|
|
|
|
/*
|
|
|
|
|
* defines common to all virtual CPUs
|
|
|
|
|
*
|
|
|
|
|
* Copyright (c) 2003 Fabrice Bellard
|
|
|
|
|
*
|
|
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
|
|
|
*
|
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
|
* Lesser General Public License for more details.
|
|
|
|
|
*
|
|
|
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
|
|
|
* License along with this library; if not, see <http://www.gnu.org/licenses/>.
|
|
|
|
|
*/
|
|
|
|
|
#ifndef CPU_ALL_H
|
|
|
|
|
#define CPU_ALL_H
|
|
|
|
|
|
|
|
|
|
#include "exec/page-protection.h"
|
|
|
|
|
#include "exec/cpu-common.h"
|
|
|
|
|
#include "exec/memory.h"
|
|
|
|
|
#include "exec/tswap.h"
|
|
|
|
|
#include "hw/core/cpu.h"
|
|
|
|
|
|
|
|
|
|
/* some important defines:
|
|
|
|
|
*
|
|
|
|
|
* HOST_BIG_ENDIAN : whether the host cpu is big endian and
|
|
|
|
|
* otherwise little endian.
|
|
|
|
|
*
|
|
|
|
|
* TARGET_BIG_ENDIAN : same for the target cpu
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
#if HOST_BIG_ENDIAN != TARGET_BIG_ENDIAN
|
|
|
|
|
#define BSWAP_NEEDED
|
|
|
|
|
#endif
|
|
|
|
|
|
|
|
|
|
/* Target-endianness CPU memory access functions. These fit into the
|
|
|
|
|
* {ld,st}{type}{sign}{size}{endian}_p naming scheme described in bswap.h.
|
|
|
|
|
*/
|
|
|
|
|
#if TARGET_BIG_ENDIAN
|
|
|
|
|
#define lduw_p(p) lduw_be_p(p)
|
|
|
|
|
#define ldsw_p(p) ldsw_be_p(p)
|
|
|
|
|
#define ldl_p(p) ldl_be_p(p)
|
|
|
|
|
#define ldq_p(p) ldq_be_p(p)
|
|
|
|
|
#define stw_p(p, v) stw_be_p(p, v)
|
|
|
|
|
#define stl_p(p, v) stl_be_p(p, v)
|
|
|
|
|
#define stq_p(p, v) stq_be_p(p, v)
|
|
|
|
|
#define ldn_p(p, sz) ldn_be_p(p, sz)
|
|
|
|
|
#define stn_p(p, sz, v) stn_be_p(p, sz, v)
|
|
|
|
|
#else
|
|
|
|
|
#define lduw_p(p) lduw_le_p(p)
|
|
|
|
|
#define ldsw_p(p) ldsw_le_p(p)
|
|
|
|
|
#define ldl_p(p) ldl_le_p(p)
|
|
|
|
|
#define ldq_p(p) ldq_le_p(p)
|
|
|
|
|
#define stw_p(p, v) stw_le_p(p, v)
|
|
|
|
|
#define stl_p(p, v) stl_le_p(p, v)
|
|
|
|
|
#define stq_p(p, v) stq_le_p(p, v)
|
|
|
|
|
#define ldn_p(p, sz) ldn_le_p(p, sz)
|
|
|
|
|
#define stn_p(p, sz, v) stn_le_p(p, sz, v)
|
|
|
|
|
#endif
|
|
|
|
|
|
|
|
|
|
/* MMU memory access macros */
|
|
|
|
|
|
|
|
|
|
#if !defined(CONFIG_USER_ONLY)
|
|
|
|
|
|
|
|
|
|
#include "exec/hwaddr.h"
|
|
|
|
|
|
|
|
|
|
#define SUFFIX
|
|
|
|
|
#define ARG1 as
|
|
|
|
|
#define ARG1_DECL AddressSpace *as
|
|
|
|
|
#define TARGET_ENDIANNESS
|
|
|
|
|
#include "exec/memory_ldst.h.inc"
|
|
|
|
|
|
|
|
|
|
#define SUFFIX _cached_slow
|
|
|
|
|
#define ARG1 cache
|
|
|
|
|
#define ARG1_DECL MemoryRegionCache *cache
|
|
|
|
|
#define TARGET_ENDIANNESS
|
|
|
|
|
#include "exec/memory_ldst.h.inc"
|
|
|
|
|
|
|
|
|
|
static inline void stl_phys_notdirty(AddressSpace *as, hwaddr addr, uint32_t val)
|
|
|
|
|
{
|
|
|
|
|
address_space_stl_notdirty(as, addr, val,
|
|
|
|
|
MEMTXATTRS_UNSPECIFIED, NULL);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#define SUFFIX
|
|
|
|
|
#define ARG1 as
|
|
|
|
|
#define ARG1_DECL AddressSpace *as
|
|
|
|
|
#define TARGET_ENDIANNESS
|
|
|
|
|
#include "exec/memory_ldst_phys.h.inc"
|
|
|
|
|
|
|
|
|
|
/* Inline fast path for direct RAM access. */
|
|
|
|
|
#define ENDIANNESS
|
|
|
|
|
#include "exec/memory_ldst_cached.h.inc"
|
|
|
|
|
|
|
|
|
|
#define SUFFIX _cached
|
|
|
|
|
#define ARG1 cache
|
|
|
|
|
#define ARG1_DECL MemoryRegionCache *cache
|
|
|
|
|
#define TARGET_ENDIANNESS
|
|
|
|
|
#include "exec/memory_ldst_phys.h.inc"
|
|
|
|
|
#endif
|
|
|
|
|
|
|
|
|
|
/* page related stuff */
|
|
|
|
|
#include "exec/cpu-defs.h"
|
|
|
|
|
#include "exec/target_page.h"
|
|
|
|
|
|
|
|
|
|
CPUArchState *cpu_copy(CPUArchState *env);
|
|
|
|
|
|
|
|
|
|
/* Flags for use in ENV->INTERRUPT_PENDING.
