]>
Commit | Line | Data |
---|---|---|
2c0262af FB |
1 | /* |
2 | * ARM virtual CPU header | |
5fafdf24 | 3 | * |
2c0262af FB |
4 | * Copyright (c) 2003 Fabrice Bellard |
5 | * | |
6 | * This library is free software; you can redistribute it and/or | |
7 | * modify it under the terms of the GNU Lesser General Public | |
8 | * License as published by the Free Software Foundation; either | |
50f57e09 | 9 | * version 2.1 of the License, or (at your option) any later version. |
2c0262af FB |
10 | * |
11 | * This library is distributed in the hope that it will be useful, | |
12 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
13 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
14 | * Lesser General Public License for more details. | |
15 | * | |
16 | * You should have received a copy of the GNU Lesser General Public | |
8167ee88 | 17 | * License along with this library; if not, see <http://www.gnu.org/licenses/>. |
2c0262af | 18 | */ |
2c0262af | 19 | |
07f5a258 MA |
20 | #ifndef ARM_CPU_H |
21 | #define ARM_CPU_H | |
3cf1e035 | 22 | |
72b0cd35 | 23 | #include "kvm-consts.h" |
2c4da50d | 24 | #include "hw/registerfields.h" |
74433bf0 RH |
25 | #include "cpu-qom.h" |
26 | #include "exec/cpu-defs.h" | |
68970d1e | 27 | #include "qapi/qapi-types-common.h" |
9042c0e2 | 28 | |
ca759f9e AB |
29 | /* ARM processors have a weak memory model */ |
30 | #define TCG_GUEST_DEFAULT_MO (0) | |
31 | ||
e24fd076 DG |
32 | #ifdef TARGET_AARCH64 |
33 | #define KVM_HAVE_MCE_INJECTION 1 | |
34 | #endif | |
35 | ||
b8a9e8f1 FB |
36 | #define EXCP_UDEF 1 /* undefined instruction */ |
37 | #define EXCP_SWI 2 /* software interrupt */ | |
38 | #define EXCP_PREFETCH_ABORT 3 | |
39 | #define EXCP_DATA_ABORT 4 | |
b5ff1b31 FB |
40 | #define EXCP_IRQ 5 |
41 | #define EXCP_FIQ 6 | |
06c949e6 | 42 | #define EXCP_BKPT 7 |
9ee6e8bb | 43 | #define EXCP_EXCEPTION_EXIT 8 /* Return from v7M exception. */ |
fbb4a2e3 | 44 | #define EXCP_KERNEL_TRAP 9 /* Jumped to kernel code page. */ |
35979d71 | 45 | #define EXCP_HVC 11 /* HyperVisor Call */ |
607d98b8 | 46 | #define EXCP_HYP_TRAP 12 |
e0d6e6a5 | 47 | #define EXCP_SMC 13 /* Secure Monitor Call */ |
136e67e9 EI |
48 | #define EXCP_VIRQ 14 |
49 | #define EXCP_VFIQ 15 | |
19a6e31c | 50 | #define EXCP_SEMIHOST 16 /* semihosting call */ |
7517748e | 51 | #define EXCP_NOCP 17 /* v7M NOCP UsageFault */ |
e13886e3 | 52 | #define EXCP_INVSTATE 18 /* v7M INVSTATE UsageFault */ |
86f026de | 53 | #define EXCP_STKOF 19 /* v8M STKOF UsageFault */ |
e33cf0f8 | 54 | #define EXCP_LAZYFP 20 /* v7M fault during lazy FP stacking */ |
019076b0 PM |
55 | #define EXCP_LSERR 21 /* v8M LSERR SecureFault */ |
56 | #define EXCP_UNALIGNED 22 /* v7M UNALIGNED UsageFault */ | |
2c4a7cc5 | 57 | /* NB: add new EXCP_ defines to the array in arm_log_exception() too */ |
9ee6e8bb PB |
58 | |
59 | #define ARMV7M_EXCP_RESET 1 | |
60 | #define ARMV7M_EXCP_NMI 2 | |
61 | #define ARMV7M_EXCP_HARD 3 | |
62 | #define ARMV7M_EXCP_MEM 4 | |
63 | #define ARMV7M_EXCP_BUS 5 | |
64 | #define ARMV7M_EXCP_USAGE 6 | |
1e577cc7 | 65 | #define ARMV7M_EXCP_SECURE 7 |
9ee6e8bb PB |
66 | #define ARMV7M_EXCP_SVC 11 |
67 | #define ARMV7M_EXCP_DEBUG 12 | |
68 | #define ARMV7M_EXCP_PENDSV 14 | |
69 | #define ARMV7M_EXCP_SYSTICK 15 | |
2c0262af | 70 | |
acf94941 PM |
71 | /* For M profile, some registers are banked secure vs non-secure; |
72 | * these are represented as a 2-element array where the first element | |
73 | * is the non-secure copy and the second is the secure copy. | |
74 | * When the CPU does not have implement the security extension then | |
75 | * only the first element is used. | |
76 | * This means that the copy for the current security state can be | |
77 | * accessed via env->registerfield[env->v7m.secure] (whether the security | |
78 | * extension is implemented or not). | |
79 | */ | |
4a16724f PM |
80 | enum { |
81 | M_REG_NS = 0, | |
82 | M_REG_S = 1, | |
83 | M_REG_NUM_BANKS = 2, | |
84 | }; | |
acf94941 | 85 | |
403946c0 RH |
86 | /* ARM-specific interrupt pending bits. */ |
87 | #define CPU_INTERRUPT_FIQ CPU_INTERRUPT_TGT_EXT_1 | |
136e67e9 EI |
88 | #define CPU_INTERRUPT_VIRQ CPU_INTERRUPT_TGT_EXT_2 |
89 | #define CPU_INTERRUPT_VFIQ CPU_INTERRUPT_TGT_EXT_3 | |
403946c0 | 90 | |
e4fe830b PM |
91 | /* The usual mapping for an AArch64 system register to its AArch32 |
92 | * counterpart is for the 32 bit world to have access to the lower | |
93 | * half only (with writes leaving the upper half untouched). It's | |
94 | * therefore useful to be able to pass TCG the offset of the least | |
95 | * significant half of a uint64_t struct member. | |
96 | */ | |
97 | #ifdef HOST_WORDS_BIGENDIAN | |
5cd8a118 | 98 | #define offsetoflow32(S, M) (offsetof(S, M) + sizeof(uint32_t)) |
b0fe2427 | 99 | #define offsetofhigh32(S, M) offsetof(S, M) |
e4fe830b PM |
100 | #else |
101 | #define offsetoflow32(S, M) offsetof(S, M) | |
b0fe2427 | 102 | #define offsetofhigh32(S, M) (offsetof(S, M) + sizeof(uint32_t)) |
e4fe830b PM |
103 | #endif |
104 | ||
136e67e9 | 105 | /* Meanings of the ARMCPU object's four inbound GPIO lines */ |
7c1840b6 PM |
106 | #define ARM_CPU_IRQ 0 |
107 | #define ARM_CPU_FIQ 1 | |
136e67e9 EI |
108 | #define ARM_CPU_VIRQ 2 |
109 | #define ARM_CPU_VFIQ 3 | |
403946c0 | 110 | |
aaa1f954 EI |
111 | /* ARM-specific extra insn start words: |
112 | * 1: Conditional execution bits | |
113 | * 2: Partial exception syndrome for data aborts | |
114 | */ | |
115 | #define TARGET_INSN_START_EXTRA_WORDS 2 | |
116 | ||
117 | /* The 2nd extra word holding syndrome info for data aborts does not use | |
118 | * the upper 6 bits nor the lower 14 bits. We mask and shift it down to | |
119 | * help the sleb128 encoder do a better job. | |
120 | * When restoring the CPU state, we shift it back up. | |
121 | */ | |
122 | #define ARM_INSN_START_WORD2_MASK ((1 << 26) - 1) | |
123 | #define ARM_INSN_START_WORD2_SHIFT 14 | |
6ebbf390 | 124 | |
b7bcbe95 FB |
125 | /* We currently assume float and double are IEEE single and double |
126 | precision respectively. | |
127 | Doing runtime conversions is tricky because VFP registers may contain | |
128 | integer values (eg. as the result of a FTOSI instruction). | |
8e96005d FB |
129 | s<2n> maps to the least significant half of d<n> |
130 | s<2n+1> maps to the most significant half of d<n> | |
131 | */ | |
b7bcbe95 | 132 | |
200bf5b7 AB |
133 | /** |
134 | * DynamicGDBXMLInfo: | |
135 | * @desc: Contains the XML descriptions. | |
448d4d14 AB |
136 | * @num: Number of the registers in this XML seen by GDB. |
137 | * @data: A union with data specific to the set of registers | |
138 | * @cpregs_keys: Array that contains the corresponding Key of | |
139 | * a given cpreg with the same order of the cpreg | |
140 | * in the XML description. | |
200bf5b7 AB |
141 | */ |
142 | typedef struct DynamicGDBXMLInfo { | |
143 | char *desc; | |
448d4d14 AB |
144 | int num; |
145 | union { | |
146 | struct { | |
147 | uint32_t *keys; | |
148 | } cpregs; | |
149 | } data; | |
200bf5b7 AB |
150 | } DynamicGDBXMLInfo; |
151 | ||
55d284af PM |
152 | /* CPU state for each instance of a generic timer (in cp15 c14) */ |
153 | typedef struct ARMGenericTimer { | |
154 | uint64_t cval; /* Timer CompareValue register */ | |
a7adc4b7 | 155 | uint64_t ctl; /* Timer Control register */ |
55d284af PM |
156 | } ARMGenericTimer; |
157 | ||
8c94b071 RH |
158 | #define GTIMER_PHYS 0 |
159 | #define GTIMER_VIRT 1 | |
160 | #define GTIMER_HYP 2 | |
161 | #define GTIMER_SEC 3 | |
162 | #define GTIMER_HYPVIRT 4 | |
163 | #define NUM_GTIMERS 5 | |
55d284af | 164 | |
11f136ee FA |
165 | typedef struct { |
166 | uint64_t raw_tcr; | |
167 | uint32_t mask; | |
168 | uint32_t base_mask; | |
169 | } TCR; | |
170 | ||
e9152ee9 RDC |
171 | #define VTCR_NSW (1u << 29) |
172 | #define VTCR_NSA (1u << 30) | |
173 | #define VSTCR_SW VTCR_NSW | |
174 | #define VSTCR_SA VTCR_NSA | |
175 | ||
c39c2b90 RH |
176 | /* Define a maximum sized vector register. |
177 | * For 32-bit, this is a 128-bit NEON/AdvSIMD register. | |
178 | * For 64-bit, this is a 2048-bit SVE register. | |
179 | * | |
180 | * Note that the mapping between S, D, and Q views of the register bank | |
181 | * differs between AArch64 and AArch32. | |
182 | * In AArch32: | |
183 | * Qn = regs[n].d[1]:regs[n].d[0] | |
184 | * Dn = regs[n / 2].d[n & 1] | |
185 | * Sn = regs[n / 4].d[n % 4 / 2], | |
186 | * bits 31..0 for even n, and bits 63..32 for odd n | |
187 | * (and regs[16] to regs[31] are inaccessible) | |
188 | * In AArch64: | |
189 | * Zn = regs[n].d[*] | |
190 | * Qn = regs[n].d[1]:regs[n].d[0] | |
191 | * Dn = regs[n].d[0] | |
192 | * Sn = regs[n].d[0] bits 31..0 | |
d0e69ea8 | 193 | * Hn = regs[n].d[0] bits 15..0 |
c39c2b90 RH |
194 | * |
195 | * This corresponds to the architecturally defined mapping between | |
196 | * the two execution states, and means we do not need to explicitly | |
197 | * map these registers when changing states. | |
198 | * | |
199 | * Align the data for use with TCG host vector operations. | |
200 | */ | |
201 | ||
202 | #ifdef TARGET_AARCH64 | |
203 | # define ARM_MAX_VQ 16 | |
0df9142d | 204 | void arm_cpu_sve_finalize(ARMCPU *cpu, Error **errp); |
eb94284d | 205 | void arm_cpu_pauth_finalize(ARMCPU *cpu, Error **errp); |
c39c2b90 RH |
206 | #else |
207 | # define ARM_MAX_VQ 1 | |
0df9142d | 208 | static inline void arm_cpu_sve_finalize(ARMCPU *cpu, Error **errp) { } |
eb94284d | 209 | static inline void arm_cpu_pauth_finalize(ARMCPU *cpu, Error **errp) { } |
c39c2b90 RH |
210 | #endif |
211 | ||
212 | typedef struct ARMVectorReg { | |
213 | uint64_t d[2 * ARM_MAX_VQ] QEMU_ALIGNED(16); | |
214 | } ARMVectorReg; | |
215 | ||
3c7d3086 | 216 | #ifdef TARGET_AARCH64 |
991ad91b | 217 | /* In AArch32 mode, predicate registers do not exist at all. */ |
3c7d3086 | 218 | typedef struct ARMPredicateReg { |
46417784 | 219 | uint64_t p[DIV_ROUND_UP(2 * ARM_MAX_VQ, 8)] QEMU_ALIGNED(16); |
3c7d3086 | 220 | } ARMPredicateReg; |
991ad91b RH |
221 | |
222 | /* In AArch32 mode, PAC keys do not exist at all. */ | |
223 | typedef struct ARMPACKey { | |
224 | uint64_t lo, hi; | |
225 | } ARMPACKey; | |
3c7d3086 RH |
226 | #endif |
227 | ||
3902bfc6 RH |
228 | /* See the commentary above the TBFLAG field definitions. */ |
229 | typedef struct CPUARMTBFlags { | |
230 | uint32_t flags; | |
a378206a | 231 | target_ulong flags2; |
3902bfc6 | 232 | } CPUARMTBFlags; |
c39c2b90 | 233 | |
2c0262af | 234 | typedef struct CPUARMState { |
b5ff1b31 | 235 | /* Regs for current mode. */ |
2c0262af | 236 | uint32_t regs[16]; |
3926cc84 AG |
237 | |
238 | /* 32/64 switch only happens when taking and returning from | |
239 | * exceptions so the overlap semantics are taken care of then | |
240 | * instead of having a complicated union. | |
241 | */ | |
242 | /* Regs for A64 mode. */ | |
243 | uint64_t xregs[32]; | |
244 | uint64_t pc; | |
d356312f PM |
245 | /* PSTATE isn't an architectural register for ARMv8. However, it is |
246 | * convenient for us to assemble the underlying state into a 32 bit format | |
247 | * identical to the architectural format used for the SPSR. (This is also | |
248 | * what the Linux kernel's 'pstate' field in signal handlers and KVM's | |
249 | * 'pstate' register are.) Of the PSTATE bits: | |
250 | * NZCV are kept in the split out env->CF/VF/NF/ZF, (which have the same | |
251 | * semantics as for AArch32, as described in the comments on each field) | |
252 | * nRW (also known as M[4]) is kept, inverted, in env->aarch64 | |
4cc35614 | 253 | * DAIF (exception masks) are kept in env->daif |
f6e52eaa | 254 | * BTYPE is kept in env->btype |
d356312f | 255 | * all other bits are stored in their correct places in env->pstate |
3926cc84 AG |
256 | */ |
257 | uint32_t pstate; | |
258 | uint32_t aarch64; /* 1 if CPU is in aarch64 state; inverse of PSTATE.nRW */ | |
259 | ||
fdd1b228 | 260 | /* Cached TBFLAGS state. See below for which bits are included. */ |
3902bfc6 | 261 | CPUARMTBFlags hflags; |
fdd1b228 | 262 | |
b90372ad | 263 | /* Frequently accessed CPSR bits are stored separately for efficiency. |
d37aca66 | 264 | This contains all the other bits. Use cpsr_{read,write} to access |
b5ff1b31 FB |
265 | the whole CPSR. */ |
266 | uint32_t uncached_cpsr; | |
267 | uint32_t spsr; | |
268 | ||
269 | /* Banked registers. */ | |
28c9457d | 270 | uint64_t banked_spsr[8]; |
0b7d409d FA |
271 | uint32_t banked_r13[8]; |
272 | uint32_t banked_r14[8]; | |
3b46e624 | 273 | |
b5ff1b31 FB |
274 | /* These hold r8-r12. */ |
275 | uint32_t usr_regs[5]; | |
276 | uint32_t fiq_regs[5]; | |
3b46e624 | 277 | |
2c0262af FB |
278 | /* cpsr flag cache for faster execution */ |
279 | uint32_t CF; /* 0 or 1 */ | |
280 | uint32_t VF; /* V is the bit 31. All other bits are undefined */ | |
6fbe23d5 PB |
281 | uint32_t NF; /* N is bit 31. All other bits are undefined. */ |
282 | uint32_t ZF; /* Z set if zero. */ | |
99c475ab | 283 | uint32_t QF; /* 0 or 1 */ |
9ee6e8bb | 284 | uint32_t GE; /* cpsr[19:16] */ |
b26eefb6 | 285 | uint32_t thumb; /* cpsr[5]. 0 = arm mode, 1 = thumb mode. */ |
9ee6e8bb | 286 | uint32_t condexec_bits; /* IT bits. cpsr[15:10,26:25]. */ |
f6e52eaa | 287 | uint32_t btype; /* BTI branch type. spsr[11:10]. */ |
b6af0975 | 288 | uint64_t daif; /* exception masks, in the bits they are in PSTATE */ |
2c0262af | 289 | |
1b174238 | 290 | uint64_t elr_el[4]; /* AArch64 exception link regs */ |
73fb3b76 | 291 | uint64_t sp_el[4]; /* AArch64 banked stack pointers */ |
a0618a19 | 292 | |
b5ff1b31 FB |
293 | /* System control coprocessor (cp15) */ |
294 | struct { | |
40f137e1 | 295 | uint32_t c0_cpuid; |
b85a1fd6 FA |
296 | union { /* Cache size selection */ |
297 | struct { | |
298 | uint64_t _unused_csselr0; | |
299 | uint64_t csselr_ns; | |
300 | uint64_t _unused_csselr1; | |
301 | uint64_t csselr_s; | |
302 | }; | |
303 | uint64_t csselr_el[4]; | |
304 | }; | |
137feaa9 FA |
305 | union { /* System control register. */ |
306 | struct { | |
307 | uint64_t _unused_sctlr; | |
308 | uint64_t sctlr_ns; | |
309 | uint64_t hsctlr; | |
310 | uint64_t sctlr_s; | |
311 | }; | |
312 | uint64_t sctlr_el[4]; | |
313 | }; | |
7ebd5f2e | 314 | uint64_t cpacr_el1; /* Architectural feature access control register */ |
c6f19164 | 315 | uint64_t cptr_el[4]; /* ARMv8 feature trap registers */ |
610c3c8a | 316 | uint32_t c1_xscaleauxcr; /* XScale auxiliary control register. */ |
144634ae | 317 | uint64_t sder; /* Secure debug enable register. */ |
77022576 | 318 | uint32_t nsacr; /* Non-secure access control register. */ |
7dd8c9af FA |
319 | union { /* MMU translation table base 0. */ |
320 | struct { | |
321 | uint64_t _unused_ttbr0_0; | |
322 | uint64_t ttbr0_ns; | |
323 | uint64_t _unused_ttbr0_1; | |
324 | uint64_t ttbr0_s; | |
325 | }; | |
326 | uint64_t ttbr0_el[4]; | |
327 | }; | |
328 | union { /* MMU translation table base 1. */ | |
329 | struct { | |
330 | uint64_t _unused_ttbr1_0; | |
331 | uint64_t ttbr1_ns; | |
332 | uint64_t _unused_ttbr1_1; | |
333 | uint64_t ttbr1_s; | |
334 | }; | |
335 | uint64_t ttbr1_el[4]; | |
336 | }; | |
b698e9cf | 337 | uint64_t vttbr_el2; /* Virtualization Translation Table Base. */ |
e9152ee9 | 338 | uint64_t vsttbr_el2; /* Secure Virtualization Translation Table. */ |
11f136ee FA |
339 | /* MMU translation table base control. */ |
340 | TCR tcr_el[4]; | |
68e9c2fe | 341 | TCR vtcr_el2; /* Virtualization Translation Control. */ |
e9152ee9 | 342 | TCR vstcr_el2; /* Secure Virtualization Translation Control. */ |
67cc32eb VL |
343 | uint32_t c2_data; /* MPU data cacheable bits. */ |
344 | uint32_t c2_insn; /* MPU instruction cacheable bits. */ | |
0c17d68c FA |
345 | union { /* MMU domain access control register |
346 | * MPU write buffer control. | |
347 | */ | |
348 | struct { | |
349 | uint64_t dacr_ns; | |
350 | uint64_t dacr_s; | |
351 | }; | |
352 | struct { | |
353 | uint64_t dacr32_el2; | |
354 | }; | |
355 | }; | |
7e09797c PM |
356 | uint32_t pmsav5_data_ap; /* PMSAv5 MPU data access permissions */ |
357 | uint32_t pmsav5_insn_ap; /* PMSAv5 MPU insn access permissions */ | |
f149e3e8 | 358 | uint64_t hcr_el2; /* Hypervisor configuration register */ |
64e0e2de | 359 | uint64_t scr_el3; /* Secure configuration register. */ |
88ca1c2d FA |
360 | union { /* Fault status registers. */ |
361 | struct { | |
362 | uint64_t ifsr_ns; | |
363 | uint64_t ifsr_s; | |
364 | }; | |
365 | struct { | |
366 | uint64_t ifsr32_el2; | |
367 | }; | |
368 | }; | |
4a7e2d73 FA |
369 | union { |
370 | struct { | |
371 | uint64_t _unused_dfsr; | |
372 | uint64_t dfsr_ns; | |
373 | uint64_t hsr; | |
374 | uint64_t dfsr_s; | |
375 | }; | |
376 | uint64_t esr_el[4]; | |
377 | }; | |
ce819861 | 378 | uint32_t c6_region[8]; /* MPU base/size registers. */ |
b848ce2b FA |
379 | union { /* Fault address registers. */ |
380 | struct { | |
381 | uint64_t _unused_far0; | |
382 | #ifdef HOST_WORDS_BIGENDIAN | |
383 | uint32_t ifar_ns; | |
384 | uint32_t dfar_ns; | |
385 | uint32_t ifar_s; | |
386 | uint32_t dfar_s; | |
387 | #else | |
388 | uint32_t dfar_ns; | |
389 | uint32_t ifar_ns; | |
390 | uint32_t dfar_s; | |
391 | uint32_t ifar_s; | |
392 | #endif | |
393 | uint64_t _unused_far3; | |
394 | }; | |
395 | uint64_t far_el[4]; | |
396 | }; | |
59e05530 | 397 | uint64_t hpfar_el2; |
2a5a9abd | 398 | uint64_t hstr_el2; |
01c097f7 FA |
399 | union { /* Translation result. */ |
400 | struct { | |
401 | uint64_t _unused_par_0; | |
402 | uint64_t par_ns; | |
403 | uint64_t _unused_par_1; | |
404 | uint64_t par_s; | |
405 | }; | |
406 | uint64_t par_el[4]; | |
407 | }; | |
6cb0b013 | 408 | |
b5ff1b31 FB |
409 | uint32_t c9_insn; /* Cache lockdown registers. */ |
410 | uint32_t c9_data; | |
8521466b AF |
411 | uint64_t c9_pmcr; /* performance monitor control register */ |
412 | uint64_t c9_pmcnten; /* perf monitor counter enables */ | |
e4e91a21 AL |
413 | uint64_t c9_pmovsr; /* perf monitor overflow status */ |
414 | uint64_t c9_pmuserenr; /* perf monitor user enable */ | |
6b040780 | 415 | uint64_t c9_pmselr; /* perf monitor counter selection register */ |
e6ec5457 | 416 | uint64_t c9_pminten; /* perf monitor interrupt enables */ |
be693c87 GB |
417 | union { /* Memory attribute redirection */ |
418 | struct { | |
419 | #ifdef HOST_WORDS_BIGENDIAN | |
420 | uint64_t _unused_mair_0; | |
421 | uint32_t mair1_ns; | |
422 | uint32_t mair0_ns; | |
423 | uint64_t _unused_mair_1; | |
424 | uint32_t mair1_s; | |
425 | uint32_t mair0_s; | |
426 | #else | |
427 | uint64_t _unused_mair_0; | |
428 | uint32_t mair0_ns; | |
429 | uint32_t mair1_ns; | |
430 | uint64_t _unused_mair_1; | |
431 | uint32_t mair0_s; | |
432 | uint32_t mair1_s; | |
433 | #endif | |
434 | }; | |
435 | uint64_t mair_el[4]; | |
436 | }; | |
fb6c91ba GB |
437 | union { /* vector base address register */ |
438 | struct { | |
439 | uint64_t _unused_vbar; | |
440 | uint64_t vbar_ns; | |
441 | uint64_t hvbar; | |
442 | uint64_t vbar_s; | |
443 | }; | |
444 | uint64_t vbar_el[4]; | |
445 | }; | |
e89e51a1 | 446 | uint32_t mvbar; /* (monitor) vector base address register */ |
54bf36ed FA |
447 | struct { /* FCSE PID. */ |
448 | uint32_t fcseidr_ns; | |
449 | uint32_t fcseidr_s; | |
450 | }; | |
451 | union { /* Context ID. */ | |
452 | struct { | |
453 | uint64_t _unused_contextidr_0; | |
454 | uint64_t contextidr_ns; | |
455 | uint64_t _unused_contextidr_1; | |
456 | uint64_t contextidr_s; | |
457 | }; | |
458 | uint64_t contextidr_el[4]; | |
459 | }; | |
460 | union { /* User RW Thread register. */ | |
461 | struct { | |
462 | uint64_t tpidrurw_ns; | |
463 | uint64_t tpidrprw_ns; | |
464 | uint64_t htpidr; | |
465 | uint64_t _tpidr_el3; | |
466 | }; | |
467 | uint64_t tpidr_el[4]; | |
468 | }; | |
469 | /* The secure banks of these registers don't map anywhere */ | |
470 | uint64_t tpidrurw_s; | |
471 | uint64_t tpidrprw_s; | |
472 | uint64_t tpidruro_s; | |
473 | ||
474 | union { /* User RO Thread register. */ | |
475 | uint64_t tpidruro_ns; | |
476 | uint64_t tpidrro_el[1]; | |
477 | }; | |
a7adc4b7 PM |
478 | uint64_t c14_cntfrq; /* Counter Frequency register */ |
479 | uint64_t c14_cntkctl; /* Timer Control register */ | |
0b6440af | 480 | uint32_t cnthctl_el2; /* Counter/Timer Hyp Control register */ |
edac4d8a | 481 | uint64_t cntvoff_el2; /* Counter Virtual Offset register */ |
55d284af | 482 | ARMGenericTimer c14_timer[NUM_GTIMERS]; |
c1713132 | 483 | uint32_t c15_cpar; /* XScale Coprocessor Access Register */ |
c3d2689d AZ |
484 | uint32_t c15_ticonfig; /* TI925T configuration byte. */ |
485 | uint32_t c15_i_max; /* Maximum D-cache dirty line index. */ | |
486 | uint32_t c15_i_min; /* Minimum D-cache dirty line index. */ | |
487 | uint32_t c15_threadid; /* TI debugger thread-ID. */ | |
7da362d0 ML |
488 | uint32_t c15_config_base_address; /* SCU base address. */ |
489 | uint32_t c15_diagnostic; /* diagnostic register */ | |
490 | uint32_t c15_power_diagnostic; | |
491 | uint32_t c15_power_control; /* power control */ | |
0b45451e PM |
492 | uint64_t dbgbvr[16]; /* breakpoint value registers */ |
493 | uint64_t dbgbcr[16]; /* breakpoint control registers */ | |
494 | uint64_t dbgwvr[16]; /* watchpoint value registers */ | |
495 | uint64_t dbgwcr[16]; /* watchpoint control registers */ | |
3a298203 | 496 | uint64_t mdscr_el1; |
1424ca8d | 497 | uint64_t oslsr_el1; /* OS Lock Status */ |
14cc7b54 | 498 | uint64_t mdcr_el2; |
5513c3ab | 499 | uint64_t mdcr_el3; |
5d05b9d4 AL |
500 | /* Stores the architectural value of the counter *the last time it was |
501 | * updated* by pmccntr_op_start. Accesses should always be surrounded | |
502 | * by pmccntr_op_start/pmccntr_op_finish to guarantee the latest | |
503 | * architecturally-correct value is being read/set. | |
7c2cb42b | 504 | */ |
c92c0687 | 505 | uint64_t c15_ccnt; |
5d05b9d4 AL |
506 | /* Stores the delta between the architectural value and the underlying |
507 | * cycle count during normal operation. It is used to update c15_ccnt | |
508 | * to be the correct architectural value before accesses. During | |
509 | * accesses, c15_ccnt_delta contains the underlying count being used | |
510 | * for the access, after which it reverts to the delta value in | |
511 | * pmccntr_op_finish. | |
512 | */ | |
513 | uint64_t c15_ccnt_delta; | |
5ecdd3e4 AL |
514 | uint64_t c14_pmevcntr[31]; |
515 | uint64_t c14_pmevcntr_delta[31]; | |
516 | uint64_t c14_pmevtyper[31]; | |
8521466b | 517 | uint64_t pmccfiltr_el0; /* Performance Monitor Filter Register */ |
731de9e6 | 518 | uint64_t vpidr_el2; /* Virtualization Processor ID Register */ |
f0d574d6 | 519 | uint64_t vmpidr_el2; /* Virtualization Multiprocessor ID Register */ |
4b779ceb RH |
520 | uint64_t tfsr_el[4]; /* tfsre0_el1 is index 0. */ |
521 | uint64_t gcr_el1; | |
522 | uint64_t rgsr_el1; | |
b5ff1b31 | 523 | } cp15; |
40f137e1 | 524 | |
9ee6e8bb | 525 | struct { |
fb602cb7 PM |
526 | /* M profile has up to 4 stack pointers: |
527 | * a Main Stack Pointer and a Process Stack Pointer for each | |
528 | * of the Secure and Non-Secure states. (If the CPU doesn't support | |
529 | * the security extension then it has only two SPs.) | |
530 | * In QEMU we always store the currently active SP in regs[13], | |
531 | * and the non-active SP for the current security state in | |
532 | * v7m.other_sp. The stack pointers for the inactive security state | |
533 | * are stored in other_ss_msp and other_ss_psp. | |
534 | * switch_v7m_security_state() is responsible for rearranging them | |
535 | * when we change security state. | |
536 | */ | |
9ee6e8bb | 537 | uint32_t other_sp; |
fb602cb7 PM |
538 | uint32_t other_ss_msp; |
539 | uint32_t other_ss_psp; | |
4a16724f PM |
540 | uint32_t vecbase[M_REG_NUM_BANKS]; |
541 | uint32_t basepri[M_REG_NUM_BANKS]; | |
542 | uint32_t control[M_REG_NUM_BANKS]; | |
543 | uint32_t ccr[M_REG_NUM_BANKS]; /* Configuration and Control */ | |
544 | uint32_t cfsr[M_REG_NUM_BANKS]; /* Configurable Fault Status */ | |
2c4da50d PM |
545 | uint32_t hfsr; /* HardFault Status */ |
546 | uint32_t dfsr; /* Debug Fault Status Register */ | |
bed079da | 547 | uint32_t sfsr; /* Secure Fault Status Register */ |
