Add operations to qlist to allow it to be used as a stack
[qemu.git] / cpu-exec.c
blob2c0765c7d6cbe3c1e52596f6982053fed9ff0731
1 /*
2 * i386 emulator main execution loop
4 * Copyright (c) 2003-2005 Fabrice Bellard
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
19 #include "config.h"
20 #include "exec.h"
21 #include "disas.h"
22 #include "tcg.h"
23 #include "kvm.h"
25 #if !defined(CONFIG_SOFTMMU)
26 #undef EAX
27 #undef ECX
28 #undef EDX
29 #undef EBX
30 #undef ESP
31 #undef EBP
32 #undef ESI
33 #undef EDI
34 #undef EIP
35 #include <signal.h>
36 #ifdef __linux__
37 #include <sys/ucontext.h>
38 #endif
39 #endif
41 #if defined(__sparc__) && !defined(CONFIG_SOLARIS)
42 // Work around ugly bugs in glibc that mangle global register contents
43 #undef env
44 #define env cpu_single_env
45 #endif
47 int tb_invalidated_flag;
49 //#define CONFIG_DEBUG_EXEC
50 //#define DEBUG_SIGNAL
52 int qemu_cpu_has_work(CPUState *env)
54 return cpu_has_work(env);
57 void cpu_loop_exit(void)
59 /* NOTE: the register at this point must be saved by hand because
60 longjmp restore them */
61 regs_to_env();
62 longjmp(env->jmp_env, 1);
65 /* exit the current TB from a signal handler. The host registers are
66 restored in a state compatible with the CPU emulator
68 void cpu_resume_from_signal(CPUState *env1, void *puc)
70 #if !defined(CONFIG_SOFTMMU)
71 #ifdef __linux__
72 struct ucontext *uc = puc;
73 #elif defined(__OpenBSD__)
74 struct sigcontext *uc = puc;
75 #endif
76 #endif
78 env = env1;
80 /* XXX: restore cpu registers saved in host registers */
82 #if !defined(CONFIG_SOFTMMU)
83 if (puc) {
84 /* XXX: use siglongjmp ? */
85 #ifdef __linux__
86 sigprocmask(SIG_SETMASK, &uc->uc_sigmask, NULL);
87 #elif defined(__OpenBSD__)
88 sigprocmask(SIG_SETMASK, &uc->sc_mask, NULL);
89 #endif
91 #endif
92 env->exception_index = -1;
93 longjmp(env->jmp_env, 1);
96 /* Execute the code without caching the generated code. An interpreter
97 could be used if available. */
98 static void cpu_exec_nocache(int max_cycles, TranslationBlock *orig_tb)
100 unsigned long next_tb;
101 TranslationBlock *tb;
103 /* Should never happen.
104 We only end up here when an existing TB is too long. */
105 if (max_cycles > CF_COUNT_MASK)
106 max_cycles = CF_COUNT_MASK;
108 tb = tb_gen_code(env, orig_tb->pc, orig_tb->cs_base, orig_tb->flags,
109 max_cycles);
110 env->current_tb = tb;
111 /* execute the generated code */
112 next_tb = tcg_qemu_tb_exec(tb->tc_ptr);
114 if ((next_tb & 3) == 2) {
115 /* Restore PC. This may happen if async event occurs before
116 the TB starts executing. */
117 cpu_pc_from_tb(env, tb);
119 tb_phys_invalidate(tb, -1);
120 tb_free(tb);
123 static TranslationBlock *tb_find_slow(target_ulong pc,
124 target_ulong cs_base,
125 uint64_t flags)
127 TranslationBlock *tb, **ptb1;
128 unsigned int h;
129 target_ulong phys_pc, phys_page1, phys_page2, virt_page2;
131 tb_invalidated_flag = 0;
133 regs_to_env(); /* XXX: do it just before cpu_gen_code() */
135 /* find translated block using physical mappings */
136 phys_pc = get_phys_addr_code(env, pc);
137 phys_page1 = phys_pc & TARGET_PAGE_MASK;
138 phys_page2 = -1;
139 h = tb_phys_hash_func(phys_pc);
140 ptb1 = &tb_phys_hash[h];
141 for(;;) {
142 tb = *ptb1;
143 if (!tb)
144 goto not_found;
145 if (tb->pc == pc &&
146 tb->page_addr[0] == phys_page1 &&
147 tb->cs_base == cs_base &&
148 tb->flags == flags) {
149 /* check next page if needed */
150 if (tb->page_addr[1] != -1) {
151 virt_page2 = (pc & TARGET_PAGE_MASK) +
152 TARGET_PAGE_SIZE;
153 phys_page2 = get_phys_addr_code(env, virt_page2);
154 if (tb->page_addr[1] == phys_page2)
155 goto found;
156 } else {
157 goto found;
160 ptb1 = &tb->phys_hash_next;
162 not_found:
163 /* if no translated code available, then translate it now */
164 tb = tb_gen_code(env, pc, cs_base, flags, 0);
166 found:
167 /* we add the TB in the virtual pc hash table */
168 env->tb_jmp_cache[tb_jmp_cache_hash_func(pc)] = tb;
169 return tb;
172 static inline TranslationBlock *tb_find_fast(void)
174 TranslationBlock *tb;
175 target_ulong cs_base, pc;
176 int flags;
178 /* we record a subset of the CPU state. It will
179 always be the same before a given translated block
180 is executed. */
181 cpu_get_tb_cpu_state(env, &pc, &cs_base, &flags);
182 tb = env->tb_jmp_cache[tb_jmp_cache_hash_func(pc)];
183 if (unlikely(!tb || tb->pc != pc || tb->cs_base != cs_base ||
184 tb->flags != flags)) {
185 tb = tb_find_slow(pc, cs_base, flags);
