6 //#define DEBUG_UNALIGNED
7 //#define DEBUG_UNASSIGNED
10 #define DPRINTF_MMU(fmt, args...) \
11 do { printf("MMU: " fmt , ##args); } while (0)
13 #define DPRINTF_MMU(fmt, args...)
17 #define DPRINTF_MXCC(fmt, args...) \
18 do { printf("MXCC: " fmt , ##args); } while (0)
20 #define DPRINTF_MXCC(fmt, args...)
23 void raise_exception(int tt)
25 env->exception_index = tt;
29 void check_ieee_exceptions()
31 T0 = get_float_exception_flags(&env->fp_status);
34 /* Copy IEEE 754 flags into FSR */
35 if (T0 & float_flag_invalid)
37 if (T0 & float_flag_overflow)
39 if (T0 & float_flag_underflow)
41 if (T0 & float_flag_divbyzero)
43 if (T0 & float_flag_inexact)
46 if ((env->fsr & FSR_CEXC_MASK) & ((env->fsr & FSR_TEM_MASK) >> 23))
48 /* Unmasked exception, generate a trap */
49 env->fsr |= FSR_FTT_IEEE_EXCP;
50 raise_exception(TT_FP_EXCP);
54 /* Accumulate exceptions */
55 env->fsr |= (env->fsr & FSR_CEXC_MASK) << 5;
60 #ifdef USE_INT_TO_FLOAT_HELPERS
63 set_float_exception_flags(0, &env->fp_status);
64 FT0 = int32_to_float32(*((int32_t *)&FT1), &env->fp_status);
65 check_ieee_exceptions();
70 DT0 = int32_to_float64(*((int32_t *)&FT1), &env->fp_status);
76 FT0 = float32_abs(FT1);
82 DT0 = float64_abs(DT1);
88 set_float_exception_flags(0, &env->fp_status);
89 FT0 = float32_sqrt(FT1, &env->fp_status);
90 check_ieee_exceptions();
95 set_float_exception_flags(0, &env->fp_status);
96 DT0 = float64_sqrt(DT1, &env->fp_status);
97 check_ieee_exceptions();
100 #define GEN_FCMP(name, size, reg1, reg2, FS, TRAP) \
101 void glue(do_, name) (void) \
103 env->fsr &= ~((FSR_FCC1 | FSR_FCC0) << FS); \
104 switch (glue(size, _compare) (reg1, reg2, &env->fp_status)) { \
105 case float_relation_unordered: \
106 T0 = (FSR_FCC1 | FSR_FCC0) << FS; \
107 if ((env->fsr & FSR_NVM) || TRAP) { \
109 env->fsr |= FSR_NVC; \
110 env->fsr |= FSR_FTT_IEEE_EXCP; \
111 raise_exception(TT_FP_EXCP); \
113 env->fsr |= FSR_NVA; \
116 case float_relation_less: \
117 T0 = FSR_FCC0 << FS; \
119 case float_relation_greater: \
120 T0 = FSR_FCC1 << FS; \
129 GEN_FCMP(fcmps, float32, FT0, FT1, 0, 0);
130 GEN_FCMP(fcmpd, float64, DT0, DT1, 0, 0);
132 GEN_FCMP(fcmpes, float32, FT0, FT1, 0, 1);
133 GEN_FCMP(fcmped, float64, DT0, DT1, 0, 1);
135 #ifdef TARGET_SPARC64
136 GEN_FCMP(fcmps_fcc1, float32, FT0, FT1, 22, 0);
137 GEN_FCMP(fcmpd_fcc1, float64, DT0, DT1, 22, 0);
139 GEN_FCMP(fcmps_fcc2, float32, FT0, FT1, 24, 0);
140 GEN_FCMP(fcmpd_fcc2, float64, DT0, DT1, 24, 0);
142 GEN_FCMP(fcmps_fcc3, float32, FT0, FT1, 26, 0);
143 GEN_FCMP(fcmpd_fcc3, float64, DT0, DT1, 26, 0);
145 GEN_FCMP(fcmpes_fcc1, float32, FT0, FT1, 22, 1);
146 GEN_FCMP(fcmped_fcc1, float64, DT0, DT1, 22, 1);
148 GEN_FCMP(fcmpes_fcc2, float32, FT0, FT1, 24, 1);
149 GEN_FCMP(fcmped_fcc2, float64, DT0, DT1, 24, 1);
151 GEN_FCMP(fcmpes_fcc3, float32, FT0, FT1, 26, 1);
152 GEN_FCMP(fcmped_fcc3, float64, DT0, DT1, 26, 1);
155 #ifndef TARGET_SPARC64
156 #ifndef CONFIG_USER_ONLY
159 static void dump_mxcc(CPUState *env)
161 printf("mxccdata: %016llx %016llx %016llx %016llx\n",
162 env->mxccdata[0], env->mxccdata[1], env->mxccdata[2], env->mxccdata[3]);
163 printf("mxccregs: %016llx %016llx %016llx %016llx\n"
164 " %016llx %016llx %016llx %016llx\n",
165 env->mxccregs[0], env->mxccregs[1], env->mxccregs[2], env->mxccregs[3],
166 env->mxccregs[4], env->mxccregs[5], env->mxccregs[6], env->mxccregs[7]);
170 void helper_ld_asi(int asi, int size, int sign)
174 uint32_t last_T0 = T0;
178 case 2: /* SuperSparc MXCC registers */
180 case 0x01c00a00: /* MXCC control register */
182 ret = env->mxccregs[3];
183 T0 = env->mxccregs[3] >> 32;
185 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
187 case 0x01c00a04: /* MXCC control register */
189 ret = env->mxccregs[3];
