[qemu.git] / target-cris / op_helper.c

/*
 *  CRIS helper routines
 *
 *  Copyright (c) 2007 AXIS Communications
 *  Written by Edgar E. Iglesias
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
 */

#include "exec.h"
#include "mmu.h"
#include "helper.h"
#include "host-utils.h"

//#define CRIS_OP_HELPER_DEBUG


#ifdef CRIS_OP_HELPER_DEBUG
#define D(x) x
#define D_LOG(...) qemu_log(__VA__ARGS__)
#else
#define D(x)
#define D_LOG(...) do { } while (0)
#endif

#if !defined(CONFIG_USER_ONLY)

#define MMUSUFFIX _mmu

#define SHIFT 0
#include "softmmu_template.h"

#define SHIFT 1
#include "softmmu_template.h"

#define SHIFT 2
#include "softmmu_template.h"

#define SHIFT 3
#include "softmmu_template.h"

/* Try to fill the TLB and return an exception if error. If retaddr is
   NULL, it means that the function was called in C code (i.e. not
   from generated code or from helper.c) */
/* XXX: fix it to restore all registers */
void tlb_fill (target_ulong addr, int is_write, int mmu_idx, void *retaddr)
{
    TranslationBlock *tb;
    CPUState *saved_env;
    unsigned long pc;
    int ret;

    /* XXX: hack to restore env in all cases, even if not called from
       generated code */
    saved_env = env;
    env = cpu_single_env;

    D_LOG("%s pc=%x tpc=%x ra=%x\n", __func__, 
	     env->pc, env->debug1, retaddr);
    ret = cpu_cris_handle_mmu_fault(env, addr, is_write, mmu_idx, 1);
    if (unlikely(ret)) {
        if (retaddr) {
            /* now we have a real cpu fault */
            pc = (unsigned long)retaddr;
            tb = tb_find_pc(pc);
            if (tb) {
                /* the PC is inside the translated code. It means that we have
                   a virtual CPU fault */
                cpu_restore_state(tb, env, pc, NULL);

		/* Evaluate flags after retranslation.  */
                helper_top_evaluate_flags();
            }
        }
        cpu_loop_exit();
    }
    env = saved_env;
}

#endif

void helper_raise_exception(uint32_t index)
{
	env->exception_index = index;
	cpu_loop_exit();
}

void helper_tlb_flush_pid(uint32_t pid)
{
#if !defined(CONFIG_USER_ONLY)
	pid &= 0xff;
	if (pid != (env->pregs[PR_PID] & 0xff))
		cris_mmu_flush_pid(env, env->pregs[PR_PID]);
#endif
}

void helper_spc_write(uint32_t new_spc)
{
#if !defined(CONFIG_USER_ONLY)
	tlb_flush_page(env, env->pregs[PR_SPC]);
	tlb_flush_page(env, new_spc);
#endif
}

void helper_dump(uint32_t a0, uint32_t a1, uint32_t a2)
{
	qemu_log("%s: a0=%x a1=%x\n", __func__, a0, a1);
}

/* Used by the tlb decoder.  */
#define EXTRACT_FIELD(src, start, end) \
	    (((src) >> start) & ((1 << (end - start + 1)) - 1))

void helper_movl_sreg_reg (uint32_t sreg, uint32_t reg)
{
	uint32_t srs;
	srs = env->pregs[PR_SRS];
	srs &= 3;
	env->sregs[srs][sreg] = env->regs[reg];

#if !defined(CONFIG_USER_ONLY)
	if (srs == 1 || srs == 2) {
		if (sreg == 6) {
			/* Writes to tlb-hi write to mm_cause as a side 
			   effect.  */
			env->sregs[SFR_RW_MM_TLB_HI] = env->regs[reg];
			env->sregs[SFR_R_MM_CAUSE] = env->regs[reg];
		}
		else if (sreg == 5) {
			uint32_t set;
			uint32_t idx;
			uint32_t lo, hi;
			uint32_t vaddr;
			int tlb_v;

			idx = set = env->sregs[SFR_RW_MM_TLB_SEL];
			set >>= 4;
			set &= 3;

			idx &= 15;
			/* We've just made a write to tlb_lo.  */
			lo = env->sregs[SFR_RW_MM_TLB_LO];
			/* Writes are done via r_mm_cause.  */
			hi = env->sregs[SFR_R_MM_CAUSE];

			vaddr = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].hi,
					      13, 31);
			vaddr <<= TARGET_PAGE_BITS;
			tlb_v = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].lo,
					    3, 3);
			env->tlbsets[srs - 1][set][idx].lo = lo;
			env->tlbsets[srs - 1][set][idx].hi = hi;

			D_LOG("tlb flush vaddr=%x v=%d pc=%x\n", 
				  vaddr, tlb_v, env->pc);
			tlb_flush_page(env, vaddr);
		}
	}
#endif
}

void helper_movl_reg_sreg (uint32_t reg, uint32_t sreg)
{
	uint32_t srs;
	env->pregs[PR_SRS] &= 3;
	srs = env->pregs[PR_SRS];
	
#if !defined(CONFIG_USER_ONLY)
	if (srs == 1 || srs == 2)
	{
		uint32_t set;
		uint32_t idx;
		uint32_t lo, hi;

		idx = set = env->sregs[SFR_RW_MM_TLB_SEL];
		set >>= 4;
		set &= 3;
		idx &= 15;

		/* Update the mirror regs.  */
		hi = env->tlbsets[srs - 1][set][idx].hi;
		lo = env->tlbsets[srs - 1][set][idx].lo;
		env->sregs[SFR_RW_MM_TLB_HI] = hi;
		env->sregs[SFR_RW_MM_TLB_LO] = lo;
	}
#endif
	env->regs[reg] = env->sregs[srs][sreg];
}

static void cris_ccs_rshift(CPUState *env)
{
	uint32_t ccs;

