4 * Copyright (c) 2003 Fabrice Bellard
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
21 #include "exec/ioport.h"
24 #if !defined(CONFIG_USER_ONLY)
25 #include "exec/softmmu_exec.h"
26 #endif /* !defined(CONFIG_USER_ONLY) */
28 /* check if Port I/O is allowed in TSS */
29 static inline void check_io(CPUX86State
*env
, int addr
, int size
)
31 int io_offset
, val
, mask
;
33 /* TSS must be a valid 32 bit one */
34 if (!(env
->tr
.flags
& DESC_P_MASK
) ||
35 ((env
->tr
.flags
>> DESC_TYPE_SHIFT
) & 0xf) != 9 ||
36 env
->tr
.limit
< 103) {
39 io_offset
= cpu_lduw_kernel(env
, env
->tr
.base
+ 0x66);
40 io_offset
+= (addr
>> 3);
41 /* Note: the check needs two bytes */
42 if ((io_offset
+ 1) > env
->tr
.limit
) {
45 val
= cpu_lduw_kernel(env
, env
->tr
.base
+ io_offset
);
47 mask
= (1 << size
) - 1;
48 /* all bits must be zero to allow the I/O */
49 if ((val
& mask
) != 0) {
51 raise_exception_err(env
, EXCP0D_GPF
, 0);
55 void helper_check_iob(CPUX86State
*env
, uint32_t t0
)
60 void helper_check_iow(CPUX86State
*env
, uint32_t t0
)
65 void helper_check_iol(CPUX86State
*env
, uint32_t t0
)
70 void helper_outb(uint32_t port
, uint32_t data
)
72 cpu_outb(port
, data
& 0xff);
75 target_ulong
helper_inb(uint32_t port
)
80 void helper_outw(uint32_t port
, uint32_t data
)
82 cpu_outw(port
, data
& 0xffff);
85 target_ulong
helper_inw(uint32_t port
)
90 void helper_outl(uint32_t port
, uint32_t data
)
95 target_ulong
helper_inl(uint32_t port
)
100 void helper_into(CPUX86State
*env
, int next_eip_addend
)
104 eflags
= cpu_cc_compute_all(env
, CC_OP
);
106 raise_interrupt(env
, EXCP04_INTO
, 1, 0, next_eip_addend
);
110 void helper_single_step(CPUX86State
*env
)
112 #ifndef CONFIG_USER_ONLY
113 check_hw_breakpoints(env
, true);
114 env
->dr
[6] |= DR6_BS
;
116 raise_exception(env
, EXCP01_DB
);
119 void helper_cpuid(CPUX86State
*env
)
121 uint32_t eax
, ebx
, ecx
, edx
;
123 cpu_svm_check_intercept_param(env
, SVM_EXIT_CPUID
, 0);
125 cpu_x86_cpuid(env
, (uint32_t)env
->regs
[R_EAX
], (uint32_t)env
->regs
[R_ECX
],
126 &eax
, &ebx
, &ecx
, &edx
);
127 env
->regs
[R_EAX
] = eax
;
128 env
->regs
[R_EBX
] = ebx
;
129 env
->regs
[R_ECX
] = ecx
;
130 env
->regs
[R_EDX
] = edx
;
133 #if defined(CONFIG_USER_ONLY)
134 target_ulong
helper_read_crN(CPUX86State
*env
, int reg
)
139 void helper_write_crN(CPUX86State
*env
, int reg
, target_ulong t0
)
143 void helper_movl_drN_T0(CPUX86State
*env
, int reg
, target_ulong t0
)
147 target_ulong
helper_read_crN(CPUX86State
*env
, int reg
)
151 cpu_svm_check_intercept_param(env
, SVM_EXIT_READ_CR0
+ reg
, 0);
157 if (!(env
->hflags2
& HF2_VINTR_MASK
)) {
158 val
= cpu_get_apic_tpr(env
->apic_state
);
167 void helper_write_crN(CPUX86State
*env
, int reg
, target_ulong t0
)
169 cpu_svm_check_intercept_param(env
, SVM_EXIT_WRITE_CR0
+ reg
, 0);
172 cpu_x86_update_cr0(env
, t0
);
175 cpu_x86_update_cr3(env
, t0
);
178 cpu_x86_update_cr4(env
, t0
);
181 if (!(env
->hflags2
