2 * Copyright (c) 2006, Intel Corporation.
4 * This program is free software; you can redistribute it and/or modify it
5 * under the terms and conditions of the GNU General Public License,
6 * version 2, as published by the Free Software Foundation.
8 * This program is distributed in the hope it will be useful, but WITHOUT
9 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
10 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
13 * You should have received a copy of the GNU General Public License along with
14 * this program; if not, write to the Free Software Foundation, Inc., 59 Temple
15 * Place - Suite 330, Boston, MA 02111-1307 USA.
17 * Copyright (C) 2006-2008 Intel Corporation
18 * Author: Ashok Raj <ashok.raj@intel.com>
19 * Author: Shaohua Li <shaohua.li@intel.com>
20 * Author: Anil S Keshavamurthy <anil.s.keshavamurthy@intel.com>
21 * Author: Fenghua Yu <fenghua.yu@intel.com>
24 #include <linux/init.h>
25 #include <linux/bitmap.h>
26 #include <linux/debugfs.h>
27 #include <linux/export.h>
28 #include <linux/slab.h>
29 #include <linux/irq.h>
30 #include <linux/interrupt.h>
31 #include <linux/spinlock.h>
32 #include <linux/pci.h>
33 #include <linux/dmar.h>
34 #include <linux/dma-mapping.h>
35 #include <linux/mempool.h>
36 #include <linux/timer.h>
37 #include <linux/iova.h>
38 #include <linux/iommu.h>
39 #include <linux/intel-iommu.h>
40 #include <linux/syscore_ops.h>
41 #include <linux/tboot.h>
42 #include <linux/dmi.h>
43 #include <linux/pci-ats.h>
44 #include <asm/cacheflush.h>
45 #include <asm/iommu.h>
47 #define ROOT_SIZE VTD_PAGE_SIZE
48 #define CONTEXT_SIZE VTD_PAGE_SIZE
50 #define IS_BRIDGE_HOST_DEVICE(pdev) \
51 ((pdev->class >> 8) == PCI_CLASS_BRIDGE_HOST)
52 #define IS_GFX_DEVICE(pdev) ((pdev->class >> 16) == PCI_BASE_CLASS_DISPLAY)
53 #define IS_ISA_DEVICE(pdev) ((pdev->class >> 8) == PCI_CLASS_BRIDGE_ISA)
54 #define IS_AZALIA(pdev) ((pdev)->vendor == 0x8086 && (pdev)->device == 0x3a3e)
56 #define IOAPIC_RANGE_START (0xfee00000)
57 #define IOAPIC_RANGE_END (0xfeefffff)
58 #define IOVA_START_ADDR (0x1000)
60 #define DEFAULT_DOMAIN_ADDRESS_WIDTH 48
62 #define MAX_AGAW_WIDTH 64
64 #define __DOMAIN_MAX_PFN(gaw) ((((uint64_t)1) << (gaw-VTD_PAGE_SHIFT)) - 1)
65 #define __DOMAIN_MAX_ADDR(gaw) ((((uint64_t)1) << gaw) - 1)
67 /* We limit DOMAIN_MAX_PFN to fit in an unsigned long, and DOMAIN_MAX_ADDR
68 to match. That way, we can use 'unsigned long' for PFNs with impunity. */
69 #define DOMAIN_MAX_PFN(gaw) ((unsigned long) min_t(uint64_t, \
70 __DOMAIN_MAX_PFN(gaw), (unsigned long)-1))
71 #define DOMAIN_MAX_ADDR(gaw) (((uint64_t)__DOMAIN_MAX_PFN(gaw)) << VTD_PAGE_SHIFT)
73 #define IOVA_PFN(addr) ((addr) >> PAGE_SHIFT)
74 #define DMA_32BIT_PFN IOVA_PFN(DMA_BIT_MASK(32))
75 #define DMA_64BIT_PFN IOVA_PFN(DMA_BIT_MASK(64))
77 /* page table handling */
78 #define LEVEL_STRIDE (9)
79 #define LEVEL_MASK (((u64)1 << LEVEL_STRIDE) - 1)
81 static inline int agaw_to_level(int agaw
)
86 static inline int agaw_to_width(int agaw
)
88 return 30 + agaw
* LEVEL_STRIDE
;
91 static inline int width_to_agaw(int width
)
93 return (width
- 30) / LEVEL_STRIDE
;
96 static inline unsigned int level_to_offset_bits(int level
)
98 return (level
- 1) * LEVEL_STRIDE
;
101 static inline int pfn_level_offset(unsigned long pfn
, int level
)
103 return (pfn
>> level_to_offset_bits(level
)) & LEVEL_MASK
;
106 static inline unsigned long level_mask(int level
)
108 return -1UL << level_to_offset_bits(level
);
111 static inline unsigned long level_size(int level
)
113 return 1UL << level_to_offset_bits(level
);
116 static inline unsigned long align_to_level(unsigned long pfn
, int level
)
118 return (pfn
+ level_size(level
) - 1) & level_mask(level
);
121 static inline unsigned long lvl_to_nr_pages(unsigned int lvl
)
123 return 1 << ((lvl
- 1) * LEVEL_STRIDE
);
126 /* VT-d pages must always be _smaller_ than MM pages. Otherwise things
127 are never going to work. */
128 static inline unsigned long dma_to_mm_pfn(unsigned long dma_pfn
)
130 return dma_pfn
>> (PAGE_SHIFT
- VTD_PAGE_SHIFT
);
133 static inline unsigned long mm_to_dma_pfn(unsigned long mm_pfn
)
135 return mm_pfn
<< (PAGE_SHIFT
- VTD_PAGE_SHIFT
);
137 static inline unsigned long page_to_dma_pfn(struct page
*pg
)
139 return mm_to_dma_pfn(page_to_pfn(pg
));
141 static inline unsigned long virt_to_dma_pfn(void *p
)
143 return page_to_dma_pfn(virt_to_page(p
));
146 /* global iommu list, set NULL for ignored DMAR units */
147 static struct intel_iommu
**g_iommus
;
149 static void __init
check_tylersburg_isoch(void);
150 static int rwbf_quirk
;
153 * set to 1 to panic kernel if can't successfully enable VT-d
154 * (used when kernel is launched w/ TXT)
156 static int force_on
= 0;
161 * 12-63: Context Ptr (12 - (haw-1))
168 #define ROOT_ENTRY_NR (VTD_PAGE_SIZE/sizeof(struct root_entry))
169 static inline bool root_present(struct root_entry
*root
)
171 return (root
->val
& 1);
173 static inline void set_root_present(struct root_entry
*root
)
177 static inline void set_root_value(struct root_entry
*root
, unsigned long value
)
179 root
->val
|= value
& VTD_PAGE_MASK
;
182 static inline struct context_entry
*
183 get_context_addr_from_root(struct root_entry
*root
)
185 return (struct context_entry
*)
186 (root_present(root
)?phys_to_virt(
187 root
->val
& VTD_PAGE_MASK
) :
194 * 1: fault processing disable
195 * 2-3: translation type
196 * 12-63: address space root
202 struct context_entry
{
207 static inline bool context_present(struct context_entry
*context
)
209 return (context
->lo
& 1);
211 static inline void context_set_present(struct context_entry
*context
)
216 static inline void context_set_fault_enable(struct context_entry
*context
)
218 context
->lo
&= (((u64
)-1) << 2) | 1;
221 static inline void context_set_translation_type(struct context_entry
*context
,
224 context
->lo
&= (((u64
)-1) << 4) | 3;
225 context
->lo
|= (value
& 3) << 2;
228 static inline void context_set_address_root(struct context_entry
*context
,
231 context
->lo
|= value
& VTD_PAGE_MASK
;
234 static inline void context_set_address_width(struct context_entry
*context
,
237 context
->hi
|= value
& 7;
240 static inline void context_set_domain_id(struct context_entry
*context
,
243 context
->hi
|= (value
& ((1 << 16) - 1)) << 8;
246 static inline void context_clear_entry(struct context_entry
*context
)
259 * 12-63: Host physcial address
265 static inline void dma_clear_pte(struct dma_pte
*pte
)
270 static inline void dma_set_pte_readable(struct dma_pte
*pte
)
272 pte
->val
|= DMA_PTE_READ
;
275 static inline void dma_set_pte_writable(struct dma_pte
*pte
)
277 pte
->val
|= DMA_PTE_WRITE
;
280 static inline void dma_set_pte_snp(struct dma_pte
*pte
)
282 pte
->val
|= DMA_PTE_SNP
;
285 static inline void dma_set_pte_prot(struct dma_pte
*pte
, unsigned long prot
)
287 pte
->val
= (pte
->val
& ~3) | (prot
& 3);
290 static inline u64
dma_pte_addr(struct dma_pte
*pte
)
293 return pte
->val
& VTD_PAGE_MASK
;
295 /* Must have a full atomic 64-bit read */
296 return __cmpxchg64(&pte
->val
, 0ULL, 0ULL) & VTD_PAGE_MASK
;
300 static inline void dma_set_pte_pfn(struct dma_pte
*pte
, unsigned long pfn
)
302 pte
->val
|= (uint64_t)pfn
<< VTD_PAGE_SHIFT
;
305 static inline bool dma_pte_present(struct dma_pte
*pte
)
307 return (pte
->val
& 3) != 0;
310 static inline bool dma_pte_superpage(struct dma_pte
*pte
)
312 return (pte
->val
& (1 << 7));
315 static inline int first_pte_in_page(struct dma_pte
*pte
)
317 return !((unsigned long)pte
& ~VTD_PAGE_MASK
);
321 * This domain is a statically identity mapping domain.
322 * 1. This domain creats a static 1:1 mapping to all usable memory.
323 * 2. It maps to each iommu if successful.
324 * 3. Each iommu mapps to this domain if successful.
326 static struct dmar_domain
*si_domain
;
327 static int hw_pass_through
= 1;
329 /* devices under the same p2p bridge are owned in one domain */
330 #define DOMAIN_FLAG_P2P_MULTIPLE_DEVICES (1 << 0)
332 /* domain represents a virtual machine, more than one devices
333 * across iommus may be owned in one domain, e.g. kvm guest.
335 #define DOMAIN_FLAG_VIRTUAL_MACHINE (1 << 1)
337 /* si_domain contains mulitple devices */
338 #define DOMAIN_FLAG_STATIC_IDENTITY (1 << 2)
341 int id
; /* domain id */
342 int nid
; /* node id */
343 unsigned long iommu_bmp
; /* bitmap of iommus this domain uses*/
345 struct list_head devices
; /* all devices' list */
346 struct iova_domain iovad
; /* iova's that belong to this domain */
348 struct dma_pte
*pgd
; /* virtual address */
349 int gaw
; /* max guest address width */
351 /* adjusted guest address width, 0 is level 2 30-bit */
354 int flags
; /* flags to find out type of domain */
356 int iommu_coherency
;/* indicate coherency of iommu access */
357 int iommu_snooping
; /* indicate snooping control feature*/
358 int iommu_count
; /* reference count of iommu */
359 int iommu_superpage
;/* Level of superpages supported:
360 0 == 4KiB (no superpages), 1 == 2MiB,
361 2 == 1GiB, 3 == 512GiB, 4 == 1TiB */
362 spinlock_t iommu_lock
; /* protect iommu set in domain */
363 u64 max_addr
; /* maximum mapped address */
366 /* PCI domain-device relationship */
367 struct device_domain_info
{
368 struct list_head link
; /* link to domain siblings */
369 struct list_head global
; /* link to global list */
370 int segment
; /* PCI domain */
371 u8 bus
; /* PCI bus number */
372 u8 devfn
; /* PCI devfn number */
373 struct pci_dev
*dev
; /* it's NULL for PCIe-to-PCI bridge */
374 struct intel_iommu
*iommu
; /* IOMMU used by this device */
375 struct dmar_domain
*domain
; /* pointer to domain */
378 static void flush_unmaps_timeout(unsigned long data
);
380 DEFINE_TIMER(unmap_timer
, flush_unmaps_timeout
, 0, 0);
382 #define HIGH_WATER_MARK 250
383 struct deferred_flush_tables
{
385 struct iova
*iova
[HIGH_WATER_MARK
];
386 struct dmar_domain
*domain
[HIGH_WATER_MARK
];
389 static struct deferred_flush_tables
*deferred_flush
;
391 /* bitmap for indexing intel_iommus */
392 static int g_num_of_iommus
;
394 static DEFINE_SPINLOCK(async_umap_flush_lock
);
395 static LIST_HEAD(unmaps_to_do
);
398 static long list_size
;
400 static void domain_remove_dev_info(struct dmar_domain
*domain
);
402 #ifdef CONFIG_INTEL_IOMMU_DEFAULT_ON
403 int dmar_disabled
= 0;
405 int dmar_disabled
= 1;
406 #endif /*CONFIG_INTEL_IOMMU_DEFAULT_ON*/
408 static int dmar_map_gfx
= 1;
409 static int dmar_forcedac
;
410 static int intel_iommu_strict
;
411 static int intel_iommu_superpage
= 1;
413 int intel_iommu_gfx_mapped
;
414 EXPORT_SYMBOL_GPL(intel_iommu_gfx_mapped
);
416 #define DUMMY_DEVICE_DOMAIN_INFO ((struct device_domain_info *)(-1))
417 static DEFINE_SPINLOCK(device_domain_lock
);
418 static LIST_HEAD(device_domain_list
);
420 static struct iommu_ops intel_iommu_ops
;
422 static int __init
intel_iommu_setup(char *str
)
427 if (!strncmp(str
, "on", 2)) {
429 printk(KERN_INFO
"Intel-IOMMU: enabled\n");
430 } else if (!strncmp(str
, "off", 3)) {
432 printk(KERN_INFO
"Intel-IOMMU: disabled\n");
433 } else if (!strncmp(str
, "igfx_off", 8)) {
436 "Intel-IOMMU: disable GFX device mapping\n");
437 } else if (!strncmp(str
, "forcedac", 8)) {
439 "Intel-IOMMU: Forcing DAC for PCI devices\n");
441 } else if (!strncmp(str
, "strict", 6)) {
443 "Intel-IOMMU: disable batched IOTLB flush\n");
444 intel_iommu_strict
= 1;
445 } else if (!strncmp(str
, "sp_off", 6)) {
447 "Intel-IOMMU: disable supported super page\n");
448 intel_iommu_superpage
= 0;
451 str
+= strcspn(str
, ",");
457 __setup("intel_iommu=", intel_iommu_setup
);
459 static struct kmem_cache
*iommu_domain_cache
;
460 static struct kmem_cache
*iommu_devinfo_cache
;
461 static struct kmem_cache
*iommu_iova_cache
;
463 static inline void *alloc_pgtable_page(int node
)
468 page
= alloc_pages_node(node
, GFP_ATOMIC
| __GFP_ZERO
, 0);
470 vaddr
= page_address(page
);
474 static inline void free_pgtable_page(void *vaddr
)
476 free_page((unsigned long)vaddr
);
479 static inline void *alloc_domain_mem(void)
481 return kmem_cache_alloc(iommu_domain_cache
, GFP_ATOMIC
);
484 static void free_domain_mem(void *vaddr
)
486 kmem_cache_free(iommu_domain_cache
, vaddr
);
489 static inline void * alloc_devinfo_mem(void)
491 return kmem_cache_alloc(iommu_devinfo_cache
, GFP_ATOMIC
);
494 static inline void free_devinfo_mem(void *vaddr
)
496 kmem_cache_free(iommu_devinfo_cache
, vaddr
);
499 struct iova
*alloc_iova_mem(void)
501 return kmem_cache_alloc(iommu_iova_cache
, GFP_ATOMIC
);
504 void free_iova_mem(struct iova
*iova
)
506 kmem_cache_free(iommu_iova_cache
, iova
);
510 static int __iommu_calculate_agaw(struct intel_iommu
*iommu
, int max_gaw
)
515 sagaw
= cap_sagaw(iommu
->cap
);
516 for (agaw
= width_to_agaw(max_gaw
);
518 if (test_bit(agaw
, &sagaw
))
526 * Calculate max SAGAW for each iommu.
528 int iommu_calculate_max_sagaw(struct intel_iommu
*iommu
)
530 return __iommu_calculate_agaw(iommu
, MAX_AGAW_WIDTH
);
534 * calculate agaw for each iommu.
535 * "SAGAW" may be different across iommus, use a default agaw, and
536 * get a supported less agaw for iommus that don't support the default agaw.
