cpu-exec.c 48.8 KB
Newer Older
B
bellard 已提交
1 2
/*
 *  i386 emulator main execution loop
3
 *
B
bellard 已提交
4
 *  Copyright (c) 2003-2005 Fabrice Bellard
B
bellard 已提交
5
 *
B
bellard 已提交
6 7 8 9
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2 of the License, or (at your option) any later version.
B
bellard 已提交
10
 *
B
bellard 已提交
11 12 13 14
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
B
bellard 已提交
15
 *
B
bellard 已提交
16 17 18
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
B
bellard 已提交
19
 */
B
bellard 已提交
20
#include "config.h"
21
#define CPU_NO_GLOBAL_REGS
22
#include "exec.h"
B
log fix  
bellard 已提交
23
#include "disas.h"
24
#include "tcg.h"
B
bellard 已提交
25

26 27 28 29 30 31 32 33 34 35 36 37 38 39
#if !defined(CONFIG_SOFTMMU)
#undef EAX
#undef ECX
#undef EDX
#undef EBX
#undef ESP
#undef EBP
#undef ESI
#undef EDI
#undef EIP
#include <signal.h>
#include <sys/ucontext.h>
#endif

40 41 42 43 44 45
#if defined(__sparc__) && !defined(HOST_SOLARIS)
// Work around ugly bugs in glibc that mangle global register contents
#undef env
#define env cpu_single_env
#endif

46 47
int tb_invalidated_flag;

B
bellard 已提交
48
//#define DEBUG_EXEC
B
bellard 已提交
49
//#define DEBUG_SIGNAL
B
bellard 已提交
50

B
bellard 已提交
51 52
void cpu_loop_exit(void)
{
53 54 55
    /* NOTE: the register at this point must be saved by hand because
       longjmp restore them */
    regs_to_env();
B
bellard 已提交
56 57
    longjmp(env->jmp_env, 1);
}
58

P
pbrook 已提交
59
#if !(defined(TARGET_SPARC) || defined(TARGET_SH4) || defined(TARGET_M68K))
B
bellard 已提交
60 61
#define reg_T2
#endif
B
bellard 已提交
62

63 64 65
/* exit the current TB from a signal handler. The host registers are
   restored in a state compatible with the CPU emulator
 */
66
void cpu_resume_from_signal(CPUState *env1, void *puc)
67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84
{
#if !defined(CONFIG_SOFTMMU)
    struct ucontext *uc = puc;
#endif

    env = env1;

    /* XXX: restore cpu registers saved in host registers */

#if !defined(CONFIG_SOFTMMU)
    if (puc) {
        /* XXX: use siglongjmp ? */
        sigprocmask(SIG_SETMASK, &uc->uc_sigmask, NULL);
    }
#endif
    longjmp(env->jmp_env, 1);
}

85 86
static TranslationBlock *tb_find_slow(target_ulong pc,
                                      target_ulong cs_base,
87
                                      uint64_t flags)
88 89 90 91 92 93
{
    TranslationBlock *tb, **ptb1;
    int code_gen_size;
    unsigned int h;
    target_ulong phys_pc, phys_page1, phys_page2, virt_page2;
    uint8_t *tc_ptr;
94

95
    tb_invalidated_flag = 0;
96

97
    regs_to_env(); /* XXX: do it just before cpu_gen_code() */
98

99 100 101 102 103 104 105 106 107 108
    /* find translated block using physical mappings */
    phys_pc = get_phys_addr_code(env, pc);
    phys_page1 = phys_pc & TARGET_PAGE_MASK;
    phys_page2 = -1;
    h = tb_phys_hash_func(phys_pc);
    ptb1 = &tb_phys_hash[h];
    for(;;) {
        tb = *ptb1;
        if (!tb)
            goto not_found;
109
        if (tb->pc == pc &&
110
            tb->page_addr[0] == phys_page1 &&
111
            tb->cs_base == cs_base &&
112 113 114
            tb->flags == flags) {
            /* check next page if needed */
            if (tb->page_addr[1] != -1) {
115
                virt_page2 = (pc & TARGET_PAGE_MASK) +
116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134
                    TARGET_PAGE_SIZE;
                phys_page2 = get_phys_addr_code(env, virt_page2);
                if (tb->page_addr[1] == phys_page2)
                    goto found;
            } else {
                goto found;
            }
        }
        ptb1 = &tb->phys_hash_next;
    }
 not_found:
    /* if no translated code available, then translate it now */
    tb = tb_alloc(pc);
    if (!tb) {
        /* flush must be done */
        tb_flush(env);
        /* cannot fail at this point */
        tb = tb_alloc(pc);
        /* don't forget to invalidate previous TB info */
B
bellard 已提交
135
        tb_invalidated_flag = 1;
136 137 138 139 140
    }
    tc_ptr = code_gen_ptr;
    tb->tc_ptr = tc_ptr;
    tb->cs_base = cs_base;
    tb->flags = flags;
141
    cpu_gen_code(env, tb, &code_gen_size);
142
    code_gen_ptr = (void *)(((unsigned long)code_gen_ptr + code_gen_size + CODE_GEN_ALIGN - 1) & ~(CODE_GEN_ALIGN - 1));
143

144 145 146 147 148 149 150
    /* check next page if needed */
    virt_page2 = (pc + tb->size - 1) & TARGET_PAGE_MASK;
    phys_page2 = -1;
    if ((pc & TARGET_PAGE_MASK) != virt_page2) {
        phys_page2 = get_phys_addr_code(env, virt_page2);
    }
    tb_link_phys(tb, phys_pc, phys_page2);
151

152 153 154 155 156 157 158 159 160 161
 found:
    /* we add the TB in the virtual pc hash table */
    env->tb_jmp_cache[tb_jmp_cache_hash_func(pc)] = tb;
    return tb;
}

static inline TranslationBlock *tb_find_fast(void)
{
    TranslationBlock *tb;
    target_ulong cs_base, pc;
162
    uint64_t flags;
163 164 165 166 167 168 169 170 171 172 173

    /* we record a subset of the CPU state. It will
       always be the same before a given translated block
       is executed. */
#if defined(TARGET_I386)
    flags = env->hflags;
    flags |= (env->eflags & (IOPL_MASK | TF_MASK | VM_MASK));
    cs_base = env->segs[R_CS].base;
    pc = cs_base + env->eip;
#elif defined(TARGET_ARM)
    flags = env->thumb | (env->vfp.vec_len << 1)
B
bellard 已提交
174 175 176
            | (env->vfp.vec_stride << 4);
    if ((env->uncached_cpsr & CPSR_M) != ARM_CPU_MODE_USR)
        flags |= (1 << 6);
P
pbrook 已提交
177 178
    if (env->vfp.xregs[ARM_VFP_FPEXC] & (1 << 30))
        flags |= (1 << 7);
P
pbrook 已提交
179
    flags |= (env->condexec_bits << 8);
180 181 182 183
    cs_base = 0;
    pc = env->regs[15];
#elif defined(TARGET_SPARC)
#ifdef TARGET_SPARC64
B
bellard 已提交
184 185 186
    // Combined FPU enable bits . PRIV . DMMU enabled . IMMU enabled
    flags = (((env->pstate & PS_PEF) >> 1) | ((env->fprs & FPRS_FEF) << 2))
        | (env->pstate & PS_PRIV) | ((env->lsu & (DMMU_E | IMMU_E)) >> 2);
187
#else
188 189
    // FPU enable . Supervisor
    flags = (env->psref << 4) | env->psrs;
190 191 192 193
#endif
    cs_base = env->npc;
    pc = env->pc;
#elif defined(TARGET_PPC)
194
    flags = env->hflags;
195 196 197
    cs_base = 0;
    pc = env->nip;
#elif defined(TARGET_MIPS)
198
    flags = env->hflags & (MIPS_HFLAG_TMASK | MIPS_HFLAG_BMASK);
B
bellard 已提交
199
    cs_base = 0;
200
    pc = env->PC[env->current_tc];
P
pbrook 已提交
201
#elif defined(TARGET_M68K)
P
pbrook 已提交
202 203 204
    flags = (env->fpcr & M68K_FPCR_PREC)  /* Bit  6 */
            | (env->sr & SR_S)            /* Bit  13 */
            | ((env->macsr >> 4) & 0xf);  /* Bits 0-3 */
P
pbrook 已提交
205 206
    cs_base = 0;
    pc = env->pc;
B
bellard 已提交
207
#elif defined(TARGET_SH4)
T
ths 已提交
208 209
    flags = env->flags;
    cs_base = 0;
B
bellard 已提交
210
    pc = env->pc;
J
j_mayer 已提交
211 212 213 214
#elif defined(TARGET_ALPHA)
    flags = env->ps;
    cs_base = 0;
    pc = env->pc;
215
#elif defined(TARGET_CRIS)
216
    flags = env->pregs[PR_CCS] & (P_FLAG | U_FLAG | X_FLAG);
217
    flags |= env->dslot;
218 219
    cs_base = 0;
    pc = env->pc;
220 221 222
#else
#error unsupported CPU
#endif
B
bellard 已提交
223
    tb = env->tb_jmp_cache[tb_jmp_cache_hash_func(pc)];
224 225 226 227 228 229 230
    if (__builtin_expect(!tb || tb->pc != pc || tb->cs_base != cs_base ||
                         tb->flags != flags, 0)) {
        tb = tb_find_slow(pc, cs_base, flags);
    }
    return tb;
}

