darwin-user/main.c

   1 /*
   2  *  qemu user main
   3  *
   4  *  Copyright (c) 2003 Fabrice Bellard
   5  *  Copyright (c) 2006 Pierre d'Herbemont
   6  *
   7  *  This program is free software; you can redistribute it and/or modify
   8  *  it under the terms of the GNU General Public License as published by
   9  *  the Free Software Foundation; either version 2 of the License, or
  10  *  (at your option) any later version.
  11  *
  12  *  This program is distributed in the hope that it will be useful,
  13  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15  *  GNU General Public License for more details.
  16  *
  17  *  You should have received a copy of the GNU General Public License
  18  *  along with this program; if not, write to the Free Software
  19  *  Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston,
  20  *  MA 02110-1301, USA.
  21  */
  22 #include <stdlib.h>
  23 #include <stdio.h>
  24 #include <stdarg.h>
  25 #include <string.h>
  26 #include <errno.h>
  27 #include <unistd.h>
  28
  29 #include <sys/syscall.h>
  30 #include <sys/mman.h>
  31
  32 #include "qemu.h"
  33
  34 #define DEBUG_LOGFILE "/tmp/qemu.log"
  35
  36 #ifdef __APPLE__
  37 #include <crt_externs.h>
  38 # define environ  (*_NSGetEnviron())
  39 #endif
  40
  41 #include <mach/mach_init.h>
  42 #include <mach/vm_map.h>
  43
  44 const char *interp_prefix = "";
  45
  46 asm(".zerofill __STD_PROG_ZONE, __STD_PROG_ZONE, __std_prog_zone, 0x0dfff000");
  47
  48 /* XXX: on x86 MAP_GROWSDOWN only works if ESP <= address + 32, so
  49    we allocate a bigger stack. Need a better solution, for example
  50    by remapping the process stack directly at the right place */
  51 unsigned long stack_size = 512 * 1024;
  52
  53 void qerror(const char *fmt, ...)
  54 {
  55     va_list ap;
  56
  57     va_start(ap, fmt);
  58     vfprintf(stderr, fmt, ap);
  59     va_end(ap);
  60     fprintf(stderr, "\n");
  61     exit(1);
  62 }
  63
  64 void gemu_log(const char *fmt, ...)
  65 {
  66     va_list ap;
  67
  68     va_start(ap, fmt);
  69     vfprintf(stderr, fmt, ap);
  70     va_end(ap);
  71 }
  72
  73 void cpu_outb(CPUState *env, int addr, int val)
  74 {
  75     fprintf(stderr, "outb: port=0x%04x, data=%02x\n", addr, val);
  76 }
  77
  78 void cpu_outw(CPUState *env, int addr, int val)
  79 {
  80     fprintf(stderr, "outw: port=0x%04x, data=%04x\n", addr, val);
  81 }
  82
  83 void cpu_outl(CPUState *env, int addr, int val)
  84 {
  85     fprintf(stderr, "outl: port=0x%04x, data=%08x\n", addr, val);
  86 }
  87
  88 int cpu_inb(CPUState *env, int addr)
  89 {
  90     fprintf(stderr, "inb: port=0x%04x\n", addr);
  91     return 0;
  92 }
  93
  94 int cpu_inw(CPUState *env, int addr)
  95 {
  96     fprintf(stderr, "inw: port=0x%04x\n", addr);
  97     return 0;
  98 }
  99
 100 int cpu_inl(CPUState *env, int addr)
 101 {
 102     fprintf(stderr, "inl: port=0x%04x\n", addr);
 103     return 0;
 104 }
 105
 106 int cpu_get_pic_interrupt(CPUState *env)
 107 {
 108     return -1;
 109 }
 110 #ifdef TARGET_PPC
 111
 112 static inline uint64_t cpu_ppc_get_tb (CPUState *env)
 113 {
 114     /* TO FIX */
 115     return 0;
 116 }
 117
 118 uint32_t cpu_ppc_load_tbl (CPUState *env)
 119 {
 120     return cpu_ppc_get_tb(env) & 0xFFFFFFFF;
 121 }
 122
 123 uint32_t cpu_ppc_load_tbu (CPUState *env)
 124 {
 125     return cpu_ppc_get_tb(env) >> 32;
 126 }
 127
 128 uint32_t cpu_ppc_load_atbl (CPUState *env)
 129 {
 130     return cpu_ppc_get_tb(env) & 0xFFFFFFFF;
 131 }
 132
 133 uint32_t cpu_ppc_load_atbu (CPUState *env)
 134 {
 135     return cpu_ppc_get_tb(env) >> 32;
 136 }
 137
 138 uint32_t cpu_ppc601_load_rtcu (CPUState *env)
 139 {
 140     cpu_ppc_load_tbu(env);
 141 }
 142
 143 uint32_t cpu_ppc601_load_rtcl (CPUState *env)
 144 {
 145     return cpu_ppc_load_tbl(env) & 0x3FFFFF80;
 146 }
 147
 148 /* XXX: to be fixed */
 149 int ppc_dcr_read (ppc_dcr_t *dcr_env, int dcrn, target_ulong *valp)
 150 {
 151     return -1;
 152 }
 153
 154 int ppc_dcr_write (ppc_dcr_t *dcr_env, int dcrn, target_ulong val)
 155 {
 156     return -1;
 157 }
 158
 159 #define EXCP_DUMP(env, fmt, args...)                                         \
 160 do {                                                                          \
 161     fprintf(stderr, fmt , ##args);                                            \
 162     cpu_dump_state(env, stderr, fprintf, 0);                                  \
 163     qemu_log(fmt, ##args);                                                   \
 164     log_cpu_state(env, 0);                                                      \
 165 } while (0)
 166
 167 void cpu_loop(CPUPPCState *env)
 168 {
 169     int trapnr;
 170     uint32_t ret;
 171     target_siginfo_t info;
 172
 173     for(;;) {
 174         trapnr = cpu_ppc_exec(env);
 175         switch(trapnr) {
 176         case POWERPC_EXCP_NONE:
 177             /* Just go on */
 178             break;
 179         case POWERPC_EXCP_CRITICAL: /* Critical input                        */
 180             cpu_abort(env, "Critical interrupt while in user mode. "
 181                       "Aborting\n");
 182             break;
 183         case POWERPC_EXCP_MCHECK:   /* Machine check exception               */
 184             cpu_abort(env, "Machine check exception while in user mode. "
 185                       "Aborting\n");
 186             break;