191 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
193 case 0x01c00f00: /* MBus port address register */
195 ret = env->mxccregs[7];
196 T0 = env->mxccregs[7] >> 32;
198 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
201 DPRINTF_MXCC("%08x: unimplemented address, size: %d\n", T0, size);
204 DPRINTF_MXCC("asi = %d, size = %d, sign = %d, T0 = %08x -> ret = %08x,"
205 "T0 = %08x\n", asi, size, sign, last_T0, ret, T0);
210 case 3: /* MMU probe */
214 mmulev = (T0 >> 8) & 15;
218 ret = mmu_probe(env, T0, mmulev);
221 DPRINTF_MMU("mmu_probe: 0x%08x (lev %d) -> 0x%08x\n", T0, mmulev, ret);
224 case 4: /* read MMU regs */
226 int reg = (T0 >> 8) & 0xf;
228 ret = env->mmuregs[reg];
229 if (reg == 3) /* Fault status cleared on read */
230 env->mmuregs[reg] = 0;
231 DPRINTF_MMU("mmu_read: reg[%d] = 0x%08x\n", reg, ret);
234 case 9: /* Supervisor code access */
240 ret = lduw_code(T0 & ~1);
244 ret = ldl_code(T0 & ~3);
247 ret = ldl_code(T0 & ~3);
248 T0 = ldl_code((T0 + 4) & ~3);
252 case 0xa: /* User data access */
258 ret = lduw_user(T0 & ~1);
262 ret = ldl_user(T0 & ~3);
265 ret = ldl_user(T0 & ~3);
266 T0 = ldl_user((T0 + 4) & ~3);
270 case 0xb: /* Supervisor data access */
273 ret = ldub_kernel(T0);
276 ret = lduw_kernel(T0 & ~1);
280 ret = ldl_kernel(T0 & ~3);
283 ret = ldl_kernel(T0 & ~3);
284 T0 = ldl_kernel((T0 + 4) & ~3);
288 case 0xc: /* I-cache tag */
289 case 0xd: /* I-cache data */
290 case 0xe: /* D-cache tag */
291 case 0xf: /* D-cache data */
293 case 0x20: /* MMU passthrough */
299 ret = lduw_phys(T0 & ~1);
303 ret = ldl_phys(T0 & ~3);
306 ret = ldl_phys(T0 & ~3);
307 T0 = ldl_phys((T0 + 4) & ~3);
311 case 0x2e: /* MMU passthrough, 0xexxxxxxxx */
312 case 0x2f: /* MMU passthrough, 0xfxxxxxxxx */
315 ret = ldub_phys((target_phys_addr_t)T0
316 | ((target_phys_addr_t)(asi & 0xf) << 32));
319 ret = lduw_phys((target_phys_addr_t)(T0 & ~1)
320 | ((target_phys_addr_t)(asi & 0xf) << 32));
324 ret = ldl_phys((target_phys_addr_t)(T0 & ~3)
325 | ((target_phys_addr_t)(asi & 0xf) << 32));
328 ret = ldl_phys((target_phys_addr_t)(T0 & ~3)
329 | ((target_phys_addr_t)(asi & 0xf) << 32));
330 T0 = ldl_phys((target_phys_addr_t)((T0 + 4) & ~3)
331 | ((target_phys_addr_t)(asi & 0xf) << 32));
335 case 0x21 ... 0x2d: /* MMU passthrough, unassigned */
337 do_unassigned_access(T0, 0, 0, 1);
358 void helper_st_asi(int asi, int size)
361 case 2: /* SuperSparc MXCC registers */
363 case 0x01c00000: /* MXCC stream data register 0 */
365 env->mxccdata[0] = ((uint64_t)T1 << 32) | T2;
367 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
369 case 0x01c00008: /* MXCC stream data register 1 */
371 env->mxccdata[1] = ((uint64_t)T1 << 32) | T2;
373 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
375 case 0x01c00010: /* MXCC stream data register 2 */
377 env->mxccdata[2] = ((uint64_t)T1 << 32) | T2;
379 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
381 case 0x01c00018: /* MXCC stream data register 3 */
383 env->mxccdata[3] = ((uint64_t)T1 << 32) | T2;
385 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
387 case 0x01c00100: /* MXCC stream source */
389 env->mxccregs[0] = ((uint64_t)T1 << 32) | T2;
391 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
392 env->mxccdata[0] = ldq_phys((env->mxccregs[0] & 0xffffffffULL) + 0);
393 env->mxccdata[1] = ldq_phys((env->mxccregs[0] & 0xffffffffULL) + 8);
394 env->mxccdata[2] = ldq_phys((env->mxccregs[0] & 0xffffffffULL) + 16);
395 env->mxccdata[3] = ldq_phys((env->mxccregs[0] & 0xffffffffULL) + 24);
397 case 0x01c00200: /* MXCC stream destination */
399 env->mxccregs[1] = ((uint64_t)T1 << 32) | T2;
401 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
402 stq_phys((env->mxccregs[1] & 0xffffffffULL) + 0, env->mxccdata[0]);