	/* Apply the ccs shift.  */
	ccs = env->pregs[PR_CCS];
	ccs = (ccs & 0xc0000000) | ((ccs & 0x0fffffff) >> 10);
	if (ccs & U_FLAG)
	{
		/* Enter user mode.  */
		env->ksp = env->regs[R_SP];
		env->regs[R_SP] = env->pregs[PR_USP];
	}

	env->pregs[PR_CCS] = ccs;
}

void helper_rfe(void)
{
	int rflag = env->pregs[PR_CCS] & R_FLAG;

	D_LOG("rfe: erp=%x pid=%x ccs=%x btarget=%x\n", 
		 env->pregs[PR_ERP], env->pregs[PR_PID],
		 env->pregs[PR_CCS],
		 env->btarget);

	cris_ccs_rshift(env);

	/* RFE sets the P_FLAG only if the R_FLAG is not set.  */
	if (!rflag)
		env->pregs[PR_CCS] |= P_FLAG;
}

void helper_rfn(void)
{
	int rflag = env->pregs[PR_CCS] & R_FLAG;

	D_LOG("rfn: erp=%x pid=%x ccs=%x btarget=%x\n", 
		 env->pregs[PR_ERP], env->pregs[PR_PID],
		 env->pregs[PR_CCS],
		 env->btarget);

	cris_ccs_rshift(env);

	/* Set the P_FLAG only if the R_FLAG is not set.  */
	if (!rflag)
		env->pregs[PR_CCS] |= P_FLAG;

    /* Always set the M flag.  */
    env->pregs[PR_CCS] |= M_FLAG;
}

uint32_t helper_lz(uint32_t t0)
{
	return clz32(t0);
}

uint32_t helper_btst(uint32_t t0, uint32_t t1, uint32_t ccs)
{
	/* FIXME: clean this up.  */

	/* des ref:
	   The N flag is set according to the selected bit in the dest reg.
	   The Z flag is set if the selected bit and all bits to the right are
	   zero.
	   The X flag is cleared.
	   Other flags are left untouched.
	   The destination reg is not affected.*/
	unsigned int fz, sbit, bset, mask, masked_t0;

	sbit = t1 & 31;
	bset = !!(t0 & (1 << sbit));
	mask = sbit == 31 ? -1 : (1 << (sbit + 1)) - 1;
	masked_t0 = t0 & mask;
	fz = !(masked_t0 | bset);

	/* Clear the X, N and Z flags.  */
	ccs = ccs & ~(X_FLAG | N_FLAG | Z_FLAG);
	if (env->pregs[PR_VR] < 32)
		ccs &= ~(V_FLAG | C_FLAG);
	/* Set the N and Z flags accordingly.  */
	ccs |= (bset << 3) | (fz << 2);
	return ccs;
}

static inline uint32_t evaluate_flags_writeback(uint32_t flags, uint32_t ccs)
{
	unsigned int x, z, mask;

	/* Extended arithmetics, leave the z flag alone.  */
	x = env->cc_x;
	mask = env->cc_mask | X_FLAG;
        if (x) {
		z = flags & Z_FLAG;
		mask = mask & ~z;
	}
	flags &= mask;

	/* all insn clear the x-flag except setf or clrf.  */
	ccs &= ~mask;
	ccs |= flags;
	return ccs;
}

uint32_t helper_evaluate_flags_muls(uint32_t ccs, uint32_t res, uint32_t mof)
{
	uint32_t flags = 0;
	int64_t tmp;
	int dneg;

	dneg = ((int32_t)res) < 0;

	tmp = mof;
	tmp <<= 32;
	tmp |= res;
	if (tmp == 0)
		flags |= Z_FLAG;
	else if (tmp < 0)
		flags |= N_FLAG;
	if ((dneg && mof != -1)
	    || (!dneg && mof != 0))
		flags |= V_FLAG;
	return evaluate_flags_writeback(flags, ccs);
}

uint32_t helper_evaluate_flags_mulu(uint32_t ccs, uint32_t res, uint32_t mof)
{
	uint32_t flags = 0;
	uint64_t tmp;

	tmp = mof;
	tmp <<= 32;
	tmp |= res;
	if (tmp == 0)
		flags |= Z_FLAG;
	else if (tmp >> 63)
		flags |= N_FLAG;
	if (mof)
		flags |= V_FLAG;

	return evaluate_flags_writeback(flags, ccs);
}

uint32_t helper_evaluate_flags_mcp(uint32_t ccs,
				   uint32_t src, uint32_t dst, uint32_t res)
{
	uint32_t flags = 0;

	src = src & 0x80000000;
	dst = dst & 0x80000000;

	if ((res & 0x80000000L) != 0L)
	{
		flags |= N_FLAG;
		if (!src && !dst)
			flags |= V_FLAG;
		else if (src & dst)
			flags |= R_FLAG;
	}
	else
	{
		if (res == 0L)
			flags |= Z_FLAG;
		if (src & dst) 
			flags |= V_FLAG;
		if (dst | src) 
			flags |= R_FLAG;
	}

	return evaluate_flags_writeback(flags, ccs);
}

uint32_t helper_evaluate_flags_alu_4(uint32_t ccs,
				     uint32_t src, uint32_t dst, uint32_t res)
{
	uint32_t flags = 0;

	src = src & 0x80000000;
	dst = dst & 0x80000000;

