From nobody Thu May 16 01:02:44 2024 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=fail; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail(p=none dis=none) header.from=redhat.com ARC-Seal: i=1; a=rsa-sha256; t=1601369909; cv=none; d=zohomail.com; s=zohoarc; b=lgvYSYwYNnUFoWcBu17+9CrfOqT0jqoYbpfttyGWmGsYXE97MjsWR/dZBiTdYqUO77WzHkREQvRXzcvhcunnFQGULwEUE5x9CWPRV8hdwaD0koTHt981+sg62dfpx6VzPEISUy3XMoTmmFuf/sxNHpToMhmWuEZ6/cH5TiQofp0= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1601369909; h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:To; bh=bOpLCl232BV1cFhR67SrTPAGiW78Gwt9UKIEAZc/kEI=; b=ZAWVOHhRYSyziqciI+tg3i6DdileibgNRZBKqpGTYBH2foIWHpOg6nVTukkSSh98Yd/FiVyue2iZlWNYcGf9LwowH6k+sDG3/UQ4pWQSnSdeHWS/phzDZDQDccMwsK84o4GWKwuuj5FTGHJc6Yzv+wW8amt3yei44RpwvrjkaRk= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=fail; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail header.from= (p=none dis=none) header.from= Return-Path: Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1601369909754272.8799795565518; Tue, 29 Sep 2020 01:58:29 -0700 (PDT) Received: from localhost ([::1]:35022 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kNBSu-0002oN-Ad for importer@patchew.org; Tue, 29 Sep 2020 04:58:28 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:52722) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kNBQn-0000vn-0h for qemu-devel@nongnu.org; Tue, 29 Sep 2020 04:56:18 -0400 Received: from us-smtp-delivery-124.mimecast.com ([216.205.24.124]:37938) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1kNBQk-0000EU-Ke for qemu-devel@nongnu.org; Tue, 29 Sep 2020 04:56:16 -0400 Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-589-sZ2w6PzuN4u-EoQzHRny-A-1; Tue, 29 Sep 2020 04:56:11 -0400 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id F14E5104D3E4; Tue, 29 Sep 2020 08:56:09 +0000 (UTC) Received: from laptop.redhat.com (ovpn-113-210.ams2.redhat.com [10.36.113.210]) by smtp.corp.redhat.com (Postfix) with ESMTP id 3D3B83782; Tue, 29 Sep 2020 08:56:07 +0000 (UTC) Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1601369772; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=bOpLCl232BV1cFhR67SrTPAGiW78Gwt9UKIEAZc/kEI=; b=LfOv4JZV//to2xJWLBBYC/RPt8++TNdFYwUZ8DWE3nJYrd3ARKHN0sHooWQAO2M1n60o6H FR0ZcFp4VpBynwcI9FLvdYP7ycrcP+TzkvfvnryONa/lLQhrG1TlMu1ih5F2yR+n3of0u9 suioLFfRk5BNzwFXaqIyuOOTYpuqgpU= X-MC-Unique: sZ2w6PzuN4u-EoQzHRny-A-1 From: Eric Auger To: eric.auger.pro@gmail.com, eric.auger@redhat.com, qemu-devel@nongnu.org, qemu-arm@nongnu.org, stefanha@redhat.com, fam@euphon.net, philmd@redhat.com, alex.williamson@redhat.com Subject: [PATCH v2 1/2] util/vfio-helpers: Collect IOVA reserved regions Date: Tue, 29 Sep 2020 10:55:49 +0200 Message-Id: <20200929085550.30926-2-eric.auger@redhat.com> In-Reply-To: <20200929085550.30926-1-eric.auger@redhat.com> References: <20200929085550.30926-1-eric.auger@redhat.com> MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.79 on 10.5.11.15 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=eric.auger@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: quoted-printable Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists.gnu.org; Received-SPF: pass client-ip=216.205.24.124; envelope-from=eric.auger@redhat.com; helo=us-smtp-delivery-124.mimecast.com X-detected-operating-system: by eggs.gnu.org: First seen = 2020/09/29 02:22:44 X-ACL-Warn: Detected OS = Linux 2.2.x-3.x [generic] [fuzzy] X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.687, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: lvivier@redhat.com, kwolf@redhat.com, cohuck@redhat.com, mreitz@redhat.com Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: "Qemu-devel" X-ZohoMail-DKIM: fail (Header signature does not verify) Content-Type: text/plain; charset="utf-8" The IOVA allocator currently ignores host reserved regions. As a result some