cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

vboxvideo.h (14452B)


      1/* SPDX-License-Identifier: MIT */
      2/* Copyright (C) 2006-2016 Oracle Corporation */
      3
      4#ifndef __VBOXVIDEO_H__
      5#define __VBOXVIDEO_H__
      6
      7#define VBOX_VIDEO_MAX_SCREENS 64
      8
      9/*
     10 * The last 4096 bytes of the guest VRAM contains the generic info for all
     11 * DualView chunks: sizes and offsets of chunks. This is filled by miniport.
     12 *
     13 * Last 4096 bytes of each chunk contain chunk specific data: framebuffer info,
     14 * etc. This is used exclusively by the corresponding instance of a display
     15 * driver.
     16 *
     17 * The VRAM layout:
     18 *   Last 4096 bytes - Adapter information area.
     19 *   4096 bytes aligned miniport heap (value specified in the config rouded up).
     20 *   Slack - what left after dividing the VRAM.
     21 *   4096 bytes aligned framebuffers:
     22 *     last 4096 bytes of each framebuffer is the display information area.
     23 *
     24 * The Virtual Graphics Adapter information in the guest VRAM is stored by the
     25 * guest video driver using structures prepended by VBOXVIDEOINFOHDR.
     26 *
     27 * When the guest driver writes dword 0 to the VBE_DISPI_INDEX_VBOX_VIDEO
     28 * the host starts to process the info. The first element at the start of
     29 * the 4096 bytes region should be normally be a LINK that points to
     30 * actual information chain. That way the guest driver can have some
     31 * fixed layout of the information memory block and just rewrite
     32 * the link to point to relevant memory chain.
     33 *
     34 * The processing stops at the END element.
     35 *
     36 * The host can access the memory only when the port IO is processed.
     37 * All data that will be needed later must be copied from these 4096 bytes.
     38 * But other VRAM can be used by host until the mode is disabled.
     39 *
     40 * The guest driver writes dword 0xffffffff to the VBE_DISPI_INDEX_VBOX_VIDEO
     41 * to disable the mode.
     42 *
     43 * VBE_DISPI_INDEX_VBOX_VIDEO is used to read the configuration information
     44 * from the host and issue commands to the host.
     45 *
     46 * The guest writes the VBE_DISPI_INDEX_VBOX_VIDEO index register, the the
     47 * following operations with the VBE data register can be performed:
     48 *
     49 * Operation            Result
     50 * write 16 bit value   NOP
     51 * read 16 bit value    count of monitors
     52 * write 32 bit value   set the vbox cmd value and the cmd processed by the host
     53 * read 32 bit value    result of the last vbox command is returned
     54 */
     55
     56struct vbva_cmd_hdr {
     57	s16 x;
     58	s16 y;
     59	u16 w;
     60	u16 h;
     61} __packed;
     62
     63/*
     64 * The VBVA ring buffer is suitable for transferring large (< 2GB) amount of
     65 * data. For example big bitmaps which do not fit to the buffer.
     66 *
     67 * Guest starts writing to the buffer by initializing a record entry in the
     68 * records queue. VBVA_F_RECORD_PARTIAL indicates that the record is being
     69 * written. As data is written to the ring buffer, the guest increases
     70 * free_offset.
     71 *
     72 * The host reads the records on flushes and processes all completed records.
     73 * When host encounters situation when only a partial record presents and
     74 * len_and_flags & ~VBVA_F_RECORD_PARTIAL >= VBVA_RING_BUFFER_SIZE -
     75 * VBVA_RING_BUFFER_THRESHOLD, the host fetched all record data and updates
     76 * data_offset. After that on each flush the host continues fetching the data
     77 * until the record is completed.
