esp: check command buffer length before write(CVE-2016-4439)
[qemu/ar7.git] / include / exec / cpu-all.h
blob391157643111bce45d8290b0d89e34cee5ee75a7
1 /*
2 * defines common to all virtual CPUs
4 * Copyright (c) 2003 Fabrice Bellard
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
19 #ifndef CPU_ALL_H
20 #define CPU_ALL_H
22 #include "qemu-common.h"
23 #include "exec/cpu-common.h"
24 #include "exec/memory.h"
25 #include "qemu/thread.h"
26 #include "qom/cpu.h"
27 #include "qemu/rcu.h"
29 #define EXCP_INTERRUPT 0x10000 /* async interruption */
30 #define EXCP_HLT 0x10001 /* hlt instruction reached */
31 #define EXCP_DEBUG 0x10002 /* cpu stopped after a breakpoint or singlestep */
32 #define EXCP_HALTED 0x10003 /* cpu is halted (waiting for external event) */
33 #define EXCP_YIELD 0x10004 /* cpu wants to yield timeslice to another */
35 /* some important defines:
37 * WORDS_ALIGNED : if defined, the host cpu can only make word aligned
38 * memory accesses.
40 * HOST_WORDS_BIGENDIAN : if defined, the host cpu is big endian and
41 * otherwise little endian.
43 * (TARGET_WORDS_ALIGNED : same for target cpu (not supported yet))
45 * TARGET_WORDS_BIGENDIAN : same for target cpu
48 #if defined(HOST_WORDS_BIGENDIAN) != defined(TARGET_WORDS_BIGENDIAN)
49 #define BSWAP_NEEDED
50 #endif
52 #ifdef BSWAP_NEEDED
54 static inline uint16_t tswap16(uint16_t s)
56 return bswap16(s);
59 static inline uint32_t tswap32(uint32_t s)
61 return bswap32(s);
64 static inline uint64_t tswap64(uint64_t s)
66 return bswap64(s);
69 static inline void tswap16s(uint16_t *s)
71 *s = bswap16(*s);
74 static inline void tswap32s(uint32_t *s)
76 *s = bswap32(*s);
79 static inline void tswap64s(uint64_t *s)
81 *s = bswap64(*s);
84 #else
86 static inline uint16_t tswap16(uint16_t s)
88 return s;
91 static inline uint32_t tswap32(uint32_t s)
93 return s;
96 static inline uint64_t tswap64(uint64_t s)
98 return s;
101 static inline void tswap16s(uint16_t *s)
105 static inline void tswap32s(uint32_t *s)
109 static inline void tswap64s(uint64_t *s)
113 #endif
115 #if TARGET_LONG_SIZE == 4
116 #define tswapl(s) tswap32(s)
117 #define tswapls(s) tswap32s((uint32_t *)(s))
118 #define bswaptls(s) bswap32s(s)
119 #else
120 #define tswapl(s) tswap64(s)
121 #define tswapls(s) tswap64s((uint64_t *)(s))
122 #define bswaptls(s) bswap64s(s)
123 #endif
125 /* Target-endianness CPU memory access functions. These fit into the
126 * {ld,st}{type}{sign}{size}{endian}_p naming scheme described in bswap.h.
128 #if defined(TARGET_WORDS_BIGENDIAN)
129 #define lduw_p(p) lduw_be_p(p)
130 #define ldsw_p(p) ldsw_be_p(p)
131 #define ldl_p(p) ldl_be_p(p)
132 #define ldq_p(p) ldq_be_p(p)
133 #define ldfl_p(p) ldfl_be_p(p)
134 #define ldfq_p(p) ldfq_be_p(p)
135 #define stw_p(p, v) stw_be_p(p, v)
136 #define stl_p(p, v) stl_be_p(p, v)
137 #define stq_p(p, v) stq_be_p(p, v)
138 #define stfl_p(p, v) stfl_be_p(p, v)
139 #define stfq_p(p, v) stfq_be_p(p, v)
140 #else
141 #define lduw_p(p) lduw_le_p(p)
142 #define ldsw_p(p) ldsw_le_p(p)
143 #define ldl_p(p) ldl_le_p(p)
144 #define ldq_p(p) ldq_le_p(p)
145 #define ldfl_p(p) ldfl_le_p(p)
146 #define ldfq_p(p) ldfq_le_p(p)
147 #define stw_p(p, v) stw_le_p(p, v)
148 #define stl_p(p, v) stl_le_p(p, v)
149 #define stq_p(p, v) stq_le_p(p, v)
150 #define stfl_p(p, v) stfl_le_p(p, v)
151 #define stfq_p(p, v) stfq_le_p(p, v)
152 #endif
154 /* MMU memory access macros */
156 #if defined(CONFIG_USER_ONLY)
157 #include "exec/user/abitypes.h"
159 /* On some host systems the guest address space is reserved on the host.
