PGMInternal.h@ 2397

Last change on this file since 2397 was 2295, checked in by vboxsync, 18 years ago
Made PGM_WITH_PAGING safe and faster.
Property svn:eol-style set to `native` Property svn:keywords set to `Id`
File size: 111.1 KB

Line
1	/* $Id: PGMInternal.h 2295 2007-04-20 23:41:19Z vboxsync $ */
2	/** @file
3	* PGM - Internal header file.
4	*/
5
6	/*
7	* Copyright (C) 2006 InnoTek Systemberatung GmbH
8	*
9	* This file is part of VirtualBox Open Source Edition (OSE), as
10	* available from http://www.virtualbox.org. This file is free software;
11	* you can redistribute it and/or modify it under the terms of the GNU
12	* General Public License as published by the Free Software Foundation,
13	* in version 2 as it comes in the "COPYING" file of the VirtualBox OSE
14	* distribution. VirtualBox OSE is distributed in the hope that it will
15	* be useful, but WITHOUT ANY WARRANTY of any kind.
16	*
17	* If you received this file as part of a commercial VirtualBox
18	* distribution, then only the terms of your commercial VirtualBox
19	* license agreement apply instead of the previous paragraph.
20	*/
21
22	#ifndef __PGMInternal_h__
23	#define __PGMInternal_h__
24
25	#include <VBox/cdefs.h>
26	#include <VBox/types.h>
27	#include <VBox/err.h>
28	#include <VBox/stam.h>
29	#include <VBox/param.h>
30	#include <VBox/vmm.h>
31	#include <VBox/mm.h>
32	#include <VBox/pdm.h>
33	#include <iprt/avl.h>
34	#include <iprt/assert.h>
35	#include <iprt/critsect.h>
36
37	#if !defined(IN_PGM_R3) && !defined(IN_PGM_R0) && !defined(IN_PGM_GC)
38	# error "Not in PGM! This is an internal header!"
39	#endif
40
41
42	/** @defgroup grp_pgm_int Internals
43	* @ingroup grp_pgm
44	* @internal
45	* @{
46	*/
47
48
49	/** @name PGM Compile Time Config
50	* @{
51	*/
52
53	/**
54	* Solve page is out of sync issues inside Guest Context (in PGMGC.cpp).
55	* Comment it if it will break something.
56	*/
57	#define PGM_OUT_OF_SYNC_IN_GC
58
59	/**
60	* Virtualize the dirty bit
61	* This also makes a half-hearted attempt at the accessed bit. For full
62	* accessed bit virtualization define PGM_SYNC_ACCESSED_BIT.
63	*/
64	#define PGM_SYNC_DIRTY_BIT
65
66	/**
67	* Fully virtualize the accessed bit.
68	* @remark This requires SYNC_DIRTY_ACCESSED_BITS to be defined!
69	*/
70	#define PGM_SYNC_ACCESSED_BIT
71
72	/**
73	* Check and skip global PDEs for non-global flushes
74	*/
75	#define PGM_SKIP_GLOBAL_PAGEDIRS_ON_NONGLOBAL_FLUSH
76
77	/**
78	* Sync N pages instead of a whole page table
79	*/
80	#define PGM_SYNC_N_PAGES
81
82	/**
83	* Number of pages to sync during a page fault
84	*
85	* When PGMPOOL_WITH_GCPHYS_TRACKING is enabled using high values here
86	* causes a lot of unnecessary extents and also is slower than taking more \#PFs.
87	*/
88	#define PGM_SYNC_NR_PAGES 8
89
90	/**
91	* Number of PGMPhysRead/Write cache entries (must be <= sizeof(uint64_t))
92	*/
93	#define PGM_MAX_PHYSCACHE_ENTRIES 64
94	#define PGM_MAX_PHYSCACHE_ENTRIES_MASK (PGM_MAX_PHYSCACHE_ENTRIES-1)
95
96	/**
97	* Enable caching of PGMR3PhysRead/WriteByte/Word/Dword
98	*/
99	#define PGM_PHYSMEMACCESS_CACHING
100
101	/*
102	* Assert Sanity.
103	*/
104	#if defined(PGM_SYNC_ACCESSED_BIT) && !defined(PGM_SYNC_DIRTY_BIT)
105	# error "PGM_SYNC_ACCESSED_BIT requires PGM_SYNC_DIRTY_BIT!"
106	#endif
107
108	/** @def PGMPOOL_WITH_CACHE
109	* Enable agressive caching using the page pool.
110	*
111	* This requires PGMPOOL_WITH_USER_TRACKING and PGMPOOL_WITH_MONITORING.
112	*/
113	#define PGMPOOL_WITH_CACHE
114
115	/** @def PGMPOOL_WITH_MIXED_PT_CR3
116	* When defined, we'll deal with 'uncachable' pages.
117	*/
118	#ifdef PGMPOOL_WITH_CACHE
119	# define PGMPOOL_WITH_MIXED_PT_CR3
120	#endif
121
122	/** @def PGMPOOL_WITH_MONITORING
123	* Monitor the guest pages which are shadowed.
124	* When this is enabled, PGMPOOL_WITH_CACHE or PGMPOOL_WITH_GCPHYS_TRACKING must
125	* be enabled as well.
126	* @remark doesn't really work without caching now. (Mixed PT/CR3 change.)
127	*/
128	#ifdef PGMPOOL_WITH_CACHE
129	# define PGMPOOL_WITH_MONITORING
130	#endif
131
132	/** @def PGMPOOL_WITH_GCPHYS_TRACKING
133	* Tracking the of shadow pages mapping guest physical pages.
134	*
135	* This is very expensive, the current cache prototype is trying to figure out
136	* whether it will be acceptable with an agressive caching policy.
137	*/
138	#if defined(PGMPOOL_WITH_CACHE) \|\| defined(PGMPOOL_WITH_MONITORING)
139	# define PGMPOOL_WITH_GCPHYS_TRACKING
140	#endif
141
142	/** @def PGMPOOL_WITH_USER_TRACKING
143	* Tracking users of shadow pages. This is required for the linking of shadow page
144	* tables and physical guest addresses.
145	*/
146	#if defined(PGMPOOL_WITH_GCPHYS_TRACKING) \|\| defined(PGMPOOL_WITH_CACHE) \|\| defined(PGMPOOL_WITH_MONITORING)
147	# define PGMPOOL_WITH_USER_TRACKING
148	#endif
149
150	/** @def PGMPOOL_CFG_MAX_GROW
151	* The maximum number of pages to add to the pool in one go.
152	*/
153	#define PGMPOOL_CFG_MAX_GROW (_256K >> PAGE_SHIFT)
154
155	/** @def VBOX_STRICT_PGM_HANDLER_VIRTUAL
156	* Enables some extra assertions for virtual handlers (mainly phys2virt related).
157	*/
158	#ifdef VBOX_STRICT
159	# define VBOX_STRICT_PGM_HANDLER_VIRTUAL
160	#endif
161	/** @} */
162
163
164	/** @name PDPTR and PML4 flags.
165	* These are placed in the three bits available for system programs in
166	* the PDPTR and PML4 entries.
167	* @{ */
168	/** The entry is a permanent one and it's must always be present.
169	* Never free such an entry. */
170	#define PGM_PLXFLAGS_PERMANENT BIT64(10)
171	/** @} */
172
173	/** @name Page directory flags.
174	* These are placed in the three bits available for system programs in
175	* the page directory entries.
176	* @{ */
177	/** Mapping (hypervisor allocated pagetable). */
178	#define PGM_PDFLAGS_MAPPING BIT64(10)
179	/** Made read-only to facilitate dirty bit tracking. */
180	#define PGM_PDFLAGS_TRACK_DIRTY BIT64(11)
181	/** @} */
182
183	/** @name Page flags.
184	* These are placed in the three bits available for system programs in
185	* the page entries.
186	* @{ */
187	/** Made read-only to facilitate dirty bit tracking. */
188	#define PGM_PTFLAGS_TRACK_DIRTY BIT64(9)
189
190	#ifndef PGM_PTFLAGS_CSAM_VALIDATED
191	/** Scanned and approved by CSAM (tm).
192	* NOTE: Must be identical to the one defined in CSAMInternal.h!!
193	* @todo Move PGM_PTFLAGS_* and PGM_PDFLAGS_* to VBox/pgm.h. */
194	#define PGM_PTFLAGS_CSAM_VALIDATED BIT64(11)
195	#endif
196	/** @} */
197
198	/** @name Defines used to indicate the shadow and guest paging in the templates.
199	* @{ */
200	#define PGM_TYPE_REAL 1
201	#define PGM_TYPE_PROT 2
202	#define PGM_TYPE_32BIT 3
203	#define PGM_TYPE_PAE 4
204	#define PGM_TYPE_AMD64 5
205	/** @} */
206
207	/** Macro for checking if the guest is using paging.
208	* @param uType PGM_TYPE_*
209	* @remark ASSUMES certain order of the PGM_TYPE_* values.
210	*/
211	#define PGM_WITH_PAGING(uType) ((uType) >= PGM_TYPE_32BIT)
212
213
214	/** @def PGM_HCPHYS_2_PTR
215	* Maps a HC physical page pool address to a virtual address.
216	*
217	* @returns VBox status code.
218	* @param pVM The VM handle.
219	* @param HCPhys The HC physical address to map to a virtual one.
220	* @param ppv Where to store the virtual address. No need to cast this.
221	*
222	* @remark In GC this uses PGMGCDynMapHCPage(), so it will consume of the
223	* small page window employeed by that function. Be careful.
224	* @remark There is no need to assert on the result.
225	*/
226	#ifdef IN_GC
227	# define PGM_HCPHYS_2_PTR(pVM, HCPhys, ppv) PGMGCDynMapHCPage(pVM, HCPhys, (void **)(ppv))
228	#else
229	# define PGM_HCPHYS_2_PTR(pVM, HCPhys, ppv) MMPagePhys2PageEx(pVM, HCPhys, (void **)(ppv))
230	#endif
231
232	/** @def PGM_GCPHYS_2_PTR
233	* Maps a GC physical page address to a virtual address.
234	*
235	* @returns VBox status code.
236	* @param pVM The VM handle.
237	* @param GCPhys The GC physical address to map to a virtual one.
238	* @param ppv Where to store the virtual address. No need to cast this.
239	*
240	* @remark In GC this uses PGMGCDynMapGCPage(), so it will consume of the
241	* small page window employeed by that function. Be careful.
242	* @remark There is no need to assert on the result.
243	*/
244	#ifdef IN_GC
245	# define PGM_GCPHYS_2_PTR(pVM, GCPhys, ppv) PGMGCDynMapGCPage(pVM, GCPhys, (void **)(ppv))
246	#else
247	# define PGM_GCPHYS_2_PTR(pVM, GCPhys, ppv) PGMPhysGCPhys2HCPtr(pVM, GCPhys, 1 /* one page only /, (void )(ppv)) /* @todo this isn't asserting, use PGMRamGCPhys2HCPtr! */
248	#endif
249
250	/** @def PGM_GCPHYS_2_PTR_EX
251	* Maps a unaligned GC physical page address to a virtual address.
252	*
253	* @returns VBox status code.
254	* @param pVM The VM handle.
255	* @param GCPhys The GC physical address to map to a virtual one.
256	* @param ppv Where to store the virtual address. No need to cast this.
257	*
258	* @remark In GC this uses PGMGCDynMapGCPage(), so it will consume of the
259	* small page window employeed by that function. Be careful.
260	* @remark There is no need to assert on the result.
261	*/
262	#ifdef IN_GC
263	# define PGM_GCPHYS_2_PTR_EX(pVM, GCPhys, ppv) PGMGCDynMapGCPageEx(pVM, GCPhys, (void **)(ppv))
264	#else
265	# define PGM_GCPHYS_2_PTR_EX(pVM, GCPhys, ppv) PGMPhysGCPhys2HCPtr(pVM, GCPhys, 1 /* one page only /, (void )(ppv)) /* @todo this isn't asserting, use PGMRamGCPhys2HCPtr! */
266	#endif
267
268	/** @def PGM_INVL_PG
269	* Invalidates a page when in GC does nothing in HC.
270	*
271	* @param GCVirt The virtual address of the page to invalidate.
272	*/
273	#ifdef IN_GC
274	# define PGM_INVL_PG(GCVirt) ASMInvalidatePage((void *)(GCVirt))
275	#else
276	# define PGM_INVL_PG(GCVirt) ((void)0)
277	#endif
278
279	/** @def PGM_INVL_BIG_PG
280	* Invalidates a 4MB page directory entry when in GC does nothing in HC.
281	*
282	* @param GCVirt The virtual address within the page directory to invalidate.
283	*/
284	#ifdef IN_GC
285	# define PGM_INVL_BIG_PG(GCVirt) ASMReloadCR3()
286	#else
287	# define PGM_INVL_BIG_PG(GCVirt) ((void)0)
288	#endif
289
290	/** @def PGM_INVL_GUEST_TLBS()
291	* Invalidates all guest TLBs.
292	*/
293	#ifdef IN_GC
294	# define PGM_INVL_GUEST_TLBS() ASMReloadCR3()
295	#else
296	# define PGM_INVL_GUEST_TLBS() ((void)0)
297	#endif
298
299
300	/**
301	* Structure for tracking GC Mappings.
302	*
303	* This structure is used by linked list in both GC and HC.
304	*/
305	typedef struct PGMMAPPING
306	{
307	/** Pointer to next entry. */
308	R3PTRTYPE(struct PGMMAPPING *) pNextR3;
309	/** Pointer to next entry. */
310	R0PTRTYPE(struct PGMMAPPING *) pNextR0;
311	/** Pointer to next entry. */
312	GCPTRTYPE(struct PGMMAPPING *) pNextGC;
313	/** Start Virtual address. */
314	RTGCUINTPTR GCPtr;
315	/** Last Virtual address (inclusive). */
316	RTGCUINTPTR GCPtrLast;
317	/** Range size (bytes). */
318	RTGCUINTPTR cb;
319	/** Pointer to relocation callback function. */
320	R3PTRTYPE(PFNPGMRELOCATE) pfnRelocate;
321	/** User argument to the callback. */
322	R3PTRTYPE(void *) pvUser;
323	/** Mapping description / name. For easing debugging. */
324	R3PTRTYPE(const char *) pszDesc;
325	/** Number of page tables. */
326	RTUINT cPTs;
327	#if HC_ARCH_BITS != GC_ARCH_BITS
328	RTUINT uPadding0; /*< Alignment padding. /
329	#endif
330	/** Array of page table mapping data. Each entry
331	* describes one page table. The array can be longer
332	* than the declared length.
333	*/
334	struct
335	{
336	/** The HC physical address of the page table. */
337	RTHCPHYS HCPhysPT;
338	/** The HC physical address of the first PAE page table. */
339	RTHCPHYS HCPhysPaePT0;
340	/** The HC physical address of the second PAE page table. */
341	RTHCPHYS HCPhysPaePT1;
342	/** The HC virtual address of the 32-bit page table. */
343	R3PTRTYPE(PVBOXPT) pPTR3;
344	/** The HC virtual address of the two PAE page table. (i.e 1024 entries instead of 512) */
345	R3PTRTYPE(PX86PTPAE) paPaePTsR3;
346	/** The GC virtual address of the 32-bit page table. */
347	GCPTRTYPE(PVBOXPT) pPTGC;
348	/** The GC virtual address of the two PAE page table. */
349	GCPTRTYPE(PX86PTPAE) paPaePTsGC;
350	/** The GC virtual address of the 32-bit page table. */
351	R0PTRTYPE(PVBOXPT) pPTR0;
352	/** The GC virtual address of the two PAE page table. */
353	R0PTRTYPE(PX86PTPAE) paPaePTsR0;
354	} aPTs[1];
355	} PGMMAPPING;
356	/** Pointer to structure for tracking GC Mappings. */
357	typedef struct PGMMAPPING *PPGMMAPPING;
358
359
360	/**
361	* Physical page access handler structure.
362	*
363	* This is used to keep track of physical address ranges
364	* which are being monitored in some kind of way.
365	*/
366	typedef struct PGMPHYSHANDLER
367	{
368	AVLROGCPHYSNODECORE Core;
369	/** Alignment padding. */
370	uint32_t u32Padding;
371	/** Access type. */
372	PGMPHYSHANDLERTYPE enmType;
373	/** Number of pages to update. */
374	uint32_t cPages;
375	/** Pointer to R3 callback function. */
376	R3PTRTYPE(PFNPGMR3PHYSHANDLER) pfnHandlerR3;
377	/** User argument for R3 handlers. */
378	R3PTRTYPE(void *) pvUserR3;
379	/** Pointer to R0 callback function. */
380	R0PTRTYPE(PFNPGMR0PHYSHANDLER) pfnHandlerR0;
381	/** User argument for R0 handlers. */
382	R0PTRTYPE(void *) pvUserR0;
383	/** Pointer to GC callback function. */
384	GCPTRTYPE(PFNPGMGCPHYSHANDLER) pfnHandlerGC;
385	/** User argument for GC handlers. */
386	GCPTRTYPE(void *) pvUserGC;
387	/** Description / Name. For easing debugging. */
388	R3PTRTYPE(const char *) pszDesc;
389	#ifdef VBOX_WITH_STATISTICS
390	/** Profiling of this handler. */
391	STAMPROFILE Stat;
392	#endif
393	} PGMPHYSHANDLER;
394	/** Pointer to a physical page access handler structure. */
395	typedef PGMPHYSHANDLER *PPGMPHYSHANDLER;
396
397
398	/**
399	* Cache node for the physical addresses covered by a virtual handler.
400	*/
401	typedef struct PGMPHYS2VIRTHANDLER
402	{
403	/** Core node for the tree based on physical ranges. */
404	AVLROGCPHYSNODECORE Core;
405	/** Offset from this struct to the PGMVIRTHANDLER structure. */
406	RTGCINTPTR offVirtHandler;
407	/** Offset of the next alias relativer to this one.
408	* Bit 0 is used for indicating whether we're in the tree.
409	* Bit 1 is used for indicating that we're the head node.
410	*/
411	int32_t offNextAlias;
412	} PGMPHYS2VIRTHANDLER;
413	/** Pointer to a phys to virtual handler structure. */
414	typedef PGMPHYS2VIRTHANDLER *PPGMPHYS2VIRTHANDLER;
415
416	/** The bit in PGMPHYS2VIRTHANDLER::offNextAlias used to indicate that the
417	* node is in the tree. */
418	#define PGMPHYS2VIRTHANDLER_IN_TREE BIT(0)
419	/** The bit in PGMPHYS2VIRTHANDLER::offNextAlias used to indicate that the
420	* node is in the head of an alias chain.
421	* The PGMPHYS2VIRTHANDLER_IN_TREE is always set if this bit is set. */
422	#define PGMPHYS2VIRTHANDLER_IS_HEAD BIT(1)
423	/** The mask to apply to PGMPHYS2VIRTHANDLER::offNextAlias to get the offset. */
424	#define PGMPHYS2VIRTHANDLER_OFF_MASK (~(int32_t)3)
425
426
427	/**
428	* Virtual page access handler structure.
429	*
430	* This is used to keep track of virtual address ranges
431	* which are being monitored in some kind of way.
