]> git.proxmox.com Git - qemu.git/blame - cpu-exec.c
fw_cfg: Splash image loader can overrun a stack variable, fix
[qemu.git] / cpu-exec.c
CommitLineData
7d13299d 1/*
e965fc38 2 * emulator main execution loop
5fafdf24 3 *
66321a11 4 * Copyright (c) 2003-2005 Fabrice Bellard
7d13299d 5 *
3ef693a0
FB
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
7d13299d 10 *
3ef693a0
FB
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
7d13299d 15 *
3ef693a0 16 * You should have received a copy of the GNU Lesser General Public
8167ee88 17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
7d13299d 18 */
e4533c7a 19#include "config.h"
cea5f9a2 20#include "cpu.h"
76cad711 21#include "disas/disas.h"
7cb69cae 22#include "tcg.h"
1de7afc9 23#include "qemu/atomic.h"
9c17d615 24#include "sysemu/qtest.h"
7d13299d 25
36bdbe54
FB
26int tb_invalidated_flag;
27
f0667e66 28//#define CONFIG_DEBUG_EXEC
7d13299d 29
3993c6bd 30bool qemu_cpu_has_work(CPUState *cpu)
6a4955a8 31{
3993c6bd 32 return cpu_has_work(cpu);
6a4955a8
AL
33}
34
9349b4f9 35void cpu_loop_exit(CPUArchState *env)
e4533c7a 36{
cea5f9a2
BS
37 env->current_tb = NULL;
38 longjmp(env->jmp_env, 1);
e4533c7a 39}
bfed01fc 40
fbf9eeb3
FB
41/* exit the current TB from a signal handler. The host registers are
42 restored in a state compatible with the CPU emulator
43 */
9eff14f3 44#if defined(CONFIG_SOFTMMU)
9349b4f9 45void cpu_resume_from_signal(CPUArchState *env, void *puc)
9eff14f3 46{
9eff14f3
BS
47 /* XXX: restore cpu registers saved in host registers */
48
49 env->exception_index = -1;
50 longjmp(env->jmp_env, 1);
51}
9eff14f3 52#endif
fbf9eeb3 53
2e70f6ef
PB
54/* Execute the code without caching the generated code. An interpreter
55 could be used if available. */
9349b4f9 56static void cpu_exec_nocache(CPUArchState *env, int max_cycles,
cea5f9a2 57 TranslationBlock *orig_tb)
2e70f6ef 58{
69784eae 59 tcg_target_ulong next_tb;
2e70f6ef
PB
60 TranslationBlock *tb;
61
62 /* Should never happen.
63 We only end up here when an existing TB is too long. */
64 if (max_cycles > CF_COUNT_MASK)
65 max_cycles = CF_COUNT_MASK;
66
67 tb = tb_gen_code(env, orig_tb->pc, orig_tb->cs_base, orig_tb->flags,
68 max_cycles);
69 env->current_tb = tb;
70 /* execute the generated code */
cea5f9a2 71 next_tb = tcg_qemu_tb_exec(env, tb->tc_ptr);
1c3569fe 72 env->current_tb = NULL;
2e70f6ef
PB
73
74 if ((next_tb & 3) == 2) {
75 /* Restore PC. This may happen if async event occurs before
76 the TB starts executing. */
622ed360 77 cpu_pc_from_tb(env, tb);
2e70f6ef
PB
78 }
79 tb_phys_invalidate(tb, -1);
80 tb_free(tb);
81}
82
9349b4f9 83static TranslationBlock *tb_find_slow(CPUArchState *env,
cea5f9a2 84 target_ulong pc,
8a40a180 85 target_ulong cs_base,
c068688b 86 uint64_t flags)
8a40a180
FB
87{
88 TranslationBlock *tb, **ptb1;
8a40a180 89 unsigned int h;
337fc758 90 tb_page_addr_t phys_pc, phys_page1;
41c1b1c9 91 target_ulong virt_page2;
3b46e624 92
8a40a180 93 tb_invalidated_flag = 0;
3b46e624 94
8a40a180 95 /* find translated block using physical mappings */