160 * This allows the guest address space to be offset to a convenient location.
162 extern unsigned long guest_base;
163 extern int have_guest_base;
164 extern unsigned long reserved_va;
166 #define GUEST_ADDR_MAX (reserved_va ? reserved_va : \
167 (1ul << TARGET_VIRT_ADDR_SPACE_BITS) - 1)
168 #else
170 #include "exec/hwaddr.h"
171 uint32_t lduw_phys(AddressSpace *as, hwaddr addr);
172 uint32_t ldl_phys(AddressSpace *as, hwaddr addr);
173 uint64_t ldq_phys(AddressSpace *as, hwaddr addr);
174 void stl_phys_notdirty(AddressSpace *as, hwaddr addr, uint32_t val);
175 void stw_phys(AddressSpace *as, hwaddr addr, uint32_t val);
176 void stl_phys(AddressSpace *as, hwaddr addr, uint32_t val);
177 void stq_phys(AddressSpace *as, hwaddr addr, uint64_t val);
179 uint32_t address_space_lduw(AddressSpace *as, hwaddr addr,
180 MemTxAttrs attrs, MemTxResult *result);
181 uint32_t address_space_ldl(AddressSpace *as, hwaddr addr,
182 MemTxAttrs attrs, MemTxResult *result);
183 uint64_t address_space_ldq(AddressSpace *as, hwaddr addr,
184 MemTxAttrs attrs, MemTxResult *result);
185 void address_space_stl_notdirty(AddressSpace *as, hwaddr addr, uint32_t val,
186 MemTxAttrs attrs, MemTxResult *result);
187 void address_space_stw(AddressSpace *as, hwaddr addr, uint32_t val,
188 MemTxAttrs attrs, MemTxResult *result);
189 void address_space_stl(AddressSpace *as, hwaddr addr, uint32_t val,
190 MemTxAttrs attrs, MemTxResult *result);
191 void address_space_stq(AddressSpace *as, hwaddr addr, uint64_t val,
192 MemTxAttrs attrs, MemTxResult *result);
193 #endif
195 /* page related stuff */
197 #define TARGET_PAGE_SIZE (1 << TARGET_PAGE_BITS)
198 #define TARGET_PAGE_MASK ~(TARGET_PAGE_SIZE - 1)
199 #define TARGET_PAGE_ALIGN(addr) (((addr) + TARGET_PAGE_SIZE - 1) & TARGET_PAGE_MASK)
201 /* Using intptr_t ensures that qemu_*_page_mask is sign-extended even
202 * when intptr_t is 32-bit and we are aligning a long long.
204 extern uintptr_t qemu_real_host_page_size;
205 extern intptr_t qemu_real_host_page_mask;
206 extern uintptr_t qemu_host_page_size;
207 extern intptr_t qemu_host_page_mask;
209 #define HOST_PAGE_ALIGN(addr) (((addr) + qemu_host_page_size - 1) & qemu_host_page_mask)
210 #define REAL_HOST_PAGE_ALIGN(addr) (((addr) + qemu_real_host_page_size - 1) & \
211 qemu_real_host_page_mask)
213 /* same as PROT_xxx */
214 #define PAGE_READ 0x0001
215 #define PAGE_WRITE 0x0002
216 #define PAGE_EXEC 0x0004
217 #define PAGE_BITS (PAGE_READ | PAGE_WRITE | PAGE_EXEC)
218 #define PAGE_VALID 0x0008
219 /* original state of the write flag (used when tracking self-modifying
220 code */
221 #define PAGE_WRITE_ORG 0x0010
222 #if defined(CONFIG_BSD) && defined(CONFIG_USER_ONLY)
223 /* FIXME: Code that sets/uses this is broken and needs to go away. */
224 #define PAGE_RESERVED 0x0020
225 #endif
227 #if defined(CONFIG_USER_ONLY)
228 void page_dump(FILE *f);
230 typedef int (*walk_memory_regions_fn)(void *, target_ulong,
231 target_ulong, unsigned long);
232 int walk_memory_regions(void *, walk_memory_regions_fn);
234 int page_get_flags(target_ulong address);
235 void page_set_flags(target_ulong start, target_ulong end, int flags);
236 int page_check_range(target_ulong start, target_ulong len, int flags);
237 #endif
239 CPUArchState *cpu_copy(CPUArchState *env);
241 /* Flags for use in ENV->INTERRUPT_PENDING.
