4 * Copyright (c) 2003 Fabrice Bellard
5 * Copyright (c) 2006 Pierre d'Herbemont
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License as published by
9 * the Free Software Foundation; either version 2 of the License, or
10 * (at your option) any later version.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston,
29 #include <sys/syscall.h>
34 #define DEBUG_LOGFILE "/tmp/qemu.log"
37 #include <crt_externs.h>
38 # define environ (*_NSGetEnviron())
41 #include <mach/mach_init.h>
42 #include <mach/vm_map.h>
44 const char *interp_prefix
= "";
46 asm(".zerofill __STD_PROG_ZONE, __STD_PROG_ZONE, __std_prog_zone, 0x0dfff000");
48 /* XXX: on x86 MAP_GROWSDOWN only works if ESP <= address + 32, so
49 we allocate a bigger stack. Need a better solution, for example
50 by remapping the process stack directly at the right place */
51 unsigned long stack_size
= 512 * 1024;
53 void qerror(const char *fmt
, ...)
58 vfprintf(stderr
, fmt
, ap
);
60 fprintf(stderr
, "\n");
64 void gemu_log(const char *fmt
, ...)
69 vfprintf(stderr
, fmt
, ap
);
73 void cpu_outb(CPUState
*env
, int addr
, int val
)
75 fprintf(stderr
, "outb: port=0x%04x, data=%02x\n", addr
, val
);
78 void cpu_outw(CPUState
*env
, int addr
, int val
)
80 fprintf(stderr
, "outw: port=0x%04x, data=%04x\n", addr
, val
);
83 void cpu_outl(CPUState
*env
, int addr
, int val
)
85 fprintf(stderr
, "outl: port=0x%04x, data=%08x\n", addr
, val
);
88 int cpu_inb(CPUState
*env
, int addr
)
90 fprintf(stderr
, "inb: port=0x%04x\n", addr
);
94 int cpu_inw(CPUState
*env
, int addr
)
96 fprintf(stderr
, "inw: port=0x%04x\n", addr
);
100 int cpu_inl(CPUState
*env
, int addr
)
102 fprintf(stderr
, "inl: port=0x%04x\n", addr
);
106 int cpu_get_pic_interrupt(CPUState
*env
)
112 static inline uint64_t cpu_ppc_get_tb (CPUState
*env
)
118 uint32_t cpu_ppc_load_tbl (CPUState
*env
)
120 return cpu_ppc_get_tb(env
) & 0xFFFFFFFF;
123 uint32_t cpu_ppc_load_tbu (CPUState
*env
)
125 return cpu_ppc_get_tb(env
) >> 32;
128 uint32_t cpu_ppc_load_atbl (CPUState
*env
)
130 return cpu_ppc_get_tb(env
) & 0xFFFFFFFF;
133 uint32_t cpu_ppc_load_atbu (CPUState
*env
)
135 return cpu_ppc_get_tb(env
) >> 32;
138 uint32_t cpu_ppc601_load_rtcu (CPUState
*env
)
140 cpu_ppc_load_tbu(env
);
143 uint32_t cpu_ppc601_load_rtcl (CPUState
*env
)
145 return cpu_ppc_load_tbl(env
) & 0x3FFFFF80;
148 /* XXX: to be fixed */
149 int ppc_dcr_read (ppc_dcr_t
*dcr_env
, int dcrn
, target_ulong
*valp
)
154 int ppc_dcr_write (ppc_dcr_t
*dcr_env
, int dcrn
, target_ulong val
)
159 #define EXCP_DUMP(env, fmt, args...) \
161 fprintf(stderr, fmt , ##args); \
162 cpu_dump_state(env, stderr, fprintf, 0); \
163 if (loglevel != 0) { \
164 fprintf(logfile, fmt , ##args); \
165 cpu_dump_state(env, logfile, fprintf, 0); \
169 void cpu_loop(CPUPPCState
*env
)
173 target_siginfo_t info
;
176 trapnr
= cpu_ppc_exec(env
);
178 case POWERPC_EXCP_NONE
:
181 case POWERPC_EXCP_CRITICAL
: /* Critical input */
182 cpu_abort(env
, "Critical interrupt while in user mode. "
185 case POWERPC_EXCP_MCHECK
: /* Machine check exception */
186 cpu_abort(env
, "Machine check exception while in user mode. "