	if ((res & 0x80000000L) != 0L)
	{
		flags |= N_FLAG;
		if (!src && !dst)
			flags |= V_FLAG;
		else if (src & dst)
			flags |= C_FLAG;
	}
	else
	{
		if (res == 0L)
			flags |= Z_FLAG;
		if (src & dst) 
			flags |= V_FLAG;
		if (dst | src) 
			flags |= C_FLAG;
	}

	return evaluate_flags_writeback(flags, ccs);
}

uint32_t helper_evaluate_flags_sub_4(uint32_t ccs,
				     uint32_t src, uint32_t dst, uint32_t res)
{
	uint32_t flags = 0;

	src = (~src) & 0x80000000;
	dst = dst & 0x80000000;

	if ((res & 0x80000000L) != 0L)
	{
		flags |= N_FLAG;
		if (!src && !dst)
			flags |= V_FLAG;
		else if (src & dst)
			flags |= C_FLAG;
	}
	else
	{
		if (res == 0L)
			flags |= Z_FLAG;
		if (src & dst) 
			flags |= V_FLAG;
		if (dst | src) 
			flags |= C_FLAG;
	}

	flags ^= C_FLAG;
	return evaluate_flags_writeback(flags, ccs);
}

uint32_t helper_evaluate_flags_move_4(uint32_t ccs, uint32_t res)
{
	uint32_t flags = 0;

	if ((int32_t)res < 0)
		flags |= N_FLAG;
	else if (res == 0L)
		flags |= Z_FLAG;

	return evaluate_flags_writeback(flags, ccs);
}
uint32_t helper_evaluate_flags_move_2(uint32_t ccs, uint32_t res)
{
	uint32_t flags = 0;

	if ((int16_t)res < 0L)
		flags |= N_FLAG;
	else if (res == 0)
		flags |= Z_FLAG;

	return evaluate_flags_writeback(flags, ccs);
}

/* TODO: This is expensive. We could split things up and only evaluate part of
   CCR on a need to know basis. For now, we simply re-evaluate everything.  */
void  helper_evaluate_flags(void)
{
	uint32_t src, dst, res;
	uint32_t flags = 0;

	src = env->cc_src;
	dst = env->cc_dest;
	res = env->cc_result;

	if (env->cc_op == CC_OP_SUB || env->cc_op == CC_OP_CMP)
		src = ~src;

	/* Now, evaluate the flags. This stuff is based on
	   Per Zander's CRISv10 simulator.  */
	switch (env->cc_size)
	{
		case 1:
			if ((res & 0x80L) != 0L)
			{
				flags |= N_FLAG;
				if (((src & 0x80L) == 0L)
				    && ((dst & 0x80L) == 0L))
				{
					flags |= V_FLAG;
				}
				else if (((src & 0x80L) != 0L)
					 && ((dst & 0x80L) != 0L))
				{
					flags |= C_FLAG;
				}
			}
			else
			{
				if ((res & 0xFFL) == 0L)
				{
					flags |= Z_FLAG;
				}
				if (((src & 0x80L) != 0L)
				    && ((dst & 0x80L) != 0L))
				{
					flags |= V_FLAG;
				}
				if ((dst & 0x80L) != 0L
				    || (src & 0x80L) != 0L)
				{
					flags |= C_FLAG;
				}
			}
			break;
		case 2:
			if ((res & 0x8000L) != 0L)
			{
				flags |= N_FLAG;
				if (((src & 0x8000L) == 0L)
				    && ((dst & 0x8000L) == 0L))
				{
					flags |= V_FLAG;
				}
				else if (((src & 0x8000L) != 0L)
					 && ((dst & 0x8000L) != 0L))
				{
					flags |= C_FLAG;
				}
			}
			else
			{
				if ((res & 0xFFFFL) == 0L)
				{
					flags |= Z_FLAG;
				}
				if (((src & 0x8000L) != 0L)
				    && ((dst & 0x8000L) != 0L))
				{
					flags |= V_FLAG;
				}
				if ((dst & 0x8000L) != 0L
				    || (src & 0x8000L) != 0L)
				{
					flags |= C_FLAG;
				}
			}
			break;
		case 4:
			if ((res & 0x80000000L) != 0L)
			{
				flags |= N_FLAG;
				if (((src & 0x80000000L) == 0L)
				    && ((dst & 0x80000000L) == 0L))
				{
					flags |= V_FLAG;
				}
				else if (((src & 0x80000000L) != 0L) &&
					 ((dst & 0x80000000L) != 0L))
				{
					flags |= C_FLAG;
				}
			}
			else
			{
				if (res == 0L)
					flags |= Z_FLAG;
				if (((src & 0x80000000L) != 0L)
				    && ((dst & 0x80000000L) != 0L))
					flags |= V_FLAG;
				if ((dst & 0x80000000L) != 0L
				    || (src & 0x80000000L) != 0L)
					flags |= C_FLAG;
			}
			break;
		default:
			break;
	}

	if (env->cc_op == CC_OP_SUB || env->cc_op == CC_OP_CMP)
		flags ^= C_FLAG;

