 05a40b172e
			
		
	
	
		05a40b172e
		
	
	
	
	
		
			
			usb-host and usb-redirect try to batch bulk transfers by combining many small usb packets into a single, large transfer request, to reduce the overhead and improve performance. This patch adds a size limit of 1 MiB for those combined packets to restrict the host resources the guest can bind that way. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com> Message-Id: <20210503132915.2335822-6-kraxel@redhat.com>
		
			
				
	
	
		
			191 lines
		
	
	
		
			6.6 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			191 lines
		
	
	
		
			6.6 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /*
 | |
|  * QEMU USB packet combining code (for input pipelining)
 | |
|  *
 | |
|  * Copyright(c) 2012 Red Hat, Inc.
 | |
|  *
 | |
|  * Red Hat Authors:
 | |
|  * Hans de Goede <hdegoede@redhat.com>
 | |
|  *
 | |
|  * This library is free software; you can redistribute it and/or
 | |
|  * modify it under the terms of the GNU Lesser General Public
 | |
|  * License as published by the Free Software Foundation; either
 | |
|  * version 2.1 of the License, or (at your option) any later version.
 | |
|  *
 | |
|  * This library is distributed in the hope that it will be useful,
 | |
|  * but WITHOUT ANY WARRANTY; without even the implied warranty of
 | |
|  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 | |
|  * Lesser General Public License for more details.
 | |
|  *
 | |
|  * You should have received a copy of the GNU Lesser General Public License
 | |
|  * along with this program; if not, see <http://www.gnu.org/licenses/>.
 | |
|  */
 | |
| #include "qemu/osdep.h"
 | |
| #include "qemu/units.h"
 | |
| #include "hw/usb.h"
 | |
| #include "qemu/iov.h"
 | |
| #include "trace.h"
 | |
| 
 | |
| static void usb_combined_packet_add(USBCombinedPacket *combined, USBPacket *p)
 | |
| {
 | |
|     qemu_iovec_concat(&combined->iov, &p->iov, 0, p->iov.size);
 | |
|     QTAILQ_INSERT_TAIL(&combined->packets, p, combined_entry);
 | |
|     p->combined = combined;
 | |
| }
 | |
| 
 | |
| /* Note will free combined when the last packet gets removed */
 | |
| static void usb_combined_packet_remove(USBCombinedPacket *combined,
 | |
|                                        USBPacket *p)
 | |
| {
 | |
|     assert(p->combined == combined);
 | |
|     p->combined = NULL;
 | |
|     QTAILQ_REMOVE(&combined->packets, p, combined_entry);
 | |
|     if (QTAILQ_EMPTY(&combined->packets)) {
 | |
|         qemu_iovec_destroy(&combined->iov);
 | |
|         g_free(combined);
 | |
|     }
 | |
| }
 | |
| 
 | |
| /* Also handles completion of non combined packets for pipelined input eps */
 | |
| void usb_combined_input_packet_complete(USBDevice *dev, USBPacket *p)
 | |
| {
 | |
|     USBCombinedPacket *combined = p->combined;
 | |
|     USBEndpoint *ep = p->ep;
 | |
|     USBPacket *next;
 | |
|     int status, actual_length;
 | |
|     bool short_not_ok, done = false;
 | |
| 
 | |
|     if (combined == NULL) {
 | |
|         usb_packet_complete_one(dev, p);
 | |
|         goto leave;
 | |
|     }
 | |
| 
 | |
|     assert(combined->first == p && p == QTAILQ_FIRST(&combined->packets));
 | |
| 
 | |
|     status = combined->first->status;
 | |
|     actual_length = combined->first->actual_length;
 | |
|     short_not_ok = QTAILQ_LAST(&combined->packets)->short_not_ok;
 | |
| 
 | |
|     QTAILQ_FOREACH_SAFE(p, &combined->packets, combined_entry, next) {
 | |
|         if (!done) {
 | |
|             /* Distribute data over uncombined packets */
 | |
|             if (actual_length >= p->iov.size) {
 | |
|                 p->actual_length = p->iov.size;
 | |
|             } else {
 | |
|                 /* Send short or error packet to complete the transfer */
 | |
|                 p->actual_length = actual_length;
 | |
|                 done = true;
 | |
|             }
 | |
|             /* Report status on the last packet */
 | |
|             if (done || next == NULL) {
 | |
|                 p->status = status;
 | |
|             } else {
 | |
|                 p->status = USB_RET_SUCCESS;
 | |
|             }
 | |
|             p->short_not_ok = short_not_ok;
 | |
|             /* Note will free combined when the last packet gets removed! */
 | |
|             usb_combined_packet_remove(combined, p);
 | |
|             usb_packet_complete_one(dev, p);