41c1b1c9 96 phys_pc = get_page_addr_code(env, pc);
8a40a180 97 phys_page1 = phys_pc & TARGET_PAGE_MASK;
8a40a180
FB
98 h = tb_phys_hash_func(phys_pc);
99 ptb1 = &tb_phys_hash[h];
100 for(;;) {
101 tb = *ptb1;
102 if (!tb)
103 goto not_found;
5fafdf24 104 if (tb->pc == pc &&
8a40a180 105 tb->page_addr[0] == phys_page1 &&
5fafdf24 106 tb->cs_base == cs_base &&
8a40a180
FB
107 tb->flags == flags) {
108 /* check next page if needed */
109 if (tb->page_addr[1] != -1) {
337fc758
BS
110 tb_page_addr_t phys_page2;
111
5fafdf24 112 virt_page2 = (pc & TARGET_PAGE_MASK) +
8a40a180 113 TARGET_PAGE_SIZE;
41c1b1c9 114 phys_page2 = get_page_addr_code(env, virt_page2);
8a40a180
FB
115 if (tb->page_addr[1] == phys_page2)
116 goto found;
117 } else {
118 goto found;
119 }
120 }
121 ptb1 = &tb->phys_hash_next;
122 }
123 not_found:
2e70f6ef
PB
124 /* if no translated code available, then translate it now */
125 tb = tb_gen_code(env, pc, cs_base, flags, 0);
3b46e624 126
8a40a180 127 found:
2c90fe2b
KB
128 /* Move the last found TB to the head of the list */
129 if (likely(*ptb1)) {
130 *ptb1 = tb->phys_hash_next;
131 tb->phys_hash_next = tb_phys_hash[h];
132 tb_phys_hash[h] = tb;
133 }
8a40a180
FB
134 /* we add the TB in the virtual pc hash table */
135 env->tb_jmp_cache[tb_jmp_cache_hash_func(pc)] = tb;
8a40a180
FB
136 return tb;
137}
138
9349b4f9 139static inline TranslationBlock *tb_find_fast(CPUArchState *env)
8a40a180
FB
140{
141 TranslationBlock *tb;
142 target_ulong cs_base, pc;
6b917547 143 int flags;
8a40a180
FB
144
145 /* we record a subset of the CPU state. It will
146 always be the same before a given translated block
147 is executed. */
6b917547 148 cpu_get_tb_cpu_state(env, &pc, &cs_base, &flags);
bce61846 149 tb = env->tb_jmp_cache[tb_jmp_cache_hash_func(pc)];
551bd27f
TS
150 if (unlikely(!tb || tb->pc != pc || tb->cs_base != cs_base ||
151 tb->flags != flags)) {
cea5f9a2 152 tb = tb_find_slow(env, pc, cs_base, flags);
8a40a180
FB
153 }
154 return tb;
155}
156
1009d2ed
JK
157static CPUDebugExcpHandler *debug_excp_handler;
158
84e3b602 159void cpu_set_debug_excp_handler(CPUDebugExcpHandler *handler)
1009d2ed 160{
1009d2ed 161 debug_excp_handler = handler;
1009d2ed
JK
162}
163
9349b4f9 164static void cpu_handle_debug_exception(CPUArchState *env)
1009d2ed
JK
165{
166 CPUWatchpoint *wp;
167
168 if (!env->watchpoint_hit) {
169 QTAILQ_FOREACH(wp, &env->watchpoints, entry) {
170 wp->flags &= ~BP_WATCHPOINT_HIT;
171 }
172 }
173 if (debug_excp_handler) {
174 debug_excp_handler(env);
175 }
176}
177
7d13299d
FB
178/* main execution loop */
179
1a28cac3
MT
180volatile sig_atomic_t exit_request;
181
9349b4f9 182int cpu_exec(CPUArchState *env)
7d13299d 183{
c356a1bc 184 CPUState *cpu = ENV_GET_CPU(env);
8a40a180 185 int ret, interrupt_request;
8a40a180 186 TranslationBlock *tb;
c27004ec 187 uint8_t *tc_ptr;
69784eae 188 tcg_target_ulong next_tb;
8c6939c0 189
cea5f9a2 190 if (env->halted) {
3993c6bd 191 if (!cpu_has_work(cpu)) {
eda48c34
PB