chosen IOVAs may collide with some of them, resulting in VFIO MAP_DMA errors later on. This happens on ARM where the MSI reserved window quickly is encountered: [0x8000000, 0x8100000]. since 5.4 kernel, VFIO returns the usable IOVA regions. So let's enumerate them in the prospect to avoid them, later on. Signed-off-by: Eric Auger --- v1 -> v2: - fix the loop on caps - set s->usable_iova_ranges=3DNULL to avoid double free --- util/vfio-helpers.c | 72 +++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 70 insertions(+), 2 deletions(-) diff --git a/util/vfio-helpers.c b/util/vfio-helpers.c index 583bdfb36f..ba0ee6e21c 100644 --- a/util/vfio-helpers.c +++ b/util/vfio-helpers.c @@ -40,6 +40,11 @@ typedef struct { uint64_t iova; } IOVAMapping; =20 +struct IOVARange { + uint64_t start; + uint64_t end; +}; + struct QEMUVFIOState { QemuMutex lock; =20 @@ -49,6 +54,8 @@ struct QEMUVFIOState { int device; RAMBlockNotifier ram_notifier; struct vfio_region_info config_region_info, bar_region_info[6]; + struct IOVARange *usable_iova_ranges; + uint8_t nb_iova_ranges; =20 /* These fields are protected by @lock */ /* VFIO's IO virtual address space is managed by splitting into a few @@ -236,6 +243,35 @@ static int qemu_vfio_pci_write_config(QEMUVFIOState *s= , void *buf, int size, int return ret =3D=3D size ? 0 : -errno; } =20 +static void collect_usable_iova_ranges(QEMUVFIOState *s, void *buf) +{ + struct vfio_iommu_type1_info *info =3D (struct vfio_iommu_type1_info *= )buf; + struct vfio_info_cap_header *cap =3D (void *)buf + info->cap_offset; + struct vfio_iommu_type1_info_cap_iova_range *cap_iova_range; + int i; + + while (cap->id !=3D VFIO_IOMMU_TYPE1_INFO_CAP_IOVA_RANGE) { + if (!cap->next) { + return; + } + cap =3D (struct vfio_info_cap_header *)(buf + cap->next); + } + + cap_iova_range =3D (struct vfio_iommu_type1_info_cap_iova_range *)cap; + + s->nb_iova_ranges =3D cap_iova_range->nr_iovas; + if (s->nb_iova_ranges > 1) { + s->usable_iova_ranges =3D + g_realloc(s->usable_iova_ranges, + s->nb_iova_ranges * sizeof(struct IOVARange)); + } + + for (i =3D 0; i < s->nb_iova_ranges; i++) { + s->usable_iova_ranges[i].start =3D cap_iova_range->iova_ranges[i].= start; + s->usable_iova_ranges[i].end =3D cap_iova_range->iova_ranges[i].en= d; + } +} + static int qemu_vfio_init_pci(QEMUVFIOState *s, const char *device, Error **errp) { @@ -243,10 +279,13 @@ static int qemu_vfio_init_pci(QEMUVFIOState *s, const= char *device, int i; uint16_t pci_cmd; struct vfio_group_status group_status =3D { .argsz =3D sizeof(group_st= atus) }; - struct vfio_iommu_type1_info iommu_info =3D { .argsz =3D sizeof(iommu_= info) }; + struct vfio_iommu_type1_info *iommu_info =3D NULL; + size_t iommu_info_size =3D sizeof(*iommu_info); struct vfio_device_info device_info =3D { .argsz =3D sizeof(device_inf= o) }; char *group_file =3D NULL; =20 + s->usable_iova_ranges =3D NULL; + /* Create a new container */ s->container =3D open("/dev/vfio/vfio", O_RDWR); =20 @@ -310,13 +349,35 @@ static int qemu_vfio_init_pci(QEMUVFIOState *s, const= char *device, goto fail; } =20 + iommu_info =3D g_malloc0(iommu_info_size); + iommu_info->argsz =3D iommu_info_size; + /* Get additional IOMMU info */ - if (ioctl(s->container, VFIO_IOMMU_GET_INFO, &iommu_info)) { + if (ioctl(s->container, VFIO_IOMMU_GET_INFO, iommu_info)) { error_setg_errno(errp, errno, "Failed to get IOMMU info"); ret =3D -errno; goto fail; } =20 + /* + * if the kernel does not report usable IOVA regions, choose + * the legacy [QEMU_VFIO_IOVA_MIN, QEMU_VFIO_IOVA_MAX -1] region + */ + s->nb_iova_ranges =3D 1; + s->usable_iova_ranges =3D g_new0(struct IOVARange, 1); + s->usable_iova_ranges[0].start =3D QEMU_VFIO_IOVA_MIN; + s->usable_iova_ranges[0].end =3D QEMU_VFIO_IOVA_MAX - 1; + + if (iommu_info->argsz > iommu_info_size) { + iommu_info_size =3D iommu_info->argsz; + iommu_info =3D