> >> The system will hang while booting. However, if I comment
> >> cpu_physical_memory_read in function dump_guest_pgtable, there
> >> is no problem. What I am missing here? Thanks.
> >
> > cpu_physical_memory_read() can cause faults or other side effects like
> > MMIO. Using cpu_get_phys_page_debug() may help.
> >
>
> Maybe you just need to avoid accessing unsuitable physical addresses?
> Or maybe 'if (env->cr[0] & CR0_PG_MASK)' is not strong enough, may
> (CR0_PG_MASK | CR0_PE_MASK) be better?
>
> At what stage does it hang? What CR3 value changes are observed before
> the hang?
It's quite embarrassing. The code I posted before is buggy, and it dumps all
1024 * 1024 page table entries. It takes a lot of time, so that I think the
system hangs. Attach is the code snipt what I am using, which works fine now.
Another question is, I would like to know the hva corresponding to gpa (i.e.,
the guest page pointed by guest pte). Do you happen to know there is such
gpa2hva function in QEMU?
Thanks.
Regards,
chenwj
--
Wei-Ren Chen (陳韋任)
Computer Systems Lab, Institute of Information Science,
Academia Sinica, Taiwan (R.O.C.)
Tel:886-2-2788-3799 #1667
Homepage: http://people.cs.nctu.edu.tw/~chenwj
// we only consider x86 w/o pae
static void dump_guest_pgtable(CPUX86State *env)
{
int i, j;
target_ulong pde_addr, pte_addr;
target_ulong phyaddr, phyaddr2;
uint32_t pde, pte;
pde_addr = (env->cr[3] & ~0xfff) & env->a20_mask;
// first level page directory, iterate pde
for (i = 0; i < NUM_ENTRY; ++i)
{
phyaddr = (pde_addr + i * 4) & env->a20_mask;
pde = ldl_phys(phyaddr);
pd[i] = pde;
if (!(pde & PG_PRESENT_MASK))
continue;
pte_addr = (pde & ~0xfff) & env->a20_mask;
// second level page table, iterate pte
for (j = 0; j < NUM_ENTRY; ++j)
{
phyaddr2 = (pte_addr + j * 4) & env->a20_mask;
pte = ldl_phys(phyaddr2);
if (!(pte & PG_PRESENT_MASK))
pt[i][j] = 0;
pt[i][j] = pte;
}
}
}
