linux-toradex.git/virt, branch tegra-9.12.7

KVM: Fix assigned devices circular locking dependency

2009-02-15T00:47:39+00:00

kvm->slots_lock is outer to kvm->lock, so take slots_lock
in kvm_vm_ioctl_assign_device() before taking kvm->lock,
rather than taking it in kvm_iommu_map_memslots().

Cc: stable@kernel.org
Signed-off-by: Mark McLoughlin 
Acked-by: Marcelo Tosatti 
Signed-off-by: Avi Kivity

KVM: Fix INTx for device assignment

2009-02-15T00:47:38+00:00

Missing buckets and wrong parameter for free_irq()

Signed-off-by: Sheng Yang 
Signed-off-by: Avi Kivity

KVM: Fix racy in kvm_free_assigned_irq

2009-02-15T00:47:36+00:00

In the past, kvm_get_kvm() and kvm_put_kvm() was called in assigned device irq
handler and interrupt_work, in order to prevent cancel_work_sync() in
kvm_free_assigned_irq got a illegal state when waiting for interrupt_work done.
But it's tricky and still got two problems:

1. A bug ignored two conditions that cancel_work_sync() would return true result
in a additional kvm_put_kvm().

2. If interrupt type is MSI, we would got a window between cancel_work_sync()
and free_irq(), which interrupt would be injected again...

This patch discard the reference count used for irq handler and interrupt_work,
and ensure the legal state by moving the free function at the very beginning of
kvm_destroy_vm(). And the patch fix the second bug by disable irq before
cancel_work_sync(), which may result in nested disable of irq but OK for we are
going to free it.

Signed-off-by: Sheng Yang 
Signed-off-by: Avi Kivity

KVM: Add kvm_arch_sync_events to sync with asynchronize events

2009-02-15T00:47:36+00:00

kvm_arch_sync_events is introduced to quiet down all other events may happen
contemporary with VM destroy process, like IRQ handler and work struct for
assigned device.

For kvm_arch_sync_events is called at the very beginning of kvm_destroy_vm(), so
the state of KVM here is legal and can provide a environment to quiet down other
events.

Signed-off-by: Sheng Yang 
Signed-off-by: Avi Kivity

KVM: mmu_notifiers release method

2009-02-15T00:47:35+00:00

The destructor for huge pages uses the backing inode for adjusting
hugetlbfs accounting.

Hugepage mappings are destroyed by exit_mmap, after
mmu_notifier_release, so there are no notifications through
unmap_hugepage_range at this point.

The hugetlbfs inode can be freed with pages backed by it referenced
by the shadow. When the shadow releases its reference, the huge page
destructor will access a now freed inode.

Implement the release operation for kvm mmu notifiers to release page
refs before the hugetlbfs inode is gone.

Signed-off-by: Marcelo Tosatti 
Signed-off-by: Avi Kivity

kvm/iommu: fix compile warning

2009-01-03T15:37:53+00:00

This fixes a compile warning about a variable thats maybe used
uninitialized in the function.

Signed-off-by: Joerg Roedel

KVM: change KVM to use IOMMU API

2009-01-03T13:11:07+00:00

Signed-off-by: Joerg Roedel

KVM: rename vtd.c to iommu.c

2009-01-03T13:10:09+00:00

Impact: file renamed

The code in the vtd.c file can be reused for other IOMMUs as well. So
rename it to make it clear that it handle more than VT-d.

Signed-off-by: Joerg Roedel

Deassign device in kvm_free_assgined_device

2009-01-03T13:10:08+00:00

In kvm_iommu_unmap_memslots(), assigned_dev_head is already empty.

Signed-off-by: Weidong Han 
Signed-off-by: Joerg Roedel

KVM: support device deassignment

2009-01-03T13:02:19+00:00

Support device deassignment, it can be used in device hotplug.

Signed-off-by: Weidong Han 
Signed-off-by: Joerg Roedel