	env->pregs[PR_CCS] = evaluate_flags_writeback(flags, env->pregs[PR_CCS]);
}

void helper_top_evaluate_flags(void)
{
	switch (env->cc_op)
	{
		case CC_OP_MCP:
			env->pregs[PR_CCS] = helper_evaluate_flags_mcp(
					env->pregs[PR_CCS], env->cc_src,
					env->cc_dest, env->cc_result);
			break;
		case CC_OP_MULS:
			env->pregs[PR_CCS] = helper_evaluate_flags_muls(
					env->pregs[PR_CCS], env->cc_result,
					env->pregs[PR_MOF]);
			break;
		case CC_OP_MULU:
			env->pregs[PR_CCS] = helper_evaluate_flags_mulu(
					env->pregs[PR_CCS], env->cc_result,
					env->pregs[PR_MOF]);
			break;
		case CC_OP_MOVE:
		case CC_OP_AND:
		case CC_OP_OR:
		case CC_OP_XOR:
		case CC_OP_ASR:
		case CC_OP_LSR:
		case CC_OP_LSL:
		switch (env->cc_size)
		{
			case 4:
				env->pregs[PR_CCS] =
					helper_evaluate_flags_move_4(
							env->pregs[PR_CCS],
							env->cc_result);
				break;
			case 2:
				env->pregs[PR_CCS] =
					helper_evaluate_flags_move_2(
							env->pregs[PR_CCS],
							env->cc_result);
				break;
			default:
				helper_evaluate_flags();
				break;
		}
		break;
		case CC_OP_FLAGS:
			/* live.  */
			break;
		case CC_OP_SUB:
		case CC_OP_CMP:
			if (env->cc_size == 4)
				env->pregs[PR_CCS] =
					helper_evaluate_flags_sub_4(
						env->pregs[PR_CCS],
						env->cc_src, env->cc_dest,
						env->cc_result);
			else
				helper_evaluate_flags();
			break;
		default:
		{
			switch (env->cc_size)
			{
			case 4:
				env->pregs[PR_CCS] =
					helper_evaluate_flags_alu_4(
						env->pregs[PR_CCS],
						env->cc_src, env->cc_dest,
						env->cc_result);
				break;
			default:
				helper_evaluate_flags();
				break;
			}
		}
		break;
	}
}
Commit	Line	Data
81fdc5f8 TS	1	/*
	2	* CRIS helper routines
	3	*
	4	* Copyright (c) 2007 AXIS Communications
	5	* Written by Edgar E. Iglesias
	6	*
	7	* This library is free software; you can redistribute it and/or
	8	* modify it under the terms of the GNU Lesser General Public
	9	* License as published by the Free Software Foundation; either
	10	* version 2 of the License, or (at your option) any later version.
	11	*
	12	* This library is distributed in the hope that it will be useful,
	13	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	14	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	15	* Lesser General Public License for more details.
	16	*
	17	* You should have received a copy of the GNU Lesser General Public
8167ee88	18	* License along with this library; if not, see <http://www.gnu.org/licenses/>.
81fdc5f8 TS	19	*/
81fdc5f8 TS	20
81fdc5f8	21	#include "exec.h"
786c02f1	22	#include "mmu.h"
30abcfc7	23	#include "helper.h"
c38ac98d	24	#include "host-utils.h"
81fdc5f8	25
d12d51d5 AL	26	//#define CRIS_OP_HELPER_DEBUG
	27
	28
	29	#ifdef CRIS_OP_HELPER_DEBUG
	30	#define D(x) x
93fcfe39	31	#define D_LOG(...) qemu_log(__VA__ARGS__)
d12d51d5	32	#else
e2eef170	33	#define D(x)
d12d51d5 AL	34	#define D_LOG(...) do { } while (0)
d12d51d5 AL	35	#endif
e2eef170 PB	36
	37	#if !defined(CONFIG_USER_ONLY)
	38
81fdc5f8	39	#define MMUSUFFIX _mmu
81fdc5f8 TS	40
	41	#define SHIFT 0
	42	#include "softmmu_template.h"
	43
	44	#define SHIFT 1
	45	#include "softmmu_template.h"
	46
	47	#define SHIFT 2
	48	#include "softmmu_template.h"
	49
	50	#define SHIFT 3
	51	#include "softmmu_template.h"
	52
	53	/* Try to fill the TLB and return an exception if error. If retaddr is
	54	NULL, it means that the function was called in C code (i.e. not
	55	from generated code or from helper.c) */
	56	/* XXX: fix it to restore all registers */
6ebbf390	57	void tlb_fill (target_ulong addr, int is_write, int mmu_idx, void *retaddr)
81fdc5f8 TS	58	{
	59	TranslationBlock *tb;
	60	CPUState *saved_env;
44f8625d	61	unsigned long pc;
81fdc5f8 TS	62	int ret;
	63
	64	/* XXX: hack to restore env in all cases, even if not called from
	65	generated code */
	66	saved_env = env;
	67	env = cpu_single_env;
b41f7df0	68