 | |
|             actual_length -= p->actual_length;
 | |
|         } else {
 | |
|             /* Remove any leftover packets from the queue */
 | |
|             p->status = USB_RET_REMOVE_FROM_QUEUE;
 | |
|             /* Note will free combined on the last packet! */
 | |
|             dev->port->ops->complete(dev->port, p);
 | |
|         }
 | |
|     }
 | |
|     /* Do not use combined here, it has been freed! */
 | |
| leave:
 | |
|     /* Check if there are packets in the queue waiting for our completion */
 | |
|     usb_ep_combine_input_packets(ep);
 | |
| }
 | |
| 
 | |
| /* May only be called for combined packets! */
 | |
| void usb_combined_packet_cancel(USBDevice *dev, USBPacket *p)
 | |
| {
 | |
|     USBCombinedPacket *combined = p->combined;
 | |
|     assert(combined != NULL);
 | |
|     USBPacket *first = p->combined->first;
 | |
| 
 | |
|     /* Note will free combined on the last packet! */
 | |
|     usb_combined_packet_remove(combined, p);
 | |
|     if (p == first) {
 | |
|         usb_device_cancel_packet(dev, p);
 | |
|     }
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * Large input transfers can get split into multiple input packets, this
 | |
|  * function recombines them, removing the short_not_ok checks which all but
 | |
|  * the last packet of such splits transfers have, thereby allowing input
 | |
|  * transfer pipelining (which we cannot do on short_not_ok transfers)
 | |
|  */
 | |
| void usb_ep_combine_input_packets(USBEndpoint *ep)
 | |
| {
 | |
|     USBPacket *p, *u, *next, *prev = NULL, *first = NULL;
 | |
|     USBPort *port = ep->dev->port;
 | |
|     int totalsize;
 | |
| 
 | |
|     assert(ep->pipeline);
 | |
|     assert(ep->pid == USB_TOKEN_IN);
 | |
| 
 | |
|     QTAILQ_FOREACH_SAFE(p, &ep->queue, queue, next) {
 | |
|         /* Empty the queue on a halt */
 | |
|         if (ep->halted) {
 | |
|             p->status = USB_RET_REMOVE_FROM_QUEUE;
 | |
|             port->ops->complete(port, p);
 | |
|             continue;
 | |
|         }
 | |
| 
 | |
|         /* Skip packets already submitted to the device */
 | |
|         if (p->state == USB_PACKET_ASYNC) {
 | |
|             prev = p;
 | |
|             continue;
 | |
|         }
 | |
|         usb_packet_check_state(p, USB_PACKET_QUEUED);
 | |
| 
 | |
|         /*
 | |
|          * If the previous (combined) packet has the short_not_ok flag set
 | |
|          * stop, as we must not submit packets to the device after a transfer
 | |
|          * ending with short_not_ok packet.
 | |
|          */
 | |
|         if (prev && prev->short_not_ok) {
 | |
|             break;
 | |
|         }
 | |
| 
 | |
|         if (first) {
 | |
|             if (first->combined == NULL) {
 | |
|                 USBCombinedPacket *combined = g_new0(USBCombinedPacket, 1);
 | |
| 
 | |
|                 combined->first = first;
 | |
|                 QTAILQ_INIT(&combined->packets);
 | |
|                 qemu_iovec_init(&combined->iov, 2);
 | |
|                 usb_combined_packet_add(combined, first);
 | |
|             }
 | |
|             usb_combined_packet_add(first->combined, p);
 | |
|         } else {
 | |
|             first = p;
 | |
|         }
 | |
| 
 | |
|         /* Is this packet the last one of a (combined) transfer? */
 | |
|         totalsize = (p->combined) ? p->combined->iov.size : p->iov.size;
 | |
|         if ((p->iov.size % ep->max_packet_size) != 0 || !p->short_not_ok ||
 | |
|                 next == NULL ||
 | |
|                 /* Work around for Linux usbfs bulk splitting + migration */
 | |
|                 (totalsize == (16 * KiB - 36) && p->int_req) ||
 | |
|                 /* Next package may grow combined package over 1MiB */
 | |
|                 totalsize > 1 * MiB - ep->max_packet_size) {
 | |
|             usb_device_handle_data(ep->dev, first);
 | |
|             assert(first->status == USB_RET_ASYNC);
 | |
|             if (first->combined) {
 | |
|                 QTAILQ_FOREACH(u, &first->combined->packets, combined_entry) {
 | |
|                     usb_packet_set_state(u, USB_PACKET_ASYNC);
 | |
|                 }
 | |
|             } else {
 | |
|                 usb_packet_set_state(first, USB_PACKET_ASYNC);
 | |
|             }
 | |
|             first = NULL;
 | |
|             prev = p;
 | |
|         }
 | |
|     }
 | |
| }
 |