libvduse: Add support for reconnecting
[qemu.git] / disas / capstone.c
blob20bc8f9669553be37b673a7146bc89589ec1e112
1 /*
2 * Interface to the capstone disassembler.
3 * SPDX-License-Identifier: GPL-2.0-or-later
4 */
6 #include "qemu/osdep.h"
7 #include "qemu/bswap.h"
8 #include "disas/dis-asm.h"
9 #include "disas/capstone.h"
13 * Temporary storage for the capstone library. This will be alloced via
14 * malloc with a size private to the library; thus there's no reason not
15 * to share this across calls and across host vs target disassembly.
17 static __thread cs_insn *cap_insn;
20 * The capstone library always skips 2 bytes for S390X.
21 * This is less than ideal, since we can tell from the first two bits
22 * the size of the insn and thus stay in sync with the insn stream.
24 static size_t CAPSTONE_API
25 cap_skipdata_s390x_cb(const uint8_t *code, size_t code_size,
26 size_t offset, void *user_data)
28 size_t ilen;
30 /* See get_ilen() in target/s390x/internal.h. */
31 switch (code[offset] >> 6) {
32 case 0:
33 ilen = 2;
34 break;
35 case 1:
36 case 2:
37 ilen = 4;
38 break;
39 default:
40 ilen = 6;
41 break;
44 return ilen;
47 static const cs_opt_skipdata cap_skipdata_s390x = {
48 .mnemonic = ".byte",
49 .callback = cap_skipdata_s390x_cb
53 * Initialize the Capstone library.
55 * ??? It would be nice to cache this. We would need one handle for the
56 * host and one for the target. For most targets we can reset specific
57 * parameters via cs_option(CS_OPT_MODE, new_mode), but we cannot change
58 * CS_ARCH_* in this way. Thus we would need to be able to close and
59 * re-open the target handle with a different arch for the target in order
60 * to handle AArch64 vs AArch32 mode switching.
62 static cs_err cap_disas_start(disassemble_info *info, csh *handle)
64 cs_mode cap_mode = info->cap_mode;
65 cs_err err;
67 cap_mode += (info->endian == BFD_ENDIAN_BIG ? CS_MODE_BIG_ENDIAN
68 : CS_MODE_LITTLE_ENDIAN);
70 err = cs_open(info->cap_arch, cap_mode, handle);
71 if (err != CS_ERR_OK) {
72 return err;
75 /* "Disassemble" unknown insns as ".byte W,X,Y,Z". */
76 cs_option(*handle, CS_OPT_SKIPDATA, CS_OPT_ON);
78 switch (info->cap_arch) {
79 case CS_ARCH_SYSZ:
80 cs_option(*handle, CS_OPT_SKIPDATA_SETUP,
81 (uintptr_t)&cap_skipdata_s390x);
82 break;
84 case CS_ARCH_X86:
86 * We don't care about errors (if for some reason the library
87 * is compiled without AT&T syntax); the user will just have
88 * to deal with the Intel syntax.
90 cs_option(*handle, CS_OPT_SYNTAX, CS_OPT_SYNTAX_ATT);
91 break;
94 /* Allocate temp space for cs_disasm_iter. */
95 if (cap_insn == NULL) {
96 cap_insn = cs_malloc(*handle);
97 if (cap_insn == NULL) {
98 cs_close(handle);
99 return CS_ERR_MEM;
102 return CS_ERR_OK;
105 static void cap_dump_insn_units(disassemble_info *info, cs_insn *insn,
106 int i, int n)
108 fprintf_function print = info->fprintf_func;
109 FILE *stream = info->stream;
111 switch (info->cap_insn_unit) {
112 case 4:
113 if (info->endian == BFD_ENDIAN_BIG) {
114 for (; i < n; i += 4) {
115 print(stream, " %08x", ldl_be_p(insn->bytes + i));
118 } else {
119 for (; i < n; i += 4) {
120 print(stream, " %08x", ldl_le_p(insn->bytes + i));
123 break;
125 case 2:
126 if (info->endian == BFD_ENDIAN_BIG) {
127 for (; i < n; i += 2) {
128 print(stream, " %04x", lduw_be_p(insn->bytes + i));
130 } else {
131 for (; i < n; i += 2) {
132 print(stream, " %04x", lduw_le_p(insn->bytes + i));
135 break;
137 default:
138 for (; i < n; i++) {
139 print(stream, " %02x", insn->bytes[i]);
141 break;
145 static void cap_dump_insn(disassemble_info *info, cs_insn *insn)
147 fprintf_function print = info->fprintf_func;
148 FILE *stream = info->stream;
149 int i, n, split;
151 print(stream, "0x%08" PRIx64 ": ", insn->address);
153 n = insn->size;
154 split = info->cap_insn_split;
156 /* Dump the first SPLIT bytes of the instruction. */
157 cap_dump_insn_units(info, insn, 0, MIN(n, split));
159 /* Add padding up to SPLIT so that mnemonics line up. */
160 if (n < split) {
161 int width = (split - n) / info->cap_insn_unit;
162 width *= (2 * info->cap_insn_unit + 1);
