4 * Copyright (c) 2005 Samuel Tardieu
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
28 #include "hw/sh_intc.h"
30 #if defined(CONFIG_USER_ONLY)
32 void do_interrupt (CPUState
*env
)
34 env
->exception_index
= -1;
37 int cpu_sh4_handle_mmu_fault(CPUState
* env
, target_ulong address
, int rw
,
38 int mmu_idx
, int is_softmmu
)
41 env
->exception_index
= 0;
44 env
->exception_index
= 0x0a0;
47 env
->exception_index
= 0x0c0;
50 env
->exception_index
= 0x0a0;
56 target_phys_addr_t
cpu_get_phys_page_debug(CPUState
* env
, target_ulong addr
)
61 int cpu_sh4_is_cached(CPUSH4State
* env
, target_ulong addr
)
63 /* For user mode, only U0 area is cachable. */
64 return !(addr
& 0x80000000);
67 #else /* !CONFIG_USER_ONLY */
70 #define MMU_ITLB_MISS (-1)
71 #define MMU_ITLB_MULTIPLE (-2)
72 #define MMU_ITLB_VIOLATION (-3)
73 #define MMU_DTLB_MISS_READ (-4)
74 #define MMU_DTLB_MISS_WRITE (-5)
75 #define MMU_DTLB_INITIAL_WRITE (-6)
76 #define MMU_DTLB_VIOLATION_READ (-7)
77 #define MMU_DTLB_VIOLATION_WRITE (-8)
78 #define MMU_DTLB_MULTIPLE (-9)
79 #define MMU_DTLB_MISS (-10)
80 #define MMU_IADDR_ERROR (-11)
81 #define MMU_DADDR_ERROR_READ (-12)
82 #define MMU_DADDR_ERROR_WRITE (-13)
84 void do_interrupt(CPUState
* env
)
86 int do_irq
= env
->interrupt_request
& CPU_INTERRUPT_HARD
;
87 int do_exp
, irq_vector
= env
->exception_index
;
89 /* prioritize exceptions over interrupts */
91 do_exp
= env
->exception_index
!= -1;
92 do_irq
= do_irq
&& (env
->exception_index
== -1);
94 if (env
->sr
& SR_BL
) {
95 if (do_exp
&& env
->exception_index
!= 0x1e0) {
96 env
->exception_index
= 0x000; /* masked exception -> reset */
98 if (do_irq
&& !env
->intr_at_halt
) {
101 env
->intr_at_halt
= 0;
105 irq_vector
= sh_intc_get_pending_vector(env
->intc_handle
,
106 (env
->sr
>> 4) & 0xf);
107 if (irq_vector
== -1) {
112 if (qemu_loglevel_mask(CPU_LOG_INT
)) {
114 switch (env
->exception_index
) {
116 expname
= "addr_error";
119 expname
= "tlb_miss";
122 expname
= "tlb_violation";
125 expname
= "illegal_instruction";
128 expname
= "slot_illegal_instruction";
131 expname
= "fpu_disable";
134 expname
= "slot_fpu";
137 expname
= "data_write";
140 expname
= "dtlb_miss_write";
143 expname
= "dtlb_violation_write";
146 expname
= "fpu_exception";
149 expname
= "initial_page_write";
155 expname
= do_irq
? "interrupt" : "???";
158 qemu_log("exception 0x%03x [%s] raised\n",
159 irq_vector
, expname
);
160 log_cpu_state(env
, 0);
165 env
->sgr
= env
->gregs
[15];
166 env
->sr
|= SR_BL
| SR_MD
| SR_RB
;
168 if (env
->flags
& (DELAY_SLOT
| DELAY_SLOT_CONDITIONAL
)) {
169 /* Branch instruction should be executed again before delay slot. */