d12d51d5 AL	69	D_LOG("%s pc=%x tpc=%x ra=%x\n", __func__,
d12d51d5 AL	70	env->pc, env->debug1, retaddr);
6ebbf390	71	ret = cpu_cris_handle_mmu_fault(env, addr, is_write, mmu_idx, 1);
551bd27f	72	if (unlikely(ret)) {
81fdc5f8 TS	73	if (retaddr) {
81fdc5f8 TS	74	/* now we have a real cpu fault */
44f8625d	75	pc = (unsigned long)retaddr;
81fdc5f8 TS	76	tb = tb_find_pc(pc);
	77	if (tb) {
	78	/* the PC is inside the translated code. It means that we have
	79	a virtual CPU fault */
	80	cpu_restore_state(tb, env, pc, NULL);
30abcfc7 EI	81
	82	/* Evaluate flags after retranslation. */
	83	helper_top_evaluate_flags();
81fdc5f8 TS	84	}
	85	}
	86	cpu_loop_exit();
	87	}
	88	env = saved_env;
	89	}
	90
e2eef170 PB	91	#endif
e2eef170 PB	92
dceaf394	93	void helper_raise_exception(uint32_t index)
786c02f1	94	{
dceaf394 EI	95	env->exception_index = index;
dceaf394 EI	96	cpu_loop_exit();
786c02f1 EI	97	}
786c02f1 EI	98
cf1d97f0 EI	99	void helper_tlb_flush_pid(uint32_t pid)
	100	{
	101	#if !defined(CONFIG_USER_ONLY)
28de16da EI	102	pid &= 0xff;
	103	if (pid != (env->pregs[PR_PID] & 0xff))
	104	cris_mmu_flush_pid(env, env->pregs[PR_PID]);
cf1d97f0 EI	105	#endif
	106	}
	107
a1aebcb8 EI	108	void helper_spc_write(uint32_t new_spc)
	109	{
	110	#if !defined(CONFIG_USER_ONLY)
	111	tlb_flush_page(env, env->pregs[PR_SPC]);
	112	tlb_flush_page(env, new_spc);
	113	#endif
	114	}
	115
30abcfc7	116	void helper_dump(uint32_t a0, uint32_t a1, uint32_t a2)
b41f7df0	117	{
93fcfe39	118	qemu_log("%s: a0=%x a1=%x\n", __func__, a0, a1);
b41f7df0 EI	119	}
b41f7df0 EI	120
cf1d97f0 EI	121	/* Used by the tlb decoder. */
	122	#define EXTRACT_FIELD(src, start, end) \
	123	(((src) >> start) & ((1 << (end - start + 1)) - 1))
	124
dceaf394 EI	125	void helper_movl_sreg_reg (uint32_t sreg, uint32_t reg)
	126	{
	127	uint32_t srs;
	128	srs = env->pregs[PR_SRS];
	129	srs &= 3;
	130	env->sregs[srs][sreg] = env->regs[reg];
	131
	132	#if !defined(CONFIG_USER_ONLY)
	133	if (srs == 1 \|\| srs == 2) {
	134	if (sreg == 6) {
	135	/* Writes to tlb-hi write to mm_cause as a side
	136	effect. */
6913ba56 EI	137	env->sregs[SFR_RW_MM_TLB_HI] = env->regs[reg];
6913ba56 EI	138	env->sregs[SFR_R_MM_CAUSE] = env->regs[reg];
dceaf394 EI	139	}
	140	else if (sreg == 5) {
	141	uint32_t set;
	142	uint32_t idx;
	143	uint32_t lo, hi;
	144	uint32_t vaddr;
cf1d97f0	145	int tlb_v;
dceaf394 EI	146
	147	idx = set = env->sregs[SFR_RW_MM_TLB_SEL];
	148	set >>= 4;
	149	set &= 3;
	150
	151	idx &= 15;
	152	/* We've just made a write to tlb_lo. */
	153	lo = env->sregs[SFR_RW_MM_TLB_LO];
	154	/* Writes are done via r_mm_cause. */
	155	hi = env->sregs[SFR_R_MM_CAUSE];
cf1d97f0 EI	156
	157	vaddr = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].hi,
	158	13, 31);
	159	vaddr <<= TARGET_PAGE_BITS;
	160	tlb_v = EXTRACT_FIELD(env->tlbsets[srs-1][set][idx].lo,
	161	3, 3);
dceaf394 EI	162	env->tlbsets[srs - 1][set][idx].lo = lo;
dceaf394 EI	163	env->tlbsets[srs - 1][set][idx].hi = hi;
cf1d97f0	164
d12d51d5 AL	165	D_LOG("tlb flush vaddr=%x v=%d pc=%x\n",
d12d51d5 AL	166	vaddr, tlb_v, env->pc);
cf1d97f0	167	tlb_flush_page(env, vaddr);
dceaf394 EI	168	}
	169	}
	170	#endif
	171	}
	172
	173	void helper_movl_reg_sreg (uint32_t reg, uint32_t sreg)
	174	{
	175	uint32_t srs;
	176	env->pregs[PR_SRS] &= 3;
	177	srs = env->pregs[PR_SRS];
	178
	179	#if !defined(CONFIG_USER_ONLY)
	180	if (srs == 1 \|\| srs == 2)
	181	{
	182	uint32_t set;
	183	uint32_t idx;
	184	uint32_t lo, hi;
	185
	186	idx = set = env->sregs[SFR_RW_MM_TLB_SEL];
	187	set >>= 4;
	188	set &= 3;
	189	idx &= 15;
	190
	191	/* Update the mirror regs. */
	192	hi = env->tlbsets[srs - 1][set][idx].hi;
	193	lo = env->tlbsets[srs - 1][set][idx].lo;
	194	env->sregs[SFR_RW_MM_TLB_HI] = hi;
	195	env->sregs[SFR_RW_MM_TLB_LO] = lo;
	196	}
	197	#endif
	198	env->regs[reg] = env->sregs[srs][sreg];
dceaf394 EI	199	}
	200
	201	static void cris_ccs_rshift(CPUState *env)