192 return EXCP_HALTED;
193 }
194
cea5f9a2 195 env->halted = 0;
eda48c34 196 }
5a1e3cfc 197
cea5f9a2 198 cpu_single_env = env;
e4533c7a 199
c629a4bc 200 if (unlikely(exit_request)) {
1a28cac3 201 env->exit_request = 1;
1a28cac3
MT
202 }
203
ecb644f4 204#if defined(TARGET_I386)
6792a57b
JK
205 /* put eflags in CPU temporary format */
206 CC_SRC = env->eflags & (CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
207 DF = 1 - (2 * ((env->eflags >> 10) & 1));
208 CC_OP = CC_OP_EFLAGS;
209 env->eflags &= ~(DF_MASK | CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
93ac68bc 210#elif defined(TARGET_SPARC)
e6e5906b
PB
211#elif defined(TARGET_M68K)
212 env->cc_op = CC_OP_FLAGS;
213 env->cc_dest = env->sr & 0xf;
214 env->cc_x = (env->sr >> 4) & 1;
ecb644f4
TS
215#elif defined(TARGET_ALPHA)
216#elif defined(TARGET_ARM)
d2fbca94 217#elif defined(TARGET_UNICORE32)
ecb644f4 218#elif defined(TARGET_PPC)
4e85f82c 219 env->reserve_addr = -1;
81ea0e13 220#elif defined(TARGET_LM32)
b779e29e 221#elif defined(TARGET_MICROBLAZE)
6af0bf9c 222#elif defined(TARGET_MIPS)
e67db06e 223#elif defined(TARGET_OPENRISC)
fdf9b3e8 224#elif defined(TARGET_SH4)
f1ccf904 225#elif defined(TARGET_CRIS)
10ec5117 226#elif defined(TARGET_S390X)
2328826b 227#elif defined(TARGET_XTENSA)
fdf9b3e8 228 /* XXXXX */
e4533c7a
FB
229#else
230#error unsupported target CPU
231#endif
3fb2ded1 232 env->exception_index = -1;
9d27abd9 233
7d13299d 234 /* prepare setjmp context for exception handling */
3fb2ded1
FB
235 for(;;) {
236 if (setjmp(env->jmp_env) == 0) {
237 /* if an exception is pending, we execute it here */
238 if (env->exception_index >= 0) {
239 if (env->exception_index >= EXCP_INTERRUPT) {
240 /* exit request from the cpu execution loop */
241 ret = env->exception_index;
1009d2ed
JK
242 if (ret == EXCP_DEBUG) {
243 cpu_handle_debug_exception(env);
244 }
3fb2ded1 245 break;
72d239ed
AJ
246 } else {
247#if defined(CONFIG_USER_ONLY)
3fb2ded1 248 /* if user mode only, we simulate a fake exception
9f083493 249 which will be handled outside the cpu execution
3fb2ded1 250 loop */
83479e77 251#if defined(TARGET_I386)
e694d4e2 252 do_interrupt(env);
83479e77 253#endif
3fb2ded1
FB
254 ret = env->exception_index;
255 break;
72d239ed 256#else
b5ff1b31 257 do_interrupt(env);
301d2908 258 env->exception_index = -1;
83479e77 259#endif
3fb2ded1 260 }
5fafdf24 261 }
9df217a3 262
b5fc09ae 263 next_tb = 0; /* force lookup of first TB */
3fb2ded1 264 for(;;) {
68a79315 265 interrupt_request = env->interrupt_request;
e1638bd8 266 if (unlikely(interrupt_request)) {
267 if (unlikely(env->singlestep_enabled & SSTEP_NOIRQ)) {
268 /* Mask out external interrupts for this step. */
3125f763 269 interrupt_request &= ~CPU_INTERRUPT_SSTEP_MASK;
e1638bd8 270 }
6658ffb8
PB
271 if (interrupt_request & CPU_INTERRUPT_DEBUG) {
272 env->interrupt_request &= ~CPU_INTERRUPT_DEBUG;
273 env->exception_index = EXCP_DEBUG;
1162c041 274 cpu_loop_exit(env);
6658ffb8 275 }
a90b7318 276#if defined(TARGET_ARM) || defined(TARGET_SPARC) || defined(TARGET_MIPS) || \