171 /* Clear flags for exception/interrupt routine. */
172 env
->flags
&= ~(DELAY_SLOT
| DELAY_SLOT_CONDITIONAL
| DELAY_SLOT_TRUE
);
174 if (env
->flags
& DELAY_SLOT_CLEARME
)
178 env
->expevt
= env
->exception_index
;
179 switch (env
->exception_index
) {
184 env
->sr
|= 0xf << 4; /* IMASK */
185 env
->pc
= 0xa0000000;
189 env
->pc
= env
->vbr
+ 0x400;
192 env
->spc
+= 2; /* special case for TRAPA */
195 env
->pc
= env
->vbr
+ 0x100;
202 env
->intevt
= irq_vector
;
203 env
->pc
= env
->vbr
+ 0x600;
208 static void update_itlb_use(CPUState
* env
, int itlbnb
)
210 uint8_t or_mask
= 0, and_mask
= (uint8_t) - 1;
229 env
->mmucr
&= (and_mask
<< 24) | 0x00ffffff;
230 env
->mmucr
|= (or_mask
<< 24);
233 static int itlb_replacement(CPUState
* env
)
235 if ((env
->mmucr
& 0xe0000000) == 0xe0000000)
237 if ((env
->mmucr
& 0x98000000) == 0x18000000)
239 if ((env
->mmucr
& 0x54000000) == 0x04000000)
241 if ((env
->mmucr
& 0x2c000000) == 0x00000000)
246 /* Find the corresponding entry in the right TLB
247 Return entry, MMU_DTLB_MISS or MMU_DTLB_MULTIPLE
249 static int find_tlb_entry(CPUState
* env
, target_ulong address
,
250 tlb_t
* entries
, uint8_t nbtlb
, int use_asid
)
252 int match
= MMU_DTLB_MISS
;
257 asid
= env
->pteh
& 0xff;
259 for (i
= 0; i
< nbtlb
; i
++) {
261 continue; /* Invalid entry */
262 if (!entries
[i
].sh
&& use_asid
&& entries
[i
].asid
!= asid
)
263 continue; /* Bad ASID */
265 switch (entries
[i
].sz
) {
267 size
= 1024; /* 1kB */
270 size
= 4 * 1024; /* 4kB */
273 size
= 64 * 1024; /* 64kB */
276 size
= 1024 * 1024; /* 1MB */
282 start
= (entries
[i
].vpn
<< 10) & ~(entries
[i
].size
- 1);
283 end
= start
+ entries
[i
].size
- 1;
284 if (address
>= start
&& address
<= end
) { /* Match */
285 if (match
!= MMU_DTLB_MISS
)
286 return MMU_DTLB_MULTIPLE
; /* Multiple match */
293 static int same_tlb_entry_exists(const tlb_t
* haystack
, uint8_t nbtlb
,
294 const tlb_t
* needle
)
297 for (i
= 0; i
< nbtlb
; i
++)
298 if (!memcmp(&haystack
[i
], needle
, sizeof(tlb_t
)))
303 static void increment_urc(CPUState
* env
)
308 urb
= ((env
->mmucr
) >> 18) & 0x3f;
309 urc
= ((env
->mmucr
) >> 10) & 0x3f;
311 if ((urb
> 0 && urc
> urb
) || urc
> (UTLB_SIZE
- 1))
313 env
->mmucr
= (env
->mmucr
& 0xffff03ff) | (urc
<< 10);
316 /* Find itlb entry - update itlb from utlb if necessary and asked for
317 Return entry, MMU_ITLB_MISS, MMU_ITLB_MULTIPLE or MMU_DTLB_MULTIPLE
318 Update the itlb from utlb if update is not 0
320 static int find_itlb_entry(CPUState
* env
, target_ulong address
,
321 int use_asid
, int update
)
325 e
= find_tlb_entry(env
, address
, env
->itlb
, ITLB_SIZE
, use_asid
);
