Fix elf loader range checking
[qemu] / target-cris / op_helper.c
index 7c629c7..edfaf41 100644 (file)
  *
  * You should have received a copy of the GNU Lesser General Public
  * License along with this library; if not, write to the Free Software
- * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston MA  02110-1301 USA
  */
 
-#include <assert.h>
 #include "exec.h"
 #include "mmu.h"
+#include "helper.h"
+#include "host-utils.h"
 
-#define MMUSUFFIX _mmu
-#ifdef __s390__
-# define GETPC() ((void*)((unsigned long)__builtin_return_address(0) & 0x7fffffffUL))
+//#define CRIS_OP_HELPER_DEBUG
+
+
+#ifdef CRIS_OP_HELPER_DEBUG
+#define D(x) x
+#define D_LOG(...) qemu_log(__VA__ARGS__)
 #else
-# define GETPC() (__builtin_return_address(0))
+#define D(x)
+#define D_LOG(...) do { } while (0)
 #endif
 
+#if !defined(CONFIG_USER_ONLY)
+
+#define MMUSUFFIX _mmu
+
 #define SHIFT 0
 #include "softmmu_template.h"
 
@@ -42,8 +51,6 @@
 #define SHIFT 3
 #include "softmmu_template.h"
 
-#define D(x)
-
 /* Try to fill the TLB and return an exception if error. If retaddr is
    NULL, it means that the function was called in C code (i.e. not
    from generated code or from helper.c) */
@@ -60,10 +67,10 @@ void tlb_fill (target_ulong addr, int is_write, int mmu_idx, void *retaddr)
     saved_env = env;
     env = cpu_single_env;
 
-    D(fprintf(logfile, "%s ra=%x acr=%x %x\n", __func__, retaddr,
-           env->regs[R_ACR], saved_env->regs[R_ACR]));
+    D_LOG("%s pc=%x tpc=%x ra=%x\n", __func__, 
+            env->pc, env->debug1, retaddr);
     ret = cpu_cris_handle_mmu_fault(env, addr, is_write, mmu_idx, 1);
-    if (__builtin_expect(ret, 0)) {
+    if (unlikely(ret)) {
         if (retaddr) {
             /* now we have a real cpu fault */
             pc = (unsigned long)retaddr;
@@ -72,6 +79,9 @@ void tlb_fill (target_ulong addr, int is_write, int mmu_idx, void *retaddr)
                 /* the PC is inside the translated code. It means that we have
                    a virtual CPU fault */
                 cpu_restore_state(tb, env, pc, NULL);
+
+               /* Evaluate flags after retranslation.  */
+                helper_top_evaluate_flags();
             }
         }
         cpu_loop_exit();
@@ -79,108 +89,229 @@ void tlb_fill (target_ulong addr, int is_write, int mmu_idx, void *retaddr)
     env = saved_env;
 }
 
-void helper_tlb_update(uint32_t T0)
+#endif
+
+void helper_raise_exception(uint32_t index)
 {
-#if !defined(CONFIG_USER_ONLY)
-       uint32_t vaddr;
-       uint32_t srs = env->pregs[PR_SRS];
+       env->exception_index = index;
+       cpu_loop_exit();
+}
 
-       if (srs != 1 && srs != 2)
-               return;
+void helper_tlb_flush_pid(uint32_t pid)
+{
+#if !defined(CONFIG_USER_ONLY)
+       pid &= 0xff;
+       if (pid != (env->pregs[PR_PID] & 0xff))
+               cris_mmu_flush_pid(env, env->pregs[PR_PID]);
+#endif
+}
 
-       vaddr = cris_mmu_tlb_latest_update(env, T0);
-       D(printf("flush old_vaddr=%x vaddr=%x T0=%x\n", vaddr, 
-                env->sregs[SFR_R_MM_CAUSE] & TARGET_PAGE_MASK, T0));
-       tlb_flush_page(env, vaddr);
+void helper_spc_write(uint32_t new_spc)
+{
+#if !defined(CONFIG_USER_ONLY)
+       tlb_flush_page(env, env->pregs[PR_SPC]);
+       tlb_flush_page(env, new_spc);
 #endif
 }
 
