Require Import Coqlib.
Require Import Maps.
Require Import ASTExtra.
Require Import Integers.
Require Import Floats.
Require Import Values.
Require Import Memory.
Require Import Events.
Require Import Stacklayout.
Require Import Globalenvs.
Require Import Smallstep.
Require Import AuxStateDataType.
Require Import CommonTactic.
Require Import AuxLemma.
Require Import RealParams.
Require Import PrimSemantics.
Require Import XOmega.
Require Import liblayers.logic.PTreeModules.
Require Import liblayers.logic.LayerLogicImpl.
Require Import liblayers.compat.CompatLayers.
Require Import liblayers.compat.CompatGenSem.
Require Import Constants.
Require Import AbsMachine.Spec.
Require Import MemAux.Spec.
Require Import VMPower.Spec.
Require Import SmmuOps.Spec.
Require Import MmioSPTWalk.Spec.
Require Import RData.
Require Import CtxtSwitch.Spec.
Require Import NPTWalk.Spec.
Require Import Ident.
Require Import MemOps.Spec.
Require Import BootOps.Spec.
Require Import SmmuRaw.Spec.
Require Import HypsecCommLib.
Local Open Scope Z_scope.
Section CtxtSwitchLayer.
Context `{real_params: RealParams}.
Section InvDef.
Record high_level_invariant (adt: RData) :=
mkInvariants { }.
Global Instance CtxtSwitch_ops : CompatDataOps RData :=
{
empty_data := empty_adt;
high_level_invariant := high_level_invariant;
low_level_invariant := fun (b: block) (d: RData) => True;
kernel_mode adt := True
}.
End InvDef.
Section InvInit.
Global Instance CtxtSwitch_prf : CompatData RData.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
End InvInit.
Context `{Hstencil: Stencil}.
Context `{Hmem: Mem.MemoryModelX}.
Context `{Hmwd: UseMemWithData mem}.
Section InvProof.
Global Instance save_vm_inv: PreservesInvariants save_vm_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance restore_host_inv: PreservesInvariants restore_host_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance save_host_inv: PreservesInvariants save_host_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance restore_vm_inv: PreservesInvariants restore_vm_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance remap_vm_image_inv: PreservesInvariants remap_vm_image_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance set_boot_info_inv: PreservesInvariants set_boot_info_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance read_esr_el2_inv: PreservesInvariants read_esr_el2_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance panic_inv: PreservesInvariants panic_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance exit_populate_fault_inv: PreservesInvariants exit_populate_fault_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance map_page_host_inv: PreservesInvariants map_page_host_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance map_io_inv: PreservesInvariants map_io_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance get_vm_poweron_inv: PreservesInvariants get_vm_poweron_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance core_to_host_inv: PreservesInvariants core_to_host_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance core_to_vm_inv: PreservesInvariants core_to_vm_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance get_cur_vmid_inv: PreservesInvariants get_cur_vmid_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance get_cur_vcpuid_inv: PreservesInvariants get_cur_vcpuid_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance smmu_assign_page_inv: PreservesInvariants smmu_assign_page_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance mem_load_ref_inv: PreservesInvariants mem_load_ref_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance dev_load_ref_inv: PreservesInvariants dev_load_ref_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance smmu_map_page_inv: PreservesInvariants smmu_map_page_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance emulate_mmio_inv: PreservesInvariants emulate_mmio_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance check_inv: PreservesInvariants check_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance dev_store_ref_inv: PreservesInvariants dev_store_ref_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance get_shadow_ctxt_inv: PreservesInvariants get_shadow_ctxt_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance core_handle_sys64_inv: PreservesInvariants core_handle_sys64_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance read_hpfar_el2_inv: PreservesInvariants read_hpfar_el2_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance vm_to_core_inv: PreservesInvariants vm_to_core_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance revoke_stage2_sg_gpa_inv: PreservesInvariants revoke_stage2_sg_gpa_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance grant_stage2_sg_gpa_inv: PreservesInvariants grant_stage2_sg_gpa_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance timer_set_cntvoff_inv: PreservesInvariants timer_set_cntvoff_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance set_shadow_ctxt_inv: PreservesInvariants set_shadow_ctxt_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance el2_arm_lpae_clear_inv: PreservesInvariants el2_arm_lpae_clear_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance register_kvm_inv: PreservesInvariants register_kvm_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance smmu_init_pte_inv: PreservesInvariants smmu_init_pte_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance verify_and_load_images_inv: PreservesInvariants verify_and_load_images_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance el2_arm_lpae_iova_to_phys_inv: PreservesInvariants el2_arm_lpae_iova_to_phys_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance clear_vm_range_inv: PreservesInvariants clear_vm_range_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance el2_alloc_smmu_pgd_inv: PreservesInvariants el2_alloc_smmu_pgd_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance register_vcpu_inv: PreservesInvariants register_vcpu_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance host_to_core_inv: PreservesInvariants host_to_core_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance el2_free_smmu_pgd_inv: PreservesInvariants el2_free_smmu_pgd_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
Global Instance mem_store_ref_inv: PreservesInvariants mem_store_ref_spec.
