mirror of
https://github.com/xemu-project/xemu.git
synced 2025-04-02 11:11:48 -04:00
Different code paths handle memory accesses: - tcg generated code - load/store helpers - atomic helpers This value is saved in cpu->neg.plugin_mem_value_{high,low}. Values are written only for accessed word size (upper bits are not set). Atomic operations are doing read/write at the same time, so we generate two memory callbacks instead of one, to allow plugins to access distinct values. For now, we can have access only up to 128 bits, thus split this in two 64 bits words. When QEMU will support wider operations, we'll be able to reconsider this. Reviewed-by: Richard Henderson <richard.henderson@linaro.org> Reviewed-by: Alex Bennée <alex.bennee@linaro.org> Signed-off-by: Pierrick Bouvier <pierrick.bouvier@linaro.org> Message-Id: <20240724194708.1843704-2-pierrick.bouvier@linaro.org> Signed-off-by: Alex Bennée <alex.bennee@linaro.org> Message-Id: <20240916085400.1046925-5-alex.bennee@linaro.org>
286 lines
7.6 KiB
C
286 lines
7.6 KiB
C
/*
|
|
* Copyright (C) 2017, Emilio G. Cota <cota@braap.org>
|
|
*
|
|
* License: GNU GPL, version 2 or later.
|
|
* See the COPYING file in the top-level directory.
|
|
*/
|
|
#ifndef QEMU_PLUGIN_H
|
|
#define QEMU_PLUGIN_H
|
|
|
|
#include "qemu/config-file.h"
|
|
#include "qemu/qemu-plugin.h"
|
|
#include "qemu/error-report.h"
|
|
#include "qemu/queue.h"
|
|
#include "qemu/option.h"
|
|
#include "qemu/plugin-event.h"
|
|
#include "qemu/bitmap.h"
|
|
#include "exec/memopidx.h"
|
|
#include "hw/core/cpu.h"
|
|
|
|
/*
|
|
* Option parsing/processing.
|
|
* Note that we can load an arbitrary number of plugins.
|
|
*/
|
|
struct qemu_plugin_desc;
|
|
typedef QTAILQ_HEAD(, qemu_plugin_desc) QemuPluginList;
|
|
|
|
/*
|
|
* Construct a qemu_plugin_meminfo_t.
|
|
*/
|
|
static inline qemu_plugin_meminfo_t
|
|
make_plugin_meminfo(MemOpIdx oi, enum qemu_plugin_mem_rw rw)
|
|
{
|
|
return oi | (rw << 16);
|
|
}
|
|
|
|
/*
|
|
* Extract the memory operation direction from a qemu_plugin_meminfo_t.
|
|
* Other portions may be extracted via get_memop and get_mmuidx.
|
|
*/
|
|
static inline enum qemu_plugin_mem_rw
|
|
get_plugin_meminfo_rw(qemu_plugin_meminfo_t i)
|
|
{
|
|
return i >> 16;
|
|
}
|
|
|
|
#ifdef CONFIG_PLUGIN
|
|
extern QemuOptsList qemu_plugin_opts;
|
|
|
|
static inline void qemu_plugin_add_opts(void)
|
|
{
|
|
qemu_add_opts(&qemu_plugin_opts);
|
|
}
|
|
|
|
void qemu_plugin_opt_parse(const char *optstr, QemuPluginList *head);
|
|
int qemu_plugin_load_list(QemuPluginList *head, Error **errp);
|
|
|
|
union qemu_plugin_cb_sig {
|
|
qemu_plugin_simple_cb_t simple;