243 The numbers assigned here are non-sequential in order to preserve
244 binary compatibility with the vmstate dump. Bit 0 (0x0001) was
245 previously used for CPU_INTERRUPT_EXIT, and is cleared when loading
246 the vmstate dump. */
248 /* External hardware interrupt pending. This is typically used for
249 interrupts from devices. */
250 #define CPU_INTERRUPT_HARD 0x0002
252 /* Exit the current TB. This is typically used when some system-level device
253 makes some change to the memory mapping. E.g. the a20 line change. */
254 #define CPU_INTERRUPT_EXITTB 0x0004
256 /* Halt the CPU. */
257 #define CPU_INTERRUPT_HALT 0x0020
259 /* Debug event pending. */
260 #define CPU_INTERRUPT_DEBUG 0x0080
262 /* Reset signal. */
263 #define CPU_INTERRUPT_RESET 0x0400
265 /* Several target-specific external hardware interrupts. Each target/cpu.h
266 should define proper names based on these defines. */
267 #define CPU_INTERRUPT_TGT_EXT_0 0x0008
268 #define CPU_INTERRUPT_TGT_EXT_1 0x0010
269 #define CPU_INTERRUPT_TGT_EXT_2 0x0040
270 #define CPU_INTERRUPT_TGT_EXT_3 0x0200
271 #define CPU_INTERRUPT_TGT_EXT_4 0x1000
273 /* Several target-specific internal interrupts. These differ from the
274 preceding target-specific interrupts in that they are intended to
275 originate from within the cpu itself, typically in response to some
276 instruction being executed. These, therefore, are not masked while
277 single-stepping within the debugger. */
278 #define CPU_INTERRUPT_TGT_INT_0 0x0100
279 #define CPU_INTERRUPT_TGT_INT_1 0x0800
280 #define CPU_INTERRUPT_TGT_INT_2 0x2000
282 /* First unused bit: 0x4000. */
284 /* The set of all bits that should be masked when single-stepping. */
285 #define CPU_INTERRUPT_SSTEP_MASK \
286 (CPU_INTERRUPT_HARD \
287 | CPU_INTERRUPT_TGT_EXT_0 \
288 | CPU_INTERRUPT_TGT_EXT_1 \
289 | CPU_INTERRUPT_TGT_EXT_2 \
290 | CPU_INTERRUPT_TGT_EXT_3 \
291 | CPU_INTERRUPT_TGT_EXT_4)
293 #if !defined(CONFIG_USER_ONLY)
295 /* Flags stored in the low bits of the TLB virtual address. These are
296 defined so that fast path ram access is all zeros. */
297 /* Zero if TLB entry is valid. */
298 #define TLB_INVALID_MASK (1 << 3)
299 /* Set if TLB entry references a clean RAM page. The iotlb entry will
300 contain the page physical address. */
301 #define TLB_NOTDIRTY (1 << 4)
302 /* Set if TLB entry is an IO callback. */
303 #define TLB_MMIO (1 << 5)
305 void dump_exec_info(FILE *f, fprintf_function cpu_fprintf);
306 void dump_opcount_info(FILE *f, fprintf_function cpu_fprintf);
307 #endif /* !CONFIG_USER_ONLY */
309 int cpu_memory_rw_debug(CPUState *cpu, target_ulong addr,
310 uint8_t *buf, int len, int is_write);
312 #endif /* CPU_ALL_H */