     78 */
     79
     80#define VBVA_RING_BUFFER_SIZE        (4194304 - 1024)
     81#define VBVA_RING_BUFFER_THRESHOLD   (4096)
     82
     83#define VBVA_MAX_RECORDS (64)
     84
     85#define VBVA_F_MODE_ENABLED         0x00000001u
     86#define VBVA_F_MODE_VRDP            0x00000002u
     87#define VBVA_F_MODE_VRDP_RESET      0x00000004u
     88#define VBVA_F_MODE_VRDP_ORDER_MASK 0x00000008u
     89
     90#define VBVA_F_STATE_PROCESSING     0x00010000u
     91
     92#define VBVA_F_RECORD_PARTIAL       0x80000000u
     93
     94struct vbva_record {
     95	u32 len_and_flags;
     96} __packed;
     97
     98/*
     99 * The minimum HGSMI heap size is PAGE_SIZE (4096 bytes) and is a restriction of
    100 * the runtime heapsimple API. Use minimum 2 pages here, because the info area
    101 * also may contain other data (for example hgsmi_host_flags structure).
    102 */
    103#define VBVA_ADAPTER_INFORMATION_SIZE 65536
    104#define VBVA_MIN_BUFFER_SIZE          65536
    105
    106/* The value for port IO to let the adapter to interpret the adapter memory. */
    107#define VBOX_VIDEO_DISABLE_ADAPTER_MEMORY        0xFFFFFFFF
    108
    109/* The value for port IO to let the adapter to interpret the adapter memory. */
    110#define VBOX_VIDEO_INTERPRET_ADAPTER_MEMORY      0x00000000
    111
    112/*
    113 * The value for port IO to let the adapter to interpret the display memory.
    114 * The display number is encoded in low 16 bits.
    115 */
    116#define VBOX_VIDEO_INTERPRET_DISPLAY_MEMORY_BASE 0x00010000
    117
    118struct vbva_host_flags {
    119	u32 host_events;
    120	u32 supported_orders;
    121} __packed;
    122
    123struct vbva_buffer {
    124	struct vbva_host_flags host_flags;
    125
    126	/* The offset where the data start in the buffer. */
    127	u32 data_offset;
    128	/* The offset where next data must be placed in the buffer. */
    129	u32 free_offset;
    130
    131	/* The queue of record descriptions. */
    132	struct vbva_record records[VBVA_MAX_RECORDS];
    133	u32 record_first_index;
    134	u32 record_free_index;
    135
    136	/* Space to leave free when large partial records are transferred. */
    137	u32 partial_write_tresh;
    138
    139	u32 data_len;
    140	/* variable size for the rest of the vbva_buffer area in VRAM. */
    141	u8 data[];
    142} __packed;
    143
    144#define VBVA_MAX_RECORD_SIZE (128 * 1024 * 1024)
    145
    146/* guest->host commands */
    147#define VBVA_QUERY_CONF32			 1
    148#define VBVA_SET_CONF32				 2
    149#define VBVA_INFO_VIEW				 3
    150#define VBVA_INFO_HEAP				 4
    151#define VBVA_FLUSH				 5
    152#define VBVA_INFO_SCREEN			 6
    153#define VBVA_ENABLE				 7
    154#define VBVA_MOUSE_POINTER_SHAPE		 8
    155/* informs host about HGSMI caps. see vbva_caps below */
    156#define VBVA_INFO_CAPS				12
    157/* configures scanline, see VBVASCANLINECFG below */
    158#define VBVA_SCANLINE_CFG			13
    159/* requests scanline info, see VBVASCANLINEINFO below */
    160#define VBVA_SCANLINE_INFO			14
    161/* inform host about VBVA Command submission */
    162#define VBVA_CMDVBVA_SUBMIT			16
    163/* inform host about VBVA Command submission */
    164#define VBVA_CMDVBVA_FLUSH			17
    165/* G->H DMA command */
    166#define VBVA_CMDVBVA_CTL			18
    167/* Query most recent mode hints sent */
    168#define VBVA_QUERY_MODE_HINTS			19
    169/*
    170 * Report the guest virtual desktop position and size for mapping host and
    171 * guest pointer positions.