|
|
qemu_plugin_udata_cb_t udata;
|
|
qemu_plugin_vcpu_simple_cb_t vcpu_simple;
|
|
qemu_plugin_vcpu_udata_cb_t vcpu_udata;
|
|
qemu_plugin_vcpu_tb_trans_cb_t vcpu_tb_trans;
|
|
qemu_plugin_vcpu_mem_cb_t vcpu_mem;
|
|
qemu_plugin_vcpu_syscall_cb_t vcpu_syscall;
|
|
qemu_plugin_vcpu_syscall_ret_cb_t vcpu_syscall_ret;
|
|
void *generic;
|
|
};
|
|
|
|
enum plugin_dyn_cb_type {
|
|
PLUGIN_CB_REGULAR,
|
|
PLUGIN_CB_COND,
|
|
PLUGIN_CB_MEM_REGULAR,
|
|
PLUGIN_CB_INLINE_ADD_U64,
|
|
PLUGIN_CB_INLINE_STORE_U64,
|
|
};
|
|
|
|
struct qemu_plugin_regular_cb {
|
|
union qemu_plugin_cb_sig f;
|
|
TCGHelperInfo *info;
|
|
void *userp;
|
|
enum qemu_plugin_mem_rw rw;
|
|
};
|
|
|
|
struct qemu_plugin_inline_cb {
|
|
qemu_plugin_u64 entry;
|
|
uint64_t imm;
|
|
enum qemu_plugin_mem_rw rw;
|
|
};
|
|
|
|
struct qemu_plugin_conditional_cb {
|
|
union qemu_plugin_cb_sig f;
|
|
TCGHelperInfo *info;
|
|
void *userp;
|
|
qemu_plugin_u64 entry;
|
|
enum qemu_plugin_cond cond;
|
|
uint64_t imm;
|
|
};
|
|
|
|
/*
|
|
* A dynamic callback has an insertion point that is determined at run-time.
|
|
* Usually the insertion point is somewhere in the code cache; think for
|
|
* instance of a callback to be called upon the execution of a particular TB.
|
|
*/
|
|
struct qemu_plugin_dyn_cb {
|
|
enum plugin_dyn_cb_type type;
|
|
union {
|
|
struct qemu_plugin_regular_cb regular;
|
|
struct qemu_plugin_conditional_cb cond;
|
|
struct qemu_plugin_inline_cb inline_insn;
|
|
};
|
|
};
|
|
|
|
/* Internal context for instrumenting an instruction */
|
|
struct qemu_plugin_insn {
|
|
uint64_t vaddr;
|
|
GArray *insn_cbs;
|
|
GArray *mem_cbs;
|
|
uint8_t len;
|
|
bool calls_helpers;
|
|
|
|
/* if set, the instruction calls helpers that might access guest memory */
|
|
bool mem_helper;
|
|
};
|
|
|
|
/* A scoreboard is an array of values, indexed by vcpu_index */
|
|
struct qemu_plugin_scoreboard {
|
|
GArray *data;
|
|
QLIST_ENTRY(qemu_plugin_scoreboard) entry;
|
|
};
|
|
|
|
/* Internal context for this TranslationBlock */
|
|
struct qemu_plugin_tb {
|
|
GPtrArray *insns;
|
|
size_t n;
|
|
|
|
/* if set, the TB calls helpers that might access guest memory */
|
|
bool mem_helper;
|
|
|
|
GArray *cbs;
|
|
};
|
|
|
|
/**
|
|
* struct CPUPluginState - per-CPU state for plugins
|
|
* @event_mask: plugin event bitmap. Modified only via async work.
|
|
*/
|
|
struct CPUPluginState {
|
|
DECLARE_BITMAP(event_mask, QEMU_PLUGIN_EV_MAX);
|
|
};
|
|
|
|
/**
|
|
* qemu_plugin_create_vcpu_state: allocate plugin state
|
|
*
|
|
* The returned data must be released with g_free()
|
|
* when no longer required.