4a16724f | 548 | uint32_t mmfar[M_REG_NUM_BANKS]; /* MemManage Fault Address */ |
2c4da50d | 549 | uint32_t bfar; /* BusFault Address */ |
bed079da | 550 | uint32_t sfar; /* Secure Fault Address Register */ |
4a16724f | 551 | unsigned mpu_ctrl[M_REG_NUM_BANKS]; /* MPU_CTRL */ |
9ee6e8bb | 552 | int exception; |
4a16724f PM |
553 | uint32_t primask[M_REG_NUM_BANKS]; |
554 | uint32_t faultmask[M_REG_NUM_BANKS]; | |
3b2e9344 | 555 | uint32_t aircr; /* only holds r/w state if security extn implemented */ |
1e577cc7 | 556 | uint32_t secure; /* Is CPU in Secure state? (not guest visible) */ |
43bbce7f | 557 | uint32_t csselr[M_REG_NUM_BANKS]; |
24ac0fb1 | 558 | uint32_t scr[M_REG_NUM_BANKS]; |
57bb3156 PM |
559 | uint32_t msplim[M_REG_NUM_BANKS]; |
560 | uint32_t psplim[M_REG_NUM_BANKS]; | |
d33abe82 PM |
561 | uint32_t fpcar[M_REG_NUM_BANKS]; |
562 | uint32_t fpccr[M_REG_NUM_BANKS]; | |
563 | uint32_t fpdscr[M_REG_NUM_BANKS]; | |
564 | uint32_t cpacr[M_REG_NUM_BANKS]; | |
565 | uint32_t nsacr; | |
8128c8e8 | 566 | int ltpsize; |
9ee6e8bb PB |
567 | } v7m; |
568 | ||
abf1172f PM |
569 | /* Information associated with an exception about to be taken: |
570 | * code which raises an exception must set cs->exception_index and | |
571 | * the relevant parts of this structure; the cpu_do_interrupt function | |
572 | * will then set the guest-visible registers as part of the exception | |
573 | * entry process. | |
574 | */ | |
575 | struct { | |
576 | uint32_t syndrome; /* AArch64 format syndrome register */ | |
577 | uint32_t fsr; /* AArch32 format fault status register info */ | |
578 | uint64_t vaddress; /* virtual addr associated with exception, if any */ | |
73710361 | 579 | uint32_t target_el; /* EL the exception should be targeted for */ |
abf1172f PM |
580 | /* If we implement EL2 we will also need to store information |
581 | * about the intermediate physical address for stage 2 faults. | |
582 | */ | |
583 | } exception; | |
584 | ||
202ccb6b DG |
585 | /* Information associated with an SError */ |
586 | struct { | |
587 | uint8_t pending; | |
588 | uint8_t has_esr; | |
589 | uint64_t esr; | |
590 | } serror; | |
591 | ||
1711bfa5 BM |
592 | uint8_t ext_dabt_raised; /* Tracking/verifying injection of ext DABT */ |
593 | ||
ed89f078 PM |
594 | /* State of our input IRQ/FIQ/VIRQ/VFIQ lines */ |
595 | uint32_t irq_line_state; | |
596 | ||
fe1479c3 PB |
597 | /* Thumb-2 EE state. */ |
598 | uint32_t teecr; | |
599 | uint32_t teehbr; | |
600 | ||
b7bcbe95 FB |
601 | /* VFP coprocessor state. */ |
602 | struct { | |
c39c2b90 | 603 | ARMVectorReg zregs[32]; |
b7bcbe95 | 604 | |
3c7d3086 RH |
605 | #ifdef TARGET_AARCH64 |
606 | /* Store FFR as pregs[16] to make it easier to treat as any other. */ | |
028e2a7b | 607 | #define FFR_PRED_NUM 16 |
3c7d3086 | 608 | ARMPredicateReg pregs[17]; |
516e246a RH |
609 | /* Scratch space for aa64 sve predicate temporary. */ |
610 | ARMPredicateReg preg_tmp; | |
3c7d3086 RH |
611 | #endif |
612 | ||
b7bcbe95 | 613 | /* We store these fpcsr fields separately for convenience. */ |
a4d58462 | 614 | uint32_t qc[4] QEMU_ALIGNED(16); |
b7bcbe95 FB |
615 | int vec_len; |
616 | int vec_stride; | |
617 | ||
a4d58462 RH |
618 | uint32_t xregs[16]; |
619 | ||
516e246a | 620 | /* Scratch space for aa32 neon expansion. */ |
9ee6e8bb | 621 | uint32_t scratch[8]; |
3b46e624 | 622 | |
d81ce0ef AB |
623 | /* There are a number of distinct float control structures: |
624 | * | |
625 | * fp_status: is the "normal" fp status. | |
626 | * fp_status_fp16: used for half-precision calculations | |
627 | * standard_fp_status : the ARM "Standard FPSCR Value" | |
aaae563b PM |
628 | * standard_fp_status_fp16 : used for half-precision |
629 | * calculations with the ARM "Standard FPSCR Value" | |
d81ce0ef AB |
630 | * |
631 | * Half-precision operations are governed by a separate | |
632 | * flush-to-zero control bit in FPSCR:FZ16. We pass a separate | |
633 | * status structure to control this. | |
634 | * | |
635 | * The "Standard FPSCR", ie default-NaN, flush-to-zero, | |
636 | * round-to-nearest and is used by any operations (generally | |
637 | * Neon) which the architecture defines as controlled by the | |
638 | * standard FPSCR value rather than the FPSCR. | |
3a492f3a | 639 | * |
aaae563b PM |
640 | * The "standard FPSCR but for fp16 ops" is needed because |
641 | * the "standard FPSCR" tracks the FPSCR.FZ16 bit rather than | |
642 | * using a fixed value for it. | |
643 | * | |
3a492f3a PM |
644 | * To avoid having to transfer exception bits around, we simply |
645 | * say that the FPSCR cumulative exception flags are the logical | |
aaae563b | 646 | * OR of the flags in the four fp statuses. This relies on the |
3a492f3a PM |
647 | * only thing which needs to read the exception flags being |
648 | * an explicit FPSCR read. | |
649 | */ | |
53cd6637 | 650 | float_status fp_status; |
d81ce0ef | 651 | float_status fp_status_f16; |
3a492f3a | 652 | float_status standard_fp_status; |
aaae563b | 653 | float_status standard_fp_status_f16; |
5be5e8ed RH |
654 | |
655 | /* ZCR_EL[1-3] */ | |
656 | uint64_t zcr_el[4]; | |
b7bcbe95 | 657 | } vfp; |
03d05e2d PM |
658 | uint64_t exclusive_addr; |
659 | uint64_t exclusive_val; | |
660 | uint64_t exclusive_high; | |
b7bcbe95 | 661 | |
18c9b560 AZ |
662 | /* iwMMXt coprocessor state. */ |
663 | struct { | |
664 | uint64_t regs[16]; | |
665 | uint64_t val; | |
666 | ||
667 | uint32_t cregs[16]; | |
668 | } iwmmxt; | |
669 | ||
991ad91b | 670 | #ifdef TARGET_AARCH64 |
108b3ba8 RH |
671 | struct { |
672 | ARMPACKey apia; | |
673 | ARMPACKey apib; | |
674 | ARMPACKey apda; | |
675 | ARMPACKey apdb; | |
676 | ARMPACKey apga; | |
677 | } keys; | |
991ad91b RH |
678 | #endif |
679 | ||
ce4defa0 PB |
680 | #if defined(CONFIG_USER_ONLY) |
681 | /* For usermode syscall translation. */ | |
682 | int eabi; | |
683 | #endif | |
684 | ||
46747d15 | 685 | struct CPUBreakpoint *cpu_breakpoint[16]; |
9ee98ce8 PM |
686 | struct CPUWatchpoint *cpu_watchpoint[16]; |
687 | ||
1f5c00cf AB |
688 | /* Fields up to this point are cleared by a CPU reset */ |
689 | struct {} end_reset_fields; | |
690 | ||
e8b5fae5 | 691 | /* Fields after this point are preserved across CPU reset. */ |
9ba8c3f4 | 692 | |
581be094 | 693 | /* Internal CPU feature flags. */ |
918f5dca | 694 | uint64_t features; |
581be094 | 695 | |
6cb0b013 PC |
696 | /* PMSAv7 MPU */ |
697 | struct { | |
698 | uint32_t *drbar; | |
699 | uint32_t *drsr; | |
700 | uint32_t *dracr; | |
4a16724f | 701 | uint32_t rnr[M_REG_NUM_BANKS]; |
6cb0b013 PC |
702 | } pmsav7; |
703 | ||
0e1a46bb PM |
704 | /* PMSAv8 MPU */ |
705 | struct { | |
706 | /* The PMSAv8 implementation also shares some PMSAv7 config | |
707 | * and state: | |
708 | * pmsav7.rnr (region number register) | |
709 | * pmsav7_dregion (number of configured regions) | |
710 | */ | |
4a16724f PM |
711 | uint32_t *rbar[M_REG_NUM_BANKS]; |
712 | uint32_t *rlar[M_REG_NUM_BANKS]; | |
713 | uint32_t mair0[M_REG_NUM_BANKS]; | |
714 | uint32_t mair1[M_REG_NUM_BANKS]; | |
0e1a46bb PM |
715 | } pmsav8; |
716 | ||
9901c576 PM |
717 | /* v8M SAU */ |
718 | struct { | |
719 | uint32_t *rbar; | |
720 | uint32_t *rlar; | |
721 | uint32_t rnr; | |
722 | uint32_t ctrl; | |
723 | } sau; | |
724 | ||
983fe826 | 725 | void *nvic; |
462a8bc6 | 726 | const struct arm_boot_info *boot_info; |
d3a3e529 VK |
727 | /* Store GICv3CPUState to access from this struct */ |
728 | void *gicv3state; | |
0e0c030c RH |
729 | |
730 | #ifdef TARGET_TAGGED_ADDRESSES | |
731 | /* Linux syscall tagged address support */ | |
732 | bool tagged_addr_enable; | |
733 | #endif | |
2c0262af FB |
734 | } CPUARMState; |
735 | ||
5fda9504 TH |
736 | static inline void set_feature(CPUARMState *env, int feature) |
737 | { | |
738 | env->features |= 1ULL << feature; | |
739 | } | |
740 | ||
741 | static inline void unset_feature(CPUARMState *env, int feature) | |
742 | { | |
743 | env->features &= ~(1ULL << feature); | |
744 | } | |
745 | ||
bd7d00fc | 746 | /** |
08267487 | 747 | * ARMELChangeHookFn: |
bd7d00fc PM |
748 | * type of a function which can be registered via arm_register_el_change_hook() |
749 | * to get callbacks when the CPU changes its exception level or mode. | |
750 | */ | |
08267487 AL |
751 | typedef void ARMELChangeHookFn(ARMCPU *cpu, void *opaque); |
752 | typedef struct ARMELChangeHook ARMELChangeHook; | |
753 | struct ARMELChangeHook { | |
754 | ARMELChangeHookFn *hook; | |
755 | void *opaque; | |
756 | QLIST_ENTRY(ARMELChangeHook) node; | |
757 | }; | |
062ba099 AB |
758 | |
759 | /* These values map onto the return values for | |
760 | * QEMU_PSCI_0_2_FN_AFFINITY_INFO */ | |
761 | typedef enum ARMPSCIState { | |
d5affb0d AJ |
762 | PSCI_ON = 0, |
763 | PSCI_OFF = 1, | |
062ba099 AB |
764 | PSCI_ON_PENDING = 2 |
765 | } ARMPSCIState; | |
766 | ||
962fcbf2 RH |
767 | typedef struct ARMISARegisters ARMISARegisters; |
768 | ||
74e75564 PB |
769 | /** |
770 | * ARMCPU: | |
771 | * @env: #CPUARMState | |
772 | * | |
773 | * An ARM CPU core. | |
774 | */ | |
775 | struct ARMCPU { | |
776 | /*< private >*/ | |
777 | CPUState parent_obj; | |
778 | /*< public >*/ | |
779 | ||
5b146dc7 | 780 | CPUNegativeOffsetState neg; |
74e75564 PB |
781 | CPUARMState env; |
782 | ||
783 | /* Coprocessor information */ | |
784 | GHashTable *cp_regs; | |
785 | /* For marshalling (mostly coprocessor) register state between the | |
786 | * kernel and QEMU (for KVM) and between two QEMUs (for migration), | |
787 | * we use these arrays. | |
788 | */ | |
789 | /* List of register indexes managed via these arrays; (full KVM style | |
790 | * 64 bit indexes, not CPRegInfo 32 bit indexes) | |
791 | */ | |
792 | uint64_t *cpreg_indexes; | |
793 | /* Values of the registers (cpreg_indexes[i]'s value is cpreg_values[i]) */ | |
794 | uint64_t *cpreg_values; | |
795 | /* Length of the indexes, values, reset_values arrays */ | |
796 | int32_t cpreg_array_len; | |
797 | /* These are used only for migration: incoming data arrives in | |
798 | * these fields and is sanity checked in post_load before copying | |
799 | * to the working data structures above. | |
800 | */ | |
801 | uint64_t *cpreg_vmstate_indexes; | |
802 | uint64_t *cpreg_vmstate_values; | |
803 | int32_t cpreg_vmstate_array_len; | |
804 | ||
448d4d14 | 805 | DynamicGDBXMLInfo dyn_sysreg_xml; |
d12379c5 | 806 | DynamicGDBXMLInfo dyn_svereg_xml; |
200bf5b7 | 807 | |
74e75564 PB |
808 | /* Timers used by the generic (architected) timer */ |
809 | QEMUTimer *gt_timer[NUM_GTIMERS]; | |
4e7beb0c AL |
810 | /* |
811 | * Timer used by the PMU. Its state is restored after migration by | |
812 | * pmu_op_finish() - it does not need other handling during migration | |
813 | */ | |
814 | QEMUTimer *pmu_timer; | |
74e75564 PB |
815 | /* GPIO outputs for generic timer */ |
816 | qemu_irq gt_timer_outputs[NUM_GTIMERS]; | |
aa1b3111 PM |
817 | /* GPIO output for GICv3 maintenance interrupt signal */ |
818 | qemu_irq gicv3_maintenance_interrupt; | |
07f48730 AJ |
819 | /* GPIO output for the PMU interrupt */ |
820 | qemu_irq pmu_interrupt; | |
74e75564 PB |
821 | |
822 | /* MemoryRegion to use for secure physical accesses */ | |
823 | MemoryRegion *secure_memory; | |
824 | ||
8bce44a2 RH |
825 | /* MemoryRegion to use for allocation tag accesses */ |
826 | MemoryRegion *tag_memory; | |
827 | MemoryRegion *secure_tag_memory; | |
828 | ||
181962fd PM |
829 | /* For v8M, pointer to the IDAU interface provided by board/SoC */ |
830 | Object *idau; | |
831 | ||
74e75564 PB |
832 | /* 'compatible' string for this CPU for Linux device trees */ |
833 | const char *dtb_compatible; | |
834 | ||
835 | /* PSCI version for this CPU | |
836 | * Bits[31:16] = Major Version | |
837 | * Bits[15:0] = Minor Version | |
838 | */ | |
839 | uint32_t psci_version; | |
840 | ||
062ba099 AB |
841 | /* Current power state, access guarded by BQL */ |
842 | ARMPSCIState power_state; | |
843 | ||
c25bd18a PM |
844 | /* CPU has virtualization extension */ |
845 | bool has_el2; | |
74e75564 PB |
846 | /* CPU has security extension */ |
847 | bool has_el3; | |
5c0a3819 SZ |
848 | /* CPU has PMU (Performance Monitor Unit) */ |
849 | bool has_pmu; | |
97a28b0e PM |
850 | /* CPU has VFP */ |
851 | bool has_vfp; | |
852 | /* CPU has Neon */ | |
853 | bool has_neon; | |
ea90db0a PM |
854 | /* CPU has M-profile DSP extension */ |
855 | bool has_dsp; | |
74e75564 PB |
856 | |
857 | /* CPU has memory protection unit */ | |
858 | bool has_mpu; | |
859 | /* PMSAv7 MPU number of supported regions */ | |
860 | uint32_t pmsav7_dregion; | |
9901c576 PM |
861 | /* v8M SAU number of supported regions */ |
862 | uint32_t sau_sregion; | |
74e75564 PB |
863 | |
864 | /* PSCI conduit used to invoke PSCI methods | |
865 | * 0 - disabled, 1 - smc, 2 - hvc | |
866 | */ | |
867 | uint32_t psci_conduit; | |
868 | ||
38e2a77c PM |
869 | /* For v8M, initial value of the Secure VTOR */ |
870 | uint32_t init_svtor; | |
871 | ||
74e75564 PB |
872 | /* [QEMU_]KVM_ARM_TARGET_* constant for this CPU, or |
873 | * QEMU_KVM_ARM_TARGET_NONE if the kernel doesn't support this CPU type. | |
874 | */ | |
875 | uint32_t kvm_target; | |
876 | ||
877 | /* KVM init features for this CPU */ | |
878 | uint32_t kvm_init_features[7]; | |
879 | ||
e5ac4200 AJ |
880 | /* KVM CPU state */ |
881 | ||
882 | /* KVM virtual time adjustment */ | |
883 | bool kvm_adjvtime; | |
884 | bool kvm_vtime_dirty; | |
885 | uint64_t kvm_vtime; | |
886 | ||
68970d1e AJ |
887 | /* KVM steal time */ |
888 | OnOffAuto kvm_steal_time; | |
889 | ||
74e75564 PB |
890 | /* Uniprocessor system with MP extensions */ |
891 | bool mp_is_up; | |
892 | ||
c4487d76 PM |
893 | /* True if we tried kvm_arm_host_cpu_features() during CPU instance_init |
894 | * and the probe failed (so we need to report the error in realize) | |
895 | */ | |
896 | bool host_cpu_probe_failed; | |
897 | ||
f9a69711 AF |
898 | /* Specify the number of cores in this CPU cluster. Used for the L2CTLR |
899 | * register. | |
900 | */ | |
901 | int32_t core_count; | |
902 | ||
74e75564 PB |
903 | /* The instance init functions for implementation-specific subclasses |
904 | * set these fields to specify the implementation-dependent values of | |
905 | * various constant registers and reset values of non-constant | |
906 | * registers. | |
907 | * Some of these might become QOM properties eventually. | |
908 | * Field names match the official register names as defined in the | |
909 | * ARMv7AR ARM Architecture Reference Manual. A reset_ prefix | |
910 | * is used for reset values of non-constant registers; no reset_ | |
911 | * prefix means a constant register. | |
47576b94 RH |
912 | * Some of these registers are split out into a substructure that |
913 | * is shared with the translators to control the ISA. | |
1548a7b2 PM |
914 | * |
915 | * Note that if you add an ID register to the ARMISARegisters struct | |
916 | * you need to also update the 32-bit and 64-bit versions of the | |
917 | * kvm_arm_get_host_cpu_features() function to correctly populate the | |
918 | * field by reading the value from the KVM vCPU. | |
74e75564 | 919 | */ |
47576b94 RH |
920 | struct ARMISARegisters { |
921 | uint32_t id_isar0; | |
922 | uint32_t id_isar1; | |
923 | uint32_t id_isar2; | |
924 | uint32_t id_isar3; | |
925 | uint32_t id_isar4; | |
926 | uint32_t id_isar5; | |
927 | uint32_t id_isar6; | |
10054016 PM |
928 | uint32_t id_mmfr0; |
929 | uint32_t id_mmfr1; | |
930 | uint32_t id_mmfr2; | |
931 | uint32_t id_mmfr3; | |
932 | uint32_t id_mmfr4; | |
8a130a7b PM |
933 | uint32_t id_pfr0; |
934 | uint32_t id_pfr1; | |
1d51bc96 | 935 | uint32_t id_pfr2; |
47576b94 RH |
936 | uint32_t mvfr0; |
937 | uint32_t mvfr1; | |
938 | uint32_t mvfr2; | |
a6179538 | 939 | uint32_t id_dfr0; |
4426d361 | 940 | uint32_t dbgdidr; |
47576b94 RH |
941 | uint64_t id_aa64isar0; |
942 | uint64_t id_aa64isar1; | |
943 | uint64_t id_aa64pfr0; | |
944 | uint64_t id_aa64pfr1; | |
3dc91ddb PM |
945 | uint64_t id_aa64mmfr0; |
946 | uint64_t id_aa64mmfr1; | |
64761e10 | 947 | uint64_t id_aa64mmfr2; |
2a609df8 PM |
948 | uint64_t id_aa64dfr0; |
949 | uint64_t id_aa64dfr1; | |
2dc10fa2 | 950 | uint64_t id_aa64zfr0; |
47576b94 | 951 | } isar; |
e544f800 | 952 | uint64_t midr; |
74e75564 PB |
953 | uint32_t revidr; |
954 | uint32_t reset_fpsid; | |
a5fd319a | 955 | uint64_t ctr; |
74e75564 | 956 | uint32_t reset_sctlr; |
cad86737 AL |
957 | uint64_t pmceid0; |
958 | uint64_t pmceid1; | |
74e75564 | 959 | uint32_t id_afr0; |
74e75564 PB |
960 | uint64_t id_aa64afr0; |
961 | uint64_t id_aa64afr1; | |
f6450bcb | 962 | uint64_t clidr; |
74e75564 PB |
963 | uint64_t mp_affinity; /* MP ID without feature bits */ |
964 | /* The elements of this array are the CCSIDR values for each cache, | |
965 | * in the order L1DCache, L1ICache, L2DCache, L2ICache, etc. | |
966 | */ | |
957e6155 | 967 | uint64_t ccsidr[16]; |
74e75564 PB |
968 | uint64_t reset_cbar; |
969 | uint32_t reset_auxcr; | |
970 | bool reset_hivecs; | |
eb94284d RH |
971 | |
972 | /* | |
973 | * Intermediate values used during property parsing. | |
974 | * Once finalized, the values should be read from ID_AA64ISAR1. | |
975 | */ | |
976 | bool prop_pauth; | |
977 | bool prop_pauth_impdef; | |
978 | ||
74e75564 PB |
979 | /* DCZ blocksize, in log_2(words), ie low 4 bits of DCZID_EL0 */ |
980 | uint32_t dcz_blocksize; | |
981 | uint64_t rvbar; | |
bd7d00fc | 982 | |
e45868a3 PM |
983 | /* Configurable aspects of GIC cpu interface (which is part of the CPU) */ |
984 | int gic_num_lrs; /* number of list registers */ | |
985 | int gic_vpribits; /* number of virtual priority bits */ | |
986 | int gic_vprebits; /* number of virtual preemption bits */ | |
987 | ||
3a062d57 JB |
988 | /* Whether the cfgend input is high (i.e. this CPU should reset into |
989 | * big-endian mode). This setting isn't used directly: instead it modifies | |
990 | * the reset_sctlr value to have SCTLR_B or SCTLR_EE set, depending on the | |
991 | * architecture version. | |
992 | */ | |
993 | bool cfgend; | |
994 | ||
b5c53d1b | 995 | QLIST_HEAD(, ARMELChangeHook) pre_el_change_hooks; |
08267487 | 996 | QLIST_HEAD(, ARMELChangeHook) el_change_hooks; |
15f8b142 IM |
997 | |
998 | int32_t node_id; /* NUMA node this CPU belongs to */ | |
5d721b78 AG |
999 | |
1000 | /* Used to synchronize KVM and QEMU in-kernel device levels */ | |
1001 | uint8_t device_irq_level; | |
adf92eab RH |
1002 | |
1003 | /* Used to set the maximum vector length the cpu will support. */ | |
1004 | uint32_t sve_max_vq; | |
0df9142d AJ |
1005 | |
1006 | /* | |
1007 | * In sve_vq_map each set bit is a supported vector length of | |
1008 | * (bit-number + 1) * 16 bytes, i.e. each bit number + 1 is the vector | |
1009 | * length in quadwords. | |
1010 | * | |
1011 | * While processing properties during initialization, corresponding | |
1012 | * sve_vq_init bits are set for bits in sve_vq_map that have been | |
1013 | * set by properties. | |
1014 | */ | |
1015 | DECLARE_BITMAP(sve_vq_map, ARM_MAX_VQ); | |
1016 | DECLARE_BITMAP(sve_vq_init, ARM_MAX_VQ); | |
7def8754 AJ |
1017 | |
1018 | /* Generic timer counter frequency, in Hz */ | |
1019 | uint64_t gt_cntfrq_hz; | |
74e75564 PB |
1020 | }; |
1021 | ||
7def8754 AJ |
1022 | unsigned int gt_cntfrq_period_ns(ARMCPU *cpu); |
1023 | ||
51e5ef45 MAL |
1024 | void arm_cpu_post_init(Object *obj); |
1025 | ||
46de5913 IM |
1026 | uint64_t arm_cpu_mp_affinity(int idx, uint8_t clustersz); |
1027 | ||
74e75564 | 1028 | #ifndef CONFIG_USER_ONLY |
8a9358cc | 1029 | extern const VMStateDescription vmstate_arm_cpu; |
74e75564 PB |
1030 | #endif |
1031 | ||
1032 | void arm_cpu_do_interrupt(CPUState *cpu); | |
1033 | void arm_v7m_cpu_do_interrupt(CPUState *cpu); | |
1034 | bool arm_cpu_exec_interrupt(CPUState *cpu, int int_req); | |
1035 | ||
74e75564 PB |
1036 | hwaddr arm_cpu_get_phys_page_attrs_debug(CPUState *cpu, vaddr addr, |
1037 | MemTxAttrs *attrs); | |
1038 | ||
a010bdbe | 1039 | int arm_cpu_gdb_read_register(CPUState *cpu, GByteArray *buf, int reg); |
74e75564 PB |
1040 | int arm_cpu_gdb_write_register(CPUState *cpu, uint8_t *buf, int reg); |
1041 | ||
d12379c5 AB |
1042 | /* |
1043 | * Helpers to dynamically generates XML descriptions of the sysregs | |
1044 | * and SVE registers. Returns the number of registers in each set. | |
200bf5b7 | 1045 | */ |
32d6e32a | 1046 | int arm_gen_dynamic_sysreg_xml(CPUState *cpu, int base_reg); |
d12379c5 | 1047 | int arm_gen_dynamic_svereg_xml(CPUState *cpu, int base_reg); |
200bf5b7 AB |
1048 | |
1049 | /* Returns the dynamically generated XML for the gdb stub. | |
1050 | * Returns a pointer to the XML contents for the specified XML file or NULL | |
1051 | * if the XML name doesn't match the predefined one. | |
1052 | */ | |
1053 | const char *arm_gdb_get_dynamic_xml(CPUState *cpu, const char *xmlname); | |
1054 | ||
74e75564 PB |
1055 | int arm_cpu_write_elf64_note(WriteCoreDumpFunction f, CPUState *cs, |
1056 | int cpuid, void *opaque); | |
1057 | int arm_cpu_write_elf32_note(WriteCoreDumpFunction f, CPUState *cs, | |
1058 | int cpuid, void *opaque); | |
1059 | ||
1060 | #ifdef TARGET_AARCH64 | |
a010bdbe | 1061 | int aarch64_cpu_gdb_read_register(CPUState *cpu, GByteArray *buf, int reg); |
74e75564 | 1062 | int aarch64_cpu_gdb_write_register(CPUState *cpu, uint8_t *buf, int reg); |
85fc7167 | 1063 | void aarch64_sve_narrow_vq(CPUARMState *env, unsigned vq); |
9a05f7b6 RH |
1064 | void aarch64_sve_change_el(CPUARMState *env, int old_el, |
1065 | int new_el, bool el0_a64); | |
87014c6b | 1066 | void aarch64_add_sve_properties(Object *obj); |
538baab2 AJ |
1067 | |
1068 | /* | |
1069 | * SVE registers are encoded in KVM's memory in an endianness-invariant format. | |
1070 | * The byte at offset i from the start of the in-memory representation contains | |
1071 | * the bits [(7 + 8 * i) : (8 * i)] of the register value. As this means the | |
1072 | * lowest offsets are stored in the lowest memory addresses, then that nearly | |
1073 | * matches QEMU's representation, which is to use an array of host-endian | |
1074 | * uint64_t's, where the lower offsets are at the lower indices. To complete | |
1075 | * the translation we just need to byte swap the uint64_t's on big-endian hosts. | |
1076 | */ | |
1077 | static inline uint64_t *sve_bswap64(uint64_t *dst, uint64_t *src, int nr) | |
1078 | { | |
1079 | #ifdef HOST_WORDS_BIGENDIAN | |
1080 | int i; | |
1081 | ||
1082 | for (i = 0; i < nr; ++i) { | |
1083 | dst[i] = bswap64(src[i]); | |
1084 | } | |
1085 | ||
1086 | return dst; | |
1087 | #else | |
1088 | return src; | |
1089 | #endif | |
1090 | } | |
1091 | ||
0ab5953b RH |
1092 | #else |
1093 | static inline void aarch64_sve_narrow_vq(CPUARMState *env, unsigned vq) { } | |
9a05f7b6 RH |
1094 | static inline void aarch64_sve_change_el(CPUARMState *env, int o, |
1095 | int n, bool a) | |
1096 | { } | |
87014c6b | 1097 | static inline void aarch64_add_sve_properties(Object *obj) { } |
74e75564 | 1098 | #endif |
778c3a06 | 1099 | |
ce02049d GB |
1100 | void aarch64_sync_32_to_64(CPUARMState *env); |
1101 | void aarch64_sync_64_to_32(CPUARMState *env); | |
b5ff1b31 | 1102 | |
ced31551 RH |
1103 | int fp_exception_el(CPUARMState *env, int cur_el); |
1104 | int sve_exception_el(CPUARMState *env, int cur_el); | |
1105 | uint32_t sve_zcr_len_for_el(CPUARMState *env, int el); | |
1106 | ||
3926cc84 AG |
1107 | static inline bool is_a64(CPUARMState *env) |
1108 | { | |
1109 | return env->aarch64; | |
1110 | } | |
1111 | ||
2c0262af FB |
1112 | /* you can call this signal handler from your SIGBUS and SIGSEGV |
1113 | signal handlers to inform the virtual CPU of exceptions. non zero | |
1114 | is returned if the signal was handled by the virtual CPU. */ | |
5fafdf24 | 1115 | int cpu_arm_signal_handler(int host_signum, void *pinfo, |
2c0262af FB |
1116 | void *puc); |
1117 | ||
5d05b9d4 AL |
1118 | /** |
1119 | * pmu_op_start/finish | |
ec7b4ce4 AF |
1120 | * @env: CPUARMState |
1121 | * | |
5d05b9d4 AL |
1122 | * Convert all PMU counters between their delta form (the typical mode when |