326 if (e
== MMU_DTLB_MULTIPLE
)
327 e
= MMU_ITLB_MULTIPLE
;
328 else if (e
== MMU_DTLB_MISS
&& update
) {
329 e
= find_tlb_entry(env
, address
, env
->utlb
, UTLB_SIZE
, use_asid
);
332 n
= itlb_replacement(env
);
333 ientry
= &env
->itlb
[n
];
335 if (!same_tlb_entry_exists(env
->utlb
, UTLB_SIZE
, ientry
))
336 tlb_flush_page(env
, ientry
->vpn
<< 10);
338 *ientry
= env
->utlb
[e
];
340 } else if (e
== MMU_DTLB_MISS
)
342 } else if (e
== MMU_DTLB_MISS
)
345 update_itlb_use(env
, e
);
350 Return entry, MMU_DTLB_MISS, MMU_DTLB_MULTIPLE */
351 static int find_utlb_entry(CPUState
* env
, target_ulong address
, int use_asid
)
353 /* per utlb access */
357 return find_tlb_entry(env
, address
, env
->utlb
, UTLB_SIZE
, use_asid
);
360 /* Match address against MMU
361 Return MMU_OK, MMU_DTLB_MISS_READ, MMU_DTLB_MISS_WRITE,
362 MMU_DTLB_INITIAL_WRITE, MMU_DTLB_VIOLATION_READ,
363 MMU_DTLB_VIOLATION_WRITE, MMU_ITLB_MISS,
364 MMU_ITLB_MULTIPLE, MMU_ITLB_VIOLATION,
365 MMU_IADDR_ERROR, MMU_DADDR_ERROR_READ, MMU_DADDR_ERROR_WRITE.
367 static int get_mmu_address(CPUState
* env
, target_ulong
* physical
,
368 int *prot
, target_ulong address
,
369 int rw
, int access_type
)
372 tlb_t
*matching
= NULL
;
374 use_asid
= (env
->mmucr
& MMUCR_SV
) == 0 || (env
->sr
& SR_MD
) == 0;
377 n
= find_itlb_entry(env
, address
, use_asid
, 1);
379 matching
= &env
->itlb
[n
];
380 if ((env
->sr
& SR_MD
) & !(matching
->pr
& 2))
381 n
= MMU_ITLB_VIOLATION
;
386 n
= find_utlb_entry(env
, address
, use_asid
);
388 matching
= &env
->utlb
[n
];
389 switch ((matching
->pr
<< 1) | ((env
->sr
& SR_MD
) ? 1 : 0)) {
392 n
= (rw
== 1) ? MMU_DTLB_VIOLATION_WRITE
:
393 MMU_DTLB_VIOLATION_READ
;
399 n
= MMU_DTLB_VIOLATION_WRITE
;
406 *prot
= (rw
== 1)? PAGE_WRITE
: PAGE_READ
;
409 } else if (n
== MMU_DTLB_MISS
) {
410 n
= (rw
== 1) ? MMU_DTLB_MISS_WRITE
:
415 *physical
= ((matching
->ppn
<< 10) & ~(matching
->size
- 1)) |
416 (address
& (matching
->size
- 1));
417 if ((rw
== 1) & !matching
->d
)
418 n
= MMU_DTLB_INITIAL_WRITE
;
425 static int get_physical_address(CPUState
* env
, target_ulong
* physical
,
426 int *prot
, target_ulong address
,
427 int rw
, int access_type
)
429 /* P1, P2 and P4 areas do not use translation */
430 if ((address
>= 0x80000000 && address
< 0xc0000000) ||
431 address
>= 0xe0000000) {
432 if (!(env
->sr
& SR_MD
)
433 && (address
< 0xe0000000 || address
> 0xe4000000)) {
434 /* Unauthorized access in user mode (only store queues are available) */
435 fprintf(stderr
, "Unauthorized access\n");
437 return MMU_DADDR_ERROR_READ
;
439 return MMU_DADDR_ERROR_WRITE
;
441 return MMU_IADDR_ERROR
;
443 if (address