-void helper_tlb_flush(void)
+void helper_dump(uint32_t a0, uint32_t a1, uint32_t a2)
 {
-       tlb_flush(env, 1);
+       qemu_log("%s: a0=%x a1=%x\n", __func__, a0, a1);
 }
 
-void helper_dump(uint32_t a0, uint32_t a1)
+/* Used by the tlb decoder.  */
+#define EXTRACT_FIELD(src, start, end) \
+           (((src) >> start) & ((1 << (end - start + 1)) - 1))
+
+void helper_movl_sreg_reg (uint32_t sreg, uint32_t reg)
 {
-       (fprintf(logfile, "%s: a0=%x a1=%x\n", __func__, a0, a1)); 
+       uint32_t srs;
+       srs = env->pregs[PR_SRS];
+       srs &= 3;
+       env->sregs[srs][sreg] = env->regs[reg];
+
+#if !defined(CONFIG_USER_ONLY)
+       if (srs == 1 || srs == 2) {
+               if (sreg == 6) {
+                       /* Writes to tlb-hi write to mm_cause as a side 
+                          effect.  */
+                       env->sregs[SFR_RW_MM_TLB_HI] = env->regs[reg];
+                       env->sregs[SFR_R_MM_CAUSE] = env->regs[reg];
+               }
+               else if (sreg == 5) {
+                       uint32_t set;
+                       uint32_t idx;
+                       uint32_t lo, hi;
+                       uint32_t vaddr;
+                       int tlb_v;
+
+                       idx = set = env->sregs[SFR_RW_MM_TLB_SEL];
+                       set >>= 4;
+                       set &= 3;
+
+                       idx &= 15;
+                       /* We've just made a write to tlb_lo.  */
+                       lo = env->sregs[SFR_RW_MM_TLB_LO];
+                       /* Writes are done via r_mm_cause.  */
+                       hi = env->sregs[SFR_R_MM_CAUSE];
+
+                       vaddr = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].hi,
+                                             13, 31);
+                       vaddr <<= TARGET_PAGE_BITS;
+                       tlb_v = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].lo,
+                                           3, 3);
+                       env->tlbsets[srs - 1][set][idx].lo = lo;
+                       env->tlbsets[srs - 1][set][idx].hi = hi;
+
+                       D_LOG("tlb flush vaddr=%x v=%d pc=%x\n", 
+                                 vaddr, tlb_v, env->pc);
+                       tlb_flush_page(env, vaddr);
+               }
+       }
+#endif
 }
 
-void helper_dummy(void)
+void helper_movl_reg_sreg (uint32_t reg, uint32_t sreg)
 {
+       uint32_t srs;
+       env->pregs[PR_SRS] &= 3;
+       srs = env->pregs[PR_SRS];
+       
+#if !defined(CONFIG_USER_ONLY)
+       if (srs == 1 || srs == 2)
+       {
+               uint32_t set;
+               uint32_t idx;
+               uint32_t lo, hi;
+
+               idx = set = env->sregs[SFR_RW_MM_TLB_SEL];
+               set >>= 4;
+               set &= 3;
+               idx &= 15;
+
+               /* Update the mirror regs.  */
+               hi = env->tlbsets[srs - 1][set][idx].hi;
+               lo = env->tlbsets[srs - 1][set][idx].lo;
+               env->sregs[SFR_RW_MM_TLB_HI] = hi;
+               env->sregs[SFR_RW_MM_TLB_LO] = lo;
+       }
+#endif
+       env->regs[reg] = env->sregs[srs][sreg];
+}
+
+static void cris_ccs_rshift(CPUState *env)
+{
+       uint32_t ccs;
+
+       /* Apply the ccs shift.  */
+       ccs = env->pregs[PR_CCS];
+       ccs = (ccs & 0xc0000000) | ((ccs & 0x0fffffff) >> 10);
+       if (ccs & U_FLAG)
+       {
+               /* Enter user mode.  */
+               env->ksp = env->regs[R_SP];
+               env->regs[R_SP] = env->pregs[PR_USP];
+       }
 
