Merge remote-tracking branch 'kraxel/tags/pull-ui-20170519-1' into staging
[qemu.git] / target / ppc / excp_helper.c
bloba6bcb47aa29dd5fec8f9cd80a65f0e27f9f13528
1 /*
2 * PowerPC exception emulation helpers for QEMU.
4 * Copyright (c) 2003-2007 Jocelyn Mayer
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
19 #include "qemu/osdep.h"
20 #include "cpu.h"
21 #include "exec/helper-proto.h"
22 #include "exec/exec-all.h"
23 #include "exec/cpu_ldst.h"
25 #include "helper_regs.h"
27 //#define DEBUG_OP
28 //#define DEBUG_SOFTWARE_TLB
29 //#define DEBUG_EXCEPTIONS
31 #ifdef DEBUG_EXCEPTIONS
32 # define LOG_EXCP(...) qemu_log(__VA_ARGS__)
33 #else
34 # define LOG_EXCP(...) do { } while (0)
35 #endif
37 /*****************************************************************************/
38 /* Exception processing */
39 #if defined(CONFIG_USER_ONLY)
40 void ppc_cpu_do_interrupt(CPUState *cs)
42 PowerPCCPU *cpu = POWERPC_CPU(cs);
43 CPUPPCState *env = &cpu->env;
45 cs->exception_index = POWERPC_EXCP_NONE;
46 env->error_code = 0;
49 static void ppc_hw_interrupt(CPUPPCState *env)
51 CPUState *cs = CPU(ppc_env_get_cpu(env));
53 cs->exception_index = POWERPC_EXCP_NONE;
54 env->error_code = 0;
56 #else /* defined(CONFIG_USER_ONLY) */
57 static inline void dump_syscall(CPUPPCState *env)
59 qemu_log_mask(CPU_LOG_INT, "syscall r0=%016" PRIx64 " r3=%016" PRIx64
60 " r4=%016" PRIx64 " r5=%016" PRIx64 " r6=%016" PRIx64
61 " nip=" TARGET_FMT_lx "\n",
62 ppc_dump_gpr(env, 0), ppc_dump_gpr(env, 3),
63 ppc_dump_gpr(env, 4), ppc_dump_gpr(env, 5),
64 ppc_dump_gpr(env, 6), env->nip);
67 /* Note that this function should be greatly optimized
68 * when called with a constant excp, from ppc_hw_interrupt
70 static inline void powerpc_excp(PowerPCCPU *cpu, int excp_model, int excp)
72 CPUState *cs = CPU(cpu);
73 CPUPPCState *env = &cpu->env;
74 target_ulong msr, new_msr, vector;
75 int srr0, srr1, asrr0, asrr1, lev, ail;
76 bool lpes0;
78 qemu_log_mask(CPU_LOG_INT, "Raise exception at " TARGET_FMT_lx
79 " => %08x (%02x)\n", env->nip, excp, env->error_code);
81 /* new srr1 value excluding must-be-zero bits */
82 if (excp_model == POWERPC_EXCP_BOOKE) {
83 msr = env->msr;
84 } else {
85 msr = env->msr & ~0x783f0000ULL;
88 /* new interrupt handler msr preserves existing HV and ME unless
89 * explicitly overriden
91 new_msr = env->msr & (((target_ulong)1 << MSR_ME) | MSR_HVB);
93 /* target registers */
94 srr0 = SPR_SRR0;
95 srr1 = SPR_SRR1;
96 asrr0 = -1;
97 asrr1 = -1;
99 /* check for special resume at 0x100 from doze/nap/sleep/winkle on P7/P8 */
100 if (env->in_pm_state) {
101 env->in_pm_state = false;
103 /* Pretend to be returning from doze always as we don't lose state */
104 msr |= (0x1ull << (63 - 47));
106 /* Non-machine check are routed to 0x100 with a wakeup cause
107 * encoded in SRR1
109 if (excp != POWERPC_EXCP_MCHECK) {
110 switch (excp) {
111 case POWERPC_EXCP_RESET:
112 msr |= 0x4ull << (63 - 45);
113 break;
114 case POWERPC_EXCP_EXTERNAL:
115 msr |= 0x8ull << (63 - 45);
116 break;
117 case POWERPC_EXCP_DECR:
118 msr |= 0x6ull << (63 - 45);
119 break;
120 case POWERPC_EXCP_SDOOR:
121 msr |= 0x5ull << (63 - 45);
122 break;
123 case POWERPC_EXCP_SDOOR_HV:
124 msr |= 0x3ull << (63 - 45);
125 break;
126 case POWERPC_EXCP_HV_MAINT:
127 msr |= 0xaull << (63 - 45);
128 break;
129 default:
130 cpu_abort(cs, "Unsupported exception %d in Power Save mode\n",
131 excp);
133 excp = POWERPC_EXCP_RESET;
137 /* Exception targetting modifiers
139 * LPES0 is supported on POWER7/8
140 * LPES1 is not supported (old iSeries mode)
142 * On anything else, we behave as if LPES0 is 1
143 * (externals don't alter MSR:HV)
145 * AIL is initialized here but can be cleared by
146 * selected exceptions
148 #if defined(TARGET_PPC64)
149 if (excp_model == POWERPC_EXCP_POWER7 ||
150 excp_model == POWERPC_EXCP_POWER8) {
151 lpes0 = !!(env->spr[SPR_LPCR] & LPCR_LPES0);
152 if (excp_model == POWERPC_EXCP_POWER8) {
153 ail = (env->spr[SPR_LPCR] & LPCR_AIL) >> LPCR_AIL_SHIFT;
154 } else {
155 ail = 0;
157 } else
158 #endif /* defined(TARGET_PPC64) */
160 lpes0 = true;
161 ail = 0;
164 /* Hypervisor emulation assistance interrupt only exists on server
165 * arch 2.05 server or later. We also don't want to generate it if
166 * we don't have HVB in msr_mask (PAPR mode).
