2 * i386 emulator main execution loop
4 * Copyright (c) 2003 Fabrice Bellard
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
24 int tb_invalidated_flag
;
27 //#define DEBUG_SIGNAL
29 #if defined(TARGET_ARM) || defined(TARGET_SPARC)
30 /* XXX: unify with i386 target */
31 void cpu_loop_exit(void)
33 longjmp(env
->jmp_env
, 1);
37 /* main execution loop */
39 int cpu_exec(CPUState
*env1
)
41 int saved_T0
, saved_T1
, saved_T2
;
70 int code_gen_size
, ret
, interrupt_request
;
71 void (*gen_func
)(void);
72 TranslationBlock
*tb
, **ptb
;
73 uint8_t *tc_ptr
, *cs_base
, *pc
;
76 /* first we save global registers */
83 /* we also save i7 because longjmp may not restore it */
84 asm volatile ("mov %%i7, %0" : "=r" (saved_i7
));
87 #if defined(TARGET_I386)
90 EAX
= env
->regs
[R_EAX
];
94 ECX
= env
->regs
[R_ECX
];
98 EDX
= env
->regs
[R_EDX
];
102 EBX
= env
->regs
[R_EBX
];
106 ESP
= env
->regs
[R_ESP
];
110 EBP
= env
->regs
[R_EBP
];
114 ESI
= env
->regs
[R_ESI
];
118 EDI
= env
->regs
[R_EDI
];
121 /* put eflags in CPU temporary format */
122 CC_SRC
= env
->eflags
& (CC_O
| CC_S
| CC_Z
| CC_A
| CC_P
| CC_C
);
123 DF
= 1 - (2 * ((env
->eflags
>> 10) & 1));
124 CC_OP
= CC_OP_EFLAGS
;
125 env
->eflags
&= ~(DF_MASK
| CC_O
| CC_S
| CC_Z
| CC_A
| CC_P
| CC_C
);
126 #elif defined(TARGET_ARM)
130 env
->CF
= (psr
>> 29) & 1;
131 env
->NZF
= (psr
& 0xc0000000) ^ 0x40000000;
132 env
->VF
= (psr
<< 3) & 0x80000000;
133 env
->cpsr
= psr
& ~0xf0000000;
135 #elif defined(TARGET_SPARC)
136 #elif defined(TARGET_PPC)
138 #error unsupported target CPU
140 env
->exception_index
= -1;
142 /* prepare setjmp context for exception handling */
144 if (setjmp(env
->jmp_env
) == 0) {
145 /* if an exception is pending, we execute it here */
146 if (env
->exception_index
>= 0) {
147 if (env
->exception_index
>= EXCP_INTERRUPT
) {
148 /* exit request from the cpu execution loop */
149 ret
= env
->exception_index
;
151 } else if (env
->user_mode_only
) {
152 /* if user mode only, we simulate a fake exception
153 which will be hanlded outside the cpu execution
155 #if defined(TARGET_I386)
156 do_interrupt_user(env
->exception_index
,
157 env
->exception_is_int
,
159 env
->exception_next_eip
);
161 ret
= env
->exception_index
;
164 #if defined(TARGET_I386)
165 /* simulate a real cpu exception. On i386, it can
166 trigger new exceptions, but we do not handle
167 double or triple faults yet. */
168 do_interrupt(env
->exception_index
,
169 env
->exception_is_int
,
171 env
->exception_next_eip
, 0);
174 env
->exception_index
= -1;
176 T0
= 0; /* force lookup of first TB */
179 /* g1 can be modified by some libc? functions */
182 interrupt_request
= env
->interrupt_request
;
183 if (__builtin_expect(interrupt_request
, 0)) {
184 #if defined(TARGET_I386)
185 /* if hardware interrupt pending, we execute it */
186 if ((interrupt_request
& CPU_INTERRUPT_HARD
) &&
187 (env
->eflags
& IF_MASK
) &&
188 !(env
->hflags
& HF_INHIBIT_IRQ_MASK
)) {
190 intno
= cpu_x86_get_pic_interrupt(env
);
192 fprintf(logfile
, "Servicing hardware INT=0x%02x\n", intno
);
194 do_interrupt(intno
, 0, 0, 0, 1);
195 env
->interrupt_request
&= ~CPU_INTERRUPT_HARD
;
196 /* ensure that no TB jump will be modified as
197 the program flow was changed */