    172 */
    173#define VBVA_REPORT_INPUT_MAPPING		20
    174/* Report the guest cursor position and query the host position. */
    175#define VBVA_CURSOR_POSITION			21
    176
    177/* host->guest commands */
    178#define VBVAHG_EVENT				1
    179#define VBVAHG_DISPLAY_CUSTOM			2
    180
    181/* vbva_conf32::index */
    182#define VBOX_VBVA_CONF32_MONITOR_COUNT		0
    183#define VBOX_VBVA_CONF32_HOST_HEAP_SIZE		1
    184/*
    185 * Returns VINF_SUCCESS if the host can report mode hints via VBVA.
    186 * Set value to VERR_NOT_SUPPORTED before calling.
    187 */
    188#define VBOX_VBVA_CONF32_MODE_HINT_REPORTING	2
    189/*
    190 * Returns VINF_SUCCESS if the host can report guest cursor enabled status via
    191 * VBVA.  Set value to VERR_NOT_SUPPORTED before calling.
    192 */
    193#define VBOX_VBVA_CONF32_GUEST_CURSOR_REPORTING	3
    194/*
    195 * Returns the currently available host cursor capabilities.  Available if
    196 * VBOX_VBVA_CONF32_GUEST_CURSOR_REPORTING returns success.
    197 */
    198#define VBOX_VBVA_CONF32_CURSOR_CAPABILITIES	4
    199/* Returns the supported flags in vbva_infoscreen.flags. */
    200#define VBOX_VBVA_CONF32_SCREEN_FLAGS		5
    201/* Returns the max size of VBVA record. */
    202#define VBOX_VBVA_CONF32_MAX_RECORD_SIZE	6
    203
    204struct vbva_conf32 {
    205	u32 index;
    206	u32 value;
    207} __packed;
    208
    209/* Reserved for historical reasons. */
    210#define VBOX_VBVA_CURSOR_CAPABILITY_RESERVED0   BIT(0)
    211/*
    212 * Guest cursor capability: can the host show a hardware cursor at the host
    213 * pointer location?
    214 */
    215#define VBOX_VBVA_CURSOR_CAPABILITY_HARDWARE    BIT(1)
    216/* Reserved for historical reasons. */
    217#define VBOX_VBVA_CURSOR_CAPABILITY_RESERVED2   BIT(2)
    218/* Reserved for historical reasons.  Must always be unset. */
    219#define VBOX_VBVA_CURSOR_CAPABILITY_RESERVED3   BIT(3)
    220/* Reserved for historical reasons. */
    221#define VBOX_VBVA_CURSOR_CAPABILITY_RESERVED4   BIT(4)
    222/* Reserved for historical reasons. */
    223#define VBOX_VBVA_CURSOR_CAPABILITY_RESERVED5   BIT(5)
    224
    225struct vbva_infoview {
    226	/* Index of the screen, assigned by the guest. */
    227	u32 view_index;
    228
    229	/* The screen offset in VRAM, the framebuffer starts here. */
    230	u32 view_offset;
    231
    232	/* The size of the VRAM memory that can be used for the view. */
    233	u32 view_size;
    234
    235	/* The recommended maximum size of the VRAM memory for the screen. */
    236	u32 max_screen_size;
    237} __packed;
    238
    239struct vbva_flush {
    240	u32 reserved;
    241} __packed;
    242
    243/* vbva_infoscreen.flags */
    244#define VBVA_SCREEN_F_NONE			0x0000
    245#define VBVA_SCREEN_F_ACTIVE			0x0001
    246/*
    247 * The virtual monitor has been disabled by the guest and should be removed
    248 * by the host and ignored for purposes of pointer position calculation.