 187         case POWERPC_EXCP_DSI:      /* Data storage exception                */
 188 #ifndef DAR
 189 /* To deal with multiple qemu header version as host for the darwin-user code */
 190 # define DAR SPR_DAR
 191 #endif
 192             EXCP_DUMP(env, "Invalid data memory access: 0x" ADDRX "\n",
 193                       env->spr[SPR_DAR]);
 194             /* Handle this via the gdb */
 195             gdb_handlesig (env, SIGSEGV);
 196
 197             info.si_addr = (void*)env->nip;
 198             queue_signal(info.si_signo, &info);
 199             break;
 200         case POWERPC_EXCP_ISI:      /* Instruction storage exception         */
 201             EXCP_DUMP(env, "Invalid instruction fetch: 0x\n" ADDRX "\n",
 202                       env->spr[SPR_DAR]);
 203             /* Handle this via the gdb */
 204             gdb_handlesig (env, SIGSEGV);
 205
 206             info.si_addr = (void*)(env->nip - 4);
 207             queue_signal(info.si_signo, &info);
 208             break;
 209         case POWERPC_EXCP_EXTERNAL: /* External input                        */
 210             cpu_abort(env, "External interrupt while in user mode. "
 211                       "Aborting\n");
 212             break;
 213         case POWERPC_EXCP_ALIGN:    /* Alignment exception                   */
 214             EXCP_DUMP(env, "Unaligned memory access\n");
 215             info.si_errno = 0;
 216             info.si_code = BUS_ADRALN;
 217             info.si_addr = (void*)(env->nip - 4);
 218             queue_signal(info.si_signo, &info);
 219             break;
 220         case POWERPC_EXCP_PROGRAM:  /* Program exception                     */
 221             /* XXX: check this */
 222             switch (env->error_code & ~0xF) {
 223             case POWERPC_EXCP_FP:
 224                 EXCP_DUMP(env, "Floating point program exception\n");
 225                 /* Set FX */
 226                 info.si_signo = SIGFPE;
 227                 info.si_errno = 0;
 228                 switch (env->error_code & 0xF) {
 229                 case POWERPC_EXCP_FP_OX:
 230                     info.si_code = FPE_FLTOVF;
 231                     break;
 232                 case POWERPC_EXCP_FP_UX:
 233                     info.si_code = FPE_FLTUND;
 234                     break;
 235                 case POWERPC_EXCP_FP_ZX:
 236                 case POWERPC_EXCP_FP_VXZDZ:
 237                     info.si_code = FPE_FLTDIV;
 238                     break;
 239                 case POWERPC_EXCP_FP_XX:
 240                     info.si_code = FPE_FLTRES;
 241                     break;
 242                 case POWERPC_EXCP_FP_VXSOFT:
 243                     info.si_code = FPE_FLTINV;
 244                     break;
 245                 case POWERPC_EXCP_FP_VXSNAN:
 246                 case POWERPC_EXCP_FP_VXISI:
 247                 case POWERPC_EXCP_FP_VXIDI:
 248                 case POWERPC_EXCP_FP_VXIMZ:
 249                 case POWERPC_EXCP_FP_VXVC:
 250                 case POWERPC_EXCP_FP_VXSQRT:
 251                 case POWERPC_EXCP_FP_VXCVI:
 252                     info.si_code = FPE_FLTSUB;
 253                     break;
 254                 default:
 255                     EXCP_DUMP(env, "Unknown floating point exception (%02x)\n",
 256                               env->error_code);
 257                     break;
 258                 }
 259                 break;
 260             case POWERPC_EXCP_INVAL:
 261                 EXCP_DUMP(env, "Invalid instruction\n");
 262                 info.si_signo = SIGILL;
 263                 info.si_errno = 0;
 264                 switch (env->error_code & 0xF) {
 265                 case POWERPC_EXCP_INVAL_INVAL:
 266                     info.si_code = ILL_ILLOPC;
 267                     break;
 268                 case POWERPC_EXCP_INVAL_LSWX:
 269                     info.si_code = ILL_ILLOPN;
 270                     break;
 271                 case POWERPC_EXCP_INVAL_SPR:
 272                     info.si_code = ILL_PRVREG;
 273                     break;
 274                 case POWERPC_EXCP_INVAL_FP:
 275                     info.si_code = ILL_COPROC;
 276                     break;
 277                 default:
 278                     EXCP_DUMP(env, "Unknown invalid operation (%02x)\n",
 279                               env->error_code & 0xF);
 280                     info.si_code = ILL_ILLADR;
 281                     break;
 282                 }
 283                 /* Handle this via the gdb */
 284                 gdb_handlesig (env, SIGSEGV);
 285                 break;
 286             case POWERPC_EXCP_PRIV:
 287                 EXCP_DUMP(env, "Privilege violation\n");
 288                 info.si_signo = SIGILL;
 289                 info.si_errno = 0;
 290                 switch (env->error_code & 0xF) {
 291                 case POWERPC_EXCP_PRIV_OPC:
 292                     info.si_code = ILL_PRVOPC;
 293                     break;
 294                 case POWERPC_EXCP_PRIV_REG:
 295                     info.si_code = ILL_PRVREG;
 296                     break;
 297                 default:
 298                     EXCP_DUMP(env, "Unknown privilege violation (%02x)\n",
 299                               env->error_code & 0xF);
 300                     info.si_code = ILL_PRVOPC;
 301                     break;
 302                 }
 303                 break;