205 if (interrupt_request
& CPU_INTERRUPT_EXIT
) {
206 env
->interrupt_request
&= ~CPU_INTERRUPT_EXIT
;
207 env
->exception_index
= EXCP_INTERRUPT
;
213 #if defined(TARGET_I386)
214 /* restore flags in standard format */
215 env
->regs
[R_EAX
] = EAX
;
216 env
->regs
[R_EBX
] = EBX
;
217 env
->regs
[R_ECX
] = ECX
;
218 env
->regs
[R_EDX
] = EDX
;
219 env
->regs
[R_ESI
] = ESI
;
220 env
->regs
[R_EDI
] = EDI
;
221 env
->regs
[R_EBP
] = EBP
;
222 env
->regs
[R_ESP
] = ESP
;
223 env
->eflags
= env
->eflags
| cc_table
[CC_OP
].compute_all() | (DF
& DF_MASK
);
224 cpu_x86_dump_state(env
, logfile
, X86_DUMP_CCOP
);
225 env
->eflags
&= ~(DF_MASK
| CC_O
| CC_S
| CC_Z
| CC_A
| CC_P
| CC_C
);
226 #elif defined(TARGET_ARM)
227 env
->cpsr
= compute_cpsr();
228 cpu_arm_dump_state(env
, logfile
, 0);
229 env
->cpsr
&= ~0xf0000000;
230 #elif defined(TARGET_SPARC)
231 cpu_sparc_dump_state (env
, logfile
, 0);
232 #elif defined(TARGET_PPC)
233 cpu_ppc_dump_state(env
, logfile
, 0);
235 #error unsupported target CPU
239 /* we record a subset of the CPU state. It will
240 always be the same before a given translated block
242 #if defined(TARGET_I386)
244 flags
|= (env
->eflags
& (IOPL_MASK
| TF_MASK
| VM_MASK
));
245 cs_base
= env
->segs
[R_CS
].base
;
246 pc
= cs_base
+ env
->eip
;
247 #elif defined(TARGET_ARM)
250 pc
= (uint8_t *)env
->regs
[15];
251 #elif defined(TARGET_SPARC)
258 pc
= (uint8_t *) env
->pc
;
259 #elif defined(TARGET_PPC)
262 pc
= (uint8_t *)env
->nip
;
264 #error unsupported CPU
266 tb
= tb_find(&ptb
, (unsigned long)pc
, (unsigned long)cs_base
,
270 /* if no translated code available, then translate it now */
271 tb
= tb_alloc((unsigned long)pc
);
273 /* flush must be done */
275 /* cannot fail at this point */
276 tb
= tb_alloc((unsigned long)pc
);
277 /* don't forget to invalidate previous TB info */
278 ptb
= &tb_hash
[tb_hash_func((unsigned long)pc
)];
281 tc_ptr
= code_gen_ptr
;
283 tb
->cs_base
= (unsigned long)cs_base
;
285 tb_invalidated_flag
= 0;
286 cpu_gen_code(env
, tb
, CODE_GEN_MAX_SIZE
, &code_gen_size
);
287 if (tb_invalidated_flag
) {
288 /* as some TB could have been invalidated because
289 of memory exceptions while generating the code, we
290 must recompute the hash index here */
291 ptb
= &tb_hash
[tb_hash_func((unsigned long)pc
)];
293 ptb
= &(*ptb
)->hash_next
;
297 tb
->hash_next
= NULL
;
299 code_gen_ptr
= (void *)(((unsigned long)code_gen_ptr
+ code_gen_size
+ CODE_GEN_ALIGN
- 1) & ~(CODE_GEN_ALIGN
- 1));
300 spin_unlock(&tb_lock
);
304 fprintf(logfile
, "Trace 0x%08lx [0x%08lx] %s\n",
305 (long)tb
->tc_ptr
, (long)tb
->pc
,
306 lookup_symbol((void *)tb
->pc
));
312 /* see if we can patch the calling TB. */
315 tb_add_jump((TranslationBlock
*)(T0
& ~3), T0
& 3, tb
);
316 spin_unlock(&tb_lock
);
319 env
->current_tb
= tb
;
320 /* execute the generated code */
321 gen_func
= (void *)tc_ptr
;
322 #if defined(__sparc__)
323 __asm__
__volatile__("call %0\n\t"
327 : "i0", "i1", "i2", "i3", "i4", "i5");
328 #elif defined(__arm__)
329 asm volatile ("mov pc, %0\n\t"
330 ".global exec_loop\n\t"
334 : "r1", "r2", "r3", "r8", "r9", "r10", "r12", "r14");
338 env
->current_tb
= NULL
;
339 /* reset soft MMU for next block (it can currently