& HF2_VINTR_MASK
)) {
182 cpu_set_apic_tpr(env
->apic_state
, t0
);
184 env
->v_tpr
= t0
& 0x0f;
192 void helper_movl_drN_T0(CPUX86State
*env
, int reg
, target_ulong t0
)
197 hw_breakpoint_remove(env
, reg
);
199 hw_breakpoint_insert(env
, reg
);
200 } else if (reg
== 7) {
201 for (i
= 0; i
< DR7_MAX_BP
; i
++) {
202 hw_breakpoint_remove(env
, i
);
205 for (i
= 0; i
< DR7_MAX_BP
; i
++) {
206 hw_breakpoint_insert(env
, i
);
214 void helper_lmsw(CPUX86State
*env
, target_ulong t0
)
216 /* only 4 lower bits of CR0 are modified. PE cannot be set to zero
217 if already set to one. */
218 t0
= (env
->cr
[0] & ~0xe) | (t0
& 0xf);
219 helper_write_crN(env
, 0, t0
);
222 void helper_invlpg(CPUX86State
*env
, target_ulong addr
)
224 cpu_svm_check_intercept_param(env
, SVM_EXIT_INVLPG
, 0);
225 tlb_flush_page(env
, addr
);
228 void helper_rdtsc(CPUX86State
*env
)
232 if ((env
->cr
[4] & CR4_TSD_MASK
) && ((env
->hflags
& HF_CPL_MASK
) != 0)) {
233 raise_exception(env
, EXCP0D_GPF
);
235 cpu_svm_check_intercept_param(env
, SVM_EXIT_RDTSC
, 0);
237 val
= cpu_get_tsc(env
) + env
->tsc_offset
;
238 env
->regs
[R_EAX
] = (uint32_t)(val
);
239 env
->regs
[R_EDX
] = (uint32_t)(val
>> 32);
242 void helper_rdtscp(CPUX86State
*env
)
245 env
->regs
[R_ECX
] = (uint32_t)(env
->tsc_aux
);
248 void helper_rdpmc(CPUX86State
*env
)
250 if ((env
->cr
[4] & CR4_PCE_MASK
) && ((env
->hflags
& HF_CPL_MASK
) != 0)) {
251 raise_exception(env
, EXCP0D_GPF
);
253 cpu_svm_check_intercept_param(env
, SVM_EXIT_RDPMC
, 0);
255 /* currently unimplemented */
256 qemu_log_mask(LOG_UNIMP
, "x86: unimplemented rdpmc\n");
257 raise_exception_err(env
, EXCP06_ILLOP
, 0);
260 #if defined(CONFIG_USER_ONLY)
261 void helper_wrmsr(CPUX86State
*env
)
265 void helper_rdmsr(CPUX86State
*env
)
269 void helper_wrmsr(CPUX86State
*env
)
273 cpu_svm_check_intercept_param(env
, SVM_EXIT_MSR
, 1);
275 val
= ((uint32_t)env
->regs
[R_EAX
]) |
276 ((uint64_t)((uint32_t)env
->regs
[R_EDX
]) << 32);
278 switch ((uint32_t)env
->regs
[R_ECX
]) {
279 case MSR_IA32_SYSENTER_CS
:
280 env
->sysenter_cs
= val
& 0xffff;
282 case MSR_IA32_SYSENTER_ESP
:
283 env
->sysenter_esp
= val
;
285 case MSR_IA32_SYSENTER_EIP
:
286 env
->sysenter_eip
= val
;
288 case MSR_IA32_APICBASE
:
289 cpu_set_apic_base(env
->apic_state
, val
);
293 uint64_t update_mask
;
296 if (env
->features
[FEAT_8000_0001_EDX
] & CPUID_EXT2_SYSCALL
) {
297 update_mask
|= MSR_EFER_SCE
;
299 if (env
->features
[FEAT_8000_0001_EDX
] & CPUID_EXT2_LM
) {
300 update_mask
|= MSR_EFER_LME
;
302 if (env
->features
[FEAT_8000_0001_EDX
] & CPUID_EXT2_FFXSR
) {
303 update_mask
|= MSR_EFER_FFXSR
;
305 if (env
->features
[FEAT_8000_0001_EDX
] & CPUID_EXT2_NX
) {
306 update_mask
|= MSR_EFER_NXE
;
308 if (env
->features
[FEAT_8000_0001_ECX
] & CPUID_EXT3_SVM
) {
309 update_mask
|= MSR_EFER_SVME
;
311 if (env
->features
[FEAT_8000_0001_EDX
] & CPUID_EXT2_FFXSR
) {
312 update_mask
|= MSR_EFER_FFXSR
;
314 cpu_load_efer(env
, (env