>= 0x80000000 && address
< 0xc0000000) {
444 /* Mask upper 3 bits for P1 and P2 areas */
445 *physical
= address
& 0x1fffffff;
449 *prot
= PAGE_READ
| PAGE_WRITE
;
453 /* If MMU is disabled, return the corresponding physical page */
454 if (!env
->mmucr
& MMUCR_AT
) {
455 *physical
= address
& 0x1FFFFFFF;
456 *prot
= PAGE_READ
| PAGE_WRITE
;
460 /* We need to resort to the MMU */
461 return get_mmu_address(env
, physical
, prot
, address
, rw
, access_type
);
464 int cpu_sh4_handle_mmu_fault(CPUState
* env
, target_ulong address
, int rw
,
465 int mmu_idx
, int is_softmmu
)
467 target_ulong physical
, page_offset
, page_size
;
468 int prot
, ret
, access_type
;
470 access_type
= ACCESS_INT
;
472 get_physical_address(env
, &physical
, &prot
, address
, rw
,
479 case MMU_DTLB_MISS_READ
:
480 env
->exception_index
= 0x040;
482 case MMU_DTLB_MULTIPLE
:
483 case MMU_ITLB_MULTIPLE
:
484 env
->exception_index
= 0x140;
486 case MMU_ITLB_VIOLATION
:
487 env
->exception_index
= 0x0a0;
489 case MMU_DTLB_MISS_WRITE
:
490 env
->exception_index
= 0x060;
492 case MMU_DTLB_INITIAL_WRITE
:
493 env
->exception_index
= 0x080;
495 case MMU_DTLB_VIOLATION_READ
:
496 env
->exception_index
= 0x0a0;
498 case MMU_DTLB_VIOLATION_WRITE
:
499 env
->exception_index
= 0x0c0;
501 case MMU_IADDR_ERROR
:
502 case MMU_DADDR_ERROR_READ
:
503 env
->exception_index
= 0x0c0;
505 case MMU_DADDR_ERROR_WRITE
:
506 env
->exception_index
= 0x100;
514 page_size
= TARGET_PAGE_SIZE
;
516 (address
- (address
& TARGET_PAGE_MASK
)) & ~(page_size
- 1);
517 address
= (address
& TARGET_PAGE_MASK
) + page_offset
;
518 physical
= (physical
& TARGET_PAGE_MASK
) + page_offset
;
520 return tlb_set_page(env
, address
, physical
, prot
, mmu_idx
, is_softmmu
);
523 target_phys_addr_t
cpu_get_phys_page_debug(CPUState
* env
, target_ulong addr
)
525 target_ulong physical
;
528 get_physical_address(env
, &physical
, &prot
, addr
, 0, 0);
532 void cpu_load_tlb(CPUSH4State
* env
)
534 int n
= cpu_mmucr_urc(env
->mmucr
);
535 tlb_t
* entry
= &env
->utlb
[n
];
538 /* Overwriting valid entry in utlb. */
539 target_ulong address
= entry
->vpn
<< 10;
540 if (!same_tlb_entry_exists(env
->itlb
, ITLB_SIZE
, entry
)) {
541 tlb_flush_page(env
, address
);
545 /* Take values into cpu status from registers. */
546 entry
->asid
= (uint8_t)cpu_pteh_asid(env
->pteh
);
547 entry
->vpn
= cpu_pteh_vpn(env
->pteh
);
548 entry
->v
= (uint8_t)cpu_ptel_v(env
->ptel
);
549 entry
->ppn
= cpu_ptel_ppn(env
->ptel
);
550 entry
->sz
= (uint8_t)cpu_ptel_sz(env
->ptel
);
553 entry
->size
= 1024; /* 1K */
556 entry
->size
= 1024 * 4; /* 4K */
559 entry
->size
= 1024 * 64; /* 64K */
562 entry
->size
