I've been trying to understand the process of address translation inside QEMU, but I got stuck in GVA->GPA.
I've known that QEMU uses a two level description table
'PhysPageDesc' to maintain the translation between GPA & HVA(host
virtual address), but I couldn't find out where QEMU translates GVA to
GPA to go to that table to find HVA when a TLB missed occured.
I've traced the internal codes and there are something may be able to
solve my problems but I can't figure it out, could anyone help me?
There is a function get_level1_table_address() called by get_phys_addr() in target-arm/helper.c, and it seems like start translating the GVA to GPA.
But I don't understand the env->cp15.c2_base_mask variable which claimed to be the MMU translation table base selection mask means. Where is the description of MMU translation table?
Any suggestions would be helpful to me.
Thanks in advance.