->efer
& ~update_mask
) |
315 (val
& update_mask
));
324 case MSR_VM_HSAVE_PA
:
338 env
->segs
[R_FS
].base
= val
;
341 env
->segs
[R_GS
].base
= val
;
343 case MSR_KERNELGSBASE
:
344 env
->kernelgsbase
= val
;
347 case MSR_MTRRphysBase(0):
348 case MSR_MTRRphysBase(1):
349 case MSR_MTRRphysBase(2):
350 case MSR_MTRRphysBase(3):
351 case MSR_MTRRphysBase(4):
352 case MSR_MTRRphysBase(5):
353 case MSR_MTRRphysBase(6):
354 case MSR_MTRRphysBase(7):
355 env
->mtrr_var
[((uint32_t)env
->regs
[R_ECX
] -
356 MSR_MTRRphysBase(0)) / 2].base
= val
;
358 case MSR_MTRRphysMask(0):
359 case MSR_MTRRphysMask(1):
360 case MSR_MTRRphysMask(2):
361 case MSR_MTRRphysMask(3):
362 case MSR_MTRRphysMask(4):
363 case MSR_MTRRphysMask(5):
364 case MSR_MTRRphysMask(6):
365 case MSR_MTRRphysMask(7):
366 env
->mtrr_var
[((uint32_t)env
->regs
[R_ECX
] -
367 MSR_MTRRphysMask(0)) / 2].mask
= val
;
369 case MSR_MTRRfix64K_00000
:
370 env
->mtrr_fixed
[(uint32_t)env
->regs
[R_ECX
] -
371 MSR_MTRRfix64K_00000
] = val
;
373 case MSR_MTRRfix16K_80000
:
374 case MSR_MTRRfix16K_A0000
:
375 env
->mtrr_fixed
[(uint32_t)env
->regs
[R_ECX
] -
376 MSR_MTRRfix16K_80000
+ 1] = val
;
378 case MSR_MTRRfix4K_C0000
:
379 case MSR_MTRRfix4K_C8000
:
380 case MSR_MTRRfix4K_D0000
:
381 case MSR_MTRRfix4K_D8000
:
382 case MSR_MTRRfix4K_E0000
:
383 case MSR_MTRRfix4K_E8000
:
384 case MSR_MTRRfix4K_F0000
:
385 case MSR_MTRRfix4K_F8000
:
386 env
->mtrr_fixed
[(uint32_t)env
->regs
[R_ECX
] -
387 MSR_MTRRfix4K_C0000
+ 3] = val
;
389 case MSR_MTRRdefType
:
390 env
->mtrr_deftype
= val
;
393 env
->mcg_status
= val
;
396 if ((env
->mcg_cap
& MCG_CTL_P
)
397 && (val
== 0 || val
== ~(uint64_t)0)) {
404 case MSR_IA32_MISC_ENABLE
:
405 env
->msr_ia32_misc_enable
= val
;
408 if ((uint32_t)env
->regs
[R_ECX
] >= MSR_MC0_CTL
409 && (uint32_t)env
->regs
[R_ECX
] < MSR_MC0_CTL
+
410 (4 * env
->mcg_cap
& 0xff)) {
411 uint32_t offset
= (uint32_t)env
->regs
[R_ECX
] - MSR_MC0_CTL
;
412 if ((offset
& 0x3) != 0
413 || (val
== 0 || val
== ~(uint64_t)0)) {
414 env
->mce_banks
[offset
] = val
;
418 /* XXX: exception? */
423 void helper_rdmsr(CPUX86State
*env
)
427 cpu_svm_check_intercept_param(env
, SVM_EXIT_MSR
, 0);
429 switch ((uint32_t)env
->regs
[R_ECX
]) {
430 case MSR_IA32_SYSENTER_CS
:
431 val
= env
->sysenter_cs
;
433 case MSR_IA32_SYSENTER_ESP
:
434 val
= env
->sysenter_esp
;
436 case MSR_IA32_SYSENTER_EIP
:
437 val
= env
->sysenter_eip
;
439 case MSR_IA32_APICBASE
:
440 val
= cpu_get_apic_base(env
->apic_state
);
451 case MSR_VM_HSAVE_PA
:
454 case MSR_IA32_PERF_STATUS
:
455 /* tsc_increment_by_tick */
458 val
|= (((uint64_t)4ULL) << 40);
471 val
= env
->segs
[R_FS
].base
;
474 val
= env
->segs
[R_GS
].base
;
476 case MSR_KERNELGSBASE
:
477 val
= env
->kernelgsbase
;
483 case MSR_MTRRphysBase(0):
484 case MSR_MTRRphysBase(1):
485 case MSR_MTRRphysBase(2):
486 case MSR_MTRRphysBase(3):
487 case MSR_MTRRphysBase(4):
488 case MSR_MTRRphysBase(5):
489 case MSR_MTRRphysBase(6):