187 return tb;
190 static CPUDebugExcpHandler *debug_excp_handler;
192 CPUDebugExcpHandler *cpu_set_debug_excp_handler(CPUDebugExcpHandler *handler)
194 CPUDebugExcpHandler *old_handler = debug_excp_handler;
196 debug_excp_handler = handler;
197 return old_handler;
200 static void cpu_handle_debug_exception(CPUState *env)
202 CPUWatchpoint *wp;
204 if (!env->watchpoint_hit)
205 QTAILQ_FOREACH(wp, &env->watchpoints, entry)
206 wp->flags &= ~BP_WATCHPOINT_HIT;
208 if (debug_excp_handler)
209 debug_excp_handler(env);
212 /* main execution loop */
214 int cpu_exec(CPUState *env1)
216 #define DECLARE_HOST_REGS 1
217 #include "hostregs_helper.h"
218 int ret, interrupt_request;
219 TranslationBlock *tb;
220 uint8_t *tc_ptr;
221 unsigned long next_tb;
223 if (cpu_halted(env1) == EXCP_HALTED)
224 return EXCP_HALTED;
226 cpu_single_env = env1;
228 /* first we save global registers */
229 #define SAVE_HOST_REGS 1
230 #include "hostregs_helper.h"
231 env = env1;
233 env_to_regs();
234 #if defined(TARGET_I386)
235 /* put eflags in CPU temporary format */
236 CC_SRC = env->eflags & (CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
237 DF = 1 - (2 * ((env->eflags >> 10) & 1));
238 CC_OP = CC_OP_EFLAGS;
239 env->eflags &= ~(DF_MASK | CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
240 #elif defined(TARGET_SPARC)
241 #elif defined(TARGET_M68K)
242 env->cc_op = CC_OP_FLAGS;
243 env->cc_dest = env->sr & 0xf;
244 env->cc_x = (env->sr >> 4) & 1;
245 #elif defined(TARGET_ALPHA)
246 #elif defined(TARGET_ARM)
247 #elif defined(TARGET_PPC)
248 #elif defined(TARGET_MICROBLAZE)
249 #elif defined(TARGET_MIPS)
250 #elif defined(TARGET_SH4)
251 #elif defined(TARGET_CRIS)
252 /* XXXXX */
253 #else
254 #error unsupported target CPU
255 #endif
256 env->exception_index = -1;
258 /* prepare setjmp context for exception handling */
259 for(;;) {
260 if (setjmp(env->jmp_env) == 0) {
261 #if defined(__sparc__) && !defined(CONFIG_SOLARIS)
262 #undef env
263 env = cpu_single_env;
264 #define env cpu_single_env
265 #endif
266 env->current_tb = NULL;
267 /* if an exception is pending, we execute it here */
268 if (env->exception_index >= 0) {
269 if (env->exception_index >= EXCP_INTERRUPT) {
270 /* exit request from the cpu execution loop */
271 ret = env->exception_index;
272 if (ret == EXCP_DEBUG)
273 cpu_handle_debug_exception(env);
274 break;
275 } else {
276 #if defined(CONFIG_USER_ONLY)
277 /* if user mode only, we simulate a fake exception
278 which will be handled outside the cpu execution
279 loop */
280 #if defined(TARGET_I386)
281 do_interrupt_user(env->exception_index,
282 env->exception_is_int,
283 env->error_code,
284 env->exception_next_eip);
285 /* successfully delivered */
286 env->old_exception = -1;
287 #endif
288 ret = env->exception_index;
289 break;
290 #else
291 #if defined(TARGET_I386)
292 /* simulate a real cpu exception. On i386, it can
293 trigger new exceptions, but we do not handle
294 double or triple faults yet. */
295 do_interrupt(env->exception_index,
296 env->exception_is_int,
297 env->error_code,
298 env->exception_next_eip, 0);
299 /* successfully delivered */
300 env->old_exception = -1;
301 #elif defined(TARGET_PPC)
302 do_interrupt(env);
303 #elif defined(TARGET_MICROBLAZE)
304 do_interrupt(env);
305 #elif defined(TARGET_MIPS)
306 do_interrupt(env);
307 #elif defined(TARGET_SPARC)
308 do_interrupt(env);
309 #elif defined(TARGET_ARM)
310 do_interrupt(env);
311 #elif defined(TARGET_SH4)
312 do_interrupt(env);
313 #elif defined(TARGET_ALPHA)
314 do_interrupt(env);
315 #elif defined(TARGET_CRIS)
316 do_interrupt(env);
317 #elif defined(TARGET_M68K)
318 do_interrupt(0);
319 #endif
320 #endif
322 env->exception_index = -1;
325 if (kvm_enabled()) {
326 kvm_cpu_exec(env);
327 longjmp(env->jmp_env, 1);
330 next_tb = 0; /* force lookup of first TB */
331 for(;;) {
332 interrupt_request = env->interrupt_request;
333 if (unlikely(interrupt_request)) {
334 if (unlikely(env->singlestep_enabled & SSTEP_NOIRQ)) {
335 /* Mask out external interrupts for this step. */
336 interrupt_request &= ~(CPU_INTERRUPT_HARD |
337 CPU_INTERRUPT_FIQ |
338 CPU_INTERRUPT_SMI |
339 CPU_INTERRUPT_NMI);
341 if (interrupt_request & CPU_INTERRUPT_DEBUG) {
342 env->interrupt_request &= ~CPU_INTERRUPT_DEBUG;
343 env->exception_index = EXCP_DEBUG;
344 cpu_loop_exit();
346 #if defined(TARGET_ARM) || defined(TARGET_SPARC) || defined(TARGET_MIPS) || \