+       env->pregs[PR_CCS] = ccs;
 }
 
-/* Only used for debugging at the moment.  */
 void helper_rfe(void)
 {
-       D(fprintf(logfile, "rfe: erp=%x pid=%x ccs=%x btarget=%x\n", 
+       int rflag = env->pregs[PR_CCS] & R_FLAG;
+
+       D_LOG("rfe: erp=%x pid=%x ccs=%x btarget=%x\n", 
                 env->pregs[PR_ERP], env->pregs[PR_PID],
                 env->pregs[PR_CCS],
-                env->btarget));
+                env->btarget);
+
+       cris_ccs_rshift(env);
+
+       /* RFE sets the P_FLAG only if the R_FLAG is not set.  */
+       if (!rflag)
+               env->pregs[PR_CCS] |= P_FLAG;
 }
 
-void helper_store(uint32_t a0)
+void helper_rfn(void)
 {
-       if (env->pregs[PR_CCS] & P_FLAG )
-       {
-               cpu_abort(env, "cond_store_failed! pc=%x a0=%x\n",
-                         env->pc, a0);
-       }
+       int rflag = env->pregs[PR_CCS] & R_FLAG;
+
+       D_LOG("rfn: erp=%x pid=%x ccs=%x btarget=%x\n", 
+                env->pregs[PR_ERP], env->pregs[PR_PID],
+                env->pregs[PR_CCS],
+                env->btarget);
+
+       cris_ccs_rshift(env);
+
+       /* Set the P_FLAG only if the R_FLAG is not set.  */
+       if (!rflag)
+               env->pregs[PR_CCS] |= P_FLAG;
+
+    /* Always set the M flag.  */
+    env->pregs[PR_CCS] |= M_FLAG;
 }
 
-void do_unassigned_access(target_phys_addr_t addr, int is_write, int is_exec,
-                          int is_asi)
+uint32_t helper_lz(uint32_t t0)
 {
-       D(printf("%s addr=%x w=%d ex=%d asi=%d\n", 
-               __func__, addr, is_write, is_exec, is_asi));
+       return clz32(t0);
 }
 
-static void evaluate_flags_writeback(uint32_t flags)
+uint32_t helper_btst(uint32_t t0, uint32_t t1, uint32_t ccs)
 {
-       int x;
-
-       /* Extended arithmetics, leave the z flag alone.  */
-       env->debug3 = env->pregs[PR_CCS];
+       /* FIXME: clean this up.  */
+
+       /* des ref:
+          The N flag is set according to the selected bit in the dest reg.
+          The Z flag is set if the selected bit and all bits to the right are
+          zero.
+          The X flag is cleared.
+          Other flags are left untouched.
+          The destination reg is not affected.*/
+       unsigned int fz, sbit, bset, mask, masked_t0;
+
+       sbit = t1 & 31;
+       bset = !!(t0 & (1 << sbit));
+       mask = sbit == 31 ? -1 : (1 << (sbit + 1)) - 1;
+       masked_t0 = t0 & mask;
+       fz = !(masked_t0 | bset);
+
+       /* Clear the X, N and Z flags.  */
+       ccs = ccs & ~(X_FLAG | N_FLAG | Z_FLAG);
+       /* Set the N and Z flags accordingly.  */
+       ccs |= (bset << 3) | (fz << 2);
+       return ccs;
+}
 
-       if (env->cc_x_live)
-               x = env->cc_x;
-       else
-               x = env->pregs[PR_CCS] & X_FLAG;
+static inline uint32_t evaluate_flags_writeback(uint32_t flags, uint32_t ccs)
+{
+       unsigned int x, z, mask;
 
-       if ((x || env->cc_op == CC_OP_ADDC)
-           && flags & Z_FLAG)
-               env->cc_mask &= ~Z_FLAG;
+       /* Extended arithmetics, leave the z flag alone.  */
+       x = env->cc_x;
+       mask = env->cc_mask | X_FLAG;
+        if (x) {
+               z = flags & Z_FLAG;
+               mask = mask & ~z;
+       }
+       flags &= mask;
 
