mirror of
https://github.com/Idov31/NovaHypervisor
synced 2026-06-06 15:54:26 +00:00
idov31
133 lines
4.6 KiB
C++
133 lines
4.6 KiB
C++
#include "pch.h"
|
|
#include "VmcallHandler.h"
|
|
|
|
/*
|
|
* Description:
|
|
* VmcallHandler is responsible for handling the vmcalls.
|
|
*
|
|
* Parameters:
|
|
* @vmcallNumber [_In_ UINT64] -- The vmcall number.
|
|
* @optionalParam1 [_In_opt_ UINT64] -- The first optional parameter.
|
|
* @optionalParam2 [_In_opt_ UINT64] -- The second optional parameter.
|
|
* @optionalParam3 [_In_opt_ UINT64] -- The third optional parameter.
|
|
*
|
|
* Returns:
|
|
* @status [NTSTATUS] -- The function returns the status of the operation.
|
|
*/
|
|
NTSTATUS VmcallHandler(_In_ UINT64 vmcallNumber, _In_opt_ UINT64 optionalParam1, _In_opt_ UINT64 optionalParam2, _In_opt_ UINT64 optionalParam3) {
|
|
NTSTATUS status = STATUS_SUCCESS;
|
|
ULONG currentProcessorIndex = KeGetCurrentProcessorNumber();
|
|
Ept* currentEptInstance = GuestState[currentProcessorIndex].EptInstance;
|
|
|
|
switch (vmcallNumber) {
|
|
case VMCALL_TEST: {
|
|
NovaHypervisorLog(TRACE_FLAG_INFO, "VmcallTest called with @Param1 = 0x%llx , @Param2 = 0x%llx , @Param3 = 0x%llx", optionalParam1, optionalParam2, optionalParam3);
|
|
break;
|
|
}
|
|
case VMCALL_VMXOFF: {
|
|
VmxVmxoff();
|
|
break;
|
|
}
|
|
case VMCALL_EXEC_HOOK_PAGE: {
|
|
if (optionalParam1 == 0) {
|
|
NovaHypervisorLog(TRACE_FLAG_ERROR, "Invalid parameters for VMCALL_EXEC_HOOK_PAGE");
|
|
status = STATUS_INVALID_PARAMETER;
|
|
break;
|
|
}
|
|
status = currentEptInstance->RootModePageHook(reinterpret_cast<PVOID>(optionalParam1), static_cast<UINT8>(optionalParam2)) ?
|
|
STATUS_SUCCESS : STATUS_UNSUCCESSFUL;
|
|
break;
|
|
}
|
|
case VMCALL_INVEPT_SINGLE_CONTEXT: {
|
|
VmxHelper::InvalidateEpt(optionalParam1);
|
|
break;
|
|
}
|
|
case VMCALL_INVEPT_ALL_CONTEXT: {
|
|
VmxHelper::InvalidateEpt();
|
|
break;
|
|
}
|
|
case VMCALL_UNHOOK_SINGLE_PAGE: {
|
|
if (optionalParam1 == 0) {
|
|
NovaHypervisorLog(TRACE_FLAG_ERROR, "Invalid parameters for VMCALL_UNHOOK_SINGLE_PAGE");
|
|
status = STATUS_INVALID_PARAMETER;
|
|
break;
|
|
}
|
|
status = currentEptInstance->PageUnhookVmcall(optionalParam1) ? STATUS_SUCCESS : STATUS_UNSUCCESSFUL;
|
|
break;
|
|
}
|
|
case VMCALL_UNHOOK_ALL_PAGES: {
|
|
status = currentEptInstance->UnhookAllPagesVmcall() ? STATUS_SUCCESS : STATUS_UNSUCCESSFUL;
|
|
break;
|
|
}
|
|
default: {
|
|
NovaHypervisorLog(TRACE_FLAG_INFO, "Unsupported vmcall: 0x%llx\n", vmcallNumber);
|
|
status = STATUS_INVALID_PARAMETER;
|
|
break;
|
|
}
|
|
}
|
|
return status;
|
|
}
|
|
|
|
/*
|
|
* Description:
|
|
* HypercallHandler is responsible for handling Hyper-V's hypercalls.