347 defined(TARGET_PPC) || defined(TARGET_ALPHA) || defined(TARGET_CRIS) || \
348 defined(TARGET_MICROBLAZE)
349 if (interrupt_request & CPU_INTERRUPT_HALT) {
350 env->interrupt_request &= ~CPU_INTERRUPT_HALT;
351 env->halted = 1;
352 env->exception_index = EXCP_HLT;
353 cpu_loop_exit();
355 #endif
356 #if defined(TARGET_I386)
357 if (interrupt_request & CPU_INTERRUPT_INIT) {
358 svm_check_intercept(SVM_EXIT_INIT);
359 do_cpu_init(env);
360 env->exception_index = EXCP_HALTED;
361 cpu_loop_exit();
362 } else if (interrupt_request & CPU_INTERRUPT_SIPI) {
363 do_cpu_sipi(env);
364 } else if (env->hflags2 & HF2_GIF_MASK) {
365 if ((interrupt_request & CPU_INTERRUPT_SMI) &&
366 !(env->hflags & HF_SMM_MASK)) {
367 svm_check_intercept(SVM_EXIT_SMI);
368 env->interrupt_request &= ~CPU_INTERRUPT_SMI;
369 do_smm_enter();
370 next_tb = 0;
371 } else if ((interrupt_request & CPU_INTERRUPT_NMI) &&
372 !(env->hflags2 & HF2_NMI_MASK)) {
373 env->interrupt_request &= ~CPU_INTERRUPT_NMI;
374 env->hflags2 |= HF2_NMI_MASK;
375 do_interrupt(EXCP02_NMI, 0, 0, 0, 1);
376 next_tb = 0;
377 } else if (interrupt_request & CPU_INTERRUPT_MCE) {
378 env->interrupt_request &= ~CPU_INTERRUPT_MCE;
379 do_interrupt(EXCP12_MCHK, 0, 0, 0, 0);
380 next_tb = 0;
381 } else if ((interrupt_request & CPU_INTERRUPT_HARD) &&
382 (((env->hflags2 & HF2_VINTR_MASK) &&
383 (env->hflags2 & HF2_HIF_MASK)) ||
384 (!(env->hflags2 & HF2_VINTR_MASK) &&
385 (env->eflags & IF_MASK &&
386 !(env->hflags & HF_INHIBIT_IRQ_MASK))))) {
387 int intno;
388 svm_check_intercept(SVM_EXIT_INTR);
389 env->interrupt_request &= ~(CPU_INTERRUPT_HARD | CPU_INTERRUPT_VIRQ);
390 intno = cpu_get_pic_interrupt(env);
391 qemu_log_mask(CPU_LOG_TB_IN_ASM, "Servicing hardware INT=0x%02x\n", intno);
392 #if defined(__sparc__) && !defined(CONFIG_SOLARIS)
393 #undef env
394 env = cpu_single_env;
395 #define env cpu_single_env
396 #endif
397 do_interrupt(intno, 0, 0, 0, 1);
398 /* ensure that no TB jump will be modified as
399 the program flow was changed */
400 next_tb = 0;
401 #if !defined(CONFIG_USER_ONLY)
402 } else if ((interrupt_request & CPU_INTERRUPT_VIRQ) &&
403 (env->eflags & IF_MASK) &&
404 !(env->hflags & HF_INHIBIT_IRQ_MASK)) {
405 int intno;
406 /* FIXME: this should respect TPR */
407 svm_check_intercept(SVM_EXIT_VINTR);
408 intno = ldl_phys(env->vm_vmcb + offsetof(struct vmcb, control.int_vector));
409 qemu_log_mask(CPU_LOG_TB_IN_ASM, "Servicing virtual hardware INT=0x%02x\n", intno);
410 do_interrupt(intno, 0, 0, 0, 1);
411 env->interrupt_request &= ~CPU_INTERRUPT_VIRQ;
412 next_tb = 0;
413 #endif
416 #elif defined(TARGET_PPC)
417 #if 0
418 if ((interrupt_request & CPU_INTERRUPT_RESET)) {
419 cpu_reset(env);
421 #endif
422 if (interrupt_request & CPU_INTERRUPT_HARD) {
423 ppc_hw_interrupt(env);
424 if (env->pending_interrupts == 0)
425 env->interrupt_request &= ~CPU_INTERRUPT_HARD;
426 next_tb = 0;
428 #elif defined(TARGET_MICROBLAZE)
429 if ((interrupt_request & CPU_INTERRUPT_HARD)
430 && (env->sregs[SR_MSR] & MSR_IE)
431 && !(env->sregs[SR_MSR] & (MSR_EIP | MSR_BIP))
432 && !(env->iflags & (D_FLAG | IMM_FLAG))) {
433 env->exception_index = EXCP_IRQ;
434 do_interrupt(env);
435 next_tb = 0;
437 #elif defined(TARGET_MIPS)
438 if ((interrupt_request & CPU_INTERRUPT_HARD) &&
439 (env->CP0_Status & env->CP0_Cause & CP0Ca_IP_mask) &&
440 (env->CP0_Status & (1 << CP0St_IE)) &&
441 !(env->CP0_Status & (1 << CP0St_EXL)) &&
442 !(env->CP0_Status & (1 << CP0St_ERL)) &&
443 !(env->hflags & MIPS_HFLAG_DM)) {
444 /* Raise it */
445 env->exception_index = EXCP_EXT_INTERRUPT;
446 env->error_code = 0;
447 do_interrupt(env);
448 next_tb = 0;
450 #elif defined(TARGET_SPARC)
451 if ((interrupt_request & CPU_INTERRUPT_HARD) &&
452 cpu_interrupts_enabled(env)) {
453 int pil = env->interrupt_index & 15;
454 int type = env->interrupt_index & 0xf0;
456 if (((type == TT_EXTINT) &&
457 (pil == 15 || pil > env->psrpil)) ||
458 type != TT_EXTINT) {
459 env->interrupt_request &= ~CPU_INTERRUPT_HARD;
460 env->exception_index = env->interrupt_index;
461 do_interrupt(env);
462 env->interrupt_index = 0;
463 next_tb = 0;
465 } else if (interrupt_request & CPU_INTERRUPT_TIMER) {
466 //do_interrupt(0, 0, 0, 0, 0);
467 env->interrupt_request &= ~CPU_INTERRUPT_TIMER;
469 #elif defined(TARGET_ARM)
470 if (interrupt_request & CPU_INTERRUPT_FIQ
471 && !(env->uncached_cpsr & CPSR_F)) {
472 env->exception_index = EXCP_FIQ;
473 do_interrupt(env);
474 next_tb = 0;