	202	{
	203	uint32_t ccs;
	204
	205	/* Apply the ccs shift. */
	206	ccs = env->pregs[PR_CCS];
	207	ccs = (ccs & 0xc0000000) \| ((ccs & 0x0fffffff) >> 10);
	208	if (ccs & U_FLAG)
	209	{
	210	/* Enter user mode. */
	211	env->ksp = env->regs[R_SP];
	212	env->regs[R_SP] = env->pregs[PR_USP];
	213	}
	214
	215	env->pregs[PR_CCS] = ccs;
	216	}
	217
b41f7df0 EI	218	void helper_rfe(void)
b41f7df0 EI	219	{
bf443337 EI	220	int rflag = env->pregs[PR_CCS] & R_FLAG;
bf443337 EI	221
d12d51d5	222	D_LOG("rfe: erp=%x pid=%x ccs=%x btarget=%x\n",
b41f7df0 EI	223	env->pregs[PR_ERP], env->pregs[PR_PID],
b41f7df0 EI	224	env->pregs[PR_CCS],
d12d51d5	225	env->btarget);
dceaf394 EI	226
	227	cris_ccs_rshift(env);
	228
	229	/* RFE sets the P_FLAG only if the R_FLAG is not set. */
bf443337	230	if (!rflag)
dceaf394	231	env->pregs[PR_CCS] \|= P_FLAG;
b41f7df0 EI	232	}
b41f7df0 EI	233
5bf8f1ab EI	234	void helper_rfn(void)
	235	{
	236	int rflag = env->pregs[PR_CCS] & R_FLAG;
	237
d12d51d5	238	D_LOG("rfn: erp=%x pid=%x ccs=%x btarget=%x\n",
5bf8f1ab EI	239	env->pregs[PR_ERP], env->pregs[PR_PID],
5bf8f1ab EI	240	env->pregs[PR_CCS],
d12d51d5	241	env->btarget);
5bf8f1ab EI	242
	243	cris_ccs_rshift(env);
	244
	245	/* Set the P_FLAG only if the R_FLAG is not set. */
	246	if (!rflag)
	247	env->pregs[PR_CCS] \|= P_FLAG;
	248
	249	/* Always set the M flag. */
	250	env->pregs[PR_CCS] \|= M_FLAG;
	251	}
	252
c38ac98d EI	253	uint32_t helper_lz(uint32_t t0)
	254	{
	255	return clz32(t0);
	256	}
	257
abd5c94e EI	258	uint32_t helper_btst(uint32_t t0, uint32_t t1, uint32_t ccs)
	259	{
	260	/* FIXME: clean this up. */
	261
	262	/* des ref:
	263	The N flag is set according to the selected bit in the dest reg.
	264	The Z flag is set if the selected bit and all bits to the right are
	265	zero.
	266	The X flag is cleared.
	267	Other flags are left untouched.
	268	The destination reg is not affected.*/
	269	unsigned int fz, sbit, bset, mask, masked_t0;
	270
	271	sbit = t1 & 31;
	272	bset = !!(t0 & (1 << sbit));
	273	mask = sbit == 31 ? -1 : (1 << (sbit + 1)) - 1;
	274	masked_t0 = t0 & mask;
	275	fz = !(masked_t0 \| bset);
	276
	277	/* Clear the X, N and Z flags. */
	278	ccs = ccs & ~(X_FLAG \| N_FLAG \| Z_FLAG);
95475216 EI	279	if (env->pregs[PR_VR] < 32)
95475216 EI	280	ccs &= ~(V_FLAG \| C_FLAG);
abd5c94e EI	281	/* Set the N and Z flags accordingly. */
	282	ccs \|= (bset << 3) \| (fz << 2);
	283	return ccs;
	284	}
	285
6231868b	286	static inline uint32_t evaluate_flags_writeback(uint32_t flags, uint32_t ccs)
b41f7df0	287	{
a8cf66bb	288	unsigned int x, z, mask;
b41f7df0 EI	289
b41f7df0 EI	290	/* Extended arithmetics, leave the z flag alone. */
30abcfc7	291	x = env->cc_x;
a8cf66bb EI	292	mask = env->cc_mask \| X_FLAG;
	293	if (x) {
	294	z = flags & Z_FLAG;
	295	mask = mask & ~z;
	296	}
	297	flags &= mask;
b41f7df0 EI	298
b41f7df0 EI	299	/* all insn clear the x-flag except setf or clrf. */
6231868b EI	300	ccs &= ~mask;
	301	ccs \|= flags;
	302	return ccs;
b41f7df0 EI	303	}
b41f7df0 EI	304
6231868b	305	uint32_t helper_evaluate_flags_muls(uint32_t ccs, uint32_t res, uint32_t mof)
b41f7df0	306	{
b41f7df0	307	uint32_t flags = 0;
dceaf394	308	int64_t tmp;
b41f7df0 EI	309	int dneg;
b41f7df0 EI	310
b41f7df0 EI	311	dneg = ((int32_t)res) < 0;
b41f7df0 EI	312
dceaf394 EI	313	tmp = mof;
	314	tmp <<= 32;
	315	tmp \|= res;
b41f7df0 EI	316	if (tmp == 0)
	317	flags \|= Z_FLAG;
	318	else if (tmp < 0)
	319	flags \|= N_FLAG;
	320	if ((dneg && mof != -1)
	321	\|\| (!dneg && mof != 0))
	322	flags \|= V_FLAG;
6231868b	323	return evaluate_flags_writeback(flags, ccs);
b41f7df0 EI	324	}
b41f7df0 EI	325
6231868b	326	uint32_t helper_evaluate_flags_mulu(uint32_t ccs, uint32_t res, uint32_t mof)
b41f7df0	327	{
b41f7df0	328	uint32_t flags = 0;
dceaf394	329	uint64_t tmp;
b41f7df0	330
dceaf394 EI	331	tmp = mof;
	332	tmp <<= 32;
	333	tmp \|= res;
b41f7df0 EI	334	if (tmp == 0)