340 only be set by a memory fault) */
341 #if defined(TARGET_I386) && !defined(CONFIG_SOFTMMU)
342 if (env
->hflags
& HF_SOFTMMU_MASK
) {
343 env
->hflags
&= ~HF_SOFTMMU_MASK
;
344 /* do not allow linking to another block */
354 #if defined(TARGET_I386)
355 /* restore flags in standard format */
356 env
->eflags
= env
->eflags
| cc_table
[CC_OP
].compute_all() | (DF
& DF_MASK
);
358 /* restore global registers */
383 #elif defined(TARGET_ARM)
384 env
->cpsr
= compute_cpsr();
385 #elif defined(TARGET_SPARC)
386 #elif defined(TARGET_PPC)
388 #error unsupported target CPU
391 asm volatile ("mov %0, %%i7" : : "r" (saved_i7
));
400 #if defined(TARGET_I386) && defined(CONFIG_USER_ONLY)
402 void cpu_x86_load_seg(CPUX86State
*s
, int seg_reg
, int selector
)
404 CPUX86State
*saved_env
;
408 if (!(env
->cr
[0] & CR0_PE_MASK
) || (env
->eflags
& VM_MASK
)) {
410 cpu_x86_load_seg_cache(env
, seg_reg
, selector
,
411 (uint8_t *)(selector
<< 4), 0xffff, 0);
413 load_seg(seg_reg
, selector
, 0);
418 void cpu_x86_fsave(CPUX86State
*s
, uint8_t *ptr
, int data32
)
420 CPUX86State
*saved_env
;
425 helper_fsave(ptr
, data32
);
430 void cpu_x86_frstor(CPUX86State
*s
, uint8_t *ptr
, int data32
)
432 CPUX86State
*saved_env
;
437 helper_frstor(ptr
, data32
);
442 #endif /* TARGET_I386 */
454 #include <sys/ucontext.h>
456 #if defined(TARGET_I386)
458 /* 'pc' is the host PC at which the exception was raised. 'address' is
459 the effective address of the memory exception. 'is_write' is 1 if a
460 write caused the exception and otherwise 0'. 'old_set' is the
461 signal set which should be restored */
462 static inline int handle_cpu_signal(unsigned long pc
, unsigned long address
,
463 int is_write
, sigset_t
*old_set
)
465 TranslationBlock
*tb
;
469 env
= cpu_single_env
; /* XXX: find a correct solution for multithread */
470 #if defined(DEBUG_SIGNAL)
471 printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
472 pc
, address
, is_write
, *(unsigned long *)old_set
);
474 /* XXX: locking issue */
475 if (is_write
&& page_unprotect(address
)) {
478 /* see if it is an MMU fault */
479 ret
= cpu_x86_handle_mmu_fault(env
, address
, is_write
,
480 ((env
->hflags
& HF_CPL_MASK
) == 3), 0);
482 return 0; /* not an MMU fault */
484 return 1; /* the MMU fault was handled without causing real CPU fault */
485 /* now we have a real cpu fault */
488 /* the PC is inside the translated code. It means that we have
489 a virtual CPU fault */
490 cpu_restore_state(tb
, env
, pc
);
494 printf("PF exception: EIP=0x%08x CR2=0x%08x error=0x%x\n",
495 env
->eip
, env
->cr
[2], env
->error_code
);
497 /* we restore the process signal mask as the sigreturn should
498 do it (XXX: use sigsetjmp) */
499 sigprocmask(SIG_SETMASK
, old_set
, NULL
);
500 raise_exception_err(EXCP0E_PAGE
, env
->error_code
);
502 /* activate soft MMU for this block */
503 env
->hflags
|= HF_SOFTMMU_MASK
;
504 sigprocmask(SIG_SETMASK
, old_set
, NULL
);
507 /* never comes here */
511 #elif defined(TARGET_ARM)
512 static inline int handle_cpu_signal(unsigned long pc
, unsigned long address
,
513 int is_write
, sigset_t
*old_set
)
518 #elif defined(TARGET_SPARC)
519 static inline int handle_cpu_signal(unsigned long pc
, unsigned long address