189 case POWERPC_EXCP_DSI
: /* Data storage exception */
191 /* To deal with multiple qemu header version as host for the darwin-user code */
194 EXCP_DUMP(env
, "Invalid data memory access: 0x" ADDRX
"\n",
196 /* Handle this via the gdb */
197 gdb_handlesig (env
, SIGSEGV
);
199 info
.si_addr
= (void*)env
->nip
;
200 queue_signal(info
.si_signo
, &info
);
202 case POWERPC_EXCP_ISI
: /* Instruction storage exception */
203 EXCP_DUMP(env
, "Invalid instruction fetch: 0x\n" ADDRX
"\n",
205 /* Handle this via the gdb */
206 gdb_handlesig (env
, SIGSEGV
);
208 info
.si_addr
= (void*)(env
->nip
- 4);
209 queue_signal(info
.si_signo
, &info
);
211 case POWERPC_EXCP_EXTERNAL
: /* External input */
212 cpu_abort(env
, "External interrupt while in user mode. "
215 case POWERPC_EXCP_ALIGN
: /* Alignment exception */
216 EXCP_DUMP(env
, "Unaligned memory access\n");
218 info
.si_code
= BUS_ADRALN
;
219 info
.si_addr
= (void*)(env
->nip
- 4);
220 queue_signal(info
.si_signo
, &info
);
222 case POWERPC_EXCP_PROGRAM
: /* Program exception */
223 /* XXX: check this */
224 switch (env
->error_code
& ~0xF) {
225 case POWERPC_EXCP_FP
:
226 EXCP_DUMP(env
, "Floating point program exception\n");
228 info
.si_signo
= SIGFPE
;
230 switch (env
->error_code
& 0xF) {
231 case POWERPC_EXCP_FP_OX
:
232 info
.si_code
= FPE_FLTOVF
;
234 case POWERPC_EXCP_FP_UX
:
235 info
.si_code
= FPE_FLTUND
;
237 case POWERPC_EXCP_FP_ZX
:
238 case POWERPC_EXCP_FP_VXZDZ
:
239 info
.si_code
= FPE_FLTDIV
;
241 case POWERPC_EXCP_FP_XX
:
242 info
.si_code
= FPE_FLTRES
;
244 case POWERPC_EXCP_FP_VXSOFT
:
245 info
.si_code
= FPE_FLTINV
;
247 case POWERPC_EXCP_FP_VXSNAN
:
248 case POWERPC_EXCP_FP_VXISI
:
249 case POWERPC_EXCP_FP_VXIDI
:
250 case POWERPC_EXCP_FP_VXIMZ
:
251 case POWERPC_EXCP_FP_VXVC
:
252 case POWERPC_EXCP_FP_VXSQRT
:
253 case POWERPC_EXCP_FP_VXCVI
:
254 info
.si_code
= FPE_FLTSUB
;
257 EXCP_DUMP(env
, "Unknown floating point exception (%02x)\n",
262 case POWERPC_EXCP_INVAL
:
263 EXCP_DUMP(env
, "Invalid instruction\n");
264 info
.si_signo
= SIGILL
;
266 switch (env
->error_code
& 0xF) {
267 case POWERPC_EXCP_INVAL_INVAL
:
268 info
.si_code
= ILL_ILLOPC
;
270 case POWERPC_EXCP_INVAL_LSWX
:
271 info
.si_code
= ILL_ILLOPN
;
273 case POWERPC_EXCP_INVAL_SPR
:
274 info
.si_code
= ILL_PRVREG
;
276 case POWERPC_EXCP_INVAL_FP
:
277 info
.si_code
= ILL_COPROC
;
280 EXCP_DUMP(env
, "Unknown invalid operation (%02x)\n",
281 env
->error_code
& 0xF);
282 info
.si_code
= ILL_ILLADR
;
285 /* Handle this via the gdb */
286 gdb_handlesig (env
, SIGSEGV
);
288 case POWERPC_EXCP_PRIV
:
289 EXCP_DUMP(env
, "Privilege violation\n");
290 info
.si_signo
= SIGILL
;
292 switch (env
->error_code
& 0xF) {
293 case POWERPC_EXCP_PRIV_OPC
:
294 info
.si_code
= ILL_PRVOPC
;
296 case POWERPC_EXCP_PRIV_REG
:
297 info
.si_code
= ILL_PRVREG
;
300 EXCP_DUMP(env
, "Unknown privilege violation (%02x)\n",
301 env
->error_code
& 0xF);
302 info
.si_code
= ILL_PRVOPC
;
306 case POWERPC_EXCP_TRAP
:
307 cpu_abort(env
, "Tried to call a TRAP\n");
310 /* Should not happen ! */
311 cpu_abort(env
, "Unknown program exception (%02x)\n",