403 stq_phys((env->mxccregs[1] & 0xffffffffULL) + 8, env->mxccdata[1]);
404 stq_phys((env->mxccregs[1] & 0xffffffffULL) + 16, env->mxccdata[2]);
405 stq_phys((env->mxccregs[1] & 0xffffffffULL) + 24, env->mxccdata[3]);
407 case 0x01c00a00: /* MXCC control register */
409 env->mxccregs[3] = ((uint64_t)T1 << 32) | T2;
411 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
413 case 0x01c00a04: /* MXCC control register */
415 env->mxccregs[3] = (env->mxccregs[0xa] & 0xffffffff00000000) | T1;
417 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
419 case 0x01c00e00: /* MXCC error register */
421 env->mxccregs[6] = ((uint64_t)T1 << 32) | T2;
423 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
424 if (env->mxccregs[6] == 0xffffffffffffffffULL) {
425 // this is probably a reset
428 case 0x01c00f00: /* MBus port address register */
430 env->mxccregs[7] = ((uint64_t)T1 << 32) | T2;
432 DPRINTF_MXCC("%08x: unimplemented access size: %d\n", T0, size);
435 DPRINTF_MXCC("%08x: unimplemented address, size: %d\n", T0, size);
438 DPRINTF_MXCC("asi = %d, size = %d, T0 = %08x, T1 = %08x\n", asi, size, T0, T1);
443 case 3: /* MMU flush */
447 mmulev = (T0 >> 8) & 15;
448 DPRINTF_MMU("mmu flush level %d\n", mmulev);
450 case 0: // flush page
451 tlb_flush_page(env, T0 & 0xfffff000);
453 case 1: // flush segment (256k)
454 case 2: // flush region (16M)
455 case 3: // flush context (4G)
456 case 4: // flush entire
467 case 4: /* write MMU regs */
469 int reg = (T0 >> 8) & 0xf;
472 oldreg = env->mmuregs[reg];
475 env->mmuregs[reg] &= ~(MMU_E | MMU_NF | MMU_BM);
476 env->mmuregs[reg] |= T1 & (MMU_E | MMU_NF | MMU_BM);
477 // Mappings generated during no-fault mode or MMU
478 // disabled mode are invalid in normal mode
479 if (oldreg != env->mmuregs[reg])
483 env->mmuregs[reg] = T1;
484 if (oldreg != env->mmuregs[reg]) {
485 /* we flush when the MMU context changes because
486 QEMU has no MMU context support */
494 env->mmuregs[reg] = T1;
497 if (oldreg != env->mmuregs[reg]) {
498 DPRINTF_MMU("mmu change reg[%d]: 0x%08x -> 0x%08x\n", reg, oldreg, env->mmuregs[reg]);
505 case 0xa: /* User data access */
511 stw_user(T0 & ~1, T1);
515 stl_user(T0 & ~3, T1);
518 stl_user(T0 & ~3, T1);
519 stl_user((T0 + 4) & ~3, T2);
523 case 0xb: /* Supervisor data access */
529 stw_kernel(T0 & ~1, T1);
533 stl_kernel(T0 & ~3, T1);
536 stl_kernel(T0 & ~3, T1);
537 stl_kernel((T0 + 4) & ~3, T2);
541 case 0xc: /* I-cache tag */
542 case 0xd: /* I-cache data */
543 case 0xe: /* D-cache tag */
544 case 0xf: /* D-cache data */
545 case 0x10: /* I/D-cache flush page */
546 case 0x11: /* I/D-cache flush segment */
547 case 0x12: /* I/D-cache flush region */
548 case 0x13: /* I/D-cache flush context */
549 case 0x14: /* I/D-cache flush user */
551 case 0x17: /* Block copy, sta access */
554 // address (T0) = dst
557 uint32_t src = T1 & ~3, dst = T0 & ~3, temp;
559 for (i = 0; i < 32; i += 4, src += 4, dst += 4) {
560 temp = ldl_kernel(src);
561 stl_kernel(dst, temp);
565 case 0x1f: /* Block fill, stda access */
568 // address (T0) = dst
571 uint32_t dst = T0 & 7;
574 val = (((uint64_t)T1) << 32) | T2;
576 for (i = 0; i < 32; i += 8, dst += 8)
577 stq_kernel(dst, val);
580 case 0x20: /* MMU passthrough */
587 stw_phys(T0 & ~1, T1);
591 stl_phys(T0 & ~3, T1);
594 stl_phys(T0 & ~3, T1);
595 stl_phys((T0 + 4) & ~3, T2);
600 case 0x2e: /* MMU passthrough, 0xexxxxxxxx */
601 case 0x2f: /* MMU passthrough, 0xfxxxxxxxx */
605 stb_phys((target_phys_addr_t)T0
606 | ((target_phys_addr_t)(asi & 0xf) << 32), T1);
609 stw_phys((target_phys_addr_t)(T0 & ~1)
610 | ((target_phys_addr_t)(asi & 0xf) << 32), T1);
614 stl_phys((target_phys_addr_t)(T0 & ~3)
615 | ((target_phys_addr_t)(asi & 0xf) << 32), T1);
618 stl_phys((target_phys_addr_t)(T0 & ~3)