168 if (excp == POWERPC_EXCP_HV_EMU
169 #if defined(TARGET_PPC64)
170 && !((env->mmu_model & POWERPC_MMU_64) && (env->msr_mask & MSR_HVB))
171 #endif /* defined(TARGET_PPC64) */
174 excp = POWERPC_EXCP_PROGRAM;
177 switch (excp) {
178 case POWERPC_EXCP_NONE:
179 /* Should never happen */
180 return;
181 case POWERPC_EXCP_CRITICAL: /* Critical input */
182 switch (excp_model) {
183 case POWERPC_EXCP_40x:
184 srr0 = SPR_40x_SRR2;
185 srr1 = SPR_40x_SRR3;
186 break;
187 case POWERPC_EXCP_BOOKE:
188 srr0 = SPR_BOOKE_CSRR0;
189 srr1 = SPR_BOOKE_CSRR1;
190 break;
191 case POWERPC_EXCP_G2:
192 break;
193 default:
194 goto excp_invalid;
196 break;
197 case POWERPC_EXCP_MCHECK: /* Machine check exception */
198 if (msr_me == 0) {
199 /* Machine check exception is not enabled.
200 * Enter checkstop state.
202 fprintf(stderr, "Machine check while not allowed. "
203 "Entering checkstop state\n");
204 if (qemu_log_separate()) {
205 qemu_log("Machine check while not allowed. "
206 "Entering checkstop state\n");
208 cs->halted = 1;
209 cs->interrupt_request |= CPU_INTERRUPT_EXITTB;
211 if (env->msr_mask & MSR_HVB) {
212 /* ISA specifies HV, but can be delivered to guest with HV clear
213 * (e.g., see FWNMI in PAPR).
215 new_msr |= (target_ulong)MSR_HVB;
217 ail = 0;
219 /* machine check exceptions don't have ME set */
220 new_msr &= ~((target_ulong)1 << MSR_ME);
222 /* XXX: should also have something loaded in DAR / DSISR */
223 switch (excp_model) {
224 case POWERPC_EXCP_40x:
225 srr0 = SPR_40x_SRR2;
226 srr1 = SPR_40x_SRR3;
227 break;
228 case POWERPC_EXCP_BOOKE:
229 /* FIXME: choose one or the other based on CPU type */
230 srr0 = SPR_BOOKE_MCSRR0;
231 srr1 = SPR_BOOKE_MCSRR1;
232 asrr0 = SPR_BOOKE_CSRR0;
233 asrr1 = SPR_BOOKE_CSRR1;
234 break;
235 default:
236 break;
238 break;
239 case POWERPC_EXCP_DSI: /* Data storage exception */
240 LOG_EXCP("DSI exception: DSISR=" TARGET_FMT_lx" DAR=" TARGET_FMT_lx
241 "\n", env->spr[SPR_DSISR], env->spr[SPR_DAR]);
242 break;
243 case POWERPC_EXCP_ISI: /* Instruction storage exception */
244 LOG_EXCP("ISI exception: msr=" TARGET_FMT_lx ", nip=" TARGET_FMT_lx
245 "\n", msr, env->nip);
246 msr |= env->error_code;
247 break;
248 case POWERPC_EXCP_EXTERNAL: /* External input */
249 cs = CPU(cpu);
251 if (!lpes0) {
252 new_msr |= (target_ulong)MSR_HVB;
253 new_msr |= env->msr & ((target_ulong)1 << MSR_RI);
254 srr0 = SPR_HSRR0;
255 srr1 = SPR_HSRR1;
257 if (env->mpic_proxy) {
258 /* IACK the IRQ on delivery */
259 env->spr[SPR_BOOKE_EPR] = ldl_phys(cs->as, env->mpic_iack);
261 break;
262 case POWERPC_EXCP_ALIGN: /* Alignment exception */
263 /* Get rS/rD and rA from faulting opcode */
264 /* Note: the opcode fields will not be set properly for a direct
265 * store load/store, but nobody cares as nobody actually uses
266 * direct store segments.
268 env->spr[SPR_DSISR] |= (env->error_code & 0x03FF0000) >> 16;
269 break;
270 case POWERPC_EXCP_PROGRAM: /* Program exception */
271 switch (env->error_code & ~0xF) {
272 case POWERPC_EXCP_FP:
273 if ((msr_fe0 == 0 && msr_fe1 == 0) || msr_fp == 0) {
274 LOG_EXCP("Ignore floating point exception\n");
275 cs->exception_index = POWERPC_EXCP_NONE;
276 env->error_code = 0;
277 return;
280 /* FP exceptions always have NIP pointing to the faulting
281 * instruction, so always use store_next and claim we are
282 * precise in the MSR.