163 print(stream, "%*s", width, "");
166 /* Print the actual instruction. */
167 print(stream, " %-8s %s\n", insn->mnemonic, insn->op_str);
169 /* Dump any remaining part of the insn on subsequent lines. */
170 for (i = split; i < n; i += split) {
171 print(stream, "0x%08" PRIx64 ": ", insn->address + i);
172 cap_dump_insn_units(info, insn, i, MIN(n, i + split));
173 print(stream, "\n");
177 /* Disassemble SIZE bytes at PC for the target. */
178 bool cap_disas_target(disassemble_info *info, uint64_t pc, size_t size)
180 uint8_t cap_buf[1024];
181 csh handle;
182 cs_insn *insn;
183 size_t csize = 0;
185 if (cap_disas_start(info, &handle) != CS_ERR_OK) {
186 return false;
188 insn = cap_insn;
190 while (1) {
191 size_t tsize = MIN(sizeof(cap_buf) - csize, size);
192 const uint8_t *cbuf = cap_buf;
194 info->read_memory_func(pc + csize, cap_buf + csize, tsize, info);
195 csize += tsize;
196 size -= tsize;
198 while (cs_disasm_iter(handle, &cbuf, &csize, &pc, insn)) {
199 cap_dump_insn(info, insn);
202 /* If the target memory is not consumed, go back for more... */
203 if (size != 0) {
205 * ... taking care to move any remaining fractional insn
206 * to the beginning of the buffer.
208 if (csize != 0) {
209 memmove(cap_buf, cbuf, csize);
211 continue;
215 * Since the target memory is consumed, we should not have
216 * a remaining fractional insn.
218 if (csize != 0) {
219 info->fprintf_func(info->stream,
220 "Disassembler disagrees with translator "
221 "over instruction decoding\n"
222 "Please report this to qemu-devel@nongnu.org\n");
224 break;
227 cs_close(&handle);
228 return true;
231 /* Disassemble SIZE bytes at CODE for the host. */
232 bool cap_disas_host(disassemble_info *info, const void *code, size_t size)
234 csh handle;
235 const uint8_t *cbuf;
236 cs_insn *insn;
237 uint64_t pc;
239 if (cap_disas_start(info, &handle) != CS_ERR_OK) {
240 return false;
242 insn = cap_insn;
244 cbuf = code;
245 pc = (uintptr_t)code;
247 while (cs_disasm_iter(handle, &cbuf, &size, &pc, insn)) {
248 cap_dump_insn(info, insn);
250 if (size != 0) {
251 info->fprintf_func(info->stream,
252 "Disassembler disagrees with TCG over instruction encoding\n"
253 "Please report this to qemu-devel@nongnu.org\n");
256 cs_close(&handle);
257 return true;
260 /* Disassemble COUNT insns at PC for the target. */
261 bool cap_disas_monitor(disassemble_info *info, uint64_t pc, int count)
263 uint8_t cap_buf[32];
264 csh handle;
265 cs_insn *insn;
266 size_t csize = 0;
268 if (cap_disas_start(info, &handle) != CS_ERR_OK) {
269 return false;
271 insn = cap_insn;
273 while (1) {
275 * We want to read memory for one insn, but generically we do not
276 * know how much memory that is. We have a small buffer which is
277 * known to be sufficient for all supported targets. Try to not
278 * read beyond the page, Just In Case. For even more simplicity,
279 * ignore the actual target page size and use a 1k boundary. If
280 * that turns out to be insufficient, we'll come back around the
281 * loop and read more.
283 uint64_t epc = QEMU_ALIGN_UP(pc + csize + 1, 1024);
284 size_t tsize = MIN(sizeof(cap_buf) - csize, epc - pc);
285 const uint8_t *cbuf = cap_buf;
287 /* Make certain that we can make progress. */
288 assert(tsize != 0);
289 info->read_memory_func(pc + csize, cap_buf + csize, tsize, info);
290 csize += tsize;
292 if (cs_disasm_iter(handle, &cbuf, &csize, &pc, insn)) {
293 cap_dump_insn(info, insn);
294 if (--count <= 0) {
295 break;
298 memmove(cap_buf, cbuf, csize);
301 cs_close(&handle);
302 return true;
305 /* Disassemble a single instruction directly into plugin output */
306 bool cap_disas_plugin(disassemble_info *info, uint64_t pc, size_t size)
308 uint8_t cap_buf[32];
309 const uint8_t *cbuf = cap_buf;
310 csh handle;
312 if (cap_disas_start(info, &handle) != CS_ERR_OK) {
313 return false;
316 assert(size < sizeof(cap_buf));
317 info->read_memory_func(pc, cap_buf, size, info);
319 if (cs_disasm_iter(handle, &cbuf, &size, &pc, cap_insn)) {
320 info->fprintf_func(info->stream, "%s %s",
321 cap_insn->mnemonic, cap_insn->op_str);
324 cs_close(&handle);
325 return true;