315 info
.si_addr
= (void*)(env
->nip
- 4);
316 queue_signal(info
.si_signo
, &info
);
318 case POWERPC_EXCP_FPU
: /* Floating-point unavailable exception */
319 EXCP_DUMP(env
, "No floating point allowed\n");
320 info
.si_signo
= SIGILL
;
322 info
.si_code
= ILL_COPROC
;
323 info
.si_addr
= (void*)(env
->nip
- 4);
324 queue_signal(info
.si_signo
, &info
);
326 case POWERPC_EXCP_SYSCALL
: /* System call exception */
327 cpu_abort(env
, "Syscall exception while in user mode. "
330 case POWERPC_EXCP_APU
: /* Auxiliary processor unavailable */
331 EXCP_DUMP(env
, "No APU instruction allowed\n");
332 info
.si_signo
= SIGILL
;
334 info
.si_code
= ILL_COPROC
;
335 info
.si_addr
= (void*)(env
->nip
- 4);
336 queue_signal(info
.si_signo
, &info
);
338 case POWERPC_EXCP_DECR
: /* Decrementer exception */
339 cpu_abort(env
, "Decrementer interrupt while in user mode. "
342 case POWERPC_EXCP_FIT
: /* Fixed-interval timer interrupt */
343 cpu_abort(env
, "Fix interval timer interrupt while in user mode. "
346 case POWERPC_EXCP_WDT
: /* Watchdog timer interrupt */
347 cpu_abort(env
, "Watchdog timer interrupt while in user mode. "
350 case POWERPC_EXCP_DTLB
: /* Data TLB error */
351 cpu_abort(env
, "Data TLB exception while in user mode. "
354 case POWERPC_EXCP_ITLB
: /* Instruction TLB error */
355 cpu_abort(env
, "Instruction TLB exception while in user mode. "
358 case POWERPC_EXCP_DEBUG
: /* Debug interrupt */
359 gdb_handlesig (env
, SIGTRAP
);
361 case POWERPC_EXCP_SPEU
: /* SPE/embedded floating-point unavail. */
362 EXCP_DUMP(env
, "No SPE/floating-point instruction allowed\n");
363 info
.si_signo
= SIGILL
;
365 info
.si_code
= ILL_COPROC
;
366 info
.si_addr
= (void*)(env
->nip
- 4);
367 queue_signal(info
.si_signo
, &info
);
369 case POWERPC_EXCP_EFPDI
: /* Embedded floating-point data IRQ */
370 cpu_abort(env
, "Embedded floating-point data IRQ not handled\n");
372 case POWERPC_EXCP_EFPRI
: /* Embedded floating-point round IRQ */
373 cpu_abort(env
, "Embedded floating-point round IRQ not handled\n");
375 case POWERPC_EXCP_EPERFM
: /* Embedded performance monitor IRQ */
376 cpu_abort(env
, "Performance monitor exception not handled\n");
378 case POWERPC_EXCP_DOORI
: /* Embedded doorbell interrupt */
379 cpu_abort(env
, "Doorbell interrupt while in user mode. "
382 case POWERPC_EXCP_DOORCI
: /* Embedded doorbell critical interrupt */
383 cpu_abort(env
, "Doorbell critical interrupt while in user mode. "
386 case POWERPC_EXCP_RESET
: /* System reset exception */
387 cpu_abort(env
, "Reset interrupt while in user mode. "
390 case POWERPC_EXCP_DSEG
: /* Data segment exception */
391 cpu_abort(env
, "Data segment exception while in user mode. "
394 case POWERPC_EXCP_ISEG
: /* Instruction segment exception */
395 cpu_abort(env
, "Instruction segment exception "
396 "while in user mode. Aborting\n");
398 case POWERPC_EXCP_HDECR
: /* Hypervisor decrementer exception */
399 cpu_abort(env
, "Hypervisor decrementer interrupt "
400 "while in user mode. Aborting\n");
402 case POWERPC_EXCP_TRACE
: /* Trace exception */
404 * we use this exception to emulate step-by-step execution mode.
