helper.c 16.5 KB
Newer Older
B
bellard 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19
/*
 *  MIPS emulation helpers for qemu.
 * 
 *  Copyright (c) 2004-2005 Jocelyn Mayer
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */
20 21 22 23 24 25 26 27 28 29
#include <stdarg.h>
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <inttypes.h>
#include <signal.h>
#include <assert.h>

#include "cpu.h"
#include "exec-all.h"
B
bellard 已提交
30

31 32 33 34 35 36 37 38
enum {
    TLBRET_DIRTY = -4,
    TLBRET_INVALID = -3,
    TLBRET_NOMATCH = -2,
    TLBRET_BADADDR = -1,
    TLBRET_MATCH = 0
};

39 40
/* no MMU emulation */
int no_mmu_map_address (CPUState *env, target_ulong *physical, int *prot,
B
bellard 已提交
41
                        target_ulong address, int rw, int access_type)
42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68
{
    *physical = address;
    *prot = PAGE_READ | PAGE_WRITE;
    return TLBRET_MATCH;
}

/* fixed mapping MMU emulation */
int fixed_mmu_map_address (CPUState *env, target_ulong *physical, int *prot,
                           target_ulong address, int rw, int access_type)
{
    if (address <= (int32_t)0x7FFFFFFFUL) {
        if (!(env->CP0_Status & (1 << CP0St_ERL)))
            *physical = address + 0x40000000UL;
        else
            *physical = address;
    } else if (address <= (int32_t)0xBFFFFFFFUL)
        *physical = address & 0x1FFFFFFF;
    else
        *physical = address;

    *prot = PAGE_READ | PAGE_WRITE;
    return TLBRET_MATCH;
}

/* MIPS32/MIPS64 R4000-style MMU emulation */
int r4k_map_address (CPUState *env, target_ulong *physical, int *prot,
                     target_ulong address, int rw, int access_type)
B
bellard 已提交
69
{
70
    uint8_t ASID = env->CP0_EntryHi & 0xFF;
T
ths 已提交
71
    int i;
B
bellard 已提交
72

73
    for (i = 0; i < env->tlb_in_use; i++) {
74
        r4k_tlb_t *tlb = &env->mmu.r4k.tlb[i];
T
ths 已提交
75 76 77 78 79
        /* 1k pages are not supported. */
        target_ulong mask = tlb->PageMask | 0x1FFF;
        target_ulong tag = address & ~mask;
        int n;

B
bellard 已提交
80 81
        /* Check ASID, virtual page number & size */
        if ((tlb->G == 1 || tlb->ASID == ASID) &&
82
            tlb->VPN == tag) {
B
bellard 已提交
83
            /* TLB match */
T
ths 已提交
84
            n = !!(address & mask & ~(mask >> 1));
B
bellard 已提交
85
            /* Check access rights */
86 87 88
           if (!(n ? tlb->V1 : tlb->V0))
                return TLBRET_INVALID;
           if (rw == 0 || (n ? tlb->D1 : tlb->D0)) {
T
ths 已提交
89
                *physical = tlb->PFN[n] | (address & (mask >> 1));
B
bellard 已提交
90
                *prot = PAGE_READ;
91
                if (n ? tlb->D1 : tlb->D0)
B
bellard 已提交
92
                    *prot |= PAGE_WRITE;
93
                return TLBRET_MATCH;
B
bellard 已提交
94
            }
95
            return TLBRET_DIRTY;
B
bellard 已提交
96 97
        }
    }
98
    return TLBRET_NOMATCH;
B
bellard 已提交
99 100
}

101 102 103
static int get_physical_address (CPUState *env, target_ulong *physical,
                                int *prot, target_ulong address,
                                int rw, int access_type)
B
bellard 已提交
104
{
105
    /* User mode can only access useg/xuseg */
106
    int user_mode = (env->hflags & MIPS_HFLAG_MODE) == MIPS_HFLAG_UM;
107 108 109 110 111
#ifdef TARGET_MIPS64
    int UX = (env->CP0_Status & (1 << CP0St_UX)) != 0;
    int SX = (env->CP0_Status & (1 << CP0St_SX)) != 0;
    int KX = (env->CP0_Status & (1 << CP0St_KX)) != 0;
#endif
112 113
    int ret = TLBRET_MATCH;