538 int iommu_calculate_agaw(struct intel_iommu
*iommu
)
540 return __iommu_calculate_agaw(iommu
, DEFAULT_DOMAIN_ADDRESS_WIDTH
);
543 /* This functionin only returns single iommu in a domain */
544 static struct intel_iommu
*domain_get_iommu(struct dmar_domain
*domain
)
548 /* si_domain and vm domain should not get here. */
549 BUG_ON(domain
->flags
& DOMAIN_FLAG_VIRTUAL_MACHINE
);
550 BUG_ON(domain
->flags
& DOMAIN_FLAG_STATIC_IDENTITY
);
552 iommu_id
= find_first_bit(&domain
->iommu_bmp
, g_num_of_iommus
);
553 if (iommu_id
< 0 || iommu_id
>= g_num_of_iommus
)
556 return g_iommus
[iommu_id
];
559 static void domain_update_iommu_coherency(struct dmar_domain
*domain
)
563 domain
->iommu_coherency
= 1;
565 for_each_set_bit(i
, &domain
->iommu_bmp
, g_num_of_iommus
) {
566 if (!ecap_coherent(g_iommus
[i
]->ecap
)) {
567 domain
->iommu_coherency
= 0;
573 static void domain_update_iommu_snooping(struct dmar_domain
*domain
)
577 domain
->iommu_snooping
= 1;
579 for_each_set_bit(i
, &domain
->iommu_bmp
, g_num_of_iommus
) {
580 if (!ecap_sc_support(g_iommus
[i
]->ecap
)) {
581 domain
->iommu_snooping
= 0;
587 static void domain_update_iommu_superpage(struct dmar_domain
*domain
)
589 struct dmar_drhd_unit
*drhd
;
590 struct intel_iommu
*iommu
= NULL
;
593 if (!intel_iommu_superpage
) {
594 domain
->iommu_superpage
= 0;
598 /* set iommu_superpage to the smallest common denominator */
599 for_each_active_iommu(iommu
, drhd
) {
600 mask
&= cap_super_page_val(iommu
->cap
);
605 domain
->iommu_superpage
= fls(mask
);
608 /* Some capabilities may be different across iommus */
609 static void domain_update_iommu_cap(struct dmar_domain
*domain
)
611 domain_update_iommu_coherency(domain
);
612 domain_update_iommu_snooping(domain
);
613 domain_update_iommu_superpage(domain
);
616 static struct intel_iommu
*device_to_iommu(int segment
, u8 bus
, u8 devfn
)
618 struct dmar_drhd_unit
*drhd
= NULL
;
621 for_each_drhd_unit(drhd
) {
624 if (segment
!= drhd
->segment
)
627 for (i
= 0; i
< drhd
->devices_cnt
; i
++) {
628 if (drhd
->devices
[i
] &&
629 drhd
->devices
[i
]->bus
->number
== bus
&&
630 drhd
->devices
[i
]->devfn
== devfn
)
632 if (drhd
->devices
[i
] &&
633 drhd
->devices
[i
]->subordinate
&&
634 drhd
->devices
[i
]->subordinate
->number
<= bus
&&
635 drhd
->devices
[i
]->subordinate
->subordinate
>= bus
)
639 if (drhd
->include_all
)
646 static void domain_flush_cache(struct dmar_domain
*domain
,
647 void *addr
, int size
)
649 if (!domain
->iommu_coherency
)
650 clflush_cache_range(addr
, size
);
653 /* Gets context entry for a given bus and devfn */
654 static struct context_entry
* device_to_context_entry(struct intel_iommu
*iommu
,
657 struct root_entry
*root
;
658 struct context_entry
*context
;
659 unsigned long phy_addr
;
662 spin_lock_irqsave(&iommu
->lock
, flags
);
663 root
= &iommu
->root_entry
[bus
];
664 context
= get_context_addr_from_root(root
);
666 context
= (struct context_entry
*)
667 alloc_pgtable_page(iommu
->node
);
669 spin_unlock_irqrestore(&iommu
->lock
, flags
);
672 __iommu_flush_cache(iommu
, (void *)context
, CONTEXT_SIZE
);
673 phy_addr
= virt_to_phys((void *)context
);
674 set_root_value(root
, phy_addr
);
675 set_root_present(root
);
676 __iommu_flush_cache(iommu
, root
, sizeof(*root
));
678 spin_unlock_irqrestore(&iommu
->lock
, flags
);
679 return &context
[devfn
];
682 static int device_context_mapped(struct intel_iommu
*iommu
, u8 bus
, u8 devfn
)
684 struct root_entry
*root
;
685 struct context_entry
*context
;
689 spin_lock_irqsave(&iommu
->lock
, flags
);
690 root
= &iommu
->root_entry
[bus
];
691 context
= get_context_addr_from_root(root
);
696 ret
= context_present(&context
[devfn
]);
698 spin_unlock_irqrestore(&iommu
->lock
, flags
);
702 static void clear_context_table(struct intel_iommu
*iommu
, u8 bus
, u8 devfn
)
704 struct root_entry
*root
;
705 struct context_entry
*context
;
708 spin_lock_irqsave(&iommu
->lock
, flags
);
709 root
= &iommu
->root_entry
[bus
];
710 context
= get_context_addr_from_root(root
);
712 context_clear_entry(&context
[devfn
]);
713 __iommu_flush_cache(iommu
, &context
[devfn
], \
716 spin_unlock_irqrestore(&iommu
->lock
, flags
);
719 static void free_context_table(struct intel_iommu
*iommu
)
721 struct root_entry
*root
;
724 struct context_entry
*context
;
726 spin_lock_irqsave(&iommu
->lock
, flags
);
727 if (!iommu
->root_entry
) {
730 for (i
= 0; i
< ROOT_ENTRY_NR
; i
++) {
731 root
= &iommu
->root_entry
[i
];
732 context
= get_context_addr_from_root(root
);
734 free_pgtable_page(context
);
736 free_pgtable_page(iommu
->root_entry
);
737 iommu
->root_entry
= NULL
;
739 spin_unlock_irqrestore(&iommu
->lock
, flags
);
742 static struct dma_pte
*pfn_to_dma_pte(struct dmar_domain
*domain
,
743 unsigned long pfn
, int target_level
)
745 int addr_width
= agaw_to_width(domain
->agaw
) - VTD_PAGE_SHIFT
;
746 struct dma_pte
*parent
, *pte
= NULL
;
747 int level
= agaw_to_level(domain
->agaw
);
750 BUG_ON(!domain
->pgd
);
751 BUG_ON(addr_width
< BITS_PER_LONG
&& pfn
>> addr_width
);
752 parent
= domain
->pgd
;
757 offset
= pfn_level_offset(pfn
, level
);
758 pte
= &parent
[offset
];
759 if (!target_level
&& (dma_pte_superpage(pte
) || !dma_pte_present(pte
)))
761 if (level
== target_level
)
764 if (!dma_pte_present(pte
)) {
767 tmp_page
= alloc_pgtable_page(domain
->nid
);
772 domain_flush_cache(domain
, tmp_page
, VTD_PAGE_SIZE
);
773 pteval
= ((uint64_t)virt_to_dma_pfn(tmp_page
) << VTD_PAGE_SHIFT
) | DMA_PTE_READ
| DMA_PTE_WRITE
;
774 if (cmpxchg64(&pte
->val
, 0ULL, pteval
)) {
775 /* Someone else set it while we were thinking; use theirs. */
776 free_pgtable_page(tmp_page
);
779 domain_flush_cache(domain
, pte
, sizeof(*pte
));
782 parent
= phys_to_virt(dma_pte_addr(pte
));
790 /* return address's pte at specific level */
791 static struct dma_pte
*dma_pfn_level_pte(struct dmar_domain
*domain
,
793 int level
, int *large_page
)
795 struct dma_pte
*parent
, *pte
= NULL
;
796 int total
= agaw_to_level(domain
->agaw
);
799 parent
= domain
->pgd
;
800 while (level
<= total
) {
801 offset
= pfn_level_offset(pfn
, total
);
802 pte
= &parent
[offset
];
806 if (!dma_pte_present(pte
)) {
811 if (pte
->val
& DMA_PTE_LARGE_PAGE
) {
816 parent
= phys_to_virt(dma_pte_addr(pte
));
822 /* clear last level pte, a tlb flush should be followed */
823 static int dma_pte_clear_range(struct dmar_domain
*domain
,
824 unsigned long start_pfn
,
825 unsigned long last_pfn
)
827 int addr_width
= agaw_to_width(domain
->agaw
) - VTD_PAGE_SHIFT
;
828 unsigned int large_page
= 1;
829 struct dma_pte
*first_pte
, *pte
;
832 BUG_ON(addr_width
< BITS_PER_LONG
&& start_pfn
>> addr_width
);
833 BUG_ON(addr_width
< BITS_PER_LONG
&& last_pfn
>> addr_width
);
834 BUG_ON(start_pfn
> last_pfn
);
836 /* we don't need lock here; nobody else touches the iova range */
839 first_pte
= pte
= dma_pfn_level_pte(domain
, start_pfn
, 1, &large_page
);
841 start_pfn
= align_to_level(start_pfn
+ 1, large_page
+ 1);
846 start_pfn
+= lvl_to_nr_pages(large_page
);
848 } while (start_pfn
<= last_pfn
&& !first_pte_in_page(pte
));
850 domain_flush_cache(domain
, first_pte
,
851 (void *)pte
- (void *)first_pte
);
853 } while (start_pfn
&& start_pfn
<= last_pfn
);
855 order
= (large_page
- 1) * 9;
859 /* free page table pages. last level pte should already be cleared */
860 static void dma_pte_free_pagetable(struct dmar_domain
*domain
,
861 unsigned long start_pfn
,
862 unsigned long last_pfn
)
864 int addr_width
= agaw_to_width(domain
->agaw
) - VTD_PAGE_SHIFT
;
865 struct dma_pte
*first_pte
, *pte
;
866 int total
= agaw_to_level(domain
->agaw
);
871 BUG_ON(addr_width
< BITS_PER_LONG
&& start_pfn
>> addr_width
);
872 BUG_ON(addr_width
< BITS_PER_LONG
&& last_pfn
>> addr_width
);
873 BUG_ON(start_pfn
> last_pfn
);
875 /* We don't need lock here; nobody else touches the iova range */
877 while (level
<= total
) {
878 tmp
= align_to_level(start_pfn
, level
);
880 /* If we can't even clear one PTE at this level, we're done */
881 if (tmp
+ level_size(level
) - 1 > last_pfn
)
886 first_pte
= pte
= dma_pfn_level_pte(domain
, tmp
, level
, &large_page
);
887 if (large_page
> level
)
888 level
= large_page
+ 1;
890 tmp
= align_to_level(tmp
+ 1, level
+ 1);
894 if (dma_pte_present(pte
)) {
895 free_pgtable_page(phys_to_virt(dma_pte_addr(pte
)));
899 tmp
+= level_size(level
);
900 } while (!first_pte_in_page(pte
) &&
901 tmp
+ level_size(level
) - 1 <= last_pfn
);
903 domain_flush_cache(domain
, first_pte
,
904 (void *)pte
- (void *)first_pte
);
906 } while (tmp
&& tmp
+ level_size(level
) - 1 <= last_pfn
);
910 if (start_pfn
== 0 && last_pfn
== DOMAIN_MAX_PFN(domain
->gaw
)) {
911 free_pgtable_page(domain
->pgd
);
917 static int iommu_alloc_root_entry(struct intel_iommu
*iommu
)
919 struct root_entry
*root
;
922 root
= (struct root_entry
*)alloc_pgtable_page(iommu
->node
);
926 __iommu_flush_cache(iommu
, root
, ROOT_SIZE
);
928 spin_lock_irqsave(&iommu
->lock
, flags
);
929 iommu
->root_entry
= root
;
930 spin_unlock_irqrestore(&iommu
->lock
, flags
);
935 static void iommu_set_root_entry(struct intel_iommu
*iommu
)
941 addr
= iommu
->root_entry
;
943 raw_spin_lock_irqsave(&iommu
->register_lock
, flag
);
944 dmar_writeq(iommu
->reg
+ DMAR_RTADDR_REG
, virt_to_phys(addr
));
946 writel(iommu
->gcmd
| DMA_GCMD_SRTP
, iommu
->reg
+ DMAR_GCMD_REG
);
948 /* Make sure hardware complete it */
949 IOMMU_WAIT_OP(iommu
, DMAR_GSTS_REG
,
950 readl
, (sts
& DMA_GSTS_RTPS
), sts
);
952 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flag
);
955 static void iommu_flush_write_buffer(struct intel_iommu
*iommu
)
960 if (!rwbf_quirk
&& !cap_rwbf(iommu
->cap
))
963 raw_spin_lock_irqsave(&iommu
->register_lock
, flag
);
964 writel(iommu
->gcmd
| DMA_GCMD_WBF
, iommu
->reg
+ DMAR_GCMD_REG
);
966 /* Make sure hardware complete it */
967 IOMMU_WAIT_OP(iommu
, DMAR_GSTS_REG
,
968 readl
, (!(val
& DMA_GSTS_WBFS
)), val
);
970 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flag
);
973 /* return value determine if we need a write buffer flush */
974 static void __iommu_flush_context(struct intel_iommu
*iommu
,
975 u16 did
, u16 source_id
, u8 function_mask
,
982 case DMA_CCMD_GLOBAL_INVL
:
983 val
= DMA_CCMD_GLOBAL_INVL
;
985 case DMA_CCMD_DOMAIN_INVL
:
986 val
= DMA_CCMD_DOMAIN_INVL
|DMA_CCMD_DID(did
);
988 case DMA_CCMD_DEVICE_INVL
:
989 val
= DMA_CCMD_DEVICE_INVL
|DMA_CCMD_DID(did
)
990 | DMA_CCMD_SID(source_id
) | DMA_CCMD_FM(function_mask
);
997 raw_spin_lock_irqsave(&iommu
->register_lock
, flag
);
998 dmar_writeq(iommu
->reg
+ DMAR_CCMD_REG
, val
);
1000 /* Make sure hardware complete it */
1001 IOMMU_WAIT_OP(iommu
, DMAR_CCMD_REG
,
1002 dmar_readq
, (!(val
& DMA_CCMD_ICC
)), val
);
1004 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flag
);
1007 /* return value determine if we need a write buffer flush */
1008 static void __iommu_flush_iotlb(struct intel_iommu
*iommu
, u16 did
,
1009 u64 addr
, unsigned int size_order
, u64 type
)
1011 int tlb_offset
= ecap_iotlb_offset(iommu
->ecap
);
1012 u64 val
= 0, val_iva
= 0;
1016 case DMA_TLB_GLOBAL_FLUSH
:
1017 /* global flush doesn't need set IVA_REG */
1018 val
= DMA_TLB_GLOBAL_FLUSH
|DMA_TLB_IVT
;
1020 case DMA_TLB_DSI_FLUSH
:
1021 val
= DMA_TLB_DSI_FLUSH
|DMA_TLB_IVT
|DMA_TLB_DID(did
);
1023 case DMA_TLB_PSI_FLUSH
:
1024 val
= DMA_TLB_PSI_FLUSH
|DMA_TLB_IVT
|DMA_TLB_DID(did
);
1025 /* Note: always flush non-leaf currently */
1026 val_iva
= size_order
| addr
;
1031 /* Note: set drain read/write */
1034 * This is probably to be super secure.. Looks like we can
1035 * ignore it without any impact.
