[mirror_qemu.git] / target-cris / op_helper.c

/*
 *  CRIS helper routines
 *
 *  Copyright (c) 2007 AXIS Communications
 *  Written by Edgar E. Iglesias
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston MA  02110-1301 USA
 */

#include <assert.h>
#include "exec.h"
#include "mmu.h"
#include "helper.h"
#include "host-utils.h"

//#define CRIS_OP_HELPER_DEBUG


#ifdef CRIS_OP_HELPER_DEBUG
#define D(x) x
#define D_LOG(...) qemu_log(__VA__ARGS__)
#else
#define D(x)
#define D_LOG(...) do { } while (0)
#endif

#if !defined(CONFIG_USER_ONLY)

#define MMUSUFFIX _mmu

#define SHIFT 0
#include "softmmu_template.h"

#define SHIFT 1
#include "softmmu_template.h"

#define SHIFT 2
#include "softmmu_template.h"

#define SHIFT 3
#include "softmmu_template.h"

/* Try to fill the TLB and return an exception if error. If retaddr is
   NULL, it means that the function was called in C code (i.e. not
   from generated code or from helper.c) */
/* XXX: fix it to restore all registers */
void tlb_fill (target_ulong addr, int is_write, int mmu_idx, void *retaddr)
{
    TranslationBlock *tb;
    CPUState *saved_env;
    unsigned long pc;
    int ret;

    /* XXX: hack to restore env in all cases, even if not called from
       generated code */
    saved_env = env;
    env = cpu_single_env;

    D_LOG("%s pc=%x tpc=%x ra=%x\n", __func__, 
	     env->pc, env->debug1, retaddr);
    ret = cpu_cris_handle_mmu_fault(env, addr, is_write, mmu_idx, 1);
    if (unlikely(ret)) {
        if (retaddr) {
            /* now we have a real cpu fault */
            pc = (unsigned long)retaddr;
            tb = tb_find_pc(pc);
            if (tb) {
                /* the PC is inside the translated code. It means that we have
                   a virtual CPU fault */
                cpu_restore_state(tb, env, pc, NULL);

		/* Evaluate flags after retranslation.  */
                helper_top_evaluate_flags();
            }
        }
        cpu_loop_exit();
    }
    env = saved_env;
}

#endif

void helper_raise_exception(uint32_t index)
{
	env->exception_index = index;
	cpu_loop_exit();
}

void helper_tlb_flush_pid(uint32_t pid)
{
#if !defined(CONFIG_USER_ONLY)
	pid &= 0xff;
	if (pid != (env->pregs[PR_PID] & 0xff))
		cris_mmu_flush_pid(env, env->pregs[PR_PID]);
#endif
}

void helper_spc_write(uint32_t new_spc)
{
#if !defined(CONFIG_USER_ONLY)
	tlb_flush_page(env, env->pregs[PR_SPC]);
	tlb_flush_page(env, new_spc);
#endif
}

void helper_dump(uint32_t a0, uint32_t a1, uint32_t a2)
{
	qemu_log("%s: a0=%x a1=%x\n", __func__, a0, a1);
}

/* Used by the tlb decoder.  */
#define EXTRACT_FIELD(src, start, end) \
	    (((src) >> start) & ((1 << (end - start + 1)) - 1))

void helper_movl_sreg_reg (uint32_t sreg, uint32_t reg)
{
	uint32_t srs;
	srs = env->pregs[PR_SRS];
	srs &= 3;
	env->sregs[srs][sreg] = env->regs[reg];

#if !defined(CONFIG_USER_ONLY)
	if (srs == 1 || srs == 2) {
		if (sreg == 6) {
			/* Writes to tlb-hi write to mm_cause as a side 
			   effect.  */
			env->sregs[SFR_RW_MM_TLB_HI] = env->regs[reg];
			env->sregs[SFR_R_MM_CAUSE] = env->regs[reg];
		}
		else if (sreg == 5) {
			uint32_t set;
			uint32_t idx;
			uint32_t lo, hi;
			uint32_t vaddr;
			int tlb_v;

			idx = set = env->sregs[SFR_RW_MM_TLB_SEL];
			set >>= 4;
			set &= 3;

			idx &= 15;
			/* We've just made a write to tlb_lo.  */
			lo = env->sregs[SFR_RW_MM_TLB_LO];
			/* Writes are done via r_mm_cause.  */
			hi = env->sregs[SFR_R_MM_CAUSE];

			vaddr = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].hi,
					      13, 31);
			vaddr <<= TARGET_PAGE_BITS;
			tlb_v = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].lo,
					    3, 3);
			env->tlbsets[srs - 1][set][idx].lo = lo;
			env->tlbsets[srs - 1][set][idx].hi = hi;

			D_LOG("tlb flush vaddr=%x v=%d pc=%x\n", 
				  vaddr, tlb_v, env->pc);
			tlb_flush_page(env, vaddr);
		}
	}
#endif
}

void helper_movl_reg_sreg (uint32_t reg, uint32_t sreg)
{
	uint32_t srs;
	env->pregs[PR_SRS] &= 3;
	srs = env->pregs[PR_SRS];
	
#if !defined(CONFIG_USER_ONLY)
	if (srs == 1 || srs == 2)
	{
		uint32_t set;
		uint32_t idx;
		uint32_t lo, hi;

		idx = set = env->sregs[SFR_RW_MM_TLB_SEL];
		set >>= 4;
		set &= 3;
		idx &= 15;

