1 /*
2 * Copyright 2017 The ChromiumOS Authors
3 * Use of this source code is governed by a BSD-style license that can be
4 * found in the LICENSE file.
5 */
6
7 #include <errno.h>
8 #include <fcntl.h>
9 #include <linux/memfd.h>
10 #include <pthread.h>
11 #include <stdint.h>
12 #include <stdio.h>
13 #include <stdlib.h>
14 #include <string.h>
15 #include <sys/mman.h>
16 #include <sys/syscall.h>
17 #include <time.h>
18 #include <unistd.h>
19
20 #include "crosvm.h"
21
22 #ifndef F_LINUX_SPECIFIC_BASE
23 #define F_LINUX_SPECIFIC_BASE 1024
24 #endif
25
26 #ifndef F_ADD_SEALS
27 #define F_ADD_SEALS (F_LINUX_SPECIFIC_BASE + 9)
28 #endif
29
30 #ifndef F_SEAL_SHRINK
31 #define F_SEAL_SHRINK 0x0002
32 #endif
33
34 #define LOAD_ADDRESS 0x1000
35 #define SI_ADDRESS 0x8000
36 #define BL_VALUE 0x12
37 #define KILL_ADDRESS 0x9000
38
39 int g_kill_evt;
40
vcpu_thread(void * arg)41 void *vcpu_thread(void *arg) {
42 struct crosvm_vcpu *vcpu = arg;
43 struct crosvm_vcpu_event evt;
44 int i = 0;
45 while (crosvm_vcpu_wait(vcpu, &evt) == 0) {
46 if (evt.kind == CROSVM_VCPU_EVENT_KIND_INIT) {
47 struct kvm_sregs sregs;
48 crosvm_vcpu_get_sregs(vcpu, &sregs);
49 sregs.cs.base = 0;
50 sregs.cs.selector = 0;
51 sregs.es.base = KILL_ADDRESS;
52 sregs.es.selector = 0;
53 crosvm_vcpu_set_sregs(vcpu, &sregs);
54
55 struct kvm_regs regs;
56 crosvm_vcpu_get_regs(vcpu, ®s);
57 regs.rflags = 2;
58 regs.rip = LOAD_ADDRESS;
59 regs.rbx = BL_VALUE;
60 regs.rsi = SI_ADDRESS;
61 crosvm_vcpu_set_regs(vcpu, ®s);
62 }
63
64 if (evt.kind == CROSVM_VCPU_EVENT_KIND_IO_ACCESS &&
65 evt.io_access.address_space == CROSVM_ADDRESS_SPACE_MMIO &&
66 evt.io_access.address == KILL_ADDRESS &&
67 evt.io_access.is_write &&
68 evt.io_access.length == 1 &&
69 evt.io_access.data[0] == 1)
70 {
71 uint64_t dummy = 1;
72 write(g_kill_evt, &dummy, sizeof(dummy));
73 return NULL;
74 }
75
76 crosvm_vcpu_resume(vcpu);
77 }
78
79 return NULL;
80 }
81
main(int argc,char ** argv)82 int main(int argc, char** argv) {
83 const uint8_t code[] = {
84 /*
85 0000 881C mov [si],bl
86 0014 26C606000001 mov byte [es:0x0],0x1
87 0002 F4 hlt
88 */
89 0x88, 0x1c, 0x26, 0xc6, 0x06, 0x00, 0x00, 0x01, 0xf4
90 };
91
92 struct crosvm *crosvm;
93 int ret = crosvm_connect(&crosvm);
94 if (ret) {
95 fprintf(stderr, "failed to connect to crosvm: %d\n", ret);
96 return 1;
97 }
98
99 g_kill_evt = crosvm_get_shutdown_eventfd(crosvm);
100 if (g_kill_evt < 0) {
101 fprintf(stderr, "failed to get kill eventfd: %d\n", g_kill_evt);
102 return 1;
103 }
104
105 ret = crosvm_reserve_range(crosvm, CROSVM_ADDRESS_SPACE_MMIO, KILL_ADDRESS, 1);
106 if (ret) {
107 fprintf(stderr, "failed to reserve mmio range: %d\n", ret);
108 return 1;
109 }
110
111 int mem_size = 0x9000;
112 int mem_fd = syscall(SYS_memfd_create, "guest_mem", MFD_CLOEXEC | MFD_ALLOW_SEALING);
113 if (mem_fd < 0) {
114 fprintf(stderr, "failed to create guest memfd: %d\n", errno);
115 return 1;
116 }
117 ret = ftruncate(mem_fd, mem_size);
118 if (ret) {
119 fprintf(stderr, "failed to set size of guest memory: %d\n", errno);
120 return 1;
121 }
122 uint8_t *mem = mmap(NULL, mem_size, PROT_READ | PROT_WRITE, MAP_SHARED, mem_fd, 0);
123 if (mem == MAP_FAILED) {
124 fprintf(stderr, "failed to mmap guest memory: %d\n", errno);
125 return 1;
126 }
127 fcntl(mem_fd, F_ADD_SEALS, F_SEAL_SHRINK);
128 memcpy(mem + LOAD_ADDRESS, code, sizeof(code));
129
130 struct crosvm_memory *mem_obj;
131 ret = crosvm_create_memory(crosvm, mem_fd, 0, mem_size, 0, false, true, &mem_obj);
132 if (ret) {
133 fprintf(stderr, "failed to create memory in crosvm: %d\n", ret);
134 return 1;
135 }
136
137 struct crosvm_vcpu *vcpus[32];
138 pthread_t vcpu_threads[32];
139 uint32_t vcpu_count;
140 for (vcpu_count = 0; vcpu_count < 32; vcpu_count++) {
141 ret = crosvm_get_vcpu(crosvm, vcpu_count, &vcpus[vcpu_count]);
142 if (ret == -ENOENT)
143 break;
144
145 if (ret) {
146 fprintf(stderr, "error while getting all vcpus: %d\n", ret);
147 return 1;
148 }
149 pthread_create(&vcpu_threads[vcpu_count], NULL, vcpu_thread, vcpus[vcpu_count]);
150 }
151
152 ret = crosvm_start(crosvm);
153 if (ret) {
154 fprintf(stderr, "failed to tell crosvm to start: %d\n", ret);
155 return 1;
156 }
157
158 uint64_t dummy;
159 read(g_kill_evt, &dummy, 8);
160
161 uint8_t dirty_log[2] = {0};
162 ret = crosvm_memory_get_dirty_log(crosvm, mem_obj, dirty_log);
163 if (ret) {
164 fprintf(stderr, "failed to get dirty log: %d\n", ret);
165 return 1;
166 }
167
168 if (dirty_log[1] != 0x1) {
169 fprintf(stderr, "dirty log does not have expected bits: %x\n", dirty_log[1]);
170 return 1;
171 }
172
173 uint64_t val = *(uint64_t*)(&mem[SI_ADDRESS]);
174 if (val != BL_VALUE) {
175 fprintf(stderr, "memory does not have expected value %d\n", val);
176 return 1;
177 }
178
179 return 0;
180 }
181