407 case POWERPC_EXCP_HDSI
: /* Hypervisor data storage exception */
408 cpu_abort(env
, "Hypervisor data storage exception "
409 "while in user mode. Aborting\n");
411 case POWERPC_EXCP_HISI
: /* Hypervisor instruction storage excp */
412 cpu_abort(env
, "Hypervisor instruction storage exception "
413 "while in user mode. Aborting\n");
415 case POWERPC_EXCP_HDSEG
: /* Hypervisor data segment exception */
416 cpu_abort(env
, "Hypervisor data segment exception "
417 "while in user mode. Aborting\n");
419 case POWERPC_EXCP_HISEG
: /* Hypervisor instruction segment excp */
420 cpu_abort(env
, "Hypervisor instruction segment exception "
421 "while in user mode. Aborting\n");
423 case POWERPC_EXCP_VPU
: /* Vector unavailable exception */
424 EXCP_DUMP(env
, "No Altivec instructions allowed\n");
425 info
.si_signo
= SIGILL
;
427 info
.si_code
= ILL_COPROC
;
428 info
.si_addr
= (void*)(env
->nip
- 4);
429 queue_signal(info
.si_signo
, &info
);
431 case POWERPC_EXCP_PIT
: /* Programmable interval timer IRQ */
432 cpu_abort(env
, "Programable interval timer interrupt "
433 "while in user mode. Aborting\n");
435 case POWERPC_EXCP_IO
: /* IO error exception */
436 cpu_abort(env
, "IO error exception while in user mode. "
439 case POWERPC_EXCP_RUNM
: /* Run mode exception */
440 cpu_abort(env
, "Run mode exception while in user mode. "
443 case POWERPC_EXCP_EMUL
: /* Emulation trap exception */
444 cpu_abort(env
, "Emulation trap exception not handled\n");
446 case POWERPC_EXCP_IFTLB
: /* Instruction fetch TLB error */
447 cpu_abort(env
, "Instruction fetch TLB exception "
448 "while in user-mode. Aborting");
450 case POWERPC_EXCP_DLTLB
: /* Data load TLB miss */
451 cpu_abort(env
, "Data load TLB exception while in user-mode. "
454 case POWERPC_EXCP_DSTLB
: /* Data store TLB miss */
455 cpu_abort(env
, "Data store TLB exception while in user-mode. "
458 case POWERPC_EXCP_FPA
: /* Floating-point assist exception */
459 cpu_abort(env
, "Floating-point assist exception not handled\n");
461 case POWERPC_EXCP_IABR
: /* Instruction address breakpoint */
462 cpu_abort(env
, "Instruction address breakpoint exception "
465 case POWERPC_EXCP_SMI
: /* System management interrupt */
466 cpu_abort(env
, "System management interrupt while in user mode. "
469 case POWERPC_EXCP_THERM
: /* Thermal interrupt */
470 cpu_abort(env
, "Thermal interrupt interrupt while in user mode. "
473 case POWERPC_EXCP_PERFM
: /* Embedded performance monitor IRQ */
474 cpu_abort(env
, "Performance monitor exception not handled\n");
476 case POWERPC_EXCP_VPUA
: /* Vector assist exception */
477 cpu_abort(env
, "Vector assist exception not handled\n");
479 case POWERPC_EXCP_SOFTP
: /* Soft patch exception */
480 cpu_abort(env
, "Soft patch exception not handled\n");
482 case POWERPC_EXCP_MAINT
: /* Maintenance exception */
483 cpu_abort(env
, "Maintenance exception while in user mode. "
486 case POWERPC_EXCP_STOP
: /* stop translation */
487 /* We did invalidate the instruction cache. Go on */
