2 * i386 virtual CPU header
4 * Copyright (c) 2003 Fabrice Bellard
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
26 #define TARGET_LONG_BITS 64
28 #define TARGET_LONG_BITS 32
31 /* target supports implicit self modifying code */
32 #define TARGET_HAS_SMC
33 /* support for self modifying code even if the modified instruction is
34 close to the modifying instruction */
35 #define TARGET_HAS_PRECISE_SMC
39 #if defined(__i386__) && !defined(CONFIG_SOFTMMU)
68 /* segment descriptor fields */
69 #define DESC_G_MASK (1 << 23)
70 #define DESC_B_SHIFT 22
71 #define DESC_B_MASK (1 << DESC_B_SHIFT)
72 #define DESC_L_SHIFT 21 /* x86_64 only : 64 bit code segment */
73 #define DESC_L_MASK (1 << DESC_L_SHIFT)
74 #define DESC_AVL_MASK (1 << 20)
75 #define DESC_P_MASK (1 << 15)
76 #define DESC_DPL_SHIFT 13
77 #define DESC_S_MASK (1 << 12)
78 #define DESC_TYPE_SHIFT 8
79 #define DESC_A_MASK (1 << 8)
81 #define DESC_CS_MASK (1 << 11) /* 1=code segment 0=data segment */
82 #define DESC_C_MASK (1 << 10) /* code: conforming */
83 #define DESC_R_MASK (1 << 9) /* code: readable */
85 #define DESC_E_MASK (1 << 10) /* data: expansion direction */
86 #define DESC_W_MASK (1 << 9) /* data: writable */
88 #define DESC_TSS_BUSY_MASK (1 << 9)
102 #define TF_MASK 0x00000100
103 #define IF_MASK 0x00000200
104 #define DF_MASK 0x00000400
105 #define IOPL_MASK 0x00003000
106 #define NT_MASK 0x00004000
107 #define RF_MASK 0x00010000
108 #define VM_MASK 0x00020000
109 #define AC_MASK 0x00040000
110 #define VIF_MASK 0x00080000
111 #define VIP_MASK 0x00100000
112 #define ID_MASK 0x00200000
114 /* hidden flags - used internally by qemu to represent additionnal cpu
115 states. Only the CPL and INHIBIT_IRQ are not redundant. We avoid
116 using the IOPL_MASK, TF_MASK and VM_MASK bit position to ease oring
119 #define HF_CPL_SHIFT 0
120 /* true if soft mmu is being used */
121 #define HF_SOFTMMU_SHIFT 2
122 /* true if hardware interrupts must be disabled for next instruction */
123 #define HF_INHIBIT_IRQ_SHIFT 3
124 /* 16 or 32 segments */
125 #define HF_CS32_SHIFT 4
126 #define HF_SS32_SHIFT 5
127 /* zero base for DS, ES and SS : can be '0' only in 32 bit CS segment */
128 #define HF_ADDSEG_SHIFT 6
129 /* copy of CR0.PE (protected mode) */
130 #define HF_PE_SHIFT 7
131 #define HF_TF_SHIFT 8 /* must be same as eflags */
132 #define HF_MP_SHIFT 9 /* the order must be MP, EM, TS */
133 #define HF_EM_SHIFT 10
134 #define HF_TS_SHIFT 11
135 #define HF_IOPL_SHIFT 12 /* must be same as eflags */
136 #define HF_LMA_SHIFT 14 /* only used on x86_64: long mode active */
137 #define HF_CS64_SHIFT 15 /* only used on x86_64: 64 bit code segment */
138 #define HF_VM_SHIFT 17 /* must be same as eflags */
140 #define HF_CPL_MASK (3 << HF_CPL_SHIFT)
141 #define HF_SOFTMMU_MASK (1 << HF_SOFTMMU_SHIFT)
142 #define HF_INHIBIT_IRQ_MASK (1 << HF_INHIBIT_IRQ_SHIFT)
143 #define HF_CS32_MASK (1 << HF_CS32_SHIFT)
144 #define HF_SS32_MASK (1 << HF_SS32_SHIFT)
145 #define HF_ADDSEG_MASK (1 << HF_ADDSEG_SHIFT)
146 #define HF_PE_MASK (1 << HF_PE_SHIFT)
147 #define HF_TF_MASK (1 << HF_TF_SHIFT)
148 #define HF_MP_MASK (1 << HF_MP_SHIFT)
149 #define HF_EM_MASK (1 << HF_EM_SHIFT)
150 #define HF_TS_MASK (1 << HF_TS_SHIFT)
151 #define HF_LMA_MASK (1 << HF_LMA_SHIFT)
152 #define HF_CS64_MASK (1 << HF_CS64_SHIFT)
154 #define CR0_PE_MASK (1 << 0)
155 #define CR0_MP_MASK (1 << 1)
156 #define CR0_EM_MASK (1 << 2)