	335	flags \|= Z_FLAG;
	336	else if (tmp >> 63)
	337	flags \|= N_FLAG;
	338	if (mof)
	339	flags \|= V_FLAG;
	340
6231868b	341	return evaluate_flags_writeback(flags, ccs);
b41f7df0 EI	342	}
b41f7df0 EI	343
6231868b EI	344	uint32_t helper_evaluate_flags_mcp(uint32_t ccs,
6231868b EI	345	uint32_t src, uint32_t dst, uint32_t res)
b41f7df0	346	{
b41f7df0 EI	347	uint32_t flags = 0;
b41f7df0 EI	348
6231868b EI	349	src = src & 0x80000000;
6231868b EI	350	dst = dst & 0x80000000;
b41f7df0 EI	351
	352	if ((res & 0x80000000L) != 0L)
	353	{
	354	flags \|= N_FLAG;
a8cf66bb	355	if (!src && !dst)
b41f7df0	356	flags \|= V_FLAG;
a8cf66bb	357	else if (src & dst)
b41f7df0	358	flags \|= R_FLAG;
b41f7df0 EI	359	}
	360	else
	361	{
	362	if (res == 0L)
	363	flags \|= Z_FLAG;
a8cf66bb	364	if (src & dst)
b41f7df0	365	flags \|= V_FLAG;
a8cf66bb	366	if (dst \| src)
b41f7df0 EI	367	flags \|= R_FLAG;
	368	}
	369
6231868b	370	return evaluate_flags_writeback(flags, ccs);
b41f7df0 EI	371	}
b41f7df0 EI	372
6231868b EI	373	uint32_t helper_evaluate_flags_alu_4(uint32_t ccs,
6231868b EI	374	uint32_t src, uint32_t dst, uint32_t res)
b41f7df0	375	{
b41f7df0 EI	376	uint32_t flags = 0;
b41f7df0 EI	377
6231868b EI	378	src = src & 0x80000000;
6231868b EI	379	dst = dst & 0x80000000;
30abcfc7	380
a8cf66bb	381	if ((res & 0x80000000L) != 0L)
30abcfc7	382	{
a8cf66bb EI	383	flags \|= N_FLAG;
	384	if (!src && !dst)
	385	flags \|= V_FLAG;
	386	else if (src & dst)
	387	flags \|= C_FLAG;
	388	}
	389	else
	390	{
	391	if (res == 0L)
	392	flags \|= Z_FLAG;
	393	if (src & dst)
	394	flags \|= V_FLAG;
	395	if (dst \| src)
	396	flags \|= C_FLAG;
30abcfc7 EI	397	}
30abcfc7 EI	398
6231868b	399	return evaluate_flags_writeback(flags, ccs);
a8cf66bb EI	400	}
a8cf66bb EI	401
6231868b EI	402	uint32_t helper_evaluate_flags_sub_4(uint32_t ccs,
6231868b EI	403	uint32_t src, uint32_t dst, uint32_t res)
a8cf66bb	404	{
a8cf66bb EI	405	uint32_t flags = 0;
a8cf66bb EI	406
6231868b EI	407	src = (~src) & 0x80000000;
6231868b EI	408	dst = dst & 0x80000000;
b41f7df0 EI	409
	410	if ((res & 0x80000000L) != 0L)
	411	{
	412	flags \|= N_FLAG;
a8cf66bb	413	if (!src && !dst)
b41f7df0	414	flags \|= V_FLAG;
a8cf66bb	415	else if (src & dst)
b41f7df0	416	flags \|= C_FLAG;
b41f7df0 EI	417	}
	418	else
	419	{
	420	if (res == 0L)
	421	flags \|= Z_FLAG;
a8cf66bb	422	if (src & dst)
b41f7df0	423	flags \|= V_FLAG;
a8cf66bb	424	if (dst \| src)
b41f7df0 EI	425	flags \|= C_FLAG;
	426	}
	427
a8cf66bb	428	flags ^= C_FLAG;
6231868b	429	return evaluate_flags_writeback(flags, ccs);
b41f7df0 EI	430	}
b41f7df0 EI	431
6231868b	432	uint32_t helper_evaluate_flags_move_4(uint32_t ccs, uint32_t res)
b41f7df0	433	{
b41f7df0 EI	434	uint32_t flags = 0;
b41f7df0 EI	435
b41f7df0 EI	436	if ((int32_t)res < 0)
	437	flags \|= N_FLAG;
	438	else if (res == 0L)
	439	flags \|= Z_FLAG;
	440
6231868b	441	return evaluate_flags_writeback(flags, ccs);
b41f7df0	442	}
6231868b	443	uint32_t helper_evaluate_flags_move_2(uint32_t ccs, uint32_t res)
b41f7df0	444	{
b41f7df0	445	uint32_t flags = 0;
b41f7df0 EI	446
	447	if ((int16_t)res < 0L)
	448	flags \|= N_FLAG;
	449	else if (res == 0)
	450	flags \|= Z_FLAG;
	451
6231868b	452	return evaluate_flags_writeback(flags, ccs);
b41f7df0 EI	453	}
	454
	455	/* TODO: This is expensive. We could split things up and only evaluate part of
	456	CCR on a need to know basis. For now, we simply re-evaluate everything. */
6231868b	457	void helper_evaluate_flags(void)
b41f7df0	458	{
6231868b	459	uint32_t src, dst, res;
b41f7df0 EI	460	uint32_t flags = 0;
	461
	462	src = env->cc_src;
	463	dst = env->cc_dest;
	464	res = env->cc_result;
	465
30abcfc7 EI	466	if (env->cc_op == CC_OP_SUB \|\| env->cc_op == CC_OP_CMP)
30abcfc7 EI	467	src = ~src;
b41f7df0 EI	468
	469	/* Now, evaluate the flags. This stuff is based on
	470	Per Zander's CRISv10 simulator. */
	471	switch (env->cc_size)
	472	{
	473	case 1:
	474	if ((res & 0x80L) != 0L)
	475	{
	476	flags \|= N_FLAG;
	477	if (((src & 0x80L) == 0L)
	478	&& ((dst & 0x80L) == 0L))
	479	{
	480	flags \|= V_FLAG;
	481	}
	482	else if (((src & 0x80L) != 0L)
	483	&& ((dst & 0x80L) != 0L))
	484	{
	485	flags \|= C_FLAG;
	486	}
	487	}
	488	else
	489	{
	490	if ((res & 0xFFL) == 0L)
	491	{
	492	flags \|= Z_FLAG;
	493	}
	494	if (((src & 0x80L) != 0L)
	495	&& ((dst & 0x80L) != 0L))
	496	{
	497	flags \|= V_FLAG;
	498	}
	499	if ((dst & 0x80L) != 0L
	500	\|\| (src & 0x80L) != 0L)
	501	{
	502	flags \|= C_FLAG;
	503	}
	504	}
	505	break;
	506	case 2:
	507	if ((res & 0x8000L) != 0L)
	508	{
	509	flags \|= N_FLAG;
	510	if (((src & 0x8000L) == 0L)
	511	&& ((dst & 0x8000L) == 0L))
	512	{
	513	flags \|= V_FLAG;
	514	}
	515	else if (((src & 0x8000L) != 0L)
	516	&& ((dst & 0x8000L) != 0L))
	517	{
	518	flags \|= C_FLAG;
	519	}
	520	}
	521	else
	522	{
	523	if ((res & 0xFFFFL) == 0L)
	524	{
	525	flags \|= Z_FLAG;
	526	}
	527	if (((src & 0x8000L) != 0L)
	528	&& ((dst & 0x8000L) != 0L))
	529	{
	530	flags \|= V_FLAG;
	531	}
532	if ((dst & 0x8000L) != 0L
533	\|\| (src & 0x8000L) != 0L)
534	{
535	flags \|= C_FLAG;
536	}
537	}
538	break;
539	case 4:
540	if ((res & 0x80000000L) != 0L)
541	{
542	flags \|= N_FLAG;
543	if (((src & 0x80000000L) == 0L)
544	&& ((dst & 0x80000000L) == 0L))
545	{
546	flags \|= V_FLAG;
547	}
548	else if (((src & 0x80000000L) != 0L) &&
549	((dst & 0x80000000L) != 0L))
550	{
551	flags \|= C_FLAG;
552	}
553	}
554	else
555	{
556	if (res == 0L)
557	flags \|= Z_FLAG;
558	if (((src & 0x80000000L) != 0L)
559	&& ((dst & 0x80000000L) != 0L))
560	flags \|= V_FLAG;
561	if ((dst & 0x80000000L) != 0L
562	\|\| (src & 0x80000000L) != 0L)
563	flags \|= C_FLAG;
564	}
565	break;
566	default:
567	break;
568	}
569
6231868b	570	if (env->cc_op == CC_OP_SUB \|\| env->cc_op == CC_OP_CMP)
b41f7df0	571	flags ^= C_FLAG;
6231868b EI	572
6231868b EI	573	env->pregs[PR_CCS] = evaluate_flags_writeback(flags, env->pregs[PR_CCS]);
b41f7df0	574	}
30abcfc7 EI	575
	576	void helper_top_evaluate_flags(void)
	577	{
	578	switch (env->cc_op)
	579	{
	580	case CC_OP_MCP:
6231868b EI	581	env->pregs[PR_CCS] = helper_evaluate_flags_mcp(
	582	env->pregs[PR_CCS], env->cc_src,
	583	env->cc_dest, env->cc_result);
30abcfc7 EI	584	break;
30abcfc7 EI	585	case CC_OP_MULS:
6231868b EI	586	env->pregs[PR_CCS] = helper_evaluate_flags_muls(
	587	env->pregs[PR_CCS], env->cc_result,
	588	env->pregs[PR_MOF]);
30abcfc7 EI	589	break;
30abcfc7 EI	590	case CC_OP_MULU:
6231868b EI	591	env->pregs[PR_CCS] = helper_evaluate_flags_mulu(
	592	env->pregs[PR_CCS], env->cc_result,
	593	env->pregs[PR_MOF]);
30abcfc7 EI	594	break;
	595	case CC_OP_MOVE:
	596	case CC_OP_AND:
	597	case CC_OP_OR:
	598	case CC_OP_XOR:
	599	case CC_OP_ASR:
	600	case CC_OP_LSR:
	601	case CC_OP_LSL:
6231868b EI	602	switch (env->cc_size)
	603	{
	604	case 4:
	605	env->pregs[PR_CCS] =
	606	helper_evaluate_flags_move_4(
	607	env->pregs[PR_CCS],
	608	env->cc_result);
	609	break;
	610	case 2:
	611	env->pregs[PR_CCS] =
	612	helper_evaluate_flags_move_2(
	613	env->pregs[PR_CCS],
	614	env->cc_result);
	615	break;
	616	default:
	617	helper_evaluate_flags();
	618	break;
	619	}
	620	break;
30abcfc7 EI	621	case CC_OP_FLAGS:
	622	/* live. */
	623	break;
a8cf66bb EI	624	case CC_OP_SUB:
	625	case CC_OP_CMP:
	626	if (env->cc_size == 4)
6231868b EI	627	env->pregs[PR_CCS] =
	628	helper_evaluate_flags_sub_4(
	629	env->pregs[PR_CCS],
	630	env->cc_src, env->cc_dest,
	631	env->cc_result);
a8cf66bb EI	632	else
	633	helper_evaluate_flags();
	634	break;
30abcfc7 EI	635	default:
	636	{
	637	switch (env->cc_size)
	638	{
6231868b EI	639	case 4:
	640	env->pregs[PR_CCS] =
	641	helper_evaluate_flags_alu_4(
	642	env->pregs[PR_CCS],
	643	env->cc_src, env->cc_dest,
	644	env->cc_result);
	645	break;
	646	default:
	647	helper_evaluate_flags();
	648	break;
30abcfc7 EI	649	}
	650	}
	651	break;
	652	}
	653	}