489 case POWERPC_EXCP_BRANCH
: /* branch instruction: */
490 /* We just stopped because of a branch. Go on */
492 case POWERPC_EXCP_SYSCALL_USER
:
493 /* system call in user-mode emulation */
495 if(((int)env
->gpr
[0]) <= SYS_MAXSYSCALL
&& ((int)env
->gpr
[0])>0)
496 ret
= do_unix_syscall(env
, env
->gpr
[0]/*, env->gpr[3], env->gpr[4],
497 env->gpr[5], env->gpr[6], env->gpr[7],
498 env->gpr[8], env->gpr[9], env->gpr[10]*/);
499 else if(((int)env
->gpr
[0])<0)
500 ret
= do_mach_syscall(env
, env
->gpr
[0], env
->gpr
[3], env
->gpr
[4],
501 env
->gpr
[5], env
->gpr
[6], env
->gpr
[7],
502 env
->gpr
[8], env
->gpr
[9], env
->gpr
[10]);
504 ret
= do_thread_syscall(env
, env
->gpr
[0], env
->gpr
[3], env
->gpr
[4],
505 env
->gpr
[5], env
->gpr
[6], env
->gpr
[7],
506 env
->gpr
[8], env
->gpr
[9], env
->gpr
[10]);
508 /* Unix syscall error signaling */
509 if(((int)env
->gpr
[0]) <= SYS_MAXSYSCALL
&& ((int)env
->gpr
[0])>0)
521 /* just indicate that signals should be handled asap */
524 cpu_abort(env
, "Unknown exception 0x%d. Aborting\n", trapnr
);
527 process_pending_signals(env
);
535 /***********************************************************/
536 /* CPUX86 core interface */
538 uint64_t cpu_get_tsc(CPUX86State
*env
)
540 return cpu_get_real_ticks();
544 write_dt(void *ptr
, unsigned long addr
, unsigned long limit
,
548 e1
= (addr
<< 16) | (limit
& 0xffff);
549 e2
= ((addr
>> 16) & 0xff) | (addr
& 0xff000000) | (limit
& 0x000f0000);
551 stl((uint8_t *)ptr
, e1
);
552 stl((uint8_t *)ptr
+ 4, e2
);
555 static void set_gate(void *ptr
, unsigned int type
, unsigned int dpl
,
556 unsigned long addr
, unsigned int sel
)
559 e1
= (addr
& 0xffff) | (sel
<< 16);
560 e2
= (addr
& 0xffff0000) | 0x8000 | (dpl
<< 13) | (type
<< 8);
561 stl((uint8_t *)ptr
, e1
);
562 stl((uint8_t *)ptr
+ 4, e2
);
565 #define GDT_TABLE_SIZE 14
566 #define LDT_TABLE_SIZE 15
567 #define IDT_TABLE_SIZE 256
569 uint64_t gdt_table
[GDT_TABLE_SIZE
];
570 uint64_t ldt_table
[LDT_TABLE_SIZE
];
571 uint64_t idt_table
[IDT_TABLE_SIZE
];
572 uint32_t tss
[TSS_SIZE
];
574 /* only dpl matters as we do only user space emulation */
575 static void set_idt(int n
, unsigned int dpl
)
577 set_gate(idt_table
+ n
, 0, dpl
, 0, 0);
580 /* ABI convention: after a syscall if there was an error the CF flag is set */
581 static inline void set_error(CPUX86State
*env
, int ret
)
584 env
->eflags
= env
->eflags
| 0x1;
587 env
->regs
[R_EAX
] = ret
;
590 void cpu_loop(CPUX86State
*env
)
595 target_siginfo_t info
;
598 trapnr
= cpu_x86_exec(env
);
599 uint32_t *params
= (uint32_t *)env
->regs
[R_ESP
];
601 case 0x79: /* Our commpage hack back door exit is here */
602 do_commpage(env
, env
->eip
, *(params
+ 1), *(params
+ 2),
603 *(params
+ 3), *(params
+ 4),
604 *(params
+ 5), *(params
+ 6),
605 *(params
+ 7), *(params
+ 8));
607 case 0x81: /* mach syscall */
609 ret
= do_mach_syscall(env
, env
->regs
[R_EAX
],
610 *(params
+ 1), *(params
+ 2),
611 *(params
+ 3), *(params
+ 4),
612 *(params
+ 5), *(params
+ 6),