B
bellard 已提交
114 115 116 117 118 119
#if 0
    if (logfile) {
        fprintf(logfile, "user mode %d h %08x\n",
                user_mode, env->hflags);
    }
#endif
120 121 122 123 124

#ifdef TARGET_MIPS64
    if (user_mode && address > 0x3FFFFFFFFFFFFFFFULL)
        return TLBRET_BADADDR;
#else
B
bellard 已提交
125
    if (user_mode && address > 0x7FFFFFFFUL)
126
        return TLBRET_BADADDR;
127 128 129 130 131
#endif

    if (address <= (int32_t)0x7FFFFFFFUL) {
        /* useg */
        if (!(env->CP0_Status & (1 << CP0St_ERL) && user_mode)) {
132
            ret = env->map_address(env, physical, prot, address, rw, access_type);
B
bellard 已提交
133
        } else {
134
            *physical = address & 0xFFFFFFFF;
B
bellard 已提交
135 136
            *prot = PAGE_READ | PAGE_WRITE;
        }
137 138 139 140 141 142 143 144 145
#ifdef TARGET_MIPS64
/*
   XXX: Assuming :
   - PABITS = 36 (correct for MIPS64R1)
   - SEGBITS = 40
*/
    } else if (address < 0x3FFFFFFFFFFFFFFFULL) {
        /* xuseg */
	if (UX && address < 0x000000FFFFFFFFFFULL) {
146
            ret = env->map_address(env, physical, prot, address, rw, access_type);
147 148 149 150 151 152
	} else {
	    ret = TLBRET_BADADDR;
        }
    } else if (address < 0x7FFFFFFFFFFFFFFFULL) {
        /* xsseg */
	if (SX && address < 0x400000FFFFFFFFFFULL) {
153
            ret = env->map_address(env, physical, prot, address, rw, access_type);
154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170
	} else {
	    ret = TLBRET_BADADDR;
        }
    } else if (address < 0xBFFFFFFFFFFFFFFFULL) {
        /* xkphys */
        /* XXX: check supervisor mode */
        if (KX && (address & 0x03FFFFFFFFFFFFFFULL) < 0X0000000FFFFFFFFFULL)
	{
            *physical = address & 0X000000FFFFFFFFFFULL;
            *prot = PAGE_READ | PAGE_WRITE;
	} else {
	    ret = TLBRET_BADADDR;
	}
    } else if (address < 0xFFFFFFFF7FFFFFFFULL) {
        /* xkseg */
        /* XXX: check supervisor mode */
	if (KX && address < 0xC00000FF7FFFFFFFULL) {
171
            ret = env->map_address(env, physical, prot, address, rw, access_type);
172 173 174 175
	} else {
	    ret = TLBRET_BADADDR;
	}
#endif
T
ths 已提交
176
    } else if (address < (int32_t)0xA0000000UL) {
B
bellard 已提交
177 178
        /* kseg0 */
        /* XXX: check supervisor mode */
T
ths 已提交
179
        *physical = address - (int32_t)0x80000000UL;
B
bellard 已提交
180
        *prot = PAGE_READ | PAGE_WRITE;
T
ths 已提交
181
    } else if (address < (int32_t)0xC0000000UL) {
B
bellard 已提交
182 183
        /* kseg1 */
        /* XXX: check supervisor mode */
T
ths 已提交
184
        *physical = address - (int32_t)0xA0000000UL;
B
bellard 已提交
185
        *prot = PAGE_READ | PAGE_WRITE;
T
ths 已提交
186
    } else if (address < (int32_t)0xE0000000UL) {
B
bellard 已提交
187
        /* kseg2 */
188
        ret = env->map_address(env, physical, prot, address, rw, access_type);
B
bellard 已提交
189 190 191 192
    } else {
        /* kseg3 */
        /* XXX: check supervisor mode */
        /* XXX: debug segment is not emulated */
193
        ret = env->map_address(env, physical, prot, address, rw, access_type);
B
bellard 已提交
194 195 196
    }
#if 0
    if (logfile) {
T
ths 已提交
197
        fprintf(logfile, TARGET_FMT_lx " %d %d => " TARGET_FMT_lx " %d (%d)\n",
198
		address, rw, access_type, *physical, *prot, ret);
B
bellard 已提交
199 200 201 202 203 204 205
    }
#endif