432	*/
433	typedef struct PGMVIRTHANDLER
434	{
435	/** Core node for the tree based on virtual ranges. */
436	AVLROGCPTRNODECORE Core;
437	/** Number of cache pages. */
438	uint32_t u32Padding;
439	/** Access type. */
440	PGMVIRTHANDLERTYPE enmType;
441	/** Number of cache pages. */
442	uint32_t cPages;
443
444	/** @todo The next two members are redundant. It adds some readability though. */
445	/** Start of the range. */
446	RTGCPTR GCPtr;
447	/** End of the range (exclusive). */
448	RTGCPTR GCPtrLast;
449	/** Size of the range (in bytes). */
450	RTGCUINTPTR cb;
451	/** Pointer to the GC callback function. */
452	GCPTRTYPE(PFNPGMGCVIRTHANDLER) pfnHandlerGC;
453	/** Pointer to the HC callback function for invalidation. */
454	HCPTRTYPE(PFNPGMHCVIRTINVALIDATE) pfnInvalidateHC;
455	/** Pointer to the HC callback function. */
456	HCPTRTYPE(PFNPGMHCVIRTHANDLER) pfnHandlerHC;
457	/** Description / Name. For easing debugging. */
458	HCPTRTYPE(const char *) pszDesc;
459	#ifdef VBOX_WITH_STATISTICS
460	/** Profiling of this handler. */
461	STAMPROFILE Stat;
462	#endif
463	/** Array of cached physical addresses for the monitored ranged. */
464	PGMPHYS2VIRTHANDLER aPhysToVirt[HC_ARCH_BITS == 32 ? 1 : 2];
465	} PGMVIRTHANDLER;
466	/** Pointer to a virtual page access handler structure. */
467	typedef PGMVIRTHANDLER *PPGMVIRTHANDLER;
468
469
470	/**
471	* Ram range for GC Phys to HC Phys conversion.
472	*
473	* Can be used for HC Virt to GC Phys and HC Virt to HC Phys
474	* conversions too, but we'll let MM handle that for now.
475	*
476	* This structure is used by linked lists in both GC and HC.
477	*/
478	typedef struct PGMRAMRANGE
479	{
480	/** Pointer to the next RAM range - for HC. */
481	HCPTRTYPE(struct PGMRAMRANGE *) pNextHC;
482	/** Pointer to the next RAM range - for GC. */
483	GCPTRTYPE(struct PGMRAMRANGE *) pNextGC;
484	/** Start of the range. Page aligned. */
485	RTGCPHYS GCPhys;
486	/** Last address in the range (inclusive). Page aligned (-1). */
487	RTGCPHYS GCPhysLast;
488	/** Size of the range. (Page aligned of course). */
489	RTGCPHYS cb;
490	/** MM_RAM_* flags */
491	uint32_t fFlags;
492
493	/** HC virtual lookup ranges for chunks. Currently only used with MM_RAM_FLAGS_DYNAMIC_ALLOC ranges. */
494	GCPTRTYPE(PRTHCPTR) pavHCChunkGC;
495	/** HC virtual lookup ranges for chunks. Currently only used with MM_RAM_FLAGS_DYNAMIC_ALLOC ranges. */
496	HCPTRTYPE(PRTHCPTR) pavHCChunkHC;
497
498	/** Start of the HC mapping of the range.
499	* For pure MMIO and dynamically allocated ranges this is NULL, while for all ranges this is a valid pointer. */
500	HCPTRTYPE(void *) pvHC;
501
502	/** Array of the flags and HC physical addresses corresponding to the range.
503	* The index is the page number in the range. The size is cb >> PAGE_SHIFT.
504	*
505	* The 12 lower bits of the physical address are flags and must be masked
506	* off to get the correct physical address.
507	*
508	* For pure MMIO ranges only the flags are valid.
509	*/
510	RTHCPHYS aHCPhys[1];
511	} PGMRAMRANGE;
512	/** Pointer to Ram range for GC Phys to HC Phys conversion. */
513	typedef PGMRAMRANGE *PPGMRAMRANGE;
514
515	/** Return hc ptr corresponding to the ram range and physical offset */
516	#define PGMRAMRANGE_GETHCPTR(pRam, off) \
517	(pRam->fFlags & MM_RAM_FLAGS_DYNAMIC_ALLOC) ? (RTHCPTR)((RTHCUINTPTR)CTXSUFF(pRam->pavHCChunk)[(off >> PGM_DYNAMIC_CHUNK_SHIFT)] + (off & PGM_DYNAMIC_CHUNK_OFFSET_MASK)) \
518	: (RTHCPTR)((RTHCUINTPTR)pRam->pvHC + off);
519
520	/** @todo r=bird: fix typename. */
521	/**
522	* PGMPhysRead/Write cache entry
523	*/
524	typedef struct PGMPHYSCACHE_ENTRY
525	{
526	/** HC pointer to physical page */
527	R3PTRTYPE(uint8_t *) pbHC;
528	/** GC Physical address for cache entry */
529	RTGCPHYS GCPhys;
530	#if HC_ARCH_BITS == 64 && GC_ARCH_BITS == 32
531	RTGCPHYS u32Padding0; /*< alignment padding. /
532	#endif
533	} PGMPHYSCACHE_ENTRY;
534
535	/**
536	* PGMPhysRead/Write cache to reduce REM memory access overhead
537	*/
538	typedef struct PGMPHYSCACHE
539	{
540	/** Bitmap of valid cache entries */
541	uint64_t aEntries;
542	/** Cache entries */
543	PGMPHYSCACHE_ENTRY Entry[PGM_MAX_PHYSCACHE_ENTRIES];
544	} PGMPHYSCACHE;
545
546
547	/** @name PGM Pool Indexes.
548	* Aka. the unique shadow page identifier.
549	* @{ */
550	/** NIL page pool IDX. */
551	#define NIL_PGMPOOL_IDX 0
552	/** The first normal index. */
553	#define PGMPOOL_IDX_FIRST_SPECIAL 1
554	/** Page directory (32-bit root). */
555	#define PGMPOOL_IDX_PD 1
556	/** The extended PAE page directory (2048 entries, works as root currently). */
557	#define PGMPOOL_IDX_PAE_PD 2
558	/** Page Directory Pointer Table (PAE root, not currently used). */
559	#define PGMPOOL_IDX_PDPTR 3
560	/** Page Map Level-4 (64-bit root). */
561	#define PGMPOOL_IDX_PML4 4
562	/** The first normal index. */
563	#define PGMPOOL_IDX_FIRST 5
564	/** The last valid index. (inclusive, 14 bits) */
565	#define PGMPOOL_IDX_LAST 0x3fff
566	/** @} */
567
568	/** The NIL index for the parent chain. */
569	#define NIL_PGMPOOL_USER_INDEX ((uint16_t)0xffff)
570
571	/**
572	* Node in the chain linking a shadowed page to it's parent (user).
573	*/
574	#pragma pack(1)
575	typedef struct PGMPOOLUSER
576	{
577	/** The index to the next item in the chain. NIL_PGMPOOL_USER_INDEX is no next. */
578	uint16_t iNext;
579	/** The user page index. */
580	uint16_t iUser;
581	/** Index into the user table. */
582	uint16_t iUserTable;
583	} PGMPOOLUSER, *PPGMPOOLUSER;
584	typedef const PGMPOOLUSER *PCPGMPOOLUSER;
585	#pragma pack()
586
587
588	/** The NIL index for the phys ext chain. */
589	#define NIL_PGMPOOL_PHYSEXT_INDEX ((uint16_t)0xffff)
590
591	/**
592	* Node in the chain of physical cross reference extents.
593	*/
594	#pragma pack(1)
595	typedef struct PGMPOOLPHYSEXT
596	{
597	/** The index to the next item in the chain. NIL_PGMPOOL_PHYSEXT_INDEX is no next. */
598	uint16_t iNext;
599	/** The user page index. */
600	uint16_t aidx[3];
601	} PGMPOOLPHYSEXT, *PPGMPOOLPHYSEXT;
602	typedef const PGMPOOLPHYSEXT *PCPGMPOOLPHYSEXT;
603	#pragma pack()
604
605
606	/**
607	* The kind of page that's being shadowed.
608	*/
609	typedef enum PGMPOOLKIND
610	{
611	/** The virtual invalid 0 entry. */
612	PGMPOOLKIND_INVALID = 0,
613	/** The entry is free (=unused). */
614	PGMPOOLKIND_FREE,
615
616	/** Shw: 32-bit page table; Gst: no paging */
617	PGMPOOLKIND_32BIT_PT_FOR_PHYS,
618	/** Shw: 32-bit page table; Gst: 32-bit page table. */
619	PGMPOOLKIND_32BIT_PT_FOR_32BIT_PT,
620	/** Shw: 32-bit page table; Gst: 4MB page. */
621	PGMPOOLKIND_32BIT_PT_FOR_32BIT_4MB,
622	/** Shw: PAE page table; Gst: no paging */
623	PGMPOOLKIND_PAE_PT_FOR_PHYS,
624	/** Shw: PAE page table; Gst: 32-bit page table. */
625	PGMPOOLKIND_PAE_PT_FOR_32BIT_PT,
626	/** Shw: PAE page table; Gst: Half of a 4MB page. */
627	PGMPOOLKIND_PAE_PT_FOR_32BIT_4MB,
628	/** Shw: PAE page table; Gst: PAE page table. */
629	PGMPOOLKIND_PAE_PT_FOR_PAE_PT,
630	/** Shw: PAE page table; Gst: 2MB page. */
631	PGMPOOLKIND_PAE_PT_FOR_PAE_2MB,
632
633	/** Shw: PAE page directory; Gst: 32-bit page directory. */
634	PGMPOOLKIND_PAE_PD_FOR_32BIT_PD,
635	/** Shw: PAE page directory; Gst: PAE page directory. */
636	PGMPOOLKIND_PAE_PD_FOR_PAE_PD,
637
638	/** Shw: 64-bit page directory pointer table; Gst: 64-bit page directory pointer table. */
639	PGMPOOLKIND_64BIT_PDPTR_FOR_64BIT_PDPTR,
640
641	/** Shw: Root 32-bit page directory. */
642	PGMPOOLKIND_ROOT_32BIT_PD,
643	/** Shw: Root PAE page directory */
644	PGMPOOLKIND_ROOT_PAE_PD,
645	/** Shw: Root PAE page directory pointer table (legacy, 4 entries). */
646	PGMPOOLKIND_ROOT_PDPTR,
647	/** Shw: Root page map level-4 table. */
648	PGMPOOLKIND_ROOT_PML4,
649
650	/** The last valid entry. */
651	PGMPOOLKIND_LAST = PGMPOOLKIND_ROOT_PML4
652	} PGMPOOLKIND;
653
654
655	/**
656	* The tracking data for a page in the pool.
657	*/
658	typedef struct PGMPOOLPAGE
659	{
660	/** AVL node code with the (HC) physical address of this page. */
661	AVLOHCPHYSNODECORE Core;
662	/** Pointer to the HC mapping of the page. */
663	HCPTRTYPE(void *) pvPageHC;
664	/** The guest physical address. */
665	RTGCPHYS GCPhys;
666	/** The kind of page we're shadowing. (This is really a PGMPOOLKIND enum.) */
667	uint8_t enmKind;
668	uint8_t bPadding;
669	/** The index of this page. */
670	uint16_t idx;
671	/** The next entry in the list this page currently resides in.
672	* It's either in the free list or in the GCPhys hash. */
673	uint16_t iNext;
674	#ifdef PGMPOOL_WITH_USER_TRACKING
675	/** Head of the user chain. NIL_PGMPOOL_USER_INDEX if not currently in use. */
676	uint16_t iUserHead;
677	/** The number of present entries. */
678	uint16_t cPresent;
679	/** The first entry in the table which is present. */
680	uint16_t iFirstPresent;
681	#endif
682	#ifdef PGMPOOL_WITH_MONITORING
683	/** The number of modifications to the monitored page. */
684	uint16_t cModifications;
685	/** The next modified page. NIL_PGMPOOL_IDX if tail. */
686	uint16_t iModifiedNext;
687	/** The previous modified page. NIL_PGMPOOL_IDX if head. */
688	uint16_t iModifiedPrev;
689	/** The next page sharing access handler. NIL_PGMPOOL_IDX if tail. */
690	uint16_t iMonitoredNext;
691	/** The previous page sharing access handler. NIL_PGMPOOL_IDX if head. */
692	uint16_t iMonitoredPrev;
693	#endif
694	#ifdef PGMPOOL_WITH_CACHE
695	/** The next page in the age list. */
696	uint16_t iAgeNext;
697	/** The previous page in the age list. */
698	uint16_t iAgePrev;
699	/** @todo add more from PGMCache.h when merging with it. */
700	#endif /* PGMPOOL_WITH_CACHE */
701	/** Used to indicate that the page is zeroed. */
702	bool fZeroed;
703	/** Used to indicate that a PT has non-global entries. */
704	bool fSeenNonGlobal;
705	/** Used to indicate that we're monitoring writes to the guest page. */
706	bool fMonitored;
707	/** Used to indicate that the page is in the cache (e.g. in the GCPhys hash).
708	* (All pages are in the age list.) */
709	bool fCached;
710	/** This is used by the R3 access handlers when invoked by an async thread.
711	* It's a hack required because of REMR3NotifyHandlerPhysicalDeregister. */
712	bool volatile fReusedFlushPending;
713	/** Used to indicate that the guest is mapping the page is also used as a CR3.
714	* In these cases the access handler acts differently and will check
715	* for mapping conflicts like the normal CR3 handler.
716	* @todo When we change the CR3 shadowing to use pool pages, this flag can be
717	* replaced by a list of pages which share access handler.
718	*/
719	bool fCR3Mix;
720	#if HC_ARCH_BITS == 64 \|\| GC_ARCH_BITS == 64
721	bool Alignment[4]; /*< Align the structure size on a 64-bit boundrary. /
722	#endif
723	} PGMPOOLPAGE, PPGMPOOLPAGE, *PPPGMPOOLPAGE;
724
725
726	#ifdef PGMPOOL_WITH_CACHE
727	/** The hash table size. */
728	# define PGMPOOL_HASH_SIZE 0x40
729	/** The hash function. */
730	# define PGMPOOL_HASH(GCPhys) ( ((GCPhys) >> PAGE_SHIFT) & (PGMPOOL_HASH_SIZE - 1) )
731	#endif
732
733
734	/**
735	* The shadow page pool instance data.
736	*
737	* It's all one big allocation made at init time, except for the
738	* pages that is. The user nodes follows immediatly after the
739	* page structures.
740	*/
741	typedef struct PGMPOOL
742	{
743	/** The VM handle - HC Ptr. */
744	HCPTRTYPE(PVM) pVMHC;
745	/** The VM handle - GC Ptr. */
746	GCPTRTYPE(PVM) pVMGC;
747	/** The max pool size. This includes the special IDs. */
748	uint16_t cMaxPages;
749	/** The current pool size. */
750	uint16_t cCurPages;
751	/** The head of the free page list. */
752	uint16_t iFreeHead;
753	/* Padding. */
754	uint16_t u16Padding;
755	#ifdef PGMPOOL_WITH_USER_TRACKING
756	/** Head of the chain of free user nodes. */
757	uint16_t iUserFreeHead;
758	/** The number of user nodes we've allocated. */
759	uint16_t cMaxUsers;
760	/** The number of present page table entries in the entire pool. */
761	uint32_t cPresent;
762	/** Pointer to the array of user nodes - GC pointer. */
763	GCPTRTYPE(PPGMPOOLUSER) paUsersGC;
764	/** Pointer to the array of user nodes - HC pointer. */
765	HCPTRTYPE(PPGMPOOLUSER) paUsersHC;
766	#endif /* PGMPOOL_WITH_USER_TRACKING */
767	#ifdef PGMPOOL_WITH_GCPHYS_TRACKING
768	/** Head of the chain of free phys ext nodes. */
769	uint16_t iPhysExtFreeHead;
770	/** The number of user nodes we've allocated. */
771	uint16_t cMaxPhysExts;
772	/** Pointer to the array of physical xref extent - GC pointer. */
773	GCPTRTYPE(PPGMPOOLPHYSEXT) paPhysExtsGC;
774	/** Pointer to the array of physical xref extent nodes - HC pointer. */
775	HCPTRTYPE(PPGMPOOLPHYSEXT) paPhysExtsHC;
776	#endif /* PGMPOOL_WITH_GCPHYS_TRACKING */
777	#ifdef PGMPOOL_WITH_CACHE
778	/** Hash table for GCPhys addresses. */
779	uint16_t aiHash[PGMPOOL_HASH_SIZE];
780	/** The head of the age list. */
781	uint16_t iAgeHead;
782	/** The tail of the age list. */
783	uint16_t iAgeTail;
784	/** Set if the cache is enabled. */
785	bool fCacheEnabled;
786	#endif /* PGMPOOL_WITH_CACHE */
787	#ifdef PGMPOOL_WITH_MONITORING
788	/** Head of the list of modified pages. */
789	uint16_t iModifiedHead;
790	/** The current number of modified pages. */
791	uint16_t cModifiedPages;
792	/** Access handler, GC. */
793	GCPTRTYPE(PFNPGMGCPHYSHANDLER) pfnAccessHandlerGC;
794	/** Access handler, R0. */
795	R0PTRTYPE(PFNPGMR0PHYSHANDLER) pfnAccessHandlerR0;
796	/** Access handler, R3. */
797	R3PTRTYPE(PFNPGMR3PHYSHANDLER) pfnAccessHandlerR3;
798	/** The access handler description (HC ptr). */
799	R3PTRTYPE(const char *) pszAccessHandler;
800	#endif /* PGMPOOL_WITH_MONITORING */
801	/** The number of pages currently in use. */
802	uint16_t cUsedPages;
803	#ifdef VBOX_WITH_STATISTICS
804	/** The high wather mark for cUsedPages. */
805	uint16_t cUsedPagesHigh;
806	uint32_t Alignment1; /*< Align the next member on a 64-bit boundrary. /
807	/** Profiling pgmPoolAlloc(). */
808	STAMPROFILEADV StatAlloc;
809	/** Profiling pgmPoolClearAll(). */
810	STAMPROFILE StatClearAll;
811	/** Profiling pgmPoolFlushAllInt(). */
812	STAMPROFILE StatFlushAllInt;
813	/** Profiling pgmPoolFlushPage(). */
814	STAMPROFILE StatFlushPage;
815	/** Profiling pgmPoolFree(). */
816	STAMPROFILE StatFree;
817	/** Profiling time spent zeroing pages. */
818	STAMPROFILE StatZeroPage;
819	# ifdef PGMPOOL_WITH_USER_TRACKING
820	/** Profiling of pgmPoolTrackDeref. */
821	STAMPROFILE StatTrackDeref;
822	/** Profiling pgmTrackFlushGCPhysPT. */
823	STAMPROFILE StatTrackFlushGCPhysPT;
824	/** Profiling pgmTrackFlushGCPhysPTs. */
825	STAMPROFILE StatTrackFlushGCPhysPTs;
826	/** Profiling pgmTrackFlushGCPhysPTsSlow. */
827	STAMPROFILE StatTrackFlushGCPhysPTsSlow;
828	/** Number of times we've been out of user records. */
829	STAMCOUNTER StatTrackFreeUpOneUser;
830	# endif
831	# ifdef PGMPOOL_WITH_GCPHYS_TRACKING
832	/** Profiling deref activity related tracking GC physical pages. */
833	STAMPROFILE StatTrackDerefGCPhys;
834	/** Number of linear searches for a HCPhys in the ram ranges. */
835	STAMCOUNTER StatTrackLinearRamSearches;
836	/** The number of failing pgmPoolTrackPhysExtAlloc calls. */
837	STAMCOUNTER StamTrackPhysExtAllocFailures;
838	# endif
839	# ifdef PGMPOOL_WITH_MONITORING
840	/** Profiling the GC PT access handler. */
841	STAMPROFILE StatMonitorGC;
842	/** Times we've failed interpreting the instruction. */
843	STAMCOUNTER StatMonitorGCEmulateInstr;
844	/** Profiling the pgmPoolFlushPage calls made from the GC PT access handler. */
845	STAMPROFILE StatMonitorGCFlushPage;
846	/** Times we've detected fork(). */
847	STAMCOUNTER StatMonitorGCFork;
848	/** Profiling the GC access we've handled (except REP STOSD). */
849	STAMPROFILE StatMonitorGCHandled;
850	/** Times we've failed interpreting a patch code instruction. */
851	STAMCOUNTER StatMonitorGCIntrFailPatch1;
852	/** Times we've failed interpreting a patch code instruction during flushing. */
853	STAMCOUNTER StatMonitorGCIntrFailPatch2;
854	/** The number of times we've seen rep prefixes we can't handle. */
855	STAMCOUNTER StatMonitorGCRepPrefix;
856	/** Profiling the REP STOSD cases we've handled. */
857	STAMPROFILE StatMonitorGCRepStosd;
858
859	/** Profiling the HC PT access handler. */
860	STAMPROFILE StatMonitorHC;
861	/** Times we've failed interpreting the instruction. */
862	STAMCOUNTER StatMonitorHCEmulateInstr;
863	/** Profiling the pgmPoolFlushPage calls made from the HC PT access handler. */
864	STAMPROFILE StatMonitorHCFlushPage;
865	/** Times we've detected fork(). */
866	STAMCOUNTER StatMonitorHCFork;
867	/** Profiling the HC access we've handled (except REP STOSD). */
868	STAMPROFILE StatMonitorHCHandled;
869	/** The number of times we've seen rep prefixes we can't handle. */
870	STAMCOUNTER StatMonitorHCRepPrefix;
871	/** Profiling the REP STOSD cases we've handled. */
872	STAMPROFILE StatMonitorHCRepStosd;
873	/** The number of times we're called in an async thread an need to flush. */
874	STAMCOUNTER StatMonitorHCAsync;
875	/** The high wather mark for cModifiedPages. */
876	uint16_t cModifiedPagesHigh;
877	uint16_t Alignment2[3]; /*< Align the next member on a 64-bit boundrary. /
878	# endif
879	# ifdef PGMPOOL_WITH_CACHE
880	/** The number of cache hits. */
881	STAMCOUNTER StatCacheHits;
882	/** The number of cache misses. */
883	STAMCOUNTER StatCacheMisses;
884	/** The number of times we've got a conflict of 'kind' in the cache. */
885	STAMCOUNTER StatCacheKindMismatches;
886	/** Number of times we've been out of pages. */
887	STAMCOUNTER StatCacheFreeUpOne;
888	/** The number of cacheable allocations. */
889	STAMCOUNTER StatCacheCacheable;
890	/** The number of uncacheable allocations. */
891	STAMCOUNTER StatCacheUncacheable;
892	# endif
893	#elif HC_ARCH_BITS == 64 && GC_ARCH_BITS == 32
894	uint32_t Alignment1; /*< Align the next member on a 64-bit boundrary. /
895	#endif
896	/** The AVL tree for looking up a page by its HC physical address. */
897	AVLOHCPHYSTREE HCPhysTree;
898	uint32_t Alignment3; /*< Align the next member on a 64-bit boundrary. /
899	/** Array of pages. (cMaxPages in length)
900	* The Id is the index into thist array.