 304             case POWERPC_EXCP_TRAP:
 305                 cpu_abort(env, "Tried to call a TRAP\n");
 306                 break;
 307             default:
 308                 /* Should not happen ! */
 309                 cpu_abort(env, "Unknown program exception (%02x)\n",
 310                           env->error_code);
 311                 break;
 312             }
 313             info.si_addr = (void*)(env->nip - 4);
 314             queue_signal(info.si_signo, &info);
 315             break;
 316         case POWERPC_EXCP_FPU:      /* Floating-point unavailable exception  */
 317             EXCP_DUMP(env, "No floating point allowed\n");
 318             info.si_signo = SIGILL;
 319             info.si_errno = 0;
 320             info.si_code = ILL_COPROC;
 321             info.si_addr = (void*)(env->nip - 4);
 322             queue_signal(info.si_signo, &info);
 323             break;
 324         case POWERPC_EXCP_SYSCALL:  /* System call exception                 */
 325             cpu_abort(env, "Syscall exception while in user mode. "
 326                       "Aborting\n");
 327             break;
 328         case POWERPC_EXCP_APU:      /* Auxiliary processor unavailable       */
 329             EXCP_DUMP(env, "No APU instruction allowed\n");
 330             info.si_signo = SIGILL;
 331             info.si_errno = 0;
 332             info.si_code = ILL_COPROC;
 333             info.si_addr = (void*)(env->nip - 4);
 334             queue_signal(info.si_signo, &info);
 335             break;
 336         case POWERPC_EXCP_DECR:     /* Decrementer exception                 */
 337             cpu_abort(env, "Decrementer interrupt while in user mode. "
 338                       "Aborting\n");
 339             break;
 340         case POWERPC_EXCP_FIT:      /* Fixed-interval timer interrupt        */
 341             cpu_abort(env, "Fix interval timer interrupt while in user mode. "
 342                       "Aborting\n");
 343             break;
 344         case POWERPC_EXCP_WDT:      /* Watchdog timer interrupt              */
 345             cpu_abort(env, "Watchdog timer interrupt while in user mode. "
 346                       "Aborting\n");
 347             break;
 348         case POWERPC_EXCP_DTLB:     /* Data TLB error                        */
 349             cpu_abort(env, "Data TLB exception while in user mode. "
 350                       "Aborting\n");
 351             break;
 352         case POWERPC_EXCP_ITLB:     /* Instruction TLB error                 */
 353             cpu_abort(env, "Instruction TLB exception while in user mode. "
 354                       "Aborting\n");
 355             break;
 356         case POWERPC_EXCP_DEBUG:    /* Debug interrupt                       */
 357             gdb_handlesig (env, SIGTRAP);
 358             break;
 359         case POWERPC_EXCP_SPEU:     /* SPE/embedded floating-point unavail.  */
 360             EXCP_DUMP(env, "No SPE/floating-point instruction allowed\n");
 361             info.si_signo = SIGILL;
 362             info.si_errno = 0;
 363             info.si_code = ILL_COPROC;
 364             info.si_addr = (void*)(env->nip - 4);
 365             queue_signal(info.si_signo, &info);
 366             break;
 367         case POWERPC_EXCP_EFPDI:    /* Embedded floating-point data IRQ      */
 368             cpu_abort(env, "Embedded floating-point data IRQ not handled\n");
 369             break;
 370         case POWERPC_EXCP_EFPRI:    /* Embedded floating-point round IRQ     */
 371             cpu_abort(env, "Embedded floating-point round IRQ not handled\n");
 372             break;
 373         case POWERPC_EXCP_EPERFM:   /* Embedded performance monitor IRQ      */
 374             cpu_abort(env, "Performance monitor exception not handled\n");
 375             break;
 376         case POWERPC_EXCP_DOORI:    /* Embedded doorbell interrupt           */
 377             cpu_abort(env, "Doorbell interrupt while in user mode. "
 378                        "Aborting\n");
 379             break;
 380         case POWERPC_EXCP_DOORCI:   /* Embedded doorbell critical interrupt  */
 381             cpu_abort(env, "Doorbell critical interrupt while in user mode. "
 382                       "Aborting\n");
 383             break;
 384         case POWERPC_EXCP_RESET:    /* System reset exception                */
 385             cpu_abort(env, "Reset interrupt while in user mode. "
 386                       "Aborting\n");
 387             break;
 388         case POWERPC_EXCP_DSEG:     /* Data segment exception                */
 389             cpu_abort(env, "Data segment exception while in user mode. "
 390                       "Aborting\n");
 391             break;
 392         case POWERPC_EXCP_ISEG:     /* Instruction segment exception         */
 393             cpu_abort(env, "Instruction segment exception "
 394                       "while in user mode. Aborting\n");
 395             break;
 396         case POWERPC_EXCP_HDECR:    /* Hypervisor decrementer exception      */
 397             cpu_abort(env, "Hypervisor decrementer interrupt "
 398                       "while in user mode. Aborting\n");
 399             break;
 400         case POWERPC_EXCP_TRACE:    /* Trace exception                       */
 401             /* Nothing to do:
 402              * we use this exception to emulate step-by-step execution mode.