        /* all insn clear the x-flag except setf or clrf.  */
-       env->pregs[PR_CCS] &= ~(env->cc_mask | X_FLAG);
-       flags &= env->cc_mask;
-       env->pregs[PR_CCS] |= flags;
-       RETURN();
+       ccs &= ~mask;
+       ccs |= flags;
+       return ccs;
 }
 
-void helper_evaluate_flags_muls(void)
+uint32_t helper_evaluate_flags_muls(uint32_t ccs, uint32_t res, uint32_t mof)
 {
-       uint32_t src;
-       uint32_t dst;
-       uint32_t res;
        uint32_t flags = 0;
-       /* were gonna have to redo the muls.  */
-       int64_t tmp, t0 ,t1;
-       int32_t mof;
+       int64_t tmp;
        int dneg;
 
-       src = env->cc_src;
-       dst = env->cc_dest;
-       res = env->cc_result;
-
-
-       /* cast into signed values to make GCC sign extend.  */
-       t0 = (int32_t)src;
-       t1 = (int32_t)dst;
        dneg = ((int32_t)res) < 0;
 
-       tmp = t0 * t1;
-       mof = tmp >> 32;
+       tmp = mof;
+       tmp <<= 32;
+       tmp |= res;
        if (tmp == 0)
                flags |= Z_FLAG;
        else if (tmp < 0)
@@ -188,30 +319,17 @@ void helper_evaluate_flags_muls(void)
        if ((dneg && mof != -1)
            || (!dneg && mof != 0))
                flags |= V_FLAG;
-       evaluate_flags_writeback(flags);
+       return evaluate_flags_writeback(flags, ccs);
 }
 
-void  helper_evaluate_flags_mulu(void)
+uint32_t helper_evaluate_flags_mulu(uint32_t ccs, uint32_t res, uint32_t mof)
 {
-       uint32_t src;
-       uint32_t dst;
-       uint32_t res;
        uint32_t flags = 0;
-       /* were gonna have to redo the muls.  */
-       uint64_t tmp, t0 ,t1;
-       uint32_t mof;
+       uint64_t tmp;
 
-       src = env->cc_src;
-       dst = env->cc_dest;
-       res = env->cc_result;
-
-
-       /* cast into signed values to make GCC sign extend.  */
-       t0 = src;
-       t1 = dst;
-
-       tmp = t0 * t1;
-       mof = tmp >> 32;
+       tmp = mof;
+       tmp <<= 32;
+       tmp |= res;
        if (tmp == 0)
                flags |= Z_FLAG;
        else if (tmp >> 63)
@@ -219,139 +337,133 @@ void  helper_evaluate_flags_mulu(void)
        if (mof)
                flags |= V_FLAG;
 
-       evaluate_flags_writeback(flags);
+       return evaluate_flags_writeback(flags, ccs);
 }
 
-void  helper_evaluate_flags_mcp(void)
+uint32_t helper_evaluate_flags_mcp(uint32_t ccs,
+                                  uint32_t src, uint32_t dst, uint32_t res)
 {
-       uint32_t src;
-       uint32_t dst;
-       uint32_t res;
        uint32_t flags = 0;
 
-       src = env->cc_src;
-       dst = env->cc_dest;
-       res = env->cc_result;
+       src = src & 0x80000000;
+       dst = dst & 0x80000000;
 
        if ((res & 0x80000000L) != 0L)
        {
                flags |= N_FLAG;
-               if (((src & 0x80000000L) == 0L)
-                   && ((dst & 0x80000000L) == 0L))
-               {
+               if (!src && !dst)
                        flags |= V_FLAG;
-               }
-               else if (((src & 0x80000000L) != 0L) &&
-                        ((dst & 0x80000000L) != 0L))
-               {
+               else if (src & dst)
                        flags |= R_FLAG;
-               }
        }
        else
        {
                if (res == 0L)
                        flags |= Z_FLAG;
-               if (((src & 0x80000000L) != 0L)
-                   && ((dst & 0x80000000L) != 0L))
+               if (src & dst) 
                        flags |= V_FLAG;
-               if ((dst & 0x80000000L) != 0L
-                   || (src & 0x80000000L) != 0L)
+               if (dst | src) 
                        flags |= R_FLAG;
        }
 