613 *(params
+ 7), *(params
+ 8));
617 case 0x90: /* unix backdoor */
619 /* after sysenter, stack is in R_ECX, new eip in R_EDX (sysexit will flip them back)*/
620 int saved_stack
= env
->regs
[R_ESP
];
621 env
->regs
[R_ESP
] = env
->regs
[R_ECX
];
623 ret
= do_unix_syscall(env
, env
->regs
[R_EAX
]);
625 env
->regs
[R_ECX
] = env
->regs
[R_ESP
];
626 env
->regs
[R_ESP
] = saved_stack
;
631 case 0x80: /* unix syscall */
633 ret
= do_unix_syscall(env
, env
->regs
[R_EAX
]/*,
634 *(params + 1), *(params + 2),
635 *(params + 3), *(params + 4),
636 *(params + 5), *(params + 6),
637 *(params + 7), *(params + 8)*/);
641 case 0x82: /* thread syscall */
643 ret
= do_thread_syscall(env
, env
->regs
[R_EAX
],
644 *(params
+ 1), *(params
+ 2),
645 *(params
+ 3), *(params
+ 4),
646 *(params
+ 5), *(params
+ 6),
647 *(params
+ 7), *(params
+ 8));
653 info
.si_signo
= SIGBUS
;
655 info
.si_code
= BUS_NOOP
;
657 gdb_handlesig (env
, SIGBUS
);
658 queue_signal(info
.si_signo
, &info
);
661 info
.si_signo
= SIGSEGV
;
663 info
.si_code
= SEGV_NOOP
;
665 gdb_handlesig (env
, SIGSEGV
);
666 queue_signal(info
.si_signo
, &info
);
669 info
.si_signo
= SIGSEGV
;
671 if (!(env
->error_code
& 1))
672 info
.si_code
= SEGV_MAPERR
;
674 info
.si_code
= SEGV_ACCERR
;
675 info
.si_addr
= (void*)env
->cr
[2];
676 gdb_handlesig (env
, SIGSEGV
);
677 queue_signal(info
.si_signo
, &info
);
680 /* division by zero */
681 info
.si_signo
= SIGFPE
;
683 info
.si_code
= FPE_INTDIV
;
684 info
.si_addr
= (void*)env
->eip
;
685 gdb_handlesig (env
, SIGFPE
);
686 queue_signal(info
.si_signo
, &info
);
690 info
.si_signo
= SIGTRAP
;
692 info
.si_code
= TRAP_BRKPT
;
693 info
.si_addr
= (void*)env
->eip
;
694 gdb_handlesig (env
, SIGTRAP
);
695 queue_signal(info
.si_signo
, &info
);
699 info
.si_signo
= SIGSEGV
;
701 info
.si_code
= SEGV_NOOP
;
703 gdb_handlesig (env
, SIGSEGV
);
704 queue_signal(info
.si_signo
, &info
);
707 info
.si_signo
= SIGILL
;
709 info
.si_code
= ILL_ILLOPN
;
710 info
.si_addr
= (void*)env
->eip
;
711 gdb_handlesig (env
, SIGILL
);
712 queue_signal(info
.si_signo
, &info
);
715 /* just indicate that signals should be handled asap */
721 sig
= gdb_handlesig (env
, SIGTRAP
);
726 info
.si_code
= TRAP_BRKPT
;
727 queue_signal(info
.si_signo
, &info
);
732 pc
= (void*)(env
->segs
[R_CS
].base
+ env
->eip
);
733 fprintf(stderr
, "qemu: 0x%08lx: unhandled CPU exception 0x%x - aborting\n",
737 process_pending_signals(env
);
744 printf("qemu-" TARGET_ARCH
" version " QEMU_VERSION
", Copyright (c) 2003-2004 Fabrice Bellard\n"
745 "usage: qemu-" TARGET_ARCH
" [-h] [-d opts] [-L path] [-s size] program [arguments...]\n"
746 "Darwin CPU emulator (compiled for %s emulation)\n"
748 "-h print this help\n"
749 "-L path set the %s library path (default='%s')\n"
750 "-s size set the stack size in bytes (default=%ld)\n"
753 "-d options activate log (logfile='%s')\n"
754 "-g wait for gdb on port 1234\n"
755 "-p pagesize set the host page size to 'pagesize'\n",
764 /* XXX: currently only used for async signals (see signal.c) */