1037 if (cap_read_drain(iommu
->cap
))
1038 val
|= DMA_TLB_READ_DRAIN
;
1040 if (cap_write_drain(iommu
->cap
))
1041 val
|= DMA_TLB_WRITE_DRAIN
;
1043 raw_spin_lock_irqsave(&iommu
->register_lock
, flag
);
1044 /* Note: Only uses first TLB reg currently */
1046 dmar_writeq(iommu
->reg
+ tlb_offset
, val_iva
);
1047 dmar_writeq(iommu
->reg
+ tlb_offset
+ 8, val
);
1049 /* Make sure hardware complete it */
1050 IOMMU_WAIT_OP(iommu
, tlb_offset
+ 8,
1051 dmar_readq
, (!(val
& DMA_TLB_IVT
)), val
);
1053 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flag
);
1055 /* check IOTLB invalidation granularity */
1056 if (DMA_TLB_IAIG(val
) == 0)
1057 printk(KERN_ERR
"IOMMU: flush IOTLB failed\n");
1058 if (DMA_TLB_IAIG(val
) != DMA_TLB_IIRG(type
))
1059 pr_debug("IOMMU: tlb flush request %Lx, actual %Lx\n",
1060 (unsigned long long)DMA_TLB_IIRG(type
),
1061 (unsigned long long)DMA_TLB_IAIG(val
));
1064 static struct device_domain_info
*iommu_support_dev_iotlb(
1065 struct dmar_domain
*domain
, int segment
, u8 bus
, u8 devfn
)
1068 unsigned long flags
;
1069 struct device_domain_info
*info
;
1070 struct intel_iommu
*iommu
= device_to_iommu(segment
, bus
, devfn
);
1072 if (!ecap_dev_iotlb_support(iommu
->ecap
))
1078 spin_lock_irqsave(&device_domain_lock
, flags
);
1079 list_for_each_entry(info
, &domain
->devices
, link
)
1080 if (info
->bus
== bus
&& info
->devfn
== devfn
) {
1084 spin_unlock_irqrestore(&device_domain_lock
, flags
);
1086 if (!found
|| !info
->dev
)
1089 if (!pci_find_ext_capability(info
->dev
, PCI_EXT_CAP_ID_ATS
))
1092 if (!dmar_find_matched_atsr_unit(info
->dev
))
1095 info
->iommu
= iommu
;
1100 static void iommu_enable_dev_iotlb(struct device_domain_info
*info
)
1105 pci_enable_ats(info
->dev
, VTD_PAGE_SHIFT
);
1108 static void iommu_disable_dev_iotlb(struct device_domain_info
*info
)
1110 if (!info
->dev
|| !pci_ats_enabled(info
->dev
))
1113 pci_disable_ats(info
->dev
);
1116 static void iommu_flush_dev_iotlb(struct dmar_domain
*domain
,
1117 u64 addr
, unsigned mask
)
1120 unsigned long flags
;
1121 struct device_domain_info
*info
;
1123 spin_lock_irqsave(&device_domain_lock
, flags
);
1124 list_for_each_entry(info
, &domain
->devices
, link
) {
1125 if (!info
->dev
|| !pci_ats_enabled(info
->dev
))
1128 sid
= info
->bus
<< 8 | info
->devfn
;
1129 qdep
= pci_ats_queue_depth(info
->dev
);
1130 qi_flush_dev_iotlb(info
->iommu
, sid
, qdep
, addr
, mask
);
1132 spin_unlock_irqrestore(&device_domain_lock
, flags
);
1135 static void iommu_flush_iotlb_psi(struct intel_iommu
*iommu
, u16 did
,
1136 unsigned long pfn
, unsigned int pages
, int map
)
1138 unsigned int mask
= ilog2(__roundup_pow_of_two(pages
));
1139 uint64_t addr
= (uint64_t)pfn
<< VTD_PAGE_SHIFT
;
1144 * Fallback to domain selective flush if no PSI support or the size is
1146 * PSI requires page size to be 2 ^ x, and the base address is naturally
1147 * aligned to the size
1149 if (!cap_pgsel_inv(iommu
->cap
) || mask
> cap_max_amask_val(iommu
->cap
))
1150 iommu
->flush
.flush_iotlb(iommu
, did
, 0, 0,
1153 iommu
->flush
.flush_iotlb(iommu
, did
, addr
, mask
,
1157 * In caching mode, changes of pages from non-present to present require
1158 * flush. However, device IOTLB doesn't need to be flushed in this case.
1160 if (!cap_caching_mode(iommu
->cap
) || !map
)
1161 iommu_flush_dev_iotlb(iommu
->domains
[did
], addr
, mask
);
1164 static void iommu_disable_protect_mem_regions(struct intel_iommu
*iommu
)
1167 unsigned long flags
;
1169 raw_spin_lock_irqsave(&iommu
->register_lock
, flags
);
1170 pmen
= readl(iommu
->reg
+ DMAR_PMEN_REG
);
1171 pmen
&= ~DMA_PMEN_EPM
;
1172 writel(pmen
, iommu
->reg
+ DMAR_PMEN_REG
);
1174 /* wait for the protected region status bit to clear */
1175 IOMMU_WAIT_OP(iommu
, DMAR_PMEN_REG
,
1176 readl
, !(pmen
& DMA_PMEN_PRS
), pmen
);
1178 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flags
);
1181 static int iommu_enable_translation(struct intel_iommu
*iommu
)
1184 unsigned long flags
;
1186 raw_spin_lock_irqsave(&iommu
->register_lock
, flags
);
1187 iommu
->gcmd
|= DMA_GCMD_TE
;
1188 writel(iommu
->gcmd
, iommu
->reg
+ DMAR_GCMD_REG
);
1190 /* Make sure hardware complete it */
1191 IOMMU_WAIT_OP(iommu
, DMAR_GSTS_REG
,
1192 readl
, (sts
& DMA_GSTS_TES
), sts
);
1194 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flags
);
1198 static int iommu_disable_translation(struct intel_iommu
*iommu
)
1203 raw_spin_lock_irqsave(&iommu
->register_lock
, flag
);
1204 iommu
->gcmd
&= ~DMA_GCMD_TE
;
1205 writel(iommu
->gcmd
, iommu
->reg
+ DMAR_GCMD_REG
);
1207 /* Make sure hardware complete it */
1208 IOMMU_WAIT_OP(iommu
, DMAR_GSTS_REG
,
1209 readl
, (!(sts
& DMA_GSTS_TES
)), sts
);
1211 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flag
);
1216 static int iommu_init_domains(struct intel_iommu
*iommu
)
1218 unsigned long ndomains
;
1219 unsigned long nlongs
;
1221 ndomains
= cap_ndoms(iommu
->cap
);
1222 pr_debug("IOMMU %d: Number of Domains supportd <%ld>\n", iommu
->seq_id
,
1224 nlongs
= BITS_TO_LONGS(ndomains
);
1226 spin_lock_init(&iommu
->lock
);
1228 /* TBD: there might be 64K domains,
1229 * consider other allocation for future chip
1231 iommu
->domain_ids
= kcalloc(nlongs
, sizeof(unsigned long), GFP_KERNEL
);
1232 if (!iommu
->domain_ids
) {
1233 printk(KERN_ERR
"Allocating domain id array failed\n");
1236 iommu
->domains
= kcalloc(ndomains
, sizeof(struct dmar_domain
*),
1238 if (!iommu
->domains
) {
1239 printk(KERN_ERR
"Allocating domain array failed\n");
1244 * if Caching mode is set, then invalid translations are tagged
1245 * with domainid 0. Hence we need to pre-allocate it.
1247 if (cap_caching_mode(iommu
->cap
))
1248 set_bit(0, iommu
->domain_ids
);
1253 static void domain_exit(struct dmar_domain
*domain
);
1254 static void vm_domain_exit(struct dmar_domain
*domain
);
1256 void free_dmar_iommu(struct intel_iommu
*iommu
)
1258 struct dmar_domain
*domain
;
1260 unsigned long flags
;
1262 if ((iommu
->domains
) && (iommu
->domain_ids
)) {
1263 for_each_set_bit(i
, iommu
->domain_ids
, cap_ndoms(iommu
->cap
)) {
1264 domain
= iommu
->domains
[i
];
1265 clear_bit(i
, iommu
->domain_ids
);
1267 spin_lock_irqsave(&domain
->iommu_lock
, flags
);
1268 if (--domain
->iommu_count
== 0) {
1269 if (domain
->flags
& DOMAIN_FLAG_VIRTUAL_MACHINE
)
1270 vm_domain_exit(domain
);
1272 domain_exit(domain
);
1274 spin_unlock_irqrestore(&domain
->iommu_lock
, flags
);
1278 if (iommu
->gcmd
& DMA_GCMD_TE
)
1279 iommu_disable_translation(iommu
);
1282 irq_set_handler_data(iommu
->irq
, NULL
);
1283 /* This will mask the irq */
1284 free_irq(iommu
->irq
, iommu
);
1285 destroy_irq(iommu
->irq
);
1288 kfree(iommu
->domains
);
1289 kfree(iommu
->domain_ids
);
1291 g_iommus
[iommu
->seq_id
] = NULL
;
1293 /* if all iommus are freed, free g_iommus */
1294 for (i
= 0; i
< g_num_of_iommus
; i
++) {
1299 if (i
== g_num_of_iommus
)
1302 /* free context mapping */
1303 free_context_table(iommu
);
1306 static struct dmar_domain
*alloc_domain(void)
1308 struct dmar_domain
*domain
;
1310 domain
= alloc_domain_mem();
1315 memset(&domain
->iommu_bmp
, 0, sizeof(unsigned long));
1321 static int iommu_attach_domain(struct dmar_domain
*domain
,
1322 struct intel_iommu
*iommu
)
1325 unsigned long ndomains
;
1326 unsigned long flags
;
1328 ndomains
= cap_ndoms(iommu
->cap
);
1330 spin_lock_irqsave(&iommu
->lock
, flags
);
1332 num
= find_first_zero_bit(iommu
->domain_ids
, ndomains
);
1333 if (num
>= ndomains
) {
1334 spin_unlock_irqrestore(&iommu
->lock
, flags
);
1335 printk(KERN_ERR
"IOMMU: no free domain ids\n");
1340 set_bit(num
, iommu
->domain_ids
);
1341 set_bit(iommu
->seq_id
, &domain
->iommu_bmp
);
1342 iommu
->domains
[num
] = domain
;
1343 spin_unlock_irqrestore(&iommu
->lock
, flags
);
1348 static void iommu_detach_domain(struct dmar_domain
*domain
,
1349 struct intel_iommu
*iommu
)
1351 unsigned long flags
;
1355 spin_lock_irqsave(&iommu
->lock
, flags
);
1356 ndomains
= cap_ndoms(iommu
->cap
);
1357 for_each_set_bit(num
, iommu
->domain_ids
, ndomains
) {
1358 if (iommu
->domains
[num
] == domain
) {
1365 clear_bit(num
, iommu
->domain_ids
);
1366 clear_bit(iommu
->seq_id
, &domain
->iommu_bmp
);
1367 iommu
->domains
[num
] = NULL
;
1369 spin_unlock_irqrestore(&iommu
->lock
, flags
);
1372 static struct iova_domain reserved_iova_list
;
1373 static struct lock_class_key reserved_rbtree_key
;
1375 static int dmar_init_reserved_ranges(void)
1377 struct pci_dev
*pdev
= NULL
;
1381 init_iova_domain(&reserved_iova_list
, DMA_32BIT_PFN
);
1383 lockdep_set_class(&reserved_iova_list
.iova_rbtree_lock
,
1384 &reserved_rbtree_key
);
1386 /* IOAPIC ranges shouldn't be accessed by DMA */
1387 iova
= reserve_iova(&reserved_iova_list
, IOVA_PFN(IOAPIC_RANGE_START
),
1388 IOVA_PFN(IOAPIC_RANGE_END
));
1390 printk(KERN_ERR
"Reserve IOAPIC range failed\n");
1394 /* Reserve all PCI MMIO to avoid peer-to-peer access */
1395 for_each_pci_dev(pdev
) {
1398 for (i
= 0; i
< PCI_NUM_RESOURCES
; i
++) {
1399 r
= &pdev
->resource
[i
];
1400 if (!r
->flags
|| !(r
->flags
& IORESOURCE_MEM
))
1402 iova
= reserve_iova(&reserved_iova_list
,
1406 printk(KERN_ERR
"Reserve iova failed\n");
1414 static void domain_reserve_special_ranges(struct dmar_domain
*domain
)
1416 copy_reserved_iova(&reserved_iova_list
, &domain
->iovad
);
1419 static inline int guestwidth_to_adjustwidth(int gaw
)
1422 int r
= (gaw
- 12) % 9;
1433 static int domain_init(struct dmar_domain
*domain
, int guest_width
)
1435 struct intel_iommu
*iommu
;
1436 int adjust_width
, agaw
;
1437 unsigned long sagaw
;
1439 init_iova_domain(&domain
->iovad
, DMA_32BIT_PFN
);
1440 spin_lock_init(&domain
->iommu_lock
);
1442 domain_reserve_special_ranges(domain
);
1444 /* calculate AGAW */
1445 iommu
= domain_get_iommu(domain
);
1446 if (guest_width
> cap_mgaw(iommu
->cap
))
1447 guest_width
= cap_mgaw(iommu
->cap
);
1448 domain
->gaw
= guest_width
;
1449 adjust_width
= guestwidth_to_adjustwidth(guest_width
);
1450 agaw
= width_to_agaw(adjust_width
);
1451 sagaw
= cap_sagaw(iommu
->cap
);
1452 if (!test_bit(agaw
, &sagaw
)) {
1453 /* hardware doesn't support it, choose a bigger one */
1454 pr_debug("IOMMU: hardware doesn't support agaw %d\n", agaw
);
1455 agaw
= find_next_bit(&sagaw
, 5, agaw
);
1459 domain
->agaw
= agaw
;
1460 INIT_LIST_HEAD(&domain
->devices
);
1462 if (ecap_coherent(iommu
->ecap
))
1463 domain
->iommu_coherency
= 1;
1465 domain
->iommu_coherency
= 0;
1467 if (ecap_sc_support(iommu
->ecap
))
1468 domain
->iommu_snooping
= 1;
1470 domain
->iommu_snooping
= 0;
1472 domain
->iommu_superpage
= fls(cap_super_page_val(iommu
->cap
));
1473 domain
->iommu_count
= 1;
1474 domain
->nid
= iommu
->node
;
1476 /* always allocate the top pgd */
1477 domain
->pgd
= (struct dma_pte
*)alloc_pgtable_page(domain
->nid
);
1480 __iommu_flush_cache(iommu
, domain
->pgd
, PAGE_SIZE
);
1484 static void domain_exit(struct dmar_domain
*domain
)
1486 struct dmar_drhd_unit
*drhd
;
1487 struct intel_iommu
*iommu
;
1489 /* Domain 0 is reserved, so dont process it */
1493 /* Flush any lazy unmaps that may reference this domain */
1494 if (!intel_iommu_strict
)
1495 flush_unmaps_timeout(0);
1497 domain_remove_dev_info(domain
);
1499 put_iova_domain(&domain
->iovad
);
1502 dma_pte_clear_range(domain
, 0, DOMAIN_MAX_PFN(domain
->gaw
));
1504 /* free page tables */
1505 dma_pte_free_pagetable(domain
, 0, DOMAIN_MAX_PFN(domain
->gaw
));
1507 for_each_active_iommu(iommu
, drhd
)
1508 if (test_bit(iommu
->seq_id
, &domain
->iommu_bmp
))
1509 iommu_detach_domain(domain
, iommu
);
1511 free_domain_mem(domain
);
1514 static int domain_context_mapping_one(struct dmar_domain
*domain
, int segment
,
1515 u8 bus
, u8 devfn
, int translation
)
1517 struct context_entry
*context
;
1518 unsigned long flags
;
1519 struct intel_iommu
*iommu
;
1520 struct dma_pte
*pgd
;
1522 unsigned long ndomains
;
1525 struct device_domain_info
*info
= NULL
;
1527 pr_debug("Set context mapping for %02x:%02x.%d\n",
1528 bus
, PCI_SLOT(devfn
), PCI_FUNC(devfn
));
1530 BUG_ON(!domain
->pgd
);
1531 BUG_ON(translation
!= CONTEXT_TT_PASS_THROUGH
&&
1532 translation
!= CONTEXT_TT_MULTI_LEVEL
);
1534 iommu
= device_to_iommu(segment
, bus
, devfn
);
1538 context
= device_to_context_entry(iommu
, bus
, devfn
);
1541 spin_lock_irqsave(&iommu
->lock
, flags
);
1542 if (context_present(context
)) {
1543 spin_unlock_irqrestore(&iommu
->lock
, flags
);
1550 if (domain
->flags
& DOMAIN_FLAG_VIRTUAL_MACHINE
||
1551 domain
->flags
& DOMAIN_FLAG_STATIC_IDENTITY
) {
1554 /* find an available domain id for this device in iommu */
1555 ndomains
= cap_ndoms(iommu
->cap
);
1556 for_each_set_bit(num
, iommu
->domain_ids
, ndomains
) {
1557 if (iommu
->domains
[num
] == domain
) {
1565 num
= find_first_zero_bit(iommu
->domain_ids
, ndomains
);
1566 if (num
>= ndomains
) {
1567 spin_unlock_irqrestore(&iommu
->lock
, flags
);
1568 printk(KERN_ERR
"IOMMU: no free domain ids\n");
1572 set_bit(num
, iommu
->domain_ids
);
1573 iommu
->domains
[num
] = domain
;
1577 /* Skip top levels of page tables for
1578 * iommu which has less agaw than default.
1579 * Unnecessary for PT mode.
1581 if (translation
!= CONTEXT_TT_PASS_THROUGH
) {
1582 for (agaw
= domain
->agaw
; agaw
!= iommu
->agaw
; agaw
--) {
1583 pgd
= phys_to_virt(dma_pte_addr(pgd
));
1584 if (!dma_pte_present(pgd
)) {
1585 spin_unlock_irqrestore(&iommu
->lock
, flags
);
1592 context_set_domain_id(context
, id
);
1594 if (translation
!= CONTEXT_TT_PASS_THROUGH
) {
1595 info
= iommu_support_dev_iotlb(domain
, segment
, bus
, devfn
);
1596 translation
= info
? CONTEXT_TT_DEV_IOTLB
:
1597 CONTEXT_TT_MULTI_LEVEL
;
1600 * In pass through mode, AW must be programmed to indicate the largest
1601 * AGAW value supported by hardware. And ASR is ignored by hardware.