    249 */
    250#define VBVA_SCREEN_F_DISABLED			0x0002
    251/*
    252 * The virtual monitor has been blanked by the guest and should be blacked
    253 * out by the host using width, height, etc values from the vbva_infoscreen
    254 * request.
    255 */
    256#define VBVA_SCREEN_F_BLANK			0x0004
    257/*
    258 * The virtual monitor has been blanked by the guest and should be blacked
    259 * out by the host using the previous mode values for width. height, etc.
    260 */
    261#define VBVA_SCREEN_F_BLANK2			0x0008
    262
    263struct vbva_infoscreen {
    264	/* Which view contains the screen. */
    265	u32 view_index;
    266
    267	/* Physical X origin relative to the primary screen. */
    268	s32 origin_x;
    269
    270	/* Physical Y origin relative to the primary screen. */
    271	s32 origin_y;
    272
    273	/* Offset of visible framebuffer relative to the framebuffer start. */
    274	u32 start_offset;
    275
    276	/* The scan line size in bytes. */
    277	u32 line_size;
    278
    279	/* Width of the screen. */
    280	u32 width;
    281
    282	/* Height of the screen. */
    283	u32 height;
    284
    285	/* Color depth. */
    286	u16 bits_per_pixel;
    287
    288	/* VBVA_SCREEN_F_* */
    289	u16 flags;
    290} __packed;
    291
    292/* vbva_enable.flags */
    293#define VBVA_F_NONE				0x00000000
    294#define VBVA_F_ENABLE				0x00000001
    295#define VBVA_F_DISABLE				0x00000002
    296/* extended VBVA to be used with WDDM */
    297#define VBVA_F_EXTENDED				0x00000004
    298/* vbva offset is absolute VRAM offset */
    299#define VBVA_F_ABSOFFSET			0x00000008
    300
    301struct vbva_enable {
    302	u32 flags;
    303	u32 offset;
    304	s32 result;
    305} __packed;
    306
    307struct vbva_enable_ex {
    308	struct vbva_enable base;
    309	u32 screen_id;
    310} __packed;
    311
    312struct vbva_mouse_pointer_shape {
    313	/* The host result. */
    314	s32 result;
    315
    316	/* VBOX_MOUSE_POINTER_* bit flags. */
    317	u32 flags;
    318
    319	/* X coordinate of the hot spot. */
    320	u32 hot_X;
    321
    322	/* Y coordinate of the hot spot. */
    323	u32 hot_y;
    324
    325	/* Width of the pointer in pixels. */
    326	u32 width;
    327
    328	/* Height of the pointer in scanlines. */
    329	u32 height;
    330
    331	/* Pointer data.
    332	 *
    333	 * The data consists of 1 bpp AND mask followed by 32 bpp XOR (color)
    334	 * mask.
    335	 *
    336	 * For pointers without alpha channel the XOR mask pixels are 32 bit
    337	 * values: (lsb)BGR0(msb). For pointers with alpha channel the XOR mask
    338	 * consists of (lsb)BGRA(msb) 32 bit values.
    339	 *
    340	 * Guest driver must create the AND mask for pointers with alpha chan.,
    341	 * so if host does not support alpha, the pointer could be displayed as
    342	 * a normal color pointer. The AND mask can be constructed from alpha
    343	 * values. For example alpha value >= 0xf0 means bit 0 in the AND mask.
    344	 *
    345	 * The AND mask is 1 bpp bitmap with byte aligned scanlines. Size of AND
    346	 * mask, therefore, is and_len = (width + 7) / 8 * height. The padding
    347	 * bits at the end of any scanline are undefined.
    348	 *
    349	 * The XOR mask follows the AND mask on the next 4 bytes aligned offset:
    350	 * u8 *xor = and + (and_len + 3) & ~3
    351	 * Bytes in the gap between the AND and the XOR mask are undefined.
    352	 * XOR mask scanlines have no gap between them and size of XOR mask is:
    353	 * xor_len = width * 4 * height.