b779e29e 277 defined(TARGET_PPC) || defined(TARGET_ALPHA) || defined(TARGET_CRIS) || \
d2fbca94 278 defined(TARGET_MICROBLAZE) || defined(TARGET_LM32) || defined(TARGET_UNICORE32)
a90b7318
AZ
279 if (interrupt_request & CPU_INTERRUPT_HALT) {
280 env->interrupt_request &= ~CPU_INTERRUPT_HALT;
281 env->halted = 1;
282 env->exception_index = EXCP_HLT;
1162c041 283 cpu_loop_exit(env);
a90b7318
AZ
284 }
285#endif
68a79315 286#if defined(TARGET_I386)
5d62c43a
JK
287#if !defined(CONFIG_USER_ONLY)
288 if (interrupt_request & CPU_INTERRUPT_POLL) {
289 env->interrupt_request &= ~CPU_INTERRUPT_POLL;
290 apic_poll_irq(env->apic_state);
291 }
292#endif
b09ea7d5 293 if (interrupt_request & CPU_INTERRUPT_INIT) {
77b2bc2c
BS
294 cpu_svm_check_intercept_param(env, SVM_EXIT_INIT,
295 0);
232fc23b 296 do_cpu_init(x86_env_get_cpu(env));
b09ea7d5 297 env->exception_index = EXCP_HALTED;
1162c041 298 cpu_loop_exit(env);
b09ea7d5 299 } else if (interrupt_request & CPU_INTERRUPT_SIPI) {
232fc23b 300 do_cpu_sipi(x86_env_get_cpu(env));
b09ea7d5 301 } else if (env->hflags2 & HF2_GIF_MASK) {
db620f46
FB
302 if ((interrupt_request & CPU_INTERRUPT_SMI) &&
303 !(env->hflags & HF_SMM_MASK)) {
77b2bc2c
BS
304 cpu_svm_check_intercept_param(env, SVM_EXIT_SMI,
305 0);
db620f46 306 env->interrupt_request &= ~CPU_INTERRUPT_SMI;
e694d4e2 307 do_smm_enter(env);
db620f46
FB
308 next_tb = 0;
309 } else if ((interrupt_request & CPU_INTERRUPT_NMI) &&
310 !(env->hflags2 & HF2_NMI_MASK)) {
311 env->interrupt_request &= ~CPU_INTERRUPT_NMI;
312 env->hflags2 |= HF2_NMI_MASK;
e694d4e2 313 do_interrupt_x86_hardirq(env, EXCP02_NMI, 1);
db620f46 314 next_tb = 0;
e965fc38 315 } else if (interrupt_request & CPU_INTERRUPT_MCE) {
79c4f6b0 316 env->interrupt_request &= ~CPU_INTERRUPT_MCE;
e694d4e2 317 do_interrupt_x86_hardirq(env, EXCP12_MCHK, 0);
79c4f6b0 318 next_tb = 0;
db620f46
FB
319 } else if ((interrupt_request & CPU_INTERRUPT_HARD) &&
320 (((env->hflags2 & HF2_VINTR_MASK) &&
321 (env->hflags2 & HF2_HIF_MASK)) ||
322 (!(env->hflags2 & HF2_VINTR_MASK) &&
323 (env->eflags & IF_MASK &&
324 !(env->hflags & HF_INHIBIT_IRQ_MASK))))) {
325 int intno;
77b2bc2c
BS
326 cpu_svm_check_intercept_param(env, SVM_EXIT_INTR,
327 0);
db620f46
FB
328 env->interrupt_request &= ~(CPU_INTERRUPT_HARD | CPU_INTERRUPT_VIRQ);
329 intno = cpu_get_pic_interrupt(env);
4f213879 330 qemu_log_mask(CPU_LOG_TB_IN_ASM, "Servicing hardware INT=0x%02x\n", intno);
331 do_interrupt_x86_hardirq(env, intno, 1);
332 /* ensure that no TB jump will be modified as
333 the program flow was changed */
334 next_tb = 0;
0573fbfc 335#if !defined(CONFIG_USER_ONLY)
db620f46
FB
336 } else if ((interrupt_request & CPU_INTERRUPT_VIRQ) &&
337 (env->eflags & IF_MASK) &&
338 !(env->hflags & HF_INHIBIT_IRQ_MASK)) {
339 int intno;
340 /* FIXME: this should respect TPR */
77b2bc2c
BS
341 cpu_svm_check_intercept_param(env, SVM_EXIT_VINTR,
342 0);
db620f46 343 intno = ldl_phys(env->vm_vmcb + offsetof(struct vmcb, control.int_vector));