901	*/
902	PGMPOOLPAGE aPages[PGMPOOL_IDX_FIRST];
903	} PGMPOOL, PPGMPOOL, *PPPGMPOOL;
904
905
906	/** @def PGMPOOL_PAGE_2_PTR
907	* Maps a pool page pool into the current context.
908	*
909	* @returns VBox status code.
910	* @param pVM The VM handle.
911	* @param pPage The pool page.
912	*
913	* @remark In HC this uses PGMGCDynMapHCPage(), so it will consume of the
914	* small page window employeed by that function. Be careful.
915	* @remark There is no need to assert on the result.
916	*/
917	#ifdef IN_GC
918	# define PGMPOOL_PAGE_2_PTR(pVM, pPage) pgmGCPoolMapPage((pVM), (pPage))
919	#else
920	# define PGMPOOL_PAGE_2_PTR(pVM, pPage) ((pPage)->pvPageHC)
921	#endif
922
923
924	/**
925	* Trees are using self relative offsets as pointers.
926	* So, all its data, including the root pointer, must be in the heap for HC and GC
927	* to have the same layout.
928	*/
929	typedef struct PGMTREES
930	{
931	/** Physical access handlers (AVL range+offsetptr tree). */
932	AVLROGCPHYSTREE PhysHandlers;
933	/** Virtual access handlers (AVL range + GC ptr tree). */
934	AVLROGCPTRTREE VirtHandlers;
935	/** Virtual access handlers (Phys range AVL range + offsetptr tree). */
936	AVLROGCPHYSTREE PhysToVirtHandlers;
937	uint32_t auPadding[1];
938	} PGMTREES;
939	/** Pointer to PGM trees. */
940	typedef PGMTREES *PPGMTREES;
941
942
943	/** @name Paging mode macros
944	* @{ */
945	#ifdef IN_GC
946	# define PGM_CTX(a,b) a##GC##b
947	# define PGM_CTX_STR(a,b) a "GC" b
948	# define PGM_CTX_DECL(type) PGMGCDECL(type)
949	#else
950	# ifdef IN_RING3
951	# define PGM_CTX(a,b) a##R3##b
952	# define PGM_CTX_STR(a,b) a "R3" b
953	# define PGM_CTX_DECL(type) DECLCALLBACK(type)
954	# else
955	# define PGM_CTX(a,b) a##R0##b
956	# define PGM_CTX_STR(a,b) a "R0" b
957	# define PGM_CTX_DECL(type) PGMDECL(type)
958	# endif
959	#endif
960
961	#define PGM_GST_NAME_REAL(name) PGM_CTX(pgm,GstReal##name)
962	#define PGM_GST_NAME_GC_REAL_STR(name) "pgmGCGstReal" #name
963	#define PGM_GST_NAME_R0_REAL_STR(name) "pgmR0GstReal" #name
964	#define PGM_GST_NAME_PROT(name) PGM_CTX(pgm,GstProt##name)
965	#define PGM_GST_NAME_GC_PROT_STR(name) "pgmGCGstProt" #name
966	#define PGM_GST_NAME_R0_PROT_STR(name) "pgmR0GstProt" #name
967	#define PGM_GST_NAME_32BIT(name) PGM_CTX(pgm,Gst32Bit##name)
968	#define PGM_GST_NAME_GC_32BIT_STR(name) "pgmGCGst32Bit" #name
969	#define PGM_GST_NAME_R0_32BIT_STR(name) "pgmR0Gst32Bit" #name
970	#define PGM_GST_NAME_PAE(name) PGM_CTX(pgm,GstPAE##name)
971	#define PGM_GST_NAME_GC_PAE_STR(name) "pgmGCGstPAE" #name
972	#define PGM_GST_NAME_R0_PAE_STR(name) "pgmR0GstPAE" #name
973	#define PGM_GST_NAME_AMD64(name) PGM_CTX(pgm,GstAMD64##name)
974	#define PGM_GST_NAME_GC_AMD64_STR(name) "pgmGCGstAMD64" #name
975	#define PGM_GST_NAME_R0_AMD64_STR(name) "pgmR0GstAMD64" #name
976	#define PGM_GST_PFN(name, pVM) ((pVM)->pgm.s.PGM_CTX(pfn,Gst##name))
977	#define PGM_GST_DECL(type, name) PGM_CTX_DECL(type) PGM_GST_NAME(name)
978
979	#define PGM_SHW_NAME_32BIT(name) PGM_CTX(pgm,Shw32Bit##name)
980	#define PGM_SHW_NAME_GC_32BIT_STR(name) "pgmGCShw32Bit" #name
981	#define PGM_SHW_NAME_R0_32BIT_STR(name) "pgmR0Shw32Bit" #name
982	#define PGM_SHW_NAME_PAE(name) PGM_CTX(pgm,ShwPAE##name)
983	#define PGM_SHW_NAME_GC_PAE_STR(name) "pgmGCShwPAE" #name
984	#define PGM_SHW_NAME_R0_PAE_STR(name) "pgmR0ShwPAE" #name
985	#define PGM_SHW_NAME_AMD64(name) PGM_CTX(pgm,ShwAMD64##name)
986	#define PGM_SHW_NAME_GC_AMD64_STR(name) "pgmGCShwAMD64" #name
987	#define PGM_SHW_NAME_R0_AMD64_STR(name) "pgmR0ShwAMD64" #name
988	#define PGM_SHW_DECL(type, name) PGM_CTX_DECL(type) PGM_SHW_NAME(name)
989	#define PGM_SHW_PFN(name, pVM) ((pVM)->pgm.s.PGM_CTX(pfn,Shw##name))
990
991	/* Shw_Gst */
992	#define PGM_BTH_NAME_32BIT_REAL(name) PGM_CTX(pgm,Bth32BitReal##name)
993	#define PGM_BTH_NAME_32BIT_PROT(name) PGM_CTX(pgm,Bth32BitProt##name)
994	#define PGM_BTH_NAME_32BIT_32BIT(name) PGM_CTX(pgm,Bth32Bit32Bit##name)
995	#define PGM_BTH_NAME_PAE_REAL(name) PGM_CTX(pgm,BthPAEReal##name)
996	#define PGM_BTH_NAME_PAE_PROT(name) PGM_CTX(pgm,BthPAEProt##name)
997	#define PGM_BTH_NAME_PAE_32BIT(name) PGM_CTX(pgm,BthPAE32Bit##name)
998	#define PGM_BTH_NAME_PAE_PAE(name) PGM_CTX(pgm,BthPAEPAE##name)
999	#define PGM_BTH_NAME_AMD64_REAL(name) PGM_CTX(pgm,BthAMD64Real##name)
1000	#define PGM_BTH_NAME_AMD64_PROT(name) PGM_CTX(pgm,BthAMD64Prot##name)
1001	#define PGM_BTH_NAME_AMD64_AMD64(name) PGM_CTX(pgm,BthAMD64AMD64##name)
1002	#define PGM_BTH_NAME_GC_32BIT_REAL_STR(name) "pgmGCBth32BitReal" #name
1003	#define PGM_BTH_NAME_GC_32BIT_PROT_STR(name) "pgmGCBth32BitProt" #name
1004	#define PGM_BTH_NAME_GC_32BIT_32BIT_STR(name) "pgmGCBth32Bit32Bit" #name
1005	#define PGM_BTH_NAME_GC_PAE_REAL_STR(name) "pgmGCBthPAEReal" #name
1006	#define PGM_BTH_NAME_GC_PAE_PROT_STR(name) "pgmGCBthPAEProt" #name
1007	#define PGM_BTH_NAME_GC_PAE_32BIT_STR(name) "pgmGCBthPAE32Bit" #name
1008	#define PGM_BTH_NAME_GC_PAE_PAE_STR(name) "pgmGCBthPAEPAE" #name
1009	#define PGM_BTH_NAME_GC_AMD64_REAL_STR(name) "pgmGCBthAMD64Real" #name
1010	#define PGM_BTH_NAME_GC_AMD64_PROT_STR(name) "pgmGCBthAMD64Prot" #name
1011	#define PGM_BTH_NAME_GC_AMD64_AMD64_STR(name) "pgmGCBthAMD64AMD64" #name
1012	#define PGM_BTH_NAME_R0_32BIT_REAL_STR(name) "pgmR0Bth32BitReal" #name
1013	#define PGM_BTH_NAME_R0_32BIT_PROT_STR(name) "pgmR0Bth32BitProt" #name
1014	#define PGM_BTH_NAME_R0_32BIT_32BIT_STR(name) "pgmR0Bth32Bit32Bit" #name
1015	#define PGM_BTH_NAME_R0_PAE_REAL_STR(name) "pgmR0BthPAEReal" #name
1016	#define PGM_BTH_NAME_R0_PAE_PROT_STR(name) "pgmR0BthPAEProt" #name
1017	#define PGM_BTH_NAME_R0_PAE_32BIT_STR(name) "pgmR0BthPAE32Bit" #name
1018	#define PGM_BTH_NAME_R0_PAE_PAE_STR(name) "pgmR0BthPAEPAE" #name
1019	#define PGM_BTH_NAME_R0_AMD64_REAL_STR(name) "pgmR0BthAMD64Real" #name
1020	#define PGM_BTH_NAME_R0_AMD64_PROT_STR(name) "pgmR0BthAMD64Prot" #name
1021	#define PGM_BTH_NAME_R0_AMD64_AMD64_STR(name) "pgmR0BthAMD64AMD64" #name
1022	#define PGM_BTH_DECL(type, name) PGM_CTX_DECL(type) PGM_BTH_NAME(name)
1023	#define PGM_BTH_PFN(name, pVM) ((pVM)->pgm.s.PGM_CTX(pfn,Bth##name))
1024	/** @} */
1025
1026	/**
1027	* Data for each paging mode.
1028	*/
1029	typedef struct PGMMODEDATA
1030	{
1031	/** The guest mode type. */
1032	uint32_t uGstType;
1033	/** The shadow mode type. */
1034	uint32_t uShwType;
1035
1036	/** @name Function pointers for Shadow paging.
1037	* @{
1038	*/
1039	DECLR3CALLBACKMEMBER(int, pfnR3ShwRelocate,(PVM pVM, RTGCUINTPTR offDelta));
1040	DECLR3CALLBACKMEMBER(int, pfnR3ShwExit,(PVM pVM));
1041	DECLR3CALLBACKMEMBER(int, pfnR3ShwGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTHCPHYS pHCPhys));
1042	DECLR3CALLBACKMEMBER(int, pfnR3ShwModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1043	DECLR3CALLBACKMEMBER(int, pfnR3ShwGetPDEByIndex,(PVM pVM, uint32_t iPD, PX86PDEPAE pPde));
1044	DECLR3CALLBACKMEMBER(int, pfnR3ShwSetPDEByIndex,(PVM pVM, uint32_t iPD, X86PDEPAE Pde));
1045	DECLR3CALLBACKMEMBER(int, pfnR3ShwModifyPDEByIndex,(PVM pVM, uint32_t iPD, uint64_t fFlags, uint64_t fMask));
1046
1047	DECLGCCALLBACKMEMBER(int, pfnGCShwGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTHCPHYS pHCPhys));
1048	DECLGCCALLBACKMEMBER(int, pfnGCShwModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1049	DECLGCCALLBACKMEMBER(int, pfnGCShwGetPDEByIndex,(PVM pVM, uint32_t iPD, PX86PDEPAE pPde));
1050	DECLGCCALLBACKMEMBER(int, pfnGCShwSetPDEByIndex,(PVM pVM, uint32_t iPD, X86PDEPAE Pde));
1051	DECLGCCALLBACKMEMBER(int, pfnGCShwModifyPDEByIndex,(PVM pVM, uint32_t iPD, uint64_t fFlags, uint64_t fMask));
1052
1053	DECLR0CALLBACKMEMBER(int, pfnR0ShwGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTHCPHYS pHCPhys));
1054	DECLR0CALLBACKMEMBER(int, pfnR0ShwModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1055	DECLR0CALLBACKMEMBER(int, pfnR0ShwGetPDEByIndex,(PVM pVM, uint32_t iPD, PX86PDEPAE pPde));
1056	DECLR0CALLBACKMEMBER(int, pfnR0ShwSetPDEByIndex,(PVM pVM, uint32_t iPD, X86PDEPAE Pde));
1057	DECLR0CALLBACKMEMBER(int, pfnR0ShwModifyPDEByIndex,(PVM pVM, uint32_t iPD, uint64_t fFlags, uint64_t fMask));
1058	/** @} */
1059
1060	/** @name Function pointers for Guest paging.
1061	* @{
1062	*/
1063	DECLR3CALLBACKMEMBER(int, pfnR3GstRelocate,(PVM pVM, RTGCUINTPTR offDelta));
1064	DECLR3CALLBACKMEMBER(int, pfnR3GstExit,(PVM pVM));
1065	DECLR3CALLBACKMEMBER(int, pfnR3GstGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTGCPHYS pGCPhys));
1066	DECLR3CALLBACKMEMBER(int, pfnR3GstModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1067	DECLR3CALLBACKMEMBER(int, pfnR3GstGetPDE,(PVM pVM, RTGCUINTPTR GCPtr, PX86PDEPAE pPde));
1068	DECLR3CALLBACKMEMBER(int, pfnR3GstMonitorCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1069	DECLR3CALLBACKMEMBER(int, pfnR3GstUnmonitorCR3,(PVM pVM));
1070	DECLR3CALLBACKMEMBER(int, pfnR3GstMapCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1071	DECLR3CALLBACKMEMBER(int, pfnR3GstUnmapCR3,(PVM pVM));
1072	HCPTRTYPE(PFNPGMR3PHYSHANDLER) pfnHCGstWriteHandlerCR3;
1073	HCPTRTYPE(const char *) pszHCGstWriteHandlerCR3;
1074
1075	DECLGCCALLBACKMEMBER(int, pfnGCGstGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTGCPHYS pGCPhys));
1076	DECLGCCALLBACKMEMBER(int, pfnGCGstModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1077	DECLGCCALLBACKMEMBER(int, pfnGCGstGetPDE,(PVM pVM, RTGCUINTPTR GCPtr, PX86PDEPAE pPde));
1078	DECLGCCALLBACKMEMBER(int, pfnGCGstMonitorCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1079	DECLGCCALLBACKMEMBER(int, pfnGCGstUnmonitorCR3,(PVM pVM));
1080	DECLGCCALLBACKMEMBER(int, pfnGCGstMapCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1081	DECLGCCALLBACKMEMBER(int, pfnGCGstUnmapCR3,(PVM pVM));
1082	GCPTRTYPE(PFNPGMGCPHYSHANDLER) pfnGCGstWriteHandlerCR3;
1083
1084	DECLR0CALLBACKMEMBER(int, pfnR0GstGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTGCPHYS pGCPhys));
1085	DECLR0CALLBACKMEMBER(int, pfnR0GstModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1086	DECLR0CALLBACKMEMBER(int, pfnR0GstGetPDE,(PVM pVM, RTGCUINTPTR GCPtr, PX86PDEPAE pPde));
1087	DECLR0CALLBACKMEMBER(int, pfnR0GstMonitorCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1088	DECLR0CALLBACKMEMBER(int, pfnR0GstUnmonitorCR3,(PVM pVM));
1089	DECLR0CALLBACKMEMBER(int, pfnR0GstMapCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1090	DECLR0CALLBACKMEMBER(int, pfnR0GstUnmapCR3,(PVM pVM));
1091	R0PTRTYPE(PFNPGMR0PHYSHANDLER) pfnR0GstWriteHandlerCR3;
1092	/** @} */
1093
1094	/** @name Function pointers for Both Shadow and Guest paging.
