1/* $FreeBSD$ */ 2/* $NetBSD: trap_subr.S,v 1.20 2002/04/22 23:20:08 kleink Exp $ */ 3 4/*- 5 * Copyright (C) 1995, 1996 Wolfgang Solfrank. 6 * Copyright (C) 1995, 1996 TooLs GmbH. 7 * All rights reserved. 8 * 9 * Redistribution and use in source and binary forms, with or without 10 * modification, are permitted provided that the following conditions 11 * are met: 12 * 1. Redistributions of source code must retain the above copyright 13 * notice, this list of conditions and the following disclaimer. 14 * 2. Redistributions in binary form must reproduce the above copyright 15 * notice, this list of conditions and the following disclaimer in the 16 * documentation and/or other materials provided with the distribution. 17 * 3. All advertising materials mentioning features or use of this software 18 * must display the following acknowledgement: 19 * This product includes software developed by TooLs GmbH. 20 * 4. The name of TooLs GmbH may not be used to endorse or promote products 21 * derived from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED BY TOOLS GMBH ``AS IS'' AND ANY EXPRESS OR 24 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 25 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 26 * IN NO EVENT SHALL TOOLS GMBH BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 27 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, 28 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; 29 * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, 30 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR 31 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF 32 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 33 */ 34 35/* 36 * NOTICE: This is not a standalone file. to use it, #include it in 37 * your port's locore.S, like so: 38 * 39 * #include <powerpc/aim/trap_subr.S> 40 */ 41 42/* 43 * Save/restore segment registers 44 */ 45#define RESTORE_SRS(pmap,sr) mtsr 0,sr; \ 46 lwz sr,1*4(pmap); mtsr 1,sr; \ 47 lwz sr,2*4(pmap); mtsr 2,sr; \ 48 lwz sr,3*4(pmap); mtsr 3,sr; \ 49 lwz sr,4*4(pmap); mtsr 4,sr; \ 50 lwz sr,5*4(pmap); mtsr 5,sr; \ 51 lwz sr,6*4(pmap); mtsr 6,sr; \ 52 lwz sr,7*4(pmap); mtsr 7,sr; \ 53 lwz sr,8*4(pmap); mtsr 8,sr; \ 54 lwz sr,9*4(pmap); mtsr 9,sr; \ 55 lwz sr,10*4(pmap); mtsr 10,sr; \ 56 lwz sr,11*4(pmap); mtsr 11,sr; \ 57 /* Skip segment 12 (USER_SR), which is restored differently */ \ 58 lwz sr,13*4(pmap); mtsr 13,sr; \ 59 lwz sr,14*4(pmap); mtsr 14,sr; \ 60 lwz sr,15*4(pmap); mtsr 15,sr; isync; 61 62/* 63 * User SRs are loaded through a pointer to the current pmap. 64 */ 65#define RESTORE_USER_SRS(pmap,sr) \ 66 GET_CPUINFO(pmap); \ 67 lwz pmap,PC_CURPMAP(pmap); \ 68 lwzu sr,PM_SR(pmap); \ 69 RESTORE_SRS(pmap,sr) \ 70 /* Restore SR 12 */ \ 71 lwz sr,12*4(pmap); mtsr 12,sr 72 73/* 74 * Kernel SRs are loaded directly from kernel_pmap_ 75 */ 76#define RESTORE_KERN_SRS(pmap,sr) \ 77 lwz pmap,TRAP_TOCBASE(0); \ 78 lwz pmap,CNAME(kernel_pmap_store)@got(pmap); \ 79 lwzu sr,PM_SR(pmap); \ 80 RESTORE_SRS(pmap,sr) 81 82/* 83 * FRAME_SETUP assumes: 84 * SPRG1 SP (1) 85 * SPRG3 trap type 86 * savearea r28-r31,DAR,DSISR (DAR & DSISR only for DSI traps) 87 * r28 LR 88 * r29 CR 89 * r30 scratch 90 * r31 scratch 91 * r1 kernel stack 92 * SRR0/1 as at start of trap 93 */ 94#define FRAME_SETUP(savearea) \ 95/* Have to enable translation to allow access of kernel stack: */ \ 96 GET_CPUINFO(%r31); \ 97 mfsrr0 %r30; \ 98 stw %r30,(savearea+CPUSAVE_SRR0)(%r31); /* save SRR0 */ \ 99 mfsrr1 %r30; \ 100 stw %r30,(savearea+CPUSAVE_SRR1)(%r31); /* save SRR1 */ \ 101 mfmsr %r30; \ 102 ori %r30,%r30,(PSL_DR|PSL_IR|PSL_RI)@l; /* relocation on */ \ 103 mtmsr %r30; /* stack can now be accessed */ \ 104 isync; \ 105 mfsprg1 %r31; /* get saved SP */ \ 106 stwu %r31,-FRAMELEN(%r1); /* save it in the callframe */ \ 107 stw %r0, FRAME_0+8(%r1); /* save r0 in the trapframe */ \ 108 stw %r31,FRAME_1+8(%r1); /* save SP " " */ \ 109 stw %r2, FRAME_2+8(%r1); /* save r2 " " */ \ 110 stw %r28,FRAME_LR+8(%r1); /* save LR " " */ \ 111 stw %r29,FRAME_CR+8(%r1); /* save CR " " */ \ 112 GET_CPUINFO(%r2); \ 113 lwz %r28,(savearea+CPUSAVE_R28)(%r2); /* get saved r28 */ \ 114 lwz %r29,(savearea+CPUSAVE_R29)(%r2); /* get saved r29 */ \ 115 lwz %r30,(savearea+CPUSAVE_R30)(%r2); /* get saved r30 */ \ 116 lwz %r31,(savearea+CPUSAVE_R31)(%r2); /* get saved r31 */ \ 117 stw %r3, FRAME_3+8(%r1); /* save r3-r31 */ \ 118 stw %r4, FRAME_4+8(%r1); \ 119 stw %r5, FRAME_5+8(%r1); \ 120 stw %r6, FRAME_6+8(%r1); \ 121 stw %r7, FRAME_7+8(%r1); \ 122 stw %r8, FRAME_8+8(%r1); \ 123 stw %r9, FRAME_9+8(%r1); \ 124 stw %r10, FRAME_10+8(%r1); \ 125 stw %r11, FRAME_11+8(%r1); \ 126 stw %r12, FRAME_12+8(%r1); \ 127 stw %r13, FRAME_13+8(%r1); \ 128 stw %r14, FRAME_14+8(%r1); \ 129 stw %r15, FRAME_15+8(%r1); \ 130 stw %r16, FRAME_16+8(%r1); \ 131 stw %r17, FRAME_17+8(%r1); \ 132 stw %r18, FRAME_18+8(%r1); \ 133 stw %r19, FRAME_19+8(%r1); \ 134 stw %r20, FRAME_20+8(%r1); \ 135 stw %r21, FRAME_21+8(%r1); \ 136 stw %r22, FRAME_22+8(%r1); \ 137 stw %r23, FRAME_23+8(%r1); \ 138 stw %r24, FRAME_24+8(%r1); \ 139 stw %r25, FRAME_25+8(%r1); \ 140 stw %r26, FRAME_26+8(%r1); \ 141 stw %r27, FRAME_27+8(%r1); \ 142 stw %r28, FRAME_28+8(%r1); \ 143 stw %r29, FRAME_29+8(%r1); \ 144 stw %r30, FRAME_30+8(%r1); \ 145 stw %r31, FRAME_31+8(%r1); \ 146 lwz %r28,(savearea+CPUSAVE_AIM_DAR)(%r2); /* saved DAR */ \ 147 lwz %r29,(savearea+CPUSAVE_AIM_DSISR)(%r2);/* saved DSISR */\ 148 lwz %r30,(savearea+CPUSAVE_SRR0)(%r2); /* saved SRR0 */ \ 149 lwz %r31,(savearea+CPUSAVE_SRR1)(%r2); /* saved SRR1 */ \ 150 mfxer %r3; \ 151 mfctr %r4; \ 152 mfsprg3 %r5; \ 153 stw %r3, FRAME_XER+8(1); /* save xer/ctr/exc */ \ 154 stw %r4, FRAME_CTR+8(1); \ 155 stw %r5, FRAME_EXC+8(1); \ 156 stw %r28,FRAME_AIM_DAR+8(1); \ 157 stw %r29,FRAME_AIM_DSISR+8(1); /* save dsisr/srr0/srr1 */ \ 158 stw %r30,FRAME_SRR0+8(1); \ 159 stw %r31,FRAME_SRR1+8(1); \ 160 lwz %r2,PC_CURTHREAD(%r2) /* set curthread pointer */ 161 162#define FRAME_LEAVE(savearea) \ 163/* Disable exceptions: */ \ 164 mfmsr %r2; \ 165 andi. %r2,%r2,~PSL_EE@l; \ 166 mtmsr %r2; \ 167 isync; \ 168/* Now restore regs: */ \ 169 lwz %r2,FRAME_SRR0+8(%r1); \ 170 lwz %r3,FRAME_SRR1+8(%r1); \ 171 lwz %r4,FRAME_CTR+8(%r1); \ 172 lwz %r5,FRAME_XER+8(%r1); \ 173 lwz %r6,FRAME_LR+8(%r1); \ 174 GET_CPUINFO(%r7); \ 175 stw %r2,(savearea+CPUSAVE_SRR0)(%r7); /* save SRR0 */ \ 176 stw %r3,(savearea+CPUSAVE_SRR1)(%r7); /* save SRR1 */ \ 177 lwz %r7,FRAME_CR+8(%r1); \ 178 mtctr %r4; \ 179 mtxer %r5; \ 180 mtlr %r6; \ 181 mtsprg1 %r7; /* save cr */ \ 182 lwz %r31,FRAME_31+8(%r1); /* restore r0-31 */ \ 183 lwz %r30,FRAME_30+8(%r1); \ 184 lwz %r29,FRAME_29+8(%r1); \ 185 lwz %r28,FRAME_28+8(%r1); \ 186 lwz %r27,FRAME_27+8(%r1); \ 187 lwz %r26,FRAME_26+8(%r1); \ 188 lwz %r25,FRAME_25+8(%r1); \ 189 lwz %r24,FRAME_24+8(%r1); \ 190 lwz %r23,FRAME_23+8(%r1); \ 191 lwz %r22,FRAME_22+8(%r1); \ 192 lwz %r21,FRAME_21+8(%r1); \ 193 lwz %r20,FRAME_20+8(%r1); \ 194 lwz %r19,FRAME_19+8(%r1); \ 195 lwz %r18,FRAME_18+8(%r1); \ 196 lwz %r17,FRAME_17+8(%r1); \ 197 lwz %r16,FRAME_16+8(%r1); \ 198 lwz %r15,FRAME_15+8(%r1); \ 199 lwz %r14,FRAME_14+8(%r1); \ 200 lwz %r13,FRAME_13+8(%r1); \ 201 lwz %r12,FRAME_12+8(%r1); \ 202 lwz %r11,FRAME_11+8(%r1); \ 203 lwz %r10,FRAME_10+8(%r1); \ 204 lwz %r9, FRAME_9+8(%r1); \ 