476 /* ARMv7-M interrupt return works by loading a magic value
477 into the PC. On real hardware the load causes the
478 return to occur. The qemu implementation performs the
479 jump normally, then does the exception return when the
480 CPU tries to execute code at the magic address.
481 This will cause the magic PC value to be pushed to
482 the stack if an interrupt occured at the wrong time.
483 We avoid this by disabling interrupts when
484 pc contains a magic address. */
485 if (interrupt_request & CPU_INTERRUPT_HARD
486 && ((IS_M(env) && env->regs[15] < 0xfffffff0)
487 || !(env->uncached_cpsr & CPSR_I))) {
488 env->exception_index = EXCP_IRQ;
489 do_interrupt(env);
490 next_tb = 0;
492 #elif defined(TARGET_SH4)
493 if (interrupt_request & CPU_INTERRUPT_HARD) {
494 do_interrupt(env);
495 next_tb = 0;
497 #elif defined(TARGET_ALPHA)
498 if (interrupt_request & CPU_INTERRUPT_HARD) {
499 do_interrupt(env);
500 next_tb = 0;
502 #elif defined(TARGET_CRIS)
503 if (interrupt_request & CPU_INTERRUPT_HARD
504 && (env->pregs[PR_CCS] & I_FLAG)) {
505 env->exception_index = EXCP_IRQ;
506 do_interrupt(env);
507 next_tb = 0;
509 if (interrupt_request & CPU_INTERRUPT_NMI
510 && (env->pregs[PR_CCS] & M_FLAG)) {
511 env->exception_index = EXCP_NMI;
512 do_interrupt(env);
513 next_tb = 0;
515 #elif defined(TARGET_M68K)
516 if (interrupt_request & CPU_INTERRUPT_HARD
517 && ((env->sr & SR_I) >> SR_I_SHIFT)
518 < env->pending_level) {
519 /* Real hardware gets the interrupt vector via an
520 IACK cycle at this point. Current emulated
521 hardware doesn't rely on this, so we
522 provide/save the vector when the interrupt is
523 first signalled. */
524 env->exception_index = env->pending_vector;
525 do_interrupt(1);
526 next_tb = 0;
528 #endif
529 /* Don't use the cached interupt_request value,
530 do_interrupt may have updated the EXITTB flag. */
531 if (env->interrupt_request & CPU_INTERRUPT_EXITTB) {
532 env->interrupt_request &= ~CPU_INTERRUPT_EXITTB;
533 /* ensure that no TB jump will be modified as
534 the program flow was changed */
535 next_tb = 0;
538 if (unlikely(env->exit_request)) {
539 env->exit_request = 0;
540 env->exception_index = EXCP_INTERRUPT;
541 cpu_loop_exit();
543 #ifdef CONFIG_DEBUG_EXEC
544 if (qemu_loglevel_mask(CPU_LOG_TB_CPU)) {
545 /* restore flags in standard format */
546 regs_to_env();
547 #if defined(TARGET_I386)
548 env->eflags = env->eflags | helper_cc_compute_all(CC_OP) | (DF & DF_MASK);
549 log_cpu_state(env, X86_DUMP_CCOP);
550 env->eflags &= ~(DF_MASK | CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
551 #elif defined(TARGET_ARM)
552 log_cpu_state(env, 0);
553 #elif defined(TARGET_SPARC)
554 log_cpu_state(env, 0);
555 #elif defined(TARGET_PPC)
556 log_cpu_state(env, 0);
557 #elif defined(TARGET_M68K)
558 cpu_m68k_flush_flags(env, env->cc_op);
559 env->cc_op = CC_OP_FLAGS;
560 env->sr = (env->sr & 0xffe0)
561 | env->cc_dest | (env->cc_x << 4);
562 log_cpu_state(env, 0);
563 #elif defined(TARGET_MICROBLAZE)
564 log_cpu_state(env, 0);
565 #elif defined(TARGET_MIPS)
566 log_cpu_state(env, 0);
567 #elif defined(TARGET_SH4)
568 log_cpu_state(env, 0);
569 #elif defined(TARGET_ALPHA)
570 log_cpu_state(env, 0);
571 #elif defined(TARGET_CRIS)
572 log_cpu_state(env, 0);
573 #else
574 #error unsupported target CPU
575 #endif
577 #endif
578 spin_lock(&tb_lock);
579 tb = tb_find_fast();
580 /* Note: we do it here to avoid a gcc bug on Mac OS X when
581 doing it in tb_find_slow */
582 if (tb_invalidated_flag) {
583 /* as some TB could have been invalidated because
584 of memory exceptions while generating the code, we
585 must recompute the hash index here */
586 next_tb = 0;
587 tb_invalidated_flag = 0;
589 #ifdef CONFIG_DEBUG_EXEC
590 qemu_log_mask(CPU_LOG_EXEC, "Trace 0x%08lx [" TARGET_FMT_lx "] %s\n",
591 (long)tb->tc_ptr, tb->pc,
592 lookup_symbol(tb->pc));
593 #endif
594 /* see if we can patch the calling TB. When the TB
595 spans two pages, we cannot safely do a direct
596 jump. */
598 if (next_tb != 0 && tb->page_addr[1] == -1) {
599 tb_add_jump((TranslationBlock *)(next_tb & ~3), next_tb & 3, tb);
602 spin_unlock(&tb_lock);
603 env->current_tb = tb;
605 /* cpu_interrupt might be called while translating the
606 TB, but before it is linked into a potentially
607 infinite loop and becomes env->current_tb. Avoid
608 starting execution if there is a pending interrupt. */
609 if (unlikely (env->exit_request))
610 env->current_tb = NULL;