1095	* @{
1096	*/
1097	DECLR3CALLBACKMEMBER(int, pfnR3BthRelocate,(PVM pVM, RTGCUINTPTR offDelta));
1098	DECLR3CALLBACKMEMBER(int, pfnR3BthTrap0eHandler,(PVM pVM, RTGCUINT uErr, PCPUMCTXCORE pRegFrame, RTGCPTR pvFault));
1099	DECLR3CALLBACKMEMBER(int, pfnR3BthInvalidatePage,(PVM pVM, RTGCPTR GCPtrPage));
1100	DECLR3CALLBACKMEMBER(int, pfnR3BthSyncCR3,(PVM pVM, uint32_t cr0, uint32_t cr3, uint32_t cr4, bool fGlobal));
1101	DECLR3CALLBACKMEMBER(int, pfnR3BthSyncPage,(PVM pVM, VBOXPDE PdeSrc, RTGCUINTPTR GCPtrPage, unsigned cPages, unsigned uError));
1102	DECLR3CALLBACKMEMBER(int, pfnR3BthPrefetchPage,(PVM pVM, RTGCUINTPTR GCPtrPage));
1103	DECLR3CALLBACKMEMBER(int, pfnR3BthVerifyAccessSyncPage,(PVM pVM, RTGCUINTPTR GCPtrPage, unsigned fFlags, unsigned uError));
1104	#ifdef VBOX_STRICT
1105	DECLR3CALLBACKMEMBER(unsigned, pfnR3BthAssertCR3,(PVM pVM, uint32_t cr3, uint32_t cr4, RTGCUINTPTR GCPtr, RTGCUINTPTR cb));
1106	#endif
1107
1108	DECLGCCALLBACKMEMBER(int, pfnGCBthTrap0eHandler,(PVM pVM, RTGCUINT uErr, PCPUMCTXCORE pRegFrame, RTGCPTR pvFault));
1109	DECLGCCALLBACKMEMBER(int, pfnGCBthInvalidatePage,(PVM pVM, RTGCPTR GCPtrPage));
1110	DECLGCCALLBACKMEMBER(int, pfnGCBthSyncCR3,(PVM pVM, uint32_t cr0, uint32_t cr3, uint32_t cr4, bool fGlobal));
1111	DECLGCCALLBACKMEMBER(int, pfnGCBthSyncPage,(PVM pVM, VBOXPDE PdeSrc, RTGCUINTPTR GCPtrPage, unsigned cPages, unsigned uError));
1112	DECLGCCALLBACKMEMBER(int, pfnGCBthPrefetchPage,(PVM pVM, RTGCUINTPTR GCPtrPage));
1113	DECLGCCALLBACKMEMBER(int, pfnGCBthVerifyAccessSyncPage,(PVM pVM, RTGCUINTPTR GCPtrPage, unsigned fFlags, unsigned uError));
1114	#ifdef VBOX_STRICT
1115	DECLGCCALLBACKMEMBER(unsigned, pfnGCBthAssertCR3,(PVM pVM, uint32_t cr3, uint32_t cr4, RTGCUINTPTR GCPtr, RTGCUINTPTR cb));
1116	#endif
1117
1118	DECLR0CALLBACKMEMBER(int, pfnR0BthTrap0eHandler,(PVM pVM, RTGCUINT uErr, PCPUMCTXCORE pRegFrame, RTGCPTR pvFault));
1119	DECLR0CALLBACKMEMBER(int, pfnR0BthInvalidatePage,(PVM pVM, RTGCPTR GCPtrPage));
1120	DECLR0CALLBACKMEMBER(int, pfnR0BthSyncCR3,(PVM pVM, uint32_t cr0, uint32_t cr3, uint32_t cr4, bool fGlobal));
1121	DECLR0CALLBACKMEMBER(int, pfnR0BthSyncPage,(PVM pVM, VBOXPDE PdeSrc, RTGCUINTPTR GCPtrPage, unsigned cPages, unsigned uError));
1122	DECLR0CALLBACKMEMBER(int, pfnR0BthPrefetchPage,(PVM pVM, RTGCUINTPTR GCPtrPage));
1123	DECLR0CALLBACKMEMBER(int, pfnR0BthVerifyAccessSyncPage,(PVM pVM, RTGCUINTPTR GCPtrPage, unsigned fFlags, unsigned uError));
1124	#ifdef VBOX_STRICT
1125	DECLR0CALLBACKMEMBER(unsigned, pfnR0BthAssertCR3,(PVM pVM, uint32_t cr3, uint32_t cr4, RTGCUINTPTR GCPtr, RTGCUINTPTR cb));
1126	#endif
1127	/** @} */
1128	} PGMMODEDATA, *PPGMMODEDATA;
1129
1130
1131
1132	/**
1133	* Converts a PGM pointer into a VM pointer.
1134	* @returns Pointer to the VM structure the PGM is part of.
1135	* @param pPGM Pointer to PGM instance data.
1136	*/
1137	#define PGM2VM(pPGM) ( (PVM)((char*)pPGM - pPGM->offVM) )
1138
1139	/**
1140	* PGM Data (part of VM)
1141	*/
1142	typedef struct PGM
1143	{
1144	/** Offset to the VM structure. */
1145	RTINT offVM;
1146
1147	/*
1148	* This will be redefined at least two more times before we're done, I'm sure.
1149	* The current code is only to get on with the coding.
1150	* - 2004-06-10: initial version, bird.
1151	* - 2004-07-02: 1st time, bird.
1152	* - 2004-10-18: 2nd time, bird.
1153	* - 2005-07-xx: 3rd time, bird.
1154	*/
1155
1156	/** Pointer to the page table entries for the dynamic page mapping area - GCPtr. */
1157	GCPTRTYPE(PX86PTE) paDynPageMap32BitPTEsGC;
1158	/** Pointer to the page table entries for the dynamic page mapping area - GCPtr. */
1159	GCPTRTYPE(PX86PTEPAE) paDynPageMapPaePTEsGC;
1160
1161	/** The host paging mode. (This is what SUPLib reports.) */
1162	SUPPAGINGMODE enmHostMode;
1163	/** The shadow paging mode. */
1164	PGMMODE enmShadowMode;
1165	/** The guest paging mode. */
1166	PGMMODE enmGuestMode;
1167
1168	/** The current physical address representing in the guest CR3 register. */
1169	RTGCPHYS GCPhysCR3;
1170	/** Pointer to the 5 page CR3 content mapping.
1171	* The first page is always the CR3 (in some form) while the 4 other pages
1172	* are used of the PDs in PAE mode. */
1173	RTGCPTR GCPtrCR3Mapping;
1174	/** The physical address of the currently monitored guest CR3 page.
1175	* When this value is NIL_RTGCPHYS no page is being monitored. */
1176	RTGCPHYS GCPhysGstCR3Monitored;
1177	#if HC_ARCH_BITS == 64 \|\| GC_ARCH_BITS == 64
1178	RTGCPHYS GCPhysPadding0; /*< alignment padding. /
1179	#endif
1180
1181	/** @name 32-bit Guest Paging.
1182	* @{ */
1183	/** The guest's page directory, HC pointer. */
1184	HCPTRTYPE(PVBOXPD) pGuestPDHC;
1185	/** The guest's page directory, static GC mapping. */
1186	GCPTRTYPE(PVBOXPD) pGuestPDGC;
1187	/** @} */
1188
1189	/** @name PAE Guest Paging.
1190	* @{ */
1191	/** The guest's page directory pointer table, static GC mapping. */
1192	GCPTRTYPE(PX86PDPTR) pGstPaePDPTRGC;
1193	/** The guest's page directory pointer table, HC pointer. */
1194	HCPTRTYPE(PX86PDPTR) pGstPaePDPTRHC;
1195	/** The guest's page directories, HC pointers.
1196	* These are individual pointers and doesn't have to be adjecent.
1197	* These doesn't have to be update to date - use pgmGstGetPaePD() to access them. */
1198	HCPTRTYPE(PX86PDPAE) apGstPaePDsHC[4];
1199	/** The guest's page directories, static GC mapping.
1200	* Unlike the HC array the first entry can be accessed as a 2048 entry PD.
1201	* These doesn't have to be update to date - use pgmGstGetPaePD() to access them. */
1202	GCPTRTYPE(PX86PDPAE) apGstPaePDsGC[4];
1203	/** The physical addresses of the guest page directories (PAE) pointed to by apGstPagePDsHC/GC. */
1204	RTGCPHYS aGCPhysGstPaePDs[4];
1205	/** The physical addresses of the monitored guest page directories (PAE). */
1206	RTGCPHYS aGCPhysGstPaePDsMonitored[4];
1207	/** @} */
1208
1209
1210	/** @name 32-bit Shadow Paging
1211	* @{ */
1212	/** The 32-Bit PD - HC Ptr. */
1213	HCPTRTYPE(PX86PD) pHC32BitPD;
1214	/** The 32-Bit PD - GC Ptr. */
1215	GCPTRTYPE(PX86PD) pGC32BitPD;
1216	#if HC_ARCH_BITS == 64 && GC_ARCH_BITS == 32
1217	uint32_t u32Padding1; /*< alignment padding. /
1218	#endif
1219	/** The Physical Address (HC) of the 32-Bit PD. */
1220	RTHCPHYS HCPhys32BitPD;
1221	/** @} */
1222
1223	/** @name PAE Shadow Paging
1224	* @{ */
1225	/** The four PDs for the low 4GB - HC Ptr.
1226	* Even though these are 4 pointers, what they point at is a single table.
1227	* Thus, it's possible to walk the 2048 entries starting where apHCPaePDs[0] points. */
1228	HCPTRTYPE(PX86PDPAE) apHCPaePDs[4];
1229	/** The four PDs for the low 4GB - GC Ptr.
1230	* Same kind of mapping as apHCPaePDs. */
1231	GCPTRTYPE(PX86PDPAE) apGCPaePDs[4];
1232	/** The Physical Address (HC) of the four PDs for the low 4GB.
1233	* These are NOT 4 contiguous pages. */
1234	RTHCPHYS aHCPhysPaePDs[4];
1235	/** The PAE PDPTR - HC Ptr. */
1236	HCPTRTYPE(PX86PDPTR) pHCPaePDPTR;
1237	/** The Physical Address (HC) of the PAE PDPTR. */
1238	RTHCPHYS HCPhysPaePDPTR;
1239	/** The PAE PDPTR - GC Ptr. */
1240	GCPTRTYPE(PX86PDPTR) pGCPaePDPTR;
1241	/** @} */
1242
1243	/** @name AMD64 Shadow Paging
1244	* Extends PAE Paging.
1245	* @{ */
1246	/** The Page Map Level 4 table - HC Ptr. */
1247	GCPTRTYPE(PX86PML4) pGCPaePML4;
1248	/** The Page Map Level 4 table - GC Ptr. */
1249	HCPTRTYPE(PX86PML4) pHCPaePML4;
1250	/** The Physical Address (HC) of the Page Map Level 4 table. */
1251	RTHCPHYS HCPhysPaePML4;
1252	/** @}*/
1253
1254	/** @name Function pointers for Shadow paging.
1255	* @{
1256	*/
1257	DECLR3CALLBACKMEMBER(int, pfnR3ShwRelocate,(PVM pVM, RTGCUINTPTR offDelta));
1258	DECLR3CALLBACKMEMBER(int, pfnR3ShwExit,(PVM pVM));
1259	DECLR3CALLBACKMEMBER(int, pfnR3ShwGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTHCPHYS pHCPhys));
1260	DECLR3CALLBACKMEMBER(int, pfnR3ShwModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1261	DECLR3CALLBACKMEMBER(int, pfnR3ShwGetPDEByIndex,(PVM pVM, uint32_t iPD, PX86PDEPAE pPde));
1262	DECLR3CALLBACKMEMBER(int, pfnR3ShwSetPDEByIndex,(PVM pVM, uint32_t iPD, X86PDEPAE Pde));
1263	DECLR3CALLBACKMEMBER(int, pfnR3ShwModifyPDEByIndex,(PVM pVM, uint32_t iPD, uint64_t fFlags, uint64_t fMask));
1264
1265	DECLGCCALLBACKMEMBER(int, pfnGCShwGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTHCPHYS pHCPhys));
1266	DECLGCCALLBACKMEMBER(int, pfnGCShwModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1267	DECLGCCALLBACKMEMBER(int, pfnGCShwGetPDEByIndex,(PVM pVM, uint32_t iPD, PX86PDEPAE pPde));
1268	DECLGCCALLBACKMEMBER(int, pfnGCShwSetPDEByIndex,(PVM pVM, uint32_t iPD, X86PDEPAE Pde));
1269	DECLGCCALLBACKMEMBER(int, pfnGCShwModifyPDEByIndex,(PVM pVM, uint32_t iPD, uint64_t fFlags, uint64_t fMask));
1270	#if GC_ARCH_BITS == 32 && HC_ARCH_BITS == 64
1271	RTGCPTR alignment0; /*< structure size alignment. /
1272	#endif
1273
1274	DECLR0CALLBACKMEMBER(int, pfnR0ShwGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTHCPHYS pHCPhys));
1275	DECLR0CALLBACKMEMBER(int, pfnR0ShwModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1276	DECLR0CALLBACKMEMBER(int, pfnR0ShwGetPDEByIndex,(PVM pVM, uint32_t iPD, PX86PDEPAE pPde));
1277	DECLR0CALLBACKMEMBER(int, pfnR0ShwSetPDEByIndex,(PVM pVM, uint32_t iPD, X86PDEPAE Pde));
1278	DECLR0CALLBACKMEMBER(int, pfnR0ShwModifyPDEByIndex,(PVM pVM, uint32_t iPD, uint64_t fFlags, uint64_t fMask));
1279
1280	/** @} */
1281
1282	/** @name Function pointers for Guest paging.
1283	* @{
1284	*/
1285	DECLR3CALLBACKMEMBER(int, pfnR3GstRelocate,(PVM pVM, RTGCUINTPTR offDelta));
1286	DECLR3CALLBACKMEMBER(int, pfnR3GstExit,(PVM pVM));
1287	DECLR3CALLBACKMEMBER(int, pfnR3GstGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTGCPHYS pGCPhys));
1288	DECLR3CALLBACKMEMBER(int, pfnR3GstModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1289	DECLR3CALLBACKMEMBER(int, pfnR3GstGetPDE,(PVM pVM, RTGCUINTPTR GCPtr, PX86PDEPAE pPde));
1290	DECLR3CALLBACKMEMBER(int, pfnR3GstMonitorCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1291	DECLR3CALLBACKMEMBER(int, pfnR3GstUnmonitorCR3,(PVM pVM));
1292	DECLR3CALLBACKMEMBER(int, pfnR3GstMapCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1293	DECLR3CALLBACKMEMBER(int, pfnR3GstUnmapCR3,(PVM pVM));
1294	HCPTRTYPE(PFNPGMR3PHYSHANDLER) pfnHCGstWriteHandlerCR3;
1295	HCPTRTYPE(const char *) pszHCGstWriteHandlerCR3;
1296
1297	DECLGCCALLBACKMEMBER(int, pfnGCGstGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTGCPHYS pGCPhys));
1298	DECLGCCALLBACKMEMBER(int, pfnGCGstModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1299	DECLGCCALLBACKMEMBER(int, pfnGCGstGetPDE,(PVM pVM, RTGCUINTPTR GCPtr, PX86PDEPAE pPde));
1300	DECLGCCALLBACKMEMBER(int, pfnGCGstMonitorCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1301	DECLGCCALLBACKMEMBER(int, pfnGCGstUnmonitorCR3,(PVM pVM));
1302	DECLGCCALLBACKMEMBER(int, pfnGCGstMapCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1303	DECLGCCALLBACKMEMBER(int, pfnGCGstUnmapCR3,(PVM pVM));
1304	GCPTRTYPE(PFNPGMGCPHYSHANDLER) pfnGCGstWriteHandlerCR3;
1305
1306	DECLR0CALLBACKMEMBER(int, pfnR0GstGetPage,(PVM pVM, RTGCUINTPTR GCPtr, uint64_t *pfFlags, PRTGCPHYS pGCPhys));
1307	DECLR0CALLBACKMEMBER(int, pfnR0GstModifyPage,(PVM pVM, RTGCUINTPTR GCPtr, size_t cbPages, uint64_t fFlags, uint64_t fMask));
1308	DECLR0CALLBACKMEMBER(int, pfnR0GstGetPDE,(PVM pVM, RTGCUINTPTR GCPtr, PX86PDEPAE pPde));
1309	DECLR0CALLBACKMEMBER(int, pfnR0GstMonitorCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1310	DECLR0CALLBACKMEMBER(int, pfnR0GstUnmonitorCR3,(PVM pVM));
1311	DECLR0CALLBACKMEMBER(int, pfnR0GstMapCR3,(PVM pVM, RTGCPHYS GCPhysCR3));
1312	DECLR0CALLBACKMEMBER(int, pfnR0GstUnmapCR3,(PVM pVM));
1313	R0PTRTYPE(PFNPGMR0PHYSHANDLER) pfnR0GstWriteHandlerCR3;
1314	/** @} */
1315
1316	/** @name Function pointers for Both Shadow and Guest paging.