    return ret;
}

#if defined(CONFIG_USER_ONLY) 
206
target_phys_addr_t cpu_get_phys_page_debug(CPUState *env, target_ulong addr)
B
bellard 已提交
207 208 209 210
{
    return addr;
}
#else
211
target_phys_addr_t cpu_get_phys_page_debug(CPUState *env, target_ulong addr)
B
bellard 已提交
212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235
{
    target_ulong phys_addr;
    int prot;

    if (get_physical_address(env, &phys_addr, &prot, addr, 0, ACCESS_INT) != 0)
        return -1;
    return phys_addr;
}

void cpu_mips_init_mmu (CPUState *env)
{
}
#endif /* !defined(CONFIG_USER_ONLY) */

int cpu_mips_handle_mmu_fault (CPUState *env, target_ulong address, int rw,
                               int is_user, int is_softmmu)
{
    target_ulong physical;
    int prot;
    int exception = 0, error_code = 0;
    int access_type;
    int ret = 0;

    if (logfile) {
B
bellard 已提交
236
#if 0
B
bellard 已提交
237
        cpu_dump_state(env, logfile, fprintf, 0);
B
bellard 已提交
238
#endif
T
ths 已提交
239
        fprintf(logfile, "%s pc " TARGET_FMT_lx " ad " TARGET_FMT_lx " rw %d is_user %d smmu %d\n",
B
bellard 已提交
240 241
                __func__, env->PC, address, rw, is_user, is_softmmu);
    }
B
bellard 已提交
242 243 244

    rw &= 1;

B
bellard 已提交
245 246 247 248 249 250
    /* data access */
    /* XXX: put correct access by using cpu_restore_state()
       correctly */
    access_type = ACCESS_INT;
    if (env->user_mode_only) {
        /* user mode only emulation */
251
        ret = TLBRET_NOMATCH;
B
bellard 已提交
252 253 254 255 256
        goto do_fault;
    }
    ret = get_physical_address(env, &physical, &prot,
                               address, rw, access_type);
    if (logfile) {
T
ths 已提交
257
        fprintf(logfile, "%s address=" TARGET_FMT_lx " ret %d physical " TARGET_FMT_lx " prot %d\n",
B
bellard 已提交
258 259
                __func__, address, ret, physical, prot);
    }
260 261 262 263
    if (ret == TLBRET_MATCH) {
       ret = tlb_set_page(env, address & TARGET_PAGE_MASK,
                          physical & TARGET_PAGE_MASK, prot,
                          is_user, is_softmmu);
B
bellard 已提交
264 265 266 267
    } else if (ret < 0) {
    do_fault:
        switch (ret) {
        default:
268
        case TLBRET_BADADDR:
B
bellard 已提交
269 270 271 272 273 274 275
            /* Reference to kernel address from user mode or supervisor mode */
            /* Reference to supervisor address from user mode */
            if (rw)
                exception = EXCP_AdES;
            else
                exception = EXCP_AdEL;
            break;
276
        case TLBRET_NOMATCH:
B
bellard 已提交
277 278 279 280 281 282 283
            /* No TLB match for a mapped address */
            if (rw)
                exception = EXCP_TLBS;
            else
                exception = EXCP_TLBL;
            error_code = 1;
            break;
284
        case TLBRET_INVALID:
B
bellard 已提交
285 286 287 288 289 290
            /* TLB match with no valid bit */
            if (rw)
                exception = EXCP_TLBS;
            else
                exception = EXCP_TLBL;
            break;
291
        case TLBRET_DIRTY:
B
bellard 已提交
292 293 294 295 296 297 298
            /* TLB match but 'D' bit is cleared */
            exception = EXCP_LTLBL;
            break;
                