612 while (env->current_tb) {
613 tc_ptr = tb->tc_ptr;
614 /* execute the generated code */
615 #if defined(__sparc__) && !defined(CONFIG_SOLARIS)
616 #undef env
617 env = cpu_single_env;
618 #define env cpu_single_env
619 #endif
620 next_tb = tcg_qemu_tb_exec(tc_ptr);
621 env->current_tb = NULL;
622 if ((next_tb & 3) == 2) {
623 /* Instruction counter expired. */
624 int insns_left;
625 tb = (TranslationBlock *)(long)(next_tb & ~3);
626 /* Restore PC. */
627 cpu_pc_from_tb(env, tb);
628 insns_left = env->icount_decr.u32;
629 if (env->icount_extra && insns_left >= 0) {
630 /* Refill decrementer and continue execution. */
631 env->icount_extra += insns_left;
632 if (env->icount_extra > 0xffff) {
633 insns_left = 0xffff;
634 } else {
635 insns_left = env->icount_extra;
637 env->icount_extra -= insns_left;
638 env->icount_decr.u16.low = insns_left;
639 } else {
640 if (insns_left > 0) {
641 /* Execute remaining instructions. */
642 cpu_exec_nocache(insns_left, tb);
644 env->exception_index = EXCP_INTERRUPT;
645 next_tb = 0;
646 cpu_loop_exit();
650 /* reset soft MMU for next block (it can currently
651 only be set by a memory fault) */
652 } /* for(;;) */
653 } else {
654 env_to_regs();
656 } /* for(;;) */
659 #if defined(TARGET_I386)
660 /* restore flags in standard format */
661 env->eflags = env->eflags | helper_cc_compute_all(CC_OP) | (DF & DF_MASK);
662 #elif defined(TARGET_ARM)
663 /* XXX: Save/restore host fpu exception state?. */
664 #elif defined(TARGET_SPARC)
665 #elif defined(TARGET_PPC)
666 #elif defined(TARGET_M68K)
667 cpu_m68k_flush_flags(env, env->cc_op);
668 env->cc_op = CC_OP_FLAGS;
669 env->sr = (env->sr & 0xffe0)
670 | env->cc_dest | (env->cc_x << 4);
671 #elif defined(TARGET_MICROBLAZE)
672 #elif defined(TARGET_MIPS)
673 #elif defined(TARGET_SH4)
674 #elif defined(TARGET_ALPHA)
675 #elif defined(TARGET_CRIS)
676 /* XXXXX */
677 #else
678 #error unsupported target CPU
679 #endif
681 /* restore global registers */
682 #include "hostregs_helper.h"
684 /* fail safe : never use cpu_single_env outside cpu_exec() */
685 cpu_single_env = NULL;
686 return ret;
689 /* must only be called from the generated code as an exception can be
690 generated */
691 void tb_invalidate_page_range(target_ulong start, target_ulong end)
693 /* XXX: cannot enable it yet because it yields to MMU exception
694 where NIP != read address on PowerPC */
695 #if 0
696 target_ulong phys_addr;
697 phys_addr = get_phys_addr_code(env, start);
698 tb_invalidate_phys_page_range(phys_addr, phys_addr + end - start, 0);
699 #endif
702 #if defined(TARGET_I386) && defined(CONFIG_USER_ONLY)
704 void cpu_x86_load_seg(CPUX86State *s, int seg_reg, int selector)
706 CPUX86State *saved_env;
708 saved_env = env;
709 env = s;
710 if (!(env->cr[0] & CR0_PE_MASK) || (env->eflags & VM_MASK)) {
711 selector &= 0xffff;
712 cpu_x86_load_seg_cache(env, seg_reg, selector,
713 (selector << 4), 0xffff, 0);
714 } else {
715 helper_load_seg(seg_reg, selector);
717 env = saved_env;
720 void cpu_x86_fsave(CPUX86State *s, target_ulong ptr, int data32)
722 CPUX86State *saved_env;
724 saved_env = env;
725 env = s;
727 helper_fsave(ptr, data32);
729 env = saved_env;
732 void cpu_x86_frstor(CPUX86State *s, target_ulong ptr, int data32)
734 CPUX86State *saved_env;
736 saved_env = env;
737 env = s;
739 helper_frstor(ptr, data32);
741 env = saved_env;
744 #endif /* TARGET_I386 */
746 #if !defined(CONFIG_SOFTMMU)
748 #if defined(TARGET_I386)
749 #define EXCEPTION_ACTION raise_exception_err(env->exception_index, env->error_code)
750 #else
751 #define EXCEPTION_ACTION cpu_loop_exit()
752 #endif
754 /* 'pc' is the host PC at which the exception was raised. 'address' is
755 the effective address of the memory exception. 'is_write' is 1 if a
756 write caused the exception and otherwise 0'. 'old_set' is the
757 signal set which should be restored */
758 static inline int handle_cpu_signal(unsigned long pc, unsigned long address,
759 int is_write, sigset_t *old_set,
760 void *puc)
762 TranslationBlock *tb;
763 int ret;
765 if (cpu_single_env)
766 env = cpu_single_env; /* XXX: find a correct solution for multithread */
767 #if defined(DEBUG_SIGNAL)
768 qemu_printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
769 pc, address, is_write, *(unsigned long *)old_set);
770 #endif
771 /* XXX: locking issue */
772 if (is_write && page_unprotect(h2g(address), pc, puc)) {
773 return 1;
776 /* see if it is an MMU fault */
