mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 10:11:27 +01:00
Introduce a --force option to xen-ucode, in order to bypass certain checks when applying microcode. Update libxc's xc_microcode_update() to take an extra parameter, and to use the new XENPF_microcode_update2 hypercall instead. Signed-off-by: Fouad Hilly <fouad.hilly@cloud.com> Acked-by: Andrew Cooper <andrew.cooper3@citrix.com>
201 lines
5.2 KiB
C
201 lines
5.2 KiB
C
#define _GNU_SOURCE
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <sys/mman.h>
|
|
#include <errno.h>
|
|
#include <string.h>
|
|
#include <inttypes.h>
|
|
#include <unistd.h>
|
|
#include <sys/types.h>
|
|
#include <sys/stat.h>
|
|
#include <fcntl.h>
|
|
#include <xenctrl.h>
|
|
#include <getopt.h>
|
|
|
|
#include <xen/platform.h>
|
|
|
|
static xc_interface *xch;
|
|
|
|
static const char intel_id[] = "GenuineIntel";
|
|
static const char amd_id[] = "AuthenticAMD";
|
|
|
|
static void show_curr_cpu(FILE *f)
|
|
{
|
|
int ret;
|
|
struct xenpf_pcpu_version cpu_ver = { .xen_cpuid = 0 };
|
|
struct xenpf_ucode_revision ucode_rev = { .cpu = 0 };
|
|
/* Always exit with 2 when called during usage-info */
|
|
int exit_code = (f == stderr) ? 2 : 1;
|
|
|
|
ret = xc_get_cpu_version(xch, &cpu_ver);
|
|
if ( ret )
|
|
{
|
|
fprintf(stderr, "Failed to get CPU information. (err: %s)\n",
|
|
strerror(errno));
|
|
exit(exit_code);
|
|
}
|
|
|
|
ret = xc_get_ucode_revision(xch, &ucode_rev);
|
|
if ( ret )
|
|
{
|
|
fprintf(stderr, "Failed to get microcode information. (err: %s)\n",
|
|
strerror(errno));
|
|
exit(exit_code);
|
|
}
|
|
|
|
/*
|
|
* Print signature in a form that allows to quickly identify which ucode
|
|
* blob to load, e.g.:
|
|
*
|
|
* Intel: /lib/firmware/intel-ucode/06-55-04
|
|
* AMD: /lib/firmware/amd-ucode/microcode_amd_fam19h.bin
|
|
*/
|
|
if ( memcmp(cpu_ver.vendor_id, intel_id,
|
|
sizeof(cpu_ver.vendor_id)) == 0 )
|
|
{
|
|
fprintf(f,
|
|
"CPU signature %02x-%02x-%02x (raw 0x%08x) pf %#x revision 0x%08x\n",
|
|
cpu_ver.family, cpu_ver.model, cpu_ver.stepping,
|
|
ucode_rev.signature, ucode_rev.pf, ucode_rev.revision);
|
|
}
|
|
else if ( memcmp(cpu_ver.vendor_id, amd_id,
|
|
sizeof(cpu_ver.vendor_id)) == 0 )
|
|
{
|
|
fprintf(f,
|
|
"CPU signature %02x-%02x-%02x (raw 0x%08x) revision 0x%08x\n",
|
|
cpu_ver.family, cpu_ver.model, cpu_ver.stepping,
|
|
ucode_rev.signature, ucode_rev.revision);
|
|
}
|
|
else
|
|
{
|
|
fprintf(f, "Unsupported CPU vendor: %s\n", cpu_ver.vendor_id);
|
|
exit(exit_code);
|
|
}
|
|
}
|
|
|
|
static void usage(FILE *stream, const char *name)
|
|
{
|
|
fprintf(stream,
|
|
"%s: Xen microcode updating tool\n"
|
|
"Usage: %s [options] [<microcode file> | show-cpu-info]\n"