= 1024 * 1024; /* 1M */
568 entry
->sh
= (uint8_t)cpu_ptel_sh(env
->ptel
);
569 entry
->c
= (uint8_t)cpu_ptel_c(env
->ptel
);
570 entry
->pr
= (uint8_t)cpu_ptel_pr(env
->ptel
);
571 entry
->d
= (uint8_t)cpu_ptel_d(env
->ptel
);
572 entry
->wt
= (uint8_t)cpu_ptel_wt(env
->ptel
);
573 entry
->sa
= (uint8_t)cpu_ptea_sa(env
->ptea
);
574 entry
->tc
= (uint8_t)cpu_ptea_tc(env
->ptea
);
577 void cpu_sh4_write_mmaped_utlb_addr(CPUSH4State
*s
, target_phys_addr_t addr
,
580 int associate
= addr
& 0x0000080;
581 uint32_t vpn
= (mem_value
& 0xfffffc00) >> 10;
582 uint8_t d
= (uint8_t)((mem_value
& 0x00000200) >> 9);
583 uint8_t v
= (uint8_t)((mem_value
& 0x00000100) >> 8);
584 uint8_t asid
= (uint8_t)(mem_value
& 0x000000ff);
585 int use_asid
= (s
->mmucr
& MMUCR_SV
) == 0 || (s
->sr
& SR_MD
) == 0;
589 tlb_t
* utlb_match_entry
= NULL
;
590 int needs_tlb_flush
= 0;
593 for (i
= 0; i
< UTLB_SIZE
; i
++) {
594 tlb_t
* entry
= &s
->utlb
[i
];
598 if (entry
->vpn
== vpn
599 && (!use_asid
|| entry
->asid
== asid
|| entry
->sh
)) {
600 if (utlb_match_entry
) {
601 /* Multiple TLB Exception */
602 s
->exception_index
= 0x140;
610 utlb_match_entry
= entry
;
612 increment_urc(s
); /* per utlb access */
616 for (i
= 0; i
< ITLB_SIZE
; i
++) {
617 tlb_t
* entry
= &s
->itlb
[i
];
618 if (entry
->vpn
== vpn
619 && (!use_asid
|| entry
->asid
== asid
|| entry
->sh
)) {
622 if (utlb_match_entry
)
623 *entry
= *utlb_match_entry
;
631 tlb_flush_page(s
, vpn
<< 10);
634 int index
= (addr
& 0x00003f00) >> 8;
635 tlb_t
* entry
= &s
->utlb
[index
];
637 /* Overwriting valid entry in utlb. */
638 target_ulong address
= entry
->vpn
<< 10;
639 if (!same_tlb_entry_exists(s
->itlb
, ITLB_SIZE
, entry
)) {
640 tlb_flush_page(s
, address
);
651 int cpu_sh4_is_cached(CPUSH4State
* env
, target_ulong addr
)
654 int use_asid
= (env
->mmucr
& MMUCR_SV
) == 0 || (env
->sr
& SR_MD
) == 0;
657 if (env
->sr
& SR_MD
) {
658 /* For previledged mode, P2 and P4 area is not cachable. */
659 if ((0xA0000000 <= addr
&& addr
< 0xC0000000) || 0xE0000000 <= addr
)
662 /* For user mode, only U0 area is cachable. */
663 if (0x80000000 <= addr
)
668 * TODO : Evaluate CCR and check if the cache is on or off.
669 * Now CCR is not in CPUSH4State, but in SH7750State.
670 * When you move the ccr inot CPUSH4State, the code will be
674 /* check if operand cache is enabled or not. */
679 /* if MMU is off, no check for TLB. */
680 if (env
->mmucr
& MMUCR_AT
)
684 n
= find_tlb_entry(env
, addr
, env
->itlb
, ITLB_SIZE
, use_asid
);
686 return env
->itlb
[n
].c
;
688 n
= find_tlb_entry(env
, addr
, env
->utlb
, UTLB_SIZE
, use_asid
);
690 return env
->utlb
[n
].c
;