1123 | * they are enabled) and the guest-visible values. These two calls must | |
1124 | * surround any action which might affect the counters. | |
ec7b4ce4 | 1125 | */ |
5d05b9d4 AL |
1126 | void pmu_op_start(CPUARMState *env); |
1127 | void pmu_op_finish(CPUARMState *env); | |
ec7b4ce4 | 1128 | |
4e7beb0c AL |
1129 | /* |
1130 | * Called when a PMU counter is due to overflow | |
1131 | */ | |
1132 | void arm_pmu_timer_cb(void *opaque); | |
1133 | ||
033614c4 AL |
1134 | /** |
1135 | * Functions to register as EL change hooks for PMU mode filtering | |
1136 | */ | |
1137 | void pmu_pre_el_change(ARMCPU *cpu, void *ignored); | |
1138 | void pmu_post_el_change(ARMCPU *cpu, void *ignored); | |
1139 | ||
57a4a11b | 1140 | /* |
bf8d0969 AL |
1141 | * pmu_init |
1142 | * @cpu: ARMCPU | |
57a4a11b | 1143 | * |
bf8d0969 AL |
1144 | * Initialize the CPU's PMCEID[01]_EL0 registers and associated internal state |
1145 | * for the current configuration | |
57a4a11b | 1146 | */ |
bf8d0969 | 1147 | void pmu_init(ARMCPU *cpu); |
57a4a11b | 1148 | |
76e3e1bc PM |
1149 | /* SCTLR bit meanings. Several bits have been reused in newer |
1150 | * versions of the architecture; in that case we define constants | |
1151 | * for both old and new bit meanings. Code which tests against those | |
1152 | * bits should probably check or otherwise arrange that the CPU | |
1153 | * is the architectural version it expects. | |
1154 | */ | |
1155 | #define SCTLR_M (1U << 0) | |
1156 | #define SCTLR_A (1U << 1) | |
1157 | #define SCTLR_C (1U << 2) | |
1158 | #define SCTLR_W (1U << 3) /* up to v6; RAO in v7 */ | |
b2af69d0 RH |
1159 | #define SCTLR_nTLSMD_32 (1U << 3) /* v8.2-LSMAOC, AArch32 only */ |
1160 | #define SCTLR_SA (1U << 3) /* AArch64 only */ | |
76e3e1bc | 1161 | #define SCTLR_P (1U << 4) /* up to v5; RAO in v6 and v7 */ |
b2af69d0 | 1162 | #define SCTLR_LSMAOE_32 (1U << 4) /* v8.2-LSMAOC, AArch32 only */ |
76e3e1bc PM |
1163 | #define SCTLR_SA0 (1U << 4) /* v8 onward, AArch64 only */ |
1164 | #define SCTLR_D (1U << 5) /* up to v5; RAO in v6 */ | |
1165 | #define SCTLR_CP15BEN (1U << 5) /* v7 onward */ | |
1166 | #define SCTLR_L (1U << 6) /* up to v5; RAO in v6 and v7; RAZ in v8 */ | |
b2af69d0 | 1167 | #define SCTLR_nAA (1U << 6) /* when v8.4-LSE is implemented */ |
76e3e1bc PM |
1168 | #define SCTLR_B (1U << 7) /* up to v6; RAZ in v7 */ |
1169 | #define SCTLR_ITD (1U << 7) /* v8 onward */ | |
1170 | #define SCTLR_S (1U << 8) /* up to v6; RAZ in v7 */ | |
1171 | #define SCTLR_SED (1U << 8) /* v8 onward */ | |
1172 | #define SCTLR_R (1U << 9) /* up to v6; RAZ in v7 */ | |
1173 | #define SCTLR_UMA (1U << 9) /* v8 onward, AArch64 only */ | |
1174 | #define SCTLR_F (1U << 10) /* up to v6 */ | |
cb570bd3 RH |
1175 | #define SCTLR_SW (1U << 10) /* v7 */ |
1176 | #define SCTLR_EnRCTX (1U << 10) /* in v8.0-PredInv */ | |
b2af69d0 RH |
1177 | #define SCTLR_Z (1U << 11) /* in v7, RES1 in v8 */ |
1178 | #define SCTLR_EOS (1U << 11) /* v8.5-ExS */ | |
76e3e1bc | 1179 | #define SCTLR_I (1U << 12) |
b2af69d0 RH |
1180 | #define SCTLR_V (1U << 13) /* AArch32 only */ |
1181 | #define SCTLR_EnDB (1U << 13) /* v8.3, AArch64 only */ | |
76e3e1bc PM |
1182 | #define SCTLR_RR (1U << 14) /* up to v7 */ |
1183 | #define SCTLR_DZE (1U << 14) /* v8 onward, AArch64 only */ | |
1184 | #define SCTLR_L4 (1U << 15) /* up to v6; RAZ in v7 */ | |
1185 | #define SCTLR_UCT (1U << 15) /* v8 onward, AArch64 only */ | |
1186 | #define SCTLR_DT (1U << 16) /* up to ??, RAO in v6 and v7 */ | |
1187 | #define SCTLR_nTWI (1U << 16) /* v8 onward */ | |
b2af69d0 | 1188 | #define SCTLR_HA (1U << 17) /* up to v7, RES0 in v8 */ |
f6bda88f | 1189 | #define SCTLR_BR (1U << 17) /* PMSA only */ |
76e3e1bc PM |
1190 | #define SCTLR_IT (1U << 18) /* up to ??, RAO in v6 and v7 */ |
1191 | #define SCTLR_nTWE (1U << 18) /* v8 onward */ | |
1192 | #define SCTLR_WXN (1U << 19) | |
1193 | #define SCTLR_ST (1U << 20) /* up to ??, RAZ in v6 */ | |
b2af69d0 RH |
1194 | #define SCTLR_UWXN (1U << 20) /* v7 onward, AArch32 only */ |
1195 | #define SCTLR_FI (1U << 21) /* up to v7, v8 RES0 */ | |
1196 | #define SCTLR_IESB (1U << 21) /* v8.2-IESB, AArch64 only */ | |
1197 | #define SCTLR_U (1U << 22) /* up to v6, RAO in v7 */ | |
1198 | #define SCTLR_EIS (1U << 22) /* v8.5-ExS */ | |
76e3e1bc | 1199 | #define SCTLR_XP (1U << 23) /* up to v6; v7 onward RAO */ |
b2af69d0 | 1200 | #define SCTLR_SPAN (1U << 23) /* v8.1-PAN */ |
76e3e1bc PM |
1201 | #define SCTLR_VE (1U << 24) /* up to v7 */ |
1202 | #define SCTLR_E0E (1U << 24) /* v8 onward, AArch64 only */ | |
1203 | #define SCTLR_EE (1U << 25) | |
1204 | #define SCTLR_L2 (1U << 26) /* up to v6, RAZ in v7 */ | |
1205 | #define SCTLR_UCI (1U << 26) /* v8 onward, AArch64 only */ | |
b2af69d0 RH |
1206 | #define SCTLR_NMFI (1U << 27) /* up to v7, RAZ in v7VE and v8 */ |
1207 | #define SCTLR_EnDA (1U << 27) /* v8.3, AArch64 only */ | |
1208 | #define SCTLR_TRE (1U << 28) /* AArch32 only */ | |
1209 | #define SCTLR_nTLSMD_64 (1U << 28) /* v8.2-LSMAOC, AArch64 only */ | |
1210 | #define SCTLR_AFE (1U << 29) /* AArch32 only */ | |
1211 | #define SCTLR_LSMAOE_64 (1U << 29) /* v8.2-LSMAOC, AArch64 only */ | |
1212 | #define SCTLR_TE (1U << 30) /* AArch32 only */ | |
1213 | #define SCTLR_EnIB (1U << 30) /* v8.3, AArch64 only */ | |
1214 | #define SCTLR_EnIA (1U << 31) /* v8.3, AArch64 only */ | |
f2f68a78 | 1215 | #define SCTLR_DSSBS_32 (1U << 31) /* v8.5, AArch32 only */ |
b2af69d0 RH |
1216 | #define SCTLR_BT0 (1ULL << 35) /* v8.5-BTI */ |
1217 | #define SCTLR_BT1 (1ULL << 36) /* v8.5-BTI */ | |
1218 | #define SCTLR_ITFSB (1ULL << 37) /* v8.5-MemTag */ | |
1219 | #define SCTLR_TCF0 (3ULL << 38) /* v8.5-MemTag */ | |
1220 | #define SCTLR_TCF (3ULL << 40) /* v8.5-MemTag */ | |
1221 | #define SCTLR_ATA0 (1ULL << 42) /* v8.5-MemTag */ | |
1222 | #define SCTLR_ATA (1ULL << 43) /* v8.5-MemTag */ | |
f2f68a78 | 1223 | #define SCTLR_DSSBS_64 (1ULL << 44) /* v8.5, AArch64 only */ |
76e3e1bc | 1224 | |
c6f19164 GB |
1225 | #define CPTR_TCPAC (1U << 31) |
1226 | #define CPTR_TTA (1U << 20) | |
1227 | #define CPTR_TFP (1U << 10) | |
5be5e8ed RH |
1228 | #define CPTR_TZ (1U << 8) /* CPTR_EL2 */ |
1229 | #define CPTR_EZ (1U << 8) /* CPTR_EL3 */ | |
c6f19164 | 1230 | |
187f678d PM |
1231 | #define MDCR_EPMAD (1U << 21) |
1232 | #define MDCR_EDAD (1U << 20) | |
033614c4 AL |
1233 | #define MDCR_SPME (1U << 17) /* MDCR_EL3 */ |
1234 | #define MDCR_HPMD (1U << 17) /* MDCR_EL2 */ | |
187f678d | 1235 | #define MDCR_SDD (1U << 16) |
a8d64e73 | 1236 | #define MDCR_SPD (3U << 14) |
187f678d PM |
1237 | #define MDCR_TDRA (1U << 11) |
1238 | #define MDCR_TDOSA (1U << 10) | |
1239 | #define MDCR_TDA (1U << 9) | |
1240 | #define MDCR_TDE (1U << 8) | |
1241 | #define MDCR_HPME (1U << 7) | |
1242 | #define MDCR_TPM (1U << 6) | |
1243 | #define MDCR_TPMCR (1U << 5) | |
033614c4 | 1244 | #define MDCR_HPMN (0x1fU) |
187f678d | 1245 | |
a8d64e73 PM |
1246 | /* Not all of the MDCR_EL3 bits are present in the 32-bit SDCR */ |
1247 | #define SDCR_VALID_MASK (MDCR_EPMAD | MDCR_EDAD | MDCR_SPME | MDCR_SPD) | |
1248 | ||
78dbbbe4 PM |
1249 | #define CPSR_M (0x1fU) |
1250 | #define CPSR_T (1U << 5) | |
1251 | #define CPSR_F (1U << 6) | |
1252 | #define CPSR_I (1U << 7) | |
1253 | #define CPSR_A (1U << 8) | |
1254 | #define CPSR_E (1U << 9) | |
1255 | #define CPSR_IT_2_7 (0xfc00U) | |
1256 | #define CPSR_GE (0xfU << 16) | |
4051e12c | 1257 | #define CPSR_IL (1U << 20) |
dc8b1853 | 1258 | #define CPSR_DIT (1U << 21) |
220f508f | 1259 | #define CPSR_PAN (1U << 22) |
f2f68a78 | 1260 | #define CPSR_SSBS (1U << 23) |
78dbbbe4 PM |
1261 | #define CPSR_J (1U << 24) |
1262 | #define CPSR_IT_0_1 (3U << 25) | |
1263 | #define CPSR_Q (1U << 27) | |
1264 | #define CPSR_V (1U << 28) | |
1265 | #define CPSR_C (1U << 29) | |
1266 | #define CPSR_Z (1U << 30) | |
1267 | #define CPSR_N (1U << 31) | |
9ee6e8bb | 1268 | #define CPSR_NZCV (CPSR_N | CPSR_Z | CPSR_C | CPSR_V) |
4cc35614 | 1269 | #define CPSR_AIF (CPSR_A | CPSR_I | CPSR_F) |
9ee6e8bb PB |
1270 | |
1271 | #define CPSR_IT (CPSR_IT_0_1 | CPSR_IT_2_7) | |
4cc35614 PM |
1272 | #define CACHED_CPSR_BITS (CPSR_T | CPSR_AIF | CPSR_GE | CPSR_IT | CPSR_Q \ |
1273 | | CPSR_NZCV) | |
9ee6e8bb | 1274 | /* Bits writable in user mode. */ |
268b1b3d | 1275 | #define CPSR_USER (CPSR_NZCV | CPSR_Q | CPSR_GE | CPSR_E) |
9ee6e8bb | 1276 | /* Execution state bits. MRS read as zero, MSR writes ignored. */ |
4051e12c | 1277 | #define CPSR_EXEC (CPSR_T | CPSR_IT | CPSR_J | CPSR_IL) |
b5ff1b31 | 1278 | |
987ab45e PM |
1279 | /* Bit definitions for M profile XPSR. Most are the same as CPSR. */ |
1280 | #define XPSR_EXCP 0x1ffU | |
1281 | #define XPSR_SPREALIGN (1U << 9) /* Only set in exception stack frames */ | |
1282 | #define XPSR_IT_2_7 CPSR_IT_2_7 | |
1283 | #define XPSR_GE CPSR_GE | |
1284 | #define XPSR_SFPA (1U << 20) /* Only set in exception stack frames */ | |
1285 | #define XPSR_T (1U << 24) /* Not the same as CPSR_T ! */ | |
1286 | #define XPSR_IT_0_1 CPSR_IT_0_1 | |
1287 | #define XPSR_Q CPSR_Q | |
1288 | #define XPSR_V CPSR_V | |
1289 | #define XPSR_C CPSR_C | |
1290 | #define XPSR_Z CPSR_Z | |
1291 | #define XPSR_N CPSR_N | |
1292 | #define XPSR_NZCV CPSR_NZCV | |
1293 | #define XPSR_IT CPSR_IT | |
1294 | ||
e389be16 FA |
1295 | #define TTBCR_N (7U << 0) /* TTBCR.EAE==0 */ |
1296 | #define TTBCR_T0SZ (7U << 0) /* TTBCR.EAE==1 */ | |
1297 | #define TTBCR_PD0 (1U << 4) | |
1298 | #define TTBCR_PD1 (1U << 5) | |
1299 | #define TTBCR_EPD0 (1U << 7) | |
1300 | #define TTBCR_IRGN0 (3U << 8) | |
1301 | #define TTBCR_ORGN0 (3U << 10) | |
1302 | #define TTBCR_SH0 (3U << 12) | |
1303 | #define TTBCR_T1SZ (3U << 16) | |
1304 | #define TTBCR_A1 (1U << 22) | |
1305 | #define TTBCR_EPD1 (1U << 23) | |
1306 | #define TTBCR_IRGN1 (3U << 24) | |
1307 | #define TTBCR_ORGN1 (3U << 26) | |
1308 | #define TTBCR_SH1 (1U << 28) | |
1309 | #define TTBCR_EAE (1U << 31) | |
1310 | ||
d356312f PM |
1311 | /* Bit definitions for ARMv8 SPSR (PSTATE) format. |
1312 | * Only these are valid when in AArch64 mode; in | |
1313 | * AArch32 mode SPSRs are basically CPSR-format. | |
1314 | */ | |
f502cfc2 | 1315 | #define PSTATE_SP (1U) |
d356312f PM |
1316 | #define PSTATE_M (0xFU) |
1317 | #define PSTATE_nRW (1U << 4) | |
1318 | #define PSTATE_F (1U << 6) | |
1319 | #define PSTATE_I (1U << 7) | |
1320 | #define PSTATE_A (1U << 8) | |
1321 | #define PSTATE_D (1U << 9) | |
f6e52eaa | 1322 | #define PSTATE_BTYPE (3U << 10) |
f2f68a78 | 1323 | #define PSTATE_SSBS (1U << 12) |
d356312f PM |
1324 | #define PSTATE_IL (1U << 20) |
1325 | #define PSTATE_SS (1U << 21) | |
220f508f | 1326 | #define PSTATE_PAN (1U << 22) |
9eeb7a1c | 1327 | #define PSTATE_UAO (1U << 23) |
dc8b1853 | 1328 | #define PSTATE_DIT (1U << 24) |
4b779ceb | 1329 | #define PSTATE_TCO (1U << 25) |
d356312f PM |
1330 | #define PSTATE_V (1U << 28) |
1331 | #define PSTATE_C (1U << 29) | |
1332 | #define PSTATE_Z (1U << 30) | |
1333 | #define PSTATE_N (1U << 31) | |
1334 | #define PSTATE_NZCV (PSTATE_N | PSTATE_Z | PSTATE_C | PSTATE_V) | |
4cc35614 | 1335 | #define PSTATE_DAIF (PSTATE_D | PSTATE_A | PSTATE_I | PSTATE_F) |
f6e52eaa | 1336 | #define CACHED_PSTATE_BITS (PSTATE_NZCV | PSTATE_DAIF | PSTATE_BTYPE) |
d356312f PM |
1337 | /* Mode values for AArch64 */ |
1338 | #define PSTATE_MODE_EL3h 13 | |
1339 | #define PSTATE_MODE_EL3t 12 | |
1340 | #define PSTATE_MODE_EL2h 9 | |
1341 | #define PSTATE_MODE_EL2t 8 | |
1342 | #define PSTATE_MODE_EL1h 5 | |
1343 | #define PSTATE_MODE_EL1t 4 | |
1344 | #define PSTATE_MODE_EL0t 0 | |
1345 | ||
de2db7ec PM |
1346 | /* Write a new value to v7m.exception, thus transitioning into or out |
1347 | * of Handler mode; this may result in a change of active stack pointer. | |
1348 | */ | |
1349 | void write_v7m_exception(CPUARMState *env, uint32_t new_exc); | |
1350 | ||
9e729b57 EI |
1351 | /* Map EL and handler into a PSTATE_MODE. */ |
1352 | static inline unsigned int aarch64_pstate_mode(unsigned int el, bool handler) | |
1353 | { | |
1354 | return (el << 2) | handler; | |
1355 | } | |
1356 | ||
d356312f PM |
1357 | /* Return the current PSTATE value. For the moment we don't support 32<->64 bit |
1358 | * interprocessing, so we don't attempt to sync with the cpsr state used by | |
1359 | * the 32 bit decoder. | |
1360 | */ | |
1361 | static inline uint32_t pstate_read(CPUARMState *env) | |
1362 | { | |
1363 | int ZF; | |
1364 | ||
1365 | ZF = (env->ZF == 0); | |
1366 | return (env->NF & 0x80000000) | (ZF << 30) | |
1367 | | (env->CF << 29) | ((env->VF & 0x80000000) >> 3) | |
f6e52eaa | 1368 | | env->pstate | env->daif | (env->btype << 10); |
d356312f PM |
1369 | } |
1370 | ||
1371 | static inline void pstate_write(CPUARMState *env, uint32_t val) | |
1372 | { | |
1373 | env->ZF = (~val) & PSTATE_Z; | |
1374 | env->NF = val; | |
1375 | env->CF = (val >> 29) & 1; | |
1376 | env->VF = (val << 3) & 0x80000000; | |
4cc35614 | 1377 | env->daif = val & PSTATE_DAIF; |
f6e52eaa | 1378 | env->btype = (val >> 10) & 3; |
d356312f PM |
1379 | env->pstate = val & ~CACHED_PSTATE_BITS; |
1380 | } | |
1381 | ||
b5ff1b31 | 1382 | /* Return the current CPSR value. */ |
2f4a40e5 | 1383 | uint32_t cpsr_read(CPUARMState *env); |
50866ba5 PM |
1384 | |
1385 | typedef enum CPSRWriteType { | |
1386 | CPSRWriteByInstr = 0, /* from guest MSR or CPS */ | |
1387 | CPSRWriteExceptionReturn = 1, /* from guest exception return insn */ | |
1388 | CPSRWriteRaw = 2, /* trust values, do not switch reg banks */ | |
1389 | CPSRWriteByGDBStub = 3, /* from the GDB stub */ | |
1390 | } CPSRWriteType; | |
1391 | ||
1392 | /* Set the CPSR. Note that some bits of mask must be all-set or all-clear.*/ | |
1393 | void cpsr_write(CPUARMState *env, uint32_t val, uint32_t mask, | |
1394 | CPSRWriteType write_type); | |
9ee6e8bb PB |
1395 | |
1396 | /* Return the current xPSR value. */ | |
1397 | static inline uint32_t xpsr_read(CPUARMState *env) | |
1398 | { | |
1399 | int ZF; | |
6fbe23d5 PB |
1400 | ZF = (env->ZF == 0); |
1401 | return (env->NF & 0x80000000) | (ZF << 30) | |
9ee6e8bb PB |
1402 | | (env->CF << 29) | ((env->VF & 0x80000000) >> 3) | (env->QF << 27) |
1403 | | (env->thumb << 24) | ((env->condexec_bits & 3) << 25) | |
1404 | | ((env->condexec_bits & 0xfc) << 8) | |
f1e2598c | 1405 | | (env->GE << 16) |
9ee6e8bb | 1406 | | env->v7m.exception; |
b5ff1b31 FB |
1407 | } |
1408 | ||
9ee6e8bb PB |
1409 | /* Set the xPSR. Note that some bits of mask must be all-set or all-clear. */ |
1410 | static inline void xpsr_write(CPUARMState *env, uint32_t val, uint32_t mask) | |
1411 | { | |
987ab45e PM |
1412 | if (mask & XPSR_NZCV) { |
1413 | env->ZF = (~val) & XPSR_Z; | |
6fbe23d5 | 1414 | env->NF = val; |
9ee6e8bb PB |
1415 | env->CF = (val >> 29) & 1; |
1416 | env->VF = (val << 3) & 0x80000000; | |
1417 | } | |
987ab45e PM |
1418 | if (mask & XPSR_Q) { |
1419 | env->QF = ((val & XPSR_Q) != 0); | |
1420 | } | |
f1e2598c PM |
1421 | if (mask & XPSR_GE) { |
1422 | env->GE = (val & XPSR_GE) >> 16; | |
1423 | } | |
04c9c81b | 1424 | #ifndef CONFIG_USER_ONLY |
987ab45e PM |
1425 | if (mask & XPSR_T) { |
1426 | env->thumb = ((val & XPSR_T) != 0); | |
1427 | } | |
1428 | if (mask & XPSR_IT_0_1) { | |
9ee6e8bb PB |
1429 | env->condexec_bits &= ~3; |
1430 | env->condexec_bits |= (val >> 25) & 3; | |
1431 | } | |
987ab45e | 1432 | if (mask & XPSR_IT_2_7) { |
9ee6e8bb PB |
1433 | env->condexec_bits &= 3; |
1434 | env->condexec_bits |= (val >> 8) & 0xfc; | |
1435 | } | |
987ab45e | 1436 | if (mask & XPSR_EXCP) { |
de2db7ec PM |
1437 | /* Note that this only happens on exception exit */ |
1438 | write_v7m_exception(env, val & XPSR_EXCP); | |
9ee6e8bb | 1439 | } |
04c9c81b | 1440 | #endif |
9ee6e8bb PB |
1441 | } |
1442 | ||
f149e3e8 EI |
1443 | #define HCR_VM (1ULL << 0) |
1444 | #define HCR_SWIO (1ULL << 1) | |
1445 | #define HCR_PTW (1ULL << 2) | |
1446 | #define HCR_FMO (1ULL << 3) | |
1447 | #define HCR_IMO (1ULL << 4) | |
1448 | #define HCR_AMO (1ULL << 5) | |
1449 | #define HCR_VF (1ULL << 6) | |
1450 | #define HCR_VI (1ULL << 7) | |
1451 | #define HCR_VSE (1ULL << 8) | |
1452 | #define HCR_FB (1ULL << 9) | |
1453 | #define HCR_BSU_MASK (3ULL << 10) | |
1454 | #define HCR_DC (1ULL << 12) | |
1455 | #define HCR_TWI (1ULL << 13) | |
1456 | #define HCR_TWE (1ULL << 14) | |
1457 | #define HCR_TID0 (1ULL << 15) | |
1458 | #define HCR_TID1 (1ULL << 16) | |
1459 | #define HCR_TID2 (1ULL << 17) | |
1460 | #define HCR_TID3 (1ULL << 18) | |
1461 | #define HCR_TSC (1ULL << 19) | |
1462 | #define HCR_TIDCP (1ULL << 20) | |
1463 | #define HCR_TACR (1ULL << 21) | |
1464 | #define HCR_TSW (1ULL << 22) | |
099bf53b | 1465 | #define HCR_TPCP (1ULL << 23) |
f149e3e8 EI |
1466 | #define HCR_TPU (1ULL << 24) |
1467 | #define HCR_TTLB (1ULL << 25) | |
1468 | #define HCR_TVM (1ULL << 26) | |
1469 | #define HCR_TGE (1ULL << 27) | |
1470 | #define HCR_TDZ (1ULL << 28) | |
1471 | #define HCR_HCD (1ULL << 29) | |
1472 | #define HCR_TRVM (1ULL << 30) | |
1473 | #define HCR_RW (1ULL << 31) | |
1474 | #define HCR_CD (1ULL << 32) | |
1475 | #define HCR_ID (1ULL << 33) | |
ac656b16 | 1476 | #define HCR_E2H (1ULL << 34) |
099bf53b RH |
1477 | #define HCR_TLOR (1ULL << 35) |
1478 | #define HCR_TERR (1ULL << 36) | |
1479 | #define HCR_TEA (1ULL << 37) | |
1480 | #define HCR_MIOCNCE (1ULL << 38) | |
e0a38bb3 | 1481 | /* RES0 bit 39 */ |
099bf53b RH |
1482 | #define HCR_APK (1ULL << 40) |
1483 | #define HCR_API (1ULL << 41) | |
1484 | #define HCR_NV (1ULL << 42) | |
1485 | #define HCR_NV1 (1ULL << 43) | |
1486 | #define HCR_AT (1ULL << 44) | |
1487 | #define HCR_NV2 (1ULL << 45) | |
1488 | #define HCR_FWB (1ULL << 46) | |
1489 | #define HCR_FIEN (1ULL << 47) | |
e0a38bb3 | 1490 | /* RES0 bit 48 */ |
099bf53b RH |
1491 | #define HCR_TID4 (1ULL << 49) |
1492 | #define HCR_TICAB (1ULL << 50) | |
e0a38bb3 | 1493 | #define HCR_AMVOFFEN (1ULL << 51) |
099bf53b | 1494 | #define HCR_TOCU (1ULL << 52) |
e0a38bb3 | 1495 | #define HCR_ENSCXT (1ULL << 53) |
099bf53b RH |
1496 | #define HCR_TTLBIS (1ULL << 54) |
1497 | #define HCR_TTLBOS (1ULL << 55) | |
1498 | #define HCR_ATA (1ULL << 56) | |
1499 | #define HCR_DCT (1ULL << 57) | |
e0a38bb3 RH |
1500 | #define HCR_TID5 (1ULL << 58) |
1501 | #define HCR_TWEDEN (1ULL << 59) | |
1502 | #define HCR_TWEDEL MAKE_64BIT_MASK(60, 4) | |
099bf53b | 1503 | |
9861248f RDC |
1504 | #define HPFAR_NS (1ULL << 63) |
1505 | ||
64e0e2de EI |
1506 | #define SCR_NS (1U << 0) |
1507 | #define SCR_IRQ (1U << 1) | |
1508 | #define SCR_FIQ (1U << 2) | |
1509 | #define SCR_EA (1U << 3) | |
1510 | #define SCR_FW (1U << 4) | |
1511 | #define SCR_AW (1U << 5) | |
1512 | #define SCR_NET (1U << 6) | |
1513 | #define SCR_SMD (1U << 7) | |
1514 | #define SCR_HCE (1U << 8) | |
1515 | #define SCR_SIF (1U << 9) | |
1516 | #define SCR_RW (1U << 10) | |
1517 | #define SCR_ST (1U << 11) | |
1518 | #define SCR_TWI (1U << 12) | |
1519 | #define SCR_TWE (1U << 13) | |
99f8f86d RH |
1520 | #define SCR_TLOR (1U << 14) |
1521 | #define SCR_TERR (1U << 15) | |
1522 | #define SCR_APK (1U << 16) | |
1523 | #define SCR_API (1U << 17) | |
1524 | #define SCR_EEL2 (1U << 18) | |
1525 | #define SCR_EASE (1U << 19) | |
1526 | #define SCR_NMEA (1U << 20) | |
1527 | #define SCR_FIEN (1U << 21) | |
1528 | #define SCR_ENSCXT (1U << 25) | |
1529 | #define SCR_ATA (1U << 26) | |
64e0e2de | 1530 | |
01653295 PM |
1531 | /* Return the current FPSCR value. */ |
1532 | uint32_t vfp_get_fpscr(CPUARMState *env); | |
1533 | void vfp_set_fpscr(CPUARMState *env, uint32_t val); | |
1534 | ||
d81ce0ef AB |
1535 | /* FPCR, Floating Point Control Register |
1536 | * FPSR, Floating Poiht Status Register | |
1537 | * | |
1538 | * For A64 the FPSCR is split into two logically distinct registers, | |
f903fa22 PM |
1539 | * FPCR and FPSR. However since they still use non-overlapping bits |
1540 | * we store the underlying state in fpscr and just mask on read/write. | |
1541 | */ | |
1542 | #define FPSR_MASK 0xf800009f | |
0b62159b | 1543 | #define FPCR_MASK 0x07ff9f00 |
d81ce0ef | 1544 | |
a15945d9 PM |
1545 | #define FPCR_IOE (1 << 8) /* Invalid Operation exception trap enable */ |
1546 | #define FPCR_DZE (1 << 9) /* Divide by Zero exception trap enable */ | |
1547 | #define FPCR_OFE (1 << 10) /* Overflow exception trap enable */ | |
1548 | #define FPCR_UFE (1 << 11) /* Underflow exception trap enable */ | |
1549 | #define FPCR_IXE (1 << 12) /* Inexact exception trap enable */ | |
1550 | #define FPCR_IDE (1 << 15) /* Input Denormal exception trap enable */ | |
d81ce0ef | 1551 | #define FPCR_FZ16 (1 << 19) /* ARMv8.2+, FP16 flush-to-zero */ |
99c7834f | 1552 | #define FPCR_RMODE_MASK (3 << 22) /* Rounding mode */ |
d81ce0ef AB |
1553 | #define FPCR_FZ (1 << 24) /* Flush-to-zero enable bit */ |
1554 | #define FPCR_DN (1 << 25) /* Default NaN enable bit */ | |
99c7834f | 1555 | #define FPCR_AHP (1 << 26) /* Alternative half-precision */ |
a4d58462 | 1556 | #define FPCR_QC (1 << 27) /* Cumulative saturation bit */ |
9542c30b PM |
1557 | #define FPCR_V (1 << 28) /* FP overflow flag */ |
1558 | #define FPCR_C (1 << 29) /* FP carry flag */ | |
1559 | #define FPCR_Z (1 << 30) /* FP zero flag */ | |
1560 | #define FPCR_N (1 << 31) /* FP negative flag */ | |
1561 | ||
99c7834f PM |
1562 | #define FPCR_LTPSIZE_SHIFT 16 /* LTPSIZE, M-profile only */ |
1563 | #define FPCR_LTPSIZE_MASK (7 << FPCR_LTPSIZE_SHIFT) | |
1564 | ||
9542c30b PM |
1565 | #define FPCR_NZCV_MASK (FPCR_N | FPCR_Z | FPCR_C | FPCR_V) |
1566 | #define FPCR_NZCVQC_MASK (FPCR_NZCV_MASK | FPCR_QC) | |
d81ce0ef | 1567 | |
f903fa22 PM |
1568 | static inline uint32_t vfp_get_fpsr(CPUARMState *env) |
1569 | { | |
1570 | return vfp_get_fpscr(env) & FPSR_MASK; | |
1571 | } | |
1572 | ||
1573 | static inline void vfp_set_fpsr(CPUARMState *env, uint32_t val) | |
1574 | { | |
1575 | uint32_t new_fpscr = (vfp_get_fpscr(env) & ~FPSR_MASK) | (val & FPSR_MASK); | |
1576 | vfp_set_fpscr(env, new_fpscr); | |
1577 | } | |
1578 | ||
1579 | static inline uint32_t vfp_get_fpcr(CPUARMState *env) | |
1580 | { | |
1581 | return vfp_get_fpscr(env) & FPCR_MASK; | |
1582 | } | |
1583 | ||
1584 | static inline void vfp_set_fpcr(CPUARMState *env, uint32_t val) | |
1585 | { | |
1586 | uint32_t new_fpscr = (vfp_get_fpscr(env) & ~FPCR_MASK) | (val & FPCR_MASK); | |
1587 | vfp_set_fpscr(env, new_fpscr); | |
1588 | } | |
1589 | ||
b5ff1b31 FB |
1590 | enum arm_cpu_mode { |
1591 | ARM_CPU_MODE_USR = 0x10, | |
1592 | ARM_CPU_MODE_FIQ = 0x11, | |
1593 | ARM_CPU_MODE_IRQ = 0x12, | |
1594 | ARM_CPU_MODE_SVC = 0x13, | |
28c9457d | 1595 | ARM_CPU_MODE_MON = 0x16, |
b5ff1b31 | 1596 | ARM_CPU_MODE_ABT = 0x17, |
28c9457d | 1597 | ARM_CPU_MODE_HYP = 0x1a, |
b5ff1b31 FB |
1598 | ARM_CPU_MODE_UND = 0x1b, |
1599 | ARM_CPU_MODE_SYS = 0x1f | |
1600 | }; | |
1601 | ||
40f137e1 PB |
1602 | /* VFP system registers. */ |
1603 | #define ARM_VFP_FPSID 0 | |
1604 | #define ARM_VFP_FPSCR 1 | |
a50c0f51 | 1605 | #define ARM_VFP_MVFR2 5 |
9ee6e8bb PB |
1606 | #define ARM_VFP_MVFR1 6 |
1607 | #define ARM_VFP_MVFR0 7 | |
40f137e1 PB |
1608 | #define ARM_VFP_FPEXC 8 |
1609 | #define ARM_VFP_FPINST 9 | |
1610 | #define ARM_VFP_FPINST2 10 | |
9542c30b PM |
1611 | /* These ones are M-profile only */ |
1612 | #define ARM_VFP_FPSCR_NZCVQC 2 | |
1613 | #define ARM_VFP_VPR 12 | |
1614 | #define ARM_VFP_P0 13 | |
1615 | #define ARM_VFP_FPCXT_NS 14 | |
1616 | #define ARM_VFP_FPCXT_S 15 | |
40f137e1 | 1617 | |
32a290b8 PM |
1618 | /* QEMU-internal value meaning "FPSCR, but we care only about NZCV" */ |
1619 | #define QEMU_VFP_FPSCR_NZCV 0xffff | |
1620 | ||
18c9b560 | 1621 | /* iwMMXt coprocessor control registers. */ |
6e0fafe2 PM |
1622 | #define ARM_IWMMXT_wCID 0 |
1623 | #define ARM_IWMMXT_wCon 1 | |
1624 | #define ARM_IWMMXT_wCSSF 2 | |
1625 | #define ARM_IWMMXT_wCASF 3 | |
1626 | #define ARM_IWMMXT_wCGR0 8 | |
1627 | #define ARM_IWMMXT_wCGR1 9 | |
1628 | #define ARM_IWMMXT_wCGR2 10 | |
1629 | #define ARM_IWMMXT_wCGR3 11 | |
18c9b560 | 1630 | |
2c4da50d PM |
1631 | /* V7M CCR bits */ |
1632 | FIELD(V7M_CCR, NONBASETHRDENA, 0, 1) | |
1633 | FIELD(V7M_CCR, USERSETMPEND, 1, 1) | |
1634 | FIELD(V7M_CCR, UNALIGN_TRP, 3, 1) | |
1635 | FIELD(V7M_CCR, DIV_0_TRP, 4, 1) | |