157 #define CR0_TS_MASK (1 << 3)
158 #define CR0_ET_MASK (1 << 4)
159 #define CR0_NE_MASK (1 << 5)
160 #define CR0_WP_MASK (1 << 16)
161 #define CR0_AM_MASK (1 << 18)
162 #define CR0_PG_MASK (1 << 31)
164 #define CR4_VME_MASK (1 << 0)
165 #define CR4_PVI_MASK (1 << 1)
166 #define CR4_TSD_MASK (1 << 2)
167 #define CR4_DE_MASK (1 << 3)
168 #define CR4_PSE_MASK (1 << 4)
169 #define CR4_PAE_MASK (1 << 5)
170 #define CR4_PGE_MASK (1 << 7)
171 #define CR4_PCE_MASK (1 << 8)
172 #define CR4_OSFXSR_MASK (1 << 9)
173 #define CR4_OSXMMEXCPT_MASK (1 << 10)
175 #define PG_PRESENT_BIT 0
177 #define PG_USER_BIT 2
180 #define PG_ACCESSED_BIT 5
181 #define PG_DIRTY_BIT 6
183 #define PG_GLOBAL_BIT 8
185 #define PG_PRESENT_MASK (1 << PG_PRESENT_BIT)
186 #define PG_RW_MASK (1 << PG_RW_BIT)
187 #define PG_USER_MASK (1 << PG_USER_BIT)
188 #define PG_PWT_MASK (1 << PG_PWT_BIT)
189 #define PG_PCD_MASK (1 << PG_PCD_BIT)
190 #define PG_ACCESSED_MASK (1 << PG_ACCESSED_BIT)
191 #define PG_DIRTY_MASK (1 << PG_DIRTY_BIT)
192 #define PG_PSE_MASK (1 << PG_PSE_BIT)
193 #define PG_GLOBAL_MASK (1 << PG_GLOBAL_BIT)
195 #define PG_ERROR_W_BIT 1
197 #define PG_ERROR_P_MASK 0x01
198 #define PG_ERROR_W_MASK (1 << PG_ERROR_W_BIT)
199 #define PG_ERROR_U_MASK 0x04
200 #define PG_ERROR_RSVD_MASK 0x08
202 #define MSR_IA32_APICBASE 0x1b
203 #define MSR_IA32_APICBASE_BSP (1<<8)
204 #define MSR_IA32_APICBASE_ENABLE (1<<11)
205 #define MSR_IA32_APICBASE_BASE (0xfffff<<12)
207 #define MSR_IA32_SYSENTER_CS 0x174
208 #define MSR_IA32_SYSENTER_ESP 0x175
209 #define MSR_IA32_SYSENTER_EIP 0x176
211 #define MSR_EFER 0xc0000080
213 #define MSR_EFER_SCE (1 << 0)
214 #define MSR_EFER_LME (1 << 8)
215 #define MSR_EFER_LMA (1 << 10)
216 #define MSR_EFER_NXE (1 << 11)
217 #define MSR_EFER_FFXSR (1 << 14)
219 #define MSR_STAR 0xc0000081
220 #define MSR_LSTAR 0xc0000082
221 #define MSR_CSTAR 0xc0000083
222 #define MSR_FMASK 0xc0000084
223 #define MSR_FSBASE 0xc0000100
224 #define MSR_GSBASE 0xc0000101
225 #define MSR_KERNELGSBASE 0xc0000102
227 /* cpuid_features bits */
228 #define CPUID_FP87 (1 << 0)
229 #define CPUID_VME (1 << 1)
230 #define CPUID_DE (1 << 2)
231 #define CPUID_PSE (1 << 3)
232 #define CPUID_TSC (1 << 4)
233 #define CPUID_MSR (1 << 5)
234 #define CPUID_PAE (1 << 6)
235 #define CPUID_MCE (1 << 7)
236 #define CPUID_CX8 (1 << 8)
237 #define CPUID_APIC (1 << 9)
238 #define CPUID_SEP (1 << 11) /* sysenter/sysexit */
239 #define CPUID_MTRR (1 << 12)
240 #define CPUID_PGE (1 << 13)
241 #define CPUID_MCA (1 << 14)
242 #define CPUID_CMOV (1 << 15)
244 #define CPUID_MMX (1 << 23)
245 #define CPUID_FXSR (1 << 24)
246 #define CPUID_SSE (1 << 25)
247 #define CPUID_SSE2 (1 << 26)
249 #define EXCP00_DIVZ 0
250 #define EXCP01_SSTP 1
252 #define EXCP03_INT3 3
253 #define EXCP04_INTO 4
254 #define EXCP05_BOUND 5
255 #define EXCP06_ILLOP 6
256 #define EXCP07_PREX 7
257 #define EXCP08_DBLE 8
258 #define EXCP09_XERR 9
259 #define EXCP0A_TSS 10
260 #define EXCP0B_NOSEG 11
261 #define EXCP0C_STACK 12
262 #define EXCP0D_GPF 13
263 #define EXCP0E_PAGE 14
264 #define EXCP10_COPR 16
265 #define EXCP11_ALGN 17
266 #define EXCP12_MCHK 18
269 CC_OP_DYNAMIC, /* must use dynamic code to get cc_op */
270 CC_OP_EFLAGS, /* all cc are explicitely computed, CC_SRC = flags */
272 CC_OP_MULB, /* modify all flags, C, O = (CC_SRC != 0) */
277 CC_OP_ADDB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
282 CC_OP_ADCB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