 403              */
 404             break;
 405         case POWERPC_EXCP_HDSI:     /* Hypervisor data storage exception     */
 406             cpu_abort(env, "Hypervisor data storage exception "
 407                       "while in user mode. Aborting\n");
 408             break;
 409         case POWERPC_EXCP_HISI:     /* Hypervisor instruction storage excp   */
 410             cpu_abort(env, "Hypervisor instruction storage exception "
 411                       "while in user mode. Aborting\n");
 412             break;
 413         case POWERPC_EXCP_HDSEG:    /* Hypervisor data segment exception     */
 414             cpu_abort(env, "Hypervisor data segment exception "
 415                       "while in user mode. Aborting\n");
 416             break;
 417         case POWERPC_EXCP_HISEG:    /* Hypervisor instruction segment excp   */
 418             cpu_abort(env, "Hypervisor instruction segment exception "
 419                       "while in user mode. Aborting\n");
 420             break;
 421         case POWERPC_EXCP_VPU:      /* Vector unavailable exception          */
 422             EXCP_DUMP(env, "No Altivec instructions allowed\n");
 423             info.si_signo = SIGILL;
 424             info.si_errno = 0;
 425             info.si_code = ILL_COPROC;
 426             info.si_addr = (void*)(env->nip - 4);
 427             queue_signal(info.si_signo, &info);
 428             break;
 429         case POWERPC_EXCP_PIT:      /* Programmable interval timer IRQ       */
 430             cpu_abort(env, "Programable interval timer interrupt "
 431                       "while in user mode. Aborting\n");
 432             break;
 433         case POWERPC_EXCP_IO:       /* IO error exception                    */
 434             cpu_abort(env, "IO error exception while in user mode. "
 435                       "Aborting\n");
 436             break;
 437         case POWERPC_EXCP_RUNM:     /* Run mode exception                    */
 438             cpu_abort(env, "Run mode exception while in user mode. "
 439                       "Aborting\n");
 440             break;
 441         case POWERPC_EXCP_EMUL:     /* Emulation trap exception              */
 442             cpu_abort(env, "Emulation trap exception not handled\n");
 443             break;
 444         case POWERPC_EXCP_IFTLB:    /* Instruction fetch TLB error           */
 445             cpu_abort(env, "Instruction fetch TLB exception "
 446                       "while in user-mode. Aborting");
 447             break;
 448         case POWERPC_EXCP_DLTLB:    /* Data load TLB miss                    */
 449             cpu_abort(env, "Data load TLB exception while in user-mode. "
 450                       "Aborting");
 451             break;
 452         case POWERPC_EXCP_DSTLB:    /* Data store TLB miss                   */
 453             cpu_abort(env, "Data store TLB exception while in user-mode. "
 454                       "Aborting");
 455             break;
 456         case POWERPC_EXCP_FPA:      /* Floating-point assist exception       */
 457             cpu_abort(env, "Floating-point assist exception not handled\n");
 458             break;
 459         case POWERPC_EXCP_IABR:     /* Instruction address breakpoint        */
 460             cpu_abort(env, "Instruction address breakpoint exception "
 461                       "not handled\n");
 462             break;
 463         case POWERPC_EXCP_SMI:      /* System management interrupt           */
 464             cpu_abort(env, "System management interrupt while in user mode. "
 465                       "Aborting\n");
 466             break;
 467         case POWERPC_EXCP_THERM:    /* Thermal interrupt                     */
 468             cpu_abort(env, "Thermal interrupt interrupt while in user mode. "
 469                       "Aborting\n");
 470             break;
 471         case POWERPC_EXCP_PERFM:    /* Embedded performance monitor IRQ      */
 472             cpu_abort(env, "Performance monitor exception not handled\n");
 473             break;
 474         case POWERPC_EXCP_VPUA:     /* Vector assist exception               */
 475             cpu_abort(env, "Vector assist exception not handled\n");
 476             break;
 477         case POWERPC_EXCP_SOFTP:    /* Soft patch exception                  */
 478             cpu_abort(env, "Soft patch exception not handled\n");
 479             break;
 480         case POWERPC_EXCP_MAINT:    /* Maintenance exception                 */
 481             cpu_abort(env, "Maintenance exception while in user mode. "
 482                       "Aborting\n");
 483             break;
 484         case POWERPC_EXCP_STOP:     /* stop translation                      */
 485             /* We did invalidate the instruction cache. Go on */
 486             break;
 487         case POWERPC_EXCP_BRANCH:   /* branch instruction:                   */
 488             /* We just stopped because of a branch. Go on */
 489             break;
 490         case POWERPC_EXCP_SYSCALL_USER:
 491             /* system call in user-mode emulation */
 492             /* system call */
 493             if(((int)env->gpr[0]) <= SYS_MAXSYSCALL && ((int)env->gpr[0])>0)
 494                 ret = do_unix_syscall(env, env->gpr[0]/*, env->gpr[3], env->gpr[4],
 495                                       env->gpr[5], env->gpr[6], env->gpr[7],
