newest]
Thread overview: 22+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-11-14 20:04 [PATCH v5 00/19] target/arm/hvf: Consolidate Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 01/19] accel/hvf: Create hvf_protect_clean_range, hvf_unprotect_dirty_range Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 02/19] target/i386/hvf: Use host page alignment in ept_emulation_fault() Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 03/19] accel/hvf: Enforce host alignment in hv_vm_protect() Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 04/19] target/i386/hvf: Use hvf_unprotect_dirty_range Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 05/19] target/i386/hvf: Use address_space_translate in ept_emulation_fault Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 06/19] accel/hvf: Simplify hvf_log_* Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 07/19] accel/hvf: Move hvf_log_sync to hvf_log_clear Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 08/19] accel/hvf: Simplify hvf_set_phys_mem Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 09/19] accel/hvf: Drop hvf_slot and hvf_find_overlap_slot Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 10/19] accel/hvf: Remove mac_slots Philippe Mathieu-Daudé
2025-11-14 20:04 ` Philippe Mathieu-Daudé [this message]
2025-11-14 20:04 ` [PATCH v5 12/19] accel/hvf: Skip WFI if CPU has work to do Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 13/19] accel/hvf: Implement WFI without using pselect() Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 14/19] accel/hvf: Have PSCI CPU_SUSPEND halt the vCPU Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 15/19] accel: Introduce AccelOpsClass::cpu_target_realize() hook Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 16/19] accel/hvf: Add hvf_arch_cpu_realize() stubs Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 17/19] target/arm: Create GTimers *after* features finalized / accel realized Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 18/19] target/arm/hvf: Really set Generic Timer counter frequency Philippe Mathieu-Daudé
2025-11-14 20:04 ` [PATCH v5 19/19] target/arm: Only allow disabling NEON when using TCG Philippe Mathieu-Daudé
2025-11-15 2:22 ` [PATCH v5 00/19] target/arm/hvf: Consolidate Akihiko Odaki
2025-11-17 9:25 ` Philippe Mathieu-Daudé
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20251114200422.4280-12-philmd@linaro.org \
--to=philmd@linaro.org \
--cc=agraf@csgraf.de \
--cc=dirty@apple.com \
--cc=mads@ynddal.dk \
--cc=mohamed@unpredictable.fr \
--cc=odaki@rsg.ci.i.u-tokyo.ac.jp \
--cc=pbonzini@redhat.com \
--cc=pcc@google.com \
--cc=peter.maydell@linaro.org \
--cc=phil@philjordan.eu \
--cc=qemu-arm@nongnu.org \
--cc=qemu-devel@nongnu.org \
--cc=rbolshakov@ddn.com \
--cc=richard.henderson@linaro.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).