1636 | FIELD(V7M_CCR, BFHFNMIGN, 8, 1) | |
1637 | FIELD(V7M_CCR, STKALIGN, 9, 1) | |
4730fb85 | 1638 | FIELD(V7M_CCR, STKOFHFNMIGN, 10, 1) |
2c4da50d PM |
1639 | FIELD(V7M_CCR, DC, 16, 1) |
1640 | FIELD(V7M_CCR, IC, 17, 1) | |
4730fb85 | 1641 | FIELD(V7M_CCR, BP, 18, 1) |
0e83f905 PM |
1642 | FIELD(V7M_CCR, LOB, 19, 1) |
1643 | FIELD(V7M_CCR, TRD, 20, 1) | |
2c4da50d | 1644 | |
24ac0fb1 PM |
1645 | /* V7M SCR bits */ |
1646 | FIELD(V7M_SCR, SLEEPONEXIT, 1, 1) | |
1647 | FIELD(V7M_SCR, SLEEPDEEP, 2, 1) | |
1648 | FIELD(V7M_SCR, SLEEPDEEPS, 3, 1) | |
1649 | FIELD(V7M_SCR, SEVONPEND, 4, 1) | |
1650 | ||
3b2e9344 PM |
1651 | /* V7M AIRCR bits */ |
1652 | FIELD(V7M_AIRCR, VECTRESET, 0, 1) | |
1653 | FIELD(V7M_AIRCR, VECTCLRACTIVE, 1, 1) | |
1654 | FIELD(V7M_AIRCR, SYSRESETREQ, 2, 1) | |
1655 | FIELD(V7M_AIRCR, SYSRESETREQS, 3, 1) | |
1656 | FIELD(V7M_AIRCR, PRIGROUP, 8, 3) | |
1657 | FIELD(V7M_AIRCR, BFHFNMINS, 13, 1) | |
1658 | FIELD(V7M_AIRCR, PRIS, 14, 1) | |
1659 | FIELD(V7M_AIRCR, ENDIANNESS, 15, 1) | |
1660 | FIELD(V7M_AIRCR, VECTKEY, 16, 16) | |
1661 | ||
2c4da50d PM |
1662 | /* V7M CFSR bits for MMFSR */ |
1663 | FIELD(V7M_CFSR, IACCVIOL, 0, 1) | |
1664 | FIELD(V7M_CFSR, DACCVIOL, 1, 1) | |
1665 | FIELD(V7M_CFSR, MUNSTKERR, 3, 1) | |
1666 | FIELD(V7M_CFSR, MSTKERR, 4, 1) | |
1667 | FIELD(V7M_CFSR, MLSPERR, 5, 1) | |
1668 | FIELD(V7M_CFSR, MMARVALID, 7, 1) | |
1669 | ||
1670 | /* V7M CFSR bits for BFSR */ | |
1671 | FIELD(V7M_CFSR, IBUSERR, 8 + 0, 1) | |
1672 | FIELD(V7M_CFSR, PRECISERR, 8 + 1, 1) | |
1673 | FIELD(V7M_CFSR, IMPRECISERR, 8 + 2, 1) | |
1674 | FIELD(V7M_CFSR, UNSTKERR, 8 + 3, 1) | |
1675 | FIELD(V7M_CFSR, STKERR, 8 + 4, 1) | |
1676 | FIELD(V7M_CFSR, LSPERR, 8 + 5, 1) | |
1677 | FIELD(V7M_CFSR, BFARVALID, 8 + 7, 1) | |
1678 | ||
1679 | /* V7M CFSR bits for UFSR */ | |
1680 | FIELD(V7M_CFSR, UNDEFINSTR, 16 + 0, 1) | |
1681 | FIELD(V7M_CFSR, INVSTATE, 16 + 1, 1) | |
1682 | FIELD(V7M_CFSR, INVPC, 16 + 2, 1) | |
1683 | FIELD(V7M_CFSR, NOCP, 16 + 3, 1) | |
86f026de | 1684 | FIELD(V7M_CFSR, STKOF, 16 + 4, 1) |
2c4da50d PM |
1685 | FIELD(V7M_CFSR, UNALIGNED, 16 + 8, 1) |
1686 | FIELD(V7M_CFSR, DIVBYZERO, 16 + 9, 1) | |
1687 | ||
334e8dad PM |
1688 | /* V7M CFSR bit masks covering all of the subregister bits */ |
1689 | FIELD(V7M_CFSR, MMFSR, 0, 8) | |
1690 | FIELD(V7M_CFSR, BFSR, 8, 8) | |
1691 | FIELD(V7M_CFSR, UFSR, 16, 16) | |
1692 | ||
2c4da50d PM |
1693 | /* V7M HFSR bits */ |
1694 | FIELD(V7M_HFSR, VECTTBL, 1, 1) | |
1695 | FIELD(V7M_HFSR, FORCED, 30, 1) | |
1696 | FIELD(V7M_HFSR, DEBUGEVT, 31, 1) | |
1697 | ||
1698 | /* V7M DFSR bits */ | |
1699 | FIELD(V7M_DFSR, HALTED, 0, 1) | |
1700 | FIELD(V7M_DFSR, BKPT, 1, 1) | |
1701 | FIELD(V7M_DFSR, DWTTRAP, 2, 1) | |
1702 | FIELD(V7M_DFSR, VCATCH, 3, 1) | |
1703 | FIELD(V7M_DFSR, EXTERNAL, 4, 1) | |
1704 | ||
bed079da PM |
1705 | /* V7M SFSR bits */ |
1706 | FIELD(V7M_SFSR, INVEP, 0, 1) | |
1707 | FIELD(V7M_SFSR, INVIS, 1, 1) | |
1708 | FIELD(V7M_SFSR, INVER, 2, 1) | |
1709 | FIELD(V7M_SFSR, AUVIOL, 3, 1) | |
1710 | FIELD(V7M_SFSR, INVTRAN, 4, 1) | |
1711 | FIELD(V7M_SFSR, LSPERR, 5, 1) | |
1712 | FIELD(V7M_SFSR, SFARVALID, 6, 1) | |
1713 | FIELD(V7M_SFSR, LSERR, 7, 1) | |
1714 | ||
29c483a5 MD |
1715 | /* v7M MPU_CTRL bits */ |
1716 | FIELD(V7M_MPU_CTRL, ENABLE, 0, 1) | |
1717 | FIELD(V7M_MPU_CTRL, HFNMIENA, 1, 1) | |
1718 | FIELD(V7M_MPU_CTRL, PRIVDEFENA, 2, 1) | |
1719 | ||
43bbce7f PM |
1720 | /* v7M CLIDR bits */ |
1721 | FIELD(V7M_CLIDR, CTYPE_ALL, 0, 21) | |
1722 | FIELD(V7M_CLIDR, LOUIS, 21, 3) | |
1723 | FIELD(V7M_CLIDR, LOC, 24, 3) | |
1724 | FIELD(V7M_CLIDR, LOUU, 27, 3) | |
1725 | FIELD(V7M_CLIDR, ICB, 30, 2) | |
1726 | ||
1727 | FIELD(V7M_CSSELR, IND, 0, 1) | |
1728 | FIELD(V7M_CSSELR, LEVEL, 1, 3) | |
1729 | /* We use the combination of InD and Level to index into cpu->ccsidr[]; | |
1730 | * define a mask for this and check that it doesn't permit running off | |
1731 | * the end of the array. | |
1732 | */ | |
1733 | FIELD(V7M_CSSELR, INDEX, 0, 4) | |
d33abe82 PM |
1734 | |
1735 | /* v7M FPCCR bits */ | |
1736 | FIELD(V7M_FPCCR, LSPACT, 0, 1) | |
1737 | FIELD(V7M_FPCCR, USER, 1, 1) | |
1738 | FIELD(V7M_FPCCR, S, 2, 1) | |
1739 | FIELD(V7M_FPCCR, THREAD, 3, 1) | |
1740 | FIELD(V7M_FPCCR, HFRDY, 4, 1) | |
1741 | FIELD(V7M_FPCCR, MMRDY, 5, 1) | |
1742 | FIELD(V7M_FPCCR, BFRDY, 6, 1) | |
1743 | FIELD(V7M_FPCCR, SFRDY, 7, 1) | |
1744 | FIELD(V7M_FPCCR, MONRDY, 8, 1) | |
1745 | FIELD(V7M_FPCCR, SPLIMVIOL, 9, 1) | |
1746 | FIELD(V7M_FPCCR, UFRDY, 10, 1) | |
1747 | FIELD(V7M_FPCCR, RES0, 11, 15) | |
1748 | FIELD(V7M_FPCCR, TS, 26, 1) | |
1749 | FIELD(V7M_FPCCR, CLRONRETS, 27, 1) | |
1750 | FIELD(V7M_FPCCR, CLRONRET, 28, 1) | |
1751 | FIELD(V7M_FPCCR, LSPENS, 29, 1) | |
1752 | FIELD(V7M_FPCCR, LSPEN, 30, 1) | |
1753 | FIELD(V7M_FPCCR, ASPEN, 31, 1) | |
1754 | /* These bits are banked. Others are non-banked and live in the M_REG_S bank */ | |
1755 | #define R_V7M_FPCCR_BANKED_MASK \ | |
1756 | (R_V7M_FPCCR_LSPACT_MASK | \ | |
1757 | R_V7M_FPCCR_USER_MASK | \ | |
1758 | R_V7M_FPCCR_THREAD_MASK | \ | |
1759 | R_V7M_FPCCR_MMRDY_MASK | \ | |
1760 | R_V7M_FPCCR_SPLIMVIOL_MASK | \ | |
1761 | R_V7M_FPCCR_UFRDY_MASK | \ | |
1762 | R_V7M_FPCCR_ASPEN_MASK) | |
43bbce7f | 1763 | |
a62e62af RH |
1764 | /* |
1765 | * System register ID fields. | |
1766 | */ | |
2a14526a LL |
1767 | FIELD(CLIDR_EL1, CTYPE1, 0, 3) |
1768 | FIELD(CLIDR_EL1, CTYPE2, 3, 3) | |
1769 | FIELD(CLIDR_EL1, CTYPE3, 6, 3) | |
1770 | FIELD(CLIDR_EL1, CTYPE4, 9, 3) | |
1771 | FIELD(CLIDR_EL1, CTYPE5, 12, 3) | |
1772 | FIELD(CLIDR_EL1, CTYPE6, 15, 3) | |
1773 | FIELD(CLIDR_EL1, CTYPE7, 18, 3) | |
1774 | FIELD(CLIDR_EL1, LOUIS, 21, 3) | |
1775 | FIELD(CLIDR_EL1, LOC, 24, 3) | |
1776 | FIELD(CLIDR_EL1, LOUU, 27, 3) | |
1777 | FIELD(CLIDR_EL1, ICB, 30, 3) | |
1778 | ||
1779 | /* When FEAT_CCIDX is implemented */ | |
1780 | FIELD(CCSIDR_EL1, CCIDX_LINESIZE, 0, 3) | |
1781 | FIELD(CCSIDR_EL1, CCIDX_ASSOCIATIVITY, 3, 21) | |
1782 | FIELD(CCSIDR_EL1, CCIDX_NUMSETS, 32, 24) | |
1783 | ||
1784 | /* When FEAT_CCIDX is not implemented */ | |
1785 | FIELD(CCSIDR_EL1, LINESIZE, 0, 3) | |
1786 | FIELD(CCSIDR_EL1, ASSOCIATIVITY, 3, 10) | |
1787 | FIELD(CCSIDR_EL1, NUMSETS, 13, 15) | |
1788 | ||
1789 | FIELD(CTR_EL0, IMINLINE, 0, 4) | |
1790 | FIELD(CTR_EL0, L1IP, 14, 2) | |
1791 | FIELD(CTR_EL0, DMINLINE, 16, 4) | |
1792 | FIELD(CTR_EL0, ERG, 20, 4) | |
1793 | FIELD(CTR_EL0, CWG, 24, 4) | |
1794 | FIELD(CTR_EL0, IDC, 28, 1) | |
1795 | FIELD(CTR_EL0, DIC, 29, 1) | |
1796 | FIELD(CTR_EL0, TMINLINE, 32, 6) | |
1797 | ||
2bd5f41c AB |
1798 | FIELD(MIDR_EL1, REVISION, 0, 4) |
1799 | FIELD(MIDR_EL1, PARTNUM, 4, 12) | |
1800 | FIELD(MIDR_EL1, ARCHITECTURE, 16, 4) | |
1801 | FIELD(MIDR_EL1, VARIANT, 20, 4) | |
1802 | FIELD(MIDR_EL1, IMPLEMENTER, 24, 8) | |
1803 | ||
a62e62af RH |
1804 | FIELD(ID_ISAR0, SWAP, 0, 4) |
1805 | FIELD(ID_ISAR0, BITCOUNT, 4, 4) | |
1806 | FIELD(ID_ISAR0, BITFIELD, 8, 4) | |
1807 | FIELD(ID_ISAR0, CMPBRANCH, 12, 4) | |
1808 | FIELD(ID_ISAR0, COPROC, 16, 4) | |
1809 | FIELD(ID_ISAR0, DEBUG, 20, 4) | |
1810 | FIELD(ID_ISAR0, DIVIDE, 24, 4) | |
1811 | ||
1812 | FIELD(ID_ISAR1, ENDIAN, 0, 4) | |
1813 | FIELD(ID_ISAR1, EXCEPT, 4, 4) | |
1814 | FIELD(ID_ISAR1, EXCEPT_AR, 8, 4) | |
1815 | FIELD(ID_ISAR1, EXTEND, 12, 4) | |
1816 | FIELD(ID_ISAR1, IFTHEN, 16, 4) | |
1817 | FIELD(ID_ISAR1, IMMEDIATE, 20, 4) | |
1818 | FIELD(ID_ISAR1, INTERWORK, 24, 4) | |
1819 | FIELD(ID_ISAR1, JAZELLE, 28, 4) | |
1820 | ||
1821 | FIELD(ID_ISAR2, LOADSTORE, 0, 4) | |
1822 | FIELD(ID_ISAR2, MEMHINT, 4, 4) | |
1823 | FIELD(ID_ISAR2, MULTIACCESSINT, 8, 4) | |
1824 | FIELD(ID_ISAR2, MULT, 12, 4) | |
1825 | FIELD(ID_ISAR2, MULTS, 16, 4) | |
1826 | FIELD(ID_ISAR2, MULTU, 20, 4) | |
1827 | FIELD(ID_ISAR2, PSR_AR, 24, 4) | |
1828 | FIELD(ID_ISAR2, REVERSAL, 28, 4) | |
1829 | ||
1830 | FIELD(ID_ISAR3, SATURATE, 0, 4) | |
1831 | FIELD(ID_ISAR3, SIMD, 4, 4) | |
1832 | FIELD(ID_ISAR3, SVC, 8, 4) | |
1833 | FIELD(ID_ISAR3, SYNCHPRIM, 12, 4) | |
1834 | FIELD(ID_ISAR3, TABBRANCH, 16, 4) | |
1835 | FIELD(ID_ISAR3, T32COPY, 20, 4) | |
1836 | FIELD(ID_ISAR3, TRUENOP, 24, 4) | |
1837 | FIELD(ID_ISAR3, T32EE, 28, 4) | |
1838 | ||
1839 | FIELD(ID_ISAR4, UNPRIV, 0, 4) | |
1840 | FIELD(ID_ISAR4, WITHSHIFTS, 4, 4) | |
1841 | FIELD(ID_ISAR4, WRITEBACK, 8, 4) | |
1842 | FIELD(ID_ISAR4, SMC, 12, 4) | |
1843 | FIELD(ID_ISAR4, BARRIER, 16, 4) | |
1844 | FIELD(ID_ISAR4, SYNCHPRIM_FRAC, 20, 4) | |
1845 | FIELD(ID_ISAR4, PSR_M, 24, 4) | |
1846 | FIELD(ID_ISAR4, SWP_FRAC, 28, 4) | |
1847 | ||
1848 | FIELD(ID_ISAR5, SEVL, 0, 4) | |
1849 | FIELD(ID_ISAR5, AES, 4, 4) | |
1850 | FIELD(ID_ISAR5, SHA1, 8, 4) | |
1851 | FIELD(ID_ISAR5, SHA2, 12, 4) | |
1852 | FIELD(ID_ISAR5, CRC32, 16, 4) | |
1853 | FIELD(ID_ISAR5, RDM, 24, 4) | |
1854 | FIELD(ID_ISAR5, VCMA, 28, 4) | |
1855 | ||
1856 | FIELD(ID_ISAR6, JSCVT, 0, 4) | |
1857 | FIELD(ID_ISAR6, DP, 4, 4) | |
1858 | FIELD(ID_ISAR6, FHM, 8, 4) | |
1859 | FIELD(ID_ISAR6, SB, 12, 4) | |
1860 | FIELD(ID_ISAR6, SPECRES, 16, 4) | |
bd78b6be LL |
1861 | FIELD(ID_ISAR6, BF16, 20, 4) |
1862 | FIELD(ID_ISAR6, I8MM, 24, 4) | |
a62e62af | 1863 | |
0ae0326b PM |
1864 | FIELD(ID_MMFR0, VMSA, 0, 4) |
1865 | FIELD(ID_MMFR0, PMSA, 4, 4) | |
1866 | FIELD(ID_MMFR0, OUTERSHR, 8, 4) | |
1867 | FIELD(ID_MMFR0, SHARELVL, 12, 4) | |
1868 | FIELD(ID_MMFR0, TCM, 16, 4) | |
1869 | FIELD(ID_MMFR0, AUXREG, 20, 4) | |
1870 | FIELD(ID_MMFR0, FCSE, 24, 4) | |
1871 | FIELD(ID_MMFR0, INNERSHR, 28, 4) | |
1872 | ||
bd78b6be LL |
1873 | FIELD(ID_MMFR1, L1HVDVA, 0, 4) |
1874 | FIELD(ID_MMFR1, L1UNIVA, 4, 4) | |
1875 | FIELD(ID_MMFR1, L1HVDSW, 8, 4) | |
1876 | FIELD(ID_MMFR1, L1UNISW, 12, 4) | |
1877 | FIELD(ID_MMFR1, L1HVD, 16, 4) | |
1878 | FIELD(ID_MMFR1, L1UNI, 20, 4) | |
1879 | FIELD(ID_MMFR1, L1TSTCLN, 24, 4) | |
1880 | FIELD(ID_MMFR1, BPRED, 28, 4) | |
1881 | ||
1882 | FIELD(ID_MMFR2, L1HVDFG, 0, 4) | |
1883 | FIELD(ID_MMFR2, L1HVDBG, 4, 4) | |
1884 | FIELD(ID_MMFR2, L1HVDRNG, 8, 4) | |
1885 | FIELD(ID_MMFR2, HVDTLB, 12, 4) | |
1886 | FIELD(ID_MMFR2, UNITLB, 16, 4) | |
1887 | FIELD(ID_MMFR2, MEMBARR, 20, 4) | |
1888 | FIELD(ID_MMFR2, WFISTALL, 24, 4) | |
1889 | FIELD(ID_MMFR2, HWACCFLG, 28, 4) | |
1890 | ||
3d6ad6bb RH |
1891 | FIELD(ID_MMFR3, CMAINTVA, 0, 4) |
1892 | FIELD(ID_MMFR3, CMAINTSW, 4, 4) | |
1893 | FIELD(ID_MMFR3, BPMAINT, 8, 4) | |
1894 | FIELD(ID_MMFR3, MAINTBCST, 12, 4) | |
1895 | FIELD(ID_MMFR3, PAN, 16, 4) | |
1896 | FIELD(ID_MMFR3, COHWALK, 20, 4) | |
1897 | FIELD(ID_MMFR3, CMEMSZ, 24, 4) | |
1898 | FIELD(ID_MMFR3, SUPERSEC, 28, 4) | |
1899 | ||
ab638a32 RH |
1900 | FIELD(ID_MMFR4, SPECSEI, 0, 4) |
1901 | FIELD(ID_MMFR4, AC2, 4, 4) | |
1902 | FIELD(ID_MMFR4, XNX, 8, 4) | |
1903 | FIELD(ID_MMFR4, CNP, 12, 4) | |
1904 | FIELD(ID_MMFR4, HPDS, 16, 4) | |
1905 | FIELD(ID_MMFR4, LSM, 20, 4) | |
1906 | FIELD(ID_MMFR4, CCIDX, 24, 4) | |
1907 | FIELD(ID_MMFR4, EVT, 28, 4) | |
1908 | ||
bd78b6be LL |
1909 | FIELD(ID_MMFR5, ETS, 0, 4) |
1910 | ||
46f4976f PM |
1911 | FIELD(ID_PFR0, STATE0, 0, 4) |
1912 | FIELD(ID_PFR0, STATE1, 4, 4) | |
1913 | FIELD(ID_PFR0, STATE2, 8, 4) | |
1914 | FIELD(ID_PFR0, STATE3, 12, 4) | |
1915 | FIELD(ID_PFR0, CSV2, 16, 4) | |
1916 | FIELD(ID_PFR0, AMU, 20, 4) | |
1917 | FIELD(ID_PFR0, DIT, 24, 4) | |
1918 | FIELD(ID_PFR0, RAS, 28, 4) | |
1919 | ||
dfc523a8 PM |
1920 | FIELD(ID_PFR1, PROGMOD, 0, 4) |
1921 | FIELD(ID_PFR1, SECURITY, 4, 4) | |
1922 | FIELD(ID_PFR1, MPROGMOD, 8, 4) | |
1923 | FIELD(ID_PFR1, VIRTUALIZATION, 12, 4) | |
1924 | FIELD(ID_PFR1, GENTIMER, 16, 4) | |
1925 | FIELD(ID_PFR1, SEC_FRAC, 20, 4) | |
1926 | FIELD(ID_PFR1, VIRT_FRAC, 24, 4) | |
1927 | FIELD(ID_PFR1, GIC, 28, 4) | |
1928 | ||
bd78b6be LL |
1929 | FIELD(ID_PFR2, CSV3, 0, 4) |
1930 | FIELD(ID_PFR2, SSBS, 4, 4) | |
1931 | FIELD(ID_PFR2, RAS_FRAC, 8, 4) | |
1932 | ||
a62e62af RH |
1933 | FIELD(ID_AA64ISAR0, AES, 4, 4) |
1934 | FIELD(ID_AA64ISAR0, SHA1, 8, 4) | |
1935 | FIELD(ID_AA64ISAR0, SHA2, 12, 4) | |
1936 | FIELD(ID_AA64ISAR0, CRC32, 16, 4) | |
1937 | FIELD(ID_AA64ISAR0, ATOMIC, 20, 4) | |
1938 | FIELD(ID_AA64ISAR0, RDM, 28, 4) | |
1939 | FIELD(ID_AA64ISAR0, SHA3, 32, 4) | |
1940 | FIELD(ID_AA64ISAR0, SM3, 36, 4) | |
1941 | FIELD(ID_AA64ISAR0, SM4, 40, 4) | |
1942 | FIELD(ID_AA64ISAR0, DP, 44, 4) | |
1943 | FIELD(ID_AA64ISAR0, FHM, 48, 4) | |
1944 | FIELD(ID_AA64ISAR0, TS, 52, 4) | |
1945 | FIELD(ID_AA64ISAR0, TLB, 56, 4) | |
1946 | FIELD(ID_AA64ISAR0, RNDR, 60, 4) | |
1947 | ||
1948 | FIELD(ID_AA64ISAR1, DPB, 0, 4) | |
1949 | FIELD(ID_AA64ISAR1, APA, 4, 4) | |
1950 | FIELD(ID_AA64ISAR1, API, 8, 4) | |
1951 | FIELD(ID_AA64ISAR1, JSCVT, 12, 4) | |
1952 | FIELD(ID_AA64ISAR1, FCMA, 16, 4) | |
1953 | FIELD(ID_AA64ISAR1, LRCPC, 20, 4) | |
1954 | FIELD(ID_AA64ISAR1, GPA, 24, 4) | |
1955 | FIELD(ID_AA64ISAR1, GPI, 28, 4) | |
1956 | FIELD(ID_AA64ISAR1, FRINTTS, 32, 4) | |
1957 | FIELD(ID_AA64ISAR1, SB, 36, 4) | |
1958 | FIELD(ID_AA64ISAR1, SPECRES, 40, 4) | |
00a92832 LL |
1959 | FIELD(ID_AA64ISAR1, BF16, 44, 4) |
1960 | FIELD(ID_AA64ISAR1, DGH, 48, 4) | |
1961 | FIELD(ID_AA64ISAR1, I8MM, 52, 4) | |
a62e62af | 1962 | |
cd208a1c RH |
1963 | FIELD(ID_AA64PFR0, EL0, 0, 4) |
1964 | FIELD(ID_AA64PFR0, EL1, 4, 4) | |
1965 | FIELD(ID_AA64PFR0, EL2, 8, 4) | |
1966 | FIELD(ID_AA64PFR0, EL3, 12, 4) | |
1967 | FIELD(ID_AA64PFR0, FP, 16, 4) | |
1968 | FIELD(ID_AA64PFR0, ADVSIMD, 20, 4) | |
1969 | FIELD(ID_AA64PFR0, GIC, 24, 4) | |
1970 | FIELD(ID_AA64PFR0, RAS, 28, 4) | |
1971 | FIELD(ID_AA64PFR0, SVE, 32, 4) | |
00a92832 LL |
1972 | FIELD(ID_AA64PFR0, SEL2, 36, 4) |
1973 | FIELD(ID_AA64PFR0, MPAM, 40, 4) | |
1974 | FIELD(ID_AA64PFR0, AMU, 44, 4) | |
1975 | FIELD(ID_AA64PFR0, DIT, 48, 4) | |
1976 | FIELD(ID_AA64PFR0, CSV2, 56, 4) | |
1977 | FIELD(ID_AA64PFR0, CSV3, 60, 4) | |
cd208a1c | 1978 | |
be53b6f4 | 1979 | FIELD(ID_AA64PFR1, BT, 0, 4) |
9a286bcd | 1980 | FIELD(ID_AA64PFR1, SSBS, 4, 4) |
be53b6f4 RH |
1981 | FIELD(ID_AA64PFR1, MTE, 8, 4) |
1982 | FIELD(ID_AA64PFR1, RAS_FRAC, 12, 4) | |
00a92832 | 1983 | FIELD(ID_AA64PFR1, MPAM_FRAC, 16, 4) |
be53b6f4 | 1984 | |
3dc91ddb PM |
1985 | FIELD(ID_AA64MMFR0, PARANGE, 0, 4) |
1986 | FIELD(ID_AA64MMFR0, ASIDBITS, 4, 4) | |
1987 | FIELD(ID_AA64MMFR0, BIGEND, 8, 4) | |
1988 | FIELD(ID_AA64MMFR0, SNSMEM, 12, 4) | |
1989 | FIELD(ID_AA64MMFR0, BIGENDEL0, 16, 4) | |
1990 | FIELD(ID_AA64MMFR0, TGRAN16, 20, 4) | |
1991 | FIELD(ID_AA64MMFR0, TGRAN64, 24, 4) | |
1992 | FIELD(ID_AA64MMFR0, TGRAN4, 28, 4) | |
1993 | FIELD(ID_AA64MMFR0, TGRAN16_2, 32, 4) | |
1994 | FIELD(ID_AA64MMFR0, TGRAN64_2, 36, 4) | |
1995 | FIELD(ID_AA64MMFR0, TGRAN4_2, 40, 4) | |
1996 | FIELD(ID_AA64MMFR0, EXS, 44, 4) | |
00a92832 LL |
1997 | FIELD(ID_AA64MMFR0, FGT, 56, 4) |
1998 | FIELD(ID_AA64MMFR0, ECV, 60, 4) | |
3dc91ddb PM |
1999 | |
2000 | FIELD(ID_AA64MMFR1, HAFDBS, 0, 4) | |
2001 | FIELD(ID_AA64MMFR1, VMIDBITS, 4, 4) | |
2002 | FIELD(ID_AA64MMFR1, VH, 8, 4) | |
2003 | FIELD(ID_AA64MMFR1, HPDS, 12, 4) | |
2004 | FIELD(ID_AA64MMFR1, LO, 16, 4) | |
2005 | FIELD(ID_AA64MMFR1, PAN, 20, 4) | |
2006 | FIELD(ID_AA64MMFR1, SPECSEI, 24, 4) | |
2007 | FIELD(ID_AA64MMFR1, XNX, 28, 4) | |
00a92832 LL |
2008 | FIELD(ID_AA64MMFR1, TWED, 32, 4) |
2009 | FIELD(ID_AA64MMFR1, ETS, 36, 4) | |
3dc91ddb | 2010 | |
64761e10 RH |
2011 | FIELD(ID_AA64MMFR2, CNP, 0, 4) |
2012 | FIELD(ID_AA64MMFR2, UAO, 4, 4) | |
2013 | FIELD(ID_AA64MMFR2, LSM, 8, 4) | |
2014 | FIELD(ID_AA64MMFR2, IESB, 12, 4) | |
2015 | FIELD(ID_AA64MMFR2, VARANGE, 16, 4) | |
2016 | FIELD(ID_AA64MMFR2, CCIDX, 20, 4) | |
2017 | FIELD(ID_AA64MMFR2, NV, 24, 4) | |
2018 | FIELD(ID_AA64MMFR2, ST, 28, 4) | |
2019 | FIELD(ID_AA64MMFR2, AT, 32, 4) | |
2020 | FIELD(ID_AA64MMFR2, IDS, 36, 4) | |
2021 | FIELD(ID_AA64MMFR2, FWB, 40, 4) | |
2022 | FIELD(ID_AA64MMFR2, TTL, 48, 4) | |
2023 | FIELD(ID_AA64MMFR2, BBM, 52, 4) | |
2024 | FIELD(ID_AA64MMFR2, EVT, 56, 4) | |
2025 | FIELD(ID_AA64MMFR2, E0PD, 60, 4) | |
2026 | ||
ceb2744b PM |
2027 | FIELD(ID_AA64DFR0, DEBUGVER, 0, 4) |
2028 | FIELD(ID_AA64DFR0, TRACEVER, 4, 4) | |
2029 | FIELD(ID_AA64DFR0, PMUVER, 8, 4) | |
2030 | FIELD(ID_AA64DFR0, BRPS, 12, 4) | |
2031 | FIELD(ID_AA64DFR0, WRPS, 20, 4) | |
2032 | FIELD(ID_AA64DFR0, CTX_CMPS, 28, 4) | |
2033 | FIELD(ID_AA64DFR0, PMSVER, 32, 4) | |
2034 | FIELD(ID_AA64DFR0, DOUBLELOCK, 36, 4) | |
2035 | FIELD(ID_AA64DFR0, TRACEFILT, 40, 4) | |
00a92832 | 2036 | FIELD(ID_AA64DFR0, MTPMU, 48, 4) |
ceb2744b | 2037 | |
2dc10fa2 RH |
2038 | FIELD(ID_AA64ZFR0, SVEVER, 0, 4) |
2039 | FIELD(ID_AA64ZFR0, AES, 4, 4) | |
2040 | FIELD(ID_AA64ZFR0, BITPERM, 16, 4) | |
2041 | FIELD(ID_AA64ZFR0, BFLOAT16, 20, 4) | |
2042 | FIELD(ID_AA64ZFR0, SHA3, 32, 4) | |
2043 | FIELD(ID_AA64ZFR0, SM4, 40, 4) | |
2044 | FIELD(ID_AA64ZFR0, I8MM, 44, 4) | |
2045 | FIELD(ID_AA64ZFR0, F32MM, 52, 4) | |
2046 | FIELD(ID_AA64ZFR0, F64MM, 56, 4) | |
2047 | ||
beceb99c AL |
2048 | FIELD(ID_DFR0, COPDBG, 0, 4) |
2049 | FIELD(ID_DFR0, COPSDBG, 4, 4) | |
2050 | FIELD(ID_DFR0, MMAPDBG, 8, 4) | |
2051 | FIELD(ID_DFR0, COPTRC, 12, 4) | |
2052 | FIELD(ID_DFR0, MMAPTRC, 16, 4) | |
2053 | FIELD(ID_DFR0, MPROFDBG, 20, 4) | |
2054 | FIELD(ID_DFR0, PERFMON, 24, 4) | |
2055 | FIELD(ID_DFR0, TRACEFILT, 28, 4) | |
2056 | ||
bd78b6be LL |
2057 | FIELD(ID_DFR1, MTPMU, 0, 4) |
2058 | ||
88ce6c6e PM |
2059 | FIELD(DBGDIDR, SE_IMP, 12, 1) |
2060 | FIELD(DBGDIDR, NSUHD_IMP, 14, 1) | |
2061 | FIELD(DBGDIDR, VERSION, 16, 4) | |
2062 | FIELD(DBGDIDR, CTX_CMPS, 20, 4) | |
2063 | FIELD(DBGDIDR, BRPS, 24, 4) | |
2064 | FIELD(DBGDIDR, WRPS, 28, 4) | |
2065 | ||
602f6e42 PM |
2066 | FIELD(MVFR0, SIMDREG, 0, 4) |
2067 | FIELD(MVFR0, FPSP, 4, 4) | |
2068 | FIELD(MVFR0, FPDP, 8, 4) | |
2069 | FIELD(MVFR0, FPTRAP, 12, 4) | |
2070 | FIELD(MVFR0, FPDIVIDE, 16, 4) | |
2071 | FIELD(MVFR0, FPSQRT, 20, 4) | |
2072 | FIELD(MVFR0, FPSHVEC, 24, 4) | |
2073 | FIELD(MVFR0, FPROUND, 28, 4) | |
2074 | ||
2075 | FIELD(MVFR1, FPFTZ, 0, 4) | |
2076 | FIELD(MVFR1, FPDNAN, 4, 4) | |
dfc523a8 PM |
2077 | FIELD(MVFR1, SIMDLS, 8, 4) /* A-profile only */ |
2078 | FIELD(MVFR1, SIMDINT, 12, 4) /* A-profile only */ | |
2079 | FIELD(MVFR1, SIMDSP, 16, 4) /* A-profile only */ | |
2080 | FIELD(MVFR1, SIMDHP, 20, 4) /* A-profile only */ | |
2081 | FIELD(MVFR1, MVE, 8, 4) /* M-profile only */ | |
2082 | FIELD(MVFR1, FP16, 20, 4) /* M-profile only */ | |
602f6e42 PM |
2083 | FIELD(MVFR1, FPHP, 24, 4) |
2084 | FIELD(MVFR1, SIMDFMAC, 28, 4) | |
2085 | ||
2086 | FIELD(MVFR2, SIMDMISC, 0, 4) | |
2087 | FIELD(MVFR2, FPMISC, 4, 4) | |
2088 | ||
43bbce7f PM |
2089 | QEMU_BUILD_BUG_ON(ARRAY_SIZE(((ARMCPU *)0)->ccsidr) <= R_V7M_CSSELR_INDEX_MASK); |
2090 | ||
ce854d7c BC |
2091 | /* If adding a feature bit which corresponds to a Linux ELF |
2092 | * HWCAP bit, remember to update the feature-bit-to-hwcap | |
2093 | * mapping in linux-user/elfload.c:get_elf_hwcap(). | |
2094 | */ | |
40f137e1 | 2095 | enum arm_features { |
c1713132 AZ |
2096 | ARM_FEATURE_AUXCR, /* ARM1026 Auxiliary control register. */ |
2097 | ARM_FEATURE_XSCALE, /* Intel XScale extensions. */ | |
ce819861 | 2098 | ARM_FEATURE_IWMMXT, /* Intel iwMMXt extension. */ |
9ee6e8bb PB |
2099 | ARM_FEATURE_V6, |
2100 | ARM_FEATURE_V6K, | |
2101 | ARM_FEATURE_V7, | |
2102 | ARM_FEATURE_THUMB2, | |
452a0955 | 2103 | ARM_FEATURE_PMSA, /* no MMU; may have Memory Protection Unit */ |
9ee6e8bb | 2104 | ARM_FEATURE_NEON, |
9ee6e8bb | 2105 | ARM_FEATURE_M, /* Microcontroller profile. */ |
fe1479c3 | 2106 | ARM_FEATURE_OMAPCP, /* OMAP specific CP15 ops handling. */ |
e1bbf446 | 2107 | ARM_FEATURE_THUMB2EE, |
be5e7a76 | 2108 | ARM_FEATURE_V7MP, /* v7 Multiprocessing Extensions */ |
5110e683 | 2109 | ARM_FEATURE_V7VE, /* v7 Virtualization Extensions (non-EL2 parts) */ |
be5e7a76 DES |
2110 | ARM_FEATURE_V4T, |
2111 | ARM_FEATURE_V5, | |
5bc95aa2 | 2112 | ARM_FEATURE_STRONGARM, |
906879a9 | 2113 | ARM_FEATURE_VAPA, /* cp15 VA to PA lookups */ |
0383ac00 | 2114 | ARM_FEATURE_GENERIC_TIMER, |
06ed5d66 | 2115 | ARM_FEATURE_MVFR, /* Media and VFP Feature Registers 0 and 1 */ |
1047b9d7 | 2116 | ARM_FEATURE_DUMMY_C15_REGS, /* RAZ/WI all of cp15 crn=15 */ |
c4804214 PM |
2117 | ARM_FEATURE_CACHE_TEST_CLEAN, /* 926/1026 style test-and-clean ops */ |
2118 | ARM_FEATURE_CACHE_DIRTY_REG, /* 1136/1176 cache dirty status register */ | |
2119 | ARM_FEATURE_CACHE_BLOCK_OPS, /* v6 optional cache block operations */ | |
81bdde9d | 2120 | ARM_FEATURE_MPIDR, /* has cp15 MPIDR */ |
de9b05b8 | 2121 | ARM_FEATURE_LPAE, /* has Large Physical Address Extension */ |
81e69fb0 | 2122 | ARM_FEATURE_V8, |
3926cc84 | 2123 | ARM_FEATURE_AARCH64, /* supports 64 bit mode */ |
d8ba780b | 2124 | ARM_FEATURE_CBAR, /* has cp15 CBAR */ |
f318cec6 | 2125 | ARM_FEATURE_CBAR_RO, /* has cp15 CBAR and it is read-only */ |
cca7c2f5 | 2126 | ARM_FEATURE_EL2, /* has EL2 Virtualization support */ |
1fe8141e | 2127 | ARM_FEATURE_EL3, /* has EL3 Secure monitor support */ |
62b44f05 | 2128 | ARM_FEATURE_THUMB_DSP, /* DSP insns supported in the Thumb encodings */ |
929e754d | 2129 | ARM_FEATURE_PMU, /* has PMU support */ |
91db4642 | 2130 | ARM_FEATURE_VBAR, /* has cp15 VBAR */ |
1e577cc7 | 2131 | ARM_FEATURE_M_SECURITY, /* M profile Security Extension */ |
cc2ae7c9 | 2132 | ARM_FEATURE_M_MAIN, /* M profile Main Extension */ |
5d2555a1 | 2133 | ARM_FEATURE_V8_1M, /* M profile extras only in v8.1M and later */ |
40f137e1 PB |
2134 | }; |
2135 | ||
2136 | static inline int arm_feature(CPUARMState *env, int feature) | |
2137 | { | |
918f5dca | 2138 | return (env->features & (1ULL << feature)) != 0; |
40f137e1 PB |
2139 | } |
2140 | ||
0df9142d AJ |
2141 | void arm_cpu_finalize_features(ARMCPU *cpu, Error **errp); |
2142 | ||
19e0fefa FA |
2143 | #if !defined(CONFIG_USER_ONLY) |
2144 | /* Return true if exception levels below EL3 are in secure state, | |
2145 | * or would be following an exception return to that level. | |
2146 | * Unlike arm_is_secure() (which is always a question about the | |
2147 | * _current_ state of the CPU) this doesn't care about the current | |
2148 | * EL or mode. | |
2149 | */ | |
2150 | static inline bool arm_is_secure_below_el3(CPUARMState *env) | |
2151 | { | |
2152 | if (arm_feature(env, ARM_FEATURE_EL3)) { | |
2153 | return !(env->cp15.scr_el3 & SCR_NS); | |
2154 | } else { | |
6b7f0b61 | 2155 | /* If EL3 is not supported then the secure state is implementation |
19e0fefa FA |
2156 | * defined, in which case QEMU defaults to non-secure. |
2157 | */ | |
2158 | return false; | |
2159 | } | |
2160 | } | |
2161 | ||
71205876 PM |
2162 | /* Return true if the CPU is AArch64 EL3 or AArch32 Mon */ |
2163 | static inline bool arm_is_el3_or_mon(CPUARMState *env) | |
19e0fefa FA |
2164 | { |
2165 | if (arm_feature(env, ARM_FEATURE_EL3)) { | |
2166 | if (is_a64(env) && extract32(env->pstate, 2, 2) == 3) { | |
2167 | /* CPU currently in AArch64 state and EL3 */ | |
2168 | return true; | |
2169 | } else if (!is_a64(env) && | |
2170 | (env->uncached_cpsr & CPSR_M) == ARM_CPU_MODE_MON) { | |
2171 | /* CPU currently in AArch32 state and monitor mode */ | |
2172 | return true; | |
2173 | } | |
2174 | } | |
71205876 PM |
2175 | return false; |
2176 | } | |
2177 | ||
2178 | /* Return true if the processor is in secure state */ | |
2179 | static inline bool arm_is_secure(CPUARMState *env) | |
2180 | { | |
2181 | if (arm_is_el3_or_mon(env)) { | |
2182 | return true; | |
2183 | } | |
19e0fefa FA |
2184 | return arm_is_secure_below_el3(env); |
2185 | } | |
2186 | ||
f3ee5160 RDC |
2187 | /* |
2188 | * Return true if the current security state has AArch64 EL2 or AArch32 Hyp. | |
2189 | * This corresponds to the pseudocode EL2Enabled() | |
2190 | */ | |
2191 | static inline bool arm_is_el2_enabled(CPUARMState *env) | |
2192 | { | |
2193 | if (arm_feature(env, ARM_FEATURE_EL2)) { | |
926c1b97 RDC |
2194 | if (arm_is_secure_below_el3(env)) { |
2195 | return (env->cp15.scr_el3 & SCR_EEL2) != 0; | |
2196 | } | |
2197 | return true; | |
f3ee5160 RDC |
2198 | } |
2199 | return false; | |
2200 | } | |
2201 | ||
19e0fefa FA |
2202 | #else |
2203 | static inline bool arm_is_secure_below_el3(CPUARMState *env) | |
2204 | { | |
2205 | return false; | |
2206 | } | |
2207 | ||
