2 * Generic intermediate code generation.
4 * Copyright (C) 2016-2017 LluĂs Vilanova <vilanova@ac.upc.edu>
6 * This work is licensed under the terms of the GNU GPL, version 2 or later.
7 * See the COPYING file in the top-level directory.
10 #include "qemu/osdep.h"
11 #include "qemu/error-report.h"
13 #include "tcg/tcg-op.h"
14 #include "exec/exec-all.h"
15 #include "exec/gen-icount.h"
17 #include "exec/translator.h"
18 #include "exec/plugin-gen.h"
19 #include "sysemu/replay.h"
21 /* Pairs with tcg_clear_temp_count.
22 To be called by #TranslatorOps.{translate_insn,tb_stop} if
23 (1) the target is sufficiently clean to support reporting,
24 (2) as and when all temporaries are known to be consumed.
25 For most targets, (2) is at the end of translate_insn. */
26 void translator_loop_temp_check(DisasContextBase
*db
)
28 if (tcg_check_temp_count()) {
29 qemu_log("warning: TCG temporary leaks before "
30 TARGET_FMT_lx
"\n", db
->pc_next
);
34 bool translator_use_goto_tb(DisasContextBase
*db
, target_ulong dest
)
36 /* Suppress goto_tb if requested. */
37 if (tb_cflags(db
->tb
) & CF_NO_GOTO_TB
) {
41 /* Check for the dest on the same page as the start of the TB. */
42 return ((db
->pc_first
^ dest
) & TARGET_PAGE_MASK
) == 0;
45 void translator_loop(CPUState
*cpu
, TranslationBlock
*tb
, int max_insns
,
46 target_ulong pc
, void *host_pc
,
47 const TranslatorOps
*ops
, DisasContextBase
*db
)
49 uint32_t cflags
= tb_cflags(tb
);
52 /* Initialize DisasContext */
56 db
->is_jmp
= DISAS_NEXT
;
58 db
->max_insns
= max_insns
;
59 db
->singlestep_enabled
= cflags
& CF_SINGLE_STEP
;
60 db
->host_addr
[0] = host_pc
;
61 db
->host_addr
[1] = NULL
;
63 #ifdef CONFIG_USER_ONLY
67 ops
->init_disas_context(db
, cpu
);
68 tcg_debug_assert(db
->is_jmp
== DISAS_NEXT
); /* no early exit */
70 /* Reset the temp count so that we can identify leaks */
71 tcg_clear_temp_count();
73 /* Start translating. */
75 ops
->tb_start(db
, cpu
);
76 tcg_debug_assert(db
->is_jmp
== DISAS_NEXT
); /* no early exit */
78 plugin_enabled
= plugin_gen_tb_start(cpu
, db
, cflags
& CF_MEMI_ONLY
);
82 ops
->insn_start(db
, cpu
);
83 tcg_debug_assert(db
->is_jmp
== DISAS_NEXT
); /* no early exit */
86 plugin_gen_insn_start(cpu
, db
);
89 /* Disassemble one instruction. The translate_insn hook should
90 update db->pc_next and db->is_jmp to indicate what should be
91 done next -- either exiting this loop or locate the start of
92 the next instruction. */
93 if (db
->num_insns
== db
->max_insns
&& (cflags
& CF_LAST_IO
)) {
94 /* Accept I/O on the last instruction. */
96 ops
->translate_insn(db
, cpu
);
98 /* we should only see CF_MEMI_ONLY for io_recompile */
99 tcg_debug_assert(!(cflags
& CF_MEMI_ONLY
));
100 ops
->translate_insn(db
, cpu
);
104 * We can't instrument after instructions that change control
105 * flow although this only really affects post-load operations.
107 * Calling plugin_gen_insn_end() before we possibly stop translation
108 * is important. Even if this ends up as dead code, plugin generation
109 * needs to see a matching plugin_gen_insn_{start,end}() pair in order
110 * to accurately track instrumented helpers that might access memory.