		/* Update the mirror regs.  */
		hi = env->tlbsets[srs - 1][set][idx].hi;
		lo = env->tlbsets[srs - 1][set][idx].lo;
		env->sregs[SFR_RW_MM_TLB_HI] = hi;
		env->sregs[SFR_RW_MM_TLB_LO] = lo;
	}
#endif
	env->regs[reg] = env->sregs[srs][sreg];
}

static void cris_ccs_rshift(CPUState *env)
{
	uint32_t ccs;

	/* Apply the ccs shift.  */
	ccs = env->pregs[PR_CCS];
	ccs = (ccs & 0xc0000000) | ((ccs & 0x0fffffff) >> 10);
	if (ccs & U_FLAG)
	{
		/* Enter user mode.  */
		env->ksp = env->regs[R_SP];
		env->regs[R_SP] = env->pregs[PR_USP];
	}

	env->pregs[PR_CCS] = ccs;
}

void helper_rfe(void)
{
	int rflag = env->pregs[PR_CCS] & R_FLAG;

	D_LOG("rfe: erp=%x pid=%x ccs=%x btarget=%x\n", 
		 env->pregs[PR_ERP], env->pregs[PR_PID],
		 env->pregs[PR_CCS],
		 env->btarget);

	cris_ccs_rshift(env);

	/* RFE sets the P_FLAG only if the R_FLAG is not set.  */
	if (!rflag)
		env->pregs[PR_CCS] |= P_FLAG;
}

void helper_rfn(void)
{
	int rflag = env->pregs[PR_CCS] & R_FLAG;

	D_LOG("rfn: erp=%x pid=%x ccs=%x btarget=%x\n", 
		 env->pregs[PR_ERP], env->pregs[PR_PID],
		 env->pregs[PR_CCS],
		 env->btarget);

	cris_ccs_rshift(env);

	/* Set the P_FLAG only if the R_FLAG is not set.  */
	if (!rflag)
		env->pregs[PR_CCS] |= P_FLAG;

    /* Always set the M flag.  */
    env->pregs[PR_CCS] |= M_FLAG;
}

uint32_t helper_lz(uint32_t t0)
{
	return clz32(t0);
}

uint32_t helper_btst(uint32_t t0, uint32_t t1, uint32_t ccs)
{
	/* FIXME: clean this up.  */

	/* des ref:
	   The N flag is set according to the selected bit in the dest reg.
	   The Z flag is set if the selected bit and all bits to the right are
	   zero.
	   The X flag is cleared.
	   Other flags are left untouched.
	   The destination reg is not affected.*/
	unsigned int fz, sbit, bset, mask, masked_t0;

	sbit = t1 & 31;
	bset = !!(t0 & (1 << sbit));
	mask = sbit == 31 ? -1 : (1 << (sbit + 1)) - 1;
	masked_t0 = t0 & mask;
	fz = !(masked_t0 | bset);

	/* Clear the X, N and Z flags.  */
	ccs = ccs & ~(X_FLAG | N_FLAG | Z_FLAG);
	/* Set the N and Z flags accordingly.  */
	ccs |= (bset << 3) | (fz << 2);
	return ccs;
}

static inline uint32_t evaluate_flags_writeback(uint32_t flags, uint32_t ccs)
{
	unsigned int x, z, mask;

	/* Extended arithmetics, leave the z flag alone.  */
	x = env->cc_x;
	mask = env->cc_mask | X_FLAG;
        if (x) {
		z = flags & Z_FLAG;
		mask = mask & ~z;
	}
	flags &= mask;

	/* all insn clear the x-flag except setf or clrf.  */
	ccs &= ~mask;
	ccs |= flags;
	return ccs;
}

uint32_t helper_evaluate_flags_muls(uint32_t ccs, uint32_t res, uint32_t mof)
{
	uint32_t flags = 0;
	int64_t tmp;
	int dneg;

	dneg = ((int32_t)res) < 0;

	tmp = mof;
	tmp <<= 32;
	tmp |= res;
	if (tmp == 0)
		flags |= Z_FLAG;
	else if (tmp < 0)
		flags |= N_FLAG;
	if ((dneg && mof != -1)
	    || (!dneg && mof != 0))
		flags |= V_FLAG;
	return evaluate_flags_writeback(flags, ccs);
}

uint32_t helper_evaluate_flags_mulu(uint32_t ccs, uint32_t res, uint32_t mof)
{
	uint32_t flags = 0;
	uint64_t tmp;

	tmp = mof;
	tmp <<= 32;
	tmp |= res;
	if (tmp == 0)
		flags |= Z_FLAG;
	else if (tmp >> 63)
		flags |= N_FLAG;
	if (mof)
		flags |= V_FLAG;

	return evaluate_flags_writeback(flags, ccs);
}

uint32_t helper_evaluate_flags_mcp(uint32_t ccs,
				   uint32_t src, uint32_t dst, uint32_t res)
{
	uint32_t flags = 0;

	src = src & 0x80000000;
	dst = dst & 0x80000000;

	if ((res & 0x80000000L) != 0L)
	{
		flags |= N_FLAG;
		if (!src && !dst)
			flags |= V_FLAG;
		else if (src & dst)
			flags |= R_FLAG;
	}
	else
	{
		if (res == 0L)
			flags |= Z_FLAG;
		if (src & dst) 
			flags |= V_FLAG;
		if (dst | src) 
			flags |= R_FLAG;
	}

	return evaluate_flags_writeback(flags, ccs);
}

uint32_t helper_evaluate_flags_alu_4(uint32_t ccs,
				     uint32_t src, uint32_t dst, uint32_t res)
{
	uint32_t flags = 0;

	src = src & 0x80000000;
	dst = dst & 0x80000000;

