2 * Copyright (c) 1990 The Regents of the University of California.
5 * This code is derived from software contributed to Berkeley by
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 * 3. All advertising materials mentioning features or use of this software
17 * must display the following acknowledgement:
18 * This product includes software developed by the University of
19 * California, Berkeley and its contributors.
20 * 4. Neither the name of the University nor the names of its contributors
21 * may be used to endorse or promote products derived from this software
22 * without specific prior written permission.
24 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
25 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
27 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
28 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
29 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
30 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
31 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
32 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
33 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 * from: @(#)locore.s 7.3 (Berkeley) 5/13/91
37 * $FreeBSD: src/sys/i386/i386/locore.s,v 1.132.2.10 2003/02/03 20:54:49 jhb Exp $
38 * $DragonFly: src/sys/platform/pc32/i386/locore.s,v 1.13 2007/01/08 03:33:42 dillon Exp $
40 * originally from: locore.s, by William F. Jolitz
42 * Substantially rewritten by David Greenman, Rod Grimes,
43 * Bruce Evans, Wolfgang Solfrank, Poul-Henning Kamp
47 #include "opt_bootp.h"
48 #include "opt_nfsroot.h"
50 #include <sys/syscall.h>
51 #include <sys/reboot.h>
53 #include <machine/asmacros.h>
54 #include <machine/cputypes.h>
55 #include <machine/psl.h>
56 #include <machine/pmap.h>
57 #include <machine/specialreg.h>
64 * Note: This version greatly munged to avoid various assembler errors
65 * that may be fixed in newer versions of gas. Perhaps newer versions
66 * will have more pleasant appearance.
70 * PTmap is recursive pagemap at top of virtual address space.
71 * Within PTmap, the page directory can be found (third indirection).
73 .globl PTmap,PTD,PTDpde
74 .set PTmap,(PTDPTDI << PDRSHIFT)
75 .set PTD,PTmap + (PTDPTDI * PAGE_SIZE)
76 .set PTDpde,PTD + (PTDPTDI * PDESIZE)
79 * APTmap, APTD is the alternate recursive pagemap.
80 * It's used when modifying another process's page tables.
82 .globl APTmap,APTD,APTDpde
83 .set APTmap,APTDPTDI << PDRSHIFT
84 .set APTD,APTmap + (APTDPTDI * PAGE_SIZE)
85 .set APTDpde,PTD + (APTDPTDI * PDESIZE)
88 * Compiled KERNBASE location
91 .set kernbase,KERNBASE
97 ALIGN_DATA
/* just to be sure */
100 .space 0x2000 /* space for tmpstk - temporary stack */
103 .globl boothowto,bootdev,bootinfo
105 bootinfo
: .space BOOTINFO_SIZE /* bootinfo buffer space */
107 KERNend
: .long 0 /* phys addr end of kernel (just after bss) */
108 physfree
: .long 0 /* phys addr of next free page */
112 cpu0prvpage
: .long 0 /* relocated version */
114 cpu0pp
: .long 0 /* phys addr cpu0 private pg */
115 cpu0idlestk
: .long 0 /* stack for the idle thread */
118 SMPptpa
: .long 0 /* phys addr SMP page table */
119 SMPpt
: .long 0 /* relocated version */
122 IdlePTD
: .long 0 /* phys addr of kernel PTD */
125 KPTphys
: .long 0 /* PA of kernel page tables */
128 proc0paddr
: .long 0 /* VA of proc 0 address space */
129 p0upa
: .long 0 /* PA of proc0's UPAGES */
131 vm86phystk
: .long 0 /* PA of vm86/bios stack */
133 .globl vm86paddr, vm86pa
134 vm86paddr
: .long 0 /* address of vm86 region */
135 vm86pa
: .long 0 /* phys addr of vm86 region */
138 .globl bdb_exists /* BDE debugger is present */
142 /**********************************************************************
148 #define R(foo) ((foo)-KERNBASE)
150 #define ALLOCPAGES(foo) \
151 movl R
(physfree
), %esi ; \
152 movl $
((foo
)*PAGE_SIZE
), %eax ; \
154 movl
%eax
, R
(physfree
) ; \
156 movl $
((foo
)*PAGE_SIZE
),%ecx ; \
164 * eax = page frame address
165 * ebx = index into page table
166 * ecx = how many pages to map
167 * base = base address of page dir/table
168 * prot = protection bits
170 #define fillkpt(base, prot) \
175 1: movl
%eax
,(%ebx
) ; \
176 addl $PAGE_SIZE
,%eax ;
/* increment physical address */ \
177 addl $
4,%ebx ;
/* next pte */ \
182 * eax = physical address
183 * ecx = how many pages to map
184 * prot = protection bits
186 #define fillkptphys(prot) \
188 shrl $PAGE_SHIFT
, %ebx ; \
189 fillkpt
(R
(KPTphys
), prot
)
192 /**********************************************************************
194 * This is where the bootblocks start us, set the ball rolling...
