Files
Jimmy TranandgVisor bot 7739c18837 kvm: pagetables: Enable 5-level paging
This change enables 5-level paging by supporting P4D table.

During PageTable.InitArch(), we detect CPU capabilities and set a flag to
determine the paging mode.

Update iterateRangeCanonical() call handle P4D level. We avoid using a
separate walkP4D function because the call chain would be too deep for the
nosplit attribute. The P4D level logic is wrapped around a if/else statement
for clarity

PiperOrigin-RevId: 800161142
2025-08-27 13:54:47 -07:00

351 lines
10 KiB
Go

// Copyright 2018 The gVisor Authors.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//go:build amd64
// +build amd64
package pagetables
// When walking page tables, get the address of the next boundary,
// or the end address of the range if that comes earlier.
// addrEnd calculates the end of the address range for the given size covering addr.
// addrEnd is a power of two.
//
//go:nosplit
func addrEnd(addr, end, size uintptr) uintptr {
next := (addr + size) &^ (size - 1)
if next < addr || next > end {
return end
}
return next
}
// walkPTEs iterates over the PTEs in the given range and calls the visitor for each one.
// Clear entries are counted if the visitor does not require allocation.
//
// Returns:
// - ok: whether the walk was successful.
// - clearEntries: number of clear entries.
//
//go:nosplit
func (w *Walker) walkPTEs(entries *PTEs, start, end uintptr) (bool, uint16) {
var clearEntries uint16
for start < end {
pteIndex := uint16((start & pteMask) >> pteShift)
entry := &entries[pteIndex]
if !entry.Valid() && !w.visitor.requiresAlloc() {
clearEntries++
start += pteSize
continue
}
// At this point, we are guaranteed that start%pteSize == 0.
if !w.visitor.visit(uintptr(start&^(pteSize-1)), entry, pteSize-1) {
return false, clearEntries
}
if !entry.Valid() && !w.visitor.requiresAlloc() {
clearEntries++
}
// Note that the pte was changed.
start += pteSize
}
return true, clearEntries
}
// walkPMDs iterates over the PMD entries in the given range.
//
// This function implements the algorithm to maximize the use of super/sect pages whenever
// possible. Whether a super page is provided will be clear through the range
// provided in the callback.
//
// Returns:
// - ok: whether the walk was successful.
// - clearEntries: number of clear entries.
//
//go:nosplit
func (w *Walker) walkPMDs(pmdEntries *PTEs, start, end uintptr) (bool, uint16) {
var clearEntries uint16
for start < end {
var pteEntries *PTEs
nextBoundary := addrEnd(start, end, pmdSize)
pmdIndex := uint16((start & pmdMask) >> pmdShift)
pmdEntry := &pmdEntries[pmdIndex]
if !pmdEntry.Valid() {
if !w.visitor.requiresAlloc() {
// Skip over this entry.
clearEntries++
start = nextBoundary
continue
}
// This level has 2-MB huge pages. If this
// region is continued in a single PMD entry?
// As above, we can skip allocating a new page.
if start&(pmdSize-1) == 0 && end-start >= pmdSize {
pmdEntry.SetSuper()
if !w.visitor.visit(uintptr(start&^(pmdSize-1)), pmdEntry, pmdSize-1) {
return false, clearEntries
}
if pmdEntry.Valid() {
start = nextBoundary
continue
}
}
// Allocate a new pmd.
pteEntries = w.pageTables.Allocator.NewPTEs() // escapes: see above.
pmdEntry.setPageTable(w.pageTables, pteEntries)
} else if pmdEntry.IsSuper() {
// Does this page need to be split?
if w.visitor.requiresSplit() && (start&(pmdSize-1) != 0 || end < next(start, pmdSize)) {
// Install the relevant entries.
pteEntries = w.pageTables.Allocator.NewPTEs()
for index := uint16(0); index < entriesPerPage; index++ {
pteEntries[index].Set(
pmdEntry.Address()+(pteSize*uintptr(index)),
pmdEntry.Opts())
}
pmdEntry.setPageTable(w.pageTables, pteEntries)
} else {
// A huge page to be checked directly.
if !w.visitor.visit(uintptr(start&^(pmdSize-1)), pmdEntry, pmdSize-1) {
return false, clearEntries
}
// Might have been cleared.
if !pmdEntry.Valid() {
clearEntries++
}
// Note that the huge page was changed.
start = nextBoundary
continue
}
} else {
pteEntries = w.pageTables.Allocator.LookupPTEs(pmdEntry.Address()) // escapes: see above.
}
// Map the next level, since this is valid.
ok, clearPTEntries := w.walkPTEs(pteEntries, start, nextBoundary)
if !ok {
return false, clearEntries
}
// Check if we no longer need this page.
if clearPTEntries == entriesPerPage {
pmdEntry.Clear()
w.pageTables.Allocator.FreePTEs(pteEntries) // escapes: see above.
clearEntries++
}
start = nextBoundary
}
return true, clearEntries
}
// walkPUDs iterates over the PUD entries in the given range.
//
// This function implements the algorithm to maximize the use of super/sect pages whenever
// possible. Whether a super page is provided will be clear through the range
// provided in the callback.
//
// Returns:
// - ok: whether the walk was successful.
// - clearEntries: number of clear entries.
//
//go:nosplit