	if ((res & 0x80000000L) != 0L)
	{
		flags |= N_FLAG;
		if (!src && !dst)
			flags |= V_FLAG;
		else if (src & dst)
			flags |= C_FLAG;
	}
	else
	{
		if (res == 0L)
			flags |= Z_FLAG;
		if (src & dst) 
			flags |= V_FLAG;
		if (dst | src) 
			flags |= C_FLAG;
	}

	return evaluate_flags_writeback(flags, ccs);
}

uint32_t helper_evaluate_flags_sub_4(uint32_t ccs,
				     uint32_t src, uint32_t dst, uint32_t res)
{
	uint32_t flags = 0;

	src = (~src) & 0x80000000;
	dst = dst & 0x80000000;

	if ((res & 0x80000000L) != 0L)
	{
		flags |= N_FLAG;
		if (!src && !dst)
			flags |= V_FLAG;
		else if (src & dst)
			flags |= C_FLAG;
	}
	else
	{
		if (res == 0L)
			flags |= Z_FLAG;
		if (src & dst) 
			flags |= V_FLAG;
		if (dst | src) 
			flags |= C_FLAG;
	}

	flags ^= C_FLAG;
	return evaluate_flags_writeback(flags, ccs);
}

uint32_t helper_evaluate_flags_move_4(uint32_t ccs, uint32_t res)
{
	uint32_t flags = 0;

	if ((int32_t)res < 0)
		flags |= N_FLAG;
	else if (res == 0L)
		flags |= Z_FLAG;

	return evaluate_flags_writeback(flags, ccs);
}
uint32_t helper_evaluate_flags_move_2(uint32_t ccs, uint32_t res)
{
	uint32_t flags = 0;

	if ((int16_t)res < 0L)
		flags |= N_FLAG;
	else if (res == 0)
		flags |= Z_FLAG;

	return evaluate_flags_writeback(flags, ccs);
}

/* TODO: This is expensive. We could split things up and only evaluate part of
   CCR on a need to know basis. For now, we simply re-evaluate everything.  */
void  helper_evaluate_flags(void)
{
	uint32_t src, dst, res;
	uint32_t flags = 0;

	src = env->cc_src;
	dst = env->cc_dest;
	res = env->cc_result;

	if (env->cc_op == CC_OP_SUB || env->cc_op == CC_OP_CMP)
		src = ~src;

	/* Now, evaluate the flags. This stuff is based on
	   Per Zander's CRISv10 simulator.  */
	switch (env->cc_size)
	{
		case 1:
			if ((res & 0x80L) != 0L)
			{
				flags |= N_FLAG;
				if (((src & 0x80L) == 0L)
				    && ((dst & 0x80L) == 0L))
				{
					flags |= V_FLAG;
				}
				else if (((src & 0x80L) != 0L)
					 && ((dst & 0x80L) != 0L))
				{
					flags |= C_FLAG;
				}
			}
			else
			{
				if ((res & 0xFFL) == 0L)
				{
					flags |= Z_FLAG;
				}
				if (((src & 0x80L) != 0L)
				    && ((dst & 0x80L) != 0L))
				{
					flags |= V_FLAG;
				}
				if ((dst & 0x80L) != 0L
				    || (src & 0x80L) != 0L)
				{
					flags |= C_FLAG;
				}
			}
			break;
		case 2:
			if ((res & 0x8000L) != 0L)
			{
				flags |= N_FLAG;
				if (((src & 0x8000L) == 0L)
				    && ((dst & 0x8000L) == 0L))
				{
					flags |= V_FLAG;
				}
				else if (((src & 0x8000L) != 0L)
					 && ((dst & 0x8000L) != 0L))
				{
					flags |= C_FLAG;
				}
			}
			else
			{
				if ((res & 0xFFFFL) == 0L)
				{
					flags |= Z_FLAG;
				}
				if (((src & 0x8000L) != 0L)
				    && ((dst & 0x8000L) != 0L))
				{
					flags |= V_FLAG;
				}
				if ((dst & 0x8000L) != 0L
				    || (src & 0x8000L) != 0L)
				{
					flags |= C_FLAG;
				}
			}
			break;
		case 4:
			if ((res & 0x80000000L) != 0L)
			{
				flags |= N_FLAG;
				if (((src & 0x80000000L) == 0L)
				    && ((dst & 0x80000000L) == 0L))
				{
					flags |= V_FLAG;
				}
				else if (((src & 0x80000000L) != 0L) &&
					 ((dst & 0x80000000L) != 0L))
				{
					flags |= C_FLAG;
				}
			}
			else
			{
				if (res == 0L)
					flags |= Z_FLAG;
				if (((src & 0x80000000L) != 0L)
				    && ((dst & 0x80000000L) != 0L))
					flags |= V_FLAG;
				if ((dst & 0x80000000L) != 0L
				    || (src & 0x80000000L) != 0L)
					flags |= C_FLAG;
			}
			break;
		default:
			break;
	}

	if (env->cc_op == CC_OP_SUB || env->cc_op == CC_OP_CMP)
		flags ^= C_FLAG;