93fcfe39 344 qemu_log_mask(CPU_LOG_TB_IN_ASM, "Servicing virtual hardware INT=0x%02x\n", intno);
e694d4e2 345 do_interrupt_x86_hardirq(env, intno, 1);
d40c54d6 346 env->interrupt_request &= ~CPU_INTERRUPT_VIRQ;
db620f46 347 next_tb = 0;
907a5b26 348#endif
db620f46 349 }
68a79315 350 }
ce09776b 351#elif defined(TARGET_PPC)
9fddaa0c 352 if ((interrupt_request & CPU_INTERRUPT_RESET)) {
c356a1bc 353 cpu_reset(cpu);
9fddaa0c 354 }
47103572 355 if (interrupt_request & CPU_INTERRUPT_HARD) {
e9df014c
JM
356 ppc_hw_interrupt(env);
357 if (env->pending_interrupts == 0)
358 env->interrupt_request &= ~CPU_INTERRUPT_HARD;
b5fc09ae 359 next_tb = 0;
ce09776b 360 }
81ea0e13
MW
361#elif defined(TARGET_LM32)
362 if ((interrupt_request & CPU_INTERRUPT_HARD)
363 && (env->ie & IE_IE)) {
364 env->exception_index = EXCP_IRQ;
365 do_interrupt(env);
366 next_tb = 0;
367 }
b779e29e
EI
368#elif defined(TARGET_MICROBLAZE)
369 if ((interrupt_request & CPU_INTERRUPT_HARD)
370 && (env->sregs[SR_MSR] & MSR_IE)
371 && !(env->sregs[SR_MSR] & (MSR_EIP | MSR_BIP))
372 && !(env->iflags & (D_FLAG | IMM_FLAG))) {
373 env->exception_index = EXCP_IRQ;
374 do_interrupt(env);
375 next_tb = 0;
376 }
6af0bf9c
FB
377#elif defined(TARGET_MIPS)
378 if ((interrupt_request & CPU_INTERRUPT_HARD) &&
4cdc1cd1 379 cpu_mips_hw_interrupts_pending(env)) {
6af0bf9c
FB
380 /* Raise it */
381 env->exception_index = EXCP_EXT_INTERRUPT;
382 env->error_code = 0;
383 do_interrupt(env);
b5fc09ae 384 next_tb = 0;
6af0bf9c 385 }
b6a71ef7
JL
386#elif defined(TARGET_OPENRISC)
387 {
388 int idx = -1;
389 if ((interrupt_request & CPU_INTERRUPT_HARD)
390 && (env->sr & SR_IEE)) {
391 idx = EXCP_INT;
392 }
393 if ((interrupt_request & CPU_INTERRUPT_TIMER)
394 && (env->sr & SR_TEE)) {
395 idx = EXCP_TICK;
396 }
397 if (idx >= 0) {
398 env->exception_index = idx;
399 do_interrupt(env);
400 next_tb = 0;
401 }
402 }
e95c8d51 403#elif defined(TARGET_SPARC)
d532b26c
IK
404 if (interrupt_request & CPU_INTERRUPT_HARD) {
405 if (cpu_interrupts_enabled(env) &&
406 env->interrupt_index > 0) {
407 int pil = env->interrupt_index & 0xf;
408 int type = env->interrupt_index & 0xf0;
409
410 if (((type == TT_EXTINT) &&
411 cpu_pil_allowed(env, pil)) ||
412 type != TT_EXTINT) {
413 env->exception_index = env->interrupt_index;
414 do_interrupt(env);
415 next_tb = 0;
416 }
417 }
e965fc38 418 }
b5ff1b31
FB
419#elif defined(TARGET_ARM)
420 if (interrupt_request & CPU_INTERRUPT_FIQ
421 && !(env->uncached_cpsr & CPSR_F)) {
422 env->exception_index = EXCP_FIQ;
423 do_interrupt(env);
b5fc09ae 424 next_tb = 0;
b5ff1b31 425 }
9ee6e8bb
PB
426 /* ARMv7-M interrupt return works by loading a magic value
427 into the PC. On real hardware the load causes the
428 return to occur. The qemu implementation performs the
429 jump normally, then does the exception return when the
430 CPU tries to execute code at the magic address.
431 This will cause the magic PC value to be pushed to
a1c7273b 432 the stack if an interrupt occurred at the wrong time.