,
520 int is_write
, sigset_t
*old_set
)
524 #elif defined (TARGET_PPC)
525 static inline int handle_cpu_signal(unsigned long pc
, unsigned long address
,
526 int is_write
, sigset_t
*old_set
)
528 TranslationBlock
*tb
;
532 env
= cpu_single_env
; /* XXX: find a correct solution for multithread */
534 #if defined(DEBUG_SIGNAL)
535 printf("qemu: SIGSEGV pc=0x%08lx address=%08lx w=%d oldset=0x%08lx\n",
536 pc
, address
, is_write
, *(unsigned long *)old_set
);
538 /* XXX: locking issue */
539 if (is_write
&& page_unprotect(address
)) {
543 /* now we have a real cpu fault */
546 /* the PC is inside the translated code. It means that we have
547 a virtual CPU fault */
548 cpu_restore_state(tb
, env
, pc
);
551 printf("PF exception: EIP=0x%08x CR2=0x%08x error=0x%x\n",
552 env
->eip
, env
->cr
[2], env
->error_code
);
554 /* we restore the process signal mask as the sigreturn should
555 do it (XXX: use sigsetjmp) */
556 sigprocmask(SIG_SETMASK
, old_set
, NULL
);
557 raise_exception_err(EXCP_PROGRAM
, env
->error_code
);
558 /* never comes here */
562 #error unsupported target CPU
565 #if defined(__i386__)
567 int cpu_signal_handler(int host_signum
, struct siginfo
*info
,
570 struct ucontext
*uc
= puc
;
577 #define REG_TRAPNO TRAPNO
579 pc
= uc
->uc_mcontext
.gregs
[REG_EIP
];
580 return handle_cpu_signal(pc
, (unsigned long)info
->si_addr
,
581 uc
->uc_mcontext
.gregs
[REG_TRAPNO
] == 0xe ?
582 (uc
->uc_mcontext
.gregs
[REG_ERR
] >> 1) & 1 : 0,
586 #elif defined(__powerpc)
588 int cpu_signal_handler(int host_signum
, struct siginfo
*info
,
591 struct ucontext
*uc
= puc
;
592 struct pt_regs
*regs
= uc
->uc_mcontext
.regs
;
600 if (regs
->dsisr
& 0x00800000)
603 if (regs
->trap
!= 0x400 && (regs
->dsisr
& 0x02000000))
606 return handle_cpu_signal(pc
, (unsigned long)info
->si_addr
,
607 is_write
, &uc
->uc_sigmask
);
610 #elif defined(__alpha__)
612 int cpu_signal_handler(int host_signum
, struct siginfo
*info
,
615 struct ucontext
*uc
= puc
;
616 uint32_t *pc
= uc
->uc_mcontext
.sc_pc
;
620 /* XXX: need kernel patch to get write flag faster */
621 switch (insn
>> 26) {
636 return handle_cpu_signal(pc
, (unsigned long)info
->si_addr
,
637 is_write
, &uc
->uc_sigmask
);
639 #elif defined(__sparc__)
641 int cpu_signal_handler(int host_signum
, struct siginfo
*info
,
644 uint32_t *regs
= (uint32_t *)(info
+ 1);
645 void *sigmask
= (regs
+ 20);
650 /* XXX: is there a standard glibc define ? */
652 /* XXX: need kernel patch to get write flag faster */
654 insn
= *(uint32_t *)pc
;
655 if ((insn
>> 30) == 3) {
656 switch((insn
>> 19) & 0x3f) {
668 return handle_cpu_signal(pc
, (unsigned long)info
->si_addr
,
672 #elif defined(__arm__)
674 int cpu_signal_handler(int host_signum
, struct siginfo
*info
,
677 struct ucontext
*uc
= puc
;
681 pc
= uc
->uc_mcontext
.gregs
[R15
];
682 /* XXX: compute is_write */
684 return handle_cpu_signal(pc
, (unsigned long)info
->si_addr
,
689 #elif defined(__mc68000)
691 int cpu_signal_handler(int host_signum
, struct siginfo
*info
,
694 struct ucontext
*uc
= puc
;
698 pc
= uc
->uc_mcontext
.gregs
[16];
699 /* XXX: compute is_write */
701 return handle_cpu_signal(pc
, (unsigned long)info
->si_addr
,
708 #error host CPU specific signal handler needed