1317	* @{
1318	*/
1319	DECLR3CALLBACKMEMBER(int, pfnR3BthRelocate,(PVM pVM, RTGCUINTPTR offDelta));
1320	DECLR3CALLBACKMEMBER(int, pfnR3BthTrap0eHandler,(PVM pVM, RTGCUINT uErr, PCPUMCTXCORE pRegFrame, RTGCPTR pvFault));
1321	DECLR3CALLBACKMEMBER(int, pfnR3BthInvalidatePage,(PVM pVM, RTGCPTR GCPtrPage));
1322	DECLR3CALLBACKMEMBER(int, pfnR3BthSyncCR3,(PVM pVM, uint32_t cr0, uint32_t cr3, uint32_t cr4, bool fGlobal));
1323	DECLR3CALLBACKMEMBER(int, pfnR3BthSyncPage,(PVM pVM, VBOXPDE PdeSrc, RTGCUINTPTR GCPtrPage, unsigned cPages, unsigned uError));
1324	DECLR3CALLBACKMEMBER(int, pfnR3BthPrefetchPage,(PVM pVM, RTGCUINTPTR GCPtrPage));
1325	DECLR3CALLBACKMEMBER(int, pfnR3BthVerifyAccessSyncPage,(PVM pVM, RTGCUINTPTR GCPtrPage, unsigned fFlags, unsigned uError));
1326	DECLR3CALLBACKMEMBER(unsigned, pfnR3BthAssertCR3,(PVM pVM, uint32_t cr3, uint32_t cr4, RTGCUINTPTR GCPtr, RTGCUINTPTR cb));
1327
1328	DECLR0CALLBACKMEMBER(int, pfnR0BthTrap0eHandler,(PVM pVM, RTGCUINT uErr, PCPUMCTXCORE pRegFrame, RTGCPTR pvFault));
1329	DECLR0CALLBACKMEMBER(int, pfnR0BthInvalidatePage,(PVM pVM, RTGCPTR GCPtrPage));
1330	DECLR0CALLBACKMEMBER(int, pfnR0BthSyncCR3,(PVM pVM, uint32_t cr0, uint32_t cr3, uint32_t cr4, bool fGlobal));
1331	DECLR0CALLBACKMEMBER(int, pfnR0BthSyncPage,(PVM pVM, VBOXPDE PdeSrc, RTGCUINTPTR GCPtrPage, unsigned cPages, unsigned uError));
1332	DECLR0CALLBACKMEMBER(int, pfnR0BthPrefetchPage,(PVM pVM, RTGCUINTPTR GCPtrPage));
1333	DECLR0CALLBACKMEMBER(int, pfnR0BthVerifyAccessSyncPage,(PVM pVM, RTGCUINTPTR GCPtrPage, unsigned fFlags, unsigned uError));
1334	DECLR0CALLBACKMEMBER(unsigned, pfnR0BthAssertCR3,(PVM pVM, uint32_t cr3, uint32_t cr4, RTGCUINTPTR GCPtr, RTGCUINTPTR cb));
1335
1336	DECLGCCALLBACKMEMBER(int, pfnGCBthTrap0eHandler,(PVM pVM, RTGCUINT uErr, PCPUMCTXCORE pRegFrame, RTGCPTR pvFault));
1337	DECLGCCALLBACKMEMBER(int, pfnGCBthInvalidatePage,(PVM pVM, RTGCPTR GCPtrPage));
1338	DECLGCCALLBACKMEMBER(int, pfnGCBthSyncCR3,(PVM pVM, uint32_t cr0, uint32_t cr3, uint32_t cr4, bool fGlobal));
1339	DECLGCCALLBACKMEMBER(int, pfnGCBthSyncPage,(PVM pVM, VBOXPDE PdeSrc, RTGCUINTPTR GCPtrPage, unsigned cPages, unsigned uError));
1340	DECLGCCALLBACKMEMBER(int, pfnGCBthPrefetchPage,(PVM pVM, RTGCUINTPTR GCPtrPage));
1341	DECLGCCALLBACKMEMBER(int, pfnGCBthVerifyAccessSyncPage,(PVM pVM, RTGCUINTPTR GCPtrPage, unsigned fFlags, unsigned uError));
1342	DECLGCCALLBACKMEMBER(unsigned, pfnGCBthAssertCR3,(PVM pVM, uint32_t cr3, uint32_t cr4, RTGCUINTPTR GCPtr, RTGCUINTPTR cb));
1343	#if GC_ARCH_BITS == 32 && HC_ARCH_BITS == 64
1344	RTGCPTR alignment2; /*< structure size alignment. /
1345	#endif
1346	/** @} */
1347
1348	/** Pointer to SHW+GST mode data (function pointers).
1349	* The index into this table is made up from */
1350	R3PTRTYPE(PPGMMODEDATA) paModeData;
1351
1352
1353	/** Pointer to the list of RAM ranges (Phys GC -> Phys HC conversion) - for HC.
1354	* This is sorted by physical address and contains no overlaps.
1355	* The memory locks and other conversions are managed by MM at the moment.
1356	*/
1357	HCPTRTYPE(PPGMRAMRANGE) pRamRangesHC;
1358	/** Pointer to the list of RAM ranges (Phys GC -> Phys HC conversion) - for GC.
1359	* This is sorted by physical address and contains no overlaps.
1360	* The memory locks and other conversions are managed by MM at the moment.
1361	*/
1362	GCPTRTYPE(PPGMRAMRANGE) pRamRangesGC;
1363	/** The configured RAM size. */
1364	RTUINT cbRamSize;
1365
1366	/** PGM offset based trees - HC Ptr. */
1367	HCPTRTYPE(PPGMTREES) pTreesHC;
1368	/** PGM offset based trees - GC Ptr. */
1369	GCPTRTYPE(PPGMTREES) pTreesGC;
1370
1371	/** Linked list of GC mappings - for GC.
1372	* The list is sorted ascending on address.
1373	*/
1374	GCPTRTYPE(PPGMMAPPING) pMappingsGC;
1375	/** Linked list of GC mappings - for HC.
1376	* The list is sorted ascending on address.
1377	*/
1378	R3PTRTYPE(PPGMMAPPING) pMappingsR3;
1379	/** Linked list of GC mappings - for R0.
1380	* The list is sorted ascending on address.
1381	*/
1382	R0PTRTYPE(PPGMMAPPING) pMappingsR0;
1383
1384	/** If set no conflict checks are required. (boolean) */
1385	bool fMappingsFixed;
1386	/** If set, then no mappings are put into the shadow page table. (boolean) */
1387	bool fDisableMappings;
1388	/** Size of fixed mapping */
1389	uint32_t cbMappingFixed;
1390	/** Base address (GC) of fixed mapping */
1391	RTGCPTR GCPtrMappingFixed;
1392	#if HC_ARCH_BITS == 64 && GC_ARCH_BITS == 32
1393	uint32_t u32Padding0; /*< alignment padding. /
1394	#endif
1395
1396
1397	/** @name Intermediate Context
1398	* @{ */
1399	/** Pointer to the intermediate page directory - Normal. */
1400	HCPTRTYPE(PX86PD) pInterPD;
1401	/** Pointer to the intermedate page tables - Normal.
1402	* There are two page tables, one for the identity mapping and one for
1403	* the host context mapping (of the core code). */
1404	HCPTRTYPE(PX86PT) apInterPTs[2];
1405	/** Pointer to the intermedate page tables - PAE. */
1406	HCPTRTYPE(PX86PTPAE) apInterPaePTs[2];
1407	/** Pointer to the intermedate page directory - PAE. */
1408	HCPTRTYPE(PX86PDPAE) apInterPaePDs[4];
1409	/** Pointer to the intermedate page directory - PAE. */
1410	HCPTRTYPE(PX86PDPTR) pInterPaePDPTR;
1411	/** Pointer to the intermedate page-map level 4 - AMD64. */
1412	HCPTRTYPE(PX86PML4) pInterPaePML4;
1413	/** Pointer to the intermedate page directory - AMD64. */
1414	HCPTRTYPE(PX86PDPTR) pInterPaePDPTR64;
1415	/** The Physical Address (HC) of the intermediate Page Directory - Normal. */
1416	RTHCPHYS HCPhysInterPD;
1417	/** The Physical Address (HC) of the intermediate Page Directory Pointer Table - PAE. */
1418	RTHCPHYS HCPhysInterPaePDPTR;
1419	/** The Physical Address (HC) of the intermediate Page Map Level 4 table - AMD64. */
1420	RTHCPHYS HCPhysInterPaePML4;
1421	/** @} */
1422
1423	/** Base address of the dynamic page mapping area.
1424	* The array is MM_HYPER_DYNAMIC_SIZE bytes big.
1425	*/
1426	GCPTRTYPE(uint8_t *) pbDynPageMapBaseGC;
1427	/** The index of the last entry used in the dynamic page mapping area. */
1428	RTUINT iDynPageMapLast;
1429	/** Cache containing the last entries in the dynamic page mapping area.
1430	* The cache size is covering half of the mapping area. */
1431	RTHCPHYS aHCPhysDynPageMapCache[MM_HYPER_DYNAMIC_SIZE >> (PAGE_SHIFT + 1)];
1432
1433	/** A20 gate mask.
1434	* Our current approach to A20 emulation is to let REM do it and don't bother
1435	* anywhere else. The interesting Guests will be operating with it enabled anyway.
1436	* But whould need arrise, we'll subject physical addresses to this mask. */
1437	RTGCPHYS GCPhysA20Mask;
1438	/** A20 gate state - boolean! */
1439	RTUINT fA20Enabled;
1440
1441	/** What needs syncing (PGM_SYNC_*).
1442	* This is used to queue operations for PGMSyncCR3, PGMInvalidatePage,
1443	* PGMFlushTLB, and PGMR3Load. */
1444	RTUINT fSyncFlags;
1445
1446	#if HC_ARCH_BITS == 64 && GC_ARCH_BITS == 32
1447	RTUINT uPadding3; /*< alignment padding. /
1448	#endif
1449	/** PGM critical section.
1450	* This protects the physical & virtual access handlers, ram ranges,
1451	* and the page flag updating (some of it anyway).
1452	*/
1453	PDMCRITSECT CritSect;
1454
1455	/** Shadow Page Pool - HC Ptr. */
1456	HCPTRTYPE(PPGMPOOL) pPoolHC;
1457	/** Shadow Page Pool - GC Ptr. */
1458	GCPTRTYPE(PPGMPOOL) pPoolGC;
1459
1460	/** Flush the cache on the next access. */
1461	bool fPhysCacheFlushPending;
1462	/** @todo r=bird: Fix member names!*/
1463	/** PGMPhysRead cache */
1464	PGMPHYSCACHE pgmphysreadcache;
1465	/** PGMPhysWrite cache */
1466	PGMPHYSCACHE pgmphyswritecache;
1467
1468	/** @name Release Statistics
1469	* @{ */
1470	/** The number of times the guest has switched mode since last reset or statistics reset. */
1471	STAMCOUNTER cGuestModeChanges;
1472	/** @} */
1473
1474	#ifdef VBOX_WITH_STATISTICS
1475	/** GC: Which statistic this \#PF should be attributed to. */
1476	GCPTRTYPE(PSTAMPROFILE) pStatTrap0eAttributionGC;
1477	RTGCPTR padding0;
1478	/** HC: Which statistic this \#PF should be attributed to. */
1479	HCPTRTYPE(PSTAMPROFILE) pStatTrap0eAttributionHC;
1480	RTHCPTR padding1;
1481	STAMPROFILE StatGCTrap0e; /*< GC: PGMGCTrap0eHandler() profiling. /
1482	STAMPROFILE StatTrap0eCSAM; /*< Profiling of the Trap0eHandler body when the cause is CSAM. /
1483	STAMPROFILE StatTrap0eDirtyAndAccessedBits; /*< Profiling of the Trap0eHandler body when the cause is dirty and/or accessed bit emulation. /
1484	STAMPROFILE StatTrap0eGuestTrap; /*< Profiling of the Trap0eHandler body when the cause is a guest trap. /
1485	STAMPROFILE StatTrap0eHndPhys; /*< Profiling of the Trap0eHandler body when the cause is a physical handler. /
1486	STAMPROFILE StatTrap0eHndVirt; /*< Profiling of the Trap0eHandler body when the cause is a virtual handler. /
1487	STAMPROFILE StatTrap0eHndUnhandled; /*< Profiling of the Trap0eHandler body when the cause is access outside the monitored areas of a monitored page. /
1488	STAMPROFILE StatTrap0eMisc; /*< Profiling of the Trap0eHandler body when the cause is not known. /
1489	STAMPROFILE StatTrap0eOutOfSync; /*< Profiling of the Trap0eHandler body when the cause is an out-of-sync page. /
1490	STAMPROFILE StatTrap0eOutOfSyncHndPhys; /*< Profiling of the Trap0eHandler body when the cause is an out-of-sync physical handler page. /
1491	STAMPROFILE StatTrap0eOutOfSyncHndVirt; /*< Profiling of the Trap0eHandler body when the cause is an out-of-sync virtual handler page. /
1492	STAMPROFILE StatTrap0eOutOfSyncObsHnd; /*< Profiling of the Trap0eHandler body when the cause is an obsolete handler page. /
1493	STAMPROFILE StatTrap0eSyncPT; /*< Profiling of the Trap0eHandler body when the cause is lazy syncing of a PT. /
1494
1495	STAMCOUNTER StatTrap0eMapHandler; /*< Number of traps due to access handlers in mappings. /
1496	STAMCOUNTER StatGCTrap0eConflicts; /*< GC: The number of times \#PF was caused by an undetected conflict. /
1497
1498	STAMCOUNTER StatGCTrap0eUSNotPresentRead;
1499	STAMCOUNTER StatGCTrap0eUSNotPresentWrite;
1500	STAMCOUNTER StatGCTrap0eUSWrite;
1501	STAMCOUNTER StatGCTrap0eUSReserved;
1502	STAMCOUNTER StatGCTrap0eUSRead;
1503
1504	STAMCOUNTER StatGCTrap0eSVNotPresentRead;
1505	STAMCOUNTER StatGCTrap0eSVNotPresentWrite;
1506	STAMCOUNTER StatGCTrap0eSVWrite;
1507	STAMCOUNTER StatGCTrap0eSVReserved;
1508
1509	STAMCOUNTER StatGCTrap0eUnhandled;
1510	STAMCOUNTER StatGCTrap0eMap;
1511
1512	/** GC: PGMSyncPT() profiling. */
1513	STAMPROFILE StatGCSyncPT;
1514	/** GC: The number of times PGMSyncPT() needed to allocate page tables. */
1515	STAMCOUNTER StatGCSyncPTAlloc;
1516	/** GC: The number of times PGMSyncPT() detected conflicts. */
1517	STAMCOUNTER StatGCSyncPTConflict;
1518	/** GC: The number of times PGMSyncPT() failed. */
1519	STAMCOUNTER StatGCSyncPTFailed;
1520	/** GC: PGMGCInvalidatePage() profiling. */
1521	STAMPROFILE StatGCInvalidatePage;
1522	/** GC: The number of times PGMGCInvalidatePage() was called for a 4KB page. */
1523	STAMCOUNTER StatGCInvalidatePage4KBPages;
1524	/** GC: The number of times PGMGCInvalidatePage() was called for a 4MB page. */
1525	STAMCOUNTER StatGCInvalidatePage4MBPages;
1526	/** GC: The number of times PGMGCInvalidatePage() skipped a 4MB page. */
1527	STAMCOUNTER StatGCInvalidatePage4MBPagesSkip;
1528	/** GC: The number of times PGMGCInvalidatePage() was called for a not accessed page directory. */
1529	STAMCOUNTER StatGCInvalidatePagePDNAs;
1530	/** GC: The number of times PGMGCInvalidatePage() was called for a not present page directory. */
1531	STAMCOUNTER StatGCInvalidatePagePDNPs;
1532	/** GC: The number of times PGMGCInvalidatePage() was called for a page directory containing mappings (no conflict). */
1533	STAMCOUNTER StatGCInvalidatePagePDMappings;
1534	/** GC: The number of times PGMGCInvalidatePage() was called for an out of sync page directory. */
1535	STAMCOUNTER StatGCInvalidatePagePDOutOfSync;
1536	/** HC: The number of times PGMGCInvalidatePage() was skipped due to not present shw or pending pending SyncCR3. */
1537	STAMCOUNTER StatGCInvalidatePageSkipped;
1538	/** GC: The number of times user page is out of sync was detected in GC. */
1539	STAMCOUNTER StatGCPageOutOfSyncUser;
1540	/** GC: The number of times supervisor page is out of sync was detected in GC. */
1541	STAMCOUNTER StatGCPageOutOfSyncSupervisor;
1542	/** GC: The number of dynamic page mapping cache hits */
1543	STAMCOUNTER StatDynMapCacheMisses;
1544	/** GC: The number of dynamic page mapping cache misses */
1545	STAMCOUNTER StatDynMapCacheHits;
1546	/** GC: The number of times pgmGCGuestPDWriteHandler() was successfully called. */
1547	STAMCOUNTER StatGCGuestCR3WriteHandled;
1548	/** GC: The number of times pgmGCGuestPDWriteHandler() was called and we had to fall back to the recompiler. */
1549	STAMCOUNTER StatGCGuestCR3WriteUnhandled;
1550	/** GC: The number of times pgmGCGuestPDWriteHandler() was called and a conflict was detected. */
1551	STAMCOUNTER StatGCGuestCR3WriteConflict;
1552	/** GC: Number of out-of-sync handled pages. */
1553	STAMCOUNTER StatHandlersOutOfSync;
1554	/** GC: Number of traps due to physical access handlers. */
1555	STAMCOUNTER StatHandlersPhysical;
1556	/** GC: Number of traps due to virtual access handlers. */
1557	STAMCOUNTER StatHandlersVirtual;
1558	/** GC: Number of traps due to virtual access handlers found by physical address. */
1559	STAMCOUNTER StatHandlersVirtualByPhys;
1560	/** GC: Number of traps due to virtual access handlers found by virtual address (without proper physical flags). */
1561	STAMCOUNTER StatHandlersVirtualUnmarked;
1562	/** GC: Number of traps due to access outside range of monitored page(s). */
1563	STAMCOUNTER StatHandlersUnhandled;
1564
1565	/** GC: The number of times pgmGCGuestROMWriteHandler() was successfully called. */
1566	STAMCOUNTER StatGCGuestROMWriteHandled;
1567	/** GC: The number of times pgmGCGuestROMWriteHandler() was called and we had to fall back to the recompiler */
1568	STAMCOUNTER StatGCGuestROMWriteUnhandled;
1569
1570	/** HC: PGMR3InvalidatePage() profiling. */
1571	STAMPROFILE StatHCInvalidatePage;
1572	/** HC: The number of times PGMR3InvalidatePage() was called for a 4KB page. */
1573	STAMCOUNTER StatHCInvalidatePage4KBPages;
1574	/** HC: The number of times PGMR3InvalidatePage() was called for a 4MB page. */
1575	STAMCOUNTER StatHCInvalidatePage4MBPages;
1576	/** HC: The number of times PGMR3InvalidatePage() skipped a 4MB page. */
1577	STAMCOUNTER StatHCInvalidatePage4MBPagesSkip;