619 | ((target_phys_addr_t)(asi & 0xf) << 32), T1);
620 stl_phys((target_phys_addr_t)((T0 + 4) & ~3)
621 | ((target_phys_addr_t)(asi & 0xf) << 32), T2);
626 case 0x31: /* Ross RT620 I-cache flush */
627 case 0x36: /* I-cache flash clear */
628 case 0x37: /* D-cache flash clear */
630 case 9: /* Supervisor code access, XXX */
631 case 0x21 ... 0x2d: /* MMU passthrough, unassigned */
633 do_unassigned_access(T0, 1, 0, 1);
638 #endif /* CONFIG_USER_ONLY */
639 #else /* TARGET_SPARC64 */
641 #ifdef CONFIG_USER_ONLY
642 void helper_ld_asi(int asi, int size, int sign)
647 raise_exception(TT_PRIV_ACT);
650 case 0x80: // Primary
651 case 0x82: // Primary no-fault
652 case 0x88: // Primary LE
653 case 0x8a: // Primary no-fault LE
660 ret = lduw_raw(T0 & ~1);
663 ret = ldl_raw(T0 & ~3);
667 ret = ldq_raw(T0 & ~7);
672 case 0x81: // Secondary
673 case 0x83: // Secondary no-fault
674 case 0x89: // Secondary LE
675 case 0x8b: // Secondary no-fault LE
682 /* Convert from little endian */
684 case 0x88: // Primary LE
685 case 0x89: // Secondary LE
686 case 0x8a: // Primary no-fault LE
687 case 0x8b: // Secondary no-fault LE
705 /* Convert to signed number */
724 void helper_st_asi(int asi, int size)
727 raise_exception(TT_PRIV_ACT);
729 /* Convert to little endian */
731 case 0x88: // Primary LE
732 case 0x89: // Secondary LE
751 case 0x80: // Primary
752 case 0x88: // Primary LE
759 stw_raw(T0 & ~1, T1);
762 stl_raw(T0 & ~3, T1);
766 stq_raw(T0 & ~7, T1);
771 case 0x81: // Secondary
772 case 0x89: // Secondary LE
776 case 0x82: // Primary no-fault, RO
777 case 0x83: // Secondary no-fault, RO
778 case 0x8a: // Primary no-fault LE, RO
779 case 0x8b: // Secondary no-fault LE, RO
781 do_unassigned_access(T0, 1, 0, 1);
786 #else /* CONFIG_USER_ONLY */
788 void helper_ld_asi(int asi, int size, int sign)
792 if ((asi < 0x80 && (env->pstate & PS_PRIV) == 0)
793 || (asi >= 0x30 && asi < 0x80) && !(env->hpstate & HS_PRIV))
794 raise_exception(TT_PRIV_ACT);
797 case 0x10: // As if user primary
798 case 0x18: // As if user primary LE
799 case 0x80: // Primary
800 case 0x82: // Primary no-fault
801 case 0x88: // Primary LE
802 case 0x8a: // Primary no-fault LE
803 if ((asi & 0x80) && (env->pstate & PS_PRIV)) {
804 if (env->hpstate & HS_PRIV) {
810 ret = lduw_hypv(T0 & ~1);
813 ret = ldl_hypv(T0 & ~3);
817 ret = ldq_hypv(T0 & ~7);
823 ret = ldub_kernel(T0);
826 ret = lduw_kernel(T0 & ~1);
829 ret = ldl_kernel(T0 & ~3);
833 ret = ldq_kernel(T0 & ~7);
843 ret = lduw_user(T0 & ~1);
846 ret = ldl_user(T0 & ~3);
850 ret = ldq_user(T0 & ~7);
856 case 0x15: // Bypass, non-cacheable
857 case 0x1c: // Bypass LE
858 case 0x1d: // Bypass, non-cacheable LE
865 ret = lduw_phys(T0 & ~1);
868 ret = ldl_phys(T0 & ~3);
872 ret = ldq_phys(T0 & ~7);
877 case 0x04: // Nucleus
878 case 0x0c: // Nucleus Little Endian (LE)
879 case 0x11: // As if user secondary
880 case 0x19: // As if user secondary LE
881 case 0x24: // Nucleus quad LDD 128 bit atomic
882 case 0x2c: // Nucleus quad LDD 128 bit atomic
883 case 0x4a: // UPA config
884 case 0x81: // Secondary
885 case 0x83: // Secondary no-fault
886 case 0x89: // Secondary LE
887 case 0x8b: // Secondary no-fault LE
893 case 0x50: // I-MMU regs
895 int reg = (T0 >> 3) & 0xf;
897 ret = env->immuregs[reg];
900 case 0x51: // I-MMU 8k TSB pointer
901 case 0x52: // I-MMU 64k TSB pointer
902 case 0x55: // I-MMU data access
905 case 0x56: // I-MMU tag read
909 for (i = 0; i < 64; i++) {
910 // Valid, ctx match, vaddr match
911 if ((env->itlb_tte[i] & 0x8000000000000000ULL) != 0 &&
912 env->itlb_tag[i] == T0) {
913 ret = env->itlb_tag[i];
919 case 0x58: // D-MMU regs
921 int reg = (T0 >> 3) & 0xf;
923 ret = env->dmmuregs[reg];
926 case 0x5e: // D-MMU tag read