205 lwz %r8, FRAME_8+8(%r1); \ 206 lwz %r7, FRAME_7+8(%r1); \ 207 lwz %r6, FRAME_6+8(%r1); \ 208 lwz %r5, FRAME_5+8(%r1); \ 209 lwz %r4, FRAME_4+8(%r1); \ 210 lwz %r3, FRAME_3+8(%r1); \ 211 lwz %r2, FRAME_2+8(%r1); \ 212 lwz %r0, FRAME_0+8(%r1); \ 213 lwz %r1, FRAME_1+8(%r1); \ 214/* Can't touch %r1 from here on */ \ 215 mtsprg2 %r2; /* save r2 & r3 */ \ 216 mtsprg3 %r3; \ 217/* Disable translation, machine check and recoverability: */ \ 218 mfmsr %r2; \ 219 andi. %r2,%r2,~(PSL_DR|PSL_IR|PSL_ME|PSL_RI)@l; \ 220 mtmsr %r2; \ 221 isync; \ 222/* Decide whether we return to user mode: */ \ 223 GET_CPUINFO(%r2); \ 224 lwz %r3,(savearea+CPUSAVE_SRR1)(%r2); \ 225 mtcr %r3; \ 226 bf 17,1f; /* branch if PSL_PR is false */ \ 227/* Restore user SRs */ \ 228 RESTORE_USER_SRS(%r2,%r3); \ 2291: mfsprg1 %r2; /* restore cr */ \ 230 mtcr %r2; \ 231 GET_CPUINFO(%r2); \ 232 lwz %r3,(savearea+CPUSAVE_SRR0)(%r2); /* restore srr0 */ \ 233 mtsrr0 %r3; \ 234 lwz %r3,(savearea+CPUSAVE_SRR1)(%r2); /* restore srr1 */ \ 235 \ 236 /* Make sure HV bit of MSR propagated to SRR1 */ \ 237 mfmsr %r2; \ 238 or %r3,%r2,%r3; \ 239 \ 240 mtsrr1 %r3; \ 241 mfsprg2 %r2; /* restore r2 & r3 */ \ 242 mfsprg3 %r3 243 244#ifdef KDTRACE_HOOKS 245 .data 246 .globl dtrace_invop_calltrap_addr 247 .align 4 248 .type dtrace_invop_calltrap_addr, @object 249 .size dtrace_invop_calltrap_addr, 4 250dtrace_invop_calltrap_addr: 251 .word 0 252 .word 0 253 254 .text 255#endif 256 257/* 258 * The next two routines are 64-bit glue code. The first is used to test if 259 * we are on a 64-bit system. By copying it to the illegal instruction 260 * handler, we can test for 64-bit mode by trying to execute a 64-bit 261 * instruction and seeing what happens. The second gets copied in front 262 * of all the other handlers to restore 32-bit bridge mode when traps 263 * are taken. 264 */ 265 266/* 64-bit test code. Sets SPRG2 to 0 if an illegal instruction is executed */ 267 268 .globl CNAME(testppc64),CNAME(testppc64size) 269CNAME(testppc64): 270 mtsprg1 %r31 271 mfsrr0 %r31 272 addi %r31, %r31, 4 273 mtsrr0 %r31 274 275 li %r31, 0 276 mtsprg2 %r31 277 mfsprg1 %r31 278 279 rfi 280CNAME(testppc64size) = .-CNAME(testppc64) 281 282 283/* 64-bit bridge mode restore snippet. Gets copied in front of everything else 284 * on 64-bit systems. */ 285 286 .globl CNAME(restorebridge),CNAME(restorebridgesize) 287CNAME(restorebridge): 288 mtsprg1 %r31 289 mfmsr %r31 290 clrldi %r31,%r31,1 291 mtmsrd %r31 292 mfsprg1 %r31 293 isync 294CNAME(restorebridgesize) = .-CNAME(restorebridge) 295 296/* 297 * Processor reset exception handler. These are typically 298 * the first instructions the processor executes after a 299 * software reset. We do this in two bits so that we are 300 * not still hanging around in the trap handling region 301 * once the MMU is turned on. 302 */ 303 .globl CNAME(rstcode), CNAME(rstcodeend) 304CNAME(rstcode): 305 bl 1f 306 .long cpu_reset 3071: mflr %r31 308 lwz %r31,0(%r31) 309 mtlr %r31 310 blrl 311CNAME(rstcodeend): 312 313cpu_reset: 314 bl 1f 315 316 .space 124 317 3181: 319 mflr %r1 320 addi %r1,%r1,(124-16)@l 321 322 bl CNAME(cpudep_ap_early_bootstrap) 323 lis %r3,1@l 324 bl CNAME(pmap_cpu_bootstrap) 325 bl CNAME(cpudep_ap_bootstrap) 326 mr %r1,%r3 327 bl CNAME(cpudep_ap_setup) 328 GET_CPUINFO(%r5) 329 lwz %r3,(PC_RESTORE)(%r5) 330 cmplwi %cr0,%r3,0 331 beq %cr0,2f 332 li %r4, 1 333 b CNAME(longjmp) 3342: 335#ifdef SMP 336 bl CNAME(machdep_ap_bootstrap) 337#endif 338 339 /* Should not be reached */ 3409: 341 b 9b 342 343/* 344 * This code gets copied to all the trap vectors 345 * (except ISI/DSI, ALI, and the interrupts) 346 */ 347 348 .globl CNAME(trapcode),CNAME(trapcodeend) 349CNAME(trapcode): 350 mtsprg1 %r1 /* save SP */ 351 mflr %r1 /* Save the old LR in r1 */ 352 mtsprg2 %r1 /* And then in SPRG2 */ 353 lwz %r1, TRAP_GENTRAP(0) /* Get branch address */ 354 mtlr %r1 355 li %r1, 0xe0 /* How to get the vector from LR */ 356 blrl /* LR & (0xff00 | r1) is exception # */ 357CNAME(trapcodeend): 358 359/* 360 * For ALI: has to save DSISR and DAR 361 */ 362 .globl CNAME(alitrap),CNAME(aliend) 363CNAME(alitrap): 364 mtsprg1 %r1 /* save SP */ 365 GET_CPUINFO(%r1) 366 stw %r28,(PC_TEMPSAVE+CPUSAVE_R28)(%r1) /* free r28-r31 */ 367 stw %r29,(PC_TEMPSAVE+CPUSAVE_R29)(%r1) 368 stw %r30,(PC_TEMPSAVE+CPUSAVE_R30)(%r1) 369 stw %r31,(PC_TEMPSAVE+CPUSAVE_R31)(%r1) 370 mfdar %r30 371 mfdsisr %r31 372 stw %r30,(PC_TEMPSAVE+CPUSAVE_AIM_DAR)(%r1) 373 stw %r31,(PC_TEMPSAVE+CPUSAVE_AIM_DSISR)(%r1) 374 mfsprg1 %r1 /* restore SP, in case of branch */ 375 mflr %r28 /* save LR */ 376 mfcr %r29 /* save CR */ 377 378 /* Put our exception vector in SPRG3 */ 379 li %r31, EXC_ALI 380 mtsprg3 %r31 381 382 /* Test whether we already had PR set */ 383 mfsrr1 %r31 384 mtcr %r31 385 386 /* Jump to s_trap */ 387 bl 1f 388 .long s_trap 3891: mflr %r31 390 lwz %r31,0(%r31) 391 mtlr %r31 392 blrl 393CNAME(aliend): 394 395/* 396 * G2 specific: instuction TLB miss. 397 */ 398 .globl CNAME(imisstrap),CNAME(imisssize) 399CNAME(imisstrap): 400 mfspr %r2, SPR_HASH1 /* get first pointer */ 401 addi %r1, 0, 8 /* load 8 for counter */ 402 mfctr %r0 /* save counter */ 403 mfspr %r3, SPR_ICMP /* get first compare value */ 404 addi %r2, %r2, -8 /* pre dec the pointer */ 405im0: 406 mtctr %r1 /* load counter */ 407im1: 408 lwzu %r1, 8(%r2) /* get next pte */ 409 cmp 0, %r1, %r3 /* see if found pte */ 410 bdnzf 2, im1 /* dec count br if cmp ne and if 411 * count not zero */ 412 bne instr_sec_hash /* if not found set up second hash 413 * or exit */ 414 lwz %r1, +4(%r2) /* load tlb entry lower-word */ 415 andi. %r3, %r1, 8 /* check G bit */ 416 bne do_isi_prot /* if guarded, take an ISI */ 417 mtctr %r0 /* restore counter */ 418 mfspr %r0, SPR_IMISS /* get the miss address for the tlbli */ 419 mfspr %r3, SPR_SRR1 /* get the saved cr0 bits */ 420 mtcrf 0x80, %r3 /* restore CR0 */ 421 mtspr SPR_RPA, %r1 /* set the pte */ 422 ori %r1, %r1, 0x100 /* set reference bit */ 423 srwi %r1, %r1, 8 /* get byte 7 of pte */ 424 tlbli %r0 /* load the itlb */ 425 stb %r1, +6(%r2) /* update page table */ 426 rfi /* return to executing program */ 427 428instr_sec_hash: 429 andi. %r1, %r3, 0x0040 /* see if we have done second hash */ 430 bne do_isi /* if so, go to ISI interrupt */ 431 mfspr %r2, SPR_HASH2 /* get the second pointer */ 432 ori %r3, %r3, 0x0040 /* change the compare value */ 433 addi %r1, %r0, 8 /* load 8 for counter */ 434 addi %r2, %r2, -8 /* pre dec for update on load */ 435 b im0 /* try second hash */ 436 437/* Create a faked ISI interrupt as the address was not found */ 438do_isi_prot: 439 mfspr %r3, SPR_SRR1 /* get srr1 */ 440 andi. %r2, %r3, 0xffff /* clean upper srr1 */ 441 addis %r2, %r2, 0x0800 /* or in srr<4> = 1 to flag prot 442 * violation */ 443 b isi1 444do_isi: 445 mfspr %r3, SPR_SRR1 /* get srr1 */ 446 andi. %r2, %r3, 0xffff /* clean srr1 */ 447 addis %r2, %r2, 0x4000 /* or in srr1<1> = 1 to flag pte 448 * not found */ 449isi1: 450 mtctr %r0 /* restore counter */ 451 mtspr SPR_SRR1, %r2 /* set srr1 */ 452 mfmsr %r0 /* get msr */ 453 xoris %r0, %r0, 0x2 /* flip the msr<tgpr> bit */ 454 mtcrf 0x80, %r3 /* restore CR0 */ 455 mtmsr %r0 /* flip back to the native gprs */ 456 ba EXC_ISI /* go to instr. access interrupt */ 457 458CNAME(imisssize) = .