|
|
*
|
|
* Parameters:
|
|
* @eptInstance [_In_ Ept*] -- EPT instance of a VM.
|
|
* @registers [_Inout_ PGUEST_REGS] -- VM's registers.
|
|
*
|
|
* Returns:
|
|
* @status [bool] -- True if the hypercall was forwarded.
|
|
*/
|
|
bool HypercallHandler(_In_ Ept* eptInstance, _Inout_ PGUEST_REGS registers, _In_ UINT64 guestFxState) {
|
|
if (!eptInstance || !registers)
|
|
return false;
|
|
HYPERCALL_INPUT_VALUE hypercall = { 0 };
|
|
hypercall.Flags = registers->rcx;
|
|
const bool flushVirtualAddressSpace =
|
|
hypercall.Fields.CallCode == HvSwitchVirtualAddressSpace ||
|
|
hypercall.Fields.CallCode == HvFlushVirtualAddressSpace ||
|
|
hypercall.Fields.CallCode == HvFlushVirtualAddressList ||
|
|
hypercall.Fields.CallCode == HvCallFlushVirtualAddressSpaceEx ||
|
|
hypercall.Fields.CallCode == HvCallFlushVirtualAddressListEx;
|
|
const bool flushGuestPhysicalAddressSpace =
|
|
hypercall.Fields.CallCode == HvCallFlushGuestPhysicalAddressSpace ||
|
|
hypercall.Fields.CallCode == HvCallFlushGuestPhysicalAddressList;
|
|
const bool requiresLocalTranslationFlush =
|
|
flushVirtualAddressSpace ||
|
|
flushGuestPhysicalAddressSpace;
|
|
const UINT64 inputGpa = registers->rdx;
|
|
const UINT64 outputGpa = registers->r8;
|
|
|
|
AsmHypervVmcall(reinterpret_cast<UINT64>(registers), guestFxState);
|
|
|
|
if (requiresLocalTranslationFlush) {
|
|
VmxHelper::InvalidateEpt(eptInstance->GetEptPointerFlags());
|
|
VmxHelper::InvalidateVpid();
|
|
|
|
NovaHypervisorLog(TRACE_FLAG_DEBUG,
|
|
"Forwarded Hyper-V TLB hypercall code=0x%x fast=%u repCount=%u repStart=%u inputGpa=0x%llx outputGpa=0x%llx status=0x%llx localFlush=INVEPT_SINGLE_CONTEXT%s",
|
|
static_cast<ULONG>(hypercall.Fields.CallCode),
|
|
static_cast<ULONG>(hypercall.Fields.Fast),
|
|
static_cast<ULONG>(hypercall.Fields.RepCount),
|
|
static_cast<ULONG>(hypercall.Fields.RepStartIndex),
|
|
inputGpa,
|
|
outputGpa,
|
|
registers->rax,
|
|
VpidSupported ? "+INVVPID" : "");
|
|
}
|
|
/*else {
|
|
NovaHypervisorLog(TRACE_FLAG_DEBUG,
|
|
"Forwarded Hyper-V hypercall code=0x%x fast=%u repCount=%u repStart=%u inputGpa=0x%llx outputGpa=0x%llx status=0x%llx",
|
|
static_cast<ULONG>(hypercall.Fields.CallCode),
|
|
static_cast<ULONG>(hypercall.Fields.Fast),
|
|
static_cast<ULONG>(hypercall.Fields.RepCount),
|
|
static_cast<ULONG>(hypercall.Fields.RepStartIndex),
|
|
inputGpa,
|
|
outputGpa,
|
|
registers->rax);
|
|
}*/
|
|
|
|
return true;
|
|
}
|