284 msr |= 0x00100000;
285 break;
286 case POWERPC_EXCP_INVAL:
287 LOG_EXCP("Invalid instruction at " TARGET_FMT_lx "\n", env->nip);
288 msr |= 0x00080000;
289 env->spr[SPR_BOOKE_ESR] = ESR_PIL;
290 break;
291 case POWERPC_EXCP_PRIV:
292 msr |= 0x00040000;
293 env->spr[SPR_BOOKE_ESR] = ESR_PPR;
294 break;
295 case POWERPC_EXCP_TRAP:
296 msr |= 0x00020000;
297 env->spr[SPR_BOOKE_ESR] = ESR_PTR;
298 break;
299 default:
300 /* Should never occur */
301 cpu_abort(cs, "Invalid program exception %d. Aborting\n",
302 env->error_code);
303 break;
305 break;
306 case POWERPC_EXCP_SYSCALL: /* System call exception */
307 dump_syscall(env);
308 lev = env->error_code;
310 /* We need to correct the NIP which in this case is supposed
311 * to point to the next instruction
313 env->nip += 4;
315 /* "PAPR mode" built-in hypercall emulation */
316 if ((lev == 1) && cpu->vhyp) {
317 PPCVirtualHypervisorClass *vhc =
318 PPC_VIRTUAL_HYPERVISOR_GET_CLASS(cpu->vhyp);
319 vhc->hypercall(cpu->vhyp, cpu);
320 return;
322 if (lev == 1) {
323 new_msr |= (target_ulong)MSR_HVB;
325 break;
326 case POWERPC_EXCP_FPU: /* Floating-point unavailable exception */
327 case POWERPC_EXCP_APU: /* Auxiliary processor unavailable */
328 case POWERPC_EXCP_DECR: /* Decrementer exception */
329 break;
330 case POWERPC_EXCP_FIT: /* Fixed-interval timer interrupt */
331 /* FIT on 4xx */
332 LOG_EXCP("FIT exception\n");
333 break;
334 case POWERPC_EXCP_WDT: /* Watchdog timer interrupt */
335 LOG_EXCP("WDT exception\n");
336 switch (excp_model) {
337 case POWERPC_EXCP_BOOKE:
338 srr0 = SPR_BOOKE_CSRR0;
339 srr1 = SPR_BOOKE_CSRR1;
340 break;
341 default:
342 break;
344 break;
345 case POWERPC_EXCP_DTLB: /* Data TLB error */
346 case POWERPC_EXCP_ITLB: /* Instruction TLB error */
347 break;
348 case POWERPC_EXCP_DEBUG: /* Debug interrupt */
349 switch (excp_model) {
350 case POWERPC_EXCP_BOOKE:
351 /* FIXME: choose one or the other based on CPU type */
352 srr0 = SPR_BOOKE_DSRR0;
353 srr1 = SPR_BOOKE_DSRR1;
354 asrr0 = SPR_BOOKE_CSRR0;
355 asrr1 = SPR_BOOKE_CSRR1;
356 break;
357 default:
358 break;
360 /* XXX: TODO */
361 cpu_abort(cs, "Debug exception is not implemented yet !\n");
362 break;
363 case POWERPC_EXCP_SPEU: /* SPE/embedded floating-point unavailable */
364 env->spr[SPR_BOOKE_ESR] = ESR_SPV;
365 break;
366 case POWERPC_EXCP_EFPDI: /* Embedded floating-point data interrupt */
367 /* XXX: TODO */
368 cpu_abort(cs, "Embedded floating point data exception "
369 "is not implemented yet !\n");
370 env->spr[SPR_BOOKE_ESR] = ESR_SPV;
371 break;
372 case POWERPC_EXCP_EFPRI: /* Embedded floating-point round interrupt */
373 /* XXX: TODO */
374 cpu_abort(cs, "Embedded floating point round exception "
375 "is not implemented yet !\n");
376 env->spr[SPR_BOOKE_ESR] = ESR_SPV;
377 break;
378 case POWERPC_EXCP_EPERFM: /* Embedded performance monitor interrupt */
379 /* XXX: TODO */
380 cpu_abort(cs,
381 "Performance counter exception is not implemented yet !\n");
382 break;
383 case POWERPC_EXCP_DOORI: /* Embedded doorbell interrupt */
384 break;
385 case POWERPC_EXCP_DOORCI: /* Embedded doorbell critical interrupt */
386 srr0 = SPR_BOOKE_CSRR0;
387 srr1 = SPR_BOOKE_CSRR1;
388 break;
389 case POWERPC_EXCP_RESET: /* System reset exception */
390 /* A power-saving exception sets ME, otherwise it is unchanged */
391 if (msr_pow) {
392 /* indicate that we resumed from power save mode */
393 msr |= 0x10000;
394 new_msr |= ((target_ulong)1 << MSR_ME);
396 if (env->msr_mask & MSR_HVB) {
397 /* ISA specifies HV, but can be delivered to guest with HV clear
398 * (e.g., see FWNMI in PAPR, NMI injection in QEMU).