|
|
|
|
|
|
|
|
|
|
The numbers assigned here are non-sequential in order to preserve
|
|
|
|
|
binary compatibility with the vmstate dump. Bit 0 (0x0001) was
|
|
|
|
|
previously used for CPU_INTERRUPT_EXIT, and is cleared when loading
|
|
|
|
|
the vmstate dump. */
|
|
|
|
|
|
|
|
|
|
/* External hardware interrupt pending. This is typically used for
|
|
|
|
|
interrupts from devices. */
|
|
|
|
|
#define CPU_INTERRUPT_HARD 0x0002
|
|
|
|
|
|
|
|
|
|
/* Exit the current TB. This is typically used when some system-level device
|
|
|
|
|
makes some change to the memory mapping. E.g. the a20 line change. */
|
|
|
|
|
#define CPU_INTERRUPT_EXITTB 0x0004
|
|
|
|
|
|
|
|
|
|
/* Halt the CPU. */
|
|
|
|
|
#define CPU_INTERRUPT_HALT 0x0020
|
|
|
|
|
|
|
|
|
|
/* Debug event pending. */
|
|
|
|
|
#define CPU_INTERRUPT_DEBUG 0x0080
|
|
|
|
|
|
|
|
|
|
/* Reset signal. */
|
|
|
|
|
#define CPU_INTERRUPT_RESET 0x0400
|
|
|
|
|
|
|
|
|
|
/* Several target-specific external hardware interrupts. Each target/cpu.h
|
|
|
|
|
should define proper names based on these defines. */
|
|
|
|
|
#define CPU_INTERRUPT_TGT_EXT_0 0x0008
|
|
|
|
|
#define CPU_INTERRUPT_TGT_EXT_1 0x0010
|
|
|
|
|
#define CPU_INTERRUPT_TGT_EXT_2 0x0040
|
|
|
|
|
#define CPU_INTERRUPT_TGT_EXT_3 0x0200
|
|
|
|
|
#define CPU_INTERRUPT_TGT_EXT_4 0x1000
|
|
|
|
|
|
|
|
|
|
/* Several target-specific internal interrupts. These differ from the
|
|
|
|
|
preceding target-specific interrupts in that they are intended to
|
|
|
|
|
originate from within the cpu itself, typically in response to some
|
|
|
|
|
instruction being executed. These, therefore, are not masked while
|
|
|
|
|
single-stepping within the debugger. */
|
|
|
|
|
#define CPU_INTERRUPT_TGT_INT_0 0x0100
|
|
|
|
|
#define CPU_INTERRUPT_TGT_INT_1 0x0800
|
|
|
|
|
#define CPU_INTERRUPT_TGT_INT_2 0x2000
|
|
|
|
|
|
|
|
|
|
/* First unused bit: 0x4000. */
|
|
|
|
|
|
|
|
|
|
/* The set of all bits that should be masked when single-stepping. */
|
|
|
|
|
#define CPU_INTERRUPT_SSTEP_MASK \
|
|
|
|
|
(CPU_INTERRUPT_HARD \
|
|
|
|
|
| CPU_INTERRUPT_TGT_EXT_0 \
|
|
|
|
|
| CPU_INTERRUPT_TGT_EXT_1 \
|
|
|
|
|
| CPU_INTERRUPT_TGT_EXT_2 \
|
|
|
|
|
| CPU_INTERRUPT_TGT_EXT_3 \
|
|
|
|
|
| CPU_INTERRUPT_TGT_EXT_4)
|
|
|
|
|
|
|
|
|
|
#include "cpu.h"
|
|
|
|
|
|
|
|
|
|
#ifdef CONFIG_USER_ONLY
|
|
|
|
|
|
|
|
|
|
static inline int cpu_mmu_index(CPUState *cs, bool ifetch);
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Allow some level of source compatibility with softmmu. We do not
|
|
|
|
|
* support any of the more exotic features, so only invalid pages may
|
|
|
|
|
* be signaled by probe_access_flags().