func (w *Walker) walkPUDs(pudEntries *PTEs, start, end uintptr) (bool, uint16) {
var clearEntries uint16
for start < end {
var pmdEntries *PTEs
nextBoundary := addrEnd(start, end, pudSize)
pudIndex := uint16((start & pudMask) >> pudShift)
pudEntry := &pudEntries[pudIndex]
if !pudEntry.Valid() {
if !w.visitor.requiresAlloc() {
// Skip over this entry.
clearEntries++
start = nextBoundary
continue
}
// This level has 1-GB super pages. Is this
// entire region at least as large as a single
// PUD entry? If so, we can skip allocating a
// new page for the pmd.
if start&(pudSize-1) == 0 && end-start >= pudSize {
pudEntry.SetSuper()
if !w.visitor.visit(uintptr(start&^(pudSize-1)), pudEntry, pudSize-1) {
return false, clearEntries
}
if pudEntry.Valid() {
// Skip over this entry.
start = nextBoundary
continue
}
}
// Allocate a new pud.
pmdEntries = w.pageTables.Allocator.NewPTEs() // escapes: see above.
pudEntry.setPageTable(w.pageTables, pmdEntries)
} else if pudEntry.IsSuper() {
// Does this page need to be split?
if w.visitor.requiresSplit() && (start&(pudSize-1) != 0 || end < next(start, pudSize)) {
// Install the relevant entries.
pmdEntries = w.pageTables.Allocator.NewPTEs() // escapes: see above.
for index := uint16(0); index < entriesPerPage; index++ {
pmdEntries[index].SetSuper()
pmdEntries[index].Set(
pudEntry.Address()+(pmdSize*uintptr(index)),
pudEntry.Opts())
}
pudEntry.setPageTable(w.pageTables, pmdEntries)
} else {
// A super page to be checked directly.
if !w.visitor.visit(uintptr(start&^(pudSize-1)), pudEntry, pudSize-1) {
return false, clearEntries
}
// Might have been cleared.
if !pudEntry.Valid() {
clearEntries++
}
// Note that the super page was changed.
start = nextBoundary
continue
}
} else {
pmdEntries = w.pageTables.Allocator.LookupPTEs(pudEntry.Address()) // escapes: see above.
}
// Map the next level, since this is valid.
ok, clearPMDEntries := w.walkPMDs(pmdEntries, start, nextBoundary)
if !ok {
return false, clearEntries
}
// Check if we no longer need this page.
if clearPMDEntries == entriesPerPage {
pudEntry.Clear()
w.pageTables.Allocator.FreePTEs(pmdEntries) // escapes: see above.
clearEntries++
}
start = nextBoundary
}
return true, clearEntries
}
// iterateRangeCanonical iterates over all appropriate levels of page tables for the given range.
// see walker_generic.go for more details.
//
//go:nosplit
func (w *Walker) iterateRangeCanonical(start, end uintptr) bool {
// Start at very top level of page tables and walk down.
for start < end {
var pudEntries *PTEs
nextBoundary := addrEnd(start, end, pgdSize)
pgdIndex := uint16((start & pgdMask) >> pgdShift)
pgdEntry := &w.pageTables.root[pgdIndex]
if !w.pageTables.largeAddressesEnabled {
if !pgdEntry.Valid() {
if !w.visitor.requiresAlloc() {
// Skip over this entry.
start = nextBoundary
continue
}
// Allocate a new pgd.
pudEntries = w.pageTables.Allocator.NewPTEs() // escapes: depends on allocator.
pgdEntry.setPageTable(w.pageTables, pudEntries)
} else {
pudEntries = w.pageTables.Allocator.LookupPTEs(pgdEntry.Address()) // escapes: see above.
}
// Map the next level.
ok, clearPUDEntries := w.walkPUDs(pudEntries, start, nextBoundary)
if !ok {
return false
}
// Check if we no longer need this page table.
if clearPUDEntries == entriesPerPage {
pgdEntry.Clear()
w.pageTables.Allocator.FreePTEs(pudEntries) // escapes: see above.
}
} else {
var p4dEntries *PTEs
if !pgdEntry.Valid() {
if !w.visitor.requiresAlloc() {
// Skip over this entry.
start = nextBoundary
continue
}
// Allocate a new pgd.
p4dEntries = w.pageTables.Allocator.NewPTEs() // escapes: depends on allocator.
pgdEntry.setPageTable(w.pageTables, p4dEntries)
} else {
p4dEntries = w.pageTables.Allocator.LookupPTEs(pgdEntry.Address()) // escapes: see above.
}
var clearP4DEntries uint16 = 0
p4dStart := start
p4dEnd := nextBoundary
for p4dStart < p4dEnd {
nextP4DBoundary := addrEnd(p4dStart, p4dEnd, p4dSize)
p4dIndex := uint16((p4dStart & p4dMask) >> p4dShift)
p4dEntry := &p4dEntries[p4dIndex]
if !p4dEntry.Valid() {
if !w.visitor.requiresAlloc() {
// Skip over this entry.
clearP4DEntries++
p4dStart = nextP4DBoundary
continue
}
// Allocate a new pud.
pudEntries = w.pageTables.Allocator.NewPTEs() // escapes: depends on allocator.
p4dEntry.setPageTable(w.pageTables, pudEntries)
} else {
pudEntries = w.pageTables.Allocator.LookupPTEs(p4dEntry.Address()) // escapes: see above.
}
ok, clearPUDEntries := w.walkPUDs(pudEntries, p4dStart, nextP4DBoundary)
if !ok {
return false
}
if clearPUDEntries == entriesPerPage {
p4dEntry.Clear()
w.pageTables.Allocator.FreePTEs(pudEntries) // escapes: see above.
clearP4DEntries++
}
p4dStart = nextP4DBoundary
}
// Check if we no longer need this page table.
if clearP4DEntries == entriesPerPage {
pgdEntry.Clear()
w.pageTables.Allocator.FreePTEs(p4dEntries) // escapes: see above.
}
}
// Advance to the next PGD entry's range for the next loop.
start = nextBoundary
}
return true
}