Proof.
constructor; intros; simpl; eauto.
constructor.
Qed.
End InvProof.
Section LayerDef.
Definition CtxtSwitch_fresh : compatlayer (cdata RData) :=
save_vm ↦ gensem save_vm_spec
⊕ restore_host ↦ gensem restore_host_spec
⊕ save_host ↦ gensem save_host_spec
⊕ restore_vm ↦ gensem restore_vm_spec.
Definition CtxtSwitch_passthrough : compatlayer (cdata RData) :=
remap_vm_image ↦ gensem remap_vm_image_spec
⊕ set_boot_info ↦ gensem set_boot_info_spec
⊕ read_esr_el2 ↦ gensem read_esr_el2_spec
⊕ panic ↦ gensem panic_spec
⊕ exit_populate_fault ↦ gensem exit_populate_fault_spec
⊕ map_page_host ↦ gensem map_page_host_spec
⊕ map_io ↦ gensem map_io_spec
⊕ get_vm_poweron ↦ gensem get_vm_poweron_spec
⊕ core_to_host ↦ gensem core_to_host_spec
⊕ core_to_vm ↦ gensem core_to_vm_spec
⊕ get_cur_vmid ↦ gensem get_cur_vmid_spec
⊕ get_cur_vcpuid ↦ gensem get_cur_vcpuid_spec
⊕ smmu_assign_page ↦ gensem smmu_assign_page_spec
⊕ mem_load_ref ↦ gensem mem_load_ref_spec
⊕ dev_load_ref ↦ gensem dev_load_ref_spec
⊕ smmu_map_page ↦ gensem smmu_map_page_spec
⊕ emulate_mmio ↦ gensem emulate_mmio_spec
⊕ check ↦ gensem check_spec
⊕ dev_store_ref ↦ gensem dev_store_ref_spec
⊕ get_shadow_ctxt ↦ gensem get_shadow_ctxt_spec
⊕ core_handle_sys64 ↦ gensem core_handle_sys64_spec
⊕ read_hpfar_el2 ↦ gensem read_hpfar_el2_spec
⊕ vm_to_core ↦ gensem vm_to_core_spec
⊕ revoke_stage2_sg_gpa ↦ gensem revoke_stage2_sg_gpa_spec
⊕ grant_stage2_sg_gpa ↦ gensem grant_stage2_sg_gpa_spec
⊕ timer_set_cntvoff ↦ gensem timer_set_cntvoff_spec
⊕ set_shadow_ctxt ↦ gensem set_shadow_ctxt_spec
⊕ el2_arm_lpae_clear ↦ gensem el2_arm_lpae_clear_spec
⊕ register_kvm ↦ gensem register_kvm_spec
⊕ smmu_init_pte ↦ gensem smmu_init_pte_spec
⊕ verify_and_load_images ↦ gensem verify_and_load_images_spec
⊕ el2_arm_lpae_iova_to_phys ↦ gensem el2_arm_lpae_iova_to_phys_spec
⊕ clear_vm_range ↦ gensem clear_vm_range_spec
⊕ el2_alloc_smmu_pgd ↦ gensem el2_alloc_smmu_pgd_spec
⊕ register_vcpu ↦ gensem register_vcpu_spec
⊕ host_to_core ↦ gensem host_to_core_spec
⊕ el2_free_smmu_pgd ↦ gensem el2_free_smmu_pgd_spec
⊕ mem_store_ref ↦ gensem mem_store_ref_spec.
Definition CtxtSwitch := CtxtSwitch_fresh ⊕ CtxtSwitch_passthrough.
End LayerDef.
End CtxtSwitchLayer.