 496                                       env->gpr[8], env->gpr[9], env->gpr[10]*/);
 497             else if(((int)env->gpr[0])<0)
 498                 ret = do_mach_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4],
 499                                       env->gpr[5], env->gpr[6], env->gpr[7],
 500                                       env->gpr[8], env->gpr[9], env->gpr[10]);
 501             else
 502                 ret = do_thread_syscall(env, env->gpr[0], env->gpr[3], env->gpr[4],
 503                                         env->gpr[5], env->gpr[6], env->gpr[7],
 504                                         env->gpr[8], env->gpr[9], env->gpr[10]);
 505
 506             /* Unix syscall error signaling */
 507             if(((int)env->gpr[0]) <= SYS_MAXSYSCALL && ((int)env->gpr[0])>0)
 508             {
 509                 if( (int)ret < 0 )
 510                     env->nip += 0;
 511                 else
 512                     env->nip += 4;
 513             }
 514
 515             /* Return value */
 516             env->gpr[3] = ret;
 517             break;
 518         case EXCP_INTERRUPT:
 519             /* just indicate that signals should be handled asap */
 520             break;
 521         default:
 522             cpu_abort(env, "Unknown exception 0x%d. Aborting\n", trapnr);
 523             break;
 524         }
 525         process_pending_signals(env);
 526     }
 527 }
 528 #endif
 529
 530
 531 #ifdef TARGET_I386
 532
 533 /***********************************************************/
 534 /* CPUX86 core interface */
 535
 536 uint64_t cpu_get_tsc(CPUX86State *env)
 537 {
 538     return cpu_get_real_ticks();
 539 }
 540
 541 void
 542 write_dt(void *ptr, unsigned long addr, unsigned long limit,
 543                      int flags)
 544 {
 545     unsigned int e1, e2;
 546     e1 = (addr << 16) | (limit & 0xffff);
 547     e2 = ((addr >> 16) & 0xff) | (addr & 0xff000000) | (limit & 0x000f0000);
 548     e2 |= flags;
 549     stl((uint8_t *)ptr, e1);
 550     stl((uint8_t *)ptr + 4, e2);
 551 }
 552
 553 static void set_gate(void *ptr, unsigned int type, unsigned int dpl,
 554                      unsigned long addr, unsigned int sel)
 555 {
 556     unsigned int e1, e2;
 557     e1 = (addr & 0xffff) | (sel << 16);
 558     e2 = (addr & 0xffff0000) | 0x8000 | (dpl << 13) | (type << 8);
 559     stl((uint8_t *)ptr, e1);
 560     stl((uint8_t *)ptr + 4, e2);
 561 }
 562
 563 #define GDT_TABLE_SIZE 14
 564 #define LDT_TABLE_SIZE 15
 565 #define IDT_TABLE_SIZE 256
 566 #define TSS_SIZE 104
 567 uint64_t gdt_table[GDT_TABLE_SIZE];
 568 uint64_t ldt_table[LDT_TABLE_SIZE];
 569 uint64_t idt_table[IDT_TABLE_SIZE];
 570 uint32_t tss[TSS_SIZE];
 571
 572 /* only dpl matters as we do only user space emulation */
 573 static void set_idt(int n, unsigned int dpl)
 574 {
 575     set_gate(idt_table + n, 0, dpl, 0, 0);
 576 }
 577
 578 /* ABI convention: after a syscall if there was an error the CF flag is set */
 579 static inline void set_error(CPUX86State *env, int ret)
 580 {
 581     if(ret<0)
 582         env->eflags = env->eflags | 0x1;
 583     else
 584         env->eflags &= ~0x1;
 585     env->regs[R_EAX] = ret;
 586 }
 587
 588 void cpu_loop(CPUX86State *env)
 589 {
 590     int trapnr;
 591     int ret;
 592     uint8_t *pc;
 593     target_siginfo_t info;
 594
 595     for(;;) {
 596         trapnr = cpu_x86_exec(env);
 597         uint32_t *params = (uint32_t *)env->regs[R_ESP];
 598         switch(trapnr) {
 599         case 0x79: /* Our commpage hack back door exit is here */
 600             do_commpage(env,  env->eip,   *(params + 1), *(params + 2),
 601                                           *(params + 3), *(params + 4),
 602                                           *(params + 5), *(params + 6),
 603                                           *(params + 7), *(params + 8));
 604             break;
 605         case 0x81: /* mach syscall */
 606         {
 607             ret = do_mach_syscall(env,  env->regs[R_EAX],
 608                                           *(params + 1), *(params + 2),
 609                                           *(params + 3), *(params + 4),
 610                                           *(params + 5), *(params + 6),
 611                                           *(params + 7), *(params + 8));
 612             set_error(env, ret);
 613             break;
 614         }
 615         case 0x90: /* unix backdoor */
 616         {
 617             /* after sysenter, stack is in R_ECX, new eip in R_EDX (sysexit will flip them back)*/
 618             int saved_stack = env->regs[R_ESP];
 619             env->regs[R_ESP] = env->regs[R_ECX];
 620
 621             ret = do_unix_syscall(env, env->regs[R_EAX]);
 622
 623             env->regs[R_ECX] = env->regs[R_ESP];
 624             env->regs[R_ESP] = saved_stack;
 625
 626             set_error(env, ret);
 627             break;
 628         }
 629         case 0x80: /* unix syscall */
 630         {
 631             ret = do_unix_syscall(env, env->regs[R_EAX]/*,
 632                                           *(params + 1), *(params + 2),
 633                                           *(params + 3), *(params + 4),
 634                                           *(params + 5), *(params + 6),
 635                                           *(params + 7), *(params + 8)*/);
