From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by mx.groups.io with SMTP id smtpd.web09.9970.1620151658497945935 for ; Tue, 04 May 2021 11:07:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=Tz5KZEw/; spf=pass (domain: redhat.com, ip: 170.10.133.124, mailfrom: lersek@redhat.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1620151657; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=nGC/ppDqr4sPAxPv4DAXX+KgUiFeMBK58bR0/ZyPH0w=; b=Tz5KZEw/uQgmJKr9x9BjqoXTy51MW5rizb3UlgTwkh9EFyUmba80rfo3M8rRBg/4Z5QKrJ 8d+wNaD/0bceGVneH2+R79SjM91Gx9PxyoPqqVHC1jWPysUEfmYDY7NDWlbvnzRT8fEama Xj0OiMLphdq4BiHhZCY1fReS/+piT5U= Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-546-fl5Z7UY8NRGMKP9ybXTUww-1; Tue, 04 May 2021 14:07:33 -0400 X-MC-Unique: fl5Z7UY8NRGMKP9ybXTUww-1 Received: from smtp.corp.redhat.com (int-mx07.intmail.prod.int.phx2.redhat.com [10.5.11.22]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 46456A40CE; Tue, 4 May 2021 18:07:28 +0000 (UTC) Received: from lacos-laptop-7.usersys.redhat.com (ovpn-113-105.ams2.redhat.com [10.36.113.105]) by smtp.corp.redhat.com (Postfix) with ESMTP id ECFD010AFF36; Tue, 4 May 2021 18:07:25 +0000 (UTC) Subject: Re: [edk2-devel] [PATCH RFC v2 04/28] MdePkg: Define the Page State Change VMGEXIT structures To: Tom Lendacky , devel@edk2.groups.io, brijesh.singh@amd.com Cc: James Bottomley , Min Xu , Jiewen Yao , Jordan Justen , Ard Biesheuvel , Erdem Aktas References: <20210430115148.22267-1-brijesh.singh@amd.com> <20210430115148.22267-5-brijesh.singh@amd.com> <47d74104-dd86-8bb9-ba5e-6c0e7371d5e4@redhat.com> <3782d6d7-bb52-5112-06f9-d05f8d404560@redhat.com> <09508b98-b72e-73bd-1b9a-6e4e4599d64d@amd.com> From: "Laszlo Ersek" Message-ID: <2fd31145-58eb-379f-c984-7657cada7af4@redhat.com> Date: Tue, 4 May 2021 20:07:24 +0200 MIME-Version: 1.0 In-Reply-To: <09508b98-b72e-73bd-1b9a-6e4e4599d64d@amd.com> X-Scanned-By: MIMEDefang 2.84 on 10.5.11.22 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=lersek@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit On 05/04/21 16:48, Tom Lendacky wrote: > > > On 5/4/21 8:59 AM, Laszlo Ersek wrote: >> On 05/04/21 14:33, Laszlo Ersek wrote: >>> On 04/30/21 13:51, Brijesh Singh wrote: >>>> BZ: https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbugzilla.tianocore.org%2Fshow_bug.cgi%3Fid%3D3275&data=04%7C01%7Cthomas.lendacky%40amd.com%7Cf400bca14b6f4f138a1908d90f05090f%7C3dd8961fe4884e608e11a82d994e183d%7C0%7C0%7C637557336582189771%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=bjXNVWGpurRGUZkjemvDQR%2FYnEQRG9ENN22jUjtkNP0%3D&reserved=0 >>>> >>>> The Page State Change NAE exit will be used by the SEV-SNP guest to >>>> request a page state change using the GHCB protocol. See the GHCB >>>> spec section 4.1.6 and 2.3.1 for more detail on the structure >>>> definitions. >>>> >>>> Cc: James Bottomley >>>> Cc: Min Xu >>>> Cc: Jiewen Yao >>>> Cc: Tom Lendacky >>>> Cc: Jordan Justen >>>> Cc: Ard Biesheuvel >>>> Cc: Laszlo Ersek >>>> Cc: Erdem Aktas >>>> Signed-off-by: Brijesh Singh >>>> --- >>>> MdePkg/Include/Register/Amd/Fam17Msr.h | 15 ++++++++++ >>>> MdePkg/Include/Register/Amd/Ghcb.h | 29 ++++++++++++++++++++ >>>> 2 files changed, 44 insertions(+) >>>> >>>> diff --git a/MdePkg/Include/Register/Amd/Fam17Msr.h b/MdePkg/Include/Register/Amd/Fam17Msr.h >>>> index e19bd04b6c..432cee2feb 100644 >>>> --- a/MdePkg/Include/Register/Amd/Fam17Msr.h >>>> +++ b/MdePkg/Include/Register/Amd/Fam17Msr.h >>>> @@ -58,6 +58,19 @@ typedef union { >>>> UINT64 GuestFrameNumber:52; >>>> } GhcbGpaRegister; >>>> >>>> + struct { >>>> + UINT64 Function:12; >>>> + UINT64 GuestFrameNumber:40; >>>> + UINT64 Operation:4; >>>> + UINT64 Reserved:8; >>>> + } SnpPageStateChangeRequest; >>>> + >>>> + struct { >>>> + UINT32 Function:12; >>>> + UINT32 Reserved:20; >>>> + UINT32 ErrorCode; >>>> + } SnpPageStateChangeResponse; >>>> + >>>> VOID *Ghcb; >>>> >>> This matches section 2.3.1 in rev 2.00. >>> >>>> UINT64 GhcbPhysicalAddress; >>>> @@ -69,6 +82,8 @@ typedef union { >>>> #define GHCB_INFO_CPUID_RESPONSE 5 >>>> #define GHCB_INFO_GHCB_GPA_REGISTER_REQUEST 18 >>>> #define GHCB_INFO_GHCB_GPA_REGISTER_RESPONSE 19 >>>> +#define GHCB_INFO_SNP_PAGE_STATE_CHANGE_REQUEST 20 >>>> +#define GHCB_INFO_SNP_PAGE_STATE_CHANGE_RESPONSE 21 >>>> #define GHCB_HYPERVISOR_FEATURES_REQUEST 128 >>>> #define GHCB_HYPERVISOR_FEATURES_RESPONSE 129 >>>> #define GHCB_INFO_TERMINATE_REQUEST 256 >>> >>> Matches section 2.3.1. >>> >>>> diff --git a/MdePkg/Include/Register/Amd/Ghcb.h b/MdePkg/Include/Register/Amd/Ghcb.h >>>> index 2d64a4c28f..1e7c0daed3 100644 >>>> --- a/MdePkg/Include/Register/Amd/Ghcb.h >>>> +++ b/MdePkg/Include/Register/Amd/Ghcb.h >>>> @@ -54,6 +54,7 @@ >>>> #define SVM_EXIT_NMI_COMPLETE 0x80000003ULL >>>> #define SVM_EXIT_AP_RESET_HOLD 0x80000004ULL >>>> #define SVM_EXIT_AP_JUMP_TABLE 0x80000005ULL >>>> +#define SVM_EXIT_SNP_PAGE_STATE_CHANGE 0x80000010ULL >>>> #define SVM_EXIT_HYPERVISOR_FEATURES 0x8000FFFDULL >>>> #define SVM_EXIT_UNSUPPORTED 0x8000FFFFULL >>>> >>> >>> Matches "Table 5. List of Supported Non-Automatic Events". >>> >>>> @@ -160,4 +161,32 @@ typedef union { >>>> #define GHCB_HV_FEATURES_SNP_AP_CREATE (GHCB_HV_FEATURES_SNP | BIT1) >>>> #define GHCB_HV_FEATURES_SNP_RESTRICTED_INJECTION (GHCB_HV_FEATURES_SNP_AP_CREATE | BIT2) >>>> #define GHCB_HV_FEATURES_SNP_RESTRICTED_INJECTION_TIMER (GHCB_HV_FEATURES_SNP_RESTRICTED_INJECTION | BIT3) >>>> + >>>> +// SNP Page State Change >>> >>> (1) Comment style. >>> >>>> +#define SNP_PAGE_STATE_MAX_NPAGES 4095 >>>> +#define SNP_PAGE_STATE_MAX_ENTRY 253 >>>> +#define SNP_PAGE_STATE_PRIVATE 1 >>>> +#define SNP_PAGE_STATE_SHARED 