From patchwork Thu Aug 23 02:53:37 2012
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: Dump guest page table inside QEMU makes system hang
From: =?utf-8?b?6Zmz6Z+L5Lu7?= <chenwj@iis.sinica.edu.tw>
X-Patchwork-Id: 179492
Message-Id: <20120823025337.GA27969@cs.nctu.edu.tw>
To: Max Filippov <jcmvbkbc@gmail.com>
Cc: Blue Swirl <blauwirbel@gmail.com>, qemu-devel@nongnu.org,
 =?utf-8?B?6Zmz6Z+L5Lu7IChXZWktUmVuIENoZW4p?= <chenwj@iis.sinica.edu.tw>
Date: Thu, 23 Aug 2012 10:53:37 +0800

> >>   The system will hang while booting. However, if I comment
> >> cpu_physical_memory_read in function dump_guest_pgtable, there
> >> is no problem. What I am missing here? Thanks.
> >
> > cpu_physical_memory_read() can cause faults or other side effects like
> > MMIO. Using cpu_get_phys_page_debug() may help.
> >
> 
> Maybe you just need to avoid accessing unsuitable physical addresses?
> Or maybe 'if (env->cr[0] & CR0_PG_MASK)' is not strong enough, may
> (CR0_PG_MASK | CR0_PE_MASK) be better?
> 
> At what stage does it hang? What CR3 value changes are observed before
> the hang?

  It's quite embarrassing. The code I posted before is buggy, and it dumps all
1024 * 1024 page table entries. It takes a lot of time, so that I think the
system hangs. Attach is the code snipt what I am using, which works fine now.
Another question is, I would like to know the hva corresponding to gpa (i.e.,
the guest page pointed by guest pte). Do you happen to know there is such
gpa2hva function in QEMU?

  Thanks.

Regards,
chenwj


// we only consider x86 w/o pae 
static void dump_guest_pgtable(CPUX86State *env)
{
    int i, j;
    target_ulong pde_addr, pte_addr;
    target_ulong phyaddr, phyaddr2;
    uint32_t pde, pte;

    pde_addr = (env->cr[3] & ~0xfff) & env->a20_mask;
    // first level page directory, iterate pde
    for (i = 0; i < NUM_ENTRY; ++i)
    {
        phyaddr = (pde_addr + i * 4) & env->a20_mask;
        pde = ldl_phys(phyaddr);
        pd[i] = pde;
        if (!(pde & PG_PRESENT_MASK))
            continue;

        pte_addr = (pde & ~0xfff) & env->a20_mask;
        // second level page table, iterate pte
        for (j = 0; j < NUM_ENTRY; ++j)
        {
            phyaddr2 = (pte_addr + j * 4) & env->a20_mask;
            pte = ldl_phys(phyaddr2);
            if (!(pte & PG_PRESENT_MASK))
                pt[i][j] = 0;
            pt[i][j] = pte;
        }
    }
}