 636             set_error(env, ret);
 637             break;
 638         }
 639         case 0x82: /* thread syscall */
 640         {
 641             ret = do_thread_syscall(env,  env->regs[R_EAX],
 642                                           *(params + 1), *(params + 2),
 643                                           *(params + 3), *(params + 4),
 644                                           *(params + 5), *(params + 6),
 645                                           *(params + 7), *(params + 8));
 646             set_error(env, ret);
 647             break;
 648         }
 649         case EXCP0B_NOSEG:
 650         case EXCP0C_STACK:
 651             info.si_signo = SIGBUS;
 652             info.si_errno = 0;
 653             info.si_code = BUS_NOOP;
 654             info.si_addr = 0;
 655             gdb_handlesig (env, SIGBUS);
 656             queue_signal(info.si_signo, &info);
 657             break;
 658         case EXCP0D_GPF:
 659             info.si_signo = SIGSEGV;
 660             info.si_errno = 0;
 661             info.si_code = SEGV_NOOP;
 662             info.si_addr = 0;
 663             gdb_handlesig (env, SIGSEGV);
 664             queue_signal(info.si_signo, &info);
 665             break;
 666         case EXCP0E_PAGE:
 667             info.si_signo = SIGSEGV;
 668             info.si_errno = 0;
 669             if (!(env->error_code & 1))
 670                 info.si_code = SEGV_MAPERR;
 671             else
 672                 info.si_code = SEGV_ACCERR;
 673             info.si_addr = (void*)env->cr[2];
 674             gdb_handlesig (env, SIGSEGV);
 675             queue_signal(info.si_signo, &info);
 676             break;
 677         case EXCP00_DIVZ:
 678             /* division by zero */
 679             info.si_signo = SIGFPE;
 680             info.si_errno = 0;
 681             info.si_code = FPE_INTDIV;
 682             info.si_addr = (void*)env->eip;
 683             gdb_handlesig (env, SIGFPE);
 684             queue_signal(info.si_signo, &info);
 685             break;
 686         case EXCP01_SSTP:
 687         case EXCP03_INT3:
 688             info.si_signo = SIGTRAP;
 689             info.si_errno = 0;
 690             info.si_code = TRAP_BRKPT;
 691             info.si_addr = (void*)env->eip;
 692             gdb_handlesig (env, SIGTRAP);
 693             queue_signal(info.si_signo, &info);
 694             break;
 695         case EXCP04_INTO:
 696         case EXCP05_BOUND:
 697             info.si_signo = SIGSEGV;
 698             info.si_errno = 0;
 699             info.si_code = SEGV_NOOP;
 700             info.si_addr = 0;
 701             gdb_handlesig (env, SIGSEGV);
 702             queue_signal(info.si_signo, &info);
 703             break;
 704         case EXCP06_ILLOP:
 705             info.si_signo = SIGILL;
 706             info.si_errno = 0;
 707             info.si_code = ILL_ILLOPN;
 708             info.si_addr = (void*)env->eip;
 709             gdb_handlesig (env, SIGILL);
 710             queue_signal(info.si_signo, &info);
 711             break;
 712         case EXCP_INTERRUPT:
 713             /* just indicate that signals should be handled asap */
 714             break;
 715         case EXCP_DEBUG:
 716             {
 717                 int sig;
 718
 719                 sig = gdb_handlesig (env, SIGTRAP);
 720                 if (sig)
 721                   {
 722                     info.si_signo = sig;
 723                     info.si_errno = 0;
 724                     info.si_code = TRAP_BRKPT;
 725                     queue_signal(info.si_signo, &info);
 726                   }
 727             }
 728             break;
 729         default:
 730             pc = (void*)(env->segs[R_CS].base + env->eip);
 731             fprintf(stderr, "qemu: 0x%08lx: unhandled CPU exception 0x%x - aborting\n",
 732                     (long)pc, trapnr);
 733             abort();
 734         }
 735         process_pending_signals(env);
 736     }
 737 }
 738 #endif
 739
 740 void usage(void)
 741 {
 742     printf("qemu-" TARGET_ARCH " version " QEMU_VERSION ", Copyright (c) 2003-2004 Fabrice Bellard\n"
 743            "usage: qemu-" TARGET_ARCH " [-h] [-d opts] [-L path] [-s size] program [arguments...]\n"
 744            "Darwin CPU emulator (compiled for %s emulation)\n"
 745            "\n"
 746            "-h           print this help\n"
 747            "-L path      set the %s library path (default='%s')\n"
 748            "-s size      set the stack size in bytes (default=%ld)\n"
 749            "\n"
 750            "debug options:\n"
 751            "-d options   activate log (logfile='%s')\n"
 752            "-g wait for gdb on port 1234\n"
 753            "-p pagesize  set the host page size to 'pagesize'\n",
 754            TARGET_ARCH,
 755            TARGET_ARCH,
 756            interp_prefix,
 757            stack_size,
 758            DEBUG_LOGFILE);
 759     _exit(1);
 760 }
 761
 762 /* XXX: currently only used for async signals (see signal.c) */
 763 CPUState *global_env;
 764 /* used only if single thread */
 765 CPUState *cpu_single_env = NULL;
 766
 767 /* used to free thread contexts */
 768 TaskState *first_task_state;
 769
 770 int main(int argc, char **argv)
 771 {
 772     const char *filename;
 773     struct target_pt_regs regs1, *regs = &regs1;
 774     TaskState ts1, *ts = &ts1;
 775     CPUState *env;
 776     int optind;