	env->pregs[PR_CCS] = evaluate_flags_writeback(flags, env->pregs[PR_CCS]);
}

void helper_top_evaluate_flags(void)
{
	switch (env->cc_op)
	{
		case CC_OP_MCP:
			env->pregs[PR_CCS] = helper_evaluate_flags_mcp(
					env->pregs[PR_CCS], env->cc_src,
					env->cc_dest, env->cc_result);
			break;
		case CC_OP_MULS:
			env->pregs[PR_CCS] = helper_evaluate_flags_muls(
					env->pregs[PR_CCS], env->cc_result,
					env->pregs[PR_MOF]);
			break;
		case CC_OP_MULU:
			env->pregs[PR_CCS] = helper_evaluate_flags_mulu(
					env->pregs[PR_CCS], env->cc_result,
					env->pregs[PR_MOF]);
			break;
		case CC_OP_MOVE:
		case CC_OP_AND:
		case CC_OP_OR:
		case CC_OP_XOR:
		case CC_OP_ASR:
		case CC_OP_LSR:
		case CC_OP_LSL:
		switch (env->cc_size)
		{
			case 4:
				env->pregs[PR_CCS] =
					helper_evaluate_flags_move_4(
							env->pregs[PR_CCS],
							env->cc_result);
				break;
			case 2:
				env->pregs[PR_CCS] =
					helper_evaluate_flags_move_2(
							env->pregs[PR_CCS],
							env->cc_result);
				break;
			default:
				helper_evaluate_flags();
				break;
		}
		break;
		case CC_OP_FLAGS:
			/* live.  */
			break;
		case CC_OP_SUB:
		case CC_OP_CMP:
			if (env->cc_size == 4)
				env->pregs[PR_CCS] =
					helper_evaluate_flags_sub_4(
						env->pregs[PR_CCS],
						env->cc_src, env->cc_dest,
						env->cc_result);
			else
				helper_evaluate_flags();
			break;
		default:
		{
			switch (env->cc_size)
			{
			case 4:
				env->pregs[PR_CCS] =
					helper_evaluate_flags_alu_4(
						env->pregs[PR_CCS],
						env->cc_src, env->cc_dest,
						env->cc_result);
				break;
			default:
				helper_evaluate_flags();
				break;
			}
		}
		break;
	}
}
Commit	Line	Data
81fdc5f8 TS	1	/*
	2	* CRIS helper routines
	3	*
	4	* Copyright (c) 2007 AXIS Communications
	5	* Written by Edgar E. Iglesias
	6	*
	7	* This library is free software; you can redistribute it and/or
	8	* modify it under the terms of the GNU Lesser General Public
	9	* License as published by the Free Software Foundation; either
	10	* version 2 of the License, or (at your option) any later version.
	11	*
	12	* This library is distributed in the hope that it will be useful,
	13	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	14	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	15	* Lesser General Public License for more details.
	16	*
	17	* You should have received a copy of the GNU Lesser General Public
	18	* License along with this library; if not, write to the Free Software
fad6cb1a	19	* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston MA 02110-1301 USA
81fdc5f8 TS	20	*/
	21
	22	#include <assert.h>
	23	#include "exec.h"
786c02f1	24	#include "mmu.h"
30abcfc7	25	#include "helper.h"
c38ac98d	26	#include "host-utils.h"
81fdc5f8	27
d12d51d5 AL	28	//#define CRIS_OP_HELPER_DEBUG
	29
	30
	31	#ifdef CRIS_OP_HELPER_DEBUG
	32	#define D(x) x
93fcfe39	33	#define D_LOG(...) qemu_log(__VA__ARGS__)
d12d51d5	34	#else
e2eef170	35	#define D(x)
d12d51d5 AL	36	#define D_LOG(...) do { } while (0)
d12d51d5 AL	37	#endif
e2eef170 PB	38
	39	#if !defined(CONFIG_USER_ONLY)
	40
81fdc5f8	41	#define MMUSUFFIX _mmu
81fdc5f8 TS	42
	43	#define SHIFT 0
	44	#include "softmmu_template.h"
	45
	46	#define SHIFT 1
	47	#include "softmmu_template.h"
	48
	49	#define SHIFT 2
	50	#include "softmmu_template.h"
	51
	52	#define SHIFT 3
	53	#include "softmmu_template.h"
	54
	55	/* Try to fill the TLB and return an exception if error. If retaddr is
	56	NULL, it means that the function was called in C code (i.e. not
	57	from generated code or from helper.c) */
	58	/* XXX: fix it to restore all registers */
6ebbf390	59	void tlb_fill (target_ulong addr, int is_write, int mmu_idx, void *retaddr)
81fdc5f8 TS	60	{
	61	TranslationBlock *tb;
	62	CPUState *saved_env;
44f8625d	63	unsigned long pc;
81fdc5f8 TS	64	int ret;
	65
	66	/* XXX: hack to restore env in all cases, even if not called from