g_realloc(iommu_info, iommu_info_size); + if (ioctl(s->container, VFIO_IOMMU_GET_INFO, iommu_info)) { + ret =3D -errno; + goto fail; + } + collect_usable_iova_ranges(s, iommu_info); + } + s->device =3D ioctl(s->group, VFIO_GROUP_GET_DEVICE_FD, device); =20 if (s->device < 0) { @@ -365,8 +426,13 @@ static int qemu_vfio_init_pci(QEMUVFIOState *s, const = char *device, if (ret) { goto fail; } + g_free(iommu_info); return 0; fail: + g_free(s->usable_iova_ranges); + s->usable_iova_ranges =3D NULL; + s->nb_iova_ranges =3D 0; + g_free(iommu_info); close(s->group); fail_container: close(s->container); @@ -716,6 +782,8 @@ void qemu_vfio_close(QEMUVFIOState *s) qemu_vfio_undo_mapping(s, &s->mappings[i], NULL); } ram_block_notifier_remove(&s->ram_notifier); + g_free(s->usable_iova_ranges); + s->nb_iova_ranges =3D 0; qemu_vfio_reset(s); close(s->device); close(s->group); --=20 2.21.3 From nobody Thu May 16 01:02:44 2024 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=fail; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail(p=none dis=none) header.from=redhat.com ARC-Seal: i=1; a=rsa-sha256; t=1601369980; cv=none; d=zohomail.com; s=zohoarc; b=YbfaYAs4UDKslwgIfir71M/mIRgGCJBsiYenfuWwY5GaSS44+ibGv2DXck6ocswDkDTYQ0TK+SYW9kKDCQzSOPFa24pIf5dJOPZ78pCUTRPuK0z+U8atzFg4tnsdCvE15ndluN9xaO+2B540kCWa6gTKLcLkY0kjgmqYfRy7X60= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1601369980; h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:To; bh=JNg0jJ8QHbPOvKUGkvHLxcaUNNqbmVByG1qEKoxw+k8=; b=oDTVX1ufRezDCkOEGz5WdAOSxFDN6fo3D2ou+j3ymz726PeRQFx4IhXZsnqFafvGv6FVj6RYbJK93WTt1QH6F8l/o9tPtKVBMkMZE1qK5gM/TmRh8kU3rQfdH4JdmiNOu8aUotsRV2ElDRlVPBb78StOi77yS+stTG4RkmwaXuA= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=fail; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail header.from= (p=none dis=none) header.from= Return-Path: Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1601369980266845.0224118393166; Tue, 29 Sep 2020 01:59:40 -0700 (PDT) Received: from localhost ([::1]:39814 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kNBU3-0004rO-2t for importer@patchew.org; Tue, 29 Sep 2020 04:59:39 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:52770) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kNBQs-0000xQ-6J for qemu-devel@nongnu.org; Tue, 29 Sep 2020 04:56:22 -0400 Received: from us-smtp-delivery-124.mimecast.com ([216.205.24.124]:24962) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1kNBQq-0000GH-LN for qemu-devel@nongnu.org; Tue, 29 Sep 2020 04:56:21 -0400 Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-61-_y3SV-8SMDKI2kXAVy9ZYA-1; Tue, 29 Sep 2020 04:56:14 -0400 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 0A7559CC08; Tue, 29 Sep 2020 08:56:13 +0000 (UTC) Received: from laptop.redhat.com (ovpn-113-210.ams2.redhat.com [10.36.113.210]) by smtp.corp.redhat.com (Postfix) with ESMTP id 5956055773; Tue, 29 Sep 2020 08:56:10 +0000 (UTC) Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1601369779; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=JNg0jJ8QHbPOvKUGkvHLxcaUNNqbmVByG1qEKoxw+k8=; b=Ot5MiPe8gzj672AUhnbbeAD99/ahqWMqepazjKxgnJWD8TsHA7xe7ims244NXwZSVVcTf6 95Q5cMY24lDsb10PsZHKSA1JRLN8RPJ0g5Zn1Ii2ZyzVSgu7vWu6FbO0VLgqht3rwgx7Nt nxU0iAxdY049RhYzK7B+PoeNUWCa9qY= X-MC-Unique: _y3SV-8SMDKI2kXAVy9ZYA-1 From: Eric Auger To: eric.auger.pro@gmail.com, eric.auger@redhat.com, qemu-devel@nongnu.org, qemu-arm@nongnu.org, stefanha@redhat.com, fam@euphon.net, philmd@redhat.com, alex.williamson@redhat.com Subject: [PATCH v2 2/2] util/vfio-helpers: Rework the IOVA allocator to avoid IOVA reserved regions Date: Tue, 29 Sep 2020 10:55:50 +0200 Message-Id: <20200929085550.30926-3-eric.auger@redhat.com> In-Reply-To: <20200929085550.30926-1-eric.auger@redhat.com> References: <20200929085550.30926-1-eric.auger@redhat.com> MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.79 on 10.5.11.15 