9ee6e8bb
PB
433 We avoid this by disabling interrupts when
434 pc contains a magic address. */
b5ff1b31 435 if (interrupt_request & CPU_INTERRUPT_HARD
9ee6e8bb
PB
436 && ((IS_M(env) && env->regs[15] < 0xfffffff0)
437 || !(env->uncached_cpsr & CPSR_I))) {
b5ff1b31
FB
438 env->exception_index = EXCP_IRQ;
439 do_interrupt(env);
b5fc09ae 440 next_tb = 0;
b5ff1b31 441 }
d2fbca94
GX
442#elif defined(TARGET_UNICORE32)
443 if (interrupt_request & CPU_INTERRUPT_HARD
444 && !(env->uncached_asr & ASR_I)) {
d48813dd 445 env->exception_index = UC32_EXCP_INTR;
d2fbca94
GX
446 do_interrupt(env);
447 next_tb = 0;
448 }
fdf9b3e8 449#elif defined(TARGET_SH4)
e96e2044
TS
450 if (interrupt_request & CPU_INTERRUPT_HARD) {
451 do_interrupt(env);
b5fc09ae 452 next_tb = 0;
e96e2044 453 }
eddf68a6 454#elif defined(TARGET_ALPHA)
6a80e088
RH
455 {
456 int idx = -1;
457 /* ??? This hard-codes the OSF/1 interrupt levels. */
e965fc38 458 switch (env->pal_mode ? 7 : env->ps & PS_INT_MASK) {
6a80e088
RH
459 case 0 ... 3:
460 if (interrupt_request & CPU_INTERRUPT_HARD) {
461 idx = EXCP_DEV_INTERRUPT;
462 }
463 /* FALLTHRU */
464 case 4:
465 if (interrupt_request & CPU_INTERRUPT_TIMER) {
466 idx = EXCP_CLK_INTERRUPT;
467 }
468 /* FALLTHRU */
469 case 5:
470 if (interrupt_request & CPU_INTERRUPT_SMP) {
471 idx = EXCP_SMP_INTERRUPT;
472 }
473 /* FALLTHRU */
474 case 6:
475 if (interrupt_request & CPU_INTERRUPT_MCHK) {
476 idx = EXCP_MCHK;
477 }
478 }
479 if (idx >= 0) {
480 env->exception_index = idx;
481 env->error_code = 0;
482 do_interrupt(env);
483 next_tb = 0;
484 }
eddf68a6 485 }
f1ccf904 486#elif defined(TARGET_CRIS)
1b1a38b0 487 if (interrupt_request & CPU_INTERRUPT_HARD
fb9fb692
EI
488 && (env->pregs[PR_CCS] & I_FLAG)
489 && !env->locked_irq) {
1b1a38b0
EI
490 env->exception_index = EXCP_IRQ;
491 do_interrupt(env);
492 next_tb = 0;
493 }
8219314b
LP
494 if (interrupt_request & CPU_INTERRUPT_NMI) {
495 unsigned int m_flag_archval;
496 if (env->pregs[PR_VR] < 32) {
497 m_flag_archval = M_FLAG_V10;
498 } else {
499 m_flag_archval = M_FLAG_V32;
500 }
501 if ((env->pregs[PR_CCS] & m_flag_archval)) {
502 env->exception_index = EXCP_NMI;
503 do_interrupt(env);
504 next_tb = 0;
505 }
f1ccf904 506 }
0633879f
PB
507#elif defined(TARGET_M68K)
508 if (interrupt_request & CPU_INTERRUPT_HARD
509 && ((env->sr & SR_I) >> SR_I_SHIFT)
510 < env->pending_level) {
511 /* Real hardware gets the interrupt vector via an
512 IACK cycle at this point. Current emulated
513 hardware doesn't rely on this, so we
514 provide/save the vector when the interrupt is
515 first signalled. */
516 env->exception_index = env->pending_vector;
3c688828 517 do_interrupt_m68k_hardirq(env);
b5fc09ae 518 next_tb = 0;
0633879f 519 }
3110e292
AG
520#elif defined(TARGET_S390X) && !defined(CONFIG_USER_ONLY)