2208 | static inline bool arm_is_secure(CPUARMState *env) | |
2209 | { | |
2210 | return false; | |
2211 | } | |
f3ee5160 RDC |
2212 | |
2213 | static inline bool arm_is_el2_enabled(CPUARMState *env) | |
2214 | { | |
2215 | return false; | |
2216 | } | |
19e0fefa FA |
2217 | #endif |
2218 | ||
f7778444 RH |
2219 | /** |
2220 | * arm_hcr_el2_eff(): Return the effective value of HCR_EL2. | |
2221 | * E.g. when in secure state, fields in HCR_EL2 are suppressed, | |
2222 | * "for all purposes other than a direct read or write access of HCR_EL2." | |
2223 | * Not included here is HCR_RW. | |
2224 | */ | |
2225 | uint64_t arm_hcr_el2_eff(CPUARMState *env); | |
2226 | ||
1f79ee32 PM |
2227 | /* Return true if the specified exception level is running in AArch64 state. */ |
2228 | static inline bool arm_el_is_aa64(CPUARMState *env, int el) | |
2229 | { | |
446c81ab PM |
2230 | /* This isn't valid for EL0 (if we're in EL0, is_a64() is what you want, |
2231 | * and if we're not in EL0 then the state of EL0 isn't well defined.) | |
1f79ee32 | 2232 | */ |
446c81ab PM |
2233 | assert(el >= 1 && el <= 3); |
2234 | bool aa64 = arm_feature(env, ARM_FEATURE_AARCH64); | |
592125f8 | 2235 | |
446c81ab PM |
2236 | /* The highest exception level is always at the maximum supported |
2237 | * register width, and then lower levels have a register width controlled | |
2238 | * by bits in the SCR or HCR registers. | |
1f79ee32 | 2239 | */ |
446c81ab PM |
2240 | if (el == 3) { |
2241 | return aa64; | |
2242 | } | |
2243 | ||
926c1b97 RDC |
2244 | if (arm_feature(env, ARM_FEATURE_EL3) && |
2245 | ((env->cp15.scr_el3 & SCR_NS) || !(env->cp15.scr_el3 & SCR_EEL2))) { | |
446c81ab PM |
2246 | aa64 = aa64 && (env->cp15.scr_el3 & SCR_RW); |
2247 | } | |
2248 | ||
2249 | if (el == 2) { | |
2250 | return aa64; | |
2251 | } | |
2252 | ||
e6ef0169 | 2253 | if (arm_is_el2_enabled(env)) { |
446c81ab PM |
2254 | aa64 = aa64 && (env->cp15.hcr_el2 & HCR_RW); |
2255 | } | |
2256 | ||
2257 | return aa64; | |
1f79ee32 PM |
2258 | } |
2259 | ||
3f342b9e SF |
2260 | /* Function for determing whether guest cp register reads and writes should |
2261 | * access the secure or non-secure bank of a cp register. When EL3 is | |
2262 | * operating in AArch32 state, the NS-bit determines whether the secure | |
2263 | * instance of a cp register should be used. When EL3 is AArch64 (or if | |
2264 | * it doesn't exist at all) then there is no register banking, and all | |
2265 | * accesses are to the non-secure version. | |
2266 | */ | |
2267 | static inline bool access_secure_reg(CPUARMState *env) | |
2268 | { | |
2269 | bool ret = (arm_feature(env, ARM_FEATURE_EL3) && | |
2270 | !arm_el_is_aa64(env, 3) && | |
2271 | !(env->cp15.scr_el3 & SCR_NS)); | |
2272 | ||
2273 | return ret; | |
2274 | } | |
2275 | ||
ea30a4b8 FA |
2276 | /* Macros for accessing a specified CP register bank */ |
2277 | #define A32_BANKED_REG_GET(_env, _regname, _secure) \ | |
2278 | ((_secure) ? (_env)->cp15._regname##_s : (_env)->cp15._regname##_ns) | |
2279 | ||
2280 | #define A32_BANKED_REG_SET(_env, _regname, _secure, _val) \ | |
2281 | do { \ | |
2282 | if (_secure) { \ | |
2283 | (_env)->cp15._regname##_s = (_val); \ | |
2284 | } else { \ | |
2285 | (_env)->cp15._regname##_ns = (_val); \ | |
2286 | } \ | |
2287 | } while (0) | |
2288 | ||
2289 | /* Macros for automatically accessing a specific CP register bank depending on | |
2290 | * the current secure state of the system. These macros are not intended for | |
2291 | * supporting instruction translation reads/writes as these are dependent | |
2292 | * solely on the SCR.NS bit and not the mode. | |
2293 | */ | |
2294 | #define A32_BANKED_CURRENT_REG_GET(_env, _regname) \ | |
2295 | A32_BANKED_REG_GET((_env), _regname, \ | |
2cde031f | 2296 | (arm_is_secure(_env) && !arm_el_is_aa64((_env), 3))) |
ea30a4b8 FA |
2297 | |
2298 | #define A32_BANKED_CURRENT_REG_SET(_env, _regname, _val) \ | |
2299 | A32_BANKED_REG_SET((_env), _regname, \ | |
2cde031f | 2300 | (arm_is_secure(_env) && !arm_el_is_aa64((_env), 3)), \ |
ea30a4b8 FA |
2301 | (_val)) |
2302 | ||
0442428a | 2303 | void arm_cpu_list(void); |
012a906b GB |
2304 | uint32_t arm_phys_excp_target_el(CPUState *cs, uint32_t excp_idx, |
2305 | uint32_t cur_el, bool secure); | |
40f137e1 | 2306 | |
9ee6e8bb | 2307 | /* Interface between CPU and Interrupt controller. */ |
7ecdaa4a PM |
2308 | #ifndef CONFIG_USER_ONLY |
2309 | bool armv7m_nvic_can_take_pending_exception(void *opaque); | |
2310 | #else | |
2311 | static inline bool armv7m_nvic_can_take_pending_exception(void *opaque) | |
2312 | { | |
2313 | return true; | |
2314 | } | |
2315 | #endif | |
2fb50a33 PM |
2316 | /** |
2317 | * armv7m_nvic_set_pending: mark the specified exception as pending | |
2318 | * @opaque: the NVIC | |
2319 | * @irq: the exception number to mark pending | |
2320 | * @secure: false for non-banked exceptions or for the nonsecure | |
2321 | * version of a banked exception, true for the secure version of a banked | |
2322 | * exception. | |
2323 | * | |
2324 | * Marks the specified exception as pending. Note that we will assert() | |
2325 | * if @secure is true and @irq does not specify one of the fixed set | |
2326 | * of architecturally banked exceptions. | |
2327 | */ | |
2328 | void armv7m_nvic_set_pending(void *opaque, int irq, bool secure); | |
5ede82b8 PM |
2329 | /** |
2330 | * armv7m_nvic_set_pending_derived: mark this derived exception as pending | |
2331 | * @opaque: the NVIC | |
2332 | * @irq: the exception number to mark pending | |
2333 | * @secure: false for non-banked exceptions or for the nonsecure | |
2334 | * version of a banked exception, true for the secure version of a banked | |
2335 | * exception. | |
2336 | * | |
2337 | * Similar to armv7m_nvic_set_pending(), but specifically for derived | |
2338 | * exceptions (exceptions generated in the course of trying to take | |
2339 | * a different exception). | |
2340 | */ | |
2341 | void armv7m_nvic_set_pending_derived(void *opaque, int irq, bool secure); | |
a99ba8ab PM |
2342 | /** |
2343 | * armv7m_nvic_set_pending_lazyfp: mark this lazy FP exception as pending | |
2344 | * @opaque: the NVIC | |
2345 | * @irq: the exception number to mark pending | |
2346 | * @secure: false for non-banked exceptions or for the nonsecure | |
2347 | * version of a banked exception, true for the secure version of a banked | |
2348 | * exception. | |
2349 | * | |
2350 | * Similar to armv7m_nvic_set_pending(), but specifically for exceptions | |
2351 | * generated in the course of lazy stacking of FP registers. | |
2352 | */ | |
2353 | void armv7m_nvic_set_pending_lazyfp(void *opaque, int irq, bool secure); | |
6c948518 PM |
2354 | /** |
2355 | * armv7m_nvic_get_pending_irq_info: return highest priority pending | |
2356 | * exception, and whether it targets Secure state | |
2357 | * @opaque: the NVIC | |
2358 | * @pirq: set to pending exception number | |
2359 | * @ptargets_secure: set to whether pending exception targets Secure | |
2360 | * | |
2361 | * This function writes the number of the highest priority pending | |
2362 | * exception (the one which would be made active by | |
2363 | * armv7m_nvic_acknowledge_irq()) to @pirq, and sets @ptargets_secure | |
2364 | * to true if the current highest priority pending exception should | |
2365 | * be taken to Secure state, false for NS. | |
2366 | */ | |
2367 | void armv7m_nvic_get_pending_irq_info(void *opaque, int *pirq, | |
2368 | bool *ptargets_secure); | |
5cb18069 PM |
2369 | /** |
2370 | * armv7m_nvic_acknowledge_irq: make highest priority pending exception active | |
2371 | * @opaque: the NVIC | |
2372 | * | |
2373 | * Move the current highest priority pending exception from the pending | |
2374 | * state to the active state, and update v7m.exception to indicate that | |
2375 | * it is the exception currently being handled. | |
5cb18069 | 2376 | */ |
6c948518 | 2377 | void armv7m_nvic_acknowledge_irq(void *opaque); |
aa488fe3 PM |
2378 | /** |
2379 | * armv7m_nvic_complete_irq: complete specified interrupt or exception | |
2380 | * @opaque: the NVIC | |
2381 | * @irq: the exception number to complete | |
5cb18069 | 2382 | * @secure: true if this exception was secure |
aa488fe3 PM |
2383 | * |
2384 | * Returns: -1 if the irq was not active | |
2385 | * 1 if completing this irq brought us back to base (no active irqs) | |
2386 | * 0 if there is still an irq active after this one was completed | |
2387 | * (Ignoring -1, this is the same as the RETTOBASE value before completion.) | |
2388 | */ | |
5cb18069 | 2389 | int armv7m_nvic_complete_irq(void *opaque, int irq, bool secure); |
b593c2b8 PM |
2390 | /** |
2391 | * armv7m_nvic_get_ready_status(void *opaque, int irq, bool secure) | |
2392 | * @opaque: the NVIC | |
2393 | * @irq: the exception number to mark pending | |
2394 | * @secure: false for non-banked exceptions or for the nonsecure | |
2395 | * version of a banked exception, true for the secure version of a banked | |
2396 | * exception. | |
2397 | * | |
2398 | * Return whether an exception is "ready", i.e. whether the exception is | |
2399 | * enabled and is configured at a priority which would allow it to | |
2400 | * interrupt the current execution priority. This controls whether the | |
2401 | * RDY bit for it in the FPCCR is set. | |
2402 | */ | |
2403 | bool armv7m_nvic_get_ready_status(void *opaque, int irq, bool secure); | |
42a6686b PM |
2404 | /** |
2405 | * armv7m_nvic_raw_execution_priority: return the raw execution priority | |
2406 | * @opaque: the NVIC | |
2407 | * | |
2408 | * Returns: the raw execution priority as defined by the v8M architecture. | |
2409 | * This is the execution priority minus the effects of AIRCR.PRIS, | |
2410 | * and minus any PRIMASK/FAULTMASK/BASEPRI priority boosting. | |
2411 | * (v8M ARM ARM I_PKLD.) | |
2412 | */ | |
2413 | int armv7m_nvic_raw_execution_priority(void *opaque); | |
5d479199 PM |
2414 | /** |
2415 | * armv7m_nvic_neg_prio_requested: return true if the requested execution | |
2416 | * priority is negative for the specified security state. | |
2417 | * @opaque: the NVIC | |
2418 | * @secure: the security state to test | |
2419 | * This corresponds to the pseudocode IsReqExecPriNeg(). | |
2420 | */ | |
2421 | #ifndef CONFIG_USER_ONLY | |
2422 | bool armv7m_nvic_neg_prio_requested(void *opaque, bool secure); | |
2423 | #else | |
2424 | static inline bool armv7m_nvic_neg_prio_requested(void *opaque, bool secure) | |
2425 | { | |
2426 | return false; | |
2427 | } | |
2428 | #endif | |
9ee6e8bb | 2429 | |
4b6a83fb PM |
2430 | /* Interface for defining coprocessor registers. |
2431 | * Registers are defined in tables of arm_cp_reginfo structs | |
2432 | * which are passed to define_arm_cp_regs(). | |
2433 | */ | |
2434 | ||
2435 | /* When looking up a coprocessor register we look for it | |
2436 | * via an integer which encodes all of: | |
2437 | * coprocessor number | |
2438 | * Crn, Crm, opc1, opc2 fields | |
2439 | * 32 or 64 bit register (ie is it accessed via MRC/MCR | |
2440 | * or via MRRC/MCRR?) | |
51a79b03 | 2441 | * non-secure/secure bank (AArch32 only) |
4b6a83fb PM |
2442 | * We allow 4 bits for opc1 because MRRC/MCRR have a 4 bit field. |
2443 | * (In this case crn and opc2 should be zero.) | |
f5a0a5a5 PM |
2444 | * For AArch64, there is no 32/64 bit size distinction; |
2445 | * instead all registers have a 2 bit op0, 3 bit op1 and op2, | |
2446 | * and 4 bit CRn and CRm. The encoding patterns are chosen | |
2447 | * to be easy to convert to and from the KVM encodings, and also | |
2448 | * so that the hashtable can contain both AArch32 and AArch64 | |
2449 | * registers (to allow for interprocessing where we might run | |
2450 | * 32 bit code on a 64 bit core). | |
4b6a83fb | 2451 | */ |
f5a0a5a5 PM |
2452 | /* This bit is private to our hashtable cpreg; in KVM register |
2453 | * IDs the AArch64/32 distinction is the KVM_REG_ARM/ARM64 | |
2454 | * in the upper bits of the 64 bit ID. | |
2455 | */ | |
2456 | #define CP_REG_AA64_SHIFT 28 | |
2457 | #define CP_REG_AA64_MASK (1 << CP_REG_AA64_SHIFT) | |
2458 | ||
51a79b03 PM |
2459 | /* To enable banking of coprocessor registers depending on ns-bit we |
2460 | * add a bit to distinguish between secure and non-secure cpregs in the | |
2461 | * hashtable. | |
2462 | */ | |
2463 | #define CP_REG_NS_SHIFT 29 | |
2464 | #define CP_REG_NS_MASK (1 << CP_REG_NS_SHIFT) | |
2465 | ||
2466 | #define ENCODE_CP_REG(cp, is64, ns, crn, crm, opc1, opc2) \ | |
2467 | ((ns) << CP_REG_NS_SHIFT | ((cp) << 16) | ((is64) << 15) | \ | |
2468 | ((crn) << 11) | ((crm) << 7) | ((opc1) << 3) | (opc2)) | |
4b6a83fb | 2469 | |
f5a0a5a5 PM |
2470 | #define ENCODE_AA64_CP_REG(cp, crn, crm, op0, op1, op2) \ |
2471 | (CP_REG_AA64_MASK | \ | |
2472 | ((cp) << CP_REG_ARM_COPROC_SHIFT) | \ | |
2473 | ((op0) << CP_REG_ARM64_SYSREG_OP0_SHIFT) | \ | |
2474 | ((op1) << CP_REG_ARM64_SYSREG_OP1_SHIFT) | \ | |
2475 | ((crn) << CP_REG_ARM64_SYSREG_CRN_SHIFT) | \ | |
2476 | ((crm) << CP_REG_ARM64_SYSREG_CRM_SHIFT) | \ | |
2477 | ((op2) << CP_REG_ARM64_SYSREG_OP2_SHIFT)) | |
2478 | ||
721fae12 PM |
2479 | /* Convert a full 64 bit KVM register ID to the truncated 32 bit |
2480 | * version used as a key for the coprocessor register hashtable | |
2481 | */ | |
2482 | static inline uint32_t kvm_to_cpreg_id(uint64_t kvmid) | |
2483 | { | |
2484 | uint32_t cpregid = kvmid; | |
f5a0a5a5 PM |
2485 | if ((kvmid & CP_REG_ARCH_MASK) == CP_REG_ARM64) { |
2486 | cpregid |= CP_REG_AA64_MASK; | |
51a79b03 PM |
2487 | } else { |
2488 | if ((kvmid & CP_REG_SIZE_MASK) == CP_REG_SIZE_U64) { | |
2489 | cpregid |= (1 << 15); | |
2490 | } | |
2491 | ||
2492 | /* KVM is always non-secure so add the NS flag on AArch32 register | |
2493 | * entries. | |
2494 | */ | |
2495 | cpregid |= 1 << CP_REG_NS_SHIFT; | |
721fae12 PM |
2496 | } |
2497 | return cpregid; | |
2498 | } | |
2499 | ||
2500 | /* Convert a truncated 32 bit hashtable key into the full | |
2501 | * 64 bit KVM register ID. | |
2502 | */ | |
2503 | static inline uint64_t cpreg_to_kvm_id(uint32_t cpregid) | |
2504 | { | |
f5a0a5a5 PM |
2505 | uint64_t kvmid; |
2506 | ||
2507 | if (cpregid & CP_REG_AA64_MASK) { | |
2508 | kvmid = cpregid & ~CP_REG_AA64_MASK; | |
2509 | kvmid |= CP_REG_SIZE_U64 | CP_REG_ARM64; | |
721fae12 | 2510 | } else { |
f5a0a5a5 PM |
2511 | kvmid = cpregid & ~(1 << 15); |
2512 | if (cpregid & (1 << 15)) { | |
2513 | kvmid |= CP_REG_SIZE_U64 | CP_REG_ARM; | |
2514 | } else { | |
2515 | kvmid |= CP_REG_SIZE_U32 | CP_REG_ARM; | |
2516 | } | |
721fae12 PM |
2517 | } |
2518 | return kvmid; | |
2519 | } | |
2520 | ||
4b6a83fb | 2521 | /* ARMCPRegInfo type field bits. If the SPECIAL bit is set this is a |
fe03d45f | 2522 | * special-behaviour cp reg and bits [11..8] indicate what behaviour |
4b6a83fb PM |
2523 | * it has. Otherwise it is a simple cp reg, where CONST indicates that |
2524 | * TCG can assume the value to be constant (ie load at translate time) | |
2525 | * and 64BIT indicates a 64 bit wide coprocessor register. SUPPRESS_TB_END | |
2526 | * indicates that the TB should not be ended after a write to this register | |
2527 | * (the default is that the TB ends after cp writes). OVERRIDE permits | |
2528 | * a register definition to override a previous definition for the | |
2529 | * same (cp, is64, crn, crm, opc1, opc2) tuple: either the new or the | |
2530 | * old must have the OVERRIDE bit set. | |
7a0e58fa PM |
2531 | * ALIAS indicates that this register is an alias view of some underlying |
2532 | * state which is also visible via another register, and that the other | |
b061a82b SF |
2533 | * register is handling migration and reset; registers marked ALIAS will not be |
2534 | * migrated but may have their state set by syncing of register state from KVM. | |
7a0e58fa PM |
2535 | * NO_RAW indicates that this register has no underlying state and does not |
2536 | * support raw access for state saving/loading; it will not be used for either | |
2537 | * migration or KVM state synchronization. (Typically this is for "registers" | |
2538 | * which are actually used as instructions for cache maintenance and so on.) | |
2452731c | 2539 | * IO indicates that this register does I/O and therefore its accesses |
55c812b7 | 2540 | * need to be marked with gen_io_start() and also end the TB. In particular, |
2452731c | 2541 | * registers which implement clocks or timers require this. |
37ff584c PM |
2542 | * RAISES_EXC is for when the read or write hook might raise an exception; |
2543 | * the generated code will synchronize the CPU state before calling the hook | |
2544 | * so that it is safe for the hook to call raise_exception(). | |
f80741d1 AB |
2545 | * NEWEL is for writes to registers that might change the exception |
2546 | * level - typically on older ARM chips. For those cases we need to | |
2547 | * re-read the new el when recomputing the translation flags. | |
4b6a83fb | 2548 | */ |
fe03d45f RH |
2549 | #define ARM_CP_SPECIAL 0x0001 |
2550 | #define ARM_CP_CONST 0x0002 | |
2551 | #define ARM_CP_64BIT 0x0004 | |
2552 | #define ARM_CP_SUPPRESS_TB_END 0x0008 | |
2553 | #define ARM_CP_OVERRIDE 0x0010 | |
2554 | #define ARM_CP_ALIAS 0x0020 | |
2555 | #define ARM_CP_IO 0x0040 | |
2556 | #define ARM_CP_NO_RAW 0x0080 | |
2557 | #define ARM_CP_NOP (ARM_CP_SPECIAL | 0x0100) | |
2558 | #define ARM_CP_WFI (ARM_CP_SPECIAL | 0x0200) | |
2559 | #define ARM_CP_NZCV (ARM_CP_SPECIAL | 0x0300) | |
2560 | #define ARM_CP_CURRENTEL (ARM_CP_SPECIAL | 0x0400) | |
2561 | #define ARM_CP_DC_ZVA (ARM_CP_SPECIAL | 0x0500) | |
eb821168 RH |
2562 | #define ARM_CP_DC_GVA (ARM_CP_SPECIAL | 0x0600) |
2563 | #define ARM_CP_DC_GZVA (ARM_CP_SPECIAL | 0x0700) | |
2564 | #define ARM_LAST_SPECIAL ARM_CP_DC_GZVA | |
fe03d45f | 2565 | #define ARM_CP_FPU 0x1000 |
490aa7f1 | 2566 | #define ARM_CP_SVE 0x2000 |
1f163787 | 2567 | #define ARM_CP_NO_GDB 0x4000 |
37ff584c | 2568 | #define ARM_CP_RAISES_EXC 0x8000 |
f80741d1 | 2569 | #define ARM_CP_NEWEL 0x10000 |
4b6a83fb | 2570 | /* Used only as a terminator for ARMCPRegInfo lists */ |
f80741d1 | 2571 | #define ARM_CP_SENTINEL 0xfffff |
4b6a83fb | 2572 | /* Mask of only the flag bits in a type field */ |
f80741d1 | 2573 | #define ARM_CP_FLAG_MASK 0x1f0ff |
4b6a83fb | 2574 | |
f5a0a5a5 PM |
2575 | /* Valid values for ARMCPRegInfo state field, indicating which of |
2576 | * the AArch32 and AArch64 execution states this register is visible in. | |
2577 | * If the reginfo doesn't explicitly specify then it is AArch32 only. | |
2578 | * If the reginfo is declared to be visible in both states then a second | |
2579 | * reginfo is synthesised for the AArch32 view of the AArch64 register, | |
2580 | * such that the AArch32 view is the lower 32 bits of the AArch64 one. | |
2581 | * Note that we rely on the values of these enums as we iterate through | |
2582 | * the various states in some places. | |
2583 | */ | |
2584 | enum { | |
2585 | ARM_CP_STATE_AA32 = 0, | |
2586 | ARM_CP_STATE_AA64 = 1, | |
2587 | ARM_CP_STATE_BOTH = 2, | |
2588 | }; | |
2589 | ||
c3e30260 FA |
2590 | /* ARM CP register secure state flags. These flags identify security state |
2591 | * attributes for a given CP register entry. | |
2592 | * The existence of both or neither secure and non-secure flags indicates that | |
2593 | * the register has both a secure and non-secure hash entry. A single one of | |
2594 | * these flags causes the register to only be hashed for the specified | |
2595 | * security state. | |
2596 | * Although definitions may have any combination of the S/NS bits, each | |
2597 | * registered entry will only have one to identify whether the entry is secure | |
2598 | * or non-secure. | |
2599 | */ | |
2600 | enum { | |
2601 | ARM_CP_SECSTATE_S = (1 << 0), /* bit[0]: Secure state register */ | |
2602 | ARM_CP_SECSTATE_NS = (1 << 1), /* bit[1]: Non-secure state register */ | |
2603 | }; | |
2604 | ||
4b6a83fb PM |
2605 | /* Return true if cptype is a valid type field. This is used to try to |
2606 | * catch errors where the sentinel has been accidentally left off the end | |
2607 | * of a list of registers. | |
2608 | */ | |
2609 | static inline bool cptype_valid(int cptype) | |
2610 | { | |
2611 | return ((cptype & ~ARM_CP_FLAG_MASK) == 0) | |
2612 | || ((cptype & ARM_CP_SPECIAL) && | |
34affeef | 2613 | ((cptype & ~ARM_CP_FLAG_MASK) <= ARM_LAST_SPECIAL)); |
4b6a83fb PM |
2614 | } |
2615 | ||
2616 | /* Access rights: | |
2617 | * We define bits for Read and Write access for what rev C of the v7-AR ARM ARM | |
2618 | * defines as PL0 (user), PL1 (fiq/irq/svc/abt/und/sys, ie privileged), and | |
2619 | * PL2 (hyp). The other level which has Read and Write bits is Secure PL1 | |
2620 | * (ie any of the privileged modes in Secure state, or Monitor mode). | |
2621 | * If a register is accessible in one privilege level it's always accessible | |
2622 | * in higher privilege levels too. Since "Secure PL1" also follows this rule | |
2623 | * (ie anything visible in PL2 is visible in S-PL1, some things are only | |
2624 | * visible in S-PL1) but "Secure PL1" is a bit of a mouthful, we bend the | |
2625 | * terminology a little and call this PL3. | |
f5a0a5a5 PM |
2626 | * In AArch64 things are somewhat simpler as the PLx bits line up exactly |
2627 | * with the ELx exception levels. | |
4b6a83fb PM |
2628 | * |
2629 | * If access permissions for a register are more complex than can be | |
2630 | * described with these bits, then use a laxer set of restrictions, and | |
2631 | * do the more restrictive/complex check inside a helper function. | |
2632 | */ | |
2633 | #define PL3_R 0x80 | |
2634 | #define PL3_W 0x40 | |
2635 | #define PL2_R (0x20 | PL3_R) | |
2636 | #define PL2_W (0x10 | PL3_W) | |
2637 | #define PL1_R (0x08 | PL2_R) | |
2638 | #define PL1_W (0x04 | PL2_W) | |
2639 | #define PL0_R (0x02 | PL1_R) | |
2640 | #define PL0_W (0x01 | PL1_W) | |
2641 | ||
b5bd7440 AB |
2642 | /* |
2643 | * For user-mode some registers are accessible to EL0 via a kernel | |
2644 | * trap-and-emulate ABI. In this case we define the read permissions | |
2645 | * as actually being PL0_R. However some bits of any given register | |
2646 | * may still be masked. | |
2647 | */ | |
2648 | #ifdef CONFIG_USER_ONLY | |
2649 | #define PL0U_R PL0_R | |
2650 | #else | |
2651 | #define PL0U_R PL1_R | |
2652 | #endif | |
2653 | ||
4b6a83fb PM |
2654 | #define PL3_RW (PL3_R | PL3_W) |
2655 | #define PL2_RW (PL2_R | PL2_W) | |
2656 | #define PL1_RW (PL1_R | PL1_W) | |
2657 | #define PL0_RW (PL0_R | PL0_W) | |
2658 | ||
75502672 PM |
2659 | /* Return the highest implemented Exception Level */ |
2660 | static inline int arm_highest_el(CPUARMState *env) | |
2661 | { | |
2662 | if (arm_feature(env, ARM_FEATURE_EL3)) { | |
2663 | return 3; | |
2664 | } | |
2665 | if (arm_feature(env, ARM_FEATURE_EL2)) { | |
2666 | return 2; | |
2667 | } | |
2668 | return 1; | |
2669 | } | |
2670 | ||
15b3f556 PM |
2671 | /* Return true if a v7M CPU is in Handler mode */ |
2672 | static inline bool arm_v7m_is_handler_mode(CPUARMState *env) | |
2673 | { | |
2674 | return env->v7m.exception != 0; | |
2675 | } | |
2676 | ||
dcbff19b GB |
2677 | /* Return the current Exception Level (as per ARMv8; note that this differs |
2678 | * from the ARMv7 Privilege Level). | |
2679 | */ | |
2680 | static inline int arm_current_el(CPUARMState *env) | |
4b6a83fb | 2681 | { |
6d54ed3c | 2682 | if (arm_feature(env, ARM_FEATURE_M)) { |
8bfc26ea PM |
2683 | return arm_v7m_is_handler_mode(env) || |
2684 | !(env->v7m.control[env->v7m.secure] & 1); | |
6d54ed3c PM |
2685 | } |
2686 | ||
592125f8 | 2687 | if (is_a64(env)) { |
f5a0a5a5 PM |
2688 | return extract32(env->pstate, 2, 2); |
2689 | } | |
2690 | ||
592125f8 FA |
2691 | switch (env->uncached_cpsr & 0x1f) { |
2692 | case ARM_CPU_MODE_USR: | |
4b6a83fb | 2693 | return 0; |
592125f8 FA |
2694 | case ARM_CPU_MODE_HYP: |
2695 | return 2; | |
2696 | case ARM_CPU_MODE_MON: | |
2697 | return 3; | |
2698 | default: | |
2699 | if (arm_is_secure(env) && !arm_el_is_aa64(env, 3)) { | |
2700 | /* If EL3 is 32-bit then all secure privileged modes run in | |
