Files
Fouad Hilly 9db5e896ec tools/xen-ucode: Introduce a --force option to xen-ucode
Introduce a --force option to xen-ucode, in order to bypass certain checks
when applying microcode.

Update libxc's xc_microcode_update() to take an extra parameter, and to use
the new XENPF_microcode_update2 hypercall instead.

Signed-off-by: Fouad Hilly <fouad.hilly@cloud.com>
Acked-by: Andrew Cooper <andrew.cooper3@citrix.com>
2024-08-23 18:50:00 +01:00

201 lines
5.2 KiB
C

#define _GNU_SOURCE
#include <stdio.h>
#include <stdlib.h>
#include <sys/mman.h>
#include <errno.h>
#include <string.h>
#include <inttypes.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>
#include <xenctrl.h>
#include <getopt.h>
#include <xen/platform.h>
static xc_interface *xch;
static const char intel_id[] = "GenuineIntel";
static const char amd_id[] = "AuthenticAMD";
static void show_curr_cpu(FILE *f)
{
int ret;
struct xenpf_pcpu_version cpu_ver = { .xen_cpuid = 0 };
struct xenpf_ucode_revision ucode_rev = { .cpu = 0 };
/* Always exit with 2 when called during usage-info */
int exit_code = (f == stderr) ? 2 : 1;
ret = xc_get_cpu_version(xch, &cpu_ver);
if ( ret )
{
fprintf(stderr, "Failed to get CPU information. (err: %s)\n",
strerror(errno));
exit(exit_code);
}
ret = xc_get_ucode_revision(xch, &ucode_rev);
if ( ret )
{
fprintf(stderr, "Failed to get microcode information. (err: %s)\n",
strerror(errno));
exit(exit_code);
}
/*
* Print signature in a form that allows to quickly identify which ucode
* blob to load, e.g.:
*
* Intel: /lib/firmware/intel-ucode/06-55-04
* AMD: /lib/firmware/amd-ucode/microcode_amd_fam19h.bin
*/
if ( memcmp(cpu_ver.vendor_id, intel_id,
sizeof(cpu_ver.vendor_id)) == 0 )
{
fprintf(f,
"CPU signature %02x-%02x-%02x (raw 0x%08x) pf %#x revision 0x%08x\n",
cpu_ver.family, cpu_ver.model, cpu_ver.stepping,
ucode_rev.signature, ucode_rev.pf, ucode_rev.revision);
}
else if ( memcmp(cpu_ver.vendor_id, amd_id,
sizeof(cpu_ver.vendor_id)) == 0 )
{
fprintf(f,
"CPU signature %02x-%02x-%02x (raw 0x%08x) revision 0x%08x\n",
cpu_ver.family, cpu_ver.model, cpu_ver.stepping,
ucode_rev.signature, ucode_rev.revision);
}
else
{
fprintf(f, "Unsupported CPU vendor: %s\n", cpu_ver.vendor_id);
exit(exit_code);
}
}
static void usage(FILE *stream, const char *name)
{
fprintf(stream,
"%s: Xen microcode updating tool\n"
"Usage: %s [options] [<microcode file> | show-cpu-info]\n"
"options:\n"
" -h, --help display this help\n"
" -s, --show-cpu-info show CPU information\n"
" -f, --force skip certain checks when applying\n"
" microcode; do not use unless you know\n"
" exactly what you are doing\n",
name, name);
show_curr_cpu(stream);
}
int main(int argc, char *argv[])
{
static const struct option options[] = {
{ "help", no_argument, NULL, 'h' },
{ "show-cpu-info", no_argument, NULL, 's' },
{ "force", no_argument, NULL, 'f' },
{}
};
int fd, ret;
char *filename, *buf;
size_t len;
struct stat st;
int opt;
uint32_t ucode_flags = 0;
xch = xc_interface_open(NULL, NULL, 0);
if ( xch == NULL )
{
fprintf(stderr, "Error opening xc interface. (err: %s)\n",
strerror(errno));
exit(1);
}
while ( (opt = getopt_long(argc, argv, "hsf", options, NULL)) != -1 )
{
switch ( opt )
{
case 'h':
usage(stdout, argv[0]);
exit(EXIT_SUCCESS);
case 's':
show_curr_cpu(stdout);
exit(EXIT_SUCCESS);
case 'f':
ucode_flags |= XENPF_UCODE_FORCE;
break;
default:
fprintf(stderr, "%s: unknown option\n", argv[0]);
goto ext_err;
}
}
if ( optind == argc )
{
fprintf(stderr, "%s: missing microcode file\n", argv[0]);
goto ext_err;
}
/* For backwards compatibility to the pre-getopt() cmdline handling */
if ( !strcmp(argv[optind], "show-cpu-info") )
{
show_curr_cpu(stdout);
return 0;
}
filename = argv[optind];
fd = open(filename, O_RDONLY);
if ( fd < 0 )
{
fprintf(stderr, "Could not open %s. (err: %s)\n",
filename, strerror(errno));
exit(1);
}
if ( fstat(fd, &st) != 0 )
{
fprintf(stderr, "Could not get the size of %s. (err: %s)\n",
filename, strerror(errno));
exit(1);
}
len = st.st_size;
buf = mmap(0, len, PROT_READ, MAP_PRIVATE, fd, 0);
if ( buf == MAP_FAILED )
{
fprintf(stderr, "mmap failed. (error: %s)\n", strerror(errno));
exit(1);
}
errno = 0;
ret = xc_microcode_update(xch, buf, len, ucode_flags);
if ( ret == -1 && errno == EEXIST )
printf("Microcode already up to date\n");
else if ( ret )
{
fprintf(stderr, "Failed to update microcode. (err: %s)\n",
strerror(errno));
exit(1);
}
xc_interface_close(xch);
if ( munmap(buf, len) )
{
printf("Could not unmap: %d(%s)\n", errno, strerror(errno));
exit(1);
}
close(fd);
return 0;
ext_err:
usage(stderr, argv[0]);
exit(EXIT_FAILURE);
}