B
bellard 已提交
231 232
/* main execution loop */

B
bellard 已提交
233
int cpu_exec(CPUState *env1)
B
bellard 已提交
234
{
P
pbrook 已提交
235 236
#define DECLARE_HOST_REGS 1
#include "hostregs_helper.h"
237 238
    int ret, interrupt_request;
    TranslationBlock *tb;
B
bellard 已提交
239
    uint8_t *tc_ptr;
P
pbrook 已提交
240
    unsigned long next_tb;
241

242 243
    if (cpu_halted(env1) == EXCP_HALTED)
        return EXCP_HALTED;
B
bellard 已提交
244

245
    cpu_single_env = env1;
B
bellard 已提交
246

B
bellard 已提交
247
    /* first we save global registers */
P
pbrook 已提交
248 249
#define SAVE_HOST_REGS 1
#include "hostregs_helper.h"
B
bellard 已提交
250
    env = env1;
B
bellard 已提交
251

B
bellard 已提交
252
    env_to_regs();
253
#if defined(TARGET_I386)
B
bellard 已提交
254
    /* put eflags in CPU temporary format */
B
bellard 已提交
255 256
    CC_SRC = env->eflags & (CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
    DF = 1 - (2 * ((env->eflags >> 10) & 1));
B
bellard 已提交
257
    CC_OP = CC_OP_EFLAGS;
B
bellard 已提交
258
    env->eflags &= ~(DF_MASK | CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
259
#elif defined(TARGET_SPARC)
P
pbrook 已提交
260 261 262 263
#elif defined(TARGET_M68K)
    env->cc_op = CC_OP_FLAGS;
    env->cc_dest = env->sr & 0xf;
    env->cc_x = (env->sr >> 4) & 1;
264 265 266
#elif defined(TARGET_ALPHA)
#elif defined(TARGET_ARM)
#elif defined(TARGET_PPC)
B
bellard 已提交
267
#elif defined(TARGET_MIPS)
B
bellard 已提交
268
#elif defined(TARGET_SH4)
269
#elif defined(TARGET_CRIS)
B
bellard 已提交
270
    /* XXXXX */
B
bellard 已提交
271 272 273
#else
#error unsupported target CPU
#endif
274
    env->exception_index = -1;
275

B
bellard 已提交
276
    /* prepare setjmp context for exception handling */
277 278
    for(;;) {
        if (setjmp(env->jmp_env) == 0) {
279
            env->current_tb = NULL;
280 281 282 283 284 285 286 287
            /* if an exception is pending, we execute it here */
            if (env->exception_index >= 0) {
                if (env->exception_index >= EXCP_INTERRUPT) {
                    /* exit request from the cpu execution loop */
                    ret = env->exception_index;
                    break;
                } else if (env->user_mode_only) {
                    /* if user mode only, we simulate a fake exception
T
ths 已提交
288
                       which will be handled outside the cpu execution
289
                       loop */
B
bellard 已提交
290
#if defined(TARGET_I386)
291 292 293
                    do_interrupt_user(env->exception_index,
                                      env->exception_is_int,
                                      env->error_code,
294
                                      env->exception_next_eip);
295 296
                    /* successfully delivered */
                    env->old_exception = -1;
B
bellard 已提交
297
#endif
298 299 300
                    ret = env->exception_index;
                    break;
                } else {
B
bellard 已提交
301
#if defined(TARGET_I386)
302 303 304
                    /* simulate a real cpu exception. On i386, it can
                       trigger new exceptions, but we do not handle
                       double or triple faults yet. */
305 306 307
                    do_interrupt(env->exception_index,
                                 env->exception_is_int,
                                 env->error_code,
B
bellard 已提交
308
                                 env->exception_next_eip, 0);
309 310
                    /* successfully delivered */
                    env->old_exception = -1;
311 312
#elif defined(TARGET_PPC)
                    do_interrupt(env);
B
bellard 已提交
313 314
#elif defined(TARGET_MIPS)
                    do_interrupt(env);
315
#elif defined(TARGET_SPARC)
316
                    do_interrupt(env);
B
bellard 已提交
317 318
#elif defined(TARGET_ARM)
                    do_interrupt(env);
B
bellard 已提交
319 320
#elif defined(TARGET_SH4)
		    do_interrupt(env);
J
j_mayer 已提交
321 322
#elif defined(TARGET_ALPHA)
                    do_interrupt(env);
323 324
#elif defined(TARGET_CRIS)
                    do_interrupt(env);
P
pbrook 已提交
325 326
#elif defined(TARGET_M68K)
                    do_interrupt(0);
B
bellard 已提交
327
#endif
328 329
                }
                env->exception_index = -1;
330
            }
B
bellard 已提交
331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353
#ifdef USE_KQEMU
            if (kqemu_is_ok(env) && env->interrupt_request == 0) {
                int ret;
                env->eflags = env->eflags | cc_table[CC_OP].compute_all() | (DF & DF_MASK);
                ret = kqemu_cpu_exec(env);
                /* put eflags in CPU temporary format */
                CC_SRC = env->eflags & (CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
                DF = 1 - (2 * ((env->eflags >> 10) & 1));
                CC_OP = CC_OP_EFLAGS;
                env->eflags &= ~(DF_MASK | CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
                if (ret == 1) {
                    /* exception */
                    longjmp(env->jmp_env, 1);
                } else if (ret == 2) {
                    /* softmmu execution needed */
                } else {
                    if (env->interrupt_request != 0) {
                        /* hardware interrupt will be executed just after */
                    } else {
                        /* otherwise, we restart */
                        longjmp(env->jmp_env, 1);
                    }
                }
354
            }
B
bellard 已提交
355 356
#endif

