[qemu.git] / dump / win_dump.c

/*
 * Windows crashdump
 *
 * Copyright (c) 2018 Virtuozzo International GmbH
 *
 * This work is licensed under the terms of the GNU GPL, version 2 or later.
 * See the COPYING file in the top-level directory.
 *
 */

#include "qemu/osdep.h"
#include "qemu-common.h"
#include "qemu/cutils.h"
#include "elf.h"
#include "cpu.h"
#include "exec/hwaddr.h"
#include "monitor/monitor.h"
#include "sysemu/kvm.h"
#include "sysemu/dump.h"
#include "sysemu/memory_mapping.h"
#include "sysemu/cpus.h"
#include "qapi/error.h"
#include "qapi/qmp/qerror.h"
#include "qemu/error-report.h"
#include "hw/misc/vmcoreinfo.h"
#include "win_dump.h"

static size_t write_run(WinDumpPhyMemRun64 *run, int fd, Error **errp)
{
    void *buf;
    uint64_t addr = run->BasePage << TARGET_PAGE_BITS;
    uint64_t size = run->PageCount << TARGET_PAGE_BITS;
    uint64_t len, l;
    size_t total = 0;

    while (size) {
        len = size;

        buf = cpu_physical_memory_map(addr, &len, false);
        if (!buf) {
            error_setg(errp, "win-dump: failed to map physical range"
                             " 0x%016" PRIx64 "-0x%016" PRIx64, addr, addr + size - 1);
            return 0;
        }

        l = qemu_write_full(fd, buf, len);
        cpu_physical_memory_unmap(buf, addr, false, len);
        if (l != len) {
            error_setg(errp, QERR_IO_ERROR);
            return 0;
        }

        addr += l;
        size -= l;
        total += l;
    }

    return total;
}

static void write_runs(DumpState *s, WinDumpHeader64 *h, Error **errp)
{
    WinDumpPhyMemDesc64 *desc = &h->PhysicalMemoryBlock;
    WinDumpPhyMemRun64 *run = desc->Run;
    Error *local_err = NULL;
    int i;

    for (i = 0; i < desc->NumberOfRuns; i++) {
        s->written_size += write_run(run + i, s->fd, &local_err);
        if (local_err) {
            error_propagate(errp, local_err);
            return;
        }
    }
}

static void patch_mm_pfn_database(WinDumpHeader64 *h, Error **errp)
{
    if (cpu_memory_rw_debug(first_cpu,
            h->KdDebuggerDataBlock + KDBG_MM_PFN_DATABASE_OFFSET64,
            (uint8_t *)&h->PfnDatabase, sizeof(h->PfnDatabase), 0)) {
        error_setg(errp, "win-dump: failed to read MmPfnDatabase");
        return;
    }
}

static void patch_bugcheck_data(WinDumpHeader64 *h, Error **errp)
{
    uint64_t KiBugcheckData;

    if (cpu_memory_rw_debug(first_cpu,
            h->KdDebuggerDataBlock + KDBG_KI_BUGCHECK_DATA_OFFSET64,
            (uint8_t *)&KiBugcheckData, sizeof(KiBugcheckData), 0)) {
        error_setg(errp, "win-dump: failed to read KiBugcheckData");
        return;
    }

    if (cpu_memory_rw_debug(first_cpu,
            KiBugcheckData,
            h->BugcheckData, sizeof(h->BugcheckData), 0)) {
        error_setg(errp, "win-dump: failed to read bugcheck data");
        return;
    }

    /*
     * If BugcheckCode wasn't saved, we consider guest OS as alive.
     */

    if (!h->BugcheckCode) {
        h->BugcheckCode = LIVE_SYSTEM_DUMP;
    }
}

/*
 * This routine tries to correct mistakes in crashdump header.
 */
static void patch_header(WinDumpHeader64 *h)
{
    Error *local_err = NULL;

    h->RequiredDumpSpace = sizeof(WinDumpHeader64) +
            (h->PhysicalMemoryBlock.NumberOfPages << TARGET_PAGE_BITS);
    h->PhysicalMemoryBlock.unused = 0;
    h->unused1 = 0;

    patch_mm_pfn_database(h, &local_err);
    if (local_err) {
        warn_report_err(local_err);
        local_err = NULL;
    }
    patch_bugcheck_data(h, &local_err);
    if (local_err) {
        warn_report_err(local_err);
    }
}

static void check_header(WinDumpHeader64 *h, Error **errp)
{
    const char Signature[] = "PAGE";
    const char ValidDump[] = "DU64";

    if (memcmp(h->Signature, Signature, sizeof(h->Signature))) {
        error_setg(errp, "win-dump: invalid header, expected '%.4s',"
                         " got '%.4s'", Signature, h->Signature);
        return;
    }

    if (memcmp(h->ValidDump, ValidDump, sizeof(h->ValidDump))) {
        error_setg(errp, "win-dump: invalid header, expected '%.4s',"
                         " got '%.4s'", ValidDump, h->ValidDump);
        return;
    }
}

static void check_kdbg(WinDumpHeader64 *h, Error **errp)
{
    const char OwnerTag[] = "KDBG";
    char read_OwnerTag[4];
    uint64_t KdDebuggerDataBlock = h->KdDebuggerDataBlock;
    bool try_fallback = true;

try_again:
    if (cpu_memory_rw_debug(first_cpu,
            KdDebuggerDataBlock + KDBG_OWNER_TAG_OFFSET64,
            (uint8_t *)&read_OwnerTag, sizeof(read_OwnerTag), 0)) {
        error_setg(errp, "win-dump: failed to read OwnerTag");
        return;
    }

    if (memcmp(read_OwnerTag, OwnerTag, sizeof(read_OwnerTag))) {
        if (try_fallback) {
            /*
             * If attempt to use original KDBG failed
             * (most likely because of its encryption),
             * we try to use KDBG obtained by guest driver.
             */

            KdDebuggerDataBlock = h->BugcheckParameter1;
            try_fallback = false;
            goto try_again;
        } else {
            error_setg(errp, "win-dump: invalid KDBG OwnerTag,"
                             " expected '%.4s', got '%.4s'",
                             OwnerTag, read_OwnerTag);
            return;
        }
    }

    h->KdDebuggerDataBlock = KdDebuggerDataBlock;
}

struct saved_context {
    WinContext ctx;
    uint64_t addr;
};

static void patch_and_save_context(WinDumpHeader64 *h,
                                   struct saved_context *saved_ctx,
                                   Error **errp)
{
    uint64_t KiProcessorBlock;
    uint16_t OffsetPrcbContext;
    CPUState *cpu;
    int i = 0;

    if (cpu_memory_rw_debug(first_cpu,
            h->KdDebuggerDataBlock + KDBG_KI_PROCESSOR_BLOCK_OFFSET64,
            (uint8_t *)&KiProcessorBlock, sizeof(KiProcessorBlock), 0)) {
        error_setg(errp, "win-dump: failed to read KiProcessorBlock");
        return;
    }

    if (cpu_memory_rw_debug(first_cpu,
            h->KdDebuggerDataBlock + KDBG_OFFSET_PRCB_CONTEXT_OFFSET64,
            (uint8_t *)&OffsetPrcbContext, sizeof(OffsetPrcbContext), 0)) {
        error_setg(errp, "win-dump: failed to read OffsetPrcbContext");
        return;
    }

    CPU_FOREACH(cpu) {
        X86CPU *x86_cpu = X86_CPU(cpu);
        CPUX86State *env = &x86_cpu->env;
        uint64_t Prcb;
        uint64_t Context;
        WinContext ctx;

        if (cpu_memory_rw_debug(first_cpu,
                KiProcessorBlock + i * sizeof(uint64_t),
                (uint8_t *)&Prcb, sizeof(Prcb), 0)) {
            error_setg(errp, "win-dump: failed to read"
                             " CPU #%d PRCB location", i);
            return;
        }

        if (cpu_memory_rw_debug(first_cpu,
                Prcb + OffsetPrcbContext,
                (uint8_t *)&Context, sizeof(Context), 0)) {
            error_setg(errp, "win-dump: failed to read"
                             " CPU #%d ContextFrame location", i);
            return;
        }

        saved_ctx[i].addr = Context;

        ctx = (WinContext){
            .ContextFlags = WIN_CTX_ALL,
            .MxCsr = env->mxcsr,

            .SegEs = env->segs[0].selector,
            .SegCs = env->segs[1].selector,
            .SegSs = env->segs[2].selector,
            .SegDs = env->segs[3].selector,
            .SegFs = env->segs[4].selector,
            .SegGs = env->segs[5].selector,
            .EFlags = cpu_compute_eflags(env),

            .Dr0 = env->dr[0],
            .Dr1 = env->dr[1],
            .Dr2 = env->dr[2],
            .Dr3 = env->dr[3],
            .Dr6 = env->dr[6],
            .Dr7 = env->dr[7],

            .Rax = env->regs[R_EAX],
            .Rbx = env->regs[R_EBX],
            .Rcx = env->regs[R_ECX],
            .Rdx = env->regs[R_EDX],
            .Rsp = env->regs[R_ESP],
            .Rbp = env->regs[R_EBP],
            .Rsi = env->regs[R_ESI],
            .Rdi = env->regs[R_EDI],
            .R8  = env->regs[8],
            .R9  = env->regs[9],
            .R10 = env->regs[10],
            .R11 = env->regs[11],
            .R12 = env->regs[12],
            .R13 = env->regs[13],
            .R14 = env->regs[14],
            .R15 = env->regs[15],

            .Rip = env->eip,
            .FltSave = {
                .MxCsr = env->mxcsr,
            },
        };

        if (cpu_memory_rw_debug(first_cpu, Context,
                (uint8_t *)&saved_ctx[i].ctx, sizeof(WinContext), 0)) {
            error_setg(errp, "win-dump: failed to save CPU #%d context", i);
            return;
        }

        if (cpu_memory_rw_debug(first_cpu, Context,
                (uint8_t *)&ctx, sizeof(WinContext), 1)) {
            error_setg(errp, "win-dump: failed to write CPU #%d context", i);
            return;
        }

        i++;
    }
}

static void restore_context(WinDumpHeader64 *h,
                            struct saved_context *saved_ctx)
{
    int i;
    Error *err = NULL;

    for (i = 0; i < h->NumberProcessors; i++) {
        if (cpu_memory_rw_debug(first_cpu, saved_ctx[i].addr,
                (uint8_t *)&saved_ctx[i].ctx, sizeof(WinContext), 1)) {
            error_setg(&err, "win-dump: failed to restore CPU #%d context", i);
            warn_report_err(err);
        }
    }
}

void create_win_dump(DumpState *s, Error **errp)
{
    WinDumpHeader64 *h = (WinDumpHeader64 *)(s->guest_note +
            VMCOREINFO_ELF_NOTE_HDR_SIZE);
    X86CPU *first_x86_cpu = X86_CPU(first_cpu);
    uint64_t saved_cr3 = first_x86_cpu->env.cr[3];
    struct saved_context *saved_ctx = NULL;
    Error *local_err = NULL;

    if (s->guest_note_size != sizeof(WinDumpHeader64) +
            VMCOREINFO_ELF_NOTE_HDR_SIZE) {
        error_setg(errp, "win-dump: invalid vmcoreinfo note size");
        return;
    }

    check_header(h, &local_err);
    if (local_err) {
        error_propagate(errp, local_err);
        return;
    }

    /*
     * Further access to kernel structures by virtual addresses
     * should be made from system context.
     */

    first_x86_cpu->env.cr[3] = h->DirectoryTableBase;

    check_kdbg(h, &local_err);
    if (local_err) {
        error_propagate(errp, local_err);
        goto out_cr3;
    }

    patch_header(h);

    saved_ctx = g_new(struct saved_context, h->NumberProcessors);

    /*
     * Always patch context because there is no way
     * to determine if the system-saved context is valid
     */

    patch_and_save_context(h, saved_ctx, &local_err);
    if (local_err) {
        error_propagate(errp, local_err);
        goto out_free;
    }

    s->total_size = h->RequiredDumpSpace;

    s->written_size = qemu_write_full(s->fd, h, sizeof(*h));
    if (s->written_size != sizeof(*h)) {
        error_setg(errp, QERR_IO_ERROR);
        goto out_restore;
    }

    write_runs(s, h, &local_err);
    if (local_err) {
        error_propagate(errp, local_err);
        goto out_restore;
    }

out_restore:
    restore_context(h, saved_ctx);
out_free:
    g_free(saved_ctx);
out_cr3:
    first_x86_cpu->env.cr[3] = saved_cr3;

    return;
}
Commit	Line	Data
2da91b54 VP	1	/*
	2	* Windows crashdump
	3	*
	4	* Copyright (c) 2018 Virtuozzo International GmbH
	5	*
	6	* This work is licensed under the terms of the GNU GPL, version 2 or later.
	7	* See the COPYING file in the top-level directory.
	8	*
	9	*/
	10
	11	#include "qemu/osdep.h"
a8d25326	12	#include "qemu-common.h"
2da91b54 VP	13	#include "qemu/cutils.h"
	14	#include "elf.h"
	15	#include "cpu.h"
	16	#include "exec/hwaddr.h"
	17	#include "monitor/monitor.h"
	18	#include "sysemu/kvm.h"
	19	#include "sysemu/dump.h"
2da91b54 VP	20	#include "sysemu/memory_mapping.h"
	21	#include "sysemu/cpus.h"
	22	#include "qapi/error.h"
	23	#include "qapi/qmp/qerror.h"
	24	#include "qemu/error-report.h"
	25	#include "hw/misc/vmcoreinfo.h"
	26	#include "win_dump.h"
	27
	28	static size_t write_run(WinDumpPhyMemRun64 run, int fd, Error *errp)
	29	{
	30	void *buf;
	31	uint64_t addr = run->BasePage << TARGET_PAGE_BITS;
	32	uint64_t size = run->PageCount << TARGET_PAGE_BITS;
7184de64 VP	33	uint64_t len, l;
7184de64 VP	34	size_t total = 0;
2da91b54	35
7184de64 VP	36	while (size) {
7184de64 VP	37	len = size;
2da91b54	38
7184de64 VP	39	buf = cpu_physical_memory_map(addr, &len, false);
	40	if (!buf) {
	41	error_setg(errp, "win-dump: failed to map physical range"
	42	" 0x%016" PRIx64 "-0x%016" PRIx64, addr, addr + size - 1);
	43	return 0;
	44	}
2da91b54	45
7184de64 VP	46	l = qemu_write_full(fd, buf, len);
	47	cpu_physical_memory_unmap(buf, addr, false, len);
	48	if (l != len) {
	49	error_setg(errp, QERR_IO_ERROR);
	50	return 0;
	51	}
	52
	53	addr += l;
	54	size -= l;
	55	total += l;
	56	}
2da91b54	57
7184de64	58	return total;
2da91b54 VP	59	}
	60
	61	static void write_runs(DumpState s, WinDumpHeader64 h, Error **errp)
	62	{
	63	WinDumpPhyMemDesc64 *desc = &h->PhysicalMemoryBlock;
	64	WinDumpPhyMemRun64 *run = desc->Run;
	65	Error *local_err = NULL;
	66	int i;
	67
	68	for (i = 0; i < desc->NumberOfRuns; i++) {
	69	s->written_size += write_run(run + i, s->fd, &local_err);
	70	if (local_err) {
	71	error_propagate(errp, local_err);
	72	return;
	73	}
	74	}
	75	}
	76
	77	static void patch_mm_pfn_database(WinDumpHeader64 h, Error *errp)
	78	{
	79	if (cpu_memory_rw_debug(first_cpu,
	80	h->KdDebuggerDataBlock + KDBG_MM_PFN_DATABASE_OFFSET64,
	81	(uint8_t *)&h->PfnDatabase, sizeof(h->PfnDatabase), 0)) {
	82	error_setg(errp, "win-dump: failed to read MmPfnDatabase");
	83	return;
	84	}
	85	}
	86
	87	static void patch_bugcheck_data(WinDumpHeader64 h, Error *errp)
	88	{
	89	uint64_t KiBugcheckData;
	90
	91	if (cpu_memory_rw_debug(first_cpu,
	92	h->KdDebuggerDataBlock + KDBG_KI_BUGCHECK_DATA_OFFSET64,
	93	(uint8_t *)&KiBugcheckData, sizeof(KiBugcheckData), 0)) {
	94	error_setg(errp, "win-dump: failed to read KiBugcheckData");
	95	return;
	96	}
	97
	98	if (cpu_memory_rw_debug(first_cpu,
	99	KiBugcheckData,
	100	h->BugcheckData, sizeof(h->BugcheckData), 0)) {
	101	error_setg(errp, "win-dump: failed to read bugcheck data");
	102	return;
	103	}
2ad9b50f VP	104
	105	/*
	106	* If BugcheckCode wasn't saved, we consider guest OS as alive.
	107	*/
	108
	109	if (!h->BugcheckCode) {
	110	h->BugcheckCode = LIVE_SYSTEM_DUMP;
	111	}
2da91b54 VP	112	}
	113
	114	/*
	115	* This routine tries to correct mistakes in crashdump header.
	116	*/
	117	static void patch_header(WinDumpHeader64 *h)
	118	{
	119	Error *local_err = NULL;
	120
	121	h->RequiredDumpSpace = sizeof(WinDumpHeader64) +
	122	(h->PhysicalMemoryBlock.NumberOfPages << TARGET_PAGE_BITS);
	123	h->PhysicalMemoryBlock.unused = 0;
	124	h->unused1 = 0;
	125
2da91b54 VP	126	patch_mm_pfn_database(h, &local_err);
	127	if (local_err) {
	128	warn_report_err(local_err);
	129	local_err = NULL;
	130	}
	131	patch_bugcheck_data(h, &local_err);
	132	if (local_err) {
	133	warn_report_err(local_err);
	134	}
	135	}
	136
	137	static void check_header(WinDumpHeader64 h, Error *errp)
	138	{
	139	const char Signature[] = "PAGE";
	140	const char ValidDump[] = "DU64";
	141
	142	if (memcmp(h->Signature, Signature, sizeof(h->Signature))) {
	143	error_setg(errp, "win-dump: invalid header, expected '%.4s',"
	144	" got '%.4s'", Signature, h->Signature);
	145	return;
	146	}
	147
	148	if (memcmp(h->ValidDump, ValidDump, sizeof(h->ValidDump))) {
	149	error_setg(errp, "win-dump: invalid header, expected '%.4s',"
	150	" got '%.4s'", ValidDump, h->ValidDump);
	151	return;
	152	}
	153	}
	154
	155	static void check_kdbg(WinDumpHeader64 h, Error *errp)
	156	{
	157	const char OwnerTag[] = "KDBG";
	158	char read_OwnerTag[4];
2ababfcc VP	159	uint64_t KdDebuggerDataBlock = h->KdDebuggerDataBlock;
2ababfcc VP	160	bool try_fallback = true;
2da91b54	161
2ababfcc	162	try_again:
2da91b54	163	if (cpu_memory_rw_debug(first_cpu,
2ababfcc	164	KdDebuggerDataBlock + KDBG_OWNER_TAG_OFFSET64,
2da91b54 VP	165	(uint8_t *)&read_OwnerTag, sizeof(read_OwnerTag), 0)) {
	166	error_setg(errp, "win-dump: failed to read OwnerTag");
	167	return;
	168	}
	169
	170	if (memcmp(read_OwnerTag, OwnerTag, sizeof(read_OwnerTag))) {
2ababfcc VP	171	if (try_fallback) {
	172	/*
	173	* If attempt to use original KDBG failed
	174	* (most likely because of its encryption),
	175	* we try to use KDBG obtained by guest driver.
	176	*/
	177
	178	KdDebuggerDataBlock = h->BugcheckParameter1;
	179	try_fallback = false;
	180	goto try_again;
	181	} else {
	182	error_setg(errp, "win-dump: invalid KDBG OwnerTag,"
	183	" expected '%.4s', got '%.4s'",
	184	OwnerTag, read_OwnerTag);
	185	return;
	186	}
2da91b54	187	}
2ababfcc VP	188
2ababfcc VP	189	h->KdDebuggerDataBlock = KdDebuggerDataBlock;
2da91b54 VP	190	}
2da91b54 VP	191
2ad9b50f VP	192	struct saved_context {
	193	WinContext ctx;
	194	uint64_t addr;
	195	};
	196
	197	static void patch_and_save_context(WinDumpHeader64 *h,
	198	struct saved_context *saved_ctx,
	199	Error **errp)
	200	{
	201	uint64_t KiProcessorBlock;
	202	uint16_t OffsetPrcbContext;
	203	CPUState *cpu;
	204	int i = 0;
	205
	206	if (cpu_memory_rw_debug(first_cpu,
	207	h->KdDebuggerDataBlock + KDBG_KI_PROCESSOR_BLOCK_OFFSET64,
	208	(uint8_t *)&KiProcessorBlock, sizeof(KiProcessorBlock), 0)) {
	209	error_setg(errp, "win-dump: failed to read KiProcessorBlock");
	210	return;
	211	}
	212
	213	if (cpu_memory_rw_debug(first_cpu,
	214	h->KdDebuggerDataBlock + KDBG_OFFSET_PRCB_CONTEXT_OFFSET64,
	215	(uint8_t *)&OffsetPrcbContext, sizeof(OffsetPrcbContext), 0)) {
	216	error_setg(errp, "win-dump: failed to read OffsetPrcbContext");
	217	return;
	218	}
	219
	220	CPU_FOREACH(cpu) {
	221	X86CPU *x86_cpu = X86_CPU(cpu);
	222	CPUX86State *env = &x86_cpu->env;
	223	uint64_t Prcb;
	224	uint64_t Context;
	225	WinContext ctx;
	226
	227	if (cpu_memory_rw_debug(first_cpu,
	228	KiProcessorBlock + i * sizeof(uint64_t),
	229	(uint8_t *)&Prcb, sizeof(Prcb), 0)) {
	230	error_setg(errp, "win-dump: failed to read"
	231	" CPU #%d PRCB location", i);
	232	return;
	233	}
	234
	235	if (cpu_memory_rw_debug(first_cpu,
	236	Prcb + OffsetPrcbContext,
	237	(uint8_t *)&Context, sizeof(Context), 0)) {
	238	error_setg(errp, "win-dump: failed to read"
	239	" CPU #%d ContextFrame location", i);
	240	return;
	241	}
	242
	243	saved_ctx[i].addr = Context;
	244
	245	ctx = (WinContext){
	246	.ContextFlags = WIN_CTX_ALL,
	247	.MxCsr = env->mxcsr,
	248
	249	.SegEs = env->segs[0].selector,
	250	.SegCs = env->segs[1].selector,
	251	.SegSs = env->segs[2].selector,
	252	.SegDs = env->segs[3].selector,
	253	.SegFs = env->segs[4].selector,
	254	.SegGs = env->segs[5].selector,
	255	.EFlags = cpu_compute_eflags(env),
256
257	.Dr0 = env->dr[0],
258	.Dr1 = env->dr[1],
259	.Dr2 = env->dr[2],
260	.Dr3 = env->dr[3],
261	.Dr6 = env->dr[6],
262	.Dr7 = env->dr[7],
263
264	.Rax = env->regs[R_EAX],
265	.Rbx = env->regs[R_EBX],
266	.Rcx = env->regs[R_ECX],
267	.Rdx = env->regs[R_EDX],
268	.Rsp = env->regs[R_ESP],
269	.Rbp = env->regs[R_EBP],
270	.Rsi = env->regs[R_ESI],
271	.Rdi = env->regs[R_EDI],
272	.R8 = env->regs[8],
273	.R9 = env->regs[9],
274	.R10 = env->regs[10],
275	.R11 = env->regs[11],
276	.R12 = env->regs[12],
277	.R13 = env->regs[13],
278	.R14 = env->regs[14],
279	.R15 = env->regs[15],
280
281	.Rip = env->eip,