765 CPUState
*global_env
;
766 /* used only if single thread */
767 CPUState
*cpu_single_env
= NULL
;
769 /* used to free thread contexts */
770 TaskState
*first_task_state
;
772 int main(int argc
, char **argv
)
774 const char *filename
;
775 struct target_pt_regs regs1
, *regs
= ®s1
;
776 TaskState ts1
, *ts
= &ts1
;
779 short use_gdbstub
= 0;
781 const char *cpu_model
;
787 cpu_set_log_filename(DEBUG_LOGFILE
);
798 if (!strcmp(r
, "-")) {
800 } else if (!strcmp(r
, "d")) {
808 mask
= cpu_str_to_log_mask(r
);
810 printf("Log items (comma separated):\n");
811 for(item
= cpu_log_items
; item
->mask
!= 0; item
++) {
812 printf("%-10s %s\n", item
->name
, item
->help
);
817 } else if (!strcmp(r
, "s")) {
819 stack_size
= strtol(r
, (char **)&r
, 0);
823 stack_size
*= 1024 * 1024;
824 else if (*r
== 'k' || *r
== 'K')
826 } else if (!strcmp(r
, "L")) {
827 interp_prefix
= argv
[optind
++];
828 } else if (!strcmp(r
, "p")) {
829 qemu_host_page_size
= atoi(argv
[optind
++]);
830 if (qemu_host_page_size
== 0 ||
831 (qemu_host_page_size
& (qemu_host_page_size
- 1)) != 0) {
832 fprintf(stderr
, "page size must be a power of two\n");
836 if (!strcmp(r
, "g")) {
838 } else if (!strcmp(r
, "cpu")) {
839 cpu_model
= argv
[optind
++];
840 if (strcmp(cpu_model
, "?") == 0) {
841 /* XXX: implement xxx_cpu_list for targets that still miss it */
842 #if defined(cpu_list)
843 cpu_list(stdout
, &fprintf
);
854 filename
= argv
[optind
];
857 memset(regs
, 0, sizeof(struct target_pt_regs
));
859 if (cpu_model
== NULL
) {
860 #if defined(TARGET_I386)
862 cpu_model
= "qemu64";
864 cpu_model
= "qemu32";
866 #elif defined(TARGET_PPC)
873 #error unsupported CPU
877 cpu_exec_init_all(0);
878 /* NOTE: we need to init the CPU at this stage to get
879 qemu_host_page_size */
880 env
= cpu_init(cpu_model
);
882 printf("Starting %s with qemu\n----------------\n", filename
);
886 if (mach_exec(filename
, argv
+optind
, environ
, regs
) != 0) {
887 printf("Error loading %s\n", filename
);
895 /* build Task State */
896 memset(ts
, 0, sizeof(TaskState
));
899 env
->user_mode_only
= 1;
901 #if defined(TARGET_I386)
902 cpu_x86_set_cpl(env
, 3);
904 env
->cr
[0] = CR0_PG_MASK
| CR0_WP_MASK
| CR0_PE_MASK
;
905 env
->hflags
|= HF_PE_MASK
;
907 if (env
->cpuid_features
& CPUID_SSE
) {
908 env
->cr
[4] |= CR4_OSFXSR_MASK
;
909 env
->hflags
|= HF_OSFXSR_MASK
;
912 /* flags setup : we activate the IRQs by default as in user mode */
913 env
->eflags
|= IF_MASK
;
915 /* darwin register setup */
916 env
->regs
[R_EAX
] = regs
->eax
;
917 env
->regs
[R_EBX
] = regs
->ebx
;
918 env
->regs
[R_ECX
] = regs
->ecx
;
919 env
->regs
[R_EDX
] = regs
->edx
;
920 env
->regs
[R_ESI
] = regs
->esi
;
921 env
->regs
[R_EDI
] = regs
->edi
;
922 env
->regs
[R_EBP
] = regs
->ebp
;
923 env
->regs
[R_ESP
] = regs
->esp
;
924 env
->eip
= regs
->eip
;
926 /* Darwin LDT setup */
927 /* 2 - User code segment
928 3 - User data segment
930 bzero(ldt_table
, LDT_TABLE_SIZE
* sizeof(ldt_table
[0]));