777 ret = cpu_handle_mmu_fault(env, address, is_write, MMU_USER_IDX, 0);
778 if (ret < 0)
779 return 0; /* not an MMU fault */
780 if (ret == 0)
781 return 1; /* the MMU fault was handled without causing real CPU fault */
782 /* now we have a real cpu fault */
783 tb = tb_find_pc(pc);
784 if (tb) {
785 /* the PC is inside the translated code. It means that we have
786 a virtual CPU fault */
787 cpu_restore_state(tb, env, pc, puc);
790 /* we restore the process signal mask as the sigreturn should
791 do it (XXX: use sigsetjmp) */
792 sigprocmask(SIG_SETMASK, old_set, NULL);
793 EXCEPTION_ACTION;
795 /* never comes here */
796 return 1;
799 #if defined(__i386__)
801 #if defined(__APPLE__)
802 # include <sys/ucontext.h>
804 # define EIP_sig(context) (*((unsigned long*)&(context)->uc_mcontext->ss.eip))
805 # define TRAP_sig(context) ((context)->uc_mcontext->es.trapno)
806 # define ERROR_sig(context) ((context)->uc_mcontext->es.err)
807 # define MASK_sig(context) ((context)->uc_sigmask)
808 #elif defined (__NetBSD__)
809 # include <ucontext.h>
811 # define EIP_sig(context) ((context)->uc_mcontext.__gregs[_REG_EIP])
812 # define TRAP_sig(context) ((context)->uc_mcontext.__gregs[_REG_TRAPNO])
813 # define ERROR_sig(context) ((context)->uc_mcontext.__gregs[_REG_ERR])
814 # define MASK_sig(context) ((context)->uc_sigmask)
815 #elif defined (__FreeBSD__) || defined(__DragonFly__)
816 # include <ucontext.h>
818 # define EIP_sig(context) (*((unsigned long*)&(context)->uc_mcontext.mc_eip))
819 # define TRAP_sig(context) ((context)->uc_mcontext.mc_trapno)
820 # define ERROR_sig(context) ((context)->uc_mcontext.mc_err)
821 # define MASK_sig(context) ((context)->uc_sigmask)
822 #elif defined(__OpenBSD__)
823 # define EIP_sig(context) ((context)->sc_eip)
824 # define TRAP_sig(context) ((context)->sc_trapno)
825 # define ERROR_sig(context) ((context)->sc_err)
826 # define MASK_sig(context) ((context)->sc_mask)
827 #else
828 # define EIP_sig(context) ((context)->uc_mcontext.gregs[REG_EIP])
829 # define TRAP_sig(context) ((context)->uc_mcontext.gregs[REG_TRAPNO])
830 # define ERROR_sig(context) ((context)->uc_mcontext.gregs[REG_ERR])
831 # define MASK_sig(context) ((context)->uc_sigmask)
832 #endif
834 int cpu_signal_handler(int host_signum, void *pinfo,
835 void *puc)
837 siginfo_t *info = pinfo;
838 #if defined(__NetBSD__) || defined (__FreeBSD__) || defined(__DragonFly__)
839 ucontext_t *uc = puc;
840 #elif defined(__OpenBSD__)
841 struct sigcontext *uc = puc;
842 #else
843 struct ucontext *uc = puc;
844 #endif
845 unsigned long pc;
846 int trapno;
848 #ifndef REG_EIP
849 /* for glibc 2.1 */
850 #define REG_EIP EIP
851 #define REG_ERR ERR
852 #define REG_TRAPNO TRAPNO
853 #endif
854 pc = EIP_sig(uc);
855 trapno = TRAP_sig(uc);
856 return handle_cpu_signal(pc, (unsigned long)info->si_addr,
857 trapno == 0xe ?
858 (ERROR_sig(uc) >> 1) & 1 : 0,
859 &MASK_sig(uc), puc);
862 #elif defined(__x86_64__)
864 #ifdef __NetBSD__
865 #define PC_sig(context) _UC_MACHINE_PC(context)
866 #define TRAP_sig(context) ((context)->uc_mcontext.__gregs[_REG_TRAPNO])
867 #define ERROR_sig(context) ((context)->uc_mcontext.__gregs[_REG_ERR])
868 #define MASK_sig(context) ((context)->uc_sigmask)
869 #elif defined(__OpenBSD__)
870 #define PC_sig(context) ((context)->sc_rip)
871 #define TRAP_sig(context) ((context)->sc_trapno)
872 #define ERROR_sig(context) ((context)->sc_err)
873 #define MASK_sig(context) ((context)->sc_mask)
874 #elif defined (__FreeBSD__) || defined(__DragonFly__)
875 #include <ucontext.h>
877 #define PC_sig(context) (*((unsigned long*)&(context)->uc_mcontext.mc_rip))
878 #define TRAP_sig(context) ((context)->uc_mcontext.mc_trapno)
879 #define ERROR_sig(context) ((context)->uc_mcontext.mc_err)
880 #define MASK_sig(context) ((context)->uc_sigmask)
881 #else
882 #define PC_sig(context) ((context)->uc_mcontext.gregs[REG_RIP])
883 #define TRAP_sig(context) ((context)->uc_mcontext.gregs[REG_TRAPNO])
884 #define ERROR_sig(context) ((context)->uc_mcontext.gregs[REG_ERR])
885 #define MASK_sig(context) ((context)->uc_sigmask)
886 #endif
888 int cpu_signal_handler(int host_signum, void *pinfo,
889 void *puc)
891 siginfo_t *info = pinfo;
892 unsigned long pc;
893 #if defined(__NetBSD__) || defined (__FreeBSD__) || defined(__DragonFly__)
894 ucontext_t *uc = puc;
895 #elif defined(__OpenBSD__)
896 struct sigcontext *uc = puc;
897 #else
898 struct ucontext *uc = puc;
899 #endif
901 pc = PC_sig(uc);