357
            next_tb = 0; /* force lookup of first TB */
358
            for(;;) {
B
bellard 已提交
359
                interrupt_request = env->interrupt_request;
360 361
                if (__builtin_expect(interrupt_request, 0) &&
                    likely(!(env->singlestep_enabled & SSTEP_NOIRQ))) {
362 363 364 365 366
                    if (interrupt_request & CPU_INTERRUPT_DEBUG) {
                        env->interrupt_request &= ~CPU_INTERRUPT_DEBUG;
                        env->exception_index = EXCP_DEBUG;
                        cpu_loop_exit();
                    }
367
#if defined(TARGET_ARM) || defined(TARGET_SPARC) || defined(TARGET_MIPS) || \
368
    defined(TARGET_PPC) || defined(TARGET_ALPHA) || defined(TARGET_CRIS)
369 370 371 372 373 374 375
                    if (interrupt_request & CPU_INTERRUPT_HALT) {
                        env->interrupt_request &= ~CPU_INTERRUPT_HALT;
                        env->halted = 1;
                        env->exception_index = EXCP_HLT;
                        cpu_loop_exit();
                    }
#endif
B
bellard 已提交
376
#if defined(TARGET_I386)
377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406
                    if (env->hflags2 & HF2_GIF_MASK) {
                        if ((interrupt_request & CPU_INTERRUPT_SMI) &&
                            !(env->hflags & HF_SMM_MASK)) {
                            svm_check_intercept(SVM_EXIT_SMI);
                            env->interrupt_request &= ~CPU_INTERRUPT_SMI;
                            do_smm_enter();
                            next_tb = 0;
                        } else if ((interrupt_request & CPU_INTERRUPT_NMI) &&
                                   !(env->hflags2 & HF2_NMI_MASK)) {
                            env->interrupt_request &= ~CPU_INTERRUPT_NMI;
                            env->hflags2 |= HF2_NMI_MASK;
                            do_interrupt(EXCP02_NMI, 0, 0, 0, 1);
                            next_tb = 0;
                        } else if ((interrupt_request & CPU_INTERRUPT_HARD) &&
                                   (((env->hflags2 & HF2_VINTR_MASK) && 
                                     (env->hflags2 & HF2_HIF_MASK)) ||
                                    (!(env->hflags2 & HF2_VINTR_MASK) && 
                                     (env->eflags & IF_MASK && 
                                      !(env->hflags & HF_INHIBIT_IRQ_MASK))))) {
                            int intno;
                            svm_check_intercept(SVM_EXIT_INTR);
                            env->interrupt_request &= ~(CPU_INTERRUPT_HARD | CPU_INTERRUPT_VIRQ);
                            intno = cpu_get_pic_interrupt(env);
                            if (loglevel & CPU_LOG_TB_IN_ASM) {
                                fprintf(logfile, "Servicing hardware INT=0x%02x\n", intno);
                            }
                            do_interrupt(intno, 0, 0, 0, 1);
                            /* ensure that no TB jump will be modified as
                               the program flow was changed */
                            next_tb = 0;
T
ths 已提交
407
#if !defined(CONFIG_USER_ONLY)
408 409 410 411 412 413 414 415 416 417 418 419
                        } else if ((interrupt_request & CPU_INTERRUPT_VIRQ) &&
                                   (env->eflags & IF_MASK) && 
                                   !(env->hflags & HF_INHIBIT_IRQ_MASK)) {
                            int intno;
                            /* FIXME: this should respect TPR */
                            svm_check_intercept(SVM_EXIT_VINTR);
                            env->interrupt_request &= ~CPU_INTERRUPT_VIRQ;
                            intno = ldl_phys(env->vm_vmcb + offsetof(struct vmcb, control.int_vector));
                            if (loglevel & CPU_LOG_TB_IN_ASM)
                                fprintf(logfile, "Servicing virtual hardware INT=0x%02x\n", intno);
                            do_interrupt(intno, 0, 0, 0, 1);
                            next_tb = 0;
B
bellard 已提交
420
#endif
421
                        }
B
bellard 已提交
422
                    }
423
#elif defined(TARGET_PPC)
424 425 426 427 428
#if 0
                    if ((interrupt_request & CPU_INTERRUPT_RESET)) {
                        cpu_ppc_reset(env);
                    }
#endif
429
                    if (interrupt_request & CPU_INTERRUPT_HARD) {
430 431 432
                        ppc_hw_interrupt(env);
                        if (env->pending_interrupts == 0)
                            env->interrupt_request &= ~CPU_INTERRUPT_HARD;
433
                        next_tb = 0;
434
                    }
B
bellard 已提交
435 436
#elif defined(TARGET_MIPS)
                    if ((interrupt_request & CPU_INTERRUPT_HARD) &&
T
ths 已提交
437
                        (env->CP0_Status & env->CP0_Cause & CP0Ca_IP_mask) &&
B
bellard 已提交
438
                        (env->CP0_Status & (1 << CP0St_IE)) &&
T
ths 已提交
439 440
                        !(env->CP0_Status & (1 << CP0St_EXL)) &&
                        !(env->CP0_Status & (1 << CP0St_ERL)) &&
B
bellard 已提交
441 442 443 444 445
                        !(env->hflags & MIPS_HFLAG_DM)) {
                        /* Raise it */
                        env->exception_index = EXCP_EXT_INTERRUPT;
                        env->error_code = 0;
                        do_interrupt(env);
446
                        next_tb = 0;
B
bellard 已提交
447
                    }
448
#elif defined(TARGET_SPARC)
B
bellard 已提交
449 450 451 452 453 454 455 456 457
                    if ((interrupt_request & CPU_INTERRUPT_HARD) &&
			(env->psret != 0)) {
			int pil = env->interrupt_index & 15;
			int type = env->interrupt_index & 0xf0;