1603 if (unlikely(translation
== CONTEXT_TT_PASS_THROUGH
))
1604 context_set_address_width(context
, iommu
->msagaw
);
1606 context_set_address_root(context
, virt_to_phys(pgd
));
1607 context_set_address_width(context
, iommu
->agaw
);
1610 context_set_translation_type(context
, translation
);
1611 context_set_fault_enable(context
);
1612 context_set_present(context
);
1613 domain_flush_cache(domain
, context
, sizeof(*context
));
1616 * It's a non-present to present mapping. If hardware doesn't cache
1617 * non-present entry we only need to flush the write-buffer. If the
1618 * _does_ cache non-present entries, then it does so in the special
1619 * domain #0, which we have to flush:
1621 if (cap_caching_mode(iommu
->cap
)) {
1622 iommu
->flush
.flush_context(iommu
, 0,
1623 (((u16
)bus
) << 8) | devfn
,
1624 DMA_CCMD_MASK_NOBIT
,
1625 DMA_CCMD_DEVICE_INVL
);
1626 iommu
->flush
.flush_iotlb(iommu
, domain
->id
, 0, 0, DMA_TLB_DSI_FLUSH
);
1628 iommu_flush_write_buffer(iommu
);
1630 iommu_enable_dev_iotlb(info
);
1631 spin_unlock_irqrestore(&iommu
->lock
, flags
);
1633 spin_lock_irqsave(&domain
->iommu_lock
, flags
);
1634 if (!test_and_set_bit(iommu
->seq_id
, &domain
->iommu_bmp
)) {
1635 domain
->iommu_count
++;
1636 if (domain
->iommu_count
== 1)
1637 domain
->nid
= iommu
->node
;
1638 domain_update_iommu_cap(domain
);
1640 spin_unlock_irqrestore(&domain
->iommu_lock
, flags
);
1645 domain_context_mapping(struct dmar_domain
*domain
, struct pci_dev
*pdev
,
1649 struct pci_dev
*tmp
, *parent
;
1651 ret
= domain_context_mapping_one(domain
, pci_domain_nr(pdev
->bus
),
1652 pdev
->bus
->number
, pdev
->devfn
,
1657 /* dependent device mapping */
1658 tmp
= pci_find_upstream_pcie_bridge(pdev
);
1661 /* Secondary interface's bus number and devfn 0 */
1662 parent
= pdev
->bus
->self
;
1663 while (parent
!= tmp
) {
1664 ret
= domain_context_mapping_one(domain
,
1665 pci_domain_nr(parent
->bus
),
1666 parent
->bus
->number
,
1667 parent
->devfn
, translation
);
1670 parent
= parent
->bus
->self
;
1672 if (pci_is_pcie(tmp
)) /* this is a PCIe-to-PCI bridge */
1673 return domain_context_mapping_one(domain
,
1674 pci_domain_nr(tmp
->subordinate
),
1675 tmp
->subordinate
->number
, 0,
1677 else /* this is a legacy PCI bridge */
1678 return domain_context_mapping_one(domain
,
1679 pci_domain_nr(tmp
->bus
),
1685 static int domain_context_mapped(struct pci_dev
*pdev
)
1688 struct pci_dev
*tmp
, *parent
;
1689 struct intel_iommu
*iommu
;
1691 iommu
= device_to_iommu(pci_domain_nr(pdev
->bus
), pdev
->bus
->number
,
1696 ret
= device_context_mapped(iommu
, pdev
->bus
->number
, pdev
->devfn
);
1699 /* dependent device mapping */
1700 tmp
= pci_find_upstream_pcie_bridge(pdev
);
1703 /* Secondary interface's bus number and devfn 0 */
1704 parent
= pdev
->bus
->self
;
1705 while (parent
!= tmp
) {
1706 ret
= device_context_mapped(iommu
, parent
->bus
->number
,
1710 parent
= parent
->bus
->self
;
1712 if (pci_is_pcie(tmp
))
1713 return device_context_mapped(iommu
, tmp
->subordinate
->number
,
1716 return device_context_mapped(iommu
, tmp
->bus
->number
,
1720 /* Returns a number of VTD pages, but aligned to MM page size */
1721 static inline unsigned long aligned_nrpages(unsigned long host_addr
,
1724 host_addr
&= ~PAGE_MASK
;
1725 return PAGE_ALIGN(host_addr
+ size
) >> VTD_PAGE_SHIFT
;
1728 /* Return largest possible superpage level for a given mapping */
1729 static inline int hardware_largepage_caps(struct dmar_domain
*domain
,
1730 unsigned long iov_pfn
,
1731 unsigned long phy_pfn
,
1732 unsigned long pages
)
1734 int support
, level
= 1;
1735 unsigned long pfnmerge
;
1737 support
= domain
->iommu_superpage
;
1739 /* To use a large page, the virtual *and* physical addresses
1740 must be aligned to 2MiB/1GiB/etc. Lower bits set in either
1741 of them will mean we have to use smaller pages. So just
1742 merge them and check both at once. */
1743 pfnmerge
= iov_pfn
| phy_pfn
;
1745 while (support
&& !(pfnmerge
& ~VTD_STRIDE_MASK
)) {
1746 pages
>>= VTD_STRIDE_SHIFT
;
1749 pfnmerge
>>= VTD_STRIDE_SHIFT
;
1756 static int __domain_mapping(struct dmar_domain
*domain
, unsigned long iov_pfn
,
1757 struct scatterlist
*sg
, unsigned long phys_pfn
,
1758 unsigned long nr_pages
, int prot
)
1760 struct dma_pte
*first_pte
= NULL
, *pte
= NULL
;
1761 phys_addr_t
uninitialized_var(pteval
);
1762 int addr_width
= agaw_to_width(domain
->agaw
) - VTD_PAGE_SHIFT
;
1763 unsigned long sg_res
;
1764 unsigned int largepage_lvl
= 0;
1765 unsigned long lvl_pages
= 0;
1767 BUG_ON(addr_width
< BITS_PER_LONG
&& (iov_pfn
+ nr_pages
- 1) >> addr_width
);
1769 if ((prot
& (DMA_PTE_READ
|DMA_PTE_WRITE
)) == 0)
1772 prot
&= DMA_PTE_READ
| DMA_PTE_WRITE
| DMA_PTE_SNP
;
1777 sg_res
= nr_pages
+ 1;
1778 pteval
= ((phys_addr_t
)phys_pfn
<< VTD_PAGE_SHIFT
) | prot
;
1781 while (nr_pages
> 0) {
1785 sg_res
= aligned_nrpages(sg
->offset
, sg
->length
);
1786 sg
->dma_address
= ((dma_addr_t
)iov_pfn
<< VTD_PAGE_SHIFT
) + sg
->offset
;
1787 sg
->dma_length
= sg
->length
;
1788 pteval
= page_to_phys(sg_page(sg
)) | prot
;
1789 phys_pfn
= pteval
>> VTD_PAGE_SHIFT
;
1793 largepage_lvl
= hardware_largepage_caps(domain
, iov_pfn
, phys_pfn
, sg_res
);
1795 first_pte
= pte
= pfn_to_dma_pte(domain
, iov_pfn
, largepage_lvl
);
1798 /* It is large page*/
1799 if (largepage_lvl
> 1)
1800 pteval
|= DMA_PTE_LARGE_PAGE
;
1802 pteval
&= ~(uint64_t)DMA_PTE_LARGE_PAGE
;
1805 /* We don't need lock here, nobody else
1806 * touches the iova range
1808 tmp
= cmpxchg64_local(&pte
->val
, 0ULL, pteval
);
1810 static int dumps
= 5;
1811 printk(KERN_CRIT
"ERROR: DMA PTE for vPFN 0x%lx already set (to %llx not %llx)\n",
1812 iov_pfn
, tmp
, (unsigned long long)pteval
);
1815 debug_dma_dump_mappings(NULL
);
1820 lvl_pages
= lvl_to_nr_pages(largepage_lvl
);
1822 BUG_ON(nr_pages
< lvl_pages
);
1823 BUG_ON(sg_res
< lvl_pages
);
1825 nr_pages
-= lvl_pages
;
1826 iov_pfn
+= lvl_pages
;
1827 phys_pfn
+= lvl_pages
;
1828 pteval
+= lvl_pages
* VTD_PAGE_SIZE
;
1829 sg_res
-= lvl_pages
;
1831 /* If the next PTE would be the first in a new page, then we
1832 need to flush the cache on the entries we've just written.
1833 And then we'll need to recalculate 'pte', so clear it and
1834 let it get set again in the if (!pte) block above.
1836 If we're done (!nr_pages) we need to flush the cache too.
1838 Also if we've been setting superpages, we may need to
1839 recalculate 'pte' and switch back to smaller pages for the
1840 end of the mapping, if the trailing size is not enough to
1841 use another superpage (i.e. sg_res < lvl_pages). */
1843 if (!nr_pages
|| first_pte_in_page(pte
) ||
1844 (largepage_lvl
> 1 && sg_res
< lvl_pages
)) {
1845 domain_flush_cache(domain
, first_pte
,
1846 (void *)pte
- (void *)first_pte
);
1850 if (!sg_res
&& nr_pages
)
1856 static inline int domain_sg_mapping(struct dmar_domain
*domain
, unsigned long iov_pfn
,
1857 struct scatterlist
*sg
, unsigned long nr_pages
,
1860 return __domain_mapping(domain
, iov_pfn
, sg
, 0, nr_pages
, prot
);
1863 static inline int domain_pfn_mapping(struct dmar_domain
*domain
, unsigned long iov_pfn
,
1864 unsigned long phys_pfn
, unsigned long nr_pages
,
1867 return __domain_mapping(domain
, iov_pfn
, NULL
, phys_pfn
, nr_pages
, prot
);
1870 static void iommu_detach_dev(struct intel_iommu
*iommu
, u8 bus
, u8 devfn
)
1875 clear_context_table(iommu
, bus
, devfn
);
1876 iommu
->flush
.flush_context(iommu
, 0, 0, 0,
1877 DMA_CCMD_GLOBAL_INVL
);
1878 iommu
->flush
.flush_iotlb(iommu
, 0, 0, 0, DMA_TLB_GLOBAL_FLUSH
);
1881 static void domain_remove_dev_info(struct dmar_domain
*domain
)
1883 struct device_domain_info
*info
;
1884 unsigned long flags
;
1885 struct intel_iommu
*iommu
;
1887 spin_lock_irqsave(&device_domain_lock
, flags
);
1888 while (!list_empty(&domain
->devices
)) {
1889 info
= list_entry(domain
->devices
.next
,
1890 struct device_domain_info
, link
);
1891 list_del(&info
->link
);
1892 list_del(&info
->global
);
1894 info
->dev
->dev
.archdata
.iommu
= NULL
;
1895 spin_unlock_irqrestore(&device_domain_lock
, flags
);
1897 iommu_disable_dev_iotlb(info
);
1898 iommu
= device_to_iommu(info
->segment
, info
->bus
, info
->devfn
);
1899 iommu_detach_dev(iommu
, info
->bus
, info
->devfn
);
1900 free_devinfo_mem(info
);
1902 spin_lock_irqsave(&device_domain_lock
, flags
);
1904 spin_unlock_irqrestore(&device_domain_lock
, flags
);
1909 * Note: we use struct pci_dev->dev.archdata.iommu stores the info
1911 static struct dmar_domain
*
1912 find_domain(struct pci_dev
*pdev
)
1914 struct device_domain_info
*info
;
1916 /* No lock here, assumes no domain exit in normal case */
1917 info
= pdev
->dev
.archdata
.iommu
;
1919 return info
->domain
;
1923 /* domain is initialized */
1924 static struct dmar_domain
*get_domain_for_dev(struct pci_dev
*pdev
, int gaw
)
1926 struct dmar_domain
*domain
, *found
= NULL
;
1927 struct intel_iommu
*iommu
;
1928 struct dmar_drhd_unit
*drhd
;
1929 struct device_domain_info
*info
, *tmp
;
1930 struct pci_dev
*dev_tmp
;
1931 unsigned long flags
;
1932 int bus
= 0, devfn
= 0;
1936 domain
= find_domain(pdev
);
1940 segment
= pci_domain_nr(pdev
->bus
);
1942 dev_tmp
= pci_find_upstream_pcie_bridge(pdev
);
1944 if (pci_is_pcie(dev_tmp
)) {
1945 bus
= dev_tmp
->subordinate
->number
;
1948 bus
= dev_tmp
->bus
->number
;
1949 devfn
= dev_tmp
->devfn
;
1951 spin_lock_irqsave(&device_domain_lock
, flags
);
1952 list_for_each_entry(info
, &device_domain_list
, global
) {
1953 if (info
->segment
== segment
&&
1954 info
->bus
== bus
&& info
->devfn
== devfn
) {
1955 found
= info
->domain
;
1959 spin_unlock_irqrestore(&device_domain_lock
, flags
);
1960 /* pcie-pci bridge already has a domain, uses it */
1967 domain
= alloc_domain();
1971 /* Allocate new domain for the device */
1972 drhd
= dmar_find_matched_drhd_unit(pdev
);
1974 printk(KERN_ERR
"IOMMU: can't find DMAR for device %s\n",
1978 iommu
= drhd
->iommu
;
1980 ret
= iommu_attach_domain(domain
, iommu
);
1982 free_domain_mem(domain
);
1986 if (domain_init(domain
, gaw
)) {
1987 domain_exit(domain
);
1991 /* register pcie-to-pci device */
1993 info
= alloc_devinfo_mem();
1995 domain_exit(domain
);
1998 info
->segment
= segment
;
2000 info
->devfn
= devfn
;
2002 info
->domain
= domain
;
2003 /* This domain is shared by devices under p2p bridge */
2004 domain
->flags
|= DOMAIN_FLAG_P2P_MULTIPLE_DEVICES
;
2006 /* pcie-to-pci bridge already has a domain, uses it */
2008 spin_lock_irqsave(&device_domain_lock
, flags
);
2009 list_for_each_entry(tmp
, &device_domain_list
, global
) {
2010 if (tmp
->segment
== segment
&&
2011 tmp
->bus
== bus
&& tmp
->devfn
== devfn
) {
2012 found
= tmp
->domain
;
2017 spin_unlock_irqrestore(&device_domain_lock
, flags
);
2018 free_devinfo_mem(info
);
2019 domain_exit(domain
);
2022 list_add(&info
->link
, &domain
->devices
);
2023 list_add(&info
->global
, &device_domain_list
);
2024 spin_unlock_irqrestore(&device_domain_lock
, flags
);
2029 info
= alloc_devinfo_mem();
2032 info
->segment
= segment
;
2033 info
->bus
= pdev
->bus
->number
;
2034 info
->devfn
= pdev
->devfn
;
2036 info
->domain
= domain
;
2037 spin_lock_irqsave(&device_domain_lock
, flags
);
2038 /* somebody is fast */
2039 found
= find_domain(pdev
);
2040 if (found
!= NULL
) {
2041 spin_unlock_irqrestore(&device_domain_lock
, flags
);
2042 if (found
!= domain
) {
2043 domain_exit(domain
);
2046 free_devinfo_mem(info
);
2049 list_add(&info
->link
, &domain
->devices
);
2050 list_add(&info
->global
, &device_domain_list
);
2051 pdev
->dev
.archdata
.iommu
= info
;
2052 spin_unlock_irqrestore(&device_domain_lock
, flags
);
2055 /* recheck it here, maybe others set it */
2056 return find_domain(pdev
);
2059 static int iommu_identity_mapping
;
2060 #define IDENTMAP_ALL 1
2061 #define IDENTMAP_GFX 2
2062 #define IDENTMAP_AZALIA 4
2064 static int iommu_domain_identity_map(struct dmar_domain
*domain
,
2065 unsigned long long start
,
2066 unsigned long long end
)
2068 unsigned long first_vpfn
= start
>> VTD_PAGE_SHIFT
;
2069 unsigned long last_vpfn
= end
>> VTD_PAGE_SHIFT
;
2071 if (!reserve_iova(&domain
->iovad
, dma_to_mm_pfn(first_vpfn
),
2072 dma_to_mm_pfn(last_vpfn
))) {
2073 printk(KERN_ERR
"IOMMU: reserve iova failed\n");
2077 pr_debug("Mapping reserved region %llx-%llx for domain %d\n",
2078 start
, end
, domain
->id
);
2080 * RMRR range might have overlap with physical memory range,
2083 dma_pte_clear_range(domain
, first_vpfn
, last_vpfn
);
2085 return domain_pfn_mapping(domain
, first_vpfn
, first_vpfn
,
2086 last_vpfn
- first_vpfn
+ 1,
2087 DMA_PTE_READ
|DMA_PTE_WRITE
);
2090 static int iommu_prepare_identity_map(struct pci_dev
*pdev
,
2091 unsigned long long start
,
2092 unsigned long long end
)
2094 struct dmar_domain
*domain
;
2097 domain
= get_domain_for_dev(pdev
, DEFAULT_DOMAIN_ADDRESS_WIDTH