1578	/** HC: The number of times PGMR3InvalidatePage() was called for a not accessed page directory. */
1579	STAMCOUNTER StatHCInvalidatePagePDNAs;
1580	/** HC: The number of times PGMR3InvalidatePage() was called for a not present page directory. */
1581	STAMCOUNTER StatHCInvalidatePagePDNPs;
1582	/** HC: The number of times PGMR3InvalidatePage() was called for a page directory containing mappings (no conflict). */
1583	STAMCOUNTER StatHCInvalidatePagePDMappings;
1584	/** HC: The number of times PGMGCInvalidatePage() was called for an out of sync page directory. */
1585	STAMCOUNTER StatHCInvalidatePagePDOutOfSync;
1586	/** HC: The number of times PGMR3InvalidatePage() was skipped due to not present shw or pending pending SyncCR3. */
1587	STAMCOUNTER StatHCInvalidatePageSkipped;
1588	/** HC: PGMR3SyncPT() profiling. */
1589	STAMPROFILE StatHCSyncPT;
1590	/** HC: pgmr3SyncPTResolveConflict() profiling (includes the entire relocation). */
1591	STAMPROFILE StatHCResolveConflict;
1592	/** HC: Number of times PGMR3CheckMappingConflicts() detected a conflict. */
1593	STAMCOUNTER StatHCDetectedConflicts;
1594	/** HC: The total number of times pgmHCGuestPDWriteHandler() was called. */
1595	STAMCOUNTER StatHCGuestPDWrite;
1596	/** HC: The number of times pgmHCGuestPDWriteHandler() detected a conflict */
1597	STAMCOUNTER StatHCGuestPDWriteConflict;
1598
1599	/** HC: The number of pages marked not present for accessed bit emulation. */
1600	STAMCOUNTER StatHCAccessedPage;
1601	/** HC: The number of pages marked read-only for dirty bit tracking. */
1602	STAMCOUNTER StatHCDirtyPage;
1603	/** HC: The number of pages marked read-only for dirty bit tracking. */
1604	STAMCOUNTER StatHCDirtyPageBig;
1605	/** HC: The number of traps generated for dirty bit tracking. */
1606	STAMCOUNTER StatHCDirtyPageTrap;
1607	/** HC: The number of pages already dirty or readonly. */
1608	STAMCOUNTER StatHCDirtyPageSkipped;
1609
1610	/** GC: The number of pages marked not present for accessed bit emulation. */
1611	STAMCOUNTER StatGCAccessedPage;
1612	/** GC: The number of pages marked read-only for dirty bit tracking. */
1613	STAMCOUNTER StatGCDirtyPage;
1614	/** GC: The number of pages marked read-only for dirty bit tracking. */
1615	STAMCOUNTER StatGCDirtyPageBig;
1616	/** GC: The number of traps generated for dirty bit tracking. */
1617	STAMCOUNTER StatGCDirtyPageTrap;
1618	/** GC: The number of pages already dirty or readonly. */
1619	STAMCOUNTER StatGCDirtyPageSkipped;
1620	/** GC: The number of pages marked dirty because of write accesses. */
1621	STAMCOUNTER StatGCDirtiedPage;
1622	/** GC: The number of pages already marked dirty because of write accesses. */
1623	STAMCOUNTER StatGCPageAlreadyDirty;
1624	/** GC: The number of real pages faults during dirty bit tracking. */
1625	STAMCOUNTER StatGCDirtyTrackRealPF;
1626
1627	/** GC: Profiling of the PGMTrackDirtyBit() body */
1628	STAMPROFILE StatGCDirtyBitTracking;
1629	/** HC: Profiling of the PGMTrackDirtyBit() body */
1630	STAMPROFILE StatHCDirtyBitTracking;
1631
1632	/** GC: Profiling of the PGMGstModifyPage() body */
1633	STAMPROFILE StatGCGstModifyPage;
1634	/** HC: Profiling of the PGMGstModifyPage() body */
1635	STAMPROFILE StatHCGstModifyPage;
1636
1637	/** GC: The number of time we've marked a PD not present from SyncPage to virtualize the accessed bit. */
1638	STAMCOUNTER StatGCSyncPagePDNAs;
1639	/** GC: The number of time we've encountered an out-of-sync PD in SyncPage. */
1640	STAMCOUNTER StatGCSyncPagePDOutOfSync;
1641	/** HC: The number of time we've marked a PD not present from SyncPage to virtualize the accessed bit. */
1642	STAMCOUNTER StatHCSyncPagePDNAs;
1643	/** HC: The number of time we've encountered an out-of-sync PD in SyncPage. */
1644	STAMCOUNTER StatHCSyncPagePDOutOfSync;
1645
1646	STAMCOUNTER StatSynPT4kGC;
1647	STAMCOUNTER StatSynPT4kHC;
1648	STAMCOUNTER StatSynPT4MGC;
1649	STAMCOUNTER StatSynPT4MHC;
1650
1651	/** Profiling of the PGMFlushTLB() body. */
1652	STAMPROFILE StatFlushTLB;
1653	/** The number of times PGMFlushTLB was called with a new CR3, non-global. (switch) */
1654	STAMCOUNTER StatFlushTLBNewCR3;
1655	/** The number of times PGMFlushTLB was called with a new CR3, global. (switch) */
1656	STAMCOUNTER StatFlushTLBNewCR3Global;
1657	/** The number of times PGMFlushTLB was called with the same CR3, non-global. (flush) */
1658	STAMCOUNTER StatFlushTLBSameCR3;
1659	/** The number of times PGMFlushTLB was called with the same CR3, global. (flush) */
1660	STAMCOUNTER StatFlushTLBSameCR3Global;
1661
1662	STAMPROFILE StatGCSyncCR3; /*< GC: PGMSyncCR3() profiling. /
1663	STAMPROFILE StatGCSyncCR3Handlers; /*< GC: Profiling of the PGMSyncCR3() update handler section. /
1664	STAMPROFILE StatGCSyncCR3HandlerVirtualReset; /*< GC: Profiling of the virtual handler resets. /
1665	STAMPROFILE StatGCSyncCR3HandlerVirtualUpdate; /*< GC: Profiling of the virtual handler updates. /
1666	STAMCOUNTER StatGCSyncCR3Global; /*< GC: The number of global CR3 syncs. /
1667	STAMCOUNTER StatGCSyncCR3NotGlobal; /*< GC: The number of non-global CR3 syncs. /
1668	STAMCOUNTER StatGCSyncCR3DstFreed; /*< GC: The number of times we've had to free a shadow entry. /
1669	STAMCOUNTER StatGCSyncCR3DstFreedSrcNP; /*< GC: The number of times we've had to free a shadow entry for which the source entry was not present. /
1670	STAMCOUNTER StatGCSyncCR3DstNotPresent; /*< GC: The number of times we've encountered a not present shadow entry for a present guest entry. /
1671	STAMCOUNTER StatGCSyncCR3DstSkippedGlobalPD; /*< GC: The number of times a global page directory wasn't flushed. /
1672	STAMCOUNTER StatGCSyncCR3DstSkippedGlobalPT; /*< GC: The number of times a page table with only global entries wasn't flushed. /
1673	STAMCOUNTER StatGCSyncCR3DstCacheHit; /*< GC: The number of times we got some kind of cache hit on a page table. /
1674
1675	STAMPROFILE StatHCSyncCR3; /*< HC: PGMSyncCR3() profiling. /
1676	STAMPROFILE StatHCSyncCR3Handlers; /*< HC: Profiling of the PGMSyncCR3() update handler section. /
1677	STAMPROFILE StatHCSyncCR3HandlerVirtualReset; /*< HC: Profiling of the virtual handler resets. /
1678	STAMPROFILE StatHCSyncCR3HandlerVirtualUpdate; /*< HC: Profiling of the virtual handler updates. /
1679	STAMCOUNTER StatHCSyncCR3Global; /*< HC: The number of global CR3 syncs. /
1680	STAMCOUNTER StatHCSyncCR3NotGlobal; /*< HC: The number of non-global CR3 syncs. /
1681	STAMCOUNTER StatHCSyncCR3DstFreed; /*< HC: The number of times we've had to free a shadow entry. /
1682	STAMCOUNTER StatHCSyncCR3DstFreedSrcNP; /*< HC: The number of times we've had to free a shadow entry for which the source entry was not present. /
1683	STAMCOUNTER StatHCSyncCR3DstNotPresent; /*< HC: The number of times we've encountered a not present shadow entry for a present guest entry. /
1684	STAMCOUNTER StatHCSyncCR3DstSkippedGlobalPD; /*< HC: The number of times a global page directory wasn't flushed. /
1685	STAMCOUNTER StatHCSyncCR3DstSkippedGlobalPT; /*< HC: The number of times a page table with only global entries wasn't flushed. /
1686	STAMCOUNTER StatHCSyncCR3DstCacheHit; /*< HC: The number of times we got some kind of cache hit on a page table. /
1687
1688	/** GC: Profiling of pgmHandlerVirtualFindByPhysAddr. */
1689	STAMPROFILE StatVirtHandleSearchByPhysGC;
1690	/** HC: Profiling of pgmHandlerVirtualFindByPhysAddr. */
1691	STAMPROFILE StatVirtHandleSearchByPhysHC;
1692	/** HC: The number of times PGMR3HandlerPhysicalReset is called. */
1693	STAMCOUNTER StatHandlePhysicalReset;
1694
1695	STAMPROFILE StatCheckPageFault;
1696	STAMPROFILE StatLazySyncPT;
1697	STAMPROFILE StatMapping;
1698	STAMPROFILE StatOutOfSync;
1699	STAMPROFILE StatHandlers;
1700	STAMPROFILE StatEIPHandlers;
1701	STAMPROFILE StatHCPrefetch;
1702
1703	# ifdef PGMPOOL_WITH_GCPHYS_TRACKING
1704	/** The number of first time shadowings. */
1705	STAMCOUNTER StatTrackVirgin;
1706	/** The number of times switching to cRef2, i.e. the page is being shadowed by two PTs. */
1707	STAMCOUNTER StatTrackAliased;
1708	/** The number of times we're tracking using cRef2. */
1709	STAMCOUNTER StatTrackAliasedMany;
1710	/** The number of times we're hitting pages which has overflowed cRef2. */
1711	STAMCOUNTER StatTrackAliasedLots;
1712	/** The number of times the extent list grows to long. */
1713	STAMCOUNTER StatTrackOverflows;
1714	/** Profiling of SyncPageWorkerTrackDeref (expensive). */
1715	STAMPROFILE StatTrackDeref;
1716	# endif
1717
1718	/** Allocated mbs of guest ram */
1719	STAMCOUNTER StatDynRamTotal;
1720	/** Nr of pgmr3PhysGrowRange calls. */
1721	STAMCOUNTER StatDynRamGrow;
1722
1723	STAMCOUNTER StatGCTrap0ePD[X86_PG_ENTRIES];
1724	STAMCOUNTER StatGCSyncPtPD[X86_PG_ENTRIES];
1725	STAMCOUNTER StatGCSyncPagePD[X86_PG_ENTRIES];
1726	#endif
1727	} PGM, *PPGM;
1728
1729
1730	/** @name PGM::fSyncFlags Flags
1731	* @{
1732	*/
1733	/** Updates the MM_RAM_FLAGS_VIRTUAL_HANDLER page bit. */
1734	#define PGM_SYNC_UPDATE_PAGE_BIT_VIRTUAL BIT(0)
1735	/** Always sync CR3. */
1736	#define PGM_SYNC_ALWAYS BIT(1)
1737	/** Check monitoring on next CR3 (re)load and invalidate page. */
1738	#define PGM_SYNC_MONITOR_CR3 BIT(2)
1739	/** Clear the page pool (a light weight flush). */
1740	#define PGM_SYNC_CLEAR_PGM_POOL BIT(8)
1741	/** @} */
1742
1743
1744	__BEGIN_DECLS
1745
1746	PGMGCDECL(int) pgmGCGuestPDWriteHandler(PVM pVM, RTGCUINT uErrorCode, PCPUMCTXCORE pRegFrame, void pvFault, RTGCPHYS GCPhysFault, void pvUser);
1747	PGMDECL(int) pgmGuestROMWriteHandler(PVM pVM, RTGCUINT uErrorCode, PCPUMCTXCORE pRegFrame, void pvFault, RTGCPHYS GCPhysFault, void pvUser);
1748	PGMGCDECL(int) pgmCachePTWriteGC(PVM pVM, RTGCUINT uErrorCode, PCPUMCTXCORE pRegFrame, RTGCPTR pvFault, RTGCPHYS GCPhysFault, void *pvUser);
1749	int pgmR3SyncPTResolveConflict(PVM pVM, PPGMMAPPING pMapping, PVBOXPD pPDSrc, int iPDOld);
1750	PPGMMAPPING pgmGetMapping(PVM pVM, RTGCPTR GCPtr);
1751	void pgmR3MapRelocate(PVM pVM, PPGMMAPPING pMapping, int iPDOld, int iPDNew);
1752	int pgmR3ChangeMode(PVM pVM, PGMMODE enmGuestMode);
1753	int pgmLock(PVM pVM);
1754	void pgmUnlock(PVM pVM);
1755
1756	void pgmR3HandlerPhysicalUpdateAll(PVM pVM);
1757	int pgmHandlerVirtualFindByPhysAddr(PVM pVM, RTGCPHYS GCPhys, PPGMVIRTHANDLER ppVirt, unsigned piPage);
1758	DECLCALLBACK(int) pgmHandlerVirtualResetOne(PAVLROGCPTRNODECORE pNode, void *pvUser);
1759	#ifdef VBOX_STRICT
1760	void pgmHandlerVirtualDumpPhysPages(PVM pVM);
1761	#else
1762	# define pgmHandlerVirtualDumpPhysPages(a) do { } while (0)
1763	#endif
1764	DECLCALLBACK(void) pgmR3InfoHandlers(PVM pVM, PCDBGFINFOHLP pHlp, const char *pszArgs);
1765
1766
1767	#ifdef IN_RING3
1768	int pgmr3PhysGrowRange(PVM pVM, RTGCPHYS GCPhys);
1769
1770	int pgmR3PoolInit(PVM pVM);
1771	void pgmR3PoolRelocate(PVM pVM);
1772	void pgmR3PoolReset(PVM pVM);
1773
1774	#endif
1775	#ifdef IN_GC
1776	void *pgmGCPoolMapPage(PVM pVM, PPGMPOOLPAGE pPage);
1777	#endif
1778	int pgmPoolAlloc(PVM pVM, RTGCPHYS GCPhys, PGMPOOLKIND enmKind, uint16_t iUser, uint16_t iUserTable, PPPGMPOOLPAGE ppPage);
1779	PPGMPOOLPAGE pgmPoolGetPageByHCPhys(PVM pVM, RTHCPHYS HCPhys);
1780	void pgmPoolFree(PVM pVM, RTHCPHYS HCPhys, uint16_t iUser, uint16_t iUserTable);
1781	void pgmPoolFreeByPage(PPGMPOOL pPool, PPGMPOOLPAGE pPage, uint16_t iUser, uint16_t iUserTable);
1782	int pgmPoolFlushPage(PPGMPOOL pPool, PPGMPOOLPAGE pPage);
1783	void pgmPoolFlushAll(PVM pVM);
1784	void pgmPoolClearAll(PVM pVM);
1785	void pgmPoolTrackFlushGCPhysPT(PVM pVM, PRTHCPHYS pHCPhys, uint16_t iShw, uint16_t cRefs);
1786	void pgmPoolTrackFlushGCPhysPTs(PVM pVM, PRTHCPHYS pHCPhys, uint16_t iPhysExt);
1787	int pgmPoolTrackFlushGCPhysPTsSlow(PVM pVM, PRTHCPHYS pHCPhys);
1788	PPGMPOOLPHYSEXT pgmPoolTrackPhysExtAlloc(PVM pVM, uint16_t *piPhysExt);
1789	void pgmPoolTrackPhysExtFree(PVM pVM, uint16_t iPhysExt);
1790	void pgmPoolTrackPhysExtFreeList(PVM pVM, uint16_t iPhysExt);
1791	uint16_t pgmPoolTrackPhysExtAddref(PVM pVM, uint16_t u16, uint16_t iShwPT);
1792	void pgmPoolTrackPhysExtDerefGCPhys(PPGMPOOL pPool, PPGMPOOLPAGE pPage, PRTHCPHYS pHCPhys);
1793	#ifdef PGMPOOL_WITH_MONITORING
1794	# ifdef IN_RING3
1795	void pgmPoolMonitorChainChanging(PPGMPOOL pPool, PPGMPOOLPAGE pPage, RTGCPHYS GCPhysFault, RTHCPTR pvAddress, PDISCPUSTATE pCpu);
1796	# else
1797	void pgmPoolMonitorChainChanging(PPGMPOOL pPool, PPGMPOOLPAGE pPage, RTGCPHYS GCPhysFault, RTGCPTR pvAddress, PDISCPUSTATE pCpu);
1798	# endif
1799	int pgmPoolMonitorChainFlush(PPGMPOOL pPool, PPGMPOOLPAGE pPage);
1800	void pgmPoolMonitorModifiedInsert(PPGMPOOL pPool, PPGMPOOLPAGE pPage);
1801	void pgmPoolMonitorModifiedClearAll(PVM pVM);
1802	int pgmPoolMonitorMonitorCR3(PPGMPOOL pPool, uint16_t idxRoot, RTGCPHYS GCPhysCR3);
1803	int pgmPoolMonitorUnmonitorCR3(PPGMPOOL pPool, uint16_t idxRoot);
1804	#endif
1805
1806	__END_DECLS
1807
1808
1809	/**
1810	* Convert GC Phys to HC Phys.
1811	*
1812	* @returns VBox status.
1813	* @param pPGM PGM handle.
1814	* @param GCPhys The GC physical address.
1815	* @param pHCPhys Where to store the corresponding HC physical address.
1816	*/
1817	DECLINLINE(int) PGMRamGCPhys2HCPhys(PPGM pPGM, RTGCPHYS GCPhys, PRTHCPHYS pHCPhys)
1818	{
1819	/*
1820	* Walk range list.
1821	*/
1822	PPGMRAMRANGE pRam = CTXSUFF(pPGM->pRamRanges);
1823	while (pRam)
1824	{
1825	RTGCPHYS off = GCPhys - pRam->GCPhys;
1826	if (off < pRam->cb)
1827	{
1828	unsigned iPage = off >> PAGE_SHIFT;
1829	/* Physical chunk in dynamically allocated range not present? */
1830	if (RT_UNLIKELY(!(pRam->aHCPhys[iPage] & X86_PTE_PAE_PG_MASK)))
1831	{
1832	#ifdef IN_RING3
1833	int rc = pgmr3PhysGrowRange(PGM2VM(pPGM), GCPhys);
1834	#else
1835	int rc = CTXALLMID(VMM, CallHost)(PGM2VM(pPGM), VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
1836	#endif
1837	if (rc != VINF_SUCCESS)
1838	return rc;
1839	}
1840	*pHCPhys = (pRam->aHCPhys[iPage] & X86_PTE_PAE_PG_MASK) \| (off & PAGE_OFFSET_MASK);
1841	return VINF_SUCCESS;
1842	}
1843
1844	pRam = CTXSUFF(pRam->pNext);
1845	}
1846	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
1847	}
1848
1849
1850	/**
1851	* Convert GC Phys to HC Virt.
1852	*
1853	* @returns VBox status.
1854	* @param pPGM PGM handle.
1855	* @param GCPhys The GC physical address.
1856	* @param pHCPtr Where to store the corresponding HC virtual address.
1857	*/
1858	DECLINLINE(int) PGMRamGCPhys2HCPtr(PPGM pPGM, RTGCPHYS GCPhys, PRTHCPTR pHCPtr)
1859	{
1860	/*
1861	* Walk range list.