|
|
"options:\n"
|
|
" -h, --help display this help\n"
|
|
" -s, --show-cpu-info show CPU information\n"
|
|
" -f, --force skip certain checks when applying\n"
|
|
" microcode; do not use unless you know\n"
|
|
" exactly what you are doing\n",
|
|
name, name);
|
|
show_curr_cpu(stream);
|
|
}
|
|
|
|
int main(int argc, char *argv[])
|
|
{
|
|
static const struct option options[] = {
|
|
{ "help", no_argument, NULL, 'h' },
|
|
{ "show-cpu-info", no_argument, NULL, 's' },
|
|
{ "force", no_argument, NULL, 'f' },
|
|
{}
|
|
};
|
|
|
|
int fd, ret;
|
|
char *filename, *buf;
|
|
size_t len;
|
|
struct stat st;
|
|
int opt;
|
|
uint32_t ucode_flags = 0;
|
|
|
|
xch = xc_interface_open(NULL, NULL, 0);
|
|
if ( xch == NULL )
|
|
{
|
|
fprintf(stderr, "Error opening xc interface. (err: %s)\n",
|
|
strerror(errno));
|
|
exit(1);
|
|
}
|
|
|
|
while ( (opt = getopt_long(argc, argv, "hsf", options, NULL)) != -1 )
|
|
{
|
|
switch ( opt )
|
|
{
|
|
case 'h':
|
|
usage(stdout, argv[0]);
|
|
exit(EXIT_SUCCESS);
|
|
|
|
case 's':
|
|
show_curr_cpu(stdout);
|
|
exit(EXIT_SUCCESS);
|
|
|
|
case 'f':
|
|
ucode_flags |= XENPF_UCODE_FORCE;
|
|
break;
|
|
|
|
default:
|
|
fprintf(stderr, "%s: unknown option\n", argv[0]);
|
|
goto ext_err;
|
|
}
|
|
}
|
|
|
|
if ( optind == argc )
|
|
{
|
|
fprintf(stderr, "%s: missing microcode file\n", argv[0]);
|
|
goto ext_err;
|
|
}
|
|
|
|
/* For backwards compatibility to the pre-getopt() cmdline handling */
|
|
if ( !strcmp(argv[optind], "show-cpu-info") )
|
|
{
|
|
show_curr_cpu(stdout);
|
|
return 0;
|
|
}
|
|
|
|
filename = argv[optind];
|
|
fd = open(filename, O_RDONLY);
|
|
if ( fd < 0 )
|
|
{
|
|
fprintf(stderr, "Could not open %s. (err: %s)\n",
|
|
filename, strerror(errno));
|
|
exit(1);
|
|
}
|
|
|
|
if ( fstat(fd, &st) != 0 )
|
|
{
|
|
fprintf(stderr, "Could not get the size of %s. (err: %s)\n",
|
|
filename, strerror(errno));
|
|
exit(1);
|
|
}
|
|
|
|
len = st.st_size;
|
|
buf = mmap(0, len, PROT_READ, MAP_PRIVATE, fd, 0);
|
|
if ( buf == MAP_FAILED )
|
|
{
|
|
fprintf(stderr, "mmap failed. (error: %s)\n", strerror(errno));
|
|
exit(1);
|
|
}
|
|
|
|
errno = 0;
|
|
ret = xc_microcode_update(xch, buf, len, ucode_flags);
|
|
if ( ret == -1 && errno == EEXIST )
|
|
printf("Microcode already up to date\n");
|
|
else if ( ret )
|
|
{
|
|
fprintf(stderr, "Failed to update microcode. (err: %s)\n",
|
|
strerror(errno));
|
|
exit(1);
|
|
}
|
|
|
|
xc_interface_close(xch);
|
|
|
|
if ( munmap(buf, len) )
|
|
{
|
|
printf("Could not unmap: %d(%s)\n", errno, strerror(errno));
|
|
exit(1);
|
|
}
|
|
close(fd);
|
|
|
|
return 0;
|
|
|
|
ext_err:
|
|
usage(stderr, argv[0]);
|
|
exit(EXIT_FAILURE);
|
|
}
|