);
2101 /* For _hardware_ passthrough, don't bother. But for software
2102 passthrough, we do it anyway -- it may indicate a memory
2103 range which is reserved in E820, so which didn't get set
2104 up to start with in si_domain */
2105 if (domain
== si_domain
&& hw_pass_through
) {
2106 printk("Ignoring identity map for HW passthrough device %s [0x%Lx - 0x%Lx]\n",
2107 pci_name(pdev
), start
, end
);
2112 "IOMMU: Setting identity map for device %s [0x%Lx - 0x%Lx]\n",
2113 pci_name(pdev
), start
, end
);
2116 WARN(1, "Your BIOS is broken; RMRR ends before it starts!\n"
2117 "BIOS vendor: %s; Ver: %s; Product Version: %s\n",
2118 dmi_get_system_info(DMI_BIOS_VENDOR
),
2119 dmi_get_system_info(DMI_BIOS_VERSION
),
2120 dmi_get_system_info(DMI_PRODUCT_VERSION
));
2125 if (end
>> agaw_to_width(domain
->agaw
)) {
2126 WARN(1, "Your BIOS is broken; RMRR exceeds permitted address width (%d bits)\n"
2127 "BIOS vendor: %s; Ver: %s; Product Version: %s\n",
2128 agaw_to_width(domain
->agaw
),
2129 dmi_get_system_info(DMI_BIOS_VENDOR
),
2130 dmi_get_system_info(DMI_BIOS_VERSION
),
2131 dmi_get_system_info(DMI_PRODUCT_VERSION
));
2136 ret
= iommu_domain_identity_map(domain
, start
, end
);
2140 /* context entry init */
2141 ret
= domain_context_mapping(domain
, pdev
, CONTEXT_TT_MULTI_LEVEL
);
2148 domain_exit(domain
);
2152 static inline int iommu_prepare_rmrr_dev(struct dmar_rmrr_unit
*rmrr
,
2153 struct pci_dev
*pdev
)
2155 if (pdev
->dev
.archdata
.iommu
== DUMMY_DEVICE_DOMAIN_INFO
)
2157 return iommu_prepare_identity_map(pdev
, rmrr
->base_address
,
2161 #ifdef CONFIG_INTEL_IOMMU_FLOPPY_WA
2162 static inline void iommu_prepare_isa(void)
2164 struct pci_dev
*pdev
;
2167 pdev
= pci_get_class(PCI_CLASS_BRIDGE_ISA
<< 8, NULL
);
2171 printk(KERN_INFO
"IOMMU: Prepare 0-16MiB unity mapping for LPC\n");
2172 ret
= iommu_prepare_identity_map(pdev
, 0, 16*1024*1024 - 1);
2175 printk(KERN_ERR
"IOMMU: Failed to create 0-16MiB identity map; "
2176 "floppy might not work\n");
2180 static inline void iommu_prepare_isa(void)
2184 #endif /* !CONFIG_INTEL_IOMMU_FLPY_WA */
2186 static int md_domain_init(struct dmar_domain
*domain
, int guest_width
);
2188 static int __init
si_domain_work_fn(unsigned long start_pfn
,
2189 unsigned long end_pfn
, void *datax
)
2193 *ret
= iommu_domain_identity_map(si_domain
,
2194 (uint64_t)start_pfn
<< PAGE_SHIFT
,
2195 (uint64_t)end_pfn
<< PAGE_SHIFT
);
2200 static int __init
si_domain_init(int hw
)
2202 struct dmar_drhd_unit
*drhd
;
2203 struct intel_iommu
*iommu
;
2206 si_domain
= alloc_domain();
2210 pr_debug("Identity mapping domain is domain %d\n", si_domain
->id
);
2212 for_each_active_iommu(iommu
, drhd
) {
2213 ret
= iommu_attach_domain(si_domain
, iommu
);
2215 domain_exit(si_domain
);
2220 if (md_domain_init(si_domain
, DEFAULT_DOMAIN_ADDRESS_WIDTH
)) {
2221 domain_exit(si_domain
);
2225 si_domain
->flags
= DOMAIN_FLAG_STATIC_IDENTITY
;
2230 for_each_online_node(nid
) {
2231 work_with_active_regions(nid
, si_domain_work_fn
, &ret
);
2239 static void domain_remove_one_dev_info(struct dmar_domain
*domain
,
2240 struct pci_dev
*pdev
);
2241 static int identity_mapping(struct pci_dev
*pdev
)
2243 struct device_domain_info
*info
;
2245 if (likely(!iommu_identity_mapping
))
2248 info
= pdev
->dev
.archdata
.iommu
;
2249 if (info
&& info
!= DUMMY_DEVICE_DOMAIN_INFO
)
2250 return (info
->domain
== si_domain
);
2255 static int domain_add_dev_info(struct dmar_domain
*domain
,
2256 struct pci_dev
*pdev
,
2259 struct device_domain_info
*info
;
2260 unsigned long flags
;
2263 info
= alloc_devinfo_mem();
2267 ret
= domain_context_mapping(domain
, pdev
, translation
);
2269 free_devinfo_mem(info
);
2273 info
->segment
= pci_domain_nr(pdev
->bus
);
2274 info
->bus
= pdev
->bus
->number
;
2275 info
->devfn
= pdev
->devfn
;
2277 info
->domain
= domain
;
2279 spin_lock_irqsave(&device_domain_lock
, flags
);
2280 list_add(&info
->link
, &domain
->devices
);
2281 list_add(&info
->global
, &device_domain_list
);
2282 pdev
->dev
.archdata
.iommu
= info
;
2283 spin_unlock_irqrestore(&device_domain_lock
, flags
);
2288 static int iommu_should_identity_map(struct pci_dev
*pdev
, int startup
)
2290 if ((iommu_identity_mapping
& IDENTMAP_AZALIA
) && IS_AZALIA(pdev
))
2293 if ((iommu_identity_mapping
& IDENTMAP_GFX
) && IS_GFX_DEVICE(pdev
))
2296 if (!(iommu_identity_mapping
& IDENTMAP_ALL
))
2300 * We want to start off with all devices in the 1:1 domain, and
2301 * take them out later if we find they can't access all of memory.
2303 * However, we can't do this for PCI devices behind bridges,
2304 * because all PCI devices behind the same bridge will end up
2305 * with the same source-id on their transactions.
2307 * Practically speaking, we can't change things around for these
2308 * devices at run-time, because we can't be sure there'll be no
2309 * DMA transactions in flight for any of their siblings.
2311 * So PCI devices (unless they're on the root bus) as well as
2312 * their parent PCI-PCI or PCIe-PCI bridges must be left _out_ of
2313 * the 1:1 domain, just in _case_ one of their siblings turns out
2314 * not to be able to map all of memory.
2316 if (!pci_is_pcie(pdev
)) {
2317 if (!pci_is_root_bus(pdev
->bus
))
2319 if (pdev
->class >> 8 == PCI_CLASS_BRIDGE_PCI
)
2321 } else if (pdev
->pcie_type
== PCI_EXP_TYPE_PCI_BRIDGE
)
2325 * At boot time, we don't yet know if devices will be 64-bit capable.
2326 * Assume that they will -- if they turn out not to be, then we can
2327 * take them out of the 1:1 domain later.
2331 * If the device's dma_mask is less than the system's memory
2332 * size then this is not a candidate for identity mapping.
2334 u64 dma_mask
= pdev
->dma_mask
;
2336 if (pdev
->dev
.coherent_dma_mask
&&
2337 pdev
->dev
.coherent_dma_mask
< dma_mask
)
2338 dma_mask
= pdev
->dev
.coherent_dma_mask
;
2340 return dma_mask
>= dma_get_required_mask(&pdev
->dev
);
2346 static int __init
iommu_prepare_static_identity_mapping(int hw
)
2348 struct pci_dev
*pdev
= NULL
;
2351 ret
= si_domain_init(hw
);
2355 for_each_pci_dev(pdev
) {
2356 /* Skip Host/PCI Bridge devices */
2357 if (IS_BRIDGE_HOST_DEVICE(pdev
))
2359 if (iommu_should_identity_map(pdev
, 1)) {
2360 printk(KERN_INFO
"IOMMU: %s identity mapping for device %s\n",
2361 hw
? "hardware" : "software", pci_name(pdev
));
2363 ret
= domain_add_dev_info(si_domain
, pdev
,
2364 hw
? CONTEXT_TT_PASS_THROUGH
:
2365 CONTEXT_TT_MULTI_LEVEL
);
2374 static int __init
init_dmars(void)
2376 struct dmar_drhd_unit
*drhd
;
2377 struct dmar_rmrr_unit
*rmrr
;
2378 struct pci_dev
*pdev
;
2379 struct intel_iommu
*iommu
;
2385 * initialize and program root entry to not present
2388 for_each_drhd_unit(drhd
) {
2391 * lock not needed as this is only incremented in the single
2392 * threaded kernel __init code path all other access are read
2397 g_iommus
= kcalloc(g_num_of_iommus
, sizeof(struct intel_iommu
*),
2400 printk(KERN_ERR
"Allocating global iommu array failed\n");
2405 deferred_flush
= kzalloc(g_num_of_iommus
*
2406 sizeof(struct deferred_flush_tables
), GFP_KERNEL
);
2407 if (!deferred_flush
) {
2412 for_each_drhd_unit(drhd
) {
2416 iommu
= drhd
->iommu
;
2417 g_iommus
[iommu
->seq_id
] = iommu
;
2419 ret
= iommu_init_domains(iommu
);
2425 * we could share the same root & context tables
2426 * among all IOMMU's. Need to Split it later.
2428 ret
= iommu_alloc_root_entry(iommu
);
2430 printk(KERN_ERR
"IOMMU: allocate root entry failed\n");
2433 if (!ecap_pass_through(iommu
->ecap
))
2434 hw_pass_through
= 0;
2438 * Start from the sane iommu hardware state.
2440 for_each_drhd_unit(drhd
) {
2444 iommu
= drhd
->iommu
;
2447 * If the queued invalidation is already initialized by us
2448 * (for example, while enabling interrupt-remapping) then
2449 * we got the things already rolling from a sane state.
2455 * Clear any previous faults.
2457 dmar_fault(-1, iommu
);
2459 * Disable queued invalidation if supported and already enabled
2460 * before OS handover.
2462 dmar_disable_qi(iommu
);
2465 for_each_drhd_unit(drhd
) {
2469 iommu
= drhd
->iommu
;
2471 if (dmar_enable_qi(iommu
)) {
2473 * Queued Invalidate not enabled, use Register Based
2476 iommu
->flush
.flush_context
= __iommu_flush_context
;
2477 iommu
->flush
.flush_iotlb
= __iommu_flush_iotlb
;
2478 printk(KERN_INFO
"IOMMU %d 0x%Lx: using Register based "
2481 (unsigned long long)drhd
->reg_base_addr
);
2483 iommu
->flush
.flush_context
= qi_flush_context
;
2484 iommu
->flush
.flush_iotlb
= qi_flush_iotlb
;
2485 printk(KERN_INFO
"IOMMU %d 0x%Lx: using Queued "
2488 (unsigned long long)drhd
->reg_base_addr
);
2492 if (iommu_pass_through
)
2493 iommu_identity_mapping
|= IDENTMAP_ALL
;
2495 #ifdef CONFIG_INTEL_IOMMU_BROKEN_GFX_WA
2496 iommu_identity_mapping
|= IDENTMAP_GFX
;
2499 check_tylersburg_isoch();
2502 * If pass through is not set or not enabled, setup context entries for
2503 * identity mappings for rmrr, gfx, and isa and may fall back to static
2504 * identity mapping if iommu_identity_mapping is set.
2506 if (iommu_identity_mapping
) {
2507 ret
= iommu_prepare_static_identity_mapping(hw_pass_through
);
2509 printk(KERN_CRIT
"Failed to setup IOMMU pass-through\n");
2515 * for each dev attached to rmrr
2517 * locate drhd for dev, alloc domain for dev
2518 * allocate free domain
2519 * allocate page table entries for rmrr
2520 * if context not allocated for bus
2521 * allocate and init context
2522 * set present in root table for this bus
2523 * init context with domain, translation etc
2527 printk(KERN_INFO
"IOMMU: Setting RMRR:\n");
2528 for_each_rmrr_units(rmrr
) {
2529 for (i
= 0; i
< rmrr
->devices_cnt
; i
++) {
2530 pdev
= rmrr
->devices
[i
];
2532 * some BIOS lists non-exist devices in DMAR
2537 ret
= iommu_prepare_rmrr_dev(rmrr
, pdev
);
2540 "IOMMU: mapping reserved region failed\n");
2544 iommu_prepare_isa();
2549 * global invalidate context cache
2550 * global invalidate iotlb
2551 * enable translation
2553 for_each_drhd_unit(drhd
) {
2554 if (drhd
->ignored
) {
2556 * we always have to disable PMRs or DMA may fail on
2560 iommu_disable_protect_mem_regions(drhd
->iommu
);
2563 iommu
= drhd
->iommu
;
2565 iommu_flush_write_buffer(iommu
);
2567 ret
= dmar_set_interrupt(iommu
);
2571 iommu_set_root_entry(iommu
);
2573 iommu
->flush
.flush_context(iommu
, 0, 0, 0, DMA_CCMD_GLOBAL_INVL
);
2574 iommu
->flush
.flush_iotlb(iommu
, 0, 0, 0, DMA_TLB_GLOBAL_FLUSH
);
2576 ret
= iommu_enable_translation(iommu
);
2580 iommu_disable_protect_mem_regions(iommu
);
2585 for_each_drhd_unit(drhd
) {
2588 iommu
= drhd
->iommu
;
2595 /* This takes a number of _MM_ pages, not VTD pages */
2596 static struct iova
*intel_alloc_iova(struct device
*dev
,
2597 struct dmar_domain
*domain
,
2598 unsigned long nrpages
, uint64_t dma_mask
)
2600 struct pci_dev
*pdev
= to_pci_dev(dev
);
2601 struct iova
*iova
= NULL
;
2603 /* Restrict dma_mask to the width that the iommu can handle */
2604 dma_mask
= min_t(uint64_t, DOMAIN_MAX_ADDR(domain
->gaw
), dma_mask
);
2606 if (!dmar_forcedac
&& dma_mask
> DMA_BIT_MASK(32)) {
2608 * First try to allocate an io virtual address in
2609 * DMA_BIT_MASK(32) and if that fails then try allocating
2612 iova
= alloc_iova(&domain
->iovad
, nrpages
,
2613 IOVA_PFN(DMA_BIT_MASK(32)), 1);
2617 iova
= alloc_iova(&domain
->iovad
, nrpages
, IOVA_PFN(dma_mask
), 1);
2618 if (unlikely(!iova
)) {
2619 printk(KERN_ERR
"Allocating %ld-page iova for %s failed",
2620 nrpages
, pci_name(pdev
));
2627 static struct dmar_domain
*__get_valid_domain_for_dev(struct pci_dev
*pdev
)
2629 struct dmar_domain
*domain
;
2632 domain
= get_domain_for_dev(pdev
,
2633 DEFAULT_DOMAIN_ADDRESS_WIDTH
);
2636 "Allocating domain for %s failed", pci_name(pdev
));
2640 /* make sure context mapping is ok */
2641 if (unlikely(!domain_context_mapped(pdev
))) {
2642 ret
= domain_context_mapping(domain
, pdev
,
2643 CONTEXT_TT_MULTI_LEVEL
);
2646 "Domain context map for %s failed",
2655 static inline struct dmar_domain
*get_valid_domain_for_dev(struct pci_dev
*dev
)
2657 struct device_domain_info
*info
;
2659 /* No lock here, assumes no domain exit in normal case */
2660 info
= dev
->dev
.archdata
.iommu
;
2662 return info
->domain
;
2664 return __get_valid_domain_for_dev(dev
);
2667 static int iommu_dummy(struct pci_dev
*pdev
)
2669 return pdev
->dev
.archdata
.iommu
== DUMMY_DEVICE_DOMAIN_INFO
;
2672 /* Check if the pdev needs to go through non-identity map and unmap process.*/
2673 static int iommu_no_mapping(struct device
*dev
)
2675 struct pci_dev
*pdev
;
2678 if (unlikely(dev
->bus
!= &pci_bus_type
))
2681 pdev
= to_pci_dev(dev
);
2682 if (iommu_dummy(pdev
))
2685 if (!iommu_identity_mapping
)
2688 found
= identity_mapping(pdev
);
2690 if (iommu_should_identity_map(pdev
, 0))
2694 * 32 bit DMA is removed from si_domain and fall back
2695 * to non-identity mapping.