197 NON_GPROF_ENTRY
(btext
)
200 #ifdef BIOS_STEALS_3K
201 cmpl $
0x0375c339,0x95504
203 cmpl $
0x0375c339,0x96104 /* XXX - debugger signature */
206 movb $
1,R
(bdb_exists
)
209 /* Tell the bios to warmboot next time */
212 /* Set up a real frame in case the double return in newboot is executed. */
216 /* Don't trust what the BIOS gives for eflags. */
221 * Don't trust what the BIOS gives for %fs and %gs. Trust the bootstrap
222 * to set %cs, %ds, %es and %ss.
229 * Clear the bss. Not all boot programs do it, and it is our job anyway.
231 * XXX we don't check that there is memory for our bss and page tables
234 * Note: we must be careful to not overwrite an active gdt or idt. They
235 * inactive from now until we switch to new ones, since we don't load any
236 * more segment registers or permit interrupts until after the switch.
246 call recover_bootinfo
248 /* Get onto a stack that we can trust. */
250 * XXX this step is delayed in case recover_bootinfo needs to return via
251 * the old stack, but it need not be, since recover_bootinfo actually
252 * returns via the old frame.
254 movl $R
(.tmpstk),%esp
258 call create_pagetables
261 * If the CPU has support for VME, turn it on.
263 testl $CPUID_VME
, R
(cpu_feature
)
272 * Adjust as much as possible for paging before enabling paging so that the
273 * adjustments can be traced.
275 call bdb_prepare_paging
278 /* Now enable paging */
279 movl R
(IdlePTD
), %eax
280 movl
%eax
,%cr3
/* load ptd addr into mmu */
281 movl
%cr0,%eax
/* get control word */
282 orl $CR0_PE|CR0_PG
,%eax
/* enable paging */
283 movl
%eax
,%cr0 /* and let's page NOW! */
288 * Complete the adjustments for paging so that we can keep tracing through
289 * initi386() after the low (physical) addresses for the gdt and idt become
292 call bdb_commit_paging
295 pushl $begin
/* jump to high virtualized address */
298 /* now running relocated at KERNBASE where the system is linked to run */
302 * set up the bootstrap stack. The pcb sits at the end of the
305 /* set up bootstrap stack */
306 movl proc0paddr
,%esp
/* location of in-kernel pages */
307 addl $UPAGES
*PAGE_SIZE-PCB_SIZE
,%esp
308 xorl
%eax
,%eax
/* mark end of frames */
310 /*movl proc0paddr,%eax*/
312 movl
%esi
,PCB_CR3
(%esp
)
314 testl $CPUID_PGE
, R
(cpu_feature
)
322 pushl
%esi
/* value of first for init386(first) */
324 call init386
/* wire 386 chip for unix operation */
327 call mi_startup
/* autoconfiguration, mountroot etc */
329 hlt
/* never returns to here */
332 * Signal trampoline, copied to top of user stack
334 NON_GPROF_ENTRY
(sigcode
)
335 call
*SIGF_HANDLER
(%esp
) /* call signal handler */
336 lea SIGF_UC
(%esp
),%eax
/* get ucontext_t */
338 testl $PSL_VM
,UC_EFLAGS
(%eax
)
341 movl $SYS_sigreturn
,%eax
342 pushl
%eax
/* junk to fake return addr. */
343 int $
0x80 /* enter kernel with args */
352 .long esigcode - sigcode
355 /**********************************************************************
357 * Recover the bootinfo passed to us from the boot program
362 * This code is called in different ways depending on what loaded
363 * and started the kernel. This is used to detect how we get the
364 * arguments from the other code and what we do with them.