        }
        /* Raise exception */
        env->CP0_BadVAddr = address;
299
        env->CP0_Context = (env->CP0_Context & 0xff800000) |
B
bellard 已提交
300
	                   ((address >> 9) &   0x007ffff0);
B
bellard 已提交
301
        env->CP0_EntryHi =
302
            (env->CP0_EntryHi & 0xFF) | (address & (TARGET_PAGE_MASK << 1));
B
bellard 已提交
303 304 305 306 307 308 309 310
        env->exception_index = exception;
        env->error_code = error_code;
        ret = 1;
    }

    return ret;
}

311 312 313 314 315 316
#if defined(CONFIG_USER_ONLY)
void do_interrupt (CPUState *env)
{
    env->exception_index = EXCP_NONE;
}
#else
B
bellard 已提交
317 318
void do_interrupt (CPUState *env)
{
319
    target_ulong offset;
B
bellard 已提交
320 321 322
    int cause = -1;

    if (logfile && env->exception_index != EXCP_EXT_INTERRUPT) {
T
ths 已提交
323
        fprintf(logfile, "%s enter: PC " TARGET_FMT_lx " EPC " TARGET_FMT_lx " cause %d excp %d\n",
B
bellard 已提交
324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354
                __func__, env->PC, env->CP0_EPC, cause, env->exception_index);
    }
    if (env->exception_index == EXCP_EXT_INTERRUPT &&
        (env->hflags & MIPS_HFLAG_DM))
        env->exception_index = EXCP_DINT;
    offset = 0x180;
    switch (env->exception_index) {
    case EXCP_DSS:
        env->CP0_Debug |= 1 << CP0DB_DSS;
        /* Debug single step cannot be raised inside a delay slot and
         * resume will always occur on the next instruction
         * (but we assume the pc has always been updated during
         *  code translation).
         */
        env->CP0_DEPC = env->PC;
        goto enter_debug_mode;
    case EXCP_DINT:
        env->CP0_Debug |= 1 << CP0DB_DINT;
        goto set_DEPC;
    case EXCP_DIB:
        env->CP0_Debug |= 1 << CP0DB_DIB;
        goto set_DEPC;
    case EXCP_DBp:
        env->CP0_Debug |= 1 << CP0DB_DBp;
        goto set_DEPC;
    case EXCP_DDBS:
        env->CP0_Debug |= 1 << CP0DB_DDBS;
        goto set_DEPC;
    case EXCP_DDBL:
        env->CP0_Debug |= 1 << CP0DB_DDBL;
    set_DEPC:
B
bellard 已提交
355
        if (env->hflags & MIPS_HFLAG_BMASK) {
B
bellard 已提交
356
            /* If the exception was raised from a delay slot,
357
               come back to the jump.  */
B
bellard 已提交
358
            env->CP0_DEPC = env->PC - 4;
B
bellard 已提交
359
            env->hflags &= ~MIPS_HFLAG_BMASK;
B
bellard 已提交
360 361 362 363 364
        } else {
            env->CP0_DEPC = env->PC;
        }
    enter_debug_mode:
        env->hflags |= MIPS_HFLAG_DM;
T
ths 已提交
365
        env->hflags &= ~MIPS_HFLAG_UM;
B
bellard 已提交
366
        /* EJTAG probe trap enable is not implemented... */
367 368
        if (!(env->CP0_Status & (1 << CP0St_EXL)))
            env->CP0_Cause &= ~(1 << CP0Ca_BD);
T
ths 已提交
369
        env->PC = (int32_t)0xBFC00480;
B
bellard 已提交
370 371
        break;
    case EXCP_RESET:
372 373
        cpu_reset(env);
        break;
B
bellard 已提交
374
    case EXCP_SRESET:
T
ths 已提交
375
        env->CP0_Status |= (1 << CP0St_SR);
B
bellard 已提交
376 377 378
        env->CP0_WatchLo = 0;
        goto set_error_EPC;
    case EXCP_NMI:
T
ths 已提交
379
        env->CP0_Status |= (1 << CP0St_NMI);
B
bellard 已提交
380
    set_error_EPC:
B
bellard 已提交
381
        if (env->hflags & MIPS_HFLAG_BMASK) {
B
bellard 已提交
382
            /* If the exception was raised from a delay slot,
383
               come back to the jump.  */
B
bellard 已提交
384
            env->CP0_ErrorEPC = env->PC - 4;
385
            env->hflags &= ~MIPS_HFLAG_BMASK;
B
bellard 已提交
386 387 388
        } else {
            env->CP0_ErrorEPC = env->PC;
        }
T
ths 已提交
389 390
        env->CP0_Status |= (1 << CP0St_ERL) | (1 << CP0St_BEV);
        env->hflags &= ~MIPS_HFLAG_UM;
391 392
        if (!(env->CP0_Status & (1 << CP0St_EXL)))
            env->CP0_Cause &= ~(1 << CP0Ca_BD);