 777     short use_gdbstub = 0;
 778     const char *r;
 779     const char *cpu_model;
 780
 781     if (argc <= 1)
 782         usage();
 783
 784     /* init debug */
 785     cpu_set_log_filename(DEBUG_LOGFILE);
 786
 787     optind = 1;
 788     for(;;) {
 789         if (optind >= argc)
 790             break;
 791         r = argv[optind];
 792         if (r[0] != '-')
 793             break;
 794         optind++;
 795         r++;
 796         if (!strcmp(r, "-")) {
 797             break;
 798         } else if (!strcmp(r, "d")) {
 799             int mask;
 800             CPULogItem *item;
 801
 802         if (optind >= argc)
 803         break;
 804
 805         r = argv[optind++];
 806             mask = cpu_str_to_log_mask(r);
 807             if (!mask) {
 808                 printf("Log items (comma separated):\n");
 809                 for(item = cpu_log_items; item->mask != 0; item++) {
 810                     printf("%-10s %s\n", item->name, item->help);
 811                 }
 812                 exit(1);
 813             }
 814             cpu_set_log(mask);
 815         } else if (!strcmp(r, "s")) {
 816             r = argv[optind++];
 817             stack_size = strtol(r, (char **)&r, 0);
 818             if (stack_size <= 0)
 819                 usage();
 820             if (*r == 'M')
 821                 stack_size *= 1024 * 1024;
 822             else if (*r == 'k' || *r == 'K')
 823                 stack_size *= 1024;
 824         } else if (!strcmp(r, "L")) {
 825             interp_prefix = argv[optind++];
 826         } else if (!strcmp(r, "p")) {
 827             qemu_host_page_size = atoi(argv[optind++]);
 828             if (qemu_host_page_size == 0 ||
 829                 (qemu_host_page_size & (qemu_host_page_size - 1)) != 0) {
 830                 fprintf(stderr, "page size must be a power of two\n");
 831                 exit(1);
 832             }
 833         } else
 834         if (!strcmp(r, "g")) {
 835             use_gdbstub = 1;
 836         } else if (!strcmp(r, "cpu")) {
 837             cpu_model = argv[optind++];
 838             if (strcmp(cpu_model, "?") == 0) {
 839 /* XXX: implement xxx_cpu_list for targets that still miss it */
 840 #if defined(cpu_list)
 841                     cpu_list(stdout, &fprintf);
 842 #endif
 843                 _exit(1);
 844             }
 845         } else
 846         {
 847             usage();
 848         }
 849     }
 850     if (optind >= argc)
 851         usage();
 852     filename = argv[optind];
 853
 854     /* Zero out regs */
 855     memset(regs, 0, sizeof(struct target_pt_regs));
 856
 857     if (cpu_model == NULL) {
 858 #if defined(TARGET_I386)
 859 #ifdef TARGET_X86_64
 860         cpu_model = "qemu64";
 861 #else
 862         cpu_model = "qemu32";
 863 #endif
 864 #elif defined(TARGET_PPC)
 865 #ifdef TARGET_PPC64
 866         cpu_model = "970";
 867 #else
 868         cpu_model = "750";
 869 #endif
 870 #else
 871 #error unsupported CPU
 872 #endif
 873     }
 874
 875     cpu_exec_init_all(0);
 876     /* NOTE: we need to init the CPU at this stage to get
 877        qemu_host_page_size */
 878     env = cpu_init(cpu_model);
 879
 880     printf("Starting %s with qemu\n----------------\n", filename);
 881
 882     commpage_init();
 883
 884     if (mach_exec(filename, argv+optind, environ, regs) != 0) {
 885     printf("Error loading %s\n", filename);
 886     _exit(1);
 887     }
 888
 889     syscall_init();
 890     signal_init();
 891     global_env = env;
 892
 893     /* build Task State */
 894     memset(ts, 0, sizeof(TaskState));
 895     env->opaque = ts;
 896     ts->used = 1;
 897
 898 #if defined(TARGET_I386)
 899     cpu_x86_set_cpl(env, 3);
 900
 901     env->cr[0] = CR0_PG_MASK | CR0_WP_MASK | CR0_PE_MASK;
 902     env->hflags |= HF_PE_MASK;
 903
 904     if (env->cpuid_features & CPUID_SSE) {
 905         env->cr[4] |= CR4_OSFXSR_MASK;
 906         env->hflags |= HF_OSFXSR_MASK;
 907     }
 908
 909     /* flags setup : we activate the IRQs by default as in user mode */
 910     env->eflags |= IF_MASK;
 911
 912     /* darwin register setup */
 913     env->regs[R_EAX] = regs->eax;
 914     env->regs[R_EBX] = regs->ebx;
 915     env->regs[R_ECX] = regs->ecx;
 916     env->regs[R_EDX] = regs->edx;
 917     env->regs[R_ESI] = regs->esi;
 918     env->regs[R_EDI] = regs->edi;
 919     env->regs[R_EBP] = regs->ebp;
 920     env->regs[R_ESP] = regs->esp;
 921     env->eip = regs->eip;
 922
 923     /* Darwin LDT setup */
 924     /* 2 - User code segment
 925        3 - User data segment
 926        4 - User cthread */
 927     bzero(ldt_table, LDT_TABLE_SIZE * sizeof(ldt_table[0]));
 928     env->ldt.base = (uint32_t) ldt_table;
 929     env->ldt.limit = sizeof(ldt_table) - 1;
 930
 931     write_dt(ldt_table + 2, 0, 0xfffff,
 932              DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
 933              (3 << DESC_DPL_SHIFT) | (0xa << DESC_TYPE_SHIFT));
 934     write_dt(ldt_table + 3, 0, 0xfffff,
 935              DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
 936              (3 << DESC_DPL_SHIFT) | (0x2 << DESC_TYPE_SHIFT));
 937     write_dt(ldt_table + 4, 0, 0xfffff,
 938              DESC_G_MASK | DESC_B_MASK | DESC_P_MASK | DESC_S_MASK |
 939              (3 << DESC_DPL_SHIFT) | (0x2 << DESC_TYPE_SHIFT));
 940
 941     /* Darwin GDT setup.