|
|
|
|
|
*/
|
|
|
|
|
#define TLB_INVALID_MASK (1 << (TARGET_PAGE_BITS_MIN - 1))
|
plugins: force slow path when plugins instrument memory ops
The lack of SVE memory instrumentation has been an omission in plugin
handling since it was introduced. Fortunately we can utilise the
probe_* functions to force all all memory access to follow the slow
path. We do this by checking the access type and presence of plugin
memory callbacks and if set return the TLB_MMIO flag.
We have to jump through a few hoops in user mode to re-use the flag
but it was the desired effect:
./qemu-system-aarch64 -display none -serial mon:stdio \
-M virt -cpu max -semihosting-config enable=on \
-kernel ./tests/tcg/aarch64-softmmu/memory-sve \
-plugin ./contrib/plugins/libexeclog.so,ifilter=st1w,afilter=0x40001808 -d plugin
gives (disas doesn't currently understand st1w):
0, 0x40001808, 0xe54342a0, ".byte 0xa0, 0x42, 0x43, 0xe5", store, 0x40213010, RAM, store, 0x40213014, RAM, store, 0x40213018, RAM
And for user-mode:
./qemu-aarch64 \
-plugin contrib/plugins/libexeclog.so,afilter=0x4007c0 \
-d plugin \
./tests/tcg/aarch64-linux-user/sha512-sve
gives:
1..10
ok 1 - do_test(&tests[i])
0, 0x4007c0, 0xa4004b80, ".byte 0x80, 0x4b, 0x00, 0xa4", load, 0x5500800370, load, 0x5500800371, load, 0x5500800372, load, 0x5500800373, load, 0x5500800374, load, 0x5500800375, load, 0x5500800376, load, 0x5500800377, load, 0x5500800378, load, 0x5500800379, load, 0x550080037a, load, 0x550080037b, load, 0x550080037c, load, 0x550080037d, load, 0x550080037e, load, 0x550080037f, load, 0x5500800380, load, 0x5500800381, load, 0x5500800382, load, 0x5500800383, load, 0x5500800384, load, 0x5500800385, load, 0x5500800386, lo
ad, 0x5500800387, load, 0x5500800388, load, 0x5500800389, load, 0x550080038a, load, 0x550080038b, load, 0x550080038c, load, 0x550080038d, load, 0x550080038e, load, 0x550080038f, load, 0x5500800390, load, 0x5500800391, load, 0x5500800392, load, 0x5500800393, load, 0x5500800394, load, 0x5500800395, load, 0x5500800396, load, 0x5500800397, load, 0x5500800398, load, 0x5500800399, load, 0x550080039a, load, 0x550080039b, load, 0x550080039c, load, 0x550080039d, load, 0x550080039e, load, 0x550080039f, load, 0x55008003a0, load, 0x55008003a1, load, 0x55008003a2, load, 0x55008003a3, load, 0x55008003a4, load, 0x55008003a5, load, 0x55008003a6, load, 0x55008003a7, load, 0x55008003a8, load, 0x55008003a9, load, 0x55008003aa, load, 0x55008003ab, load, 0x55008003ac, load, 0x55008003ad, load, 0x55008003ae, load, 0x55008003af
(4007c0 is the ld1b in the sha512-sve)
Reviewed-by: Richard Henderson <richard.henderson@linaro.org>
Cc: Robert Henry <robhenry@microsoft.com>
Cc: Aaron Lindsay <aaron@os.amperecomputing.com>
Signed-off-by: Alex Bennée <alex.bennee@linaro.org>
Message-Id: <20230630180423.558337-20-alex.bennee@linaro.org>
3 years ago
|
|
|
#define TLB_MMIO (1 << (TARGET_PAGE_BITS_MIN - 2))
|
|
|
|
|
#define TLB_WATCHPOINT 0
|
|
|
|
|
|
|
|
|
|
static inline int cpu_mmu_index(CPUState *cs, bool ifetch)
|
|
|
|
|
{
|
|
|
|
|
return MMU_USER_IDX;
|
|
|
|
|
}
|
|
|
|
|
#else
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Flags stored in the low bits of the TLB virtual address.
|
|
|
|
|
* These are defined so that fast path ram access is all zeros.
|
|
|
|
|
* The flags all must be between TARGET_PAGE_BITS and
|
|
|
|
|
* maximum address alignment bit.