-CNAME(imisstrap) 459 460/* 461 * G2 specific: data load TLB miss. 462 */ 463 .globl CNAME(dlmisstrap),CNAME(dlmisssize) 464CNAME(dlmisstrap): 465 mfspr %r2, SPR_HASH1 /* get first pointer */ 466 addi %r1, 0, 8 /* load 8 for counter */ 467 mfctr %r0 /* save counter */ 468 mfspr %r3, SPR_DCMP /* get first compare value */ 469 addi %r2, %r2, -8 /* pre dec the pointer */ 470dm0: 471 mtctr %r1 /* load counter */ 472dm1: 473 lwzu %r1, 8(%r2) /* get next pte */ 474 cmp 0, 0, %r1, %r3 /* see if found pte */ 475 bdnzf 2, dm1 /* dec count br if cmp ne and if 476 * count not zero */ 477 bne data_sec_hash /* if not found set up second hash 478 * or exit */ 479 lwz %r1, +4(%r2) /* load tlb entry lower-word */ 480 mtctr %r0 /* restore counter */ 481 mfspr %r0, SPR_DMISS /* get the miss address for the tlbld */ 482 mfspr %r3, SPR_SRR1 /* get the saved cr0 bits */ 483 mtcrf 0x80, %r3 /* restore CR0 */ 484 mtspr SPR_RPA, %r1 /* set the pte */ 485 ori %r1, %r1, 0x100 /* set reference bit */ 486 srwi %r1, %r1, 8 /* get byte 7 of pte */ 487 tlbld %r0 /* load the dtlb */ 488 stb %r1, +6(%r2) /* update page table */ 489 rfi /* return to executing program */ 490 491data_sec_hash: 492 andi. %r1, %r3, 0x0040 /* see if we have done second hash */ 493 bne do_dsi /* if so, go to DSI interrupt */ 494 mfspr %r2, SPR_HASH2 /* get the second pointer */ 495 ori %r3, %r3, 0x0040 /* change the compare value */ 496 addi %r1, 0, 8 /* load 8 for counter */ 497 addi %r2, %r2, -8 /* pre dec for update on load */ 498 b dm0 /* try second hash */ 499 500CNAME(dlmisssize) = .-CNAME(dlmisstrap) 501 502/* 503 * G2 specific: data store TLB miss. 504 */ 505 .globl CNAME(dsmisstrap),CNAME(dsmisssize) 506CNAME(dsmisstrap): 507 mfspr %r2, SPR_HASH1 /* get first pointer */ 508 addi %r1, 0, 8 /* load 8 for counter */ 509 mfctr %r0 /* save counter */ 510 mfspr %r3, SPR_DCMP /* get first compare value */ 511 addi %r2, %r2, -8 /* pre dec the pointer */ 512ds0: 513 mtctr %r1 /* load counter */ 514ds1: 515 lwzu %r1, 8(%r2) /* get next pte */ 516 cmp 0, 0, %r1, %r3 /* see if found pte */ 517 bdnzf 2, ds1 /* dec count br if cmp ne and if 518 * count not zero */ 519 bne data_store_sec_hash /* if not found set up second hash 520 * or exit */ 521 lwz %r1, +4(%r2) /* load tlb entry lower-word */ 522 andi. %r3, %r1, 0x80 /* check the C-bit */ 523 beq data_store_chk_prot /* if (C==0) 524 * go check protection modes */ 525ds2: 526 mtctr %r0 /* restore counter */ 527 mfspr %r0, SPR_DMISS /* get the miss address for the tlbld */ 528 mfspr %r3, SPR_SRR1 /* get the saved cr0 bits */ 529 mtcrf 0x80, %r3 /* restore CR0 */ 530 mtspr SPR_RPA, %r1 /* set the pte */ 531 tlbld %r0 /* load the dtlb */ 532 rfi /* return to executing program */ 533 534data_store_sec_hash: 535 andi. %r1, %r3, 0x0040 /* see if we have done second hash */ 536 bne do_dsi /* if so, go to DSI interrupt */ 537 mfspr %r2, SPR_HASH2 /* get the second pointer */ 538 ori %r3, %r3, 0x0040 /* change the compare value */ 539 addi %r1, 0, 8 /* load 8 for counter */ 540 addi %r2, %r2, -8 /* pre dec for update on load */ 541 b ds0 /* try second hash */ 542 543/* Check the protection before setting PTE(c-bit) */ 544data_store_chk_prot: 545 rlwinm. %r3,%r1,30,0,1 /* test PP */ 546 bge- chk0 /* if (PP == 00 or PP == 01) 547 * goto chk0: */ 548 andi. %r3, %r1, 1 /* test PP[0] */ 549 beq+ chk2 /* return if PP[0] == 0 */ 550 b do_dsi_prot /* else DSIp */ 551chk0: 552 mfspr %r3,SPR_SRR1 /* get old msr */ 553 andis. %r3,%r3,0x0008 /* test the KEY bit (SRR1-bit 12) */ 554 beq chk2 /* if (KEY==0) goto chk2: */ 555 b do_dsi_prot /* else do_dsi_prot */ 556chk2: 557 ori %r1, %r1, 0x180 /* set