521 if ((interrupt_request & CPU_INTERRUPT_HARD) &&
522 (env->psw.mask & PSW_MASK_EXT)) {
523 do_interrupt(env);
524 next_tb = 0;
525 }
40643d7c
MF
526#elif defined(TARGET_XTENSA)
527 if (interrupt_request & CPU_INTERRUPT_HARD) {
528 env->exception_index = EXC_IRQ;
529 do_interrupt(env);
530 next_tb = 0;
531 }
68a79315 532#endif
ff2712ba 533 /* Don't use the cached interrupt_request value,
9d05095e 534 do_interrupt may have updated the EXITTB flag. */
b5ff1b31 535 if (env->interrupt_request & CPU_INTERRUPT_EXITTB) {
bf3e8bf1
FB
536 env->interrupt_request &= ~CPU_INTERRUPT_EXITTB;
537 /* ensure that no TB jump will be modified as
538 the program flow was changed */
b5fc09ae 539 next_tb = 0;
bf3e8bf1 540 }
be214e6c
AJ
541 }
542 if (unlikely(env->exit_request)) {
543 env->exit_request = 0;
544 env->exception_index = EXCP_INTERRUPT;
1162c041 545 cpu_loop_exit(env);
3fb2ded1 546 }
a73b1fd9 547#if defined(DEBUG_DISAS) || defined(CONFIG_DEBUG_EXEC)
8fec2b8c 548 if (qemu_loglevel_mask(CPU_LOG_TB_CPU)) {
3fb2ded1 549 /* restore flags in standard format */
ecb644f4 550#if defined(TARGET_I386)
e694d4e2
BS
551 env->eflags = env->eflags | cpu_cc_compute_all(env, CC_OP)
552 | (DF & DF_MASK);
6fd2a026 553 log_cpu_state(env, CPU_DUMP_CCOP);
3fb2ded1 554 env->eflags &= ~(DF_MASK | CC_O | CC_S | CC_Z | CC_A | CC_P | CC_C);
e6e5906b
PB
555#elif defined(TARGET_M68K)
556 cpu_m68k_flush_flags(env, env->cc_op);
557 env->cc_op = CC_OP_FLAGS;
558 env->sr = (env->sr & 0xffe0)
559 | env->cc_dest | (env->cc_x << 4);
93fcfe39 560 log_cpu_state(env, 0);
e4533c7a 561#else
a73b1fd9 562 log_cpu_state(env, 0);
e4533c7a 563#endif
3fb2ded1 564 }
a73b1fd9 565#endif /* DEBUG_DISAS || CONFIG_DEBUG_EXEC */
d5975363 566 spin_lock(&tb_lock);
cea5f9a2 567 tb = tb_find_fast(env);
d5975363
PB
568 /* Note: we do it here to avoid a gcc bug on Mac OS X when
569 doing it in tb_find_slow */
570 if (tb_invalidated_flag) {
571 /* as some TB could have been invalidated because
572 of memory exceptions while generating the code, we
573 must recompute the hash index here */
574 next_tb = 0;
2e70f6ef 575 tb_invalidated_flag = 0;
d5975363 576 }
f0667e66 577#ifdef CONFIG_DEBUG_EXEC
3ba19255
SW
578 qemu_log_mask(CPU_LOG_EXEC, "Trace %p [" TARGET_FMT_lx "] %s\n",
579 tb->tc_ptr, tb->pc,
93fcfe39 580 lookup_symbol(tb->pc));
9d27abd9 581#endif
8a40a180
FB
582 /* see if we can patch the calling TB. When the TB
583 spans two pages, we cannot safely do a direct
584 jump. */
040f2fb2 585 if (next_tb != 0 && tb->page_addr[1] == -1) {
b5fc09ae 586 tb_add_jump((TranslationBlock *)(next_tb & ~3), next_tb & 3, tb);
3fb2ded1 587 }
d5975363 588 spin_unlock(&tb_lock);
55e8b85e 589
590 /* cpu_interrupt might be called while translating the
591 TB, but before it is linked into a potentially
592 infinite loop and becomes env->current_tb. Avoid