	67	generated code */
	68	saved_env = env;
	69	env = cpu_single_env;
b41f7df0	70
d12d51d5 AL	71	D_LOG("%s pc=%x tpc=%x ra=%x\n", __func__,
d12d51d5 AL	72	env->pc, env->debug1, retaddr);
6ebbf390	73	ret = cpu_cris_handle_mmu_fault(env, addr, is_write, mmu_idx, 1);
551bd27f	74	if (unlikely(ret)) {
81fdc5f8 TS	75	if (retaddr) {
81fdc5f8 TS	76	/* now we have a real cpu fault */
44f8625d	77	pc = (unsigned long)retaddr;
81fdc5f8 TS	78	tb = tb_find_pc(pc);
	79	if (tb) {
	80	/* the PC is inside the translated code. It means that we have
	81	a virtual CPU fault */
	82	cpu_restore_state(tb, env, pc, NULL);
30abcfc7 EI	83
	84	/* Evaluate flags after retranslation. */
	85	helper_top_evaluate_flags();
81fdc5f8 TS	86	}
	87	}
	88	cpu_loop_exit();
	89	}
	90	env = saved_env;
	91	}
	92
e2eef170 PB	93	#endif
e2eef170 PB	94
dceaf394	95	void helper_raise_exception(uint32_t index)
786c02f1	96	{
dceaf394 EI	97	env->exception_index = index;
dceaf394 EI	98	cpu_loop_exit();
786c02f1 EI	99	}
786c02f1 EI	100
cf1d97f0 EI	101	void helper_tlb_flush_pid(uint32_t pid)
	102	{
	103	#if !defined(CONFIG_USER_ONLY)
28de16da EI	104	pid &= 0xff;
	105	if (pid != (env->pregs[PR_PID] & 0xff))
	106	cris_mmu_flush_pid(env, env->pregs[PR_PID]);
cf1d97f0 EI	107	#endif
	108	}
	109
a1aebcb8 EI	110	void helper_spc_write(uint32_t new_spc)
	111	{
	112	#if !defined(CONFIG_USER_ONLY)
	113	tlb_flush_page(env, env->pregs[PR_SPC]);
	114	tlb_flush_page(env, new_spc);
	115	#endif
	116	}
	117
30abcfc7	118	void helper_dump(uint32_t a0, uint32_t a1, uint32_t a2)
b41f7df0	119	{
93fcfe39	120	qemu_log("%s: a0=%x a1=%x\n", __func__, a0, a1);
b41f7df0 EI	121	}
b41f7df0 EI	122
cf1d97f0 EI	123	/* Used by the tlb decoder. */
	124	#define EXTRACT_FIELD(src, start, end) \
	125	(((src) >> start) & ((1 << (end - start + 1)) - 1))
	126
dceaf394 EI	127	void helper_movl_sreg_reg (uint32_t sreg, uint32_t reg)
	128	{
	129	uint32_t srs;
	130	srs = env->pregs[PR_SRS];
	131	srs &= 3;
	132	env->sregs[srs][sreg] = env->regs[reg];
	133
	134	#if !defined(CONFIG_USER_ONLY)
	135	if (srs == 1 \|\| srs == 2) {
	136	if (sreg == 6) {
	137	/* Writes to tlb-hi write to mm_cause as a side
	138	effect. */
6913ba56 EI	139	env->sregs[SFR_RW_MM_TLB_HI] = env->regs[reg];
6913ba56 EI	140	env->sregs[SFR_R_MM_CAUSE] = env->regs[reg];
dceaf394 EI	141	}
	142	else if (sreg == 5) {
	143	uint32_t set;
	144	uint32_t idx;
	145	uint32_t lo, hi;
	146	uint32_t vaddr;
cf1d97f0	147	int tlb_v;
dceaf394 EI	148
	149	idx = set = env->sregs[SFR_RW_MM_TLB_SEL];
	150	set >>= 4;
	151	set &= 3;
	152
	153	idx &= 15;
	154	/* We've just made a write to tlb_lo. */
	155	lo = env->sregs[SFR_RW_MM_TLB_LO];
	156	/* Writes are done via r_mm_cause. */
	157	hi = env->sregs[SFR_R_MM_CAUSE];
cf1d97f0 EI	158
	159	vaddr = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].hi,
	160	13, 31);
	161	vaddr <<= TARGET_PAGE_BITS;
	162	tlb_v = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].lo,
	163	3, 3);
dceaf394 EI	164	env->tlbsets[srs - 1][set][idx].lo = lo;
dceaf394 EI	165	env->tlbsets[srs - 1][set][idx].hi = hi;
cf1d97f0	166
d12d51d5 AL	167	D_LOG("tlb flush vaddr=%x v=%d pc=%x\n",
d12d51d5 AL	168	vaddr, tlb_v, env->pc);
cf1d97f0	169	tlb_flush_page(env, vaddr);
dceaf394 EI	170	}
	171	}
	172	#endif
	173	}
	174
	175	void helper_movl_reg_sreg (uint32_t reg, uint32_t sreg)
	176	{
	177	uint32_t srs;
	178	env->pregs[PR_SRS] &= 3;
	179	srs = env->pregs[PR_SRS];
	180
	181	#if !defined(CONFIG_USER_ONLY)
	182	if (srs == 1 \|\| srs == 2)
	183	{
	184	uint32_t set;
	185	uint32_t idx;
	186	uint32_t lo, hi;
	187
	188	idx = set = env->sregs[SFR_RW_MM_TLB_SEL];
	189	set >>= 4;
	190	set &= 3;
	191	idx &= 15;
	192
	193	/* Update the mirror regs. */
	194	hi = env->tlbsets[srs - 1][set][idx].hi;
	195	lo = env->tlbsets[srs - 1][set][idx].lo;
	196	env->sregs[SFR_RW_MM_TLB_HI] = hi;
	197	env->sregs[SFR_RW_MM_TLB_LO] = lo;
	198	}
	199	#endif