			if (((type == TT_EXTINT) &&
			     (pil == 15 || pil > env->psrpil)) ||
			    type != TT_EXTINT) {
			    env->interrupt_request &= ~CPU_INTERRUPT_HARD;
458 459
                            env->exception_index = env->interrupt_index;
                            do_interrupt(env);
B
bellard 已提交
460
			    env->interrupt_index = 0;
B
blueswir1 已提交
461 462 463
#if !defined(TARGET_SPARC64) && !defined(CONFIG_USER_ONLY)
                            cpu_check_irqs(env);
#endif
464
                        next_tb = 0;
B
bellard 已提交
465
			}
466 467 468
		    } else if (interrupt_request & CPU_INTERRUPT_TIMER) {
			//do_interrupt(0, 0, 0, 0, 0);
			env->interrupt_request &= ~CPU_INTERRUPT_TIMER;
469
		    }
B
bellard 已提交
470 471 472 473 474
#elif defined(TARGET_ARM)
                    if (interrupt_request & CPU_INTERRUPT_FIQ
                        && !(env->uncached_cpsr & CPSR_F)) {
                        env->exception_index = EXCP_FIQ;
                        do_interrupt(env);
475
                        next_tb = 0;
B
bellard 已提交
476
                    }
P
pbrook 已提交
477 478 479 480 481 482 483 484 485
                    /* ARMv7-M interrupt return works by loading a magic value
                       into the PC.  On real hardware the load causes the
                       return to occur.  The qemu implementation performs the
                       jump normally, then does the exception return when the
                       CPU tries to execute code at the magic address.
                       This will cause the magic PC value to be pushed to
                       the stack if an interrupt occured at the wrong time.
                       We avoid this by disabling interrupts when
                       pc contains a magic address.  */
B
bellard 已提交
486
                    if (interrupt_request & CPU_INTERRUPT_HARD
P
pbrook 已提交
487 488
                        && ((IS_M(env) && env->regs[15] < 0xfffffff0)
                            || !(env->uncached_cpsr & CPSR_I))) {
B
bellard 已提交
489 490
                        env->exception_index = EXCP_IRQ;
                        do_interrupt(env);
491
                        next_tb = 0;
B
bellard 已提交
492
                    }
B
bellard 已提交
493
#elif defined(TARGET_SH4)
494 495
                    if (interrupt_request & CPU_INTERRUPT_HARD) {
                        do_interrupt(env);
496
                        next_tb = 0;
497
                    }
J
j_mayer 已提交
498 499 500
#elif defined(TARGET_ALPHA)
                    if (interrupt_request & CPU_INTERRUPT_HARD) {
                        do_interrupt(env);
501
                        next_tb = 0;
J
j_mayer 已提交
502
                    }
503 504 505
#elif defined(TARGET_CRIS)
                    if (interrupt_request & CPU_INTERRUPT_HARD) {
                        do_interrupt(env);
506
                        next_tb = 0;
507
                    }
P
pbrook 已提交
508 509 510 511 512 513 514 515 516 517 518
#elif defined(TARGET_M68K)
                    if (interrupt_request & CPU_INTERRUPT_HARD
                        && ((env->sr & SR_I) >> SR_I_SHIFT)
                            < env->pending_level) {
                        /* Real hardware gets the interrupt vector via an
                           IACK cycle at this point.  Current emulated
                           hardware doesn't rely on this, so we
                           provide/save the vector when the interrupt is
                           first signalled.  */
                        env->exception_index = env->pending_vector;
                        do_interrupt(1);
519
                        next_tb = 0;
P
pbrook 已提交
520
                    }
B
bellard 已提交
521
#endif
B
bellard 已提交
522 523
                   /* Don't use the cached interupt_request value,
                      do_interrupt may have updated the EXITTB flag. */
B
bellard 已提交
524
                    if (env->interrupt_request & CPU_INTERRUPT_EXITTB) {
525 526 527
                        env->interrupt_request &= ~CPU_INTERRUPT_EXITTB;
                        /* ensure that no TB jump will be modified as
                           the program flow was changed */
528
                        next_tb = 0;
529
                    }
B
bellard 已提交
530 531 532 533 534
                    if (interrupt_request & CPU_INTERRUPT_EXIT) {
                        env->interrupt_request &= ~CPU_INTERRUPT_EXIT;
                        env->exception_index = EXCP_INTERRUPT;
                        cpu_loop_exit();
                    }
535
                }
B
bellard 已提交
536
#ifdef DEBUG_EXEC
B
bellard 已提交
537
                if ((loglevel & CPU_LOG_TB_CPU)) {
538
                    /* restore flags in standard format */
539 540
                    regs_to_env();
#if defined(TARGET_I386)
541
                    env->eflags = env->eflags | cc_table[CC_OP].compute_all() | (DF & DF_MASK);
B
bellard 已提交
542
                    cpu_dump_state(env, logfile, fprintf, X86_DUMP_CCOP);
543
                    env->eflags &= ~(DF_MASK | CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
B
bellard 已提交
544
#elif defined(TARGET_ARM)
B
bellard 已提交
545
                    cpu_dump_state(env, logfile, fprintf, 0);
546
#elif defined(TARGET_SPARC)
B
bellard 已提交
547
                    cpu_dump_state(env, logfile, fprintf, 0);
548
#elif defined(TARGET_PPC)
B
bellard 已提交
549
                    cpu_dump_state(env, logfile, fprintf, 0);
P
pbrook 已提交
550 551 552 553 554 555
#elif defined(TARGET_M68K)
                    cpu_m68k_flush_flags(env, env->cc_op);
                    env->cc_op = CC_OP_FLAGS;
                    env->sr = (env->sr & 0xffe0)
                              | env->cc_dest | (env->cc_x << 4);
                    cpu_dump_state(env, logfile, fprintf, 0);
B
bellard 已提交
556 557
#elif defined(TARGET_MIPS)
                    cpu_dump_state(env, logfile, fprintf, 0);
B
bellard 已提交
558 559
#elif defined(TARGET_SH4)
		    cpu_dump_state(env, logfile, fprintf, 0);
J
j_mayer 已提交
560 561
#elif defined(TARGET_ALPHA)
                    cpu_dump_state(env, logfile, fprintf, 0);
562 563
#elif defined(TARGET_CRIS)
                    cpu_dump_state(env, logfile, fprintf, 0);
B
bellard 已提交
564
#else
565
#error unsupported target CPU
B
bellard 已提交
566
#endif
567
                }
B
bellard 已提交
568
#endif
P
pbrook 已提交
569
                spin_lock(&tb_lock);
570
                tb = tb_find_fast();
P
pbrook 已提交
571 572 573 574 575 576 577 578
                /* Note: we do it here to avoid a gcc bug on Mac OS X when
                   doing it in tb_find_slow */
                if (tb_invalidated_flag) {
                    /* as some TB could have been invalidated because
                       of memory exceptions while generating the code, we
                       must recompute the hash index here */
                    next_tb = 0;
                }
579
#ifdef DEBUG_EXEC
B
bellard 已提交
580
                if ((loglevel & CPU_LOG_EXEC)) {
B
bellard 已提交
581 582 583
                    fprintf(logfile, "Trace 0x%08lx [" TARGET_FMT_lx "] %s\n",
                            (long)tb->tc_ptr, tb->pc,
                            lookup_symbol(tb->pc));
584
                }
585
#endif
586 587 588
                /* see if we can patch the calling TB. When the TB
                   spans two pages, we cannot safely do a direct
                   jump. */
B
bellard 已提交
589
                {
590
                    if (next_tb != 0 &&
591
#ifdef USE_KQEMU
592 593
                        (env->kqemu_enabled != 2) &&
#endif
B
bellard 已提交
594
                        tb->page_addr[1] == -1) {
595
                    tb_add_jump((TranslationBlock *)(next_tb & ~3), next_tb & 3, tb);
596
                }
B
bellard 已提交
597
                }
P
pbrook 已提交
598
                spin_unlock(&tb_lock);
599
                tc_ptr = tb->tc_ptr;
B
bellard 已提交
600
                env->current_tb = tb;
601
                /* execute the generated code */
602 603 604 605 606
#if defined(__sparc__) && !defined(HOST_SOLARIS)
#undef env
                env = cpu_single_env;
#define env cpu_single_env
#endif
607
                next_tb = tcg_qemu_tb_exec(tc_ptr);
B
bellard 已提交
608
                env->current_tb = NULL;
B
bellard 已提交
609 610
                /* reset soft MMU for next block (it can currently
                   only be set by a memory fault) */
611 612 613 614 615 616
#if defined(USE_KQEMU)
#define MIN_CYCLE_BEFORE_SWITCH (100 * 1000)
                if (kqemu_is_ok(env) &&
                    (cpu_get_time_fast() - env->last_io_time) >= MIN_CYCLE_BEFORE_SWITCH) {
                    cpu_loop_exit();
                }
B
bellard 已提交
617
#endif
T
ths 已提交
618
            } /* for(;;) */
619
        } else {
B
bellard 已提交
620
            env_to_regs();
B
bellard 已提交
621
        }
622 623
    } /* for(;;) */

B
bellard 已提交
624

B
bellard 已提交
625
#if defined(TARGET_I386)
B
bellard 已提交
626
    /* restore flags in standard format */
B
bellard 已提交
627
    env->eflags = env->eflags | cc_table[CC_OP].compute_all() | (DF & DF_MASK);
B
bellard 已提交
628
#elif defined(TARGET_ARM)
B
bellard 已提交
629
    /* XXX: Save/restore host fpu exception state?.  */
630
#elif defined(TARGET_SPARC)
631
#elif defined(TARGET_PPC)
P
pbrook 已提交
632 633 634 635 636
#elif defined(TARGET_M68K)
    cpu_m68k_flush_flags(env, env->cc_op);
    env->cc_op = CC_OP_FLAGS;
    env->sr = (env->sr & 0xffe0)
              | env->cc_dest | (env->cc_x << 4);
B
bellard 已提交
637
#elif defined(TARGET_MIPS)
B
bellard 已提交
638
#elif defined(TARGET_SH4)
J
j_mayer 已提交
639
#elif defined(TARGET_ALPHA)
640
#elif defined(TARGET_CRIS)
B
bellard 已提交
641
    /* XXXXX */
B
bellard 已提交
642 643 644
#else
#error unsupported target CPU
#endif
P
pbrook 已提交
645 646 647 648

    /* restore global registers */
#include "hostregs_helper.h"

B
bellard 已提交
649
    /* fail safe : never use cpu_single_env outside cpu_exec() */
650
    cpu_single_env = NULL;
B
bellard 已提交
651 652
    return ret;
}
B
bellard 已提交
653

654 655 656 657
/* must only be called from the generated code as an exception can be
   generated */
void tb_invalidate_page_range(target_ulong start, target_ulong end)
{
658 659 660
    /* XXX: cannot enable it yet because it yields to MMU exception
       where NIP != read address on PowerPC */
#if 0
661 662 663
    target_ulong phys_addr;
    phys_addr = get_phys_addr_code(env, start);
    tb_invalidate_phys_page_range(phys_addr, phys_addr + end - start, 0);
664
#endif
665 666
}

B
bellard 已提交
667
#if defined(TARGET_I386) && defined(CONFIG_USER_ONLY)
B
bellard 已提交
668