-       evaluate_flags_writeback(flags);
+       return evaluate_flags_writeback(flags, ccs);
 }
 
-void  helper_evaluate_flags_alu_4(void)
+uint32_t helper_evaluate_flags_alu_4(uint32_t ccs,
+                                    uint32_t src, uint32_t dst, uint32_t res)
 {
-       uint32_t src;
-       uint32_t dst;
-       uint32_t res;
        uint32_t flags = 0;
 
-       src = env->cc_src;
-       dst = env->cc_dest;
-       res = env->cc_result;
+       src = src & 0x80000000;
+       dst = dst & 0x80000000;
 
        if ((res & 0x80000000L) != 0L)
        {
                flags |= N_FLAG;
-               if (((src & 0x80000000L) == 0L)
-                   && ((dst & 0x80000000L) == 0L))
-               {
+               if (!src && !dst)
                        flags |= V_FLAG;
-               }
-               else if (((src & 0x80000000L) != 0L) &&
-                        ((dst & 0x80000000L) != 0L))
-               {
+               else if (src & dst)
                        flags |= C_FLAG;
-               }
        }
        else
        {
                if (res == 0L)
                        flags |= Z_FLAG;
-               if (((src & 0x80000000L) != 0L)
-                   && ((dst & 0x80000000L) != 0L))
+               if (src & dst) 
                        flags |= V_FLAG;
-               if ((dst & 0x80000000L) != 0L
-                   || (src & 0x80000000L) != 0L)
+               if (dst | src) 
                        flags |= C_FLAG;
        }
 
-       if (env->cc_op == CC_OP_SUB
-           || env->cc_op == CC_OP_CMP) {
-               flags ^= C_FLAG;
-       }
-       evaluate_flags_writeback(flags);
+       return evaluate_flags_writeback(flags, ccs);
 }
 
-void  helper_evaluate_flags_move_4 (void)
+uint32_t helper_evaluate_flags_sub_4(uint32_t ccs,
+                                    uint32_t src, uint32_t dst, uint32_t res)
 {
-       uint32_t src;
-       uint32_t res;
        uint32_t flags = 0;
 
-       src = env->cc_src;
-       res = env->cc_result;
+       src = (~src) & 0x80000000;
+       dst = dst & 0x80000000;
+
+       if ((res & 0x80000000L) != 0L)
+       {
+               flags |= N_FLAG;
+               if (!src && !dst)
+                       flags |= V_FLAG;
+               else if (src & dst)
+                       flags |= C_FLAG;
+       }
+       else
+       {
+               if (res == 0L)
+                       flags |= Z_FLAG;
+               if (src & dst) 
+                       flags |= V_FLAG;
+               if (dst | src) 
+                       flags |= C_FLAG;
+       }
+
+       flags ^= C_FLAG;
+       return evaluate_flags_writeback(flags, ccs);
+}
+
+uint32_t helper_evaluate_flags_move_4(uint32_t ccs, uint32_t res)
+{
+       uint32_t flags = 0;
 
        if ((int32_t)res < 0)
                flags |= N_FLAG;
        else if (res == 0L)
                flags |= Z_FLAG;
 
-       evaluate_flags_writeback(flags);
+       return evaluate_flags_writeback(flags, ccs);
 }
-void  helper_evaluate_flags_move_2 (void)
+uint32_t helper_evaluate_flags_move_2(uint32_t ccs, uint32_t res)
 {
-       uint32_t src;
        uint32_t flags = 0;
-       uint16_t res;
-
-       src = env->cc_src;
-       res = env->cc_result;
 
        if ((int16_t)res < 0L)
                flags |= N_FLAG;
        else if (res == 0)
                flags |= Z_FLAG;
 