287 CC_OP_SUBB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
292 CC_OP_SBBB, /* modify all flags, CC_DST = res, CC_SRC = src1 */
297 CC_OP_LOGICB, /* modify all flags, CC_DST = res */
302 CC_OP_INCB, /* modify all flags except, CC_DST = res, CC_SRC = C */
307 CC_OP_DECB, /* modify all flags except, CC_DST = res, CC_SRC = C */
312 CC_OP_SHLB, /* modify all flags, CC_DST = res, CC_SRC.msb = C */
317 CC_OP_SARB, /* modify all flags, CC_DST = res, CC_SRC.lsb = C */
325 #if (defined(__i386__) || defined(__x86_64__)) && !defined(_BSD)
326 #define USE_X86LDOUBLE
329 #ifdef USE_X86LDOUBLE
330 typedef long double CPU86_LDouble;
332 typedef double CPU86_LDouble;
335 typedef struct SegmentCache {
352 #define CPU_NB_REGS 16
354 #define CPU_NB_REGS 8
357 typedef struct CPUX86State {
358 #if TARGET_LONG_BITS > HOST_LONG_BITS
359 /* temporaries if we cannot store them in host registers */
360 target_ulong t0, t1, t2;
363 /* standard registers */
364 target_ulong regs[CPU_NB_REGS];
366 target_ulong eflags; /* eflags register. During CPU emulation, CC
367 flags and DF are set to zero because they are
370 /* emulator internal eflags handling */
374 int32_t df; /* D flag : 1 if D = 0, -1 if D = 1 */
375 uint32_t hflags; /* hidden flags, see HF_xxx constants */
378 unsigned int fpstt; /* top of stack index */
381 uint8_t fptags[8]; /* 0 = valid, 1 = empty */
382 CPU86_LDouble fpregs[8];
384 /* emulator internal variables */
394 SegmentCache segs[6]; /* selector values */
397 SegmentCache gdt; /* only base and limit are used */
398 SegmentCache idt; /* only base and limit are used */
400 XMMReg xmm_regs[CPU_NB_REGS];
403 /* sysenter registers */
404 uint32_t sysenter_cs;
405 uint32_t sysenter_esp;
406 uint32_t sysenter_eip;
413 target_ulong kernelgsbase;
416 /* temporary data for USE_CODE_COPY mode */
420 int native_fp_regs; /* if true, the FPU state is in the native CPU regs */
423 /* exception/interrupt handling */
427 int exception_is_int;
428 int exception_next_eip;
429 struct TranslationBlock *current_tb; /* currently executing TB */
430 target_ulong cr[5]; /* NOTE: cr1 is unused */
431 target_ulong dr[8]; /* debug registers */
432 int interrupt_request;
433 int user_mode_only; /* user mode only simulation */
437 /* soft mmu support */
438 /* in order to avoid passing too many arguments to the memory
439 write helpers, we store some rarely used information in the CPU
441 unsigned long mem_write_pc; /* host pc at which the memory was
443 target_ulong mem_write_vaddr; /* target virtual addr at which the
444 memory was written */
445 /* 0 = kernel, 1 = user */
446 CPUTLBEntry tlb_read[2][CPU_TLB_SIZE];
447 CPUTLBEntry tlb_write[2][CPU_TLB_SIZE];
449 /* from this point: preserved by CPU reset */
450 /* ice debug support */
451 target_ulong breakpoints[MAX_BREAKPOINTS];
453 int singlestep_enabled;
455 /* processor features (e.g. for CPUID insn) */
456 uint32_t cpuid_vendor1;
457 uint32_t cpuid_vendor2;
458 uint32_t cpuid_vendor3;
459 uint32_t cpuid_version;
460 uint32_t cpuid_features;
462 /* in order to simplify APIC support, we leave this pointer to the
464 struct APICState *apic_state;
470 void cpu_x86_outb(CPUX86State *env, int addr, int val);
471 void cpu_x86_outw(CPUX86State *env, int addr, int val);
472 void cpu_x86_outl(CPUX86State *env, int addr, int val);
473 int cpu_x86_inb(CPUX86State *env, int addr);