2697 domain_remove_one_dev_info(si_domain
, pdev
);
2698 printk(KERN_INFO
"32bit %s uses non-identity mapping\n",
2704 * In case of a detached 64 bit DMA device from vm, the device
2705 * is put into si_domain for identity mapping.
2707 if (iommu_should_identity_map(pdev
, 0)) {
2709 ret
= domain_add_dev_info(si_domain
, pdev
,
2711 CONTEXT_TT_PASS_THROUGH
:
2712 CONTEXT_TT_MULTI_LEVEL
);
2714 printk(KERN_INFO
"64bit %s uses identity mapping\n",
2724 static dma_addr_t
__intel_map_single(struct device
*hwdev
, phys_addr_t paddr
,
2725 size_t size
, int dir
, u64 dma_mask
)
2727 struct pci_dev
*pdev
= to_pci_dev(hwdev
);
2728 struct dmar_domain
*domain
;
2729 phys_addr_t start_paddr
;
2733 struct intel_iommu
*iommu
;
2734 unsigned long paddr_pfn
= paddr
>> PAGE_SHIFT
;
2736 BUG_ON(dir
== DMA_NONE
);
2738 if (iommu_no_mapping(hwdev
))
2741 domain
= get_valid_domain_for_dev(pdev
);
2745 iommu
= domain_get_iommu(domain
);
2746 size
= aligned_nrpages(paddr
, size
);
2748 iova
= intel_alloc_iova(hwdev
, domain
, dma_to_mm_pfn(size
), dma_mask
);
2753 * Check if DMAR supports zero-length reads on write only
2756 if (dir
== DMA_TO_DEVICE
|| dir
== DMA_BIDIRECTIONAL
|| \
2757 !cap_zlr(iommu
->cap
))
2758 prot
|= DMA_PTE_READ
;
2759 if (dir
== DMA_FROM_DEVICE
|| dir
== DMA_BIDIRECTIONAL
)
2760 prot
|= DMA_PTE_WRITE
;
2762 * paddr - (paddr + size) might be partial page, we should map the whole
2763 * page. Note: if two part of one page are separately mapped, we
2764 * might have two guest_addr mapping to the same host paddr, but this
2765 * is not a big problem
2767 ret
= domain_pfn_mapping(domain
, mm_to_dma_pfn(iova
->pfn_lo
),
2768 mm_to_dma_pfn(paddr_pfn
), size
, prot
);
2772 /* it's a non-present to present mapping. Only flush if caching mode */
2773 if (cap_caching_mode(iommu
->cap
))
2774 iommu_flush_iotlb_psi(iommu
, domain
->id
, mm_to_dma_pfn(iova
->pfn_lo
), size
, 1);
2776 iommu_flush_write_buffer(iommu
);
2778 start_paddr
= (phys_addr_t
)iova
->pfn_lo
<< PAGE_SHIFT
;
2779 start_paddr
+= paddr
& ~PAGE_MASK
;
2784 __free_iova(&domain
->iovad
, iova
);
2785 printk(KERN_ERR
"Device %s request: %zx@%llx dir %d --- failed\n",
2786 pci_name(pdev
), size
, (unsigned long long)paddr
, dir
);
2790 static dma_addr_t
intel_map_page(struct device
*dev
, struct page
*page
,
2791 unsigned long offset
, size_t size
,
2792 enum dma_data_direction dir
,
2793 struct dma_attrs
*attrs
)
2795 return __intel_map_single(dev
, page_to_phys(page
) + offset
, size
,
2796 dir
, to_pci_dev(dev
)->dma_mask
);
2799 static void flush_unmaps(void)
2805 /* just flush them all */
2806 for (i
= 0; i
< g_num_of_iommus
; i
++) {
2807 struct intel_iommu
*iommu
= g_iommus
[i
];
2811 if (!deferred_flush
[i
].next
)
2814 /* In caching mode, global flushes turn emulation expensive */
2815 if (!cap_caching_mode(iommu
->cap
))
2816 iommu
->flush
.flush_iotlb(iommu
, 0, 0, 0,
2817 DMA_TLB_GLOBAL_FLUSH
);
2818 for (j
= 0; j
< deferred_flush
[i
].next
; j
++) {
2820 struct iova
*iova
= deferred_flush
[i
].iova
[j
];
2821 struct dmar_domain
*domain
= deferred_flush
[i
].domain
[j
];
2823 /* On real hardware multiple invalidations are expensive */
2824 if (cap_caching_mode(iommu
->cap
))
2825 iommu_flush_iotlb_psi(iommu
, domain
->id
,
2826 iova
->pfn_lo
, iova
->pfn_hi
- iova
->pfn_lo
+ 1, 0);
2828 mask
= ilog2(mm_to_dma_pfn(iova
->pfn_hi
- iova
->pfn_lo
+ 1));
2829 iommu_flush_dev_iotlb(deferred_flush
[i
].domain
[j
],
2830 (uint64_t)iova
->pfn_lo
<< PAGE_SHIFT
, mask
);
2832 __free_iova(&deferred_flush
[i
].domain
[j
]->iovad
, iova
);
2834 deferred_flush
[i
].next
= 0;
2840 static void flush_unmaps_timeout(unsigned long data
)
2842 unsigned long flags
;
2844 spin_lock_irqsave(&async_umap_flush_lock
, flags
);
2846 spin_unlock_irqrestore(&async_umap_flush_lock
, flags
);
2849 static void add_unmap(struct dmar_domain
*dom
, struct iova
*iova
)
2851 unsigned long flags
;
2853 struct intel_iommu
*iommu
;
2855 spin_lock_irqsave(&async_umap_flush_lock
, flags
);
2856 if (list_size
== HIGH_WATER_MARK
)
2859 iommu
= domain_get_iommu(dom
);
2860 iommu_id
= iommu
->seq_id
;
2862 next
= deferred_flush
[iommu_id
].next
;
2863 deferred_flush
[iommu_id
].domain
[next
] = dom
;
2864 deferred_flush
[iommu_id
].iova
[next
] = iova
;
2865 deferred_flush
[iommu_id
].next
++;
2868 mod_timer(&unmap_timer
, jiffies
+ msecs_to_jiffies(10));
2872 spin_unlock_irqrestore(&async_umap_flush_lock
, flags
);
2875 static void intel_unmap_page(struct device
*dev
, dma_addr_t dev_addr
,
2876 size_t size
, enum dma_data_direction dir
,
2877 struct dma_attrs
*attrs
)
2879 struct pci_dev
*pdev
= to_pci_dev(dev
);
2880 struct dmar_domain
*domain
;
2881 unsigned long start_pfn
, last_pfn
;
2883 struct intel_iommu
*iommu
;
2885 if (iommu_no_mapping(dev
))
2888 domain
= find_domain(pdev
);
2891 iommu
= domain_get_iommu(domain
);
2893 iova
= find_iova(&domain
->iovad
, IOVA_PFN(dev_addr
));
2894 if (WARN_ONCE(!iova
, "Driver unmaps unmatched page at PFN %llx\n",
2895 (unsigned long long)dev_addr
))
2898 start_pfn
= mm_to_dma_pfn(iova
->pfn_lo
);
2899 last_pfn
= mm_to_dma_pfn(iova
->pfn_hi
+ 1) - 1;
2901 pr_debug("Device %s unmapping: pfn %lx-%lx\n",
2902 pci_name(pdev
), start_pfn
, last_pfn
);
2904 /* clear the whole page */
2905 dma_pte_clear_range(domain
, start_pfn
, last_pfn
);
2907 /* free page tables */
2908 dma_pte_free_pagetable(domain
, start_pfn
, last_pfn
);
2910 if (intel_iommu_strict
) {
2911 iommu_flush_iotlb_psi(iommu
, domain
->id
, start_pfn
,
2912 last_pfn
- start_pfn
+ 1, 0);
2914 __free_iova(&domain
->iovad
, iova
);
2916 add_unmap(domain
, iova
);
2918 * queue up the release of the unmap to save the 1/6th of the
2919 * cpu used up by the iotlb flush operation...
2924 static void *intel_alloc_coherent(struct device
*hwdev
, size_t size
,
2925 dma_addr_t
*dma_handle
, gfp_t flags
)
2930 size
= PAGE_ALIGN(size
);
2931 order
= get_order(size
);
2933 if (!iommu_no_mapping(hwdev
))
2934 flags
&= ~(GFP_DMA
| GFP_DMA32
);
2935 else if (hwdev
->coherent_dma_mask
< dma_get_required_mask(hwdev
)) {
2936 if (hwdev
->coherent_dma_mask
< DMA_BIT_MASK(32))
2942 vaddr
= (void *)__get_free_pages(flags
, order
);
2945 memset(vaddr
, 0, size
);
2947 *dma_handle
= __intel_map_single(hwdev
, virt_to_bus(vaddr
), size
,
2949 hwdev
->coherent_dma_mask
);
2952 free_pages((unsigned long)vaddr
, order
);
2956 static void intel_free_coherent(struct device
*hwdev
, size_t size
, void *vaddr
,
2957 dma_addr_t dma_handle
)
2961 size
= PAGE_ALIGN(size
);
2962 order
= get_order(size
);
2964 intel_unmap_page(hwdev
, dma_handle
, size
, DMA_BIDIRECTIONAL
, NULL
);
2965 free_pages((unsigned long)vaddr
, order
);
2968 static void intel_unmap_sg(struct device
*hwdev
, struct scatterlist
*sglist
,
2969 int nelems
, enum dma_data_direction dir
,
2970 struct dma_attrs
*attrs
)
2972 struct pci_dev
*pdev
= to_pci_dev(hwdev
);
2973 struct dmar_domain
*domain
;
2974 unsigned long start_pfn
, last_pfn
;
2976 struct intel_iommu
*iommu
;
2978 if (iommu_no_mapping(hwdev
))
2981 domain
= find_domain(pdev
);
2984 iommu
= domain_get_iommu(domain
);
2986 iova
= find_iova(&domain
->iovad
, IOVA_PFN(sglist
[0].dma_address
));
2987 if (WARN_ONCE(!iova
, "Driver unmaps unmatched sglist at PFN %llx\n",
2988 (unsigned long long)sglist
[0].dma_address
))
2991 start_pfn
= mm_to_dma_pfn(iova
->pfn_lo
);
2992 last_pfn
= mm_to_dma_pfn(iova
->pfn_hi
+ 1) - 1;
2994 /* clear the whole page */
2995 dma_pte_clear_range(domain
, start_pfn
, last_pfn
);
2997 /* free page tables */
2998 dma_pte_free_pagetable(domain
, start_pfn
, last_pfn
);
3000 if (intel_iommu_strict
) {
3001 iommu_flush_iotlb_psi(iommu
, domain
->id
, start_pfn
,
3002 last_pfn
- start_pfn
+ 1, 0);
3004 __free_iova(&domain
->iovad
, iova
);
3006 add_unmap(domain
, iova
);
3008 * queue up the release of the unmap to save the 1/6th of the
3009 * cpu used up by the iotlb flush operation...
3014 static int intel_nontranslate_map_sg(struct device
*hddev
,
3015 struct scatterlist
*sglist
, int nelems
, int dir
)
3018 struct scatterlist
*sg
;
3020 for_each_sg(sglist
, sg
, nelems
, i
) {
3021 BUG_ON(!sg_page(sg
));
3022 sg
->dma_address
= page_to_phys(sg_page(sg
)) + sg
->offset
;
3023 sg
->dma_length
= sg
->length
;
3028 static int intel_map_sg(struct device
*hwdev
, struct scatterlist
*sglist
, int nelems
,
3029 enum dma_data_direction dir
, struct dma_attrs
*attrs
)
3032 struct pci_dev
*pdev
= to_pci_dev(hwdev
);
3033 struct dmar_domain
*domain
;
3036 struct iova
*iova
= NULL
;
3038 struct scatterlist
*sg
;
3039 unsigned long start_vpfn
;
3040 struct intel_iommu
*iommu
;
3042 BUG_ON(dir
== DMA_NONE
);
3043 if (iommu_no_mapping(hwdev
))
3044 return intel_nontranslate_map_sg(hwdev
, sglist
, nelems
, dir
);
3046 domain
= get_valid_domain_for_dev(pdev
);
3050 iommu
= domain_get_iommu(domain
);
3052 for_each_sg(sglist
, sg
, nelems
, i
)
3053 size
+= aligned_nrpages(sg
->offset
, sg
->length
);
3055 iova
= intel_alloc_iova(hwdev
, domain
, dma_to_mm_pfn(size
),
3058 sglist
->dma_length
= 0;
3063 * Check if DMAR supports zero-length reads on write only
3066 if (dir
== DMA_TO_DEVICE
|| dir
== DMA_BIDIRECTIONAL
|| \
3067 !cap_zlr(iommu
->cap
))
3068 prot
|= DMA_PTE_READ
;
3069 if (dir
== DMA_FROM_DEVICE
|| dir
== DMA_BIDIRECTIONAL
)
3070 prot
|= DMA_PTE_WRITE
;
3072 start_vpfn
= mm_to_dma_pfn(iova
->pfn_lo
);
3074 ret
= domain_sg_mapping(domain
, start_vpfn
, sglist
, size
, prot
);
3075 if (unlikely(ret
)) {
3076 /* clear the page */
3077 dma_pte_clear_range(domain
, start_vpfn
,
3078 start_vpfn
+ size
- 1);
3079 /* free page tables */
3080 dma_pte_free_pagetable(domain
, start_vpfn
,
3081 start_vpfn
+ size
- 1);
3083 __free_iova(&domain
->iovad
, iova
);
3087 /* it's a non-present to present mapping. Only flush if caching mode */
3088 if (cap_caching_mode(iommu
->cap
))
3089 iommu_flush_iotlb_psi(iommu
, domain
->id
, start_vpfn
, size
, 1);
3091 iommu_flush_write_buffer(iommu
);
3096 static int intel_mapping_error(struct device
*dev
, dma_addr_t dma_addr
)
3101 struct dma_map_ops intel_dma_ops
= {
3102 .alloc_coherent
= intel_alloc_coherent
,
3103 .free_coherent
= intel_free_coherent
,
3104 .map_sg
= intel_map_sg
,
3105 .unmap_sg
= intel_unmap_sg
,
3106 .map_page
= intel_map_page
,
3107 .unmap_page
= intel_unmap_page
,
3108 .mapping_error
= intel_mapping_error
,
3111 static inline int iommu_domain_cache_init(void)
3115 iommu_domain_cache
= kmem_cache_create("iommu_domain",
3116 sizeof(struct dmar_domain
),
3121 if (!iommu_domain_cache
) {
3122 printk(KERN_ERR
"Couldn't create iommu_domain cache\n");
3129 static inline int iommu_devinfo_cache_init(void)
3133 iommu_devinfo_cache
= kmem_cache_create("iommu_devinfo",
3134 sizeof(struct device_domain_info
),
3138 if (!iommu_devinfo_cache
) {
3139 printk(KERN_ERR
"Couldn't create devinfo cache\n");
3146 static inline int iommu_iova_cache_init(void)
3150 iommu_iova_cache
= kmem_cache_create("iommu_iova",
3151 sizeof(struct iova
),
3155 if (!iommu_iova_cache
) {
3156 printk(KERN_ERR
"Couldn't create iova cache\n");
3163 static int __init
iommu_init_mempool(void)
3166 ret
= iommu_iova_cache_init();
3170 ret
= iommu_domain_cache_init();
3174 ret
= iommu_devinfo_cache_init();
3178 kmem_cache_destroy(iommu_domain_cache
);
3180 kmem_cache_destroy(iommu_iova_cache
);
3185 static void __init
iommu_exit_mempool(void)
3187 kmem_cache_destroy(iommu_devinfo_cache
);
3188 kmem_cache_destroy(iommu_domain_cache
);
3189 kmem_cache_destroy(iommu_iova_cache
);
3193 static void quirk_ioat_snb_local_iommu(struct pci_dev
*pdev
)
3195 struct dmar_drhd_unit
*drhd
;
3199 /* We know that this device on this chipset has its own IOMMU.
3200 * If we find it under a different IOMMU, then the BIOS is lying
3201 * to us. Hope that the IOMMU for this device is actually
3202 * disabled, and it needs no translation...