930 for (i = 0; i < 64; i++) {
931 // Valid, ctx match, vaddr match
932 if ((env->dtlb_tte[i] & 0x8000000000000000ULL) != 0 &&
933 env->dtlb_tag[i] == T0) {
934 ret = env->dtlb_tag[i];
940 case 0x59: // D-MMU 8k TSB pointer
941 case 0x5a: // D-MMU 64k TSB pointer
942 case 0x5b: // D-MMU data pointer
943 case 0x5d: // D-MMU data access
944 case 0x48: // Interrupt dispatch, RO
945 case 0x49: // Interrupt data receive
946 case 0x7f: // Incoming interrupt vector, RO
949 case 0x54: // I-MMU data in, WO
950 case 0x57: // I-MMU demap, WO
951 case 0x5c: // D-MMU data in, WO
952 case 0x5f: // D-MMU demap, WO
953 case 0x77: // Interrupt vector, WO
955 do_unassigned_access(T0, 0, 0, 1);
960 /* Convert from little endian */
962 case 0x0c: // Nucleus Little Endian (LE)
963 case 0x18: // As if user primary LE
964 case 0x19: // As if user secondary LE
965 case 0x1c: // Bypass LE
966 case 0x1d: // Bypass, non-cacheable LE
967 case 0x88: // Primary LE
968 case 0x89: // Secondary LE
969 case 0x8a: // Primary no-fault LE
970 case 0x8b: // Secondary no-fault LE
988 /* Convert to signed number */
1007 void helper_st_asi(int asi, int size)
1009 if ((asi < 0x80 && (env->pstate & PS_PRIV) == 0)
1010 || (asi >= 0x30 && asi < 0x80) && !(env->hpstate & HS_PRIV))
1011 raise_exception(TT_PRIV_ACT);
1013 /* Convert to little endian */
1015 case 0x0c: // Nucleus Little Endian (LE)
1016 case 0x18: // As if user primary LE
1017 case 0x19: // As if user secondary LE
1018 case 0x1c: // Bypass LE
1019 case 0x1d: // Bypass, non-cacheable LE
1020 case 0x88: // Primary LE
1021 case 0x89: // Secondary LE
1040 case 0x10: // As if user primary
1041 case 0x18: // As if user primary LE
1042 case 0x80: // Primary
1043 case 0x88: // Primary LE
1044 if ((asi & 0x80) && (env->pstate & PS_PRIV)) {
1045 if (env->hpstate & HS_PRIV) {
1051 stw_hypv(T0 & ~1, T1);
1054 stl_hypv(T0 & ~3, T1);
1058 stq_hypv(T0 & ~7, T1);
1067 stw_kernel(T0 & ~1, T1);
1070 stl_kernel(T0 & ~3, T1);
1074 stq_kernel(T0 & ~7, T1);
1084 stw_user(T0 & ~1, T1);
1087 stl_user(T0 & ~3, T1);
1091 stq_user(T0 & ~7, T1);
1096 case 0x14: // Bypass
1097 case 0x15: // Bypass, non-cacheable
1098 case 0x1c: // Bypass LE
1099 case 0x1d: // Bypass, non-cacheable LE
1106 stw_phys(T0 & ~1, T1);
1109 stl_phys(T0 & ~3, T1);
1113 stq_phys(T0 & ~7, T1);
1118 case 0x04: // Nucleus
1119 case 0x0c: // Nucleus Little Endian (LE)
1120 case 0x11: // As if user secondary
1121 case 0x19: // As if user secondary LE
1122 case 0x24: // Nucleus quad LDD 128 bit atomic
1123 case 0x2c: // Nucleus quad LDD 128 bit atomic
1124 case 0x4a: // UPA config
1125 case 0x81: // Secondary
1126 case 0x89: // Secondary LE
1134 env->lsu = T1 & (DMMU_E | IMMU_E);
1135 // Mappings generated during D/I MMU disabled mode are
1136 // invalid in normal mode
1137 if (oldreg != env->lsu) {
1138 DPRINTF_MMU("LSU change: 0x%" PRIx64 " -> 0x%" PRIx64 "\n", oldreg, env->lsu);
1146 case 0x50: // I-MMU regs
1148 int reg = (T0 >> 3) & 0xf;
1151 oldreg = env->immuregs[reg];
1156 case 1: // Not in I-MMU
1163 T1 = 0; // Clear SFSR
1165 case 5: // TSB access
1166 case 6: // Tag access
1170 env->immuregs[reg] = T1;
1171 if (oldreg != env->immuregs[reg]) {
1172 DPRINTF_MMU("mmu change reg[%d]: 0x%08" PRIx64 " -> 0x%08" PRIx64 "\n", reg, oldreg, env->immuregs[reg]);
1179 case 0x54: // I-MMU data in
1183 // Try finding an invalid entry
1184 for (i = 0; i < 64; i++) {
1185 if ((env->itlb_tte[i] & 0x8000000000000000ULL) == 0) {
1186 env->itlb_tag[i] = env->immuregs[6];
1187 env->itlb_tte[i] = T1;
1191 // Try finding an unlocked entry
1192 for (i = 0; i < 64; i++) {
1193 if ((env->itlb_tte[i] & 0x40) == 0) {
1194 env->itlb_tag[i] = env->immuregs[6];
1195 env->itlb_tte[i] = T1;
1202 case 0x55: // I-MMU data access