400 new_msr |= (target_ulong)MSR_HVB;
401 } else {
402 if (msr_pow) {
403 cpu_abort(cs, "Trying to deliver power-saving system reset "
404 "exception %d with no HV support\n", excp);
407 ail = 0;
408 break;
409 case POWERPC_EXCP_DSEG: /* Data segment exception */
410 case POWERPC_EXCP_ISEG: /* Instruction segment exception */
411 case POWERPC_EXCP_TRACE: /* Trace exception */
412 break;
413 case POWERPC_EXCP_HDECR: /* Hypervisor decrementer exception */
414 case POWERPC_EXCP_HDSI: /* Hypervisor data storage exception */
415 case POWERPC_EXCP_HISI: /* Hypervisor instruction storage exception */
416 case POWERPC_EXCP_HDSEG: /* Hypervisor data segment exception */
417 case POWERPC_EXCP_HISEG: /* Hypervisor instruction segment exception */
418 case POWERPC_EXCP_HV_EMU:
419 srr0 = SPR_HSRR0;
420 srr1 = SPR_HSRR1;
421 new_msr |= (target_ulong)MSR_HVB;
422 new_msr |= env->msr & ((target_ulong)1 << MSR_RI);
423 break;
424 case POWERPC_EXCP_VPU: /* Vector unavailable exception */
425 case POWERPC_EXCP_VSXU: /* VSX unavailable exception */
426 case POWERPC_EXCP_FU: /* Facility unavailable exception */
427 #ifdef TARGET_PPC64
428 env->spr[SPR_FSCR] |= ((target_ulong)env->error_code << 56);
429 #endif
430 break;
431 case POWERPC_EXCP_PIT: /* Programmable interval timer interrupt */
432 LOG_EXCP("PIT exception\n");
433 break;
434 case POWERPC_EXCP_IO: /* IO error exception */
435 /* XXX: TODO */
436 cpu_abort(cs, "601 IO error exception is not implemented yet !\n");
437 break;
438 case POWERPC_EXCP_RUNM: /* Run mode exception */
439 /* XXX: TODO */
440 cpu_abort(cs, "601 run mode exception is not implemented yet !\n");
441 break;
442 case POWERPC_EXCP_EMUL: /* Emulation trap exception */
443 /* XXX: TODO */
444 cpu_abort(cs, "602 emulation trap exception "
445 "is not implemented yet !\n");
446 break;
447 case POWERPC_EXCP_IFTLB: /* Instruction fetch TLB error */
448 switch (excp_model) {
449 case POWERPC_EXCP_602:
450 case POWERPC_EXCP_603:
451 case POWERPC_EXCP_603E:
452 case POWERPC_EXCP_G2:
453 goto tlb_miss_tgpr;
454 case POWERPC_EXCP_7x5:
455 goto tlb_miss;
456 case POWERPC_EXCP_74xx:
457 goto tlb_miss_74xx;
458 default:
459 cpu_abort(cs, "Invalid instruction TLB miss exception\n");
460 break;
462 break;
463 case POWERPC_EXCP_DLTLB: /* Data load TLB miss */
464 switch (excp_model) {
465 case POWERPC_EXCP_602:
466 case POWERPC_EXCP_603:
467 case POWERPC_EXCP_603E:
468 case POWERPC_EXCP_G2:
469 goto tlb_miss_tgpr;
470 case POWERPC_EXCP_7x5:
471 goto tlb_miss;
472 case POWERPC_EXCP_74xx:
473 goto tlb_miss_74xx;
474 default:
475 cpu_abort(cs, "Invalid data load TLB miss exception\n");
476 break;
478 break;
479 case POWERPC_EXCP_DSTLB: /* Data store TLB miss */
480 switch (excp_model) {
481 case POWERPC_EXCP_602:
482 case POWERPC_EXCP_603:
483 case POWERPC_EXCP_603E:
484 case POWERPC_EXCP_G2:
485 tlb_miss_tgpr:
486 /* Swap temporary saved registers with GPRs */
487 if (!(new_msr & ((target_ulong)1 << MSR_TGPR))) {
488 new_msr |= (target_ulong)1 << MSR_TGPR;
489 hreg_swap_gpr_tgpr(env);
491 goto tlb_miss;
492 case POWERPC_EXCP_7x5:
493 tlb_miss:
494 #if defined(DEBUG_SOFTWARE_TLB)
495 if (qemu_log_enabled()) {
496 const char *es;
497 target_ulong *miss, *cmp;
498 int en;
500 if (excp == POWERPC_EXCP_IFTLB) {
501 es = "I";
502 en = 'I';
503 miss = &env->spr[SPR_IMISS];
504 cmp = &env->spr[SPR_ICMP];
505 } else {
506 if (excp == POWERPC_EXCP_DLTLB) {
507 es = "DL";
508 } else {
509 es = "DS";
511 en = 'D';
512 miss = &env->spr[SPR_DMISS];
513 cmp = &env->spr[SPR_DCMP];
515 qemu_log("6xx %sTLB miss: %cM " TARGET_FMT_lx " %cC "
516 TARGET_FMT_lx " H1 " TARGET_FMT_lx " H2 "
517 TARGET_FMT_lx " %08x\n", es, en, *miss, en, *cmp,
518 env->spr[SPR_HASH1], env->spr[SPR_HASH2],
519 env->error_code);
521 #endif
522 msr |= env->crf[0] << 28;
523 msr |= env->error_code; /* key, D/I, S/L bits */
524 /* Set way using a LRU mechanism */
525 msr |= ((env->last_way + 1) & (env->nb_ways - 1)) << 17;
526 break;
527 case POWERPC_EXCP_74xx:
528 tlb_miss_74xx:
529 #if defined(DEBUG_SOFTWARE_TLB)
530 if (qemu_log_enabled()) {
531 const char *es;
532 target_ulong *miss, *cmp;
533 int en;
535 if (excp == POWERPC_EXCP_IFTLB) {
536 es = "I";
537 en = 'I';
538 miss = &env->spr[SPR_TLBMISS];
539 cmp = &env->spr[SPR_PTEHI];
540 } else {
541 if (excp == POWERPC_EXCP_DLTLB) {
542 es = "DL";
543 } else {
544 es = "DS";
546 en = 'D';
547 miss = &env->spr[SPR_TLBMISS];
548 cmp = &env->spr[SPR_PTEHI];
550 qemu_log("74xx %sTLB miss: %cM " TARGET_FMT_lx " %cC "
551 TARGET_FMT_lx " %08x\n", es, en, *miss, en, *cmp,
552 env->error_code);
554 #endif
555 msr |= env->error_code; /* key bit */
556 break;
557 default:
558 cpu_abort(cs, "Invalid data store TLB miss exception\n");
559 break;
561 break;