2701 | * EL3 | |
2702 | */ | |
2703 | return 3; | |
2704 | } | |
2705 | ||
2706 | return 1; | |
4b6a83fb | 2707 | } |
4b6a83fb PM |
2708 | } |
2709 | ||
2710 | typedef struct ARMCPRegInfo ARMCPRegInfo; | |
2711 | ||
f59df3f2 PM |
2712 | typedef enum CPAccessResult { |
2713 | /* Access is permitted */ | |
2714 | CP_ACCESS_OK = 0, | |
2715 | /* Access fails due to a configurable trap or enable which would | |
2716 | * result in a categorized exception syndrome giving information about | |
2717 | * the failing instruction (ie syndrome category 0x3, 0x4, 0x5, 0x6, | |
38836a2c PM |
2718 | * 0xc or 0x18). The exception is taken to the usual target EL (EL1 or |
2719 | * PL1 if in EL0, otherwise to the current EL). | |
f59df3f2 PM |
2720 | */ |
2721 | CP_ACCESS_TRAP = 1, | |
2722 | /* Access fails and results in an exception syndrome 0x0 ("uncategorized"). | |
2723 | * Note that this is not a catch-all case -- the set of cases which may | |
2724 | * result in this failure is specifically defined by the architecture. | |
2725 | */ | |
2726 | CP_ACCESS_TRAP_UNCATEGORIZED = 2, | |
38836a2c PM |
2727 | /* As CP_ACCESS_TRAP, but for traps directly to EL2 or EL3 */ |
2728 | CP_ACCESS_TRAP_EL2 = 3, | |
2729 | CP_ACCESS_TRAP_EL3 = 4, | |
e7615726 PM |
2730 | /* As CP_ACCESS_UNCATEGORIZED, but for traps directly to EL2 or EL3 */ |
2731 | CP_ACCESS_TRAP_UNCATEGORIZED_EL2 = 5, | |
2732 | CP_ACCESS_TRAP_UNCATEGORIZED_EL3 = 6, | |
f2cae609 PM |
2733 | /* Access fails and results in an exception syndrome for an FP access, |
2734 | * trapped directly to EL2 or EL3 | |
2735 | */ | |
2736 | CP_ACCESS_TRAP_FP_EL2 = 7, | |
2737 | CP_ACCESS_TRAP_FP_EL3 = 8, | |
f59df3f2 PM |
2738 | } CPAccessResult; |
2739 | ||
c4241c7d PM |
2740 | /* Access functions for coprocessor registers. These cannot fail and |
2741 | * may not raise exceptions. | |
2742 | */ | |
2743 | typedef uint64_t CPReadFn(CPUARMState *env, const ARMCPRegInfo *opaque); | |
2744 | typedef void CPWriteFn(CPUARMState *env, const ARMCPRegInfo *opaque, | |
2745 | uint64_t value); | |
f59df3f2 | 2746 | /* Access permission check functions for coprocessor registers. */ |
3f208fd7 PM |
2747 | typedef CPAccessResult CPAccessFn(CPUARMState *env, |
2748 | const ARMCPRegInfo *opaque, | |
2749 | bool isread); | |
4b6a83fb PM |
2750 | /* Hook function for register reset */ |
2751 | typedef void CPResetFn(CPUARMState *env, const ARMCPRegInfo *opaque); | |
2752 | ||
2753 | #define CP_ANY 0xff | |
2754 | ||
2755 | /* Definition of an ARM coprocessor register */ | |
2756 | struct ARMCPRegInfo { | |
2757 | /* Name of register (useful mainly for debugging, need not be unique) */ | |
2758 | const char *name; | |
2759 | /* Location of register: coprocessor number and (crn,crm,opc1,opc2) | |
2760 | * tuple. Any of crm, opc1 and opc2 may be CP_ANY to indicate a | |
2761 | * 'wildcard' field -- any value of that field in the MRC/MCR insn | |
2762 | * will be decoded to this register. The register read and write | |
2763 | * callbacks will be passed an ARMCPRegInfo with the crn/crm/opc1/opc2 | |
2764 | * used by the program, so it is possible to register a wildcard and | |
2765 | * then behave differently on read/write if necessary. | |
2766 | * For 64 bit registers, only crm and opc1 are relevant; crn and opc2 | |
2767 | * must both be zero. | |
f5a0a5a5 PM |
2768 | * For AArch64-visible registers, opc0 is also used. |
2769 | * Since there are no "coprocessors" in AArch64, cp is purely used as a | |
2770 | * way to distinguish (for KVM's benefit) guest-visible system registers | |
2771 | * from demuxed ones provided to preserve the "no side effects on | |
2772 | * KVM register read/write from QEMU" semantics. cp==0x13 is guest | |
2773 | * visible (to match KVM's encoding); cp==0 will be converted to | |
2774 | * cp==0x13 when the ARMCPRegInfo is registered, for convenience. | |
4b6a83fb PM |
2775 | */ |
2776 | uint8_t cp; | |
2777 | uint8_t crn; | |
2778 | uint8_t crm; | |
f5a0a5a5 | 2779 | uint8_t opc0; |
4b6a83fb PM |
2780 | uint8_t opc1; |
2781 | uint8_t opc2; | |
f5a0a5a5 PM |
2782 | /* Execution state in which this register is visible: ARM_CP_STATE_* */ |
2783 | int state; | |
4b6a83fb PM |
2784 | /* Register type: ARM_CP_* bits/values */ |
2785 | int type; | |
2786 | /* Access rights: PL*_[RW] */ | |
2787 | int access; | |
c3e30260 FA |
2788 | /* Security state: ARM_CP_SECSTATE_* bits/values */ |
2789 | int secure; | |
4b6a83fb PM |
2790 | /* The opaque pointer passed to define_arm_cp_regs_with_opaque() when |
2791 | * this register was defined: can be used to hand data through to the | |
2792 | * register read/write functions, since they are passed the ARMCPRegInfo*. | |
2793 | */ | |
2794 | void *opaque; | |
2795 | /* Value of this register, if it is ARM_CP_CONST. Otherwise, if | |
2796 | * fieldoffset is non-zero, the reset value of the register. | |
2797 | */ | |
2798 | uint64_t resetvalue; | |
c3e30260 FA |
2799 | /* Offset of the field in CPUARMState for this register. |
2800 | * | |
2801 | * This is not needed if either: | |
4b6a83fb PM |
2802 | * 1. type is ARM_CP_CONST or one of the ARM_CP_SPECIALs |
2803 | * 2. both readfn and writefn are specified | |
2804 | */ | |
2805 | ptrdiff_t fieldoffset; /* offsetof(CPUARMState, field) */ | |
c3e30260 FA |
2806 | |
2807 | /* Offsets of the secure and non-secure fields in CPUARMState for the | |
2808 | * register if it is banked. These fields are only used during the static | |
2809 | * registration of a register. During hashing the bank associated | |
2810 | * with a given security state is copied to fieldoffset which is used from | |
2811 | * there on out. | |
2812 | * | |
2813 | * It is expected that register definitions use either fieldoffset or | |
2814 | * bank_fieldoffsets in the definition but not both. It is also expected | |
2815 | * that both bank offsets are set when defining a banked register. This | |
2816 | * use indicates that a register is banked. | |
2817 | */ | |
2818 | ptrdiff_t bank_fieldoffsets[2]; | |
2819 | ||
f59df3f2 PM |
2820 | /* Function for making any access checks for this register in addition to |
2821 | * those specified by the 'access' permissions bits. If NULL, no extra | |
2822 | * checks required. The access check is performed at runtime, not at | |
2823 | * translate time. | |
2824 | */ | |
2825 | CPAccessFn *accessfn; | |
4b6a83fb PM |
2826 | /* Function for handling reads of this register. If NULL, then reads |
2827 | * will be done by loading from the offset into CPUARMState specified | |
2828 | * by fieldoffset. | |
2829 | */ | |
2830 | CPReadFn *readfn; | |
2831 | /* Function for handling writes of this register. If NULL, then writes | |
2832 | * will be done by writing to the offset into CPUARMState specified | |
2833 | * by fieldoffset. | |
2834 | */ | |
2835 | CPWriteFn *writefn; | |
7023ec7e PM |
2836 | /* Function for doing a "raw" read; used when we need to copy |
2837 | * coprocessor state to the kernel for KVM or out for | |
2838 | * migration. This only needs to be provided if there is also a | |
c4241c7d | 2839 | * readfn and it has side effects (for instance clear-on-read bits). |
7023ec7e PM |
2840 | */ |
2841 | CPReadFn *raw_readfn; | |
2842 | /* Function for doing a "raw" write; used when we need to copy KVM | |
2843 | * kernel coprocessor state into userspace, or for inbound | |
2844 | * migration. This only needs to be provided if there is also a | |
c4241c7d PM |
2845 | * writefn and it masks out "unwritable" bits or has write-one-to-clear |
2846 | * or similar behaviour. | |
7023ec7e PM |
2847 | */ |
2848 | CPWriteFn *raw_writefn; | |
4b6a83fb PM |
2849 | /* Function for resetting the register. If NULL, then reset will be done |
2850 | * by writing resetvalue to the field specified in fieldoffset. If | |
2851 | * fieldoffset is 0 then no reset will be done. | |
2852 | */ | |
2853 | CPResetFn *resetfn; | |
e2cce18f RH |
2854 | |
2855 | /* | |
2856 | * "Original" writefn and readfn. | |
2857 | * For ARMv8.1-VHE register aliases, we overwrite the read/write | |
2858 | * accessor functions of various EL1/EL0 to perform the runtime | |
2859 | * check for which sysreg should actually be modified, and then | |
2860 | * forwards the operation. Before overwriting the accessors, | |
2861 | * the original function is copied here, so that accesses that | |
2862 | * really do go to the EL1/EL0 version proceed normally. | |
2863 | * (The corresponding EL2 register is linked via opaque.) | |
2864 | */ | |
2865 | CPReadFn *orig_readfn; | |
2866 | CPWriteFn *orig_writefn; | |
4b6a83fb PM |
2867 | }; |
2868 | ||
2869 | /* Macros which are lvalues for the field in CPUARMState for the | |
2870 | * ARMCPRegInfo *ri. | |
2871 | */ | |
2872 | #define CPREG_FIELD32(env, ri) \ | |
2873 | (*(uint32_t *)((char *)(env) + (ri)->fieldoffset)) | |
2874 | #define CPREG_FIELD64(env, ri) \ | |
2875 | (*(uint64_t *)((char *)(env) + (ri)->fieldoffset)) | |
2876 | ||
2877 | #define REGINFO_SENTINEL { .type = ARM_CP_SENTINEL } | |
2878 | ||
2879 | void define_arm_cp_regs_with_opaque(ARMCPU *cpu, | |
2880 | const ARMCPRegInfo *regs, void *opaque); | |
2881 | void define_one_arm_cp_reg_with_opaque(ARMCPU *cpu, | |
2882 | const ARMCPRegInfo *regs, void *opaque); | |
2883 | static inline void define_arm_cp_regs(ARMCPU *cpu, const ARMCPRegInfo *regs) | |
2884 | { | |
2885 | define_arm_cp_regs_with_opaque(cpu, regs, 0); | |
2886 | } | |
2887 | static inline void define_one_arm_cp_reg(ARMCPU *cpu, const ARMCPRegInfo *regs) | |
2888 | { | |
2889 | define_one_arm_cp_reg_with_opaque(cpu, regs, 0); | |
2890 | } | |
60322b39 | 2891 | const ARMCPRegInfo *get_arm_cp_reginfo(GHashTable *cpregs, uint32_t encoded_cp); |
4b6a83fb | 2892 | |
6c5c0fec AB |
2893 | /* |
2894 | * Definition of an ARM co-processor register as viewed from | |
2895 | * userspace. This is used for presenting sanitised versions of | |
2896 | * registers to userspace when emulating the Linux AArch64 CPU | |
2897 | * ID/feature ABI (advertised as HWCAP_CPUID). | |
2898 | */ | |
2899 | typedef struct ARMCPRegUserSpaceInfo { | |
2900 | /* Name of register */ | |
2901 | const char *name; | |
2902 | ||
d040242e AB |
2903 | /* Is the name actually a glob pattern */ |
2904 | bool is_glob; | |
2905 | ||
6c5c0fec AB |
2906 | /* Only some bits are exported to user space */ |
2907 | uint64_t exported_bits; | |
2908 | ||
2909 | /* Fixed bits are applied after the mask */ | |
2910 | uint64_t fixed_bits; | |
2911 | } ARMCPRegUserSpaceInfo; | |
2912 | ||
2913 | #define REGUSERINFO_SENTINEL { .name = NULL } | |
2914 | ||
2915 | void modify_arm_cp_regs(ARMCPRegInfo *regs, const ARMCPRegUserSpaceInfo *mods); | |
2916 | ||
4b6a83fb | 2917 | /* CPWriteFn that can be used to implement writes-ignored behaviour */ |
c4241c7d PM |
2918 | void arm_cp_write_ignore(CPUARMState *env, const ARMCPRegInfo *ri, |
2919 | uint64_t value); | |
4b6a83fb | 2920 | /* CPReadFn that can be used for read-as-zero behaviour */ |
c4241c7d | 2921 | uint64_t arm_cp_read_zero(CPUARMState *env, const ARMCPRegInfo *ri); |
4b6a83fb | 2922 | |
f5a0a5a5 PM |
2923 | /* CPResetFn that does nothing, for use if no reset is required even |
2924 | * if fieldoffset is non zero. | |
2925 | */ | |
2926 | void arm_cp_reset_ignore(CPUARMState *env, const ARMCPRegInfo *opaque); | |
2927 | ||
67ed771d PM |
2928 | /* Return true if this reginfo struct's field in the cpu state struct |
2929 | * is 64 bits wide. | |
2930 | */ | |
2931 | static inline bool cpreg_field_is_64bit(const ARMCPRegInfo *ri) | |
2932 | { | |
2933 | return (ri->state == ARM_CP_STATE_AA64) || (ri->type & ARM_CP_64BIT); | |
2934 | } | |
2935 | ||
dcbff19b | 2936 | static inline bool cp_access_ok(int current_el, |
4b6a83fb PM |
2937 | const ARMCPRegInfo *ri, int isread) |
2938 | { | |
dcbff19b | 2939 | return (ri->access >> ((current_el * 2) + isread)) & 1; |
4b6a83fb PM |
2940 | } |
2941 | ||
49a66191 PM |
2942 | /* Raw read of a coprocessor register (as needed for migration, etc) */ |
2943 | uint64_t read_raw_cp_reg(CPUARMState *env, const ARMCPRegInfo *ri); | |
2944 | ||
721fae12 PM |
2945 | /** |
2946 | * write_list_to_cpustate | |
2947 | * @cpu: ARMCPU | |
2948 | * | |
2949 | * For each register listed in the ARMCPU cpreg_indexes list, write | |
2950 | * its value from the cpreg_values list into the ARMCPUState structure. | |
2951 | * This updates TCG's working data structures from KVM data or | |
2952 | * from incoming migration state. | |
2953 | * | |
2954 | * Returns: true if all register values were updated correctly, | |
2955 | * false if some register was unknown or could not be written. | |
2956 | * Note that we do not stop early on failure -- we will attempt | |
2957 | * writing all registers in the list. | |
2958 | */ | |
2959 | bool write_list_to_cpustate(ARMCPU *cpu); | |
2960 | ||
2961 | /** | |
2962 | * write_cpustate_to_list: | |
2963 | * @cpu: ARMCPU | |
b698e4ee | 2964 | * @kvm_sync: true if this is for syncing back to KVM |
721fae12 PM |
2965 | * |
2966 | * For each register listed in the ARMCPU cpreg_indexes list, write | |
2967 | * its value from the ARMCPUState structure into the cpreg_values list. | |
2968 | * This is used to copy info from TCG's working data structures into | |
2969 | * KVM or for outbound migration. | |
2970 | * | |
b698e4ee PM |
2971 | * @kvm_sync is true if we are doing this in order to sync the |
2972 | * register state back to KVM. In this case we will only update | |
2973 | * values in the list if the previous list->cpustate sync actually | |
2974 | * successfully wrote the CPU state. Otherwise we will keep the value | |
2975 | * that is in the list. | |
2976 | * | |
721fae12 PM |
2977 | * Returns: true if all register values were read correctly, |
2978 | * false if some register was unknown or could not be read. | |
2979 | * Note that we do not stop early on failure -- we will attempt | |
2980 | * reading all registers in the list. | |
2981 | */ | |
b698e4ee | 2982 | bool write_cpustate_to_list(ARMCPU *cpu, bool kvm_sync); |
721fae12 | 2983 | |
9ee6e8bb PB |
2984 | #define ARM_CPUID_TI915T 0x54029152 |
2985 | #define ARM_CPUID_TI925T 0x54029252 | |
40f137e1 | 2986 | |
ba1ba5cc IM |
2987 | #define ARM_CPU_TYPE_SUFFIX "-" TYPE_ARM_CPU |
2988 | #define ARM_CPU_TYPE_NAME(name) (name ARM_CPU_TYPE_SUFFIX) | |
0dacec87 | 2989 | #define CPU_RESOLVING_TYPE TYPE_ARM_CPU |
ba1ba5cc | 2990 | |
9467d44c | 2991 | #define cpu_signal_handler cpu_arm_signal_handler |
c732abe2 | 2992 | #define cpu_list arm_cpu_list |
9467d44c | 2993 | |
c1e37810 PM |
2994 | /* ARM has the following "translation regimes" (as the ARM ARM calls them): |
2995 | * | |
2996 | * If EL3 is 64-bit: | |
2997 | * + NonSecure EL1 & 0 stage 1 | |
2998 | * + NonSecure EL1 & 0 stage 2 | |
2999 | * + NonSecure EL2 | |
b9f6033c RH |
3000 | * + NonSecure EL2 & 0 (ARMv8.1-VHE) |
3001 | * + Secure EL1 & 0 | |
c1e37810 PM |
3002 | * + Secure EL3 |
3003 | * If EL3 is 32-bit: | |
3004 | * + NonSecure PL1 & 0 stage 1 | |
3005 | * + NonSecure PL1 & 0 stage 2 | |
3006 | * + NonSecure PL2 | |
b9f6033c RH |
3007 | * + Secure PL0 |
3008 | * + Secure PL1 | |
c1e37810 PM |
3009 | * (reminder: for 32 bit EL3, Secure PL1 is *EL3*, not EL1.) |
3010 | * | |
3011 | * For QEMU, an mmu_idx is not quite the same as a translation regime because: | |
b9f6033c RH |
3012 | * 1. we need to split the "EL1 & 0" and "EL2 & 0" regimes into two mmu_idxes, |
3013 | * because they may differ in access permissions even if the VA->PA map is | |
3014 | * the same | |
c1e37810 PM |
3015 | * 2. we want to cache in our TLB the full VA->IPA->PA lookup for a stage 1+2 |
3016 | * translation, which means that we have one mmu_idx that deals with two | |
3017 | * concatenated translation regimes [this sort of combined s1+2 TLB is | |
3018 | * architecturally permitted] | |
3019 | * 3. we don't need to allocate an mmu_idx to translations that we won't be | |
3020 | * handling via the TLB. The only way to do a stage 1 translation without | |
3021 | * the immediate stage 2 translation is via the ATS or AT system insns, | |
3022 | * which can be slow-pathed and always do a page table walk. | |
bf05340c PM |
3023 | * The only use of stage 2 translations is either as part of an s1+2 |
3024 | * lookup or when loading the descriptors during a stage 1 page table walk, | |
3025 | * and in both those cases we don't use the TLB. | |
c1e37810 PM |
3026 | * 4. we can also safely fold together the "32 bit EL3" and "64 bit EL3" |
3027 | * translation regimes, because they map reasonably well to each other | |
3028 | * and they can't both be active at the same time. | |
b9f6033c RH |
3029 | * 5. we want to be able to use the TLB for accesses done as part of a |
3030 | * stage1 page table walk, rather than having to walk the stage2 page | |
3031 | * table over and over. | |
452ef8cb RH |
3032 | * 6. we need separate EL1/EL2 mmu_idx for handling the Privileged Access |
3033 | * Never (PAN) bit within PSTATE. | |
c1e37810 | 3034 | * |
b9f6033c RH |
3035 | * This gives us the following list of cases: |
3036 | * | |
3037 | * NS EL0 EL1&0 stage 1+2 (aka NS PL0) | |
3038 | * NS EL1 EL1&0 stage 1+2 (aka NS PL1) | |
452ef8cb | 3039 | * NS EL1 EL1&0 stage 1+2 +PAN |
b9f6033c | 3040 | * NS EL0 EL2&0 |
bf05340c | 3041 | * NS EL2 EL2&0 |
452ef8cb | 3042 | * NS EL2 EL2&0 +PAN |
c1e37810 | 3043 | * NS EL2 (aka NS PL2) |
b9f6033c RH |
3044 | * S EL0 EL1&0 (aka S PL0) |
3045 | * S EL1 EL1&0 (not used if EL3 is 32 bit) | |
452ef8cb | 3046 | * S EL1 EL1&0 +PAN |
c1e37810 | 3047 | * S EL3 (aka S PL1) |
c1e37810 | 3048 | * |
bf05340c | 3049 | * for a total of 11 different mmu_idx. |
c1e37810 | 3050 | * |
3bef7012 PM |
3051 | * R profile CPUs have an MPU, but can use the same set of MMU indexes |
3052 | * as A profile. They only need to distinguish NS EL0 and NS EL1 (and | |
3053 | * NS EL2 if we ever model a Cortex-R52). | |
3054 | * | |
3055 | * M profile CPUs are rather different as they do not have a true MMU. | |
3056 | * They have the following different MMU indexes: | |
3057 | * User | |
3058 | * Privileged | |
62593718 PM |
3059 | * User, execution priority negative (ie the MPU HFNMIENA bit may apply) |
3060 | * Privileged, execution priority negative (ditto) | |
66787c78 PM |
3061 | * If the CPU supports the v8M Security Extension then there are also: |
3062 | * Secure User | |
3063 | * Secure Privileged | |
62593718 PM |
3064 | * Secure User, execution priority negative |
3065 | * Secure Privileged, execution priority negative | |
3bef7012 | 3066 | * |
8bd5c820 PM |
3067 | * The ARMMMUIdx and the mmu index value used by the core QEMU TLB code |
3068 | * are not quite the same -- different CPU types (most notably M profile | |
3069 | * vs A/R profile) would like to use MMU indexes with different semantics, | |
3070 | * but since we don't ever need to use all of those in a single CPU we | |
bf05340c PM |
3071 | * can avoid having to set NB_MMU_MODES to "total number of A profile MMU |
3072 | * modes + total number of M profile MMU modes". The lower bits of | |
8bd5c820 PM |
3073 | * ARMMMUIdx are the core TLB mmu index, and the higher bits are always |
3074 | * the same for any particular CPU. | |
3075 | * Variables of type ARMMUIdx are always full values, and the core | |
3076 | * index values are in variables of type 'int'. | |
3077 | * | |
c1e37810 PM |
3078 | * Our enumeration includes at the end some entries which are not "true" |
3079 | * mmu_idx values in that they don't have corresponding TLBs and are only | |
3080 | * valid for doing slow path page table walks. | |
3081 | * | |
3082 | * The constant names here are patterned after the general style of the names | |
3083 | * of the AT/ATS operations. | |
3084 | * The values used are carefully arranged to make mmu_idx => EL lookup easy. | |
62593718 PM |
3085 | * For M profile we arrange them to have a bit for priv, a bit for negpri |
3086 | * and a bit for secure. | |
c1e37810 | 3087 | */ |
b9f6033c RH |
3088 | #define ARM_MMU_IDX_A 0x10 /* A profile */ |
3089 | #define ARM_MMU_IDX_NOTLB 0x20 /* does not have a TLB */ | |
3090 | #define ARM_MMU_IDX_M 0x40 /* M profile */ | |
8bd5c820 | 3091 | |
b6ad6062 RDC |
3092 | /* Meanings of the bits for A profile mmu idx values */ |
3093 | #define ARM_MMU_IDX_A_NS 0x8 | |
3094 | ||
b9f6033c RH |
3095 | /* Meanings of the bits for M profile mmu idx values */ |
3096 | #define ARM_MMU_IDX_M_PRIV 0x1 | |
62593718 | 3097 | #define ARM_MMU_IDX_M_NEGPRI 0x2 |
b9f6033c | 3098 | #define ARM_MMU_IDX_M_S 0x4 /* Secure */ |
62593718 | 3099 | |
b9f6033c RH |
3100 | #define ARM_MMU_IDX_TYPE_MASK \ |
3101 | (ARM_MMU_IDX_A | ARM_MMU_IDX_M | ARM_MMU_IDX_NOTLB) | |
3102 | #define ARM_MMU_IDX_COREIDX_MASK 0xf | |
8bd5c820 | 3103 | |
c1e37810 | 3104 | typedef enum ARMMMUIdx { |
b9f6033c RH |
3105 | /* |
3106 | * A-profile. | |
3107 | */ | |
b6ad6062 RDC |
3108 | ARMMMUIdx_SE10_0 = 0 | ARM_MMU_IDX_A, |
3109 | ARMMMUIdx_SE20_0 = 1 | ARM_MMU_IDX_A, | |
3110 | ARMMMUIdx_SE10_1 = 2 | ARM_MMU_IDX_A, | |
3111 | ARMMMUIdx_SE20_2 = 3 | ARM_MMU_IDX_A, | |
3112 | ARMMMUIdx_SE10_1_PAN = 4 | ARM_MMU_IDX_A, | |
3113 | ARMMMUIdx_SE20_2_PAN = 5 | ARM_MMU_IDX_A, | |
3114 | ARMMMUIdx_SE2 = 6 | ARM_MMU_IDX_A, | |
3115 | ARMMMUIdx_SE3 = 7 | ARM_MMU_IDX_A, | |
3116 | ||
3117 | ARMMMUIdx_E10_0 = ARMMMUIdx_SE10_0 | ARM_MMU_IDX_A_NS, | |
3118 | ARMMMUIdx_E20_0 = ARMMMUIdx_SE20_0 | ARM_MMU_IDX_A_NS, | |
3119 | ARMMMUIdx_E10_1 = ARMMMUIdx_SE10_1 | ARM_MMU_IDX_A_NS, | |
3120 | ARMMMUIdx_E20_2 = ARMMMUIdx_SE20_2 | ARM_MMU_IDX_A_NS, | |
3121 | ARMMMUIdx_E10_1_PAN = ARMMMUIdx_SE10_1_PAN | ARM_MMU_IDX_A_NS, | |
3122 | ARMMMUIdx_E20_2_PAN = ARMMMUIdx_SE20_2_PAN | ARM_MMU_IDX_A_NS, | |
3123 | ARMMMUIdx_E2 = ARMMMUIdx_SE2 | ARM_MMU_IDX_A_NS, | |
b9f6033c | 3124 | |
b9f6033c RH |
3125 | /* |
3126 | * These are not allocated TLBs and are used only for AT system | |
3127 | * instructions or for the first stage of an S12 page table walk. | |
3128 | */ | |
3129 | ARMMMUIdx_Stage1_E0 = 0 | ARM_MMU_IDX_NOTLB, | |
3130 | ARMMMUIdx_Stage1_E1 = 1 | ARM_MMU_IDX_NOTLB, | |
452ef8cb | 3131 | ARMMMUIdx_Stage1_E1_PAN = 2 | ARM_MMU_IDX_NOTLB, |
b1a10c86 RDC |
3132 | ARMMMUIdx_Stage1_SE0 = 3 | ARM_MMU_IDX_NOTLB, |
3133 | ARMMMUIdx_Stage1_SE1 = 4 | ARM_MMU_IDX_NOTLB, | |
3134 | ARMMMUIdx_Stage1_SE1_PAN = 5 | ARM_MMU_IDX_NOTLB, | |
bf05340c PM |
3135 | /* |
3136 | * Not allocated a TLB: used only for second stage of an S12 page | |
3137 | * table walk, or for descriptor loads during first stage of an S1 | |
3138 | * page table walk. Note that if we ever want to have a TLB for this | |
3139 | * then various TLB flush insns which currently are no-ops or flush | |
3140 | * only stage 1 MMU indexes will need to change to flush stage 2. | |
3141 | */ | |
b1a10c86 RDC |
3142 | ARMMMUIdx_Stage2 = 6 | ARM_MMU_IDX_NOTLB, |
3143 | ARMMMUIdx_Stage2_S = 7 | ARM_MMU_IDX_NOTLB, | |
b9f6033c RH |
3144 | |
3145 | /* | |
3146 | * M-profile. | |
3147 | */ | |
25568316 RH |
3148 | ARMMMUIdx_MUser = ARM_MMU_IDX_M, |
3149 | ARMMMUIdx_MPriv = ARM_MMU_IDX_M | ARM_MMU_IDX_M_PRIV, | |
3150 | ARMMMUIdx_MUserNegPri = ARMMMUIdx_MUser | ARM_MMU_IDX_M_NEGPRI, | |
3151 | ARMMMUIdx_MPrivNegPri = ARMMMUIdx_MPriv | ARM_MMU_IDX_M_NEGPRI, | |
3152 | ARMMMUIdx_MSUser = ARMMMUIdx_MUser | ARM_MMU_IDX_M_S, | |
3153 | ARMMMUIdx_MSPriv = ARMMMUIdx_MPriv | ARM_MMU_IDX_M_S, | |
3154 | ARMMMUIdx_MSUserNegPri = ARMMMUIdx_MUserNegPri | ARM_MMU_IDX_M_S, | |
3155 | ARMMMUIdx_MSPrivNegPri = ARMMMUIdx_MPrivNegPri | ARM_MMU_IDX_M_S, | |
c1e37810 PM |
3156 | } ARMMMUIdx; |
3157 | ||
5f09a6df RH |
3158 | /* |
3159 | * Bit macros for the core-mmu-index values for each index, | |
8bd5c820 PM |
3160 | * for use when calling tlb_flush_by_mmuidx() and friends. |
3161 | */ | |
5f09a6df RH |
3162 | #define TO_CORE_BIT(NAME) \ |
3163 | ARMMMUIdxBit_##NAME = 1 << (ARMMMUIdx_##NAME & ARM_MMU_IDX_COREIDX_MASK) | |
3164 | ||
8bd5c820 | 3165 | typedef enum ARMMMUIdxBit { |
5f09a6df | 3166 | TO_CORE_BIT(E10_0), |
b9f6033c | 3167 | TO_CORE_BIT(E20_0), |
5f09a6df | 3168 | TO_CORE_BIT(E10_1), |
452ef8cb | 3169 | TO_CORE_BIT(E10_1_PAN), |