1204 unsigned int i = (T0 >> 3) & 0x3f;
1206 env->itlb_tag[i] = env->immuregs[6];
1207 env->itlb_tte[i] = T1;
1210 case 0x57: // I-MMU demap
1213 case 0x58: // D-MMU regs
1215 int reg = (T0 >> 3) & 0xf;
1218 oldreg = env->dmmuregs[reg];
1224 if ((T1 & 1) == 0) {
1225 T1 = 0; // Clear SFSR, Fault address
1226 env->dmmuregs[4] = 0;
1228 env->dmmuregs[reg] = T1;
1230 case 1: // Primary context
1231 case 2: // Secondary context
1232 case 5: // TSB access
1233 case 6: // Tag access
1234 case 7: // Virtual Watchpoint
1235 case 8: // Physical Watchpoint
1239 env->dmmuregs[reg] = T1;
1240 if (oldreg != env->dmmuregs[reg]) {
1241 DPRINTF_MMU("mmu change reg[%d]: 0x%08" PRIx64 " -> 0x%08" PRIx64 "\n", reg, oldreg, env->dmmuregs[reg]);
1248 case 0x5c: // D-MMU data in
1252 // Try finding an invalid entry
1253 for (i = 0; i < 64; i++) {
1254 if ((env->dtlb_tte[i] & 0x8000000000000000ULL) == 0) {
1255 env->dtlb_tag[i] = env->dmmuregs[6];
1256 env->dtlb_tte[i] = T1;
1260 // Try finding an unlocked entry
1261 for (i = 0; i < 64; i++) {
1262 if ((env->dtlb_tte[i] & 0x40) == 0) {
1263 env->dtlb_tag[i] = env->dmmuregs[6];
1264 env->dtlb_tte[i] = T1;
1271 case 0x5d: // D-MMU data access
1273 unsigned int i = (T0 >> 3) & 0x3f;
1275 env->dtlb_tag[i] = env->dmmuregs[6];
1276 env->dtlb_tte[i] = T1;
1279 case 0x5f: // D-MMU demap
1280 case 0x49: // Interrupt data receive
1283 case 0x51: // I-MMU 8k TSB pointer, RO
1284 case 0x52: // I-MMU 64k TSB pointer, RO
1285 case 0x56: // I-MMU tag read, RO
1286 case 0x59: // D-MMU 8k TSB pointer, RO
1287 case 0x5a: // D-MMU 64k TSB pointer, RO
1288 case 0x5b: // D-MMU data pointer, RO
1289 case 0x5e: // D-MMU tag read, RO
1290 case 0x48: // Interrupt dispatch, RO
1291 case 0x7f: // Incoming interrupt vector, RO
1292 case 0x82: // Primary no-fault, RO
1293 case 0x83: // Secondary no-fault, RO
1294 case 0x8a: // Primary no-fault LE, RO
1295 case 0x8b: // Secondary no-fault LE, RO
1297 do_unassigned_access(T0, 1, 0, 1);
1301 #endif /* CONFIG_USER_ONLY */
1303 void helper_ldf_asi(int asi, int size, int rd)
1305 target_ulong tmp_T0 = T0, tmp_T1 = T1;
1309 case 0xf0: // Block load primary
1310 case 0xf1: // Block load secondary
1311 case 0xf8: // Block load primary LE
1312 case 0xf9: // Block load secondary LE
1314 raise_exception(TT_ILL_INSN);
1318 raise_exception(TT_UNALIGNED);
1321 for (i = 0; i < 16; i++) {
1322 helper_ld_asi(asi & 0x8f, 4, 0);
1323 *(uint32_t *)&env->fpr[rd++] = T1;
1334 helper_ld_asi(asi, size, 0);
1338 *((uint32_t *)&FT0) = T1;
1341 *((int64_t *)&DT0) = T1;
1347 void helper_stf_asi(int asi, int size, int rd)
1349 target_ulong tmp_T0 = T0, tmp_T1 = T1;
1353 case 0xf0: // Block store primary
1354 case 0xf1: // Block store secondary
1355 case 0xf8: // Block store primary LE
1356 case 0xf9: // Block store secondary LE
1358 raise_exception(TT_ILL_INSN);
1362 raise_exception(TT_UNALIGNED);
1365 for (i = 0; i < 16; i++) {
1366 T1 = *(uint32_t *)&env->fpr[rd++];
1367 helper_st_asi(asi & 0x8f, 4);
1381 T1 = *((uint32_t *)&FT0);
1384 T1 = *((int64_t *)&DT0);
1387 helper_st_asi(asi, size);
1391 #endif /* TARGET_SPARC64 */
1393 #ifndef TARGET_SPARC64
1398 if (env->psret == 1)
1399 raise_exception(TT_ILL_INSN);
1402 cwp = (env->cwp + 1) & (NWINDOWS - 1);
1403 if (env->wim & (1 << cwp)) {
1404 raise_exception(TT_WIN_UNF);
1407 env->psrs = env->psrps;
1411 void helper_ldfsr(void)
1414 switch (env->fsr & FSR_RD_MASK) {
1415 case FSR_RD_NEAREST:
1416 rnd_mode = float_round_nearest_even;
1420 rnd_mode = float_round_to_zero;
1423 rnd_mode = float_round_up;
1426 rnd_mode = float_round_down;
1429 set_float_rounding_mode(rnd_mode, &env->fp_status);
1434 env->exception_index = EXCP_DEBUG;
1438 #ifndef TARGET_SPARC64
1441 if ((T0 & PSR_CWP) >= NWINDOWS)
1442 raise_exception(TT_ILL_INSN);
