[interrupt-handlers] added GDT/GDTR

- added GdtEntry struct for GDT static mut global var,
- added null, kernel code, and kernel data segments to GDT,
- added code to load the GDT, and
- added calls to init_idt, load_idt, and load_gdt to entrypoint.

Signed-off-by: danbugs <[email protected]>

Author: danbugs

src/hyperlight_guest/src/entrypoint.rs

@@ -22,10 +22,12 @@ use hyperlight_common::mem::{HyperlightPEB, RunMode};
 use log::LevelFilter;
 use spin::Once;
 
+use crate::gdt::load_gdt;
 use crate::guest_error::reset_error;
 use crate::guest_function_call::dispatch_function;
 use crate::guest_logger::init_logger;
 use crate::host_function_call::{outb, OutBAction};
+use crate::idtr::load_idt;
 use crate::{
     __security_cookie, HEAP_ALLOCATOR, MIN_STACK_ADDRESS, OS_PAGE_SIZE, OUTB_PTR,
     OUTB_PTR_WITH_CONTEXT, P_PEB, RUNNING_MODE,
@@ -104,6 +106,10 @@ pub extern "win64" fn entrypoint(peb_address: u64, seed: u64, ops: u64, max_log_
                     // It also means that should we change the layout of the struct in the future, we
                     // don't have to change the assembly code.
                     MIN_STACK_ADDRESS = (*peb_ptr).gueststackData.minUserStackAddress;
+
+                    // Setup GDT and IDT
+                    load_gdt();
+                    load_idt();
                 }
                 RunMode::InProcessLinux | RunMode::InProcessWindows => {
                     RUNNING_MODE = (*peb_ptr).runMode;

src/hyperlight_guest/src/gdt.rs

@@ -0,0 +1,97 @@
+/*
+Copyright 2024 The Hyperlight Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+use core::arch::asm;
+use core::ptr::addr_of;
+
+/// Entry in the Global Descriptor Table (GDT)
+/// For reference, see page 3-10 Vol. 3A of Intel 64 and IA-32
+/// Architectures Software Developer's Manual, figure 3-8
+/// (https://i.imgur.com/1i9xUmx.png).
+/// From the bottom, we have:
+/// - segment limit 15..0 = limit_low
+/// - base address 31..16 = base_low
+/// - base 23..16 = base_middle
+/// - p dpl s type 15..8 = access
+/// - p d/b l avl seg. limit 23..16 = flags_limit
+/// - base 31..24 = base_high
+#[repr(C, align(8))]
+pub struct GdtEntry {
+    limit_low: u16,
+    base_low: u16,
+    base_middle: u8,
+    access: u8,
+    flags_limit: u8,
+    base_high: u8,
+}
+
+impl GdtEntry {
+    /// Creates a new GDT entry.
+    pub const fn new(base: u32, limit: u32, access: u8, flags: u8) -> Self {
+        Self {
+            base_low: (base & 0xffff) as u16,
+            base_middle: ((base >> 16) & 0xff) as u8,
+            base_high: ((base >> 24) & 0xff) as u8,
+            limit_low: (limit & 0xffff) as u16,
+            flags_limit: (((limit >> 16) & 0x0f) as u8) | ((flags & 0x0f) << 4),
+            access,
+        }
+    }
+}
+
+// Global Descriptor Table (GDT)
+// For reference, see page 2-3 Vol. 3A of Intel 64 and IA-32
+// Architectures Software Developer's Manual.
+static mut GDT: [GdtEntry; 3] = [
+    // Null descriptor
+    GdtEntry::new(0, 0, 0, 0),
+    // Kernel Code Segment (0x08)
+    GdtEntry::new(0, 0, 0x9A, 0xA),
+    // Kernel Data Segment (0x10)
+    GdtEntry::new(0, 0, 0x92, 0xC),
+];
+
+/// GDTR (GDT pointer)
+#[repr(C, packed)]
+struct GdtPointer {
+    size: u16,
+    base: u64,
+}
+
+/// Load the GDT
+pub unsafe fn load_gdt() {
+    let gdt_ptr = GdtPointer {
+        size: (core::mem::size_of::<[GdtEntry; 3]>() - 1) as u16,
+        base: addr_of!(GDT) as *const _ as u64,
+    };
+
+    asm!(
+    "lgdt [{0}]",
+    "mov ax, 0x10",        // Load data segment registers
+    "mov ds, ax",
+    "mov es, ax",
+    "mov fs, ax",
+    "mov gs, ax",
+    "mov ss, ax",
+    "push 0x08",            // Push CS (kernel code segment)
+    "lea rax, [2f + rip]",  // Load the next instruction's address
+    "push rax",             // Push address onto stack
+    "retfq",                // Far return to update CS
+    "2:",                   // Label for continued execution
+    in(reg) &gdt_ptr,
+    options(nostack, preserves_flags)
+    );
+}

src/hyperlight_guest/src/lib.rs

@@ -50,11 +50,12 @@ pub mod setjmp;
 
 pub mod chkstk;
 pub mod error;
-pub mod logging;
-pub mod interrupt_entry;
-pub mod interrupt_handlers;
+pub mod gdt;
 pub mod idt;
 pub mod idtr;
+pub mod interrupt_entry;
+pub mod interrupt_handlers;
+pub mod logging;
 
 // Unresolved symbols
 ///cbindgen:ignore