5f09a6df | 3170 | TO_CORE_BIT(E2), |
b9f6033c | 3171 | TO_CORE_BIT(E20_2), |
452ef8cb | 3172 | TO_CORE_BIT(E20_2_PAN), |
5f09a6df | 3173 | TO_CORE_BIT(SE10_0), |
b6ad6062 | 3174 | TO_CORE_BIT(SE20_0), |
5f09a6df | 3175 | TO_CORE_BIT(SE10_1), |
b6ad6062 | 3176 | TO_CORE_BIT(SE20_2), |
452ef8cb | 3177 | TO_CORE_BIT(SE10_1_PAN), |
b6ad6062 RDC |
3178 | TO_CORE_BIT(SE20_2_PAN), |
3179 | TO_CORE_BIT(SE2), | |
5f09a6df | 3180 | TO_CORE_BIT(SE3), |
5f09a6df RH |
3181 | |
3182 | TO_CORE_BIT(MUser), | |
3183 | TO_CORE_BIT(MPriv), | |
3184 | TO_CORE_BIT(MUserNegPri), | |
3185 | TO_CORE_BIT(MPrivNegPri), | |
3186 | TO_CORE_BIT(MSUser), | |
3187 | TO_CORE_BIT(MSPriv), | |
3188 | TO_CORE_BIT(MSUserNegPri), | |
3189 | TO_CORE_BIT(MSPrivNegPri), | |
8bd5c820 PM |
3190 | } ARMMMUIdxBit; |
3191 | ||
5f09a6df RH |
3192 | #undef TO_CORE_BIT |
3193 | ||
f79fbf39 | 3194 | #define MMU_USER_IDX 0 |
c1e37810 | 3195 | |
9e273ef2 PM |
3196 | /* Indexes used when registering address spaces with cpu_address_space_init */ |
3197 | typedef enum ARMASIdx { | |
3198 | ARMASIdx_NS = 0, | |
3199 | ARMASIdx_S = 1, | |
8bce44a2 RH |
3200 | ARMASIdx_TagNS = 2, |
3201 | ARMASIdx_TagS = 3, | |
9e273ef2 PM |
3202 | } ARMASIdx; |
3203 | ||
533e93f1 | 3204 | /* Return the Exception Level targeted by debug exceptions. */ |
3a298203 PM |
3205 | static inline int arm_debug_target_el(CPUARMState *env) |
3206 | { | |
81669b8b SF |
3207 | bool secure = arm_is_secure(env); |
3208 | bool route_to_el2 = false; | |
3209 | ||
e6ef0169 | 3210 | if (arm_is_el2_enabled(env)) { |
81669b8b | 3211 | route_to_el2 = env->cp15.hcr_el2 & HCR_TGE || |
b281ba42 | 3212 | env->cp15.mdcr_el2 & MDCR_TDE; |
81669b8b SF |
3213 | } |
3214 | ||
3215 | if (route_to_el2) { | |
3216 | return 2; | |
3217 | } else if (arm_feature(env, ARM_FEATURE_EL3) && | |
3218 | !arm_el_is_aa64(env, 3) && secure) { | |
3219 | return 3; | |
3220 | } else { | |
3221 | return 1; | |
3222 | } | |
3a298203 PM |
3223 | } |
3224 | ||
43bbce7f PM |
3225 | static inline bool arm_v7m_csselr_razwi(ARMCPU *cpu) |
3226 | { | |
3227 | /* If all the CLIDR.Ctypem bits are 0 there are no caches, and | |
3228 | * CSSELR is RAZ/WI. | |
3229 | */ | |
3230 | return (cpu->clidr & R_V7M_CLIDR_CTYPE_ALL_MASK) != 0; | |
3231 | } | |
3232 | ||
22af9025 | 3233 | /* See AArch64.GenerateDebugExceptionsFrom() in ARM ARM pseudocode */ |
3a298203 PM |
3234 | static inline bool aa64_generate_debug_exceptions(CPUARMState *env) |
3235 | { | |
22af9025 AB |
3236 | int cur_el = arm_current_el(env); |
3237 | int debug_el; | |
3238 | ||
3239 | if (cur_el == 3) { | |
3240 | return false; | |
533e93f1 PM |
3241 | } |
3242 | ||
22af9025 AB |
3243 | /* MDCR_EL3.SDD disables debug events from Secure state */ |
3244 | if (arm_is_secure_below_el3(env) | |
3245 | && extract32(env->cp15.mdcr_el3, 16, 1)) { | |
3246 | return false; | |
3a298203 | 3247 | } |
22af9025 AB |
3248 | |
3249 | /* | |
3250 | * Same EL to same EL debug exceptions need MDSCR_KDE enabled | |
3251 | * while not masking the (D)ebug bit in DAIF. | |
3252 | */ | |
3253 | debug_el = arm_debug_target_el(env); | |
3254 | ||
3255 | if (cur_el == debug_el) { | |
3256 | return extract32(env->cp15.mdscr_el1, 13, 1) | |
3257 | && !(env->daif & PSTATE_D); | |
3258 | } | |
3259 | ||
3260 | /* Otherwise the debug target needs to be a higher EL */ | |
3261 | return debug_el > cur_el; | |
3a298203 PM |
3262 | } |
3263 | ||
3264 | static inline bool aa32_generate_debug_exceptions(CPUARMState *env) | |
3265 | { | |
533e93f1 PM |
3266 | int el = arm_current_el(env); |
3267 | ||
3268 | if (el == 0 && arm_el_is_aa64(env, 1)) { | |
3a298203 PM |
3269 | return aa64_generate_debug_exceptions(env); |
3270 | } | |
533e93f1 PM |
3271 | |
3272 | if (arm_is_secure(env)) { | |
3273 | int spd; | |
3274 | ||
3275 | if (el == 0 && (env->cp15.sder & 1)) { | |
3276 | /* SDER.SUIDEN means debug exceptions from Secure EL0 | |
3277 | * are always enabled. Otherwise they are controlled by | |
3278 | * SDCR.SPD like those from other Secure ELs. | |
3279 | */ | |
3280 | return true; | |
3281 | } | |
3282 | ||
3283 | spd = extract32(env->cp15.mdcr_el3, 14, 2); | |
3284 | switch (spd) { | |
3285 | case 1: | |
3286 | /* SPD == 0b01 is reserved, but behaves as 0b00. */ | |
3287 | case 0: | |
3288 | /* For 0b00 we return true if external secure invasive debug | |
3289 | * is enabled. On real hardware this is controlled by external | |
3290 | * signals to the core. QEMU always permits debug, and behaves | |
3291 | * as if DBGEN, SPIDEN, NIDEN and SPNIDEN are all tied high. | |
3292 | */ | |
3293 | return true; | |
3294 | case 2: | |
3295 | return false; | |
3296 | case 3: | |
3297 | return true; | |
3298 | } | |
3299 | } | |
3300 | ||
3301 | return el != 2; | |
3a298203 PM |
3302 | } |
3303 | ||
3304 | /* Return true if debugging exceptions are currently enabled. | |
3305 | * This corresponds to what in ARM ARM pseudocode would be | |
3306 | * if UsingAArch32() then | |
3307 | * return AArch32.GenerateDebugExceptions() | |
3308 | * else | |
3309 | * return AArch64.GenerateDebugExceptions() | |
3310 | * We choose to push the if() down into this function for clarity, | |
3311 | * since the pseudocode has it at all callsites except for the one in | |
3312 | * CheckSoftwareStep(), where it is elided because both branches would | |
3313 | * always return the same value. | |
3a298203 PM |
3314 | */ |
3315 | static inline bool arm_generate_debug_exceptions(CPUARMState *env) | |
3316 | { | |
3317 | if (env->aarch64) { | |
3318 | return aa64_generate_debug_exceptions(env); | |
3319 | } else { | |
3320 | return aa32_generate_debug_exceptions(env); | |
3321 | } | |
3322 | } | |
3323 | ||
3324 | /* Is single-stepping active? (Note that the "is EL_D AArch64?" check | |
3325 | * implicitly means this always returns false in pre-v8 CPUs.) | |
3326 | */ | |
3327 | static inline bool arm_singlestep_active(CPUARMState *env) | |
3328 | { | |
3329 | return extract32(env->cp15.mdscr_el1, 0, 1) | |
3330 | && arm_el_is_aa64(env, arm_debug_target_el(env)) | |
3331 | && arm_generate_debug_exceptions(env); | |
3332 | } | |
3333 | ||
f9fd40eb PB |
3334 | static inline bool arm_sctlr_b(CPUARMState *env) |
3335 | { | |
3336 | return | |
3337 | /* We need not implement SCTLR.ITD in user-mode emulation, so | |
3338 | * let linux-user ignore the fact that it conflicts with SCTLR_B. | |
3339 | * This lets people run BE32 binaries with "-cpu any". | |
3340 | */ | |
3341 | #ifndef CONFIG_USER_ONLY | |
3342 | !arm_feature(env, ARM_FEATURE_V7) && | |
3343 | #endif | |
3344 | (env->cp15.sctlr_el[1] & SCTLR_B) != 0; | |
3345 | } | |
3346 | ||
aaec1432 | 3347 | uint64_t arm_sctlr(CPUARMState *env, int el); |
64e40755 | 3348 | |
8061a649 RH |
3349 | static inline bool arm_cpu_data_is_big_endian_a32(CPUARMState *env, |
3350 | bool sctlr_b) | |
3351 | { | |
3352 | #ifdef CONFIG_USER_ONLY | |
3353 | /* | |
3354 | * In system mode, BE32 is modelled in line with the | |
3355 | * architecture (as word-invariant big-endianness), where loads | |
3356 | * and stores are done little endian but from addresses which | |
3357 | * are adjusted by XORing with the appropriate constant. So the | |
3358 | * endianness to use for the raw data access is not affected by | |
3359 | * SCTLR.B. | |
3360 | * In user mode, however, we model BE32 as byte-invariant | |
3361 | * big-endianness (because user-only code cannot tell the | |
3362 | * difference), and so we need to use a data access endianness | |
3363 | * that depends on SCTLR.B. | |
3364 | */ | |
3365 | if (sctlr_b) { | |
3366 | return true; | |
3367 | } | |
3368 | #endif | |
3369 | /* In 32bit endianness is determined by looking at CPSR's E bit */ | |
3370 | return env->uncached_cpsr & CPSR_E; | |
3371 | } | |
3372 | ||
3373 | static inline bool arm_cpu_data_is_big_endian_a64(int el, uint64_t sctlr) | |
3374 | { | |
3375 | return sctlr & (el ? SCTLR_EE : SCTLR_E0E); | |
3376 | } | |
64e40755 | 3377 | |
ed50ff78 PC |
3378 | /* Return true if the processor is in big-endian mode. */ |
3379 | static inline bool arm_cpu_data_is_big_endian(CPUARMState *env) | |
3380 | { | |
ed50ff78 | 3381 | if (!is_a64(env)) { |
8061a649 | 3382 | return arm_cpu_data_is_big_endian_a32(env, arm_sctlr_b(env)); |
64e40755 RH |
3383 | } else { |
3384 | int cur_el = arm_current_el(env); | |
3385 | uint64_t sctlr = arm_sctlr(env, cur_el); | |
8061a649 | 3386 | return arm_cpu_data_is_big_endian_a64(cur_el, sctlr); |
ed50ff78 | 3387 | } |
ed50ff78 PC |
3388 | } |
3389 | ||
4f7c64b3 | 3390 | typedef CPUARMState CPUArchState; |
2161a612 | 3391 | typedef ARMCPU ArchCPU; |
4f7c64b3 | 3392 | |
022c62cb | 3393 | #include "exec/cpu-all.h" |
622ed360 | 3394 | |
fdd1b228 | 3395 | /* |
a378206a RH |
3396 | * We have more than 32-bits worth of state per TB, so we split the data |
3397 | * between tb->flags and tb->cs_base, which is otherwise unused for ARM. | |
3398 | * We collect these two parts in CPUARMTBFlags where they are named | |
3399 | * flags and flags2 respectively. | |
fdd1b228 | 3400 | * |
a378206a RH |
3401 | * The flags that are shared between all execution modes, TBFLAG_ANY, |
3402 | * are stored in flags. The flags that are specific to a given mode | |
3403 | * are stores in flags2. Since cs_base is sized on the configured | |
3404 | * address size, flags2 always has 64-bits for A64, and a minimum of | |
3405 | * 32-bits for A32 and M32. | |
3406 | * | |
3407 | * The bits for 32-bit A-profile and M-profile partially overlap: | |
3408 | * | |
5896f392 RH |
3409 | * 31 23 11 10 0 |
3410 | * +-------------+----------+----------------+ | |
3411 | * | | | TBFLAG_A32 | | |
3412 | * | TBFLAG_AM32 | +-----+----------+ | |
3413 | * | | |TBFLAG_M32| | |
3414 | * +-------------+----------------+----------+ | |
3415 | * 31 23 5 4 0 | |
79cabf1f | 3416 | * |
fdd1b228 | 3417 | * Unless otherwise noted, these bits are cached in env->hflags. |
3926cc84 | 3418 | */ |
eee81d41 RH |
3419 | FIELD(TBFLAG_ANY, AARCH64_STATE, 0, 1) |
3420 | FIELD(TBFLAG_ANY, SS_ACTIVE, 1, 1) | |
3421 | FIELD(TBFLAG_ANY, PSTATE__SS, 2, 1) /* Not cached. */ | |
3422 | FIELD(TBFLAG_ANY, BE_DATA, 3, 1) | |
3423 | FIELD(TBFLAG_ANY, MMUIDX, 4, 4) | |
9dbbc748 | 3424 | /* Target EL if we take a floating-point-disabled exception */ |
eee81d41 | 3425 | FIELD(TBFLAG_ANY, FPEXC_EL, 8, 2) |
79cabf1f | 3426 | /* For A-profile only, target EL for debug exceptions. */ |
eee81d41 | 3427 | FIELD(TBFLAG_ANY, DEBUG_TARGET_EL, 10, 2) |
4479ec30 RH |
3428 | /* Memory operations require alignment: SCTLR_ELx.A or CCR.UNALIGN_TRP */ |
3429 | FIELD(TBFLAG_ANY, ALIGN_MEM, 12, 1) | |
79cabf1f | 3430 | |
8bd587c1 | 3431 | /* |
79cabf1f | 3432 | * Bit usage when in AArch32 state, both A- and M-profile. |
8bd587c1 | 3433 | */ |
5896f392 RH |
3434 | FIELD(TBFLAG_AM32, CONDEXEC, 24, 8) /* Not cached. */ |
3435 | FIELD(TBFLAG_AM32, THUMB, 23, 1) /* Not cached. */ | |
3926cc84 | 3436 | |
79cabf1f RH |
3437 | /* |
3438 | * Bit usage when in AArch32 state, for A-profile only. | |
3439 | */ | |
5896f392 RH |
3440 | FIELD(TBFLAG_A32, VECLEN, 0, 3) /* Not cached. */ |
3441 | FIELD(TBFLAG_A32, VECSTRIDE, 3, 2) /* Not cached. */ | |
ea7ac69d PM |
3442 | /* |
3443 | * We store the bottom two bits of the CPAR as TB flags and handle | |
3444 | * checks on the other bits at runtime. This shares the same bits as | |
3445 | * VECSTRIDE, which is OK as no XScale CPU has VFP. | |
fdd1b228 | 3446 | * Not cached, because VECLEN+VECSTRIDE are not cached. |
ea7ac69d | 3447 | */ |
5896f392 RH |
3448 | FIELD(TBFLAG_A32, XSCALE_CPAR, 5, 2) |
3449 | FIELD(TBFLAG_A32, VFPEN, 7, 1) /* Partially cached, minus FPEXC. */ | |
3450 | FIELD(TBFLAG_A32, SCTLR__B, 8, 1) /* Cannot overlap with SCTLR_B */ | |
3451 | FIELD(TBFLAG_A32, HSTR_ACTIVE, 9, 1) | |
7fbb535f PM |
3452 | /* |
3453 | * Indicates whether cp register reads and writes by guest code should access | |
3454 | * the secure or nonsecure bank of banked registers; note that this is not | |
3455 | * the same thing as the current security state of the processor! | |
3456 | */ | |
5896f392 | 3457 | FIELD(TBFLAG_A32, NS, 10, 1) |
79cabf1f RH |
3458 | |
3459 | /* | |
3460 | * Bit usage when in AArch32 state, for M-profile only. | |
3461 | */ | |
3462 | /* Handler (ie not Thread) mode */ | |
5896f392 | 3463 | FIELD(TBFLAG_M32, HANDLER, 0, 1) |
79cabf1f | 3464 | /* Whether we should generate stack-limit checks */ |
5896f392 | 3465 | FIELD(TBFLAG_M32, STACKCHECK, 1, 1) |
79cabf1f | 3466 | /* Set if FPCCR.LSPACT is set */ |
5896f392 | 3467 | FIELD(TBFLAG_M32, LSPACT, 2, 1) /* Not cached. */ |
79cabf1f | 3468 | /* Set if we must create a new FP context */ |
5896f392 | 3469 | FIELD(TBFLAG_M32, NEW_FP_CTXT_NEEDED, 3, 1) /* Not cached. */ |
79cabf1f | 3470 | /* Set if FPCCR.S does not match current security state */ |
5896f392 | 3471 | FIELD(TBFLAG_M32, FPCCR_S_WRONG, 4, 1) /* Not cached. */ |
79cabf1f RH |
3472 | |
3473 | /* | |
3474 | * Bit usage when in AArch64 state | |
3475 | */ | |
476a4692 | 3476 | FIELD(TBFLAG_A64, TBII, 0, 2) |
aad821ac RH |
3477 | FIELD(TBFLAG_A64, SVEEXC_EL, 2, 2) |
3478 | FIELD(TBFLAG_A64, ZCR_LEN, 4, 4) | |
0816ef1b | 3479 | FIELD(TBFLAG_A64, PAUTH_ACTIVE, 8, 1) |
08f1434a | 3480 | FIELD(TBFLAG_A64, BT, 9, 1) |
fdd1b228 | 3481 | FIELD(TBFLAG_A64, BTYPE, 10, 2) /* Not cached. */ |
4a9ee99d | 3482 | FIELD(TBFLAG_A64, TBID, 12, 2) |
cc28fc30 | 3483 | FIELD(TBFLAG_A64, UNPRIV, 14, 1) |
81ae05fa RH |
3484 | FIELD(TBFLAG_A64, ATA, 15, 1) |
3485 | FIELD(TBFLAG_A64, TCMA, 16, 2) | |
3486 | FIELD(TBFLAG_A64, MTE_ACTIVE, 18, 1) | |
3487 | FIELD(TBFLAG_A64, MTE0_ACTIVE, 19, 1) | |
a1705768 | 3488 | |
a729a46b RH |
3489 | /* |
3490 | * Helpers for using the above. | |
3491 | */ | |
3492 | #define DP_TBFLAG_ANY(DST, WHICH, VAL) \ | |
3902bfc6 | 3493 | (DST.flags = FIELD_DP32(DST.flags, TBFLAG_ANY, WHICH, VAL)) |
a729a46b | 3494 | #define DP_TBFLAG_A64(DST, WHICH, VAL) \ |
a378206a | 3495 | (DST.flags2 = FIELD_DP32(DST.flags2, TBFLAG_A64, WHICH, VAL)) |
a729a46b | 3496 | #define DP_TBFLAG_A32(DST, WHICH, VAL) \ |
a378206a | 3497 | (DST.flags2 = FIELD_DP32(DST.flags2, TBFLAG_A32, WHICH, VAL)) |
a729a46b | 3498 | #define DP_TBFLAG_M32(DST, WHICH, VAL) \ |
a378206a | 3499 | (DST.flags2 = FIELD_DP32(DST.flags2, TBFLAG_M32, WHICH, VAL)) |
a729a46b | 3500 | #define DP_TBFLAG_AM32(DST, WHICH, VAL) \ |
a378206a | 3501 | (DST.flags2 = FIELD_DP32(DST.flags2, TBFLAG_AM32, WHICH, VAL)) |
a729a46b | 3502 | |
3902bfc6 | 3503 | #define EX_TBFLAG_ANY(IN, WHICH) FIELD_EX32(IN.flags, TBFLAG_ANY, WHICH) |
a378206a RH |
3504 | #define EX_TBFLAG_A64(IN, WHICH) FIELD_EX32(IN.flags2, TBFLAG_A64, WHICH) |
3505 | #define EX_TBFLAG_A32(IN, WHICH) FIELD_EX32(IN.flags2, TBFLAG_A32, WHICH) | |
3506 | #define EX_TBFLAG_M32(IN, WHICH) FIELD_EX32(IN.flags2, TBFLAG_M32, WHICH) | |
3507 | #define EX_TBFLAG_AM32(IN, WHICH) FIELD_EX32(IN.flags2, TBFLAG_AM32, WHICH) | |
a729a46b | 3508 | |
fb901c90 RH |
3509 | /** |
3510 | * cpu_mmu_index: | |
3511 | * @env: The cpu environment | |
3512 | * @ifetch: True for code access, false for data access. | |
3513 | * | |
3514 | * Return the core mmu index for the current translation regime. | |
3515 | * This function is used by generic TCG code paths. | |
3516 | */ | |
3517 | static inline int cpu_mmu_index(CPUARMState *env, bool ifetch) | |
3518 | { | |
a729a46b | 3519 | return EX_TBFLAG_ANY(env->hflags, MMUIDX); |
fb901c90 RH |
3520 | } |
3521 | ||
f9fd40eb PB |
3522 | static inline bool bswap_code(bool sctlr_b) |
3523 | { | |
3524 | #ifdef CONFIG_USER_ONLY | |
3525 | /* BE8 (SCTLR.B = 0, TARGET_WORDS_BIGENDIAN = 1) is mixed endian. | |
3526 | * The invalid combination SCTLR.B=1/CPSR.E=1/TARGET_WORDS_BIGENDIAN=0 | |
3527 | * would also end up as a mixed-endian mode with BE code, LE data. | |
3528 | */ | |
3529 | return | |
3530 | #ifdef TARGET_WORDS_BIGENDIAN | |
3531 | 1 ^ | |
3532 | #endif | |
3533 | sctlr_b; | |
3534 | #else | |
e334bd31 PB |
3535 | /* All code access in ARM is little endian, and there are no loaders |
3536 | * doing swaps that need to be reversed | |
f9fd40eb PB |
3537 | */ |
3538 | return 0; | |
3539 | #endif | |
3540 | } | |
3541 | ||
c3ae85fc PB |
3542 | #ifdef CONFIG_USER_ONLY |
3543 | static inline bool arm_cpu_bswap_data(CPUARMState *env) | |
3544 | { | |
3545 | return | |
3546 | #ifdef TARGET_WORDS_BIGENDIAN | |
3547 | 1 ^ | |
3548 | #endif | |
3549 | arm_cpu_data_is_big_endian(env); | |
3550 | } | |
3551 | #endif | |
3552 | ||
a9e01311 RH |
3553 | void cpu_get_tb_cpu_state(CPUARMState *env, target_ulong *pc, |
3554 | target_ulong *cs_base, uint32_t *flags); | |
6b917547 | 3555 | |
98128601 RH |
3556 | enum { |
3557 | QEMU_PSCI_CONDUIT_DISABLED = 0, | |
3558 | QEMU_PSCI_CONDUIT_SMC = 1, | |
3559 | QEMU_PSCI_CONDUIT_HVC = 2, | |
3560 | }; | |
3561 | ||
017518c1 PM |
3562 | #ifndef CONFIG_USER_ONLY |
3563 | /* Return the address space index to use for a memory access */ | |
3564 | static inline int arm_asidx_from_attrs(CPUState *cs, MemTxAttrs attrs) | |
3565 | { | |
3566 | return attrs.secure ? ARMASIdx_S : ARMASIdx_NS; | |
3567 | } | |
5ce4ff65 PM |
3568 | |
3569 | /* Return the AddressSpace to use for a memory access | |
3570 | * (which depends on whether the access is S or NS, and whether | |
3571 | * the board gave us a separate AddressSpace for S accesses). | |
3572 | */ | |
3573 | static inline AddressSpace *arm_addressspace(CPUState *cs, MemTxAttrs attrs) | |
3574 | { | |
3575 | return cpu_get_address_space(cs, arm_asidx_from_attrs(cs, attrs)); | |
3576 | } | |
017518c1 PM |
3577 | #endif |
3578 | ||
bd7d00fc | 3579 | /** |
b5c53d1b AL |
3580 | * arm_register_pre_el_change_hook: |
3581 | * Register a hook function which will be called immediately before this | |
bd7d00fc PM |
3582 | * CPU changes exception level or mode. The hook function will be |
3583 | * passed a pointer to the ARMCPU and the opaque data pointer passed | |
3584 | * to this function when the hook was registered. | |
b5c53d1b AL |
3585 | * |
3586 | * Note that if a pre-change hook is called, any registered post-change hooks | |
3587 | * are guaranteed to subsequently be called. | |
bd7d00fc | 3588 | */ |
b5c53d1b | 3589 | void arm_register_pre_el_change_hook(ARMCPU *cpu, ARMELChangeHookFn *hook, |
bd7d00fc | 3590 | void *opaque); |
b5c53d1b AL |
3591 | /** |
3592 | * arm_register_el_change_hook: | |
3593 | * Register a hook function which will be called immediately after this | |
3594 | * CPU changes exception level or mode. The hook function will be | |
3595 | * passed a pointer to the ARMCPU and the opaque data pointer passed | |
3596 | * to this function when the hook was registered. | |
3597 | * | |
3598 | * Note that any registered hooks registered here are guaranteed to be called | |
3599 | * if pre-change hooks have been. | |
3600 | */ | |
3601 | void arm_register_el_change_hook(ARMCPU *cpu, ARMELChangeHookFn *hook, void | |
3602 | *opaque); | |
bd7d00fc | 3603 | |
3d74e2e9 RH |
3604 | /** |
3605 | * arm_rebuild_hflags: | |
3606 | * Rebuild the cached TBFLAGS for arbitrary changed processor state. | |
3607 | */ | |
3608 | void arm_rebuild_hflags(CPUARMState *env); | |
3609 | ||
9a2b5256 RH |
3610 | /** |
3611 | * aa32_vfp_dreg: | |
3612 | * Return a pointer to the Dn register within env in 32-bit mode. | |
3613 | */ | |
3614 | static inline uint64_t *aa32_vfp_dreg(CPUARMState *env, unsigned regno) | |
3615 | { | |
c39c2b90 | 3616 | return &env->vfp.zregs[regno >> 1].d[regno & 1]; |
9a2b5256 RH |
3617 | } |
3618 | ||
3619 | /** | |
3620 | * aa32_vfp_qreg: | |
3621 | * Return a pointer to the Qn register within env in 32-bit mode. | |
3622 | */ | |
3623 | static inline uint64_t *aa32_vfp_qreg(CPUARMState *env, unsigned regno) | |
3624 | { | |
c39c2b90 | 3625 | return &env->vfp.zregs[regno].d[0]; |
9a2b5256 RH |
3626 | } |
3627 | ||
3628 | /** | |
3629 | * aa64_vfp_qreg: | |
3630 | * Return a pointer to the Qn register within env in 64-bit mode. | |
3631 | */ | |
3632 | static inline uint64_t *aa64_vfp_qreg(CPUARMState *env, unsigned regno) | |
3633 | { | |
c39c2b90 | 3634 | return &env->vfp.zregs[regno].d[0]; |
9a2b5256 RH |
3635 | } |
3636 | ||
028e2a7b RH |
3637 | /* Shared between translate-sve.c and sve_helper.c. */ |
3638 | extern const uint64_t pred_esz_masks[4]; | |
3639 | ||
149d3b31 RH |
3640 | /* Helper for the macros below, validating the argument type. */ |
3641 | static inline MemTxAttrs *typecheck_memtxattrs(MemTxAttrs *x) | |
3642 | { | |
3643 | return x; | |
3644 | } | |
3645 | ||
3646 | /* | |
3647 | * Lvalue macros for ARM TLB bits that we must cache in the TCG TLB. | |
3648 | * Using these should be a bit more self-documenting than using the | |
3649 | * generic target bits directly. | |
3650 | */ | |
3651 | #define arm_tlb_bti_gp(x) (typecheck_memtxattrs(x)->target_tlb_bit0) | |
206adacf | 3652 | #define arm_tlb_mte_tagged(x) (typecheck_memtxattrs(x)->target_tlb_bit1) |
149d3b31 | 3653 | |
be5d6f48 RH |
3654 | /* |
3655 | * AArch64 usage of the PAGE_TARGET_* bits for linux-user. | |
3656 | */ | |
3657 | #define PAGE_BTI PAGE_TARGET_1 | |
d109b46d | 3658 | #define PAGE_MTE PAGE_TARGET_2 |
be5d6f48 | 3659 | |
0e0c030c RH |
3660 | #ifdef TARGET_TAGGED_ADDRESSES |
3661 | /** | |
3662 | * cpu_untagged_addr: | |
3663 | * @cs: CPU context | |
3664 | * @x: tagged address | |
3665 | * | |
3666 | * Remove any address tag from @x. This is explicitly related to the | |
3667 | * linux syscall TIF_TAGGED_ADDR setting, not TBI in general. | |
3668 | * | |
3669 | * There should be a better place to put this, but we need this in | |
3670 | * include/exec/cpu_ldst.h, and not some place linux-user specific. | |
3671 | */ | |
3672 | static inline target_ulong cpu_untagged_addr(CPUState *cs, target_ulong x) | |
3673 | { | |
3674 | ARMCPU *cpu = ARM_CPU(cs); | |
3675 | if (cpu->env.tagged_addr_enable) { | |
3676 | /* | |
3677 | * TBI is enabled for userspace but not kernelspace addresses. | |
3678 | * Only clear the tag if bit 55 is clear. | |
3679 | */ | |
3680 | x &= sextract64(x, 0, 56); | |
3681 | } | |
3682 | return x; | |
3683 | } | |
3684 | #endif | |
3685 | ||
873b73c0 PM |
3686 | /* |
3687 | * Naming convention for isar_feature functions: | |
3688 | * Functions which test 32-bit ID registers should have _aa32_ in | |
3689 | * their name. Functions which test 64-bit ID registers should have | |
6e61f839 PM |
3690 | * _aa64_ in their name. These must only be used in code where we |
3691 | * know for certain that the CPU has AArch32 or AArch64 respectively | |
3692 | * or where the correct answer for a CPU which doesn't implement that | |
3693 | * CPU state is "false" (eg when generating A32 or A64 code, if adding | |
3694 | * system registers that are specific to that CPU state, for "should | |
3695 | * we let this system register bit be set" tests where the 32-bit | |
3696 | * flavour of the register doesn't have the bit, and so on). | |
3697 | * Functions which simply ask "does this feature exist at all" have | |
3698 | * _any_ in their name, and always return the logical OR of the _aa64_ | |
3699 | * and the _aa32_ function. | |
873b73c0 PM |
3700 | */ |
3701 | ||
962fcbf2 RH |
3702 | /* |
3703 | * 32-bit feature tests via id registers. | |
3704 | */ | |
873b73c0 | 3705 | static inline bool isar_feature_aa32_thumb_div(const ARMISARegisters *id) |
7e0cf8b4 RH |
3706 | { |
3707 | return FIELD_EX32(id->id_isar0, ID_ISAR0, DIVIDE) != 0; | |
3708 | } | |
3709 | ||
873b73c0 | 3710 | static inline bool isar_feature_aa32_arm_div(const ARMISARegisters *id) |
7e0cf8b4 RH |
3711 | { |
3712 | return FIELD_EX32(id->id_isar0, ID_ISAR0, DIVIDE) > 1; | |
3713 | } | |
05903f03 PM |
3714 | |
3715 | static inline bool isar_feature_aa32_lob(const ARMISARegisters *id) | |
3716 | { | |
3717 | /* (M-profile) low-overhead loops and branch future */ | |
3718 | return FIELD_EX32(id->id_isar0, ID_ISAR0, CMPBRANCH) >= 3; | |
3719 | } | |
7e0cf8b4 | 3720 | |
873b73c0 | 3721 | static inline bool isar_feature_aa32_jazelle(const ARMISARegisters *id) |
09cbd501 RH |
3722 | { |
3723 | return FIELD_EX32(id->id_isar1, ID_ISAR1, JAZELLE) != 0; | |
3724 | } | |
3725 | ||
962fcbf2 RH |