B
bellard 已提交
669 670 671 672 673 674
void cpu_x86_load_seg(CPUX86State *s, int seg_reg, int selector)
{
    CPUX86State *saved_env;

    saved_env = env;
    env = s;
B
bellard 已提交
675
    if (!(env->cr[0] & CR0_PE_MASK) || (env->eflags & VM_MASK)) {
B
bellard 已提交
676
        selector &= 0xffff;
677
        cpu_x86_load_seg_cache(env, seg_reg, selector,
B
bellard 已提交
678
                               (selector << 4), 0xffff, 0);
B
bellard 已提交
679
    } else {
B
bellard 已提交
680
        helper_load_seg(seg_reg, selector);
B
bellard 已提交
681
    }
B
bellard 已提交
682 683
    env = saved_env;
}
B
bellard 已提交
684

685
void cpu_x86_fsave(CPUX86State *s, target_ulong ptr, int data32)
686 687 688 689 690
{
    CPUX86State *saved_env;

    saved_env = env;
    env = s;
691

692
    helper_fsave(ptr, data32);
693 694 695 696

    env = saved_env;
}

697
void cpu_x86_frstor(CPUX86State *s, target_ulong ptr, int data32)
698 699 700 701 702
{
    CPUX86State *saved_env;

    saved_env = env;
    env = s;
703

704
    helper_frstor(ptr, data32);
705 706 707 708

    env = saved_env;
}

B
bellard 已提交
709 710
#endif /* TARGET_I386 */

B
bellard 已提交
711 712
#if !defined(CONFIG_SOFTMMU)

713 714
#if defined(TARGET_I386)

715
/* 'pc' is the host PC at which the exception was raised. 'address' is
B
bellard 已提交
716 717 718
   the effective address of the memory exception. 'is_write' is 1 if a
   write caused the exception and otherwise 0'. 'old_set' is the
   signal set which should be restored */
B
bellard 已提交
719
static inline int handle_cpu_signal(unsigned long pc, unsigned long address,
720
                                    int is_write, sigset_t *old_set,
721
                                    void *puc)
B
bellard 已提交
722
{
B
bellard 已提交
723 724
    TranslationBlock *tb;
    int ret;
B
bellard 已提交
725

B
bellard 已提交
726 727
    if (cpu_single_env)
        env = cpu_single_env; /* XXX: find a correct solution for multithread */
B
bellard 已提交
728
#if defined(DEBUG_SIGNAL)
729
    qemu_printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
730
                pc, address, is_write, *(unsigned long *)old_set);
B
bellard 已提交
731
#endif
732
    /* XXX: locking issue */
733
    if (is_write && page_unprotect(h2g(address), pc, puc)) {
B
bellard 已提交
734 735
        return 1;
    }
736

737
    /* see if it is an MMU fault */
738
    ret = cpu_x86_handle_mmu_fault(env, address, is_write, MMU_USER_IDX, 0);
739 740 741 742 743
    if (ret < 0)
        return 0; /* not an MMU fault */
    if (ret == 0)
        return 1; /* the MMU fault was handled without causing real CPU fault */
    /* now we have a real cpu fault */
B
bellard 已提交
744 745
    tb = tb_find_pc(pc);
    if (tb) {
B
bellard 已提交
746 747
        /* the PC is inside the translated code. It means that we have
           a virtual CPU fault */
748
        cpu_restore_state(tb, env, pc, puc);
749
    }
B
bellard 已提交
750
    if (ret == 1) {
751
#if 0
752
        printf("PF exception: EIP=0x%08x CR2=0x%08x error=0x%x\n",
B
bellard 已提交
753
               env->eip, env->cr[2], env->error_code);
754
#endif
B
bellard 已提交
755 756 757
        /* we restore the process signal mask as the sigreturn should
           do it (XXX: use sigsetjmp) */
        sigprocmask(SIG_SETMASK, old_set, NULL);
B
bellard 已提交
758
        raise_exception_err(env->exception_index, env->error_code);
B
bellard 已提交
759 760
    } else {
        /* activate soft MMU for this block */
761
        env->hflags |= HF_SOFTMMU_MASK;
762
        cpu_resume_from_signal(env, puc);
B
bellard 已提交
763
    }
764 765 766 767
    /* never comes here */
    return 1;
}

B
bellard 已提交
768
#elif defined(TARGET_ARM)
769
static inline int handle_cpu_signal(unsigned long pc, unsigned long address,
770 771
                                    int is_write, sigset_t *old_set,
                                    void *puc)
772
{
B
bellard 已提交
773 774 775 776 777 778
    TranslationBlock *tb;
    int ret;

    if (cpu_single_env)
        env = cpu_single_env; /* XXX: find a correct solution for multithread */
#if defined(DEBUG_SIGNAL)
779
    printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
B
bellard 已提交
780 781
           pc, address, is_write, *(unsigned long *)old_set);
#endif
B
bellard 已提交
782
    /* XXX: locking issue */
783
    if (is_write && page_unprotect(h2g(address), pc, puc)) {
B
bellard 已提交
784 785
        return 1;
    }
B
bellard 已提交
786
    /* see if it is an MMU fault */
787
    ret = cpu_arm_handle_mmu_fault(env, address, is_write, MMU_USER_IDX, 0);
B
bellard 已提交
788 789 790 791 792 793 794 795 796 797 798 799 800 801 802
    if (ret < 0)
        return 0; /* not an MMU fault */
    if (ret == 0)
        return 1; /* the MMU fault was handled without causing real CPU fault */
    /* now we have a real cpu fault */
    tb = tb_find_pc(pc);
    if (tb) {
        /* the PC is inside the translated code. It means that we have
           a virtual CPU fault */
        cpu_restore_state(tb, env, pc, puc);
    }
    /* we restore the process signal mask as the sigreturn should
       do it (XXX: use sigsetjmp) */
    sigprocmask(SIG_SETMASK, old_set, NULL);
    cpu_loop_exit();
A
aurel32 已提交
803 804
    /* never comes here */
    return 1;
805
}
806 807
#elif defined(TARGET_SPARC)
static inline int handle_cpu_signal(unsigned long pc, unsigned long address,
808 809
                                    int is_write, sigset_t *old_set,
                                    void *puc)
810
{
B
bellard 已提交
811 812 813 814 815 816
    TranslationBlock *tb;
    int ret;

    if (cpu_single_env)
        env = cpu_single_env; /* XXX: find a correct solution for multithread */
#if defined(DEBUG_SIGNAL)
817
    printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
B
bellard 已提交
818 819
           pc, address, is_write, *(unsigned long *)old_set);
#endif
B
bellard 已提交
820
    /* XXX: locking issue */
821
    if (is_write && page_unprotect(h2g(address), pc, puc)) {
B
bellard 已提交
822 823
        return 1;
    }
B
bellard 已提交
824
    /* see if it is an MMU fault */
825
    ret = cpu_sparc_handle_mmu_fault(env, address, is_write, MMU_USER_IDX, 0);
B
bellard 已提交
826 827 828 829 830 831 832 833 834 835 836 837 838 839 840
    if (ret < 0)
        return 0; /* not an MMU fault */
    if (ret == 0)
        return 1; /* the MMU fault was handled without causing real CPU fault */
    /* now we have a real cpu fault */
    tb = tb_find_pc(pc);
    if (tb) {
        /* the PC is inside the translated code. It means that we have
           a virtual CPU fault */
        cpu_restore_state(tb, env, pc, puc);
    }
    /* we restore the process signal mask as the sigreturn should
       do it (XXX: use sigsetjmp) */
    sigprocmask(SIG_SETMASK, old_set, NULL);
    cpu_loop_exit();
A
aurel32 已提交
841 842
    /* never comes here */
    return 1;
843
}
844 845
#elif defined (TARGET_PPC)
static inline int handle_cpu_signal(unsigned long pc, unsigned long address,
846 847
                                    int is_write, sigset_t *old_set,
                                    void *puc)
848 849
{
    TranslationBlock *tb;
850
    int ret;
851

852 853 854
    if (cpu_single_env)
        env = cpu_single_env; /* XXX: find a correct solution for multithread */
#if defined(DEBUG_SIGNAL)
855
    printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
856 857 858
           pc, address, is_write, *(unsigned long *)old_set);
#endif
    /* XXX: locking issue */
859
    if (is_write && page_unprotect(h2g(address), pc, puc)) {
860 861 862
        return 1;
    }