1862	*/
1863	PPGMRAMRANGE pRam = CTXSUFF(pPGM->pRamRanges);
1864	while (pRam)
1865	{
1866	RTGCPHYS off = GCPhys - pRam->GCPhys;
1867	if (off < pRam->cb)
1868	{
1869	if (pRam->fFlags & MM_RAM_FLAGS_DYNAMIC_ALLOC)
1870	{
1871	unsigned idx = (off >> PGM_DYNAMIC_CHUNK_SHIFT);
1872	/* Physical chunk in dynamically allocated range not present? */
1873	if (RT_UNLIKELY(!CTXSUFF(pRam->pavHCChunk)[idx]))
1874	{
1875	#ifdef IN_RING3
1876	int rc = pgmr3PhysGrowRange(PGM2VM(pPGM), GCPhys);
1877	#else
1878	int rc = CTXALLMID(VMM, CallHost)(PGM2VM(pPGM), VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
1879	#endif
1880	if (rc != VINF_SUCCESS)
1881	return rc;
1882	}
1883	*pHCPtr = (RTHCPTR)((RTHCUINTPTR)CTXSUFF(pRam->pavHCChunk)[idx] + (off & PGM_DYNAMIC_CHUNK_OFFSET_MASK));
1884	return VINF_SUCCESS;
1885	}
1886	if (pRam->pvHC)
1887	{
1888	*pHCPtr = (RTHCPTR)((RTHCUINTPTR)pRam->pvHC + off);
1889	return VINF_SUCCESS;
1890	}
1891	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
1892	}
1893
1894	pRam = CTXSUFF(pRam->pNext);
1895	}
1896	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
1897	}
1898
1899
1900	/**
1901	* Convert GC Phys to HC Virt.
1902	*
1903	* @returns VBox status.
1904	* @param PVM VM handle.
1905	* @param pRam Ram range
1906	* @param GCPhys The GC physical address.
1907	* @param pHCPtr Where to store the corresponding HC virtual address.
1908	*/
1909	DECLINLINE(int) PGMRamGCPhys2HCPtr(PVM pVM, PPGMRAMRANGE pRam, RTGCPHYS GCPhys, PRTHCPTR pHCPtr)
1910	{
1911	RTGCPHYS off = GCPhys - pRam->GCPhys;
1912	Assert(off < pRam->cb);
1913
1914	if (pRam->fFlags & MM_RAM_FLAGS_DYNAMIC_ALLOC)
1915	{
1916	unsigned idx = (off >> PGM_DYNAMIC_CHUNK_SHIFT);
1917	/* Physical chunk in dynamically allocated range not present? */
1918	if (RT_UNLIKELY(!CTXSUFF(pRam->pavHCChunk)[idx]))
1919	{
1920	#ifdef IN_RING3
1921	int rc = pgmr3PhysGrowRange(pVM, GCPhys);
1922	#else
1923	int rc = CTXALLMID(VMM, CallHost)(pVM, VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
1924	#endif
1925	if (rc != VINF_SUCCESS)
1926	return rc;
1927	}
1928	*pHCPtr = (RTHCPTR)((RTHCUINTPTR)CTXSUFF(pRam->pavHCChunk)[idx] + (off & PGM_DYNAMIC_CHUNK_OFFSET_MASK));
1929	return VINF_SUCCESS;
1930	}
1931	if (pRam->pvHC)
1932	{
1933	*pHCPtr = (RTHCPTR)((RTHCUINTPTR)pRam->pvHC + off);
1934	return VINF_SUCCESS;
1935	}
1936	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
1937	}
1938
1939
1940	/**
1941	* Convert GC Phys to HC Virt and HC Phys.
1942	*
1943	* @returns VBox status.
1944	* @param pPGM PGM handle.
1945	* @param GCPhys The GC physical address.
1946	* @param pHCPtr Where to store the corresponding HC virtual address.
1947	* @param pHCPhys Where to store the HC Physical address and its flags.
1948	*/
1949	DECLINLINE(int) PGMRamGCPhys2HCPtrAndHCPhysWithFlags(PPGM pPGM, RTGCPHYS GCPhys, PRTHCPTR pHCPtr, PRTHCPHYS pHCPhys)
1950	{
1951	/*
1952	* Walk range list.
1953	*/
1954	PPGMRAMRANGE pRam = CTXSUFF(pPGM->pRamRanges);
1955	while (pRam)
1956	{
1957	RTGCPHYS off = GCPhys - pRam->GCPhys;
1958	if (off < pRam->cb)
1959	{
1960	unsigned iPage = off >> PAGE_SHIFT;
1961	/* Physical chunk in dynamically allocated range not present? */
1962	if (RT_UNLIKELY(!(pRam->aHCPhys[iPage] & X86_PTE_PAE_PG_MASK)))
1963	{
1964	#ifdef IN_RING3
1965	int rc = pgmr3PhysGrowRange(PGM2VM(pPGM), GCPhys);
1966	#else
1967	int rc = CTXALLMID(VMM, CallHost)(PGM2VM(pPGM), VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
1968	#endif
1969	if (rc != VINF_SUCCESS)
1970	return rc;
1971	}
1972	*pHCPhys = pRam->aHCPhys[iPage];
1973
1974	if (pRam->fFlags & MM_RAM_FLAGS_DYNAMIC_ALLOC)
1975	{
1976	unsigned idx = (off >> PGM_DYNAMIC_CHUNK_SHIFT);
1977	*pHCPtr = (RTHCPTR)((RTHCUINTPTR)CTXSUFF(pRam->pavHCChunk)[idx] + (off & PGM_DYNAMIC_CHUNK_OFFSET_MASK));
1978	return VINF_SUCCESS;
1979	}
1980	if (pRam->pvHC)
1981	{
1982	*pHCPtr = (RTHCPTR)((RTHCUINTPTR)pRam->pvHC + off);
1983	return VINF_SUCCESS;
1984	}
1985	*pHCPtr = 0;
1986	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
1987	}
1988
1989	pRam = CTXSUFF(pRam->pNext);
1990	}
1991	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
1992	}
1993
1994
1995	/**
1996	* Convert GC Phys page to a page entry pointer.
1997	*
1998	* This is used by code which may have to update the flags.
1999	*
2000	* @returns VBox status.
2001	* @param pPGM PGM handle.
2002	* @param GCPhys The GC physical address.
2003	* @param ppHCPhys Where to store the pointer to the page entry.
2004	*/
2005	DECLINLINE(int) PGMRamGCPhys2PagePtr(PPGM pPGM, RTGCPHYS GCPhys, PRTHCPHYS *ppHCPhys)
2006	{
2007	/*
2008	* Walk range list.
2009	*/
2010	PPGMRAMRANGE pRam = CTXSUFF(pPGM->pRamRanges);
2011	while (pRam)
2012	{
2013	RTGCPHYS off = GCPhys - pRam->GCPhys;
2014	if (off < pRam->cb)
2015	{
2016	unsigned iPage = off >> PAGE_SHIFT;
2017	/* Physical chunk in dynamically allocated range not present? */
2018	if (RT_UNLIKELY(!(pRam->aHCPhys[iPage] & X86_PTE_PAE_PG_MASK)))
2019	{
2020	#ifdef IN_RING3
2021	int rc = pgmr3PhysGrowRange(PGM2VM(pPGM), GCPhys);
2022	#else
2023	int rc = CTXALLMID(VMM, CallHost)(PGM2VM(pPGM), VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
2024	#endif
2025	if (rc != VINF_SUCCESS)
2026	return rc;
2027	}
2028	*ppHCPhys = &pRam->aHCPhys[iPage];
2029	return VINF_SUCCESS;
2030	}
2031
2032	pRam = CTXSUFF(pRam->pNext);
2033	}
2034	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
2035	}
2036
2037
2038	/**
2039	* Convert GC Phys page to HC Phys page and flags.
2040	*
2041	* @returns VBox status.
2042	* @param pPGM PGM handle.
2043	* @param GCPhys The GC physical address.
2044	* @param pHCPhys Where to store the corresponding HC physical address of the page
2045	* and the page flags.
2046	*/
2047	DECLINLINE(int) PGMRamGCPhys2HCPhysWithFlags(PPGM pPGM, RTGCPHYS GCPhys, PRTHCPHYS pHCPhys)
2048	{
2049	/*
2050	* Walk range list.
2051	*/
2052	PPGMRAMRANGE pRam = CTXSUFF(pPGM->pRamRanges);
2053	while (pRam)
2054	{
2055	RTGCPHYS off = GCPhys - pRam->GCPhys;
2056	if (off < pRam->cb)
2057	{
2058	unsigned iPage = off >> PAGE_SHIFT;
2059	/* Physical chunk in dynamically allocated range not present? */
2060	if (RT_UNLIKELY(!(pRam->aHCPhys[iPage] & X86_PTE_PAE_PG_MASK)))
2061	{
2062	#ifdef IN_RING3
2063	int rc = pgmr3PhysGrowRange(PGM2VM(pPGM), GCPhys);
2064	#else
2065	int rc = CTXALLMID(VMM, CallHost)(PGM2VM(pPGM), VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
2066	#endif
2067	if (rc != VINF_SUCCESS)
2068	return rc;
2069	}
2070	*pHCPhys = pRam->aHCPhys[iPage];
2071	return VINF_SUCCESS;
2072	}
2073
2074	pRam = CTXSUFF(pRam->pNext);
2075	}
2076	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
2077	}
2078
2079
2080	/**
2081	* Clears flags associated with a RAM address.
2082	*
2083	* @returns VBox status code.
2084	* @param pPGM PGM handle.
2085	* @param GCPhys Guest context physical address.
2086	* @param fFlags fFlags to clear. (Bits 0-11.)
2087	*/
2088	DECLINLINE(int) PGMRamFlagsClearByGCPhys(PPGM pPGM, RTGCPHYS GCPhys, unsigned fFlags)
2089	{
2090	/*
2091	* Walk range list.
2092	*/
2093	PPGMRAMRANGE pRam = CTXSUFF(pPGM->pRamRanges);
2094	while (pRam)
2095	{
2096	RTGCPHYS off = GCPhys - pRam->GCPhys;
2097	if (off < pRam->cb)
2098	{
2099	unsigned iPage = off >> PAGE_SHIFT;
2100	/* Physical chunk in dynamically allocated range not present? */
2101	if (RT_UNLIKELY(!(pRam->aHCPhys[iPage] & X86_PTE_PAE_PG_MASK)))
2102	{
2103	#ifdef IN_RING3
2104	int rc = pgmr3PhysGrowRange(PGM2VM(pPGM), GCPhys);
2105	#else
2106	int rc = CTXALLMID(VMM, CallHost)(PGM2VM(pPGM), VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
2107	#endif
2108	if (rc != VINF_SUCCESS)
2109	return rc;
2110	}
2111	fFlags &= ~X86_PTE_PAE_PG_MASK;
2112	pRam->aHCPhys[iPage] &= ~(RTHCPHYS)fFlags;
2113	return VINF_SUCCESS;
2114	}
2115
2116	pRam = CTXSUFF(pRam->pNext);
2117	}
2118	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
2119	}
2120
2121
2122	/**
2123	* Clears flags associated with a RAM address.
2124	*
2125	* @returns VBox status code.
2126	* @param pPGM PGM handle.
2127	* @param GCPhys Guest context physical address.
2128	* @param fFlags fFlags to clear. (Bits 0-11.)
2129	* @param ppRamHint Where to read and store the ram list hint.
2130	* The caller initializes this to NULL before the call.
2131	*/
2132	DECLINLINE(int) PGMRamFlagsClearByGCPhysWithHint(PPGM pPGM, RTGCPHYS GCPhys, unsigned fFlags, PPGMRAMRANGE *ppRamHint)
2133	{
2134	/*
2135	* Check the hint.
2136	*/
2137	PPGMRAMRANGE pRam = *ppRamHint;
2138	if (pRam)
2139	{
2140	RTGCPHYS off = GCPhys - pRam->GCPhys;
2141	if (off < pRam->cb)
2142	{
2143	unsigned iPage = off >> PAGE_SHIFT;
2144	/* Physical chunk in dynamically allocated range not present? */
2145	if (RT_UNLIKELY(!(pRam->aHCPhys[iPage] & X86_PTE_PAE_PG_MASK)))
2146	{
2147	#ifdef IN_RING3
2148	int rc = pgmr3PhysGrowRange(PGM2VM(pPGM), GCPhys);
2149	#else
2150	int rc = CTXALLMID(VMM, CallHost)(PGM2VM(pPGM), VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
2151	#endif
2152	if (rc != VINF_SUCCESS)
2153	return rc;
2154	}
2155	fFlags &= ~X86_PTE_PAE_PG_MASK;
2156	pRam->aHCPhys[iPage] &= ~(RTHCPHYS)fFlags;
2157	return VINF_SUCCESS;
2158	}
2159	}
2160
2161	/*
2162	* Walk range list.
2163	*/
2164	pRam = CTXSUFF(pPGM->pRamRanges);
2165	while (pRam)
2166	{
2167	RTGCPHYS off = GCPhys - pRam->GCPhys;
2168	if (off < pRam->cb)
2169	{
2170	unsigned iPage = off >> PAGE_SHIFT;
2171	/* Physical chunk in dynamically allocated range not present? */
2172	if (RT_UNLIKELY(!(pRam->aHCPhys[iPage] & X86_PTE_PAE_PG_MASK)))
2173	{
2174	#ifdef IN_RING3
2175	int rc = pgmr3PhysGrowRange(PGM2VM(pPGM), GCPhys);
2176	#else
2177	int rc = CTXALLMID(VMM, CallHost)(PGM2VM(pPGM), VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
2178	#endif
2179	if (rc != VINF_SUCCESS)
2180	return rc;
2181	}
2182	fFlags &= ~X86_PTE_PAE_PG_MASK;
2183	pRam->aHCPhys[iPage] &= ~(RTHCPHYS)fFlags;
2184	*ppRamHint = pRam;
2185	return VINF_SUCCESS;
2186	}
2187
2188	pRam = CTXSUFF(pRam->pNext);
2189	}
2190	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
2191	}
2192
2193	/**
2194	* Sets (bitwise OR) flags associated with a RAM address.
2195	*
2196	* @returns VBox status code.
2197	* @param pPGM PGM handle.
2198	* @param GCPhys Guest context physical address.
2199	* @param fFlags fFlags to set clear. (Bits 0-11.)
2200	*/
2201	DECLINLINE(int) PGMRamFlagsSetByGCPhys(PPGM pPGM, RTGCPHYS GCPhys, unsigned fFlags)
2202	{
2203	/*
2204	* Walk range list.
2205	*/
2206	PPGMRAMRANGE pRam = CTXSUFF(pPGM->pRamRanges);
2207	while (pRam)
2208	{
2209	RTGCPHYS off = GCPhys - pRam->GCPhys;
2210	if (off < pRam->cb)
2211	{
2212	unsigned iPage = off >> PAGE_SHIFT;
2213	/* Physical chunk in dynamically allocated range not present? */
2214	if (RT_UNLIKELY(!(pRam->aHCPhys[iPage] & X86_PTE_PAE_PG_MASK)))
2215	{
2216	#ifdef IN_RING3
2217	int rc = pgmr3PhysGrowRange(PGM2VM(pPGM), GCPhys);
2218	#else
2219	int rc = CTXALLMID(VMM, CallHost)(PGM2VM(pPGM), VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
2220	#endif
2221	if (rc != VINF_SUCCESS)
2222	return rc;
2223	}
2224	fFlags &= ~X86_PTE_PAE_PG_MASK;
2225	pRam->aHCPhys[iPage] \|= fFlags;
2226	return VINF_SUCCESS;
2227	}
2228
2229	pRam = CTXSUFF(pRam->pNext);
2230	}
2231	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
2232	}
2233
2234	/**
2235	* Sets (bitwise OR) flags associated with a RAM address.
2236	*
2237	* @returns VBox status code.
2238	* @param pPGM PGM handle.
2239	* @param GCPhys Guest context physical address.
2240	* @param fFlags fFlags to set clear. (Bits 0-11.)
2241	* @param ppRamHint Where to read and store the ram list hint.
2242	* The caller initializes this to NULL before the call.
2243	*/
2244	DECLINLINE(int) PGMRamFlagsSetByGCPhysWithHint(PPGM pPGM, RTGCPHYS GCPhys, unsigned fFlags, PPGMRAMRANGE *ppRamHint)
2245	{
2246	/*
2247	* Check the hint.
2248	*/
2249	PPGMRAMRANGE pRam = *ppRamHint;
2250	if (pRam)
2251	{
2252	RTGCPHYS off = GCPhys - pRam->GCPhys;
2253	if (off < pRam->cb)
2254	{
2255	unsigned iPage = off >> PAGE_SHIFT;
2256	/* Physical chunk in dynamically allocated range not present? */
2257	if (RT_UNLIKELY(!(pRam->aHCPhys[iPage] & X86_PTE_PAE_PG_MASK)))
2258	{
2259	#ifdef IN_RING3
2260	int rc = pgmr3PhysGrowRange(PGM2VM(pPGM), GCPhys);
2261	#else
2262	int rc = CTXALLMID(VMM, CallHost)(PGM2VM(pPGM), VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
2263	#endif
2264	if (rc != VINF_SUCCESS)
2265	return rc;
2266	}
2267	fFlags &= ~X86_PTE_PAE_PG_MASK;
2268	pRam->aHCPhys[iPage] \|= fFlags;
2269	return VINF_SUCCESS;
2270	}
2271	}
2272
2273	/*
2274	* Walk range list.
2275	*/
2276	pRam = CTXSUFF(pPGM->pRamRanges);
2277	while (pRam)
2278	{
2279	RTGCPHYS off = GCPhys - pRam->GCPhys;
2280	if (off < pRam->cb)
2281	{
2282	unsigned iPage = off >> PAGE_SHIFT;
2283	/* Physical chunk in dynamically allocated range not present? */
2284	if (RT_UNLIKELY(!(pRam->aHCPhys[iPage] & X86_PTE_PAE_PG_MASK)))
2285	{
2286	#ifdef IN_RING3
2287	int rc = pgmr3PhysGrowRange(PGM2VM(pPGM), GCPhys);
2288	#else
2289	int rc = CTXALLMID(VMM, CallHost)(PGM2VM(pPGM), VMMCALLHOST_PGM_RAM_GROW_RANGE, GCPhys);
2290	#endif
2291	if (rc != VINF_SUCCESS)
2292	return rc;
2293	}
2294	fFlags &= ~X86_PTE_PAE_PG_MASK;
2295	pRam->aHCPhys[iPage] \|= fFlags;
2296	*ppRamHint = pRam;
2297	return VINF_SUCCESS;
2298	}
2299
2300	pRam = CTXSUFF(pRam->pNext);
2301	}
2302	return VERR_PGM_INVALID_GC_PHYSICAL_ADDRESS;
2303	}
2304
2305
2306	/**
2307	* Gets the page directory for the specified address.
2308	*
2309	* @returns Pointer to the page directory in question.
2310	* @returns NULL if the page directory is not present or on an invalid page.
2311	* @param pPGM Pointer to the PGM instance data.
2312	* @param GCPtr The address.
2313	*/
2314	DECLINLINE(PX86PDPAE) pgmGstGetPaePD(PPGM pPGM, RTGCUINTPTR GCPtr)
2315	{
2316	const unsigned iPdPtr = GCPtr >> X86_PDPTR_SHIFT;
2317	if (CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].n.u1Present)
2318	{
2319	if ((CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].u & X86_PDPE_PG_MASK) == pPGM->aGCPhysGstPaePDs[iPdPtr])
2320	return CTXSUFF(pPGM->apGstPaePDs)[iPdPtr];
2321
2322	/* cache is out-of-sync. */
2323	PX86PDPAE pPD;
2324	int rc = PGM_GCPHYS_2_PTR(PGM2VM(pPGM), CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].u & X86_PDPE_PG_MASK, &pPD);
2325	if (VBOX_SUCCESS(rc))
2326	return pPD;
2327	AssertMsgFailed(("Impossible! rc=%d PDPE=%#llx\n", rc, CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].u));
2328	/* returning NIL_RTGCPHYS is ok if we assume it's just an invalid page of some kind emualted as all 0s. */
2329	}
2330	return NULL;
2331	}
2332
2333
2334	/**
2335	* Gets the page directory entry for the specified address.
