2 * This program is free software; you can redistribute it and/or modify
3 * it under the terms of the GNU General Public License, version 2, as
4 * published by the Free Software Foundation.
6 * This program is distributed in the hope that it will be useful,
7 * but WITHOUT ANY WARRANTY; without even the implied warranty of
8 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
9 * GNU General Public License for more details.
11 * You should have received a copy of the GNU General Public License
12 * along with this program; if not, write to the Free Software
13 * Foundation, 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
15 * Copyright IBM Corp. 2007
16 * Copyright 2011 Freescale Semiconductor, Inc.
18 * Authors: Hollis Blanchard <hollisb@us.ibm.com>
21 #include <linux/jiffies.h>
22 #include <linux/hrtimer.h>
23 #include <linux/types.h>
24 #include <linux/string.h>
25 #include <linux/kvm_host.h>
29 #include <asm/byteorder.h>
30 #include <asm/kvm_ppc.h>
31 #include <asm/disassemble.h>
38 #define OP_31_XOP_LWZX 23
39 #define OP_31_XOP_LBZX 87
40 #define OP_31_XOP_STWX 151
41 #define OP_31_XOP_STBX 215
42 #define OP_31_XOP_LBZUX 119
43 #define OP_31_XOP_STBUX 247
44 #define OP_31_XOP_LHZX 279
45 #define OP_31_XOP_LHZUX 311
46 #define OP_31_XOP_MFSPR 339
47 #define OP_31_XOP_LHAX 343
48 #define OP_31_XOP_STHX 407
49 #define OP_31_XOP_STHUX 439
50 #define OP_31_XOP_MTSPR 467
51 #define OP_31_XOP_DCBI 470
52 #define OP_31_XOP_LWBRX 534
53 #define OP_31_XOP_TLBSYNC 566
54 #define OP_31_XOP_STWBRX 662
55 #define OP_31_XOP_LHBRX 790
56 #define OP_31_XOP_STHBRX 918
73 void kvmppc_emulate_dec(struct kvm_vcpu
*vcpu
)
75 unsigned long dec_nsec
;
76 unsigned long long dec_time
;
78 pr_debug("mtDEC: %x\n", vcpu
->arch
.dec
);
79 hrtimer_try_to_cancel(&vcpu
->arch
.dec_timer
);
81 #ifdef CONFIG_PPC_BOOK3S
82 /* mtdec lowers the interrupt line when positive. */
83 kvmppc_core_dequeue_dec(vcpu
);
85 /* POWER4+ triggers a dec interrupt if the value is < 0 */
86 if (vcpu
->arch
.dec
& 0x80000000) {
87 kvmppc_core_queue_dec(vcpu
);
93 /* On BOOKE, DEC = 0 is as good as decrementer not enabled */
94 if (vcpu
->arch
.dec
== 0)
99 * The decrementer ticks at the same rate as the timebase, so
100 * that's how we convert the guest DEC value to the number of
104 dec_time
= vcpu
->arch
.dec
;
106 do_div(dec_time
, tb_ticks_per_usec
);
107 dec_nsec
= do_div(dec_time
, NSEC_PER_SEC
);
108 hrtimer_start(&vcpu
->arch
.dec_timer
,
109 ktime_set(dec_time
, dec_nsec
), HRTIMER_MODE_REL
);
110 vcpu
->arch
.dec_jiffies
= get_tb();
113 u32
kvmppc_get_dec(struct kvm_vcpu
*vcpu
, u64 tb
)
115 u64 jd
= tb
- vcpu
->arch
.dec_jiffies
;
118 if (vcpu
->arch
.dec
< jd
)
122 return vcpu
->arch
.dec
- jd
;
137 * XXX is_bigendian should depend on MMU mapping or MSR[LE]
139 /* XXX Should probably auto-generate instruction decoding for a particular core
140 * from opcode tables in the future. */
141 int kvmppc_emulate_instruction(struct kvm_run
*run
, struct kvm_vcpu
*vcpu
)
143 u32 inst
= kvmppc_get_last_inst(vcpu
);
150 enum emulation_result emulated
= EMULATE_DONE
;
153 /* this default type might be overwritten by subcategories */
154 kvmppc_set_exit_type(vcpu
, EMULATED_INST_EXITS
);