863
    /* see if it is an MMU fault */
864
    ret = cpu_ppc_handle_mmu_fault(env, address, is_write, MMU_USER_IDX, 0);
865 866 867 868 869
    if (ret < 0)
        return 0; /* not an MMU fault */
    if (ret == 0)
        return 1; /* the MMU fault was handled without causing real CPU fault */

870 871 872 873 874
    /* now we have a real cpu fault */
    tb = tb_find_pc(pc);
    if (tb) {
        /* the PC is inside the translated code. It means that we have
           a virtual CPU fault */
875
        cpu_restore_state(tb, env, pc, puc);
876
    }
877
    if (ret == 1) {
878
#if 0
879
        printf("PF exception: NIP=0x%08x error=0x%x %p\n",
880
               env->nip, env->error_code, tb);
881 882 883
#endif
    /* we restore the process signal mask as the sigreturn should
       do it (XXX: use sigsetjmp) */
884
        sigprocmask(SIG_SETMASK, old_set, NULL);
885
        do_raise_exception_err(env->exception_index, env->error_code);
886 887
    } else {
        /* activate soft MMU for this block */
888
        cpu_resume_from_signal(env, puc);
889
    }
890
    /* never comes here */
P
pbrook 已提交
891 892 893 894 895 896 897 898 899 900 901 902 903 904
    return 1;
}

#elif defined(TARGET_M68K)
static inline int handle_cpu_signal(unsigned long pc, unsigned long address,
                                    int is_write, sigset_t *old_set,
                                    void *puc)
{
    TranslationBlock *tb;
    int ret;

    if (cpu_single_env)
        env = cpu_single_env; /* XXX: find a correct solution for multithread */
#if defined(DEBUG_SIGNAL)
905
    printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
P
pbrook 已提交
906 907 908 909 910 911 912
           pc, address, is_write, *(unsigned long *)old_set);
#endif
    /* XXX: locking issue */
    if (is_write && page_unprotect(address, pc, puc)) {
        return 1;
    }
    /* see if it is an MMU fault */
913
    ret = cpu_m68k_handle_mmu_fault(env, address, is_write, MMU_USER_IDX, 0);
P
pbrook 已提交
914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929
    if (ret < 0)
        return 0; /* not an MMU fault */
    if (ret == 0)
        return 1; /* the MMU fault was handled without causing real CPU fault */
    /* now we have a real cpu fault */
    tb = tb_find_pc(pc);
    if (tb) {
        /* the PC is inside the translated code. It means that we have
           a virtual CPU fault */
        cpu_restore_state(tb, env, pc, puc);
    }
    /* we restore the process signal mask as the sigreturn should
       do it (XXX: use sigsetjmp) */
    sigprocmask(SIG_SETMASK, old_set, NULL);
    cpu_loop_exit();
    /* never comes here */
930 931
    return 1;
}
B
bellard 已提交
932 933 934 935 936 937 938 939

#elif defined (TARGET_MIPS)
static inline int handle_cpu_signal(unsigned long pc, unsigned long address,
                                    int is_write, sigset_t *old_set,
                                    void *puc)
{
    TranslationBlock *tb;
    int ret;
940

B
bellard 已提交
941 942 943
    if (cpu_single_env)
        env = cpu_single_env; /* XXX: find a correct solution for multithread */
#if defined(DEBUG_SIGNAL)
944
    printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
B
bellard 已提交
945 946 947
           pc, address, is_write, *(unsigned long *)old_set);
#endif
    /* XXX: locking issue */
948
    if (is_write && page_unprotect(h2g(address), pc, puc)) {
B
bellard 已提交
949 950 951 952
        return 1;
    }

    /* see if it is an MMU fault */
953
    ret = cpu_mips_handle_mmu_fault(env, address, is_write, MMU_USER_IDX, 0);
B
bellard 已提交
954 955 956 957 958 959 960 961 962 963 964 965 966 967
    if (ret < 0)
        return 0; /* not an MMU fault */
    if (ret == 0)
        return 1; /* the MMU fault was handled without causing real CPU fault */

    /* now we have a real cpu fault */
    tb = tb_find_pc(pc);
    if (tb) {
        /* the PC is inside the translated code. It means that we have
           a virtual CPU fault */
        cpu_restore_state(tb, env, pc, puc);
    }
    if (ret == 1) {
#if 0
968
        printf("PF exception: PC=0x" TARGET_FMT_lx " error=0x%x %p\n",
T
ths 已提交
969
               env->PC, env->error_code, tb);
B
bellard 已提交
970 971 972 973 974 975 976 977 978 979 980 981 982
#endif
    /* we restore the process signal mask as the sigreturn should
       do it (XXX: use sigsetjmp) */
        sigprocmask(SIG_SETMASK, old_set, NULL);
        do_raise_exception_err(env->exception_index, env->error_code);
    } else {
        /* activate soft MMU for this block */
        cpu_resume_from_signal(env, puc);
    }
    /* never comes here */
    return 1;
}

B
bellard 已提交
983 984 985 986 987 988 989
#elif defined (TARGET_SH4)
static inline int handle_cpu_signal(unsigned long pc, unsigned long address,
                                    int is_write, sigset_t *old_set,
                                    void *puc)
{
    TranslationBlock *tb;
    int ret;
990

B
bellard 已提交
991 992 993
    if (cpu_single_env)
        env = cpu_single_env; /* XXX: find a correct solution for multithread */
#if defined(DEBUG_SIGNAL)
994
    printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
B
bellard 已提交
995 996 997 998 999 1000 1001 1002
           pc, address, is_write, *(unsigned long *)old_set);
#endif
    /* XXX: locking issue */
    if (is_write && page_unprotect(h2g(address), pc, puc)) {
        return 1;
    }

    /* see if it is an MMU fault */
1003
    ret = cpu_sh4_handle_mmu_fault(env, address, is_write, MMU_USER_IDX, 0);
B
bellard 已提交
1004 1005 1006 1007 1008 1009
    if (ret < 0)
        return 0; /* not an MMU fault */
    if (ret == 0)
        return 1; /* the MMU fault was handled without causing real CPU fault */

    /* now we have a real cpu fault */
J
j_mayer 已提交
1010 1011 1012 1013 1014 1015 1016
    tb = tb_find_pc(pc);
    if (tb) {
        /* the PC is inside the translated code. It means that we have
           a virtual CPU fault */
        cpu_restore_state(tb, env, pc, puc);
    }
#if 0
1017
        printf("PF exception: NIP=0x%08x error=0x%x %p\n",
J
j_mayer 已提交
1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034
               env->nip, env->error_code, tb);
#endif
    /* we restore the process signal mask as the sigreturn should
       do it (XXX: use sigsetjmp) */
    sigprocmask(SIG_SETMASK, old_set, NULL);
    cpu_loop_exit();
    /* never comes here */
    return 1;
}

#elif defined (TARGET_ALPHA)
static inline int handle_cpu_signal(unsigned long pc, unsigned long address,
                                    int is_write, sigset_t *old_set,
                                    void *puc)
{
    TranslationBlock *tb;
    int ret;
1035

J
j_mayer 已提交
1036 1037 1038
    if (cpu_single_env)
        env = cpu_single_env; /* XXX: find a correct solution for multithread */
#if defined(DEBUG_SIGNAL)
1039
    printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
J
j_mayer 已提交
1040 1041 1042 1043 1044 1045 1046 1047
           pc, address, is_write, *(unsigned long *)old_set);
#endif
    /* XXX: locking issue */
    if (is_write && page_unprotect(h2g(address), pc, puc)) {
        return 1;
    }

    /* see if it is an MMU fault */
1048
    ret = cpu_alpha_handle_mmu_fault(env, address, is_write, MMU_USER_IDX, 0);
J
j_mayer 已提交
1049 1050 1051 1052 1053 1054
    if (ret < 0)
        return 0; /* not an MMU fault */
    if (ret == 0)
        return 1; /* the MMU fault was handled without causing real CPU fault */