|
|
*/
|
|
CPUPluginState *qemu_plugin_create_vcpu_state(void);
|
|
|
|
void qemu_plugin_vcpu_init_hook(CPUState *cpu);
|
|
void qemu_plugin_vcpu_exit_hook(CPUState *cpu);
|
|
void qemu_plugin_tb_trans_cb(CPUState *cpu, struct qemu_plugin_tb *tb);
|
|
void qemu_plugin_vcpu_idle_cb(CPUState *cpu);
|
|
void qemu_plugin_vcpu_resume_cb(CPUState *cpu);
|
|
void
|
|
qemu_plugin_vcpu_syscall(CPUState *cpu, int64_t num, uint64_t a1,
|
|
uint64_t a2, uint64_t a3, uint64_t a4, uint64_t a5,
|
|
uint64_t a6, uint64_t a7, uint64_t a8);
|
|
void qemu_plugin_vcpu_syscall_ret(CPUState *cpu, int64_t num, int64_t ret);
|
|
|
|
void qemu_plugin_vcpu_mem_cb(CPUState *cpu, uint64_t vaddr,
|
|
uint64_t value_low,
|
|
uint64_t value_high,
|
|
MemOpIdx oi, enum qemu_plugin_mem_rw rw);
|
|
|
|
void qemu_plugin_flush_cb(void);
|
|
|
|
void qemu_plugin_atexit_cb(void);
|
|
|
|
void qemu_plugin_add_dyn_cb_arr(GArray *arr);
|
|
|
|
static inline void qemu_plugin_disable_mem_helpers(CPUState *cpu)
|
|
{
|
|
cpu->neg.plugin_mem_cbs = NULL;
|
|
}
|
|
|
|
/**
|
|
* qemu_plugin_user_exit(): clean-up callbacks before calling exit callbacks
|
|
*
|
|
* This is a user-mode only helper that ensure we have fully cleared
|
|
* callbacks from all threads before calling the exit callbacks. This
|
|
* is so the plugins themselves don't have to jump through hoops to
|
|
* guard against race conditions.
|
|
*/
|
|
void qemu_plugin_user_exit(void);
|
|
|
|
/**
|
|
* qemu_plugin_user_prefork_lock(): take plugin lock before forking
|
|
*
|
|
* This is a user-mode only helper to take the internal plugin lock
|
|
* before a fork event. This is ensure a consistent lock state
|
|
*/
|
|
void qemu_plugin_user_prefork_lock(void);
|
|
|
|
/**
|
|
* qemu_plugin_user_postfork(): reset the plugin lock
|
|
* @is_child: is this thread the child
|
|
*
|
|
* This user-mode only helper resets the lock state after a fork so we
|
|
* can continue using the plugin interface.
|
|
*/
|
|
void qemu_plugin_user_postfork(bool is_child);
|
|
|
|
#else /* !CONFIG_PLUGIN */
|
|
|
|
static inline void qemu_plugin_add_opts(void)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_opt_parse(const char *optstr,
|
|
QemuPluginList *head)
|
|
{
|
|
error_report("plugin interface not enabled in this build");
|
|
exit(1);
|
|
}
|
|
|
|
static inline int qemu_plugin_load_list(QemuPluginList *head, Error **errp)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
static inline void qemu_plugin_vcpu_init_hook(CPUState *cpu)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_vcpu_exit_hook(CPUState *cpu)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_tb_trans_cb(CPUState *cpu,
|
|
struct qemu_plugin_tb *tb)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_vcpu_idle_cb(CPUState *cpu)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_vcpu_resume_cb(CPUState *cpu)
|
|
{ }
|
|
|
|
static inline void
|
|
qemu_plugin_vcpu_syscall(CPUState *cpu, int64_t num, uint64_t a1, uint64_t a2,
|
|
uint64_t a3, uint64_t a4, uint64_t a5, uint64_t a6,
|
|
uint64_t a7, uint64_t a8)
|
|
{ }
|
|
|
|
static inline
|
|
void qemu_plugin_vcpu_syscall_ret(CPUState *cpu, int64_t num, int64_t ret)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_vcpu_mem_cb(CPUState *cpu, uint64_t vaddr,
|
|
uint64_t value_low,
|
|
uint64_t value_high,
|
|
MemOpIdx oi,
|
|
enum qemu_plugin_mem_rw rw)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_flush_cb(void)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_atexit_cb(void)
|
|
{ }
|
|
|
|
static inline
|
|
void qemu_plugin_add_dyn_cb_arr(GArray *arr)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_disable_mem_helpers(CPUState *cpu)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_user_exit(void)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_user_prefork_lock(void)
|
|
{ }
|
|
|
|
static inline void qemu_plugin_user_postfork(bool is_child)
|
|
{ }
|
|
|
|
#endif /* !CONFIG_PLUGIN */
|
|
|
|
#endif /* QEMU_PLUGIN_H */
|