1456 T0 = (T1 & 0x5555555555555555ULL) + ((T1 >> 1) & 0x5555555555555555ULL);
1457 T0 = (T0 & 0x3333333333333333ULL) + ((T0 >> 2) & 0x3333333333333333ULL);
1458 T0 = (T0 & 0x0f0f0f0f0f0f0f0fULL) + ((T0 >> 4) & 0x0f0f0f0f0f0f0f0fULL);
1459 T0 = (T0 & 0x00ff00ff00ff00ffULL) + ((T0 >> 8) & 0x00ff00ff00ff00ffULL);
1460 T0 = (T0 & 0x0000ffff0000ffffULL) + ((T0 >> 16) & 0x0000ffff0000ffffULL);
1461 T0 = (T0 & 0x00000000ffffffffULL) + ((T0 >> 32) & 0x00000000ffffffffULL);
1464 static inline uint64_t *get_gregset(uint64_t pstate)
1479 static inline void change_pstate(uint64_t new_pstate)
1481 uint64_t pstate_regs, new_pstate_regs;
1482 uint64_t *src, *dst;
1484 pstate_regs = env->pstate & 0xc01;
1485 new_pstate_regs = new_pstate & 0xc01;
1486 if (new_pstate_regs != pstate_regs) {
1487 // Switch global register bank
1488 src = get_gregset(new_pstate_regs);
1489 dst = get_gregset(pstate_regs);
1490 memcpy32(dst, env->gregs);
1491 memcpy32(env->gregs, src);
1493 env->pstate = new_pstate;
1496 void do_wrpstate(void)
1498 change_pstate(T0 & 0xf3f);
1504 env->pc = env->tnpc[env->tl];
1505 env->npc = env->tnpc[env->tl] + 4;
1506 PUT_CCR(env, env->tstate[env->tl] >> 32);
1507 env->asi = (env->tstate[env->tl] >> 24) & 0xff;
1508 change_pstate((env->tstate[env->tl] >> 8) & 0xf3f);
1509 PUT_CWP64(env, env->tstate[env->tl] & 0xff);
1515 env->pc = env->tpc[env->tl];
1516 env->npc = env->tnpc[env->tl];
1517 PUT_CCR(env, env->tstate[env->tl] >> 32);
1518 env->asi = (env->tstate[env->tl] >> 24) & 0xff;
1519 change_pstate((env->tstate[env->tl] >> 8) & 0xf3f);
1520 PUT_CWP64(env, env->tstate[env->tl] & 0xff);
1524 void set_cwp(int new_cwp)
1526 /* put the modified wrap registers at their proper location */
1527 if (env->cwp == (NWINDOWS - 1))
1528 memcpy32(env->regbase, env->regbase + NWINDOWS * 16);
1530 /* put the wrap registers at their temporary location */
1531 if (new_cwp == (NWINDOWS - 1))
1532 memcpy32(env->regbase + NWINDOWS * 16, env->regbase);
1533 env->regwptr = env->regbase + (new_cwp * 16);
1534 REGWPTR = env->regwptr;
1537 void cpu_set_cwp(CPUState *env1, int new_cwp)
1539 CPUState *saved_env;
1541 target_ulong *saved_regwptr;
1546 saved_regwptr = REGWPTR;
1552 REGWPTR = saved_regwptr;
1556 #ifdef TARGET_SPARC64
1557 void do_interrupt(int intno)
1560 if (loglevel & CPU_LOG_INT) {
1562 fprintf(logfile, "%6d: v=%04x pc=%016" PRIx64 " npc=%016" PRIx64 " SP=%016" PRIx64 "\n",
1565 env->npc, env->regwptr[6]);
1566 cpu_dump_state(env, logfile, fprintf, 0);
1572 fprintf(logfile, " code=");
1573 ptr = (uint8_t *)env->pc;
1574 for(i = 0; i < 16; i++) {
1575 fprintf(logfile, " %02x", ldub(ptr + i));
1577 fprintf(logfile, "\n");
1583 #if !defined(CONFIG_USER_ONLY)
1584 if (env->tl == MAXTL) {
1585 cpu_abort(env, "Trap 0x%04x while trap level is MAXTL, Error state", env->exception_index);
1589 env->tstate[env->tl] = ((uint64_t)GET_CCR(env) << 32) | ((env->asi & 0xff) << 24) |
1590 ((env->pstate & 0xf3f) << 8) | GET_CWP64(env);
1591 env->tpc[env->tl] = env->pc;
1592 env->tnpc[env->tl] = env->npc;
1593 env->tt[env->tl] = intno;
1594 change_pstate(PS_PEF | PS_PRIV | PS_AG);
1596 if (intno == TT_CLRWIN)
1597 set_cwp((env->cwp - 1) & (NWINDOWS - 1));
1598 else if ((intno & 0x1c0) == TT_SPILL)
1599 set_cwp((env->cwp - env->cansave - 2) & (NWINDOWS - 1));
1600 else if ((intno & 0x1c0) == TT_FILL)
1601 set_cwp((env->cwp + 1) & (NWINDOWS - 1));
1602 env->tbr &= ~0x7fffULL;
1603 env->tbr |= ((env->tl > 1) ? 1 << 14 : 0) | (intno << 5);
1604 if (env->tl < MAXTL - 1) {
1607 env->pstate |= PS_RED;
1608 if (env->tl != MAXTL)
1612 env->npc = env->pc + 4;
1613 env->exception_index = 0;
1616 void do_interrupt(int intno)
1621 if (loglevel & CPU_LOG_INT) {
1623 fprintf(logfile, "%6d: v=%02x pc=%08x npc=%08x SP=%08x\n",