    /* now we have a real cpu fault */
B
bellard 已提交
1055 1056 1057 1058 1059 1060 1061
    tb = tb_find_pc(pc);
    if (tb) {
        /* the PC is inside the translated code. It means that we have
           a virtual CPU fault */
        cpu_restore_state(tb, env, pc, puc);
    }
#if 0
1062
        printf("PF exception: NIP=0x%08x error=0x%x %p\n",
B
bellard 已提交
1063 1064 1065 1066
               env->nip, env->error_code, tb);
#endif
    /* we restore the process signal mask as the sigreturn should
       do it (XXX: use sigsetjmp) */
P
pbrook 已提交
1067 1068
    sigprocmask(SIG_SETMASK, old_set, NULL);
    cpu_loop_exit();
B
bellard 已提交
1069 1070 1071
    /* never comes here */
    return 1;
}
1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091
#elif defined (TARGET_CRIS)
static inline int handle_cpu_signal(unsigned long pc, unsigned long address,
                                    int is_write, sigset_t *old_set,
                                    void *puc)
{
    TranslationBlock *tb;
    int ret;

    if (cpu_single_env)
        env = cpu_single_env; /* XXX: find a correct solution for multithread */
#if defined(DEBUG_SIGNAL)
    printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
           pc, address, is_write, *(unsigned long *)old_set);
#endif
    /* XXX: locking issue */
    if (is_write && page_unprotect(h2g(address), pc, puc)) {
        return 1;
    }

    /* see if it is an MMU fault */
1092
    ret = cpu_cris_handle_mmu_fault(env, address, is_write, MMU_USER_IDX, 0);
1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112
    if (ret < 0)
        return 0; /* not an MMU fault */
    if (ret == 0)
        return 1; /* the MMU fault was handled without causing real CPU fault */

    /* now we have a real cpu fault */
    tb = tb_find_pc(pc);
    if (tb) {
        /* the PC is inside the translated code. It means that we have
           a virtual CPU fault */
        cpu_restore_state(tb, env, pc, puc);
    }
    /* we restore the process signal mask as the sigreturn should
       do it (XXX: use sigsetjmp) */
    sigprocmask(SIG_SETMASK, old_set, NULL);
    cpu_loop_exit();
    /* never comes here */
    return 1;
}

B
bellard 已提交
1113 1114 1115
#else
#error unsupported target CPU
#endif
B
bellard 已提交
1116

B
bellard 已提交
1117 1118
#if defined(__i386__)

1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130
#if defined(__APPLE__)
# include <sys/ucontext.h>

# define EIP_sig(context)  (*((unsigned long*)&(context)->uc_mcontext->ss.eip))
# define TRAP_sig(context)    ((context)->uc_mcontext->es.trapno)
# define ERROR_sig(context)   ((context)->uc_mcontext->es.err)
#else
# define EIP_sig(context)     ((context)->uc_mcontext.gregs[REG_EIP])
# define TRAP_sig(context)    ((context)->uc_mcontext.gregs[REG_TRAPNO])
# define ERROR_sig(context)   ((context)->uc_mcontext.gregs[REG_ERR])
#endif

1131
int cpu_signal_handler(int host_signum, void *pinfo,
B
bellard 已提交
1132
                       void *puc)
B
bellard 已提交
1133
{
1134
    siginfo_t *info = pinfo;
B
bellard 已提交
1135 1136
    struct ucontext *uc = puc;
    unsigned long pc;
1137
    int trapno;
B
bellard 已提交
1138

1139 1140
#ifndef REG_EIP
/* for glibc 2.1 */
B
bellard 已提交
1141 1142 1143
#define REG_EIP    EIP
#define REG_ERR    ERR
#define REG_TRAPNO TRAPNO
1144
#endif
1145 1146
    pc = EIP_sig(uc);
    trapno = TRAP_sig(uc);
B
bellard 已提交
1147 1148 1149 1150
    return handle_cpu_signal(pc, (unsigned long)info->si_addr,
                             trapno == 0xe ?
                             (ERROR_sig(uc) >> 1) & 1 : 0,
                             &uc->uc_sigmask, puc);
B
bellard 已提交
1151 1152
}

1153 1154
#elif defined(__x86_64__)

1155
int cpu_signal_handler(int host_signum, void *pinfo,
1156 1157
                       void *puc)
{
1158
    siginfo_t *info = pinfo;
1159 1160 1161 1162
    struct ucontext *uc = puc;
    unsigned long pc;

    pc = uc->uc_mcontext.gregs[REG_RIP];
1163 1164
    return handle_cpu_signal(pc, (unsigned long)info->si_addr,
                             uc->uc_mcontext.gregs[REG_TRAPNO] == 0xe ?
1165 1166 1167 1168
                             (uc->uc_mcontext.gregs[REG_ERR] >> 1) & 1 : 0,
                             &uc->uc_sigmask, puc);
}

1169
#elif defined(__powerpc__)
B
bellard 已提交
1170

1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219
/***********************************************************************
 * signal context platform-specific definitions
 * From Wine
 */
#ifdef linux
/* All Registers access - only for local access */
# define REG_sig(reg_name, context)		((context)->uc_mcontext.regs->reg_name)
/* Gpr Registers access  */
# define GPR_sig(reg_num, context)		REG_sig(gpr[reg_num], context)
# define IAR_sig(context)			REG_sig(nip, context)	/* Program counter */
# define MSR_sig(context)			REG_sig(msr, context)   /* Machine State Register (Supervisor) */
# define CTR_sig(context)			REG_sig(ctr, context)   /* Count register */
# define XER_sig(context)			REG_sig(xer, context) /* User's integer exception register */
# define LR_sig(context)			REG_sig(link, context) /* Link register */
# define CR_sig(context)			REG_sig(ccr, context) /* Condition register */
/* Float Registers access  */
# define FLOAT_sig(reg_num, context)		(((double*)((char*)((context)->uc_mcontext.regs+48*4)))[reg_num])
# define FPSCR_sig(context)			(*(int*)((char*)((context)->uc_mcontext.regs+(48+32*2)*4)))
/* Exception Registers access */
# define DAR_sig(context)			REG_sig(dar, context)
# define DSISR_sig(context)			REG_sig(dsisr, context)
# define TRAP_sig(context)			REG_sig(trap, context)
#endif /* linux */

#ifdef __APPLE__
# include <sys/ucontext.h>
typedef struct ucontext SIGCONTEXT;
/* All Registers access - only for local access */
# define REG_sig(reg_name, context)		((context)->uc_mcontext->ss.reg_name)
# define FLOATREG_sig(reg_name, context)	((context)->uc_mcontext->fs.reg_name)
# define EXCEPREG_sig(reg_name, context)	((context)->uc_mcontext->es.reg_name)
# define VECREG_sig(reg_name, context)		((context)->uc_mcontext->vs.reg_name)
/* Gpr Registers access */
# define GPR_sig(reg_num, context)		REG_sig(r##reg_num, context)
# define IAR_sig(context)			REG_sig(srr0, context)	/* Program counter */
# define MSR_sig(context)			REG_sig(srr1, context)  /* Machine State Register (Supervisor) */
# define CTR_sig(context)			REG_sig(ctr, context)
# define XER_sig(context)			REG_sig(xer, context) /* Link register */
# define LR_sig(context)			REG_sig(lr, context)  /* User's integer exception register */
# define CR_sig(context)			REG_sig(cr, context)  /* Condition register */
/* Float Registers access */
# define FLOAT_sig(reg_num, context)		FLOATREG_sig(fpregs[reg_num], context)
# define FPSCR_sig(context)			((double)FLOATREG_sig(fpscr, context))
/* Exception Registers access */
# define DAR_sig(context)			EXCEPREG_sig(dar, context)     /* Fault registers for coredump */
# define DSISR_sig(context)			EXCEPREG_sig(dsisr, context)
# define TRAP_sig(context)			EXCEPREG_sig(exception, context) /* number of powerpc exception taken */
#endif /* __APPLE__ */