490 case MSR_MTRRphysBase(7):
491 val
= env
->mtrr_var
[((uint32_t)env
->regs
[R_ECX
] -
492 MSR_MTRRphysBase(0)) / 2].base
;
494 case MSR_MTRRphysMask(0):
495 case MSR_MTRRphysMask(1):
496 case MSR_MTRRphysMask(2):
497 case MSR_MTRRphysMask(3):
498 case MSR_MTRRphysMask(4):
499 case MSR_MTRRphysMask(5):
500 case MSR_MTRRphysMask(6):
501 case MSR_MTRRphysMask(7):
502 val
= env
->mtrr_var
[((uint32_t)env
->regs
[R_ECX
] -
503 MSR_MTRRphysMask(0)) / 2].mask
;
505 case MSR_MTRRfix64K_00000
:
506 val
= env
->mtrr_fixed
[0];
508 case MSR_MTRRfix16K_80000
:
509 case MSR_MTRRfix16K_A0000
:
510 val
= env
->mtrr_fixed
[(uint32_t)env
->regs
[R_ECX
] -
511 MSR_MTRRfix16K_80000
+ 1];
513 case MSR_MTRRfix4K_C0000
:
514 case MSR_MTRRfix4K_C8000
:
515 case MSR_MTRRfix4K_D0000
:
516 case MSR_MTRRfix4K_D8000
:
517 case MSR_MTRRfix4K_E0000
:
518 case MSR_MTRRfix4K_E8000
:
519 case MSR_MTRRfix4K_F0000
:
520 case MSR_MTRRfix4K_F8000
:
521 val
= env
->mtrr_fixed
[(uint32_t)env
->regs
[R_ECX
] -
522 MSR_MTRRfix4K_C0000
+ 3];
524 case MSR_MTRRdefType
:
525 val
= env
->mtrr_deftype
;
528 if (env
->features
[FEAT_1_EDX
] & CPUID_MTRR
) {
529 val
= MSR_MTRRcap_VCNT
| MSR_MTRRcap_FIXRANGE_SUPPORT
|
530 MSR_MTRRcap_WC_SUPPORTED
;
532 /* XXX: exception? */
540 if (env
->mcg_cap
& MCG_CTL_P
) {
547 val
= env
->mcg_status
;
549 case MSR_IA32_MISC_ENABLE
:
550 val
= env
->msr_ia32_misc_enable
;
553 if ((uint32_t)env
->regs
[R_ECX
] >= MSR_MC0_CTL
554 && (uint32_t)env
->regs
[R_ECX
] < MSR_MC0_CTL
+
555 (4 * env
->mcg_cap
& 0xff)) {
556 uint32_t offset
= (uint32_t)env
->regs
[R_ECX
] - MSR_MC0_CTL
;
557 val
= env
->mce_banks
[offset
];
560 /* XXX: exception? */
564 env
->regs
[R_EAX
] = (uint32_t)(val
);
565 env
->regs
[R_EDX
] = (uint32_t)(val
>> 32);
569 static void do_hlt(X86CPU
*cpu
)
571 CPUState
*cs
= CPU(cpu
);
572 CPUX86State
*env
= &cpu
->env
;
574 env
->hflags
&= ~HF_INHIBIT_IRQ_MASK
; /* needed if sti is just before */
576 env
->exception_index
= EXCP_HLT
;
580 void helper_hlt(CPUX86State
*env
, int next_eip_addend
)
582 X86CPU
*cpu
= x86_env_get_cpu(env
);
584 cpu_svm_check_intercept_param(env
, SVM_EXIT_HLT
, 0);
585 env
->eip
+= next_eip_addend
;
590 void helper_monitor(CPUX86State
*env
, target_ulong ptr
)
592 if ((uint32_t)env
->regs
[R_ECX
] != 0) {
593 raise_exception(env
, EXCP0D_GPF
);
595 /* XXX: store address? */
596 cpu_svm_check_intercept_param(env
, SVM_EXIT_MONITOR
, 0);
599 void helper_mwait(CPUX86State
*env
, int next_eip_addend
)
604 if ((uint32_t)env
->regs
[R_ECX
] != 0) {
605 raise_exception(env
, EXCP0D_GPF
);
607 cpu_svm_check_intercept_param(env
, SVM_EXIT_MWAIT
, 0);
608 env
->eip
+= next_eip_addend
;
610 cpu
= x86_env_get_cpu(env
);
612 /* XXX: not complete but not completely erroneous */
613 if (cs
->cpu_index
!= 0 || cs
->next_cpu
!= NULL
) {
614 /* more than one CPU: do not sleep because another CPU may
621 void helper_debug(CPUX86State
*env
)
623 env
->exception_index
= EXCP_DEBUG
;