562 case POWERPC_EXCP_FPA: /* Floating-point assist exception */
563 /* XXX: TODO */
564 cpu_abort(cs, "Floating point assist exception "
565 "is not implemented yet !\n");
566 break;
567 case POWERPC_EXCP_DABR: /* Data address breakpoint */
568 /* XXX: TODO */
569 cpu_abort(cs, "DABR exception is not implemented yet !\n");
570 break;
571 case POWERPC_EXCP_IABR: /* Instruction address breakpoint */
572 /* XXX: TODO */
573 cpu_abort(cs, "IABR exception is not implemented yet !\n");
574 break;
575 case POWERPC_EXCP_SMI: /* System management interrupt */
576 /* XXX: TODO */
577 cpu_abort(cs, "SMI exception is not implemented yet !\n");
578 break;
579 case POWERPC_EXCP_THERM: /* Thermal interrupt */
580 /* XXX: TODO */
581 cpu_abort(cs, "Thermal management exception "
582 "is not implemented yet !\n");
583 break;
584 case POWERPC_EXCP_PERFM: /* Embedded performance monitor interrupt */
585 /* XXX: TODO */
586 cpu_abort(cs,
587 "Performance counter exception is not implemented yet !\n");
588 break;
589 case POWERPC_EXCP_VPUA: /* Vector assist exception */
590 /* XXX: TODO */
591 cpu_abort(cs, "VPU assist exception is not implemented yet !\n");
592 break;
593 case POWERPC_EXCP_SOFTP: /* Soft patch exception */
594 /* XXX: TODO */
595 cpu_abort(cs,
596 "970 soft-patch exception is not implemented yet !\n");
597 break;
598 case POWERPC_EXCP_MAINT: /* Maintenance exception */
599 /* XXX: TODO */
600 cpu_abort(cs,
601 "970 maintenance exception is not implemented yet !\n");
602 break;
603 case POWERPC_EXCP_MEXTBR: /* Maskable external breakpoint */
604 /* XXX: TODO */
605 cpu_abort(cs, "Maskable external exception "
606 "is not implemented yet !\n");
607 break;
608 case POWERPC_EXCP_NMEXTBR: /* Non maskable external breakpoint */
609 /* XXX: TODO */
610 cpu_abort(cs, "Non maskable external exception "
611 "is not implemented yet !\n");
612 break;
613 default:
614 excp_invalid:
615 cpu_abort(cs, "Invalid PowerPC exception %d. Aborting\n", excp);
616 break;
619 /* Save PC */
620 env->spr[srr0] = env->nip;
622 /* Save MSR */
623 env->spr[srr1] = msr;
625 /* Sanity check */
626 if (!(env->msr_mask & MSR_HVB)) {
627 if (new_msr & MSR_HVB) {
628 cpu_abort(cs, "Trying to deliver HV exception (MSR) %d with "
629 "no HV support\n", excp);
631 if (srr0 == SPR_HSRR0) {
632 cpu_abort(cs, "Trying to deliver HV exception (HSRR) %d with "
633 "no HV support\n", excp);
637 /* If any alternate SRR register are defined, duplicate saved values */
638 if (asrr0 != -1) {
639 env->spr[asrr0] = env->spr[srr0];
641 if (asrr1 != -1) {
642 env->spr[asrr1] = env->spr[srr1];
645 /* Sort out endianness of interrupt, this differs depending on the
646 * CPU, the HV mode, etc...
648 #ifdef TARGET_PPC64
649 if (excp_model == POWERPC_EXCP_POWER7) {
650 if (!(new_msr & MSR_HVB) && (env->spr[SPR_LPCR] & LPCR_ILE)) {
651 new_msr |= (target_ulong)1 << MSR_LE;
653 } else if (excp_model == POWERPC_EXCP_POWER8) {
654 if (new_msr & MSR_HVB) {
655 if (env->spr[SPR_HID0] & HID0_HILE) {
656 new_msr |= (target_ulong)1 << MSR_LE;
658 } else if (env->spr[SPR_LPCR] & LPCR_ILE) {
659 new_msr |= (target_ulong)1 << MSR_LE;
661 } else if (msr_ile) {
662 new_msr |= (target_ulong)1 << MSR_LE;
664 #else
665 if (msr_ile) {
666 new_msr |= (target_ulong)1 << MSR_LE;
668 #endif
670 /* Jump to handler */
671 vector = env->excp_vectors[excp];
672 if (vector == (target_ulong)-1ULL) {
673 cpu_abort(cs, "Raised an exception without defined vector %d\n",
674 excp);
676 vector |= env->excp_prefix;
678 /* AIL only works if there is no HV transition and we are running with
679 * translations enabled
681 if (!((msr >> MSR_IR) & 1) || !((msr >> MSR_DR) & 1) ||
682 ((new_msr & MSR_HVB) && !(msr & MSR_HVB))) {
683 ail = 0;
685 /* Handle AIL */
686 if (ail) {
687 new_msr |= (1 << MSR_IR) | (1 << MSR_DR);
688 switch(ail) {
689 case AIL_0001_8000:
690 vector |= 0x18000;
691 break;
692 case AIL_C000_0000_0000_4000:
693 vector |= 0xc000000000004000ull;
694 break;
695 default:
696 cpu_abort(cs, "Invalid AIL combination %d\n", ail);
697 break;
701 #if defined(TARGET_PPC64)
702 if (excp_model == POWERPC_EXCP_BOOKE) {
703 if (env->spr[SPR_BOOKE_EPCR] & EPCR_ICM) {
704 /* Cat.64-bit: EPCR.ICM is copied to MSR.CM */
705 new_msr |= (target_ulong)1 << MSR_CM;
706 } else {
707 vector = (uint32_t)vector;
709 } else {
710 if (!msr_isf && !(env->mmu_model & POWERPC_MMU_64)) {
711 vector = (uint32_t)vector;
712 } else {
713 new_msr |= (target_ulong)1 << MSR_SF;
716 #endif
717 /* We don't use hreg_store_msr here as already have treated
718 * any special case that could occur. Just store MSR and update hflags
720 * Note: We *MUST* not use hreg_store_msr() as-is anyway because it
721 * will prevent setting of the HV bit which some exceptions might need
722 * to do.