931 env
->ldt
.base
= (uint32_t) ldt_table
;
932 env
->ldt
.limit
= sizeof(ldt_table
) - 1;
934 write_dt(ldt_table
+ 2, 0, 0xfffff,
935 DESC_G_MASK
| DESC_B_MASK
| DESC_P_MASK
| DESC_S_MASK
|
936 (3 << DESC_DPL_SHIFT
) | (0xa << DESC_TYPE_SHIFT
));
937 write_dt(ldt_table
+ 3, 0, 0xfffff,
938 DESC_G_MASK
| DESC_B_MASK
| DESC_P_MASK
| DESC_S_MASK
|
939 (3 << DESC_DPL_SHIFT
) | (0x2 << DESC_TYPE_SHIFT
));
940 write_dt(ldt_table
+ 4, 0, 0xfffff,
941 DESC_G_MASK
| DESC_B_MASK
| DESC_P_MASK
| DESC_S_MASK
|
942 (3 << DESC_DPL_SHIFT
) | (0x2 << DESC_TYPE_SHIFT
));
945 * has changed a lot between old Darwin/x86 (pre-Mac Intel) and Mac OS X/x86,
946 now everything is done via int 0x81(mach) int 0x82 (thread) and sysenter/sysexit(unix) */
947 bzero(gdt_table
, sizeof(gdt_table
));
948 env
->gdt
.base
= (uint32_t)gdt_table
;
949 env
->gdt
.limit
= sizeof(gdt_table
) - 1;
951 /* Set up a back door to handle sysenter syscalls (unix) */
952 char * syscallbackdoor
= malloc(64);
953 page_set_flags((int)syscallbackdoor
, (int)syscallbackdoor
+ 64, PROT_EXEC
| PROT_READ
| PAGE_VALID
);
956 syscallbackdoor
[i
++] = 0xcd;
957 syscallbackdoor
[i
++] = 0x90; /* int 0x90 */
958 syscallbackdoor
[i
++] = 0x0F;
959 syscallbackdoor
[i
++] = 0x35; /* sysexit */
961 /* Darwin sysenter/sysexit setup */
962 env
->sysenter_cs
= 0x1; //XXX
963 env
->sysenter_eip
= (int)syscallbackdoor
;
964 env
->sysenter_esp
= (int)malloc(64);
967 This must match up with GDT[4] */
968 env
->tr
.base
= (uint32_t) tss
;
969 env
->tr
.limit
= sizeof(tss
) - 1;
970 env
->tr
.flags
= DESC_P_MASK
| (0x9 << DESC_TYPE_SHIFT
);
971 stw(tss
+ 2, 0x10); // ss0 = 0x10 = GDT[2] = Kernel Data Segment
973 /* Darwin interrupt setup */
974 bzero(idt_table
, sizeof(idt_table
));
975 env
->idt
.base
= (uint32_t) idt_table
;
976 env
->idt
.limit
= sizeof(idt_table
) - 1;
997 /* Syscalls are done via
998 int 0x80 (unix) (rarely used)
1001 int 0x83 (diag) (not handled here)
1002 sysenter/sysexit (unix) -> we redirect that to int 0x90 */
1003 set_idt(0x79, 3); /* Commpage hack, here is our backdoor interrupt */
1004 set_idt(0x80, 3); /* Unix Syscall */
1005 set_idt(0x81, 3); /* Mach Syscalls */
1006 set_idt(0x82, 3); /* thread Syscalls */
1008 set_idt(0x90, 3); /* qemu-darwin-user's Unix syscalls backdoor */
1011 cpu_x86_load_seg(env
, R_CS
, __USER_CS
);
1012 cpu_x86_load_seg(env
, R_DS
, __USER_DS
);
1013 cpu_x86_load_seg(env
, R_ES
, __USER_DS
);
1014 cpu_x86_load_seg(env
, R_SS
, __USER_DS
);
1015 cpu_x86_load_seg(env
, R_FS
, __USER_DS
);
1016 cpu_x86_load_seg(env
, R_GS
, __USER_DS
);
1018 #elif defined(TARGET_PPC)
1022 #if defined(TARGET_PPC64)
1023 #if defined(TARGET_ABI32)
1024 env
->msr
&= ~((target_ulong
)1 << MSR_SF
);
1026 env
->msr
|= (target_ulong
)1 << MSR_SF
;
1029 env
->nip
= regs
->nip
;
1030 for(i
= 0; i
< 32; i
++) {
1031 env
->gpr
[i
] = regs
->gpr
[i
];
1035 #error unsupported target CPU
1039 printf("Waiting for gdb Connection on port 1234...\n");
1040 gdbserver_start (1234);
1041 gdb_handlesig(env
, 0);