3204 rc
= pci_bus_read_config_dword(pdev
->bus
, PCI_DEVFN(0, 0), 0xb0, &vtbar
);
3206 /* "can't" happen */
3207 dev_info(&pdev
->dev
, "failed to run vt-d quirk\n");
3210 vtbar
&= 0xffff0000;
3212 /* we know that the this iommu should be at offset 0xa000 from vtbar */
3213 drhd
= dmar_find_matched_drhd_unit(pdev
);
3214 if (WARN_TAINT_ONCE(!drhd
|| drhd
->reg_base_addr
- vtbar
!= 0xa000,
3215 TAINT_FIRMWARE_WORKAROUND
,
3216 "BIOS assigned incorrect VT-d unit for Intel(R) QuickData Technology device\n"))
3217 pdev
->dev
.archdata
.iommu
= DUMMY_DEVICE_DOMAIN_INFO
;
3219 DECLARE_PCI_FIXUP_ENABLE(PCI_VENDOR_ID_INTEL
, PCI_DEVICE_ID_INTEL_IOAT_SNB
, quirk_ioat_snb_local_iommu
);
3221 static void __init
init_no_remapping_devices(void)
3223 struct dmar_drhd_unit
*drhd
;
3225 for_each_drhd_unit(drhd
) {
3226 if (!drhd
->include_all
) {
3228 for (i
= 0; i
< drhd
->devices_cnt
; i
++)
3229 if (drhd
->devices
[i
] != NULL
)
3231 /* ignore DMAR unit if no pci devices exist */
3232 if (i
== drhd
->devices_cnt
)
3237 for_each_drhd_unit(drhd
) {
3239 if (drhd
->ignored
|| drhd
->include_all
)
3242 for (i
= 0; i
< drhd
->devices_cnt
; i
++)
3243 if (drhd
->devices
[i
] &&
3244 !IS_GFX_DEVICE(drhd
->devices
[i
]))
3247 if (i
< drhd
->devices_cnt
)
3250 /* This IOMMU has *only* gfx devices. Either bypass it or
3251 set the gfx_mapped flag, as appropriate */
3253 intel_iommu_gfx_mapped
= 1;
3256 for (i
= 0; i
< drhd
->devices_cnt
; i
++) {
3257 if (!drhd
->devices
[i
])
3259 drhd
->devices
[i
]->dev
.archdata
.iommu
= DUMMY_DEVICE_DOMAIN_INFO
;
3265 #ifdef CONFIG_SUSPEND
3266 static int init_iommu_hw(void)
3268 struct dmar_drhd_unit
*drhd
;
3269 struct intel_iommu
*iommu
= NULL
;
3271 for_each_active_iommu(iommu
, drhd
)
3273 dmar_reenable_qi(iommu
);
3275 for_each_iommu(iommu
, drhd
) {
3276 if (drhd
->ignored
) {
3278 * we always have to disable PMRs or DMA may fail on
3282 iommu_disable_protect_mem_regions(iommu
);
3286 iommu_flush_write_buffer(iommu
);
3288 iommu_set_root_entry(iommu
);
3290 iommu
->flush
.flush_context(iommu
, 0, 0, 0,
3291 DMA_CCMD_GLOBAL_INVL
);
3292 iommu
->flush
.flush_iotlb(iommu
, 0, 0, 0,
3293 DMA_TLB_GLOBAL_FLUSH
);
3294 if (iommu_enable_translation(iommu
))
3296 iommu_disable_protect_mem_regions(iommu
);
3302 static void iommu_flush_all(void)
3304 struct dmar_drhd_unit
*drhd
;
3305 struct intel_iommu
*iommu
;
3307 for_each_active_iommu(iommu
, drhd
) {
3308 iommu
->flush
.flush_context(iommu
, 0, 0, 0,
3309 DMA_CCMD_GLOBAL_INVL
);
3310 iommu
->flush
.flush_iotlb(iommu
, 0, 0, 0,
3311 DMA_TLB_GLOBAL_FLUSH
);
3315 static int iommu_suspend(void)
3317 struct dmar_drhd_unit
*drhd
;
3318 struct intel_iommu
*iommu
= NULL
;
3321 for_each_active_iommu(iommu
, drhd
) {
3322 iommu
->iommu_state
= kzalloc(sizeof(u32
) * MAX_SR_DMAR_REGS
,
3324 if (!iommu
->iommu_state
)
3330 for_each_active_iommu(iommu
, drhd
) {
3331 iommu_disable_translation(iommu
);
3333 raw_spin_lock_irqsave(&iommu
->register_lock
, flag
);
3335 iommu
->iommu_state
[SR_DMAR_FECTL_REG
] =
3336 readl(iommu
->reg
+ DMAR_FECTL_REG
);
3337 iommu
->iommu_state
[SR_DMAR_FEDATA_REG
] =
3338 readl(iommu
->reg
+ DMAR_FEDATA_REG
);
3339 iommu
->iommu_state
[SR_DMAR_FEADDR_REG
] =
3340 readl(iommu
->reg
+ DMAR_FEADDR_REG
);
3341 iommu
->iommu_state
[SR_DMAR_FEUADDR_REG
] =
3342 readl(iommu
->reg
+ DMAR_FEUADDR_REG
);
3344 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flag
);
3349 for_each_active_iommu(iommu
, drhd
)
3350 kfree(iommu
->iommu_state
);
3355 static void iommu_resume(void)
3357 struct dmar_drhd_unit
*drhd
;
3358 struct intel_iommu
*iommu
= NULL
;
3361 if (init_iommu_hw()) {
3363 panic("tboot: IOMMU setup failed, DMAR can not resume!\n");
3365 WARN(1, "IOMMU setup failed, DMAR can not resume!\n");
3369 for_each_active_iommu(iommu
, drhd
) {
3371 raw_spin_lock_irqsave(&iommu
->register_lock
, flag
);
3373 writel(iommu
->iommu_state
[SR_DMAR_FECTL_REG
],
3374 iommu
->reg
+ DMAR_FECTL_REG
);
3375 writel(iommu
->iommu_state
[SR_DMAR_FEDATA_REG
],
3376 iommu
->reg
+ DMAR_FEDATA_REG
);
3377 writel(iommu
->iommu_state
[SR_DMAR_FEADDR_REG
],
3378 iommu
->reg
+ DMAR_FEADDR_REG
);
3379 writel(iommu
->iommu_state
[SR_DMAR_FEUADDR_REG
],
3380 iommu
->reg
+ DMAR_FEUADDR_REG
);
3382 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flag
);
3385 for_each_active_iommu(iommu
, drhd
)
3386 kfree(iommu
->iommu_state
);
3389 static struct syscore_ops iommu_syscore_ops
= {
3390 .resume
= iommu_resume
,
3391 .suspend
= iommu_suspend
,
3394 static void __init
init_iommu_pm_ops(void)
3396 register_syscore_ops(&iommu_syscore_ops
);
3400 static inline void init_iommu_pm_ops(void) {}
3401 #endif /* CONFIG_PM */
3403 LIST_HEAD(dmar_rmrr_units
);
3405 static void __init
dmar_register_rmrr_unit(struct dmar_rmrr_unit
*rmrr
)
3407 list_add(&rmrr
->list
, &dmar_rmrr_units
);
3411 int __init
dmar_parse_one_rmrr(struct acpi_dmar_header
*header
)
3413 struct acpi_dmar_reserved_memory
*rmrr
;
3414 struct dmar_rmrr_unit
*rmrru
;
3416 rmrru
= kzalloc(sizeof(*rmrru
), GFP_KERNEL
);
3420 rmrru
->hdr
= header
;
3421 rmrr
= (struct acpi_dmar_reserved_memory
*)header
;
3422 rmrru
->base_address
= rmrr
->base_address
;
3423 rmrru
->end_address
= rmrr
->end_address
;
3425 dmar_register_rmrr_unit(rmrru
);
3430 rmrr_parse_dev(struct dmar_rmrr_unit
*rmrru
)
3432 struct acpi_dmar_reserved_memory
*rmrr
;
3435 rmrr
= (struct acpi_dmar_reserved_memory
*) rmrru
->hdr
;
3436 ret
= dmar_parse_dev_scope((void *)(rmrr
+ 1),
3437 ((void *)rmrr
) + rmrr
->header
.length
,
3438 &rmrru
->devices_cnt
, &rmrru
->devices
, rmrr
->segment
);
3440 if (ret
|| (rmrru
->devices_cnt
== 0)) {
3441 list_del(&rmrru
->list
);
3447 static LIST_HEAD(dmar_atsr_units
);
3449 int __init
dmar_parse_one_atsr(struct acpi_dmar_header
*hdr
)
3451 struct acpi_dmar_atsr
*atsr
;
3452 struct dmar_atsr_unit
*atsru
;
3454 atsr
= container_of(hdr
, struct acpi_dmar_atsr
, header
);
3455 atsru
= kzalloc(sizeof(*atsru
), GFP_KERNEL
);
3460 atsru
->include_all
= atsr
->flags
& 0x1;
3462 list_add(&atsru
->list
, &dmar_atsr_units
);
3467 static int __init
atsr_parse_dev(struct dmar_atsr_unit
*atsru
)
3470 struct acpi_dmar_atsr
*atsr
;
3472 if (atsru
->include_all
)
3475 atsr
= container_of(atsru
->hdr
, struct acpi_dmar_atsr
, header
);
3476 rc
= dmar_parse_dev_scope((void *)(atsr
+ 1),
3477 (void *)atsr
+ atsr
->header
.length
,
3478 &atsru
->devices_cnt
, &atsru
->devices
,
3480 if (rc
|| !atsru
->devices_cnt
) {
3481 list_del(&atsru
->list
);
3488 int dmar_find_matched_atsr_unit(struct pci_dev
*dev
)
3491 struct pci_bus
*bus
;
3492 struct acpi_dmar_atsr
*atsr
;
3493 struct dmar_atsr_unit
*atsru
;
3495 dev
= pci_physfn(dev
);
3497 list_for_each_entry(atsru
, &dmar_atsr_units
, list
) {
3498 atsr
= container_of(atsru
->hdr
, struct acpi_dmar_atsr
, header
);
3499 if (atsr
->segment
== pci_domain_nr(dev
->bus
))
3506 for (bus
= dev
->bus
; bus
; bus
= bus
->parent
) {
3507 struct pci_dev
*bridge
= bus
->self
;
3509 if (!bridge
|| !pci_is_pcie(bridge
) ||
3510 bridge
->pcie_type
== PCI_EXP_TYPE_PCI_BRIDGE
)
3513 if (bridge
->pcie_type
== PCI_EXP_TYPE_ROOT_PORT
) {
3514 for (i
= 0; i
< atsru
->devices_cnt
; i
++)
3515 if (atsru
->devices
[i
] == bridge
)
3521 if (atsru
->include_all
)
3527 int dmar_parse_rmrr_atsr_dev(void)
3529 struct dmar_rmrr_unit
*rmrr
, *rmrr_n
;
3530 struct dmar_atsr_unit
*atsr
, *atsr_n
;
3533 list_for_each_entry_safe(rmrr
, rmrr_n
, &dmar_rmrr_units
, list
) {
3534 ret
= rmrr_parse_dev(rmrr
);
3539 list_for_each_entry_safe(atsr
, atsr_n
, &dmar_atsr_units
, list
) {
3540 ret
= atsr_parse_dev(atsr
);
3549 * Here we only respond to action of unbound device from driver.
3551 * Added device is not attached to its DMAR domain here yet. That will happen
3552 * when mapping the device to iova.
3554 static int device_notifier(struct notifier_block
*nb
,
3555 unsigned long action
, void *data
)
3557 struct device
*dev
= data
;
3558 struct pci_dev
*pdev
= to_pci_dev(dev
);
3559 struct dmar_domain
*domain
;
3561 if (iommu_no_mapping(dev
))
3564 domain
= find_domain(pdev
);
3568 if (action
== BUS_NOTIFY_UNBOUND_DRIVER
&& !iommu_pass_through
) {
3569 domain_remove_one_dev_info(domain
, pdev
);
3571 if (!(domain
->flags
& DOMAIN_FLAG_VIRTUAL_MACHINE
) &&
3572 !(domain
->flags
& DOMAIN_FLAG_STATIC_IDENTITY
) &&
3573 list_empty(&domain
->devices
))
3574 domain_exit(domain
);
3580 static struct notifier_block device_nb
= {
3581 .notifier_call
= device_notifier
,
3584 int __init
intel_iommu_init(void)
3588 /* VT-d is required for a TXT/tboot launch, so enforce that */
3589 force_on
= tboot_force_iommu();
3591 if (dmar_table_init()) {
3593 panic("tboot: Failed to initialize DMAR table\n");
3597 if (dmar_dev_scope_init() < 0) {
3599 panic("tboot: Failed to initialize DMAR device scope\n");
3603 if (no_iommu
|| dmar_disabled
)
3606 if (iommu_init_mempool()) {
3608 panic("tboot: Failed to initialize iommu memory\n");
3612 if (list_empty(&dmar_rmrr_units
))
3613 printk(KERN_INFO
"DMAR: No RMRR found\n");
3615 if (list_empty(&dmar_atsr_units
))
3616 printk(KERN_INFO
"DMAR: No ATSR found\n");
3618 if (dmar_init_reserved_ranges()) {
3620 panic("tboot: Failed to reserve iommu ranges\n");
3624 init_no_remapping_devices();
3629 panic("tboot: Failed to initialize DMARs\n");
3630 printk(KERN_ERR
"IOMMU: dmar init failed\n");
3631 put_iova_domain(&reserved_iova_list
);
3632 iommu_exit_mempool();
3636 "PCI-DMA: Intel(R) Virtualization Technology for Directed I/O\n");
3638 init_timer(&unmap_timer
);
3639 #ifdef CONFIG_SWIOTLB
3642 dma_ops
= &intel_dma_ops
;
3644 init_iommu_pm_ops();
3646 bus_set_iommu(&pci_bus_type
, &intel_iommu_ops
);
3648 bus_register_notifier(&pci_bus_type
, &device_nb
);
3653 static void iommu_detach_dependent_devices(struct intel_iommu
*iommu
,
3654 struct pci_dev
*pdev
)
3656 struct pci_dev
*tmp
, *parent
;
3658 if (!iommu
|| !pdev
)
3661 /* dependent device detach */
3662 tmp
= pci_find_upstream_pcie_bridge(pdev
);
3663 /* Secondary interface's bus number and devfn 0 */
3665 parent
= pdev
->bus
->self
;
3666 while (parent
!= tmp
) {
3667 iommu_detach_dev(iommu
, parent
->bus
->number
,
3669 parent
= parent
->bus
->self
;
3671 if (pci_is_pcie(tmp
)) /* this is a PCIe-to-PCI bridge */
3672 iommu_detach_dev(iommu
,
3673 tmp
->subordinate
->number
, 0);
3674 else /* this is a legacy PCI bridge */
3675 iommu_detach_dev(iommu
, tmp
->bus
->number
,
3680 static void domain_remove_one_dev_info(struct dmar_domain
*domain
,
3681 struct pci_dev
*pdev
)
3683 struct device_domain_info
*info
;
3684 struct intel_iommu
*iommu
;
3685 unsigned long flags
;
3687 struct list_head
*entry
, *tmp
;
3689 iommu
= device_to_iommu(pci_domain_nr(pdev
->bus
), pdev
->bus
->number
,
3694 spin_lock_irqsave(&device_domain_lock
, flags
);
3695 list_for_each_safe(entry
, tmp
, &domain
->devices
) {
3696 info
= list_entry(entry
, struct device_domain_info
, link
);
3697 if (info
->segment
== pci_domain_nr(pdev
->bus
) &&
3698 info
->bus
== pdev
->bus
->number
&&
3699 info
->devfn
== pdev
->devfn
) {
3700 list_del(&info
->link
);
3701 list_del(&info
->global
);
3703 info
->dev
->dev
.archdata
.iommu
= NULL
;
3704 spin_unlock_irqrestore(&device_domain_lock
, flags
);
3706 iommu_disable_dev_iotlb(info
);
3707 iommu_detach_dev(iommu
, info
->bus
, info
->devfn
);
3708 iommu_detach_dependent_devices(iommu
, pdev
);
3709 free_devinfo_mem(info
);
3711 spin_lock_irqsave(&device_domain_lock
, flags
);
3719 /* if there is no other devices under the same iommu
3720 * owned by this domain, clear this iommu in iommu_bmp
3721 * update iommu count and coherency
3723 if (iommu
== device_to_iommu(info
->segment
, info
->bus
,
3728 spin_unlock_irqrestore(&device_domain_lock
, flags
);
3731 unsigned long tmp_flags
;
3732 spin_lock_irqsave(&domain
->iommu_lock
, tmp_flags
);
3733 clear_bit(iommu
->seq_id
, &domain
->iommu_bmp
);
3734 domain
->iommu_count
--;
3735 domain_update_iommu_cap(domain
);
3736 spin_unlock_irqrestore(&domain
->iommu_lock
, tmp_flags
);
3738 if (!(domain
->flags
& DOMAIN_FLAG_VIRTUAL_MACHINE