3726 | static inline bool isar_feature_aa32_aes(const ARMISARegisters *id) |
3727 | { | |
3728 | return FIELD_EX32(id->id_isar5, ID_ISAR5, AES) != 0; | |
3729 | } | |
3730 | ||
3731 | static inline bool isar_feature_aa32_pmull(const ARMISARegisters *id) | |
3732 | { | |
3733 | return FIELD_EX32(id->id_isar5, ID_ISAR5, AES) > 1; | |
3734 | } | |
3735 | ||
3736 | static inline bool isar_feature_aa32_sha1(const ARMISARegisters *id) | |
3737 | { | |
3738 | return FIELD_EX32(id->id_isar5, ID_ISAR5, SHA1) != 0; | |
3739 | } | |
3740 | ||
3741 | static inline bool isar_feature_aa32_sha2(const ARMISARegisters *id) | |
3742 | { | |
3743 | return FIELD_EX32(id->id_isar5, ID_ISAR5, SHA2) != 0; | |
3744 | } | |
3745 | ||
3746 | static inline bool isar_feature_aa32_crc32(const ARMISARegisters *id) | |
3747 | { | |
3748 | return FIELD_EX32(id->id_isar5, ID_ISAR5, CRC32) != 0; | |
3749 | } | |
3750 | ||
3751 | static inline bool isar_feature_aa32_rdm(const ARMISARegisters *id) | |
3752 | { | |
3753 | return FIELD_EX32(id->id_isar5, ID_ISAR5, RDM) != 0; | |
3754 | } | |
3755 | ||
3756 | static inline bool isar_feature_aa32_vcma(const ARMISARegisters *id) | |
3757 | { | |
3758 | return FIELD_EX32(id->id_isar5, ID_ISAR5, VCMA) != 0; | |
3759 | } | |
3760 | ||
6c1f6f27 RH |
3761 | static inline bool isar_feature_aa32_jscvt(const ARMISARegisters *id) |
3762 | { | |
3763 | return FIELD_EX32(id->id_isar6, ID_ISAR6, JSCVT) != 0; | |
3764 | } | |
3765 | ||
962fcbf2 RH |
3766 | static inline bool isar_feature_aa32_dp(const ARMISARegisters *id) |
3767 | { | |
3768 | return FIELD_EX32(id->id_isar6, ID_ISAR6, DP) != 0; | |
3769 | } | |
3770 | ||
87732318 RH |
3771 | static inline bool isar_feature_aa32_fhm(const ARMISARegisters *id) |
3772 | { | |
3773 | return FIELD_EX32(id->id_isar6, ID_ISAR6, FHM) != 0; | |
3774 | } | |
3775 | ||
9888bd1e RH |
3776 | static inline bool isar_feature_aa32_sb(const ARMISARegisters *id) |
3777 | { | |
3778 | return FIELD_EX32(id->id_isar6, ID_ISAR6, SB) != 0; | |
3779 | } | |
3780 | ||
cb570bd3 RH |
3781 | static inline bool isar_feature_aa32_predinv(const ARMISARegisters *id) |
3782 | { | |
3783 | return FIELD_EX32(id->id_isar6, ID_ISAR6, SPECRES) != 0; | |
3784 | } | |
3785 | ||
46f4976f PM |
3786 | static inline bool isar_feature_aa32_ras(const ARMISARegisters *id) |
3787 | { | |
3788 | return FIELD_EX32(id->id_pfr0, ID_PFR0, RAS) != 0; | |
3789 | } | |
3790 | ||
dfc523a8 PM |
3791 | static inline bool isar_feature_aa32_mprofile(const ARMISARegisters *id) |
3792 | { | |
3793 | return FIELD_EX32(id->id_pfr1, ID_PFR1, MPROGMOD) != 0; | |
3794 | } | |
3795 | ||
83ff3d6a PM |
3796 | static inline bool isar_feature_aa32_m_sec_state(const ARMISARegisters *id) |
3797 | { | |
3798 | /* | |
3799 | * Return true if M-profile state handling insns | |
3800 | * (VSCCLRM, CLRM, FPCTX access insns) are implemented | |
3801 | */ | |
3802 | return FIELD_EX32(id->id_pfr1, ID_PFR1, SECURITY) >= 3; | |
3803 | } | |
3804 | ||
5763190f RH |
3805 | static inline bool isar_feature_aa32_fp16_arith(const ARMISARegisters *id) |
3806 | { | |
dfc523a8 PM |
3807 | /* Sadly this is encoded differently for A-profile and M-profile */ |
3808 | if (isar_feature_aa32_mprofile(id)) { | |
3809 | return FIELD_EX32(id->mvfr1, MVFR1, FP16) > 0; | |
3810 | } else { | |
3811 | return FIELD_EX32(id->mvfr1, MVFR1, FPHP) >= 3; | |
3812 | } | |
5763190f RH |
3813 | } |
3814 | ||
7fbc6a40 RH |
3815 | static inline bool isar_feature_aa32_vfp_simd(const ARMISARegisters *id) |
3816 | { | |
3817 | /* | |
3818 | * Return true if either VFP or SIMD is implemented. | |
3819 | * In this case, a minimum of VFP w/ D0-D15. | |
3820 | */ | |
3821 | return FIELD_EX32(id->mvfr0, MVFR0, SIMDREG) > 0; | |
3822 | } | |
3823 | ||
0e13ba78 | 3824 | static inline bool isar_feature_aa32_simd_r32(const ARMISARegisters *id) |
b3ff4b87 PM |
3825 | { |
3826 | /* Return true if D16-D31 are implemented */ | |
b3a816f6 | 3827 | return FIELD_EX32(id->mvfr0, MVFR0, SIMDREG) >= 2; |
b3ff4b87 PM |
3828 | } |
3829 | ||
266bd25c PM |
3830 | static inline bool isar_feature_aa32_fpshvec(const ARMISARegisters *id) |
3831 | { | |
b3a816f6 | 3832 | return FIELD_EX32(id->mvfr0, MVFR0, FPSHVEC) > 0; |
266bd25c PM |
3833 | } |
3834 | ||
f67957e1 RH |
3835 | static inline bool isar_feature_aa32_fpsp_v2(const ARMISARegisters *id) |
3836 | { | |
3837 | /* Return true if CPU supports single precision floating point, VFPv2 */ | |
3838 | return FIELD_EX32(id->mvfr0, MVFR0, FPSP) > 0; | |
3839 | } | |
3840 | ||
3841 | static inline bool isar_feature_aa32_fpsp_v3(const ARMISARegisters *id) | |
3842 | { | |
3843 | /* Return true if CPU supports single precision floating point, VFPv3 */ | |
3844 | return FIELD_EX32(id->mvfr0, MVFR0, FPSP) >= 2; | |
3845 | } | |
3846 | ||
c4ff8735 | 3847 | static inline bool isar_feature_aa32_fpdp_v2(const ARMISARegisters *id) |
1120827f | 3848 | { |
c4ff8735 | 3849 | /* Return true if CPU supports double precision floating point, VFPv2 */ |
b3a816f6 | 3850 | return FIELD_EX32(id->mvfr0, MVFR0, FPDP) > 0; |
1120827f PM |
3851 | } |
3852 | ||
f67957e1 RH |
3853 | static inline bool isar_feature_aa32_fpdp_v3(const ARMISARegisters *id) |
3854 | { | |
3855 | /* Return true if CPU supports double precision floating point, VFPv3 */ | |
3856 | return FIELD_EX32(id->mvfr0, MVFR0, FPDP) >= 2; | |
3857 | } | |
3858 | ||
7d63183f RH |
3859 | static inline bool isar_feature_aa32_vfp(const ARMISARegisters *id) |
3860 | { | |
3861 | return isar_feature_aa32_fpsp_v2(id) || isar_feature_aa32_fpdp_v2(id); | |
3862 | } | |
3863 | ||
602f6e42 PM |
3864 | /* |
3865 | * We always set the FP and SIMD FP16 fields to indicate identical | |
3866 | * levels of support (assuming SIMD is implemented at all), so | |
3867 | * we only need one set of accessors. | |
3868 | */ | |
3869 | static inline bool isar_feature_aa32_fp16_spconv(const ARMISARegisters *id) | |
3870 | { | |
b3a816f6 | 3871 | return FIELD_EX32(id->mvfr1, MVFR1, FPHP) > 0; |
602f6e42 PM |
3872 | } |
3873 | ||
3874 | static inline bool isar_feature_aa32_fp16_dpconv(const ARMISARegisters *id) | |
3875 | { | |
b3a816f6 | 3876 | return FIELD_EX32(id->mvfr1, MVFR1, FPHP) > 1; |
602f6e42 PM |
3877 | } |
3878 | ||
c52881bb RH |
3879 | /* |
3880 | * Note that this ID register field covers both VFP and Neon FMAC, | |
3881 | * so should usually be tested in combination with some other | |
3882 | * check that confirms the presence of whichever of VFP or Neon is | |
3883 | * relevant, to avoid accidentally enabling a Neon feature on | |
3884 | * a VFP-no-Neon core or vice-versa. | |
3885 | */ | |
3886 | static inline bool isar_feature_aa32_simdfmac(const ARMISARegisters *id) | |
3887 | { | |
3888 | return FIELD_EX32(id->mvfr1, MVFR1, SIMDFMAC) != 0; | |
3889 | } | |
3890 | ||
c0c760af PM |
3891 | static inline bool isar_feature_aa32_vsel(const ARMISARegisters *id) |
3892 | { | |
b3a816f6 | 3893 | return FIELD_EX32(id->mvfr2, MVFR2, FPMISC) >= 1; |
c0c760af PM |
3894 | } |
3895 | ||
3896 | static inline bool isar_feature_aa32_vcvt_dr(const ARMISARegisters *id) | |
3897 | { | |
b3a816f6 | 3898 | return FIELD_EX32(id->mvfr2, MVFR2, FPMISC) >= 2; |
c0c760af PM |
3899 | } |
3900 | ||
3901 | static inline bool isar_feature_aa32_vrint(const ARMISARegisters *id) | |
3902 | { | |
b3a816f6 | 3903 | return FIELD_EX32(id->mvfr2, MVFR2, FPMISC) >= 3; |
c0c760af PM |
3904 | } |
3905 | ||
3906 | static inline bool isar_feature_aa32_vminmaxnm(const ARMISARegisters *id) | |
3907 | { | |
b3a816f6 | 3908 | return FIELD_EX32(id->mvfr2, MVFR2, FPMISC) >= 4; |
c0c760af PM |
3909 | } |
3910 | ||
0ae0326b PM |
3911 | static inline bool isar_feature_aa32_pxn(const ARMISARegisters *id) |
3912 | { | |
3913 | return FIELD_EX32(id->id_mmfr0, ID_MMFR0, VMSA) >= 4; | |
3914 | } | |
3915 | ||
3d6ad6bb RH |
3916 | static inline bool isar_feature_aa32_pan(const ARMISARegisters *id) |
3917 | { | |
10054016 | 3918 | return FIELD_EX32(id->id_mmfr3, ID_MMFR3, PAN) != 0; |
3d6ad6bb RH |
3919 | } |
3920 | ||
3921 | static inline bool isar_feature_aa32_ats1e1(const ARMISARegisters *id) | |
3922 | { | |
10054016 | 3923 | return FIELD_EX32(id->id_mmfr3, ID_MMFR3, PAN) >= 2; |
3d6ad6bb RH |
3924 | } |
3925 | ||
a6179538 PM |
3926 | static inline bool isar_feature_aa32_pmu_8_1(const ARMISARegisters *id) |
3927 | { | |
3928 | /* 0xf means "non-standard IMPDEF PMU" */ | |
3929 | return FIELD_EX32(id->id_dfr0, ID_DFR0, PERFMON) >= 4 && | |
3930 | FIELD_EX32(id->id_dfr0, ID_DFR0, PERFMON) != 0xf; | |
3931 | } | |
3932 | ||
15dd1ebd PM |
3933 | static inline bool isar_feature_aa32_pmu_8_4(const ARMISARegisters *id) |
3934 | { | |
3935 | /* 0xf means "non-standard IMPDEF PMU" */ | |
3936 | return FIELD_EX32(id->id_dfr0, ID_DFR0, PERFMON) >= 5 && | |
3937 | FIELD_EX32(id->id_dfr0, ID_DFR0, PERFMON) != 0xf; | |
3938 | } | |
3939 | ||
4036b7d1 PM |
3940 | static inline bool isar_feature_aa32_hpd(const ARMISARegisters *id) |
3941 | { | |
3942 | return FIELD_EX32(id->id_mmfr4, ID_MMFR4, HPDS) != 0; | |
3943 | } | |
3944 | ||
f6287c24 PM |
3945 | static inline bool isar_feature_aa32_ac2(const ARMISARegisters *id) |
3946 | { | |
3947 | return FIELD_EX32(id->id_mmfr4, ID_MMFR4, AC2) != 0; | |
3948 | } | |
3949 | ||
957e6155 PM |
3950 | static inline bool isar_feature_aa32_ccidx(const ARMISARegisters *id) |
3951 | { | |
3952 | return FIELD_EX32(id->id_mmfr4, ID_MMFR4, CCIDX) != 0; | |
3953 | } | |
3954 | ||
ce3125be PM |
3955 | static inline bool isar_feature_aa32_tts2uxn(const ARMISARegisters *id) |
3956 | { | |
3957 | return FIELD_EX32(id->id_mmfr4, ID_MMFR4, XNX) != 0; | |
3958 | } | |
3959 | ||
dc8b1853 RC |
3960 | static inline bool isar_feature_aa32_dit(const ARMISARegisters *id) |
3961 | { | |
3962 | return FIELD_EX32(id->id_pfr0, ID_PFR0, DIT) != 0; | |
3963 | } | |
3964 | ||
f2f68a78 RC |
3965 | static inline bool isar_feature_aa32_ssbs(const ARMISARegisters *id) |
3966 | { | |
3967 | return FIELD_EX32(id->id_pfr2, ID_PFR2, SSBS) != 0; | |
3968 | } | |
3969 | ||
962fcbf2 RH |
3970 | /* |
3971 | * 64-bit feature tests via id registers. | |
3972 | */ | |
3973 | static inline bool isar_feature_aa64_aes(const ARMISARegisters *id) | |
3974 | { | |
3975 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, AES) != 0; | |
3976 | } | |
3977 | ||
3978 | static inline bool isar_feature_aa64_pmull(const ARMISARegisters *id) | |
3979 | { | |
3980 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, AES) > 1; | |
3981 | } | |
3982 | ||
3983 | static inline bool isar_feature_aa64_sha1(const ARMISARegisters *id) | |
3984 | { | |
3985 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, SHA1) != 0; | |
3986 | } | |
3987 | ||
3988 | static inline bool isar_feature_aa64_sha256(const ARMISARegisters *id) | |
3989 | { | |
3990 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, SHA2) != 0; | |
3991 | } | |
3992 | ||
3993 | static inline bool isar_feature_aa64_sha512(const ARMISARegisters *id) | |
3994 | { | |
3995 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, SHA2) > 1; | |
3996 | } | |
3997 | ||
3998 | static inline bool isar_feature_aa64_crc32(const ARMISARegisters *id) | |
3999 | { | |
4000 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, CRC32) != 0; | |
4001 | } | |
4002 | ||
4003 | static inline bool isar_feature_aa64_atomics(const ARMISARegisters *id) | |
4004 | { | |
4005 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, ATOMIC) != 0; | |
4006 | } | |
4007 | ||
4008 | static inline bool isar_feature_aa64_rdm(const ARMISARegisters *id) | |
4009 | { | |
4010 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, RDM) != 0; | |
4011 | } | |
4012 | ||
4013 | static inline bool isar_feature_aa64_sha3(const ARMISARegisters *id) | |
4014 | { | |
4015 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, SHA3) != 0; | |
4016 | } | |
4017 | ||
4018 | static inline bool isar_feature_aa64_sm3(const ARMISARegisters *id) | |
4019 | { | |
4020 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, SM3) != 0; | |
4021 | } | |
4022 | ||
4023 | static inline bool isar_feature_aa64_sm4(const ARMISARegisters *id) | |
4024 | { | |
4025 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, SM4) != 0; | |
4026 | } | |
4027 | ||
4028 | static inline bool isar_feature_aa64_dp(const ARMISARegisters *id) | |
4029 | { | |
4030 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, DP) != 0; | |
4031 | } | |
4032 | ||
0caa5af8 RH |
4033 | static inline bool isar_feature_aa64_fhm(const ARMISARegisters *id) |
4034 | { | |
4035 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, FHM) != 0; | |
4036 | } | |
4037 | ||
b89d9c98 RH |
4038 | static inline bool isar_feature_aa64_condm_4(const ARMISARegisters *id) |
4039 | { | |
4040 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, TS) != 0; | |
4041 | } | |
4042 | ||
5ef84f11 RH |
4043 | static inline bool isar_feature_aa64_condm_5(const ARMISARegisters *id) |
4044 | { | |
4045 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, TS) >= 2; | |
4046 | } | |
4047 | ||
de390645 RH |
4048 | static inline bool isar_feature_aa64_rndr(const ARMISARegisters *id) |
4049 | { | |
4050 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, RNDR) != 0; | |
4051 | } | |
4052 | ||
6c1f6f27 RH |
4053 | static inline bool isar_feature_aa64_jscvt(const ARMISARegisters *id) |
4054 | { | |
4055 | return FIELD_EX64(id->id_aa64isar1, ID_AA64ISAR1, JSCVT) != 0; | |
4056 | } | |
4057 | ||
962fcbf2 RH |
4058 | static inline bool isar_feature_aa64_fcma(const ARMISARegisters *id) |
4059 | { | |
4060 | return FIELD_EX64(id->id_aa64isar1, ID_AA64ISAR1, FCMA) != 0; | |
4061 | } | |
4062 | ||
991ad91b RH |
4063 | static inline bool isar_feature_aa64_pauth(const ARMISARegisters *id) |
4064 | { | |
4065 | /* | |
283fc52a RH |
4066 | * Return true if any form of pauth is enabled, as this |
4067 | * predicate controls migration of the 128-bit keys. | |
991ad91b RH |
4068 | */ |
4069 | return (id->id_aa64isar1 & | |
4070 | (FIELD_DP64(0, ID_AA64ISAR1, APA, 0xf) | | |
4071 | FIELD_DP64(0, ID_AA64ISAR1, API, 0xf) | | |
4072 | FIELD_DP64(0, ID_AA64ISAR1, GPA, 0xf) | | |
4073 | FIELD_DP64(0, ID_AA64ISAR1, GPI, 0xf))) != 0; | |
4074 | } | |
4075 | ||
283fc52a RH |
4076 | static inline bool isar_feature_aa64_pauth_arch(const ARMISARegisters *id) |
4077 | { | |
4078 | /* | |
4079 | * Return true if pauth is enabled with the architected QARMA algorithm. | |
4080 | * QEMU will always set APA+GPA to the same value. | |
4081 | */ | |
4082 | return FIELD_EX64(id->id_aa64isar1, ID_AA64ISAR1, APA) != 0; | |
4083 | } | |
4084 | ||
84940ed8 RC |
4085 | static inline bool isar_feature_aa64_tlbirange(const ARMISARegisters *id) |
4086 | { | |
4087 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, TLB) == 2; | |
4088 | } | |
4089 | ||
7113d618 RC |
4090 | static inline bool isar_feature_aa64_tlbios(const ARMISARegisters *id) |
4091 | { | |
4092 | return FIELD_EX64(id->id_aa64isar0, ID_AA64ISAR0, TLB) != 0; | |
4093 | } | |
4094 | ||
9888bd1e RH |
4095 | static inline bool isar_feature_aa64_sb(const ARMISARegisters *id) |
4096 | { | |
4097 | return FIELD_EX64(id->id_aa64isar1, ID_AA64ISAR1, SB) != 0; | |
4098 | } | |
4099 | ||
cb570bd3 RH |
4100 | static inline bool isar_feature_aa64_predinv(const ARMISARegisters *id) |
4101 | { | |
4102 | return FIELD_EX64(id->id_aa64isar1, ID_AA64ISAR1, SPECRES) != 0; | |
4103 | } | |
4104 | ||
6bea2563 RH |
4105 | static inline bool isar_feature_aa64_frint(const ARMISARegisters *id) |
4106 | { | |
4107 | return FIELD_EX64(id->id_aa64isar1, ID_AA64ISAR1, FRINTTS) != 0; | |
4108 | } | |
4109 | ||
0d57b499 BM |
4110 | static inline bool isar_feature_aa64_dcpop(const ARMISARegisters *id) |
4111 | { | |
4112 | return FIELD_EX64(id->id_aa64isar1, ID_AA64ISAR1, DPB) != 0; | |
4113 | } | |
4114 | ||
4115 | static inline bool isar_feature_aa64_dcpodp(const ARMISARegisters *id) | |
4116 | { | |
4117 | return FIELD_EX64(id->id_aa64isar1, ID_AA64ISAR1, DPB) >= 2; | |
4118 | } | |
4119 | ||
7d63183f RH |
4120 | static inline bool isar_feature_aa64_fp_simd(const ARMISARegisters *id) |
4121 | { | |
4122 | /* We always set the AdvSIMD and FP fields identically. */ | |
4123 | return FIELD_EX64(id->id_aa64pfr0, ID_AA64PFR0, FP) != 0xf; | |
4124 | } | |
4125 | ||
5763190f RH |
4126 | static inline bool isar_feature_aa64_fp16(const ARMISARegisters *id) |
4127 | { | |
4128 | /* We always set the AdvSIMD and FP fields identically wrt FP16. */ | |
4129 | return FIELD_EX64(id->id_aa64pfr0, ID_AA64PFR0, FP) == 1; | |
4130 | } | |
4131 | ||
0f8d06f1 RH |
4132 | static inline bool isar_feature_aa64_aa32(const ARMISARegisters *id) |
4133 | { | |
4134 | return FIELD_EX64(id->id_aa64pfr0, ID_AA64PFR0, EL0) >= 2; | |
4135 | } | |
4136 | ||
10d0ef3e MN |
4137 | static inline bool isar_feature_aa64_aa32_el1(const ARMISARegisters *id) |
4138 | { | |
4139 | return FIELD_EX64(id->id_aa64pfr0, ID_AA64PFR0, EL1) >= 2; | |
4140 | } | |
4141 | ||
cd208a1c RH |
4142 | static inline bool isar_feature_aa64_sve(const ARMISARegisters *id) |
4143 | { | |
4144 | return FIELD_EX64(id->id_aa64pfr0, ID_AA64PFR0, SVE) != 0; | |
4145 | } | |
4146 | ||
5ca192df RDC |
4147 | static inline bool isar_feature_aa64_sel2(const ARMISARegisters *id) |
4148 | { | |
4149 | return FIELD_EX64(id->id_aa64pfr0, ID_AA64PFR0, SEL2) != 0; | |
4150 | } | |
4151 | ||
8fc2ea21 RH |
4152 | static inline bool isar_feature_aa64_vh(const ARMISARegisters *id) |
4153 | { | |
4154 | return FIELD_EX64(id->id_aa64mmfr1, ID_AA64MMFR1, VH) != 0; | |
4155 | } | |
4156 | ||
2d7137c1 RH |
4157 | static inline bool isar_feature_aa64_lor(const ARMISARegisters *id) |
4158 | { | |
4159 | return FIELD_EX64(id->id_aa64mmfr1, ID_AA64MMFR1, LO) != 0; | |
4160 | } | |
4161 | ||
3d6ad6bb RH |
4162 | static inline bool isar_feature_aa64_pan(const ARMISARegisters *id) |
4163 | { | |
4164 | return FIELD_EX64(id->id_aa64mmfr1, ID_AA64MMFR1, PAN) != 0; | |
4165 | } | |
4166 | ||
4167 | static inline bool isar_feature_aa64_ats1e1(const ARMISARegisters *id) | |
4168 | { | |
4169 | return FIELD_EX64(id->id_aa64mmfr1, ID_AA64MMFR1, PAN) >= 2; | |
4170 | } | |
4171 | ||
9eeb7a1c RH |
4172 | static inline bool isar_feature_aa64_uao(const ARMISARegisters *id) |
4173 | { | |
4174 | return FIELD_EX64(id->id_aa64mmfr2, ID_AA64MMFR2, UAO) != 0; | |
4175 | } | |
4176 | ||
c36c65ea RDC |
4177 | static inline bool isar_feature_aa64_st(const ARMISARegisters *id) |
4178 | { | |
4179 | return FIELD_EX64(id->id_aa64mmfr2, ID_AA64MMFR2, ST) != 0; | |
4180 | } | |
4181 | ||
be53b6f4 RH |
4182 | static inline bool isar_feature_aa64_bti(const ARMISARegisters *id) |
4183 | { | |
4184 | return FIELD_EX64(id->id_aa64pfr1, ID_AA64PFR1, BT) != 0; | |
4185 | } | |
4186 | ||
c7fd0baa RH |
4187 | static inline bool isar_feature_aa64_mte_insn_reg(const ARMISARegisters *id) |
4188 | { | |
4189 | return FIELD_EX64(id->id_aa64pfr1, ID_AA64PFR1, MTE) != 0; | |
4190 | } | |
4191 | ||
4192 | static inline bool isar_feature_aa64_mte(const ARMISARegisters *id) | |
4193 | { | |
4194 | return FIELD_EX64(id->id_aa64pfr1, ID_AA64PFR1, MTE) >= 2; | |
4195 | } | |
4196 | ||
2a609df8 PM |
4197 | static inline bool isar_feature_aa64_pmu_8_1(const ARMISARegisters *id) |
4198 | { | |
4199 | return FIELD_EX64(id->id_aa64dfr0, ID_AA64DFR0, PMUVER) >= 4 && | |
4200 | FIELD_EX64(id->id_aa64dfr0, ID_AA64DFR0, PMUVER) != 0xf; | |
4201 | } | |
4202 | ||
15dd1ebd PM |
4203 | static inline bool isar_feature_aa64_pmu_8_4(const ARMISARegisters *id) |
4204 | { | |
54117b90 PM |
4205 | return FIELD_EX64(id->id_aa64dfr0, ID_AA64DFR0, PMUVER) >= 5 && |
4206 | FIELD_EX64(id->id_aa64dfr0, ID_AA64DFR0, PMUVER) != 0xf; | |
15dd1ebd PM |
4207 | } |
4208 | ||
2677cf9f PM |
4209 | static inline bool isar_feature_aa64_rcpc_8_3(const ARMISARegisters *id) |
4210 | { | |
4211 | return FIELD_EX64(id->id_aa64isar1, ID_AA64ISAR1, LRCPC) != 0; | |
4212 | } | |
4213 | ||
a1229109 PM |
4214 | static inline bool isar_feature_aa64_rcpc_8_4(const ARMISARegisters *id) |
4215 | { | |
4216 | return FIELD_EX64(id->id_aa64isar1, ID_AA64ISAR1, LRCPC) >= 2; | |
4217 | } | |
4218 | ||
957e6155 PM |
4219 | static inline bool isar_feature_aa64_ccidx(const ARMISARegisters *id) |
4220 | { | |
4221 | return FIELD_EX64(id->id_aa64mmfr2, ID_AA64MMFR2, CCIDX) != 0; | |
4222 | } | |
4223 | ||
ce3125be PM |
4224 | static inline bool isar_feature_aa64_tts2uxn(const ARMISARegisters *id) |
4225 | { | |
4226 | return FIELD_EX64(id->id_aa64mmfr1, ID_AA64MMFR1, XNX) != 0; | |
4227 | } | |
4228 | ||
dc8b1853 RC |
4229 | static inline bool isar_feature_aa64_dit(const ARMISARegisters *id) |
4230 | { | |
4231 | return FIELD_EX64(id->id_aa64pfr0, ID_AA64PFR0, DIT) != 0; | |
4232 | } | |
4233 | ||
f2f68a78 RC |
4234 | static inline bool isar_feature_aa64_ssbs(const ARMISARegisters *id) |
4235 | { | |
4236 | return FIELD_EX64(id->id_aa64pfr1, ID_AA64PFR1, SSBS) != 0; | |
4237 | } | |
4238 | ||
2dc10fa2 RH |
4239 | static inline bool isar_feature_aa64_sve2(const ARMISARegisters *id) |
4240 | { | |
4241 | return FIELD_EX64(id->id_aa64zfr0, ID_AA64ZFR0, SVEVER) != 0; | |
4242 | } | |
4243 | ||
e3a56131 RH |
4244 | static inline bool isar_feature_aa64_sve2_aes(const ARMISARegisters *id) |
4245 | { | |
4246 | return FIELD_EX64(id->id_aa64zfr0, ID_AA64ZFR0, AES) != 0; | |
4247 | } | |
4248 | ||
4249 | static inline bool isar_feature_aa64_sve2_pmull128(const ARMISARegisters *id) | |
4250 | { | |
4251 | return FIELD_EX64(id->id_aa64zfr0, ID_AA64ZFR0, AES) >= 2; | |
4252 | } | |
4253 | ||
cb9c33b8 RH |
4254 | static inline bool isar_feature_aa64_sve2_bitperm(const ARMISARegisters *id) |
4255 | { | |
4256 | return FIELD_EX64(id->id_aa64zfr0, ID_AA64ZFR0, BITPERM) != 0; | |
4257 | } | |
4258 | ||
3cc7a88e RH |
4259 | static inline bool isar_feature_aa64_sve2_sm4(const ARMISARegisters *id) |
4260 | { | |
4261 | return FIELD_EX64(id->id_aa64zfr0, ID_AA64ZFR0, SM4) != 0; | |
4262 | } | |
4263 | ||
2867039a RH |
4264 | static inline bool isar_feature_aa64_sve_i8mm(const ARMISARegisters *id) |
4265 | { | |
4266 | return FIELD_EX64(id->id_aa64zfr0, ID_AA64ZFR0, I8MM) != 0; | |
4267 | } | |
4268 | ||
4f26756b SL |
4269 | static inline bool isar_feature_aa64_sve_f32mm(const ARMISARegisters *id) |
4270 | { | |
4271 | return FIELD_EX64(id->id_aa64zfr0, ID_AA64ZFR0, F32MM) != 0; | |
4272 | } | |
4273 | ||
4274 | static inline bool isar_feature_aa64_sve_f64mm(const ARMISARegisters *id) | |
4275 | { | |
4276 | return FIELD_EX64(id->id_aa64zfr0, ID_AA64ZFR0, F64MM) != 0; | |
4277 | } | |
4278 | ||
6e61f839 PM |
4279 | /* |
4280 | * Feature tests for "does this exist in either 32-bit or 64-bit?" | |
4281 | */ | |
4282 | static inline bool isar_feature_any_fp16(const ARMISARegisters *id) | |
4283 | { | |
4284 | return isar_feature_aa64_fp16(id) || isar_feature_aa32_fp16_arith(id); | |
4285 | } | |
4286 | ||
22e57073 PM |
4287 | static inline bool isar_feature_any_predinv(const ARMISARegisters *id) |
4288 | { | |
4289 | return isar_feature_aa64_predinv(id) || isar_feature_aa32_predinv(id); | |
4290 | } | |
4291 | ||
2a609df8 PM |
4292 | static inline bool isar_feature_any_pmu_8_1(const ARMISARegisters *id) |
4293 | { | |
4294 | return isar_feature_aa64_pmu_8_1(id) || isar_feature_aa32_pmu_8_1(id); | |
4295 | } | |
4296 | ||
15dd1ebd PM |
4297 | static inline bool isar_feature_any_pmu_8_4(const ARMISARegisters *id) |
4298 | { | |
4299 | return isar_feature_aa64_pmu_8_4(id) || isar_feature_aa32_pmu_8_4(id); | |
4300 | } | |
4301 | ||
957e6155 PM |
4302 | static inline bool isar_feature_any_ccidx(const ARMISARegisters *id) |
4303 | { | |
4304 | return isar_feature_aa64_ccidx(id) || isar_feature_aa32_ccidx(id); | |
4305 | } | |
4306 | ||
ce3125be PM |
4307 | static inline bool isar_feature_any_tts2uxn(const ARMISARegisters *id) |
4308 | { | |
4309 | return isar_feature_aa64_tts2uxn(id) || isar_feature_aa32_tts2uxn(id); | |
4310 | } | |
4311 | ||
962fcbf2 RH |
4312 | /* |
4313 | * Forward to the above feature tests given an ARMCPU pointer. | |
4314 | */ | |
4315 | #define cpu_isar_feature(name, cpu) \ | |
4316 | ({ ARMCPU *cpu_ = (cpu); isar_feature_##name(&cpu_->isar); }) | |
4317 | ||
2c0262af | 4318 | #endif |