1626 env->npc, env->regwptr[6]);
1627 cpu_dump_state(env, logfile, fprintf, 0);
1633 fprintf(logfile, " code=");
1634 ptr = (uint8_t *)env->pc;
1635 for(i = 0; i < 16; i++) {
1636 fprintf(logfile, " %02x", ldub(ptr + i));
1638 fprintf(logfile, "\n");
1644 #if !defined(CONFIG_USER_ONLY)
1645 if (env->psret == 0) {
1646 cpu_abort(env, "Trap 0x%02x while interrupts disabled, Error state", env->exception_index);
1651 cwp = (env->cwp - 1) & (NWINDOWS - 1);
1653 env->regwptr[9] = env->pc;
1654 env->regwptr[10] = env->npc;
1655 env->psrps = env->psrs;
1657 env->tbr = (env->tbr & TBR_BASE_MASK) | (intno << 4);
1659 env->npc = env->pc + 4;
1660 env->exception_index = 0;
1664 #if !defined(CONFIG_USER_ONLY)
1666 static void do_unaligned_access(target_ulong addr, int is_write, int is_user,
1669 #define MMUSUFFIX _mmu
1670 #define ALIGNED_ONLY
1671 #define GETPC() (__builtin_return_address(0))
1674 #include "softmmu_template.h"
1677 #include "softmmu_template.h"
1680 #include "softmmu_template.h"
1683 #include "softmmu_template.h"
1685 static void do_unaligned_access(target_ulong addr, int is_write, int is_user,
1688 #ifdef DEBUG_UNALIGNED
1689 printf("Unaligned access to 0x%x from 0x%x\n", addr, env->pc);
1691 raise_exception(TT_UNALIGNED);
1694 /* try to fill the TLB and return an exception if error. If retaddr is
1695 NULL, it means that the function was called in C code (i.e. not
1696 from generated code or from helper.c) */
1697 /* XXX: fix it to restore all registers */
1698 void tlb_fill(target_ulong addr, int is_write, int mmu_idx, void *retaddr)
1700 TranslationBlock *tb;
1703 CPUState *saved_env;
1705 /* XXX: hack to restore env in all cases, even if not called from
1708 env = cpu_single_env;
1710 ret = cpu_sparc_handle_mmu_fault(env, addr, is_write, mmu_idx, 1);
1713 /* now we have a real cpu fault */
1714 pc = (unsigned long)retaddr;
1715 tb = tb_find_pc(pc);
1717 /* the PC is inside the translated code. It means that we have
1718 a virtual CPU fault */
1719 cpu_restore_state(tb, env, pc, (void *)T2);
1729 #ifndef TARGET_SPARC64
1730 void do_unassigned_access(target_phys_addr_t addr, int is_write, int is_exec,
1733 CPUState *saved_env;
1735 /* XXX: hack to restore env in all cases, even if not called from
1738 env = cpu_single_env;
1739 if (env->mmuregs[3]) /* Fault status register */
1740 env->mmuregs[3] = 1; /* overflow (not read before another fault) */
1742 env->mmuregs[3] |= 1 << 16;
1744 env->mmuregs[3] |= 1 << 5;
1746 env->mmuregs[3] |= 1 << 6;
1748 env->mmuregs[3] |= 1 << 7;
1749 env->mmuregs[3] |= (5 << 2) | 2;
1750 env->mmuregs[4] = addr; /* Fault address register */
1751 if ((env->mmuregs[0] & MMU_E) && !(env->mmuregs[0] & MMU_NF)) {
1752 #ifdef DEBUG_UNASSIGNED
1753 printf("Unassigned mem access to " TARGET_FMT_plx " from " TARGET_FMT_lx
1754 "\n", addr, env->pc);
1757 raise_exception(TT_CODE_ACCESS);
1759 raise_exception(TT_DATA_ACCESS);
1764 void do_unassigned_access(target_phys_addr_t addr, int is_write, int is_exec,
1767 #ifdef DEBUG_UNASSIGNED
1768 CPUState *saved_env;
1770 /* XXX: hack to restore env in all cases, even if not called from
1773 env = cpu_single_env;
1774 printf("Unassigned mem access to " TARGET_FMT_plx " from " TARGET_FMT_lx "\n",
1779 raise_exception(TT_CODE_ACCESS);
1781 raise_exception(TT_DATA_ACCESS);
1785 #ifdef TARGET_SPARC64
1786 void do_tick_set_count(void *opaque, uint64_t count)
1788 #if !defined(CONFIG_USER_ONLY)
1789 ptimer_set_count(opaque, -count);
1793 uint64_t do_tick_get_count(void *opaque)
1795 #if !defined(CONFIG_USER_ONLY)
1796 return -ptimer_get_count(opaque);
1802 void do_tick_set_limit(void *opaque, uint64_t limit)
1804 #if !defined(CONFIG_USER_ONLY)
1805 ptimer_set_limit(opaque, -limit, 0);