	200	env->regs[reg] = env->sregs[srs][sreg];
dceaf394 EI	201	}
	202
	203	static void cris_ccs_rshift(CPUState *env)
	204	{
	205	uint32_t ccs;
	206
	207	/* Apply the ccs shift. */
	208	ccs = env->pregs[PR_CCS];
	209	ccs = (ccs & 0xc0000000) \| ((ccs & 0x0fffffff) >> 10);
	210	if (ccs & U_FLAG)
	211	{
	212	/* Enter user mode. */
	213	env->ksp = env->regs[R_SP];
	214	env->regs[R_SP] = env->pregs[PR_USP];
	215	}
	216
	217	env->pregs[PR_CCS] = ccs;
	218	}
	219
b41f7df0 EI	220	void helper_rfe(void)
b41f7df0 EI	221	{
bf443337 EI	222	int rflag = env->pregs[PR_CCS] & R_FLAG;
bf443337 EI	223
d12d51d5	224	D_LOG("rfe: erp=%x pid=%x ccs=%x btarget=%x\n",
b41f7df0 EI	225	env->pregs[PR_ERP], env->pregs[PR_PID],
b41f7df0 EI	226	env->pregs[PR_CCS],
d12d51d5	227	env->btarget);
dceaf394 EI	228
	229	cris_ccs_rshift(env);
	230
	231	/* RFE sets the P_FLAG only if the R_FLAG is not set. */
bf443337	232	if (!rflag)
dceaf394	233	env->pregs[PR_CCS] \|= P_FLAG;
b41f7df0 EI	234	}
b41f7df0 EI	235
5bf8f1ab EI	236	void helper_rfn(void)
	237	{
	238	int rflag = env->pregs[PR_CCS] & R_FLAG;
	239
d12d51d5	240	D_LOG("rfn: erp=%x pid=%x ccs=%x btarget=%x\n",
5bf8f1ab EI	241	env->pregs[PR_ERP], env->pregs[PR_PID],
5bf8f1ab EI	242	env->pregs[PR_CCS],
d12d51d5	243	env->btarget);
5bf8f1ab EI	244
	245	cris_ccs_rshift(env);
	246
	247	/* Set the P_FLAG only if the R_FLAG is not set. */
	248	if (!rflag)
	249	env->pregs[PR_CCS] \|= P_FLAG;
	250
	251	/* Always set the M flag. */
	252	env->pregs[PR_CCS] \|= M_FLAG;
	253	}
	254
c38ac98d EI	255	uint32_t helper_lz(uint32_t t0)
	256	{
	257	return clz32(t0);
	258	}
	259
abd5c94e EI	260	uint32_t helper_btst(uint32_t t0, uint32_t t1, uint32_t ccs)
	261	{
	262	/* FIXME: clean this up. */
	263
	264	/* des ref:
	265	The N flag is set according to the selected bit in the dest reg.
	266	The Z flag is set if the selected bit and all bits to the right are
	267	zero.
	268	The X flag is cleared.
	269	Other flags are left untouched.
	270	The destination reg is not affected.*/
	271	unsigned int fz, sbit, bset, mask, masked_t0;
	272
	273	sbit = t1 & 31;
	274	bset = !!(t0 & (1 << sbit));
	275	mask = sbit == 31 ? -1 : (1 << (sbit + 1)) - 1;
	276	masked_t0 = t0 & mask;
	277	fz = !(masked_t0 \| bset);
	278
	279	/* Clear the X, N and Z flags. */
	280	ccs = ccs & ~(X_FLAG \| N_FLAG \| Z_FLAG);
	281	/* Set the N and Z flags accordingly. */
	282	ccs \|= (bset << 3) \| (fz << 2);
	283	return ccs;
	284	}
	285
6231868b	286	static inline uint32_t evaluate_flags_writeback(uint32_t flags, uint32_t ccs)
b41f7df0	287	{
a8cf66bb	288	unsigned int x, z, mask;
b41f7df0 EI	289
b41f7df0 EI	290	/* Extended arithmetics, leave the z flag alone. */
30abcfc7	291	x = env->cc_x;
a8cf66bb EI	292	mask = env->cc_mask \| X_FLAG;
	293	if (x) {
	294	z = flags & Z_FLAG;
	295	mask = mask & ~z;
	296	}
	297	flags &= mask;
b41f7df0 EI	298
b41f7df0 EI	299	/* all insn clear the x-flag except setf or clrf. */
6231868b EI	300	ccs &= ~mask;
	301	ccs \|= flags;
	302	return ccs;
b41f7df0 EI	303	}
b41f7df0 EI	304
6231868b	305	uint32_t helper_evaluate_flags_muls(uint32_t ccs, uint32_t res, uint32_t mof)
b41f7df0	306	{
b41f7df0	307	uint32_t flags = 0;
dceaf394	308	int64_t tmp;
b41f7df0 EI	309	int dneg;
b41f7df0 EI	310
b41f7df0 EI	311	dneg = ((int32_t)res) < 0;
b41f7df0 EI	312
dceaf394 EI	313	tmp = mof;
	314	tmp <<= 32;
	315	tmp \|= res;
b41f7df0 EI	316	if (tmp == 0)
	317	flags \|= Z_FLAG;
	318	else if (tmp < 0)
	319	flags \|= N_FLAG;
	320	if ((dneg && mof != -1)
	321	\|\| (!dneg && mof != 0))
	322	flags \|= V_FLAG;
6231868b	323	return evaluate_flags_writeback(flags, ccs);
b41f7df0 EI	324	}
b41f7df0 EI	325
6231868b	326	uint32_t helper_evaluate_flags_mulu(uint32_t ccs, uint32_t res, uint32_t mof)
b41f7df0	327	{
b41f7df0	328	uint32_t flags = 0;
dceaf394	329	uint64_t tmp;
b41f7df0	330
dceaf394 EI	331	tmp = mof;
	332	tmp <<= 32;
	333	tmp \|= res;
b41f7df0 EI	334	if (tmp == 0)