reference and change bit */ 558 sth %r1, 6(%r2) /* update page table */ 559 b ds2 /* and back we go */ 560 561/* Create a faked DSI interrupt as the address was not found */ 562do_dsi: 563 mfspr %r3, SPR_SRR1 /* get srr1 */ 564 rlwinm %r1,%r3,9,6,6 /* get srr1<flag> to bit 6 for 565 * load/store, zero rest */ 566 addis %r1, %r1, 0x4000 /* or in dsisr<1> = 1 to flag pte 567 * not found */ 568 b dsi1 569 570do_dsi_prot: 571 mfspr %r3, SPR_SRR1 /* get srr1 */ 572 rlwinm %r1,%r3,9,6,6 /* get srr1<flag> to bit 6 for 573 *load/store, zero rest */ 574 addis %r1, %r1, 0x0800 /* or in dsisr<4> = 1 to flag prot 575 * violation */ 576 577dsi1: 578 mtctr %r0 /* restore counter */ 579 andi. %r2, %r3, 0xffff /* clear upper bits of srr1 */ 580 mtspr SPR_SRR1, %r2 /* set srr1 */ 581 mtspr SPR_DSISR, %r1 /* load the dsisr */ 582 mfspr %r1, SPR_DMISS /* get miss address */ 583 rlwinm. %r2,%r2,0,31,31 /* test LE bit */ 584 beq dsi2 /* if little endian then: */ 585 xor %r1, %r1, 0x07 /* de-mung the data address */ 586dsi2: 587 mtspr SPR_DAR, %r1 /* put in dar */ 588 mfmsr %r0 /* get msr */ 589 xoris %r0, %r0, 0x2 /* flip the msr<tgpr> bit */ 590 mtcrf 0x80, %r3 /* restore CR0 */ 591 mtmsr %r0 /* flip back to the native gprs */ 592 ba EXC_DSI /* branch to DSI interrupt */ 593 594CNAME(dsmisssize) = .-CNAME(dsmisstrap) 595 596/* 597 * Similar to the above for DSI 598 * Has to handle BAT spills 599 * and standard pagetable spills 600 */ 601 .globl CNAME(dsitrap),CNAME(dsiend) 602CNAME(dsitrap): 603 mtsprg1 %r1 /* save SP */ 604 GET_CPUINFO(%r1) 605 stw %r28,(PC_DISISAVE+CPUSAVE_R28)(%r1) /* free r28-r31 */ 606 stw %r29,(PC_DISISAVE+CPUSAVE_R29)(%r1) 607 stw %r30,(PC_DISISAVE+CPUSAVE_R30)(%r1) 608 stw %r31,(PC_DISISAVE+CPUSAVE_R31)(%r1) 609 mfsprg1 %r1 /* restore SP */ 610 mfcr %r29 /* save CR */ 611 mfxer %r30 /* save XER */ 612 mtsprg2 %r30 /* in SPRG2 */ 613 mfsrr1 %r31 /* test kernel mode */ 614 mtcr %r31 615 bt 17,1f /* branch if PSL_PR is set */ 616 mfdar %r31 /* get fault address */ 617 rlwinm %r31,%r31,7,25,28 /* get segment * 8 */ 618 619 /* get batu */ 620 lwz %r30,TRAP_TOCBASE(0) 621 lwz %r30,CNAME(battable)@got(%r30) 622 add %r31,%r30,%r31 623 lwz %r30,0(%r31) 624 mtcr %r30 625 bf 30,1f /* branch if supervisor valid is 626 false */ 627 /* get batl */ 628 lwz %r31,4(%r31) 629/* We randomly use the highest two bat registers here */ 630 mftb %r28 631 andi. %r28,%r28,1 632 bne 2f 633 mtdbatu 2,%r30 634 mtdbatl 2,%r31 635 b 3f 6362: 637 mtdbatu 3,%r30 638 mtdbatl 3,%r31 6393: 640 mfsprg2 %r30 /* restore XER */ 641 mtxer %r30 642 mtcr %r29 /* restore CR */ 643 mtsprg1 %r1 644 GET_CPUINFO(%r1) 645 lwz %r28,(PC_DISISAVE+CPUSAVE_R28)(%r1) /* restore r28-r31 */ 646 lwz %r29,(PC_DISISAVE+CPUSAVE_R29)(%r1) 647 lwz %r30,(PC_DISISAVE+CPUSAVE_R30)(%r1) 648 lwz %r31,(PC_DISISAVE+CPUSAVE_R31)(%r1) 649 mfsprg1 %r1 650 rfi /* return to trapped code */ 6511: 652 mflr %r28 /* save LR (SP already saved) */ 653 654 /* Jump to disitrap */ 655 bl 4f 656 .long disitrap 6574: mflr %r1 658 lwz %r1,0(%r1) 659 mtlr %r1 660 blrl 661CNAME(dsiend): 662 663/* 664 * Preamble code for DSI/ISI traps 665 */ 666disitrap: 667 /* Write the trap vector to SPRG3 by computing LR & 0xff00 */ 668 mflr %r1 669 andi. %r1,%r1,0xff00 670 mtsprg3 %r1 671 672 GET_CPUINFO(%r1) 673 lwz %r30,(PC_DISISAVE+CPUSAVE_R28)(%r1) 674 stw %r30,(PC_TEMPSAVE+CPUSAVE_R28)(%r1) 675 lwz %r31,(PC_DISISAVE+CPUSAVE_R29)(%r1) 676 stw %r31,(PC_TEMPSAVE+CPUSAVE_R29)(%r1) 677 lwz %r30,(PC_DISISAVE+CPUSAVE_R30)(%r1) 678 stw %r30,(PC_TEMPSAVE+CPUSAVE_R30)(%r1) 679 lwz %r31,(PC_DISISAVE+CPUSAVE_R31)(%r1) 680 stw %r31,(PC_TEMPSAVE+CPUSAVE_R31)(%r1) 681 mfdar %r30 682 