112 if (plugin_enabled
) {
113 plugin_gen_insn_end();
116 /* Stop translation if translate_insn so indicated. */
117 if (db
->is_jmp
!= DISAS_NEXT
) {
121 /* Stop translation if the output buffer is full,
122 or we have executed all of the allowed instructions. */
123 if (tcg_op_buf_full() || db
->num_insns
>= db
->max_insns
) {
124 db
->is_jmp
= DISAS_TOO_MANY
;
129 /* Emit code to exit the TB, as indicated by db->is_jmp. */
130 ops
->tb_stop(db
, cpu
);
131 gen_tb_end(db
->tb
, db
->num_insns
);
133 if (plugin_enabled
) {
134 plugin_gen_tb_end(cpu
);
137 /* The disas_log hook may use these values rather than recompute. */
138 tb
->size
= db
->pc_next
- db
->pc_first
;
139 tb
->icount
= db
->num_insns
;
142 if (qemu_loglevel_mask(CPU_LOG_TB_IN_ASM
)
143 && qemu_log_in_addr_range(db
->pc_first
)) {
144 FILE *logfile
= qemu_log_trylock();
146 fprintf(logfile
, "----------------\n");
147 ops
->disas_log(db
, cpu
, logfile
);
148 fprintf(logfile
, "\n");
149 qemu_log_unlock(logfile
);
155 static void *translator_access(CPUArchState
*env
, DisasContextBase
*db
,
156 target_ulong pc
, size_t len
)
159 target_ulong base
, end
;
160 TranslationBlock
*tb
;
164 /* Use slow path if first page is MMIO. */
165 if (unlikely(tb_page_addr0(tb
) == -1)) {
170 if (likely(is_same_page(db
, end
))) {
171 host
= db
->host_addr
[0];
174 host
= db
->host_addr
[1];
175 base
= TARGET_PAGE_ALIGN(db
->pc_first
);
177 tb_page_addr_t phys_page
=
178 get_page_addr_code_hostp(env
, base
, &db
->host_addr
[1]);
179 /* We cannot handle MMIO as second page. */
180 assert(phys_page
!= -1);
181 tb_set_page_addr1(tb
, phys_page
);
182 #ifdef CONFIG_USER_ONLY
185 host
= db
->host_addr
[1];
188 /* Use slow path when crossing pages. */
189 if (is_same_page(db
, pc
)) {
194 tcg_debug_assert(pc
>= base
);
195 return host
+ (pc
- base
);
198 uint8_t translator_ldub(CPUArchState
*env
, DisasContextBase
*db
, abi_ptr pc
)
201 void *p
= translator_access(env
, db
, pc
, sizeof(ret
));
204 plugin_insn_append(pc
, p
, sizeof(ret
));
207 ret
= cpu_ldub_code(env
, pc
);
208 plugin_insn_append(pc
, &ret
, sizeof(ret
));
212 uint16_t translator_lduw(CPUArchState
*env
, DisasContextBase
*db
, abi_ptr pc
)
215 void *p
= translator_access(env
, db
, pc
, sizeof(ret
));
218 plugin_insn_append(pc
, p
, sizeof(ret
));
221 ret
= cpu_lduw_code(env
, pc
);
223 plugin_insn_append(pc
, &plug
, sizeof(ret
));
227 uint32_t translator_ldl(CPUArchState
*env
, DisasContextBase
*db
, abi_ptr pc
)
230 void *p
= translator_access(env
, db
, pc
, sizeof(ret
));
233 plugin_insn_append(pc
, p
, sizeof(ret
));
236 ret
= cpu_ldl_code(env
, pc
);
238 plugin_insn_append(pc
, &plug
, sizeof(ret
));
242 uint64_t translator_ldq(CPUArchState
*env
, DisasContextBase
*db
, abi_ptr pc
)
245 void *p
= translator_access(env
, db
, pc
, sizeof(ret
));
248 plugin_insn_append(pc
, p
, sizeof(ret
));
251 ret
= cpu_ldq_code(env
, pc
);
253 plugin_insn_append(pc
, &plug
, sizeof(ret
));