902 return handle_cpu_signal(pc, (unsigned long)info->si_addr,
903 TRAP_sig(uc) == 0xe ?
904 (ERROR_sig(uc) >> 1) & 1 : 0,
905 &MASK_sig(uc), puc);
908 #elif defined(_ARCH_PPC)
910 /***********************************************************************
911 * signal context platform-specific definitions
912 * From Wine
914 #ifdef linux
915 /* All Registers access - only for local access */
916 # define REG_sig(reg_name, context) ((context)->uc_mcontext.regs->reg_name)
917 /* Gpr Registers access */
918 # define GPR_sig(reg_num, context) REG_sig(gpr[reg_num], context)
919 # define IAR_sig(context) REG_sig(nip, context) /* Program counter */
920 # define MSR_sig(context) REG_sig(msr, context) /* Machine State Register (Supervisor) */
921 # define CTR_sig(context) REG_sig(ctr, context) /* Count register */
922 # define XER_sig(context) REG_sig(xer, context) /* User's integer exception register */
923 # define LR_sig(context) REG_sig(link, context) /* Link register */
924 # define CR_sig(context) REG_sig(ccr, context) /* Condition register */
925 /* Float Registers access */
926 # define FLOAT_sig(reg_num, context) (((double*)((char*)((context)->uc_mcontext.regs+48*4)))[reg_num])
927 # define FPSCR_sig(context) (*(int*)((char*)((context)->uc_mcontext.regs+(48+32*2)*4)))
928 /* Exception Registers access */
929 # define DAR_sig(context) REG_sig(dar, context)
930 # define DSISR_sig(context) REG_sig(dsisr, context)
931 # define TRAP_sig(context) REG_sig(trap, context)
932 #endif /* linux */
934 #ifdef __APPLE__
935 # include <sys/ucontext.h>
936 typedef struct ucontext SIGCONTEXT;
937 /* All Registers access - only for local access */
938 # define REG_sig(reg_name, context) ((context)->uc_mcontext->ss.reg_name)
939 # define FLOATREG_sig(reg_name, context) ((context)->uc_mcontext->fs.reg_name)
940 # define EXCEPREG_sig(reg_name, context) ((context)->uc_mcontext->es.reg_name)
941 # define VECREG_sig(reg_name, context) ((context)->uc_mcontext->vs.reg_name)
942 /* Gpr Registers access */
943 # define GPR_sig(reg_num, context) REG_sig(r##reg_num, context)
944 # define IAR_sig(context) REG_sig(srr0, context) /* Program counter */
945 # define MSR_sig(context) REG_sig(srr1, context) /* Machine State Register (Supervisor) */
946 # define CTR_sig(context) REG_sig(ctr, context)
947 # define XER_sig(context) REG_sig(xer, context) /* Link register */
948 # define LR_sig(context) REG_sig(lr, context) /* User's integer exception register */
949 # define CR_sig(context) REG_sig(cr, context) /* Condition register */
950 /* Float Registers access */
951 # define FLOAT_sig(reg_num, context) FLOATREG_sig(fpregs[reg_num], context)
952 # define FPSCR_sig(context) ((double)FLOATREG_sig(fpscr, context))
953 /* Exception Registers access */
954 # define DAR_sig(context) EXCEPREG_sig(dar, context) /* Fault registers for coredump */
955 # define DSISR_sig(context) EXCEPREG_sig(dsisr, context)
956 # define TRAP_sig(context) EXCEPREG_sig(exception, context) /* number of powerpc exception taken */
957 #endif /* __APPLE__ */
959 int cpu_signal_handler(int host_signum, void *pinfo,
960 void *puc)
962 siginfo_t *info = pinfo;
963 struct ucontext *uc = puc;
964 unsigned long pc;
965 int is_write;
967 pc = IAR_sig(uc);
968 is_write = 0;
969 #if 0
970 /* ppc 4xx case */
971 if (DSISR_sig(uc) & 0x00800000)
972 is_write = 1;
973 #else
974 if (TRAP_sig(uc) != 0x400 && (DSISR_sig(uc) & 0x02000000))
975 is_write = 1;
976 #endif
977 return handle_cpu_signal(pc, (unsigned long)info->si_addr,
978 is_write, &uc->uc_sigmask, puc);
981 #elif defined(__alpha__)
983 int cpu_signal_handler(int host_signum, void *pinfo,
984 void *puc)
986 siginfo_t *info = pinfo;
987 struct ucontext *uc = puc;
988 uint32_t *pc = uc->uc_mcontext.sc_pc;
989 uint32_t insn = *pc;
990 int is_write = 0;
992 /* XXX: need kernel patch to get write flag faster */
993 switch (insn >> 26) {
994 case 0x0d: // stw
995 case 0x0e: // stb
996 case 0x0f: // stq_u
997 case 0x24: // stf
998 case 0x25: // stg
999 case 0x26: // sts
1000 case 0x27: // stt
1001 case 0x2c: // stl
1002 case 0x2d: // stq
1003 case 0x2e: // stl_c
1004 case 0x2f: // stq_c
1005 is_write = 1;
1008 return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1009 is_write, &uc->uc_sigmask, puc);
1011 #elif defined(__sparc__)
1013 int cpu_signal_handler(int host_signum, void *pinfo,
1014 void *puc)