T
ths 已提交
393
        env->PC = (int32_t)0xBFC00000;
B
bellard 已提交
394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409
        break;
    case EXCP_MCHECK:
        cause = 24;
        goto set_EPC;
    case EXCP_EXT_INTERRUPT:
        cause = 0;
        if (env->CP0_Cause & (1 << CP0Ca_IV))
            offset = 0x200;
        goto set_EPC;
    case EXCP_DWATCH:
        cause = 23;
        /* XXX: TODO: manage defered watch exceptions */
        goto set_EPC;
    case EXCP_AdEL:
        cause = 4;
        goto set_EPC;
T
ths 已提交
410 411 412
    case EXCP_AdES:
        cause = 5;
        goto set_EPC;
B
bellard 已提交
413 414
    case EXCP_TLBL:
        cause = 2;
T
ths 已提交
415
        if (env->error_code == 1 && !(env->CP0_Status & (1 << CP0St_EXL)))
B
bellard 已提交
416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434
            offset = 0x000;
        goto set_EPC;
    case EXCP_IBE:
        cause = 6;
        goto set_EPC;
    case EXCP_DBE:
        cause = 7;
        goto set_EPC;
    case EXCP_SYSCALL:
        cause = 8;
        goto set_EPC;
    case EXCP_BREAK:
        cause = 9;
        goto set_EPC;
    case EXCP_RI:
        cause = 10;
        goto set_EPC;
    case EXCP_CpU:
        cause = 11;
435 436
        env->CP0_Cause = (env->CP0_Cause & ~(0x3 << CP0Ca_CE)) |
                         (env->error_code << CP0Ca_CE);
B
bellard 已提交
437 438 439 440 441 442 443
        goto set_EPC;
    case EXCP_OVERFLOW:
        cause = 12;
        goto set_EPC;
    case EXCP_TRAP:
        cause = 13;
        goto set_EPC;
444 445 446
    case EXCP_FPE:
        cause = 15;
        goto set_EPC;
B
bellard 已提交
447 448 449 450 451
    case EXCP_LTLBL:
        cause = 1;
        goto set_EPC;
    case EXCP_TLBS:
        cause = 3;
T
ths 已提交
452
        if (env->error_code == 1 && !(env->CP0_Status & (1 << CP0St_EXL)))
453
            offset = 0x000;
B
bellard 已提交
454
    set_EPC:
T
ths 已提交
455 456 457 458 459
        if (!(env->CP0_Status & (1 << CP0St_EXL))) {
            if (env->hflags & MIPS_HFLAG_BMASK) {
                /* If the exception was raised from a delay slot,
                   come back to the jump.  */
                env->CP0_EPC = env->PC - 4;
460
                env->CP0_Cause |= (1 << CP0Ca_BD);
T
ths 已提交
461 462 463 464 465 466
            } else {
                env->CP0_EPC = env->PC;
                env->CP0_Cause &= ~(1 << CP0Ca_BD);
            }
            env->CP0_Status |= (1 << CP0St_EXL);
            env->hflags &= ~MIPS_HFLAG_UM;
B
bellard 已提交
467
        }
T
ths 已提交
468
        env->hflags &= ~MIPS_HFLAG_BMASK;
469
        if (env->CP0_Status & (1 << CP0St_BEV)) {
T
ths 已提交
470
            env->PC = (int32_t)0xBFC00200;
471
        } else {
T
ths 已提交
472
            env->PC = (int32_t)(env->CP0_EBase & ~0x3ff);
473 474
        }
        env->PC += offset;
475
        env->CP0_Cause = (env->CP0_Cause & ~(0x1f << CP0Ca_EC)) | (cause << CP0Ca_EC);
B
bellard 已提交
476 477 478 479 480 481 482 483 484 485
        break;
    default:
        if (logfile) {
            fprintf(logfile, "Invalid MIPS exception %d. Exiting\n",
                    env->exception_index);
        }
        printf("Invalid MIPS exception %d. Exiting\n", env->exception_index);
        exit(1);
    }
    if (logfile && env->exception_index != EXCP_EXT_INTERRUPT) {
T
ths 已提交
486 487
        fprintf(logfile, "%s: PC " TARGET_FMT_lx " EPC " TARGET_FMT_lx " cause %d excp %d\n"
                "    S %08x C %08x A " TARGET_FMT_lx " D " TARGET_FMT_lx "\n",
B
bellard 已提交
488 489 490 491 492 493
                __func__, env->PC, env->CP0_EPC, cause, env->exception_index,
                env->CP0_Status, env->CP0_Cause, env->CP0_BadVAddr,
                env->CP0_DEPC);
    }
    env->exception_index = EXCP_NONE;
}
494
#endif /* !defined(CONFIG_USER_ONLY) */
495