|
|
|
|
|
*
|
|
|
|
|
* Use TARGET_PAGE_BITS_MIN so that these bits are constant
|
|
|
|
|
* when TARGET_PAGE_BITS_VARY is in effect.
|
|
|
|
|
*
|
|
|
|
|
* The count, if not the placement of these bits is known
|
|
|
|
|
* to tcg/tcg-op-ldst.c, check_max_alignment().
|
|
|
|
|
*/
|
|
|
|
|
/* Zero if TLB entry is valid. */
|
|
|
|
|
#define TLB_INVALID_MASK (1 << (TARGET_PAGE_BITS_MIN - 1))
|
|
|
|
|
/* Set if TLB entry references a clean RAM page. The iotlb entry will
|
|
|
|
|
contain the page physical address. */
|
|
|
|
|
#define TLB_NOTDIRTY (1 << (TARGET_PAGE_BITS_MIN - 2))
|
|
|
|
|
/* Set if TLB entry is an IO callback. */
|
|
|
|
|
#define TLB_MMIO (1 << (TARGET_PAGE_BITS_MIN - 3))
|
|
|
|
|
/* Set if TLB entry writes ignored. */
|
|
|
|
|
#define TLB_DISCARD_WRITE (1 << (TARGET_PAGE_BITS_MIN - 4))
|
|
|
|
|
/* Set if the slow path must be used; more flags in CPUTLBEntryFull. */
|
|
|
|
|
#define TLB_FORCE_SLOW (1 << (TARGET_PAGE_BITS_MIN - 5))
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Use this mask to check interception with an alignment mask
|
|
|
|
|
* in a TCG backend.
|
|
|
|
|
*/
|
|
|
|
|
#define TLB_FLAGS_MASK \
|
|
|
|
|
(TLB_INVALID_MASK | TLB_NOTDIRTY | TLB_MMIO \
|
|
|
|
|
| TLB_FORCE_SLOW | TLB_DISCARD_WRITE)
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Flags stored in CPUTLBEntryFull.slow_flags[x].
|
|
|
|
|
* TLB_FORCE_SLOW must be set in CPUTLBEntry.addr_idx[x].
|
|
|
|
|
*/
|
|
|
|
|
/* Set if TLB entry requires byte swap. */
|
|
|
|
|
#define TLB_BSWAP (1 << 0)
|
|
|
|
|
/* Set if TLB entry contains a watchpoint. */
|
|
|
|
|
#define TLB_WATCHPOINT (1 << 1)
|
|
|
|
|
/* Set if TLB entry requires aligned accesses. */
|
|
|
|
|
#define TLB_CHECK_ALIGNED (1 << 2)
|
|
|
|
|
|
|
|
|
|
#define TLB_SLOW_FLAGS_MASK (TLB_BSWAP | TLB_WATCHPOINT | TLB_CHECK_ALIGNED)
|
|
|
|
|
|
|
|
|
|
/* The two sets of flags must not overlap. */
|
|
|
|
|
QEMU_BUILD_BUG_ON(TLB_FLAGS_MASK & TLB_SLOW_FLAGS_MASK);
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* tlb_hit_page: return true if page aligned @addr is a hit against the
|
|
|
|
|
* TLB entry @tlb_addr
|
|
|
|
|
*
|
|
|
|
|
* @addr: virtual address to test (must be page aligned)
|
|
|
|
|
* @tlb_addr: TLB entry address (a CPUTLBEntry addr_read/write/code value)
|
|
|
|
|
*/
|
|
|
|
|
static inline bool tlb_hit_page(uint64_t tlb_addr, vaddr addr)
|
|
|
|
|
{
|
|
|
|
|
return addr == (tlb_addr & (TARGET_PAGE_MASK | TLB_INVALID_MASK));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* tlb_hit: return true if @addr is a hit against the TLB entry @tlb_addr
|
|
|
|
|
*
|
|
|
|
|
* @addr: virtual address to test (need not be page aligned)
|
|
|
|
|
* @tlb_addr: TLB entry address (a CPUTLBEntry addr_read/write/code value)
|
|
|
|
|
*/
|
|
|
|
|
static inline bool tlb_hit(uint64_t tlb_addr, vaddr addr)
|
|
|
|
|
{
|
|
|
|
|
return tlb_hit_page(tlb_addr, addr & TARGET_PAGE_MASK);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#endif /* !CONFIG_USER_ONLY */
|
|
|
|
|
|
|
|
|
|
/* Validate correct placement of CPUArchState. */
|
|
|
|
|
QEMU_BUILD_BUG_ON(offsetof(ArchCPU, parent_obj) != 0);
|
|
|
|
|
QEMU_BUILD_BUG_ON(offsetof(ArchCPU, env) != sizeof(CPUState));
|
|
|
|
|
|
|
|
|
|
#endif /* CPU_ALL_H */
|