724 env->msr = new_msr & env->msr_mask;
725 hreg_compute_hflags(env);
726 env->nip = vector;
727 /* Reset exception state */
728 cs->exception_index = POWERPC_EXCP_NONE;
729 env->error_code = 0;
731 /* Reset the reservation */
732 env->reserve_addr = -1;
734 /* Any interrupt is context synchronizing, check if TCG TLB
735 * needs a delayed flush on ppc64
737 check_tlb_flush(env, false);
740 void ppc_cpu_do_interrupt(CPUState *cs)
742 PowerPCCPU *cpu = POWERPC_CPU(cs);
743 CPUPPCState *env = &cpu->env;
745 powerpc_excp(cpu, env->excp_model, cs->exception_index);
748 static void ppc_hw_interrupt(CPUPPCState *env)
750 PowerPCCPU *cpu = ppc_env_get_cpu(env);
751 #if 0
752 CPUState *cs = CPU(cpu);
754 qemu_log_mask(CPU_LOG_INT, "%s: %p pending %08x req %08x me %d ee %d\n",
755 __func__, env, env->pending_interrupts,
756 cs->interrupt_request, (int)msr_me, (int)msr_ee);
757 #endif
758 /* External reset */
759 if (env->pending_interrupts & (1 << PPC_INTERRUPT_RESET)) {
760 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_RESET);
761 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_RESET);
762 return;
764 /* Machine check exception */
765 if (env->pending_interrupts & (1 << PPC_INTERRUPT_MCK)) {
766 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_MCK);
767 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_MCHECK);
768 return;
770 #if 0 /* TODO */
771 /* External debug exception */
772 if (env->pending_interrupts & (1 << PPC_INTERRUPT_DEBUG)) {
773 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_DEBUG);
774 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_DEBUG);
775 return;
777 #endif
778 /* Hypervisor decrementer exception */
779 if (env->pending_interrupts & (1 << PPC_INTERRUPT_HDECR)) {
780 /* LPCR will be clear when not supported so this will work */
781 bool hdice = !!(env->spr[SPR_LPCR] & LPCR_HDICE);
782 if ((msr_ee != 0 || msr_hv == 0) && hdice) {
783 /* HDEC clears on delivery */
784 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_HDECR);
785 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_HDECR);
786 return;
789 /* Extermal interrupt can ignore MSR:EE under some circumstances */
790 if (env->pending_interrupts & (1 << PPC_INTERRUPT_EXT)) {
791 bool lpes0 = !!(env->spr[SPR_LPCR] & LPCR_LPES0);
792 if (msr_ee != 0 || (env->has_hv_mode && msr_hv == 0 && !lpes0)) {
793 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_EXTERNAL);
794 return;
797 if (msr_ce != 0) {
798 /* External critical interrupt */
799 if (env->pending_interrupts & (1 << PPC_INTERRUPT_CEXT)) {
800 /* Taking a critical external interrupt does not clear the external
801 * critical interrupt status
803 #if 0
804 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_CEXT);
805 #endif
806 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_CRITICAL);
807 return;
810 if (msr_ee != 0) {
811 /* Watchdog timer on embedded PowerPC */
812 if (env->pending_interrupts & (1 << PPC_INTERRUPT_WDT)) {
813 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_WDT);
814 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_WDT);
815 return;
817 if (env->pending_interrupts & (1 << PPC_INTERRUPT_CDOORBELL)) {
818 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_CDOORBELL);
819 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_DOORCI);
820 return;
822 /* Fixed interval timer on embedded PowerPC */
823 if (env->pending_interrupts & (1 << PPC_INTERRUPT_FIT)) {
824 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_FIT);
825 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_FIT);
826 return;
828 /* Programmable interval timer on embedded PowerPC */
829 if (env->pending_interrupts & (1 << PPC_INTERRUPT_PIT)) {
830 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_PIT);
831 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_PIT);