1220
int cpu_signal_handler(int host_signum, void *pinfo,
B
bellard 已提交
1221
                       void *puc)
B
bellard 已提交
1222
{
1223
    siginfo_t *info = pinfo;
1224 1225 1226 1227
    struct ucontext *uc = puc;
    unsigned long pc;
    int is_write;

1228
    pc = IAR_sig(uc);
1229 1230 1231
    is_write = 0;
#if 0
    /* ppc 4xx case */
1232
    if (DSISR_sig(uc) & 0x00800000)
1233 1234
        is_write = 1;
#else
1235
    if (TRAP_sig(uc) != 0x400 && (DSISR_sig(uc) & 0x02000000))
1236 1237
        is_write = 1;
#endif
1238
    return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1239
                             is_write, &uc->uc_sigmask, puc);
B
bellard 已提交
1240 1241
}

B
bellard 已提交
1242 1243
#elif defined(__alpha__)

1244
int cpu_signal_handler(int host_signum, void *pinfo,
B
bellard 已提交
1245 1246
                           void *puc)
{
1247
    siginfo_t *info = pinfo;
B
bellard 已提交
1248 1249 1250 1251 1252
    struct ucontext *uc = puc;
    uint32_t *pc = uc->uc_mcontext.sc_pc;
    uint32_t insn = *pc;
    int is_write = 0;

1253
    /* XXX: need kernel patch to get write flag faster */
B
bellard 已提交
1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268
    switch (insn >> 26) {
    case 0x0d: // stw
    case 0x0e: // stb
    case 0x0f: // stq_u
    case 0x24: // stf
    case 0x25: // stg
    case 0x26: // sts
    case 0x27: // stt
    case 0x2c: // stl
    case 0x2d: // stq
    case 0x2e: // stl_c
    case 0x2f: // stq_c
	is_write = 1;
    }

1269
    return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1270
                             is_write, &uc->uc_sigmask, puc);
B
bellard 已提交
1271
}
1272 1273
#elif defined(__sparc__)

1274
int cpu_signal_handler(int host_signum, void *pinfo,
B
bellard 已提交
1275
                       void *puc)
1276
{
1277
    siginfo_t *info = pinfo;
1278 1279
    int is_write;
    uint32_t insn;
1280
#if !defined(__arch64__) || defined(HOST_SOLARIS)
B
blueswir1 已提交
1281 1282
    uint32_t *regs = (uint32_t *)(info + 1);
    void *sigmask = (regs + 20);
1283
    /* XXX: is there a standard glibc define ? */
B
blueswir1 已提交
1284 1285 1286 1287 1288 1289 1290
    unsigned long pc = regs[1];
#else
    struct sigcontext *sc = puc;
    unsigned long pc = sc->sigc_regs.tpc;
    void *sigmask = (void *)sc->sigc_mask;
#endif

1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306
    /* XXX: need kernel patch to get write flag faster */
    is_write = 0;
    insn = *(uint32_t *)pc;
    if ((insn >> 30) == 3) {
      switch((insn >> 19) & 0x3f) {
      case 0x05: // stb
      case 0x06: // sth
      case 0x04: // st
      case 0x07: // std
      case 0x24: // stf
      case 0x27: // stdf
      case 0x25: // stfsr
	is_write = 1;
	break;
      }
    }
1307
    return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1308
                             is_write, sigmask, NULL);
1309 1310 1311 1312
}

#elif defined(__arm__)

1313
int cpu_signal_handler(int host_signum, void *pinfo,
B
bellard 已提交
1314
                       void *puc)
1315
{
1316
    siginfo_t *info = pinfo;
1317 1318 1319
    struct ucontext *uc = puc;
    unsigned long pc;
    int is_write;
1320

1321 1322 1323
#if (__GLIBC__ < 2 || (__GLIBC__ == 2 && __GLIBC_MINOR__ =< 3))
    pc = uc->uc_mcontext.gregs[R15];
#else
1324
    pc = uc->uc_mcontext.arm_pc;
1325
#endif
1326 1327
    /* XXX: compute is_write */
    is_write = 0;
1328
    return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1329
                             is_write,
P
pbrook 已提交
1330
                             &uc->uc_sigmask, puc);
1331 1332
}

B
bellard 已提交
1333 1334
#elif defined(__mc68000)

1335
int cpu_signal_handler(int host_signum, void *pinfo,
B
bellard 已提交
1336 1337
                       void *puc)
{
1338
    siginfo_t *info = pinfo;
B
bellard 已提交
1339 1340 1341
    struct ucontext *uc = puc;
    unsigned long pc;
    int is_write;
1342

B
bellard 已提交
1343 1344 1345
    pc = uc->uc_mcontext.gregs[16];
    /* XXX: compute is_write */
    is_write = 0;
1346
    return handle_cpu_signal(pc, (unsigned long)info->si_addr,
B
bellard 已提交
1347
                             is_write,
1348
                             &uc->uc_sigmask, puc);
B
bellard 已提交
1349 1350
}

B
bellard 已提交
1351 1352 1353 1354 1355 1356 1357
#elif defined(__ia64)

#ifndef __ISR_VALID
  /* This ought to be in <bits/siginfo.h>... */
# define __ISR_VALID	1
#endif

1358
int cpu_signal_handler(int host_signum, void *pinfo, void *puc)
B
bellard 已提交
1359
{
1360
    siginfo_t *info = pinfo;
B
bellard 已提交
1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371
    struct ucontext *uc = puc;
    unsigned long ip;
    int is_write = 0;

    ip = uc->uc_mcontext.sc_ip;
    switch (host_signum) {
      case SIGILL:
      case SIGFPE:
      case SIGSEGV:
      case SIGBUS:
      case SIGTRAP:
B
bellard 已提交
1372
	  if (info->si_code && (info->si_segvflags & __ISR_VALID))
B
bellard 已提交
1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384
	      /* ISR.W (write-access) is bit 33:  */
	      is_write = (info->si_isr >> 33) & 1;
	  break;

      default:
	  break;
    }
    return handle_cpu_signal(ip, (unsigned long)info->si_addr,
                             is_write,
                             &uc->uc_sigmask, puc);
}

B
bellard 已提交
1385 1386
#elif defined(__s390__)

1387
int cpu_signal_handler(int host_signum, void *pinfo,
B
bellard 已提交
1388 1389
                       void *puc)
{
1390
    siginfo_t *info = pinfo;
B
bellard 已提交
1391 1392 1393
    struct ucontext *uc = puc;
    unsigned long pc;
    int is_write;
1394

B
bellard 已提交
1395 1396 1397
    pc = uc->uc_mcontext.psw.addr;
    /* XXX: compute is_write */
    is_write = 0;
1398
    return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1399 1400 1401 1402 1403
                             is_write, &uc->uc_sigmask, puc);
}

#elif defined(__mips__)

1404
int cpu_signal_handler(int host_signum, void *pinfo,
1405 1406
                       void *puc)
{
T
ths 已提交
1407
    siginfo_t *info = pinfo;
1408 1409 1410
    struct ucontext *uc = puc;
    greg_t pc = uc->uc_mcontext.pc;
    int is_write;
1411

1412 1413
    /* XXX: compute is_write */
    is_write = 0;
1414
    return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1415
                             is_write, &uc->uc_sigmask, puc);
B
bellard 已提交
1416 1417
}

A
aurel32 已提交
1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435
#elif defined(__hppa__)

int cpu_signal_handler(int host_signum, void *pinfo,
                       void *puc)
{
    struct siginfo *info = pinfo;
    struct ucontext *uc = puc;
    unsigned long pc;
    int is_write;

    pc = uc->uc_mcontext.sc_iaoq[0];
    /* FIXME: compute is_write */
    is_write = 0;
    return handle_cpu_signal(pc, (unsigned long)info->si_addr, 
                             is_write,
                             &uc->uc_sigmask, puc);
}

B
bellard 已提交
1436
#else
B
bellard 已提交
1437

1438
#error host CPU specific signal handler needed
B
bellard 已提交
1439

B
bellard 已提交
1440
#endif
B
bellard 已提交
1441 1442

#endif /* !defined(CONFIG_SOFTMMU) */