2336	*
2337	* @returns Pointer to the page directory entry in question.
2338	* @returns NULL if the page directory is not present or on an invalid page.
2339	* @param pPGM Pointer to the PGM instance data.
2340	* @param GCPtr The address.
2341	*/
2342	DECLINLINE(PX86PDEPAE) pgmGstGetPaePDEPtr(PPGM pPGM, RTGCUINTPTR GCPtr)
2343	{
2344	const unsigned iPdPtr = GCPtr >> X86_PDPTR_SHIFT;
2345	if (CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].n.u1Present)
2346	{
2347	const unsigned iPD = (GCPtr >> X86_PD_PAE_SHIFT) & X86_PD_PAE_MASK;
2348	if ((CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].u & X86_PDPE_PG_MASK) == pPGM->aGCPhysGstPaePDs[iPdPtr])
2349	return &CTXSUFF(pPGM->apGstPaePDs)[iPdPtr]->a[iPD];
2350
2351	/* cache is out-of-sync. */
2352	PX86PDPAE pPD;
2353	int rc = PGM_GCPHYS_2_PTR(PGM2VM(pPGM), CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].u & X86_PDPE_PG_MASK, &pPD);
2354	if (VBOX_SUCCESS(rc))
2355	return &pPD->a[iPD];
2356	AssertMsgFailed(("Impossible! rc=%d PDPE=%#llx\n", rc, CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].u));
2357	/* returning NIL_RTGCPHYS is ok if we assume it's just an invalid page or something which we'll emulate as all 0s. */
2358	}
2359	return NULL;
2360	}
2361
2362
2363	/**
2364	* Gets the page directory entry for the specified address.
2365	*
2366	* @returns The page directory entry in question.
2367	* @returns A non-present entry if the page directory is not present or on an invalid page.
2368	* @param pPGM Pointer to the PGM instance data.
2369	* @param GCPtr The address.
2370	*/
2371	DECLINLINE(uint64_t) pgmGstGetPaePDE(PPGM pPGM, RTGCUINTPTR GCPtr)
2372	{
2373	const unsigned iPdPtr = GCPtr >> X86_PDPTR_SHIFT;
2374	if (CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].n.u1Present)
2375	{
2376	const unsigned iPD = (GCPtr >> X86_PD_PAE_SHIFT) & X86_PD_PAE_MASK;
2377	if ((CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].u & X86_PDPE_PG_MASK) == pPGM->aGCPhysGstPaePDs[iPdPtr])
2378	return CTXSUFF(pPGM->apGstPaePDs)[iPdPtr]->a[iPD].u;
2379
2380	/* cache is out-of-sync. */
2381	PX86PDPAE pPD;
2382	int rc = PGM_GCPHYS_2_PTR(PGM2VM(pPGM), CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].u & X86_PDPE_PG_MASK, &pPD);
2383	if (VBOX_SUCCESS(rc))
2384	return pPD->a[iPD].u;
2385	AssertMsgFailed(("Impossible! rc=%d PDPE=%#llx\n", rc, CTXSUFF(pPGM->pGstPaePDPTR)->a[iPdPtr].u));
2386	}
2387	return 0;
2388	}
2389
2390
2391	/**
2392	* Checks if any of the specified page flags are set for the given page.
2393	*
2394	* @returns true if any of the flags are set.
2395	* @returns false if all the flags are clear.
2396	* @param pPGM PGM handle.
2397	* @param GCPhys The GC physical address.
2398	* @param fFlags The flags to check for.
2399	*/
2400	DECLINLINE(bool) PGMRamTestFlags(PPGM pPGM, RTGCPHYS GCPhys, uint64_t fFlags)
2401	{
2402	/*
2403	* Walk range list.
2404	*/
2405	for (PPGMRAMRANGE pRam = CTXSUFF(pPGM->pRamRanges);
2406	pRam;
2407	pRam = CTXSUFF(pRam->pNext))
2408	{
2409	RTGCPHYS off = GCPhys - pRam->GCPhys;
2410	if (off < pRam->cb)
2411	return (pRam->aHCPhys[off >> PAGE_SHIFT] & fFlags) != 0;
2412	}
2413	return false;
2414	}
2415
2416
2417	/**
2418	* Gets the ram flags for a handler.
2419	*
2420	* @returns The ram flags.
2421	* @param pCur The physical handler in question.
2422	*/
2423	DECLINLINE(unsigned) pgmHandlerPhysicalCalcFlags(PPGMPHYSHANDLER pCur)
2424	{
2425	switch (pCur->enmType)
2426	{
2427	case PGMPHYSHANDLERTYPE_PHYSICAL:
2428	return MM_RAM_FLAGS_PHYSICAL_HANDLER;
2429
2430	case PGMPHYSHANDLERTYPE_PHYSICAL_WRITE:
2431	return MM_RAM_FLAGS_PHYSICAL_HANDLER \| MM_RAM_FLAGS_PHYSICAL_WRITE;
2432
2433	case PGMPHYSHANDLERTYPE_MMIO:
2434	case PGMPHYSHANDLERTYPE_PHYSICAL_ALL:
2435	return MM_RAM_FLAGS_PHYSICAL_HANDLER \| MM_RAM_FLAGS_PHYSICAL_ALL;
2436
2437	default:
2438	AssertFatalMsgFailed(("Invalid type %d\n", pCur->enmType));
2439	}
2440	}
2441
2442
2443	/**
2444	* Clears one physical page of a virtual handler
2445	*
2446	* @param pPGM Pointer to the PGM instance.
2447	* @param pCur Virtual handler structure
2448	* @param iPage Physical page index
2449	*/
2450	DECLINLINE(void) pgmHandlerVirtualClearPage(PPGM pPGM, PPGMVIRTHANDLER pCur, unsigned iPage)
2451	{
2452	const PPGMPHYS2VIRTHANDLER pPhys2Virt = &pCur->aPhysToVirt[iPage];
2453
2454	/*
2455	* Remove the node from the tree (it's supposed to be in the tree if we get here!).
2456	*/
2457	#ifdef VBOX_STRICT_PGM_HANDLER_VIRTUAL
2458	AssertReleaseMsg(pPhys2Virt->offNextAlias & PGMPHYS2VIRTHANDLER_IN_TREE,
2459	("pPhys2Virt=%p:{.Core.Key=%VGp, .Core.KeyLast=%VGp, .offVirtHandler=%#RX32, .offNextAlias=%#RX32}\n",
2460	pPhys2Virt, pPhys2Virt->Core.Key, pPhys2Virt->Core.KeyLast, pPhys2Virt->offVirtHandler, pPhys2Virt->offNextAlias));
2461	#endif
2462	if (pPhys2Virt->offNextAlias & PGMPHYS2VIRTHANDLER_IS_HEAD)
2463	{
2464	/* We're the head of the alias chain. */
2465	PPGMPHYS2VIRTHANDLER pRemove = (PPGMPHYS2VIRTHANDLER)RTAvlroGCPhysRemove(&pPGM->CTXSUFF(pTrees)->PhysToVirtHandlers, pPhys2Virt->Core.Key); NOREF(pRemove);
2466	#ifdef VBOX_STRICT_PGM_HANDLER_VIRTUAL
2467	AssertReleaseMsg(pRemove != NULL,
2468	("pPhys2Virt=%p:{.Core.Key=%VGp, .Core.KeyLast=%VGp, .offVirtHandler=%#RX32, .offNextAlias=%#RX32}\n",
2469	pPhys2Virt, pPhys2Virt->Core.Key, pPhys2Virt->Core.KeyLast, pPhys2Virt->offVirtHandler, pPhys2Virt->offNextAlias));
2470	AssertReleaseMsg(pRemove == pPhys2Virt,
2471	("wanted: pPhys2Virt=%p:{.Core.Key=%VGp, .Core.KeyLast=%VGp, .offVirtHandler=%#RX32, .offNextAlias=%#RX32}\n"
2472	" got: pRemove=%p:{.Core.Key=%VGp, .Core.KeyLast=%VGp, .offVirtHandler=%#RX32, .offNextAlias=%#RX32}\n",
2473	pPhys2Virt, pPhys2Virt->Core.Key, pPhys2Virt->Core.KeyLast, pPhys2Virt->offVirtHandler, pPhys2Virt->offNextAlias,
2474	pRemove, pRemove->Core.Key, pRemove->Core.KeyLast, pRemove->offVirtHandler, pRemove->offNextAlias));
2475	#endif
2476	if (pPhys2Virt->offNextAlias & PGMPHYS2VIRTHANDLER_OFF_MASK)
2477	{
2478	/* Insert the next list in the alias chain into the tree. */
2479	PPGMPHYS2VIRTHANDLER pNext = (PPGMPHYS2VIRTHANDLER)((intptr_t)pPhys2Virt + (pPhys2Virt->offNextAlias & PGMPHYS2VIRTHANDLER_OFF_MASK));
2480	#ifdef VBOX_STRICT_PGM_HANDLER_VIRTUAL
2481	AssertReleaseMsg(pNext->offNextAlias & PGMPHYS2VIRTHANDLER_IN_TREE,
2482	("pNext=%p:{.Core.Key=%VGp, .Core.KeyLast=%VGp, .offVirtHandler=%#RX32, .offNextAlias=%#RX32}\n",
2483	pNext, pNext->Core.Key, pNext->Core.KeyLast, pNext->offVirtHandler, pNext->offNextAlias));
2484	#endif
2485	pNext->offNextAlias \|= PGMPHYS2VIRTHANDLER_IS_HEAD;
2486	bool fRc = RTAvlroGCPhysInsert(&pPGM->CTXSUFF(pTrees)->PhysToVirtHandlers, &pNext->Core);
2487	AssertRelease(fRc);
2488	}
2489	}
2490	else
2491	{
2492	/* Locate the previous node in the alias chain. */
2493	PPGMPHYS2VIRTHANDLER pPrev = (PPGMPHYS2VIRTHANDLER)RTAvlroGCPhysGet(&pPGM->CTXSUFF(pTrees)->PhysToVirtHandlers, pPhys2Virt->Core.Key);
2494	#ifdef VBOX_STRICT_PGM_HANDLER_VIRTUAL
2495	AssertReleaseMsg(pPrev != pPhys2Virt,
2496	("pPhys2Virt=%p:{.Core.Key=%VGp, .Core.KeyLast=%VGp, .offVirtHandler=%#RX32, .offNextAlias=%#RX32} pPrev=%p\n",
2497	pPhys2Virt, pPhys2Virt->Core.Key, pPhys2Virt->Core.KeyLast, pPhys2Virt->offVirtHandler, pPhys2Virt->offNextAlias, pPrev));
2498	#endif
2499	for (;;)
2500	{
2501	PPGMPHYS2VIRTHANDLER pNext = (PPGMPHYS2VIRTHANDLER)((intptr_t)pPrev + (pPrev->offNextAlias & PGMPHYS2VIRTHANDLER_OFF_MASK));
2502	if (pNext == pPhys2Virt)
2503	{
2504	/* unlink. */
2505	LogFlow(("pgmHandlerVirtualClearPage: removed %p:{.offNextAlias=%#RX32} from alias chain. prev %p:{.offNextAlias=%#RX32} [%VGp-%VGp]\n",
2506	pPhys2Virt, pPhys2Virt->offNextAlias, pPrev, pPrev->offNextAlias, pPhys2Virt->Core.Key, pPhys2Virt->Core.KeyLast));
2507	if (!(pPhys2Virt->offNextAlias & PGMPHYS2VIRTHANDLER_OFF_MASK))
2508	pPrev->offNextAlias &= ~PGMPHYS2VIRTHANDLER_OFF_MASK;
2509	else
2510	{
2511	PPGMPHYS2VIRTHANDLER pNewNext = (PPGMPHYS2VIRTHANDLER)((intptr_t)pPhys2Virt + (pPhys2Virt->offNextAlias & PGMPHYS2VIRTHANDLER_OFF_MASK));
2512	pPrev->offNextAlias = ((intptr_t)pNewNext - (intptr_t)pPrev)
2513	\| (pPrev->offNextAlias & ~PGMPHYS2VIRTHANDLER_OFF_MASK);
2514	}
2515	break;
2516	}
2517
2518	/* next */
2519	if (pNext == pPrev)
2520	{
2521	#ifdef VBOX_STRICT_PGM_HANDLER_VIRTUAL
2522	AssertReleaseMsg(pNext != pPrev,
2523	("pPhys2Virt=%p:{.Core.Key=%VGp, .Core.KeyLast=%VGp, .offVirtHandler=%#RX32, .offNextAlias=%#RX32} pPrev=%p\n",
2524	pPhys2Virt, pPhys2Virt->Core.Key, pPhys2Virt->Core.KeyLast, pPhys2Virt->offVirtHandler, pPhys2Virt->offNextAlias, pPrev));
2525	#endif
2526	break;
2527	}
2528	pPrev = pNext;
2529	}
2530	}
2531	Log2(("PHYS2VIRT: Removing %VGp-%VGp %#RX32 %s\n",
2532	pPhys2Virt->Core.Key, pPhys2Virt->Core.KeyLast, pPhys2Virt->offNextAlias, HCSTRING(pCur->pszDesc)));
2533	pPhys2Virt->offNextAlias = 0;
2534	pPhys2Virt->Core.KeyLast = NIL_RTGCPHYS; /* require reinsert */
2535
2536	/*
2537	* Clear the ram flags for this page.
2538	*/
2539	int rc = PGMRamFlagsClearByGCPhys(pPGM, pPhys2Virt->Core.Key,
2540	MM_RAM_FLAGS_VIRTUAL_HANDLER \| MM_RAM_FLAGS_VIRTUAL_ALL \| MM_RAM_FLAGS_VIRTUAL_WRITE);
2541	AssertRC(rc);
2542	}
2543
2544
2545	/**
2546	* Internal worker for finding a 'in-use' shadow page give by it's physical address.
2547	*
2548	* @returns Pointer to the shadow page structure.
2549	* @param pPool The pool.
2550	* @param HCPhys The HC physical address of the shadow page.
2551	*/
2552	DECLINLINE(PPGMPOOLPAGE) pgmPoolGetPage(PPGMPOOL pPool, RTHCPHYS HCPhys)
2553	{
2554	/*
2555	* Look up the page.
2556	*/
2557	PPGMPOOLPAGE pPage = (PPGMPOOLPAGE)RTAvloHCPhysGet(&pPool->HCPhysTree, HCPhys & X86_PTE_PAE_PG_MASK);
2558	AssertFatalMsg(pPage && pPage->enmKind != PGMPOOLKIND_FREE, ("HCPhys=%VHp pPage=%p type=%d\n", HCPhys, pPage, (pPage) ? pPage->enmKind : 0));
2559	return pPage;
2560	}
2561
2562
2563	/**
2564	* Internal worker for finding a 'in-use' shadow page give by it's physical address.
2565	*
2566	* @returns Pointer to the shadow page structure.
2567	* @param pPool The pool.
2568	* @param idx The pool page index.
2569	*/
2570	DECLINLINE(PPGMPOOLPAGE) pgmPoolGetPageByIdx(PPGMPOOL pPool, unsigned idx)
2571	{
2572	AssertFatalMsg(idx >= PGMPOOL_IDX_FIRST && idx < pPool->cCurPages, ("idx=%d\n", idx));
2573	return &pPool->aPages[idx];
2574	}
2575
2576
2577	#ifdef PGMPOOL_WITH_GCPHYS_TRACKING
2578	/**
2579	* Clear references to guest physical memory.
2580	*
2581	* @param pPool The pool.
2582	* @param pPage The page.
2583	* @param pHCPhys Pointer to the aHCPhys entry in the ram range.
2584	*/
2585	DECLINLINE(void) pgmTrackDerefGCPhys(PPGMPOOL pPool, PPGMPOOLPAGE pPage, PRTHCPHYS pHCPhys)
2586	{
2587	/*
2588	* Just deal with the simple case here.
2589	*/
2590	#ifdef LOG_ENABLED
2591	const RTHCPHYS HCPhysOrg = *pHCPhys;
2592	#endif
2593	const unsigned cRefs = *pHCPhys >> MM_RAM_FLAGS_CREFS_SHIFT;
2594	if (cRefs == 1)
2595	{
2596	Assert(pPage->idx == ((*pHCPhys >> MM_RAM_FLAGS_IDX_SHIFT) & MM_RAM_FLAGS_IDX_MASK));
2597	pHCPhys = pHCPhys & MM_RAM_FLAGS_NO_REFS_MASK;
2598	}
2599	else
2600	pgmPoolTrackPhysExtDerefGCPhys(pPool, pPage, pHCPhys);
2601	LogFlow(("pgmTrackDerefGCPhys: pHCPhys=%RHp -> %RHp\n", HCPhysOrg, pHCPhys));
2602	}
2603	#endif
2604
2605
2606	#ifdef PGMPOOL_WITH_CACHE
2607	/**
2608	* Moves the page to the head of the age list.
2609	*
2610	* This is done when the cached page is used in one way or another.
2611	*
2612	* @param pPool The pool.
2613	* @param pPage The cached page.
2614	* @todo inline in PGMInternal.h!
2615	*/
2616	DECLINLINE(void) pgmPoolCacheUsed(PPGMPOOL pPool, PPGMPOOLPAGE pPage)
2617	{
2618	/*
2619	* Move to the head of the age list.
2620	*/
2621	if (pPage->iAgePrev != NIL_PGMPOOL_IDX)
2622	{
2623	/* unlink */
2624	pPool->aPages[pPage->iAgePrev].iAgeNext = pPage->iAgeNext;
2625	if (pPage->iAgeNext != NIL_PGMPOOL_IDX)
2626	pPool->aPages[pPage->iAgeNext].iAgePrev = pPage->iAgePrev;
2627	else
2628	pPool->iAgeTail = pPage->iAgePrev;
2629
2630	/* insert at head */
2631	pPage->iAgePrev = NIL_PGMPOOL_IDX;
2632	pPage->iAgeNext = pPool->iAgeHead;
2633	Assert(pPage->iAgeNext != NIL_PGMPOOL_IDX); /* we would've already been head then */
2634	pPool->iAgeHead = pPage->idx;
2635	pPool->aPages[pPage->iAgeNext].iAgePrev = pPage->idx;
2636	}
2637	}
2638	#endif /* PGMPOOL_WITH_CACHE */
2639
2640	/**
2641	* Tells if mappings are to be put into the shadow page table or not
2642	*
2643	* @returns boolean result
2644	* @param pVM VM handle.
2645	*/
2646
2647	DECLINLINE(bool) pgmMapAreMappingsEnabled(PPGM pPGM)
2648	{
2649	return !pPGM->fDisableMappings;
2650	}
2651
2652	/** @} */
2653
2654	#endif

Note: See TracBrowser for help on using the repository browser.

source: vbox/trunk/src/VBox/VMM/PGMInternal.h@ 2397

Download in other formats: