Module paravisor 

Underhill (paravisor) definitions.

Structs

CommandLinePolicy

Underhill command line policy.

ExpectedPageHash

SHA-384 of one 4 KB unmeasured (shared) IGVM page, zero-extended to 4 KB before hashing (matching the combined hash in ImportedRegionsPageHeader::sha384_hash).

ExpectedPageHashesHeader

Header at page 0 of the measured per-page expected-hashes region (PARAVISOR_MEASURED_VTL2_CONFIG_PAGE_HASHES_PAGE_INDEX). Followed immediately by an array of ExpectedPageHash entries. Contents are zero-padded to fill the region.

ImportedRegionDescriptor

Describes a region of guest memory that has been imported into VTL2.

ImportedRegionsPageHeader

The header field of the imported pages region page.

LinuxInfo

Measured config about linux loaded into VTL0.

PageRegionDescriptor

Describes a region of guest memory.

ParavisorCommandLine

Command line information. This structure is an exclusive measured page.

ParavisorMeasuredVtl0Config

Paravisor measured config information for vtl 0. Unlike the previous loader block which contains dynamic parameter info written by the host, this config information is known at file build time, measured, and deposited as part of the initial launch data.

ParavisorMeasuredVtl2Config

Paravisor measured config for vtl2.

SupportedVtl0LoadInfo

Measured config about what this image can support loading in VTL0.

UefiInfo

Measured config about UEFI loaded into VTL0.

Constants

COMMAND_LINE_SIZE

Maximum static command line size.

EXPECTED_PAGE_HASHES_MAGIC

Magic identifier at the start of the per-page expected-hashes region. Chosen so an older tool inspecting the region can recognise it. Bytes spell EPHS in ASCII, little-endian encoded.

EXPECTED_PAGE_HASHES_VERSION

Current layout version of ExpectedPageHashesHeader + its trailing array. Bumped only on incompatible changes.

EXPECTED_PAGE_HASH_MAX_COUNT

Maximum number of ExpectedPageHash entries the region can hold, given PARAVISOR_MEASURED_VTL2_CONFIG_PAGE_HASHES_SIZE_PAGES pages minus the header.

PARAVISOR_CONFIG_DEVICE_TREE_PAGE_INDEX

The page index to the device tree.

PARAVISOR_CONFIG_DEVICE_TREE_SIZE_PAGES

Size in pages for the device tree.

PARAVISOR_CONFIG_PPTT_PAGE_INDEX

The page index to the PPTT.

PARAVISOR_CONFIG_PPTT_SIZE_PAGES

Size in pages for the PPTT.

PARAVISOR_CONFIG_SLIT_PAGE_INDEX

The page index to the SLIT.

PARAVISOR_CONFIG_SLIT_SIZE_PAGES

Size in pages for the SLIT.

PARAVISOR_DEFAULT_MEMORY_BASE_ADDRESS

The default base address for the paravisor, 128MB.

PARAVISOR_DEFAULT_MEMORY_PAGE_COUNT

The default page count for the memory size for the paravisor, 64MB.

PARAVISOR_LOCAL_MAP_SIZE

The base size in bytes for the local map, if present.

PARAVISOR_LOCAL_MAP_VA

The base VA for the local map, if present.

PARAVISOR_MEASURED_VTL2_CONFIG_ACCEPTED_MEMORY_PAGE_INDEX

The page index to the list of accepted pages

PARAVISOR_MEASURED_VTL2_CONFIG_ACCEPTED_MEMORY_SIZE_PAGES

Size in pages the list of accepted memory

PARAVISOR_MEASURED_VTL2_CONFIG_PAGE_HASHES_PAGE_INDEX

The page index for the per-page expected-hashes region.

PARAVISOR_MEASURED_VTL2_CONFIG_PAGE_HASHES_SIZE_PAGES

Size in pages for the per-page expected-hashes region. Holds one SHA-384 (48 bytes) per unmeasured (shared) 4 KB page in the IGVM, so the boot shim can identify which individual pages diverged from the measured baseline rather than only knowing “the combined hash was wrong”. Sized generously: 256 pages = 1 MB / 48 B per hash = 21_845 hashes max, comfortably above the ~16 K unmeasured pages on debug SNP images. Placed after PARAVISOR_MEASURED_VTL2_CONFIG_SIZE_PAGES so that PARAVISOR_MEASURED_VTL2_CONFIG_PAGE_INDEX stays where existing consumers expect it and only new readers need to know about the new region.

PARAVISOR_MEASURED_VTL2_CONFIG_PAGE_INDEX

The page index for measured VTL2 config.

PARAVISOR_MEASURED_VTL2_CONFIG_REGION_PAGE_COUNT

Count for vtl 2 measured config region size.

PARAVISOR_MEASURED_VTL2_CONFIG_SIZE_PAGES

Size in pages of VTL2 specific measured config

PARAVISOR_RESERVED_VTL2_PAGE_COUNT_MAX

Total size of the reserved vtl2 range.

PARAVISOR_RESERVED_VTL2_SNP_CPUID_PAGE_INDEX

The page index to the first SNP CPUID page.

PARAVISOR_RESERVED_VTL2_SNP_CPUID_SIZE_PAGES

Size in pages for the SNP CPUID pages.

PARAVISOR_RESERVED_VTL2_SNP_SECRETS_PAGE_INDEX

The page index to the first SNP secrets page.

PARAVISOR_RESERVED_VTL2_SNP_SECRETS_SIZE_PAGES

Size in pages for the secrets page.

PARAVISOR_RESERVED_VTL2_SNP_VMSA_PAGE_INDEX

The page index to the SNP VMSA page.

PARAVISOR_RESERVED_VTL2_SNP_VMSA_SIZE_PAGES

Size in pages for the VMSA page.

PARAVISOR_UNMEASURED_VTL2_CONFIG_REGION_BASE_INDEX

Base index for the unmeasured vtl 2 config region

PARAVISOR_UNMEASURED_VTL2_CONFIG_REGION_PAGE_COUNT_MAX

The maximum size in pages of the unmeasured vtl 2 config region.

PARAVISOR_VTL0_MEASURED_CONFIG_BASE_PAGE_AARCH64

The physical page number for where the vtl 0 measured config is stored, aarch64. Not obvious about guaranteed existence. 16MiB might be a reasonable assumption as:

PARAVISOR_VTL0_MEASURED_CONFIG_BASE_PAGE_X64

The physical page number for where the vtl 0 measured config is stored, x86_64. This address is guaranteed to exist in the guest address space as it is where the ISR table is located at reset.

PARAVISOR_VTL2_CONFIG_REGION_PAGE_COUNT_MAX

The maximum size in pages out of all isolation architectures.

PRODUCT_POLICY_INLINE_OFFSET

Byte offset of the inline ProductPolicy body within the measured VTL2 config region.

PRODUCT_POLICY_MAX_SIZE_BYTES

Maximum byte size of an inline ProductPolicy body.