On Tue, Jan 07, 2025 at 09:10:16AM -0800, Nicolin Chen wrote:

> +int arm_smmu_attach_prepare_vmaster(struct arm_smmu_attach_state *state,
> +                                 struct iommu_domain *domain)
> +{
> +     struct arm_smmu_nested_domain *nested_domain;
> +     struct arm_smmu_vmaster *vmaster;
> +     unsigned long vsid;
> +     unsigned int cfg;
> +
> +     iommu_group_mutex_assert(state->master->dev);
> +
> +     if (domain->type != IOMMU_DOMAIN_NESTED)
> +             return 0;
> +     nested_domain = to_smmu_nested_domain(domain);
> +
> +     /* Skip ABORT/BYPASS or invalid vSTE */
> +     cfg = FIELD_GET(STRTAB_STE_0_CFG, le64_to_cpu(nested_domain->ste[0]));
> +     if (cfg == STRTAB_STE_0_CFG_ABORT || cfg == STRTAB_STE_0_CFG_BYPASS)
> +             return 0;

Why? If the VM sets an ABORT vSTE then I would expect that any
protection violation events the VM triggers are captured and forwarded
as well?

Basically any time a vSTE is in place we should capture events that
are affiliated with the SID?

> +     if (!(nested_domain->ste[0] & cpu_to_le64(STRTAB_STE_0_V)))
> +             return 0;
> +
> +     vsid = iommufd_viommu_get_vdev_id(&nested_domain->vsmmu->core,
> +                                       state->master->dev);
> +     /* Fail the attach if vSID is not correct set by the user space */
> +     if (!vsid)
> +             return -ENOENT;

Is it really OK that 0 is being used as invalid here?

Jason

Reply via email to