) &&
3739 !(domain
->flags
& DOMAIN_FLAG_STATIC_IDENTITY
)) {
3740 spin_lock_irqsave(&iommu
->lock
, tmp_flags
);
3741 clear_bit(domain
->id
, iommu
->domain_ids
);
3742 iommu
->domains
[domain
->id
] = NULL
;
3743 spin_unlock_irqrestore(&iommu
->lock
, tmp_flags
);
3748 static void vm_domain_remove_all_dev_info(struct dmar_domain
*domain
)
3750 struct device_domain_info
*info
;
3751 struct intel_iommu
*iommu
;
3752 unsigned long flags1
, flags2
;
3754 spin_lock_irqsave(&device_domain_lock
, flags1
);
3755 while (!list_empty(&domain
->devices
)) {
3756 info
= list_entry(domain
->devices
.next
,
3757 struct device_domain_info
, link
);
3758 list_del(&info
->link
);
3759 list_del(&info
->global
);
3761 info
->dev
->dev
.archdata
.iommu
= NULL
;
3763 spin_unlock_irqrestore(&device_domain_lock
, flags1
);
3765 iommu_disable_dev_iotlb(info
);
3766 iommu
= device_to_iommu(info
->segment
, info
->bus
, info
->devfn
);
3767 iommu_detach_dev(iommu
, info
->bus
, info
->devfn
);
3768 iommu_detach_dependent_devices(iommu
, info
->dev
);
3770 /* clear this iommu in iommu_bmp, update iommu count
3773 spin_lock_irqsave(&domain
->iommu_lock
, flags2
);
3774 if (test_and_clear_bit(iommu
->seq_id
,
3775 &domain
->iommu_bmp
)) {
3776 domain
->iommu_count
--;
3777 domain_update_iommu_cap(domain
);
3779 spin_unlock_irqrestore(&domain
->iommu_lock
, flags2
);
3781 free_devinfo_mem(info
);
3782 spin_lock_irqsave(&device_domain_lock
, flags1
);
3784 spin_unlock_irqrestore(&device_domain_lock
, flags1
);
3787 /* domain id for virtual machine, it won't be set in context */
3788 static unsigned long vm_domid
;
3790 static struct dmar_domain
*iommu_alloc_vm_domain(void)
3792 struct dmar_domain
*domain
;
3794 domain
= alloc_domain_mem();
3798 domain
->id
= vm_domid
++;
3800 memset(&domain
->iommu_bmp
, 0, sizeof(unsigned long));
3801 domain
->flags
= DOMAIN_FLAG_VIRTUAL_MACHINE
;
3806 static int md_domain_init(struct dmar_domain
*domain
, int guest_width
)
3810 init_iova_domain(&domain
->iovad
, DMA_32BIT_PFN
);
3811 spin_lock_init(&domain
->iommu_lock
);
3813 domain_reserve_special_ranges(domain
);
3815 /* calculate AGAW */
3816 domain
->gaw
= guest_width
;
3817 adjust_width
= guestwidth_to_adjustwidth(guest_width
);
3818 domain
->agaw
= width_to_agaw(adjust_width
);
3820 INIT_LIST_HEAD(&domain
->devices
);
3822 domain
->iommu_count
= 0;
3823 domain
->iommu_coherency
= 0;
3824 domain
->iommu_snooping
= 0;
3825 domain
->iommu_superpage
= 0;
3826 domain
->max_addr
= 0;
3829 /* always allocate the top pgd */
3830 domain
->pgd
= (struct dma_pte
*)alloc_pgtable_page(domain
->nid
);
3833 domain_flush_cache(domain
, domain
->pgd
, PAGE_SIZE
);
3837 static void iommu_free_vm_domain(struct dmar_domain
*domain
)
3839 unsigned long flags
;
3840 struct dmar_drhd_unit
*drhd
;
3841 struct intel_iommu
*iommu
;
3843 unsigned long ndomains
;
3845 for_each_drhd_unit(drhd
) {
3848 iommu
= drhd
->iommu
;
3850 ndomains
= cap_ndoms(iommu
->cap
);
3851 for_each_set_bit(i
, iommu
->domain_ids
, ndomains
) {
3852 if (iommu
->domains
[i
] == domain
) {
3853 spin_lock_irqsave(&iommu
->lock
, flags
);
3854 clear_bit(i
, iommu
->domain_ids
);
3855 iommu
->domains
[i
] = NULL
;
3856 spin_unlock_irqrestore(&iommu
->lock
, flags
);
3863 static void vm_domain_exit(struct dmar_domain
*domain
)
3865 /* Domain 0 is reserved, so dont process it */
3869 vm_domain_remove_all_dev_info(domain
);
3871 put_iova_domain(&domain
->iovad
);
3874 dma_pte_clear_range(domain
, 0, DOMAIN_MAX_PFN(domain
->gaw
));
3876 /* free page tables */
3877 dma_pte_free_pagetable(domain
, 0, DOMAIN_MAX_PFN(domain
->gaw
));
3879 iommu_free_vm_domain(domain
);
3880 free_domain_mem(domain
);
3883 static int intel_iommu_domain_init(struct iommu_domain
*domain
)
3885 struct dmar_domain
*dmar_domain
;
3887 dmar_domain
= iommu_alloc_vm_domain();
3890 "intel_iommu_domain_init: dmar_domain == NULL\n");
3893 if (md_domain_init(dmar_domain
, DEFAULT_DOMAIN_ADDRESS_WIDTH
)) {
3895 "intel_iommu_domain_init() failed\n");
3896 vm_domain_exit(dmar_domain
);
3899 domain_update_iommu_cap(dmar_domain
);
3900 domain
->priv
= dmar_domain
;
3905 static void intel_iommu_domain_destroy(struct iommu_domain
*domain
)
3907 struct dmar_domain
*dmar_domain
= domain
->priv
;
3909 domain
->priv
= NULL
;
3910 vm_domain_exit(dmar_domain
);
3913 static int intel_iommu_attach_device(struct iommu_domain
*domain
,
3916 struct dmar_domain
*dmar_domain
= domain
->priv
;
3917 struct pci_dev
*pdev
= to_pci_dev(dev
);
3918 struct intel_iommu
*iommu
;
3921 /* normally pdev is not mapped */
3922 if (unlikely(domain_context_mapped(pdev
))) {
3923 struct dmar_domain
*old_domain
;
3925 old_domain
= find_domain(pdev
);
3927 if (dmar_domain
->flags
& DOMAIN_FLAG_VIRTUAL_MACHINE
||
3928 dmar_domain
->flags
& DOMAIN_FLAG_STATIC_IDENTITY
)
3929 domain_remove_one_dev_info(old_domain
, pdev
);
3931 domain_remove_dev_info(old_domain
);
3935 iommu
= device_to_iommu(pci_domain_nr(pdev
->bus
), pdev
->bus
->number
,
3940 /* check if this iommu agaw is sufficient for max mapped address */
3941 addr_width
= agaw_to_width(iommu
->agaw
);
3942 if (addr_width
> cap_mgaw(iommu
->cap
))
3943 addr_width
= cap_mgaw(iommu
->cap
);
3945 if (dmar_domain
->max_addr
> (1LL << addr_width
)) {
3946 printk(KERN_ERR
"%s: iommu width (%d) is not "
3947 "sufficient for the mapped address (%llx)\n",
3948 __func__
, addr_width
, dmar_domain
->max_addr
);
3951 dmar_domain
->gaw
= addr_width
;
3954 * Knock out extra levels of page tables if necessary
3956 while (iommu
->agaw
< dmar_domain
->agaw
) {
3957 struct dma_pte
*pte
;
3959 pte
= dmar_domain
->pgd
;
3960 if (dma_pte_present(pte
)) {
3961 dmar_domain
->pgd
= (struct dma_pte
*)
3962 phys_to_virt(dma_pte_addr(pte
));
3963 free_pgtable_page(pte
);
3965 dmar_domain
->agaw
--;
3968 return domain_add_dev_info(dmar_domain
, pdev
, CONTEXT_TT_MULTI_LEVEL
);
3971 static void intel_iommu_detach_device(struct iommu_domain
*domain
,
3974 struct dmar_domain
*dmar_domain
= domain
->priv
;
3975 struct pci_dev
*pdev
= to_pci_dev(dev
);
3977 domain_remove_one_dev_info(dmar_domain
, pdev
);
3980 static int intel_iommu_map(struct iommu_domain
*domain
,
3981 unsigned long iova
, phys_addr_t hpa
,
3982 int gfp_order
, int iommu_prot
)
3984 struct dmar_domain
*dmar_domain
= domain
->priv
;
3990 if (iommu_prot
& IOMMU_READ
)
3991 prot
|= DMA_PTE_READ
;
3992 if (iommu_prot
& IOMMU_WRITE
)
3993 prot
|= DMA_PTE_WRITE
;
3994 if ((iommu_prot
& IOMMU_CACHE
) && dmar_domain
->iommu_snooping
)
3995 prot
|= DMA_PTE_SNP
;
3997 size
= PAGE_SIZE
<< gfp_order
;
3998 max_addr
= iova
+ size
;
3999 if (dmar_domain
->max_addr
< max_addr
) {
4002 /* check if minimum agaw is sufficient for mapped address */
4003 end
= __DOMAIN_MAX_ADDR(dmar_domain
->gaw
) + 1;
4004 if (end
< max_addr
) {
4005 printk(KERN_ERR
"%s: iommu width (%d) is not "
4006 "sufficient for the mapped address (%llx)\n",
4007 __func__
, dmar_domain
->gaw
, max_addr
);
4010 dmar_domain
->max_addr
= max_addr
;
4012 /* Round up size to next multiple of PAGE_SIZE, if it and
4013 the low bits of hpa would take us onto the next page */
4014 size
= aligned_nrpages(hpa
, size
);
4015 ret
= domain_pfn_mapping(dmar_domain
, iova
>> VTD_PAGE_SHIFT
,
4016 hpa
>> VTD_PAGE_SHIFT
, size
, prot
);
4020 static int intel_iommu_unmap(struct iommu_domain
*domain
,
4021 unsigned long iova
, int gfp_order
)
4023 struct dmar_domain
*dmar_domain
= domain
->priv
;
4024 size_t size
= PAGE_SIZE
<< gfp_order
;
4027 order
= dma_pte_clear_range(dmar_domain
, iova
>> VTD_PAGE_SHIFT
,
4028 (iova
+ size
- 1) >> VTD_PAGE_SHIFT
);
4030 if (dmar_domain
->max_addr
== iova
+ size
)
4031 dmar_domain
->max_addr
= iova
;
4036 static phys_addr_t
intel_iommu_iova_to_phys(struct iommu_domain
*domain
,
4039 struct dmar_domain
*dmar_domain
= domain
->priv
;
4040 struct dma_pte
*pte
;
4043 pte
= pfn_to_dma_pte(dmar_domain
, iova
>> VTD_PAGE_SHIFT
, 0);
4045 phys
= dma_pte_addr(pte
);
4050 static int intel_iommu_domain_has_cap(struct iommu_domain
*domain
,
4053 struct dmar_domain
*dmar_domain
= domain
->priv
;
4055 if (cap
== IOMMU_CAP_CACHE_COHERENCY
)
4056 return dmar_domain
->iommu_snooping
;
4057 if (cap
== IOMMU_CAP_INTR_REMAP
)
4058 return intr_remapping_enabled
;
4063 static struct iommu_ops intel_iommu_ops
= {
4064 .domain_init
= intel_iommu_domain_init
,
4065 .domain_destroy
= intel_iommu_domain_destroy
,
4066 .attach_dev
= intel_iommu_attach_device
,
4067 .detach_dev
= intel_iommu_detach_device
,
4068 .map
= intel_iommu_map
,
4069 .unmap
= intel_iommu_unmap
,
4070 .iova_to_phys
= intel_iommu_iova_to_phys
,
4071 .domain_has_cap
= intel_iommu_domain_has_cap
,
4074 static void __devinit
quirk_iommu_rwbf(struct pci_dev
*dev
)
4077 * Mobile 4 Series Chipset neglects to set RWBF capability,
4080 printk(KERN_INFO
"DMAR: Forcing write-buffer flush capability\n");
4083 /* https://bugzilla.redhat.com/show_bug.cgi?id=538163 */
4084 if (dev
->revision
== 0x07) {
4085 printk(KERN_INFO
"DMAR: Disabling IOMMU for graphics on this chipset\n");
4090 DECLARE_PCI_FIXUP_HEADER(PCI_VENDOR_ID_INTEL
, 0x2a40, quirk_iommu_rwbf
);
4093 #define GGC_MEMORY_SIZE_MASK (0xf << 8)
4094 #define GGC_MEMORY_SIZE_NONE (0x0 << 8)
4095 #define GGC_MEMORY_SIZE_1M (0x1 << 8)
4096 #define GGC_MEMORY_SIZE_2M (0x3 << 8)
4097 #define GGC_MEMORY_VT_ENABLED (0x8 << 8)
4098 #define GGC_MEMORY_SIZE_2M_VT (0x9 << 8)
4099 #define GGC_MEMORY_SIZE_3M_VT (0xa << 8)
4100 #define GGC_MEMORY_SIZE_4M_VT (0xb << 8)
4102 static void __devinit
quirk_calpella_no_shadow_gtt(struct pci_dev
*dev
)
4106 if (pci_read_config_word(dev
, GGC
, &ggc
))
4109 if (!(ggc
& GGC_MEMORY_VT_ENABLED
)) {
4110 printk(KERN_INFO
"DMAR: BIOS has allocated no shadow GTT; disabling IOMMU for graphics\n");
4112 } else if (dmar_map_gfx
) {
4113 /* we have to ensure the gfx device is idle before we flush */
4114 printk(KERN_INFO
"DMAR: Disabling batched IOTLB flush on Ironlake\n");
4115 intel_iommu_strict
= 1;
4118 DECLARE_PCI_FIXUP_HEADER(PCI_VENDOR_ID_INTEL
, 0x0040, quirk_calpella_no_shadow_gtt
);
4119 DECLARE_PCI_FIXUP_HEADER(PCI_VENDOR_ID_INTEL
, 0x0044, quirk_calpella_no_shadow_gtt
);
4120 DECLARE_PCI_FIXUP_HEADER(PCI_VENDOR_ID_INTEL
, 0x0062, quirk_calpella_no_shadow_gtt
);
4121 DECLARE_PCI_FIXUP_HEADER(PCI_VENDOR_ID_INTEL
, 0x006a, quirk_calpella_no_shadow_gtt
);
4123 /* On Tylersburg chipsets, some BIOSes have been known to enable the
4124 ISOCH DMAR unit for the Azalia sound device, but not give it any
4125 TLB entries, which causes it to deadlock. Check for that. We do
4126 this in a function called from init_dmars(), instead of in a PCI
4127 quirk, because we don't want to print the obnoxious "BIOS broken"
4128 message if VT-d is actually disabled.
4130 static void __init
check_tylersburg_isoch(void)
4132 struct pci_dev
*pdev
;
4133 uint32_t vtisochctrl
;
4135 /* If there's no Azalia in the system anyway, forget it. */
4136 pdev
= pci_get_device(PCI_VENDOR_ID_INTEL
, 0x3a3e, NULL
);
4141 /* System Management Registers. Might be hidden, in which case
4142 we can't do the sanity check. But that's OK, because the
4143 known-broken BIOSes _don't_ actually hide it, so far. */
4144 pdev
= pci_get_device(PCI_VENDOR_ID_INTEL
, 0x342e, NULL
);
4148 if (pci_read_config_dword(pdev
, 0x188, &vtisochctrl
)) {
4155 /* If Azalia DMA is routed to the non-isoch DMAR unit, fine. */
4156 if (vtisochctrl
& 1)
4159 /* Drop all bits other than the number of TLB entries */
4160 vtisochctrl
&= 0x1c;
4162 /* If we have the recommended number of TLB entries (16), fine. */
4163 if (vtisochctrl
== 0x10)
4166 /* Zero TLB entries? You get to ride the short bus to school. */
4168 WARN(1, "Your BIOS is broken; DMA routed to ISOCH DMAR unit but no TLB space.\n"
4169 "BIOS vendor: %s; Ver: %s; Product Version: %s\n",
4170 dmi_get_system_info(DMI_BIOS_VENDOR
),
4171 dmi_get_system_info(DMI_BIOS_VERSION
),
4172 dmi_get_system_info(DMI_PRODUCT_VERSION
));
4173 iommu_identity_mapping
|= IDENTMAP_AZALIA
;
4177 printk(KERN_WARNING
"DMAR: Recommended TLB entries for ISOCH unit is 16; your BIOS set %d\n",