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=eric.auger@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: quoted-printable Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists.gnu.org; Received-SPF: pass client-ip=216.205.24.124; envelope-from=eric.auger@redhat.com; helo=us-smtp-delivery-124.mimecast.com X-detected-operating-system: by eggs.gnu.org: First seen = 2020/09/29 02:22:44 X-ACL-Warn: Detected OS = Linux 2.2.x-3.x [generic] [fuzzy] X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.687, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=unavailable autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: lvivier@redhat.com, kwolf@redhat.com, cohuck@redhat.com, mreitz@redhat.com Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: "Qemu-devel" X-ZohoMail-DKIM: fail (Header signature does not verify) Content-Type: text/plain; charset="utf-8" Introduce the qemu_vfio_find_fixed/temp_iova helpers which respectively allocate IOVAs from the bottom/top parts of the usable IOVA range, without picking within host IOVA reserved windows. The allocation remains basic: if the size is too big for the remaining of the current usable IOVA range, we jump to the next one, leaving a hole in the address map. Signed-off-by: Eric Auger Reviewed-by: Stefan Hajnoczi --- v1 -> v2: - handle possible wrap --- util/vfio-helpers.c | 57 +++++++++++++++++++++++++++++++++++++++++---- 1 file changed, 53 insertions(+), 4 deletions(-) diff --git a/util/vfio-helpers.c b/util/vfio-helpers.c index ba0ee6e21c..71145970f3 100644 --- a/util/vfio-helpers.c +++ b/util/vfio-helpers.c @@ -667,6 +667,50 @@ static bool qemu_vfio_verify_mappings(QEMUVFIOState *s) return true; } =20 +static int +qemu_vfio_find_fixed_iova(QEMUVFIOState *s, size_t size, uint64_t *iova) +{ + int i; + + for (i =3D 0; i < s->nb_iova_ranges; i++) { + if (s->usable_iova_ranges[i].end < s->low_water_mark) { + continue; + } + s->low_water_mark =3D + MAX(s->low_water_mark, s->usable_iova_ranges[i].start); + + if (s->usable_iova_ranges[i].end - s->low_water_mark + 1 >=3D size= || + s->usable_iova_ranges[i].end - s->low_water_mark + 1 =3D=3D 0)= { + *iova =3D s->low_water_mark; + s->low_water_mark +=3D size; + return 0; + } + } + return -ENOMEM; +} + +static int +qemu_vfio_find_temp_iova(QEMUVFIOState *s, size_t size, uint64_t *iova) +{ + int i; + + for (i =3D s->nb_iova_ranges - 1; i >=3D 0; i--) { + if (s->usable_iova_ranges[i].start > s->high_water_mark) { + continue; + } + s->high_water_mark =3D + MIN(s->high_water_mark, s->usable_iova_ranges[i].end + 1); + + if (s->high_water_mark - s->usable_iova_ranges[i].start + 1 >=3D s= ize || + s->high_water_mark - s->usable_iova_ranges[i].start + 1 =3D=3D= 0) { + *iova =3D s->high_water_mark - size; + s->high_water_mark =3D *iova; + return 0; + } + } + return -ENOMEM; +} + /* Map [host, host + size) area into a contiguous IOVA address space, and = store * the result in @iova if not NULL. The caller need to make sure the area = is * aligned to page size, and mustn't overlap with existing mapping areas (= split @@ -693,7 +737,11 @@ int qemu_vfio_dma_map(QEMUVFIOState *s, void *host, si= ze_t size, goto out; } if (!temporary) { - iova0 =3D s->low_water_mark; + if (qemu_vfio_find_fixed_iova(s, size, &iova0)) { + ret =3D -ENOMEM; + goto out; + } + mapping =3D qemu_vfio_add_mapping(s, host, size, index + 1, io= va0); if (!mapping) { ret =3D -ENOMEM; @@ -705,15 +753,16 @@ int qemu_vfio_dma_map(QEMUVFIOState *s, void *host, s= ize_t size, qemu_vfio_undo_mapping(s, mapping, NULL); goto out; } - s->low_water_mark +=3D size; qemu_vfio_dump_mappings(s); } else { - iova0 =3D s->high_water_mark - size; + if (qemu_vfio_find_temp_iova(s, size, &iova0)) { + ret =3D -ENOMEM; + goto out; + } ret =3D qemu_vfio_do_mapping(s, host, size, iova0); if (ret) { goto out; } - s->high_water_mark -=3D size; } } if (iova) { --=20 2.21.3