366 * Old disk boot blocks:
367 * (*btext)(howto, bootdev, cyloffset, esym);
368 * [return address == 0, and can NOT be returned to]
369 * [cyloffset was not supported by the FreeBSD boot code
370 * and always passed in as 0]
371 * [esym is also known as total in the boot code, and
372 * was never properly supported by the FreeBSD boot code]
374 * Old diskless netboot code:
375 * (*btext)(0,0,0,0,&nfsdiskless,0,0,0);
376 * [return address != 0, and can NOT be returned to]
377 * If we are being booted by this code it will NOT work,
378 * so we are just going to halt if we find this case.
380 * New uniform boot code:
381 * (*btext)(howto, bootdev, 0, 0, 0, &bootinfo)
382 * [return address != 0, and can be returned to]
384 * There may seem to be a lot of wasted arguments in here, but
385 * that is so the newer boot code can still load very old kernels
386 * and old boot code can load new kernels.
390 * The old style disk boot blocks fake a frame on the stack and
391 * did an lret to get here. The frame on the stack has a return
398 * We have some form of return address, so this is either the
399 * old diskless netboot code, or the new uniform code. That can
400 * be detected by looking at the 5th argument, if it is 0
401 * we are being booted by the new uniform boot code.
407 * Seems we have been loaded by the old diskless boot code, we
408 * don't stand a chance of running as the diskless structure
409 * changed considerably between the two, so just halt.
414 * We have been loaded by the new uniform boot code.
415 * Let's check the bootinfo version, and if we do not understand
416 * it we return to the loader with a status of 1 to indicate this error
419 movl
28(%ebp
),%ebx
/* &bootinfo.version */
420 movl BI_VERSION
(%ebx
),%eax
421 cmpl $
1,%eax
/* We only understand version 1 */
423 movl $
1,%eax
/* Return status */
426 * XXX this returns to our caller's caller (as is required) since
427 * we didn't set up a frame and our caller did.
433 * If we have a kernelname copy it in
435 movl BI_KERNELNAME
(%ebx
),%esi
437 je
2f
/* No kernelname */
438 movl $MAXPATHLEN
,%ecx
/* Brute force!!! */
439 movl $R
(kernelname
),%edi
440 cmpb $
'/',(%esi
) /* Make sure it starts with a slash */
452 * Determine the size of the boot loader's copy of the bootinfo
453 * struct. This is impossible to do properly because old versions
454 * of the struct don't contain a size field and there are 2 old
455 * versions with the same version number.
457 movl $BI_ENDCOMMON
,%ecx
/* prepare for sizeless version */
458 testl $RB_BOOTINFO
,8(%ebp
) /* bi_size (and bootinfo) valid? */
459 je got_bi_size
/* no, sizeless version */
460 movl BI_SIZE
(%ebx
),%ecx
464 * Copy the common part of the bootinfo struct
467 movl $R
(bootinfo
),%edi
468 cmpl $BOOTINFO_SIZE
,%ecx
469 jbe got_common_bi_size
470 movl $BOOTINFO_SIZE
,%ecx
479 * If we have a nfs_diskless structure copy it in
481 movl BI_NFS_DISKLESS
(%ebx
),%esi
484 movl $R
(nfs_diskless
),%edi
485 movl $NFSDISKLESS_SIZE
,%ecx
489 movl $R
(nfs_diskless_valid
),%edi
495 * The old style disk boot.
496 * (*btext)(howto, bootdev, cyloffset, esym);
497 * Note that the newer boot code just falls into here to pick
498 * up howto and bootdev, cyloffset and esym are no longer used
502 movl
%eax
,R
(boothowto
)
509 /**********************************************************************
511 * Identify the CPU and initialize anything special about it
516 /* Try to toggle alignment check flag; does not exist on 386. */
533 /* NexGen CPU does not have aligment check flag. */
547 movl $CPU_NX586
,R
(cpu
)
548 movl $
0x4778654e,R
(cpu_vendor
) # store vendor string
549 movl $
0x72446e65,R
(cpu_vendor+
4)
550 movl $
0x6e657669,R
(cpu_vendor+
8)
551 movl $
0,R
(cpu_vendor+
12)
554 try486
: /* Try to toggle identification flag; does not exist on early 486s. */
574 * Cyrix CPUs do not change the undefined flags following
575 * execution of the divide instruction which divides 5 by 2.