1016 siginfo_t *info = pinfo;
1017 int is_write;
1018 uint32_t insn;
1019 #if !defined(__arch64__) || defined(CONFIG_SOLARIS)
1020 uint32_t *regs = (uint32_t *)(info + 1);
1021 void *sigmask = (regs + 20);
1022 /* XXX: is there a standard glibc define ? */
1023 unsigned long pc = regs[1];
1024 #else
1025 #ifdef __linux__
1026 struct sigcontext *sc = puc;
1027 unsigned long pc = sc->sigc_regs.tpc;
1028 void *sigmask = (void *)sc->sigc_mask;
1029 #elif defined(__OpenBSD__)
1030 struct sigcontext *uc = puc;
1031 unsigned long pc = uc->sc_pc;
1032 void *sigmask = (void *)(long)uc->sc_mask;
1033 #endif
1034 #endif
1036 /* XXX: need kernel patch to get write flag faster */
1037 is_write = 0;
1038 insn = *(uint32_t *)pc;
1039 if ((insn >> 30) == 3) {
1040 switch((insn >> 19) & 0x3f) {
1041 case 0x05: // stb
1042 case 0x15: // stba
1043 case 0x06: // sth
1044 case 0x16: // stha
1045 case 0x04: // st
1046 case 0x14: // sta
1047 case 0x07: // std
1048 case 0x17: // stda
1049 case 0x0e: // stx
1050 case 0x1e: // stxa
1051 case 0x24: // stf
1052 case 0x34: // stfa
1053 case 0x27: // stdf
1054 case 0x37: // stdfa
1055 case 0x26: // stqf
1056 case 0x36: // stqfa
1057 case 0x25: // stfsr
1058 case 0x3c: // casa
1059 case 0x3e: // casxa
1060 is_write = 1;
1061 break;
1064 return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1065 is_write, sigmask, NULL);
1068 #elif defined(__arm__)
1070 int cpu_signal_handler(int host_signum, void *pinfo,
1071 void *puc)
1073 siginfo_t *info = pinfo;
1074 struct ucontext *uc = puc;
1075 unsigned long pc;
1076 int is_write;
1078 #if (__GLIBC__ < 2 || (__GLIBC__ == 2 && __GLIBC_MINOR__ <= 3))
1079 pc = uc->uc_mcontext.gregs[R15];
1080 #else
1081 pc = uc->uc_mcontext.arm_pc;
1082 #endif
1083 /* XXX: compute is_write */
1084 is_write = 0;
1085 return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1086 is_write,
1087 &uc->uc_sigmask, puc);
1090 #elif defined(__mc68000)
1092 int cpu_signal_handler(int host_signum, void *pinfo,
1093 void *puc)
1095 siginfo_t *info = pinfo;
1096 struct ucontext *uc = puc;
1097 unsigned long pc;
1098 int is_write;
1100 pc = uc->uc_mcontext.gregs[16];
1101 /* XXX: compute is_write */
1102 is_write = 0;
1103 return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1104 is_write,
1105 &uc->uc_sigmask, puc);
1108 #elif defined(__ia64)
1110 #ifndef __ISR_VALID
1111 /* This ought to be in <bits/siginfo.h>... */
1112 # define __ISR_VALID 1
1113 #endif
1115 int cpu_signal_handler(int host_signum, void *pinfo, void *puc)
1117 siginfo_t *info = pinfo;
1118 struct ucontext *uc = puc;
1119 unsigned long ip;
1120 int is_write = 0;
1122 ip = uc->uc_mcontext.sc_ip;
1123 switch (host_signum) {
1124 case SIGILL:
1125 case SIGFPE:
1126 case SIGSEGV:
1127 case SIGBUS:
1128 case SIGTRAP:
1129 if (info->si_code && (info->si_segvflags & __ISR_VALID))
1130 /* ISR.W (write-access) is bit 33: */
1131 is_write = (info->si_isr >> 33) & 1;
1132 break;
1134 default:
1135 break;
1137 return handle_cpu_signal(ip, (unsigned long)info->si_addr,
1138 is_write,
1139 &uc->uc_sigmask, puc);
1142 #elif defined(__s390__)
1144 int cpu_signal_handler(int host_signum, void *pinfo,
1145 void *puc)
1147 siginfo_t *info = pinfo;
1148 struct ucontext *uc = puc;
1149 unsigned long pc;
1150 int is_write;
1152 pc = uc->uc_mcontext.psw.addr;
1153 /* XXX: compute is_write */
1154 is_write = 0;
1155 return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1156 is_write, &uc->uc_sigmask, puc);
1159 #elif defined(__mips__)
1161 int cpu_signal_handler(int host_signum, void *pinfo,
1162 void *puc)
1164 siginfo_t *info = pinfo;
1165 struct ucontext *uc = puc;
1166 greg_t pc = uc->uc_mcontext.pc;
1167 int is_write;
1169 /* XXX: compute is_write */
1170 is_write = 0;
1171 return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1172 is_write, &uc->uc_sigmask, puc);
1175 #elif defined(__hppa__)
1177 int cpu_signal_handler(int host_signum, void *pinfo,
1178 void *puc)
1180 struct siginfo *info = pinfo;
1181 struct ucontext *uc = puc;
1182 unsigned long pc;
1183 int is_write;
1185 pc = uc->uc_mcontext.sc_iaoq[0];
1186 /* FIXME: compute is_write */
1187 is_write = 0;
1188 return handle_cpu_signal(pc, (unsigned long)info->si_addr,
1189 is_write,
1190 &uc->uc_sigmask, puc);
1193 #else
1195 #error host CPU specific signal handler needed
1197 #endif
1199 #endif /* !defined(CONFIG_SOFTMMU) */