    354	 *
    355	 * Preallocate 4 bytes for accessing actual data as p->data.
    356	 */
    357	u8 data[4];
    358} __packed;
    359
    360/* pointer is visible */
    361#define VBOX_MOUSE_POINTER_VISIBLE		0x0001
    362/* pointer has alpha channel */
    363#define VBOX_MOUSE_POINTER_ALPHA		0x0002
    364/* pointerData contains new pointer shape */
    365#define VBOX_MOUSE_POINTER_SHAPE		0x0004
    366
    367/*
    368 * The guest driver can handle asynch guest cmd completion by reading the
    369 * command offset from io port.
    370 */
    371#define VBVACAPS_COMPLETEGCMD_BY_IOREAD		0x00000001
    372/* the guest driver can handle video adapter IRQs */
    373#define VBVACAPS_IRQ				0x00000002
    374/* The guest can read video mode hints sent via VBVA. */
    375#define VBVACAPS_VIDEO_MODE_HINTS		0x00000004
    376/* The guest can switch to a software cursor on demand. */
    377#define VBVACAPS_DISABLE_CURSOR_INTEGRATION	0x00000008
    378/* The guest does not depend on host handling the VBE registers. */
    379#define VBVACAPS_USE_VBVA_ONLY			0x00000010
    380
    381struct vbva_caps {
    382	s32 rc;
    383	u32 caps;
    384} __packed;
    385
    386/* Query the most recent mode hints received from the host. */
    387struct vbva_query_mode_hints {
    388	/* The maximum number of screens to return hints for. */
    389	u16 hints_queried_count;
    390	/* The size of the mode hint structures directly following this one. */
    391	u16 hint_structure_guest_size;
    392	/* Return code for the operation. Initialise to VERR_NOT_SUPPORTED. */
    393	s32 rc;
    394} __packed;
    395
    396/*
    397 * Structure in which a mode hint is returned. The guest allocates an array
    398 * of these immediately after the vbva_query_mode_hints structure.
    399 * To accommodate future extensions, the vbva_query_mode_hints structure
    400 * specifies the size of the vbva_modehint structures allocated by the guest,
    401 * and the host only fills out structure elements which fit into that size. The
    402 * host should fill any unused members (e.g. dx, dy) or structure space on the
    403 * end with ~0. The whole structure can legally be set to ~0 to skip a screen.
    404 */
    405struct vbva_modehint {
    406	u32 magic;
    407	u32 cx;
    408	u32 cy;
    409	u32 bpp;		/* Which has never been used... */
    410	u32 display;
    411	u32 dx;			/* X offset into the virtual frame-buffer. */
    412	u32 dy;			/* Y offset into the virtual frame-buffer. */
    413	u32 enabled;		/* Not flags. Add new members for new flags. */
    414} __packed;
    415
    416#define VBVAMODEHINT_MAGIC 0x0801add9u
    417
    418/*
    419 * Report the rectangle relative to which absolute pointer events should be
    420 * expressed. This information remains valid until the next VBVA resize event
    421 * for any screen, at which time it is reset to the bounding rectangle of all
    422 * virtual screens and must be re-set.
    423 */
    424struct vbva_report_input_mapping {
    425	s32 x;	/* Upper left X co-ordinate relative to the first screen. */
    426	s32 y;	/* Upper left Y co-ordinate relative to the first screen. */
    427	u32 cx;	/* Rectangle width. */
    428	u32 cy;	/* Rectangle height. */
    429} __packed;
    430
    431/*
    432 * Report the guest cursor position and query the host one. The host may wish
    433 * to use the guest information to re-position its own cursor (though this is
    434 * currently unlikely).
    435 */
    436struct vbva_cursor_position {
    437	u32 report_position;	/* Are we reporting a position? */
    438	u32 x;			/* Guest cursor X position */
    439	u32 y;			/* Guest cursor Y position */
    440} __packed;
    441
    442#endif