474 int cpu_x86_inw(CPUX86State *env, int addr);
475 int cpu_x86_inl(CPUX86State *env, int addr);
478 CPUX86State *cpu_x86_init(void);
479 int cpu_x86_exec(CPUX86State *s);
480 void cpu_x86_close(CPUX86State *s);
481 int cpu_get_pic_interrupt(CPUX86State *s);
482 /* MSDOS compatibility mode FPU exception support */
483 void cpu_set_ferr(CPUX86State *s);
485 /* this function must always be used to load data in the segment
486 cache: it synchronizes the hflags with the segment cache values */
487 static inline void cpu_x86_load_seg_cache(CPUX86State *env,
488 int seg_reg, unsigned int selector,
489 uint32_t base, unsigned int limit,
493 unsigned int new_hflags;
495 sc = &env->segs[seg_reg];
496 sc->selector = selector;
501 /* update the hidden flags */
503 if (seg_reg == R_CS) {
505 if ((env->hflags & HF_LMA_MASK) && (flags & DESC_L_MASK)) {
507 env->hflags |= HF_CS32_MASK | HF_SS32_MASK | HF_CS64_MASK;
508 env->hflags &= ~(HF_ADDSEG_MASK);
512 /* legacy / compatibility case */
513 new_hflags = (env->segs[R_CS].flags & DESC_B_MASK)
514 >> (DESC_B_SHIFT - HF_CS32_SHIFT);
515 env->hflags = (env->hflags & ~(HF_CS32_MASK | HF_CS64_MASK)) |
519 new_hflags = (env->segs[R_SS].flags & DESC_B_MASK)
520 >> (DESC_B_SHIFT - HF_SS32_SHIFT);
521 if (env->hflags & HF_CS64_MASK) {
522 /* zero base assumed for DS, ES and SS in long mode */
523 } else if (!(env->cr[0] & CR0_PE_MASK) ||
524 (env->eflags & VM_MASK) ||
525 !(new_hflags & HF_CS32_MASK)) {
526 /* XXX: try to avoid this test. The problem comes from the
527 fact that is real mode or vm86 mode we only modify the
528 'base' and 'selector' fields of the segment cache to go
529 faster. A solution may be to force addseg to one in
531 new_hflags |= HF_ADDSEG_MASK;
533 new_hflags |= (((unsigned long)env->segs[R_DS].base |
534 (unsigned long)env->segs[R_ES].base |
535 (unsigned long)env->segs[R_SS].base) != 0) <<
538 env->hflags = (env->hflags &
539 ~(HF_SS32_MASK | HF_ADDSEG_MASK)) | new_hflags;
543 /* wrapper, just in case memory mappings must be changed */
544 static inline void cpu_x86_set_cpl(CPUX86State *s, int cpl)
547 s->hflags = (s->hflags & ~HF_CPL_MASK) | cpl;
549 #error HF_CPL_MASK is hardcoded
553 /* used for debug or cpu save/restore */
554 void cpu_get_fp80(uint64_t *pmant, uint16_t *pexp, CPU86_LDouble f);
555 CPU86_LDouble cpu_set_fp80(uint64_t mant, uint16_t upper);
557 /* the following helpers are only usable in user mode simulation as
558 they can trigger unexpected exceptions */
559 void cpu_x86_load_seg(CPUX86State *s, int seg_reg, int selector);
560 void cpu_x86_fsave(CPUX86State *s, uint8_t *ptr, int data32);
561 void cpu_x86_frstor(CPUX86State *s, uint8_t *ptr, int data32);
563 /* you can call this signal handler from your SIGBUS and SIGSEGV
564 signal handlers to inform the virtual CPU of exceptions. non zero
565 is returned if the signal was handled by the virtual CPU. */
567 int cpu_x86_signal_handler(int host_signum, struct siginfo *info,
569 void cpu_x86_set_a20(CPUX86State *env, int a20_state);
571 uint64_t cpu_get_tsc(CPUX86State *env);
573 void cpu_set_apic_base(CPUX86State *env, uint64_t val);
574 uint64_t cpu_get_apic_base(CPUX86State *env);
576 /* will be suppressed */
577 void cpu_x86_update_cr0(CPUX86State *env, uint32_t new_cr0);
580 #define X86_DUMP_FPU 0x0001 /* dump FPU state too */
581 #define X86_DUMP_CCOP 0x0002 /* dump qemu flag cache */
583 #define TARGET_PAGE_BITS 12
586 #endif /* CPU_I386_H */