mfdsisr %r31 683 stw %r30,(PC_TEMPSAVE+CPUSAVE_AIM_DAR)(%r1) 684 stw %r31,(PC_TEMPSAVE+CPUSAVE_AIM_DSISR)(%r1) 685 686#ifdef KDB 687 /* Try to detect a kernel stack overflow */ 688 mfsrr1 %r31 689 mtcr %r31 690 bt 17,realtrap /* branch is user mode */ 691 mfsprg1 %r31 /* get old SP */ 692 clrrwi %r31,%r31,12 /* Round SP down to nearest page */ 693 sub. %r30,%r31,%r30 /* SP - DAR */ 694 bge 1f 695 neg %r30,%r30 /* modulo value */ 6961: cmplwi %cr0,%r30,4096 /* is DAR within a page of SP? */ 697 bge %cr0,realtrap /* no, too far away. */ 698 699 /* Now convert this DSI into a DDB trap. */ 700 GET_CPUINFO(%r1) 701 lwz %r30,(PC_TEMPSAVE+CPUSAVE_AIM_DAR)(%r1) /* get DAR */ 702 stw %r30,(PC_DBSAVE +CPUSAVE_AIM_DAR)(%r1) /* save DAR */ 703 lwz %r31,(PC_TEMPSAVE+CPUSAVE_AIM_DSISR)(%r1) /* get DSISR */ 704 stw %r31,(PC_DBSAVE +CPUSAVE_AIM_DSISR)(%r1) /* save DSISR */ 705 lwz %r30,(PC_DISISAVE+CPUSAVE_R28)(%r1) /* get r28 */ 706 stw %r30,(PC_DBSAVE +CPUSAVE_R28)(%r1) /* save r28 */ 707 lwz %r31,(PC_DISISAVE+CPUSAVE_R29)(%r1) /* get r29 */ 708 stw %r31,(PC_DBSAVE +CPUSAVE_R29)(%r1) /* save r29 */ 709 lwz %r30,(PC_DISISAVE+CPUSAVE_R30)(%r1) /* get r30 */ 710 stw %r30,(PC_DBSAVE +CPUSAVE_R30)(%r1) /* save r30 */ 711 lwz %r31,(PC_DISISAVE+CPUSAVE_R31)(%r1) /* get r31 */ 712 stw %r31,(PC_DBSAVE +CPUSAVE_R31)(%r1) /* save r31 */ 713 b dbtrap 714#endif 715 716 /* XXX need stack probe here */ 717realtrap: 718/* Test whether we already had PR set */ 719 mfsrr1 %r1 720 mtcr %r1 721 mfsprg1 %r1 /* restore SP (might have been 722 overwritten) */ 723 bf 17,k_trap /* branch if PSL_PR is false */ 724 GET_CPUINFO(%r1) 725 lwz %r1,PC_CURPCB(%r1) 726 RESTORE_KERN_SRS(%r30,%r31) /* enable kernel mapping */ 727 b s_trap 728 729/* 730 * generictrap does some standard setup for trap handling to minimize 731 * the code that need be installed in the actual vectors. It expects 732 * the following conditions. 733 * 734 * R1 - Trap vector = LR & (0xff00 | R1) 735 * SPRG1 - Original R1 contents 736 * SPRG2 - Original LR 737 */ 738 739 .globl CNAME(generictrap64) 740generictrap64: 741 mtsprg3 %r31 742 mfmsr %r31 743 clrldi %r31,%r31,1 744 mtmsrd %r31 745 mfsprg3 %r31 746 isync 747 748 .globl CNAME(generictrap) 749generictrap: 750 /* Save R1 for computing the exception vector */ 751 mtsprg3 %r1 752 753 /* Save interesting registers */ 754 GET_CPUINFO(%r1) 755 stw %r28,(PC_TEMPSAVE+CPUSAVE_R28)(%r1) /* free r28-r31 */ 756 stw %r29,(PC_TEMPSAVE+CPUSAVE_R29)(%r1) 757 stw %r30,(PC_TEMPSAVE+CPUSAVE_R30)(%r1) 758 stw %r31,(PC_TEMPSAVE+CPUSAVE_R31)(%r1) 759 mfsprg1 %r1 /* restore SP, in case of branch */ 760 mfsprg2 %r28 /* save LR */ 761 mfcr %r29 /* save CR */ 762 763 /* Compute the exception vector from the link register */ 764 mfsprg3 %r31 765 ori %r31,%r31,0xff00 766 mflr %r30 767 and %r30,%r30,%r31 768 mtsprg3 %r30 769 770 /* Test whether we already had PR set */ 771 mfsrr1 %r31 772 mtcr %r31 773 774s_trap: 775 bf 17,k_trap /* branch if PSL_PR is false */ 776 GET_CPUINFO(%r1) 777u_trap: 778 lwz %r1,PC_CURPCB(%r1) 779 RESTORE_KERN_SRS(%r30,%r31) /* enable kernel mapping */ 780 781/* 782 * Now the common trap catching code. 783 */ 784k_trap: 785 FRAME_SETUP(PC_TEMPSAVE) 786 /* Restore USER_SR */ 787 GET_CPUINFO(%r30) 788 lwz %r30,PC_CURPCB(%r30) 789 lwz %r30,PCB_AIM_USR_VSID(%r30) 790 mtsr USER_SR,%r30; sync; isync 791/* Call C interrupt dispatcher: */ 792trapagain: 793 addi %r3,%r1,8 794 bl CNAME(powerpc_interrupt) 795 .globl CNAME(trapexit) /* backtrace code sentinel */ 796CNAME(trapexit): 797 798/* Disable interrupts: */ 799 mfmsr %r3 800 andi. %r3,%r3,~PSL_EE@l 801 mtmsr %r3 802/* Test AST pending: */ 803 lwz %r5,FRAME_SRR1+8(%r1) 804 mtcr %r5 805 bf 17,1f /* branch if PSL_PR is false */ 806 807 GET_CPUINFO(%r3) /* get per-CPU pointer */ 808 lwz %r4, TD_FLAGS(%r2) /* get thread flags value 809 * (r2 is curthread) */ 810 lis %r5, (TDF_ASTPENDING|TDF_NEEDRESCHED)@h 811 ori %r5,%r5, (TDF_ASTPENDING|TDF_NEEDRESCHED)@l 812 and. %r4,%r4,%r5 813 beq 1f 814 mfmsr %r3 /* re-enable interrupts */ 815 ori %r3,%r3,PSL_EE@l 816 mtmsr %r3 817 isync 818 addi %r3,%r1,8 819 bl CNAME(ast) 820 .globl CNAME(asttrapexit) /* backtrace code sentinel #2 */ 821CNAME(asttrapexit): 822 b trapexit /* test ast ret value ? */ 8231: 824 FRAME_LEAVE(PC_TEMPSAVE) 825 826 .globl CNAME(rfi_patch1) /* replace rfi with rfid on ppc64 */ 827CNAME(rfi_patch1): 828 rfi 829 830 .globl CNAME(rfid_patch) 831CNAME(rfid_patch): 832 rfid 833 834#if defined(KDB) 835/* 836 * Deliberate entry to dbtrap 837 */ 838 .globl CNAME(breakpoint) 839CNAME(breakpoint): 840 mtsprg1 %r1 841 mfmsr %r3 842 mtsrr1 %r3 843 andi. %r3,%r3,~(PSL_EE|PSL_ME)@l 844 mtmsr %r3 /* disable interrupts */ 845 isync 846 GET_CPUINFO(%r3) 847 stw %r28,(PC_DBSAVE+CPUSAVE_R28)(%r3) 848 stw %r29,(PC_DBSAVE+CPUSAVE_R29)(%r3) 849 stw %r30,(PC_DBSAVE+CPUSAVE_R30)(%r3) 850 stw %r31,(PC_DBSAVE+CPUSAVE_R31)(%r3) 851 mflr %r28 852 li %r29,EXC_BPT 853 mtlr %r29 854 mfcr %r29 855 mtsrr0 %r28 856 857/* 858 * Now the kdb trap catching code. 859 */ 860dbtrap: 861 /* Write the trap vector to SPRG3 by computing LR & 0xff00 */ 862 mflr %r1 863 andi. %r1,%r1,0xff00 864 mtsprg3 %r1 865 866 lwz %r1,TRAP_TOCBASE(0) /* get new SP */ 867 lwz %r1,tmpstk@got(%r1) 868 addi %r1,%r1,TMPSTKSZ-16 869 870 FRAME_SETUP(PC_DBSAVE) 871/* Call C trap code: */ 872 addi %r3,%r1,8 873 bl CNAME(db_trap_glue) 874 or. %r3,%r3,%r3 875 bne dbleave 876/* This wasn't for KDB, so switch to real trap: */ 877 lwz %r3,FRAME_EXC+8(%r1) /* save exception */ 878 GET_CPUINFO(%r4) 879 stw %r3,(PC_DBSAVE+CPUSAVE_R31)(%r4) 880 FRAME_LEAVE(PC_DBSAVE) 881 mtsprg1 %r1 /* prepare for entrance to realtrap */ 882 GET_CPUINFO(%r1) 883 stw %r28,(PC_TEMPSAVE+CPUSAVE_R28)(%r1) 884 stw %r29,(PC_TEMPSAVE+CPUSAVE_R29)(%r1) 885 stw %r30,(PC_TEMPSAVE+CPUSAVE_R30)(%r1) 886 stw %r31,(PC_TEMPSAVE+CPUSAVE_R31)(%r1) 887 mflr %r28 888 mfcr %r29 889 lwz %r31,(PC_DBSAVE+CPUSAVE_R31)(%r1) 890 mtsprg3 %r31 /* SPRG3 was clobbered by FRAME_LEAVE */ 891 mfsprg1 %r1 892 b realtrap 893dbleave: 894 FRAME_LEAVE(PC_DBSAVE) 895 .globl CNAME(rfi_patch2) /* replace rfi with rfid on ppc64 */ 896CNAME(rfi_patch2): 897 rfi 898 899/* 900 * In case of KDB we want a separate trap catcher for it 901 */ 902 .globl CNAME(dblow),CNAME(dbend) 903CNAME(dblow): 904 mtsprg1 %r1 /* save SP */ 905 mtsprg2 %r29 /* save r29 */ 906 mfcr %r29 /* save CR in r29 */ 907 mfsrr1 %r1 908 mtcr %r1 909 bf 17,1f /* branch if privileged */ 910 /* Unprivileged case */ 911 mtcr %r29 /* put the condition register back */ 912 mfsprg2 %r29 /* ... and r29 */ 913 mflr %r1 /* save LR */ 914 mtsprg2 %r1 /* And then in SPRG2 */ 915 916 lwz %r1, TRAP_GENTRAP(0) /* Get branch address */ 917 mtlr %r1 918 li %r1, 0 /* How to get the vector from LR */ 919 blrl /* LR & (0xff00 | r1) is exception # */ 9201: 921 /* Privileged, so drop to KDB */ 922 GET_CPUINFO(%r1) 923 stw %r28,(PC_DBSAVE+CPUSAVE_R28)(%r1) /* free r28 */ 924 mfsprg2 %r28 /* r29 holds cr... */ 925 stw %r28,(PC_DBSAVE+CPUSAVE_R29)(%r1) /* free r29 */ 926 stw %r30,(PC_DBSAVE+CPUSAVE_R30)(%r1) /* free r30 */ 927 stw %r31,(PC_DBSAVE+CPUSAVE_R31)(%r1) /* free r31 */ 928 mflr %r28 /* save LR */ 929 930 /* Jump to dbtrap */ 931 bl 2f 932 .long dbtrap 9332: mflr %r1 934 lwz %r1,0(%r1) 935 mtlr %r1 936 blrl 937CNAME(dbend): 938#endif /* KDB */ 939