	335	flags \|= Z_FLAG;
	336	else if (tmp >> 63)
	337	flags \|= N_FLAG;
	338	if (mof)
	339	flags \|= V_FLAG;
	340
6231868b	341	return evaluate_flags_writeback(flags, ccs);
b41f7df0 EI	342	}
b41f7df0 EI	343
6231868b EI	344	uint32_t helper_evaluate_flags_mcp(uint32_t ccs,
6231868b EI	345	uint32_t src, uint32_t dst, uint32_t res)
b41f7df0	346	{
b41f7df0 EI	347	uint32_t flags = 0;
b41f7df0 EI	348
6231868b EI	349	src = src & 0x80000000;
6231868b EI	350	dst = dst & 0x80000000;
b41f7df0 EI	351
	352	if ((res & 0x80000000L) != 0L)
	353	{
	354	flags \|= N_FLAG;
a8cf66bb	355	if (!src && !dst)
b41f7df0	356	flags \|= V_FLAG;
a8cf66bb	357	else if (src & dst)
b41f7df0	358	flags \|= R_FLAG;
b41f7df0 EI	359	}
	360	else
	361	{
	362	if (res == 0L)
	363	flags \|= Z_FLAG;
a8cf66bb	364	if (src & dst)
b41f7df0	365	flags \|= V_FLAG;
a8cf66bb	366	if (dst \| src)
b41f7df0 EI	367	flags \|= R_FLAG;
	368	}
	369
6231868b	370	return evaluate_flags_writeback(flags, ccs);
b41f7df0 EI	371	}
b41f7df0 EI	372
6231868b EI	373	uint32_t helper_evaluate_flags_alu_4(uint32_t ccs,
6231868b EI	374	uint32_t src, uint32_t dst, uint32_t res)
b41f7df0	375	{
b41f7df0 EI	376	uint32_t flags = 0;
b41f7df0 EI	377
6231868b EI	378	src = src & 0x80000000;
6231868b EI	379	dst = dst & 0x80000000;
30abcfc7	380
a8cf66bb	381	if ((res & 0x80000000L) != 0L)
30abcfc7	382	{
a8cf66bb EI	383	flags \|= N_FLAG;
	384	if (!src && !dst)
	385	flags \|= V_FLAG;
	386	else if (src & dst)
	387	flags \|= C_FLAG;
	388	}
	389	else
	390	{
	391	if (res == 0L)
	392	flags \|= Z_FLAG;
	393	if (src & dst)
	394	flags \|= V_FLAG;
	395	if (dst \| src)
	396	flags \|= C_FLAG;
30abcfc7 EI	397	}
30abcfc7 EI	398
6231868b	399	return evaluate_flags_writeback(flags, ccs);
a8cf66bb EI	400	}
a8cf66bb EI	401
6231868b EI	402	uint32_t helper_evaluate_flags_sub_4(uint32_t ccs,
6231868b EI	403	uint32_t src, uint32_t dst, uint32_t res)
a8cf66bb	404	{
a8cf66bb EI	405	uint32_t flags = 0;
a8cf66bb EI	406
6231868b EI	407	src = (~src) & 0x80000000;
6231868b EI	408	dst = dst & 0x80000000;
b41f7df0 EI	409
	410	if ((res & 0x80000000L) != 0L)
	411	{
	412	flags \|= N_FLAG;
a8cf66bb	413	if (!src && !dst)
b41f7df0	414	flags \|= V_FLAG;
a8cf66bb	415	else if (src & dst)
b41f7df0	416	flags \|= C_FLAG;
b41f7df0 EI	417	}
	418	else
	419	{
	420	if (res == 0L)
	421	flags \|= Z_FLAG;
a8cf66bb	422	if (src & dst)
b41f7df0	423	flags \|= V_FLAG;
a8cf66bb	424	if (dst \| src)
b41f7df0 EI	425	flags \|= C_FLAG;
	426	}
	427
a8cf66bb	428	flags ^= C_FLAG;
6231868b	429	return evaluate_flags_writeback(flags, ccs);
b41f7df0 EI	430	}
b41f7df0 EI	431
6231868b	432	uint32_t helper_evaluate_flags_move_4(uint32_t ccs, uint32_t res)
b41f7df0	433	{
b41f7df0 EI	434	uint32_t flags = 0;
b41f7df0 EI	435
b41f7df0 EI	436	if ((int32_t)res < 0)
	437	flags \|= N_FLAG;
	438	else if (res == 0L)
	439	flags \|= Z_FLAG;
	440
6231868b	441	return evaluate_flags_writeback(flags, ccs);
b41f7df0	442	}
6231868b	443	uint32_t helper_evaluate_flags_move_2(uint32_t ccs, uint32_t res)
b41f7df0	444	{
b41f7df0	445	uint32_t flags = 0;
b41f7df0 EI	446
	447	if ((int16_t)res < 0L)
	448	flags \|= N_FLAG;
	449	else if (res == 0)
	450	flags \|= Z_FLAG;
	451
6231868b	452	return evaluate_flags_writeback(flags, ccs);
b41f7df0 EI	453	}
	454
	455	/* TODO: This is expensive. We could split things up and only evaluate part of
	456	CCR on a need to know basis. For now, we simply re-evaluate everything. */
6231868b	457	void helper_evaluate_flags(void)
b41f7df0	458	{
6231868b	459	uint32_t src, dst, res;
b41f7df0 EI	460	uint32_t flags = 0;
	461
	462	src = env->cc_src;
	463	dst = env->cc_dest;
	464	res = env->cc_result;
	465
30abcfc7 EI	466	if (env->cc_op == CC_OP_SUB \|\| env->cc_op == CC_OP_CMP)
30abcfc7 EI	467	src = ~src;
b41f7df0 EI	468
	469	/* Now, evaluate the flags. This stuff is based on
	470	Per Zander's CRISv10 simulator. */
	471	switch (env->cc_size)
	472	{
	473	case 1:
	474	if ((res & 0x80L) != 0L)
	475	{
	476	flags \|= N_FLAG;
	477	if (((src & 0x80L) == 0L)
	478	&& ((dst & 0x80L) == 0L))
	479	{
	480	flags \|= V_FLAG;
	481	}
	482	else if (((src & 0x80L) != 0L)
	483	&& ((dst & 0x80L) != 0L))
	484	{
	485	flags \|= C_FLAG;
	486	}
	487	}
	488	else
	489	{
	490	if ((res & 0xFFL) == 0L)
	491	{
	492	flags \|= Z_FLAG;
	493	}
	494	if (((src & 0x80L) != 0L)
	495	&& ((dst & 0x80L) != 0L))
	496	{
	497	flags \|= V_FLAG;
	498	}
	499	if ((dst & 0x80L) != 0L
	500	\|\| (src & 0x80L) != 0L)
	501	{
	502	flags \|= C_FLAG;
	503	}
	504	}
	505	break;
	506	case 2:
	507	if ((res & 0x8000L) != 0L)
	508	{
	509	flags \|= N_FLAG;
	510	if (((src & 0x8000L) == 0L)
	511	&& ((dst & 0x8000L) == 0L))
	512	{
	513	flags \|= V_FLAG;
	514	}
	515	else if (((src & 0x8000L) != 0L)
	516	&& ((dst & 0x8000L) != 0L))
	517	{
	518	flags \|= C_FLAG;
	519	}
	520	}
	521	else
	522	{
	523	if ((res & 0xFFFFL) == 0L)
	524	{
	525	flags \|= Z_FLAG;
	526	}
	527	if (((src & 0x8000L) != 0L)
	528	&& ((dst & 0x8000L) != 0L))
	529	{
	530	flags \|= V_FLAG;
	531	}
532	if ((dst & 0x8000L) != 0L
533	\|\| (src & 0x8000L) != 0L)
534	{
535	flags \|= C_FLAG;
536	}
537	}
538	break;
539	case 4:
540	if ((res & 0x80000000L) != 0L)
541	{
542	flags \|= N_FLAG;
543	if (((src & 0x80000000L) == 0L)
544	&& ((dst & 0x80000000L) == 0L))
545	{
546	flags \|= V_FLAG;
547	}
548	else if (((src & 0x80000000L) != 0L) &&
549	((dst & 0x80000000L) != 0L))
550	{
551	flags \|= C_FLAG;
552	}
553	}
554	else
555	{
556	if (res == 0L)
557	flags \|= Z_FLAG;
558	if (((src & 0x80000000L) != 0L)
559	&& ((dst & 0x80000000L) != 0L))
560	flags \|= V_FLAG;
561	if ((dst & 0x80000000L) != 0L
562	\|\| (src & 0x80000000L) != 0L)
563	flags \|= C_FLAG;
564	}
565	break;
566	default:
567	break;
568	}
569
6231868b	570	if (env->cc_op == CC_OP_SUB \|\| env->cc_op == CC_OP_CMP)
b41f7df0	571	flags ^= C_FLAG;
6231868b EI	572
6231868b EI	573	env->pregs[PR_CCS] = evaluate_flags_writeback(flags, env->pregs[PR_CCS]);
b41f7df0	574	}
30abcfc7 EI	575
	576	void helper_top_evaluate_flags(void)
	577	{
	578	switch (env->cc_op)
	579	{
	580	case CC_OP_MCP:
6231868b EI	581	env->pregs[PR_CCS] = helper_evaluate_flags_mcp(
	582	env->pregs[PR_CCS], env->cc_src,
	583	env->cc_dest, env->cc_result);
30abcfc7 EI	584	break;
30abcfc7 EI	585	case CC_OP_MULS:
6231868b EI	586	env->pregs[PR_CCS] = helper_evaluate_flags_muls(
	587	env->pregs[PR_CCS], env->cc_result,
	588	env->pregs[PR_MOF]);
30abcfc7 EI	589	break;
30abcfc7 EI	590	case CC_OP_MULU:
6231868b EI	591	env->pregs[PR_CCS] = helper_evaluate_flags_mulu(
	592	env->pregs[PR_CCS], env->cc_result,
	593	env->pregs[PR_MOF]);
30abcfc7 EI	594	break;
	595	case CC_OP_MOVE:
	596	case CC_OP_AND:
	597	case CC_OP_OR:
	598	case CC_OP_XOR:
	599	case CC_OP_ASR:
	600	case CC_OP_LSR:
	601	case CC_OP_LSL:
6231868b EI	602	switch (env->cc_size)
	603	{
	604	case 4:
	605	env->pregs[PR_CCS] =
	606	helper_evaluate_flags_move_4(
	607	env->pregs[PR_CCS],
	608	env->cc_result);
	609	break;
	610	case 2:
	611	env->pregs[PR_CCS] =
	612	helper_evaluate_flags_move_2(
	613	env->pregs[PR_CCS],
	614	env->cc_result);
	615	break;
	616	default:
	617	helper_evaluate_flags();
	618	break;
	619	}
	620	break;
30abcfc7 EI	621	case CC_OP_FLAGS:
	622	/* live. */
	623	break;
a8cf66bb EI	624	case CC_OP_SUB:
	625	case CC_OP_CMP:
	626	if (env->cc_size == 4)
6231868b EI	627	env->pregs[PR_CCS] =
	628	helper_evaluate_flags_sub_4(
	629	env->pregs[PR_CCS],
	630	env->cc_src, env->cc_dest,
	631	env->cc_result);
a8cf66bb EI	632	else
	633	helper_evaluate_flags();
	634	break;
30abcfc7 EI	635	default:
	636	{
	637	switch (env->cc_size)
	638	{
6231868b EI	639	case 4:
	640	env->pregs[PR_CCS] =
	641	helper_evaluate_flags_alu_4(
	642	env->pregs[PR_CCS],
	643	env->cc_src, env->cc_dest,
	644	env->cc_result);
	645	break;
	646	default:
	647	helper_evaluate_flags();
	648	break;
30abcfc7 EI	649	}
	650	}
	651	break;
	652	}
	653	}