-       evaluate_flags_writeback(flags);
+       return evaluate_flags_writeback(flags, ccs);
 }
 
 /* TODO: This is expensive. We could split things up and only evaluate part of
    CCR on a need to know basis. For now, we simply re-evaluate everything.  */
-void helper_evaluate_flags (void)
+void  helper_evaluate_flags(void)
 {
-       uint32_t src;
-       uint32_t dst;
-       uint32_t res;
+       uint32_t src, dst, res;
        uint32_t flags = 0;
 
        src = env->cc_src;
        dst = env->cc_dest;
        res = env->cc_result;
 
+       if (env->cc_op == CC_OP_SUB || env->cc_op == CC_OP_CMP)
+               src = ~src;
 
        /* Now, evaluate the flags. This stuff is based on
           Per Zander's CRISv10 simulator.  */
@@ -454,9 +566,87 @@ void helper_evaluate_flags (void)
                        break;
        }
 
-       if (env->cc_op == CC_OP_SUB
-           || env->cc_op == CC_OP_CMP) {
+       if (env->cc_op == CC_OP_SUB || env->cc_op == CC_OP_CMP)
                flags ^= C_FLAG;
+
+       env->pregs[PR_CCS] = evaluate_flags_writeback(flags, env->pregs[PR_CCS]);
+}
+
+void helper_top_evaluate_flags(void)
+{
+       switch (env->cc_op)
+       {
+               case CC_OP_MCP:
+                       env->pregs[PR_CCS] = helper_evaluate_flags_mcp(
+                                       env->pregs[PR_CCS], env->cc_src,
+                                       env->cc_dest, env->cc_result);
+                       break;
+               case CC_OP_MULS:
+                       env->pregs[PR_CCS] = helper_evaluate_flags_muls(
+                                       env->pregs[PR_CCS], env->cc_result,
+                                       env->pregs[PR_MOF]);
+                       break;
+               case CC_OP_MULU:
+                       env->pregs[PR_CCS] = helper_evaluate_flags_mulu(
+                                       env->pregs[PR_CCS], env->cc_result,
+                                       env->pregs[PR_MOF]);
+                       break;
+               case CC_OP_MOVE:
+               case CC_OP_AND:
+               case CC_OP_OR:
+               case CC_OP_XOR:
+               case CC_OP_ASR:
+               case CC_OP_LSR:
+               case CC_OP_LSL:
+               switch (env->cc_size)
+               {
+                       case 4:
+                               env->pregs[PR_CCS] =
+                                       helper_evaluate_flags_move_4(
+                                                       env->pregs[PR_CCS],
+                                                       env->cc_result);
+                               break;
+                       case 2:
+                               env->pregs[PR_CCS] =
+                                       helper_evaluate_flags_move_2(
+                                                       env->pregs[PR_CCS],
+                                                       env->cc_result);
+                               break;
+                       default:
+                               helper_evaluate_flags();
+                               break;
+               }
+               break;
+               case CC_OP_FLAGS:
+                       /* live.  */
+                       break;
+               case CC_OP_SUB:
+               case CC_OP_CMP:
+                       if (env->cc_size == 4)
+                               env->pregs[PR_CCS] =
+                                       helper_evaluate_flags_sub_4(
+                                               env->pregs[PR_CCS],
+                                               env->cc_src, env->cc_dest,
+                                               env->cc_result);
+                       else
+                               helper_evaluate_flags();
+                       break;
+               default:
+               {
+                       switch (env->cc_size)
+                       {
+                       case 4:
+                               env->pregs[PR_CCS] =
+                                       helper_evaluate_flags_alu_4(
+                                               env->pregs[PR_CCS],
+                                               env->cc_src, env->cc_dest,
+                                               env->cc_result);
+                               break;
+                       default:
+                               helper_evaluate_flags();
+                               break;
+                       }
+               }
+               break;
        }
-       evaluate_flags_writeback(flags);
 }