 942      * has changed a lot between old Darwin/x86 (pre-Mac Intel) and Mac OS X/x86,
 943        now everything is done via  int 0x81(mach) int 0x82 (thread) and sysenter/sysexit(unix) */
 944     bzero(gdt_table, sizeof(gdt_table));
 945     env->gdt.base = (uint32_t)gdt_table;
 946     env->gdt.limit = sizeof(gdt_table) - 1;
 947
 948     /* Set up a back door to handle sysenter syscalls (unix) */
 949     char * syscallbackdoor = malloc(64);
 950     page_set_flags((int)syscallbackdoor, (int)syscallbackdoor + 64, PROT_EXEC | PROT_READ | PAGE_VALID);
 951
 952     int i = 0;
 953     syscallbackdoor[i++] = 0xcd;
 954     syscallbackdoor[i++] = 0x90; /* int 0x90 */
 955     syscallbackdoor[i++] = 0x0F;
 956     syscallbackdoor[i++] = 0x35; /* sysexit */
 957
 958     /* Darwin sysenter/sysexit setup */
 959     env->sysenter_cs = 0x1; //XXX
 960     env->sysenter_eip = (int)syscallbackdoor;
 961     env->sysenter_esp = (int)malloc(64);
 962
 963     /* Darwin TSS setup
 964        This must match up with GDT[4] */
 965     env->tr.base = (uint32_t) tss;
 966     env->tr.limit = sizeof(tss) - 1;
 967     env->tr.flags = DESC_P_MASK | (0x9 << DESC_TYPE_SHIFT);
 968     stw(tss + 2, 0x10);  // ss0 = 0x10 = GDT[2] = Kernel Data Segment
 969
 970     /* Darwin interrupt setup */
 971     bzero(idt_table, sizeof(idt_table));
 972     env->idt.base = (uint32_t) idt_table;
 973     env->idt.limit = sizeof(idt_table) - 1;
 974     set_idt(0, 0);
 975     set_idt(1, 0);
 976     set_idt(2, 0);
 977     set_idt(3, 3);
 978     set_idt(4, 3);
 979     set_idt(5, 3);
 980     set_idt(6, 0);
 981     set_idt(7, 0);
 982     set_idt(8, 0);
 983     set_idt(9, 0);
 984     set_idt(10, 0);
 985     set_idt(11, 0);
 986     set_idt(12, 0);
 987     set_idt(13, 0);
 988     set_idt(14, 0);
 989     set_idt(15, 0);
 990     set_idt(16, 0);
 991     set_idt(17, 0);
 992     set_idt(18, 0);
 993     set_idt(19, 0);
 994     /* Syscalls are done via
 995         int 0x80 (unix) (rarely used)
 996         int 0x81 (mach)
 997         int 0x82 (thread)
 998         int 0x83 (diag) (not handled here)
 999         sysenter/sysexit (unix) -> we redirect that to int 0x90 */
1000     set_idt(0x79, 3); /* Commpage hack, here is our backdoor interrupt */
1001     set_idt(0x80, 3); /* Unix Syscall */
1002     set_idt(0x81, 3); /* Mach Syscalls */
1003     set_idt(0x82, 3); /* thread Syscalls */
1004
1005     set_idt(0x90, 3); /* qemu-darwin-user's Unix syscalls backdoor */
1006
1007
1008     cpu_x86_load_seg(env, R_CS, __USER_CS);
1009     cpu_x86_load_seg(env, R_DS, __USER_DS);
1010     cpu_x86_load_seg(env, R_ES, __USER_DS);
1011     cpu_x86_load_seg(env, R_SS, __USER_DS);
1012     cpu_x86_load_seg(env, R_FS, __USER_DS);
1013     cpu_x86_load_seg(env, R_GS, __USER_DS);
1014
1015 #elif defined(TARGET_PPC)
1016     {
1017         int i;
1018
1019 #if defined(TARGET_PPC64)
1020 #if defined(TARGET_ABI32)
1021         env->msr &= ~((target_ulong)1 << MSR_SF);
1022 #else
1023         env->msr |= (target_ulong)1 << MSR_SF;
1024 #endif
1025 #endif
1026         env->nip = regs->nip;
1027         for(i = 0; i < 32; i++) {
1028             env->gpr[i] = regs->gpr[i];
1029         }
1030     }
1031 #else
1032 #error unsupported target CPU
1033 #endif
1034
1035     if (use_gdbstub) {
1036         printf("Waiting for gdb Connection on port 1234...\n");
1037         gdbserver_start (1234);
1038         gdb_handlesig(env, 0);
1039     }
1040
1041     cpu_loop(env);
1042     /* never exits */
1043     return 0;
1044 }