832 return;
834 /* Decrementer exception */
835 if (env->pending_interrupts & (1 << PPC_INTERRUPT_DECR)) {
836 if (ppc_decr_clear_on_delivery(env)) {
837 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_DECR);
839 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_DECR);
840 return;
842 if (env->pending_interrupts & (1 << PPC_INTERRUPT_DOORBELL)) {
843 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_DOORBELL);
844 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_DOORI);
845 return;
847 if (env->pending_interrupts & (1 << PPC_INTERRUPT_PERFM)) {
848 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_PERFM);
849 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_PERFM);
850 return;
852 /* Thermal interrupt */
853 if (env->pending_interrupts & (1 << PPC_INTERRUPT_THERM)) {
854 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_THERM);
855 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_THERM);
856 return;
861 void ppc_cpu_do_system_reset(CPUState *cs)
863 PowerPCCPU *cpu = POWERPC_CPU(cs);
864 CPUPPCState *env = &cpu->env;
866 powerpc_excp(cpu, env->excp_model, POWERPC_EXCP_RESET);
868 #endif /* !CONFIG_USER_ONLY */
870 bool ppc_cpu_exec_interrupt(CPUState *cs, int interrupt_request)
872 PowerPCCPU *cpu = POWERPC_CPU(cs);
873 CPUPPCState *env = &cpu->env;
875 if (interrupt_request & CPU_INTERRUPT_HARD) {
876 ppc_hw_interrupt(env);
877 if (env->pending_interrupts == 0) {
878 cs->interrupt_request &= ~CPU_INTERRUPT_HARD;
880 return true;
882 return false;
885 #if defined(DEBUG_OP)
886 static void cpu_dump_rfi(target_ulong RA, target_ulong msr)
888 qemu_log("Return from exception at " TARGET_FMT_lx " with flags "
889 TARGET_FMT_lx "\n", RA, msr);
891 #endif
893 /*****************************************************************************/
894 /* Exceptions processing helpers */
896 void raise_exception_err_ra(CPUPPCState *env, uint32_t exception,
897 uint32_t error_code, uintptr_t raddr)
899 CPUState *cs = CPU(ppc_env_get_cpu(env));
901 cs->exception_index = exception;
902 env->error_code = error_code;
903 cpu_loop_exit_restore(cs, raddr);
906 void raise_exception_err(CPUPPCState *env, uint32_t exception,
907 uint32_t error_code)
909 raise_exception_err_ra(env, exception, error_code, 0);
912 void raise_exception(CPUPPCState *env, uint32_t exception)
914 raise_exception_err_ra(env, exception, 0, 0);
917 void raise_exception_ra(CPUPPCState *env, uint32_t exception,
918 uintptr_t raddr)
920 raise_exception_err_ra(env, exception, 0, raddr);
923 void helper_raise_exception_err(CPUPPCState *env, uint32_t exception,
924 uint32_t error_code)
926 raise_exception_err_ra(env, exception, error_code, 0);
929 void helper_raise_exception(CPUPPCState *env, uint32_t exception)
931 raise_exception_err_ra(env, exception, 0, 0);
934 #if !defined(CONFIG_USER_ONLY)
935 void helper_store_msr(CPUPPCState *env, target_ulong val)
937 uint32_t excp = hreg_store_msr(env, val, 0);
939 if (excp != 0) {
940 CPUState *cs = CPU(ppc_env_get_cpu(env));
941 cs->interrupt_request |= CPU_INTERRUPT_EXITTB;
942 raise_exception(env, excp);
946 #if defined(TARGET_PPC64)
947 void helper_pminsn(CPUPPCState *env, powerpc_pm_insn_t insn)
949 CPUState *cs;
951 cs = CPU(ppc_env_get_cpu(env));
952 cs->halted = 1;
953 env->in_pm_state = true;
955 /* The architecture specifies that HDEC interrupts are
956 * discarded in PM states
958 env->pending_interrupts &= ~(1 << PPC_INTERRUPT_HDECR);
960 /* Technically, nap doesn't set EE, but if we don't set it
961 * then ppc_hw_interrupt() won't deliver. We could add some
962 * other tests there based on LPCR but it's simpler to just
963 * whack EE in. It will be cleared by the 0x100 at wakeup
964 * anyway. It will still be observable by the guest in SRR1
965 * but this doesn't seem to be a problem.