2 >>>> +#define SNP_PAGE_STATE_PSMASH 3 >>>> +#define SNP_PAGE_STATE_UNSMASH 4 >>> >>> (2) The PSMASH and UNSMASH operations are not documented in the rev 2.00 >>> spec, in the GHCB MSR protocol. That's probably because PSMASH and >>> UNSMASH can only be defined in terms of 2MB pages, and >>> GHCB_INFO_SNP_PAGE_STATE_CHANGE_REQUEST is suitable only for individual, >>> 4KB pages. I think it would be useful to point out somehow here that >>> PSMASH and UNSMASH are restricted to the GHCB shared area protocol >>> (perhaps extend the leading comment on this block of macros). >>> >>> (3) I don't understand what "MAX_NPAGES" stands for (4095). The rest of >>> the series never uses the macro, and I can't associate it with anything >>> from the spec. If the macro is supposed to relate to the 4KB / 2MB page >>> smashing / splitting, then its replacement text should be 512. Unless >>> the macro corresponds to a definition in the spec, I think we should >>> drop it. >>> >>>> + >>>> +typedef PACKED struct { >>>> + UINT64 CurrentPage:12; >>>> + UINT64 GuestFrameNumber:40; >>>> + UINT64 Op:4; >>>> + UINT64 PageSize:1; >>>> + UINT64 Rsvd: 7; >>>> +} SNP_PAGE_STATE_ENTRY; >>>> + >>>> +typedef PACKED struct { >>>> + UINT16 CurrentEntry; >>>> + UINT16 EndEntry; >>>> + UINT32 Rsvd; >>>> +} SNP_PAGE_STATE_HEADER; >>> >>> (4) We tend to write >>> >>> #pragma pack (1) >>> ... >>> #pragma pack () >>> >>> rather than PACKED -- but anyway, is packing really necessary? "Natural >>> alignment" is required in edk2. I'm OK with packing, but I think the >>> pragma is the preferred form. >>> >>> (5) Please spell out both "Rsvd" fields above as "Reserved". >>> >>> (6) Stray space character in "Rsvd: 7". >>> >>> (7) The field name "Op" is inconsistent with the other field name >>> "Operation". >>> >>> (8) I think there is a bug (typo) in the rev 2.00 spec, in 4.1.6 "SNP >>> Page State Change": it says >>> >>> ... calculated from the supplied guest physical frame number (GFN) for >>> the requested page size (GPA = GFN << 12). >>> >>> But, if you can choose 2MB page size in the request, then the (GPA = GFN >>> << 12) formula is not g >> >> Sorry, unfinished sentence: I meant that the formula was not generally >> correct. > > Actually, for any page size, the GPA for any GFN is GFN << 12. > > For the SNP Page State Change NAE event, it is up to the hypervisor to > ensure that the GFN/GPA supplied is aligned appropriately for the > requested page size (see 4.1.6 of the GHCB spec where the page operations > are defined). A GFN is naturally 4K aligned, so only a 2MB page size needs > GFN/GPA alignment validation. Thanks. I guess I was confused by the term "for the requested page size". > For the SNP Page State Change MSR protocol, only a 4K page size is supported. Yes, that's clear. Thanks! Laszlo