156 pr_debug("Emulating opcode %d / %d\n", get_op(inst
), get_xop(inst
));
158 switch (get_op(inst
)) {
160 #ifdef CONFIG_PPC_BOOK3S
162 kvmppc_core_queue_program(vcpu
, SRR1_PROGTRAP
);
164 kvmppc_core_queue_program(vcpu
,
165 vcpu
->arch
.shared
->esr
| ESR_PTR
);
171 switch (get_xop(inst
)) {
175 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 4, 1);
180 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 1, 1);
183 case OP_31_XOP_LBZUX
:
188 ea
= kvmppc_get_gpr(vcpu
, rb
);
190 ea
+= kvmppc_get_gpr(vcpu
, ra
);
192 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 1, 1);
193 kvmppc_set_gpr(vcpu
, ra
, ea
);
198 emulated
= kvmppc_handle_store(run
, vcpu
,
199 kvmppc_get_gpr(vcpu
, rs
),
205 emulated
= kvmppc_handle_store(run
, vcpu
,
206 kvmppc_get_gpr(vcpu
, rs
),
210 case OP_31_XOP_STBUX
:
215 ea
= kvmppc_get_gpr(vcpu
, rb
);
217 ea
+= kvmppc_get_gpr(vcpu
, ra
);
219 emulated
= kvmppc_handle_store(run
, vcpu
,
220 kvmppc_get_gpr(vcpu
, rs
),
222 kvmppc_set_gpr(vcpu
, rs
, ea
);
227 emulated
= kvmppc_handle_loads(run
, vcpu
, rt
, 2, 1);
232 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 2, 1);
235 case OP_31_XOP_LHZUX
:
240 ea
= kvmppc_get_gpr(vcpu
, rb
);
242 ea
+= kvmppc_get_gpr(vcpu
, ra
);
244 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 2, 1);
245 kvmppc_set_gpr(vcpu
, ra
, ea
);
248 case OP_31_XOP_MFSPR
:
249 sprn
= get_sprn(inst
);
254 kvmppc_set_gpr(vcpu
, rt
, vcpu
->arch
.shared
->srr0
);
257 kvmppc_set_gpr(vcpu
, rt
, vcpu
->arch
.shared
->srr1
);
260 kvmppc_set_gpr(vcpu
, rt
, vcpu
->arch
.pvr
); break;
262 kvmppc_set_gpr(vcpu
, rt
, vcpu
->vcpu_id
); break;
264 kvmppc_set_gpr(vcpu
, rt
, 0); break;
266 /* Note: mftb and TBRL/TBWL are user-accessible, so
267 * the guest can always access the real TB anyways.
268 * In fact, we probably will never see these traps. */
270 kvmppc_set_gpr(vcpu
, rt
, get_tb() >> 32); break;
272 kvmppc_set_gpr(vcpu
, rt
, get_tb()); break;
275 kvmppc_set_gpr(vcpu
, rt
, vcpu
->arch
.shared
->sprg0
);
278 kvmppc_set_gpr(vcpu
, rt
, vcpu
->arch
.shared
->sprg1
);
281 kvmppc_set_gpr(vcpu
, rt
, vcpu
->arch
.shared
->sprg2
);
284 kvmppc_set_gpr(vcpu
, rt
, vcpu
->arch
.shared
->sprg3
);
286 /* Note: SPRG4-7 are user-readable, so we don't get
291 kvmppc_set_gpr(vcpu
, rt
,
292 kvmppc_get_dec(vcpu
, get_tb()));
296 emulated
= kvmppc_core_emulate_mfspr(vcpu
, sprn
, rt
);
297 if (emulated
== EMULATE_FAIL
) {
298 printk("mfspr: unknown spr %x\n", sprn
);
299 kvmppc_set_gpr(vcpu
, rt
, 0);
303 kvmppc_set_exit_type(vcpu
, EMULATED_MFSPR_EXITS
);
311 emulated
= kvmppc_handle_store(run
, vcpu
,
312 kvmppc_get_gpr(vcpu
, rs
),
316 case OP_31_XOP_STHUX
:
321 ea
= kvmppc_get_gpr(vcpu
, rb
);
323 ea
+= kvmppc_get_gpr(vcpu
, ra
);
325 emulated
= kvmppc_handle_store(run
, vcpu
,
326 kvmppc_get_gpr(vcpu
, rs
),
328 kvmppc_set_gpr(vcpu
, ra
, ea
);
331 case OP_31_XOP_MTSPR
:
332 sprn
= get_sprn(inst
);
336 vcpu
->arch
.shared
->srr0
= kvmppc_get_gpr(vcpu
, rs
);
339 vcpu
->arch
.shared
->srr1
= kvmppc_get_gpr(vcpu
, rs
);
342 /* XXX We need to context-switch the timebase for
343 * watchdog and FIT. */
344 case SPRN_TBWL
: break;
345 case SPRN_TBWU
: break;
347 case SPRN_MSSSR0
: break;
350 vcpu