967 env->msr |= (1ull << MSR_EE);
968 raise_exception(env, EXCP_HLT);
970 #endif /* defined(TARGET_PPC64) */
972 static inline void do_rfi(CPUPPCState *env, target_ulong nip, target_ulong msr)
974 CPUState *cs = CPU(ppc_env_get_cpu(env));
976 /* MSR:POW cannot be set by any form of rfi */
977 msr &= ~(1ULL << MSR_POW);
979 #if defined(TARGET_PPC64)
980 /* Switching to 32-bit ? Crop the nip */
981 if (!msr_is_64bit(env, msr)) {
982 nip = (uint32_t)nip;
984 #else
985 nip = (uint32_t)nip;
986 #endif
987 /* XXX: beware: this is false if VLE is supported */
988 env->nip = nip & ~((target_ulong)0x00000003);
989 hreg_store_msr(env, msr, 1);
990 #if defined(DEBUG_OP)
991 cpu_dump_rfi(env->nip, env->msr);
992 #endif
993 /* No need to raise an exception here,
994 * as rfi is always the last insn of a TB
996 cs->interrupt_request |= CPU_INTERRUPT_EXITTB;
998 /* Context synchronizing: check if TCG TLB needs flush */
999 check_tlb_flush(env, false);
1002 void helper_rfi(CPUPPCState *env)
1004 do_rfi(env, env->spr[SPR_SRR0], env->spr[SPR_SRR1] & 0xfffffffful);
1007 #define MSR_BOOK3S_MASK
1008 #if defined(TARGET_PPC64)
1009 void helper_rfid(CPUPPCState *env)
1011 /* The architeture defines a number of rules for which bits
1012 * can change but in practice, we handle this in hreg_store_msr()
1013 * which will be called by do_rfi(), so there is no need to filter
1014 * here
1016 do_rfi(env, env->spr[SPR_SRR0], env->spr[SPR_SRR1]);
1019 void helper_hrfid(CPUPPCState *env)
1021 do_rfi(env, env->spr[SPR_HSRR0], env->spr[SPR_HSRR1]);
1023 #endif
1025 /*****************************************************************************/
1026 /* Embedded PowerPC specific helpers */
1027 void helper_40x_rfci(CPUPPCState *env)
1029 do_rfi(env, env->spr[SPR_40x_SRR2], env->spr[SPR_40x_SRR3]);
1032 void helper_rfci(CPUPPCState *env)
1034 do_rfi(env, env->spr[SPR_BOOKE_CSRR0], env->spr[SPR_BOOKE_CSRR1]);
1037 void helper_rfdi(CPUPPCState *env)
1039 /* FIXME: choose CSRR1 or DSRR1 based on cpu type */
1040 do_rfi(env, env->spr[SPR_BOOKE_DSRR0], env->spr[SPR_BOOKE_DSRR1]);
1043 void helper_rfmci(CPUPPCState *env)
1045 /* FIXME: choose CSRR1 or MCSRR1 based on cpu type */
1046 do_rfi(env, env->spr[SPR_BOOKE_MCSRR0], env->spr[SPR_BOOKE_MCSRR1]);
1048 #endif
1050 void helper_tw(CPUPPCState *env, target_ulong arg1, target_ulong arg2,
1051 uint32_t flags)
1053 if (!likely(!(((int32_t)arg1 < (int32_t)arg2 && (flags & 0x10)) ||
1054 ((int32_t)arg1 > (int32_t)arg2 && (flags & 0x08)) ||
1055 ((int32_t)arg1 == (int32_t)arg2 && (flags & 0x04)) ||
1056 ((uint32_t)arg1 < (uint32_t)arg2 && (flags & 0x02)) ||
1057 ((uint32_t)arg1 > (uint32_t)arg2 && (flags & 0x01))))) {
1058 raise_exception_err_ra(env, POWERPC_EXCP_PROGRAM,
1059 POWERPC_EXCP_TRAP, GETPC());
1063 #if defined(TARGET_PPC64)
1064 void helper_td(CPUPPCState *env, target_ulong arg1, target_ulong arg2,
1065 uint32_t flags)
1067 if (!likely(!(((int64_t)arg1 < (int64_t)arg2 && (flags & 0x10)) ||
1068 ((int64_t)arg1 > (int64_t)arg2 && (flags & 0x08)) ||
1069 ((int64_t)arg1 == (int64_t)arg2 && (flags & 0x04)) ||
1070 ((uint64_t)arg1 < (uint64_t)arg2 && (flags & 0x02)) ||
1071 ((uint64_t)arg1 > (uint64_t)arg2 && (flags & 0x01))))) {
1072 raise_exception_err_ra(env, POWERPC_EXCP_PROGRAM,
1073 POWERPC_EXCP_TRAP, GETPC());
1076 #endif
1078 #if !defined(CONFIG_USER_ONLY)
1079 /*****************************************************************************/
1080 /* PowerPC 601 specific instructions (POWER bridge) */
1082 void helper_rfsvc(CPUPPCState *env)
1084 do_rfi(env, env->lr, env->ctr & 0x0000FFFF);
1087 /* Embedded.Processor Control */
1088 static int dbell2irq(target_ulong rb)
1090 int msg = rb & DBELL_TYPE_MASK;
1091 int irq = -1;
1093 switch (msg) {
1094 case DBELL_TYPE_DBELL:
1095 irq = PPC_INTERRUPT_DOORBELL;
1096 break;
1097 case DBELL_TYPE_DBELL_CRIT:
1098 irq = PPC_INTERRUPT_CDOORBELL;
1099 break;
1100 case DBELL_TYPE_G_DBELL:
1101 case DBELL_TYPE_G_DBELL_CRIT:
1102 case DBELL_TYPE_G_DBELL_MC:
1103 /* XXX implement */
1104 default:
1105 break;
1108 return irq;
1111 void helper_msgclr(CPUPPCState *env, target_ulong rb)
1113 int irq = dbell2irq(rb);
1115 if (irq < 0) {
1116 return;
1119 env->pending_interrupts &= ~(1 << irq);
1122 void helper_msgsnd(target_ulong rb)
1124 int irq = dbell2irq(rb);
1125 int pir = rb & DBELL_PIRTAG_MASK;
1126 CPUState *cs;
1128 if (irq < 0) {
1129 return;
1132 CPU_FOREACH(cs) {
1133 PowerPCCPU *cpu = POWERPC_CPU(cs);
1134 CPUPPCState *cenv = &cpu->env;
1136 if ((rb & DBELL_BRDCAST) || (cenv->spr[SPR_BOOKE_PIR] == pir)) {
1137 cenv->pending_interrupts |= 1 << irq;
1138 cpu_interrupt(cs, CPU_INTERRUPT_HARD);
1142 #endif