577 * Note: CPUID is enabled on M2, so it passes another way.
587 jmp
3f
/* You may use Intel CPU. */
592 * IBM Bluelighting CPU also doesn't change the undefined flags.
593 * Because IBM doesn't disclose the information for Bluelighting
594 * CPU, we couldn't distinguish it from Cyrix's (including IBM
595 * brand of Cyrix CPUs).
597 movl $
0x69727943,R
(cpu_vendor
) # store vendor string
598 movl $
0x736e4978,R
(cpu_vendor+
4)
599 movl $
0x64616574,R
(cpu_vendor+
8)
602 trycpuid
: /* Use the `cpuid' instruction. */
605 movl
%eax
,R
(cpu_high
) # highest capability
606 movl
%ebx
,R
(cpu_vendor
) # store vendor string
607 movl
%edx
,R
(cpu_vendor+
4)
608 movl
%ecx
,R
(cpu_vendor+
8)
609 movb $
0,R
(cpu_vendor+
12)
613 movl
%eax
,R
(cpu_id
) # store cpu_id
614 movl
%ebx
,R
(cpu_procinfo
) # store cpu_procinfo
615 movl
%edx
,R
(cpu_feature
) # store cpu_feature
616 movl
%ecx
,R
(cpu_feature2
) # store cpu_feature2
617 rorl $
8,%eax
# extract family type
622 /* less than Pentium; must be 486 */
632 /* Greater than Pentium...call it a Pentium Pro */
638 /**********************************************************************
640 * Create the first page directory and its page tables.
646 /* Find end of kernel image (rounded up to a page boundary). */
649 /* Include symbols, if any. */
650 movl R
(bootinfo+BI_ESYMTAB
),%edi
655 addl
%edi
,R
(bootinfo+BI_SYMTAB
)
656 addl
%edi
,R
(bootinfo+BI_ESYMTAB
)
659 /* If we are told where the end of the kernel space is, believe it. */
660 movl R
(bootinfo+BI_KERNEND
),%edi
667 andl $~PAGE_MASK
,%esi
668 movl
%esi
,R
(KERNend
) /* save end of kernel */
669 movl
%esi
,R
(physfree
) /* next free page is at end of kernel */
672 /* Allocate Kernel Page Tables */
676 /* Allocate Page Table Directory */
680 /* Allocate UPAGES */
684 movl
%esi
, R
(proc0paddr
)
686 ALLOCPAGES
(1) /* vm86/bios stack */
687 movl
%esi
,R
(vm86phystk
)
689 ALLOCPAGES
(3) /* pgtable + ext + IOPAGES */
692 movl
%esi
, R
(vm86paddr
)
694 /* Allocate cpu0's mdglobaldata */
695 ALLOCPAGES
(MDGLOBALDATA_BASEALLOC_PAGES
)
699 movl
%esi
, R
(cpu0prvpage
) /* relocated to KVM space */
702 /* Allocate cpu0's idle stack */
704 movl
%esi
,R
(cpu0idlestk
)
706 /* Allocate SMP page table page */
710 movl
%esi
, R
(SMPpt
) /* relocated to KVM space */
712 /* Map read-only from zero to the end of the kernel text section */
715 /* If the debugger is present, actually map everything read-write. */
716 cmpl $
0,R
(bdb_exists
)
722 testl $CPUID_PGE
, R
(cpu_feature
)
727 2: movl $R
(etext
),%ecx
729 shrl $PAGE_SHIFT
,%ecx
732 /* Map read-write, data, bss and symbols */
734 addl $PAGE_MASK
, %eax
735 andl $~PAGE_MASK
, %eax
739 testl $CPUID_PGE
, R
(cpu_feature
)
744 1: movl R
(KERNend
),%ecx
746 shrl $PAGE_SHIFT
,%ecx
749 /* Map page directory. */
750 movl R
(IdlePTD
), %eax
754 /* Map proc0's UPAGES in the physical way ... */
760 movl $ISA_HOLE_START
, %eax
761 movl $ISA_HOLE_LENGTH
>>PAGE_SHIFT
, %ecx
764 /* Map space for the vm86 region */
765 movl R
(vm86phystk
), %eax