->arch
.dec
= kvmppc_get_gpr(vcpu
, rs
);
351 kvmppc_emulate_dec(vcpu
);
355 vcpu
->arch
.shared
->sprg0
= kvmppc_get_gpr(vcpu
, rs
);
358 vcpu
->arch
.shared
->sprg1
= kvmppc_get_gpr(vcpu
, rs
);
361 vcpu
->arch
.shared
->sprg2
= kvmppc_get_gpr(vcpu
, rs
);
364 vcpu
->arch
.shared
->sprg3
= kvmppc_get_gpr(vcpu
, rs
);
368 emulated
= kvmppc_core_emulate_mtspr(vcpu
, sprn
, rs
);
369 if (emulated
== EMULATE_FAIL
)
370 printk("mtspr: unknown spr %x\n", sprn
);
373 kvmppc_set_exit_type(vcpu
, EMULATED_MTSPR_EXITS
);
377 /* Do nothing. The guest is performing dcbi because
378 * hardware DMA is not snooped by the dcache, but
379 * emulated DMA either goes through the dcache as
380 * normal writes, or the host kernel has handled dcache
384 case OP_31_XOP_LWBRX
:
386 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 4, 0);
389 case OP_31_XOP_TLBSYNC
:
392 case OP_31_XOP_STWBRX
:
397 emulated
= kvmppc_handle_store(run
, vcpu
,
398 kvmppc_get_gpr(vcpu
, rs
),
402 case OP_31_XOP_LHBRX
:
404 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 2, 0);
407 case OP_31_XOP_STHBRX
:
412 emulated
= kvmppc_handle_store(run
, vcpu
,
413 kvmppc_get_gpr(vcpu
, rs
),
418 /* Attempt core-specific emulation below. */
419 emulated
= EMULATE_FAIL
;
425 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 4, 1);
431 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 4, 1);
432 kvmppc_set_gpr(vcpu
, ra
, vcpu
->arch
.paddr_accessed
);
437 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 1, 1);
443 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 1, 1);
444 kvmppc_set_gpr(vcpu
, ra
, vcpu
->arch
.paddr_accessed
);
449 emulated
= kvmppc_handle_store(run
, vcpu
,
450 kvmppc_get_gpr(vcpu
, rs
),
457 emulated
= kvmppc_handle_store(run
, vcpu
,
458 kvmppc_get_gpr(vcpu
, rs
),
460 kvmppc_set_gpr(vcpu
, ra
, vcpu
->arch
.paddr_accessed
);
465 emulated
= kvmppc_handle_store(run
, vcpu
,
466 kvmppc_get_gpr(vcpu
, rs
),
473 emulated
= kvmppc_handle_store(run
, vcpu
,
474 kvmppc_get_gpr(vcpu
, rs
),
476 kvmppc_set_gpr(vcpu
, ra
, vcpu
->arch
.paddr_accessed
);
481 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 2, 1);
487 emulated
= kvmppc_handle_load(run
, vcpu
, rt
, 2, 1);
488 kvmppc_set_gpr(vcpu
, ra
, vcpu
->arch
.paddr_accessed
);
493 emulated
= kvmppc_handle_loads(run
, vcpu
, rt
, 2, 1);
499 emulated
= kvmppc_handle_loads(run
, vcpu
, rt
, 2, 1);
500 kvmppc_set_gpr(vcpu
, ra
, vcpu
->arch
.paddr_accessed
);
505 emulated
= kvmppc_handle_store(run
, vcpu
,
506 kvmppc_get_gpr(vcpu
, rs
),
513 emulated
= kvmppc_handle_store(run
, vcpu
,
514 kvmppc_get_gpr(vcpu
, rs
),
516 kvmppc_set_gpr(vcpu
, ra
, vcpu
->arch
.paddr_accessed
);
520 emulated
= EMULATE_FAIL
;
523 if (emulated
== EMULATE_FAIL
) {
524 emulated
= kvmppc_core_emulate_op(run
, vcpu
, inst
, &advance
);
525 if (emulated
== EMULATE_AGAIN
) {
527 } else if (emulated
== EMULATE_FAIL
) {
529 printk(KERN_ERR
"Couldn't emulate instruction 0x%08x "
530 "(op %d xop %d)\n", inst
, get_op(inst
), get_xop(inst
));
531 kvmppc_core_queue_program(vcpu
, 0);
535 trace_kvm_ppc_instr(inst
, kvmppc_get_pc(vcpu
), emulated
);
537 /* Advance past emulated instruction. */
539 kvmppc_set_pc(vcpu
, kvmppc_get_pc(vcpu
) + 4);