593 starting execution if there is a pending interrupt. */
b0052d15
JK
594 env->current_tb = tb;
595 barrier();
596 if (likely(!env->exit_request)) {
2e70f6ef 597 tc_ptr = tb->tc_ptr;
e965fc38 598 /* execute the generated code */
cea5f9a2 599 next_tb = tcg_qemu_tb_exec(env, tc_ptr);
2e70f6ef 600 if ((next_tb & 3) == 2) {
bf20dc07 601 /* Instruction counter expired. */
2e70f6ef 602 int insns_left;
69784eae 603 tb = (TranslationBlock *)(next_tb & ~3);
2e70f6ef 604 /* Restore PC. */
622ed360 605 cpu_pc_from_tb(env, tb);
2e70f6ef
PB
606 insns_left = env->icount_decr.u32;
607 if (env->icount_extra && insns_left >= 0) {
608 /* Refill decrementer and continue execution. */
609 env->icount_extra += insns_left;
610 if (env->icount_extra > 0xffff) {
611 insns_left = 0xffff;
612 } else {
613 insns_left = env->icount_extra;
614 }
615 env->icount_extra -= insns_left;
616 env->icount_decr.u16.low = insns_left;
617 } else {
618 if (insns_left > 0) {
619 /* Execute remaining instructions. */
cea5f9a2 620 cpu_exec_nocache(env, insns_left, tb);
2e70f6ef
PB
621 }
622 env->exception_index = EXCP_INTERRUPT;
623 next_tb = 0;
1162c041 624 cpu_loop_exit(env);
2e70f6ef
PB
625 }
626 }
627 }
b0052d15 628 env->current_tb = NULL;
4cbf74b6
FB
629 /* reset soft MMU for next block (it can currently
630 only be set by a memory fault) */
50a518e3 631 } /* for(;;) */
0d101938
JK
632 } else {
633 /* Reload env after longjmp - the compiler may have smashed all
634 * local variables as longjmp is marked 'noreturn'. */
635 env = cpu_single_env;
7d13299d 636 }
3fb2ded1
FB
637 } /* for(;;) */
638
7d13299d 639
e4533c7a 640#if defined(TARGET_I386)
9de5e440 641 /* restore flags in standard format */
e694d4e2
BS
642 env->eflags = env->eflags | cpu_cc_compute_all(env, CC_OP)
643 | (DF & DF_MASK);
e4533c7a 644#elif defined(TARGET_ARM)
b7bcbe95 645 /* XXX: Save/restore host fpu exception state?. */
d2fbca94 646#elif defined(TARGET_UNICORE32)
93ac68bc 647#elif defined(TARGET_SPARC)
67867308 648#elif defined(TARGET_PPC)
81ea0e13 649#elif defined(TARGET_LM32)
e6e5906b
PB
650#elif defined(TARGET_M68K)
651 cpu_m68k_flush_flags(env, env->cc_op);
652 env->cc_op = CC_OP_FLAGS;
653 env->sr = (env->sr & 0xffe0)
654 | env->cc_dest | (env->cc_x << 4);
b779e29e 655#elif defined(TARGET_MICROBLAZE)
6af0bf9c 656#elif defined(TARGET_MIPS)
e67db06e 657#elif defined(TARGET_OPENRISC)
fdf9b3e8 658#elif defined(TARGET_SH4)
eddf68a6 659#elif defined(TARGET_ALPHA)
f1ccf904 660#elif defined(TARGET_CRIS)
10ec5117 661#elif defined(TARGET_S390X)
2328826b 662#elif defined(TARGET_XTENSA)
fdf9b3e8 663 /* XXXXX */
e4533c7a
FB
664#else
665#error unsupported target CPU
666#endif
1057eaa7 667
6a00d601 668 /* fail safe : never use cpu_single_env outside cpu_exec() */
5fafdf24 669 cpu_single_env = NULL;
7d13299d
FB
670 return ret;
671}