282	.FltSave = {
283	.MxCsr = env->mxcsr,
284	},
285	};
286
287	if (cpu_memory_rw_debug(first_cpu, Context,
288	(uint8_t *)&saved_ctx[i].ctx, sizeof(WinContext), 0)) {
289	error_setg(errp, "win-dump: failed to save CPU #%d context", i);
290	return;
291	}
292
293	if (cpu_memory_rw_debug(first_cpu, Context,
294	(uint8_t *)&ctx, sizeof(WinContext), 1)) {
295	error_setg(errp, "win-dump: failed to write CPU #%d context", i);
296	return;
297	}
298
299	i++;
300	}
301	}
302
303	static void restore_context(WinDumpHeader64 *h,
304	struct saved_context *saved_ctx)
305	{
306	int i;
307	Error *err = NULL;
308
309	for (i = 0; i < h->NumberProcessors; i++) {
310	if (cpu_memory_rw_debug(first_cpu, saved_ctx[i].addr,
311	(uint8_t *)&saved_ctx[i].ctx, sizeof(WinContext), 1)) {
312	error_setg(&err, "win-dump: failed to restore CPU #%d context", i);
313	warn_report_err(err);
314	}
315	}
316	}
317
2da91b54 VP	318	void create_win_dump(DumpState s, Error *errp)
	319	{
	320	WinDumpHeader64 h = (WinDumpHeader64 )(s->guest_note +
	321	VMCOREINFO_ELF_NOTE_HDR_SIZE);
92d1b3d5 VP	322	X86CPU *first_x86_cpu = X86_CPU(first_cpu);
92d1b3d5 VP	323	uint64_t saved_cr3 = first_x86_cpu->env.cr[3];
2ad9b50f	324	struct saved_context *saved_ctx = NULL;
2da91b54 VP	325	Error *local_err = NULL;
	326
	327	if (s->guest_note_size != sizeof(WinDumpHeader64) +
	328	VMCOREINFO_ELF_NOTE_HDR_SIZE) {
	329	error_setg(errp, "win-dump: invalid vmcoreinfo note size");
	330	return;
	331	}
	332
	333	check_header(h, &local_err);
	334	if (local_err) {
	335	error_propagate(errp, local_err);
	336	return;
	337	}
	338
92d1b3d5 VP	339	/*
	340	* Further access to kernel structures by virtual addresses
	341	* should be made from system context.
	342	*/
	343
	344	first_x86_cpu->env.cr[3] = h->DirectoryTableBase;
	345
2da91b54 VP	346	check_kdbg(h, &local_err);
	347	if (local_err) {
	348	error_propagate(errp, local_err);
92d1b3d5	349	goto out_cr3;
2da91b54 VP	350	}
	351
	352	patch_header(h);
	353
2ad9b50f VP	354	saved_ctx = g_new(struct saved_context, h->NumberProcessors);
	355
	356	/*
	357	* Always patch context because there is no way
	358	* to determine if the system-saved context is valid
	359	*/
	360
	361	patch_and_save_context(h, saved_ctx, &local_err);
	362	if (local_err) {
	363	error_propagate(errp, local_err);
	364	goto out_free;
	365	}
	366
2da91b54 VP	367	s->total_size = h->RequiredDumpSpace;
	368
	369	s->written_size = qemu_write_full(s->fd, h, sizeof(*h));
	370	if (s->written_size != sizeof(*h)) {
	371	error_setg(errp, QERR_IO_ERROR);
2ad9b50f	372	goto out_restore;
2da91b54 VP	373	}
	374
	375	write_runs(s, h, &local_err);
	376	if (local_err) {
	377	error_propagate(errp, local_err);
2ad9b50f	378	goto out_restore;
2da91b54	379	}
92d1b3d5	380
2ad9b50f VP	381	out_restore:
	382	restore_context(h, saved_ctx);
	383	out_free:
	384	g_free(saved_ctx);
92d1b3d5 VP	385	out_cr3:
	386	first_x86_cpu->env.cr[3] = saved_cr3;
	387
	388	return;
2da91b54	389	}