769 /* Map page 0 into the vm86 page table */
773 fillkpt
(R
(vm86pa
), $PG_RW|PG_U
)
775 /* ...likewise for the ISA hole */
776 movl $ISA_HOLE_START
, %eax
777 movl $ISA_HOLE_START
>>PAGE_SHIFT
, %ebx
778 movl $ISA_HOLE_LENGTH
>>PAGE_SHIFT
, %ecx
779 fillkpt
(R
(vm86pa
), $PG_RW|PG_U
)
782 /* Map cpu0's mdglobaldata into global kmem (N pages @ cpu0pp) */
784 movl $MDGLOBALDATA_BASEALLOC_PAGES
, %ecx
788 /* Map SMP page table page into global kmem FWIW */
789 movl R
(SMPptpa
), %eax
793 /* Map the private page into the SMP page table */
795 movl $
0, %ebx
/* pte offset = 0 */
796 /* N private pages coming right up */
797 movl $MDGLOBALDATA_BASEALLOC_PAGES
, %ecx
798 fillkpt
(R
(SMPptpa
), $PG_RW
)
800 /* Map the cpu0's idle thread stack */
801 movl R
(cpu0idlestk
), %eax
802 movl $PS_IDLESTACK_PAGE
, %ebx
804 fillkpt
(R
(SMPptpa
), $PG_RW
)
806 /* ... and put the page table table in the pde. */
807 movl R
(SMPptpa
), %eax
810 fillkpt
(R
(IdlePTD
), $PG_RW
)
812 /* Fakeup VA for the local apic to allow early traps. */
815 movl $
(NPTEPG-
1), %ebx
/* pte offset = NTEPG-1 */
816 movl $
1, %ecx
/* one private pt coming right up */
817 fillkpt
(R
(SMPptpa
), $PG_RW
)
820 /* Initialize mp lock to allow early traps */
824 /* install a pde for temporary double map of bottom of VA */
825 movl R
(KPTphys
), %eax
828 fillkpt
(R
(IdlePTD
), $PG_RW
)
830 /* install pde's for pt's */
831 movl R
(KPTphys
), %eax
834 fillkpt
(R
(IdlePTD
), $PG_RW
)
836 /* install a pde recursively mapping page directory as a page table */
837 movl R
(IdlePTD
), %eax
840 fillkpt
(R
(IdlePTD
), $PG_RW
)
846 cmpl $
0,R
(bdb_exists
)
847 je bdb_prepare_paging_exit
852 * Copy and convert debugger entries from the bootstrap gdt and idt
853 * to the kernel gdt and idt. Everything is still in low memory.
854 * Tracing continues to work after paging is enabled because the
855 * low memory addresses remain valid until everything is relocated.
856 * However, tracing through the setidt() that initializes the trace
860 movl
2(%esp
),%esi
/* base address of bootstrap gdt */
862 movl
%edi
,2(%esp
) /* prepare to load kernel gdt */
867 movl $R
(gdt
),-8+2(%edi
) /* adjust gdt self-ptr */
868 movb $
0x92,-8+5(%edi
)
872 movl
2(%esp
),%esi
/* base address of current idt */
873 movl
8+4(%esi
),%eax
/* convert dbg descriptor to ... */
875 movl
%eax
,R
(bdb_dbg_ljmp+
1) /* ... immediate offset ... */
877 movw
%ax
,R
(bdb_dbg_ljmp+
5) /* ... and selector for ljmp */
878 movl
24+4(%esi
),%eax
/* same for bpt descriptor */
880 movl
%eax
,R
(bdb_bpt_ljmp+
1)
882 movw
%ax
,R
(bdb_bpt_ljmp+
5)
884 movl
%edi
,2(%esp
) /* prepare to load kernel idt */
893 bdb_prepare_paging_exit
:
896 /* Relocate debugger gdt entries and gdt and idt pointers. */
899 je bdb_commit_paging_exit
901 movl $_gdt+
8*9,%eax
/* adjust slots 9-17 */
904 movb $KERNBASE
>>24,7(%eax
) /* top byte of base addresses, was 0, */
905 addl $
8,%eax
/* now KERNBASE>>24 */
910 addl $KERNBASE
,2(%esp
)
913 addl $KERNBASE
,2(%esp
)
919 bdb_commit_paging_exit
:
922 #endif /* BDE_DEBUGGER */