496
void r4k_invalidate_tlb (CPUState *env, int idx, int use_extra)
497
{
498
    r4k_tlb_t *tlb;
T
ths 已提交
499 500 501 502
    target_ulong addr;
    target_ulong end;
    uint8_t ASID = env->CP0_EntryHi & 0xFF;
    target_ulong mask;
503

504
    tlb = &env->mmu.r4k.tlb[idx];
505 506 507 508 509 510 511 512 513 514
    /* The qemu TLB is flushed then the ASID changes, so no need to
       flush these entries again.  */
    if (tlb->G == 0 && tlb->ASID != ASID) {
        return;
    }

    if (use_extra && env->tlb_in_use < MIPS_TLB_MAX) {
        /* For tlbwr, we can shadow the discarded entry into
	   a new (fake) TLB entry, as long as the guest can not
	   tell that it's there.  */
515
        env->mmu.r4k.tlb[env->tlb_in_use] = *tlb;
516 517 518 519
        env->tlb_in_use++;
        return;
    }

T
ths 已提交
520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538
    /* 1k pages are not supported. */
    mask = tlb->PageMask | 0x1FFF;
    if (tlb->V0) {
        addr = tlb->VPN;
        end = addr | (mask >> 1);
        while (addr < end) {
            tlb_flush_page (env, addr);
            addr += TARGET_PAGE_SIZE;
        }
    }
    if (tlb->V1) {
        addr = tlb->VPN | ((mask >> 1) + 1);
        addr = tlb->VPN + TARGET_PAGE_SIZE;
        end = addr | mask;
        while (addr < end) {
            tlb_flush_page (env, addr);
            addr += TARGET_PAGE_SIZE;
        }
    }
539
}